@blueish - thanks! Yes, apt-mirror works now - but will it continue to work with the new storage too?
BTW, good to see "deb-src" - but only a few source packages are in there. I think it would be great to have corresponding source for all these *.deb packages in the Debian source package format, then anyone who wants to contribute will be able to use dpkg-buildpackage to rebuild them.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jun 9 2024
Jun 9 2024
Please share the output of dpkg -l | grep vyos-1x
c-po added a comment to T6464: sstpc: interface not restarted when updating SSL certificate via PKI.
c-po changed the status of T6464: sstpc: interface not restarted when updating SSL certificate via PKI from Open to In progress.
c-po updated the task description for T6462: wireless: add op-mode command for hostapd and wpa_supplicant logs.
vyos@vyos# show vpn ipsec | commands set esp-group vpn lifetime '3600' set esp-group vpn pfs 'enable' set esp-group vpn proposal 10 encryption 'aes128gcm128' set esp-group vpn proposal 10 hash 'sha256' set ike-group vpn key-exchange 'ikev2' set ike-group vpn lifetime '7200' set ike-group vpn proposal 10 dh-group '14' set ike-group vpn proposal 10 encryption 'aes128gcm128' set ike-group vpn proposal 10 hash 'sha256' set interface 'eth0' set options virtual-ip set remote-access connection support authentication client-mode 'eap-mschapv2' set remote-access connection support authentication local-id 'ipsec.somedomain' set remote-access connection support authentication local-users username test password 'test' set remote-access connection support authentication server-mode 'x509' set remote-access connection support authentication x509 ca-certificate 'isrgrootx1' set remote-access connection support authentication x509 ca-certificate 'lets-encrypt-r3' set remote-access connection support authentication x509 certificate 'vpn2' set remote-access connection support description 'support remote access' set remote-access connection support esp-group 'vpn' set remote-access connection support ike-group 'vpn' set remote-access connection support local-address 'ip on eth0' set remote-access connection support pool 'support' set remote-access pool support name-server '1.1.1.1' set remote-access pool support name-server '9.9.9.9' set remote-access pool support prefix '192.168.120.64/27' [edit] vyos@vyos#
Please share your full ipsec configuration
vyos@vyos:~$ generate ipsec profile windows-remote-access support remote ipsec.somedomain
Traceback (most recent call last):
File "/usr/libexec/vyos/op_mode/ikev2_profile_generator.py", line 154, in <module>
cert = load_certificate(pki['certificate'][cert_name]['certificate'])
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^
KeyError: 'certificate'
vyos@vyos:~$ show ver
Version: VyOS 1.5-rolling-202406060020
Release train: current
Release flavor: genericReporter action missing - running this setup in production so does not feel like a bug.
c-po changed the status of T6462: wireless: add op-mode command for hostapd and wpa_supplicant logs from Open to In progress.
GitHub <[email protected]> committed rVYOSONEX2d98f3b17e11: Merge pull request #3608 from vyos/mergify/bp/sagitta/pr-3596 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEXd296f1b15058: Merge pull request #3605 from vyos/mergify/bp/sagitta/pr-3598 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX723e2ab61480: Merge pull request #3604 from vyos/mergify/bp/sagitta/pr-3592 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX23d02fae78b0: Merge pull request #3603 from vyos/mergify/bp/sagitta/pr-3589 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX264037d4cc3d: Merge pull request #3602 from vyos/mergify/bp/sagitta/pr-3573 (authored by c-po).
This was merged Thu May 30 16:35:43 2024 +0200 and your image is from 2024-05-30.
Good afternoon I heard that the solution based on nftables is no longer new, but you took it as a basis.
At the same time, I heard that VyOS added support for VPP. Maybe it makes sense to use two implementations?
I don’t want to offend you in any way, I appreciate everything you do.
https://s3-docs.fd.io/vpp/22.06/cli-reference/clis/clicmd_src_plugins_nat_det44.html
Embezzle changed the status of T6454: Explicitly set the default reverse proxy mode to HTTP from In progress to Needs testing.
talmakion added a comment to T4667: DMVPN IPSec allows cleartext GRE over the internet when reconnecting.
I may have figured something out in https://vyos.dev/T4694.
It looks like outbound encap can be matched via routing expressions:
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXba9b1723f90d: T6449: added pr update trigger (#3596) (authored by Vijayakumar A <[email protected]>).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX29ae4044a6d4: T6449: added pr update trigger (#3596) (authored by Vijayakumar A <[email protected]>).
GitHub <[email protected]> committed rVYOSONEX395bd4eb850f: T6449: added pr update trigger (#3596) (authored by Vijayakumar A <[email protected]>).
c-po moved T6460: Showing DHCPv6 leases can fail due to DUID parsing issues from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
GitHub <[email protected]> committed rVYOSONEXc4a3a55516cf: Merge pull request #3600 from nvollmar/T6460 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXed291814eb8b: reverse-proxy: T6454: Set default value of http for haproxy mode (authored by Embezzle).
c-po moved T6454: Explicitly set the default reverse proxy mode to HTTP from Backlog to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6454: Explicitly set the default reverse proxy mode to HTTP from Open to Finished on the VyOS 1.5 Circinus board.
c-po added a project to T6454: Explicitly set the default reverse proxy mode to HTTP: VyOS 1.4 Sagitta (1.4.1).
