Page MenuHomeVyOS Platform
Feed All Stories

Mar 18 2024

Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX39e1f75e1ea3: show log: T6127 - Fixed egrep regex (authored by L0crian).
Mar 18 2024, 7:51 PM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXaf50dc6eac5f: show log: T6127 - Fixed egrep regex (authored by L0crian).
Mar 18 2024, 7:51 PM
L0crian committed rVYOSONEX1f3df2d63561: show log: T6127 - Fixed egrep regex.
Mar 18 2024, 7:50 PM
L0crian committed rVYOSONEX326db209ab5c: show log: T6127 - Fixed egrep regex.
Mar 18 2024, 7:50 PM
L0crian committed rVYOSONEXd1fb9eddd901: show log: T6127 - Fixed egrep regex for IPv6.
Mar 18 2024, 7:50 PM
GitHub <noreply@github.com> committed rVYOSONEX4912dfbfa5ef: Merge pull request #3145 from l0crian1/fix-fw-rule-logging (authored by c-po).
Mar 18 2024, 7:50 PM
c-po added a project to T6127: Ability to view logs for rules with Offload not functional: VyOS 1.5 Circinus.
Mar 18 2024, 7:50 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXd24b35b39560: op-mode: T6133: add support to manually trigger commit-archive update (authored by c-po).
Mar 18 2024, 7:48 PM
penetal added a comment to T6135: HTTPS API endpoint to check if an empty config exists.

👍
Thanks

Mar 18 2024, 7:45 PM · VyOS 1.5 Circinus
jestabro added a comment to T6135: HTTPS API endpoint to check if an empty config exists.

Fix to docs pending:
https://github.com/vyos/vyos-documentation/pull/1331

Mar 18 2024, 7:21 PM · VyOS 1.5 Circinus
jestabro added a comment to T6135: HTTPS API endpoint to check if an empty config exists.

Well that is a fault of the docs; I will add now. Thanks !

Mar 18 2024, 6:10 PM · VyOS 1.5 Circinus
penetal closed T6135: HTTPS API endpoint to check if an empty config exists as Not Applicable.

@jestabro this is perfect, I am so sorry for creating a false feature request. The doc does not mention it, I should have looked into the server code to check first. My bad, all good now.

Mar 18 2024, 6:09 PM · VyOS 1.5 Circinus
jestabro added a comment to T6135: HTTPS API endpoint to check if an empty config exists.
curl -k -X POST -Fkey=baz -Fdata='{"op": "exists", "path": ["service","no","such","subpath"]}' https://192.168.122.238/retrieve|jq 
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   340  100    47  100   293    547   3414 --:--:-- --:--:-- --:--:--  4000
{
  "success": true,
  "data": false,
  "error": null
}
Mar 18 2024, 6:09 PM · VyOS 1.5 Circinus
jestabro claimed T6135: HTTPS API endpoint to check if an empty config exists.
Mar 18 2024, 6:02 PM · VyOS 1.5 Circinus
jestabro added a comment to T6135: HTTPS API endpoint to check if an empty config exists.

@penetal does the operation 'exists' not suffice for your needs ?

Mar 18 2024, 6:02 PM · VyOS 1.5 Circinus
GitHub <noreply@github.com> committed rVYOSONEX20e08490e0a2: Merge pull request #3144 from vyos/mergify/bp/sagitta/pr-3132 (authored by dmbaturin).
Mar 18 2024, 5:55 PM
n.fort committed rVYOSONEXe2df1f492977: T6136: add error checks when using dynamic firewall groups.
Mar 18 2024, 5:55 PM
GitHub <noreply@github.com> committed rVYOSONEX8c52e7334ef5: Merge pull request #3146 from nicolas-fort/T6136 (authored by dmbaturin).
Mar 18 2024, 5:55 PM
Viacheslav added a comment to T6126: Unable to add image.

It looks like the local broken build.
At least it is not reproducible.
You can try to set it on some test VM to be sure if is it an issue with the node or the image itself.

