Page MenuHomeVyOS Platform
Feed All Stories

Apr 18 2020

c-po closed T2314: Cleanup PPPoE server implementation and CLI commands as Resolved.
Apr 18 2020, 1:14 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2224: Update Linux Kernel to v4.19.114 from Unknown Status to Resolved.
Apr 18 2020, 1:14 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po moved T2224: Update Linux Kernel to v4.19.114 from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
Apr 18 2020, 1:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po moved T2286: IPoE server vulnerability from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
Apr 18 2020, 1:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po changed the status of T2286: IPoE server vulnerability from Unknown Status to Resolved.
Apr 18 2020, 1:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po edited projects for T2286: IPoE server vulnerability, added: VyOS 1.2 Crux (VyOS 1.2.6); removed Ready for Crux (1.2.x).
Apr 18 2020, 1:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
primoz created T2321: VRF support for SSH, NTP, SNMP service.
Apr 18 2020, 12:52 PM · VyOS 1.3 Equuleus (1.3.0)
runar added a comment to T2206: Split WireGuard endpoint into proper host and port nodes.

Actually, specifying wireguard peer as a hostname only worked on initial setup. The reason for this is that the hostname is resolved only on initial startup of the wireguard tunnel. On boot the ip stack is not fully operational resulting in wireguard beeing unable to resolve hostnames. (But this avtually could depend of the execution time of the initialization scripts) .. a better alternative to this is to make a initialization script that is delay'd and then resolves the hostname and inserts the correct ip in wireguard when the router is fully booted. This could be created using a custom script called from the post-bootup script or something like that.

Apr 18 2020, 12:48 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated subscribers of T2320: Wireguard creates non-existing interfaces in [op-mode]..
Apr 18 2020, 12:44 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated the task description for T2320: Wireguard creates non-existing interfaces in [op-mode]..
Apr 18 2020, 12:39 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXd76dbb558a4f: pppoe-server: T2314: remove debug code from migration script.
Apr 18 2020, 12:37 PM
c-po committed rVYOSONEX56fb2cf15b76: Merge branch 'pppoe-server-update' of github.com:c-po/vyos-1x into current.
Apr 18 2020, 12:34 PM
c-po committed rVYOSONEX267b3213ef0e: accel-ppp: T2314: use common tempplate for chap-secrets.
Apr 18 2020, 12:34 PM
c-po committed rVYOSONEX901d5e89ec6e: pppoe-server: T2314: migrate IPv6 to common CLI nodes with embeeded validation.
Apr 18 2020, 12:34 PM
c-po committed rVYOSONEX3a81e26a23b5: pppoe-server: T2313: bugfix Floating Point Exception.
Apr 18 2020, 12:34 PM
c-po committed rVYOSONEXcda566dfde94: pppoe-server: T2314: migrate RADIUS configuration to common CLI syntax.
Apr 18 2020, 12:34 PM
c-po committed rVYOSONEXabcd7026efd8: vpn: l2tp: pptp: sstp: rename files to common pattern.
Apr 18 2020, 12:34 PM
c-po committed rVYOSONEXee63d76964e3: pppoe-server: T2314: migrate IPv4/IPv6 name-servers to common node.
Apr 18 2020, 12:34 PM
c-po committed rVYOSONEX5a1a7f42b99e: vpn: l2tp: sstp: ease unlinking of configuration files.
Apr 18 2020, 12:34 PM
c-po committed rVYOSONEXdeed0ceac983: pppoe-server: T2314: remove boilerplate code and adjust.
Apr 18 2020, 12:34 PM
c-po committed rVYOSONEX1795ae2c8aa6: pppoe-server: T2185: migrate from SysVinit to systemd.
Apr 18 2020, 12:34 PM
Viacheslav created T2320: Wireguard creates non-existing interfaces in [op-mode]..
Apr 18 2020, 12:34 PM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2224: Update Linux Kernel to v4.19.114 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Apr 18 2020, 12:20 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po changed the status of T2224: Update Linux Kernel to v4.19.114 from Resolved to Unknown Status.
Apr 18 2020, 12:20 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po closed T2319: Update Linux Kernel to v4.19.116 as Resolved.
Apr 18 2020, 12:19 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2319: Update Linux Kernel to v4.19.116.
Apr 18 2020, 12:16 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2224: Update Linux Kernel to v4.19.114 as Resolved.
Apr 18 2020, 12:16 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
jjakob changed the status of T2316: DHCP-server op-mode errors from Open to Confirmed.
Apr 18 2020, 12:12 PM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEX8d8fea6428cf: Merge pull request #355 from DmitriyEshenko/fix-ipsec-sts-l2tp (authored by c-po).
Apr 18 2020, 11:47 AM
primoz added a comment to T2044: RPKI doesn't boot properly.

