Page MenuHomeVyOS Platform
Feed Search

Jan 3 2025

mwheeler added a comment to T6768: GeoIP database update fails without a clear error when a system name server is not configured.

@sarthurdev - Can you replicate the issue if you "delete system name-server" and try to run "update geoip" with no nameserver defined?

Jan 3 2025, 5:55 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
mwheeler added a comment to T6734: Disable nginx software version reporting.

Usually I'm not a fan of changing default behavior, but I agree that there probably isn't much value in knowing the server version with how vyos manages the nginx config as a black box.

Jan 3 2025, 4:47 PM · VyOS 1.5 Circinus (2026.02), VyOS Rolling
c-po added a project to T6734: Disable nginx software version reporting: VyOS 1.5 Circinus.
Jan 3 2025, 4:26 PM · VyOS 1.5 Circinus (2026.02), VyOS Rolling
c-po assigned T6734: Disable nginx software version reporting to mwheeler.
Jan 3 2025, 4:26 PM · VyOS 1.5 Circinus (2026.02), VyOS Rolling
c-po added a comment to T6734: Disable nginx software version reporting.

I wonder if we should not always disable this. I see no reason in exposing this information.

Jan 3 2025, 4:26 PM · VyOS 1.5 Circinus (2026.02), VyOS Rolling
mwheeler added a comment to T6734: Disable nginx software version reporting.

PR: https://github.com/vyos/vyos-1x/pull/4273

Jan 3 2025, 4:10 PM · VyOS 1.5 Circinus (2026.02), VyOS Rolling
c-po added a comment to T6999: Extend smoketesting platform to also validate /etc/release | lsb_release content.

https://github.com/vyos/vyos-build/pull/876

Jan 3 2025, 2:06 PM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus
c-po added projects to T6999: Extend smoketesting platform to also validate /etc/release | lsb_release content: VyOS Rolling, VyOS 1.4 Sagitta (1.4.2).
Jan 3 2025, 1:59 PM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus
Viacheslav added a comment to T6896: OpenVPN change CRL revoke without restart.

