Page MenuHomeVyOS Platform
Feed All Stories

Dec 19 2019

zsdc changed the status of T1885: vyos hostname configuration failure and it triggers vyos-router restarted from Open to In progress.

Hello, @MapleWang!
Thank you for pointing our attention to this issue! It is really bad that such simple action as changing hostname in some cases (well, in fact not only this but it is easy to reproduce) leads to the whole router crash.
The problem consists of several parts:

  1. In old systemd versions (which is used in Debian Jessie and VyOS 1.2) exists a problem, when during a restart of systemd-journald all pipes between this daemon and systemd services are disconnecting.
  2. In vyos-hostsd, which is responsible for hostname and DNS and controlled by systemd we used print() for logging and debug purposed without enough handling of errors.

So, when arises the situation when there is no PIPE connection between vyos-hostsd and systemd-journald, vyos-hostsd not able to print messages and crashes. :(

Dec 19 2019, 6:37 PM
hagbard claimed T1891: Router announcements broken on boot.
Dec 19 2019, 5:02 PM · VyOS 1.2 Crux (VyOS 1.2.5)
max1e6 added a comment to T1889: Error building docker build image.

I tested this morning and I was able to build the vyos-builder:crux and crux iso.

Dec 19 2019, 4:34 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T1889: Error building docker build image.

Please try again

Dec 19 2019, 3:50 PM · VyOS 1.3 Equuleus (1.3.0)
xzjt awarded T31: Add VRF support a Like token.
Dec 19 2019, 2:02 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
jjakob removed a project from T1620: Leases in "show dhcp server leases" lose Pool and Hostname after some time: VyOS 1.3 Equuleus.
Dec 19 2019, 11:50 AM · VyOS 1.3 Equuleus (1.3.6)
jjakob added a comment to T1620: Leases in "show dhcp server leases" lose Pool and Hostname after some time.

This is fixed/was not present in 1.3-rolling.
1.2 is not possible to fix, the bug is in isc-dhcp which would need to be upgraded to a newer version.

Dec 19 2019, 11:48 AM · VyOS 1.3 Equuleus (1.3.6)
jjakob closed T1873: DHCP server fails to start due to a change in isc-dhcp-server init scripts as Resolved.
Dec 19 2019, 11:44 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) closed T1881: Execute permissions are removed from custom SNMP scripts at commit time as Resolved.

Works correct on 1.3-rolling-201912190503

Dec 19 2019, 7:50 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po added a comment to T1890: Metatask: rewrite flow-accounting to XML and Python.

Awesome! Enjoy Testing!

Dec 19 2019, 7:16 AM · VyOS 1.3 Equuleus (1.3.0)
zsdc changed the status of T1890: Metatask: rewrite flow-accounting to XML and Python from Open to In progress.

@c-po, there is also third PR in vyos-buid: https://github.com/vyos/vyos-build/pull/69

Dec 19 2019, 5:23 AM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEX16a175c020f9: Merge pull request #187 from zdc/T1890 (authored by c-po).
Dec 19 2019, 4:58 AM
c-po added a comment to T1890: Metatask: rewrite flow-accounting to XML and Python.

Found it. Thx

Dec 19 2019, 4:58 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T1890: Metatask: rewrite flow-accounting to XML and Python.

@zsdc is thwre a second PR removing the old implementation?

Dec 19 2019, 4:39 AM · VyOS 1.3 Equuleus (1.3.0)
c-po claimed T1411: equuleus: buster: vyatta-ravpn: libfreeradius-client2 is missing in buster.
Dec 19 2019, 4:38 AM · VyOS 1.3 Equuleus (1.3.0)
kroy added a comment to T1891: Router announcements broken on boot.

After some more testing, after a reboot, a tcpdump -n -i interface icmp6 on a client machine shows nothing until restarting the radvd service on the routers.

Dec 19 2019, 3:58 AM · VyOS 1.2 Crux (VyOS 1.2.5)
max1e6 added a comment to T1889: Error building docker build image.

I was able to build the container, but sudo make iso failed with:

Dec 19 2019, 2:38 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 18 2019

kroy created T1891: Router announcements broken on boot.
Dec 18 2019, 10:54 PM · VyOS 1.2 Crux (VyOS 1.2.5)
elbuit added a comment to T1890: Metatask: rewrite flow-accounting to XML and Python.

Wow, you did it!!!
I’ll do some tests
But I don’t know to test on a current vyos build so I’ll have to wait until the PR are accepted.
I hope it will accepted asap.

