Page MenuHomeVyOS Platform
Feed All Stories

Sep 18 2023

n.fort committed rVYOSONEXb6ae59354b5d: T5594: vrrp: extend function is_ipv6_tentative to analysis all type of ipv6….
Sep 18 2023, 4:48 PM
GitHub <[email protected]> committed rVYOSONEX9620a233c093: Merge pull request #2281 from nicolas-fort/T5594 (authored by c-po).
Sep 18 2023, 4:48 PM
Viacheslav moved T5586: Disable by default SNMP for Keepalived VRRP from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 18 2023, 3:45 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5586: Disable by default SNMP for Keepalived VRRP.

How does FRR/vrrpd work regarding SNMP compatability?

Im thinking if the keepalived could be replaced in favour of FRR/vrrpd?

And for now keep keepalived around only for virtual-server (unless that too can be dealt with by FRR/vrrpd)?

Sep 18 2023, 3:44 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
n.fort added a comment to T5594: VRRP - Error if using IPv6 Link Local as hello source address.

PR for latest: https://github.com/vyos/vyos-1x/pull/2281
PR for Equuleus: https://github.com/vyos/vyos-1x/pull/2282

Sep 18 2023, 2:09 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

PR created: https://github.com/vyos/vyos-1x/pull/2280

Sep 18 2023, 1:49 PM · VyOS 1.5 Circinus
Viacheslav triaged T5594: VRRP - Error if using IPv6 Link Local as hello source address as High priority.
Sep 18 2023, 1:43 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus
Apachez claimed T5591: Cleanup of FRR daemons-file and various FRR fixes.
Sep 18 2023, 1:21 PM · VyOS 1.5 Circinus
n.fort changed the status of T5594: VRRP - Error if using IPv6 Link Local as hello source address from Open to In progress.
Sep 18 2023, 1:18 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus
n.fort created T5594: VRRP - Error if using IPv6 Link Local as hello source address.
Sep 18 2023, 1:18 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.5 Circinus
Apachez closed T5431: Services not enabled or configured are started anyway within frr-family as Wontfix.

I will put this as "wontfix" because a fix would need additional work of stopping/starting correct FRR-service (if this occurs in future then this task can be reopened).

Sep 18 2023, 1:08 PM · VyOS 1.4 Sagitta
Apachez closed T5419: Software/Hardware fastpath with nftables flowtable as Resolved.

I will close this task as a duplicate of https://vyos.dev/T4502 where work is in progress.

Sep 18 2023, 1:01 PM · VyOS 1.4 Sagitta
Apachez closed T5575: ARP/NDP table-size isnt set properly as Resolved.

Using VyOS 1.5-rolling-202309170024.

Sep 18 2023, 12:58 PM · VyOS 1.5 Circinus
n.fort changed the status of T5590: Firewall "log enable" logs every packet from Open to Confirmed.
Sep 18 2023, 12:57 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Apachez added a comment to T5593: Further shrink VyOS imagesize.

So what remains is how to solve point 1.

Sep 18 2023, 11:31 AM · VyOS 2.0.x
Apachez added a comment to T5593: Further shrink VyOS imagesize.

It looks like point 3 can be taken care of:

Sep 18 2023, 11:30 AM · VyOS 2.0.x
Viacheslav added a comment to T2472: Ability to configure EIGRP protocol.
r4# show version 
FRRouting 9.0.1 (r4) on Linux(6.1.53-amd64-vyos)

Still has bugs
For example with redistribute

r4# conf t
r4(config)# router eigrp 65001
r4(config-router)# redistribute connected 
% Configuration failed.
Sep 18 2023, 9:49 AM · VyOS 1.5 Circinus
indrajitr added a comment to T5573: Fix ddclient cache entries.

Added PR https://github.com/vyos/vyos-1x/pull/2278 for smoketest fix.

