Page MenuHomeVyOS Platform

o.kuchmystyi (Oleksandr Kuchmystyi)
User

Projects

User Details

User Since
Jul 1 2025, 9:10 AM (63 w, 5 d)

Recent Activity

Tue, Sep 15

o.kuchmystyi added a comment to T8952: ipsec: expose per-peer unique setting for site-to-site connections.

PR: https://github.com/vyos/vyos-1x/pull/5475

Tue, Sep 15, 9:40 AM · VyOS Rolling

Fri, Sep 11

o.kuchmystyi changed the status of T8952: ipsec: expose per-peer unique setting for site-to-site connections from Open to In progress.
Fri, Sep 11, 10:29 AM · VyOS Rolling

Jul 28 2026

o.kuchmystyi added a comment to T8391: Bonding interface permission errors with custom ethernet MTU.

PR: https://github.com/accel-ppp/accel-ppp-ng/pull/32/

Jul 28 2026, 10:08 AM · VyOS Rolling

Jul 24 2026

o.kuchmystyi added a comment to T9021: Save bash history during image upgrade.

Yes, I can confirm that it works the same with multiple users in the system:

vyos@vyos1:~$ sudo stat -c '%a %U:%G' .bash_history
600 vyos:users
vyos@vyos1:~$ su - testuser
testuser@vyos1:~$ pwd
/home/testuser
testuser@vyos1:~$ sudo stat -c '%a %U:%G' .bash_history
600 testuser:users
Jul 24 2026, 8:54 AM · VyOS Rolling

Jul 23 2026

o.kuchmystyi added a comment to T9021: Save bash history during image upgrade.

I checked it manually and it looks like the metadata was transferred after upgrade:

vyos@vyos1:~$ sudo stat -c '%a %U:%G' .bash_history
600 vyos:users
vyos@vyos1:~$ sudo stat -c '%a %U:%G' .ssh/known_hosts
644 vyos:users
vyos@vyos1:~$ add system image vyos-999.202607231048-generic-amd64.iso
Validating image compatibility
Validating image checksums
...
Would you like to copy SSH host keys? [Y/n]
Copying SSH host keys
Would you like to save the SSH known hosts (fingerprints) from your current configuration? [Y/n]
Copying SSH known_hosts files
Would you like to copy bash history? [y/N] y
Copying bash history
...
vyos@vyos1:~$ sudo reboot now
...
vyos@vyos1:~$ sudo stat -c '%a %U:%G' .bash_history
600 vyos:users
vyos@vyos1:~$ sudo stat -c '%a %U:%G' .ssh/known_hosts
644 vyos:users
Jul 23 2026, 1:07 PM · VyOS Rolling
o.kuchmystyi closed T9021: Save bash history during image upgrade as Resolved.
Jul 23 2026, 10:38 AM · VyOS Rolling

Jul 22 2026

o.kuchmystyi added a comment to T9021: Save bash history during image upgrade.

PR: https://github.com/vyos/vyos-1x/pull/5344

Jul 22 2026, 2:18 PM · VyOS Rolling

Jul 15 2026

o.kuchmystyi changed the status of T9021: Save bash history during image upgrade from Open to In progress.
Jul 15 2026, 9:58 AM · VyOS Rolling
o.kuchmystyi added a comment to T8868: KDUMP support for VyOS.

Pull requests:

Jul 15 2026, 9:53 AM · VyOS Rolling

Jun 29 2026

o.kuchmystyi closed T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified as Resolved.
Jun 29 2026, 8:42 AM · VyOS 1.5 Circinus (2026.03), VyOS Rolling

Jun 26 2026

o.kuchmystyi added a comment to T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified.

PR that fixes behavior and introduces validation: https://github.com/vyos/vyos-1x/pull/5297

Jun 26 2026, 10:56 AM · VyOS 1.5 Circinus (2026.03), VyOS Rolling

Jun 25 2026

o.kuchmystyi created T9021: Save bash history during image upgrade.
Jun 25 2026, 3:37 PM · VyOS Rolling

Jun 24 2026

o.kuchmystyi added a comment to T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified.

