A simple version of get_commit_scripts (nee get_commit_schedule) has been added to the resolution of T6671. After that PR is merged, this task will be closed, as that version suffices for current needs.

Aug 23 2024, 7:35 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

jestabro changed the status of T5666: Provide list of config-mode scripts scheduled for proposed commit, a subtask of T6671: Confid dependency works incorrectly conntrack conntrack-sync, from On hold to In progress.

Aug 23 2024, 7:35 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

jestabro added a parent task for T5666: Provide list of config-mode scripts scheduled for proposed commit: T6671: Confid dependency works incorrectly conntrack conntrack-sync.

Aug 23 2024, 7:32 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

jestabro added a subtask for T6671: Confid dependency works incorrectly conntrack conntrack-sync: T5666: Provide list of config-mode scripts scheduled for proposed commit.

Aug 23 2024, 7:32 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

GitHub <[email protected]> committed rVYOSONEX0e77effa7a75: Merge pull request #4012 from vyos/mergify/bp/circinus/pr-3656 (authored by c-po).

Aug 23 2024, 7:19 PM

c-po committed rVYOSONEX2947e7f2a5a4: T6672: Fix system option ssh-client source-interface (authored by Viacheslav).

Aug 23 2024, 7:18 PM

jestabro added a comment to T6671: Confid dependency works incorrectly conntrack conntrack-sync.

The following simple commit will need to be backported to sagitta so that a PR for the above will backport cleanly:
https://github.com/vyos/vyos-1x/pull/4013

Aug 23 2024, 7:14 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX3ff2f3204aba: xml: T6319: add util for ancestor owner/priority (authored by jestabro).

Aug 23 2024, 7:11 PM

GitHub <[email protected]> committed rVYOSONEX94908b75bbce: Merge pull request #4010 from vyos/mergify/bp/sagitta/pr-3945 (authored by dmbaturin).

Aug 23 2024, 6:58 PM

Viacheslav closed T5546: Failed upgrade from 1.4-rolling-202212310809 to 1.4-rolling-202309030023 as Not Applicable.

Aug 23 2024, 3:10 PM · VyOS 1.4 Sagitta (1.4.1)

Viacheslav moved T6561: show ntp is not vrf aware from Open to Finished on the VyOS 1.5 Circinus board.

Aug 23 2024, 2:27 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

n.fort added a comment to T5177: Make the chain policy configurable.

I think we can close this one

Aug 23 2024, 12:20 PM · VyOS 1.5 Circinus

n.fort closed T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.

Aug 23 2024, 12:16 PM · VyOS Rolling, Restricted Project

n.fort closed T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule as Resolved.

Aug 23 2024, 12:16 PM · VyOS 1.4 Sagitta (1.4.0)

n.fort closed T5794: Flowtable with Bond Race as Resolved.

Aug 23 2024, 12:15 PM · VyOS 1.5 Circinus

n.fort closed T6636: Show log firewall not printing logs for default-actions for custom ruleset as Resolved.

Aug 23 2024, 12:15 PM · VyOS Rolling, VyOS 1.5 Circinus

a.hajiyev added a comment to T6673: Unexpected error when restart container via native Podman command.

Only worked:

Reboot instance
load /config/config.boot
sudo podman rm suricata
commit

Then it works

vyos@VyOS-Test01#
[edit]
vyos@VyOS-Test01# load /config/config.boot
[edit]
vyos@VyOS-Test01#
[edit]
vyos@VyOS-Test01# compare
+ container {
+     name suricata {
+         allow-host-networks
+         arguments "-q 1"
+         capability "net-admin"
+         capability "sys-admin"
+         capability "sys-nice"
+         image "jasonish/suricata:6.0.14"
+         memory "1024"
+         volume ETC {
+             destination "/etc/suricata"
+             source "/config/suricata/etc"
+         }
+         volume LOGS {
+             destination "/var/log/suricata"
+             source "/config/suricata/logs"
+         }
+         volume RULES {
+             destination "/var/lib/suricata/rules/"
+             source "/config/suricata/rules"
+         }
+     }
+ }

Aug 23 2024, 10:55 AM · VyOS Rolling, Restricted Project

a.hajiyev reopened T6673: Unexpected error when restart container via native Podman command as "Open".

Aug 23 2024, 10:42 AM · VyOS Rolling, Restricted Project

a.hajiyev added a comment to T6673: Unexpected error when restart container via native Podman command.

If service is 'failed' state

vyos@VyOS-Test01:~$ systemctl status vyos-container-suricata.service
× vyos-container-suricata.service - VyOS Container suricata
     Loaded: loaded (/run/systemd/system/vyos-container-suricata.service; static)
     Active: failed (Result: exit-code) since Fri 2024-08-23 10:32:44 UTC; 43s ago
   Duration: 4min 55.702s
    Process: 2855 ExecStartPre=/bin/rm -f /run/vyos-container-suricata.service.pid /run/vyos-container-suricata.service.cid (code=exited, sta>
    Process: 2856 ExecStart=/usr/bin/podman run --conmon-pidfile /run/vyos-container-suricata.service.pid --cidfile /run/vyos-container-suric>
    Process: 2867 ExecStopPost=/usr/bin/podman rm --ignore -f --cidfile /run/vyos-container-suricata.service.cid (code=exited, status=0/SUCCE>
    Process: 2873 ExecStopPost=/bin/rm -f /run/vyos-container-suricata.service.cid (code=exited, status=0/SUCCESS)
        CPU: 129ms

Aug 23 2024, 10:42 AM · VyOS Rolling, Restricted Project

Viacheslav closed T6673: Unexpected error when restart container via native Podman command as Invalid.

Aug 23 2024, 9:53 AM · VyOS Rolling, Restricted Project

Viacheslav added a comment to T6673: Unexpected error when restart container via native Podman command.

In T6673#198344, @a.hajiyev wrote:
You are right there is an op-mode command to restart the container
restart container suricata
But I think there needs to be some checks/changes at least someone will execute the native Podman command to restart the container.

Aug 23 2024, 8:18 AM · VyOS Rolling, Restricted Project

a.hajiyev added a comment to T6673: Unexpected error when restart container via native Podman command.

You are right there is an op-mode command to restart the container