PR's:
https://github.com/vyos/vyatta-op/pull/59
https://github.com/vyos/vyos-1x/pull/1916
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Mar 28 2023
Mar 28 2023
SrividyaA added a comment to T5101: VYOS 1.4 release no longer displayes output for 'sudo ipsec statusall'.
ipsec statusall will not show any details in the latest rolling release as the ipsec.conf backend is deprecated, and swanctl.conf is being used now. Strongswan 5.9.8-5 package is installed and also charon daemon is replaced with the charon-systemd in this version.
Looks like a PAM configuration issue:
SrividyaA changed the status of T5101: VYOS 1.4 release no longer displayes output for 'sudo ipsec statusall' from Open to Confirmed.
I think it is good to implement a append kernel boot parameter in configuration file. Like mitigations=off to help old platforms to perform well.
indrajitr updated the task description for T5115: Support custom port for name servers for forwarding zones.
indrajitr updated the task description for T5115: Support custom port for name servers for forwarding zones.
Mar 27 2023
Mar 27 2023
c-po closed T5114: bgp: implement new CLI commands introduced in FRR 8.5, a subtask of T5100: Update FRR to 8.5, as Resolved.
c-po changed the status of T5114: bgp: implement new CLI commands introduced in FRR 8.5, a subtask of T5100: Update FRR to 8.5, from Open to In progress.
c-po changed the status of T5114: bgp: implement new CLI commands introduced in FRR 8.5 from Open to In progress.
Fix pushed to current:
f8522f323
and updated on test server.
GitHub <noreply@github.com> committed rVYOSONEX2727f57c0643: Merge pull request #1906 from jestabro/codegen (authored by Viacheslav).
Looks good on 1.4-rolling-202303271007:
The site-to-site mode shows that tunnel not configured
Config:
set interfaces openvpn vtun52 description 'Site-to-Site' set interfaces openvpn vtun52 local-address xxx.xxx.0.1 set interfaces openvpn vtun52 local-port '1152' set interfaces openvpn vtun52 mode 'site-to-site' set interfaces openvpn vtun52 persistent-tunnel set interfaces openvpn vtun52 protocol 'udp' set interfaces openvpn vtun52 remote-address 'xxx.xxx.0.2' set interfaces openvpn vtun52 remote-host 'xxx.xxx.41.117' set interfaces openvpn vtun52 remote-port '1152' set interfaces openvpn vtun52 shared-secret-key 's2s'
interface:
vyos@vyos:~$ show int openvpn Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ----------- vtun52 10.52.0.1/32 u/u Site-to-Site
Output show openvpn
vyos@vyos:~$ show openvpn site-to-site No OpenVPN interfaces configured vyos@vyos:~$
c-po closed T5079: xml: schema extension to support defaultValues on tagNodes, a subtask of T4959: Add container registry authentication config for containers, as Resolved.
Most of the match rules results in:
Viacheslav raised the priority of T4737: FRRouting/zebra 7.5.1 does not redistribute routes to other protocols from Normal to High.
The required patch is not included in builds and they have the same bug.
Version: VyOS 1.3-stable-202303270442 Release train: equuleus
Viacheslav changed the status of T5113: PDNS: Support custom port for DNS forwarders from Open to Needs testing.
GitHub <noreply@github.com> committed rVYOSONEX0b34ab8fa73d: Merge pull request #1914 from indrajitr/pdns-port (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX19ff8d43d2ad: Merge pull request #1911 from jestabro/counters (authored by c-po).
Mar 26 2023
Mar 26 2023
Viacheslav changed the status of T5112: Enable support for Network Time Security (NTS) for chrony, a subtask of T3008: Migrate from ntpd to chronyd, from Open to Needs testing.
Viacheslav changed the status of T5112: Enable support for Network Time Security (NTS) for chrony from Open to Needs testing.
Mar 25 2023
Mar 25 2023
c-po moved T5111: pppd-dns.service startup failed from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
GitHub <noreply@github.com> committed rVYOSONEX8f1e8d720d63: Merge pull request #1913 from indrajitr/chrony-nts (authored by c-po).
Viacheslav added a project to T5112: Enable support for Network Time Security (NTS) for chrony: VyOS 1.4 Sagitta.
indrajitr added a parent task for T5112: Enable support for Network Time Security (NTS) for chrony: T3008: Migrate from ntpd to chronyd.
Mar 24 2023
Mar 24 2023
c-po edited projects for T5111: pppd-dns.service startup failed, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
This sort of config should absolutely persist across both reboots and upgrades!.
it will be option b) it will be persistent accross reboots but not accross upgrades as only files in /config will be migrated to the new image version.
We could also alter the path to /config/user-data/ or make /etc/keepalived/conf.d/ a symlink to /config/user-data/ so that those files will be migrated during an upgrade.
jestabro renamed T5097: the operational command "show interfaces ethernet ethx" doesn't reflect a call to 'clear counters' from the operational command "show interfaces ethernet ethx" doesn't show when clears counts to the operational command "show interfaces ethernet ethx" doesn't reflect a call to 'clear counters'.
jestabro changed the status of T5097: the operational command "show interfaces ethernet ethx" doesn't reflect a call to 'clear counters' from Open to In progress.
jestabro added a comment to T5097: the operational command "show interfaces ethernet ethx" doesn't reflect a call to 'clear counters'.
PR for 1.4:
https://github.com/vyos/vyos-1x/pull/1911
PR for 1.3:
https://github.com/vyos/vyos-1x/pull/1912
Mar 23 2023
Mar 23 2023
Viacheslav added a parent task for T5110: Show frr op-mode vtysh_pam: Failed in account validation: T5100: Update FRR to 8.5.
Viacheslav updated the task description for T5110: Show frr op-mode vtysh_pam: Failed in account validation.
Viacheslav renamed T5110: Show frr op-mode vtysh_pam: Failed in account validation from Show version frr vtysh_pam: Failed in account validation to Show frr op-mode vtysh_pam: Failed in account validation.
GitHub <noreply@github.com> committed rVYOSONEXb49c10c43266: Merge pull request #1901 from sever-sever/T5099 (authored by c-po).
c-po committed rVYOSONEXc367a5f42666: T5105: Fix error message from dhcp-server (authored by n.fort).
GitHub <noreply@github.com> committed rVYOSONEX05ecf032c619: Merge pull request #1907 from c-po/t5105-backport (authored by dmbaturin).
GitHub <noreply@github.com> committed rVYOSONEX63f735891741: Merge pull request #1908 from sever-sever/T5086-kern (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX4a791a69985d: Merge pull request #1909 from sever-sever/T5108 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX8da2b48ab6ff: Merge pull request #1910 from sarthurdev/ipsec_test (authored by c-po).
Viacheslav changed the status of T5108: Get rate limit for L2TP/PPTP/SSTP/IPoE in raw format from Open to In progress.