Page MenuHomeVyOS Platform
Feed Search

Wed, Sep 16

rherold added a comment to T9322: is_intf_addr_assigned() has no input validation and builds its netns command as a shell string.

PR https://github.com/vyos/vyos-1x/pull/5477

Wed, Sep 16, 2:02 PM · VyOS Rolling
Viacheslav closed T8952: ipsec: expose per-peer unique setting for site-to-site connections as Resolved.
Wed, Sep 16, 12:48 PM · VyOS Rolling
Viacheslav changed the status of T9323: Fix spurious CI errors from Open to In progress.
Wed, Sep 16, 11:59 AM · VyOS Rolling
Viacheslav added a comment to T9323: Fix spurious CI errors.

PR https://github.com/vyos/vyos-1x/pull/5480

Wed, Sep 16, 11:59 AM · VyOS Rolling
Viacheslav closed T9281: Bridge fails to transmit locally-generated ARP replies on member interfaces after upgrade to rolling 2026.09.01 (regression from 1.5-rolling-202405140019) as Invalid.

Looks like a firewall misconfiguration, not a real bug.
Re-open it with the minimal steps to reproduce or the configuration that maintainers can use to confirm.
Or open a topic at the forum if you need help with firewall settings.
Closing the task

Wed, Sep 16, 9:14 AM · VyOS Rolling
Viacheslav changed the status of T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py from Open to In progress.
Wed, Sep 16, 9:01 AM · VyOS Rolling
Viacheslav added a comment to T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py.

PR https://github.com/vyos/vyos-1x/pull/5468

Wed, Sep 16, 9:01 AM · VyOS Rolling
rockfish added a comment to T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py.

Update on #5468 (defect 1 fix).

Wed, Sep 16, 8:24 AM · VyOS Rolling
Viacheslav changed the status of T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog from Open to In progress.
Wed, Sep 16, 7:52 AM · VyOS Rolling
cr0ntab added a comment to T9183: Every log message is recorded twice: rsyslog loads imuxsock and imjournal while journald forwards to syslog.

I hit this on my own fleet and put up a PR for fix (a): https://github.com/vyos/vyos-build/pull/1304. It sets ForwardToSyslog=no in data/live-build-config/includes.chroot/etc/systemd/journald.conf, which is where the image gets its journald.conf. That line came in with vyos-build bc0406ce3 (T552, 2018), back when the rsyslog config only loaded imuxsock and imklog. imjournal showed up later, in vyos-1x e143e496e (T6989, 2025-01-13).

Wed, Sep 16, 3:38 AM · VyOS Rolling

Tue, Sep 15

RC changed the status of T9325: Accel-ppp-ng: RADIUS and DHCPv6: Follow-up hardening for PR #40 security fixes from Open to In progress.
Tue, Sep 15, 11:31 PM · VyOS Rolling
RC created T9325: Accel-ppp-ng: RADIUS and DHCPv6: Follow-up hardening for PR #40 security fixes.
Tue, Sep 15, 11:30 PM · VyOS Rolling
jestabro added a comment to T7886: Create unified check for interface dependencies-.

Draft PR here https://github.com/vyos/vyos-1x/pull/5478 implementing a method as discussed in https://github.com/vyos/vyos-1x/pull/4765. Draft until addition of remaining XML annotations, but the simple method is complete.

Tue, Sep 15, 7:35 PM · VyOS Rolling
Viacheslav closed T9315: smoketest: give up once the system under test stops answering as Resolved.
Tue, Sep 15, 4:25 PM · VyOS Rolling
Viacheslav closed T9321: Update accel-ppp-ng to the 306fff8 version includes multiple upstream fixes as Resolved.
Tue, Sep 15, 3:59 PM · VyOS Rolling
Viacheslav closed T9254: VyOS bug — `-noesn` variants in IKE proposals break interoperability with Cisco FTD as Resolved.
Tue, Sep 15, 3:55 PM · VyOS Rolling
Viacheslav closed T9318: VXLAN: GPE validation checks external mode at the wrong configuration level as Resolved.
Tue, Sep 15, 3:53 PM · VyOS Rolling
Viacheslav closed T9155: Integrate FRR security fixes from PRs 19983, 21098, 21074, 21054 as Resolved.
Tue, Sep 15, 3:31 PM · VyOS Rolling
je added a comment to T9284: dhcp6c integer overflow / garbage value in pltime causes vyos-netlinkd loop and loss of connectivity.
  1. Update: Unfortunately, the system went offline again today (September 15) with a complete freeze/loss of connectivity, requiring a manual reboot.
Tue, Sep 15, 3:30 PM · VyOS Rolling
Viacheslav closed T7575: Update vyatta-bash to bash 5.2 as Resolved.
Tue, Sep 15, 1:05 PM · VyOS Rolling
ordex added a comment to T9323: Fix spurious CI errors.

