- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jan 12 2023
Jan 12 2023
Jan 11 2023
Jan 11 2023
@jestabro I've created the backport PR just now.
@roedie , thanks.
Will push the backport for 1.3 as well.
GitHub <noreply@github.com> committed rVYOSONEX68a036238522: Merge pull request #1742 from roedie/T4918 (authored by jestabro).
c-po changed the status of T4928: Upgrade Linux Kernel to 6.1.y (2022 LTS edition) from Open to In progress.
So there are 2 options
- Live it as it is, it works as before (but maybe it is a legacy way)
- Return the strongswan.service and use it in all required places (conf-mode, op-mode, dmvpn scripts, etc). So old ipsec/starter must not be overlapped with strongswan.service restarts
GitHub <noreply@github.com> committed rVYOSONEXf9a6c00a2550: Merge pull request #1747 from dmbaturin/op-mode-generate-method (authored by Viacheslav).
GitHub <noreply@github.com> committed rVYOSONEXf56221a096f6: Merge pull request #1749 from aapostoliuk/T4927-equuleus (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEXa7acd12facc6: Merge pull request #1748 from aapostoliuk/T4927-sagitta (authored by c-po).
a.apostoliuk changed the status of T4927: Need to change restart to reload-or-restart in Webproxy module from Open to In progress.
jack9603301 awarded T3008: Migrate from ntpd to chronyd a Like token.
Jan 10 2023
Jan 10 2023
GitHub <noreply@github.com> committed rVYOSONEX0e5ea5a63ab9: Merge pull request #1746 from dmbaturin/op-mode-unsupported-error (authored by jestabro).
jestabro closed T4880: Expose 'add/delete container image' in HTTP-API, a subtask of T578: Support Linux Container, as Resolved.
I found that if IPSEC lifetime is large(28800) then this problem occurs.
If lifetime eq 1800 sec, everything works.
Viacheslav changed the status of T4906: ipsec connections shows only one connection as up from In progress to Needs testing.
GitHub <noreply@github.com> committed rVYOSONEXc86ed3df1e30: Merge pull request #1744 from jestabro/container-op-mode (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEXde686b3bee8f: Merge pull request #1745 from sever-sever/T4906 (authored by c-po).
After return strongswan.starer https://github.com/vyos/vyos-1x/commit/f5f43c6639957f95177bb77d2b569e16d4dab9dc
all looks good now, service can be restored without issues
The similar task T3008
jack9603301 renamed T4926: using chronyd service to replace ntpd from Replace ntp with clock to using chronyd service to replace ntpd .
Jan 9 2023
Jan 9 2023
jestabro changed the status of T4880: Expose 'add/delete container image' in HTTP-API, a subtask of T578: Support Linux Container, from Open to In progress.
jestabro changed the status of T4880: Expose 'add/delete container image' in HTTP-API from Open to In progress.
a.apostoliuk added a comment to T4924: Systemctl strongswan.service for some reason is not disabled.
I have tested this bug.
After boot everything woks fine without any problems.
But after restart vpn command all these issues began.
- Error message
vyos charon[2079]: 04[NET] no socket implementation registered, sending failed
- Swanctl shows unnormal info. IPSEC phase is down.
- Traffic passes through the tunnel.
- New process appears
a.apostoliuk added a comment to T4924: Systemctl strongswan.service for some reason is not disabled.
Restricted Repository Identity added a reverting change for rVYOSONEX36d16f531236: strongSwan: T4593: add charon-systemd runtime dependency: rVYOSONEX91e0ad075586: Revert "strongSwan: T4593: add charon-systemd runtime dependency".
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX91e0ad075586: Revert "strongSwan: T4593: add charon-systemd runtime dependency".
Restricted Repository Identity added a reverting change for rVYOSONEX6857447bf6ac: strongSwan: upgrade scripts to work with package version 5.9.8: rVYOSONEXf5f43c663995: Revert "strongSwan: upgrade scripts to work with package version 5.9.8".
