PR for op-mode command that fits new cli: https://github.com/vyos/vyos-1x/pull/2408
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Oct 26 2023
Oct 26 2023
a.apostoliuk changed the status of T5688: Create the same view of pool configuration for all accel-ppp services from Open to In progress.
Viacheslav moved T5683: reverse-proxy pki filenames mismatch from Open to Finished on the VyOS 1.4 Sagitta board.
Oct 25 2023
Oct 25 2023
Apachez added a comment to T5686: Loss of connectivity on dhcp enabled ethernet interfaces after abrupt link restarts.
To verify that it isnt something in your 5G modem that triggers this behaviour try to put a L2-switch in between and then simulate a link failure between VyOS and this L2-switch and see how things behaves?
fernando changed the status of T5357: Policy: BGP communities fail to apply when loaded from config file from Open to Needs testing.
Viacheslav changed the status of T5683: reverse-proxy pki filenames mismatch from Open to In progress.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/2402
c-po moved T5670: bridge: missing member interface validator from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.5) board.
c-po moved T5670: bridge: missing member interface validator from Open to Finished on the VyOS 1.4 Sagitta board.
This is causing smoketests on the nightly builds to fail
yzguy added a comment to T5676: NAT66 source rule with negation source/destination prefix causes TypeError.
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/conf_mode/nat66.py", line 127, in <module>
DEBUG - generate(c)
DEBUG - File "/usr/libexec/vyos/conf_mode/nat66.py", line 101, in generate
DEBUG - render(nftables_nat66_config, 'firewall/nftables-nat66.j2', nat, permission=0o755)
DEBUG - File "/usr/lib/python3/dist-packages/vyos/template.py", line 142, in render
DEBUG - rendered = render_to_string(template, content, formater, location)
DEBUG - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
DEBUG - File "/usr/lib/python3/dist-packages/vyos/template.py", line 111, in render_to_string
DEBUG - rendered = template.render(content)
DEBUG - ^^^^^^^^^^^^^^^^^^^^^^^^
DEBUG - File "/usr/lib/python3/dist-packages/jinja2/environment.py", line 1301, in render
DEBUG - self.environment.handle_exception()
DEBUG - File "/usr/lib/python3/dist-packages/jinja2/environment.py", line 936, in handle_exception
DEBUG - raise rewrite_traceback_stack(source=source)
DEBUG - File "/usr/share/vyos/templates/firewall/nftables-nat66.j2", line 28, in top-level template code
DEBUG - {{ config | nat_rule(rule, 'source', ipv6=True) }}
DEBUG - ^^^^^^^^^^^^^^^^^^^^^^^^^
DEBUG - File "/usr/lib/python3/dist-packages/vyos/template.py", line 660, in nat_rule
DEBUG - return parse_nat_rule(rule_conf, rule_id, nat_type, ipv6)
DEBUG - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
DEBUG - File "/usr/lib/python3/dist-packages/vyos/nat.py", line 58, in parse_nat_rule
DEBUG - oiface = rule_conf['outbound_interface']['interface_group']
DEBUG - ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^
DEBUG - TypeError: string indices must be integers, not 'str'Apachez added a comment to T5676: NAT66 source rule with negation source/destination prefix causes TypeError.
Plenty of nat66 related errors from last nightly build:
Oct 24 2023
Oct 24 2023
Viacheslav added a project to T5682: create more robust access controls for sshd and snmpd: VyOS 1.5 Circinus.
n.fort changed the status of T5681: Interface match - Simplified and unified cli from Open to In progress.
Using VyOS 1.5-rolling-202310220123.
Apachez added a comment to T5675: 'show configuration all' is no different from 'show configuration'.
I think the commit made by yzguy is referencing the wrong task-id.
n.fort changed the status of T5680: Allow selecting mac-groups in bridge firewall from Open to Confirmed.
Viacheslav added a project to T3722: op-mode IPSec show vpn ike sa always shows L-TIME 0: VyOS 1.5 Circinus.
Oct 23 2023
Oct 23 2023
For RQ for Sagitta: https://github.com/vyos/vyos-1x/pull/2399
n.fort changed the status of T5564: Both show firewall group and show firewall summary fails from Needs testing to In progress.
1.5 should not have such issues.
1.4: op-mode should be working as expected. Backport for https://github.com/vyos/vyos-1x/pull/2344 failed. I'll submit PR for 1.4 for such feature.
