I messed around with it today, and made some progress!
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 23 2024
Aug 23 2024
jestabro changed the status of T5666: Provide list of config-mode scripts scheduled for proposed commit, a subtask of T5492: CLI node priority is not inversed on node deletion, from On hold to In progress.
jestabro changed the status of T5666: Provide list of config-mode scripts scheduled for proposed commit, a subtask of T5660: Remove redundant calls to config dependency scripts, from On hold to In progress.
jestabro changed the status of T5666: Provide list of config-mode scripts scheduled for proposed commit from On hold to In progress.
A simple version of get_commit_scripts (nee get_commit_schedule) has been added to the resolution of T6671. After that PR is merged, this task will be closed, as that version suffices for current needs.
jestabro changed the status of T5666: Provide list of config-mode scripts scheduled for proposed commit, a subtask of T6671: Confid dependency works incorrectly conntrack conntrack-sync, from On hold to In progress.
GitHub <[email protected]> committed rVYOSONEX0e77effa7a75: Merge pull request #4012 from vyos/mergify/bp/circinus/pr-3656 (authored by c-po).
c-po committed rVYOSONEX2947e7f2a5a4: T6672: Fix system option ssh-client source-interface (authored by Viacheslav).
The following simple commit will need to be backported to sagitta so that a PR for the above will backport cleanly:
https://github.com/vyos/vyos-1x/pull/4013
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX3ff2f3204aba: xml: T6319: add util for ancestor owner/priority (authored by jestabro).
GitHub <[email protected]> committed rVYOSONEX94908b75bbce: Merge pull request #4010 from vyos/mergify/bp/sagitta/pr-3945 (authored by dmbaturin).
Viacheslav closed T5546: Failed upgrade from 1.4-rolling-202212310809 to 1.4-rolling-202309030023 as Not Applicable.
Viacheslav moved T6561: show ntp is not vrf aware from Open to Finished on the VyOS 1.5 Circinus board.
I think we can close this one
n.fort closed T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
n.fort closed T6646: 1.3.8 to 1.4.0 config migration fails due to conntrack ignore rule as Resolved.
a.hajiyev added a comment to T6673: Unexpected error when restart container via native Podman command.
Only worked:
- Reboot instance
- load /config/config.boot
- sudo podman rm suricata
- commit
Then it works
vyos@VyOS-Test01#
[edit]
vyos@VyOS-Test01# load /config/config.boot
[edit]
vyos@VyOS-Test01#
[edit]
vyos@VyOS-Test01# compare
+ container {
+ name suricata {
+ allow-host-networks
+ arguments "-q 1"
+ capability "net-admin"
+ capability "sys-admin"
+ capability "sys-nice"
+ image "jasonish/suricata:6.0.14"
+ memory "1024"
+ volume ETC {
+ destination "/etc/suricata"
+ source "/config/suricata/etc"
+ }
+ volume LOGS {
+ destination "/var/log/suricata"
+ source "/config/suricata/logs"
+ }
+ volume RULES {
+ destination "/var/lib/suricata/rules/"
+ source "/config/suricata/rules"
+ }
+ }
+ }a.hajiyev reopened T6673: Unexpected error when restart container via native Podman command as "Open".
a.hajiyev added a comment to T6673: Unexpected error when restart container via native Podman command.
If service is 'failed' state
vyos@VyOS-Test01:~$ systemctl status vyos-container-suricata.service
× vyos-container-suricata.service - VyOS Container suricata
Loaded: loaded (/run/systemd/system/vyos-container-suricata.service; static)
Active: failed (Result: exit-code) since Fri 2024-08-23 10:32:44 UTC; 43s ago
Duration: 4min 55.702s
Process: 2855 ExecStartPre=/bin/rm -f /run/vyos-container-suricata.service.pid /run/vyos-container-suricata.service.cid (code=exited, sta>
Process: 2856 ExecStart=/usr/bin/podman run --conmon-pidfile /run/vyos-container-suricata.service.pid --cidfile /run/vyos-container-suric>
Process: 2867 ExecStopPost=/usr/bin/podman rm --ignore -f --cidfile /run/vyos-container-suricata.service.cid (code=exited, status=0/SUCCE>
Process: 2873 ExecStopPost=/bin/rm -f /run/vyos-container-suricata.service.cid (code=exited, status=0/SUCCESS)
CPU: 129msViacheslav added a comment to T6673: Unexpected error when restart container via native Podman command.
In T6673#198344, @a.hajiyev wrote:You are right there is an op-mode command to restart the container
restart container suricataBut I think there needs to be some checks/changes at least someone will execute the native Podman command to restart the container.
a.hajiyev added a comment to T6673: Unexpected error when restart container via native Podman command.
You are right there is an op-mode command to restart the container
restart container suricata
But I think there needs to be some checks/changes at least someone will execute the native Podman command to restart the container.
Viacheslav added a project to T6655: udp-broadcast-relay has incorrect tag: VyOS 1.4 Sagitta (1.4.1).
Sorry, but that was my own mistake. When I checked again today, I noticed that the connections were not allowed in the firewall.
Viacheslav added a comment to T6673: Unexpected error when restart container via native Podman command.
It fails because you do it in the wrong way
GitHub <[email protected]> committed rVYOSONEX92c261ecfe9a: T6561: Add vrf aware for show ntp (#4009) (authored by mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX6e43e6e12aab: wireless: T6318: move country-code to a system wide configuration (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX578738f59bc4: sysctl: T3204: restore sysctl setttings overwritten by tuned (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXa518ba91fb3d: sysctl: T3204: restore sysctl setttings overwritten by tuned (authored by c-po).
GitHub <[email protected]> committed rVYOSONEXde2bdd189ef3: Merge pull request #4007 from vyos/mergify/bp/circinus/pr-4001 (authored by c-po).
