Thanks for verifying. Interesting, is it also using the custom Podman package?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Aug 7 2024
Aug 7 2024
Aug 6 2024
Aug 6 2024
jestabro updated the task description for T6639: Resolve undesired interactions configverify <-> configfs <-> configd.
jestabro updated the task description for T6639: Resolve undesired interactions configverify <-> configfs <-> configd.
jestabro updated the task description for T6639: Resolve undesired interactions configverify <-> configfs <-> configd.
Viacheslav triaged T6636: Show log firewall not printing logs for default-actions for custom ruleset as Normal priority.
1.4 is not affected
vyos@r15:~$ show version all | match podman
ii podman 4.9.5 amd64 Engine to run OCI-based containers in Pods
vyos@r15:~$
vyos@r15:~$
vyos@r15:~$ show container image
REPOSITORY TAG IMAGE ID CREATED SIZE
localhost/vyos-flowspec-netfilter 1.0 2b8b95eddb07 2 weeks ago 91.5 MB
docker.io/adguard/adguardhome v0.107.52 6543abecfa41 4 weeks ago 71.4 MB
vyos@r15:~$
vyos@r15:~$
vyos@r15:~$ cat /etc/containers/policy.json
{
"default": [
{
"type": "insecureAcceptAnything"
}
]
}
vyos@r15:~$
vyos@r15:~$
vyos@r15:~$ show version
Version: VyOS 1.4-rolling-202408051021
Release train: sagitta
Release flavor: isoViacheslav triaged T6638: QoS CAKE config with PPPoE interface does not load after reboot as Normal priority.
Verified on my 1.4 install the policy.json is present, but missing in the latest rolling release
Aug 5 2024
Aug 5 2024
c-po changed the status of T3204: Performance system option destroy defined sysctl custom params from Open to In progress.
n.fort changed the status of T6636: Show log firewall not printing logs for default-actions for custom ruleset from Open to Confirmed.
jestabro closed T6629: Config mode scripts should call modprobe with a standard function as Resolved.
Aug 4 2024
Aug 4 2024
Aug 3 2024
Aug 3 2024
New PR created for matching functionality in policy local-route: https://github.com/vyos/vyos-1x/pull/3938
Aug 2 2024
Aug 2 2024
jestabro added parent tasks for T6633: inject missing env vars in configd to support configfs util: T6489: Add/Improve support for CLI config scripts that change the underlying actual configuration and make them work with vyos-configd, T6608: configd should report exceptions uncaught by conf_mode scripts as commit error.
jestabro moved T6629: Config mode scripts should call modprobe with a standard function from Open to Backport Candidates on the VyOS 1.5 Circinus board.
c-po closed T6603: vrf: nftables conntrack ct_iface_map contains multiple identical entries as Resolved.
c-po moved T6603: vrf: nftables conntrack ct_iface_map contains multiple identical entries from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
Viacheslav moved T6486: Generate openvpn client-config ignores configured protocol type from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
Viacheslav moved T6486: Generate openvpn client-config ignores configured protocol type from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav closed T6486: Generate openvpn client-config ignores configured protocol type as Resolved.
jestabro added a comment to T6629: Config mode scripts should call modprobe with a standard function.
Viacheslav changed the status of T6618: ipsec: remote access VPN: "generate ipsec profile windows-remote-access" broken from In progress to Needs testing.
Viacheslav changed the status of T6617: ipsec: remote access VPN: "generate ipsec profile ios-remote-access" wrong profile for x509 auth from In progress to Needs testing.
n.fort changed the status of T6631: Error on firewall while using jump-target and no custom ruleset are present from Open to In progress.
Viacheslav changed the status of T5487: OPENVPN -DEPRECATED OPTION: --cipher from Unknown Status to Resolved.
Viacheslav renamed T6625: Firewall group size limit API from Firewall group size limit to Firewall group size limit API.
Aug 1 2024
Aug 1 2024
The server has 8GB RAM
SrividyaA triaged T6628: Add an option to assign static IP address to IPoE server users as Normal priority.
jestabro updated the task description for T6627: nat64 config mode script configures state outside of canonical functions, preventing running under configd.
jestabro renamed T6627: nat64 config mode script configures state outside of canonical functions, preventing running under configd from nat64 config mode script verfiies state outside of canonical functions, preventing running under configd to nat64 config mode script configures state outside of canonical functions, preventing running under configd.
jestabro updated the task description for T6627: nat64 config mode script configures state outside of canonical functions, preventing running under configd.
@bernhardschmidt my PR for this made it into current rolling, which rather than just widening the table range, allows using 'set vrf' instead of 'set table' to policy route directly to VRFs with out-of-range RT IDs.
Viacheslav changed the status of T6611: Request Shoretel Server Option in DHCP from Open to In progress.
How much RAM does this server have?
Do you have an example of the log when it fails? Which exact messages do you see?
Request to drop privileges https://support.zabbix.com/browse/ZBXNEXT-9380
c-po moved T6618: ipsec: remote access VPN: "generate ipsec profile windows-remote-access" broken from Open to Finished on the VyOS 1.5 Circinus board.
Jul 31 2024
Jul 31 2024
fernando changed the status of T6555: Add server-bridge options to OpenVPN server from Confirmed to In progress.
There are issues with cgroups when enabling VRF
$ git diff diff --git a/data/templates/zabbix-agent/10-override.conf.j2 b/data/templates/zabbix-agent/10-override.conf.j2 index 7c296e8fd..0acf775be 100644 --- a/data/templates/zabbix-agent/10-override.conf.j2 +++ b/data/templates/zabbix-agent/10-override.conf.j2 @@ -1,3 +1,4 @@ +{% set zabbix_command = 'ip vrf exec ' ~ vrf ~ ' ' if vrf is vyos_defined else '' %} [Unit] After= After=vyos-router.service @@ -7,7 +8,9 @@ ConditionPathExists=/run/zabbix/zabbix-agent2.conf [Service] EnvironmentFile= ExecStart= -ExecStart=/usr/sbin/zabbix_agent2 --config /run/zabbix/zabbix-agent2.conf --foreground +ExecStart={{ zabbix_command }}/usr/sbin/zabbix_agent2 --config /run/zabbix/zabbix-agent2.conf --foreground +CapabilityBoundingSet=CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_RESOURCE CAP_BPF CAP_DAC_OVERRIDE CAP_FOWNER +AmbientCapabilities=CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_RESOURCE CAP_BPF CAP_DAC_OVERRIDE CAP_FOWNER WorkingDirectory= WorkingDirectory=/run/zabbix Restart=always diff --git a/interface-definitions/service_monitoring_zabbix-agent.xml.in b/interface-definitions/service_monitoring_zabbix-agent.xml.in index 3754e9145..e44b31312 100644 --- a/interface-definitions/service_monitoring_zabbix-agent.xml.in +++ b/interface-definitions/service_monitoring_zabbix-agent.xml.in @@ -185,6 +185,7 @@ </properties> <defaultValue>3</defaultValue> </leafNode> + #include <include/interface/vrf.xml.i> </children> </node> </children>
Viacheslav triaged T6624: service suricata address-groups cannot be used in each other as Low priority.
I was hoping some combination of the newer QAT driver 4.24 and newer kernel in the latest rolling releases might fix this... but seemingly not.
I finally managed to give 1.5 a run and the first thing I did was check this. Perfect! Thank you everyone,