The issue still exists, other clients cannot connect after rewoking
config

set interfaces dummy dum0 address '203.0.113.1/32'
set interfaces openvpn vtun10 encryption ncp-ciphers 'aes256'
set interfaces openvpn vtun10 hash 'sha512'
set interfaces openvpn vtun10 local-host '203.0.113.1'
set interfaces openvpn vtun10 local-port '1194'
set interfaces openvpn vtun10 mode 'server'
set interfaces openvpn vtun10 persistent-tunnel
set interfaces openvpn vtun10 protocol 'udp'
set interfaces openvpn vtun10 server domain-name 'vyos.net'
set interfaces openvpn vtun10 server max-connections '250'
set interfaces openvpn vtun10 server name-server '203.0.113.1'
set interfaces openvpn vtun10 server subnet '10.10.0.0/24'
set interfaces openvpn vtun10 server topology 'subnet'
set interfaces openvpn vtun10 tls ca-certificate 'ca'
set interfaces openvpn vtun10 tls certificate 'cert'
set interfaces openvpn vtun10 tls dh-params 'dh'
set interfaces openvpn vtun10 tls tls-version-min '1.0'
set pki ca ca certificate 'MIIDnTCCAoWgAwIBAgIUEM7yVor1yqEGlFhc0Ive0VwZXEYwDQYJKoZIhvcNAQELBQAwVzELMAkGA1UEBhMCVVMxEzARBgNVBAgMClNvbWUtU3RhdGUxEjAQBgNVBAcMCVNvbWUtQ2l0eTENMAsGA1UECgwEVnlPUzEQMA4GA1UEAwwHdnlvcy5pbzAeFw0yNTAxMDMxMDE5NTlaFw0zMDAxMDIxMDE5NTlaMFcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApTb21lLVN0YXRlMRIwEAYDVQQHDAlTb21lLUNpdHkxDTALBgNVBAoMBFZ5T1MxEDAOBgNVBAMMB3Z5b3MuaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgDg/Xp+MICPo+TBi78FpfONdv/GAWT1z8G3xJPQio2rPDANosqrdZe78uLQwE0R0wvp8+hNeY96gCnlezSe+E9+R1DqXzp+y5vC7JtuhYLNGwIHPLeOyjxhsmND6L6fbq33fZ1DhRkFR6AyK8sWjpW8J9rG/xW8mGAX2FLI0vIOlLcWoaDCudf4CEIFI+ZdhpgEe/AohexlMAPtAj5/S2Q7lwi+475TauDlCl174f2PaiRTS83hhDhsAALwhIPmCo2No42e7rUY4Og7Hs7ltw0DldVOXAXoyo9Q3DNdI2Lb6ds9itKIjaTIlA2wf9oDaS8oSk0w07jaDaeNGHbhqDAgMBAAGjYTBfMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAdBgNVHQ4EFgQUOyfYMuK9keHP7j2Je2SZQsU7b3EwDQYJKoZIhvcNAQELBQADggEBAGeI9L1s/pVAfKUEXZMPZ4MGjootRO/IeNzOzKNxL/d3G6fYQYAHjRD48yISY0P+xFRVTN2PDkYJSIlplairKPSu+N95iL11Tq7Ce7RZZwICGpekV80ESqCq6W8l73pqxmmFw0NE6LreHIyv7mQYOcCz2WL1SMUbOsYhiSO1stOg8Wil4lj5F38pGfCWYsNk1QiFN/YR8Ry2SaiqQyH7yIKTY6T5G8xijYAxnb3uFIuRoFRF+tsuHqihZ4L+c1F3B2gMPTZqeM63Sj8MaxfUbAereEtqCkbgCZlLi7TXzwklDSYyFSh6Qe2PusptkctNnFXCwo61kf91iakfo92pJVc='
set pki ca ca private key 'MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCgDg/Xp+MICPo+TBi78FpfONdv/GAWT1z8G3xJPQio2rPDANosqrdZe78uLQwE0R0wvp8+hNeY96gCnlezSe+E9+R1DqXzp+y5vC7JtuhYLNGwIHPLeOyjxhsmND6L6fbq33fZ1DhRkFR6AyK8sWjpW8J9rG/xW8mGAX2FLI0vIOlLcWoaDCudf4CEIFI+ZdhpgEe/AohexlMAPtAj5/S2Q7lwi+475TauDlCl174f2PaiRTS83hhDhsAALwhIPmCo2No42e7rUY4Og7Hs7ltw0DldVOXAXoyo9Q3DNdI2Lb6ds9itKIjaTIlA2wf9oDaS8oSk0w07jaDaeNGHbhqDAgMBAAECggEAF7cNrOAA2StvXLSsw4gQ8+P5s+ualyOqPOabq0RiWJaTJRUmvpCK+zTFNoPRMJOFdjgAY2SOh2lGmSC6EOQnG7YZQSjq+OfMQRb7fcLeuVXmueiND7x6n6eWVTpPfC6t+c4jtYBm2dr/UVbOmlPVHiKM9k8LBSGbAgKNhSJ9RtqnChFmG8SWFMS+0dPkiJNIOijeDGpfg4ywzr4VVwZwpx2wE75Viv9R3BlCoT1g5h+muLosquf3TXRhFSOviMGeY2jmbUYj23rWa75CdSFLHdOazn0w5eBA1f1DsxhaO1t2YUsB5X6/P8IXH4u1/N1EL9oc6tA13Yfsy2LoRkPoBQKBgQDLkf9Ze73WTESHbBNWYlz0s1AKjRxn6fCURXbUKlXxapAoZM3HpMcSqv/wk4Jn4ywU0GnXsfuM3U16SIHQI4HlfhTmi7xhBeX1Z9Py25alqzUmOgKIP+SCdL4D4wQoYgPkrl+RJFf1p688TUX+LPlXTB6GimhMjB7xgR8NuGVRDQKBgQDJRvcF7HfA/Q6kFXYmfVspPwYyiWaH2t5NvRdBnEbYvnb3NIQNRdtTrcSa3/CZb9GSEwDNTuKk/KW+KEewo1rQlUdFdqkUALAajcFdaHrHoTtcDmBQegbklydLdTywEkHFCQlMJd6sQXzPoV90R+mOe8VNGj4F1GLMvF2VU2mVzwKBgCSr8lIOZo5aQuYaZAllwtUaEEs2TG2zyPEM6nEiB0VsKvf74M4cMvh78YtHJ3DLjb9aJBcFKwmfPDvRIAF8xAOxiNZXSeI4i8p/n8DaKfNCOlrejGI7EFEn8qsElFUqAwWJHBIrd+T7BihYy0kUlP5S6hTWjh9sBo7+8bcpBqdpAoGAYak8PLSTGqHu07DSJjTW4bmB0U2X4T1SdhfUy/H+8jXgVWw20pXdqMl8xsT34gs+fYkY74ViNTmdVhoHRu7MJr732P2NZnY6/HdhpmgGgwx5V95l30aGR64L0/IroycIoIkU6MzLMXuJCtm7DhnCem8VuaaNB5kY40xWgBj790MCgYB7NReJ51s1NVPAd1uFqoYGIHofP3WdAUEm5zp760cdLyYD+ykIcYK1/zPYg7MJwZUbuSQ5Vpm0pIybdJMtANlFWS58k4+UsSEPa7iiJq1Qxfh/jYcD3OZt8ATN2fPRdHIbOYT9vvmVrvV9zXk4dw8psHHECI4tptzZfJMaQnWwbQ=='
