OpenVPN now runs as user openvpn with the above helper script. Please also test this new implementation, it will be in the rolling ISO which is building right now.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Sep 6 2019
Sep 6 2019
c-po changed the status of T1637: Rewrite ethernet interface in new style XML syntax from Open to In progress.
c-po changed the status of T1637: Rewrite ethernet interface in new style XML syntax, a subtask of T1579: Rewrite all interface types in new XML/Python style, from Open to In progress.
c-po changed the status of T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes from Open to Needs testing.
c-po changed the status of T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes, a subtask of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python, from Open to Needs testing.
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
Persistent tunnel is a configuration option set interfaces openvpn vtun10 persistent-tunnel
c-po closed T1636: Rewrite VXLAN in new style XML/Python, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
Sep 5 2019
Sep 5 2019
Huh? Which perl script?
As the bonding interface has been completely rewritten this should not be an issue as I do not touch underlaying interface MAC addresses
Why not specify the keys or the key file location via CLI like other VPN implementations do it?
c-po changed the status of T1636: Rewrite VXLAN in new style XML/Python, a subtask of T1579: Rewrite all interface types in new XML/Python style, from Open to In progress.
Sep 4 2019
Sep 4 2019
c-po changed the status of T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id from Unknown Status to Resolved.
c-po moved T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id from VyOS 1.2.4 to VyOS 1.2.3 on the VyOS 1.2 Crux board.
c-po moved T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po committed rVYOSONEXc1d834cf38d6: T1439: remove beginning and end anchors, they are implied with re.fullmatch (authored by jjakob).
c-po committed rVYOSONEX7072bb8eb694: T1439: remove quotes around dhcp6.client-id (authored by jjakob).
You could use quoting like mentioned in T1129.
Rewrite was tested using:
c-po closed T1557: Create generic abstraction for configuring interfaces e.g. IP address as Resolved.
c-po closed T1557: Create generic abstraction for configuring interfaces e.g. IP address, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
c-po closed T1631: Multiple push-route options cause error generating openvpn configuration as Resolved.
c-po closed T1614: Rewrite bonding interface in new style XML syntax, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
I like the openvpn:openvpn ownership idea
The documentation is also correct. Please not that there are two git branches for the documentation, current and equuleus. You send me the VyOS 1.2.2 crux link. I gave you the upcoming VyOS 1.2 equuleus link.
c-po added a comment to T1631: Multiple push-route options cause error generating openvpn configuration.
This is actually a duplicate of T1617.
The bahavior has changed, see https://vyos.readthedocs.io/en/equuleus/interfaces/bridging.html and T1556
c-po added a comment to T1631: Multiple push-route options cause error generating openvpn configuration.
1.3 rolling is not recommended for users - its pre-alpha.
c-po added a comment to T1631: Multiple push-route options cause error generating openvpn configuration.
@jdevincentis is this a custom build? Using VyOS 1.2-rolling-201909040337 I can not reproduce the issue with:
c-po changed the status of T1631: Multiple push-route options cause error generating openvpn configuration from Open to In progress.
Sep 3 2019
Sep 3 2019
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
The config generator would need to be adopted https://github.com/vyos/vyos-1x/blob/current/src/conf_mode/interface-openvpn.py and the wrapper script added. I have no time before tomorrow, sorry
Please test with latest rolling and not a custom build.
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
When the site looses connection and thus a SIGUSR21 is sent to OpenVPN to restart internally the priviledges have dropped and yes, /sbin/ip can't be called again.
c-po moved T1629: IP addresses configured on vif-s interfaces are not added to the system from Need Triage to VyOS 1.2.4 on the VyOS 1.2 Crux board.
c-po updated the task description for T1626: BGP exchanges prefixes without specified address-family.
Sep 2 2019
Sep 2 2019
Should be fixed in next rolling release by: https://github.com/vyos/vyatta-cfg/commit/710728ee8eb6def82f9a142468960f6985dcf4e8
Sep 1 2019
Sep 1 2019