https://docs.travis-ci.com/user/sonarcloud/

Thanks!

done

@syncer Can you add me to vyos org on sonarcloud? I'd like to setup unit tests and coverage integration.

https://docs.sonarqube.org/display/PLUG/Python+Unit+Tests+Execution+Reports+Import
https://docs.sonarqube.org/display/PLUG/Python+Coverage+Results+Import

@higebu i mean we have that one, not as replacement
but also

@syncer Yes, but we have no test code.

We have this one
https://sonarcloud.io/dashboard?id=vyos%3Avyos-1x

hmmm ... it should but I'll have a look. Pussibly I missinterpreted the defaults.

@c-po this one easy

Which release will include this fix. We are running into the same issue on release 1.1.8.

I've added the Mellanox OFED drivers to the image. Need to check the userspace packages.

Regarding Intel, AWS recommends running > 2.16.4 of the ixgbevf driver, and currently 1.1.8 has 2.11.3

I have created a new pull request in order to solve an issue I noticed during tests for IPv6 firewall groups.
How to replicate the issue:

• configure an address-group/network group for ipv6
• configure an address-group/network group for ipv4
• configure an ipv4 firewall rule
• commit and save the cofig
• reload the vyos

After reload the IPv6 address-groups/network-groups are deleted.

Latest build support 4 and 6 port version

I discovered an issue with port-group that have root cause the change implemented for ipv6 address and network groups.

I've changed the code in order to have IPv6 address and network groups under global group configuration tree
Please take a look on the pull request I've created https://github.com/vyos/vyatta-cfg-firewall/pull/8 and please merge it to the current branch

@syncer please close and reopen if req.

In T316#10742, @c-po wrote:

@syncer I'm doing almost daily installs for testing in an ESXi environment. No problems. I think this one can be closed ..

In T35#12629, @rps wrote:

Thank you very very much. I will pull down the next nightly and test.

Thank you very very much. I will pull down the next nightly and test.

I've created a change that add support for ipv6 address and network groups to vyos. Please review it https://github.com/vyos/vyatta-cfg-firewall/pull/7 an provide your feedback.
@dmbaturin merged this to current branch 1.2.0-rc1

Just a quick bump as I'm reviewing 1.2 nightly builds for IPv6 support.

@syncer I'm doing almost daily installs for testing in an ESXi environment. No problems. I think this one can be closed ..

Thanks!
Marking this as solved

Marking this obsolate

Just сheсked with @dmbaturin and it seems ipset loads v6 just fine.
So we will be implementing that soon

IPv6 firewall works fine on VyOS 1.1.X and 1.2.X, it is just that you can't use the GROUPS on IPv6 like you can on IPv4.

I'd like to get some clarity on this, if possible. Will VyOS's firewall features just not work at all with IPv6? Or will it work, but you have to use something other than groups? Importantly: Is it still possible for me to secure my network if I enable IPv6?

On further investigation, it seems I can add firewall rules to wwan0 or place wwan0 into a zone-policy. If this is the case, then I may have accomplished what I wanted especially the latter and no bridging required.

Awesome!

Fine!

Fix for 1.1.8: https://github.com/vyos/vyos-kernel/commit/3326adbda316de01bb4b620124e434183bb2d564

Sorry. It's wrong. Linux kernel through 4.9.11 is affected. So 1.1.x is affected.

VyOS 1.1.x is not affected. See http://www.cvedetails.com/cve/CVE-2017-6074/

That was solved by @UnicronNL
marking as solved

@mickvav can you assign it to me please

https://secure.phabricator.com/conduit/method/paste.edit/
title
language
text
projects.add
subscribers.add

Currently,
you need to add yourself to the subscribers, rest will be added by default policy
i think we can do that via conduit api
https://secure.phabricator.com/book/phabricator/article/conduit_edit/

could you create a phabricator test paste with the correct permission settings as example. Next step is to programmaticly create the same and then integrate w/ vyos.

default policy for paste which limits visibility of paste to author and maintainers(+ support team)

basic idea is to give user enter their credentials on the fly rather than store them in the config

This requires that VyOS has either some kind of token that allows him to post-as user or the user credentials for pastebin. PHabricator Bots could be perhaps leveraged.

Thanks for the info. I'll try the 06/25 build or newer. I haven't had time to troubleshoot this issue properly since I made the ticket. I also have a suspicion that there might be a driver issue where the NIC is not being supported but I haven't had a chance to test. I'll try the latest build and go from there.

Can't reproduce this on (at least) 999.201706262137, at least on my local network getting DHCP for eth0.

I see there is a duplicate task for this here - https://phabricator.vyos.net/T279

For users not added manually (e.g. via Radius or later TACACS+)
wee need to create home directories on the fly

Can You please elaborate on this, or create an example?

I have managed to make some headway on this.

It's currently in BIOS boot mode.

Do you have BIOS or UEFI boot mode in your motherboard setup selected?
To all - there was some reason why I've included grub-pc in my image, but I'not sure that it will help in this case.

Do previously nightly images work?
is the boot order correct? (probably is)

I have had no luck with my testing and it seems that grub just can't seem to find the image to load.
I have tried different bios configurations, different hard drives, tried specifying "root=" in grub (was doubtful of this).
Nothing I have tried has managed to get it to boot.