Obviously, it does not work.
https://github.com/sever-sever/vyos-1x/tree/T5743
https://github.com/sever-sever/vyos-1x/commit/e3767cb7deb8c0e8f9be2c452a74dabb537ed89a
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 15 2023
Nov 15 2023
Viacheslav moved T5732: generate firewall rule-resequence drops geoip country-code from output from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a project to T3983: show pki certificate Doesnt show x509 certificates: VyOS 1.5 Circinus.
Viacheslav changed the status of T5726: HTTPS API image cannot be updated from Open to Needs testing.
Viacheslav changed the status of T5732: generate firewall rule-resequence drops geoip country-code from output from Open to In progress.
Viacheslav moved T5726: HTTPS API image cannot be updated from Open to Finished on the VyOS 1.5 Circinus board.
PR for 1.5
https://github.com/vyos/vyos-1x/pull/2483
Viacheslav moved T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav moved T5695: Build FRR with LUA scripts --enable-scripting option from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a project to T5695: Build FRR with LUA scripts --enable-scripting option: VyOS 1.4 Sagitta.
Viacheslav moved T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a comment to T5732: generate firewall rule-resequence drops geoip country-code from output.
@JeffWDH looks good to me. It definitely should fix this.
Nov 14 2023
Nov 14 2023
Viacheslav edited projects for T5739: Password recovery does not work if public keys are configured, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Viacheslav changed the status of T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client from In progress to Needs testing.
I wonder if we should use permanent API call queries that don't depend on the path.
Viacheslav added a comment to T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client.
@watson.ash Will be fixed in the next rolling release. Could you check it (after 2023-11-14)
And we can backport it to 1.4 if all works fine.
Thanks.
Changing this https://github.com/vyos/vyos-1x/blob/2e587c8329a1d32fc1ec601c7753211d0fedbf2c/python/vyos/remote.py#L356
to
download(local_path, urlstring, False, True, source_host, source_port)
Fixes the issue for API
Viacheslav moved T5563: container: Container environment variable cannot be set from Open to Finished on the VyOS 1.5 Circinus board.
Nov 13 2023
Nov 13 2023
Viacheslav moved T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces from Open to Finished on the VyOS 1.4 Sagitta board.
In T5167#164447, @JeffWDH wrote:What about using nginx which seems to be already leveraged by the web API?
Nov 12 2023
Nov 12 2023
Viacheslav added a project to T5735: Add CLI and configuration scripts for stunnel: VyOS 1.5 Circinus.
Viacheslav changed the status of T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client from Open to In progress.
Viacheslav updated the task description for T5734: Unhandled exception when trying to configure OpenVPN server without dh-params.
Nov 11 2023
Nov 11 2023
@twan it was backported https://github.com/vyos/vyos-1x/pull/2400
Nov 10 2023
Nov 10 2023
Viacheslav added a comment to T5708: Additional dynamic dns improvements to align with ddclient 3.11.1 release.
@indrajitr could you recheck smoketests?
DEBUG - ---------------------------------------------------------------------- DEBUG - Ran 3 tests in 7.616s DEBUG - DEBUG - OK DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py DEBUG - test_01_dyndns_service_standard (__main__.TestServiceDDNS.test_01_dyndns_service_standard) ... ok DEBUG - test_02_dyndns_service_ipv6 (__main__.TestServiceDDNS.test_02_dyndns_service_ipv6) ... ok DEBUG - test_03_dyndns_service_dual_stack (__main__.TestServiceDDNS.test_03_dyndns_service_dual_stack) ... ok DEBUG - test_04_dyndns_rfc2136 (__main__.TestServiceDDNS.test_04_dyndns_rfc2136) ... ok DEBUG - test_05_dyndns_hostname (__main__.TestServiceDDNS.test_05_dyndns_hostname) ... ok DEBUG - test_06_dyndns_web_options (__main__.TestServiceDDNS.test_06_dyndns_web_options) ... ok DEBUG - test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) ... ERROR DEBUG - test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) ... FAIL DEBUG - DEBUG - ====================================================================== DEBUG - ERROR: test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) DEBUG - ---------------------------------------------------------------------- DEBUG - Traceback (most recent call last): DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 304, in test_07_dyndns_vrf DEBUG - self.cli_set(['vrf', 'name', vrf_name, 'table', vrf_table]) DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/base_vyostest_shim.py", line 68, in cli_set DEBUG - self._session.set(config) DEBUG - File "/usr/lib/python3/dist-packages/vyos/configsession.py", line 150, in set DEBUG - self.__run_command([SET] + path + value) DEBUG - File "/usr/lib/python3/dist-packages/vyos/configsession.py", line 139, in __run_command DEBUG - raise ConfigSessionError(output) DEBUG - vyos.configsession.ConfigSessionError: Number is not in any of allowed ranges DEBUG - DEBUG - DEBUG - DEBUG - VRF routing table must be in range from 100 to 65535 DEBUG - Value validation failed DEBUG - Set failed DEBUG - DEBUG - DEBUG - ====================================================================== DEBUG - FAIL: test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) DEBUG - ---------------------------------------------------------------------- DEBUG - Traceback (most recent call last): DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 50, in tearDown DEBUG - self.assertTrue(process_running(DDCLIENT_PID)) DEBUG - AssertionError: False is not true DEBUG - DEBUG - ----------------------------------------------------------------------
Viacheslav updated the task description for T4712: Collaborative Protection Profile cPP for Network Devices root task.
