Page MenuHomeVyOS Platform

b- (bri)
User

Projects

User does not belong to any projects.

User Details

User Since
Jan 4 2023, 10:17 PM (98 w, 3 d)

Recent Activity

Sep 26 2023

b- added a comment to T4915: Minisign verification failure == pass??.

Just to be clear, the build I'm going from is just my own build of current to my own build of current -- it says 1.4 because I only changed the version string to 1.5 after this build went through since i'm the only one using my build :)

Sep 26 2023, 5:48 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
b- triaged T4915: Minisign verification failure == pass?? as High priority.

I just noticed that this still is a problem. Excerpt below from downloading an upgrade:

Sep 26 2023, 5:42 PM · VyOS 1.4 Sagitta (1.4.0-epa1)

Sep 21 2023

b- created T5610: Cloudflare blocks pasting of code to vyos.dev.
Sep 21 2023, 3:48 PM

Mar 15 2023

b- added a comment to T4915: Minisign verification failure == pass??.

I want to mention, the reason I wrote out the $? is because it can be confusing and fragile, as this issue demonstrates in the first place.

Mar 15 2023, 7:06 PM · VyOS 1.4 Sagitta (1.4.0-epa1)

Feb 28 2023

b- added a comment to T3420: Support UPNP protocol.

My Xbox One game console is set to use "automatic" settings regarding both port selection and forwarding (via UPNP), and in doing so it chose port 54060 on my LAN (and has been distributed the IP address 172.23.217.102 from my DHCP server — which is not VyOS, by the way).

Feb 28 2023, 8:10 PM
b- added a comment to T3420: Support UPNP protocol.

A few issues I'm encountering while trying to test it right now:

Feb 28 2023, 8:05 PM

Feb 27 2023

b- triaged T4917: Commit hooks as Low priority.
In T4917#140239, @b- wrote:

Thanks! That’ll help me with what I’m working on :)From where does this limitation originate, anyway? Is there a way to at least add . to the acceptable characters list, so as to allow for foo.sh?  Would that break something that expects to skip over filenames with dots and other characters?

Not sure exactly but it seems this part of code https://github.com/vyos/vyatta-cfg/blob/ec568ce7b432acda01f9639afb509287a0e3d760/src/commit/commit-algorithm.cpp#L846

Feb 27 2023, 7:57 PM · Restricted Project
b- added a comment to T2196: Dynamic ipv4 interface list hairpin.

@lue30499 T4997 was merged, so the script I put above (which adds/updates a firewall group for the DHCP IP of any DHCP-enabled interfaces) can now be installed on an official build of 1.4-rolling!

Feb 27 2023, 6:37 PM · VyOS Rolling

Feb 17 2023

b- added a comment to T2196: Dynamic ipv4 interface list hairpin.

This isn’t specific to WANs at all, no! I am using it for a WAN, so some of my comments reflect that, but really this is just a generic hook for any DHCP interface.

Feb 17 2023, 1:55 AM · VyOS Rolling

Feb 12 2023

b- added a comment to T2196: Dynamic ipv4 interface list hairpin.

okay, so with https://vyos.dev/T4997 in place (tested via my custom build https://github.com/b-/vyos-build-action/releases/tag/v1.4-rolling_bri_add-dhcp-user-hooks ) and the following file in /config/scripts/dhcp-client/post-hooks.d/set-addrgroup

#!/bin/sh
#
# /config/scripts/dhcp-client/post-hooks.d/set-addrgroup
Feb 12 2023, 12:05 AM · VyOS Rolling

Feb 11 2023

b- added a comment to T4997: Add DHCP client user hooks dir.

https://github.com/vyos/vyos-1x/pull/1810

Feb 11 2023, 11:55 PM · VyOS 1.4 Sagitta
b- updated the task description for T4997: Add DHCP client user hooks dir.
Feb 11 2023, 8:16 PM · VyOS 1.4 Sagitta
b- changed the status of T4997: Add DHCP client user hooks dir from Open to In progress.
Feb 11 2023, 7:59 PM · VyOS 1.4 Sagitta
b- added a comment to T2196: Dynamic ipv4 interface list hairpin.

