vyos@vyos:~$ dpkg -l | grep vyos-1x
ii  vyos-1x                              1.5dev0-1669-g77cb661d8          amd64        VyOS configuration scripts and data
ii  vyos-1x-vmware                       1.5dev0-1669-g77cb661d8          amd64        VyOS configuration scripts and data for VMware
vyos@vyos:~$

Jun 10 2024, 6:35 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

drw_08 updated subscribers of T6405: Add disk_setup and mounts in vyos cloud-init config under cloud_init_modules .

Jun 10 2024, 5:57 AM · VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus

Vijayakumar added a comment to T6467: Add sagitta for vyos-1x workflows trigger branch list.

PR https://github.com/vyos/vyos-1x/pull/3615/files

Jun 10 2024, 5:14 AM · GitHub Infrastructure

GitHub <noreply@github.com> committed rVYOSONEXa8b4d4219155: T6467: add PR checks workflows for sagitta (authored by Vijayakumar A <36878324+kumvijaya@users.noreply.github.com>).

Jun 10 2024, 5:11 AM

GitHub <noreply@github.com> committed rVYOSONEX9702d66355cc: T6467: add PR checks workflows for sagitta (authored by Vijayakumar A <36878324+kumvijaya@users.noreply.github.com>).

Jun 10 2024, 5:10 AM

GitHub <noreply@github.com> committed rVYOSONEXa9347037ccfd: T6467: add PR checks workflows for sagitta (authored by Vijayakumar A <36878324+kumvijaya@users.noreply.github.com>).

Jun 10 2024, 5:10 AM

Vijayakumar changed the status of T6467: Add sagitta for vyos-1x workflows trigger branch list, a subtask of T6309: Check code quality with CodeQL, from Open to In progress.

Jun 10 2024, 5:05 AM · GitHub Infrastructure

Vijayakumar changed the status of T6467: Add sagitta for vyos-1x workflows trigger branch list from Open to In progress.

Jun 10 2024, 5:05 AM · GitHub Infrastructure

Vijayakumar created T6467: Add sagitta for vyos-1x workflows trigger branch list.

Jun 10 2024, 5:05 AM · GitHub Infrastructure

Vijayakumar closed T6466: Add PR checks as mandatory for vyos-1x, a subtask of T6309: Check code quality with CodeQL, as Resolved.

Jun 10 2024, 5:03 AM · GitHub Infrastructure

Vijayakumar closed T6466: Add PR checks as mandatory for vyos-1x as Resolved.

Jun 10 2024, 5:03 AM · GitHub Infrastructure

Vijayakumar created T6466: Add PR checks as mandatory for vyos-1x.

Jun 10 2024, 5:03 AM · GitHub Infrastructure

Giggum created T6465: op-cmd: tech-support report reporting invalid command for Show System Image Storage/Version.

Jun 10 2024, 4:32 AM

Giggum added a comment to T5633: op-cmd: Interrupting the "tech-support report" command generates error.

Updated task description to denote two issues (Bug 1 and Bug 2) with show tech-support report.

Jun 10 2024, 4:24 AM · Bugs, VyOS 1.4 Sagitta (1.4.0), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus

Giggum updated the task description for T5633: op-cmd: Interrupting the "tech-support report" command generates error.

Jun 10 2024, 4:23 AM · Bugs, VyOS 1.4 Sagitta (1.4.0), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus

Jun 9 2024

marekm added a comment to T6450: Use http instead of https for rolling apt repo access.

@blueish - thanks! Yes, apt-mirror works now - but will it continue to work with the new storage too?
BTW, good to see "deb-src" - but only a few source packages are in there. I think it would be great to have corresponding source for all these *.deb packages in the Debian source package format, then anyone who wants to contribute will be able to use dpkg-buildpackage to rebuild them.

Jun 9 2024, 11:32 PM

c-po added a comment to T6407: ipsec profile generation error.

Please share the output of dpkg -l | grep vyos-1x

Jun 9 2024, 9:05 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po added a comment to T6464: sstpc: interface not restarted when updating SSL certificate via PKI.

https://github.com/vyos/vyos-1x/pull/3613

Jun 9 2024, 7:00 PM · VyOS 1.4 Sagitta (1.4.1)

c-po changed the status of T6464: sstpc: interface not restarted when updating SSL certificate via PKI from Open to In progress.

Jun 9 2024, 6:49 PM · VyOS 1.4 Sagitta (1.4.1)

c-po created T6464: sstpc: interface not restarted when updating SSL certificate via PKI.

