Page MenuHomeVyOS Platform
Feed All Stories

May 30 2021

GitHub <noreply@github.com> committed rVYOSONEXd79cbf74142d: ipsec: T2816: Refactor to remove global variable and tidy up (authored by simon).
May 30 2021, 10:07 AM
c-po committed rVYOSONEX3e6e4a1738dc: op-mode: T3589: add "clear log" command to vacuume journald.
May 30 2021, 10:07 AM
c-po committed rVYOSONEXf357cf58f7bd: op-mode: T3589: replace short journalctl options with long names.
May 30 2021, 10:07 AM
erkin renamed T3563: commit-archive breaks with IPv6 source addresses from commit-archive Broken to commit-archive breaks with IPv6 source addresses.
May 30 2021, 10:04 AM · VyOS 1.4 Sagitta
erkin claimed T3378: commit-archive source-address broken for IPv6 addresses.
May 30 2021, 10:03 AM · VyOS 1.3 Equuleus (1.3.0)
erkin closed T3508: Check if there's enough drive space for an upgrade before downloading an image, a subtask of T3356: Script for remote file transfers, as Resolved.
May 30 2021, 10:03 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T3508: Check if there's enough drive space for an upgrade before downloading an image as Resolved.

install-image now calls a routine that queries the size of the remote file and aborts if there isn't enough space to download the image.

May 30 2021, 10:03 AM · VyOS 1.3 Equuleus (1.3.0)
erkin changed the status of T3563: commit-archive breaks with IPv6 source addresses, a subtask of T3356: Script for remote file transfers, from Open to Needs testing.
May 30 2021, 10:00 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin changed the status of T3563: commit-archive breaks with IPv6 source addresses from Open to Needs testing.
May 30 2021, 10:00 AM · VyOS 1.4 Sagitta
erkin closed T1506: commit-archive scp/sftp public key authentication, a subtask of T3356: Script for remote file transfers, as Resolved.
May 30 2021, 9:59 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T1506: commit-archive scp/sftp public key authentication as Resolved.

commit-archive now uses Paramiko for SSH connections instead of curl and directly reads ~/.ssh/known_hosts if it exists.

May 30 2021, 9:59 AM · VyOS 1.3 Equuleus (1.3.0)
erkin closed T3518: Warning messages when using SCP commit-archive, a subtask of T3356: Script for remote file transfers, as Resolved.
May 30 2021, 9:56 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T3518: Warning messages when using SCP commit-archive as Resolved.

This is a consequence of using an old Paramiko version. I just sent a PR upping the version of cryptography and Paramiko.

May 30 2021, 9:56 AM · VyOS 1.4 Sagitta
erkin claimed T3563: commit-archive breaks with IPv6 source addresses.
May 30 2021, 9:55 AM · VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
May 30 2021, 9:54 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin added a parent task for T1866: Commit archive over SFTP doesn't work with non-standard ports: T3356: Script for remote file transfers.
May 30 2021, 9:54 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin added a subtask for T3356: Script for remote file transfers: T1866: Commit archive over SFTP doesn't work with non-standard ports.
May 30 2021, 9:54 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin closed T1866: Commit archive over SFTP doesn't work with non-standard ports as Resolved.

New file transfer script parses the port field in the URL.

May 30 2021, 9:54 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
erkin triaged T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up as Low priority.
May 30 2021, 9:51 AM · Restricted Project, VyOS 1.5 Circinus
erkin changed the status of T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up from Open to Confirmed.
May 30 2021, 9:50 AM · Restricted Project, VyOS 1.5 Circinus
sarthurdev added a comment to T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.

Also vpn ipsec site-to-site peer x tunnel x allow-nat-networks and vpn ipsec site-to-site peer x tunnel x allow-public-networks

