Page MenuHomeVyOS Platform
Feed All Stories

Dec 7 2021

GitHub <noreply@github.com> committed rVYOSONEX7ac6b589e382: Merge pull request #1100 from DmitriyEshenko/sg-1x-03122021-02 (authored by dmbaturin).
Dec 7 2021, 6:55 PM
dmbaturin committed rVYOSONEX45d2429aa5d2: T3006: add a range validator.
Dec 7 2021, 5:13 PM
GitHub <noreply@github.com> committed rVYOSONEX7af98b0bb919: Merge pull request #1102 from dmbaturin/T3006 (authored by dmbaturin).
Dec 7 2021, 5:13 PM
hexes triaged T4025: OpenVPN server with TAP interface, client didn’t see network as High priority.
Dec 7 2021, 1:22 PM · Bugs, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1), Restricted Project, openvpn
Unknown Object (User) added a comment to T4059: VRRP sync-group transition script does not persist after reboot.

Thank you for sharing your information.

Dec 7 2021, 12:49 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.0)
nikeshhajari added a comment to T4059: VRRP sync-group transition script does not persist after reboot.

For anyone looking for a work around until it is patched this is my workaround. I am just adding a line to restart the service right after bootup in the “/config/scripts/vyos-postconfig-bootup.script” (more info on this file in the command scripting section - Command Scripting — VyOS 1.4.x (sagitta) documentation)

Dec 7 2021, 7:45 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXc3190d923b0e: Merge pull request #1098 from goodNETnick/vrrpHealth.
Dec 7 2021, 6:18 AM
Unknown Object (User) added a comment to T4059: VRRP sync-group transition script does not persist after reboot.

I confirm the bug. After rebooting script doesn't work on sync-groups. It's necessary to reload vrrp to start running the script (After rebooting).
More detail:
https://phabricator.vyos.net/T4041

Dec 7 2021, 5:26 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.0)
goodNETnick <pknet@ya.ru> committed rVYOSONEX37501f8baa90: VRRP: T4033: VRRP script_security parameter removed.
Dec 7 2021, 4:14 AM
GitHub <noreply@github.com> committed rVYOSONEXfc7fd2872408: Merge pull request #1101 from goodNETnick/vrrpHealth_1.4 (authored by c-po).
Dec 7 2021, 4:14 AM
goodNETnick <pknet@ya.ru> committed rVYOSONEX046ad24474e8: VRRP: T4033: VRRP script_security parameter removed.
Dec 7 2021, 4:13 AM
GitHub <noreply@github.com> committed rVYOSONEX2466dc192c20: Merge pull request #1098 from goodNETnick/vrrpHealth (authored by c-po).
Dec 7 2021, 4:13 AM
Unknown Object (User) closed T4041: "transition-script" doesn't work on "sync-group" as Resolved.

There is a task with VRRP scripts problem on reboot:

Dec 7 2021, 12:34 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Dec 6 2021

Unknown Object (User) reopened T4041: "transition-script" doesn't work on "sync-group" as "Open".

I tested this bug on "vyos-1.3-beta-202112060443".

image.png (261×460 px, 18 KB)

The problem has been partially resolved. If you restart VYOS, scripts on syn-groups don't work. After using the "vrrp restart" command, everything is ok.

Dec 6 2021, 11:46 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
nikeshhajari created T4059: VRRP sync-group transition script does not persist after reboot.
Dec 6 2021, 10:41 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.0)
Viacheslav renamed T4028: FRR 8.1 routes not being applied to routing table after reboot if an interface has 2 ip addresses from [1.4-rolling-202111290926] 0.0.0.0/0 not being applied to routing table to FRR 8.1 routes not being applied to routing table after reboot if an interface has 2 ip addresses.
Dec 6 2021, 9:47 PM · VyOS 1.4 Sagitta
Viacheslav assigned T4024: Access-lists and prefix-lists disappear when setting ldp hello-ipv4-interval to c-po.
Dec 6 2021, 9:43 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T4024: Access-lists and prefix-lists disappear when setting ldp hello-ipv4-interval.

