Page MenuHomeVyOS Platform
Feed All Stories

Jan 10 2024

dmbaturin triaged T4287: wireless: cannot set regulatory domain as High priority.
Jan 10 2024, 9:23 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1)
dmbaturin changed Is it a breaking change? from none to compatible on T4285: Add integration with Teleport.
Jan 10 2024, 9:23 PM · VyOS Rolling
dmbaturin triaged T4285: Add integration with Teleport as Wishlist priority.
Jan 10 2024, 9:23 PM · VyOS Rolling
dmbaturin triaged T4281: System users migration can lead to inaccessible shell as High priority.
Jan 10 2024, 9:22 PM · VyOS Rolling, Restricted Project
sarthurdev moved T5614: Add conntrack helper matching on firewall from Open to Finished on the VyOS 1.5 Circinus board.
Jan 10 2024, 9:22 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
sarthurdev closed T5614: Add conntrack helper matching on firewall as Resolved.
Jan 10 2024, 9:22 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
dmbaturin triaged T4280: dhcp-relay: does not work with wireguard uplink as High priority.
Jan 10 2024, 9:22 PM · VyOS 1.3 Equuleus, Restricted Project
dmbaturin closed T4279: vyos-vm-images: add vagrant virtualbox box as Not Applicable.

Since the original vyos-vm-images is deprecated, I suppose we should close this for now.

Jan 10 2024, 9:21 PM · Restricted Project, VyOS 1.4 Sagitta
dmbaturin triaged T4270: When "ignore-hosts-file" is unset, local hostname of the router resolves to 127.0.1.1 in the DNS forwarding service as High priority.
Jan 10 2024, 9:21 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta (1.4.0-epa2)
sarthurdev added a comment to T5550: Source validation on interface does not work properly.

1.4 PR: https://github.com/vyos/vyos-1x/pull/2793

Jan 10 2024, 9:20 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
sarthurdev moved T5787: dhcp-server allows duplicate static-mapping for the same IP address from Open to In Progress on the VyOS 1.4 Sagitta board.
Jan 10 2024, 9:19 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev added a comment to T5787: dhcp-server allows duplicate static-mapping for the same IP address.

1.4 PR: https://github.com/vyos/vyos-1x/pull/2794

Jan 10 2024, 9:19 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav changed the status of T3011: router becomes unreachable for few minutes when vti interfaces goes down from Unknown Status to Resolved.
Jan 10 2024, 9:18 PM · VyOS 1.4 Sagitta
Viacheslav closed T3011: router becomes unreachable for few minutes when vti interfaces goes down as Unknown Status.

Well-known behavior when you use VTI interfaces you have to use set vpn ipsec options disable-route-autoinstall otherwise you can get any unexpected things.

Jan 10 2024, 9:17 PM · VyOS 1.4 Sagitta
dmbaturin triaged T4266: Add controller for nftables bgp flowspec routes as Normal priority.
Jan 10 2024, 9:16 PM
dmbaturin added a comment to T4256: Display static DHCP server leases in the operational command output.

Kea doesn't have that issue, and in 1.5 rolling release builds, static leases are already displayed in show dhcp server leases. But in ISC DHCPd, which is unmaintained, I'm not sure if we should switch from the tried and proved static leases to anything else.

Jan 10 2024, 9:15 PM · VyOS 1.5 Circinus
dmbaturin renamed T4256: Display static DHCP server leases in the operational command output from Add support of reserved lease to dhcpd to Display static DHCP server leases in the operational command output.
Jan 10 2024, 9:12 PM · VyOS 1.5 Circinus
sarthurdev moved T5550: Source validation on interface does not work properly from Open to Finished on the VyOS 1.5 Circinus board.
Jan 10 2024, 9:11 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
sarthurdev added a project to T5550: Source validation on interface does not work properly: VyOS 1.5 Circinus.
Jan 10 2024, 9:11 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
dmbaturin edited projects for T4256: Display static DHCP server leases in the operational command output, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
Jan 10 2024, 9:11 PM · VyOS 1.5 Circinus
Viacheslav closed T3442: Support multi-language documents as Invalid.

@jack9603301 Feel free to create a PR as do usually do for documentation, the Task is not required.
For example https://github.com/vyos/vyos-documentation/pull/1229

Jan 10 2024, 9:08 PM · Restricted Project
Cheeze_It added a comment to T3566: Add L2vpn instance for mpls .

Are we going to just let EVPN be the L2VPN technology of choice and not go down the VPWS/VPLS route for L2VPN? EVPN is the future anyway, so going and adding VPWS/VPLS is kind of doing legacy work.

