Page MenuHomeVyOS Platform

yun (Yun Zheng Hu)
User

Projects

User does not belong to any projects.

User Details

User Since
May 2 2016, 7:40 PM (446 w, 5 d)

Recent Activity

Jan 8 2024

yun added a project to T3681: The VMware Tools resume script did not run successfully in this virtual machine.: VyOS 1.4 Sagitta.
Jan 8 2024, 9:17 AM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project
yun reopened T3681: The VMware Tools resume script did not run successfully in this virtual machine. as "Open".

Hi, this bug is introduced again in VyOS 1.4 (tested VyOS-1.4.0-rc1). Due to the following commit: https://github.com/vyos/vyos-1x/commit/64c9fdef02323309e97b2bb682604ada52d651e8

Jan 8 2024, 9:10 AM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project

Jan 3 2024

yun created T5895: Inconsistent text output with multiple commit-archive locations .
Jan 3 2024, 10:37 PM · VyOS Rolling, Restricted Project

Sep 30 2023

yun added a comment to T2405: commit archive to GIT.

Is there anything I can do to improve this PR? I also noticed that there is no more example commit-archive output since vyos 1.4:

Sep 30 2023, 9:10 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Sep 14 2023

yun added a comment to T5455: SSH fingerprints aren't migrated to the new image on upgrade.

Would also be nice to include the global known_hosts file in /etc/ssh/ssh_known_hosts.

Sep 14 2023, 10:57 AM · VyOS Rolling
yun added a comment to T5541: Zone-Based Firewalling in VyOS Sagitta 1.4.

I would also like to know if zone based firewall still work or support is removed?

Sep 14 2023, 10:56 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Sep 12 2023

yun added a comment to T2405: commit archive to GIT.

Note that command = command.lstrip() for def cmd in python/vyos/utils/process.py was reverted yesterday.

Causes funny problems during smoketests.

Sep 12 2023, 3:34 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
yun added a comment to T2405: commit archive to GIT.

I created a PR for Git support here: https://github.com/vyos/vyos-1x/pull/2241

Sep 12 2023, 1:22 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Aug 21 2021

yun closed T3682: Remove running dhclient from ether-resume.py as Resolved.

Confirmed fixed, static address is correctly assigned after resume. Tested with vyos-1.3-beta-202108192027-amd64.iso

Aug 21 2021, 2:18 PM · VyOS 1.3 Equuleus (1.3.0)
yun closed T3681: The VMware Tools resume script did not run successfully in this virtual machine. as Resolved.

Confirmed fixed, tested with vyos-1.3-beta-202108192027-amd64.iso

Aug 21 2021, 2:15 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project

Jul 24 2021

yun committed rVYOSONEX19696edc2097: openvpn: T65: Fix auth-user-pass authentication only.
Jul 24 2021, 10:15 PM
yun committed rVYOSONEX9ee239cd4857: vyos-1x-vmware: T3681: don't bytecompile ether-resume.py.
Jul 24 2021, 9:30 AM
yun committed rVYOSONEX96acb4f233ca: vyos-1x-vmware: T3682: remove dhclient from ether-resume.py.
Jul 24 2021, 9:30 AM

Jul 21 2021

yun added a comment to T3681: The VMware Tools resume script did not run successfully in this virtual machine..

Want to test latest rolling iso, but equuleus seems to be stuck at vyos-1.3-beta-202107121144-amd64.iso which doesn't have this fix yet.

Jul 21 2021, 7:40 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project

Jul 17 2021

yun added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

I have made a second attempt of the PR: https://github.com/vyos/vyos-1x/pull/928
The original tls configuration checks are back, but it's only checked if no alternative authentication methods are configured.

Jul 17 2021, 11:05 PM · Invalid
yun added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

As I suspected, it check if the ConfigSession properly errors if "tls cert-file" and "tls key-file" are NOT defined (for server):

Jul 17 2021, 9:19 PM · Invalid
yun added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

Hmm. Can you point me to the smoketest that failed? I will investigate. Maybe it actually tests if the strict check are in place, because now cert-file and key-file are optional, but it should keep working if you configure it.

Jul 17 2021, 5:56 PM · Invalid

Jul 14 2021

yun added a comment to T3682: Remove running dhclient from ether-resume.py.

