Thu, Sep 17
Just some new learnings
Mon, Sep 7
Sun, Aug 30
Fri, Aug 28
Thu, Aug 27
Aug 15 2026
I stumbled across the same issue and as far as i could debug it, its due to usb/hid devices being outosuspended by the current vyos kernel/config.
Aug 14 2026
Aug 11 2026
Aug 10 2026
Hi @hybridops could you add a PR and maintainers will take a look on proposed fix.
Thanks
Aug 8 2026
I checked the current public vyos-cloud-init branches and the issue still appears to be present: cloudinit/stages.py calls util.del_file(self.paths.instance_link), while util.del_file() uses os.unlink(), so a stale real directory at that path still raises IsADirectoryError.
Jul 28 2026
Jul 24 2026
Jul 16 2026
For clarification.
I have created a lab
Underlay: OSPF. The main function is to distribute Loopback IPs.
Overlay:
Control Plane: MP-iBGP. The main function is to distribute EVPN routes.
Data Plane: VXLAN
RR is a router reflector.
VTEP-1A and VTEP-1B contain the same ES via interface eth1
HOST-1 and HOST-2 are in the same network. 192.168.100.10/24 and 192.168.100.20/24 respectivly.
VTEP-1B is a DF router of these ES
Jul 1 2026
Jun 18 2026
Jun 17 2026
Jun 5 2026
Jun 4 2026
Jun 1 2026
Added repo to build VyOS custom shim-signed Debian package from repo https://github.com/vyos/shim-signed/ with our own signed SHIM.
May 29 2026
May 28 2026
@Viacheslav I have double checked and the issue is happening in 1.5
May 25 2026
May 21 2026
May 19 2026
May 18 2026
May 15 2026
May 12 2026
May 11 2026
May 8 2026
Good to know 1.3.8 is not affected, so having been denied access to later versions saved me from this vulnerability - thanks @syncer !
BTW, please also check out Dirty Frag while you're at it, no CVE yet. Mitigation (disallow loading of modules: esp4, esp6, rxrpc) breaks ipsec.
May 4 2026
The OOT drivers included in 1.5 causes Kernel Panics causing the router to crash.
Removing the NIC cards (Intel ixgbe) form the system resolves the problem.
May 3 2026
That's as I thought so that's fine.
May 2 2026
@SteveP no. This would require us to give you HSM access for signing modules, which is not possible.
