--allow-downgrades may lead some other unexpected behavior in the future with other changes.
VyOS rebuilds OpenSSL with other option differs to Debian one, I think that it makes sense to append version string to determine debian ver or vyos ver.
And once upgrade to trixie, we could remove openssl build and install openssl with openssl-provider-fips.

Record some discusion in slack

Test method:

vyos-2 in GCE
10.0.0.0/24 is GKE cluster subnet, I connect vyos-2 to GKE FRR for BGP EVPN

vyos-1 in GCE
10.0.0.0/24 is GKE cluster subnet, I connect vyos-1 to GKE FRR for BGP EVPN

vyos-bq-2
wg0 connect to vyos-1
wg1 connect to vyos-2

vyos-bq-1
wg0 connect to vyos-1 in GCE
wg1 connect to vyos-2 in GCE

vi /opt/vyatta/share/vyatta-op/templates/update/container/image/node.tag/node.def

Replace the run command with

I didn't get this issue, so I created another ticket.
I fixed it.

https://github.com/vyos/vyos-1x/pull/4603

Fix: https://vyos.dev/T7535

Fix: https://github.com/vyos/vyos-build/pull/973

Need this fix to build libvyosconfig again.
https://github.com/vyos/libvyosconfig/pull/41

Directly use T7374 for tracking this.

https://github.com/vyos/vyos-build/pull/954

It seems this is FRR issue.
after I removed update-source 10.0.0.254 in vyos, everything works again.

the PR
https://github.com/vyos/vyos-1x/pull/4186

@yzguy I'm not sure about this.
But as I know, Linux Desktop will use NetworkManager with ModemManager to bring up a wwan interface.
And network-manager will check the bearer to setup the IP address.

I think this issue is duplicated to T6401.
Please close it thank you
https://vyos.dev/T6401

This might fix this problem
https://github.com/vyos/vyos-1x/pull/2752

@c-po It seems you only implement the "type bridge_slave neigh_suppress on"
And "type bridge_slave learning on" is not implemented in this PR.
Will you add this also?
Thank you

vni100 should be the bridge slave here.
So those options could be in the same level of "allowed-vlan" and "native-vlan"

@Apachez thanks to you.
Let me check it.

@sdev I saw c-po revert the merge.
and I didn't expect that it will cost lots of time also.
It's better to revert it.
Currently, I will maintain kernel configs in my own branch.

It should be fixed via https://github.com/vyos/vyos-build/pull/382

Raspberry pi 4 wifi driver requires some missing files.

PR: https://github.com/vyos/vyos-build/pull/377

I will suggest to move all arm64 kernel flavour to "arm64-vyos" as "amd64-vyos" in x86_64.
It will be better not to have "LOCALVERSION=-v8" in kernel configs.

PR: https://github.com/vyos/vyos-1x/pull/1444

@zsdc
please take a look on this
it might be some similar issue in this patch?
https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next.git/commit/?id=0fb4d21956f4a9af225594a46857ccf29bd747bc

something like this in 1.4 nft
https://www.spinics.net/lists/netfilter/msg58240.html

It seems 1.4-rolling has this bug also
i setup vrf wg with all wireguard clients (with private ip)
and setup vrf leak to vrf default
NAT didn't work on it.
it will send un-NAT packet to eth0

PR: https://github.com/vyos/vyos-1x/pull/888

Related https://github.com/vyos/vyos-1x/pull/241

I tested vyos-1.3-rolling-202002200217-amd64.iso
It works now.
Thanks for help!

I have tested vyos 1.3-rolling-202002130217 (FRR version 7.4-dev-20200118-04-g9e1ecdbaa-0), it failed.
I tested ubuntu with frr master brnach(60092db3fdead2a72e9368aaaa1e789c741c7ce8) and dev/7.3 (df80bf16869314ec9455fb7e4db63dcf1fdba2c2). It worked.
I tested ubuntu with frr 9e1ecdbaa, It failed.