Yes I mean sudo ip vrf exec FOO /usr/sbin/conntrackd -C /run/conntrackd/conntrackd.conf
PR https://github.com/vyos/vyos-1x/pull/2469
set service file-server listen-address 0.0.0.0 set service file-server port 8000 set service file-server directory '/tmp'
Nov 9 2023
Nov 9 2023
Viacheslav added a comment to T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address.
It seems to be a bug in the FRR that delete isisd configuration completely
router isis VyOS net 49.0001.1920.0200.0011.00 lsp-mtu 1460 redistribute ipv4 connected level-2 ! ! interface eth1 ip router isis VyOS ipv6 router isis VyOS ! interface tun0 ip router isis VyOS ipv6 router isis VyOS !
check
r1# conf t r1(config)# router isis VyOS r1(config-router)# net 49.0001.1920.0200.0011.00 r1(config-router)# lsp-mtu 1460 r1(config-router)# redistribute ipv4 connected level-2 r1(config-router)# ! r1(config-router)# ! r1(config-router)# interface eth1 r1(config-if)# ip router isis VyOS r1(config-if)# ipv6 router isis VyOS r1(config-if)# ! r1(config-if)# interface tun0 r1(config-if)# ip router isis VyOS vtysh: error reading from isisd: Success (0)Warning: closing connection to isisd because of an I/O error! r1(config-if)# ipv6 router isis VyOS Warning: connecting to isisd...failed! isisd is not running r1(config-if)# ! r1(config-if)# end Warning: connecting to isisd...failed! r1# r1#
Viacheslav renamed T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address from protocol IS-IS configuration is empty to protocol IS-IS configuration is empty if a tunnel does not have remote address.
Viacheslav updated the task description for T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address.
Viacheslav edited projects for T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Did you try to start this service in VRF?
Viacheslav moved T5648: ldpd neighbour template errors from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5648: ldpd neighbour template errors from Open to Finished on the VyOS 1.5 Circinus board.
Create please a PR if it works for you.
Nov 8 2023
Nov 8 2023
Viacheslav changed the status of T5715: IPSec VPN: restart vpn is not working from Open to In progress.
Viacheslav moved T5716: PPPoE-server shaper template bug down-limiter option does not rely on fwmark from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT from Open to Finished on the VyOS 1.4 Sagitta board.
set protocols static neighbor-proxy arp 192.0.2.1 interface eth1
check
vyos@r4# sudo ip nei show proxy 192.0.2.1 dev eth1 proxy [edit] vyos@r4#
Viacheslav moved T5702: Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5720: PPPoE-server adding new interface does not work from Open to Finished on the VyOS 1.4 Sagitta board.
Nov 7 2023
Nov 7 2023
Viacheslav changed the status of T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces from In progress to Needs testing.
Viacheslav added a comment to T5722: Commit failure when trying to add a route in failover if the gateway is not in the same interface network.
@giuavo I didn't test "default route", only regular routes for some prefixes, and it worked.
Could you create a PR?
Viacheslav added a project to T5720: PPPoE-server adding new interface does not work: VyOS 1.4 Sagitta.
Backport to 1.4 https://github.com/vyos/vyos-1x/pull/2449
Nov 6 2023
Nov 6 2023
Viacheslav changed the status of T5716: PPPoE-server shaper template bug down-limiter option does not rely on fwmark from Open to In progress.
Viacheslav moved T5704: PPPoE-server add max-starting option from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav edited projects for T5715: IPSec VPN: restart vpn is not working, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus (1.3.4).
Viacheslav edited projects for T5714: IPSec VPN: op-mode: "show log vpn" does not show results, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus (1.3.4).
Nov 5 2023
Nov 5 2023
Nov 4 2023
Nov 4 2023
Viacheslav changed the status of T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces from Open to In progress.
Viacheslav added a comment to T5702: Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP.
PR https://github.com/vyos/vyos-1x/pull/2434
set service snmp community public client '127.0.0.1' set service snmp mib interface-max '25' set service snmp mib interface 'eth' set service snmp mib interface 'bond'