Sep 18 2023, 9:31 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5554: Disable sudo for PAM RADIUS.
Sep 18 2023, 7:28 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5554: Disable sudo for PAM RADIUS.

Ok, I was thinking if that then waited for some password or such.

Sep 18 2023, 7:27 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
trae32566 added a comment to T5554: Disable sudo for PAM RADIUS.

I haven't tried anything else since I rebooted back into 1.4, but I did try sudo su - which gave the same error.

Sep 18 2023, 7:13 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5554: Disable sudo for PAM RADIUS.

How does a simple "sudo bash" work?

Sep 18 2023, 7:11 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T5573: Fix ddclient cache entries.

Cannot pass the smoketest:

 DEBUG - ======================================================================
DEBUG - FAIL: test_01_dyndns_service_standard (__main__.TestServiceDDNS.test_01_dyndns_service_standard)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG -   File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 82, in test_01_dyndns_service_standard
DEBUG -     self.assertIn(f'use=if', ddclient_conf)
DEBUG - AssertionError: 'use=if' not found in '### Autogenerated by dns_dynamic.py ###\ndaemon=300\nsyslog=yes\nssl=yes\npid=/run/ddclient/ddclient.pid\ncache=/run/ddclient/ddclient.cache\nweb=googledomains use=no            \n # Web service dynamic DNS configuration for cloudflare: [cloudflare, test.ddns.vyos.io]\nusev4=ifv4, \\\nifv4=eth0, \\\nprotocol=cloudflare, \\\nzone=vyos.io, \\\npassword=paSS_@4ord \\\ntest.ddns.vyos.io'
DEBUG - 
DEBUG - ----------------------------------------------------------------------
DEBUG - Ran 4 tests in 11.489s
DEBUG - 
DEBUG - FAILED (failures=1)
Sep 18 2023, 6:56 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5593: Further shrink VyOS imagesize.

Testing point 2 above with VyOS 1.5-rolling-202309170024.

Sep 18 2023, 6:41 AM · VyOS 2.0.x
trae32566 added a comment to T5554: Disable sudo for PAM RADIUS.

I think this broke a whole lot of things for RADIUS users (these work fine in 1.4-rolling-202308040317, but are broken in 1.5-rolling-202309170024):

Sep 18 2023, 6:25 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez created T5593: Further shrink VyOS imagesize.
Sep 18 2023, 5:53 AM · VyOS 2.0.x

Sep 17 2023

Apachez added a comment to T5532: After add system image the boot stuck and works again after the second reboot.

This is the one I was thinking of:

Sep 17 2023, 7:05 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5532: After add system image the boot stuck and works again after the second reboot.

This seems to have been resolved since a few days (1.5-rolling nightly).

Sep 17 2023, 7:01 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr committed rVYOSONEX090319c0e9cf: ddclient: T5573: Update config generation aligning with caching fixes.
Sep 17 2023, 5:36 PM
GitHub <[email protected]> committed rVYOSONEX665523ac1b00: Merge pull request #2251 from indrajitr/ddclient-cache-fix (authored by c-po).
Sep 17 2023, 5:36 PM
c-po moved T5592: salt: upgrade minion to 3005.2 from Open to Finished on the VyOS 1.4 Sagitta board.
Sep 17 2023, 5:32 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po moved T5592: salt: upgrade minion to 3005.2 from Open to Finished on the VyOS 1.5 Circinus board.
Sep 17 2023, 5:32 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po added a comment to T5592: salt: upgrade minion to 3005.2.

PR for sagitta https://github.com/vyos/vyos-build/pull/415

Sep 17 2023, 5:32 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po renamed T5592: salt: upgrade minion to 3005.2 from salt: upgrade minion to 3006.3 to salt: upgrade minion to 3005.2.
Sep 17 2023, 5:29 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
vfreex added a comment to T4502: Consider implementing (NAT/other) flow table offload.