Mar 18 2024, 5:15 PM · VyOS 1.4 Sagitta
anonuser445y6 added a comment to T6126: Unable to add image.

Can you try the same link as in my example and provide the full output?

Mar 18 2024, 4:37 PM · VyOS 1.4 Sagitta
n.fort changed the status of T6136: Configuring a dynamic address group, config script did not check whether the group was created from Confirmed to In progress.
Mar 18 2024, 3:01 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6136: Configuring a dynamic address group, config script did not check whether the group was created.

And a simple note for your usage @wenzk
Change
set firewall ipv4 name WAN_IN rule 30 icmp
to this:
set firewall ipv4 name WAN_IN rule 30 protocol icmp

Mar 18 2024, 3:00 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6136: Configuring a dynamic address group, config script did not check whether the group was created.

PR: https://github.com/vyos/vyos-1x/pull/3146

Mar 18 2024, 2:57 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
L0crian added a comment to T6127: Ability to view logs for rules with Offload not functional.

@Viacheslav I'm not super familiar with git, so hopefully I did everything correctly. Here is the PR:
https://github.com/vyos/vyos-1x/pull/3145

Mar 18 2024, 2:41 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
L0crian claimed T6127: Ability to view logs for rules with Offload not functional.
Mar 18 2024, 2:38 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po committed rVYOSONEX09de453194e9: op-mode: T6133: add support to manually trigger commit-archive update.
Mar 18 2024, 10:59 AM
GitHub <noreply@github.com> committed rVYOSONEX12b9c577330c: Merge pull request #3143 from c-po/force-commit-archive (authored by Viacheslav).
Mar 18 2024, 10:59 AM
Viacheslav added a comment to T6126: Unable to add image.

Can you try the same link as in my example and provide the full output?

Mar 18 2024, 10:36 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T6121: Extend service config-sync for sections vpn, policy, vrf from Open to Needs testing.
Mar 18 2024, 10:22 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX84314fc310eb: T6121: Extend service config-sync to new sections (authored by Viacheslav).
Mar 18 2024, 10:22 AM
anonuser445y6 added a comment to T6126: Unable to add image.

Could you show show version?

Mar 18 2024, 10:11 AM · VyOS 1.4 Sagitta
n.fort claimed T6136: Configuring a dynamic address group, config script did not check whether the group was created.
Mar 18 2024, 10:03 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
a.apostoliuk changed the status of T6130: [1.3.6->1.4.0-epa2 Migration] BGP "set community" missing, a subtask of T5938: Migration fail root task for 1.4-rc, from Open to In progress.
Mar 18 2024, 9:40 AM · VyOS Rolling, Bugs
a.apostoliuk changed the status of T6130: [1.3.6->1.4.0-epa2 Migration] BGP "set community" missing from Open to In progress.
Mar 18 2024, 9:40 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav changed the status of T6126: Unable to add image from Open to Needs reporter action.

Could you show show version?

Mar 18 2024, 9:38 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T6126: Unable to add image.

Never had this bug with 1.4.0-epa.

vyos@r1-right:~$ show ver
Version:          VyOS 1.4.0-epa1
Release train:    sagitta
Mar 18 2024, 9:36 AM · VyOS 1.4 Sagitta
Viacheslav triaged T6127: Ability to view logs for rules with Offload not functional as High priority.
Mar 18 2024, 9:27 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav added a comment to T6127: Ability to view logs for rules with Offload not functional.

@L0crian could you add the PR? https://github.com/vyos/vyos-1x/blob/987b7e599fda2c468773cf31d92d976cd96c3e41/op-mode-definitions/show-log.xml.in#L222