May 30 2021, 9:46 AM · VyOS 1.4 Sagitta
c-po updated the task description for T3589: op-mode: support clearing out logfiles from CLI.
May 30 2021, 9:34 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po updated the task description for T3589: op-mode: support clearing out logfiles from CLI.
May 30 2021, 9:28 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po triaged T3589: op-mode: support clearing out logfiles from CLI as Normal priority.
May 30 2021, 9:27 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po created T3589: op-mode: support clearing out logfiles from CLI.
May 30 2021, 9:27 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po added a project to T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan: VyOS 1.3 Equuleus.
May 30 2021, 9:10 AM · VyOS 1.4 Sagitta
c-po updated the task description for T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.
May 30 2021, 9:10 AM · VyOS 1.4 Sagitta
c-po updated the task description for T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.
May 30 2021, 9:10 AM · VyOS 1.4 Sagitta
c-po updated the task description for T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.
May 30 2021, 9:08 AM · VyOS 1.4 Sagitta
c-po claimed T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.
May 30 2021, 9:06 AM · VyOS 1.4 Sagitta
c-po placed T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan up for grabs.
May 30 2021, 8:54 AM · VyOS 1.4 Sagitta
c-po triaged T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan as Normal priority.
May 30 2021, 8:54 AM · VyOS 1.4 Sagitta
c-po changed the status of T3587: Intel QAT support is broken on VyOS 1.4 due to a Kernel Crash from Open to In progress.
May 30 2021, 8:20 AM · VyOS 1.4 Sagitta
c-po created T3587: Intel QAT support is broken on VyOS 1.4 due to a Kernel Crash.
May 30 2021, 8:17 AM · VyOS 1.4 Sagitta

May 29 2021

c-po moved T1995: "show vpn ike sa" command always show child-sas as down from Backport Candidates to Finished on the VyOS 1.4 Sagitta board.
May 29 2021, 9:12 PM · VyOS 1.2 Crux (VyOS 1.2.8)
c-po moved T3258: ethernet smoke test damaged from Backlog to Finished on the VyOS 1.4 Sagitta board.
May 29 2021, 9:12 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3374: IPv6 GRE Tunnel issues from In Progress to Finished on the VyOS 1.4 Sagitta board.
May 29 2021, 9:12 PM · VyOS 1.4 Sagitta
c-po moved T3321: Bgp not possible to use internal|external remote as from Backlog to Finished on the VyOS 1.4 Sagitta board.
May 29 2021, 9:12 PM · VyOS 1.4 Sagitta
c-po moved T3404: Exception thrown when executing configuration load from Backlog to Finished on the VyOS 1.4 Sagitta board.
May 29 2021, 9:12 PM · VyOS 1.4 Sagitta
c-po moved T483: Add google-authenticator 2fa from Backlog to Finished on the VyOS 1.4 Sagitta board.
May 29 2021, 9:12 PM · VyOS 1.4 Sagitta
c-po moved T3179: Add the ability to generate a support file from Backlog to Finished on the VyOS 1.4 Sagitta board.
May 29 2021, 9:12 PM · VyOS 1.4 Sagitta
c-po moved T3385: Support for disabling ARP responses from Backlog to Finished on the VyOS 1.4 Sagitta board.
May 29 2021, 9:12 PM · VyOS 1.4 Sagitta
c-po moved T3241: Allow configuration of XAuth on IPsec Tunnels from Backlog to Finished on the VyOS 1.4 Sagitta board.
May 29 2021, 9:12 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta, VyOS 1.2 Crux
c-po moved T1888: Update to StrongSwan 5.9.1 from Open to Finished on the VyOS 1.4 Sagitta board.
May 29 2021, 9:12 PM · VyOS 1.4 Sagitta
c-po placed T725: Cake and FQ-PIE up for grabs.
May 29 2021, 9:01 PM · VyOS 1.4 Sagitta
c-po edited projects for T2816: Rewrite IPsec scripts with the new XML/Python approach, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
May 29 2021, 9:00 PM · VyOS 1.4 Sagitta
c-po changed the status of T2816: Rewrite IPsec scripts with the new XML/Python approach from In progress to Needs testing.
May 29 2021, 9:00 PM · VyOS 1.4 Sagitta
c-po closed T1888: Update to StrongSwan 5.9.1 as Resolved.
May 29 2021, 8:59 PM · VyOS 1.4 Sagitta
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.122 / 5.10.40 to Update Linux Kernel to v5.4.123 / 5.10.41.
May 29 2021, 8:54 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po committed rVYOSONEX61936ae2c6c2: Debian: T1888: raise required strongSwan version to >= 5.8 for xfrm support.
May 29 2021, 8:38 PM
c-po claimed T1888: Update to StrongSwan 5.9.1.
May 29 2021, 8:36 PM · VyOS 1.4 Sagitta
c-po committed rVYOSONEXa31ab24a9d3b: vpn: ipsec: T3093: test for VTI interface availability the easy way.
May 29 2021, 5:12 PM
c-po added a parent task for T2173: Add the ability to use VRF on VTI interfaces: T1888: Update to StrongSwan 5.9.1.
May 29 2021, 4:46 PM · VyOS 1.4 Sagitta
c-po added a subtask for T1888: Update to StrongSwan 5.9.1: T2173: Add the ability to use VRF on VTI interfaces.
May 29 2021, 4:46 PM · VyOS 1.4 Sagitta
c-po renamed T1888: Update to StrongSwan 5.9.1 from Update to StrongSwan 5.8.1 to Update to StrongSwan 5.9.1.
May 29 2021, 4:45 PM · VyOS 1.4 Sagitta
c-po added a comment to T1200: SNMP GET broken at least for BGP4-MIB.