I submitted a PR for review: https://github.com/vyos/vyos-1x/pull/923

Jul 14 2021, 11:35 PM · VyOS 1.3 Equuleus (1.3.0)
yun added a comment to T3682: Remove running dhclient from ether-resume.py.

It's funny, I remember that dhcp was already removed from ether-resume.py. I checked the git history, and it was.
Related issue and discussion about netplug vs ether-resume dhclient (buried deep in the beginning) https://phabricator.vyos.net/T1028

Jul 14 2021, 10:59 PM · VyOS 1.3 Equuleus (1.3.0)
yun committed rVYOSONEX15f418480db9: vyos-1x-vmware: T3681: don't bytecompile ether-resume.py.
Jul 14 2021, 7:28 PM
yun added a comment to T3681: The VMware Tools resume script did not run successfully in this virtual machine..

PR: https://github.com/vyos/vyos-1x/pull/920

Jul 14 2021, 4:08 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project
yun created T3682: Remove running dhclient from ether-resume.py.
Jul 14 2021, 4:02 PM · VyOS 1.3 Equuleus (1.3.0)
yun triaged T3681: The VMware Tools resume script did not run successfully in this virtual machine. as Normal priority.
Jul 14 2021, 3:21 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project

Jul 13 2021

yun committed rVYOSONEXc414479fdf1d: openvpn: T56: remove strict checks for tls cert-file and key-file.
Jul 13 2021, 6:31 AM

Jul 12 2021

yun added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

PR submitted: https://github.com/vyos/vyos-1x/pull/917

Jul 12 2021, 10:50 PM · Invalid
yun added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

The workaround stopped working after the OpenVPN configuration checks moved from Perl to Python. As this still applies to VyOS 1.3 this issue should be reopened, I can also create a new issue if that is preferred.

Jul 12 2021, 3:20 PM · Invalid

Dec 31 2020

yun added a comment to T2195: Support for encrypted DNS: dnscrypt, DoH, DoT, anonymized DNS.

I used dnsdist and dnscrypt-proxy before but currently I settled with:

Dec 31 2020, 10:13 AM

Mar 9 2020

yun reopened T2065: VyOS 1.3 Don't set daemon in openvpn-{intf}.conf file as "Open".

Thanks for the quick fix c-po, I noticed this also needs to be fixed in /usr/libexec/vyos/op_mode/reset_openvpn.py in case someone runs for example:

Mar 9 2020, 10:43 AM · VyOS 1.3 Equuleus (1.3.0)
yun created T2113: OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping.
Mar 9 2020, 10:23 AM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, VyOS 1.3 Equuleus (1.3.7), openvpn

Feb 23 2020

yun edited a custom field on T2065: VyOS 1.3 Don't set daemon in openvpn-{intf}.conf file.
Feb 23 2020, 10:34 AM · VyOS 1.3 Equuleus (1.3.0)
yun created T2065: VyOS 1.3 Don't set daemon in openvpn-{intf}.conf file.
Feb 23 2020, 10:33 AM · VyOS 1.3 Equuleus (1.3.0)
yun updated the task description for T2064: OpenVPN with dev-type tap fails.
Feb 23 2020, 10:19 AM · VyOS 1.3 Equuleus (1.3.0)
yun created T2064: OpenVPN with dev-type tap fails.
Feb 23 2020, 10:19 AM · VyOS 1.3 Equuleus (1.3.0)

Aug 10 2019

yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

Hi Donny,

Aug 10 2019, 5:23 PM

May 29 2019

yun added a comment to T1360: DNS nameservers from dhcp not set.

Not much response, but multiple users I recommend VyOS to are having this issue. So i would say it's a bug and not intended behaviour.

May 29 2019, 12:26 PM · VyOS 1.2 Crux (VyOS 1.2.3)

May 17 2019

yun created T1383: Cannot use quotes for openvpn-option --route-up.
May 17 2019, 3:23 PM · VyOS 1.3 Equuleus (1.3.0)
yun added a comment to T1246: VyOS 1.2.0 "openvpn-options" configuration does not allow quotes in values.

Sorry comment on a resolved ticket, but i'm having the issue that is described in this issue. And i'm not sure how to fix it.

May 17 2019, 2:20 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

May 4 2019

yun added a comment to T1360: DNS nameservers from dhcp not set.

So is it considered a bug or works as intented?