To reproduce:

set policy access-list 100 rule 1 source any
set policy access-list 100 rule 1 destination any
set policy access-list 100 rule 1 action permit
set interface ethernet eth1 address 203.0.113.1/24
set protocols mpls ldp discovery transport-ipv4-address 203.0.113.1
set protocols mpls ldp interface eth1
set protocols mpls ldp router-id 203.0.113.1
commit

Access list is present:

vyos@r4-epa2# vtysh -c "show run" | grep access
access-list 100 seq 5 permit ip any any
[edit]

Add hello interval:

set protocols mpls ldp discovery hello-ipv4-interval 1

There is no access-list anymore

vyos@r4-epa2# commit
[edit]
vyos@r4-epa2# vtysh -c "show run" | grep access
[edit]
vyos@r4-epa2#
Dec 6 2021, 9:00 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav changed the status of T4024: Access-lists and prefix-lists disappear when setting ldp hello-ipv4-interval from Open to Confirmed.
Dec 6 2021, 8:53 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a reverting change for rVYOSONEX49047b88c9ba: bfd: T3753: FRR 8.1 uses a default echo-interval of 50 - reflect this in CLI: rVYOSONEX8359d95d42a2: Revert "bfd: T3753: FRR 8.1 uses a default echo-interval of 50 - reflect this….
Dec 6 2021, 8:17 PM
c-po committed rVYOSONEX8359d95d42a2: Revert "bfd: T3753: FRR 8.1 uses a default echo-interval of 50 - reflect this….
Dec 6 2021, 8:17 PM
c-po committed rVYOSONEX49047b88c9ba: bfd: T3753: FRR 8.1 uses a default echo-interval of 50 - reflect this in CLI.
Dec 6 2021, 8:10 PM
showipintbri added a comment to T4039: Rsyslog to use 'protocol23format' for protocol UDP.

As mentioned I'm running: VyOS 1.3.0-rc6

Dec 6 2021, 7:59 PM · VyOS 1.3 Equuleus (1.3.6)
c-po closed T4055: Add VRF support for HTTP(S) API service as Resolved.
Dec 6 2021, 7:59 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta
c-po committed rVYOSONEXd731caccf3ee: xml: ntp: remove indent.
Dec 6 2021, 7:58 PM
c-po committed rVYOSONEX30c78e83ecd5: xml: vrf: use "txt" in valueHelp.
Dec 6 2021, 7:58 PM
c-po committed rVYOSONEX955f260ce682: https: T4055: add vrf support.
Dec 6 2021, 7:58 PM
c-po added a comment to T4055: Add VRF support for HTTP(S) API service.
cpo@LR1.wue3:~$ show vrf mgmt processes
 2030  nginx
 2031  nginx
 2032  nginx
Dec 6 2021, 7:56 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta
Unknown Object (User) changed the status of T3006: Accel-PPP & vlan-mon config get invalid VLAN from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/1100

Dec 6 2021, 7:48 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po committed rVYOSONEX93b7c5f60ebe: https: pki: T3642: remove debug print().
Dec 6 2021, 7:06 PM
c-po committed rVYOSONEX7389a85ec91e: smoketest: bfd: T4054: verify peer -> profile assignment.
Dec 6 2021, 7:01 PM
c-po committed rVYOSONEXb6598b7f9f8c: bfd: T1183: use unified error style.
Dec 6 2021, 7:01 PM
c-po committed rVYOSONEXef2242e8e5c2: bfd: T4054: bugfix missing profile assignment to peer.
Dec 6 2021, 7:01 PM
c-po added a comment to T4054: BFD profiles configuration incorrect behavior..

BGP/OSPF bfd profile support will be implemented in T4058

Dec 6 2021, 7:00 PM · VyOS 1.4 Sagitta
c-po claimed T4055: Add VRF support for HTTP(S) API service.
Dec 6 2021, 6:51 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta
c-po claimed T4058: BFD: add BGP and OSPF "bfd profile" support.
Dec 6 2021, 6:51 PM · VyOS 1.4 Sagitta
c-po created T4058: BFD: add BGP and OSPF "bfd profile" support.
Dec 6 2021, 6:50 PM · VyOS 1.4 Sagitta
c-po changed the status of T4054: BFD profiles configuration incorrect behavior. from Open to Confirmed.
Dec 6 2021, 6:43 PM · VyOS 1.4 Sagitta
c-po added a comment to T4054: BFD profiles configuration incorrect behavior..

VyOS

set protocols bfd profile BFD_OSPF interval multiplier '3'
set protocols bfd profile BFD_OSPF interval receive '300'
set protocols bfd profile BFD_OSPF interval transmit '300'

FRR

bfd
 profile BFD_OSPF
 !
Dec 6 2021, 6:16 PM · VyOS 1.4 Sagitta
c-po added a comment to T4057: Commit time for deleting sflow configuration ~1.5 min.

