In T7159#219749, @dmbaturin wrote:

@MPStudyly Well, it's open-source, so anyone can remove the banner by editing the script. The intention of the banner is simply to explain that rolling release and stream builds offer no stability guarantees.

Apr 1 2025, 12:17 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3)

Viacheslav changed the status of T7290: VPN IPsec log level does not work from Open to In progress.

Apr 1 2025, 11:17 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Viacheslav triaged T7268: Add op-mode command for all interfaces on host as Wishlist priority.

Apr 1 2025, 9:11 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)

Viacheslav triaged T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds as Normal priority.

Apr 1 2025, 9:11 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

Viacheslav triaged T7254: Add operational mode commands commands for bridge spanning tree information as Normal priority.

Apr 1 2025, 9:10 AM · VyOS 1.5 Circinus (2026.02), VyOS Rolling

dmbaturin added a comment to T7285: CVE-2024-3596 (BlastRADIUS) mitigations for pam_radius.

I was looking into backporting it myself lately, at a glance your approach seems correct. I'll look deeper into it.

Apr 1 2025, 1:07 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Mar 31 2025

zsdc added a comment to T7299: pki: race condition for acme requested certificates - CA auto import only on the second run.

The current fix is necessary, but it's not complete.

Mar 31 2025, 7:51 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

xeluior added a comment to T7285: CVE-2024-3596 (BlastRADIUS) mitigations for pam_radius.

The above linked PR is ready for review by a maintainer. I've tried to cherry-pick only the most relevant commits from the upstream. The build was tested in the vyos-build container (as modified in https://vyos.dev/T7300) after each commit and the overall authentication flow was tested once as described in the PR.

Mar 31 2025, 6:42 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

dmbaturin created T7301: Remove support for GnuPG signatures.

Mar 31 2025, 6:06 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

dmbaturin added a comment to T7159: Display the non-production banner depending on the build type.

@MPStudyly Well, it's open-source, so anyone can remove the banner by editing the script. The intention of the banner is simply to explain that rolling release and stream builds offer no stability guarantees.

Mar 31 2025, 5:59 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3)

jestabro added a comment to T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds.

Regarding the failure of the PR integration tests, this may have been a result of a typo, now corrected in rolling here:
https://github.com/vyos/vyos-1x/pull/4425
or an inconsistent github action (I will check that).

Mar 31 2025, 5:22 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

jestabro moved T7294: image upgrade will replace symlinks with a copy from Open to Finished on the VyOS 1.4 Sagitta board.

Mar 31 2025, 3:20 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

jestabro moved T7294: image upgrade will replace symlinks with a copy from Open to Finished on the VyOS 1.5 Circinus board.

Mar 31 2025, 3:19 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

jestabro closed T7294: image upgrade will replace symlinks with a copy as Resolved.

Mar 31 2025, 3:19 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Viacheslav added a comment to T7297: FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes.

SUMMARY:
working versions:

7.5.1-20240509-02-gc9dd2977e
8.0.1

Not working:

8.1
8.2.2
8.3-2 
9+
10+

Mar 31 2025, 11:14 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)

Mar 30 2025

c-po renamed T7122: PKI: Unable to switch from custom cert to ACME when haproxy service is running with 'redirect-http-to-https' option from PKI: Unable to switch from custom cert to ACME when haproxy service is running to PKI: Unable to switch from custom cert to ACME when haproxy service is running with 'redirect-http-to-https' option.

Mar 30 2025, 6:08 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

sskaje added a comment to T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds.

also failed in PR

Mar 30 2025, 6:07 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

c-po moved T7299: pki: race condition for acme requested certificates - CA auto import only on the second run from Need Triage to Backport Candidates on the VyOS Rolling board.

Mar 30 2025, 1:22 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po added a comment to T7299: pki: race condition for acme requested certificates - CA auto import only on the second run.

https://github.com/vyos/vyos-1x/pull/4424

Mar 30 2025, 1:09 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po updated the task description for T7299: pki: race condition for acme requested certificates - CA auto import only on the second run.

Mar 30 2025, 12:50 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po changed the status of T7299: pki: race condition for acme requested certificates - CA auto import only on the second run, a subtask of T6481: Auto import Lets Encrypt root CA while using pki certificate acme, from Open to In progress.

Mar 30 2025, 12:49 PM · VyOS Rolling, VyOS 1.5 Circinus

c-po changed the status of T7299: pki: race condition for acme requested certificates - CA auto import only on the second run from Open to In progress.

Mar 30 2025, 12:49 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po created T7299: pki: race condition for acme requested certificates - CA auto import only on the second run.

Mar 30 2025, 12:49 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

sskaje added a comment to T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds.

Using relative url in .gitmodules will get forked repos difficult to build if not modify .gitmodules manually.

Mar 30 2025, 6:43 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

mjones-vsat added a comment to T7217: Private SSH key reuse in the console server service.

I looked through some Debian and Ubuntu ISOs and didn't notice dropbear installed in the live image. It's likely we are mostly susceptible to this because the live image is used as a loopback mount during normal installation. Many other Debian-based systems would be debootstrapped onto the host.

Mar 30 2025, 2:31 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Mar 29 2025

Viacheslav added projects to T7286: Add CLI to disable LDP establish hello packets: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.3).

Mar 29 2025, 11:20 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po changed the status of T4627: Ability to set host part IPv6 address via interface IP token from Open to In progress.

Mar 29 2025, 10:42 AM · VyOS 1.5 Circinus (2025.11), VyOS 1.4 Sagitta (1.4.4)

c-po moved T7270: syslog: typos in rsyslog.conf from Need Triage to Completed on the VyOS Rolling board.

Mar 29 2025, 10:24 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

c-po lowered the priority of T7270: syslog: typos in rsyslog.conf from High to Normal.

Mar 29 2025, 10:24 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

c-po added a project to T7270: syslog: typos in rsyslog.conf: VyOS 1.5 Circinus.

Mar 29 2025, 10:23 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

Viacheslav renamed T7297: FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes from FRR 9.1.x does not redistribute OSPF kernel table x routes to FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes.

Mar 29 2025, 10:21 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)

Viacheslav triaged T7295: ACME certificate updates fail due to missing timezone info as High priority.

Mar 29 2025, 10:10 AM · VyOS 1.5 Circinus (2025.11)

Viacheslav updated the task description for T7297: FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes.

Mar 29 2025, 10:06 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)

Viacheslav triaged T7297: FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes as Normal priority.

Mar 29 2025, 9:38 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)

Viacheslav created T7297: FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes.

Mar 29 2025, 9:37 AM · VyOS 1.4 Sagitta (1.4.4), VyOS 1.5 Circinus (2025.11)

Viacheslav triaged T7294: image upgrade will replace symlinks with a copy as Normal priority.

Mar 29 2025, 8:25 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

jestabro added a comment to T7294: image upgrade will replace symlinks with a copy.

PR:
https://github.com/vyos/vyos-1x/pull/4423

Mar 29 2025, 3:19 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Mar 28 2025

L0crian added a comment to T7254: Add operational mode commands commands for bridge spanning tree information.

Added PR: https://github.com/vyos/vyos-1x/pull/4422

Mar 28 2025, 8:13 PM · VyOS 1.5 Circinus (2026.02), VyOS Rolling

dmbaturin claimed T7295: ACME certificate updates fail due to missing timezone info.

Mar 28 2025, 7:54 PM · VyOS 1.5 Circinus (2025.11)

dmbaturin created T7295: ACME certificate updates fail due to missing timezone info.

Mar 28 2025, 7:54 PM · VyOS 1.5 Circinus (2025.11)

c-po edited projects for T7293: virtual-ethernet interface vif MTU does not work, added: VyOS 1.4 Sagitta (1.4.3); removed VyOS 1.4 Sagitta (1.4.0).

Mar 28 2025, 7:47 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po added a comment to T7293: virtual-ethernet interface vif MTU does not work.

https://github.com/vyos/vyos-1x/pull/4420

Mar 28 2025, 7:46 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po triaged T7293: virtual-ethernet interface vif MTU does not work as Normal priority.

Mar 28 2025, 7:44 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po changed the status of T7293: virtual-ethernet interface vif MTU does not work from Open to In progress.

Mar 28 2025, 7:44 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

jestabro claimed T7294: image upgrade will replace symlinks with a copy.

Mar 28 2025, 7:43 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po created T7294: image upgrade will replace symlinks with a copy.

