- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Aug 24 2023
Aug 24 2023
Will be fixed in https://vyos.dev/T5506
In my internal tests, it works even without listen-address
set container name c1 image 'docker.io/ealen/echo-server' set container name c1 network NET01 set container name c1 port web destination '80' set container name c1 port web source '8080' set container network NET01 prefix '10.0.0.0/24' set container network NET01 prefix '2001:db8:2222::/64' set interfaces dummy dum0 address '2001:db8:1111::1/64' set interfaces dummy dum0 address '203.0.113.1/32'
Viacheslav closed T5448: Add service zabbix-agent, a subtask of T118: Native Zabbix Support, as Resolved.
@Apachez, I got your point. The thing is, we don't have cisco-like CLI and can modify any seq rule.
It possibly could be from op-mode (not sure) because otherwise, you get resequence per each commit. That is definitely wrong.
If it is only per migration, you can change it in migration or rewrite the rules once.
The firewall will not be autoconfigured by bgpd or something else. We are not going to do it.
Aug 23 2023
Aug 23 2023
Viacheslav changed the status of T5463: Containers allow publish IPv6 address port from In progress to Needs testing.
Viacheslav closed T5503: Nightly-builds is missing a latest.iso to be used with add system image as Invalid.
It is not VyOS bug
I don't get this thing.
You can use any number that you want.
Could you explain what exactly Is wrong and why you can't use your own declared numbers?
Does it do what you want?
vyos@r14# set system frr snmp Possible completions: bgpd BGP isisd IS-IS ldpd LDP ospf6d OSPFv3 ospfd OSPFv2 ripd RIP zebra Zebra (IP routing manager)
For example
vyos@r14:~$ show conf com | match ldp set system frr snmp ldpd vyos@r14:~$ vyos@r14:~$ ps ax | grep ldp 1006 ? S<s 0:00 /usr/lib/frr/watchfrr -d -F traditional zebra mgmtd bgpd ripd ripngd ospfd ospf6d isisd babeld ldpd eigrpd staticd bfdd 1075 ? S< 0:00 /usr/lib/frr/ldpd -L -u frr -g frr 1076 ? S< 0:00 /usr/lib/frr/ldpd -E -u frr -g frr 1079 ? S<s 0:00 /usr/lib/frr/ldpd -d -F traditional --daemon -A 127.0.0.1 -M snmp 3124 pts/0
Viacheslav changed the status of T5499: initial arm64 support for RPI4 and QEMU VM from Open to In progress.
I don't get which exact issue with VRRP
but if you have an issue, please add a separate task.
Provide sudo nft list ruleset before and after the bug version. Bug with VRRP definitely not clear for now.
Viacheslav moved T5446: bgp: validity check for bestpath med option from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5453: Fix nat66 - broken after load-balance was introduced in nat from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T5463: Containers allow publish IPv6 address port from Open to In progress.
It seems that only one address could be set
--publish, -p=[[ip:][hostPort]:]containerPort[/protocol]
https://docs.podman.io/en/latest/markdown/podman-create.1.html#publish-p-port
Viacheslav changed the status of T5447: Allow static MACsec keys with peers from In progress to Needs testing.
Aug 22 2023
Aug 22 2023
Viacheslav changed the status of T5466: L3VPN - label allocation mode from In progress to Needs testing.
Aug 18 2023
Aug 18 2023
Viacheslav added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..
The similar task https://vyos.dev/T4797
Aug 17 2023
Aug 17 2023
Viacheslav changed the status of T5486: Service dns dynamic cannot pass the smoketest from Unknown Status to Resolved.
Viacheslav changed the status of T5488: System conntrack ignore does not take any effect from Open to In progress.