set pki certificate cert certificate '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'
set pki certificate cert private key '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'
set pki certificate client1 certificate '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'
set pki certificate client1 private key 'MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCLFI0qyaF+wv+JsAg7z+y4Thm+O7JkI16ipw/W9TSbvLMlFu6VuCOx4cw9YpVMIgrq1GBd/sPpWGfRQ/73tsEC/9w+BAld5P0C6n7mWFquhnB9gSY+zB6KdKTKs+anqln3XEn8wlx97niU6JzI1VlRx8qBZd/VWn8a9ee4OwafWaoGgL6412RrcKncMybYjUmqLlOjFm2/J8eWw4dDKifZnlpqXdIFMC+IM/eMBpGaldvclbT/TG/7wtQgUAjr9d4JoibkqtffseFUx+CpplCx0XKeDGTrYN4bHFbMCMv+/YW44JLX8cvphgSbDVFzXkKx6AP2dHHT+CoDgxSShKGHAgMBAAECggEAB93quj/bdasb/zLI1HFHZ4lrZVpFFer2QGcIu1T1W9XJoFBywF9BDZ/DCLnZzgui6HOI2+g8Nqe8f5bEBkj9E+lbENrzmK8KLK8M7ISU5IhQNpkmi6jKFXTRmXGhm1xEaHx85uIrjyf9BBdAPw/qVHjjmHwltBDBXcoJCF+2WS8I2JYmtWdHqtqxgRNF8JTsTudwrwMzGvopmj/zr7cESkZRy55U/wRrx4ckvh7paW9tL5a7rfGpIn+88LGe24IWD6Iczn+0QbpkR1Ve7jvE+uizcvklyoxPtIenseOWiW68uNEXiJye7S84P60idMDt6wijCrQz5P5NpSK0tX+bIQKBgQC/0bVGN5PPyZx7XJKD/UZBAfdAUptN6hHCsgTDesQ/FG3/ClD3vD89iVPG9GvXagWY+NYIhaopQqLynXrGJ0LdkdjTp381V5ZFTq+Gbux739IY06PXiUxTqK7HjYcWsPH6dPqI2fpS5d5NhWM80fXmAWE6sT2iLKpv1oPz4nCxFwKBgQC5nXzcmfzcGTTFD+f4+4mLd0Ufb/rOMWYWRI9lIGYvZaOKr0BlnvWWFQyBt72QqVuqMz2eM8rO5UMAWbRZ0zSV3GSJ0nCSevEjVBYf1Uy0PzN3GA7ci5PMVvyiIO4ZyJrmG6Z7IWIP2gCzo42ejFF1EdxYMrCFIDYiWtPFCHN5EQKBgBLNY492cy6y/Hu7H0GA2hoVLz9G2aJRh1wmRwFCT2o/fmi5giZGdYx6oZOm8cszwUi1W4WKVJumxIIznY0+2/cMDMzyZi28YCZ7CAmNZfDeh6GXXUALXUf2COvWm59FyPJb9RLlCvyFO70tjgSwMAJTsEwog3oaFrrPtC97ysARAoGAf3Mr8S2q+lY0bbtmRQgygZj71YJGbJ5uwouBCqccgx7/FJMRXLWxW8RIOim3+ETRtCRLAv39G+NABlWSCLuFOAGE5z2gHnRcby2lo2YKrRlYdUYHrlgIvB5eidSiqQGdmrMRtSpO8yN1p+N9sogWxpPlAIqNultL0HsdPgV3hIECgYBsQCa+eCrZr6kmOqTTDKM+dYMAoPj7RuGeYoyYXhF53rHtMlUTQdgxzLzS9z+dsEt+PrRNNFU54aG++GDweU+2bwbFbgPWlB76bO++SfGvEccwhzSZg9poiH99TE8fVTVMbm6dTk97uSDEanh7I72QhAL856qHJdfyD8KYxcpddw=='
set pki certificate client2 certificate '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'
set pki certificate client2 private key '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'
set pki certificate client3 certificate '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'
set pki certificate client3 private key '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'
set pki certificate client4 certificate 'MIIDsTCCApmgAwIBAgIUS1shCQmptxbFJZA91TQ4YbWx9OowDQYJKoZIhvcNAQELBQAwVzELMAkGA1UEBhMCVVMxEzARBgNVBAgMClNvbWUtU3RhdGUxEjAQBgNVBAcMCVNvbWUtQ2l0eTENMAsGA1UECgwEVnlPUzEQMA4GA1UEAwwHdnlvcy5pbzAeFw0yNTAxMDMxMTMwNTBaFw0yNjAxMDMxMTMwNTBaMFcxCzAJBgNVBAYTAkdCMRMwEQYDVQQIDApTb21lLVN0YXRlMRIwEAYDVQQHDAlTb21lLUNpdHkxDTALBgNVBAoMBFZ5T1MxEDAOBgNVBAMMB2NsaWVudDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ12mL/gSwszYp9JPTgvrN+WMMxvC9nz0nG4gsoCa4+OeqRxBJba7ztkdoAJVIN0TbeUXPGDnosiyFqfkobLAZz00tEVGQtQtChKBskyiPkBAkoX1pvlxt7aNC5lfQy8GOqLTu8wQwbKBhrVzgm4fmFIo3bvv3n57OHmhyv/o0nJ7nYFdBpHm3N20C+D3qegi08oXidHbDtJsKZdT8WCTL2MoNulrg/1iA6wqMI5vi017znvhZ5ZBD5AhrzyzyFO8QDzsvSfpMmeik+TAGIDuRwwKF+3hZfZJjDY8ZBlwbGA8ZnzcB3P3WelAlAJwFx/Pkp5Gj7zXmfFhiL+k52uhZAgMBAAGjdTBzMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMCMB0GA1UdDgQWBBQTEDScqYF3dRx/EeyR5JGnvlkdZzAfBgNVHSMEGDAWgBQ7J9gy4r2R4c/uPYl7ZJlCxTtvcTANBgkqhkiG9w0BAQsFAAOCAQEAdt9jm/EZ7CgNuUYQOUjjqb+P+2CkBtor9J8xA+MUH6YuoaZDfX4HF4nHChAAttpvMJuBwy/iGr8VRiinacr7FYjZY5z4mb850ktZzRaNHguyJen62f7iv6pBFKMDYDEPZOnZGRlmODJBZ19656XUxWPeimxItIeN3S/jNcxPBGE6S//Ewzygz1kOO81pgnT6OcpnaNAbeVOjF6eLOPPO/rr7a1DmmQy+DYwYJqwIJKM3rCU6py+M9taI5xIto5eZFSdwvPMHjz/UNDLUp+dtBvFe/K6Id+I2IEJ8CuJyolxf/H5Rwn2/sG1aIKgn9ldHV9TNS6KdQbysmGtP8OpzKw=='