I tried this today with 1.3-rolling-202004180117 ...

Apr 18 2020, 11:39 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
GitHub <noreply@github.com> committed rVYOSONEXe2a5057b1358: Merge pull request #354 from DmitriyEshenko/fix-ipsec-sts-l2tp (authored by c-po).
Apr 18 2020, 11:36 AM
jmcg added a comment to T2206: Split WireGuard endpoint into proper host and port nodes.

This change has removed the ability to specify a wireguard endpoint by hostname, rather than IP address. Is there an alternative resolution which maintains this ability?

Apr 18 2020, 11:30 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2318: dns-forwarding migration script breaks with invalid interface name as Resolved.
Apr 18 2020, 11:26 AM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX4830651c2b62: dns-forwarding: T2318: bugfix migration script.
Apr 18 2020, 11:25 AM
Unknown Object (User) added a comment to T2317: l2tp overwriting ipsec config files.

PR for this task https://github.com/vyos/vyos-1x/pull/354

Apr 18 2020, 11:23 AM · VyOS 1.3 Equuleus (1.3.0)
c-po claimed T2318: dns-forwarding migration script breaks with invalid interface name.
Apr 18 2020, 11:18 AM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2318: dns-forwarding migration script breaks with invalid interface name.
Apr 18 2020, 11:18 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) changed the status of T2317: l2tp overwriting ipsec config files from Open to In progress.
Apr 18 2020, 11:18 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) created T2317: l2tp overwriting ipsec config files.
Apr 18 2020, 11:18 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 10:35 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated the task description for T2316: DHCP-server op-mode errors.
Apr 18 2020, 10:26 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 10:21 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2316: DHCP-server op-mode errors.
Apr 18 2020, 10:20 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 9:59 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 9:44 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2315: Ability to have right address-family for BGP peers..
Apr 18 2020, 8:18 AM · VyOS 1.4 Sagitta
maznu added a comment to T2044: RPKI doesn't boot properly.

While testing T1874 the procedure we followed was:

Apr 18 2020, 7:48 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po closed T1874: FRR crashing triggered by RPKI, a subtask of T1998: Update FRR to 7.3, as Resolved.
Apr 18 2020, 7:36 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po closed T1874: FRR crashing triggered by RPKI as Resolved.
Apr 18 2020, 7:36 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po moved T1874: FRR crashing triggered by RPKI from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.5) board.
Apr 18 2020, 7:36 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po moved T1874: FRR crashing triggered by RPKI from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Apr 18 2020, 7:36 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po added a subtask for T1998: Update FRR to 7.3: T1874: FRR crashing triggered by RPKI.
Apr 18 2020, 7:35 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po added a parent task for T1874: FRR crashing triggered by RPKI: T1998: Update FRR to 7.3.
Apr 18 2020, 7:35 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po claimed T1874: FRR crashing triggered by RPKI.
Apr 18 2020, 7:35 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po added a comment to T1874: FRR crashing triggered by RPKI.

From Slack;

Marek Isalski 09:25
If anybody is using 1.2.4 or earlier for BGP, and wants to do RPKI, I can highly recommend updating to 1.2.5 which fixes this nasty segfault in FRR's bgpd: https://phabricator.vyos.net/T1874 (and devs can probably consider closing T1874 now that we know it's fixed in 1.2.5)

Apr 18 2020, 7:35 AM · VyOS 1.2 Crux (VyOS 1.2.5)
maznu added a comment to T1874: FRR crashing triggered by RPKI.

This is looking like it might be fixed in FRR version 7.2.1 onwards:

Apr 18 2020, 7:13 AM · VyOS 1.2 Crux (VyOS 1.2.5)
maznu added a comment to T1874: FRR crashing triggered by RPKI.