May 4 2019, 10:47 AM · VyOS 1.2 Crux (VyOS 1.2.3)

May 2 2019

yun added a comment to T1360: DNS nameservers from dhcp not set.

If that is the only point, race conditions can occur. I assume this is only called when comitting or loading the config.

May 2 2019, 6:18 PM · VyOS 1.2 Crux (VyOS 1.2.3)
yun added a comment to T1360: DNS nameservers from dhcp not set.

When is host_name.py called? Maybe my dhcp server just responds slow and host_name.py is called before dhcp server responds? Is that possible?

May 2 2019, 5:33 AM · VyOS 1.2 Crux (VyOS 1.2.3)

May 1 2019

yun created T1360: DNS nameservers from dhcp not set.
May 1 2019, 8:53 PM · VyOS 1.2 Crux (VyOS 1.2.3)

Apr 25 2019

yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

Yes, it's pretty vague bug, and seems it's more related on how the VM was initially created if it will work or not.

Apr 25 2019, 10:42 PM
yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

hi @hagbard, I did some extensive testing. Actually I was already testing with "1.2.0-rolling+201904240337". So here are my findings.

Apr 25 2019, 8:24 PM

Apr 24 2019

yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

Because you mentioned networkd earlier, I looked into this immediately and found the following differences:

Apr 24 2019, 9:13 PM
yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

Thanks, I tested it, my findings below:

Apr 24 2019, 9:04 PM
yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

When I read it back, I can understand the confusion. Sorry, will try to be more clear next time.

Apr 24 2019, 8:31 PM
yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

@hagbard But we were talking about my patch, and that it didn't work for you in latest rolling... So i tested my patch in the latest rolling (and noted the date) that it worked. Should I have made it more clear that I was testing my patch?

Apr 24 2019, 8:21 PM
yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

Hi hagbard, I don't understand why you close the PR so early without me testing the latest iso. Please when you refer to "latest" iso, to also note the rolling date. This makes it easier for everyone who tries to contribute i think.

Apr 24 2019, 8:03 PM
yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

Thanks for the detailed history, that makes things more clear.
So for me the latest rolling worked, do you know what part from networkd is interfering with dhcp for you? Did you see if netplug called dhcp correctly after resume?

Apr 24 2019, 7:10 PM
yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

I wonder what changed then, will also test with latest rolling

Apr 24 2019, 7:29 AM

Apr 23 2019

yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

PR: https://github.com/vyos/vyos-vmwaretools-scripts/pull/1/commits/92f5d450df4de09626af232bc5ced067a6493d6b

Apr 23 2019, 9:51 PM
yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

Ok final attempt and trivial fix.
It seems that changing run-parts to /bin/run-parts was not needed. So netplug works fine as it is.

Apr 23 2019, 8:02 PM
yun added a comment to T1250: FRR not setting default gateway from DHCP.

Hi all, I can confirm that with vyos-1.2.0-rolling+201904160337-amd64, this issue is fixed.
If I boot the older 2019-02-16 version, the bug can be reproduced easily. So it must be an issue in FRR that is introduced in 7.1 as the newer livecd uses FRR 7.0:

Apr 23 2019, 7:47 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
yun added a comment to T1250: FRR not setting default gateway from DHCP.

Is this a FRR bug or something else? Because I don't use any BGP stuff I just added the ip -4 route add command to my VM, so it's always executed. However, as @runar mentioned, it will bypass FRR. But executing the command via FRR didn't work, so the issue must be in FRR?

Apr 23 2019, 7:02 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Apr 22 2019

yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

@hagbard Can you please test the steps I mentioned mentioned here, to see if you can reproduce: https://phabricator.vyos.net/T1028#35591
Without any modifications to any scripts, it will bring the interface into permanent down state after suspend and resume.

Apr 22 2019, 4:15 PM

Apr 21 2019

yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

Attempt two of the fix, so disregard everything in above attempt.

Apr 21 2019, 11:19 PM
yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

I have a working fix, which is comprised of earlier suggested fixes I mentioned in T1028 and T894:

Apr 21 2019, 8:30 PM
yun reopened T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses as "Needs testing".

I want to set this ticket back to "Needs testing" or even "Open", I have downloaded and tested vyos-rolling-2019-04-16 and it seems it is not properly fixed.