@ssasso you can verify it by deleting 'address-family l2vpn-evpn vni <id>':

Jun 24 2026, 1:58 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
o.kuchmystyi added a comment to T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified.

I have found the root cause of this issue:

  • VyOS generates a vni <id> block inside router bgp <asn> vrf <name> / address-family l2vpn evpn for each VRF:
Jun 24 2026, 1:53 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling

Jun 23 2026

o.kuchmystyi added a comment to T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified.

@ssasso, I would be grateful if you provide the output of the following command:

  • sudo /usr/lib/frr/frr-reload.py --reload --debug --stdout /run/frr/config/vyos.frr.conf
Jun 23 2026, 8:07 AM · VyOS 1.5 Circinus (2026.03), VyOS Rolling

Jun 19 2026

o.kuchmystyi closed T8985: password-reset: unbounded sed ranges in standalone_root_pw_reset spill into the next user's block, corrupting other accounts as Resolved.
Jun 19 2026, 2:02 PM · VyOS Rolling

Jun 15 2026

o.kuchmystyi added a comment to T8985: password-reset: unbounded sed ranges in standalone_root_pw_reset spill into the next user's block, corrupting other accounts.

PR: https://github.com/vyos/vyos-1x/pull/5273

Jun 15 2026, 2:38 PM · VyOS Rolling
o.kuchmystyi changed the status of T8985: password-reset: unbounded sed ranges in standalone_root_pw_reset spill into the next user's block, corrupting other accounts from Open to In progress.
Jun 15 2026, 12:24 PM · VyOS Rolling

Jun 8 2026

o.kuchmystyi changed the status of T8868: KDUMP support for VyOS from Open to In progress.
Jun 8 2026, 8:14 AM · VyOS Rolling
o.kuchmystyi claimed T8868: KDUMP support for VyOS.
Jun 8 2026, 8:10 AM · VyOS Rolling

Jun 5 2026

o.kuchmystyi created T8965: Rewrite `standalone_root_pw_reset` using VyOS Python libraries.
Jun 5 2026, 7:27 AM · VyOS Rolling

Jun 4 2026

o.kuchmystyi added a comment to T8961: Smoketest fails due to missing kernel modules.

The latest rolling build works and it passes test: https://github.com/vyos/vyos-1x/actions/runs/26947164125

Jun 4 2026, 12:54 PM · VyOS Rolling
o.kuchmystyi changed the status of T8961: Smoketest fails due to missing kernel modules from Open to In progress.
Jun 4 2026, 10:33 AM · VyOS Rolling

Jun 3 2026

o.kuchmystyi added a comment to T8954: incorrect strongswan package version in rolling.

PR: https://github.com/vyos/vyos-1x/pull/5251

Jun 3 2026, 12:56 PM · VyOS Rolling
o.kuchmystyi added a comment to T8346: password recovery doesn't work if user plaintext-password set via cloud-init.

PR: https://github.com/vyos/vyos-1x/pull/5253

Jun 3 2026, 12:55 PM · VyOS Rolling
o.kuchmystyi changed the status of T8954: incorrect strongswan package version in rolling from Open to In progress.
Jun 3 2026, 8:01 AM · VyOS Rolling

Jun 1 2026

o.kuchmystyi changed the status of T8346: password recovery doesn't work if user plaintext-password set via cloud-init from Open to In progress.
Jun 1 2026, 8:28 AM · VyOS Rolling

May 29 2026

o.kuchmystyi added a comment to T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified.

@ssasso I have tested your setup using 2026.05.28-0044-rolling and I couldn't reproduce this behavior. Could you check it again?

May 29 2026, 3:29 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
o.kuchmystyi changed the status of T8865: EVPN L3VPN incomplete frr config if more than one vrf is specified from Confirmed to In progress.
May 29 2026, 2:10 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
o.kuchmystyi changed the status of T8391: Bonding interface permission errors with custom ethernet MTU from In progress to On hold.
May 29 2026, 1:38 PM · VyOS Rolling
o.kuchmystyi added a comment to T8391: Bonding interface permission errors with custom ethernet MTU.

