- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Sep 9 2023
PR for 1.3.x https://github.com/vyos/vyos-1x/pull/2225
Sep 8 2023
Cherry-pick to 1.4 https://github.com/vyos/vyos-1x/pull/2226
PR for 1.4 https://github.com/vyos/vyos-1x/pull/2224
Sep 7 2023
For 1.4 add session [default=ignore success=2] pam_succeed_if.so service = sudo to /etc/pam.d/common-session-noninteractive fixes the issue
# here are the per-package modules (the "Primary" block) session [default=1] pam_permit.so # here's the fallback if no module succeeds session requisite pam_deny.so # prime the stack with a positive return value if there isn't one already; # this avoids us returning an error just because nothing sets a success code # since the modules above will each just jump around session required pam_permit.so # and here are more per-package modules (the "Additional" block) session required pam_mkhomedir.so umask=0022 skel=/etc/skel session [default=ignore success=2] pam_succeed_if.so service = sudo session [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet session [authinfo_unavail=ignore success=ok default=ignore] pam_radius_auth.so session required pam_unix.so # end of pam-auth-update config
Sep 6 2023
I have two scripts
Is it ok?
vyos@r14:~$ sudo ls -la /config/scripts/vyos-postconfig-boot* -rwxrwxr-x 1 root vyattacfg 413 Sep 6 15:04 /config/scripts/vyos-postconfig-boot.script -rwxrwxr-x 1 root vyattacfg 230 Jun 27 06:17 /config/scripts/vyos-postconfig-bootup.script vyos@r14:~$
@Niklasthegeek Could you re-check and close it if it was fixed?
@
Related task T2133
I guess we should drop this option ipv6 disable-forwarding
Sep 5 2023
In T5521#158836, @c-po wrote:Please re-test with latest rolling-release if the issue persists.
Cannot pass smoketest for virtual-server which also uses vrrp
@dmbaturin Can we close it?
@mhamzahkhan Will be fixed in the next rolling release, could you re-check it?
In T2444#158779, @Apachez wrote:If the FRR/vrrpd is good enough then the main benefit is that the FRR/vrrpd is already included so no need to also include and use keepalived (unnecessary files and binaries and dependencies).
Things to verify however before a switch is performed (and keepalived is thrown out) is support for vrf/namespaces, various interface and other tracking and multicast vs unicast (it seems that keepalived supports them all - dunno about FRR/vrrpd).
To check if it works just use ss -tin, for example:
vyos@r14:~$ ss -tin State Recv-Q Send-Q Local Address:Port Peer Address:Port Process ESTAB 0 0 192.168.122.14:22 192.168.122.1:45446 bbr wscale:7,7 rto:201 rtt:0.103/0.048 ato:40 mss:1448 pmtu:1500 rcvmss:1448 advmss:1448 cwnd:140 ssthresh:138 bytes_sent:126383 bytes_acked:126383 bytes_received:20969 segs_out:2460 segs_in:2592 data_segs_out:2445 data_segs_in:341 bbr:(bw:503652048bps,mrtt:0.018,pacing_gain:1.25,cwnd_gain:2) send 15745242718bps lastsnd:3003449 lastrcv:3005252 lastack:3003448 pacing_rate 623269416bps delivery_rate 503652168bps delivered:2446 app_limited busy:2029ms rcv_space:14600 rcv_ssthresh:64076 minrtt:0.018 snd_wnd:64128 ESTAB 0 36 192.168.122.14:22 192.168.122.1:51320 bbr wscale:7,7 rto:201 rtt:0.427/0.555 ato:40 mss:1448 pmtu:1500 rcvmss:1448 advmss:1448 cwnd:148 ssthresh:136 bytes_sent:1779503 bytes_retrans:68 bytes_acked:1779399 bytes_received:167865 segs_out:12061 segs_in:12088 data_segs_out:11899 data_segs_in:3996 bbr:(bw:530564808bps,mrtt:0.068,pacing_gain:1.25,cwnd_gain:2) send 4015063232bps lastsnd:30 lastrcv:31 lastack:31 pacing_rate 525259160bps delivery_rate 458772272bps delivered:11899 app_limited busy:27667ms unacked:1 retrans:0/1 dsack_dups:1 rcv_rtt:392993 rcv_space:65229 rcv_ssthresh:84348 minrtt:0.024 snd_wnd:1344128 vyos@r14:~$
It should be disabled by default for all daemons. I guess it will be implemented in T4020
For your issue solution is set system frr snmp ldpd.
For now, commands are generated by XML to node.def
I don't see an easy way to add the alias feature. Some scripts expect the exact sequence of an argument and it could be broken with this feature.
Don't have this issue
@dcplaya Could you re-check in the newest rolling image?
Close it if this issue is solved.
Should be executed there, for future debugs https://github.com/vyos/vyatta-wanloadbalance/blob/c7708bc6ef689f5744272a15a601a56a03890afa/src/lbdecision.cc#L429
Just waiting for upstream updates
There definitely should be a second, i.e., max value 3600 seconds.
PR for 1.3.4 https://github.com/vyos/vyos-build/pull/393
Sep 4 2023
@syncer At first glance, the generated config is correct for VyOS 1.3-stable-202308240442
set protocols igmp interface eth0 join 239.1.2.3 source '192.0.2.1' set protocols igmp interface eth1 join 239.1.2.3 set protocols igmp interface eth2