@sempervictus Thanks for the update!
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jan 10 2024
Jan 10 2024
What to do with atop and logrorate?
Viacheslav changed the status of T190: two factor authentication for OpenVPN remote VPN tunnels from Open to Needs testing.
It seems we already have mfa T3834 but it never was documented
https://github.com/vyos/vyos-1x/pull/1008
vyos@r4# set interfaces openvpn vtun0 server mfa totp
Possible completions:
challenge Expect password as result of a challenge response protocol
(default: enable)
digits Number of digits to use for totp hash (default: 6)
drift Time drift in seconds (default: 0)
slop Maximum allowed clock slop in seconds (default: 180)
step Step value for totp in seconds (default: 30)@xrobau Could you test it?
Dec 9 13:04:57 vyos charon: 07[IKE] no matching CHILD_SA config found
Do you have several connections from the hosts behind the same NAT external address to the same hub?
It worked in my previous tests, but it was just one host behind NAT to connect to the HUB.
Re-check please and close if it works fine now. Need to update.
@amcmillen Do you have any examples of how to deploy it on Linux / Debian, etc?
Without live examples, we'll mark it as wont fix and task will be closed.
As I understand, there are now ways to implement it natively for sshd
Reopen please if you have/know a solution for it.
@ordex Les us know if you have some ideas
Thanks
Viacheslav edited projects for T190: two factor authentication for OpenVPN remote VPN tunnels, added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus (1.3.6).
Is it still bug? @sempervictus could you re-check?
We probably need more details
Viacheslav closed T4300: Extend list of supported interfaces for Cloud-init Network Configuration as Resolved.
I guess it is already done https://github.com/vyos/vyos-cloud-init/commit/ae74804ede8fb76a7f27ca869f2b880dbe276ca2
@zsdc Can we close it or you are working on it?
Jan 9 2024
Jan 9 2024
Viacheslav moved T1297: Add GARP settings to VRRP/keepalived from Backport Candidates to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T5909: Container registry with authentication prevents config load (section container) after reboot from Open to In progress.
Viacheslav added a comment to T5909: Container registry with authentication prevents config load (section container) after reboot.
There could be another bug related T5407
I guess we should not Raise config but use the Warning here https://github.com/vyos/vyos-1x/blob/864524ba86b0a4d57ab64d6e9398c3fd5eb2fce4/src/conf_mode/container.py#L405-L408
Jan 8 2024
Jan 8 2024
Viacheslav added a comment to T5909: Container registry with authentication prevents config load (section container) after reboot.
The first thing could be that the container cannot connect to the registry as it happens before static routing (not sure).
vyos@r4# /opt/vyatta/sbin/priority.pl | match "container|static" 450 container 480 protocols/static 481 vrf/name/node.tag/protocols/static [edit] vyos@r4#
Viacheslav added a parent task for T4781: cloud-init fails to handle "::" as a netmask for routes: T5907: cloud-init root task for 1.5 and 1.4 .
Viacheslav added a parent task for T5901: Cloud-init and DHCP exit hook errors: T5907: cloud-init root task for 1.5 and 1.4 .
Viacheslav added a parent task for T5889: Migration NAT 5-to-6 bug: T5907: cloud-init root task for 1.5 and 1.4 .
Viacheslav added a parent task for T5906: Some cloud-init options may be stale or broken.: T5907: cloud-init root task for 1.5 and 1.4 .
Viacheslav added subtasks for T5907: cloud-init root task for 1.5 and 1.4 : T5889: Migration NAT 5-to-6 bug, T5906: Some cloud-init options may be stale or broken., T5901: Cloud-init and DHCP exit hook errors, T5351: VyOS deployed with cloud-init improperly saves config.boot, T4781: cloud-init fails to handle "::" as a netmask for routes.
Ok the file does not have the Release version in config and migration do anyway
https://github.com/vyos/vyos-vm-images/blob/current/roles/install-config/templates/config.boot.j2
vyos@ci-router1# cat /config/config.boot.2024-01-08-083418.pre-migration
nat {
source {
rule 100 {
translation {
address "masquerade"
}
outbound-interface {
name "eth0"
}
}
}
}
interfaces {
ethernet eth0 {
address "dhcp"
hw-id "52:54:00:ff:97:48"
mtu "1500"
}
loopback lo {
}
}
service {
ssh {
client-keepalive-interval "180"
port "22"
}
}
system {
config-management {
commit-revisions "100"
}
host-name "ci-router1"
login {
user vyos {
authentication {
encrypted-password "*"
plaintext-password "vyos"
}
}
}
ntp {
server "time1.vyos.net"
server "time2.vyos.net"
server "time3.vyos.net"
}
syslog {
global {
facility all {
level "notice"
}
facility protocols {
level "debug"
}
}
}
}Jan 7 2024
Jan 7 2024
Viacheslav changed the status of T5900: Improve reliability of the vyos powerdns recursor implementation from Open to Needs testing.