Priority must be less than -200 https://github.com/vyos/vyos-1x/blob/08cb4f350b335d5af401f30850d410b4be38530d/data/vyos-firewall-init.conf#L23-L32
https://wiki.nftables.org/wiki-nftables/index.php/Setting_packet_connection_tracking_metainformation#notrack_-_Bypass_connection_tracking
chain PREROUTING {
type filter hook prerouting priority -200; policy accept;
counter packets 6405 bytes 444828 jump VYOS_CT_IGNORE
counter packets 6405 bytes 444828 jump VYOS_CT_TIMEOUT
counter packets 6405 bytes 444828 jump VYOS_CT_PREROUTING_HOOK
counter packets 6405 bytes 444828 jump FW_CONNTRACK
notrack
}It could be incorrect process name name='ddclient - sleeping for 10 seconds' expectedd ddclient, possible bug after commit https://github.com/vyos/vyos-1x/commit/58a20e42087cbb7a1b3b4725fa40fd15a31bb4ed
psutil.Process(pid=2282, name='sshd', started='12:29:23') psutil.Process(pid=2283, name='vbash', started='12:29:23') psutil.Process(pid=2625, name='rsyslogd', started='12:30:31') psutil.Process(pid=9841, name='vbash', started='13:02:24') psutil.Process(pid=10249, name='kworker/u2:1-events_unbound', started='13:03:58') psutil.Process(pid=10735, name='kworker/0:1-mm_percpu_wq', started='13:10:42') psutil.Process(pid=10737, name='kworker/u2:2-events_unbound', started='13:10:42') psutil.Process(pid=10987, name='ddclient - sleeping for 10 seconds', started='13:12:47')
Viacheslav moved T5223: tunnel key doesn't clear from Open to Finished on the VyOS 1.4 Sagitta board.
PR for 1.3.4 https://github.com/vyos/vyos-1x/pull/2153
Viacheslav edited projects for T5484: set extcommunity - just allow one extend community, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus.
Aug 16 2023
Aug 16 2023
Thanks, @jestabro
Zabbix-agent really can include config directory, and if it is set and exists any *.conf file it thinks that those files related to zabbix-agent and expects specific config syntax/options.
I.e. it extends zabbix-agent with custom .confg files.
As it was a wrong format, most likely it can't start at all.
Aug 15 2023
Aug 15 2023
Cannot pass the smoketest in CI
07:19:00 DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_service_monitoring_zabbix-agent.py 07:19:02 DEBUG - test_01_zabbix_agent (__main__.TestZabbixAgent.test_01_zabbix_agent) ... FAIL 07:19:04 DEBUG - 07:19:04 DEBUG - ====================================================================== 07:19:04 DEBUG - FAIL: test_01_zabbix_agent (__main__.TestZabbixAgent.test_01_zabbix_agent) 07:19:04 DEBUG - ---------------------------------------------------------------------- 07:19:04 DEBUG - Traceback (most recent call last): 07:19:04 DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_monitoring_zabbix-agent.py", line 34, in tearDown 07:19:04 DEBUG - self.assertTrue(process_named_running(PROCESS_NAME)) 07:19:04 DEBUG - AssertionError: None is not true 07:19:04 DEBUG - 07:19:04 DEBUG - ----------------------------------------------------------------------
Is not reproduced in the local VM test
vyos@r14:~$ /usr/libexec/vyos/tests/smoke/cli/test_service_monitoring_zabbix-agent.py test_01_zabbix_agent (__main__.TestZabbixAgent.test_01_zabbix_agent) ... ok
Viacheslav added a comment to T5479: Helper leftovers found in nftables (firewall) even with all helpers disabled.
The original task https://vyos.dev/T5080
Viacheslav moved T5457: Add environmental variable pointing to current rootfs directory from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a project to T5480: Ability to disable SNMP for VRRP keepalived service: VyOS 1.4 Sagitta.
Aug 14 2023
Aug 14 2023
Viacheslav changed the status of T5461: Improve rootfs directory variable from Open to Needs testing.
Viacheslav changed the subtype of T5473: Detect what conflicts with POSIX mode from "Task" to "Bug".
Viacheslav awarded T5474: Establish common file name pattern for XML conf mode commands a Like token.
Aug 12 2023
Aug 12 2023
Viacheslav committed rVYOSONEX58a20e42087c: vyos.util: extend process_named_running() signature with cmdline (authored by c-po).
Aug 11 2023
Aug 11 2023
Viacheslav renamed T5462: Add actual Openssl version 1.1.1v from Add acual Openssl version 1.1.1v to Add actual Openssl version 1.1.1v.
Viacheslav changed the subtype of T5462: Add actual Openssl version 1.1.1v from "Bug" to "Feature Request".
Viacheslav moved T5416: Ignoring "ipsec match-none" for firewall from Open to Finished on the VyOS 1.4 Sagitta board.
