Page MenuHomeVyOS Platform
Feed All Stories

Aug 28 2023

Viacheslav updated the task description for T5521: Home owner directory changed to vyos for the user after reboot.
Aug 28 2023, 11:52 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav updated the task description for T5521: Home owner directory changed to vyos for the user after reboot.
Aug 28 2023, 11:50 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav created T5521: Home owner directory changed to vyos for the user after reboot.
Aug 28 2023, 11:38 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav edited projects for T2037: Make use of a systemd environment file, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.5).
Aug 28 2023, 11:02 AM · VyOS 1.4 Sagitta
Viacheslav closed T2016: Cluster for l2tp/pptp won't work as Wontfix.

The cluster feature will be deprecated, as we use systemd we should avoid init.d scripts.
All logic should be rewritten to VRRP

Aug 28 2023, 11:00 AM · VyOS 1.3 Equuleus (1.3.4)
Viacheslav updated subscribers of T1764: Use lists instead of whitespace-separated strings in vyos.config .

@dmaasland @jestabro Can we close it?

Aug 28 2023, 10:50 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav edited projects for T1674: Support [virtual] dvd device in add system image, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.5).
Aug 28 2023, 10:37 AM
Viacheslav edited projects for T1647: event-handler configurable syslog.pipe level , added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.5).
Aug 28 2023, 10:31 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta, eventwatchd
Viacheslav closed T1647: event-handler configurable syslog.pipe level as Invalid.

The event handler was rewritten to python3 and doesn't use pipes.

Aug 28 2023, 10:30 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta, eventwatchd
Viacheslav closed T1647: event-handler configurable syslog.pipe level , a subtask of T3083: Add feature event-handler, as Invalid.
Aug 28 2023, 10:30 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav edited projects for T1449: Add opportunity to include custom default configs (few) at building , added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.5).
Aug 28 2023, 10:21 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav added a comment to T1354: Add support for VLAN-Aware bridges.

@runar Can we close it?

vyos@r1# set interfaces bridge br0 member interface eth1 
Possible completions:
+  allowed-vlan Specify VLAN id which is allowed in this trunk interface
   cost         Bridge port cost
   isolated     Port is isolated (also known as Private-VLAN)
   native-vlan  Specify VLAN id which should natively be present on the link
   priority     Bridge port priority
Aug 28 2023, 10:12 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav moved T1311: WAN load-balancing can't flush connections when conntrack-sync is enabled from Open to Finished on the VyOS 1.4 Sagitta board.
Aug 28 2023, 10:08 AM · VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, test
Viacheslav closed T1289: route-map set route-type blackhole as Wontfix.

There are not such options in FRR

r14(config-route-map)# set ip next-hop 
  A.B.C.D       IP address of next hop
  peer-address  Use peer address (for BGP only)
  unchanged     Don't modify existing Next hop address
r14(config-route-map)#

It must be next-hop

Aug 28 2023, 10:08 AM · VyOS 1.3 Equuleus (1.3.5)
Viacheslav edited projects for T1002: install image - fast install, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.5).
Aug 28 2023, 9:53 AM
Viacheslav closed T1012: vyos-build configure script should check /etc/issue to avoid confusion as Not Applicable.

The best option is to use containers https://docs.vyos.io/en/latest/contributing/build-vyos.html#build-container
Close it as out of date.

Aug 28 2023, 9:51 AM · VyOS 1.3 Equuleus (1.3.5), vyos-build
lasseoe added a comment to T5517: Equuleus ISO build fails.

Same issue. So building Equuleus isn't possible at all anymore? I don't quite understand that the message is "it will be fixed eventually" but at the same time it's tagged as "Wont fix".

Aug 28 2023, 9:42 AM · VyOS 1.3 Equuleus
Viacheslav added a comment to T738: Add local-port and resolver port options for powerdns in CLI configuration tree.

PR for 1.3 https://github.com/vyos/vyos-1x/pull/2181

Aug 28 2023, 9:18 AM · VyOS 1.3 Equuleus (1.3.4)
Viacheslav closed T469: Problem after commit with errors as Resolved.
Aug 28 2023, 8:40 AM · VyOS 1.3 Equuleus (1.3.4), test
Viacheslav edited projects for T469: Problem after commit with errors, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.5).

