T3275 introduced a situation where an undesired default behaviour (all conntrack helper modules being enabled) was kept through the migration for backward compatibility reasons. Since the default configuration is versionless, all migration scripts run on it back-to-back, resulting in the perpetuation of this legacy behaviour. Until we can find a better solution, we should hardcode the latest component versions in the default config files to make sure this won't happen on clean installs.
Description
Description
Details
Details
- Version
- -
- Is it a breaking change?
- Unspecified (possibly destroys the router)
- Issue type
- Bug (incorrect behavior)
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | jestabro | T3275 Disable conntrack helpers by default | |||
Resolved | jestabro | T3821 Add latest versions to default config files | |||
Resolved | FEATURE REQUEST | jestabro | T6006 Configure system-specific capabilities independently of migration scripts | ||
Resolved | ENHANCEMENT | jestabro | T6447 Add module for iterating over modifications to a config file | ||
Resolved | BUG | jestabro | T6716 Offload settings are being automatically updated to reflect kernel settings |
Event Timeline
Comment Actions
Note the version string should be different in 1.3:
// vyos-config-version: "broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:dhcp-relay@2:dhcp-server@5:dhcpv6-server@1:dns-forwarding@3:firewall@5:https@2:interfaces@21:ipoe-server@1:ipsec@5:isis@1:l2tp@3:lldp@1:mdns@1:nat@5:ntp@1:pppoe-server@5:pptp@2:qos@1:quagga@8:rpki@1:salt@1:snmp@2:ssh@2:sstp@3:system@21:vrrp@2:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2:zone-policy@1"
Comment Actions
This will be possible after subtask T6006, for 1.5; backport can be considered at that time, but for now limit tags to Circinus.