Mar 18 2024, 9:27 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6128: minisign.pub is wrong on https://vyos.net/get/nightly-builds/ as Normal priority.
Mar 18 2024, 9:22 AM · VyOS 1.5 Circinus
Viacheslav added a subtask for T5938: Migration fail root task for 1.4-rc: T6130: [1.3.6->1.4.0-epa2 Migration] BGP "set community" missing.
Mar 18 2024, 9:18 AM · VyOS Rolling, Bugs
Viacheslav added a parent task for T6130: [1.3.6->1.4.0-epa2 Migration] BGP "set community" missing: T5938: Migration fail root task for 1.4-rc.
Mar 18 2024, 9:18 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6130: [1.3.6->1.4.0-epa2 Migration] BGP "set community" missing as High priority.
Mar 18 2024, 9:18 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6133: Add domain-name to commit-archive as Normal priority.
Mar 18 2024, 9:14 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav closed T3522: policy based routing not working, a subtask of T3505: Commits do not respect changes in FRR that are not stored in a config, as Not Applicable.
Mar 18 2024, 9:13 AM · VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav closed T3522: policy based routing not working as Not Applicable.

@matthewr Thanks for confirming!
Closing it as resolved now. Feel free to reopen or create a new one if this bug remains again.

Mar 18 2024, 9:13 AM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project
Viacheslav triaged T6135: HTTPS API endpoint to check if an empty config exists as Normal priority.
Mar 18 2024, 9:10 AM · VyOS 1.5 Circinus
Viacheslav triaged T6131: Disabling openvpn interface(s) causes OSPF to fail to load on reboot as High priority.
Mar 18 2024, 9:07 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav changed the status of T6136: Configuring a dynamic address group, config script did not check whether the group was created from Open to Confirmed.
Mar 18 2024, 9:06 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
Viacheslav triaged T6137: dhcp files and directory permission not correct after image uprgading as Normal priority.
Mar 18 2024, 9:04 AM · VyOS 1.5 Circinus
opswill created T6137: dhcp files and directory permission not correct after image uprgading .
Mar 18 2024, 4:38 AM · VyOS 1.5 Circinus
wenzk created T6136: Configuring a dynamic address group, config script did not check whether the group was created.
Mar 18 2024, 1:23 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 17 2024

GitHub <noreply@github.com> committed rVYOSONEX42f3b83dd898: Merge pull request #3142 from vyos/mergify/bp/sagitta/pr-3139 (authored by c-po).
Mar 17 2024, 8:46 PM
GitHub <noreply@github.com> committed rVYOSONEX2942040d8099: Merge pull request #3141 from vyos/mergify/bp/sagitta/pr-3140 (authored by c-po).
Mar 17 2024, 8:45 PM
c-po claimed T6131: Disabling openvpn interface(s) causes OSPF to fail to load on reboot.
Mar 17 2024, 6:12 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
trae32566 added a comment to T6132: Conntrack-sync Internal Cache Growing Uncontrollably.

Here's the generated configuration from /run/conntrackd/conntrackd.conf:

# Synchronizer settings
Sync {
    Mode FTFW {
        DisableExternalCache on
    }
    Multicast {
        IPv4_address 225.0.0.50
        Group 3780
        IPv4_interface 192.168.15.3
        Interface bond0.110
        SndSocketBuffer 104857600
        RcvSocketBuffer 104857600
        Checksum on
    }
}
Helper {
    Type rpc inet tcp {
        QueueNum 3
        Policy rpc {
            ExpectMax 1
            ExpectTimeout 300
        }
    }
    Type rpc inet udp {
        QueueNum 4
        Policy rpc {
            ExpectMax 1
            ExpectTimeout 300
        }
    }
    Type tns inet tcp {
        QueueNum 5
        Policy tns {
            ExpectMax 1
            ExpectTimeout 300
        }
    }
}
Mar 17 2024, 5:41 PM · VyOS Rolling, Bugs
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXc54b1fd63d5a: policy: T6129: add route-map option "as-path exclude all" (authored by c-po).
Mar 17 2024, 5:19 PM
GitHub <noreply@github.com> committed rVYOSONEX987b7e599fda: Merge pull request #3139 from c-po/as-path-T6129 (authored by c-po).
Mar 17 2024, 5:17 PM
c-po committed rVYOSONEX16395c902ff7: policy: T6129: add route-map option "as-path exclude all".
Mar 17 2024, 5:17 PM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX443c9018a55e: T6133: append domain-name to commit-archive if defined (authored by c-po).
Mar 17 2024, 5:12 PM
c-po committed rVYOSONEX4291a1a423c3: T6133: append domain-name to commit-archive if defined.
Mar 17 2024, 5:11 PM
GitHub <noreply@github.com> committed rVYOSONEX2bf1aeb17f83: Merge pull request #3140 from c-po/config-mgmt-T6133 (authored by c-po).
Mar 17 2024, 5:11 PM
penetal updated the task description for T6135: HTTPS API endpoint to check if an empty config exists.
Mar 17 2024, 4:32 PM · VyOS 1.5 Circinus
penetal created T6135: HTTPS API endpoint to check if an empty config exists.
Mar 17 2024, 4:31 PM · VyOS 1.5 Circinus
robertoberto closed T6134: AttributeError in vyos_unattended_installer.py When Installing GRUB Configuration as Resolved.
Mar 17 2024, 3:58 PM · Unknown Object (Project)
robertoberto added a comment to T6134: AttributeError in vyos_unattended_installer.py When Installing GRUB Configuration.