@Apachez The empty table inet vyos_offload is to ensure the table exists before deleting its content. Regarding hardware offload, I don't have a hardware supporting that. The implementation is totally based on documentation and I don't add any checks before applying the nftables config.

Sep 17 2023, 1:04 PM · VyOS 1.4 Sagitta
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

Output of ps auxww | grep -i frr after proposed v3 is applied:

Sep 17 2023, 12:47 PM · VyOS 1.5 Circinus
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

Update of proposed changes (Ill call them proposed v3).

Sep 17 2023, 12:25 PM · VyOS 1.5 Circinus
c-po changed the status of T5592: salt: upgrade minion to 3005.2 from Open to In progress.
Sep 17 2023, 9:11 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po added a parent task for T3761: Bump salt-minion to 3000: T5592: salt: upgrade minion to 3005.2.
Sep 17 2023, 9:11 AM · VyOS 1.2 Crux (VyOS 1.2.9)
c-po added a parent task for T4364: salt-minion: Upgrade to 3004 and migrate to get_config_dict(): T5592: salt: upgrade minion to 3005.2.
Sep 17 2023, 9:11 AM · VyOS 1.4 Sagitta
c-po added subtasks for T5592: salt: upgrade minion to 3005.2: T4364: salt-minion: Upgrade to 3004 and migrate to get_config_dict(), T3761: Bump salt-minion to 3000.
Sep 17 2023, 9:11 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po created T5592: salt: upgrade minion to 3005.2.
Sep 17 2023, 9:10 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

Update of proposed changes (Ill call them proposed v2).

Sep 17 2023, 7:38 AM · VyOS 1.5 Circinus
c-po added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

If we alter the Jinja2 file we should also update the syntax - just ospf an example but its valid for all other SNMP stuff:

Sep 17 2023, 7:08 AM · VyOS 1.5 Circinus
c-po added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

mgmtd can not be disabled. It's a mandatory FRR process.

Sep 17 2023, 7:05 AM · VyOS 1.5 Circinus
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

I can create a PR if everyone agrees upon the proposed changes above however I have limited capability to test each and everyone of these changes.

Sep 17 2023, 6:03 AM · VyOS 1.5 Circinus
Apachez added a comment to T5591: Cleanup of FRR daemons-file and various FRR fixes.

Proposed data/templates/frr/daemons.frr.tmpl:

Sep 17 2023, 6:00 AM · VyOS 1.5 Circinus
Apachez created T5591: Cleanup of FRR daemons-file and various FRR fixes.
Sep 17 2023, 5:58 AM · VyOS 1.5 Circinus

Sep 16 2023

rayzilt created T5590: Firewall "log enable" logs every packet.
Sep 16 2023, 5:41 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev changed the status of T5571: Firewall does not delete networks from the table raw from Confirmed to Needs testing.

Fixed in PR: https://github.com/vyos/vyos-1x/pull/2276

Sep 16 2023, 11:45 AM · VyOS 1.5 Circinus
Apachez created T5589: Nonstripped binaries exists in VyOS.
Sep 16 2023, 11:04 AM · VyOS 1.5 Circinus
c-po committed rVYOSONEXa8036a3867fe: frr: T2472: disable eigrp daemon.
Sep 16 2023, 10:58 AM
GitHub <[email protected]> committed rVYOSONEX8f79a5cb4ee9: Merge pull request #2267 from vyos/mergify/bp/sagitta/pr-2253 (authored by c-po).
Sep 16 2023, 10:58 AM
GitHub <[email protected]> committed rVYOSONEX50bbac2a4227: Merge pull request #2275 from c-po/sagitta (authored by c-po).
Sep 16 2023, 10:58 AM
Apachez added a comment to T5511: Cleanup of unused directories (and files) in order to shrink image-size.

PR created: https://github.com/vyos/vyos-build/pull/414

Sep 16 2023, 8:34 AM · VyOS 1.4 Sagitta
Apachez added a comment to T5511: Cleanup of unused directories (and files) in order to shrink image-size.

