After return strongswan.starer https://github.com/vyos/vyos-1x/commit/f5f43c6639957f95177bb77d2b569e16d4dab9dc
all looks good now, service can be restored without issues
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jan 10 2023
Jan 10 2023
GitHub <noreply@github.com> committed rVYOSONEXde686b3bee8f: Merge pull request #1745 from sever-sever/T4906 (authored by c-po).
The similar task T3008
jack9603301 renamed T4926: using chronyd service to replace ntpd from Replace ntp with clock to using chronyd service to replace ntpd .
Jan 9 2023
Jan 9 2023
jestabro changed the status of T4880: Expose 'add/delete container image' in HTTP-API, a subtask of T578: Support Linux Container, from Open to In progress.
jestabro changed the status of T4880: Expose 'add/delete container image' in HTTP-API from Open to In progress.
a.apostoliuk added a comment to T4924: Systemctl strongswan.service for some reason is not disabled.
I have tested this bug.
After boot everything woks fine without any problems.
But after restart vpn command all these issues began.
- Error message
vyos charon[2079]: 04[NET] no socket implementation registered, sending failed
- Swanctl shows unnormal info. IPSEC phase is down.
- Traffic passes through the tunnel.
- New process appears
a.apostoliuk added a comment to T4924: Systemctl strongswan.service for some reason is not disabled.
Restricted Repository Identity added a reverting change for rVYOSONEX36d16f531236: strongSwan: T4593: add charon-systemd runtime dependency: rVYOSONEX91e0ad075586: Revert "strongSwan: T4593: add charon-systemd runtime dependency".
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX91e0ad075586: Revert "strongSwan: T4593: add charon-systemd runtime dependency".
Restricted Repository Identity added a reverting change for rVYOSONEX6857447bf6ac: strongSwan: upgrade scripts to work with package version 5.9.8: rVYOSONEXf5f43c663995: Revert "strongSwan: upgrade scripts to work with package version 5.9.8".
Christian Poessinger <christian@poessinger.com> committed rVYOSONEXf5f43c663995: Revert "strongSwan: upgrade scripts to work with package version 5.9.8".
Viacheslav changed the status of T4844: Incorrect permissions of the safeguard DB directory, a subtask of T3810: webproxy squidguard rules don't work properly after rewriting to python. , from In progress to Needs testing.
Viacheslav changed the status of T4844: Incorrect permissions of the safeguard DB directory from In progress to Needs testing.
Fixed in T3810
Viacheslav reopened T3810: webproxy squidguard rules don't work properly after rewriting to python. as "Needs testing".
a.apostoliuk changed the status of T4877: Need verification in using import vrf and import vpn, export vpn commands from In progress to Needs testing.
Viacheslav changed the status of T4906: ipsec connections shows only one connection as up from Open to In progress.
c-po closed T4922: Add ssh-client source-interface CLI option, a subtask of T2651: Generate CLI abstraction for options passed to CURL and SSH client, as Resolved.
c-po moved T4922: Add ssh-client source-interface CLI option from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Viacheslav changed the status of T1311: WAN load-balancing can't flush connections when conntrack-sync is enabled from On hold to Needs testing.
Jan 9 2023, 8:32 AM · VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, test
Jan 8 2023
Jan 8 2023
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX87b45f69913b: ssh: T2651: use Debian style include directve for ssh_config.d.
Christian Poessinger <christian@poessinger.com> committed rVYOSONEXc0745d64024a: ssh: T4922: add source-interface support ssh-client.
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX9ebf4db1296a: ssh: T4922: extend verify() when both source-address and source-interface is….
GitHub <noreply@github.com> committed rVYOSONEX5a6c0c4d6111: Merge pull request #1743 from c-po/t2651-ssh-client (authored by c-po).
DerEnderKeks added a comment to T4923: Zebra sends router advertisements even though it's not supposed to.
I don't think this is a bug in FRR, but rather a configuration issue. I'm not really familiar with FRR, but as far as I can tell, sending RAs is an intended feature of it that can be disabled per interface: https://docs.frrouting.org/en/latest/ipv6.html#clicmd-ipv6-nd-suppress-ra
Not sure why it's enabled by default, since I couldn't find anything in the generated /etc/frr/frr.conf that would enable it.
Viacheslav updated the task description for T4924: Systemctl strongswan.service for some reason is not disabled.