Viacheslav changed the status of T5898: Replace partprobe with partx due to unable to install VyOS from In progress to Needs testing.
Jan 6 2024
Jan 6 2024
Viacheslav changed the status of T5898: Replace partprobe with partx due to unable to install VyOS from Open to In progress.
Jan 5 2024
Jan 5 2024
Viacheslav renamed T5901: Cloud-init and DHCP exit hook errors from Cloud-init and DHCP eixt hook errors to Cloud-init and DHCP exit hook errors.
It seems issues with migrations
[ OK ] Reached target cloud-init.target - Cloud-init target. [ 28.675603] vyos-router[1767]: Waiting for NICs to settle down: settled in 0sec.. [ 31.572854] vyos-router[1767]: Mounting VyOS Config...done. [ 42.670126] vyos-router[1767]: Starting VyOS router: migrate configure failed! [ 43.268753] vyos-config[1773]: Configuration error
Jan 4 2024
Jan 4 2024
Add please the simple examples with set of commands to reproduce
set xxxx x.x.xx
Viacheslav added a parent task for T5876: Dhcp bug in latest 1.5 rolling releases: T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6).
Jan 3 2024
Jan 3 2024
Viacheslav added a comment to T5892: container network interface and policy fails to apply after reboot.
The same issue could be with any dynamic interface like PPP that could be don't exists during the boot process/ISP issues
Which version?
Viacheslav changed the status of T5848: Add triple-isolate flow isolation option to CAKE QoS policy from Open to In progress.
Jan 1 2024
Jan 1 2024
Dec 30 2023
Dec 30 2023
It is more of a question for Jool.
Or you can use a range of required ports that aren't used by the system
PR https://github.com/vyos/vyos-1x/pull/2724
vyos@r4:~$ add system image latest
Dec 28 2023
Dec 28 2023
Viacheslav moved T5827: image-tools: 'show system image' Command Not in Order from Open to Finished on the VyOS 1.5 Circinus board.
Dec 27 2023
Dec 27 2023
Initially we added it only for 1.3 cloudwatch https://github.com/vyos/vyos-build/pull/206/files
I'll leave this here T4541
Dec 26 2023
Dec 26 2023
In T3476#168872, @eronlloyd wrote:This is exciting! Is there a public endpoint available for testing this yet? GitHub is rejecting requests on that URL:
Connecting error: HTTPSConnectionPool(host='raw.githubusercontent.com', port=443): Max retries exceeded with url: /vyos/vyos-rolling-nightly-builds/main/version.json (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7f916bdb2f90>: Failed to establish a new connection: [Errno 16] Device or resource busy'))
Update not found
Example of usage for 1.5
vyos@r4:~$ vyos@r4:~$ show conf com | match upd set system update-check auto-check set system update-check url 'https://raw.githubusercontent.com/vyos/vyos-rolling-nightly-builds/main/version.json' vyos@r4:~$ vyos@r4:~$ vyos@r4:~$ show system updates Current version: 1.5-rolling-202312220023
vyos@r4:~$ vyos@r4:~$ show conf com | match upd set system update-check auto-check set system update-check url 'https://raw.githubusercontent.com/vyos/vyos-rolling-nightly-builds/main/version.json' vyos@r4:~$ vyos@r4:~$ vyos@r4:~$ show system updates Current version: 1.5-rolling-202312220023
Dec 24 2023
Dec 24 2023
@indrajitr Could you take a look? As I remember you are working on it.
On the newest system you can use load /path/to/config
The same task T5712
In T160#168646, @danielpo wrote:That's great!
I tried running make interface_definitions in vyos-1x and copy in the changed files into my vyos install, but the files kept disappearing when rebooting, and couldn't figure out how to build an iso with your vyos 1-x repo.So I wil try it when there is a vyos rolling iso available.