PR created: https://github.com/vyos/vyos-1x/pull/5476

Tue, Sep 15, 12:13 PM · VyOS Rolling
Viacheslav added a comment to T9321: Update accel-ppp-ng to the 306fff8 version includes multiple upstream fixes.

PR https://github.com/vyos/vyos-build/pull/1303

Tue, Sep 15, 12:12 PM · VyOS Rolling
natali-rs1985 changed the status of T9306: vpp: load_kernel_module() checks /sys/module/ with the hyphenated driver name, never matches from Open to In progress.

https://github.com/vyos/vyos-1x/pull/5463

Tue, Sep 15, 12:03 PM · VyOS Rolling
ordex created T9323: Fix spurious CI errors.
Tue, Sep 15, 12:00 PM · VyOS Rolling
rherold created T9322: is_intf_addr_assigned() has no input validation and builds its netns command as a shell string.
Tue, Sep 15, 11:57 AM · VyOS Rolling
Viacheslav changed the status of T9321: Update accel-ppp-ng to the 306fff8 version includes multiple upstream fixes from Open to In progress.
Tue, Sep 15, 11:35 AM · VyOS Rolling
Viacheslav closed T9238: Port security/stability/memory fixes from accel-ppp to accel-ppp-ng repo as Resolved.
Tue, Sep 15, 11:31 AM · VyOS Rolling
Viacheslav created T9321: Update accel-ppp-ng to the 306fff8 version includes multiple upstream fixes.
Tue, Sep 15, 11:30 AM · VyOS Rolling
Viacheslav created T9320: VPN StrongSwan add IPsec IKEv1 deprecation warning.
Tue, Sep 15, 10:55 AM · VyOS Rolling
Viacheslav closed T9317: smoketest: restore the adapter offload state before every config test as Resolved.
Tue, Sep 15, 10:41 AM · VyOS Rolling
Viacheslav triaged T9319: VXLAN: expose the Group Policy extension through a gbp CLI node as Normal priority.
Tue, Sep 15, 10:39 AM · VyOS Rolling
Viacheslav changed the status of T9318: VXLAN: GPE validation checks external mode at the wrong configuration level from Open to In progress.
Tue, Sep 15, 9:46 AM · VyOS Rolling
o.kuchmystyi added a comment to T8952: ipsec: expose per-peer unique setting for site-to-site connections.

PR: https://github.com/vyos/vyos-1x/pull/5475

Tue, Sep 15, 9:40 AM · VyOS Rolling
haakon.nore added a comment to T9318: VXLAN: GPE validation checks external mode at the wrong configuration level.

Let me know what I am missing:
https://github.com/vyos/vyos-1x/pull/5473

Tue, Sep 15, 5:29 AM · VyOS Rolling
haakon.nore created T9319: VXLAN: expose the Group Policy extension through a gbp CLI node.
Tue, Sep 15, 1:15 AM · VyOS Rolling
haakon.nore created T9318: VXLAN: GPE validation checks external mode at the wrong configuration level.
Tue, Sep 15, 12:05 AM · VyOS Rolling

Mon, Sep 14

c-po added a comment to T9317: smoketest: restore the adapter offload state before every config test.