Jan 10 2024, 9:08 PM · VyOS Rolling
dmbaturin triaged T4251: Add TLS functionality for rsyslog as Normal priority.
Jan 10 2024, 9:03 PM · VyOS Rolling
dmbaturin closed T4250: Organize logrotate settings to avoid duplicates as Resolved.
Jan 10 2024, 9:03 PM · VyOS 1.4 Sagitta
dmbaturin triaged T4247: Access Control for SSH (and other?) services as Normal priority.
Jan 10 2024, 9:02 PM
dmbaturin triaged T4243: Nat log - Add translated data to nat logs as Low priority.
Jan 10 2024, 9:00 PM · VyOS Rolling
dmbaturin closed T4236: Generate ovpn openvpn client configuration files as Resolved.
Jan 10 2024, 8:59 PM · VyOS 1.4 Sagitta
dmbaturin closed T4229: Add xdp-tools to build as Not Applicable.

No longer applicable now that XDP is phased out.

Jan 10 2024, 8:59 PM · VyOS 1.4 Sagitta
dmbaturin triaged T4208: Issues With More than Two Default Route Paths as High priority.
Jan 10 2024, 8:58 PM · VyOS 1.3 Equuleus (1.3.7)
Viacheslav closed T3499: Podman is not compatible with nat rules, a subtask of T2216: Containerized third-party applications for VyOS, as Resolved.
Jan 10 2024, 8:56 PM · VyOS 1.4 Sagitta
Viacheslav closed T3499: Podman is not compatible with nat rules as Resolved.

We use the netavark plugin for the containers, which fixes this.

set container name alp01 image 'alpine'
set container name alp01 network NET01
set container network NET01 prefix '100.64.0.0/24'
Jan 10 2024, 8:56 PM · VyOS 1.4 Sagitta
dmbaturin closed T4222: Support for TWAMP as round-trip metric as Resolved.
Jan 10 2024, 8:50 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
dmbaturin changed the status of T4646: USB serial output console does not work from Unknown Status to Resolved.
Jan 10 2024, 8:48 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
dmbaturin triaged T4114: Allow software running as systemd service write coredumps as Normal priority.
Jan 10 2024, 8:47 PM
dmbaturin triaged T4075: Add ethernet OAM IEEE 802.3ah as Low priority.
Jan 10 2024, 8:47 PM · VyOS Rolling
dmbaturin triaged T4074: Add NETCONF server with YANG data modeling as Low priority.
Jan 10 2024, 8:46 PM · VyOS Rolling
Viacheslav reassigned T3430: Cloud-init failing with “Unable to render networking” on VyOS 1.3 from Viacheslav to zsdc.
Jan 10 2024, 8:45 PM · VyOS 1.4 Sagitta
Viacheslav closed T3430: Cloud-init failing with “Unable to render networking” on VyOS 1.3 as Resolved.

Fixed in https://github.com/vyos/vyos-vm-images/commit/090e5367dc6df9b49c037e0b60f7adfafdf54a53

Jan 10 2024, 8:45 PM · VyOS 1.4 Sagitta
Viacheslav closed T1369: GCP Networking Failure as Resolved.

@fernando Thanks!

Jan 10 2024, 8:36 PM · VyOS 1.3 Equuleus (1.3.6), test
fernando added a comment to T1369: GCP Networking Failure.

i've re-checked with the new image from GCP and new cloud-init version , it seems to be working as expexted :

Jan 10 2024, 8:27 PM · VyOS 1.3 Equuleus (1.3.6), test
Viacheslav moved T5918: Verification problem for `set vpn ipsec interface` from Open to Finished on the VyOS 1.4 Sagitta board.
Jan 10 2024, 8:21 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav closed T5918: Verification problem for `set vpn ipsec interface` as Resolved.
Jan 10 2024, 8:21 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
GitHub <[email protected]> committed rVYOSONEX348892a97be2: Merge pull request #2792 from vyos/mergify/bp/sagitta/pr-2791 (authored by Viacheslav).
Jan 10 2024, 8:21 PM
Viacheslav added a comment to T3566: Add L2vpn instance for mpls .

The kernel is not supporting pseudowire/VPLS now
this patch was never merged into the kernel

Jan 10 2024, 8:16 PM · VyOS Rolling
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX60127f12d6bd: T5918: Fix typo in verify vpn ipsec interface (authored by Viacheslav).
Jan 10 2024, 8:03 PM
Viacheslav committed rVYOSONEX8452d8f49216: T5918: Fix typo in verify vpn ipsec interface.
Jan 10 2024, 8:02 PM
GitHub <[email protected]> committed rVYOSONEX7c6cb9829356: Merge pull request #2791 from sever-sever/T5918 (authored by c-po).
Jan 10 2024, 8:02 PM
Viacheslav changed the status of T3429: Hyper-V integration services not working on VyOS 1.4 (sagitta/current) from Open to Needs testing.
Jan 10 2024, 7:50 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5918: Verification problem for `set vpn ipsec interface` from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/2791

Jan 10 2024, 7:46 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav updated subscribers of T5835: UPnP port mapping / rule installation fails.
Jan 10 2024, 7:30 PM
dylanneild added a comment to T5835: UPnP port mapping / rule installation fails.