Dec 18 2019, 10:34 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc added a comment to T1890: Metatask: rewrite flow-accounting to XML and Python.

Thanks, @elbuit !
We have prepared PR with full functionality: https://github.com/vyos/vyos-1x/pull/187
It would be great if you will join us and help to test it, find all bugs and fix them. :)

Dec 18 2019, 10:22 PM · VyOS 1.3 Equuleus (1.3.0)
hard awarded T31: Add VRF support a Like token.
Dec 18 2019, 10:10 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
elbuit added a comment to T1835: add export netflow nel format.

Hello @zsdc
I didn't tested it.

Dec 18 2019, 8:46 PM
elbuit added a comment to T1890: Metatask: rewrite flow-accounting to XML and Python.

I did some work porting vyatta-netflow to new vyos model

Dec 18 2019, 8:13 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T1889: Error building docker build image as Resolved.
Dec 18 2019, 7:34 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T1889: Error building docker build image.

Solved it by importing libyang binary packages onto http://dev.packages.vyos.net/repositories/crux/debian/pool/main/liby/libyang/ which is even better.

Dec 18 2019, 7:33 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) added a comment to T1411: equuleus: buster: vyatta-ravpn: libfreeradius-client2 is missing in buster.

@c-po I can't find any usable from vyatta-ravpn now, seem we can archived it and drop from build process.

Dec 18 2019, 7:32 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T1411: equuleus: buster: vyatta-ravpn: libfreeradius-client2 is missing in buster.

What services are provided by vyatta-ravpn?

Dec 18 2019, 7:22 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T1132: Build on Debian Buster, a subtask of T476: Update the base system to Debian 10 (Buster), as Resolved.
Dec 18 2019, 7:20 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po closed T1132: Build on Debian Buster as Resolved.
Dec 18 2019, 7:20 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T1889: Error building docker build image.

Fixed in https://github.com/vyos/vyos-build/commit/f2d457a9ed089995783207574699ec98c6956291

Dec 18 2019, 7:11 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXf1cc9b0e08df: snmp: T1881: Add path for ext-scripts without path (authored by Unknown Object (User)).
Dec 18 2019, 6:58 PM
Unknown Object (User) changed the status of T1881: Execute permissions are removed from custom SNMP scripts at commit time from In progress to Needs testing.

Also fixed additional issue with multiple snmp script-extensions entry (jinja2 sort)

Dec 18 2019, 6:53 PM · VyOS 1.2 Crux (VyOS 1.2.5)
zsdc added a parent task for T1654: sFlow: multiple "sflow server" not work, and "disable-imt" could break configuration: T1890: Metatask: rewrite flow-accounting to XML and Python.
Dec 18 2019, 5:50 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc added a subtask for T1890: Metatask: rewrite flow-accounting to XML and Python: T1654: sFlow: multiple "sflow server" not work, and "disable-imt" could break configuration.
Dec 18 2019, 5:50 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc claimed T1890: Metatask: rewrite flow-accounting to XML and Python.
Dec 18 2019, 5:48 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc created T1890: Metatask: rewrite flow-accounting to XML and Python.
Dec 18 2019, 5:48 PM · VyOS 1.3 Equuleus (1.3.0)
zsdc added a comment to T1835: add export netflow nel format.

Hello, @elbuit!
As I see, NAT events can be recorded only by nfacctd, and therefore this is not possible with the current way to capture traffic (by NFLOG + uacctd). Fix me, if I was missed something, please.

Dec 18 2019, 4:58 PM
Unknown Object (User) changed the status of T1881: Execute permissions are removed from custom SNMP scripts at commit time from Needs testing to In progress.

In latest rolling 1.2-rolling-201912180217 permission problem solved, but exist one more problem with script path.
CLI allow us to choice script, which stored on '/config/user-data'

Dec 18 2019, 4:06 PM · VyOS 1.2 Crux (VyOS 1.2.5)
rps added a comment to T577: Unconfigured Ethernet interface discovery partial failure on boot.

Also mention in https://phabricator.vyos.net/T1058

Dec 18 2019, 3:04 PM · VyOS Rolling, Bugs
MapleWang added a comment to T1885: vyos hostname configuration failure and it triggers vyos-router restarted.

I found a easy way to reproduce.

Dec 18 2019, 1:50 PM
max1e6 added a comment to T1889: Error building docker build image.