Jun 9 2024, 6:48 PM · VyOS 1.4 Sagitta (1.4.1)

c-po updated the task description for T6462: wireless: add op-mode command for hostapd and wpa_supplicant logs.

Jun 9 2024, 6:14 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po added a comment to T6462: wireless: add op-mode command for hostapd and wpa_supplicant logs.

https://github.com/vyos/vyos-1x/pull/3611

Jun 9 2024, 6:13 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

pavel-altair added a comment to T6407: ipsec profile generation error.

vyos@vyos# show vpn ipsec | commands 
set esp-group vpn lifetime '3600'
set esp-group vpn pfs 'enable'
set esp-group vpn proposal 10 encryption 'aes128gcm128'
set esp-group vpn proposal 10 hash 'sha256'
set ike-group vpn key-exchange 'ikev2'
set ike-group vpn lifetime '7200'
set ike-group vpn proposal 10 dh-group '14'
set ike-group vpn proposal 10 encryption 'aes128gcm128'
set ike-group vpn proposal 10 hash 'sha256'
set interface 'eth0'
set options virtual-ip
set remote-access connection support authentication client-mode 'eap-mschapv2'
set remote-access connection support authentication local-id 'ipsec.somedomain'
set remote-access connection support authentication local-users username test password 'test'
set remote-access connection support authentication server-mode 'x509'
set remote-access connection support authentication x509 ca-certificate 'isrgrootx1'
set remote-access connection support authentication x509 ca-certificate 'lets-encrypt-r3'
set remote-access connection support authentication x509 certificate 'vpn2'
set remote-access connection support description 'support remote access'
set remote-access connection support esp-group 'vpn'
set remote-access connection support ike-group 'vpn'
set remote-access connection support local-address 'ip on eth0'
set remote-access connection support pool 'support'
set remote-access pool support name-server '1.1.1.1'
set remote-access pool support name-server '9.9.9.9'
set remote-access pool support prefix '192.168.120.64/27'
[edit]
vyos@vyos#

Jun 9 2024, 6:12 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po added a comment to T6407: ipsec profile generation error.

Please share your full ipsec configuration

Jun 9 2024, 6:02 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po claimed T6463: reverse-proxy: service not reloaded when updating SSL certificate via PKI.

Jun 9 2024, 6:01 PM · VyOS 1.4 Sagitta (1.4.1)

c-po created T6463: reverse-proxy: service not reloaded when updating SSL certificate via PKI.

Jun 9 2024, 6:01 PM · VyOS 1.4 Sagitta (1.4.1)

pavel-altair added a comment to T6407: ipsec profile generation error.

vyos@vyos:~$ generate ipsec profile windows-remote-access support remote ipsec.somedomain 
Traceback (most recent call last):
  File "/usr/libexec/vyos/op_mode/ikev2_profile_generator.py", line 154, in <module>
    cert = load_certificate(pki['certificate'][cert_name]['certificate'])
                            ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^
KeyError: 'certificate'
vyos@vyos:~$ show ver
Version:          VyOS 1.5-rolling-202406060020
Release train:    current
Release flavor:   generic

Jun 9 2024, 6:01 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po closed T6281: Wireguard does not pass traffic if VRFs are used as Invalid.

Jun 9 2024, 5:43 PM · VyOS 1.5 Circinus

c-po added a comment to T6281: Wireguard does not pass traffic if VRFs are used.

Reporter action missing - running this setup in production so does not feel like a bug.

Jun 9 2024, 5:43 PM · VyOS 1.5 Circinus

c-po changed the status of T6462: wireless: add op-mode command for hostapd and wpa_supplicant logs from Open to In progress.

Jun 9 2024, 5:29 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po created T6462: wireless: add op-mode command for hostapd and wpa_supplicant logs.

Jun 9 2024, 5:29 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

GitHub <noreply@github.com> committed rVYOSONEX2d98f3b17e11: Merge pull request #3608 from vyos/mergify/bp/sagitta/pr-3596 (authored by c-po).

Jun 9 2024, 3:02 PM

GitHub <noreply@github.com> committed rVYOSONEXd296f1b15058: Merge pull request #3605 from vyos/mergify/bp/sagitta/pr-3598 (authored by c-po).

Jun 9 2024, 3:02 PM

GitHub <noreply@github.com> committed rVYOSONEX723e2ab61480: Merge pull request #3604 from vyos/mergify/bp/sagitta/pr-3592 (authored by c-po).