Dec 23 2023
Dec 23 2023
PR https://github.com/vyos/vyos-1x/pull/2677
set interfaces ethernet eth0 address '192.168.122.14/24' set interfaces ethernet eth0 address '192.168.122.10/24' set interfaces ethernet eth2 address '2001:db8::1/64'
Dec 22 2023
Dec 22 2023
Viacheslav added a comment to T5850: Wireguard Peer should allow endpoint to be specified by hostname.
Has the interface index changed?
Also I found this log
It binds port 647
set interfaces dummy dum8765 address '192.0.2.1/24'
After update it cannot pass the smoketest
vyos@r4:~$ /usr/libexec/vyos/tests/smoke/cli/test_service_dhcp-server.py test_dhcp_exclude_in_range (__main__.TestServiceDHCPServer.test_dhcp_exclude_in_range) ... ok test_dhcp_exclude_not_in_range (__main__.TestServiceDHCPServer.test_dhcp_exclude_not_in_range) ... ok test_dhcp_failover (__main__.TestServiceDHCPServer.test_dhcp_failover) ... FAIL test_dhcp_multiple_pools (__main__.TestServiceDHCPServer.test_dhcp_multiple_pools) ... ok test_dhcp_relay_server (__main__.TestServiceDHCPServer.test_dhcp_relay_server) ... ok test_dhcp_single_pool_options (__main__.TestServiceDHCPServer.test_dhcp_single_pool_options) ... ok test_dhcp_single_pool_range (__main__.TestServiceDHCPServer.test_dhcp_single_pool_range) ... ok test_dhcp_single_pool_static_mapping (__main__.TestServiceDHCPServer.test_dhcp_single_pool_static_mapping) ... ok
Cannot pass smoketest
vyos@r4:~$ /usr/libexec/vyos/tests/smoke/cli/test_service_dhcp-server.py test_dhcp_exclude_in_range (__main__.TestServiceDHCPServer.test_dhcp_exclude_in_range) ... ok test_dhcp_exclude_not_in_range (__main__.TestServiceDHCPServer.test_dhcp_exclude_not_in_range) ... ok test_dhcp_failover (__main__.TestServiceDHCPServer.test_dhcp_failover) ... FAIL test_dhcp_multiple_pools (__main__.TestServiceDHCPServer.test_dhcp_multiple_pools) ... ok test_dhcp_relay_server (__main__.TestServiceDHCPServer.test_dhcp_relay_server) ... ok test_dhcp_single_pool_options (__main__.TestServiceDHCPServer.test_dhcp_single_pool_options) ... ok test_dhcp_single_pool_range (__main__.TestServiceDHCPServer.test_dhcp_single_pool_range) ... ok test_dhcp_single_pool_static_mapping (__main__.TestServiceDHCPServer.test_dhcp_single_pool_static_mapping) ... ok
@danielpo marking IPv6 packet is possible
set policy route6 PBR6 interface 'eth1' set policy route6 PBR6 rule 100 set mark '4' set policy route6 PBR6 rule 100 source address '2001:db8::/64'
Some users have issues https://forum.vyos.io/t/grub-menu-fails-to-load-on-serial-only-devices-with-no-kvm/
Dec 21 2023
Dec 21 2023
Not reproduced in 1.3.5
vyos@r1# set service https vrf foo
[edit]
vyos@r1# commit
[edit]
vyos@r1# del service https vrf foo
[edit]
vyos@r1# commit
[edit]
vyos@r1# curl -k --location --request POST 'https://localhost/retrieve' --form data='{"op": "showConfig", "path": ["system", "ip"]}' --form key='foo'
{"success": true, "data": {"arp": {"table-size": "32768"}}, "error": null}[edit]
vyos@r1#
[edit]
vyos@r1# run show ver@SrividyaA could you re-check and close it?
@zsdc Can we backport it?
Viacheslav edited projects for T4022: Add package nat-rtsp-dkms, added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus (1.3.6).
Viacheslav closed T3580: Refactoring firewall ipv6 rule icmpv6, a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
It won't be implemented for 1.3.x due to old backend
Implemented in 1.4-1.5 T5248
Viacheslav edited projects for T3106: 802.11ax support, added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus (1.3.6).
Viacheslav edited projects for T3040: NHRP IPv6 Support, added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus (1.3.6).
Viacheslav closed T3039: Resize a root partition and filesystem automatically during deployment in virtual environments as Resolved.
Implemented
vyos@r1# set system option root-partition-auto-resize [edit] vyos@r1# run show ver