I got the following error:

Dec 18 2019, 1:41 PM · VyOS 1.3 Equuleus (1.3.0)
max1e6 added a comment to T1889: Error building docker build image.

Testing now. Will update

Dec 18 2019, 1:23 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T1889: Error building docker build image from Open to In progress.
Dec 18 2019, 1:04 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T1889: Error building docker build image.

Please pull and try again

Dec 18 2019, 1:04 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T1889: Error building docker build image.

Hi @max1e6 we are currently migrating the repositories to Debian Buster so there could be some turbulences

Dec 18 2019, 1:02 PM · VyOS 1.3 Equuleus (1.3.0)
max1e6 created T1889: Error building docker build image.
Dec 18 2019, 12:36 PM · VyOS 1.3 Equuleus (1.3.0)
c-po triaged T1888: Update to StrongSwan 5.9.1 as Wishlist priority.
Dec 18 2019, 11:45 AM · VyOS 1.4 Sagitta
c-po created T1888: Update to StrongSwan 5.9.1.
Dec 18 2019, 11:44 AM · VyOS 1.4 Sagitta
Unknown Object (User) closed T1702: initrd's e1000e driver missing in newer VyOS versions as Resolved.
Dec 18 2019, 11:39 AM · live-initramfs
Unknown Object (User) added a comment to T1702: initrd's e1000e driver missing in newer VyOS versions .

I've had no reply. I think we can consider it resolved.
We could always reopen it or open a new one if needed.

Dec 18 2019, 11:39 AM · live-initramfs
c-po committed rVYOSONEX01af8f619091: Jenkins: adjust to new Debian Buster build.
Dec 18 2019, 11:27 AM
c-po committed rVYOSONEX75847af961fd: Merge branch 'equuleus' of github.com:vyos/vyos-1x into current.
Dec 18 2019, 11:27 AM
sento added a comment to T1881: Execute permissions are removed from custom SNMP scripts at commit time.

Thanks @Dmitry, building it again.

Dec 18 2019, 8:39 AM · VyOS 1.2 Crux (VyOS 1.2.5)

Dec 17 2019

jestabro added a comment to T1585: Add letsencrypt/certbot support for 'service https'.

To avoid confusion, this will only be in the equuleus branch:
https://github.com/vyos/vyos-1x/compare/equuleus...jestabro:T1585?expand=1

Dec 17 2019, 9:56 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro changed the status of T1585: Add letsencrypt/certbot support for 'service https', a subtask of T1443: New "service https" implementation, from In progress to Needs testing.
Dec 17 2019, 9:51 PM · VyOS 1.2 Crux (VyOS 1.2.3)
jestabro changed the status of T1585: Add letsencrypt/certbot support for 'service https' from In progress to Needs testing.

Initial version for equuleus here:
https://github.com/jestabro/vyos-1x/tree/T1585

Dec 17 2019, 9:50 PM · VyOS 1.3 Equuleus (1.3.0)
elbuit added a comment to T1835: add export netflow nel format.

Hello @zsdc
I was also porting old style vyatta to a new one.
I've ported interface xml definition and almost finished the conf python script:

Dec 17 2019, 7:46 PM
Viacheslav added a comment to T915: MPLS Support.

MPLS requires Linux Kernel 4.5 or higher (LDPcan be built, but may have limited use without MPLS).
Ref https://readthedocs.org/projects/frrouting-developers-guide/downloads/pdf/latest/

Dec 17 2019, 7:37 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
zsdc added a comment to T1835: add export netflow nel format.

Hello, @elbuit !
We almost ready to release rewritten flow-accounting, and maybe we will be able to include your request into it. Can you describe more detailed what exactly records you want to have? It would be good to see an example pmacct configuration for your case.

Dec 17 2019, 6:24 PM
Viacheslav added a comment to T832: `show monitoring protocols bgp` doesn't work with frr.

PR https://github.com/vyos/vyatta-op/pull/32
Fix "show monitoring" command.