https://github.com/vyos/vyos-1x/pull/5472

Mon, Sep 14, 9:20 PM · VyOS Rolling
c-po renamed T9317: smoketest: restore the adapter offload state before every config test from smoketest: Txxxx: restore the adapter offload state before every config test to smoketest: restore the adapter offload state before every config test.
Mon, Sep 14, 9:18 PM · VyOS Rolling
c-po claimed T9317: smoketest: restore the adapter offload state before every config test.
Mon, Sep 14, 9:18 PM · VyOS Rolling
c-po created T9317: smoketest: restore the adapter offload state before every config test.
Mon, Sep 14, 9:18 PM · VyOS Rolling
c-po added a comment to T9316: smoketest: do not race the DHCP client when checking VRF membership.

https://github.com/vyos/vyos-1x/pull/5471

Mon, Sep 14, 9:15 PM · VyOS Rolling
c-po added a comment to T9315: smoketest: give up once the system under test stops answering.

https://github.com/vyos/vyos-1x/pull/5470

Mon, Sep 14, 9:11 PM · VyOS Rolling
c-po changed the status of T9316: smoketest: do not race the DHCP client when checking VRF membership from Open to In progress.
Mon, Sep 14, 9:07 PM · VyOS Rolling
c-po created T9316: smoketest: do not race the DHCP client when checking VRF membership.
Mon, Sep 14, 9:06 PM · VyOS Rolling
c-po created T9315: smoketest: give up once the system under test stops answering.
Mon, Sep 14, 9:02 PM · VyOS Rolling
c-po closed T9313: ethernet: fix removal of QinQ sub-interfaces as Resolved.
Mon, Sep 14, 8:28 PM · VyOS Rolling
c-po added a comment to T9313: ethernet: fix removal of QinQ sub-interfaces.

https://github.com/vyos/vyos-1x/pull/5469

Mon, Sep 14, 6:49 PM · VyOS Rolling
Viacheslav changed the status of T9305: vpp: PCI interfaces using the "normal" dpdk driver (ixgbe, i40e, etc.) are never bound to vfio-pci from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/5463

Mon, Sep 14, 5:46 PM · VyOS Rolling
dmbaturin created T9314: Add a way to specify compatible flavors in flavor definitions.
Mon, Sep 14, 5:21 PM · VyOS Rolling
Viacheslav added a comment to T9212: system login radius source-address appends instead of replacing, causing a commit-time failure.

PR https://github.com/vyos/vyos-1x/pull/5404

Mon, Sep 14, 5:16 PM · VyOS Rolling
Viacheslav closed T9277: image: further reduced installed and ISO image size as Resolved.
Mon, Sep 14, 4:45 PM · VyOS Rolling
c-po updated the task description for T9313: ethernet: fix removal of QinQ sub-interfaces.
Mon, Sep 14, 4:45 PM · VyOS Rolling
Viacheslav updated subscribers of T7265: Add OSPFv3 support for point-to-multipoint and non-broadcast interface network types and static neighbor configuration.

PR https://github.com/vyos/vyos-1x/pull/5465
@danhusan, I see the PR was closed. Are you going to recreate it?

Mon, Sep 14, 4:30 PM · VyOS Rolling
Viacheslav closed T9157: Support `fib daddr type` / `fib saddr type` matching in firewall rules (especially `prerouting raw`) as Resolved.
Mon, Sep 14, 4:25 PM · VyOS Rolling
Viacheslav closed T9297: Podman container errors when environment variable contains an asterisk as Resolved.
Mon, Sep 14, 4:18 PM · VyOS Rolling
c-po claimed T9313: ethernet: fix removal of QinQ sub-interfaces.
Mon, Sep 14, 4:05 PM · VyOS Rolling
c-po created T9313: ethernet: fix removal of QinQ sub-interfaces.
Mon, Sep 14, 4:05 PM · VyOS Rolling
Viacheslav closed T9294: Add StrongSwan patches for security updates as Resolved.
Mon, Sep 14, 3:55 PM · VyOS Rolling
Viacheslav changed the status of T8264: Upgrade OpenVPN to version 2.7 along with new 'ovpn' kernel module from In progress to Needs testing.
Mon, Sep 14, 3:51 PM · VyOS Rolling
Viacheslav closed T9260: Allow Telegraf to relay local frr_exporter metrics as Resolved.