It invokes systemd-tty-ask-password-agent which stalls the process termination:

Dec 6 2021, 6:13 PM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEX035a3f1b0531: netns: T3829: Add op-mode for show netns.
Dec 6 2021, 5:49 PM
Viacheslav committed rVYOSONEX3d413c06621c: netns: T3829: Allow attach dumX interfaces to netns.
Dec 6 2021, 5:49 PM
Viacheslav committed rVYOSONEX502448171a62: netns: T3829: Add netns set section in interface.py.
Dec 6 2021, 5:49 PM
Viacheslav committed rVYOSONEXa2fe5dc40d43: netns: T3829: Add XML for netns CLI configuration.
Dec 6 2021, 5:49 PM
Viacheslav committed rVYOSONEX47584e030f33: netns: T3829: Ability to configure network namespaces.
Dec 6 2021, 5:49 PM
GitHub <noreply@github.com> committed rVYOSONEX84455522574a: Merge pull request #1077 from sever-sever/T3829 (authored by c-po).
Dec 6 2021, 5:49 PM
c-po moved T4046: Sflow - Add Source address parameter from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0) board.
Dec 6 2021, 5:47 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po edited projects for T4046: Sflow - Add Source address parameter, added: VyOS 1.3 Equuleus (1.3.0); removed VyConf.
Dec 6 2021, 5:47 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T4046: Sflow - Add Source address parameter from Backlog to Finished on the VyOS 1.4 Sagitta board.
Dec 6 2021, 5:46 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T4052: Validator return traceback on VRRP configuration with the script path not in config dir from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0) board.
Dec 6 2021, 5:46 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po edited projects for T4052: Validator return traceback on VRRP configuration with the script path not in config dir, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus.
Dec 6 2021, 5:46 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T4052: Validator return traceback on VRRP configuration with the script path not in config dir from Open to Finished on the VyOS 1.4 Sagitta board.
Dec 6 2021, 5:45 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T4052: Validator return traceback on VRRP configuration with the script path not in config dir from 1.3.0 to Finished on the VyOS 1.3 Equuleus board.
Dec 6 2021, 5:45 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T4052: Validator return traceback on VRRP configuration with the script path not in config dir from Need Triage to 1.3.0 on the VyOS 1.3 Equuleus board.
Dec 6 2021, 5:45 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po committed rVYOSONEX957e215b1706: sflow: T4046: Add source-address for sflow (authored by Viacheslav).
Dec 6 2021, 5:45 PM
c-po committed rVYOSONEX80fc0319b2cd: validators: T4053: Fix exit code for script (authored by Viacheslav).
Dec 6 2021, 5:45 PM
c-po committed rVYOSONEX6daac5a542fb: validators: T4052: Fix for warn message in the validator script (authored by Viacheslav).
Dec 6 2021, 5:45 PM
c-po committed rVYOSONEXb13a59f0a19c: smoketests: mpls: add initial basic testcase.
Dec 6 2021, 5:43 PM
c-po committed rVYOSONEXde37bb80bf7d: mpls: ldp: T3753: add proper indention to Jinja2 template.
Dec 6 2021, 5:43 PM
c-po committed rVYOSONEX5b3ff8574c82: smoketests: mpls: add initial basic testcase.
Dec 6 2021, 5:43 PM
c-po committed rVYOSONEX3a29968d6b8d: mpls: ldp: T3753: add proper indention to Jinja2 template.
Dec 6 2021, 5:43 PM
c-po committed rVYOSONEX6f7c7bbabc1b: mpls: ldp: T3753: adjust to new FRR 8.1 syntax.
Dec 6 2021, 5:43 PM
Viacheslav changed the status of T4046: Sflow - Add Source address parameter from In progress to Needs testing.
Dec 6 2021, 5:17 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav changed the status of T4052: Validator return traceback on VRRP configuration with the script path not in config dir from In progress to Needs testing.
Dec 6 2021, 5:00 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav changed the status of T4053: VRRP impossible to set scripts out of the /config directory from Open to Needs testing.
Dec 6 2021, 4:59 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXb6fbe6d3a5e8: validators: T4052: Fix for warn message in the validator script.
Dec 6 2021, 4:41 PM
Viacheslav committed rVYOSONEX001cc6655f18: validators: T4053: Fix exit code for script.
Dec 6 2021, 4:41 PM
GitHub <noreply@github.com> committed rVYOSONEXbd7832666a5b: Merge pull request #1097 from sever-sever/T4052 (authored by c-po).
Dec 6 2021, 4:41 PM
Viacheslav committed rVYOSONEXbb77dd269bfb: sflow: T4046: Add source-address for sflow.
Dec 6 2021, 4:40 PM
GitHub <noreply@github.com> committed rVYOSONEX3e027ddb1f4d: Merge pull request #1099 from sever-sever/T4046 (authored by c-po).
Dec 6 2021, 4:40 PM
Viacheslav added a comment to T4046: Sflow - Add Source address parameter.