set pki certificate client4 private key 'MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDQ12mL/gSwszYp9JPTgvrN+WMMxvC9nz0nG4gsoCa4+OeqRxBJba7ztkdoAJVIN0TbeUXPGDnosiyFqfkobLAZz00tEVGQtQtChKBskyiPkBAkoX1pvlxt7aNC5lfQy8GOqLTu8wQwbKBhrVzgm4fmFIo3bvv3n57OHmhyv/o0nJ7nYFdBpHm3N20C+D3qegi08oXidHbDtJsKZdT8WCTL2MoNulrg/1iA6wqMI5vi017znvhZ5ZBD5AhrzyzyFO8QDzsvSfpMmeik+TAGIDuRwwKF+3hZfZJjDY8ZBlwbGA8ZnzcB3P3WelAlAJwFx/Pkp5Gj7zXmfFhiL+k52uhZAgMBAAECggEAE89DF0DeoAY3zo4BEbCcarpLr3QVdN8sdU+ywIzmb2hIzUmVXWm2jS6OompfvqxjbzAXM5g4Mf7oozsmw7Nflusnhm1cn83Uhhg/gV0KHWgMZ/UbiNLCQLkoYdmonckeEJKnKv1JOfCr2+gOZc3K+8OaAr0X0HrHHQUcYjocmS3QM5BvSVNQHei6hF5iWzwBUhiGvyt4Lu/2KuM6peEtAC9EVwffWcd0YyrM+BuNo5CSYvQbCsedNYOd5t/FLuY/7kjcsMv26HUXqza9vfu1Ee/qI0DLp1uxeM9sHUpacNBa6xsPj5zhClgJcPrxPYQFqyP0blna45DXoqRbw9JiwQKBgQDrTH+irTIKE8hCqNJUU7mHWmlDw0j3s5P/+qz1hllCkH1dKTaiilPI+c1BLCC5fPWhT+Dsz9AYOhHA29r5bUGmCaTXOIP5QVKG0wpbr0quoVEHxSRlxOmsStlzlFM2/mH1lP2fuAiMnxPfp6MP0/XvzKQ8LXQnEV8fdhd8FF6McQKBgQDjNweLgxCNR4Z0yET5WzCTjSdRACGed5aFvGr1HhUAsNWwn2eOrZHLlbpPF7ey5B4bt0hu3z06twjjfleRZ2eK+X5NaTVT5ySJu25uBDUGn1HgRGUMBrysusoXP1UJmLcERTv9wm4aEZ0YV3aeHCYEYBhFc5YVTRWtkTr7FscuaQKBgQDY9oriZ60yWZdYz+5RT3pNcnKJxzIrJO0dJfoB00XO+Qh/tJbqPX6QXLaEl7n9D1o2yj7uXZjWHgVsvc0mHTZhcZcL1NLsLO154HM2o2XLrHfZIFE1feKxubrUtjodBWcyWZWbhshrUeuzWRIkcB/gY+Q0kPz/YSdDDVMOWIHuIQKBgQCQZj6jSU5Rmy02NrivCGccvs5Hyh+TiEjfAVmwIcgTQk7sCsJTiLdpfOSEs3wJcrQ3xQmBfNp64CwD+B1KyT6iseC07bH4eqNb7QRHYuEYLlRohM77D6UE2Ujp8VPn32ggjKeNo+05IAyIlb1KynTWvwNt0AGH1A982Rl0zYsUUQKBgQCfYDXZYEy22a63Ryv6rbYEFh9MRoyLgOmkr5SSmJuGNmdqfGwaqg08142yZ0Np4SIcvFUtnHVmtEaBhyeGIXAFZUf2M9Sz6B3Pl4+MaxH4N7/HsxZ2bfrO8Cc6bElar9OWxSZScHvISYLJ4d4T8GqaUNy4GvYmA8noOTIieqjI7w=='
set pki certificate client5 certificate 'MIIDsTCCApmgAwIBAgIUDa4cCdYyrDgtP+yTIf0IDXGKmxcwDQYJKoZIhvcNAQELBQAwVzELMAkGA1UEBhMCVVMxEzARBgNVBAgMClNvbWUtU3RhdGUxEjAQBgNVBAcMCVNvbWUtQ2l0eTENMAsGA1UECgwEVnlPUzEQMA4GA1UEAwwHdnlvcy5pbzAeFw0yNTAxMDMxNjU4MTNaFw0yNjAxMDMxNjU4MTNaMFcxCzAJBgNVBAYTAkdCMRMwEQYDVQQIDApTb21lLVN0YXRlMRIwEAYDVQQHDAlTb21lLUNpdHkxDTALBgNVBAoMBFZ5T1MxEDAOBgNVBAMMB2NsaWVudDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJS7gmNRDw0I9qaGc6cUpYSrMrF8rp1bevcbMe+D2NRfhi38M4epbSPIH7GZzWtZNeoo2//Z4IbiDWTj7gZLXjZ8Izh5sYPlPt2X7pBTx6ohkPI+x46RvkogUp2PKYmh20ZOIpLkee5rePTqVMer5Gknq0h6HIzeLgsw/xjm5rHAXUgrt0EIaJ0VFWpoaocpR2H0H/0ahr92KVJY8Xo26act/VKwjz0v91P18zN+2edqlYW2B38xHNCj+/tr9Ip5CRVdkFMjPps+o6XsJnlOgkcCLFJheOuyFwnU/aswPpxbEUL7Z2orqpWoxv8rxlMjgU8/6ETSiRWmCHrJ6O+lJAgMBAAGjdTBzMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMCMB0GA1UdDgQWBBQdzDTkPrBWx5UzXE4izgRJjPF7bTAfBgNVHSMEGDAWgBQ7J9gy4r2R4c/uPYl7ZJlCxTtvcTANBgkqhkiG9w0BAQsFAAOCAQEAe2ecwF5EvdoIIXbNQvLvwN7zNZOaXJ7z6hDGfwqrz5SbI+YogvFilbBKA+XdwXuQkDOe7mN4vU/gHVtBniAEA8b+dIGA77kCnOQB7AfUNXqejJD8GNzSEXaBz5LK61M767G2m6dBpZcU5Nue4qZTU4tgs0MmeDuUn4d9o8qcF3nHRyhyjVHpG6FzOTxcQ93YQJto3lMPVr95LljmWPp8kIa94YdaAJWpRDgK3Sepn8sqaVsaSIqwsZqGvtdPXZrbXhIHHDzG8CoGPt/l7m9d2BihDjXVdA1Qw+hODZucG6Js2FvnKJwynuOYJNV0bGI1u7ftyj9gNUbrH2NfAEguYQ=='
set pki certificate client5 private key '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'
set pki dh dh parameters 'MIIBCAKCAQEAtjav5jR9+sK5iZ79gpdjauHCAQgmuXVQ78RBQWklRZzY6qsG60J7yfVcLofJBxCLzzIzk2YENfXtsdRIS9gRec5FogfwgIEOoW1yZUPCdW0g5UAjLOgvpw/tuSly5YvM1r0GEkLI+gdCaFPscw76KurDw1a1R5W7KTz1k4pbqtNE0KRklMSaTuuZ7uOAxOOrr3Hk3nIsc3jUB+RYdiR5Thlxwrdbv8KKIK5fRwhojIySQv83Xb+ANKl1wP5HwJXS6+eOSiqBH4dLPKy080WgaS1fIYa6/UUJoO4IkYPGaK/PSE0aPFwSyOZe0Rev75zewPIzWmTy/YvHuDYrnjYZXwIBAg=='
Jan 3 2025, 1:47 PM · VyOS Rolling
Firefishy added a comment to T6991: DHCP default route is lost on reboot or any other FRR related change wh.

