vyos-configd should return the response R_ERROR_COMMIT on an error in any call to config dependency. However, to allow other dependencies to proceed, dependent script errors should be collected and returned after all calls are complete; cascading errors will be corrected on correcting the original config error once it is successfully reported.
Without a response to the originating config session, the commit lock can remain on error.
This was noticed with a default config containing the lines below; unpleasantly, this is triggered in this case by (T3275) operating on the added config stanza. Nonetheless, it reveals a needed case for managing config dependency failures.
service {
...
conntrack-sync {
accept-protocol "tcp"
failover-mechanism {
vrrp {
sync-group "SGR"
}
}
interface eth0 {
peer "192.0.2.1"
}
}
...
}