I don't see any errors in VyOS 1.3-stable-202308240442

vyos@r1# set firewall group network-group FW-OUT network '191.200.161.8/31'
[edit]
vyos@r1# set firewall group network-group FW-OUT network '191.200.161.8/32'
[edit]
vyos@r1# commit
[edit]
vyos@r1# delete firewall group 
[edit]
vyos@r1# commit
[edit]
vyos@r1#
Aug 28 2023, 8:39 AM · VyOS 1.3 Equuleus (1.3.4), test
Viacheslav closed T5309: Issues when trying to remove OSPF configuration as Wontfix.

limitations of old backend

Aug 28 2023, 8:29 AM · VyOS 1.3 Equuleus (1.3.5)
Viacheslav closed T4745: CLI TAB issue with values with '-' at the beginning in conf mode, a subtask of T4704: Allow to set metric (MED) to rtt with rtt,+rtt or -rtt, as Resolved.
Aug 28 2023, 8:16 AM · VyOS 1.4 Sagitta
Viacheslav closed T4745: CLI TAB issue with values with '-' at the beginning in conf mode as Resolved.
Aug 28 2023, 8:16 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav edited projects for T4745: CLI TAB issue with values with '-' at the beginning in conf mode, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus (1.3.5).

Fixed

[edit]
vyos@r1# set policy route-map TEST rule 10 set metric -10
[edit]
vyos@r1# commit
[edit]
vyos@r1# sudo vtysh -c "show run"
Building configuration...
Aug 28 2023, 8:15 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
Viacheslav added a comment to T5495: Enable snmp module also for frr/ldpd.

This task for the ldpd
https://vyos.dev/T4020

Aug 28 2023, 8:05 AM · VyOS 1.4 Sagitta
aderouineau closed T5472: NAT redirect should not require port as Resolved.

My bad, I don't know how I missed them!

Aug 28 2023, 8:03 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T5472: NAT redirect should not require port.

The smoketest was in the same PR https://github.com/vyos/vyos-1x/pull/2162/files#diff-59a88cf4e56c56db9de173bbdeb31600f9733d8598570831364d2d368402af77

Aug 28 2023, 7:51 AM · VyOS 1.4 Sagitta
tjjh89017 added a comment to T5499: initial arm64 support for RPI4 and QEMU VM.

@Apachez thanks to you.
Let me check it.

Aug 28 2023, 7:40 AM
syncer triaged T5510: Shrink imagesize and improve read performance by changing mksquashfs syntax as Normal priority.
Aug 28 2023, 3:42 AM · VyOS 1.4 Sagitta
Apachez added a comment to T5510: Shrink imagesize and improve read performance by changing mksquashfs syntax.

Some tests on filesystem.squashfs from VyOS 1.4-rolling-202308280021.

Aug 28 2023, 3:34 AM · VyOS 1.4 Sagitta
syncer added a comment to T5472: NAT redirect should not require port.

Should a smoke test be added?

Better to have it

Aug 28 2023, 3:00 AM · VyOS 1.4 Sagitta
syncer triaged T5472: NAT redirect should not require port as Normal priority.
Aug 28 2023, 2:59 AM · VyOS 1.4 Sagitta
syncer closed T5517: Equuleus ISO build fails as Wontfix.