The correct key for sflow sfprobe_source_ip
PR https://github.com/vyos/vyos-1x/pull/1099

Dec 6 2021, 3:16 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav changed the status of T4046: Sflow - Add Source address parameter from Open to In progress.
Dec 6 2021, 2:45 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jestabro added a comment to T4053: VRRP impossible to set scripts out of the /config directory.

cf. T3980, also

Dec 6 2021, 2:29 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jestabro edited projects for T2768: Define a high level HTTP API, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus.
Dec 6 2021, 2:22 PM · VyOS Rolling
Viacheslav created T4057: Commit time for deleting sflow configuration ~1.5 min.
Dec 6 2021, 2:15 PM · VyOS 1.4 Sagitta
daniil created T4056: Traffic policy not set in live configuration.
Dec 6 2021, 1:02 PM · vyatta-cfg, VyOS 1.4 Sagitta
Viacheslav changed the status of T4033: VRRP - Error security when setting scripts from Open to In progress.
Dec 6 2021, 12:10 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) added a comment to T4033: VRRP - Error security when setting scripts.

PR:
https://github.com/vyos/vyos-1x/pull/1098

Dec 6 2021, 11:54 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav updated the task description for T4053: VRRP impossible to set scripts out of the /config directory.
Dec 6 2021, 11:35 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
daniil created T4055: Add VRF support for HTTP(S) API service.
Dec 6 2021, 10:48 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta
Viacheslav added a comment to T4053: VRRP impossible to set scripts out of the /config directory.

PR https://github.com/vyos/vyos-1x/pull/1097

Dec 6 2021, 10:19 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a project to T4053: VRRP impossible to set scripts out of the /config directory: VyOS 1.3 Equuleus (1.3.0).
Dec 6 2021, 10:19 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
e.khudiyev updated subscribers of T4054: BFD profiles configuration incorrect behavior..
Dec 6 2021, 10:18 AM · VyOS 1.4 Sagitta
Unknown Object (User) added a comment to T4053: VRRP impossible to set scripts out of the /config directory.

I believe that CLI should protect a user and deny him to shoot in his leg. In any case, we cannot guarantee a successful update if the script will not be migrated

Dec 6 2021, 10:15 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
e.khudiyev created T4054: BFD profiles configuration incorrect behavior..
Dec 6 2021, 10:14 AM · VyOS 1.4 Sagitta
Viacheslav created T4053: VRRP impossible to set scripts out of the /config directory.
Dec 6 2021, 10:10 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav changed the status of T4052: Validator return traceback on VRRP configuration with the script path not in config dir from Open to In progress.
Dec 6 2021, 9:17 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a comment to T4052: Validator return traceback on VRRP configuration with the script path not in config dir.

PR https://github.com/vyos/vyos-1x/pull/1097

Dec 6 2021, 9:13 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) added a comment to T4033: VRRP - Error security when setting scripts.

We definitely have to delete enable_script_security from https://github.com/vyos/vyos-1x/blob/current/data/templates/vrrp/keepalived.conf.tmpl#L10

Dec 6 2021, 8:06 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) added a project to T4033: VRRP - Error security when setting scripts: VyOS 1.4 Sagitta.
Dec 6 2021, 8:05 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) added a project to T4052: Validator return traceback on VRRP configuration with the script path not in config dir: VyOS 1.4 Sagitta.
Dec 6 2021, 7:56 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav claimed T4052: Validator return traceback on VRRP configuration with the script path not in config dir.
Dec 6 2021, 7:55 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
trae32566 reopened T1869: Install and Boot from RAID Doesn't Work as "Open".

I think this actually inadvertently broke things even more, because now:

Dec 6 2021, 7:43 AM
Unknown Object (User) created T4052: Validator return traceback on VRRP configuration with the script path not in config dir.
Dec 6 2021, 7:39 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) changed the status of T4012: Add VRF support for TFTP from Unknown Status to Resolved.
Dec 6 2021, 6:38 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) added a comment to T4033: VRRP - Error security when setting scripts.

I have the same problem. I created a script, but it doesn't work. VRRP Log write that the skript is unsecure.

Dec 6 2021, 6:13 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Dec 5 2021

devon added a project to T4024: Access-lists and prefix-lists disappear when setting ldp hello-ipv4-interval: VyOS 1.3 Equuleus.
Dec 5 2021, 9:04 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T4041: "transition-script" doesn't work on "sync-group" as Resolved.
Dec 5 2021, 8:26 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po committed rVYOSONEXec13cac66ba6: vrrp: T4041: bugfix sync-group transition-scripts not executed.
Dec 5 2021, 8:26 PM
c-po committed rVYOSONEX025f0609cea8: vrrp: T4041: bugfix sync-group transition-scripts not executed.
Dec 5 2021, 8:25 PM