I clarified exactly how this problem reproduces itself. When accel-pppd is running adding an interface to a Linux bond fails with PermissionError: [Errno 1] Operation not permitted. If change the order and configure bonding interface and then pppoe-server service it works fine.

May 29 2026, 1:07 PM · VyOS Rolling

May 28 2026

o.kuchmystyi claimed T8391: Bonding interface permission errors with custom ethernet MTU.
May 28 2026, 10:23 AM · VyOS Rolling
o.kuchmystyi closed T8538: SNMP engineBoots counter is not preserved on reboot as Resolved.
May 28 2026, 8:15 AM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.5), VyOS 1.5 Circinus
o.kuchmystyi closed T8912: VyOS command to edit /etc/strongswan.d/charon-logging.conf for IPsec log events as Resolved.
May 28 2026, 8:15 AM · VyOS Rolling

May 27 2026

o.kuchmystyi committed rVYOSONEX81e8f14c5b9b: snmp: T8538: Persist engineBoots counter across reboots.
May 27 2026, 7:42 PM
o.kuchmystyi committed rVYOSONEX3b22850f4fe4: ipsec: T8912: Fix log level not respected in system journal.
May 27 2026, 7:27 PM
o.kuchmystyi added a comment to T8912: VyOS command to edit /etc/strongswan.d/charon-logging.conf for IPsec log events.

PR: https://github.com/vyos/vyos-1x/pull/5222

May 27 2026, 1:57 PM · VyOS Rolling
o.kuchmystyi changed the status of T8912: VyOS command to edit /etc/strongswan.d/charon-logging.conf for IPsec log events from Open to In progress.
May 27 2026, 9:27 AM · VyOS Rolling

May 26 2026

o.kuchmystyi committed rVYOSONEXb6d24956bd4c: ipsec: T7555: Implement `ikev2-reauth` for site-to-site peers.
May 26 2026, 2:47 PM
o.kuchmystyi committed rVYOSONEX464fdf6da24c: openvpn: T6478: Skip restart service when only client config changed.
May 26 2026, 1:13 PM

May 25 2026

o.kuchmystyi claimed T8912: VyOS command to edit /etc/strongswan.d/charon-logging.conf for IPsec log events.
May 25 2026, 3:37 PM · VyOS Rolling
o.kuchmystyi committed rVYOSONEX8f73bfbda0e4: conntrack: T8909: Remove connection id column from output table.
May 25 2026, 3:29 PM
o.kuchmystyi closed T7928: load-balancing haproxy not taking into account listen-address when checking for other services on port as Resolved.
May 25 2026, 3:01 PM · VyOS 1.5 Circinus, VyOS Rolling
o.kuchmystyi added a comment to T8308: Improve conntrack table information - Include counters and new filters.

PR: https://github.com/vyos/vyos-1x/pull/5213
Documentation PR: https://github.com/vyos/vyos-documentation/pull/2055

May 25 2026, 2:29 PM · VyOS Rolling
o.kuchmystyi added a comment to T8909: Improve conntrack table information - Remove 'Id' field.

PR: https://github.com/vyos/vyos-1x/pull/5218

May 25 2026, 2:28 PM · VyOS Rolling
o.kuchmystyi changed the status of T8909: Improve conntrack table information - Remove 'Id' field from Open to In progress.
May 25 2026, 1:49 PM · VyOS Rolling

May 21 2026

o.kuchmystyi created T8909: Improve conntrack table information - Remove 'Id' field.
May 21 2026, 9:50 AM · VyOS Rolling

May 20 2026

o.kuchmystyi changed the status of T8308: Improve conntrack table information - Include counters and new filters from Open to In progress.
May 20 2026, 9:38 AM · VyOS Rolling

May 19 2026

o.kuchmystyi added a comment to T8538: SNMP engineBoots counter is not preserved on reboot.