it will be fixed eventually

Aug 28 2023, 2:59 AM · VyOS 1.3 Equuleus
jestabro updated the task description for T5520: Likely source of corruption on system update exposed by change in coreutils for Bookworm.
Aug 28 2023, 2:54 AM · VyOS 1.4 Sagitta
jestabro updated the task description for T5520: Likely source of corruption on system update exposed by change in coreutils for Bookworm.
Aug 28 2023, 2:48 AM · VyOS 1.4 Sagitta
jestabro updated the task description for T5520: Likely source of corruption on system update exposed by change in coreutils for Bookworm.
Aug 28 2023, 2:42 AM · VyOS 1.4 Sagitta
jestabro updated the task description for T5520: Likely source of corruption on system update exposed by change in coreutils for Bookworm.
Aug 28 2023, 2:40 AM · VyOS 1.4 Sagitta
jestabro added a subtask for T5267: Another corruption on upgrade: T5520: Likely source of corruption on system update exposed by change in coreutils for Bookworm.
Aug 28 2023, 2:04 AM · VyOS 1.4 Sagitta
jestabro added a parent task for T5520: Likely source of corruption on system update exposed by change in coreutils for Bookworm: T5267: Another corruption on upgrade.
Aug 28 2023, 2:04 AM · VyOS 1.4 Sagitta
jestabro triaged T5520: Likely source of corruption on system update exposed by change in coreutils for Bookworm as High priority.
Aug 28 2023, 2:04 AM · VyOS 1.4 Sagitta
Apachez added a comment to T5511: Cleanup of unused directories (and files) in order to shrink image-size.

A note from https://forum.vyos.io/t/clear-logs-on-vyos/6878/10?u=viacheslav that there might be issues if removing directories from within / var/log/* doesnt occur to PR381 since that PR was specific about which files and directories to remove when it comes to / var/log. That is only files NOT directories were removed from / var/log.

Aug 28 2023, 1:19 AM · VyOS 1.4 Sagitta
aderouineau added a comment to T5472: NAT redirect should not require port.

Validated the change on version 1.4-rolling-202308250021.

Aug 28 2023, 12:54 AM · VyOS 1.4 Sagitta
vfreex updated the task description for T5519: Function `call` sometimes hangs.
Aug 28 2023, 12:38 AM · VyOS 1.4 Sagitta
vfreex added a comment to T5519: Function `call` sometimes hangs.

https://github.com/vyos/vyos-1x/pull/2180 implement a workaround by changing the default values of stdout and stderr from PIPE to None.

Aug 28 2023, 12:34 AM · VyOS 1.4 Sagitta
vfreex created T5519: Function `call` sometimes hangs.
Aug 28 2023, 12:31 AM · VyOS 1.4 Sagitta
vfreex changed Is it a breaking change? from none to compatible on T5518: Add MLD protocol support.
Aug 28 2023, 12:12 AM · VyOS 1.4 Sagitta
vfreex added a comment to T5518: Add MLD protocol support.

https://github.com/vyos/vyos-1x/pull/2179

Aug 28 2023, 12:05 AM · VyOS 1.4 Sagitta

Aug 27 2023

vfreex created T5518: Add MLD protocol support.
Aug 27 2023, 11:54 PM · VyOS 1.4 Sagitta
sarthurdev closed T1097: Make firewall groups work everywhere that's appropropriate, a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
Aug 27 2023, 7:19 PM · VyOS 1.4 Sagitta (1.4.0-epa2)
sarthurdev closed T1097: Make firewall groups work everywhere that's appropropriate as Resolved.
Aug 27 2023, 7:19 PM · VyOS 1.4 Sagitta
sarthurdev closed T4759: domain-group on policy route not working as Resolved.
Aug 27 2023, 7:13 PM · VyOS 1.4 Sagitta
Apachez added a comment to T5499: initial arm64 support for RPI4 and QEMU VM.

A baseline could be to look at the linux kernel config used by Alpine Linux for their RPI-builds:

Aug 27 2023, 5:03 PM
tjjh89017 added a comment to T5499: initial arm64 support for RPI4 and QEMU VM.

@sdev I saw c-po revert the merge.
and I didn't expect that it will cost lots of time also.
It's better to revert it.
Currently, I will maintain kernel configs in my own branch.

Aug 27 2023, 4:41 PM
dmbaturin renamed T5512: build linux-firmware script cannot expand asterisks if firmware name is a glob string from build linux-firmware script cannot expend star sign if firmware name is a glob string to build linux-firmware script cannot expand asterisks if firmware name is a glob string.
Aug 27 2023, 4:33 PM · VyOS 1.4 Sagitta
sarthurdev added a comment to T5499: initial arm64 support for RPI4 and QEMU VM.

@tjjh89017 This will need to be re-evaluated. The build from your PR was taking in excess of 8 hours on the build server - the defconfig likely needs to be brought down to only the minimum required modules/drivers for successful builds on target devices.