Christian Poessinger <christian@poessinger.com> committed rVYOSONEXf5f43c663995: Revert "strongSwan: upgrade scripts to work with package version 5.9.8".
Viacheslav changed the status of T4844: Incorrect permissions of the safeguard DB directory, a subtask of T3810: webproxy squidguard rules don't work properly after rewriting to python. , from In progress to Needs testing.
Viacheslav changed the status of T4844: Incorrect permissions of the safeguard DB directory from In progress to Needs testing.
Fixed in T3810
Viacheslav reopened T3810: webproxy squidguard rules don't work properly after rewriting to python. as "Needs testing".
a.apostoliuk changed the status of T4877: Need verification in using import vrf and import vpn, export vpn commands from In progress to Needs testing.
Viacheslav changed the status of T4906: ipsec connections shows only one connection as up from Open to In progress.
c-po closed T4922: Add ssh-client source-interface CLI option, a subtask of T2651: Generate CLI abstraction for options passed to CURL and SSH client, as Resolved.
c-po moved T4922: Add ssh-client source-interface CLI option from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Viacheslav changed the status of T1311: WAN load-balancing can't flush connections when conntrack-sync is enabled from On hold to Needs testing.
Jan 9 2023, 8:32 AM · VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, test
Jan 8 2023
Jan 8 2023
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX87b45f69913b: ssh: T2651: use Debian style include directve for ssh_config.d.
Christian Poessinger <christian@poessinger.com> committed rVYOSONEXc0745d64024a: ssh: T4922: add source-interface support ssh-client.
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX9ebf4db1296a: ssh: T4922: extend verify() when both source-address and source-interface is….
GitHub <noreply@github.com> committed rVYOSONEX5a6c0c4d6111: Merge pull request #1743 from c-po/t2651-ssh-client (authored by c-po).
DerEnderKeks added a comment to T4923: Zebra sends router advertisements even though it's not supposed to.
I don't think this is a bug in FRR, but rather a configuration issue. I'm not really familiar with FRR, but as far as I can tell, sending RAs is an intended feature of it that can be disabled per interface: https://docs.frrouting.org/en/latest/ipv6.html#clicmd-ipv6-nd-suppress-ra
Not sure why it's enabled by default, since I couldn't find anything in the generated /etc/frr/frr.conf that would enable it.
Viacheslav updated the task description for T4924: Systemctl strongswan.service for some reason is not disabled.
Viacheslav updated the task description for T4924: Systemctl strongswan.service for some reason is not disabled.
Viacheslav added a comment to T4923: Zebra sends router advertisements even though it's not supposed to.
Could you open an issue for FRR?
https://github.com/FRRouting/frr/issues
c-po moved T4922: Add ssh-client source-interface CLI option from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.3) board.
c-po moved T4922: Add ssh-client source-interface CLI option from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T4922: Add ssh-client source-interface CLI option, a subtask of T2651: Generate CLI abstraction for options passed to CURL and SSH client, from Open to In progress.
c-po changed the status of T4922: Add ssh-client source-interface CLI option from Open to In progress.
Jan 7 2023
Jan 7 2023
GitHub <noreply@github.com> committed rVYOSONEX47216bbe29e0: Merge pull request #1741 from vfreex/ospf-fix-passive-interface (authored by c-po).
In T4917#140239, @b- wrote:Thanks! That’ll help me with what I’m working on :)From where does this limitation originate, anyway? Is there a way to at least add . to the acceptable characters list, so as to allow for foo.sh? Would that break something that expects to skip over filenames with dots and other characters?
GitHub <noreply@github.com> committed rVYOSONEX873240f6c878: Merge pull request #1728 from aapostoliuk/T4877-sagitta (authored by c-po).
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX8759f3ee7290: smoketest: ospf: extend test 09 w/ passive interfaces.
roedie changed the status of T4884: Missing a community6 in snmpd config from Unknown Status to Resolved.
c-po awarded T4919: TPM-backed config encryption a 100 token.
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX662bae181cdf: xml: T1579: merge generic-description.xml.i and interface/description.xml.i.
Jan 6 2023
Jan 6 2023