In T4078#170371, @dmbaturin wrote:I suppose with the new firewall implementation, this is no longer relevant.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Nov 8 2024
Nov 8 2024
dmbaturin set Issue type to feature on T2289: Denest cerbot certificate configuration from service https.
dmbaturin set Issue type to feature on T2060: source-validation will be configured at different locations and could lead to massive confusion.
dmbaturin set Issue type to feature on T3014: Clear under op mode and conf mode act differently. Uniting them.
Oct 12 2024
Oct 12 2024
syncer moved T5543: Fix source address handling in static joins from Backport Candidates to Finished on the VyOS 1.4 Sagitta board.
syncer edited projects for T5543: Fix source address handling in static joins, added: VyOS 1.4 Sagitta; removed VyOS 1.4 Sagitta (1.4.0).
syncer moved T5543: Fix source address handling in static joins from Backlog to Finished on the VyOS 1.3 Equuleus (1.3.6) board.
syncer moved T5543: Fix source address handling in static joins from Need Triage to Completed on the VyOS Rolling board.
dmbaturin edited projects for T5543: Fix source address handling in static joins, added: VyOS 1.4 Sagitta (1.4.0); removed VyOS 1.4 Sagitta.
Jul 13 2024
Jul 13 2024
May 19 2024
May 19 2024
Apr 25 2024
Apr 25 2024
Unfortunately not yet resolved for 1.4 - now reported separately here https://vyos.dev/T6264
Apr 24 2024
Apr 24 2024
Meanwhile, trying to build 1.4 fails for a different reason - Debian 12 (bookworm) is still where it was, but sagitta-packages.vyos.net gives a 403 error:
Apr 19 2024
Apr 19 2024
Viacheslav triaged T6249: ISO builder fails because of changed buster-backport repository as High priority.
This is the result of buster-backports being removed from the main repository server: https://backports.debian.org/news/Removal_of_buster-backports_from_the_debian_archive/
Apr 18 2024
Apr 18 2024
Hi,
I was playing around with VyOS and thought i'd build myself an iso and hit this issue. Not sure if its the correct way to solve it, but this is what I did:
rusnino updated the task description for T6249: ISO builder fails because of changed buster-backport repository.
rusnino updated the task description for T6249: ISO builder fails because of changed buster-backport repository.
Apr 4 2024
Apr 4 2024
dmbaturin edited projects for T948: integrate aws cloud watch scripts into AMI, added: VyOS 1.3 Equuleus (1.3.6); removed VyOS 1.3 Equuleus (1.3.7).
Feb 22 2024
Feb 22 2024
SrividyaA triaged T6052: Easy-rsa build-ca : Can't load /config/my-easy-rsa-config/pki/.rnd into RNG as Low priority.
Feb 15 2024
Feb 15 2024
dmbaturin edited projects for T5624: Remove /etc/debian_version from the image, added: VyOS 1.3 Equuleus (1.3.6); removed VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta.
Feb 8 2024
Feb 8 2024
Viacheslav edited projects for T6025: smoketest: bonding: test fails every once in a while, added: VyOS 1.3 Equuleus (1.3.6); removed VyOS 1.3 Equuleus.
Viacheslav moved T6014: Bump keepalived version from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.6) board.
Viacheslav moved T6014: Bump keepalived version from Open to Finished on the VyOS 1.4 Sagitta board.
Feb 7 2024
Feb 7 2024
PR for equuleus https://github.com/vyos/vyatta-cfg/pull/73
PR for sagitta https://github.com/vyos/vyos-1x/pull/2940
For 1.3 build fails
06:44:06 Unpacking vyos-1x (1.3dev0-4068-ga685e55f3) ... 06:44:06 dpkg: error processing archive /tmp/apt-dpkg-install-FMRTXF/480-vyos-1x_1.3dev0-4068-ga685e55f3_amd64.deb (--unpack): 06:44:06 trying to overwrite '/lib/systemd/system/keepalived.service', which is also in package keepalived 1:2.2.8 06:44:06 dpkg-deb: error: paste subprocess was killed by signal (Broken pipe)
We probably need to remove keepalived.service as we implemented 10-override and generated it via render
Feb 6 2024
Feb 6 2024
rherold added a comment to T5967: Multi-hop BFD connections can't be established; please add minimum-ttl option..
thx for the backport @c-po runs fine on 1.3 rolling.
Viacheslav added a project to T5926: IPSEC does not apply after l2tp configuration was changed: VyOS 1.4 Sagitta.
Viacheslav changed the status of T5926: IPSEC does not apply after l2tp configuration was changed from Open to In progress.
jestabro moved T6017: Update vyos-http-api-tools for security advisory from Open to Finished on the VyOS 1.4 Sagitta board.
jestabro moved T6017: Update vyos-http-api-tools for security advisory from Open to Finished on the VyOS 1.5 Circinus board.
