Feed Search
Dec 6 2023
Dec 6 2023
vfomkin created T5804: SNAT "any" interface error.
Dec 5 2023
Dec 5 2023
indrajitr updated the task description for T5803: git/github: Adjust configuration for safe and baseline defaults.
n.fort added a comment to T5779: custom conntrack timeout rule not applicable.
Viacheslav changed the status of T5772: Require HTTPS API server configurations to include at least one key if key-based auth is used from Open to Needs testing.
Dec 4 2023
Dec 4 2023
fernando added a comment to T5796: Openconnect - HTTPS security headers are missing.
Viacheslav moved T5796: Openconnect - HTTPS security headers are missing from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5796: Openconnect - HTTPS security headers are missing from Open to Finished on the VyOS 1.5 Circinus board.
fernando added a comment to T5796: Openconnect - HTTPS security headers are missing.
tested on 1.5/1.4 :
fernando changed the status of T5796: Openconnect - HTTPS security headers are missing from In progress to Needs testing.
a.apostoliuk changed the status of T4704: Allow to set metric (MED) to rtt with rtt,+rtt or -rtt from Open to Needs testing.
Dec 3 2023
Dec 3 2023
Cheeze_It added a comment to T5530: Add LFA to IS-IS.
Added PR for documentation here https://github.com/vyos/vyos-documentation/pull/1169
c-po added a comment to T5769: VTI tunnels lose their v6 Link Local addresses when set down/up.
PR for 1.4 https://github.com/vyos/vyos-1x/pull/2568
c-po moved T5769: VTI tunnels lose their v6 Link Local addresses when set down/up from Open to Finished on the VyOS 1.4 Sagitta board.
c-po closed T5753: Add VXLAN vnifilter support, a subtask of T3700: Support VLAN tunnel mapping of VLAN aware bridges, as Resolved.
Apachez added a comment to T5759: Change VXLAN default MTU to 1500 bytes.
Wouldnt this break things with compatibility with other vendors?
c-po moved T5759: Change VXLAN default MTU to 1500 bytes from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T5759: Change VXLAN default MTU to 1500 bytes from Open to Finished on the VyOS 1.4 Sagitta board.
Dec 2 2023
Dec 2 2023
c-po moved T5769: VTI tunnels lose their v6 Link Local addresses when set down/up from Open to Finished on the VyOS 1.5 Circinus board.
c-po added a comment to T5769: VTI tunnels lose their v6 Link Local addresses when set down/up.
fernando added a comment to T5796: Openconnect - HTTPS security headers are missing.
PR 1.5/1.4 : https://github.com/vyos/vyos-1x/pull/2564
fernando changed the status of T5796: Openconnect - HTTPS security headers are missing from Open to In progress.
indrajitr added a comment to T5793: mdns-repeater: Cleanup avahi-daemon configuration in /etc.
@Viacheslav, updated PR https://github.com/vyos/vyos-1x/pull/2562
indrajitr added a comment to T5793: mdns-repeater: Cleanup avahi-daemon configuration in /etc.
Looks like, we still need to keep /etc/avahi/services because avahi-daemon chroot to that location at startup. This is set up at build time via AVAHI_CONFIG_DIR and there is no way to change it at runtime.
Viacheslav added a comment to T5793: mdns-repeater: Cleanup avahi-daemon configuration in /etc.
Cannot pass smoketest, @indrajitr could you re-check?
DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py
DEBUG - test_service_dual_stack (__main__.TestServiceMDNSrepeater.test_service_dual_stack) ... FAIL
DEBUG - test_service_ipv4 (__main__.TestServiceMDNSrepeater.test_service_ipv4) ... FAIL
DEBUG - test_service_ipv6 (__main__.TestServiceMDNSrepeater.test_service_ipv6) ... FAIL
DEBUG -
DEBUG - ======================================================================
DEBUG - FAIL: test_service_dual_stack (__main__.TestServiceMDNSrepeater.test_service_dual_stack)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py", line 47, in tearDown
DEBUG - self.assertTrue(process_named_running('avahi-daemon'))
DEBUG - AssertionError: None is not true
DEBUG -
DEBUG - ======================================================================
DEBUG - FAIL: test_service_ipv4 (__main__.TestServiceMDNSrepeater.test_service_ipv4)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py", line 47, in tearDown
DEBUG - self.assertTrue(process_named_running('avahi-daemon'))
DEBUG - AssertionError: None is not true
DEBUG -
DEBUG - ======================================================================
DEBUG - FAIL: test_service_ipv6 (__main__.TestServiceMDNSrepeater.test_service_ipv6)
DEBUG - ----------------------------------------------------------------------
DEBUG - Traceback (most recent call last):
DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_mdns-repeater.py", line 47, in tearDown
DEBUG - self.assertTrue(process_named_running('avahi-daemon'))
DEBUG - AssertionError: None is not true
DEBUG -
DEBUG - ----------------------------------------------------------------------
DEBUG - Ran 3 tests in 11.145s
DEBUG -
DEBUG - FAILED (failures=3)Dec 1 2023
Dec 1 2023
indrajitr renamed T5793: mdns-repeater: Cleanup avahi-daemon configuration in /etc from mdns: Cleanup avahi-daemon configuration in /etc to mdns-repeater: Cleanup avahi-daemon configuration in /etc.
indrajitr updated the task description for T5791: Update dynamic dns configuration path to be consistent with other areas of VyOS.
indrajitr triaged T5791: Update dynamic dns configuration path to be consistent with other areas of VyOS as Normal priority.