Jun 9 2024, 3:02 PM

GitHub <noreply@github.com> committed rVYOSONEX23d02fae78b0: Merge pull request #3603 from vyos/mergify/bp/sagitta/pr-3589 (authored by c-po).

Jun 9 2024, 3:01 PM

GitHub <noreply@github.com> committed rVYOSONEX264037d4cc3d: Merge pull request #3602 from vyos/mergify/bp/sagitta/pr-3573 (authored by c-po).

Jun 9 2024, 3:01 PM

c-po moved T6424: ipsec: op-mode command to generate client profiles should honor common name of the CA node that signed the server certificate from Backlog to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.

Jun 9 2024, 12:47 PM · VyOS 1.4 Sagitta (1.4.1)

c-po moved T6424: ipsec: op-mode command to generate client profiles should honor common name of the CA node that signed the server certificate from Open to Finished on the VyOS 1.5 Circinus board.

Jun 9 2024, 12:47 PM · VyOS 1.4 Sagitta (1.4.1)

c-po edited projects for T6424: ipsec: op-mode command to generate client profiles should honor common name of the CA node that signed the server certificate, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta (1.4.0).

Jun 9 2024, 12:47 PM · VyOS 1.4 Sagitta (1.4.1)

c-po added a comment to T6424: ipsec: op-mode command to generate client profiles should honor common name of the CA node that signed the server certificate.

https://github.com/vyos/vyos-1x/pull/3610

Jun 9 2024, 12:47 PM · VyOS 1.4 Sagitta (1.4.1)

c-po added a comment to T6407: ipsec profile generation error.

This was merged Thu May 30 16:35:43 2024 +0200 and your image is from 2024-05-30.

Jun 9 2024, 11:21 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

aztec102 added a comment to T5169: Add CGNAT Carrier-Grade NAT based on nftables.

Good afternoon I heard that the solution based on nftables is no longer new, but you took it as a basis.
At the same time, I heard that VyOS added support for VPP. Maybe it makes sense to use two implementations?
I don’t want to offend you in any way, I appreciate everything you do.
https://s3-docs.fd.io/vpp/22.06/cli-reference/clis/clicmd_src_plugins_nat_det44.html

Jun 9 2024, 9:57 AM · VyOS Rolling, VyOS 1.5 Circinus

Embezzle changed the status of T6454: Explicitly set the default reverse proxy mode to HTTP from In progress to Needs testing.

Jun 9 2024, 9:51 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

talmakion added a comment to T4667: DMVPN IPSec allows cleartext GRE over the internet when reconnecting.

I may have figured something out in https://vyos.dev/T4694.

Jun 9 2024, 9:49 AM · VyOS Rolling, Bugs

talmakion added a comment to T4694: Allow VyOS Firewall to Match Outbound IPSec Traffic.

It looks like outbound encap can be matched via routing expressions:

Jun 9 2024, 9:39 AM · VyOS 1.4 Sagitta (1.4.0-GA)

Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXba9b1723f90d: T6449: added pr update trigger (#3596) (authored by Vijayakumar A <36878324+kumvijaya@users.noreply.github.com>).

Jun 9 2024, 9:25 AM

Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX29ae4044a6d4: T6449: added pr update trigger (#3596) (authored by Vijayakumar A <36878324+kumvijaya@users.noreply.github.com>).

Jun 9 2024, 9:25 AM

GitHub <noreply@github.com> committed rVYOSONEX395bd4eb850f: T6449: added pr update trigger (#3596) (authored by Vijayakumar A <36878324+kumvijaya@users.noreply.github.com>).

Jun 9 2024, 9:24 AM

c-po moved T6460: Showing DHCPv6 leases can fail due to DUID parsing issues from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.

Jun 9 2024, 8:10 AM · VyOS 1.4 Sagitta (1.4.1)

c-po closed T6460: Showing DHCPv6 leases can fail due to DUID parsing issues as Resolved.

Jun 9 2024, 8:10 AM · VyOS 1.4 Sagitta (1.4.1)

GitHub <noreply@github.com> committed rVYOSONEXc4a3a55516cf: Merge pull request #3600 from nvollmar/T6460 (authored by c-po).

Jun 9 2024, 8:09 AM

nvollmar committed rVYOSONEX253bf3437117: T6460: fixes duid formatting.

Jun 9 2024, 8:09 AM

Vijayakumar created T6461: Create a workflow, that checks existence of codeowners file in repo, if not create one..

Jun 9 2024, 8:08 AM · GitHub Infrastructure

Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXed291814eb8b: reverse-proxy: T6454: Set default value of http for haproxy mode (authored by Embezzle).