I think there is a similar issue for wireguard static routes. In 1.5-rolling-202412310006 the routes are not being added. Works fine in older releases.

Jan 3 2025, 4:04 AM · VyOS Rolling

Jan 2 2025

nvollmar changed the status of T6994: node_exporter textfile collector option from Open to In progress.
Jan 2 2025, 3:44 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po moved T6986: Missing cron file for geoip auto update from Open to Finished on the VyOS 1.5 Circinus board.
Jan 2 2025, 3:36 PM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling
c-po added a comment to T861: add secure boot support.

https://github.com/vyos/vyos-build/pull/875

Jan 2 2025, 11:22 AM · VyOS Rolling, VyOS 1.5 Circinus
nvollmar created T6994: node_exporter textfile collector option.
Jan 2 2025, 11:09 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

Jan 1 2025

Firefishy added a comment to T6811: vyos-configd throws an exception during an image upgrade.

OMG. I just spent hours trying to diagnose why I was getting Sending reply: error_code 1 with output "error". The logging really needs to be improved.

Jan 1 2025, 12:36 PM · VyOS Rolling, Bugs

Dec 31 2024

c-po closed T6991: DHCP default route is lost on reboot or any other FRR related change wh, a subtask of T6747: frr: upgrade routing suite to 10.2, as Resolved.
Dec 31 2024, 5:07 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
c-po closed T6991: DHCP default route is lost on reboot or any other FRR related change wh as Resolved.
Dec 31 2024, 5:07 PM · VyOS Rolling
c-po moved T6991: DHCP default route is lost on reboot or any other FRR related change wh from Need Triage to Completed on the VyOS Rolling board.
Dec 31 2024, 5:06 PM · VyOS Rolling
mwheeler added a comment to T6768: GeoIP database update fails without a clear error when a system name server is not configured.

