- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Feb 3 2024
Feb 3 2024
c-po added a parent task for T2044: RPKI doesn't boot properly: T6004: Missing RPKI boot priority prevents it from loading.
c-po added a subtask for T6004: Missing RPKI boot priority prevents it from loading: T2044: RPKI doesn't boot properly.
Feb 2 2024
Feb 2 2024
c-po moved T6003: Add 'show rpki as-number' and 'show rpki prefix' from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po moved T6003: Add 'show rpki as-number' and 'show rpki prefix' from Need Triage to Finished on the VyOS 1.5 Circinus board.
c-po moved T5998: replay_window setting under vpn in config from Need Triage to Finished on the VyOS 1.5 Circinus board.
Viacheslav edited projects for T973: Create Prometheus Exporter for VyOS , added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus (1.3.6).
Viacheslav closed T2459: Migrate vyatta-show-nat-rules.pl to Python, a subtask of T2198: Rewrite NAT in new XML/Python style, as Resolved N/A.
Viacheslav closed T2459: Migrate vyatta-show-nat-rules.pl to Python, a subtask of T3355: Remove all remaining legacy Vyatta code, as Resolved N/A.
It won't be implemented for 1.3.x
Have this for 1.4/1.5
Viacheslav changed the status of T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore from Open to Confirmed.
Viacheslav edited projects for T5153: OpenConnect route restriction via iptables is ignored, added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus (1.3.6).
Viacheslav moved T5739: Password recovery does not work if public keys are configured from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.6) board.
Viacheslav moved T5739: Password recovery does not work if public keys are configured from Need Triage to Finished on the VyOS 1.4 Sagitta board.
merged
wget https://github.com/RUB-NDS/Terrapin-Scanner/releases/download/v1.1.0/Terrapin_Scanner_Linux_amd64 chmod +x Terrapin_Scanner_Linux_amd64
Viacheslav closed T5941: [1.3.5 -> 1.4.0-RC1 Migration] Orphaned Configuration Nodes Cause Issues, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
Fixed https://packages.debian.org/buster/openssh-server
vyos@r15:~$ show version all | match ssh ii libssh-4:amd64 0.8.7-1+deb10u2 amd64 tiny C SSH library (OpenSSL flavor) ii libssh2-1:amd64 1.8.0-2.1+deb10u1 amd64 SSH2 client-side library ii openssh-client 1:7.9p1-10+deb10u4 amd64 secure shell (SSH) client, for secure access to remote machines ii openssh-server 1:7.9p1-10+deb10u4 amd64 secure shell (SSH) server, for secure access from remote machines ii openssh-sftp-server 1:7.9p1-10+deb10u4 amd64 secure shell (SSH) sftp server module, for SFTP access from remote machines ii python3-paramiko 2.4.2-0.1+deb10u1 all Make ssh v2 connections (Python 3) ii sshguard 2.3.1-1 amd64 Protects from brute force attacks against ssh vyos@r15:~$ vyos@r15:~$ show version
syncer changed the status of T5909: Container registry with authentication prevents config load (section container) after reboot from In progress to Backport candidate.
c-po moved T5848: Add triple-isolate flow isolation option to CAKE QoS policy from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po moved T5848: Add triple-isolate flow isolation option to CAKE QoS policy from Need Triage to Finished on the VyOS 1.5 Circinus board.
n.fort changed the status of T6009: Firewall - Time not working properly when not using UTC from Open to Confirmed.
n.fort updated the task description for T6009: Firewall - Time not working properly when not using UTC.
mark22k awarded T766: Implement support for the Tinc VPN daemon a Like token.
Documentation PR: https://github.com/vyos/vyos-documentation/pull/1261
Viacheslav moved T5955: Rootless containers/set uid/gid for container from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Viacheslav raised the priority of T5971: Create the same view of ppp section for all accel-ppp services from Low to Normal.
Viacheslav changed the status of T5971: Create the same view of ppp section for all accel-ppp services from In progress to Needs testing.
Would love to see more on this.
Viacheslav changed the status of T5966: Adjust dynamic dns configuration address subpath to be more intuitive and other op-mode adjustments, a subtask of T5791: Update dynamic dns configuration path to be consistent with other areas of VyOS, from Open to Needs testing.
Viacheslav changed the status of T5966: Adjust dynamic dns configuration address subpath to be more intuitive and other op-mode adjustments from Open to Needs testing.
