It looks like wide dhcp client does not support setting the DUID as it is overwritten again after a restart :(
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Dec 21 2020
Dec 21 2020
GitHub <noreply@github.com> committed rVYOSONEXf8db20706527: Merge pull request #653 from jpbede/fix/flow-accounting-template (authored by c-po).
Dec 20 2020
Dec 20 2020
GitHub <noreply@github.com> committed rVYOSONEX089b5f10aaa3: Merge pull request #652 from jpbede/fix/flow-accounting-template (authored by dmbaturin).
jpbede changed the status of T3141: Flow-Accounting: uacctd conf wrongly formatted from Open to In progress.
jpbede closed T3132: Enable egress flow accounting, a subtask of T446: Flow accounting enhancements: pre/post NAT, ingress/egress, as Resolved.
c-po closed T3140: Relax "ethernet offload-options" CLI definition, a subtask of T1637: Rewrite ethernet interface in new style XML syntax, as Resolved.
c-po changed the status of T3140: Relax "ethernet offload-options" CLI definition, a subtask of T1637: Rewrite ethernet interface in new style XML syntax, from Open to In progress.
c-po changed the status of T3140: Relax "ethernet offload-options" CLI definition from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEX0cf4694a23b2: Merge pull request #647 from jpbede/feature/flowacc-enable-egress (authored by c-po).
OK, I now tried vyos-1.3-rolling-202012192139 and am happy to report that something since the previous version I tried and this version has now fixed the problem.
Dec 19 2020
Dec 19 2020
francescocarzaniga updated the task description for T3139: Cannot create bond SR-IOV XCP-ng X540-T2.
jack9603301 changed the status of T3137: Let VLAN aware bridge approach the behavior of professional equipment from Confirmed to In progress.
jack9603301 edited a custom field on T3137: Let VLAN aware bridge approach the behavior of professional equipment.
jack9603301 changed the status of T3137: Let VLAN aware bridge approach the behavior of professional equipment from Open to Confirmed.
GitHub <noreply@github.com> committed rVYOSONEX22308b05dfbc: Merge pull request #649 from Cheeze-It/current (authored by c-po).
Put in a PR to add op commands for LDP.
Dec 18 2020
Dec 18 2020
Dec 18 2020, 12:58 PM · Restricted Project
Dec 18 2020, 11:47 AM · Restricted Project
Dec 18 2020, 11:01 AM · Restricted Project
PR:
afics closed T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length as Resolved.
@runar You're right, my bad.
GitHub <noreply@github.com> committed rVYOSONEX2dc688ded021: T3135: bfd template missing newlines (authored by bedmisten).
GitHub <noreply@github.com> committed rVYOSONEX889128c7aaec: Merge pull request #648 from bedmisten/current (authored by c-po).
Dec 17 2020
Dec 17 2020
Created PR #648 in vyos-1x
sempervictus added a comment to T2884: Upstream Kernel Patches from Semper Victus Linux Hardened Tree.
So how are userspace packages for this sort of stuff handled? I assume we need to itemize out individual phabricator tickets?
Off the top of my head, relevant things to add to uspace would be:
- eoip binary
- eoip CLI wrapper
- Xtables userspace with GeoIP table data and updater script (we would need to figure out how to deal with rule placement for persistence)
- Xtables-related CLI for firewall matching on GeoIP, DNS, etc
- Xtables-related CLI for firewall actions to TARPIT or DELUDE
- UKSM userspace (or just wrappers for the sysfs interface in CLI)
- Hardened Malloc with system-wide LD_PRELOAD or maintain a vyos-specific libc package with it built-in
The CLI command set interfaces ethernet <interface> offload-options xdp enables the XDP generic mode on the given interface.
runar added a comment to T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length.
In your example the use of ge is redundant as as you have allready specified a limiting subnettmask you cant go outside the boundry of the prefix specified.
Viacheslav added a comment to T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length.
It's FRR logic.
afics renamed T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length from conf; policy prefix-list: ge is not allowed to be the same as prefix lentgh to conf; policy prefix-list: ge is not allowed to be the same as prefix length.
jpbede changed the status of T3132: Enable egress flow accounting, a subtask of T446: Flow accounting enhancements: pre/post NAT, ingress/egress, from Open to In progress.
Unknown Object (User) closed T2810: Docs for vpn anyconnect-server, a subtask of T2036: Open Connect VPN Server () support, as Resolved.
Dec 16 2020
Dec 16 2020
Ok. I will try to use containers, this good idea.
Containers will be more predictable and stable I suppose.
@vlesk once container support is added you have a better way by usibg a dedicates container on your VyOS installation.
If your device supports virtualization, you can consider running both VyOS and cups servers in KVM (there are many open source projects that can do this, such as Proxmox Ve)
Yes I know that I must install printer driver. I successfully solved this problem long time ago by using additional partition. And YES I KNOW that VyOS is not a general server operating system. But some time convenient use ONE universal host instead two or more.
Why install the remote print sharing service on the router and use cups, you must install the printer driver on the cups server to make it work. VyOS is not a general server operating system, so you should install cups on a physical server or virtual server
I prefer build images with some additional packages, such as cups. For example in order to administer printer I should add user to group lpadmin. In releases 1.2.x it was easy, but now I necessary after each update do it manually.
Dec 15 2020
Dec 15 2020
Why you would line to add a user to an additional group?