May 7 2026
May 6 2026
Just wanted to note that I've observed significant increase in final ISO size when building kernel + modules which I believe is due to the options introduced by 30-pwru.config (Roughly +500MB: ~680MB without -> 1.2GB with). I guess this is probably expected because of the debug flags.
May 5 2026
This is consistent with what we observed earlier.
vyos-intel-qat 4.24.0-00005-0 Intel QAT (crypto offload) vyos-intel-ixgbe 6.3.4-1-g52e3c49 Intel 10Gb NIC vyos-intel-ixgbevf 5.2.2-1-gb1df1b2 Intel 10Gb NIC (Virtual Function)
Apr 30 10:42:21 waw4-rtr1 kernel: ixgbe: loading out-of-tree module taints kernel.
The general direction seems really good. I would only invite @dmbaturin to share his view on two topics:
May 4 2026
PR submitted: https://github.com/vyos/vyos-1x/pull/5165
I'm working on this and will submit a vyos-1x PR against current. Planned CLI: set system frr watchfrr-timeout <seconds>, rendering watchfrr_options="--timeout=<seconds>" in /etc/frr/daemons.
Opened implementation and documentation PRs:
it could be fixed on it : https://github.com/FRRouting/frr/pull/17298
The OOT drivers included in 1.5 causes Kernel Panics causing the router to crash.
Removing the NIC cards (Intel ixgbe) form the system resolves the problem.
I’d be happy to explore this further. I’m thinking of building an end-to-end prototype along these lines:
Yes, this is still relevant. While it may not be one of the top priorities, it is definitely one of the gaps we would be very happy to address.
This bug was fixed by T7112.
I’ve developed a script that automatically generates a YANG model from rendered VyOS XML configuration files. I publised the current model output here (https://github.com/yahyacivelek/vyos-yang/tree/main) for your review. I’d like to ask whether this is still a relevant gap and if there is any ongoing work in this area.
May 3 2026
That's as I thought so that's fine.
May 2 2026
@SteveP no. This would require us to give you HSM access for signing modules, which is not possible.
Re "Kernel: T861: add custom VyOS CA to Kernel builds for later module signing". Does this enable me to sign my Realtek .deb package? At the moment I have to create a custom kernel with CONFIG_MODULE_SIG_FORCE disabled for it to load.
May 1 2026
Versions up to v1.3.8 are not affected. However, from v1.4.x onwards, including v1.5.0 and Rolling releases, all versions are affected.
Probably related:
Apr 30 2026
Apr 29 2026
FRR fix merged: https://github.com/FRRouting/frr/pull/21710
Created vyos-build PR: https://github.com/vyos/vyos-build/pull/1174