Apr 21 2019, 6:41 PM

Apr 16 2019

yun added a comment to T1250: FRR not setting default gateway from DHCP.

@yun What is the exact frr command you tried?
the command you tried manually.

Apr 16 2019, 7:48 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
yun added a comment to T1250: FRR not setting default gateway from DHCP.

I would to see this committed. But do we also know what causes the issue? Is it with FRR or was this script just missing the ip command to set the default gw?

Apr 16 2019, 11:27 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Feb 17 2019

yun updated the task description for T1250: FRR not setting default gateway from DHCP.
Feb 17 2019, 1:40 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
yun created T1250: FRR not setting default gateway from DHCP.
Feb 17 2019, 1:39 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Feb 11 2019

yun added a comment to T1001: show config commands - breaks when using backslashes in values.

Just to add extra info to this ticket, I had a openvpn-option that i wanted to add but it contained a single quote. I was not able to do this (in version 1.8.x this worked).

Feb 11 2019, 12:32 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc10)
yun added a comment to T894: DHCP not renewed after switching network.

I was not able to test sooner. But i confirmed it works properly with rolling release vyos-1.2.0-rolling+201902060337-amd64.

Feb 11 2019, 12:20 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-GA)

Dec 7 2018

yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

Will you then use the netplugd way mentioned in T894 or also issue a dhcp renew in the resume vmware script? I prefer the netplug way as this also fixes issues when you switch network. I can imagine we want to avoid double renewing.

Dec 7 2018, 6:25 PM
yun added a comment to T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.

@hagbard I tested the script, it works perfect for interfaces with static addresses. However interfaces with "dhcp" remain without an ip address after resuming. This is caused by the following issue I reported: T894

Dec 7 2018, 2:41 PM

Nov 26 2018

yun added a comment to T1001: show config commands - breaks when using backslashes in values.
In T1001#26863, @arne wrote:

Is there any need to have backslashes in descriptions? Or, more generally: Is there any need to have non-ASCII characters in descriptions?

I am asking because we could either handle this in the setting part of the code (which could clear the backslashes and all other kinds of potentially unwanted special characters) or we handle this in the config printing code.

Nov 26 2018, 2:53 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc10)

Nov 20 2018

yun created T1028: Suspending and resuming VyOS in VMware will result in loss of static ip addresses.
Nov 20 2018, 3:36 PM

Nov 13 2018

yun added a comment to T894: DHCP not renewed after switching network.

Actually the old netplug script doesn't fully work, i had to use the original netplug script that comes with the package but I added the run-parts lines like this:

Nov 13 2018, 10:13 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-GA)
yun updated the task description for T1001: show config commands - breaks when using backslashes in values.
Nov 13 2018, 1:03 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc10)
yun created T1001: show config commands - breaks when using backslashes in values.
Nov 13 2018, 1:03 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc10)
yun added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

Hi, I requested this feature, but due to the addition of username/password it can work as a good workaround.

Nov 13 2018, 12:54 AM · Invalid
yun added a comment to T894: DHCP not renewed after switching network.

I did some of my own digging, and it seems because Vyos 1.2.x is missing the netplugd daemon.

Nov 13 2018, 12:51 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-GA)

Oct 13 2018

yun created T894: DHCP not renewed after switching network.
Oct 13 2018, 12:17 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-GA)
yun added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

Now that we can add user-pass authenticaton so the configuration is accepted without cert and keyfile we can fool the configuration to make it accept and work with pkcs11 settings:

Oct 13 2018, 12:05 PM · Invalid

Mar 29 2018

yun added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

Is there any progress on this merge?

Mar 29 2018, 8:30 PM · Invalid

Sep 2 2016

yun added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

It would be nice if this was available in the next release. Happy to receive any feedback if I need to improve the patch.

Sep 2 2016, 2:47 PM · Invalid

May 11 2016

yun added a comment to T65: auth-user-pass authentication in OpenVPN.

Maybe make the tls cert-file and key-file complete optional, this way other advanced options can be used for openvpn by using "openvpn-option", such as pkcs11 support mentioned in T56

May 11 2016, 7:46 PM

May 10 2016

yun added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

I already have a working patch for my own setup, I attached it:

May 10 2016, 8:25 AM · Invalid

May 2 2016

yun created T56: Add pkcs11 support to OpenVPN interfaces.
May 2 2016, 7:48 PM · Invalid