We managed to reproduce this on a test instance running VyOS 1.2.4 talking RTRR to Routinator3000 0.6.4:

Apr 18 2020, 7:10 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po changed the status of T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined, a subtask of T2314: Cleanup PPPoE server implementation and CLI commands, from Open to In progress.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined from Open to In progress.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a subtask for T2314: Cleanup PPPoE server implementation and CLI commands: T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a parent task for T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined: T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2314: Cleanup PPPoE server implementation and CLI commands from Open to In progress.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined.
Apr 18 2020, 6:48 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.

@alainlamar any chance to implement the reset button to clear the config?

Apr 18 2020, 6:22 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.

The LED assignment could be handled in a generic startup script where the hardware platforms and LEDs will be assigned

Apr 18 2020, 6:21 AM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEXcf1ad0c6e182: Merge pull request #353 from alainlamar/T2306 (authored by c-po).
Apr 18 2020, 6:16 AM

Apr 17 2020

alainlamar added a comment to T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.

Pull request: https://github.com/vyos/vyos-build-kernel/pull/6

Apr 17 2020, 10:30 PM · VyOS 1.3 Equuleus (1.3.0)
alainlamar claimed T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.
Apr 17 2020, 9:54 PM · VyOS 1.3 Equuleus (1.3.0)
alainlamar created T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.
Apr 17 2020, 9:53 PM · VyOS 1.3 Equuleus (1.3.0)
alainlamar added a comment to T2306: Add new cipher suites to the WiFi configuration.

Pull request: https://github.com/vyos/vyos-1x/pull/353

Apr 17 2020, 8:59 PM · VyOS 1.3 Equuleus (1.3.0)
maznu added a comment to T2044: RPKI doesn't boot properly.

We saw something similar to this, but it seems like FRR eventually connected to RTRR. I think it has a timeout parameter — is that how often (slowly) it tries to re-establish?

Apr 17 2020, 8:20 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
maznu added a comment to T1874: FRR crashing triggered by RPKI.

We had this bug earlier today on 1.2.4.

Apr 17 2020, 8:18 PM · VyOS 1.2 Crux (VyOS 1.2.5)
MapleWang renamed T2311: Statically configured name servers may not take precedence over ones from DHCP from name servers in static configuration can take effect to name servers in static configuration can't take effect.
Apr 17 2020, 5:21 PM · VyOS 1.2 Crux (VyOS 1.2.6)
MapleWang added a comment to T2311: Statically configured name servers may not take precedence over ones from DHCP.

I have made pull request in https://github.com/vyos/vyos-1x/pull/352, please help to review it.

Apr 17 2020, 5:21 PM · VyOS 1.2 Crux (VyOS 1.2.6)
MapleWang created T2311: Statically configured name servers may not take precedence over ones from DHCP.
Apr 17 2020, 5:11 PM · VyOS 1.2 Crux (VyOS 1.2.6)
MapleWang added a comment to T2310: vyos-cloud-init use global config to configure pass and ssh login.

I have made pull request in github, please help to reviw it: https://github.com/vyos/vyos-cloud-init/pull/8

Apr 17 2020, 4:59 PM · VyOS 1.2 Crux (VyOS 1.2.7)
MapleWang created T2310: vyos-cloud-init use global config to configure pass and ssh login.
Apr 17 2020, 4:55 PM · VyOS 1.2 Crux (VyOS 1.2.7)
GitHub <noreply@github.com> committed rVYOSONEX3b3b33e4ffe4: Merge pull request #351 from thomas-mangin/T2226-ifconfig-debug (authored by c-po).
Apr 17 2020, 2:14 PM
zsdc created T2309: Wrong host-name value breaks the whole configuration in images with Cloud-init.
Apr 17 2020, 12:42 PM · VyOS 1.2 Crux
jjakob updated the task description for T2308: openvpn op-mode scripts broken after migrating to systemd service.
Apr 17 2020, 10:39 AM · VyOS 1.3 Equuleus (1.3.0), openvpn
jjakob triaged T2308: openvpn op-mode scripts broken after migrating to systemd service as Normal priority.
Apr 17 2020, 10:37 AM · VyOS 1.3 Equuleus (1.3.0), openvpn
jjakob added a comment to T1317: OpenVPN configuration fails if it depends on another interface..

