The workaround described above works. Changed it to following line and added few more system-users spotted in the AAA daemon logs:
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Oct 14 2024
Oct 14 2024
vyosbot added a project to T6724: Integrate directory integrity checker to detect and find installed 3rd party packets: Restricted Project.
vyosbot placed T6498: Add an option to get tech support reports in a machine-readable format up for grabs.
vyosbot added a project to T6730: add reusable workflows for vyatta-wanloadbalance: Restricted Project.
vyosbot added a project to T6732: Add reusable workflow - VyOS image build workflow: Restricted Project.
vyosbot added a project to T6749: Fix commenting issue with integration test workflow: Restricted Project.
vyosbot added a project to T6728: turn on bot with PR's between orgs for vyos-build: Restricted Project.
Oct 12 2024
Oct 12 2024
syncer moved T6388: Use OCaml 4.14 for CI builds from Need Triage to Completed on the VyOS Rolling board.
syncer moved T6388: Use OCaml 4.14 for CI builds from Open to Finished on the VyOS 1.5 Circinus board.
syncer moved T6388: Use OCaml 4.14 for CI builds from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0) board.
syncer edited projects for T6388: Use OCaml 4.14 for CI builds, added: VyOS Rolling, VyOS 1.4 Sagitta (1.4.0); removed VyOS 1.4 Sagitta.
syncer moved T5543: Fix source address handling in static joins from Backlog to Finished on the VyOS 1.3 Equuleus (1.3.6) board.
syncer moved T5543: Fix source address handling in static joins from Need Triage to Completed on the VyOS Rolling board.
dmbaturin edited projects for T5543: Fix source address handling in static joins, added: VyOS 1.4 Sagitta (1.4.0); removed VyOS 1.4 Sagitta.
Oct 11 2024
Oct 11 2024
needless added a comment to T6613: VyOS local system users TACACS+ authorization requests do not work correctly.
Oct 10 2024
Oct 10 2024
HollyGurza updated the task description for T6770: Operational mode command "show bridge vni" is broken.
Oct 8 2024
Oct 8 2024
n.fort added a comment to T6613: VyOS local system users TACACS+ authorization requests do not work correctly.
Can you check if changing this line https://github.com/vyos/vyos-1x/blob/current/data/templates/login/tacplus_nss.conf.j2#L33 and adding those user helps?
This file can be changed locally in the router: /usr/share/vyos/templates/login/tacplus_nss.conf.j2
Change line:
exclude_users=root,telegraf,radvd,strongswan,tftp,conservr,frr,ocserv,pdns,_chrony,_lldpd,sshd,openvpn,radius_user,radius_priv_user,*{{ ',' + user | join(',') if user is vyos_defined }}And change it to something like:
Oct 6 2024
Oct 6 2024
syncer reopened T6708: Automatically mirror PRs between /vyos and /VyOS-Networks organizations as "Open".
Oct 4 2024
Oct 4 2024
Oct 3 2024
Oct 3 2024
Oct 2 2024
Oct 2 2024
n.fort changed the status of T6687: NAT - Add support for fqdn entries from In progress to Needs testing.
Oct 1 2024
Oct 1 2024
syncer closed T6660: Mirror PR: Remove temp feature branch after merge, a subtask of T6708: Automatically mirror PRs between /vyos and /VyOS-Networks organizations, as Resolved.
syncer closed T6708: Automatically mirror PRs between /vyos and /VyOS-Networks organizations as Resolved.
I think this will not be required
Sep 29 2024
Sep 29 2024
Sep 28 2024
Sep 28 2024
Sep 25 2024
Sep 25 2024
Also probably related:
I would expect the line of CLI being used to be in any of these files?
Sep 24 2024
Sep 24 2024
Sep 22 2024
Sep 22 2024
Vijayakumar changed the status of T6728: turn on bot with PR's between orgs for vyos-build from Open to Needs testing.
Vijayakumar changed the status of T6728: turn on bot with PR's between orgs for vyos-build, a subtask of T6707: Implement a new build and release workflow based on GitHub Actions, from Open to Needs testing.
Sep 21 2024
Sep 21 2024
Vijayakumar closed T6722: Implement reusable workflows for vyatta-cfg, a subtask of T6707: Implement a new build and release workflow based on GitHub Actions, as Resolved.
Sep 18 2024
Sep 18 2024
a.hajiyev updated the task description for T6724: Integrate directory integrity checker to detect and find installed 3rd party packets.
zsdc added a comment to T6724: Integrate directory integrity checker to detect and find installed 3rd party packets.
I think, a new command is required for this show integrity or similar. Also a brief status in MOTD and show version.
Viacheslav added a comment to T6724: Integrate directory integrity checker to detect and find installed 3rd party packets.
Do you want some CLI for it? Or just user util?
Viacheslav triaged T6724: Integrate directory integrity checker to detect and find installed 3rd party packets as Normal priority.
Sep 17 2024
Sep 17 2024
HollyGurza moved T6525: SNMP extension script paths relative to /config/user-data do not work as expected from Open to Finished on the VyOS 1.5 Circinus board.
HollyGurza moved T6619: Remove the remaining uses of per-protocol FRR configs from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0) board.
Sep 16 2024
Sep 16 2024
Vijayakumar closed T6678: Implement darker with ruff workflow, a subtask of T6707: Implement a new build and release workflow based on GitHub Actions, as Resolved.
dmbaturin added a project to T6457: Update strip-private function to improve op command output for IPs: Bugs.
dmbaturin added a project to T6545: OpenVPN CLI mistakenly has "none" as an ncp-cipher option: Restricted Project.
dmbaturin placed T6457: Update strip-private function to improve op command output for IPs up for grabs.
Sep 15 2024
Sep 15 2024
dmbaturin added a project to T6413: BGP conditional route advertisement does not work as expected: Bugs.
dmbaturin added a project to T6439: QoS: Filtering on Mark broken between 1.4.0-epa2 and 1.4.0-epa3: Bugs.
dmbaturin added a project to T6673: Unexpected error when restart container via native Podman command: Bugs.
Sep 9 2024
Sep 9 2024
Sep 2 2024
Sep 2 2024
Aug 31 2024
Aug 31 2024
Aug 30 2024
Aug 30 2024
Aug 26 2024
Aug 26 2024
c-po triaged T6673: Unexpected error when restart container via native Podman command as Normal priority.
Aug 23 2024
Aug 23 2024
n.fort closed T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule as Resolved.
a.hajiyev added a comment to T6673: Unexpected error when restart container via native Podman command.
Only worked:
- Reboot instance
- load /config/config.boot
- sudo podman rm suricata
- commit
Then it works
vyos@VyOS-Test01#
[edit]
vyos@VyOS-Test01# load /config/config.boot
[edit]
vyos@VyOS-Test01#
[edit]
vyos@VyOS-Test01# compare
+ container {
+ name suricata {
+ allow-host-networks
+ arguments "-q 1"
+ capability "net-admin"
+ capability "sys-admin"
+ capability "sys-nice"
+ image "jasonish/suricata:6.0.14"
+ memory "1024"
+ volume ETC {
+ destination "/etc/suricata"
+ source "/config/suricata/etc"
+ }
+ volume LOGS {
+ destination "/var/log/suricata"
+ source "/config/suricata/logs"
+ }
+ volume RULES {
+ destination "/var/lib/suricata/rules/"
+ source "/config/suricata/rules"
+ }
+ }
+ }a.hajiyev reopened T6673: Unexpected error when restart container via native Podman command as "Open".
a.hajiyev added a comment to T6673: Unexpected error when restart container via native Podman command.
If service is 'failed' state
vyos@VyOS-Test01:~$ systemctl status vyos-container-suricata.service
× vyos-container-suricata.service - VyOS Container suricata
Loaded: loaded (/run/systemd/system/vyos-container-suricata.service; static)
Active: failed (Result: exit-code) since Fri 2024-08-23 10:32:44 UTC; 43s ago
Duration: 4min 55.702s
Process: 2855 ExecStartPre=/bin/rm -f /run/vyos-container-suricata.service.pid /run/vyos-container-suricata.service.cid (code=exited, sta>
Process: 2856 ExecStart=/usr/bin/podman run --conmon-pidfile /run/vyos-container-suricata.service.pid --cidfile /run/vyos-container-suric>
Process: 2867 ExecStopPost=/usr/bin/podman rm --ignore -f --cidfile /run/vyos-container-suricata.service.cid (code=exited, status=0/SUCCE>
Process: 2873 ExecStopPost=/bin/rm -f /run/vyos-container-suricata.service.cid (code=exited, status=0/SUCCESS)
CPU: 129msViacheslav added a comment to T6673: Unexpected error when restart container via native Podman command.
In T6673#198344, @a.hajiyev wrote:You are right there is an op-mode command to restart the container
restart container suricataBut I think there needs to be some checks/changes at least someone will execute the native Podman command to restart the container.
a.hajiyev added a comment to T6673: Unexpected error when restart container via native Podman command.
You are right there is an op-mode command to restart the container
restart container suricata
But I think there needs to be some checks/changes at least someone will execute the native Podman command to restart the container.
Viacheslav added a comment to T6673: Unexpected error when restart container via native Podman command.
It fails because you do it in the wrong way