Viacheslav moved T5299: QoS shaper ceiling does not work from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav changed the status of T5677: show lldp neighbors generates TypeError when neighbor has no `descr` from Open to Needs testing.
yzguy updated the task description for T5677: show lldp neighbors generates TypeError when neighbor has no `descr`.
yzguy renamed T5676: NAT66 source rule with negation source/destination prefix causes TypeError from NAT66 rule with negation source/destination prefix errors to NAT66 source rule with negation source/destination prefix causes TypeError.
yzguy updated the task description for T5676: NAT66 source rule with negation source/destination prefix causes TypeError.
zarianu updated the task description for T5675: 'show configuration all' is no different from 'show configuration'.
Oct 22 2023
Oct 22 2023
c-po moved T5671: vxlan: change port to IANA assigned default port from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav renamed T5646: QoS policy limiter broken if class without match from QoS policy limiter broken to QoS policy limiter broken if class without match.
I think we can do something similar to it : https://alestic.com/2018/12/aws-ssm-parameter-store-git-key/
various tracking (interface etc)
Oct 21 2023
Oct 21 2023
Could you try it locally and see what happens?
Viacheslav changed the status of T5541: Zone-Based Firewalling in VyOS Sagitta 1.4 from In progress to Needs testing.
dmbaturin closed T5617: Add an option to exclude single values to the numeric validator, a subtask of T5616: Firewall mark - Add capabilities for matching firewall mark, as Resolved.
dmbaturin closed T5617: Add an option to exclude single values to the numeric validator as Resolved.
- biosdevname is called by scripts in the initrd, so we can't remove it just yet.
- it's not completely abandoned and had quite a few releases since the point when Vyatta forked it.
- I sent a PR to allow biosdevname to run in VMs (that's the only thing that vyatta-biosdevname has and that's used in scripts): https://github.com/dell/biosdevname/pull/12
tjjh89017 added a comment to T5668: Disable VXLAN bridge learning and enable neigh_suppress when using EVPN.
vni100 should be the bridge slave here.
So those options could be in the same level of "allowed-vlan" and "native-vlan"
Oct 20 2023
Oct 20 2023
PR for Saggita: https://github.com/vyos/vyos-1x/pull/2388
c-po moved T5671: vxlan: change port to IANA assigned default port from Open to Finished on the VyOS 1.5 Circinus board.
PR for 1.5 https://github.com/vyos/vyos-1x/pull/2386
c-po added a comment to T5668: Disable VXLAN bridge learning and enable neigh_suppress when using EVPN.
Is vni100 the vxlan interface or the bridge interface?
a.apostoliuk moved T5232: Flow-accounting uacctd.service cannot restart correctly from Open to Finished on the VyOS 1.5 Circinus board.
a.apostoliuk added a project to T5232: Flow-accounting uacctd.service cannot restart correctly: VyOS 1.5 Circinus.
a.apostoliuk moved T5233: Op-mode flow-accounting netflow with disable-imt errors from Open to Finished on the VyOS 1.5 Circinus board.
a.apostoliuk added a project to T5233: Op-mode flow-accounting netflow with disable-imt errors: VyOS 1.5 Circinus.
zsdc added a comment to T5622: Command 'add system upgrade' uses local script instead of updated script provided by ISO.
Just in case: using anything except current image scripts for installation is not possible without a full chroot into the installation candidate. Python versions and modules may be different and new scripts in many cases will not work in the old environment.
Oct 19 2023
Oct 19 2023
c-po added a project to T5670: bridge: missing member interface validator: VyOS 1.3 Equuleus (1.3.5).
PR for 1.4 https://github.com/vyos/vyos-1x/pull/2383
c-po moved T5670: bridge: missing member interface validator from Open to Finished on the VyOS 1.5 Circinus board.
PR for 1.5 current https://github.com/vyos/vyos-1x/pull/2378
File gets generated but could be not extracted nor transferred as it tries to resolve it as hostname
c-po moved T4913: Rewrite the wireless op mode in the new style from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4913: Rewrite the wireless op mode in the new style from Open to Finished on the VyOS 1.5 Circinus board.
Oct 18 2023
Oct 18 2023
fernando renamed T5667: BGP label-unicast - enable ecmp from BG to BGP label-unicast - enable ecmp .
Unknown Object (User) triaged T5619: Update the Intel ixgbe driver due to issues with Intel X533 as Urgent! priority.