PR: https://github.com/vyos/vyos-1x/pull/5208

May 19 2026, 9:36 AM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.5), VyOS 1.5 Circinus

May 15 2026

o.kuchmystyi changed the status of T8538: SNMP engineBoots counter is not preserved on reboot from Open to In progress.
May 15 2026, 1:33 PM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.5), VyOS 1.5 Circinus

May 14 2026

o.kuchmystyi added a comment to T7555: IPSec IKEv2 reauthentication is not working.
May 14 2026, 12:15 PM · VyOS Rolling

May 11 2026

o.kuchmystyi renamed T7555: IPSec IKEv2 reauthentication is not working from IPSec IKEv2 reauthentication is not working to IPSec IKEv2 reauthentication is not working.
May 11 2026, 8:11 AM · VyOS Rolling
o.kuchmystyi added a comment to T7928: load-balancing haproxy not taking into account listen-address when checking for other services on port.

PR: https://github.com/vyos/vyos-1x/pull/5186

May 11 2026, 8:05 AM · VyOS 1.5 Circinus, VyOS Rolling

May 4 2026

o.kuchmystyi changed the status of T7928: load-balancing haproxy not taking into account listen-address when checking for other services on port from Open to In progress.
May 4 2026, 8:50 AM · VyOS 1.5 Circinus, VyOS Rolling
o.kuchmystyi closed T7572: Creating firewall zone without interface causes KeyError exception as Resolved.
May 4 2026, 8:45 AM · VyOS 1.5 Circinus (Circinus-Next), VyOS Rolling
o.kuchmystyi added a comment to T7572: Creating firewall zone without interface causes KeyError exception.

This bug was fixed by T7112.

May 4 2026, 8:45 AM · VyOS 1.5 Circinus (Circinus-Next), VyOS Rolling
o.kuchmystyi changed the status of T7572: Creating firewall zone without interface causes KeyError exception from Open to In progress.
May 4 2026, 8:40 AM · VyOS 1.5 Circinus (Circinus-Next), VyOS Rolling

May 1 2026

o.kuchmystyi added a comment to T6478: Allow OpenVPN to reload clients' configs without service restart.

PR: https://github.com/vyos/vyos-1x/pull/5158

May 1 2026, 2:20 PM · VyOS Rolling
o.kuchmystyi closed T8280: Update from 1.3.8 to 1.5: Image-based upgrade OpenVPN migration issue as Resolved.
May 1 2026, 9:24 AM · VyOS Rolling, VyOS 1.5 Circinus (2026.02)
o.kuchmystyi changed the status of T6478: Allow OpenVPN to reload clients' configs without service restart from Open to In progress.
May 1 2026, 9:24 AM · VyOS Rolling

Apr 30 2026

o.kuchmystyi added a comment to T8540: Add CLI command that adds a local FDB entry to prevent anycast MAC from going over overlay.

PR: https://github.com/vyos/vyos-1x/pull/5156
Documentation PR: https://github.com/vyos/vyos-documentation/pull/1865

Apr 30 2026, 3:59 PM · VyOS Rolling
o.kuchmystyi claimed T6478: Allow OpenVPN to reload clients' configs without service restart.
Apr 30 2026, 3:38 PM · VyOS Rolling
o.kuchmystyi committed rVYOSONEX996a872eca87: migration: T8280: Fix auth file read for interfaces on first boot of new image.
Apr 30 2026, 3:06 PM

Apr 28 2026

o.kuchmystyi changed the status of T8540: Add CLI command that adds a local FDB entry to prevent anycast MAC from going over overlay from Open to In progress.
Apr 28 2026, 8:42 AM · VyOS Rolling

Apr 27 2026

o.kuchmystyi added a comment to T8280: Update from 1.3.8 to 1.5: Image-based upgrade OpenVPN migration issue.

