Merged PR: https://github.com/vyos/vyos-1x/pull/3992
Feed All Stories
Aug 19 2024
Aug 19 2024
Aug 18 2024
Aug 18 2024
Vijayakumar changed the status of T6660: Mirror PR: Remove temp feature branch after merge, a subtask of T6309: Check code quality with CodeQL, from Open to In progress.
Vijayakumar changed the status of T6660: Mirror PR: Remove temp feature branch after merge from Open to In progress.
Vijayakumar closed T6645: Handle merge commits in mirror PR workflow, a subtask of T6309: Check code quality with CodeQL, as Resolved.
vyosbot placed T4833: Include wireguard peer name in interface summary report up for grabs.
lucasec closed T6659: suricata: multiple interfaces use same af_packet cluster_id, leading to crash as Resolved.
Aug 17 2024
Aug 17 2024
natali-rs1985 moved T6651: Add a top level op mode word "execute" from In Progress to Finished on the VyOS 1.5 Circinus board.
natali-rs1985 moved T3961: Generate PKI expect 2 character country code from Need Triage to In Progress on the VyOS 1.5 Circinus board.
natali-rs1985 moved T6649: Accel-ppp separate vlan-mon from listen interfaces from In Progress to Finished on the VyOS 1.5 Circinus board.
natali-rs1985 changed the status of T3961: Generate PKI expect 2 character country code from Open to In progress.
Aug 16 2024
Aug 16 2024
n.fort changed the status of T6647: Zone-based Firewalls on Bridges would flag related DHCP traffic invalid from Confirmed to In progress.
Viacheslav changed the status of T6655: udp-broadcast-relay has incorrect tag from Open to In progress.
Aug 16 2024, 10:30 AM · Restricted Project, Restricted Project, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
Viacheslav added a comment to T6655: udp-broadcast-relay has incorrect tag.
Aug 16 2024, 10:28 AM · Restricted Project, Restricted Project, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
Viacheslav moved T4871: show pki add indent between output from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
@natali-rs1985 thanks for testing!
natali-rs1985 added a comment to T4871: show pki add indent between output.
Now it seems to look good
vyos@vyos:~$ show pki Certificate Authorities: Name Subject Issuer CN Issued Expiry Private Key Parent ------ ------------------------------------------------ ----------- ------------------- ------------------- ------------- -------- test CN=vyos.io,O=VyOS,L=Some-City,ST=Some-State,C=GB CN=vyos.io 2024-08-16 08:09:06 2029-08-15 08:09:06 Yes N/A
lucasec added a comment to T3871: Resolve unexpected interface name reordering.
I took some time to re-test this on recent rolling releases and it seemed mostly positive.
Aug 15 2024
Aug 15 2024
n.fort added a comment to T5794: Flowtable with Bond Race.
natali-rs1985 added a comment to T6649: Accel-ppp separate vlan-mon from listen interfaces.
Viacheslav triaged T6657: TACACS+ enhancements by adding Authorization and Accounting functionalities as Normal priority.
Viacheslav added a project to T6651: Add a top level op mode word "execute": VyOS 1.4 Sagitta (1.4.1).
Viacheslav changed the status of T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule from In progress to Needs testing.
Viacheslav changed the status of T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule, a subtask of T5938: Migration fail root task for 1.4-rc, from In progress to Needs testing.
Viacheslav moved T6335: Add/update EVPN op commands from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
vyosbot placed T6335: Add/update EVPN op commands up for grabs.
vyosbot placed T6355: Make the strip-private filter obfuscate only passwords and private keys up for grabs.
Aug 14 2024
Aug 14 2024
jestabro moved T6642: verify_interface_exists should not instantiate its own Config object from Backport Candidates to Finished on the VyOS 1.5 Circinus board.
jestabro added a parent task for T6656: Fix minor typos uncovered by op-mode XML cache: T6650: Add op-mode-definitions XML cache.
jestabro changed the status of T6650: Add op-mode-definitions XML cache from Open to Backport candidate.
This can likely wait for backport until some feedback is received on useful additions.
