Page MenuHomeVyOS Platform

lclements0 (Lee Clements)
User

Projects

User does not belong to any projects.

User Details

User Since
Jul 16 2023, 5:22 PM (166 w, 14 h)

Recent Activity

Thu, Sep 3

lclements0 added a comment to T9127: Bug: Slow-initializing NIC (Intel ice / empty E823-L SFP cages) loses VyOS interface-naming race → interface reordering, duplicate MAC via hw-id, and total management lockout on reboot.

@Viacheslav I can confirm the boot race issue is gone on the latest rolling release. Thanks!

Thu, Sep 3, 3:25 PM · VyOS Rolling

Mon, Aug 24

lclements0 added a comment to T9193: GRE tunnel key uniqueness check ignores remote address and source-interface.

Correction - change 2 above was too broad, and rule 3 in the resulting list with it.

Mon, Aug 24, 8:54 PM · VyOS Rolling

Aug 22 2026

lclements0 added a comment to T9193: GRE tunnel key uniqueness check ignores remote address and source-interface.

Three changes came out of review and testing on PR #5392. Two of them narrow or widen what verify() accepts relative to the original description above, so the rules listed there are superseded by the list at the end of this comment.

Aug 22 2026, 4:05 AM · VyOS Rolling

Aug 20 2026

lclements0 added a comment to T9236: QAT driver autoloads and self-starts independently of "set system acceleration qat"; op mode reports "not configured" while the device is active.

A PR has been raised for this here: https://github.com/vyos/vyos-1x/pull/5422

Aug 20 2026, 9:32 PM · VyOS Rolling
lclements0 created T9236: QAT driver autoloads and self-starts independently of "set system acceleration qat"; op mode reports "not configured" while the device is active.
Aug 20 2026, 9:12 PM · VyOS Rolling

Aug 14 2026

lclements0 created T9212: system login radius source-address appends instead of replacing, causing a commit-time failure.
Aug 14 2026, 3:04 PM · VyOS Rolling

Aug 11 2026

lclements0 added a comment to T9193: GRE tunnel key uniqueness check ignores remote address and source-interface.

I dropped a PR for this change, here: https://github.com/vyos/vyos-1x/pull/5392

Aug 11 2026, 6:25 AM · VyOS Rolling
lclements0 created T9195: Rolling images 2026.08.04+ do not boot on Denverton / Ice Lake Xeon D / Snowridge (kernel 6.18.39-6.18.41 8250_mid NULL deref).
Aug 11 2026, 6:19 AM · VyOS Rolling

Aug 10 2026

lclements0 created T9193: GRE tunnel key uniqueness check ignores remote address and source-interface.
Aug 10 2026, 6:00 PM · VyOS Rolling
lclements0 added a comment to T9127: Bug: Slow-initializing NIC (Intel ice / empty E823-L SFP cages) loses VyOS interface-naming race → interface reordering, duplicate MAC via hw-id, and total management lockout on reboot.

This is the same boot-time interface-naming race tracked by T3871, here triggered by a slow-initializing NIC (an empty-cage Intel ice E823-L, which delays bring-up with a DDP-package load plus a firmware "module not present" media check) rather than a multi-vendor probe-order difference. Related interface-ordering reports for cross-reference:

Aug 10 2026, 1:42 PM · VyOS Rolling

Jul 25 2026

lclements0 created T9128: protocols nhrp: cannot commit a second tunnel with 'redirect' — duplicate nftables meter name breaks firewall rules.
Jul 25 2026, 5:36 PM · VyOS Rolling
lclements0 created T9127: Bug: Slow-initializing NIC (Intel ice / empty E823-L SFP cages) loses VyOS interface-naming race → interface reordering, duplicate MAC via hw-id, and total management lockout on reboot.
Jul 25 2026, 7:18 AM · VyOS Rolling

Jul 22 2026

lclements0 added a comment to T9122: system flow-accounting: NetFlow export ignores the configured VRF (regression after pmacct → ipt_NETFLOW migration).

A PR has been opened with these changes.

Jul 22 2026, 8:29 PM · VyOS Rolling
lclements0 created T9122: system flow-accounting: NetFlow export ignores the configured VRF (regression after pmacct → ipt_NETFLOW migration).
Jul 22 2026, 7:32 PM · VyOS Rolling

Jun 26 2026

lclements0 added a comment to T9022: service https: server certificate chain is incomplete — intermediate CA certificates are not served.

PR submitted for this: https://github.com/vyos/vyos-1x/pull/5296

Jun 26 2026, 4:30 AM · VyOS Rolling
lclements0 created T9022: service https: server certificate chain is incomplete — intermediate CA certificates are not served.
Jun 26 2026, 4:15 AM · VyOS Rolling

Apr 3 2026

lclements0 added a comment to T8454: service https commit fails with "TCP port 443 is used by another service" when adding VRF with listen-address configured.

Submitted a PR on this.

Apr 3 2026, 11:38 PM · VyOS Rolling, VyOS 1.5 Circinus
lclements0 renamed T8454: service https commit fails with "TCP port 443 is used by another service" when adding VRF with listen-address configured from Updates to Rolling Release breaking 'named' API key ID's? to service https commit fails with "TCP port 443 is used by another service" when adding VRF with listen-address configured.
Apr 3 2026, 8:32 PM · VyOS Rolling, VyOS 1.5 Circinus
lclements0 added a comment to T8454: service https commit fails with "TCP port 443 is used by another service" when adding VRF with listen-address configured.

Looking at this a bit further, this appears to be related to the VRF. Something between earlier versions of 1.5 and now have made VRF'ing for the API either unstable or unusable. I can commit any key name succesfully as long as I don't have a vrf specified, and then if I come back in after the first commit and add the vrf, VyOS accepts it - however the performance of the API then becomes extremely spotty.

Apr 3 2026, 7:32 PM · VyOS Rolling, VyOS 1.5 Circinus
lclements0 created T8454: service https commit fails with "TCP port 443 is used by another service" when adding VRF with listen-address configured.
Apr 3 2026, 4:00 AM · VyOS Rolling, VyOS 1.5 Circinus

Jun 12 2024

lclements0 added a comment to T6470: Deleting a Firewall addrerss-group object that is tied to a NAT rule or other resources doesn't error out, it hangs..

Sure thing!

Jun 12 2024, 6:10 PM

Jun 10 2024

lclements0 created T6470: Deleting a Firewall addrerss-group object that is tied to a NAT rule or other resources doesn't error out, it hangs..
Jun 10 2024, 11:29 PM

Feb 22 2024

lclements0 added a comment to T6039: cloud-init DNS search-domain causes configuration migration/validation error.

I'll get a new build going and give this another test.

Feb 22 2024, 7:11 PM · VyOS 1.4 Sagitta

Feb 13 2024

lclements0 created T6039: cloud-init DNS search-domain causes configuration migration/validation error.
Feb 13 2024, 4:47 AM · VyOS 1.4 Sagitta

Dec 28 2023

lclements0 added a comment to T5852: Reboots fail with eapol WAN interface.

@c-po apologies for the delay, missed this over the holidays.

Dec 28 2023, 8:33 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Dec 23 2023

lclements0 created T5852: Reboots fail with eapol WAN interface.
Dec 23 2023, 1:43 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.5 Circinus, VyOS 1.4 Sagitta