https://github.com/vyos/vyos-1x/pull/4227
https://github.com/vyos/vyos-build/pull/853
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Dec 14 2024
Dec 14 2024
c-po moved T6908: Avahi: add option to define mdns-repeater max-cache entries from Backport Candidates to Completed on the VyOS Rolling board.
Dec 13 2024
Dec 13 2024
Viacheslav raised the priority of T6896: OpenVPN change CRL revoke without restart from Normal to High.
Some thoughts.
Based on your suggestion, I submitted a PR to accept the traffic for the PPPoE session. However,I'm not sure how to accept these STP traffic , so the STP was not included.
Dec 12 2024
Dec 12 2024
zsdc changed the status of T6947: Add Oracle Linux Virtualization Manager (OLVM) flavor from Open to In progress.
Viacheslav changed the status of T6013: Add support for SSH certificate configuration from Open to In progress.
https://github.com/vyos/vyos-1x/pull/4234
Development has begun! :)
I’ve been using it as is since I posted this, it’s been working fantastically
Dec 11 2024
Dec 11 2024
jestabro added a parent task for T6946: Add initial commit algorithm to vyconf: T6718: Use vyconf daemon for validation of set commands.
hi,I am interested in this issue and would like to work on it.
If there are any relevant code references or examples, please let me know.
Any update about this feature?
Dec 10 2024
Dec 10 2024
natali-rs1985 moved T3501: Allow using more than one tuned profile from Backlog - Feature Requests to Backport Candidates on the VyOS Rolling board.
This looks promising:
Connected Since ------------ 2024-12-09 18:36:18
Dec 9 2024
Dec 9 2024
Per TimH in slack:
https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/ --auth-gen-token [lifetime] After successful user/password authentication, the OpenVPN server will with this option generate a temporary authentication token and push that to client. On the following renegotiations, the OpenVPN client will pass this token instead of the users password. On the server side the server will do the token authentication internally and it will NOT do any additional authentications against configured external user/password authentication mechanisms.The lifetime argument defines how long the generated token is valid. The lifetime is defined in seconds. If lifetime is not set or it is set to 0, the token will never expire.This feature is useful for environments which is configured to use One Time Passwords (OTP) as part of the user/password authentications and that authentication mechanism does not implement any auth-token support. OpenVPNOpenVPN Reference Manual For OpenVPN 2.4 | OpenVPN Because OpenVPN tries to be a universal VPN tool offering a great deal of flexibility, there are a lot of options on this reference page for OpenVPN 2.4
Viacheslav changed the subtype of T6943: OpenVPN OTP Breaks Connection After One Hour from "Task" to "Bug".
HollyGurza changed the status of T6934: Add preshared keys for zabbix-agent monitoring service from Open to In progress.
HollyGurza changed the status of T6792: Autocomplete for "show arp interface" is missing non-ethernet interfaces from Open to In progress.
HollyGurza changed the status of T6863: The default route distance for PPPoE (210) in the migration script is incorrect and may break server availability from Open to In progress.
Dec 8 2024
Dec 8 2024
In T4930#209720, @runar wrote:Routgh idea:
If peer is created with hostname over IP, do not add it during commit
I would insist only not adding endpoint, let peer be ready if they have configured with hostname endpoint.
The peer should be pre-provisioned with everything needed to be accessible externally for a remote peer to reconnect prior to dns resolution.
To allow for this the peer can be added with a endpoint of 0.0.0.0. (if a wireguard peer is not able to be provisioned without a endpoint at least)
This can then be used to "abort" a DNS resolution if the remote end has reconnected.
Only the "resolve dns" part should then be the blocking part, and only that part needs to be moved out of the commit loop.
Routgh idea:
If peer is created with hostname over IP, do not add it during commit
I would insist only not adding endpoint, let peer be ready if they have configured with hostname endpoint.
Dec 7 2024
Dec 7 2024
syncer edited projects for T6939: Add DNS-01 challenge for ACME, added: VyOS Rolling; removed VyOS 1.5 Circinus.
Dec 6 2024
Dec 6 2024
Viacheslav placed T6849: Be able to set FEC (Forward Error Correction) settings per interface up for grabs.
dmbaturin changed Issue type from upgrade to bug on T6597: wireless: hostapd occationly gets deactivated via systemd and causes loss in connectivity.
dmbaturin changed Issue type from improvement to internal on T6653: Generate a build/manifest.json file after assembling the image(s).
dmbaturin changed Issue type from improvement to internal on T6614: Initial support for smoketesting op-mode commands.
dmbaturin changed Is it a breaking change? from syntax to compatible on T6505: Support VXLAN VLAN-VNI range mapping in CLI.
natali-rs1985 changed Issue type from unspecified to feature on T6368: acme should also be able to listen on IPv6 addresses.
natali-rs1985 changed the status of T6368: acme should also be able to listen on IPv6 addresses from Open to In progress.
dmbaturin edited projects for T6613: VyOS local system users TACACS+ authorization requests do not work correctly, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta (1.4.1).
dmbaturin changed Is it a breaking change? from none to compatible on T6702: Podman 4.9.5 is missing "podman.sock" service socket.
dmbaturin changed Is it a breaking change? from none to compatible on T6681: IPv6 SLAAC: Option to suppress Interval advertisement on RA packet.