We have had a lot of tickets about SNMP MIBS for BGP - most of them beeing for IPv6.

May 29 2021, 4:41 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.6)
c-po changed the status of T1200: SNMP GET broken at least for BGP4-MIB from Open to Needs testing.
May 29 2021, 4:39 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.6)
GitHub <noreply@github.com> committed rVYOSONEX2d3a2c56a33b: ipsec: vti: T2816: Update to use correct VTI mark, code cleanup (authored by simon).
May 29 2021, 4:37 PM
c-po committed rVYOSONEX3e560a2cc0b9: vpn: ipsec: T3093: drop obsolete cleanup_vti_interfaces() function.
May 29 2021, 1:43 PM
c-po committed rVYOSONEX153a1c1d2549: vti: T1579: only remove the interface when it exists.
May 29 2021, 1:37 PM
c-po committed rVYOSONEX0593173f6b70: vti: ipsec: T2816: Fix vti-up-down (authored by sarthurdev <965089+sarthurdev@users.noreply.github.com>).
May 29 2021, 1:37 PM
Viacheslav added a comment to T1200: SNMP GET broken at least for BGP4-MIB.
root@r2-lts:/home/vyos# snmpget -v 2c -c public 192.168.122.11 IF-MIB::ifAdminStatus.1
IF-MIB::ifAdminStatus.1 = INTEGER: up(1)
May 29 2021, 11:10 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.6)
c-po added a reverting change for rVYOSONEXab398d1a063c: vti: T2173: add VRF support for virtual tunnel interfaces: rVYOSONEX462b3bee0434: Revert "vti: T2173: add VRF support for virtual tunnel interfaces".
May 29 2021, 9:30 AM
c-po committed rVYOSONEX462b3bee0434: Revert "vti: T2173: add VRF support for virtual tunnel interfaces".
May 29 2021, 9:30 AM
c-po reopened T2173: Add the ability to use VRF on VTI interfaces, a subtask of T2579: The root task for VRF features, as Open.
May 29 2021, 9:29 AM · VyOS 1.3 Equuleus (1.3.6)
c-po reopened T2173: Add the ability to use VRF on VTI interfaces, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Open.
May 29 2021, 9:29 AM · VyOS 1.4 Sagitta
c-po reopened T2173: Add the ability to use VRF on VTI interfaces as "Open".
May 29 2021, 9:29 AM · VyOS 1.4 Sagitta
c-po added a comment to T2173: Add the ability to use VRF on VTI interfaces.

Re-Open - requires a strongswan update first - sorry

May 29 2021, 9:29 AM · VyOS 1.4 Sagitta
dmbaturin added a project to T3083: Add feature event-handler: VyOS 1.4 Sagitta.
May 29 2021, 8:32 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
dmbaturin added projects to T1176: FRR - BGP replicating routes: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 8:31 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
dmbaturin added projects to T3524: Please implement bgp graceful-shutdown: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 8:29 AM · VyOS 1.2 Crux (VyOS 1.2.8)
dmbaturin removed a project from T3515: Successful upgrade 1.2.x to 1.3.0-rc - configuration used: VyOS 1.3 Equuleus.
May 29 2021, 8:28 AM
dmbaturin added a comment to T3515: Successful upgrade 1.2.x to 1.3.0-rc - configuration used.

Thanks for testing!