No, installing the miniupnpd_functions.sh file does not correct the problem.

Jan 10 2024, 7:24 PM
GitHub <[email protected]> committed rVYOSONEX3eaf0ca3978a: Merge pull request #2788 from vyos/mergify/bp/sagitta/pr-2787 (authored by Viacheslav).
Jan 10 2024, 7:23 PM
Viacheslav added a comment to T5835: UPnP port mapping / rule installation fails.

Another bug it that /config/upnp.leases is hardcoded, but there is no script who creates it https://github.com/vyos/vyos-1x/blob/aebb458262072457c6a3840d1b17031fbd780eca/data/templates/firewall/upnpd.conf.j2#L128

Jan 10 2024, 7:21 PM
sarthurdev changed the status of T5814: VyOS 1.3 to 1.4 LTS Firewall ruleset migration script breaks configuration from In progress to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/2790

Jan 10 2024, 7:17 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXb588e0784626: T5688: Changed 'range' to multi in 'client-ip-pool' for accell-ppp (authored by a.apostoliuk).
Jan 10 2024, 7:00 PM
a.apostoliuk committed rVYOSONEX4ffec67d0467: T5688: Changed 'range' to multi in 'client-ip-pool' for accell-ppp.
Jan 10 2024, 6:59 PM
GitHub <[email protected]> committed rVYOSONEXaebb45826207: Merge pull request #2777 from aapostoliuk/T5688-multirange (authored by c-po).
Jan 10 2024, 6:59 PM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX345a59a99b4d: bgp: T5913: allow peer-group support for ipv4|6-labeled-unicast SAFI (authored by c-po).
Jan 10 2024, 6:58 PM
GitHub <[email protected]> committed rVYOSONEX9bfc538e7af5: Merge pull request #2782 from vyos/mergify/bp/sagitta/pr-2780 (authored by c-po).
Jan 10 2024, 6:58 PM
Viacheslav moved T5916: Added segment routing check for index size and SRGB size from Open to Finished on the VyOS 1.5 Circinus board.
Jan 10 2024, 6:41 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a project to T5916: Added segment routing check for index size and SRGB size : VyOS 1.5 Circinus.
Jan 10 2024, 6:41 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5835: UPnP port mapping / rule installation fails.

Will it work if you manually download the functions? https://github.com/miniupnp/miniupnp/blob/miniupnpd_2_3_1/miniupnpd/netfilter_nft/scripts/miniupnpd_functions.sh

Jan 10 2024, 6:39 PM
fghorow added a comment to T5910: Grub problem(?) Serial Console no longer working.

OK, a little digging around in the grub configs led me to a "workaround" solution for the serial console problem after the machine is booted.

Jan 10 2024, 6:29 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort changed the status of T5919: Firewall - opmode for ipv6 from Open to In progress.
Jan 10 2024, 6:26 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort created T5919: Firewall - opmode for ipv6.
Jan 10 2024, 6:26 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
dylanneild added a comment to T5835: UPnP port mapping / rule installation fails.

Can confirm this is exactly the same in 1.4 rolling (as of Jan 09). Same errors. The miniupnpd daemon receives the request (for either a UPnP, NAT-PMP, or PCP port mapping) and then reports the errors @simplysoft reports in the description.