dmbaturin added a project to T6672: ssh-client source-interface CLI option failing with traceback: VyOS Rolling.
dmbaturin renamed T6671: Confid dependency works incorrectly for conntrack and conntrack-sync from Confid dependency works incorrectly conntrack conntrack-sync to Confid dependency works incorrectly for conntrack and conntrack-sync.
dmbaturin changed Is it a breaking change? from none to compatible on T6592: Changing VRF on interface fails.
dmbaturin changed Is it a breaking change? from none to compatible on T6486: Generate openvpn client-config ignores configured protocol type.
dmbaturin added a project to T6290: SNMPD show logs systemstats_linux: unexpected header length: VyOS Rolling.
dmbaturin changed Issue type from unspecified to feature on T4283: Add support to "reject" routes - emit an ICMP unreachable when matched.
dmbaturin moved T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6537: Include hostname in the reboot/shutdown warning messsage from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T4283: Add support to "reject" routes - emit an ICMP unreachable when matched from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T5794: Flowtable with Bond Race from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6045: show more detail when using lldp from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6362: Add a conntrack/translations logger daemon from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6555: Add server-bridge options to OpenVPN server from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6676: Invalid route-map caused bgpd to crash from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6682: show vpn ike sa peer always shows all SAs from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6693: WiFi: Enable WiFi6 (IEEE 802.11ax) for 2.4GHz AccesPoints from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6701: Add support for disabling built-in DNS for containers from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T3397: getty forces --keep-baud in 1.2.x from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6452: Add missing QoS Op Mode Commands from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin edited projects for T3397: getty forces --keep-baud in 1.2.x, added: VyOS 1.4 Sagitta (1.4.1), VyOS Rolling; removed Bugs, VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.2 Crux (VyOS 1.2.9).
dmbaturin added projects to T6045: show more detail when using lldp: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1).
dmbaturin renamed T6362: Add a conntrack/translations logger daemon from Create a conntrack/translations logger daemon to Add a conntrack/translations logger daemon.
dmbaturin renamed T6452: Add missing QoS Op Mode Commands from Add QoS Op Mode Commands to Add missing QoS Op Mode Commands.
dmbaturin edited projects for T4283: Add support to "reject" routes - emit an ICMP unreachable when matched, added: VyOS 1.4 Sagitta (1.4.1), VyOS Rolling, VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin edited projects for T6682: show vpn ike sa peer always shows all SAs, added: VyOS Rolling, VyOS 1.4 Sagitta (1.4.1); removed Bugs.
dmbaturin renamed T6701: Add support for disabling built-in DNS for containers from Containers - disable container network built in DNS plugin to Add support for disabling built-in DNS for containers.
dmbaturin edited projects for T6676: Invalid route-map caused bgpd to crash, added: VyOS 1.4 Sagitta (1.4.1), VyOS Rolling; removed Bugs.
dmbaturin renamed T6555: Add server-bridge options to OpenVPN server from OpenVPN - mode server-bridge interfaces TAP to Add server-bridge options to OpenVPN server.
dmbaturin added projects to T5794: Flowtable with Bond Race: VyOS 1.4 Sagitta (1.4.1), VyOS Rolling.
dmbaturin edited projects for T6613: VyOS local system users TACACS+ authorization requests do not work correctly, added: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1); removed Bugs.
dmbaturin edited projects for T6537: Include hostname in the reboot/shutdown warning messsage, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta (1.4.0).
I create drafted PR https://github.com/vyos/vyos-1x/pull/4224
Dec 5 2024
Dec 5 2024
dmbaturin moved T6859: Include EULAs in build type definitions from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6860: Display the EULA in "run show license" from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
dmbaturin moved T6903: Make vyos-1x repo URL in vyos-build a configurable parameter from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
natali-rs1985 changed the status of T6767: 'add system image latest vrf <name>' ignores provided VRF for version check from Open to In progress.
HollyGurza changed the status of T6874: Support matching ethertype in QoS policies from Open to In progress.
Dec 4 2024
Dec 4 2024
doctorpangloss added a comment to T6843: l2tp remote-access stops working after vpn settings modified and graceful reboot, workaround included.
modifying any settings in the vpn block seems to break remote access until the vpn l2tp remote-access authentication local-users block is modified
doctorpangloss renamed T6843: l2tp remote-access stops working after vpn settings modified and graceful reboot, workaround included from l2tp remote-access doesn't work after graceful reboot, workaround included to l2tp remote-access stops working after vpn settings modified and graceful reboot, workaround included.
doctorpangloss added a comment to T6843: l2tp remote-access stops working after vpn settings modified and graceful reboot, workaround included.
still an issue in latest
doctorpangloss renamed T6843: l2tp remote-access stops working after vpn settings modified and graceful reboot, workaround included from l2tp remote-access doesn't work after power loss, workaround included to l2tp remote-access doesn't work after graceful reboot, workaround included.
dmbaturin edited projects for T6903: Make vyos-1x repo URL in vyos-build a configurable parameter, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta.
dmbaturin moved T6935: Update vyos-http-api-tools for package python-multipart security advisory from Open to Finished on the VyOS 1.5 Circinus board.