PR to follow smoketests and cosmetic changes:
https://github.com/vyos/vyos-1x/compare/current...jestabro:configdep-prio
Aug 22 2024
Aug 22 2024
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXfd57f3e37313: T6561: Add vrf aware for show ntp (authored by Viacheslav).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX31aa181d8935: T6561: Add vrf aware for show ntp (authored by Viacheslav).
fernando added a project to T6668: op-cmd: show mac-sec details encrytion info: VyOS 1.4 Sagitta (1.4.0).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX3a2bb7aac2b6: op_mode: T6668: Add detailed statistics infomartion about MACsec interfaces (authored by fett0 <[email protected]>).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXde7651af6cb5: op_mode: T6668: Add detailed statistics infomartion about MACsec interfaces (authored by fett0 <[email protected]>).
GitHub <[email protected]> committed rVYOSONEX4b9318de1987: Merge pull request #4001 from fett0/T6668 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX69c051bb9c07: T6672: Fix system option ssh-client source-interface (authored by Viacheslav).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXe7d1805e4a77: T6672: Fix system option ssh-client source-interface (authored by Viacheslav).
GitHub <[email protected]> committed rVYOSONEX322dc0f0ba4f: Merge pull request #4000 from sever-sever/T6672 (authored by c-po).
Viacheslav edited projects for T6561: show ntp is not vrf aware, added: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta (1.4.0).
PR https://github.com/vyos/vyos-1x/pull/4003
vyos@r14:~$ show ntp
.- Number of sample points in measurement set.
/ .- Number of residual runs with same sign.
| / .- Length of measurement set (time).
| | / .- Est. clock freq error (ppm).
| | | / .- Est. error in freq.
| | | | / .- Est. offset.
| | | | | | On the -.
| | | | | | samples. \
| | | | | | |
Name/IP Address NP NR Span Frequency Freq Skew Offset Std Dev
==============================================================================
ec2-34-206-168-146.compu> 31 15 70m +0.225 0.056 +1295us 112us
ec2-18-193-41-138.eu-cen> 31 13 70m -0.305 0.070 -968us 119us
ec2-122-248-201-177.ap-s> 6 3 52m -2.587 0.901 +109us 252us
vyos@r14:~$Viacheslav changed the status of T6561: show ntp is not vrf aware, a subtask of T5116: Better VRF support, from Open to In progress.
fernando changed the status of T6668: op-cmd: show mac-sec details encrytion info from Open to In progress.
Viacheslav updated the task description for T6671: Confid dependency works incorrectly conntrack conntrack-sync.
Viacheslav renamed T6671: Confid dependency works incorrectly conntrack conntrack-sync from Confid dependency works incorrectly conntrack connntrack-sync to Confid dependency works incorrectly conntrack conntrack-sync.
Aug 21 2024
Aug 21 2024
JeffWDH added a comment to T5647: Extend failover route functionality to use dynamically assigned interface next hops.
Is there any way to incentivize the addition of this?
A workaround doe DHCP client to make it work again: https://github.com/vyos/vyos-1x/pull/4002
Aug 21 2024, 7:09 PM · VyOS 1.4 Sagitta (1.4.1), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
A few immediate notes, before preparing the solution:
(1) this is independent of whether one is running under configd or not
(2) this is more easily triggered under 1.4/1.5, which has default ['system', 'conntrack', 'modules'] entries (fixed in current), though can be reproduced in current with the above and 'set ... conntrack modules ..'
(3) this was avoided in 1.4.0 by the global dependency pruning; that raised other serious issues, however (T6559), due to constraints of the legacy commit algorithm.
Viacheslav changed the status of T6672: ssh-client source-interface CLI option failing with traceback from Open to In progress.
jestabro updated the task description for T6671: Confid dependency works incorrectly conntrack conntrack-sync.
It looks like you are already running this with a high reporting level. Are you seeing any/all the messages on stderr? I would try all of this on the command line first, and do the VyOS cli later.
Viacheslav triaged T6672: ssh-client source-interface CLI option failing with traceback as Normal priority.
possible fix
if 'source_interface' in config:
# my code here
config['ifname'] = config['source_interface']Viacheslav changed the status of T6671: Confid dependency works incorrectly conntrack conntrack-sync from Open to Confirmed.
Viacheslav updated the task description for T6671: Confid dependency works incorrectly conntrack conntrack-sync.
Viacheslav triaged T6671: Confid dependency works incorrectly conntrack conntrack-sync as High priority.
The issue is not found in 1.3.8 version but found in 1.4.0 and latest 1.5 rolling release.
@shaneshort this might look like a trivial one but we've already checked it out
Aug 20 2024
Aug 20 2024
c-po changed the status of T6660: Mirror PR: Remove temp feature branch after merge from In progress to Needs testing.
c-po changed the status of T6660: Mirror PR: Remove temp feature branch after merge, a subtask of T6309: Check code quality with CodeQL, from In progress to Needs testing.
c-po triaged T6665: Option to trigger commit-archive on save instead of commit as Wishlist priority.
c-po changed the status of T6666: image_format is image_formatS in some build-flavor files from Open to In progress.
Viacheslav triaged T6667: Problems with simultaneous usage of multiple `vtysh` processes as High priority.
Aug 20 2024, 2:48 PM · VyOS 1.4 Sagitta (1.4.1), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
zsdc changed the status of T6667: Problems with simultaneous usage of multiple `vtysh` processes from Open to Confirmed.
Aug 20 2024, 1:55 PM · VyOS 1.4 Sagitta (1.4.1), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
Aug 20 2024, 1:55 PM · VyOS 1.4 Sagitta (1.4.1), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
Viacheslav changed the status of T5743: HTTPS API ability to import PKI certificates from In progress to Needs testing.