vyos@vyos# set interfaces ethernet eth2 mtu 16000 [edit] vyos@vyos# commit [ interfaces ethernet eth2 ] Interface MTU too high, maximum supported MTU is 9000!
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Oct 28 2020
Oct 28 2020
The root cause for this is the sha256 checksum file itself. It contains the hash and the filename. When running sha256 --check during the upgrade it expects the "real" filename when calculating and verifying the hash. The real filename differs when using the vyos-rolling-latest.iso symlink on the webserver as it will tell the running VyOS installation a different filename and the validation fails. This is now fixed by not depending on the filename when verifying the has. We simply calculate the hash of the downloaded file and compare it to the hash we saved inside the checksum file and totally ignore the filename itself.
Unknown Object (User) closed T2631: l2tp, sstp, pptp add option to disable radius accounting as Resolved.
I have tested both SSTP and L2TP and it works as expected - thank you for this addition!
zsdc changed the status of T3028: Create a default user when metadata is not available (for Cloud-init builds) from Open to In progress.
Viacheslav changed the status of T3027: Unable to update system Signature check FAILED from Open to Confirmed.
Oct 27 2020
Oct 27 2020
Put in a PR to separate hello/hold timers for IPv4 and IPv6. Added IPv6 timers.
I will check it tomorrow and verify operation. Thank you!
Viacheslav closed T2587: Cannot enable the interface when the MTU is set to less than 1280 as Resolved.
Fixed
vyos@r4-roll# run show version
@klase Check these options in the next rolling release (after 20201027)
GitHub <noreply@github.com> committed rVYOSONEX9cf806a8b60a: Merge pull request #583 from jestabro/vyos-configtest (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXec099db69f58: Merge pull request #584 from sever-sever/T2387_oct (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX174ae56c6f49: Merge pull request #581 from sever-sever/T2631 (authored by c-po).
jestabro closed T2885: configd: print commit errors to config session terminal, a subtask of T2582: Script daemon to offload processing during commit, as Resolved.
jestabro closed T2808: Add smoketest to ensure script consistency with config daemon, a subtask of T2582: Script daemon to offload processing during commit, as Resolved.
jestabro added a comment to T3003: Extend smoketest framework to allow loading an arbitrary config file.
FRR doesn't delete isis configuration related "interfaces" with
delete protocols isis foo interface eth1
protocol "isisd" in the test was added here https://github.com/vyos/vyos-1x/pull/483/files#diff-060cdf269ea89160caa0deaebe8e323f0559aa6dfd19e5634a33634f3e38e461R72
Viacheslav added a project to T2933: VRRP add option virtual_ipaddress_excluded: Restricted Project.
Viacheslav added a comment to T3014: Clear under op mode and conf mode act differently. Uniting them.
@kroy What PR?
sounds good - would be good having some other options than just domain-name and email, but that's another story :). I'll follow the other task then!
It already fixed in the master branch.
https://github.com/hiroyuki-sato/vyos-documentation/commit/8587946d16aaae6f5495c1e591220f88005cd276
SrividyaA closed T2924: Using 'set src' in a route-map invalidates it as part of a subsequent boot-up as Resolved.
Resolved in T2985
@SrividyaA Thanks.
I have tested on this rolling release VyOS 1.3-rolling-202010231135 and created a lab setup similar to the reporter's setup.
@craterman it seems bug with your resolution.
Oct 26 2020
Oct 26 2020
set service https certificates certbot
domain-name(s) should contain the desired server-name. A rewrite is in progress in:
https://phabricator.vyos.net/T2289
@jestabro hmmm I don't see that "certbot" in the completion - running on rolling 1.3... ? In fact, nodes "certificates" and "certbot" are not shown here:
set service https
Possible completions:
> api VyOS HTTP API configuration
> api-restrict Restrict api proxy to subset of virtual hosts
> certificates TLS certificates
+> virtual-host Identifier for virtual host
I've been running chronyd for some time in a number of environments without any noticeable issues. I do think the clock on the hosts seems to be a bit more stable, but not something that is overly remarkable one way or the other. I'd have no problem with the change.
It exists:
https://phabricator.vyos.net/T1585
cjeanneret changed the status of T3020: The "scp" example is wrong in the bash-completion for "set system config-management commit-archive location" from Open to In progress.
I put a request on this up top. We'll get to it eventually, but I was hoping we could put it like this:
Can you add this commands
jestabro changed the status of T3003: Extend smoketest framework to allow loading an arbitrary config file from In progress to Needs testing.
This still needs to be integrated into check-qemu-install before PR:
https://github.com/vyos/vyos-1x/compare/current...jestabro:vyos-configtest
GitHub <noreply@github.com> committed rVYOSONEX7c1554d864bf: Merge pull request #582 from sever-sever/T2982_crux (authored by dmbaturin).
PR for crux https://github.com/vyos/vyos-1x/pull/582
Update from VyOS 1.3-rolling-202010210152 to latest rolling vyos-1.3-rolling-202010260327-amd64.iso Failed.
Proposed CLI
set system options disable-spectre
Updated PR with section "parameters"
https://github.com/vyos/vyos-1x/pull/580
Unknown Object (User) added a comment to T2971: Provide a CLI solution for Ingress Shaping when there is SNAT.
Once this task is solved, QoS documentation should include a subsection about NAT, explaining the procedure for both outbound and inbound traffic.
c-po moved T3016: dhcp-server: use better constraint error message on invalid subnet from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.7) board.
Limit can and should be lifted. I have also some Mellanox or Myricom cards with an MTU up to 16k
All of ours do as far as I know, which includes 10,40, and 100g. I'm pretty sure 2.5g and 5g will as well.
Don't some 10G/40G/100G gear support some megajumbo frame sizes now as well? Not sure about the 2.5/5G stuff though...
Oct 25 2020
Oct 25 2020
jestabro changed the status of T3003: Extend smoketest framework to allow loading an arbitrary config file from Open to In progress.
jestabro moved T3003: Extend smoketest framework to allow loading an arbitrary config file from Backlog to In Progress on the VyOS 1.3 Equuleus board.
c-po moved T2968: Add support for Intel Atom C2000 series QAT from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
c-po moved T2995: Enhancements/bugfixes for vyos_dict_search() from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
c-po moved T3003: Extend smoketest framework to allow loading an arbitrary config file from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
c-po moved T3001: Disable spectre mitigation patches from CLI from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
c-po moved T2994: Migrate OpenVPN interfaces to get_config_dict() syntax from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po added a comment to T2969: OpenVPN: command_set on interface is not applied, if interface doesn't come up in commit.
Thanks - hopefully T2994 will catch all this stuff! Please be patient, I'm currently in the testing phase.
Oct 25 2020, 12:14 AM · Restricted Project
Oct 24 2020
Oct 24 2020