It will be available in the next rolling release.

Mon, Sep 14, 3:25 PM · VyOS Rolling
Viacheslav raised the priority of T9306: vpp: load_kernel_module() checks /sys/module/ with the hyphenated driver name, never matches from Low to Normal.
Mon, Sep 14, 3:08 PM · VyOS Rolling
Viacheslav moved T9306: vpp: load_kernel_module() checks /sys/module/ with the hyphenated driver name, never matches from Need Triage to Backlog - Bug on the VyOS Rolling board.
Mon, Sep 14, 3:07 PM · VyOS Rolling
Viacheslav added a comment to T9306: vpp: load_kernel_module() checks /sys/module/ with the hyphenated driver name, never matches.

@forbushman would you like to add a PR for this?

Mon, Sep 14, 3:07 PM · VyOS Rolling
MPStudyly added a comment to T9246: Updating tasks not possible for regular user.

Only the comment option is available for regular users to update a task after its creation.

Mon, Sep 14, 2:54 PM · VyOS Rolling
Viacheslav triaged T9303: VPP IPsec algorithm-compatibility check ignored as High priority.
Mon, Sep 14, 12:26 PM · VyOS Rolling
Viacheslav triaged T9302: VPP: interfaces vpp xconnect <name> disable` is accepted by the CLI but has no effect as Normal priority.
Mon, Sep 14, 12:23 PM · VyOS Rolling
Viacheslav triaged T9309: VyOS 2026.03 ipt_NETFLOW exports zero packet counts in NetFlow v9 as Normal priority.
Mon, Sep 14, 12:22 PM · VyOS Rolling
Viacheslav triaged T9310: SAST, DAST, Pentest for vyos-1x/rolling as Normal priority.
Mon, Sep 14, 12:20 PM · VyOS Rolling
Viacheslav lowered the priority of T9311: Add a command which show if interface supports physical time-stamping from Normal to Low.
Mon, Sep 14, 11:56 AM · VyOS Rolling
Viacheslav triaged T9311: Add a command which show if interface supports physical time-stamping as Normal priority.
Mon, Sep 14, 11:55 AM · VyOS Rolling
Viacheslav assigned T9312: VPP sFlow: bonding interface produces no flow samples while physical bond members are rejected by configuration validation to natali-rs1985.
Mon, Sep 14, 11:54 AM · VyOS Rolling
Viacheslav added a comment to T9238: Port security/stability/memory fixes from accel-ppp to accel-ppp-ng repo.

PR https://github.com/accel-ppp/accel-ppp-ng/pull/37

Mon, Sep 14, 11:48 AM · VyOS Rolling
Viacheslav changed the edit policy for T9238: Port security/stability/memory fixes from accel-ppp to accel-ppp-ng repo.
Mon, Sep 14, 11:48 AM · VyOS Rolling
rockfish added a comment to T9256: VRRP transition scripts never run — two defects in src/system/keepalived-fifo.py.

Following up on the design question, because I framed it wrong.

Mon, Sep 14, 11:33 AM · VyOS Rolling
pautiina created T9312: VPP sFlow: bonding interface produces no flow samples while physical bond members are rejected by configuration validation.
Mon, Sep 14, 11:24 AM · VyOS Rolling
mich created T9311: Add a command which show if interface supports physical time-stamping.
Mon, Sep 14, 7:29 AM · VyOS Rolling

Sun, Sep 13

jestabro triaged T9307: http-api: concurrent libvyosconfig entry from configure threadpool and event loop crashes vyos-http-api with SIGSEGV as Normal priority.
Sun, Sep 13, 7:57 PM · VyOS Rolling
jestabro reopened T9307: http-api: concurrent libvyosconfig entry from configure threadpool and event loop crashes vyos-http-api with SIGSEGV as "Open".
Sun, Sep 13, 7:56 PM · VyOS Rolling
jestabro closed T9307: http-api: concurrent libvyosconfig entry from configure threadpool and event loop crashes vyos-http-api with SIGSEGV as Resolved.
Sun, Sep 13, 7:56 PM · VyOS Rolling
evgmol created T9310: SAST, DAST, Pentest for vyos-1x/rolling.
Sun, Sep 13, 7:51 PM · VyOS Rolling
jestabro claimed T9307: http-api: concurrent libvyosconfig entry from configure threadpool and event loop crashes vyos-http-api with SIGSEGV.
Sun, Sep 13, 1:05 PM · VyOS Rolling
jmoore2026 created T9309: VyOS 2026.03 ipt_NETFLOW exports zero packet counts in NetFlow v9.
Sun, Sep 13, 1:02 PM · VyOS Rolling
c-po added a comment to T9308: Fix OpenVPN DCO issues after Kernel upgrade.

