In T4733#148990, @c-po wrote:Hi @daniil and @NikolayP,
this is already implemented and working. You need to specify: set vrf bind-to-all and it will work out of the box with your configuration stated above
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Feb 25 2024
Feb 25 2024
hcuk94 added a comment to T6065: Duplicate lines in build-vyos-image script cause sagitta build to fail.
I have created a PR to resolve this issue: https://github.com/vyos/vyos-build/pull/511
In T4733#148990, @c-po wrote:Hi @daniil and @NikolayP,
this is already implemented and working. You need to specify: set vrf bind-to-all and it will work out of the box with your configuration stated above
c-po moved T6064: Can not build VyOS if repository it not cloned to a branch from Need Triage to In Progress on the VyOS 1.4 Sagitta (1.4.0-epa1) board.
c-po moved T6064: Can not build VyOS if repository it not cloned to a branch from Open to In Progress on the VyOS 1.5 Circinus board.
c-po updated the task description for T6064: Can not build VyOS if repository it not cloned to a branch.
c-po updated the task description for T6064: Can not build VyOS if repository it not cloned to a branch.
c-po updated the task description for T6064: Can not build VyOS if repository it not cloned to a branch.
c-po changed the status of T6064: Can not build VyOS if repository it not cloned to a branch from Open to In progress.
c-po moved T6060: op-mode: container: support removing all container images at once from In Progress to Finished on the VyOS 1.4 Sagitta (1.4.0-epa1) board.
Feb 24 2024
Feb 24 2024
This issue seem to be wider than just 1 occurance as I just stumbled into it again on the latest version (1.5-rolling-202402240021)
cnrd added a comment to T6061: connection-status nat destination firewall filter not working in 1.4.0-epa1.
This example only contains the commands related to the bug, not for general setup.
Viacheslav triaged T6061: connection-status nat destination firewall filter not working in 1.4.0-epa1 as Normal priority.
@cnrd Provide please the "set" of the commands to reproduce.
This will make life much easier for developers.
GitHub <noreply@github.com> committed rVYOSONEX0be3d1f64bea: Merge pull request #3048 from vyos/mergify/bp/sagitta/pr-3046 (authored by c-po).
Apachez added a comment to T5388: Something is fishy with commit and boot times when more than a few hundred static routes are being used.
Adding https://forum.vyos.io/t/quick-and-dirty-benchmark-of-cores-vs-mhz/13831/ for reference which also concludes that something is off with the commit and boot times of VyOS.
GitHub <noreply@github.com> committed rVYOSONEX8783db146fa5: Merge pull request #3047 from vyos/mergify/bp/sagitta/pr-2633 (authored by dmbaturin).
cnrd renamed T6061: connection-status nat destination firewall filter not working in 1.4.0-epa1 from connection-status nat destination firewall filter not working in epa1 to connection-status nat destination firewall filter not working in 1.4.0-epa1.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX36957f8f4857: container: T6060: support removing all container images at once via op-mode (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX52df4d62074a: Merge pull request #3046 from c-po/container-T6060 (authored by c-po).
c-po moved T6054: load-balancing wan - doesn't configure a list of ports from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-epa1) board.
GitHub <noreply@github.com> committed rVYOSONEX660c969718f8: Merge pull request #3043 from vyos/mergify/bp/sagitta/pr-3042 (authored by c-po).
c-po moved T6054: load-balancing wan - doesn't configure a list of ports from Open to Finished on the VyOS 1.5 Circinus board.
GitHub <noreply@github.com> committed rVYOSONEX88911dbdf78e: Merge pull request #3045 from vyos/mergify/bp/sagitta/pr-3044 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX50b68e287606: T5781: use dynamic minisign key list (authored by kylem).
c-po moved T6060: op-mode: container: support removing all container images at once from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T6060: op-mode: container: support removing all container images at once from Need Triage to In Progress on the VyOS 1.4 Sagitta (1.4.0-epa1) board.
c-po edited projects for T5909: Container registry with authentication prevents config load (section container) after reboot, added: VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta (1.4.0).
c-po changed the status of T6060: op-mode: container: support removing all container images at once from Open to In progress.
c-po added a comment to T5909: Container registry with authentication prevents config load (section container) after reboot.