Mar 28 2025, 7:30 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

sajiby3k renamed T7293: virtual-ethernet interface vif MTU does not work from Virtual-Interface vif mtu does not work to Virtual-ethernet Interface vif mtu does not work.

Mar 28 2025, 7:02 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

sajiby3k added projects to T7293: virtual-ethernet interface vif MTU does not work: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.0).

Mar 28 2025, 7:01 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

c-po closed T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update as Resolved.

Mar 28 2025, 6:57 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

c-po closed T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update, a subtask of T7122: PKI: Unable to switch from custom cert to ACME when haproxy service is running with 'redirect-http-to-https' option, as Resolved.

Mar 28 2025, 6:57 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

c-po moved T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.

Mar 28 2025, 6:57 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

c-po moved T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update from Open to Finished on the VyOS 1.5 Circinus board.

Mar 28 2025, 6:57 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Mar 27 2025

Viacheslav triaged T7290: VPN IPsec log level does not work as Normal priority.

Mar 27 2025, 12:01 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Viacheslav created T7290: VPN IPsec log level does not work.

Mar 27 2025, 12:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Mar 26 2025

jestabro added a parent task for T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds: T5400: Move libvyosconfig build out of the Docker image.

Mar 26 2025, 10:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

jestabro added a subtask for T5400: Move libvyosconfig build out of the Docker image: T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds.

Mar 26 2025, 10:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

jestabro created T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds.

Mar 26 2025, 10:00 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

tjh added a comment to T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc..

Thank you very much @Embezzle - This is a feature I've been hoping for for a long time (at the moment I have a script that runs via VyOS cron and updates a firewall filter and commits it) - really appreciate you taking the time to do this piece of work.
Much Love.

Mar 26 2025, 9:11 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

Embezzle closed T5493: Add capability to use local and external dynamic-lists for firewall rules but also for various policies such as access-list, route-maps etc. as Resolved.

Tested as working in: VyOS 2025.03.26-0018-rolling

Mar 26 2025, 6:56 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

dmbaturin renamed T7217: Private SSH key reuse in the console server service from Key reuse in VyOS Dropbear deployment to Private SSH key reuse in the console server service.

Mar 26 2025, 6:21 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Viacheslav added a comment to T7207: OpenVPN Op-cmd: Client ip address is not displayed in the server-bridge mode.

Opened an issue https://github.com/OpenVPN/openvpn/issues/709

Mar 26 2025, 5:26 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1)

Viacheslav added projects to T7287: VPN Openconnect does not check the dictionary key server with the authentication mode RADIUS: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.3).

Mar 26 2025, 1:37 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Viacheslav added a comment to T7226: LDP Hello packets are generated to answer incoming Hello before forming neighbor adjacency.

New VyOS CLI option disable-establish-hello should be implemented in https://vyos.dev/T7286 (for the current)

Mar 26 2025, 10:27 AM · VyOS 1.4 Sagitta (1.4.2), VyOS Rolling, VyOS 1.5 Circinus

Viacheslav changed the status of T7219: VXLAN needs to make remote and group options mutually exclusive from Open to In progress.

Mar 26 2025, 8:03 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Viacheslav raised the priority of T7285: CVE-2024-3596 (BlastRADIUS) mitigations for pam_radius from Normal to High.

Mar 26 2025, 7:45 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

Mar 25 2025

dmbaturin moved T7219: VXLAN needs to make remote and group options mutually exclusive from Open to Finished on the VyOS 1.5 Circinus board.

Mar 25 2025, 10:30 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

dmbaturin renamed T7219: VXLAN needs to make remote and group options mutually exclusive from VXLAN does not verify if remote and group added together bug to VXLAN needs to make remote and group options mutually exclusive.

Mar 25 2025, 10:29 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

dmbaturin moved T7092: Add support for configuring container registry mirrors from Open to Finished on the VyOS 1.5 Circinus board.

Mar 25 2025, 10:18 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3), VyOS Rolling

SearchUse ResultsEdit QueryHide Query

Apr 2 2025

Apr 1 2025

Mar 31 2025

Mar 30 2025

Mar 29 2025

Mar 28 2025

Mar 27 2025

Mar 26 2025

Mar 25 2025

Search
Use Results
Edit Query
Hide Query