https://github.com/vyos/vyos-1x/pull/5467

Sun, Sep 13, 6:51 AM · VyOS Rolling
c-po created T9308: Fix OpenVPN DCO issues after Kernel upgrade.
Sun, Sep 13, 6:46 AM · VyOS Rolling
c-po closed T9301: Testsuite: serial console GRUB check reads the wrong path on image installs as Resolved.
Sun, Sep 13, 6:22 AM · VyOS Rolling
cr0ntab added a comment to T9307: http-api: concurrent libvyosconfig entry from configure threadpool and event loop crashes vyos-http-api with SIGSEGV.
https://github.com/vyos/vyos-1x/pull/5466
Sun, Sep 13, 4:05 AM · VyOS Rolling
cr0ntab created T9307: http-api: concurrent libvyosconfig entry from configure threadpool and event loop crashes vyos-http-api with SIGSEGV.
Sun, Sep 13, 3:40 AM · VyOS Rolling

Sat, Sep 12

ordex added a comment to T9301: Testsuite: serial console GRUB check reads the wrong path on image installs.

PR created: https://github.com/vyos/vyos-build/pull/1302

Sat, Sep 12, 8:48 PM · VyOS Rolling

Fri, Sep 11

forbushman created T9306: vpp: load_kernel_module() checks /sys/module/ with the hyphenated driver name, never matches.
Fri, Sep 11, 8:55 PM · VyOS Rolling
forbushman created T9305: vpp: PCI interfaces using the "normal" dpdk driver (ixgbe, i40e, etc.) are never bound to vfio-pci.
Fri, Sep 11, 8:51 PM · VyOS Rolling
hedrok added a comment to T9294: Add StrongSwan patches for security updates.

PR: https://github.com/vyos/vyos-build/pull/1300

Fri, Sep 11, 8:17 PM · VyOS Rolling
jestabro added a comment to T9160: Config-path-derived group/prefix-list membership (analogous to Junos `apply-path`).

@rherold I've closed the original PR in favor of pursuing the alternative approach discussed there. Let us keep this task open for further discussion.

Fri, Sep 11, 5:08 PM · VyOS Rolling
asklymenko created T9304: Fix workflow that checks unused imports after recent GitHub security updates.
Fri, Sep 11, 2:28 PM · VyOS Rolling
a.pidnebesny created T9303: VPP IPsec algorithm-compatibility check ignored.
Fri, Sep 11, 1:35 PM · VyOS Rolling
natali-rs1985 closed T9268: Deleting static arp not working. as Resolved.
Fri, Sep 11, 1:21 PM · VyOS Rolling
a.pidnebesny created T9302: VPP: interfaces vpp xconnect <name> disable` is accepted by the CLI but has no effect.
Fri, Sep 11, 1:13 PM · VyOS Rolling
ordex created T9301: Testsuite: serial console GRUB check reads the wrong path on image installs.
Fri, Sep 11, 1:08 PM · VyOS Rolling
asklymenko closed T9288: Move ARM64 build to a more powerful server. as Resolved.
Fri, Sep 11, 12:34 PM · VyOS Rolling
asklymenko added a comment to T9288: Move ARM64 build to a more powerful server..

Done and tested.

Fri, Sep 11, 12:34 PM · VyOS Rolling
Viacheslav added a parent task for T9300: VPP: GRE tunnel-type teb validation for a VPP bridge only checks the last member: T7070: VPP related bugs the root task.
Fri, Sep 11, 12:29 PM · VyOS Rolling