vyos-build: https://github.com/vyos/vyos-build/pull/1222
vyos-1x: https://github.com/vyos/vyos-1x/pull/5267
Feed All Stories
Jun 11 2026
Jun 11 2026
Viacheslav added a parent task for T8979: VPP: Defunct interface contains IP addresses after crash: T7070: VPP related bugs the root task.
Viacheslav renamed T8979: VPP: Defunct interface contains IP addresses after crash from Defunct interface contains IP addresses after crash to VPP: Defunct interface contains IP addresses after crash.
Jun 10 2026
Jun 10 2026
hedrok added a comment to T8099: Upgrade strongSwan to 6.0.
a.apostoliuk triaged T8979: VPP: Defunct interface contains IP addresses after crash as High priority.
Viacheslav changed the status of T8977: Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected) from Open to In progress.
MPStudyly added a comment to T8977: Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected).
Created an initial pull request at https://github.com/vyos/vyos-1x/pull/5266
Viacheslav changed the status of T8968: bash: fix unbounded brace expansion DoS (V-004) from Open to In progress.
MPStudyly added a comment to T8977: Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected).
If somebody could explain to me what value addr (at https://github.com/vyos/vyos-1x/blob/a6ad73d72ba8d5256ff77978e63c07143787eb44/python/vyos/utils/network.py#L400) is set to when the current listen address is *, I might be able to come up with a PR to fix this.
MPStudyly added a comment to T8977: Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected).
I tried to work around the issue by leveraging VRRP transition scripts, when I’ve noticed haproxy by default listens to every interface (i.e. binds to *) when no explicit listen-address is set. However due to this behavior it is no longer possible to add a listen-address when haproxy is already running, as the on-commit check refuses to apply due to the port being occupied. For obvious reasons it should ignore the port being in use in such cases. The only solution for now is completely removing all haproxy config before reapplying all of it, which is very much suboptimal.
Viacheslav closed T8973: Remove salt from rolling release, a subtask of T8056: Mark Salt minion deprecated, as Resolved.
Viacheslav closed T8930: vpp: unhandled exception enabling vpp on XCP-NG, a subtask of T7070: VPP related bugs the root task, as Resolved.
Viacheslav changed the status of T8975: ipsec: concurrent vti-up-down hook invocations lost-update /tmp/ipsec_vti_interfaces, stranding VTI interfaces admin-down from Open to In progress.
WanWizard added a comment to T8977: Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected).
I think it should check the state of net.ipv4.ip_nonlocal_bind / net.ipv6.ip_nonlocal_bind, and if set to 1, skip the check.
Viacheslav changed the status of T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces., a subtask of T7221: VPP related features the root task, from Open to In progress.
Viacheslav changed the status of T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces. from Open to In progress.
MPStudyly added a comment to T8977: Regression in network.py is_addr_assigned, function rejects floating addresses (HAProxy and maybe other affected).
I found the culprit: https://github.com/vyos/vyos-1x/pull/5186 introduced a check if the address is assigned. I think this should be changed to check for an address, that is generally available (via config), not minding if it is actually configured. Open for suggestions to send in a PR.
c-po moved T8971: Add bgpq4 (maybe replace bgpq3 from Need Triage to Backlog - Feature Requests on the VyOS Rolling board.
cr0ntab added a comment to T8975: ipsec: concurrent vti-up-down hook invocations lost-update /tmp/ipsec_vti_interfaces, stranding VTI interfaces admin-down.
This is the reproduce.py I used to validate on a fresh instance.
Jun 9 2026
Jun 9 2026
c-po added a comment to T8973: Remove salt from rolling release.
c-po renamed T8974: serial: invalid check during migration system 31 -> 32 from serial: invalid check during migration 31 -> to serial: invalid check during migration system 31 -> 32.
c-po changed the status of T8974: serial: invalid check during migration system 31 -> 32 from Open to In progress.
Russ28 added a comment to T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces..
yes, PR is here: https://github.com/vyos/vyos-1x/pull/5261
Viacheslav added a comment to T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces..
Viacheslav added a comment to T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces..
Russ28 added a comment to T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces..
I also noticed another issue with vpploX interfaces: currently, they cannot be assigned to any VRF.
c-po updated the task description for T8973: Remove salt from rolling release.
c-po added a subtask for T8056: Mark Salt minion deprecated: T8973: Remove salt from rolling release.
c-po added a parent task for T8973: Remove salt from rolling release: T8056: Mark Salt minion deprecated.
