Page MenuHomeVyOS Platform

frrender: commit executes even if previous script fails in verify()
Closed, ResolvedPublicBUG

Description

set policy prefix-list foo rule 10 le '26'
set policy prefix-list foo rule 10 prefix '10.0.0.0/24'
set protocols bgp neighbor 1.1.1.1 peer-group 'foo'
set protocols bgp peer-group foo address-family ipv4-unicast prefix-list export 'foo'
set protocols bgp peer-group foo remote-as '200'
set protocols bgp system-as '100'

Results in the following FRR error:

2026-04-10 21:52:46,063   ERROR: vtysh failed to process new configuration: vtysh (mark file) exited with status 2:
b'line 64: % Unknown command: ip prefix-list foo seq 10  10.0.0.0/24  le 26\n\n'
2026-04-10 21:52:46,063  INFO: Loading Config object from vtysh show running
cpo@LR1.wue3# commit
[ policy ]
Action must be specified for "prefix-list foo rule 10"!
[[policy]] failed
[ protocols bgp ]
The system encountered an error while rendering the new routing daemon
configuration. To ensure network stability and avoid potential
connectivity disruptions, the configuration was not applied!
[[protocols bgp]] failed
Commit failed
[edit]

I think it is a bug arround here https://github.com/vyos/vyos-1x/blob/current/src/services/vyos-configd#L387-L390 , as it should not preceed as verify() for the prefix-list failed.

The commit should be aborted as already the policy fails:

[ policy ]
Action must be specified for "prefix-list foo rule 10"!
[[policy]] failed

Details

Version
1.5.0
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Revisions and Commits

Event Timeline

c-po updated the task description. (Show Details)
c-po updated the task description. (Show Details)
c-po renamed this task from frrender: commit executed even if previous script fails to frrender: commit executes even if previous script fails in verify().Apr 10 2026, 7:59 PM
c-po updated the task description. (Show Details)
c-po changed the task status from Open to In progress.Apr 12 2026, 7:10 AM
c-po claimed this task.
c-po triaged this task as Normal priority.
c-po raised the priority of this task from Normal to High.
c-po moved this task from Need Triage to Backlog - Bug on the VyOS Rolling board.
Restricted Repository Identity closed this task as Resolved by committing Restricted Diffusion Commit.Aug 18 2026, 7:19 PM
Restricted Repository Identity added a commit: Restricted Diffusion Commit.