yes, but it's in process to merge : https://github.com/vyos/vyos-documentation/pull/1035
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Advanced Search
Aug 16 2023
Aug 15 2023
Now we have this included in the nightly builds, is there any documentation on how these refactored rules should be modified? Just bumped my version and was completely lost
Could you share the full configuration ? so we can analyze what is the source of this problem .
2.1:
Suggestion that established/related merges to a single rule such as:
Cannot pass the smoketest in CI
07:19:00 DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_service_monitoring_zabbix-agent.py 07:19:02 DEBUG - test_01_zabbix_agent (__main__.TestZabbixAgent.test_01_zabbix_agent) ... FAIL 07:19:04 DEBUG - 07:19:04 DEBUG - ====================================================================== 07:19:04 DEBUG - FAIL: test_01_zabbix_agent (__main__.TestZabbixAgent.test_01_zabbix_agent) 07:19:04 DEBUG - ---------------------------------------------------------------------- 07:19:04 DEBUG - Traceback (most recent call last): 07:19:04 DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_monitoring_zabbix-agent.py", line 34, in tearDown 07:19:04 DEBUG - self.assertTrue(process_named_running(PROCESS_NAME)) 07:19:04 DEBUG - AssertionError: None is not true 07:19:04 DEBUG - 07:19:04 DEBUG - ----------------------------------------------------------------------
Is not reproduced in the local VM test
vyos@r14:~$ /usr/libexec/vyos/tests/smoke/cli/test_service_monitoring_zabbix-agent.py test_01_zabbix_agent (__main__.TestZabbixAgent.test_01_zabbix_agent) ... ok
The original task https://vyos.dev/T5080
Aug 14 2023
Still works in VyOS 1.4-rolling-202308140557:
Verified in VyOS 1.4-rolling-202308140557:
Seems to still be happy in VyOS 1.4-rolling-202308140557:
Verified in VyOS 1.4-rolling-202308140557:
1:
Shouldnt set firewall global-options resolver-cache have "enable" and "disable" as options?
Looks like its working as expected in VyOS 1.4-rolling-202308140557:
interesting, as the above diff actually does the same but a bit earlier in the boot process
Aug 12 2023
I was able to fix by adding the following code in /config/scripts/vyos-postconfig-bootup.script you can edit and save by running:
I can confirm that the issue is still here, something is wrong and usually when you assign ipv6 address to sub-interface like vlan or bridge etc.
How is your IPv6 config from the VyOS config?
Enabled inside VyOS kernel - please check with the next available rolling ISO
- Vyos Router <-> Switch <-> Multiple Computers
A workaround in the meantime:
And in that case the attacker would just replace your router with their own since they already got physical access to the box.
There are use cases when it would be ideal to force a password at boot to protect the contents of the configuration. For example, a portable router with sensitive keys meant for temporary network connectivity.
The problem is how to make sure that the router can boot and reboot (for example "set system option reboot-on-panic" is handy) on itself without somebody having to connect to its console before it starts to function again. Really shitty situation for a remote site because then somebody needs to visit it aswell.
- How is the physical topology (can you provide a drawing)?
I am having this exact problem and it evidently has been a problem for quite a few years.
Can this be accomplished with LUKS?
Aug 11 2023
That CLI node ipv6 only implements a minor subset of the entire featureset of port forwarding.
Adding comments : maybe discontinue show ip bgp gives some issues / problems with automation tools (ansible o some custom script)While thinking out loud, it can be useful for new users create to alias.
Its not possible to "symlink" it?
Unfortunately this is "not that easy" as out CLI commands are passed down to FRR raw.
But at the same time it would help others who migrate to VyOS from Cisco, Arista etc.
show ip bgp is an old command, it comes from quagga ...So in my point of view , adding more command to do the same , could generate more confusion . show bgp address-family should be used.
PR created: https://github.com/vyos/vyatta-op/pull/66