I can reproduce this on VyOS 1.4.0-rc3. It also appears that IPv6 addresses are only garbled on subinterfaces.
Feb 1 2024
Feb 1 2024
I've upgraden from a self built 1.4-202312040739 to 1.4rc3
I can not reproduce the issue while upgrading from VyOS 1.3.5 -> 1.4.0-rc3
jestabro updated the task description for T6006: Configure system-specific capabilities independently of migration scripts.
jestabro triaged T6006: Configure system-specific capabilities independently of migration scripts as Normal priority.
c-po added a comment to T5967: Multi-hop BFD connections can't be established; please add minimum-ttl option..
PR for 1.3 https://github.com/vyos/vyos-1x/pull/2920
c-po changed the status of T6004: Missing RPKI boot priority prevents it from loading, a subtask of T5938: Migration fail root task for 1.4-rc, from In progress to Needs reporter action.
c-po changed the status of T6004: Missing RPKI boot priority prevents it from loading from In progress to Needs reporter action.
! rpki exit !
c-po changed the status of T6004: Missing RPKI boot priority prevents it from loading, a subtask of T5938: Migration fail root task for 1.4-rc, from Open to In progress.
c-po changed the status of T6004: Missing RPKI boot priority prevents it from loading from Open to In progress.
c-po moved T5619: Update the Intel ixgbe driver due to issues with Intel X533 from Need Triage to Finished on the VyOS 1.5 Circinus board.
c-po moved T5619: Update the Intel ixgbe driver due to issues with Intel X533 from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po moved T5979: Add configurable kernel boot parameters from Need Triage to Finished on the VyOS 1.5 Circinus board.
c-po moved T5979: Add configurable kernel boot parameters from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po moved T5995: Kernel NIC-drivers for Huawei NICs are not properly enabled from Need Triage to Finished on the VyOS 1.5 Circinus board.
c-po moved T5995: Kernel NIC-drivers for Huawei NICs are not properly enabled from Need Triage to Finished on the VyOS 1.4 Sagitta board.
n.fort changed the status of T5977: nftables: Operation not supported when using match-ipsec in outbound firewall from In progress to Needs testing.
Viacheslav changed the status of T5995: Kernel NIC-drivers for Huawei NICs are not properly enabled from Open to Needs testing.
Viacheslav changed the status of T5619: Update the Intel ixgbe driver due to issues with Intel X533 from Open to Needs testing.
c-po moved T5973: vrf: RTNETLINK answers: File exists from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po moved T5973: vrf: RTNETLINK answers: File exists from Need Triage to Finished on the VyOS 1.5 Circinus board.
c-po moved T5978: ethernet: hw-tc-offload does not actually get enabled on the NIC from Need Triage to Finished on the VyOS 1.5 Circinus board.
c-po moved T5978: ethernet: hw-tc-offload does not actually get enabled on the NIC from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po added a project to T5995: Kernel NIC-drivers for Huawei NICs are not properly enabled: VyOS 1.4 Sagitta.
The working implementation is linked below; performance is not yet comparable to the legacy loadFile, though there are obvious points of optimization to be made. The general framework will be submitted for PR to support other development, with load_config as an illustrative example, but not yet a replacement for loadFile.
Jan 31 2024
Jan 31 2024
New data point. I installed vanilla Debian 12, connected modem via
it think that we can use also something similar to what we use ocserv to generate ssl certificates:
Viacheslav moved T5999: load-balancing reverse-proxy can't configure root as a redirect from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Viacheslav closed T5999: load-balancing reverse-proxy can't configure root as a redirect as Resolved.
cleopold73 added a comment to T5999: load-balancing reverse-proxy can't configure root as a redirect.
I put together a PR for this https://github.com/vyos/vyos-1x/pull/2908. I just edited this in github, I was kind of hoping that a workflow would run the smoketests, but I'm not sure that is the case. Either way I'll try pulling the code local and see what I can figure out.
Jan 30 2024
Jan 30 2024
Maybe something like
Seemingly long term solution is to migrate to a DHCP/DHCPv6 server that supports it. I've been going back and forth with the systemd folks -- https://github.com/systemd/systemd/issues/27219
One of them seems to show it works fine, but I can't replicate it. I am going to try and do it under just normal Debian 12 bookwork and not VyOS so as not to introduce anything strange
Some update in the time i posted it on the forum and posted it here,
today i added an additional IPSec-VTI VPN with OSPF (IPv4),
all working as expected.