Now the last part left is to add minisign signature verification to the add system image script. For now, we should keep the old GPG verification code just in case someone wants to downgrade, or if we have to re-introduce GPG signatures for whatever reason.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Sep 3 2021
Sep 3 2021
dmbaturin changed Is it a breaking change? from none to compatible on T723: Add support for first boot or installation time saved config modification.
dmbaturin set Is it a breaking change? to none on T723: Add support for first boot or installation time saved config modification.
dmbaturin changed Is it a breaking change? from none to compatible on T697: Clean up and sanitize package dependencies.
dmbaturin changed Is it a breaking change? from none to compatible on T696: Rewrite conntrack sync to XML.
dmbaturin set Issue type to bug on T695: Address-group commits with duplicate, but fails when adding rule later..
dmbaturin changed Is it a breaking change? from none to compatible on T690: Allow OpenVPN servers to push routes with custom metric values.
dmbaturin changed Is it a breaking change? from none to compatible on T685: Python environment lacks definition of vyos_libexec_dir when calling os.system().
dmbaturin changed Is it a breaking change? from none to compatible on T688: Move component versions used for config migration purposes into vyos-1x.
dmbaturin changed Issue type from unspecified to feature-removal on T679: SNMPv3 TSM is no longer supported by net-snmp.
dmbaturin renamed T679: SNMPv3 TSM is no longer supported by net-snmp from SNMPv3 tsm Warning: Unknown token: localCert to SNMPv3 TSM is no longer supported by net-snmp.
dmbaturin set Issue type to improvement on T661: Show a warning if the router is going to reboot soon (due to "commit-confirm" command).
dmbaturin set Issue type to internal on T651: Split CI'ed, VyOS-specific packages and other packages into separate repos.
dmbaturin set Issue type to internal on T640: Images no longer work when built without "recommended" packages.
dmbaturin removed a project from T627: IPSec configuration directive deletion fails, causes bad IPSec state on reboot. : VyOS 1.3 Equuleus.
dmbaturin renamed T625: Lack of IKEv1 lifetime negotiation from IKEv1 lifetime negotiation in VyOS 1.2.0 to Lack of IKEv1 lifetime negotiation.
dmbaturin changed Is it a breaking change? from none to compatible on T577: Unconfigured Ethernet interface discovery partial failure on boot.
dmbaturin changed Is it a breaking change? from none to compatible on T563: webproxy: migrate 'service webproxy' to get_config_dict().
dmbaturin renamed T533: Support for PPPoE MTU greater than 1492 from PPPoE MTU graeter than 1492 to Support for PPPoE MTU greater than 1492.
dmbaturin set Issue type to bug on T521: Network services may fail if vyatta-router.service startup takes longer than a few seconds.
dmbaturin set Is it a breaking change? to none on T517: Rewrite the wireless interface configuration in the new style (python + XML).
dmbaturin set Is it a breaking change? to none on T515: Complete the documentation on the suggested Python / XML config framework.
dmbaturin set Is it a breaking change? to none on T514: Concentration and streamlining of Python / XML config framework documentation.
dmbaturin set Is it a breaking change? to none on T513: Docs for devs: How to use Python, XML et al instead of Bash and Perl for VyOS configuration.
dmbaturin set Issue type to bug on T486: Static IPv6 default route via OSPFv3-learned loopback is not activated.
dmbaturin set Is it a breaking change? to none on T484: Rules can't be deleted from firewall rule sets used in zone policies.
dmbaturin set Issue type to bug on T480: Error if no serial interface is present (/dev/ttyS0: not a tty).
dmbaturin removed a project from T477: Strongswan issue #1220 (packet loss on AWS): VyOS 1.3 Equuleus.
dmbaturin renamed T476: Update the base system to Debian 10 (Buster) from Start builds for Debian 10 (Buster) to Update the base system to Debian 10 (Buster).
dmbaturin removed a project from T473: missing source packages, git submodule init: VyOS 1.3 Equuleus.
dmbaturin renamed T421: Add Pv6 prefix delegation support from VyOS lacks DHCPv6-PD (Prefix delegation) length / IA_PD support to Add Pv6 prefix delegation support.
dmbaturin set Is it a breaking change? to compatible on T406: VPN configuration error: IPv6 over IPv4 IPsec is not supported when using IPv6 ONLY tunnel..
dmbaturin changed Is it a breaking change? from none to compatible on T362: Proper target dependencies and error checking in the vyos-build makefile.