Aug 10 2023
Aug 10 2023
Viacheslav changed the status of T5457: Add environmental variable pointing to current rootfs directory from In progress to Needs testing.
Viacheslav committed rVYOSONEXe27f566f0f65: T5329 : priority: tunnel config is committed before wireguard (authored by SrividyaA).
Viacheslav changed the status of T5457: Add environmental variable pointing to current rootfs directory from Open to In progress.
Aug 8 2023
Aug 8 2023
PR https://github.com/vyos/vyos-1x/pull/2140
set service monitoring zabbix-agent directory '/config/zabbix/' set service monitoring zabbix-agent limits buffer-send '8' set service monitoring zabbix-agent limits buffer-size '120' set service monitoring zabbix-agent log debug-level 'warning' set service monitoring zabbix-agent log size '1' set service monitoring zabbix-agent server '192.0.2.5' set service monitoring zabbix-agent server-active 192.0.2.5 port '10051' set service monitoring zabbix-agent server-active 2001:db8::123
Viacheslav changed the status of T5448: Add service zabbix-agent, a subtask of T118: Native Zabbix Support, from Open to In progress.
Viacheslav changed the subtype of T5447: Allow static MACsec keys with peers from "Task" to "Feature Request".
Viacheslav changed the status of T5446: bgp: validity check for bestpath med option from In progress to Needs testing.
Aug 7 2023
Aug 7 2023
Viacheslav closed T5071: QOS-Rewrite: DSCP match missing, a subtask of T5048: QoS doesn't work correctly root task, as Resolved.
Fixed
set qos interface eth1 egress 'VyOS-HTB' set qos policy shaper VyOS-HTB bandwidth '100mbit' set qos policy shaper VyOS-HTB class 10 bandwidth '40%' set qos policy shaper VyOS-HTB class 10 description 'dscp_EF_ipprec_5_GETS' set qos policy shaper VyOS-HTB class 10 match AF11 ip dscp 'AF11' set qos policy shaper VyOS-HTB class 10 priority '1' set qos policy shaper VyOS-HTB class 10 queue-type 'fair-queue' set qos policy shaper VyOS-HTB class 20 bandwidth '30%' set qos policy shaper VyOS-HTB class 20 description 'dscp_AF4x_ipprec_4' set qos policy shaper VyOS-HTB class 20 match ef ip dscp 'EF' set qos policy shaper VyOS-HTB class 20 priority '2' set qos policy shaper VyOS-HTB class 20 queue-type 'fair-queue' set qos policy shaper VyOS-HTB default bandwidth '20%' set qos policy shaper VyOS-HTB default queue-type 'fq-codel'
Viacheslav closed T5302: QoS class with multiple matches generates one filter rule but expects several rules, a subtask of T5048: QoS doesn't work correctly root task, as Resolved.
Viacheslav closed T5266: QoS- HTB error when match with a dscp parameter for queue-type 'priority', a subtask of T5048: QoS doesn't work correctly root task, as Resolved.
Viacheslav moved T5406: "update webproxy blacklists" fails when vrf is being configured from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added projects to T5444: R8169 driver crash: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.4).
Aug 6 2023
Aug 6 2023
Viacheslav changed the status of T5266: QoS- HTB error when match with a dscp parameter for queue-type 'priority', a subtask of T5048: QoS doesn't work correctly root task, from Open to Needs testing.
Viacheslav changed the status of T5266: QoS- HTB error when match with a dscp parameter for queue-type 'priority' from Open to Needs testing.
Aug 5 2023
Aug 5 2023
Viacheslav renamed T5266: QoS- HTB error when match with a dscp parameter for queue-type 'priority' from QoS- HTB error when match with a dscp parameter to QoS- HTB error when match with a dscp parameter for queue-type 'priority'.
Aug 4 2023
Aug 4 2023
Could be added the same way https://github.com/vyos/vyos-1x/blob/8f161eaae78769e5a1d573e43f00a0f439aadc28/debian/vyos-1x.postinst#L126-L139
Aug 3 2023
Aug 3 2023
Viacheslav moved T5154: Chrony - multiple listen addresses from Open to Finished on the VyOS 1.4 Sagitta board.
Aug 2 2023
Aug 2 2023
Viacheslav changed the status of T5427: Change migration script len arguments checking from In progress to Needs testing.