The intended upgrade to debian trixie will provide nginx version 1.26.3.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 10 2026
Aug 10 2026
Viacheslav triaged T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result as Normal priority.
Viacheslav changed the status of T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result from Open to In progress.
Viacheslav raised the priority of T7736: Container: virtual-ethernet exception when attempting to modify container network created veth from Normal to High.
jestabro added a comment to T9186: mTLS authentication for the VyOS REST API and nginx 1.22.1 / TLSv1.2 stopper.
Viacheslav triaged T9187: accel-ppp: vlan-mon does not create dynamic VLAN interfaces on rolling as High priority.
Viacheslav raised the priority of T9189: Title: Container commit fails for dual-stack (IPv4+IPv6) network, cascades through test_container.py smoketests from Normal to High.
Changing this counter value from 100 (25seconds) to 200 (50 seconds) works for me:
https://github.com/vyos/vyos-1x/blob/f6a1ff94f02282bd018b9b49ae1a9812619ec7ba/src/conf_mode/interfaces_wwan.py#L143
Made a crack at a PR in my own fork. Not sure If its correct, but happy to get feedback 😀
Plus88 added a comment to T9188: show nat source rules displays protocol/port match criteria that do not exist in the generated nftables ruleset.
Adding the raw command outputs as a comment — the code blocks in the description lost their monospace formatting and I don't have edit rights to fix them inline. All addresses are anonymised (RFC 1918 / RFC 5737 documentation ranges).
a.kudientsov added a comment to T7736: Container: virtual-ethernet exception when attempting to modify container network created veth.
In T7736#274164, @MattK wrote:This change seems to have broken the container smoketests due to a dual-stack issue: https://github.com/vyos/vyos-1x/actions/runs/30939432127/job/92574815074
evgmol updated the task description for T9186: mTLS authentication for the VyOS REST API and nginx 1.22.1 / TLSv1.2 stopper.
MattK added a comment to T7736: Container: virtual-ethernet exception when attempting to modify container network created veth.
This change seems to have broken the container smoketests due to a dual-stack issue: https://github.com/vyos/vyos-1x/actions/runs/30939432127/job/92574815074
Aug 9 2026
Aug 9 2026
rherold added a comment to T9185: config-mgmt commit_confirm child never exits after successful confirm; spins at 100% CPU indefinitely.
hi please try:
sageframe added a comment to T9185: config-mgmt commit_confirm child never exits after successful confirm; spins at 100% CPU indefinitely.
One thing not covered above — this isn't rolling-only. Same box migrated to Stream 2026.03 (circinus), reproduces identically:
rherold added a comment to T9185: config-mgmt commit_confirm child never exits after successful confirm; spins at 100% CPU indefinitely.
Root cause found: ask_yes_no() in python/vyos/utils/io.py:57 catches EOFError from input() but loops right back to the top of while True with no backoff or exit condition:
sageframe added a comment to T9185: config-mgmt commit_confirm child never exits after successful confirm; spins at 100% CPU indefinitely.
Also reproduces on VyOS Stream 2026.03 (circinus), not only rolling.
Are you able to elaborate, @Apachez?
Thanks for the detailed follow-up, this is helpful.
rherold added a comment to T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result.
rherold added a comment to T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result.
@Apachez default powerdns: https://doc.powerdns.com/recursor/security.html it seems it was taken over from the debiab powerdns package.
Would be handy if a config replace would accept both show config and show config commands as inputs.
I think most implementations in VyOS regarding source-interface is referencing physical or logical interfaces and not VRF's even if VRF's is an "interface" in Linux (which can be seen if you do ip a in bash mode).
Apachez added a comment to T9175: PowerDNS periodically queries security-status.secpoll.powerdns.com and discards the result.
Why does it phone home like this?
Ad.1/2 It's there
Aug 8 2026
Aug 8 2026
Hi, thanks for the detailed report.
I have added a Pull Request under https://github.com/vyos/vyos.vyos/pull/494
Closed in https://vyos.dev/T9122
Restricted Repository Identity closed T9107: Fix integration workflow after recent GitHub security updates as Resolved by committing Restricted Diffusion Commit.
I checked the current public vyos-cloud-init branches and the issue still appears to be present: cloudinit/stages.py calls util.del_file(self.paths.instance_link), while util.del_file() uses os.unlink(), so a stale real directory at that path still raises IsADirectoryError.
hybridops added a comment to T8999: openvpn: misleading "no openvpn shared-secrets in PKI" error for a dangling auth-key/crypt-key reference.
I would like to work on this task.
PR submitted and ready for review:
https://github.com/vyos/vyos-cloud-init/pull/116
hybridops added a comment to T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME).
I would like to work on this task.
evgmol renamed T6830: add support for file upload, management and templating from add support for file upload, management and templating to add support for file upload, management and templating.
evgmol closed T8920: map-based connection marking and policy routing to reduce repeated DNAT/PBR rules as Not Applicable.
https://github.com/vyos/vyos.vyos/pull/493 - yet another attempt
Aug 7 2026
Aug 7 2026
L0crian added a comment to T9176: firewall: Implement nftables concatenation support for firewall groups.
Running Commit again after the modem 0 is exist does work.
Viacheslav changed the status of T9172: cloud-init: add regression coverage for vyos_config_commands from Open to In progress.
rherold added a comment to T9160: Config-path-derived group/prefix-list membership (analogous to Junos `apply-path`).
Update: the "Low fit" verdict above for policy as-path-list/community-list/extcommunity-list/large-community-list ("no natural derivation source") needs a caveat.
rherold updated subscribers of T9159: # Feature Request: Expose a client-side source-address option for `service ntp`.
@Viacheslav thx for cleanup the task,. Did you see that I ask for an decision from the team about the implementation?
In T9172#273881, @Viacheslav wrote:@hybridops Would you like to claim this task?
Viacheslav changed the status of T9159: # Feature Request: Expose a client-side source-address option for `service ntp` from Open to In progress.
Viacheslav changed the status of T9160: Config-path-derived group/prefix-list membership (analogous to Junos `apply-path`) from Open to In progress.
Viacheslav changed the status of T8329: Accelerated Networking on Azure is not working Properly on VyOS VM when its deployed with terraform from Open to Needs testing.
Viacheslav changed the status of T9167: dhcp: Kea HA max-response-delay equals heartbeat-delay (disagrees with Kea defaults) from Open to In progress.
Viacheslav triaged T9167: dhcp: Kea HA max-response-delay equals heartbeat-delay (disagrees with Kea defaults) as Normal priority.
Viacheslav added a comment to T9167: dhcp: Kea HA max-response-delay equals heartbeat-delay (disagrees with Kea defaults).
@bradkollmyer Would you like to claim this task?
At first glance all related changes here https://github.com/vyos/vyos-1x/blob/278fba204200f02bb461f786f889b40dc38a26f6/python/vyos/template.py#L907
@hybridops Would you like to claim this task?
Aug 6 2026
Aug 6 2026
File is present int rolling release. Please use any rolling release published AFTER this post.
c-po changed the status of T9170: Kernel: missing firmware files after enabling module compression from Open to In progress.