dmbaturin edited projects for T339: Automated testing, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin renamed T320: OSPF does not redistribute connected routes associated with virtual tunnel interfaces from ospf does not redistribute connected routes associated with virtual tunnel interfaces to OSPF does not redistribute connected routes associated with virtual tunnel interfaces.
dmbaturin renamed T320: OSPF does not redistribute connected routes associated with virtual tunnel interfaces from ospf does not redistribute connected routes associated with virtuan tunnel interfaces to ospf does not redistribute connected routes associated with virtual tunnel interfaces.
dmbaturin set Issue type to bug on T320: OSPF does not redistribute connected routes associated with virtual tunnel interfaces.
dmbaturin removed a project from T314: Unable to apply MSS Clamp with VyOS configuration: VyOS 1.3 Equuleus.
Sep 2 2021
Sep 2 2021
Aug 30 2021
Aug 30 2021
Aug 26 2021
Aug 26 2021
dmbaturin renamed T3781: Revert the NAT implementation in 1.3 back to iptables from Revert the NAT implementation in 1.3 back iptables-based to Revert the NAT implementation in 1.3 back to iptables.
Aug 25 2021
Aug 25 2021
Aug 24 2021
Aug 24 2021
Aug 13 2021
Aug 13 2021
Aug 12 2021
Aug 12 2021
dmbaturin committed rVYOSONEXe4e3840ad5ed: nat: T1083: fix Jinja2 templating error (authored by c-po).
Aug 10 2021
Aug 10 2021
Aug 9 2021
Aug 9 2021
dmbaturin renamed T3729: Split the image build and config load smoke test into separate jobs from Separate the image build and config load smoke test into separate jobs to Split the image build and config load smoke test into separate jobs.
dmbaturin committed rVYOSONEXe737bac9fc8c: dhcp-server: T2432: Run dhcpd in group vyattacfg to allow recreate lease files (authored by Unknown Object (User)).
Aug 8 2021
Aug 8 2021
dmbaturin changed the status of T169: Image install should put correct serial console device in created GRUB menu entry, a subtask of T2452: Serial console related issues, from Open to Needs testing.
dmbaturin changed the status of T169: Image install should put correct serial console device in created GRUB menu entry from Open to Needs testing.
Aug 7 2021
Aug 7 2021
dmbaturin closed T66: IPSec v6 over v6 support, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
It was enabled by commit https://github.com/vyos/vyatta-cfg-vpn/commit/993f5bf9f54bcb7af20d44e7618586b55064a372 quite a while ago and no one complains, so I assume it's not an issue anymore.
Aug 7 2021, 7:52 AM · Restricted Project
dmbaturin edited projects for T66: IPSec v6 over v6 support, added: Restricted Project; removed VyOS 1.2 Crux (VyOS 1.2.9), test, VyOS 1.3 Equuleus.
Aug 7 2021, 7:52 AM · Restricted Project
dmbaturin removed projects from T3712: route-map comm-list can't be used without option delete: VyOS 1.2 Crux (VyOS 1.2.9), VyOS 1.3 Equuleus, test.
It's not a bug, it's simply a weird syntax. That command could never be used without the delete option, so your config example wouldn't work in 1.2 or 1.1.8 either.
Aug 6 2021
Aug 6 2021
Thanks! This is definitely a non-issue then, closing.
Since we cannot update the kernel in 1.3 due to the QAT issues, we likely need to backport netmap support. It seems to have been introduced by this commit: https://github.com/torvalds/linux/commit/3ff7ddb1353da
dmbaturin changed the status of T1083: Implement persistent/random address and port mapping options for NAT rules, a subtask of T2198: Rewrite NAT in new XML/Python style, from Open to Needs testing.
dmbaturin changed the status of T1083: Implement persistent/random address and port mapping options for NAT rules, a subtask of T3710: Upgrade the kernel in 1.3 to 5.10, from Open to Needs testing.
dmbaturin changed the status of T1083: Implement persistent/random address and port mapping options for NAT rules from Open to Needs testing.
I've tested it on 1.3 with kernel 5.4.138, and for me the persistent option works as expected. I think it's a non-issue for equuleus already and the task can be closed, though I'd like other people to test that first.
Aug 2 2021
Aug 2 2021
Jul 30 2021
Jul 30 2021
Jul 29 2021
Jul 29 2021
dmbaturin assigned T2776: QAT acceleration not working for IPSec AES-128 (CBC) / SHA256 tunnel to Unknown Object (User).