GitHub <[email protected]> committed rVYOSONEXbd8016060c8f: Merge pull request #3598 from Embezzle/T6454 (authored by c-po).
Vijayakumar updated the task description for T6449: PR title/commit message check workfow to add comment to PR incase of title is not compliant.
c-po committed rVYOSONEX6ec4be553be8: xml: T6423: enforce priority on nodes having an owner (authored by natali-rs1985).
c-po moved T6423: Require command definition nodes that have an owner to also have a priority from Backlog to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX5793af2132e9: grub: T6453: Fixed GRUB variables parsing (authored by zsdc).
c-po edited projects for T6423: Require command definition nodes that have an owner to also have a priority, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.5 Circinus, VyOS 1.4 Sagitta.
c-po moved T6423: Require command definition nodes that have an owner to also have a priority from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T6453: GRUB variables with `=` in a value are parsed improperly from Backlog to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6453: GRUB variables with `=` in a value are parsed improperly from In Progress to Finished on the VyOS 1.5 Circinus board.
c-po edited projects for T6453: GRUB variables with `=` in a value are parsed improperly, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta.
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXdfca15cda0ca: xml: T6423: enforce priority on nodes having an owner (authored by natali-rs1985).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX083e15c224be: vxlan: T6401: Avoid calling get_vxlan_vni_filter() unless we need it (authored by Andrew Topp <[email protected]>).
c-po moved T6401: Attempts to delete vlan-to-vni option causes an unhandled exception from Finished to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.
c-po moved T6401: Attempts to delete vlan-to-vni option causes an unhandled exception from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
c-po edited projects for T6401: Attempts to delete vlan-to-vni option causes an unhandled exception, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta.
c-po moved T6401: Attempts to delete vlan-to-vni option causes an unhandled exception from Open to Finished on the VyOS 1.5 Circinus board.
PR created: https://github.com/vyos/vyos-1x/pull/3601
Jun 8 2024
Jun 8 2024
Created a PR with a fix
Added an example how to reproduce it
nvollmar updated the task description for T6460: Showing DHCPv6 leases can fail due to DUID parsing issues.
Currently I'm not sure, might be related to changes from T4519
please , Could you share configuration on how to replicate it ? it's also here the guideline about report a bug :
Apachez added a comment to T6457: Update strip-private function to improve op command output for IPs.
The suggested change as in matching number of "x" with number of characters in each octet/hextet in the IPv4/IPv6 address will be less anonymizing than todays method.
L0crian updated the task description for T6457: Update strip-private function to improve op command output for IPs.
@blueish want to do a docs article for this?
If you can use the APT then you can create mirror as well - the same way APT talks to the repository. There is no need for additional protocols like rsync.
Draft PR Added: https://github.com/vyos/vyos-1x/pull/3599
syncer set Forum thread to https://forum.vyos.io/t/thinking-about-system-name-server-and-vrfs/14656 on T5371: "system name-server" is not vrf aware.
Jun 7 2024
Jun 7 2024
syncer moved T5633: op-cmd: Interrupting the "tech-support report" command generates error from Open to Backlog on the VyOS 1.5 Circinus board.
Jun 7 2024, 8:16 PM · Bugs, VyOS 1.4 Sagitta (1.4.0), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
Viacheslav assigned T5633: op-cmd: Interrupting the "tech-support report" command generates error to Giggum.
Jun 7 2024, 7:33 PM · Bugs, VyOS 1.4 Sagitta (1.4.0), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
Giggum added a comment to T5633: op-cmd: Interrupting the "tech-support report" command generates error.
Can this be assigned to me please, will give it a go.
Jun 7 2024, 5:45 PM · Bugs, VyOS 1.4 Sagitta (1.4.0), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
HollyGurza moved T5756: L2TP RADIUS backup and weight settings from Open to Finished on the VyOS 1.5 Circinus board.
Will pull that on Sunday and give it a try, thanks!
HollyGurza moved T6354: Get rid of the custom boot type check in version.py from Open to Finished on the VyOS 1.5 Circinus board.
HollyGurza moved T4576: vpn l2tp logging level configuration from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
HollyGurza moved T4576: vpn l2tp logging level configuration from In Progress to Finished on the VyOS 1.5 Circinus board.
HollyGurza moved T5786: Add set/show system image to /image endpoint from Open to Finished on the VyOS 1.5 Circinus board.
GitHub <[email protected]> committed rVYOSONEXa79c094c3b0a: Merge pull request #3592 from zdc/T6453-circinus (authored by dmbaturin).
Vijayakumar added a comment to T6449: PR title/commit message check workfow to add comment to PR incase of title is not compliant.
Required updates in reusable workflows done.
Please approve/merge https://github.com/vyos/vyos-1x/pull/3596
GitHub <[email protected]> committed rVYOSONEXffd97555a2de: T6449: added pr update trigger (authored by Vijayakumar A <[email protected]>).