PR for VyOS 1.4 https://github.com/vyos/vyos-1x/pull/3045
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXfcebadea51c1: container: T5909: move registry login to op-mode (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXc725b2d86c71: Merge pull request #3044 from c-po/container-T5909 (authored by c-po).
Feb 23 2024
Feb 23 2024
c-po reopened T5909: Container registry with authentication prevents config load (section container) after reboot as "In progress".
I can verify @samip537's comments -- the X553 interface won't establish link state using the default ixgbe driver included in Linux kernel 6.1 or 6.6. In my case, I'm testing hardware with X553 interfaces against a Dell PowerConnect 8132F. Qualified/Non-Qualified modules or DAC-cables make no difference. Using the OOT Intel driver, however, does work as one would expect.
recently mentioned on netdev (upstream bugs and other threads linked as well):
Viacheslav raised the priority of T2468: Passwords with special characters fail in commit-archive from Low to High.
The issue is raised in this forum query: https://forum.vyos.io/t/commit-archive-doesnt-accept-symbols-in-password/13817
Remote host having password with special character is not accepted using with scp command
Unknown Object (User) added a comment to T5619: Update the Intel ixgbe driver due to issues with Intel X533.
@ErnyTech This has been discussed at the forums in length what the problems are, but most of them seem to come from an link-related commit in the in-tree driver: https://marc.info/?l=linux-netdev&m=170113799914642. Meaning that no matter what one does, with the built-in driver, one cannot establish a link between X533 and eg. Juniper switch but they do see each other according to transceiver information but just no link.
Unfortunately I haven't seen this before, for me this choice of using the out-of-tree driver is extremely wrong!
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX068418ef218e: T6054: WLB: fix rules parsing when using multiple ports in one rule (authored by n.fort).
GitHub <noreply@github.com> committed rVYOSONEXf54cf0873353: Merge pull request #3042 from nicolas-fort/T6054 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX9086748f7a3f: Merge pull request #3041 from vyos/mergify/bp/sagitta/pr-3040 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX1c7fd8a7635e: pki: T3642: Fix typo in PKI includes (authored by sarthurdev).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX64181d51ca59: pki: T6055: Cleanup unnecessary sudo, preserve env when sudo is needed (authored by sarthurdev).
GitHub <noreply@github.com> committed rVYOSONEXdee663afe5ea: Merge pull request #3040 from sarthurdev/T6055 (authored by c-po).
Already implemented
Viacheslav triaged T6055: PKI error: "failed to install x value" when executed the command from conf mode as High priority.
sarthurdev changed the status of T6055: PKI error: "failed to install x value" when executed the command from conf mode from Open to Needs testing.
n.fort changed the status of T6054: load-balancing wan - doesn't configure a list of ports from Open to Confirmed.
sarthurdev moved T5376: Conntrack FTP helper does not work properly from In Progress to Finished on the VyOS 1.5 Circinus board.
Glad to hear it @svd135 @swanduron
syncer edited projects for T3371: Replace netplugd by udev rules, added: VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.
syncer edited projects for T3766: containers: Expanding options for networking and building containers, added: VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.
syncer edited projects for T3875: Known issues with vyatta_net_name/vyatta_interface_rescan, added: VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.
syncer edited projects for T3876: Replace vyos-netplug with a VyOS link state monitor service, added: VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.
syncer edited projects for T4940: Interface debugging, added: VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.
syncer edited projects for T5459: ospfv3: add authentication support, added: VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.
syncer edited projects for T5376: Conntrack FTP helper does not work properly, added: VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.
It's a good news for me. I will shift from SRX320 to Vyos system. In FTP active mode, the FTP server will push the data channel to the client, the Vyos deems it as a new connection and there is no need with FTP ALG.
In T5376#177587, @sarthurdev wrote:@svd135 can you try on latest rolling?
Viacheslav added a comment to T6056: Applying 'system static-host-mapping' command calls unnecessary snmpd restart.
Any of these changes most likely affected this.
a.apostoliuk triaged T6056: Applying 'system static-host-mapping' command calls unnecessary snmpd restart as Normal priority.
Viacheslav moved T970: Support matching domain name in firewall rules from Backlog to Finished on the VyOS 1.4 Sagitta board.
Perfect, would it be possible to update https://docs.vyos.io/en/sagitta/changelog/1.4.html and doc pages like https://docs.vyos.io/en/sagitta/configuration/firewall/groups.html accordingly ?