May 29 2021, 8:28 AM
dmbaturin closed T3515: Successful upgrade 1.2.x to 1.3.0-rc - configuration used as Resolved.
May 29 2021, 8:28 AM
dmbaturin added projects to T3509: No BCP38 for IPv6 on VyOS: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 8:27 AM · VyOS 1.4 Sagitta
dmbaturin closed T3485: Add support for building images in MacOS as Resolved.
May 29 2021, 8:26 AM · vyos-build, build-iso
dmbaturin added projects to T2645: Editing route-map action requires adding a new rule: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 8:24 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
dmbaturin assigned T2566: sstp not able to run tunnels ipv6 only to Unknown Object (User).
May 29 2021, 8:23 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
dmbaturin added a project to T3433: A review of the use of racist language in VyOS: VyOS 1.4 Sagitta.
May 29 2021, 8:20 AM · VyOS 1.4 Sagitta
dmbaturin added a comment to T3433: A review of the use of racist language in VyOS.

For the record, people of all races are still being held in slavery. Calling it "racist" is an incredibly US-history-centric view.

May 29 2021, 8:20 AM · VyOS 1.4 Sagitta
dmbaturin added a comment to T3444: DMVPN Config.

Could you please make this a forum post instead? A bug report should come with precise description of wrong behaviour and reproducing steps: feel free to make one when that info is available.

May 29 2021, 8:09 AM · Invalid
dmbaturin closed T3444: DMVPN Config as Invalid.
May 29 2021, 8:08 AM · Invalid
dmbaturin added projects to T3424: PPPoE IA-PD doesn't work in VRF: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 8:07 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
dmbaturin assigned T3408: vyos 1.4 not delivering ipv6 to devices via PPPOE to Unknown Object (User).
May 29 2021, 8:06 AM · VyOS 1.4 Sagitta
dmbaturin claimed T3397: getty forces --keep-baud in 1.2.x.
May 29 2021, 8:06 AM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.3 Equuleus (1.3.9)
dmbaturin added projects to T3358: VRRP: Is it necessary to support switches between master and backup with script?: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 8:05 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
dmbaturin added projects to T3339: Cloud-Init domain search setting not applied: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 8:04 AM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
dmbaturin assigned T3233: Interface redirect to dum0 to erkin.
May 29 2021, 8:04 AM · VyOS 1.4 Sagitta
dmbaturin added projects to T3214: OpenVPN IPv6 fixes: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 8:03 AM · VyOS 1.5 Circinus
dmbaturin added projects to T3195: Add support for cisco style GRE keepalives: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 8:03 AM · VyOS Rolling
dmbaturin added a project to T3135: BFD configurations fail to be applied: VyOS 1.3 Equuleus.
May 29 2021, 8:03 AM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin closed T3135: BFD configurations fail to be applied as Resolved.

https://github.com/vyos/vyos-1x/pull/648 was merged.

May 29 2021, 8:02 AM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin added projects to T3138: ddclient improperly updated when apply rfc2136 config: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 8:02 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
dmbaturin closed T3103: Rewrite parts of vyos\frr.py for readability, logging and to fix mulitiline regex "bugs" as Resolved.
May 29 2021, 7:59 AM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin changed Is it a breaking change? from syntax-incomp to none on T3098: Cannot talk to rtnetlink: Message too long Command failed -:1.
May 29 2021, 7:58 AM · VyOS 1.3 Equuleus (1.3.4)
dmbaturin assigned T3098: Cannot talk to rtnetlink: Message too long Command failed -:1 to erkin.
May 29 2021, 7:58 AM · VyOS 1.3 Equuleus (1.3.4)
dmbaturin added a project to T3097: Cannot talk to rtnetlink: Message too long Command failed -:1: Invalid.
May 29 2021, 7:58 AM · Invalid
dmbaturin closed T3097: Cannot talk to rtnetlink: Message too long Command failed -:1 as Invalid.

Without any details, this just isn't actionable.

May 29 2021, 7:57 AM · Invalid
dmbaturin added projects to T3017: bridge will lose the tuntap member after reboots: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta, VyOS 1.2 Crux (VyOS 1.2.8).
May 29 2021, 7:57 AM · Invalid
dmbaturin added projects to T3002: VRRP change on IPSec interface causes packet routing issues: VyOS 1.3 Equuleus, VyOS 1.4 Sagitta.
May 29 2021, 7:56 AM · VyOS 1.4 Sagitta