Page MenuHomeVyOS Platform
Feed All Stories

Jun 13 2024

Apachez added a comment to T6481: Auto import Lets Encrypt root CA while using pki certificate acme.

Personally I thing there should be a difference between setting PKI manually like set pki certificate and set pki ca vs whatever the command is to utilize letsencrypt or acme or whatever they might be called automatically through VyOS (lets say set pki letsencrypt and set pki acme etc).

Jun 13 2024, 8:30 AM · VyOS Rolling, VyOS 1.5 Circinus
boevering created T6481: Auto import Lets Encrypt root CA while using pki certificate acme.
Jun 13 2024, 7:34 AM · VyOS Rolling, VyOS 1.5 Circinus
boevering created T6480: PermissionError: [Errno 13] Permission denied: '/config/auth/letsencrypt/live/..../cert.pem.
Jun 13 2024, 7:31 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
Viacheslav moved T6403: nat64 input validation required from Open to Finished on the VyOS 1.5 Circinus board.
Jun 13 2024, 6:57 AM · VyOS 1.5 Circinus
Viacheslav triaged T6478: Allow OpenVPN to reload clients' configs without service restart as Normal priority.
Jun 13 2024, 6:56 AM · VyOS Rolling
Viacheslav triaged T6479: PBR into VXLAN VRF does not work, encapsulation loop as Normal priority.
Jun 13 2024, 6:54 AM · Bugs, VyOS Rolling

Jun 12 2024

bernhardschmidt created T6479: PBR into VXLAN VRF does not work, encapsulation loop .
Jun 12 2024, 10:44 PM · Bugs, VyOS Rolling
fernando closed T5307: QoS - traffic-class-map services as Resolved.
Jun 12 2024, 8:36 PM · VyOS 1.5 Circinus
fernando added a comment to T5307: QoS - traffic-class-map services .

documentation : https://github.com/vyos/vyos-documentation/pull/1479

Jun 12 2024, 8:36 PM · VyOS 1.5 Circinus
zsdc created T6478: Allow OpenVPN to reload clients' configs without service restart.
Jun 12 2024, 7:51 PM · VyOS Rolling
Giggum added a comment to T5633: op-cmd: Interrupting the "tech-support report" command generates error.

Documenting what I've found regarding Bug #2:

Jun 12 2024, 7:51 PM · Bugs, VyOS 1.4 Sagitta (1.4.0), VyOS Rolling, Restricted Project, VyOS 1.5 Circinus
fatred awarded T6403: nat64 input validation required a Orange Medal token.
Jun 12 2024, 7:46 PM · VyOS 1.5 Circinus
fatred closed T6403: nat64 input validation required as Resolved.
Jun 12 2024, 7:46 PM · VyOS 1.5 Circinus
fatred added a comment to T6403: nat64 input validation required.

confirmed working

Jun 12 2024, 7:46 PM · VyOS 1.5 Circinus
fatred added a comment to T2769: Add VRF support for syslog.

please excuse the comment. i ended up on the wrong issue due to a fat finger

Jun 12 2024, 7:45 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
fatred awarded T2769: Add VRF support for syslog a Orange Medal token.
Jun 12 2024, 7:43 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
fatred added a comment to T2769: Add VRF support for syslog.
Jun 12 2024, 7:43 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po added projects to T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address: VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus.
Jun 12 2024, 7:18 PM · VyOS 1.3 Equuleus (1.3.8)
GitHub <[email protected]> committed rVYOSONEXa01eaf1d59ad: Merge pull request #3642 from vyos/T6476-sonar-cloud-workflow (authored by c-po).
Jun 12 2024, 7:11 PM
lclements0 added a comment to T6470: Deleting a Firewall addrerss-group object that is tied to a NAT rule or other resources doesn't error out, it hangs..

Sure thing!

Jun 12 2024, 6:10 PM
nvollmar added a comment to T6477: Adding Loki plugin to Telegraf.

I would have put it on my list. @Fabse if you get stuck or need some support just slack me.

Jun 12 2024, 4:45 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
Fabse added a comment to T6477: Adding Loki plugin to Telegraf.

Sure @Viacheslav! I'll try to add the PR. Also thanks for the documentation @nvollmar :)

Jun 12 2024, 3:41 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
Viacheslav added a comment to T6477: Adding Loki plugin to Telegraf.

@nvollmar Do you want to claim the task?

Jun 12 2024, 3:39 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
nvollmar added a comment to T6477: Adding Loki plugin to Telegraf.

Relevant telegraf documentation: https://github.com/influxdata/telegraf/blob/release-1.31/plugins/outputs/loki/README.md

Jun 12 2024, 2:10 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
HollyGurza moved T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.8) board.
Jun 12 2024, 2:03 PM · VyOS 1.3 Equuleus (1.3.8)
zsdc moved T6475: WALinuxAgent crashes in Azure from Open to In Progress on the VyOS 1.4 Sagitta board.
Jun 12 2024, 2:03 PM · VyOS 1.4 Sagitta (1.4.1), Bugs, VyOS 1.5 Circinus
HollyGurza changed the status of T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address from Open to In progress.
Jun 12 2024, 2:03 PM · VyOS 1.3 Equuleus (1.3.8)
HollyGurza claimed T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address.
Jun 12 2024, 2:02 PM · VyOS 1.3 Equuleus (1.3.8)
zsdc moved T6475: WALinuxAgent crashes in Azure from Open to In Progress on the VyOS 1.5 Circinus board.

PR for 1.5: https://github.com/vyos/vyos-build/pull/654

Jun 12 2024, 2:02 PM · VyOS 1.4 Sagitta (1.4.1), Bugs, VyOS 1.5 Circinus
HollyGurza added a comment to T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address.

https://github.com/vyos/vyos-1x/pull/3643

Jun 12 2024, 1:34 PM · VyOS 1.3 Equuleus (1.3.8)
Viacheslav added a project to T6477: Adding Loki plugin to Telegraf: Restricted Project.
Jun 12 2024, 1:34 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
Viacheslav changed the subtype of T6477: Adding Loki plugin to Telegraf from "Task" to "Feature Request".
Jun 12 2024, 1:33 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
Viacheslav added a comment to T6477: Adding Loki plugin to Telegraf.

It will be easy to add; you need to generate a new CLI like with "prometheus-client" for example https://github.com/vyos/vyos-1x/blob/03d8c16a12d182a2fb2ab9f7acec5d8cb83937ba/interface-definitions/service_monitoring_telegraf.xml.in#L188-L250
And add template changes https://github.com/vyos/vyos-1x/blob/03d8c16a12d182a2fb2ab9f7acec5d8cb83937ba/data/templates/telegraf/telegraf.j2#L45-L58

Jun 12 2024, 1:32 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
fernando updated subscribers of T1229: Add support for unencrypted L2TPv2 client connections.

@a.apostoliuk

Jun 12 2024, 1:05 PM · VyOS Rolling
Fabse created T6477: Adding Loki plugin to Telegraf.
Jun 12 2024, 12:48 PM · VyOS 1.4 Sagitta (1.4.1), Restricted Project, VyOS 1.5 Circinus
Vijayakumar added a comment to T6476: add sonar workflow to vyos-1x current.

Raised PR https://github.com/vyos/vyos-1x/pull/3642

Jun 12 2024, 11:35 AM · GitHub Infrastructure
Vijayakumar claimed T6476: add sonar workflow to vyos-1x current.
Jun 12 2024, 11:34 AM · GitHub Infrastructure
GitHub <[email protected]> committed rVYOSONEX5db073bc8b22: T6476: added sonarcloud workflow (authored by Vijayakumar A <[email protected]>).
Jun 12 2024, 11:32 AM
GitHub <[email protected]> committed rVYOSONEX6f6c8307552b: T6476: added sonar workflow (authored by Vijayakumar A <[email protected]>).
Jun 12 2024, 11:27 AM
GitHub <[email protected]> committed rVYOSONEX2a015b26ab0d: Update and rename sonar.yml to sonar-cloud.yml (authored by Vijayakumar A <[email protected]>).
Jun 12 2024, 11:04 AM
GitHub <[email protected]> committed rVYOSONEX0bec299d9f34: T6476: added sonar workflow (authored by Vijayakumar A <[email protected]>).
Jun 12 2024, 10:57 AM
Vijayakumar created T6476: add sonar workflow to vyos-1x current.
Jun 12 2024, 10:40 AM · GitHub Infrastructure
natali-rs1985 moved T6389: Check architecture and flavor compatibility on upgrade attempts from Open to Finished on the VyOS 1.5 Circinus board.
Jun 12 2024, 10:38 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.2), VyOS Rolling
manuel81 added a comment to T5405: Add VRF support for "update geoip".

For 1.5-rolling-202406120020 it doesnt work even without having a vrf:

vyos@vyos-a# run update geoip 
Downloaded GeoIP database
Error: GeoIP failed to update firewall
[edit]
vyos@vyos-a#

Unfortunately there is no explaining logging (at least I didn't found any).

Jun 12 2024, 10:36 AM · VyOS Rolling
zsdc changed the status of T6475: WALinuxAgent crashes in Azure from Open to In progress.
Jun 12 2024, 10:16 AM · VyOS 1.4 Sagitta (1.4.1), Bugs, VyOS 1.5 Circinus
zsdc created T6475: WALinuxAgent crashes in Azure.
Jun 12 2024, 10:16 AM · VyOS 1.4 Sagitta (1.4.1), Bugs, VyOS 1.5 Circinus
zzing123 added a comment to T1229: Add support for unencrypted L2TPv2 client connections.

Looking into this a bit more. This request is to enable VyOS as a LAC - l2tp v2 client support against an LNS server, for which VyOS already has support. Most LAC's are presented to LNSs as PPPoE connections they are authenticated as LAC clients to an LNS. But there are cases such Andrews & Arnold who allow the l2tp tunnel to come from anywhere.

Jun 12 2024, 10:00 AM · VyOS Rolling
natali-rs1985 added a comment to T5810: Add support for RPKI source ip.

Upstream bug https://github.com/FRRouting/frr/issues/16013 fixed in https://github.com/FRRouting/frr/pull/16023

Jun 12 2024, 9:49 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
Apachez added a comment to T6472: Implement Atomic Write Operations for Config Files.

Care to elaborate some on that "data integrity issues" claim since you will have integrity changed by all sort of writes (atomic or not)?

Jun 12 2024, 9:23 AM
Apachez added a comment to T3936: [Feature] - DHCP Option 82 Support.

There are 2 usecases of option82 when it comes to DHCP:

Jun 12 2024, 9:16 AM · VyOS Rolling
MattK added a comment to T6322: Include microcode update packages for both intel and amd64 cpus.

@aidan-gibson You can build current with the microcode packages included by passing the following to the build script:

Jun 12 2024, 7:43 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling
pavel-altair added a comment to T6407: ipsec profile generation error.

In upgrade process

Jun 12 2024, 7:20 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
Viacheslav closed T6442: CGNAT add address allocation logs to syslog during commit, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, as Resolved.
Jun 12 2024, 6:12 AM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav closed T6442: CGNAT add address allocation logs to syslog during commit as Resolved.
Jun 12 2024, 6:12 AM · VyOS 1.5 Circinus
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX1be25d724acc: bgp: T6473: missing completion helper for peer-groups inside a VRF (authored by c-po).
Jun 12 2024, 6:06 AM
GitHub <[email protected]> committed rVYOSONEX03d8c16a12d1: Merge pull request #3638 from c-po/bgp-vrf-completion-helper (authored by c-po).
Jun 12 2024, 6:06 AM
c-po committed rVYOSONEX80ea3d53b222: bgp: T6473: missing completion helper for peer-groups inside a VRF.
Jun 12 2024, 6:06 AM
gmurphy42 added a comment to T3936: [Feature] - DHCP Option 82 Support.

Happened across this one while trying to find support for defining client classes in Kea in order to pass different PXE boot files depending on client architecture. The following has an example of how this is achieved in kea.