PR: https://github.com/vyos/vyos-1x/pull/5152

Apr 27 2026, 2:26 PM · VyOS Rolling, VyOS 1.5 Circinus (2026.02)

Apr 21 2026

o.kuchmystyi changed the status of T8280: Update from 1.3.8 to 1.5: Image-based upgrade OpenVPN migration issue from Open to In progress.
Apr 21 2026, 2:39 PM · VyOS Rolling, VyOS 1.5 Circinus (2026.02)
o.kuchmystyi claimed T8280: Update from 1.3.8 to 1.5: Image-based upgrade OpenVPN migration issue.
Apr 21 2026, 2:32 PM · VyOS Rolling, VyOS 1.5 Circinus (2026.02)
o.kuchmystyi claimed T8540: Add CLI command that adds a local FDB entry to prevent anycast MAC from going over overlay.
Apr 21 2026, 2:32 PM · VyOS Rolling

Apr 14 2026

o.kuchmystyi committed rVYOSONEX54fc0e119962: config-sync: T7784: Add command to diff configuration with secondary node.
Apr 14 2026, 2:25 AM

Apr 10 2026

o.kuchmystyi closed T8282: The migration from 1.3.8 to the rolling release fails if network-group name contains specific characters as Resolved.
Apr 10 2026, 7:30 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus, VyOS Rolling
o.kuchmystyi closed T8281: The migration from 1.3.8 to the rolling release fails if the source or destination address is configured as a wrong network as Resolved.
Apr 10 2026, 7:29 AM · VyOS 1.4 Sagitta, VyOS Rolling, VyOS 1.5 Circinus

Apr 9 2026

o.kuchmystyi added a comment to T8228: DMVPN IPSec does not initiate if the local NBMA address is found none during the bootup.

PR: https://github.com/VyOS-Networks/vyos-1x/pull/2005

Apr 9 2026, 1:19 PM · VyOS 1.4 Sagitta (1.4.5)

Apr 7 2026

o.kuchmystyi committed rVYOSONEX227699e62146: firewall: T8281: Normalize network prefixes in rule configuration.
Apr 7 2026, 12:50 PM
o.kuchmystyi committed rVYOSONEXfc33a96dd239: firewall: T8282: Normalize invalid network-group names during migration.
Apr 7 2026, 12:38 PM

Apr 6 2026

o.kuchmystyi changed the status of T8228: DMVPN IPSec does not initiate if the local NBMA address is found none during the bootup from Open to In progress.
Apr 6 2026, 8:10 AM · VyOS 1.4 Sagitta (1.4.5)

Apr 3 2026

o.kuchmystyi added a comment to T8282: The migration from 1.3.8 to the rolling release fails if network-group name contains specific characters.

PR: https://github.com/vyos/vyos-1x/pull/5107

Apr 3 2026, 1:06 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus, VyOS Rolling
o.kuchmystyi changed the status of T8282: The migration from 1.3.8 to the rolling release fails if network-group name contains specific characters from Open to In progress.
Apr 3 2026, 7:55 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus, VyOS Rolling

Apr 2 2026

o.kuchmystyi added a comment to T8281: The migration from 1.3.8 to the rolling release fails if the source or destination address is configured as a wrong network.

PR: https://github.com/vyos/vyos-1x/pull/5103

Apr 2 2026, 12:45 PM · VyOS 1.4 Sagitta, VyOS Rolling, VyOS 1.5 Circinus

Apr 1 2026

o.kuchmystyi committed rVYOSONEXc036e3735714: firewall: T8275: Resolve migration issue for 'weekdays' option from 1.3.8.
Apr 1 2026, 7:21 PM

Mar 30 2026

o.kuchmystyi closed T8422: VPP: allow-unsupported-nics can break the config load during the system boot as Resolved.
Mar 30 2026, 2:30 PM · VyOS Rolling
o.kuchmystyi closed T8432: VPP: Fix AttributeError for enabling vpp interface as Resolved.
Mar 30 2026, 2:30 PM · VyOS Rolling
o.kuchmystyi added a comment to T8275: The migration of the 'weekend' option in the firewall fails from 1.3.8 to the rolling release.