PR created: https://github.com/vyos/vyos-build/pull/413

Sep 16 2023, 3:29 AM · VyOS 1.4 Sagitta

Sep 15 2023

GitHub <[email protected]> committed rVYOSONEX4ce8e3b54162: Merge pull request #2271 from vyos/mergify/bp/sagitta/pr-2270 (authored by c-po).
Sep 15 2023, 7:21 PM
GitHub <[email protected]> committed rVYOSONEX41341f776cef: Merge pull request #2266 from vyos/mergify/bp/sagitta/pr-2255 (authored by c-po).
Sep 15 2023, 7:20 PM
GitHub <[email protected]> committed rVYOSONEX768df77b078a: Merge pull request #2265 from vyos/mergify/bp/sagitta/pr-2262 (authored by Viacheslav).
Sep 15 2023, 7:09 PM
Apachez added a comment to T4502: Consider implementing (NAT/other) flow table offload.
  1. Using hardware flowtable (flags offload;) on an interface which doesnt support it returns an error:
Sep 15 2023, 7:03 PM · VyOS 1.4 Sagitta
c-po closed T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) as Resolved.
Sep 15 2023, 6:16 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po moved T5581: Add "show ip nht" op-mode command (IPv4 nexthop tracking table) from In Progress to Finished on the VyOS 1.4 Sagitta board.
Sep 15 2023, 6:16 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Apachez added a comment to T4502: Consider implementing (NAT/other) flow table offload.

Tried to enable both software and hardware flowtable with VyOS 1.5-rolling-202309151051:

Sep 15 2023, 5:32 PM · VyOS 1.4 Sagitta
Apachez added a comment to T5586: Disable by default SNMP for Keepalived VRRP.

How does FRR/vrrpd work regarding SNMP compatability?

Sep 15 2023, 4:55 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
GitHub <[email protected]> committed rVYOSONEX3cd0ef72825d: Merge pull request #2274 from vyos/mergify/bp/sagitta/pr-2273 (authored by c-po).
Sep 15 2023, 4:51 PM
Viacheslav moved T5586: Disable by default SNMP for Keepalived VRRP from Open to Finished on the VyOS 1.5 Circinus board.
Sep 15 2023, 4:24 PM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav closed T5587: Firwall can not pass the smoketest as Resolved.

Fixed

Sep 15 2023, 4:23 PM · VyOS 1.5 Circinus
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX0c94a95a2de5: T5586: Disable by default SNMP for Keeplived VRRP service (authored by Viacheslav).
Sep 15 2023, 3:55 PM
Viacheslav committed rVYOSONEX47875457cd8b: T5586: Disable by default SNMP for Keeplived VRRP service.
Sep 15 2023, 3:31 PM
GitHub <[email protected]> committed rVYOSONEX8c3ce3cd28ed: Merge pull request #2273 from sever-sever/T5586 (authored by c-po).
Sep 15 2023, 3:31 PM
Viacheslav created T5588: Add kernel conntrack_bridge module.
Sep 15 2023, 2:48 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav committed rVYOSONEX1c49d3ef8855: T5261: Add AWS load-balancing tunnel handler.
Sep 15 2023, 9:47 AM
GitHub <[email protected]> committed rVYOSONEX27ad9f5ba643: Merge pull request #2185 from sever-sever/T5261-new (authored by Viacheslav).
Sep 15 2023, 9:47 AM
sarthurdev added a comment to T5587: Firwall can not pass the smoketest.
Sep 15 2023, 8:48 AM · VyOS 1.5 Circinus
vfreex committed rVYOSONEX6416020b3d63: T4502: Fix syntax error introduced by #2062.
Sep 15 2023, 8:24 AM
GitHub <[email protected]> committed rVYOSONEX87af54425973: Merge pull request #2272 from vfreex/fix-t4502 (authored by Viacheslav).
Sep 15 2023, 8:24 AM
sarthurdev moved T5568: Install image from live ISO always defaults boot to KVM entry from Open to In Progress on the VyOS 1.4 Sagitta board.
Sep 15 2023, 8:18 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
sarthurdev added a comment to T5587: Firwall can not pass the smoketest.