Jan 10 2024, 6:25 PM
c-po committed rVYOSONEXf1411240c6b1: bgp: T5913: allow peer-group support for ipv4|6-labeled-unicast SAFI.
Jan 10 2024, 6:22 PM
GitHub <[email protected]> committed rVYOSONEXe890527d7300: Merge pull request #2787 from c-po/bgp-5913 (authored by Viacheslav).
Jan 10 2024, 6:22 PM
c-po closed T5766: http: rewrite conf-mode script to get_config_dict() , a subtask of T5762: http: api: smoketests fail as they can not establish IPv6 connection to uvicorn backend server, as Resolved.
Jan 10 2024, 5:58 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po closed T5766: http: rewrite conf-mode script to get_config_dict() as Resolved.
Jan 10 2024, 5:58 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po closed T5766: http: rewrite conf-mode script to get_config_dict() , a subtask of T5782: Use a single config mode script for https and http-api, as Resolved.
Jan 10 2024, 5:58 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po closed T5766: http: rewrite conf-mode script to get_config_dict() , a subtask of T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script, as Resolved.
Jan 10 2024, 5:58 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po closed T5911: pki: service update ignored if certificate name contains a hyphen (-), a subtask of T3642: PKI configuration, as Resolved.
Jan 10 2024, 5:58 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
c-po closed T5911: pki: service update ignored if certificate name contains a hyphen (-) as Resolved.
Jan 10 2024, 5:58 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po moved T5911: pki: service update ignored if certificate name contains a hyphen (-) from Open to Finished on the VyOS 1.4 Sagitta board.
Jan 10 2024, 5:58 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po closed T5902: http: remove virtual-host configuration in webserver, a subtask of T5766: http: rewrite conf-mode script to get_config_dict() , as Resolved.
Jan 10 2024, 5:58 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po closed T5902: http: remove virtual-host configuration in webserver as Resolved.
Jan 10 2024, 5:58 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po moved T5902: http: remove virtual-host configuration in webserver from In Progress to Finished on the VyOS 1.4 Sagitta board.
Jan 10 2024, 5:57 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po closed T5886: Add support for ACME protocol (LetsEncrypt), a subtask of T3642: PKI configuration, as Resolved.
Jan 10 2024, 5:57 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
c-po closed T5886: Add support for ACME protocol (LetsEncrypt) as Resolved.
Jan 10 2024, 5:57 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po closed T5886: Add support for ACME protocol (LetsEncrypt), a subtask of T5894: Extend get_config_dict() with additional parameter with_pki that defaults to False, as Resolved.
Jan 10 2024, 5:57 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
c-po moved T5913: Allow for Peer-Groups in ipv4-labeled-unicast SAFI from Open to Finished on the VyOS 1.5 Circinus board.
Jan 10 2024, 5:56 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po changed the status of T5913: Allow for Peer-Groups in ipv4-labeled-unicast SAFI from Open to In progress.
Jan 10 2024, 5:56 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po added a comment to T5913: Allow for Peer-Groups in ipv4-labeled-unicast SAFI.

PR for 1.5 https://github.com/vyos/vyos-1x/pull/2787 which will be backported to 1.4

Jan 10 2024, 5:56 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
n.fort committed rVYOSONEX62f10e0ec807: T5915:firewall: re-add opmode command for zone based firewall.
Jan 10 2024, 5:28 PM
GitHub <[email protected]> committed rVYOSONEX9e3586eb17cb: Merge pull request #2784 from nicolas-fort/T5915 (authored by c-po).
Jan 10 2024, 5:28 PM
sarthurdev committed rVYOSONEXdaffee2cbf00: dhcp: T3316: Move options to separate node and extend scopes.
Jan 10 2024, 5:28 PM
sarthurdev committed rVYOSONEX0cd74e0795ea: dhcp: T5912: Fix hostfile not written for new leases.
Jan 10 2024, 5:28 PM
sarthurdev committed rVYOSONEX74ddb29c6c9c: dhcp: T3316: Fix `listen-address` handling and add `listen-interface` as….
Jan 10 2024, 5:28 PM
sarthurdev committed rVYOSONEX39bf15289ca1: dhcp: T3316: Workaround to append domain suffix to hostfile entries.
Jan 10 2024, 5:28 PM
sarthurdev committed rVYOSONEX41913f4d1d63: dhcp: T5787: Prevent duplicate IP addresses on static mappings.
Jan 10 2024, 5:28 PM
GitHub <[email protected]> committed rVYOSONEX085a15059755: Merge pull request #2785 from sarthurdev/kea-options (authored by c-po).
Jan 10 2024, 5:28 PM
jestabro committed rVYOSONEX17a1d31299e8: image-tools: T5917: annotate image list with (running)/(default boot).
Jan 10 2024, 5:27 PM
GitHub <[email protected]> committed rVYOSONEXf00779b36af8: Merge pull request #2786 from jestabro/image-annotations (authored by c-po).
Jan 10 2024, 5:27 PM
c-po committed rVYOSONEX4c35c1a4c818: T5916: Added segment routing check for index base size and SRGB base size (authored by Cheeze_It).
Jan 10 2024, 5:26 PM
sarthurdev changed the status of T5814: VyOS 1.3 to 1.4 LTS Firewall ruleset migration script breaks configuration from Open to In progress.
Jan 10 2024, 4:55 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
zsdc created T5918: Verification problem for `set vpn ipsec interface`.
Jan 10 2024, 4:52 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
jestabro added a comment to T5917: Restore annotations of (running)/(default boot) in select image list.

PR:
https://github.com/vyos/vyos-1x/pull/2786

Jan 10 2024, 4:14 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
jestabro triaged T5917: Restore annotations of (running)/(default boot) in select image list as Normal priority.
Jan 10 2024, 4:06 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
jestabro changed Issue type from unspecified to feature on T3441: More intelligent config loading scripts.
Jan 10 2024, 3:35 PM · VyOS Rolling