OpenVPN was migrated to a systemd service with auto restart so it's possible it could have fixed this issue. Please retest with latest rolling.

Apr 17 2020, 10:23 AM · VyOS 1.3 Equuleus (1.3.9), test
jjakob added a project to T2145: openvpn: server default topology net30 is incompatible with static client IPs for Windows clients: openvpn.
Apr 17 2020, 10:08 AM · VyOS 1.4 Sagitta (1.4.1)
jjakob added a comment to T2145: openvpn: server default topology net30 is incompatible with static client IPs for Windows clients.

The recent work on openvpn added net30 as an option for "server topology" and marked it as default in the shell value help so at least users should now know it's the default. Personally I'd like the default topology to be subnet but that would mean adding a migrator script for old users who use net30.
It also rewrote some parts of the ifconfig setting logic. This should be retested if it's still an issue.

Apr 17 2020, 10:06 AM · VyOS 1.4 Sagitta (1.4.1)
jjakob added a project to T2235: OpenVPN server client IP doesn't reserve that IP in the pool: openvpn.
Apr 17 2020, 9:58 AM · VyOS 1.3 Equuleus (1.3.0), openvpn
jjakob added a project to T149: IPv6 support in OpenVPN tunnel: openvpn.
Apr 17 2020, 9:58 AM · VyOS 1.3 Equuleus (1.3.0-epa1), openvpn
jjakob added a project to T2113: OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping: openvpn.
Apr 17 2020, 9:57 AM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, VyOS 1.3 Equuleus (1.3.7), openvpn
jjakob added a project to T1512: vyos 1.2 openvpn client names with spaces created incorrectly: openvpn.
Apr 17 2020, 9:56 AM · VyOS 1.3 Equuleus (1.3.0), openvpn
jjakob added a comment to T1512: vyos 1.2 openvpn client names with spaces created incorrectly.

So if we wanted to not use compat-names because of T2113 the client node names would need to have spaces, I don't know how the config system would handle this? It could probably take a quoted value as the client node, but I'm not sure the shell completion would handle this - it already has problems autocompleting quoted values (for example if you try tab-completing a description with a space in it, you'll see what I mean). Shell completion would very likely break with quoted node names. A workaround could be to remap underscores in the config client node names to spaces for the actual ccd file names. I don't quote like that option, but the alternative would be to have to fix the shell autocompletion for quoted values (better in the big picture but more complex and time consuming), or not fix T2113.

Apr 17 2020, 9:55 AM · VyOS 1.3 Equuleus (1.3.0), openvpn
Unknown Object (User) closed T2256: Accel-ppp op-mode syntax as Resolved.
Apr 17 2020, 9:51 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2256: Accel-ppp op-mode syntax.

@Dmitry Looks good.

Apr 17 2020, 9:43 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) changed the status of T2256: Accel-ppp op-mode syntax from In progress to Needs testing.

@Viacheslav can you check?

Apr 17 2020, 6:49 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2275: flow-accounting broken in rolling as Resolved.
Apr 17 2020, 6:30 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2275: flow-accounting broken in rolling.

@trae32566 thanks for reporthing the issue so clearly, fix will be in next rolling release

Apr 17 2020, 6:30 AM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX75bc70d1b315: flow-accounting: T2275: fix NameError: name 'stdout' is not defined.
Apr 17 2020, 6:29 AM
c-po committed rVYOSONEXea197c50871b: flow-accounting: T2275: import render template from correct library.
Apr 17 2020, 6:29 AM
c-po claimed T2275: flow-accounting broken in rolling.
Apr 17 2020, 6:19 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2307: monitor dhcp reports "tail: DHCP: unrecognized file system type 0x794c7630 for ‘/var/log/messages’".

This is a known Issue on Debian 8 and reported multiple times. As a fix would require rebuilding coreurils we just stick with the debian version. Equuleus has this already resolved

Apr 17 2020, 6:16 AM · VyOS 1.2 Crux
c-po merged T2307: monitor dhcp reports "tail: DHCP: unrecognized file system type 0x794c7630 for ‘/var/log/messages’" into T188: tail: unrecognized file system type 0x794c7630.
Apr 17 2020, 6:16 AM · Rejected