@zoenan7 Thanks for your research! You can send the PoC to daniil@vyos.io
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Sep 26 2021
Sep 26 2021
c-po moved T3859: Add "log-adjacency-changes" to ospfv3 process from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3859: Add "log-adjacency-changes" to ospfv3 process from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3859: Add "log-adjacency-changes" to ospfv3 process from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.9) board.
c-po moved T3857: reboot: send wall message to all users for information from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3857: reboot: send wall message to all users for information from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3857: reboot: send wall message to all users for information from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
c-po changed the status of T3861: PKI: changing certificates, keys, crls does not "regenerate" the on-disk certificates from Open to Confirmed.
c-po updated the task description for T3860: Error on pppoe, tunnel and wireguard interfaces for IPv6 EUI64 addresses.
c-po triaged T3860: Error on pppoe, tunnel and wireguard interfaces for IPv6 EUI64 addresses as Urgent! priority.
Sep 25 2021
Sep 25 2021
c-po added a comment to T3856: op command: " generate tech-support archive file" option is not working.
The command mentions that the file is saved to: /opt/vyatta/etc/config/support/file.vyos.tech-support-archive.2021-09-25-150643.tgz thus ls from the home directory will not reveal a file.
c-po changed Is it a breaking change? from validation to compatible on T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.
c-po closed T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses as Resolved.
c-po added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.
The next rolling will also have support for the set protocols bgp neighbor fe80::202 interface source-interface 'eth1' CLI command
c-po added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.
Actually the VyOS syntax is a bit different - you do not need to establish a "relationship" with a link-local address - multiple links could indeed share the same link local address causing conflicts and non-uniqueness in the config.
Sep 24 2021
Sep 24 2021
c-po changed the status of T3115: Add support for firewall on L3 VIF bridge interface from Open to Needs testing.
Bug still present.
Viacheslav added a comment to T3853: nat66 rules gets deleted on reboot in 1.4-rolling-202109240217.
Additional logs:
Sep 24 12:32:23 r1-roll systemd[1]: Starting NDP Proxy Daemon... Sep 24 12:32:23 r1-roll ndppd[2150]: (notice) ndppd (NDP Proxy Daemon) version 0.2.4 Sep 24 12:32:23 r1-roll ndppd[2150]: (notice) Using configuration file '/run/ndppd/ndppd.conf' Sep 24 12:32:23 r1-roll ndppd[2150]: (warning) Low prefix length (80 <= 120) when using 'static' method Sep 24 12:32:23 r1-roll ndppd[2150]: (warning) Low prefix length (80 <= 120) when using 'static' method Sep 24 12:32:23 r1-roll systemd[1]: ndppd.service: Can't open PID file /run/ndppd/ndppd.pid (yet?) after start: Operation not permitted Sep 24 12:32:23 r1-roll kernel: [ 131.465473] NET: Registered protocol family 17 Sep 24 12:32:23 r1-roll isisd[1006]: circuit already connected
Viacheslav added a comment to T3853: nat66 rules gets deleted on reboot in 1.4-rolling-202109240217.
[ OK ] Finished Update UTMP about System Runlevel Changes. [ 117.227867] vyos-router[751]: Starting VyOS router: migrate firewall configure [ 117.228588] vyos-router[2121]: failed! [ 117.482910] vyos-config[1646]: Configuration error
Viacheslav changed the status of T3853: nat66 rules gets deleted on reboot in 1.4-rolling-202109240217 from Open to Confirmed.
Sep 23 2021
Sep 23 2021
Thanks!
jestabro raised the priority of T3785: Add unicode support to configtree backend from Low to Normal.
c-po moved T3850: Dots are no longer allowed in SSH public key names from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3850: Dots are no longer allowed in SSH public key names from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
Sep 22 2021
Sep 22 2021
I have created a PR for the bugs that I found above. I hope that is is acceptable to solve these within this ticket:
https://github.com/vyos/vyos-1x/pull/1014
I think I found my problem. I haven't known the difference between PKCS#1 and PKCS#8.
If I give the key in PKCS#8 format I can finally commit the changes without problems.
Viacheslav changed the subtype of T3848: Abbility to set local/remote id for dmvpn from "Bug" to "Feature Request".
Hey everyone,
Sep 21 2021
Sep 21 2021
c-po renamed T3847: keepalived/vrrp: migrate to get_config_dict() - cleanup from keepalived/vrrp: migrate to get_config_dict() to keepalived/vrrp: migrate to get_config_dict() - cleanup.
c-po updated the task description for T3847: keepalived/vrrp: migrate to get_config_dict() - cleanup.
c-po changed the status of T3847: keepalived/vrrp: migrate to get_config_dict() - cleanup from Open to In progress.
Duplicate T1797
Okay, a lot has changed in the recent 1.4 version in terms of changing interface parameters due to T2738 - can you please retry one of the latest 1.4 images starting from 2021-09-21?
Sep 20 2021
Sep 20 2021
Sep 19 2021
Sep 19 2021
c-po added a comment to T2738: Modifying configuration in the "interfaces" section from VRRP transition scripts causes configuration lockup and high CPU utilization.
The issue is caused by:
c-po moved T3824: Ethernet offload options are not populated in new installs from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po reopened T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses as "Needs testing".
Unknown Object (User) added a comment to T3831: External traffic stops routing when IPSEC tunnel comes up with interface vti0.
Tested in vyos-1.4-rolling-202109190558,
works
c-po moved T3576: ISIS does not support IPV6 from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
c-po moved T3637: vrf: bind-to-all didn't work properly from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
c-po moved T3402: Add VyOS programming library for operational level commands from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T3746: Inform users logging into the system about a pending reboot from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
c-po moved T3802: Commit fails if ethernet interface doesn't support flow control from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
c-po moved T1894: FRR config not loaded after daemons segfault or restart from Finished to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
c-po moved T3794: MACsec interfaces in down state after create from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3275: Disable conntrack helpers by default from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3841: dhcp-server: add ping-check option to CLI from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2927: isc-dhcpd release and expiry events never execute from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po added a project to T2927: isc-dhcpd release and expiry events never execute: VyOS 1.3 Equuleus (1.3.0-epa1).
c-po moved T3841: dhcp-server: add ping-check option to CLI from Finished to In Progress on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3841: dhcp-server: add ping-check option to CLI from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po added a project to T3841: dhcp-server: add ping-check option to CLI: VyOS 1.3 Equuleus (1.3.0-epa1).
c-po changed the status of T3841: dhcp-server: add ping-check option to CLI from Open to In progress.
c-po changed the status of T3672: DHCP-FO with multiple subnets results in invalid/non-functioning dhcpd.conf configuration file output from Open to In progress.
c-po moved T3736: openvpn-option keeps and adds double dashes ''--" from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3740: HTTPs API breaks when the address is IPv6 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3746: Inform users logging into the system about a pending reboot from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3743: l2tp doesn't work after reboot if outside-address not 0.0.0.0 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3756: VyOS generates invalid QR code for wireguard clients from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3568: Add XML for firewall conf-mode from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3606: SNMP unknown notification OID from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3636: SSTP / L2TP ipv6 support broken from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3641: Upgrade base system from Debian Buster -> Debian Bullseye from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T1210: About IKEv2 IPSec VPN remote access from In Progress to Finished on the VyOS 1.4 Sagitta board.