I figured out the order we need to remove things in:
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Aug 3 2021
Aug 3 2021
Unknown Object (User) closed T2432: dhcpd: Can't create new lease file: Permission denied as Unknown Status.
Aug 2 2021
Aug 2 2021
UnicronNL closed T3601: Error in ssh keys for vmware cloud-init if ssh keys is left empty. as Resolved.
Viacheslav added a subtask for T2199: Rewrite firewall in new XML/Python style: T2194: "show firewall" garbled output.
PR for current version https://github.com/vyos/vyos-1x/pull/952
I've cleaned the build space and rebuilt the Docker container - no dice locally or in the CI stack, still fails the same way.
It looks like they're using an AWS CA in the cert chain:
Certificate chain 0 s:CN = repo.saltstack.com i:C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 1 s:C = US, O = Amazon, OU = Server CA 1B, CN = Amazon i:C = US, O = Amazon, CN = Amazon Root CA 1 2 s:C = US, O = Amazon, CN = Amazon Root CA 1 i:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 3 s:C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2 i:C = US, O = "Starfield Technologies, Inc.", OU = Starfield Class 2 Certification Authority
i do recall the starfield certs being a problem back in the day as well, but guessing its quite unlikely for the base build environment to have an AWS root CA in its trusted list.
Aug 1 2021
Aug 1 2021
c-po moved T1594: l2tpv3 error on IPv6 local-ip from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T3090: Move 'adjust-mss' firewall options to the interface section. from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3707: Ping incorrect ip host checks from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T3707: Ping incorrect ip host checks from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T1810: Commit to add new l2tp local user shouldn't disconnect all current l2tp sessions from Open to In Progress on the VyOS 1.4 Sagitta board.
Jul 31 2021
Jul 31 2021
I have added a test which does not let you delete the default BGP instance when VRF bound instances exist.
c-po moved T3665: Missing VRF support for VxLAN but already documented from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T3679: Point the unexpected exception message link to the new rolling release location from Need Triage to Finished on the VyOS 1.3 Equuleus board.
This is causing a configtest failure on 1.4-rolling-202107301807 stemming from not cleaning up after bgp-evpn-l3vpn-pe-router ("Cannot delete default BGP instance. Dependent VRF instances exist"):
c-po moved T3711: service router-advert interface <name> dnssl option has no effects from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po changed the status of T3716: Linux kernel parameters ignore_routes_with_link_down- ignore disconnected routing connections from Unknown Status to Resolved.
c-po changed Is it a breaking change? from none to behavior on T3716: Linux kernel parameters ignore_routes_with_link_down- ignore disconnected routing connections.
c-po closed T3716: Linux kernel parameters ignore_routes_with_link_down- ignore disconnected routing connections as Unknown Status.
Viacheslav changed the status of T3694: Static routes not installed into kernel nor frr from Confirmed to Needs testing.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/950
Using timeouts is a pretty bad idea as they vary on the host CPU or utilisation of a hypervisor.
it should be timeout ~1.8 sec between adding ipv6 address and create l2tp interface
Jul 30 2021
Jul 30 2021
Viacheslav moved T1176: FRR - BGP replicating routes from Open to Finished on the VyOS 1.4 Sagitta board.
c-po closed T1210: About IKEv2 IPSec VPN remote access, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
As I see it's already fixed:
vyos@r4-1.3# set protocols bgp 64512 neighbor 192.168.5.5 local-as 64513 [edit] vyos@r4-1.3# set protocols bgp 64512 neighbor 192.168.5.5 remote-as 64513 [edit] vyos@r4-1.3# commit [ protocols bgp 64512 neighbor 192.168.5.5 local-as 64513 ] local-as: 64513 and remote-as: 64513 can't be the same
Viacheslav moved T1176: FRR - BGP replicating routes from Need Triage to Finished on the VyOS 1.3 Equuleus board.
PR for current https://github.com/vyos/vyos-1x/pull/949
Jul 29 2021
Jul 29 2021
They should be disabled by default, but there must be the ability to re-enable OIDs back from CLI.
PR for 1.3 https://github.com/vyos/vyatta-cfg-quagga/pull/86
add option "solo" for neighbor.
dmbaturin added a project to T970: Support matching domain name in firewall rules: VyOS 1.4 Sagitta.
dmbaturin added a project to T936: Reimplementation of tech-support diagnostic file generation: test.
dmbaturin edited projects for T893: Add support for VPP , added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T880: What do you think about softether VPN server?, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T876: L2TP/IPSEC Client, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T839: Add options for DHCPD OMAPI, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T766: Implement support for the Tinc VPN daemon, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T762: Include rulseset in firewall, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T760: Allow named interfaces, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T696: Rewrite conntrack sync to XML, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T671: Identify and remove dead code, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T2869: Intel ethernet driver defaults sub-optimal, added: test, VyOS 1.2 Crux (VyOS 1.2.9); removed VyOS 1.2 Crux.
dmbaturin edited projects for T2737: DHCP Lease not displayed with a static map, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T2674: Other arhitecture support (MIPS, ARM), added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T1233: ipsec vpn sa showing down, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T1229: Add support for unencrypted L2TPv2 client connections, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin edited projects for T1090: Webproxy overhaul, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
dmbaturin removed a project from T1097: Make firewall groups work everywhere that's appropropriate: VyOS 1.3 Equuleus.
Unknown Object (User) changed the status of T2432: dhcpd: Can't create new lease file: Permission denied from Open to In progress.
Unknown Object (User) added a comment to T2432: dhcpd: Can't create new lease file: Permission denied.
PR https://github.com/vyos/vyos-1x/pull/945
Also, need to cherry-pick it to Equuleus
Unknown Object (User) added a project to T2432: dhcpd: Can't create new lease file: Permission denied: VyOS 1.4 Sagitta.
dmbaturin added a project to T3601: Error in ssh keys for vmware cloud-init if ssh keys is left empty.: test.
dmbaturin added a project to T3098: Cannot talk to rtnetlink: Message too long Command failed -:1: test.
dmbaturin edited projects for T3090: Move 'adjust-mss' firewall options to the interface section., added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
Viacheslav added a parent task for T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable: T3706: Add proper priorities for systemd daemons.
It was a lot of problems with high CPU utilization with these mibs T1705.
https://forum.vyos.io/t/high-cpu-usage-by-bgpd-when-snmp-is-active
Jul 28 2021
Jul 28 2021
Viacheslav renamed T3707: Ping incorrect ip host checks from Ping incorrect host checks to Ping incorrect ip host checks.
Jul 27 2021
Jul 27 2021
Wireguard has its own fwmark setting, such as: