@mbailey Can you check it in 1.3.0-rc6?

Same happens to other op-mode commands:

Fixed in T3217

please refer to the PKI documentation at https://docs.vyos.io/en/latest/configuration/pki/index.html or https://blog.vyos.io/pki-and-ipsec-ikev2-remote-access-vpn about how the PKI feature is used.

You don't need line like "begin|end"
For example

set pki ca openvpn_vtun10 certificate 'MIIDSzCCAjOgAwIBAgIUEtkjCVKmZCwUeYLenoznpkxMeZswQ=='

I tested it on ESXi

May I ask whether the vulnerability report should be made public here or submitted to which mailbox? Will a PGP public key be provided to encrypt sensitive information?

It seems some bug in KVM.
I still see this bug
VyOS 1.3.0-rc6 config

vyos@r4-1.3# run show conf com | match mac
set interfaces macsec macsec1 address '10.0.0.2/30'
set interfaces macsec macsec1 security cipher 'gcm-aes-128'
set interfaces macsec macsec1 security encrypt
set interfaces macsec macsec1 security mka cak 'f42e15acecc0c1634582bdd32429efdf'
set interfaces macsec macsec1 security mka ckn '0ef5ebf77ba031e45ad270e9f80c804d500a2649789db1c87b751114f329e032'
set interfaces macsec macsec1 source-interface 'eth1'

https://github.com/vyos/vyatta-cfg-vpn/pull/48

Works as designed. Note that the MACSec interface will only change its state to u/u after a successful key-exchange.

@kroy Did you get it with any other rc versions?

PR for 1.3 https://github.com/vyos/vyos-1x/pull/999

Does it work if you grand the capabilities to the openvpn group in /etc/security/capability.conf?

When there is an example for operator rest api commands I could add some functionality.
But the architecture for such operations should be provided by someone who is deeper involved in the vyos roadmap.

Required migration script to set commands to proper AFI.

Maybe disable sent "accounting messages" by default and enable it as a configuration option explicitly?

Fixed VyOS 1.3-beta-202109060342

set interfaces ethernet eth0 redirect 'ifb0'
set interfaces input ifb0 traffic-policy out 'MY-INGRESS-SHAPING'
set traffic-policy shaper MY-INGRESS-SHAPING bandwidth '1000kbit'
set traffic-policy shaper MY-INGRESS-SHAPING default bandwidth '1000kbit'
set traffic-policy shaper MY-INGRESS-SHAPING default queue-type 'fair-queue'

PR for 1.3 https://github.com/vyos/vyos-1x/pull/998

@francis Can you check 1.3.0-rc6?

We tested this on 1.4-rolling-202103040218 on our router, unfortunately as this is a production device I couldn't spend long diagnosing this. After upgrading the system image the device didn't come back up (I have layer 2 connectivity to the device via a VLAN on eth1 normally). So I logged in via our serial console and did a show interfaces

If to use modified Regex --regex \'^((eth|lan)[0-9]+|(eth)[0-9]v.+|(eno|ens|enp|enx).+)$\'
https://github.com/vyos/vyos-1x/blob/10814c4d3360598262e991e4b20768dfcde91d75/interface-definitions/interfaces-ethernet.xml.in#L17

Fixed VyOS 1.3-beta-202109060342, VyOS 1.4-rolling-202109060217

vyos@r4-1.3:~$ show conf com | match lldp
set service lldp interface all