Fixed in https://github.com/vyos/vyos-1x/commit/84b520dd580b7725de4c9e62b11ec490cb8d3f4f. The 1.4.0-epa2 build was created before the patch was applied.

Mar 17 2024, 3:58 PM · Unknown Object (Project)
matthewr added a comment to T3522: policy based routing not working.

Just in case it helps, after a migration from 1.3 to 1.4.0-epa2, the migrated config ends up as:-

Mar 17 2024, 3:34 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project
robertoberto created T6134: AttributeError in vyos_unattended_installer.py When Installing GRUB Configuration.
Mar 17 2024, 3:17 PM · Unknown Object (Project)
c-po updated the task description for T6133: Add domain-name to commit-archive.
Mar 17 2024, 1:47 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po added a comment to T6133: Add domain-name to commit-archive.

https://github.com/vyos/vyos-1x/pull/3140

Mar 17 2024, 1:47 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po changed the status of T6133: Add domain-name to commit-archive, a subtask of T4942: Rewrite vyatta-config-mgmt to Python/XML, from Open to In progress.
Mar 17 2024, 1:42 PM · VyOS 1.4 Sagitta
c-po changed the status of T6133: Add domain-name to commit-archive from Open to In progress.
Mar 17 2024, 1:42 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po created T6133: Add domain-name to commit-archive.
Mar 17 2024, 1:42 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
trae32566 triaged T6132: Conntrack-sync Internal Cache Growing Uncontrollably as High priority.
Mar 17 2024, 12:35 PM · VyOS Rolling, Bugs
matthewr added a comment to T6076: [1.3.3->1.4.0-epa1 Migration] Most of config missing.

See T6131 for a report of the VTUN/OSPF issue with a simple lab config, which occurs separately from a migration.

Mar 17 2024, 10:26 AM · Bugs, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
matthewr created T6131: Disabling openvpn interface(s) causes OSPF to fail to load on reboot.
Mar 17 2024, 10:22 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
matthewr created T6130: [1.3.6->1.4.0-epa2 Migration] BGP "set community" missing.
Mar 17 2024, 9:48 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po added a comment to T6129: bgp: add route-map option "as-path exclude all".

https://github.com/vyos/vyos-1x/pull/3139

Mar 17 2024, 7:44 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po updated the task description for T6129: bgp: add route-map option "as-path exclude all".
Mar 17 2024, 7:42 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po changed the status of T6129: bgp: add route-map option "as-path exclude all" from Open to In progress.
Mar 17 2024, 7:40 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po changed the status of T6129: bgp: add route-map option "as-path exclude all", a subtask of T5788: frr: update to 9.1 release, from Open to In progress.
Mar 17 2024, 7:40 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po created T6129: bgp: add route-map option "as-path exclude all".
Mar 17 2024, 7:40 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Mar 16 2024

dmbaturin added a comment to T6128: minisign.pub is wrong on https://vyos.net/get/nightly-builds/.

We'll update the key and make a post about it soon, sorry for the lengthy mix-up.