Russ28 added a comment to T8972: Add support for propagating VyOS interface VRF assignment to VPP dataplane FIB tables for LCP-managed interfaces..
- VPP/LCP VRF Table Synchronization Manual Test
natali-rs1985 added a comment to T8964: ethtool: crash configuring ring-buffer on NICs without ring-buffer support (XCP-ng vif).
fix for rolling: https://github.com/vyos/vyos-1x/pull/5260
natali-rs1985 added a comment to T8964: ethtool: crash configuring ring-buffer on NICs without ring-buffer support (XCP-ng vif).
Additional crash found in rolling (XCP-ng vif)
Jun 8 2026
Jun 8 2026
MPStudyly added a comment to T8969: vyos-build failing to build, missing dependencies.
Thank you for tackling this so fast!
asklymenko added a comment to T8969: vyos-build failing to build, missing dependencies.
Thank you for reporting.
PR: https://github.com/vyos/vyos-build/pull/1220
natali-rs1985 changed the status of T8964: ethtool: crash configuring ring-buffer on NICs without ring-buffer support (XCP-ng vif) from Open to In progress.
syncer changed Forum thread from https://forum.vyos.io/t/vyos-build-failing-to-build-image-missing-dependencies/17497?_gl=1*juqit4*_gcl_au*OTgxMTI0OTguMTc3NzExNjE4NS4xMDA4Nzc2NzY1LjE3Nzc0Njk1MjkuMTc3NzQ2OTUyOA.. to https://forum.vyos.io/t/vyos-build-failing-to-build-image-missing-dependencies/17497 on T8969: vyos-build failing to build, missing dependencies.
syncer lowered the priority of T8969: vyos-build failing to build, missing dependencies from High to Normal.
MPStudyly added a comment to T8969: vyos-build failing to build, missing dependencies.
Due to being unable to edit the OP (complains about policy changes I'm not actively performing), here is the link to the related forum thread: https://forum.vyos.io/t/vyos-build-failing-to-build-image-missing-dependencies/17497
Jun 7 2026
Jun 7 2026
woodsb02 added a comment to T8967: [DOCS] Fix update-check URL for rolling.
I have created the below pull request to fix this issue:
https://github.com/vyos/vyos-documentation/pull/2086
Jun 6 2026
Jun 6 2026
WanWizard added a comment to T4992: Incorrect check is_local_address for bgp neighbor with option ip_nonlocal_bind set.
load-balancing haproxy has exactly the same problem, see https://forum.vyos.io/t/haproxy-load-balancing-vip-address/17495
Jun 5 2026
Jun 5 2026
c-po renamed T8165: Add ability to show certificate full chain in pem format from Add operational commands to display PKI private keys and certificate bundles in PEM format to Add ability to show certificate full chain in pem format.
Viacheslav changed the status of T8346: password recovery doesn't work if user plaintext-password set via cloud-init from In progress to Needs testing.
Jun 4 2026
Jun 4 2026
o.kuchmystyi added a comment to T8961: Smoketest fails due to missing kernel modules.
The latest rolling build works and it passes test: https://github.com/vyos/vyos-1x/actions/runs/26947164125
Viacheslav changed the status of T8963: Fix policy route domain-group handling so vyos-domain-resolver is triggered after PBR nftables sets are recreated. from Open to In progress.
o.kuchmystyi changed the status of T8961: Smoketest fails due to missing kernel modules from Open to In progress.
natali-rs1985 changed the status of T8524: insufficient validation for dhcp-server dynamic-dns-update key-name from Open to In progress.
a.kudientsov updated the task description for T8461: kea: DHCPv4 ip allocation issue on vlan interfaces.
a.kudientsov updated the task description for T8461: kea: DHCPv4 ip allocation issue on vlan interfaces.
Jun 3 2026
Jun 3 2026
Viacheslav triaged T8952: ipsec: expose per-peer unique setting for site-to-site connections as Normal priority.
Viacheslav triaged T8953: dhcpv6 multiple addresses and prefixes for reservations config validation as Normal priority.
natali-rs1985 changed the status of T7931: FRR restarted on any configuration change when there is static route in VRF from Open to In progress.