In T5932#172324, @marc_s wrote:I take it RC2 will contain these new versions @Viacheslav?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jan 14 2024
Jan 14 2024
Viacheslav added a comment to T5932: 1.4-rolling-202304120317 to 1.4.0-rc1: dynamic dns migration fail.
Do static addresses/gateways work stable enough?
Always use "set commands" to make it easier for developers to reproduce it.
Viacheslav added a parent task for T4281: System users migration can lead to inaccessible shell: T5938: Migration fail root task for 1.4-rc.
Viacheslav triaged T5932: 1.4-rolling-202304120317 to 1.4.0-rc1: dynamic dns migration fail as Normal priority.
Viacheslav triaged T5936: [1.3.5 -> 1.4.0-RC1 Migration] OSPF Passive Interface Configuration Not Working Correctly as High priority.
Viacheslav added a comment to T5935: ddclient tries to bind to Ethernet VIFs before they're configured on boot.
@MattK provide a simple example of "set" commands to reproduce
Jan 12 2024
Jan 12 2024
Viacheslav moved T5925: Containers change systemd KillMode from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T5925: Containers change systemd KillMode from Open to In progress.
Viacheslav changed the status of T5931: Add option to append route-target when adding additional imports from Open to Confirmed.
Viacheslav added a comment to T5931: Add option to append route-target when adding additional imports.
We don't need append
We should use leafNode type /multi for example https://github.com/vyos/vyos-1x/blob/4c29922cc0baa9c127391b58e82b76f69e1e2dce/interface-definitions/include/bgp/afi-l2vpn-common.xml.i#L43
Viacheslav added a comment to T3429: Hyper-V integration services not working on VyOS 1.4 (sagitta/current).
@fdcastel Thanks for confirming
Viacheslav moved T3429: Hyper-V integration services not working on VyOS 1.4 (sagitta/current) from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav triaged T5928: Configuration fails to load on boot if offloading has VLAN interfaces defined as High priority.
It is still a bug and was reproduced in T5926
Deleting was described there T3843 and seems steel relevant
Viacheslav triaged T5927: QoS policy shaper-hfsc class does not have a `bandwidth` node but requires one in the check as High priority.
Viacheslav renamed T5925: Containers change systemd KillMode from Containers chaange systemd KillMode to Containers change systemd KillMode.
Viacheslav triaged T5924: Build cannot pass the smoketest dialup-router-medium-vpn as High priority.
Jan 11 2024
Jan 11 2024
I expected the load the image in the background (during the commit), without op-mode.
That's why it was initially opened.
But we must use the load images from op-mode first because otherwise, we have some bugs.
@troggie Add please an example of working config accel-pp.conf wit those options
Otherwise, I'll mark it as wontfix.
Thanks.
Not reproduced
Re-open it with all steps to reproduce, including scripts that generate your config.
The Load is used anywhere and never has issues like this.
Close it for now.
Viacheslav updated subscribers of T4627: Ability to set host part IPv6 address via interface IP token.
Jan 10 2024
Jan 10 2024
Done
vyos@r4# set high-availability virtual-server serv1 forward-method Possible completions: direct Direct routing nat NAT (default) tunnel Tunneling
Viacheslav changed the status of T3011: router becomes unreachable for few minutes when vti interfaces goes down from Unknown Status to Resolved.
Viacheslav closed T3011: router becomes unreachable for few minutes when vti interfaces goes down as Unknown Status.
Well-known behavior when you use VTI interfaces you have to use set vpn ipsec options disable-route-autoinstall otherwise you can get any unexpected things.
@jack9603301 Feel free to create a PR as do usually do for documentation, the Task is not required.
For example https://github.com/vyos/vyos-documentation/pull/1229
Jan 10 2024, 9:08 PM · Restricted Project
Viacheslav closed T3499: Podman is not compatible with nat rules, a subtask of T2216: Containerized third-party applications for VyOS, as Resolved.
We use the netavark plugin for the containers, which fixes this.
set container name alp01 image 'alpine' set container name alp01 network NET01 set container network NET01 prefix '100.64.0.0/24'
Viacheslav closed T3430: Cloud-init failing with “Unable to render networking” on VyOS 1.3 as Resolved.
@fernando Thanks!
Viacheslav moved T5918: Verification problem for `set vpn ipsec interface` from Open to Finished on the VyOS 1.4 Sagitta board.
The kernel is not supporting pseudowire/VPLS now
this patch was never merged into the kernel
Viacheslav changed the status of T3429: Hyper-V integration services not working on VyOS 1.4 (sagitta/current) from Open to Needs testing.
Viacheslav changed the status of T5918: Verification problem for `set vpn ipsec interface` from Open to In progress.
Another bug it that /config/upnp.leases is hardcoded, but there is no script who creates it https://github.com/vyos/vyos-1x/blob/aebb458262072457c6a3840d1b17031fbd780eca/data/templates/firewall/upnpd.conf.j2#L128
Viacheslav moved T5916: Added segment routing check for index size and SRGB size from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav added a project to T5916: Added segment routing check for index size and SRGB size : VyOS 1.5 Circinus.
Will it work if you manually download the functions? https://github.com/miniupnp/miniupnp/blob/miniupnpd_2_3_1/miniupnpd/netfilter_nft/scripts/miniupnpd_functions.sh
@sempervictus Thanks for the update!
What to do with atop and logrorate?
Viacheslav changed the status of T190: two factor authentication for OpenVPN remote VPN tunnels from Open to Needs testing.
It seems we already have mfa T3834 but it never was documented
https://github.com/vyos/vyos-1x/pull/1008
vyos@r4# set interfaces openvpn vtun0 server mfa totp
Possible completions:
challenge Expect password as result of a challenge response protocol
(default: enable)
digits Number of digits to use for totp hash (default: 6)
drift Time drift in seconds (default: 0)
slop Maximum allowed clock slop in seconds (default: 180)
step Step value for totp in seconds (default: 30)@xrobau Could you test it?
Dec 9 13:04:57 vyos charon: 07[IKE] no matching CHILD_SA config found
Do you have several connections from the hosts behind the same NAT external address to the same hub?
It worked in my previous tests, but it was just one host behind NAT to connect to the HUB.
Re-check please and close if it works fine now. Need to update.
@amcmillen Do you have any examples of how to deploy it on Linux / Debian, etc?
Without live examples, we'll mark it as wont fix and task will be closed.
As I understand, there are now ways to implement it natively for sshd
Reopen please if you have/know a solution for it.
@ordex Les us know if you have some ideas
Thanks
Viacheslav edited projects for T190: two factor authentication for OpenVPN remote VPN tunnels, added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus (1.3.6).
Is it still bug? @sempervictus could you re-check?
We probably need more details
Viacheslav closed T4300: Extend list of supported interfaces for Cloud-init Network Configuration as Resolved.
I guess it is already done https://github.com/vyos/vyos-cloud-init/commit/ae74804ede8fb76a7f27ca869f2b880dbe276ca2
@zsdc Can we close it or you are working on it?
Jan 9 2024
Jan 9 2024
Viacheslav moved T1297: Add GARP settings to VRRP/keepalived from Backport Candidates to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T5909: Container registry with authentication prevents config load (section container) after reboot from Open to In progress.