Dec 17 2019, 5:25 PM · VyOS 1.2 Crux (VyOS 1.2.3), vyos-frr
c-po closed T1886: Update Linux Kernel to v4.19.89 as Resolved.
Dec 17 2019, 5:07 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T1887: Update WireGuard to Debian release 0.0.20191212-1, a subtask of T1886: Update Linux Kernel to v4.19.89, as Resolved.
Dec 17 2019, 5:07 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T1887: Update WireGuard to Debian release 0.0.20191212-1 as Resolved.
Dec 17 2019, 5:07 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T1887: Update WireGuard to Debian release 0.0.20191212-1.
Dec 17 2019, 5:02 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T1886: Update Linux Kernel to v4.19.89.
Dec 17 2019, 5:01 PM · VyOS 1.3 Equuleus (1.3.0)
MapleWang created T1885: vyos hostname configuration failure and it triggers vyos-router restarted.
Dec 17 2019, 4:14 PM
c-po committed rVYOSONEX60e61ed1247c: Revert "Jenkins: T1870: fetch pull request refs from GitHub".
Dec 17 2019, 4:08 PM
c-po added a reverting change for rVYOSONEXfa5447f6c985: Jenkins: T1870: fetch pull request refs from GitHub: rVYOSONEX60e61ed1247c: Revert "Jenkins: T1870: fetch pull request refs from GitHub".
Dec 17 2019, 4:08 PM
c-po added a reverting change for rVYOSONEX1f810cbd0abd: Jenkins: T1870: adjust branch pointer: rVYOSONEXafd8f5390247: Revert "Jenkins: T1870: adjust branch pointer".
Dec 17 2019, 4:08 PM
c-po committed rVYOSONEXafd8f5390247: Revert "Jenkins: T1870: adjust branch pointer".
Dec 17 2019, 4:08 PM
c-po committed rVYOSONEX8656a75c94e0: Revert "Jenkins: T1870: only use pull request refspec".
Dec 17 2019, 4:08 PM
c-po added a reverting change for rVYOSONEX325b3fd14ce7: Jenkins: T1870: only use pull request refspec: rVYOSONEX8656a75c94e0: Revert "Jenkins: T1870: only use pull request refspec".
Dec 17 2019, 4:08 PM
c-po committed rVYOSONEXe1a979d81fb7: Revert "Jenkins: T1870: add 'PR-' prefix to pull request refspec".
Dec 17 2019, 4:08 PM
c-po added a reverting change for rVYOSONEXde2716ae67a8: Jenkins: T1870: add 'PR-' prefix to pull request refspec: rVYOSONEXe1a979d81fb7: Revert "Jenkins: T1870: add 'PR-' prefix to pull request refspec".
Dec 17 2019, 4:08 PM
Unknown Object (User) added a comment to T1881: Execute permissions are removed from custom SNMP scripts at commit time.

@sento own build 1.2.4 this is 1.2-rolling (branch current), in crux branch all works as expected.

Dec 17 2019, 4:05 PM · VyOS 1.2 Crux (VyOS 1.2.5)
Unknown Object (User) changed the status of T1881: Execute permissions are removed from custom SNMP scripts at commit time from In progress to Needs testing.
Dec 17 2019, 4:02 PM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po committed rVYOSONEX970bf04bfe48: snmp: T1881: add S_IRGRP to snmp script file permission set.
Dec 17 2019, 3:57 PM
c-po committed rVYOSONEXb4bd42fe357f: snmp: T1881: Change permission for script files (authored by sever).
Dec 17 2019, 3:57 PM
Unknown Object (User) added a comment to T1884: Keeping VRRP transition-script native behaviour and adding stop-script.

T1350 T1820
Adding mentioned tasks which can solved

Dec 17 2019, 2:53 PM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po added a comment to T1876: IPSec VTI tunnels are deleted after rekey and dangling around as A/D.

@Dmitry I had it once more on the production system - see attached log with the above loggin features enabled.

Dec 17 2019, 12:04 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T1881: Execute permissions are removed from custom SNMP scripts at commit time.

PR https://github.com/vyos/vyos-1x/pull/185

Dec 17 2019, 11:50 AM · VyOS 1.2 Crux (VyOS 1.2.5)
Unknown Object (User) reopened T1881: Execute permissions are removed from custom SNMP scripts at commit time as "In progress".
Dec 17 2019, 8:54 AM · VyOS 1.2 Crux (VyOS 1.2.5)
sento closed T1881: Execute permissions are removed from custom SNMP scripts at commit time as Resolved.

Now it works perfect.

Dec 17 2019, 8:50 AM · VyOS 1.2 Crux (VyOS 1.2.5)
Viacheslav added a comment to T1881: Execute permissions are removed from custom SNMP scripts at commit time.

PR https://github.com/vyos/vyos-1x/pull/184

Dec 17 2019, 8:41 AM · VyOS 1.2 Crux (VyOS 1.2.5)

Dec 16 2019

Unknown Object (User) added a comment to T1884: Keeping VRRP transition-script native behaviour and adding stop-script.

patch will be proposed after keepalived.service modification
https://github.com/DmitriyEshenko/vyos-1x/commit/807864242773f482aa1894ca968a4396a3507187

Dec 16 2019, 10:04 PM · VyOS 1.2 Crux (VyOS 1.2.5)
Unknown Object (User) created T1884: Keeping VRRP transition-script native behaviour and adding stop-script.
Dec 16 2019, 9:57 PM · VyOS 1.2 Crux (VyOS 1.2.5)
hagbard added a comment to T1831: Denest IPv6 router-advert from Interfaces to general service.

end: sudo sh -c "VYOS_TAGNODE_VALUE='$VAR(../../@)' ${vyos_conf_scripts_dir}/router-advert.py" would have to be in /opt/vyatta/share/vyatta-cfg/templates/interfaces/ethernet/node.tag/ipv6/router-advert/node.def
I can set that statically, which removes then the benefit for the use of other passes, IPv6 RAs can be sent over quite some interfaces.

Dec 16 2019, 8:03 PM · VyOS 1.3 Equuleus (1.3.0)
hagbard changed the status of T1831: Denest IPv6 router-advert from Interfaces to general service from In progress to On hold.

Turns out that it might not be a smart move to keep it under interfaces, as it would have to implemented within the ethernet script or if it's a separate one, it needs to be called with VYOS_TAGNODE_VALUE, otherwise there won't be a way to find out what interface needs to be configured. If placed under service or any other path, it can be integrated into the config itself e.g. set service ipv6-ra interface eth0 <more options>, set service ipv6-ra interface eth1 <more options> etc.
That would only required to parse and compare configs for 2 interfaces which can be determined from the config.

Dec 16 2019, 7:57 PM · VyOS 1.3 Equuleus (1.3.0)
hagbard added a project to T1878: accel-ppp: pppoe single-session option implementation: VyOS 1.3 Equuleus.
Dec 16 2019, 6:44 PM · VyOS 1.3 Equuleus (1.3.0)
hagbard closed T1883: append documentation with option session-control, a subtask of T1878: accel-ppp: pppoe single-session option implementation, as Resolved.
Dec 16 2019, 5:22 PM · VyOS 1.3 Equuleus (1.3.0)
hagbard closed T1883: append documentation with option session-control as Resolved.

https://vyos.readthedocs.io/en/latest/services/pppoe-server.html

Dec 16 2019, 5:22 PM
hagbard changed the status of T1878: accel-ppp: pppoe single-session option implementation from In progress to Needs testing.

https://github.com/vyos/vyos-1x/commit/b55b68f6246329468b4ab3450e127d5bab683bff or tomorrows rolling release will have it included. I keept the default 'replace' and you can chose between deny or disable, while disable removes the option entirely from the accel config, which I wouldn't recommend to do.

Dec 16 2019, 4:59 PM · VyOS 1.3 Equuleus (1.3.0)
hagbard committed rVYOSONEX214e63fbad5f: Merge branch 'current' into equuleus.
Dec 16 2019, 4:57 PM
hagbard committed rVYOSONEXb55b68f62463: service-pppoe: T1878: option pppoe single-session implementation.
Dec 16 2019, 4:56 PM
hagbard committed rVYOSONEXe10aea428e1f: service-pppoe: T1878: option pppoe single-session implementation.
Dec 16 2019, 4:56 PM
hagbard claimed T1883: append documentation with option session-control.
Dec 16 2019, 4:46 PM
hagbard created T1883: append documentation with option session-control.
Dec 16 2019, 4:46 PM
c-po added a comment to T1876: IPSec VTI tunnels are deleted after rekey and dangling around as A/D.

The issue can be reproduced by the following configuration:

Dec 16 2019, 4:23 PM · VyOS 1.3 Equuleus (1.3.0)
hagbard renamed T1878: accel-ppp: pppoe single-session option implementation from accel-ppp: pppoe single-session to accel-ppp: pppoe single-session option implementation.
Dec 16 2019, 3:52 PM · VyOS 1.3 Equuleus (1.3.0)
hagbard added a comment to T1166: Flow-accounting not working with PPPoE interfaces.

@leacho Sorry, I didn't have the time to look deeper into that, as far as I know we currently have no workaround for it.

Dec 16 2019, 3:49 PM · Bugs, VyOS 1.3 Equuleus (1.3.8), test