Aug 27 2023, 4:23 PM
Apachez reopened T5495: Enable snmp module also for frr/ldpd as "Open".

Just a comment:

Aug 27 2023, 3:47 PM · VyOS 1.4 Sagitta
tjjh89017 added a comment to T5512: build linux-firmware script cannot expand asterisks if firmware name is a glob string.

It should be fixed via https://github.com/vyos/vyos-build/pull/382

Aug 27 2023, 1:44 PM · VyOS 1.4 Sagitta
jestabro reopened T3275: Disable conntrack helpers by default as "Open".

Reopen to investigate, as unresolved ... cf. T5515, T3821

Aug 27 2023, 1:29 PM · VyOS 1.5 Circinus
dutty created T5517: Equuleus ISO build fails.
Aug 27 2023, 11:55 AM · VyOS 1.3 Equuleus
sarthurdev added a comment to T3275: Disable conntrack helpers by default.

This does still need to be addressed in 1.4. Without a version string, the 2-to-3 migrator is adding the conntrack helpers to the default config.

Aug 27 2023, 10:58 AM · VyOS 1.5 Circinus
sarthurdev closed T5515: Conntrack helpers should be disabled by default as Invalid.

Duplicate T3275

Aug 27 2023, 10:56 AM · VyOS 1.4 Sagitta
sarthurdev committed rVYOSONEX6b5d3568b88f: firewall: T5080: Disable conntrack unless required by rules.
Aug 27 2023, 10:33 AM
GitHub <[email protected]> committed rVYOSONEXd3edda22573f: Merge pull request #2176 from sarthurdev/T5080 (authored by c-po).
Aug 27 2023, 10:33 AM
sarthurdev committed rVYOSONEX0d413f5c5516: github: Labeler needs to run on `pull_request_target`.
Aug 27 2023, 10:32 AM
GitHub <[email protected]> committed rVYOSONEX904cbe448c57: Merge pull request #2178 from sarthurdev/labels (authored by c-po).
Aug 27 2023, 10:32 AM
Viacheslav closed T5495: Enable snmp module also for frr/ldpd as Invalid.
Aug 27 2023, 10:27 AM · VyOS 1.4 Sagitta
sarthurdev committed rVYOSONEX8b62065eaa59: github: Set permissions for label workflow.
Aug 27 2023, 10:14 AM
GitHub <[email protected]> committed rVYOSONEX63012d655fbe: Merge pull request #2175 from sarthurdev/labels (authored by c-po).
Aug 27 2023, 10:14 AM
sarthurdev added a comment to T5479: Helper leftovers found in nftables (firewall) even with all helpers disabled.

The kernel modules handle tracking of those, rpc/tns are userspace helpers.

Aug 27 2023, 10:14 AM · VyOS 1.4 Sagitta
Apachez added a comment to T5479: Helper leftovers found in nftables (firewall) even with all helpers disabled.

So how are all the other helpers added to the ruleset if not dynamically?

Aug 27 2023, 10:12 AM · VyOS 1.4 Sagitta
Apachez created T5516: Add missing conntrack helpers which are available in kernel and userspace conntrackd.
Aug 27 2023, 10:00 AM · VyOS Rolling
Apachez created T5515: Conntrack helpers should be disabled by default.
Aug 27 2023, 9:44 AM · VyOS 1.4 Sagitta
Apachez created T5514: Improve error handling when/if config.boot is deleted or missing .
Aug 27 2023, 9:40 AM · VyOS 1.4 Sagitta (1.4.1)
sarthurdev added a comment to T5479: Helper leftovers found in nftables (firewall) even with all helpers disabled.

They are only defined. Only when the VYOS_CT_HELPER chain is reached will they take effect - see links in my above comment. Being in the default config will have no effect on connection tracking if bypassed by the notrack rule.

Aug 27 2023, 8:48 AM · VyOS 1.4 Sagitta
Apachez reopened T5479: Helper leftovers found in nftables (firewall) even with all helpers disabled as "Open".

Then how come these helpers are always enabled as pointed out at https://vyos.dev/T5080#149232 ?

