sorry, With VPP sFlow enabled but without set system sflow enable-egress, the generated hsflowd config will not contain psample { group=1 }. I cannot edit this task. I think I choose the wrong form type (I should create bug report, not task)
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jul 7 2026
Jul 7 2026
danielcshn added a comment to T9017: VyOS 2026.03 (Stream) unable to initiate DHCP discover when connected to an ethernet switch in GNS3.
For me, VyOS Stream 2026.03 works on EVE-NG. However, it has security vulnerabilities. It's better to use v1.4.4-S1 or v1.5.0-S1.
lujiefsi added a comment to T9061: Multiple VyOS privilege-boundary flaws allow low-privilege users to execute root commands and disclose sensitive configuration.
I uploaded the report archive, but I do not see it attached/available in the submission view. To make sure the materials are accessible, I also placed the
complete report package here:
Jul 6 2026
Jul 6 2026
pautiina added a comment to T7829: VPP - ARP processing fails: No ARP responses sent, leading to incomplete entries and packet loss on external IP and internal IP.
Updated to:
Version: VyOS 2026.06.30-0048-rolling
Release train: rolling
Release flavor: generic
Viacheslav triaged T9056: system syslog file size-limit action uses wrong logrotate config as Normal priority.
natali-rs1985 renamed T9057: VPP: promiscuous mode not disabled when interface member is removed from bond from VPP: promiscuous mode not disabled when interface is removed from bond to VPP: promiscuous mode not disabled when interface member is removed from bond.
Viacheslav changed the status of T9048: smoketest: DHCP client process checks race against daemon startup/shutdown — flaky interface tests in CI from Open to In progress.
Viacheslav triaged T9050: system syslog file: rsyslog config rendered incorrectly as Normal priority.
Viacheslav triaged T9055: system syslog file: archive size passed as kbytes, rsyslog expects bytes as Normal priority.
a.kudientsov changed the status of T8940: Still unable to boot on Hyper-V after T8879 from Open to Needs testing.
That is the test case bug introduced by PR 466
I will create a separate fix to the tests
c-po changed the status of T9054: pppoe: learned default route is deleted when "protocols static" is removed from Open to In progress.
Jul 5 2026
Jul 5 2026
2026-07-05 triage: keeping open, re-scoped. Since this was filed, most per-repo GHA was retired in favor of central Mergify automation (T8937), which shrank the fork-spam surface — but scheduled/cron workflows (e.g. CodeQL callers) still run on forks where jobs lack an owner guard. Remaining work = a fleet sweep adding if: github.repository_owner == 'vyos' (or the schedule-conditional variant) to jobs in scheduled workflows. Small, bounded; will be scheduled as an owner-guard sweep work item.
syncer closed T8218: Fix branch reference issue post pullrequest policy update, a subtask of T6707: Implement a new build and release workflow based on GitHub Actions, as Resolved.
Resolving in the 2026-07-05 stale-High triage (operator-confirmed). Overtaken by the 2026-05-30 default-branch rename (rollout 1c: 93 renames + ruleset-condition PATCHes) and the 2026-06-02 frozen current backport-alias restore (40 repos), which together resolved the fleet's branch-reference debt. No remaining actionable content identified on this task (empty description).
Resolving in the 2026-07-05 stale-High triage (operator-confirmed). Delivered: the Mergify conflict check ships fleet-wide via the central baselines (vyos/mergify + VyOS-Networks/mergify, consumed by extends: on ~105 repos) — Label conflicting pull requests rule + conflicts merge-protection gate (T8615/T8935, shipped 2026-05-28).
Resolving in the 2026-07-05 stale-High triage (operator-confirmed). Delivered by later work: the custom/eps1lon conflict-check GHA was retired under T8937 (retirement closed 2026-06-12); conflict detection now runs via the central Mergify Label conflicting pull requests rule (T8615/T8935) plus the committed-marker script path (T8934). Nothing left to disable.
syncer closed T7848: Disable custom conflict check workflow, a subtask of T6707: Implement a new build and release workflow based on GitHub Actions, as Resolved.
Related: https://vyos.dev/T8940
Why not use already existing prebuild FIPS edition of OpenSSL available in Debian?
According to:
Current kernel config available at:
Just guessing.
I want to have a 2nd opinion on that following this forum post:
Jul 4 2026
Jul 4 2026
Thank you for the clarification.
Jul 3 2026
Jul 3 2026
At least google AI tells me this:
Spent some time trying to chase this down. I managed to set up a VM to build the VyOS image, but I can't figure out how to build the kernel. The docs appear to be outdated?
syncer added a comment to T9048: smoketest: DHCP client process checks race against daemon startup/shutdown — flaky interface tests in CI.
Fix up as draft PR: https://github.com/vyos/vyos-1x/pull/5310
Viacheslav changed the status of T9016: accel-ppp-ng: MS-CHAPv1/v2 auth fails on OpenSSL 3.x for all protocols - legacy provider (MD4/DES) not loaded from Open to Needs testing.
Viacheslav renamed T9040: Build FIPS-provider OpenSSL version from Build FIPS-compliant OpenSSL version to Build FIPS-provider OpenSSL version.
MattK added a comment to T9013: bgp: bmp: Add update-source / source-interface support for BMP targets.
@natali-rs1985 You're right, looks like it's not being included in the package build! I'll investigate further, thanks!
MattK added a comment to T9013: bgp: bmp: Add update-source / source-interface support for BMP targets.
Smoketests are failing:
Jul 2 2026
Jul 2 2026
RC added a comment to T9016: accel-ppp-ng: MS-CHAPv1/v2 auth fails on OpenSSL 3.x for all protocols - legacy provider (MD4/DES) not loaded.
Fix PR: https://github.com/accel-ppp/accel-ppp-ng/pull/31/
(PR #30 was closed)
natali-rs1985 changed the status of T8344: tpm encryption enable breaks cloud-init service from Open to In progress.
Jul 1 2026
Jul 1 2026
c-po closed T9008: Refactor vyos.ifconfig module to use new cmdl() process execution helper as Resolved.
c-po closed T8372: Add an option under "show log" to filter with syslog facility, a subtask of T9009: op-mode: extend "monitor log" with filter level, as Resolved.
if you are asking about VyManager and VyMCP - I don't know them; it looks only two contributors at the moment...
My proposal here is structurally very different from their MCP implementation - I am proposing to add MCP capability into core VyOS, alongside with rest and GraphQL APIs we already have. They are essentially extending VyManager, that runs in 3 containers separate from VyOS
Viacheslav added a parent task for T9040: Build FIPS-provider OpenSSL version: T6720: FIPS140-2/3 Validation.
Viacheslav added a subtask for T6720: FIPS140-2/3 Validation: T9040: Build FIPS-provider OpenSSL version.
Viacheslav changed the status of T9040: Build FIPS-provider OpenSSL version from Open to In progress.
Viacheslav renamed T9040: Build FIPS-provider OpenSSL version from FIPS-compliant OpenSSL version to Build FIPS-compliant OpenSSL version.