Viacheslav updated the task description for T4924: Systemctl strongswan.service for some reason is not disabled.
Viacheslav added a comment to T4923: Zebra sends router advertisements even though it's not supposed to.
Could you open an issue for FRR?
https://github.com/FRRouting/frr/issues
c-po moved T4922: Add ssh-client source-interface CLI option from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.3) board.
c-po moved T4922: Add ssh-client source-interface CLI option from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T4922: Add ssh-client source-interface CLI option, a subtask of T2651: Generate CLI abstraction for options passed to CURL and SSH client, from Open to In progress.
c-po changed the status of T4922: Add ssh-client source-interface CLI option from Open to In progress.
Jan 7 2023
Jan 7 2023
GitHub <noreply@github.com> committed rVYOSONEX47216bbe29e0: Merge pull request #1741 from vfreex/ospf-fix-passive-interface (authored by c-po).
In T4917#140239, @b- wrote:Thanks! That’ll help me with what I’m working on :)From where does this limitation originate, anyway? Is there a way to at least add . to the acceptable characters list, so as to allow for foo.sh? Would that break something that expects to skip over filenames with dots and other characters?
GitHub <noreply@github.com> committed rVYOSONEX873240f6c878: Merge pull request #1728 from aapostoliuk/T4877-sagitta (authored by c-po).
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX8759f3ee7290: smoketest: ospf: extend test 09 w/ passive interfaces.
roedie changed the status of T4884: Missing a community6 in snmpd config from Unknown Status to Resolved.
c-po awarded T4919: TPM-backed config encryption a 100 token.
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX662bae181cdf: xml: T1579: merge generic-description.xml.i and interface/description.xml.i.
Jan 6 2023
Jan 6 2023
Christian Poessinger <christian@poessinger.com> committed rVYOSONEXecb94d82311a: smoketest: T4284: drop redundant qos test config.
The error is in the respective XML op-mode-definitions; arg '--intf-type' should be passed to 'show_interfaces.py' (1.3); 'interfaces.py' (1.4) so that tag node is correctly filtered.
I have checked this config on VyOS 1.4-rolling-202212310809 (Strongswan 5.9.8). The problem is the same.
Thanks! That’ll help me with what I’m working on :)From where does this limitation originate, anyway? Is there a way to at least add . to the acceptable characters list, so as to allow for foo.sh? Would that break something that expects to skip over filenames with dots and other characters?
Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed.
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX781652094f5d: smoketest: qos: T4284: we do not need static routes in qos-basic test.
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX528ecebe57d0: xml: T4883: allow whitespace in generic-description.
Christian Poessinger <christian@poessinger.com> committed rVYOSONEXe32ce63b52ef: static: T4883: fix KeyError: 'table'.
Jan 5 2023
Jan 5 2023
huh, is it possible that we just don't run commit hooks upon changing only comments?
I just edited the file /opt/vyatta/sbin/install-image in a running system to try testing this, and it works as expected at least for the primary minisign key. I didn't test GPG or 2nd minisign key, but I see no reason why there would be an issue there. I did touch those parts, though, so it's probably worth at least having another set of eyes look at it all.
er wait hold up i made a mistake saving/pushing my changes
edit: fixed
I created a PR, but I'm not certain how to compile this part of VyOS to test this, and I'm hoping someone could help me do so -- a quick glance makes it look to me like this is compiled into a .deb that's then installed by https://github.com/vyos/vyos-build/blob/current/scripts/build-vyos-image ?
Christian Poessinger <christian@poessinger.com> committed rVYOSONEX5e474ec9c6c7: smoketest: qos: T4284: remove dscp from base config.
Christian Poessinger <christian@poessinger.com> committed rVYOSONEXe0ad421001d2: qos: T4284: priority-queue and round-robin have no default bandwidth.
In T1237#140040, @Viacheslav wrote:will be fixed in the next rolling release
The error handling on this line is basically nonexistent, but also the coding style is a little hard to follow.
Viacheslav reopened T4895: Tag nodes are overwritten when configured by Cloud-Init from User-Data as "Needs testing".
dmbaturin renamed T4867: "show bgp neighbors ... advertised-routes" and some other commands fail for IPv4 neighbors from Show ipv4 neighbor details fails to "show bgp neighbors ... advertised-routes" and some other commands fail for IPv4 neighbors.