Mar 16 2024, 8:30 PM · VyOS 1.5 Circinus
robertoberto added a comment to T6128: minisign.pub is wrong on https://vyos.net/get/nightly-builds/.

comments above are for https://vyos.net/get/nightly-builds/

Mar 16 2024, 5:51 PM · VyOS 1.5 Circinus
robertoberto created T6128: minisign.pub is wrong on https://vyos.net/get/nightly-builds/.
Mar 16 2024, 5:34 PM · VyOS 1.5 Circinus
penetal added a comment to T5083: extend interface schema to include which parameters are required.

Bumped into another instance of this issue:

curl -k --location --request POST "https://$VYOS_HOST/configure" --form key="$VYOS_KEY" --form data='[{"op":"set","path":["policy", "access-list", "2", "rule", "5", "description", "2024-03-16T14:52:44Z"]}]'
{"success": false, "error": "[[policy]] failed\nCommit failed\n", "data": null}
Mar 16 2024, 2:59 PM · VyOS Rolling
c-po moved T4022: Add package nat-rtsp-dkms from Open to Finished on the VyOS 1.5 Circinus board.
Mar 16 2024, 11:33 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
GitHub <noreply@github.com> committed rVYOSONEX5daebff4a5cc: Merge pull request #3112 from Ingramz/add-rtsp-2 (authored by c-po).
Mar 16 2024, 11:33 AM
Indrek Ardel <indrek@ardel.eu> committed rVYOSONEX3e1e2a3e7b6f: conntrack: T4022: add RTSP conntrack helper.
Mar 16 2024, 11:33 AM
c-po added a project to T4022: Add package nat-rtsp-dkms: VyOS 1.4 Sagitta (1.4.0).
Mar 16 2024, 11:33 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus
GitHub <noreply@github.com> committed rVYOSONEXd18d773238ef: Merge pull request #3138 from vyos/mergify/bp/sagitta/pr-3137 (authored by dmbaturin).
Mar 16 2024, 11:22 AM
penetal added a comment to T6069: HTTP API segfault during concurrent configuration requests.

@jestabro I have tested my usecase now and it seems the problem is fixed and the API no longer segfaults. Thank you so much for the fix and the fantastic turn around on this.

Mar 16 2024, 9:11 AM · VyOS 1.4 Sagitta (1.4.0-epa2), VyOS 1.5 Circinus
Viacheslav committed rVYOSONEX25b611f50452: T6121: Extend service config-sync to new sections.
Mar 16 2024, 8:47 AM
GitHub <noreply@github.com> committed rVYOSONEXaea9bfb803c8: Merge pull request #3132 from sever-sever/T6121 (authored by c-po).
Mar 16 2024, 8:47 AM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX4413e5b633c6: T6090: fix policy route migration script. Ensure that tcp flags migration… (authored by n.fort).
Mar 16 2024, 8:47 AM
n.fort committed rVYOSONEX1048f49e403d: T6090: fix policy route migration script. Ensure that tcp flags migration….
Mar 16 2024, 8:46 AM
GitHub <noreply@github.com> committed rVYOSONEX828e94d7cb67: Merge pull request #3137 from nicolas-fort/T6090-policy (authored by c-po).
Mar 16 2024, 8:46 AM

Mar 15 2024

L0crian added a comment to T6127: Ability to view logs for rules with Offload not functional.

Should add the ability to view the default action log would be nice as well.

Mar 15 2024, 10:33 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
L0crian renamed T6127: Ability to view logs for rules with Offload not functional from Ability to view logs for rules with Offload not available to Ability to view logs for rules with Offload not functional.
Mar 15 2024, 10:09 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
L0crian created T6127: Ability to view logs for rules with Offload not functional.
Mar 15 2024, 10:06 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
n.fort added a comment to T6090: Migration of "policy route" configs fails due to TCP flag case sensitivity.

PR for 1.5: https://github.com/vyos/vyos-1x/pull/3137

Mar 15 2024, 9:45 PM · VyOS 1.4 Sagitta (1.4.0-epa3)