Hi
In /var/log/messages I see this messages (succes and faile login)

logins or failed logins are already logged in it's default configuration.

Fix will be available in tomorrows rolling release.

bug verified.

@dmbaturin after some thinking about this problem I think that doing sg for all script is not a very good idea. There can be a situations, when we wan't to run it from other groups.
By now, I see two ways:

• add additional parameter to executable option, that will define using script vbash with template or not;
• move setting up right group to /opt/vyatta/etc/functions/script-template.

Second way seems more practical and easy for configuration migrations.

@zsdc Yes, that's the idea. We even have a task about it: T462

@syncer, thanks for hint. Works with:

[edit]
vyos@vyos# show system task-scheduler 
 task testtask01 {
     crontab-spec @reboot
     executable {
         arguments "vyattacfg /config/scripts/testscript01.script"
         path /usr/bin/sg
     }
 }
[edit]
vyos@vyos#

But this workaround is ugly a little bit (if we want to use arguments for example).
Maybe, better will be if VyOS will do this under the hood, without end-user engagement?

@zsdc Ah, sorry, rolling-1028. I'll take a look.

@zsdc Which version are you using? It should be fixed in rc1 already. If you are using rc1 or newer, that means the fix is incomplete.

@dmbaturin should we run all our scripts with such wrapper? (e.g. add it to all places where scripts can be used)

the script must be run from vyatta group
sg vyattacfg /path/to/script

just retested with VyOS1.2.0-rc4, same drops.

VyoS:
t2.nano (only little network traffic in this VPC and no such problems with 4.18 kernel versions)

Instance size?

I also made 2 tcpdumps, one on eth0 (pulic interface) and on on eth1 (private interface) with VyOS 1.2.0-rc3 (kernel 4.14.65).

After a reboot now the config misses the BGP config. Loading it and trying commit shows the following:
Warning: connecting to bgpd...failed!
bgpd is not running

Not at this time.

@c-po i saved the working complete config to a file, and when loading this after reboot with a lot missing, not a single error message is shown besides: boot-config-loader: Commit failed at boot

At that location only a couple of pre-migration configs exist. In archive subfolder also only old files exist.
But i loaded the latest pre-migration script, this causes all BGP configuration to be removed by the commit.
The error message is:
% Specify remote-as or peer-group commands first

@Merijn this look slike a problem with a validation script in VyOS - sorry.

Trying to reproduce it by doing a reboot with a working BGP config i now have lost during the reboot all interface and firewall configuration.
But the BGP config is now present and loaded.
:-(

Changed description, as this is also present in RC2.

In T901#21575, @EwaldvanGeffen wrote:

Do you experience this now? How many rules / what hardware may I ask?

Do you experience this now? How many rules / what hardware may I ask?
edit: Not trying to undermine your request for this change, just to get an idea at which point it becomes a problem with the current setting to estimate whether we need to address the root-cause urgently.