Reading more of the fancy internal scripting going on inside VyOS, there's already both a place to put this script (that would cause it to automatically be called by dhclient upon a new address), _and_ it sets a bunch of variables for us so I don't have to hac hac hac parse output that really isn't intended to be parsed. https://github.com/vyos/vyos-1x/tree/current/src/etc/dhcp/dhclient-exit-hooks.d

Feb 11 2023, 7:15 PM · VyOS Rolling
b- added a comment to T2196: Dynamic ipv4 interface list hairpin.
#!/bin/vbash
source /opt/vyatta/etc/functions/script-template
configure
WAN_IF_GROUP=wan
show firewall group interface ${WAN_IF_GROUP} | cut -c 2- | cut -d' ' -f2 > /tmp/WANS
WANS=$(</tmp/WANS)
getip(){
        #ip -4 a show ${1} | grep -Po 'inet \K[0-9.]*'
        run show interface ${1:0:3} $1 brief  | tr -s '  ' | grep $1 | cut -d' ' -f2 | cut -d/ -f1 | grep -v ':'
        # returns like 123.234.34.34
        # grep -v : removes ipv6
}
Feb 11 2023, 10:43 AM · VyOS Rolling
b- added a comment to T2196: Dynamic ipv4 interface list hairpin.

This feature would be very helpfull for hairpin nat as we can see from the mentions.
Might also be helpfull for ipv6 as well.
I am aware its a different product but edgeos from ubiquiti does something like this (looks to be a managed address group that populates dynamically) for nat and fw:

destination {
    group {
        address-group ADDRv4_eth0
    }
}
Feb 11 2023, 10:01 AM · VyOS Rolling
b- added a comment to T2196: Dynamic ipv4 interface list hairpin.

I just want to really strongly second this issue — if this feature isn't added and I can't find a good workaround, I won't be able to stick with VyOS :(

Feb 11 2023, 9:59 AM · VyOS Rolling

Jan 11 2023

b- created T4930: Allow WireGuard peers via DNS hostname.
Jan 11 2023, 9:01 PM · VyOS Rolling

Jan 6 2023

b- added a comment to T4917: Commit hooks .

Thanks! That’ll help me with what I’m working on :)From where does this limitation originate, anyway? Is there a way to at least add . to the acceptable characters list, so as to allow for foo.sh?  Would that break something that expects to skip over filenames with dots and other characters?

Jan 6 2023, 1:38 PM · Restricted Project

Jan 5 2023

b- added a comment to T4917: Commit hooks .

huh, is it possible that we just don't run commit hooks upon changing only comments?

Jan 5 2023, 11:00 PM · Restricted Project
b- added a watcher for Hyper-V/Azure Support: b-.
Jan 5 2023, 9:41 PM
b- created T4917: Commit hooks .
Jan 5 2023, 9:37 PM · Restricted Project
b- added a comment to T4915: Minisign verification failure == pass??.

I just edited the file /opt/vyatta/sbin/install-image in a running system to try testing this, and it works as expected at least for the primary minisign key. I didn't test GPG or 2nd minisign key, but I see no reason why there would be an issue there. I did touch those parts, though, so it's probably worth at least having another set of eyes look at it all.

Jan 5 2023, 8:53 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
b- added a comment to T4915: Minisign verification failure == pass??.

er wait hold up i made a mistake saving/pushing my changes
edit: fixed

Jan 5 2023, 8:19 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
b- edited a custom field on T4915: Minisign verification failure == pass??.
Jan 5 2023, 8:05 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
b- changed the status of T4915: Minisign verification failure == pass?? from Open to Needs testing.

I created a PR, but I'm not certain how to compile this part of VyOS to test this, and I'm hoping someone could help me do so -- a quick glance makes it look to me like this is compiled into a .deb that's then installed by https://github.com/vyos/vyos-build/blob/current/scripts/build-vyos-image ?

Jan 5 2023, 8:01 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
b- claimed T4915: Minisign verification failure == pass??.

The error handling on this line is basically nonexistent, but also the coding style is a little hard to follow.

Jan 5 2023, 5:09 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
b- created T4915: Minisign verification failure == pass??.
Jan 5 2023, 2:30 PM · VyOS 1.4 Sagitta (1.4.0-epa1)