Aug 14 2024, 4:10 PM · Restricted Project, Restricted Project, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
Aug 14 2024, 4:09 PM · Restricted Project, Restricted Project, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
n.fort added a comment to T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule.
n.fort changed the status of T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule from Open to In progress.
n.fort changed the status of T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule, a subtask of T5938: Migration fail root task for 1.4-rc, from Open to In progress.
natali-rs1985 moved T6651: Add a top level op mode word "execute" from Need Triage to In Progress on the VyOS 1.5 Circinus board.
natali-rs1985 moved T6649: Accel-ppp separate vlan-mon from listen interfaces from Need Triage to In Progress on the VyOS 1.5 Circinus board.
natali-rs1985 changed the status of T6649: Accel-ppp separate vlan-mon from listen interfaces from Open to In progress.
natali-rs1985 updated the task description for T6651: Add a top level op mode word "execute".
vyosbot placed T486: Static IPv6 default route via OSPFv3-learned loopback is not activated up for grabs.
vyosbot placed T6341: Implement documention output for commands on the CLI up for grabs.
vyosbot placed T6342: Extend xml definitions with 'docs' information up for grabs.
vyosbot placed T3871: Resolve unexpected interface name reordering up for grabs.
vyosbot placed T3876: Replace vyos-netplug with a VyOS link state monitor service up for grabs.
Aug 13 2024
Aug 13 2024
c-po added a comment to T6653: Generate a build/manifest.json file after assembling the image(s).
c-po renamed T6653: Generate a build/manifest.json file after assembling the image(s) from Save build artifact data to a file to Generate a build/manifest.json file after assembling the image(s).
c-po changed the status of T6653: Generate a build/manifest.json file after assembling the image(s) from Open to In progress.
Viacheslav changed the subtype of T6652: OpenFabric Support from "Task" to "Feature Request".
Viacheslav added a project to T6177: Intel QAT causes CPU runaway/stall with ipsec VPN: VyOS 1.4 Sagitta (1.4.1).
natali-rs1985 added a comment to T5743: HTTPS API ability to import PKI certificates.
natali-rs1985 changed the status of T6651: Add a top level op mode word "execute" from Open to In progress.
mark22k awarded T2522: Python CLI a Like token.
Viacheslav added a comment to T6526: hardware flowtables not working on supposedly supported hardware.
Needs to add a bug report to netfilter https://bugzilla.netfilter.org/
lucasec added a comment to T6177: Intel QAT causes CPU runaway/stall with ipsec VPN.
I've seen this a few times on the most recent 1.5x rolling releases. So far every stack trace has included the xfrm_input kernel function, so this tells me it is likely specific to when QAT is combined with the VTI feature (which switched from the vti interface type to xfrm type in 1.4).
jestabro closed T6640: Return False for boolean check in_session when running under configd as Resolved.
jestabro moved T6633: inject missing env vars in configd to support configfs util from Need Triage to Backport Candidates on the VyOS 1.5 Circinus board.
Aug 12 2024
Aug 12 2024
Apachez added a comment to T6584: Revert addition of Linux Kernel MT7921 driver.
Might be related patches (no idea if they have anything to do with the kernel panics seen in 6.6):
rob added a comment to T6177: Intel QAT causes CPU runaway/stall with ipsec VPN.
I have the same problem, disable QAT also worked in my case. QAT drivers before 4.24 are working. So VyOS 1.4.0 is also affected
jestabro changed the status of T6642: verify_interface_exists should not instantiate its own Config object, a subtask of T6638: QoS CAKE config with PPPoE interface does not load after reboot, from In progress to Backport pending.
jestabro changed the status of T6642: verify_interface_exists should not instantiate its own Config object, a subtask of T6639: Resolve undesired interactions configverify <-> configfs <-> configd, from In progress to Backport pending.
jestabro changed the status of T6642: verify_interface_exists should not instantiate its own Config object from In progress to Backport pending.
danhusan added a comment to T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule.
jestabro added a comment to T6650: Add op-mode-definitions XML cache.
Aljutor added a comment to T6526: hardware flowtables not working on supposedly supported hardware.
In my case, one interface is direct passthrough of physical interface via proxmox, other is a passthrough of VF (interface is splitter into several and shared across VMs).
I tried to enable hardware offloading for each of them separately without any success.
Viacheslav moved T6643: IP Address range in firewall rules throws error from Need Triage to Finished on the VyOS 1.5 Circinus board.
Viacheslav edited projects for T6643: IP Address range in firewall rules throws error, added: Restricted Project, VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1); removed vyatta-cfg-firewall.
n.fort changed the status of T6643: IP Address range in firewall rules throws error from In progress to Needs testing.