https://github.com/vyos/vyos-1x/pull/2272 should fix this

Sep 15 2023, 8:00 AM · VyOS 1.5 Circinus
Viacheslav created T5587: Firwall can not pass the smoketest.
Sep 15 2023, 7:58 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5586: Disable by default SNMP for Keepalived VRRP from Open to In progress.
Sep 15 2023, 7:40 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added a comment to T5586: Disable by default SNMP for Keepalived VRRP.

PR https://github.com/vyos/vyos-1x/pull/2273

Sep 15 2023, 7:35 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav added projects to T5586: Disable by default SNMP for Keepalived VRRP: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.5).
Sep 15 2023, 7:35 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav renamed T5586: Disable by default SNMP for Keepalived VRRP from Disable be default SNMP for Keepalived VRRP to Disable by default SNMP for Keepalived VRRP.
Sep 15 2023, 7:34 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
vfreex updated subscribers of T4502: Consider implementing (NAT/other) flow table offload.

Some extra lines were mistakenly included during rebase:

Sep 15 2023, 6:48 AM · VyOS 1.4 Sagitta
Viacheslav created T5586: Disable by default SNMP for Keepalived VRRP.
Sep 15 2023, 6:46 AM · VyOS 1.3 Equuleus (1.3.5), VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav changed the status of T5579: Log firewall - Wrong command after firewall refactor, a subtask of T5160: Firewall refactor, from In progress to Needs testing.
Sep 15 2023, 6:31 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T5579: Log firewall - Wrong command after firewall refactor from In progress to Needs testing.
Sep 15 2023, 6:31 AM · VyOS 1.5 Circinus
Viacheslav changed the status of T5574: Support per-service cache management for dynamic dns providers from Open to Needs testing.
Sep 15 2023, 6:30 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav changed the status of T5585: Fix file access mode for dynamic dns configuration from Open to Needs testing.
Sep 15 2023, 6:29 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po committed rVYOSONEXcc6b26f6dffb: system: T5505: T5575: support calling system-ip(v6).py from init process.
Sep 15 2023, 5:32 AM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX0ea915fc81bf: ddclient: T5585: Fix file access mode for dynamic dns configuration (authored by indrajitr).
Sep 15 2023, 5:31 AM
indrajitr committed rVYOSONEX7a66413d6010: ddclient: T5585: Fix file access mode for dynamic dns configuration.
Sep 15 2023, 5:30 AM
GitHub <[email protected]> committed rVYOSONEX8f705fb8cb0c: Merge pull request #2270 from indrajitr/ddclient-config-permission (authored by c-po).
Sep 15 2023, 5:30 AM
c-po committed rVYOSONEX22d5cd42f082: system: T5505: T5575: support calling system-ip(v6).py from init process.
Sep 15 2023, 5:29 AM
c-po committed rVYOSONEX45cfd569119b: firewall: T4502: fix syntax error unexpected '}'.
Sep 15 2023, 5:17 AM
c-po committed rVYOSONEX455943cd7f75: smoketests: drop nopool/net30 from testcases.
Sep 15 2023, 5:03 AM
indrajitr claimed T5585: Fix file access mode for dynamic dns configuration.
Sep 15 2023, 3:53 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr created T5585: Fix file access mode for dynamic dns configuration.
Sep 15 2023, 3:52 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr updated the task description for T5574: Support per-service cache management for dynamic dns providers.
Sep 15 2023, 3:51 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
indrajitr renamed T5574: Support per-service cache management for dynamic dns providers from Inprove and refactor dns dynamic service configuration to Support per-service cache management for dynamic dns providers.
Sep 15 2023, 3:49 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta