merged
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Feb 2 2024
Feb 2 2024
Viacheslav moved T5739: Password recovery does not work if public keys are configured from Open to Finished on the VyOS 1.4 Sagitta board.
wget https://github.com/RUB-NDS/Terrapin-Scanner/releases/download/v1.1.0/Terrapin_Scanner_Linux_amd64 chmod +x Terrapin_Scanner_Linux_amd64
Viacheslav closed T5941: [1.3.5 -> 1.4.0-RC1 Migration] Orphaned Configuration Nodes Cause Issues, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
Fixed https://packages.debian.org/buster/openssh-server
vyos@r15:~$ show version all | match ssh ii libssh-4:amd64 0.8.7-1+deb10u2 amd64 tiny C SSH library (OpenSSL flavor) ii libssh2-1:amd64 1.8.0-2.1+deb10u1 amd64 SSH2 client-side library ii openssh-client 1:7.9p1-10+deb10u4 amd64 secure shell (SSH) client, for secure access to remote machines ii openssh-server 1:7.9p1-10+deb10u4 amd64 secure shell (SSH) server, for secure access from remote machines ii openssh-sftp-server 1:7.9p1-10+deb10u4 amd64 secure shell (SSH) sftp server module, for SFTP access from remote machines ii python3-paramiko 2.4.2-0.1+deb10u1 all Make ssh v2 connections (Python 3) ii sshguard 2.3.1-1 amd64 Protects from brute force attacks against ssh vyos@r15:~$ vyos@r15:~$ show version
Viacheslav moved T5955: Rootless containers/set uid/gid for container from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav raised the priority of T5971: Create the same view of ppp section for all accel-ppp services from Low to Normal.
Viacheslav changed the status of T5971: Create the same view of ppp section for all accel-ppp services from In progress to Needs testing.
Viacheslav changed the status of T5966: Adjust dynamic dns configuration address subpath to be more intuitive and other op-mode adjustments, a subtask of T5791: Update dynamic dns configuration path to be consistent with other areas of VyOS, from Open to Needs testing.
Viacheslav changed the status of T5966: Adjust dynamic dns configuration address subpath to be more intuitive and other op-mode adjustments from Open to Needs testing.
Feb 1 2024
Feb 1 2024
Viacheslav changed the status of T5995: Kernel NIC-drivers for Huawei NICs are not properly enabled from Open to Needs testing.
Viacheslav changed the status of T5619: Update the Intel ixgbe driver due to issues with Intel X533 from Open to Needs testing.
Jan 31 2024
Jan 31 2024
Viacheslav moved T5999: load-balancing reverse-proxy can't configure root as a redirect from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav closed T5999: load-balancing reverse-proxy can't configure root as a redirect as Resolved.
Jan 30 2024
Jan 30 2024
Viacheslav added a parent task for T6004: Missing RPKI boot priority prevents it from loading: T5938: Migration fail root task for 1.4-rc.
Viacheslav changed the status of T6003: Add 'show rpki as-number' and 'show rpki prefix' from Open to In progress.
Viacheslav changed the subtype of T6000: [1.3.x -> 1.5.x] migrating threw exception in /opt/vyatta/etc/config-migrate/migrate/https/5-to-6, performed workaround from "Task" to "Bug".
Viacheslav triaged T6002: When using git as config-management commit-archive, comment is not used as commit message as Wishlist priority.
Jan 29 2024
Jan 29 2024
Duplicate of https://vyos.dev/T3500
The root issue could be in https://vyos.dev/T5611 T5611
Viacheslav added a comment to T5999: load-balancing reverse-proxy can't configure root as a redirect.
Viacheslav renamed T5999: load-balancing reverse-proxy can't configure root as a redirect from load-balancing can't configure root as a redirect to load-balancing reverse-proxy can't configure root as a redirect.
Viacheslav triaged T5999: load-balancing reverse-proxy can't configure root as a redirect as Normal priority.
@stoicopa Do you have any ideas for CLI?
@cleopold73 Do you have any ideas for CLI?
Viacheslav edited projects for T5997: Support ssl backends on reverse-proxy, added: VyOS 1.5 Circinus; removed VyOS 1.2 Crux.
It is more of an upstream issue.
In addition, the PR already exists https://github.com/vyos/vyos-build/pull/438
Jan 28 2024
Jan 28 2024
Related to FRR logic
Won’t fix
Add a bug report on their repo
Jan 27 2024
Jan 27 2024
Viacheslav changed the status of T5991: 1.4.0-RC3 deleting portions of config in error (migration script), a subtask of T5938: Migration fail root task for 1.4-rc, from Open to Needs testing.
Viacheslav changed the status of T5991: 1.4.0-RC3 deleting portions of config in error (migration script) from Open to Needs testing.
Viacheslav triaged T5991: 1.4.0-RC3 deleting portions of config in error (migration script) as High priority.
Viacheslav triaged T5990: Intel 25G E810 kernel ice driver does not work with LLDP as Normal priority.
Jan 26 2024
Jan 26 2024
Jan 25 2024
Jan 25 2024
Viacheslav triaged T5986: Container: Error on commit when environment variable value contains \n line break as Low priority.