Aug 27 2023, 8:38 AM · VyOS 1.4 Sagitta
Apachez added a comment to T5080: Disable conntrack by default.

How come these helpers (pointed out by @saintclairpcarvalho but also )https://vyos.dev/T5479) are always enabled?

Aug 27 2023, 8:31 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev changed the status of T5080: Disable conntrack by default, a subtask of T5160: Firewall refactor, from In progress to Needs testing.
Aug 27 2023, 8:22 AM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5080: Disable conntrack by default from In progress to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/2176

Aug 27 2023, 8:22 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
sarthurdev closed T5479: Helper leftovers found in nftables (firewall) even with all helpers disabled as Invalid.

They are created but unused by default (see VYOS_CT_HELPER chain)

Aug 27 2023, 8:14 AM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5511: Cleanup of unused directories (and files) in order to shrink image-size from Open to Needs testing.
Aug 27 2023, 8:07 AM · VyOS 1.4 Sagitta
sarthurdev committed rVYOSONEX0e1ec63e513a: qos: T5018: Fix dependents only being set for QoS interfaces.
Aug 27 2023, 5:05 AM
GitHub <[email protected]> committed rVYOSONEXf7b7c6df9822: Merge pull request #2174 from sarthurdev/T5018_fix (authored by c-po).
Aug 27 2023, 5:05 AM
Apachez added a comment to T5160: Firewall refactor.

Found some anomalies regarding show firewall command (I assume related to the refactoring) which I have reported in https://vyos.dev/T5513

Aug 27 2023, 1:05 AM · VyOS 1.4 Sagitta
Apachez created T5513: Anomalies in show firewall command after refactoring.
Aug 27 2023, 1:03 AM · VyOS 1.4 Sagitta
sarthurdev changed the status of T5018: Redirect to IFB removed after change in qos policy from Confirmed to Needs testing.

Thanks for following up on this issue @rayzilt

Aug 27 2023, 12:13 AM · VyOS 1.4 Sagitta
syncer moved T4869: A network with `/32` or `/128` mask cannot be removed from a network-group from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.4) board.
Aug 27 2023, 12:12 AM · VyOS 1.3 Equuleus (1.3.4)
syncer edited projects for T4869: A network with `/32` or `/128` mask cannot be removed from a network-group, added: VyOS 1.3 Equuleus (1.3.4); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:12 AM · VyOS 1.3 Equuleus (1.3.4)
syncer edited projects for T4745: CLI TAB issue with values with '-' at the beginning in conf mode, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
syncer edited projects for T4774: Disallow duplicate pubkey on peers of a wireguard interface, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
syncer edited projects for T4692: Docker Builds of Equuleus Fail - public_suffix requires Ruby version >= 2.6, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM
syncer edited projects for T4769: Conntrack settings are not apply properly, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS Rolling, Restricted Project
syncer edited projects for T4776: NVME storage is not detected properly during installation, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta
syncer edited projects for T4811: Webproxy bypassing CLI whitelist command is missing, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS 1.4 Sagitta (1.4.0-epa3), VyOS 1.5 Circinus
syncer edited projects for T4840: Backend qmicli commands fail, when ModemManager is starting the cellular service, need to use qmi-proxy., added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS Rolling, Restricted Project
syncer edited projects for T4874: Add Warning message to Equuleus, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS 1.3 Equuleus (1.3.4)
syncer edited projects for T4855: Trying to create more than one tunnel of the same type to the same address causes unhandled exception, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS 1.3 Equuleus (1.3.4)
syncer edited projects for T4972: Support FQDN and IPv6 addresses for RADIUS servers in accel-ppp-backed protocols, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS Rolling
syncer edited projects for T4894: Using the same name for address and network group yields in ipset error, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS 1.4 Sagitta
syncer edited projects for T4895: Tag nodes are overwritten when configured by Cloud-Init from User-Data, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
syncer edited projects for T4976: Unable to form bond with Broadcom Inc. BCM57454 NetXtrem-E, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Aug 27 2023, 12:10 AM · VyOS 1.4 Sagitta (1.4.0), Restricted Project