PR: https://github.com/vyos/vyos-1x/pull/5098

Mar 30 2026, 2:25 PM · VyOS Rolling

Mar 26 2026

o.kuchmystyi committed rVYOSONEX77846124a40a: vpp: T8432: Fix AttributeError for enabling vpp interface.
Mar 26 2026, 11:15 AM
o.kuchmystyi added a comment to T8432: VPP: Fix AttributeError for enabling vpp interface.

PR: https://github.com/vyos/vyos-1x/pull/5088

Mar 26 2026, 8:49 AM · VyOS Rolling
o.kuchmystyi created T8432: VPP: Fix AttributeError for enabling vpp interface.
Mar 26 2026, 8:02 AM · VyOS Rolling

Mar 25 2026

o.kuchmystyi committed rVYOSONEXf8c5643b36bd: firewall: T8277: Resolve migration issue when using `port-group` with protocol….
Mar 25 2026, 5:21 PM
o.kuchmystyi added a comment to T8277: The migration from 1.3.8 to the rolling release fails if port-group and protocol 'all' are specified in one rule.

PR: https://github.com/vyos/vyos-1x/pull/5087

Mar 25 2026, 3:03 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus, VyOS Rolling
o.kuchmystyi added a comment to T8422: VPP: allow-unsupported-nics can break the config load during the system boot.

PR: https://github.com/vyos/vyos-1x/pull/5085

Mar 25 2026, 11:23 AM · VyOS Rolling

Mar 24 2026

o.kuchmystyi added a comment to T7784: Add cross-node configuration diff for config-sync.

Pull requests:

Mar 24 2026, 2:31 PM · VyOS Rolling

Mar 18 2026

o.kuchmystyi committed rVYOSONEX3722268b0859: vpp: T8315: Add support for configuring unsupported NICs and update compatible….
Mar 18 2026, 3:12 PM

Mar 16 2026

o.kuchmystyi changed the status of T7784: Add cross-node configuration diff for config-sync from Open to In progress.
Mar 16 2026, 9:05 AM · VyOS Rolling

Mar 13 2026

o.kuchmystyi closed T8215: Update tech-support archive and output content as Resolved.
Mar 13 2026, 12:01 PM · VyOS 1.5 Circinus (2026.03)
o.kuchmystyi closed T8276: VPP fails if PPPoE server is set to listen on non-existent interfaces, a subtask of T7070: VPP related bugs the root task, as Resolved.
Mar 13 2026, 12:00 PM · VyOS Rolling
o.kuchmystyi closed T8276: VPP fails if PPPoE server is set to listen on non-existent interfaces as Resolved.
Mar 13 2026, 12:00 PM · VyOS Rolling

Mar 12 2026

o.kuchmystyi committed rVYOSONEXf05f2836f850: vpp: T8276: Add verification for virtual interfaces in PPPoE server….
Mar 12 2026, 3:52 PM

Mar 10 2026

o.kuchmystyi added a comment to T8315: VPP: limit VPP to validated NICs unless allow-unsupported-nics is set.

Pull requests:

Mar 10 2026, 2:46 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling
o.kuchmystyi changed the status of T8315: VPP: limit VPP to validated NICs unless allow-unsupported-nics is set, a subtask of T7221: VPP related features the root task, from Open to In progress.
Mar 10 2026, 2:45 PM · VyOS Rolling
o.kuchmystyi changed the status of T8315: VPP: limit VPP to validated NICs unless allow-unsupported-nics is set from Open to In progress.
Mar 10 2026, 2:45 PM · VyOS 1.5 Circinus (2026.03), VyOS Rolling

Mar 5 2026

o.kuchmystyi committed rVYOSONEX1359f690af84: tech-support: T8215: Extend tech-support archive and report generation.
Mar 5 2026, 3:21 PM

Mar 2 2026

o.kuchmystyi reassigned T8333: VPP: Migrate xconnect interface to 'interfaces vpp xconnect' from o.kuchmystyi to natali-rs1985.
Mar 2 2026, 7:17 AM · VyOS Rolling