Feb 5 2024
Feb 5 2024
What version? Can you upgrade to 1.4?
One of my router heavily affected by this issue, so if you will wrote a fix - you may ask me to test the fix.
PR for 1.5 https://github.com/vyos/vyos-build/pull/493
PR for 1.3 https://github.com/vyos/vyos-build/pull/494
Feb 3 2024
Feb 3 2024
c-po added a parent task for T2044: RPKI doesn't boot properly: T6004: Missing RPKI boot priority prevents it from loading.
Feb 2 2024
Feb 2 2024
Viacheslav changed the status of T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore from Open to Confirmed.
Viacheslav moved T5739: Password recovery does not work if public keys are configured from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.6) board.
Viacheslav moved T5739: Password recovery does not work if public keys are configured from Open to Finished on the VyOS 1.4 Sagitta board.
merged
wget https://github.com/RUB-NDS/Terrapin-Scanner/releases/download/v1.1.0/Terrapin_Scanner_Linux_amd64 chmod +x Terrapin_Scanner_Linux_amd64
Fixed https://packages.debian.org/buster/openssh-server
vyos@r15:~$ show version all | match ssh ii libssh-4:amd64 0.8.7-1+deb10u2 amd64 tiny C SSH library (OpenSSL flavor) ii libssh2-1:amd64 1.8.0-2.1+deb10u1 amd64 SSH2 client-side library ii openssh-client 1:7.9p1-10+deb10u4 amd64 secure shell (SSH) client, for secure access to remote machines ii openssh-server 1:7.9p1-10+deb10u4 amd64 secure shell (SSH) server, for secure access from remote machines ii openssh-sftp-server 1:7.9p1-10+deb10u4 amd64 secure shell (SSH) sftp server module, for SFTP access from remote machines ii python3-paramiko 2.4.2-0.1+deb10u1 all Make ssh v2 connections (Python 3) ii sshguard 2.3.1-1 amd64 Protects from brute force attacks against ssh vyos@r15:~$ vyos@r15:~$ show version
Feb 1 2024
Feb 1 2024
c-po changed the status of T5967: Multi-hop BFD connections can't be established; please add minimum-ttl option. from Unknown Status to Resolved.
c-po added a comment to T5967: Multi-hop BFD connections can't be established; please add minimum-ttl option..
PR for 1.3 https://github.com/vyos/vyos-1x/pull/2920
Jan 30 2024
Jan 30 2024
c-po changed the status of T5967: Multi-hop BFD connections can't be established; please add minimum-ttl option. from Resolved to Unknown Status.
Jan 28 2024
Jan 28 2024
Related to FRR logic
Won’t fix
Add a bug report on their repo
Jan 27 2024
Jan 27 2024
Same as with https://vyos.dev/T5619.
Viacheslav triaged T5990: Intel 25G E810 kernel ice driver does not work with LLDP as Normal priority.
Jan 24 2024
Jan 24 2024
Jan 22 2024
Jan 22 2024
c-po changed the status of T2287: LLDP not working on X710 adapter, i40e driver from Open to Needs reporter action.
Yeah I'm migrating everything to 1.4, so I don't need this.
Jan 20 2024
Jan 20 2024
Viacheslav triaged T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address as Normal priority.
Viacheslav triaged T5790: ISIS invalid format of hello packet when interface mtu is between 1501 and 1535 as Normal priority.
Viacheslav changed the status of T5627: Multicast - PIM prune state timers expire with time longer to remove a mroute from Open to Needs reporter action.
@fernando Should we create a patch for 1.3?
Viacheslav triaged T5584: System cannot boot with commit-arachive location sftp in some cases as High priority.
Can we close it?
Viacheslav triaged T5485: pppoe: using dialer interfaces in wan-load balancing does not re-install default route as Normal priority.
I'm not expecting fixes due to the old backend.
But maybe we should
Viacheslav triaged T5342: Bgp route-map will not configured in frr for the right protocol as Wishlist priority.
Jan 20 2024, 12:51 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus
Viacheslav triaged T5188: Update Intel igc driver for improved 2.5 GbE support as Wishlist priority.
Viacheslav moved T5180: initramfs-tools ignores firmware from updates directory from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.6) board.
Merged
Viacheslav triaged T5153: OpenConnect route restriction via iptables is ignored as Wishlist priority.
Needs to find the solution for nftables/netfilter.
Viacheslav triaged T5038: WAN load balancing sticky-connections inbound does not work. as Normal priority.
Viacheslav changed the status of T5004: DHCP-Relay potential bug. Static configurations of DHCP-Relay Interfaces from Confirmed to Needs testing.
Was this fixed?