Nov 30 2023
Nov 30 2023
a.hajiyev added a comment to T5004: DHCP-Relay potential bug. Static configurations of DHCP-Relay Interfaces.
Tested in VyOS 1.3.4
a.hajiyev added a comment to T4601: dhcp : relay agent IP address issue..
Tested in VyOS 1.3.4
a.hajiyev added a comment to T4601: dhcp : relay agent IP address issue..
Tested in VyOS 1.4-rolling-202311100309
jestabro closed T5789: image-tools should copy ssh host keys on image update, a subtask of T4516: Rewrite system image manipulation tools in Python, as Unknown Status.
Nov 29 2023
Nov 29 2023
jestabro closed T5751: Adjust new image tools for non-interactive use, a subtask of T4516: Rewrite system image manipulation tools in Python, as Unknown Status.
jestabro added a comment to T5789: image-tools should copy ssh host keys on image update.
jestabro updated the task description for T5789: image-tools should copy ssh host keys on image update.
c-po moved T5788: frr: update to 9.1 release from Backlog to In Progress on the VyOS 1.5 Circinus board.
c-po added a comment to T5788: frr: update to 9.1 release.
currently OSPF smoketests fail b/c of https://github.com/FRRouting/frr/issues/14910
c-po created T5788: frr: update to 9.1 release.
troggie added a comment to T5364: Make it possible to set the PADO delay to 0.
Good day
a.hajiyev added a comment to T5004: DHCP-Relay potential bug. Static configurations of DHCP-Relay Interfaces.
Tested in VyOS 1.4-rolling-202311100309
n.fort changed the status of T5779: custom conntrack timeout rule not applicable from Confirmed to In progress.
Nov 28 2023
Nov 28 2023
n.fort changed the status of T2737: DHCP Lease not displayed with a static map from In progress to Confirmed.
n.fort changed the status of T2737: DHCP Lease not displayed with a static map from Open to In progress.
n.fort changed the status of T5775: Migrated Firewall Global State Policy ineffective on latest firewall zone config from Confirmed to In progress.
a.hajiyev added a comment to T4276: IPsec peers dh-group negotiation issue with pfs enabled and multiple proposals configured with IKEv1.
Tested on VyOS 1.4-rolling-202311100309
- IKEv1
- 2 proposals
- the pfs is enabled
Viacheslav added a comment to T5785: API output of show container image broken.
You can use GraphQL query. It shows you what does container.py for raw format
set service https api graphql set service https api keys id KID key 'foo'
Query
curl -k --raw 'https://localhost/graphql' \
-H 'Content-Type: application/json' \
-d '{"query":" { ShowImageContainer (data: {key: \"foo\"}) {\n success\n errors\n data {\n result\n }\n}\n}\n"}'For example
jestabro added a parent task for T5786: Add set/show system image to /image endpoint: T5751: Adjust new image tools for non-interactive use.
jestabro added a comment to T5751: Adjust new image tools for non-interactive use.
Nov 27 2023
Nov 27 2023
adestis added a comment to T5785: API output of show container image broken.
Seems like it's the same for the other functions
sudo podman ps --all vs. sudo podman ps --all --format='{{json .}}'
sudo podman network ls vs. sudo podman network ls --format='{{json .}}'
adestis added a comment to T5785: API output of show container image broken.
The implementation in file container.py has the command podman image ls which is ok when called from shell.
When called from API it should have been podman image ls --format='{{json .}}'
jestabro moved T5763: Fix imprecise check for remote file name in vyos-load-config.py from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.5) board.
jestabro moved T5763: Fix imprecise check for remote file name in vyos-load-config.py from Open to Finished on the VyOS 1.4 Sagitta board.
adestis added a comment to T5785: API output of show container image broken.
Seems like I was wrong, the content is returned but not in structured json format.
For further automation it would be nice to have json objects instead of a string which needs to be parsed by the client.
adestis updated the task description for T5785: API output of show container image broken.
c-po added a comment to T5749: Show MAC address VRF and MTU by default for "show interfaces".
Great addition, it has one minor bug.
n.fort added a comment to T5778: The show dhcp server leases operation mode command does not work as expected.
The problem is that, comparing to command output on 1.3, it only show the leases granted by the router (and doesn't contain leases granted by the second router, regardless of states primary|secondary.
So user might think synchronization between routers defined in fail-over mode is broken.
But this is not the case. As explained in the description, all information about leases, granted by both routers, is present on lease files on both routers.
Nov 26 2023
Nov 26 2023
c-po moved T5783: frr: smoketests must notice any daemon crash from Open to Finished on the VyOS 1.5 Circinus board.
c-po added a comment to T5783: frr: smoketests must notice any daemon crash.
PR for 1.5 https://github.com/vyos/vyos-1x/pull/2544
c-po changed the status of T5783: frr: smoketests must notice any daemon crash from Open to In progress.
jestabro renamed T5782: Use a single config mode script for https and http-api from Ues a single config mode script for https and http-api to Use a single config mode script for https and http-api.
jestabro added a comment to T5782: Use a single config mode script for https and http-api.
jestabro renamed T5782: Use a single config mode script for https and http-api from Ues a single config mode script for node ['service', 'https'] to Ues a single config mode script for https and http-api.