XDP was dropped
The task is not an actual
Jan 24 2024
Jan 24 2024
I have another result
vyos@r1# set protocols static route 203.0.113.22/32 dhcp-interface eth2 [edit] vyos@r1# commit [edit] vyos@r1# [edit] vyos@r1# vtysh -c "show run" | match 203.0.113 ip route 203.0.113.22/32 192.168.100.1 eth2 [edit] vyos@r1#
Viacheslav added a comment to T5941: [1.3.5 -> 1.4.0-RC1 Migration] Orphaned Configuration Nodes Cause Issues.
PR for policy https://github.com/vyos/vyos-1x/pull/2890
PR for traffic-policy https://github.com/vyos/vyos-1x/pull/2892
WLB is another feature and not related to protocols failover route
Viacheslav changed the status of T5811: static dhcp-interface routes not installed from Open to Needs testing.
Update:
It is completely different issue
Viacheslav triaged T5981: IPsec site-to-site migrated PKI ca certificates are created with an '@' as High priority.
@devon Could you share the example of "set" commands before migration?
It is a good practice to have "set" of commands. It makes the lives of developers easy and is one of the requirements of creating bug reports.
Thanks.
In T1237#174506, @Harliff wrote:BTW, do you have any plans to use this mechanism for WAN failover?
Jan 23 2024
Jan 23 2024
Viacheslav added a comment to T5977: nftables: Operation not supported when using match-ipsec in outbound firewall.
Also, issues with the input
vyos@r4# set firewall ipv4 input filter rule 10 action accept [edit] vyos@r4# set firewall ipv4 input filter rule 10 ipsec match-ipsec [edit] vyos@r4# [edit] vyos@r4# commit [ firewall ] Failed to apply firewall: /run/nftables.conf:19:17-27: Error: No such file or directory; did you mean table ‘vyos_filter’ in family ip? delete table ip vyos_filter ^^^^^^^^^^^ /run/nftables.conf:47:18-28: Error: No such file or directory; did you mean table ‘vyos_filter’ in family ip? delete table ip6 vyos_filter ^^^^^^^^^^^ /run/nftables.conf:75:21-31: Error: No such file or directory; did you mean table ‘vyos_filter’ in family ip? delete table bridge vyos_filter ^^^^^^^^^^^
Viacheslav changed the status of T5974: QoS policy shaper is currently miscalculating bandwidth and ceil values for the default class from Open to In progress.
Jan 22 2024
Jan 22 2024
Viacheslav updated the task description for T5974: QoS policy shaper is currently miscalculating bandwidth and ceil values for the default class.
Viacheslav renamed T5975: GraphQL expects script otp.py that does not exists in 1.4 from GraphQL expects script opt.py that does not exists in 1.4 to GraphQL expects script otp.py that does not exists in 1.4.
Viacheslav triaged T5975: GraphQL expects script otp.py that does not exists in 1.4 as High priority.
The cause could be due to wrong calculations for bandwidth/ceil class default T5974
Viacheslav closed T5961: QoS policy shaper vif with ceiling fails on commit, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
Looks good:
vyos@r1# tc class show dev eth1 class htb 1:1 root rate 1Gbit ceil 1Gbit burst 1375b cburst 1375b class htb 1:64 parent 1:1 leaf 8005: prio 0 rate 100Mbit ceil 100Mbit burst 15337b cburst 1600b class htb 1:65 parent 1:1 leaf 8006: prio 7 rate 750Mbit ceil 900Mbit burst 130968b cburst 1462b [edit] vyos@r1#
Viacheslav moved T5958: QoS policy shaper-hfsc is not implemented from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav closed T5958: QoS policy shaper-hfsc is not implemented, a subtask of T4284: QoS: rewrite to XML and Python, as Resolved.
Viacheslav triaged T5967: Multi-hop BFD connections can't be established; please add minimum-ttl option. as Normal priority.
Viacheslav reopened T5961: QoS policy shaper vif with ceiling fails on commit, a subtask of T5938: Migration fail root task for 1.4-rc, as Needs testing.
Viacheslav moved T5961: QoS policy shaper vif with ceiling fails on commit from Finished to Backport Candidates on the VyOS 1.4 Sagitta board.
Viacheslav moved T5961: QoS policy shaper vif with ceiling fails on commit from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav closed T5961: QoS policy shaper vif with ceiling fails on commit, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
Viacheslav added a comment to T5967: Multi-hop BFD connections can't be established; please add minimum-ttl option..
@exp Add "set" of the commands to reproduce.
Jan 21 2024
Jan 21 2024
Viacheslav lowered the priority of T5619: Update the Intel ixgbe driver due to issues with Intel X533 from Urgent! to Normal.
@trae32566 Thanks for confirming
Viacheslav closed T5799: vyos unbootable after 1.4-rolling-202308240020 to 1.5-rolling-202312010026 upgrade as Resolved.
It could be priority https://github.com/vyos/vyos-1x/pull/2703 or another fix. I can't say exactly.