c-po renamed T9151: Update Linux Kernel to 6.18.41 | 6.6.147 from T9067: Update Linux Kernel to 6.18.41 | 6.6.147 to Update Linux Kernel to 6.18.41 | 6.6.147.

Aug 1 2026, 7:52 AM · VyOS Rolling

c-po created T9151: Update Linux Kernel to 6.18.41 | 6.6.147.

Aug 1 2026, 7:52 AM · VyOS Rolling

L0crian added a comment to T8247: firewall: Allow both protocol names and numbers consistently.

New PR: https://github.com/vyos/vyos-1x/pull/5364

Aug 1 2026, 4:01 AM · VyOS Rolling

Jul 31 2026

evgmol closed T9034: Ansible repositories maintenance, July, 2026 as Resolved.

Jul 31 2026, 10:37 PM · VyOS Rolling

evgmol added a comment to T9150: Ansible repositories maintenance, August, 2026.

This includes but not limited to:

Updating the CI workflows
Troubleshooting the upstream provider changes
Fixing failing tests
Assisting contributors with their PRs, reviewing their PRs
Updating branches

Jul 31 2026, 10:34 PM · VyOS Rolling

evgmol created T9150: Ansible repositories maintenance, August, 2026.

Jul 31 2026, 10:32 PM · VyOS Rolling

Viacheslav closed T9138: Enable support for Microsoft MANA NIC drivers as Resolved.

PR https://github.com/vyos/vyos-build/pull/1254

Jul 31 2026, 11:50 AM · VyOS Rolling

Viacheslav closed T9140: Include version and flavor information in the live image boot screen as Resolved.

Jul 31 2026, 11:40 AM · VyOS Rolling

Viacheslav closed T9148: Include Zededa ISO in build artifacts as Resolved.

Jul 31 2026, 11:38 AM · VyOS Rolling

Viacheslav triaged T9149: 'generate pki openvpn shared-secret install' creates a broken PSK — the key value keeps its -----BEGIN OpenVPN Static key----- header as High priority.

Jul 31 2026, 10:46 AM · VyOS Rolling

a.kudientsov created T9149: 'generate pki openvpn shared-secret install' creates a broken PSK — the key value keeps its -----BEGIN OpenVPN Static key----- header.

Jul 31 2026, 9:13 AM · VyOS Rolling

Jul 30 2026

Viacheslav changed the status of T9147: Update accel-ppp-ng version to 9874ea3 from Open to In progress.

Jul 30 2026, 3:46 PM · VyOS Rolling

Viacheslav added a comment to T9147: Update accel-ppp-ng version to 9874ea3.

PR https://github.com/vyos/vyos-build/pull/1256

Jul 30 2026, 3:46 PM · VyOS Rolling

asklymenko created T9148: Include Zededa ISO in build artifacts.

Jul 30 2026, 3:29 PM · VyOS Rolling

Viacheslav claimed T9147: Update accel-ppp-ng version to 9874ea3.

Jul 30 2026, 3:08 PM · VyOS Rolling

Viacheslav triaged T9147: Update accel-ppp-ng version to 9874ea3 as Normal priority.

Jul 30 2026, 3:07 PM · VyOS Rolling

Viacheslav created T9147: Update accel-ppp-ng version to 9874ea3.

Jul 30 2026, 3:06 PM · VyOS Rolling

Viacheslav closed T9121: Fix linter workflow after recent GitHub changes as Resolved.

Jul 30 2026, 2:13 PM · VyOS Rolling

natali-rs1985 changed the status of T9146: support no-multi-seg in DPDK VPP from Open to In progress.

Jul 30 2026, 1:46 PM · VyOS Rolling

pratik.g added a comment to T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME).

It was available in 1.4 but with different variable name WLB_SCRIPT_IFACE-

Jul 30 2026, 12:57 PM · VyOS Rolling

Viacheslav triaged T9017: VyOS 2026.03 (Stream) unable to initiate DHCP discover when connected to an ethernet switch in GNS3 as Low priority.

Jul 30 2026, 12:28 PM · VyOS Rolling

Viacheslav changed the status of T9017: VyOS 2026.03 (Stream) unable to initiate DHCP discover when connected to an ethernet switch in GNS3 from Open to Needs testing.

Jul 30 2026, 12:28 PM · VyOS Rolling

Viacheslav triaged T9060: pppoe: spurious synthetic EUI64 /64 link-local address breaks DHCPv6-PD as Normal priority.

Jul 30 2026, 11:42 AM · VyOS Rolling

Viacheslav triaged T9081: map-based connection marking and policy routing to reduce repeated DNAT/PBR rules as Low priority.

Jul 30 2026, 11:34 AM · VyOS Rolling

zsdc added a comment to T9146: support no-multi-seg in DPDK VPP.

The only requirement I have for this change is that the MTU versus performance conflict should be resolved completely on our side and be transparent to users. Maybe by tuning buffers data-size so they fit Jumbo frames when needed, if this solves the problem.

Jul 30 2026, 11:16 AM · VyOS Rolling

natali-rs1985 added a comment to T9134: QoS: 'ether protocol X' match crashes commit.

https://github.com/vyos/vyos-1x/pull/5363

Jul 30 2026, 11:00 AM · VyOS Rolling

a.apostoliuk triaged T9146: support no-multi-seg in DPDK VPP as Normal priority.

Jul 30 2026, 10:23 AM · VyOS Rolling

a.apostoliuk created T9146: support no-multi-seg in DPDK VPP.

Jul 30 2026, 10:23 AM · VyOS Rolling

Viacheslav triaged T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME) as Normal priority.

Jul 30 2026, 9:53 AM · VyOS Rolling

Viacheslav added a comment to T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME).

Do you know the version where it worked at all?
I believe we didn't pass those info to the health check scripts. If so, it should be a feature request and not a bug report.

Jul 30 2026, 9:52 AM · VyOS Rolling

pratik.g created T9145: WAN Load Balancing: User-defined health-check scripts do not receive interface context (WLB_INTERFACE_NAME).

Jul 30 2026, 4:42 AM · VyOS Rolling

dniminenn added a comment to T9144: commit-confirm hangs forever when stdin is not a terminal.

Companion PR for the CLI side: https://github.com/vyos/vyatta-cfg/pull/153

Jul 30 2026, 4:11 AM · VyOS Rolling

dniminenn added a comment to T9144: commit-confirm hangs forever when stdin is not a terminal.

PR here: https://github.com/vyos/vyos-1x/pull/5362

Jul 30 2026, 4:07 AM · VyOS Rolling

Viacheslav closed T9124: Fix smoketest build script interrupting on error within a unit test, a subtask of T7557: Use Debian trixie as a build base for Docker and the VyOS image, as Resolved.

Jul 30 2026, 3:55 AM · VyOS Rolling

Viacheslav closed T9124: Fix smoketest build script interrupting on error within a unit test as Resolved.

Jul 30 2026, 3:55 AM · VyOS Rolling

Viacheslav triaged T9127: Bug: Slow-initializing NIC (Intel ice / empty E823-L SFP cages) loses VyOS interface-naming race → interface reordering, duplicate MAC via hw-id, and total management lockout on reboot as High priority.

Jul 30 2026, 3:55 AM · VyOS Rolling

dniminenn created T9144: commit-confirm hangs forever when stdin is not a terminal.

Jul 30 2026, 3:54 AM · VyOS Rolling

Viacheslav triaged T9132: Add Cisco-APs to the DHCP-Server options as Wishlist priority.

Jul 30 2026, 3:40 AM · VyOS Rolling

Viacheslav changed the status of T9140: Include version and flavor information in the live image boot screen from Open to In progress.

PR https://github.com/vyos/vyos-build/pull/1255

Jul 30 2026, 3:37 AM · VyOS Rolling

Viacheslav triaged T9142: Failed to obtain IP via DHCP on VLAN aware bridge. as Normal priority.

Jul 30 2026, 3:36 AM · VyOS Rolling

Viacheslav triaged T9143: vyos-netlinkd: DHCP restart on first UP event after daemon start as Normal priority.

Jul 30 2026, 3:35 AM · VyOS Rolling

Viacheslav triaged T9061: Multiple VyOS privilege-boundary flaws allow low-privilege users to execute root commands and disclose sensitive configuration as High priority.

Jul 30 2026, 3:34 AM · VyOS Rolling

Jul 29 2026

lujiefsi added a comment to T9061: Multiple VyOS privilege-boundary flaws allow low-privilege users to execute root commands and disclose sensitive configuration.

i report them on github security advisor

Jul 29 2026, 5:18 PM · VyOS Rolling

eirriel created T9143: vyos-netlinkd: DHCP restart on first UP event after daemon start.

Jul 29 2026, 3:20 PM · VyOS Rolling

Euphokumiko created T9142: Failed to obtain IP via DHCP on VLAN aware bridge..

Jul 29 2026, 1:35 PM · VyOS Rolling

Viacheslav triaged T9141: vyos_net_name interface-naming race condition as Normal priority.

Jul 29 2026, 1:11 PM · VyOS Rolling

Viacheslav triaged T9130: http-api: mid-life config session loss wedges /configure until process restart as Normal priority.

Jul 29 2026, 1:01 PM · VyOS Rolling

natali-rs1985 changed the status of T9134: QoS: 'ether protocol X' match crashes commit from Open to In progress.

Jul 29 2026, 11:04 AM · VyOS Rolling

natali-rs1985 added a comment to T9139: VPP: Missing check of interface usage in features on interface removal.

https://github.com/vyos/vyos-1x/pull/5360

Jul 29 2026, 10:47 AM · VyOS Rolling

a.apostoliuk added a comment to T9137: Unexpected behavior when disabling IPSec peer with connection-type trap.

About point 2.

I observe that traffic that matches peer policies is encrypted. BUT this peer is disabled.

If I execute sudo swanctl -L , it shows nothing. But if I execute sudo ip xfrm policy, it shows polices, that were disabled in the configuration.

Jul 29 2026, 7:18 AM · VyOS Rolling

freebsdjlu added a comment to T7601: service_router-advert.py issue.

I think the root cause is rtradv = conf.get_config_dict(base, key_mangling=('-', '_'), get_first_key=True) in service_router-advert.py ,not sure why need key_mangling .

Jul 29 2026, 6:07 AM · VyOS Rolling

CatFish47 created T9141: vyos_net_name interface-naming race condition.

Jul 29 2026, 5:05 AM · VyOS Rolling

Jul 28 2026

dmbaturin created T9140: Include version and flavor information in the live image boot screen.

Jul 28 2026, 9:52 PM · VyOS Rolling

Viacheslav changed the status of T9128: protocols nhrp: cannot commit a second tunnel with 'redirect' — duplicate nftables meter name breaks firewall rules from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/5355

Jul 28 2026, 3:50 PM · VyOS Rolling

Viacheslav closed T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules, a subtask of T6720: FIPS140-2/3 Validation, as Resolved.

Jul 28 2026, 12:45 PM · VyOS 1.5 Circinus

Viacheslav closed T8529: Add configuration mode CLI to enable FIPS-compatible OpenSSL modules as Resolved.

Jul 28 2026, 12:45 PM · VyOS Rolling

natali-rs1985 triaged T9139: VPP: Missing check of interface usage in features on interface removal as Normal priority.

Jul 28 2026, 12:28 PM · VyOS Rolling

natali-rs1985 changed the status of T9139: VPP: Missing check of interface usage in features on interface removal from Open to In progress.

Jul 28 2026, 12:28 PM · VyOS Rolling

natali-rs1985 created T9139: VPP: Missing check of interface usage in features on interface removal.

Jul 28 2026, 12:27 PM · VyOS Rolling

dmbaturin created T9138: Enable support for Microsoft MANA NIC drivers.

Jul 28 2026, 12:26 PM · VyOS Rolling

Viacheslav changed the status of T9133: fstrim systemd timer/unit does effectively nothing from Open to In progress.

Jul 28 2026, 11:07 AM · VyOS Rolling

Viacheslav triaged T9133: fstrim systemd timer/unit does effectively nothing as Normal priority.

Jul 28 2026, 11:07 AM · VyOS Rolling

Viacheslav triaged T9135: pki: dependent conf_mode scripts run against a stale config cache within the same commit, causing ACME-imported CA chains to go missing as High priority.

Jul 28 2026, 10:58 AM · VyOS Rolling

a.apostoliuk triaged T9137: Unexpected behavior when disabling IPSec peer with connection-type trap as Normal priority.

Jul 28 2026, 10:36 AM · VyOS Rolling

a.apostoliuk created T9137: Unexpected behavior when disabling IPSec peer with connection-type trap.

Jul 28 2026, 10:36 AM · VyOS Rolling

Viacheslav reassigned T8391: Bonding interface permission errors with custom ethernet MTU from o.kuchmystyi to RC.

Jul 28 2026, 10:29 AM · VyOS Rolling

a.apostoliuk triaged T9136: The feature disable-route-autoinstall does not take effect until IPSec is restarted as Normal priority.

Jul 28 2026, 10:21 AM · VyOS Rolling

a.apostoliuk created T9136: The feature disable-route-autoinstall does not take effect until IPSec is restarted.

Jul 28 2026, 10:21 AM · VyOS Rolling

o.kuchmystyi added a comment to T8391: Bonding interface permission errors with custom ethernet MTU.

PR: https://github.com/accel-ppp/accel-ppp-ng/pull/32/

Jul 28 2026, 10:08 AM · VyOS Rolling

c-po added a comment to T9135: pki: dependent conf_mode scripts run against a stale config cache within the same commit, causing ACME-imported CA chains to go missing.

https://github.com/vyos/vyos-1x/pull/5359

Jul 28 2026, 6:15 AM · VyOS Rolling

Jul 27 2026

c-po closed T9102: Intermediate certificate missing from .pem in HAProxy, a subtask of T9135: pki: dependent conf_mode scripts run against a stale config cache within the same commit, causing ACME-imported CA chains to go missing, as Resolved.

Jul 27 2026, 7:37 PM · VyOS Rolling

c-po closed T9102: Intermediate certificate missing from .pem in HAProxy as Resolved.

Jul 27 2026, 7:37 PM · VyOS Rolling

c-po added a comment to T9102: Intermediate certificate missing from .pem in HAProxy.

The real cause is in the PKI/ACME pipeline. When an ACME cert is issued, pki.py imports the intermediate as pki ca AUTOCHAIN_<cert> and triggers dependent services (HAProxy included) to regenerate within the same commit. But that regeneration reuses an in-memory config object whose cache was already populated before the import happened, so it never sees the new CA. HAProxy's chain logic then has nothing to find.

Jul 27 2026, 7:36 PM · VyOS Rolling

c-po added a subtask for T9135: pki: dependent conf_mode scripts run against a stale config cache within the same commit, causing ACME-imported CA chains to go missing: T9102: Intermediate certificate missing from .pem in HAProxy.

Jul 27 2026, 7:34 PM · VyOS Rolling

c-po added a parent task for T9102: Intermediate certificate missing from .pem in HAProxy: T9135: pki: dependent conf_mode scripts run against a stale config cache within the same commit, causing ACME-imported CA chains to go missing.

Jul 27 2026, 7:34 PM · VyOS Rolling

c-po claimed T9135: pki: dependent conf_mode scripts run against a stale config cache within the same commit, causing ACME-imported CA chains to go missing.

Jul 27 2026, 7:33 PM · VyOS Rolling

c-po created T9135: pki: dependent conf_mode scripts run against a stale config cache within the same commit, causing ACME-imported CA chains to go missing.

Jul 27 2026, 7:33 PM · VyOS Rolling

c-po claimed T9102: Intermediate certificate missing from .pem in HAProxy.

Jul 27 2026, 7:22 PM · VyOS Rolling

c-po closed T8926: Upgrade iproute2 package to match Kernel 6.18, a subtask of T8147: Update Linux Kernel to 6.18, as Resolved.

Jul 27 2026, 7:21 PM · VyOS Rolling

c-po closed T8926: Upgrade iproute2 package to match Kernel 6.18 as Resolved.

Jul 27 2026, 7:21 PM · VyOS Rolling

c-po closed T9080: QoS: applying an egress policy silently removes the interface's ingress redirect as Resolved.

Jul 27 2026, 7:21 PM · VyOS Rolling

Apachez added a comment to T9133: fstrim systemd timer/unit does effectively nothing.

On Stream 2026.03 (runned virtualized in Proxmox, the virtual drive is configured with discard and ssd in VM-guest settings i Proxmox and the host drive is using ZFS) it do seem to be working when running with sudo but not without sudo:

Jul 27 2026, 6:15 PM · VyOS Rolling

nacho added a comment to T9133: fstrim systemd timer/unit does effectively nothing.

Bug reproduced on image 2026.07.21-1151-rolling and proposed patch tested.

Jul 27 2026, 4:57 PM · VyOS Rolling

a.pidnebesny assigned T9134: QoS: 'ether protocol X' match crashes commit to natali-rs1985.

Jul 27 2026, 4:41 PM · VyOS Rolling

a.pidnebesny created T9134: QoS: 'ether protocol X' match crashes commit.

Jul 27 2026, 4:41 PM · VyOS Rolling

nacho added a comment to T9133: fstrim systemd timer/unit does effectively nothing.

https://github.com/vyos/vyos-1x/pull/5358

Jul 27 2026, 3:18 PM · VyOS Rolling

nacho added a comment to T9133: fstrim systemd timer/unit does effectively nothing.

Forgot to mention that lacking proper FS trimming has a very negative impact when running VyOS virtualised and having the filesystem sitting on a thin provisioned volume, like for instance LVM thin. The absence of discard commands coming from the virtual node does not allow the cleaning of unused blocks.

Jul 27 2026, 3:08 PM · VyOS Rolling

nacho created T9133: fstrim systemd timer/unit does effectively nothing.

Jul 27 2026, 2:58 PM · VyOS Rolling

natali-rs1985 added a comment to T8468: MAC address modifying on a VPP interface does not take effect.

https://github.com/vyos/vyos-1x/pull/5356

Jul 27 2026, 2:05 PM · VyOS Rolling

Spookje created T9132: Add Cisco-APs to the DHCP-Server options.

Jul 27 2026, 12:42 PM · VyOS Rolling

Viacheslav changed the status of T9122: system flow-accounting: NetFlow export ignores the configured VRF (regression after pmacct → ipt_NETFLOW migration) from Open to In progress.

Jul 27 2026, 12:34 PM · VyOS Rolling

jestabro claimed T9130: http-api: mid-life config session loss wedges /configure until process restart.

A PR was submitted:
https://github.com/vyos/vyos-1x/pull/5353/changes