I was able to replicate this when I didn't have a system dns server set. It is failing because it can't resolve the URL

Dec 31 2024, 3:47 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
nvollmar changed the status of T6949: blackbox_exporter for probing endpoints from In progress to Needs testing.
Dec 31 2024, 3:47 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po added a comment to T6991: DHCP default route is lost on reboot or any other FRR related change wh.

https://github.com/vyos/vyos-build/pull/872
https://github.com/vyos/vyos-1x/pull/4270

Dec 31 2024, 1:24 PM · VyOS Rolling
Viacheslav assigned T6896: OpenVPN change CRL revoke without restart to HollyGurza.
Dec 31 2024, 11:51 AM · VyOS Rolling
Viacheslav changed the status of T6896: OpenVPN change CRL revoke without restart from In progress to Needs testing.
Dec 31 2024, 10:52 AM · VyOS Rolling
c-po updated the task description for T6991: DHCP default route is lost on reboot or any other FRR related change wh.
Dec 31 2024, 7:58 AM · VyOS Rolling
c-po removed a project from T6991: DHCP default route is lost on reboot or any other FRR related change wh: VyOS 1.5 Circinus.
Dec 31 2024, 7:56 AM · VyOS Rolling
c-po claimed T6991: DHCP default route is lost on reboot or any other FRR related change wh.
Dec 31 2024, 7:56 AM · VyOS Rolling
c-po created T6991: DHCP default route is lost on reboot or any other FRR related change wh.
Dec 31 2024, 7:55 AM · VyOS Rolling
ajgnet added a comment to T921: Encrypted DNS.
Dec 31 2024, 2:39 AM · VyOS Rolling

Dec 30 2024

Viacheslav lowered the priority of T6990: API showConfig not found from High to Normal.
Dec 30 2024, 9:25 AM · VyOS Rolling
Viacheslav added a comment to T6990: API showConfig not found.

To get it working need to configure rest:

set service https api keys id KID key 'foo'
set service https api rest

Should rest be by default?

Dec 30 2024, 9:25 AM · VyOS Rolling
Viacheslav triaged T6990: API showConfig not found as High priority.
Dec 30 2024, 9:22 AM · VyOS Rolling
Viacheslav created T6990: API showConfig not found.
Dec 30 2024, 9:22 AM · VyOS Rolling

Dec 29 2024

c-po renamed T6989: syslog: convert old configuration format to "advanced" from rsyslog to rsyslog: rewrite daemon configuration in favour of omfwd.
Dec 29 2024, 11:43 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po created T6989: syslog: convert old configuration format to "advanced".
Dec 29 2024, 11:42 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po moved T6985: udev rule incorrectly skipping ttyACM usb serial devices from Need Triage to Completed on the VyOS Rolling board.
Dec 29 2024, 9:36 AM · VyOS 1.5 Circinus, VyOS Rolling
c-po added a project to T6985: udev rule incorrectly skipping ttyACM usb serial devices: VyOS 1.5 Circinus.
Dec 29 2024, 9:36 AM · VyOS 1.5 Circinus, VyOS Rolling
c-po moved T6986: Missing cron file for geoip auto update from Need Triage to Completed on the VyOS Rolling board.
Dec 29 2024, 8:22 AM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling

Dec 28 2024

Firefishy closed T6985: udev rule incorrectly skipping ttyACM usb serial devices as Resolved.

The fix has now been merged.

Dec 28 2024, 9:18 PM · VyOS 1.5 Circinus, VyOS Rolling
c-po added a comment to T6986: Missing cron file for geoip auto update.

https://github.com/vyos/vyos-1x/pull/4265

Dec 28 2024, 11:29 AM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling
c-po added a parent task for T5405: Add VRF support for "update geoip": T4299: Firewall - GeoIP filtering.
Dec 28 2024, 10:57 AM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
c-po added a parent task for T5746: Firewall extend GeoIP match ASN: T4299: Firewall - GeoIP filtering.
Dec 28 2024, 10:57 AM · VyOS Rolling
c-po added a parent task for T5771: GeoIP - Include RFC reserved IP ranges in inverse-match rules: T4299: Firewall - GeoIP filtering.
Dec 28 2024, 10:56 AM · Restricted Project, VyOS Rolling
c-po added a parent task for T6746: It would be handy if sha1 would be checked for downloaded geoip db: T4299: Firewall - GeoIP filtering.
Dec 28 2024, 10:56 AM · VyOS Rolling
c-po added a parent task for T5636: Add GeoIP matching support for policy route: T4299: Firewall - GeoIP filtering.
Dec 28 2024, 10:55 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po added a parent task for T6768: GeoIP database update fails without a clear error when a system name server is not configured: T4299: Firewall - GeoIP filtering.
Dec 28 2024, 10:55 AM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
c-po changed the status of T6986: Missing cron file for geoip auto update from Open to In progress.
Dec 28 2024, 10:40 AM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling
c-po created T6986: Missing cron file for geoip auto update.
Dec 28 2024, 10:40 AM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling
Firefishy added a comment to T6985: udev rule incorrectly skipping ttyACM usb serial devices.

It appears the udev rule was originally based on https://github.com/systemd/systemd/blob/main/rules.d/60-serial.rules#L12 which has the correct rule per this PR, as mentioned above the rule was broken in https://github.com/vyos/vyos-1x/commit/fa07bc3b87be142572124a2ce5c077cb42272418

Dec 28 2024, 9:19 AM · VyOS 1.5 Circinus, VyOS Rolling
Firefishy updated the task description for T6985: udev rule incorrectly skipping ttyACM usb serial devices.
Dec 28 2024, 9:15 AM · VyOS 1.5 Circinus, VyOS Rolling
Firefishy updated the task description for T6985: udev rule incorrectly skipping ttyACM usb serial devices.
Dec 28 2024, 9:13 AM · VyOS 1.5 Circinus, VyOS Rolling
Firefishy added a comment to T6985: udev rule incorrectly skipping ttyACM usb serial devices.

https://github.com/vyos/vyos-1x/pull/4264

Dec 28 2024, 9:13 AM · VyOS 1.5 Circinus, VyOS Rolling
Firefishy created T6985: udev rule incorrectly skipping ttyACM usb serial devices.
Dec 28 2024, 9:01 AM · VyOS 1.5 Circinus, VyOS Rolling
jvoss created T6984: Add SRv6 locator format option.
Dec 28 2024, 3:48 AM · VyOS 1.5 Circinus (2026.02), VyOS Rolling

Dec 27 2024

jvoss updated the task description for T6977: Add SRv6 encapsulation source address option.
Dec 27 2024, 6:45 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
jvoss updated the task description for T6978: Add SRv6 configuration support to IS-IS.
Dec 27 2024, 6:16 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
jvoss updated the task description for T6978: Add SRv6 configuration support to IS-IS.
Dec 27 2024, 6:14 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
jvoss updated the task description for T6978: Add SRv6 configuration support to IS-IS.
Dec 27 2024, 6:13 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
natali-rs1985 changed the status of T6956: generate tech-support archive fails if /config/scripts contains directories from Open to In progress.
Dec 27 2024, 4:31 PM · VyOS Rolling
c-po added a comment to T6983: Treat vyos-domain-resolver as a real service.

https://github.com/vyos/vyos-1x/pull/4261

Dec 27 2024, 4:15 PM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus
jvoss updated the task description for T6978: Add SRv6 configuration support to IS-IS.
Dec 27 2024, 4:14 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
c-po changed the status of T6983: Treat vyos-domain-resolver as a real service from Open to In progress.
Dec 27 2024, 4:12 PM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus
c-po created T6983: Treat vyos-domain-resolver as a real service.
Dec 27 2024, 4:12 PM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus
c-po moved T6979: iproute2: disable colored output by default from Open to Finished on the VyOS 1.5 Circinus board.
Dec 27 2024, 9:51 AM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus
c-po moved T6979: iproute2: disable colored output by default from Need Triage to Completed on the VyOS Rolling board.
Dec 27 2024, 9:51 AM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus

Dec 26 2024

Zen3515 added a comment to T4443: Wan Load Balancing Multiple Regressions.

Hello, I know that to debug, I have to read the tables

Dec 26 2024, 1:58 PM · VyOS Rolling, Bugs
c-po updated the task description for T6747: frr: upgrade routing suite to 10.2.
Dec 26 2024, 1:26 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Viacheslav updated subscribers of T6517: Allow embedding scripts in configuration file.

This approach seems to be a working solution

set high-availability vrrp group FOO transition-script master file '/bin/true'
set high-availability vrrp group FOO transition-script master base64 'IyEvdXNyL2Jpbi9lbnYgYmFzaAoKZWNobyAiVnlPUyBpcyBhIHBlcmZlY3Qgc3lzdGVtISEhIgo='

The minimal change + requires a migration script.

Dec 26 2024, 9:13 AM · VyOS Rolling
Viacheslav triaged T6979: iproute2: disable colored output by default as Normal priority.
Dec 26 2024, 8:34 AM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus
indrajitr created T6981: Upgrade Dynamic DNS client service to ddclient 4.
Dec 26 2024, 1:52 AM · VyOS Rolling

Dec 25 2024

dmbaturin created T6980: IPsec peer remote address option allows invalid and incomplete IPv4 addresses.
Dec 25 2024, 6:29 PM · VyOS 1.5 Circinus, VyOS Rolling
c-po added a comment to T6979: iproute2: disable colored output by default.

https://github.com/vyos/vyos-1x/pull/4257

Dec 25 2024, 5:57 PM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus
c-po claimed T6979: iproute2: disable colored output by default.
Dec 25 2024, 5:54 PM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus
c-po created T6979: iproute2: disable colored output by default.
Dec 25 2024, 5:54 PM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus
pkernstock added a comment to T6517: Allow embedding scripts in configuration file.

I'd really appreciate some feedback. It is a bit tough to wait >6 months for some input, especially as VyOs [as project] is looking for (more) contributions by the community... I don't want to invest much time implement things against expectations with the outcome of being asked to rework major parts of it.

Dec 25 2024, 3:06 PM · VyOS Rolling

Dec 24 2024

jvoss added a comment to T6978: Add SRv6 configuration support to IS-IS.

Relevant changes are here: https://github.com/jvoss/vyos-1x/tree/srv6_isis

Dec 24 2024, 8:26 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
jvoss created T6978: Add SRv6 configuration support to IS-IS.
Dec 24 2024, 8:23 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
jvoss changed the status of T6977: Add SRv6 encapsulation source address option from In progress to Blocked.

Relevant changes are here: https://github.com/jvoss/vyos-1x/tree/srv6_encapsulation

Dec 24 2024, 5:46 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
jvoss created T6977: Add SRv6 encapsulation source address option.
Dec 24 2024, 5:41 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
c-po closed T6972: dhcp: smoketests fail as IP address is not removed in time as Resolved.
Dec 24 2024, 1:09 PM · VyOS 1.4 Sagitta (1.4.3), VyOS Rolling, VyOS 1.5 Circinus
c-po moved T6972: dhcp: smoketests fail as IP address is not removed in time from Open to Finished on the VyOS 1.5 Circinus board.
Dec 24 2024, 1:09 PM · VyOS 1.4 Sagitta (1.4.3), VyOS Rolling, VyOS 1.5 Circinus
nvollmar changed the status of T6949: blackbox_exporter for probing endpoints from Open to In progress.
Dec 24 2024, 10:00 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
nvollmar claimed T6949: blackbox_exporter for probing endpoints.
Dec 24 2024, 9:32 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

Dec 23 2024

Viacheslav added a comment to T973: Create Prometheus Exporter for VyOS .

Do we need backport for circinus?

Dec 23 2024, 3:04 PM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav moved T6936: PPPoE server does not allow listening on physical interfaces if VLANs are present in the configuration from Need Triage to Backlog - Bug on the VyOS Rolling board.
Dec 23 2024, 3:01 PM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling
Viacheslav added projects to T6936: PPPoE server does not allow listening on physical interfaces if VLANs are present in the configuration: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.2).
Dec 23 2024, 3:01 PM · VyOS 1.4 Sagitta (1.4.2), VyOS 1.5 Circinus, VyOS Rolling
Viacheslav moved T6844: Rolling build fails due to salt-minion dependency from Backport Candidates to Completed on the VyOS Rolling board.
Dec 23 2024, 2:58 PM · VyOS Rolling
Viacheslav closed T6844: Rolling build fails due to salt-minion dependency as Resolved.
Dec 23 2024, 2:58 PM · VyOS Rolling
Viacheslav closed T6771: Build docker image without Jenkins as Resolved.
Dec 23 2024, 2:56 PM · VyOS Rolling
Viacheslav closed T6771: Build docker image without Jenkins, a subtask of T6529: Jenkins Build System Deprecation, as Resolved.
Dec 23 2024, 2:56 PM · VyOS Rolling
Viacheslav moved T6452: Add missing QoS Op Mode Commands from Open to Finished on the VyOS 1.5 Circinus board.
Dec 23 2024, 2:52 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1), VyOS Rolling
Viacheslav closed T6452: Add missing QoS Op Mode Commands as Resolved.
Dec 23 2024, 2:52 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1), VyOS Rolling
takehaya added a comment to T6013: Add support for SSH certificate configuration.

I have added what you included this time to the documentation. It's a simple update, but please review it.

Dec 23 2024, 2:38 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Viacheslav changed the status of T6013: Add support for SSH certificate configuration from In progress to Needs testing.
Dec 23 2024, 2:30 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
takehaya added a comment to T6013: Add support for SSH certificate configuration.

Thank you for merging the PR! I plan to work on the AuthorizedPrincipalsFile support next. I look forward to your continued support:)

Dec 23 2024, 1:56 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
Unknown Object (User) added a comment to T6958: [ FRR ] babel: stopping routing daemon does not clean config.
vyos# conf t
vyos(config)# router babel
vyos(config-router)# end
vyos# show run
Building configuration...
Dec 23 2024, 11:12 AM · VyOS Rolling
Viacheslav moved T6942: Remove VM guest agents from the generic flavor for the rolling release from Open to Finished on the VyOS 1.5 Circinus board.
Dec 23 2024, 10:29 AM · VyOS 1.5 Circinus, VyOS Rolling
Viacheslav closed T6942: Remove VM guest agents from the generic flavor for the rolling release as Resolved.
Dec 23 2024, 10:28 AM · VyOS 1.5 Circinus, VyOS Rolling
Viacheslav updated the task description for T6974: Add fastd or vpncloud to build full-mesh p2p connectivity tun and tap.
Dec 23 2024, 10:24 AM · VyOS Rolling
takehaya added a comment to T6013: Add support for SSH certificate configuration.

Hi.
The CLI smoketests are failing due to changes unrelated to this PR. I checked the "current" branch and found that the same issue occurs there as well, so it seems that it cannot be resolved unless it is addressed separately.
I believe there are no issues with this PR itself, so I would like it to be merged. What do you think?
I have already received a review and approval.

Dec 23 2024, 10:11 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
natali-rs1985 renamed T6975: Add 'vrf' and 'netns' arguments to functions in 'vyos.utils.process' from Add VRF argument to functions in 'vyos.utils.process' to Add 'vrf' and 'netns' arguments to functions in 'vyos.utils.process'.
Dec 23 2024, 9:44 AM · VyOS 1.5 Circinus, VyOS Rolling