Jun 12 2024, 5:44 AM · VyOS Rolling

Jun 11 2024

c-po added a comment to T6407: ipsec profile generation error.

Can you please retest with the latest ISO as additional fixes got added to the code.

Jun 11 2024, 10:10 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
leleobhz added a comment to T6474: docker: Improve docker support for other platforms.

Just to notice: This task focuses on container part of multi arch support. I can take a look at multiarch pieces outside docker support, but it will demand a deeper knowledge of vyos build system and the vyos goal on multiarch (Or for now, arm) support.

Jun 11 2024, 9:37 PM · VyOS Rolling
part1cleth1ef added a comment to T3106: 802.11ax support.

Hey, is this feature currently being worked on? If not then I wouldn't mind working on support for it (I've also created a basic wpa2-enterprise option for client mode)

Jun 11 2024, 9:29 PM · VyOS Rolling
leleobhz added a subtask for T3965: arm: Extend configure scripts to allow for arm builds: T6474: docker: Improve docker support for other platforms.
Jun 11 2024, 8:57 PM · VyOS 1.4 Sagitta
leleobhz added a parent task for T6474: docker: Improve docker support for other platforms: T3965: arm: Extend configure scripts to allow for arm builds.
Jun 11 2024, 8:57 PM · VyOS Rolling
leleobhz created T6474: docker: Improve docker support for other platforms.
Jun 11 2024, 8:56 PM · VyOS Rolling
GitHub <[email protected]> committed rVYOSONEX1e5a4961be7f: Merge pull request #3636 from vyos/mergify/bp/sagitta-stream/pr-3611 (authored by c-po).
Jun 11 2024, 3:25 PM
c-po closed T6462: wireless: add op-mode command for hostapd and wpa_supplicant logs as Resolved.
Jun 11 2024, 3:25 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
c-po moved T6462: wireless: add op-mode command for hostapd and wpa_supplicant logs from In Progress to Finished on the VyOS 1.4 Sagitta (1.4.1) board.
Jun 11 2024, 3:25 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
c-po moved T6473: bgp: missing completion helper for peer-groups inside a VRF from Backlog to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.
Jun 11 2024, 3:25 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
GitHub <[email protected]> committed rVYOSONEX466c534dc458: Merge pull request #3635 from vyos/mergify/bp/circinus-stream/pr-3611 (authored by c-po).
Jun 11 2024, 3:25 PM
GitHub <[email protected]> committed rVYOSONEX47a26d1f407c: Merge pull request #3633 from vyos/mergify/bp/sagitta/pr-3611 (authored by c-po).
Jun 11 2024, 3:25 PM
c-po moved T6473: bgp: missing completion helper for peer-groups inside a VRF from Open to Finished on the VyOS 1.5 Circinus board.
Jun 11 2024, 3:24 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
c-po added a comment to T6473: bgp: missing completion helper for peer-groups inside a VRF.

https://github.com/vyos/vyos-1x/pull/3638

Jun 11 2024, 3:24 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
c-po updated the task description for T6473: bgp: missing completion helper for peer-groups inside a VRF.
Jun 11 2024, 3:08 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
dmbaturin closed T6383: Incorrect completion for rollback-soft as Resolved.
Jun 11 2024, 2:35 PM · VyOS 1.4 Sagitta (1.4.0-GA)
talmakion added a comment to T6157: Can not create two GRE tunnels to the same DST but from different SRC addresses.

@a.apostoliuk this one should be resolved in the current rolling release, if you're able to check it out?

Jun 11 2024, 2:07 PM · Bugs, VyOS 1.4 Sagitta (1.4.1)
jestabro closed T6471: Add an optimized get_config_dict for op-mode as Resolved.
Jun 11 2024, 1:32 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
c-po claimed T6473: bgp: missing completion helper for peer-groups inside a VRF.
Jun 11 2024, 12:06 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
c-po created T6473: bgp: missing completion helper for peer-groups inside a VRF.
Jun 11 2024, 12:06 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus
Viacheslav triaged T6472: Implement Atomic Write Operations for Config Files as Normal priority.
Jun 11 2024, 11:33 AM
talmakion added a comment to T4694: Allow VyOS Firewall to Match Outbound IPSec Traffic.

I have https://github.com/vyos/vyos-1x/pull/3616 and https://github.com/vyos/vyos-1x/pull/3637 as works in progress.

Jun 11 2024, 11:32 AM · VyOS 1.4 Sagitta (1.4.0-GA)
robertoberto created T6472: Implement Atomic Write Operations for Config Files.
Jun 11 2024, 10:32 AM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXf443334a958a: wireless: T6462: add op-mode command for hostapd and wpa_supplicant logs (authored by c-po).
Jun 11 2024, 8:46 AM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXcd9de30d87b9: wireless: T6462: add op-mode command for hostapd and wpa_supplicant logs (authored by c-po).
Jun 11 2024, 8:46 AM
GitHub <[email protected]> committed rVYOSONEX7bcfd3fc0557: Merge pull request #3634 from vyos/mergify/bp/circinus-stream/pr-3632 (authored by c-po).
Jun 11 2024, 8:44 AM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXb096687c3cd5: firewall: T3900: fix migration and smoketests (authored by c-po).
Jun 11 2024, 8:43 AM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXda277077481f: wireless: T6462: add op-mode command for hostapd and wpa_supplicant logs (authored by c-po).
Jun 11 2024, 8:42 AM
c-po committed rVYOSONEX7ed4abe6cb38: wireless: T6462: add op-mode command for hostapd and wpa_supplicant logs.
Jun 11 2024, 8:41 AM
c-po committed rVYOSONEX2cbc4eb005fc: firewall: T3900: fix migration and smoketests.
Jun 11 2024, 8:41 AM
GitHub <[email protected]> committed rVYOSONEX397743ff553f: Merge pull request #3611 from c-po/op-mode-wifi (authored by c-po).
Jun 11 2024, 8:41 AM
GitHub <[email protected]> committed rVYOSONEXdd813e5b79d6: Merge pull request #3632 from c-po/fixup-firewall (authored by c-po).
Jun 11 2024, 8:41 AM
jestabro committed rVYOSONEX1a164852d2cb: op-mode: T6471: add optimized get_config_dict.
Jun 11 2024, 8:00 AM
GitHub <[email protected]> committed rVYOSONEX0deb3933a161: Merge pull request #3628 from jestabro/op-mode-config-dict (authored by c-po).
Jun 11 2024, 8:00 AM
GitHub <[email protected]> committed rVYOSONEX730bb8a1d6c4: Merge pull request #3630 from vyos/mergify/bp/circinus-stream/pr-3614 (authored by c-po).
Jun 11 2024, 8:00 AM
GitHub <[email protected]> committed rVYOSONEX2a1ceb609ca7: Merge pull request #3631 from vyos/mergify/bp/sagitta-stream/pr-3614 (authored by c-po).
Jun 11 2024, 8:00 AM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX3d8e7a68cf2e: T6219: align with system sysctl and limit parameters to supported (authored by nvollmar).
Jun 11 2024, 7:41 AM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX0a43464f30da: container: T6219: Add support for container sysctl / kernel parameters (authored by tgnthump).
Jun 11 2024, 7:41 AM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX24fb2a21b981: T6219: align with system sysctl and limit parameters to supported (authored by nvollmar).
Jun 11 2024, 7:41 AM
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXef06389829ca: container: T6219: Add support for container sysctl / kernel parameters (authored by tgnthump).
Jun 11 2024, 7:41 AM
Vijayakumar renamed T6469: Remove J2Lint workflow from vyos-1x from Renove J2Lint workflow from vyos-1x to Remove J2Lint workflow from vyos-1x.
Jun 11 2024, 7:13 AM · GitHub Infrastructure
Viacheslav triaged T6470: Deleting a Firewall addrerss-group object that is tied to a NAT rule or other resources doesn't error out, it hangs. as Normal priority.

@lclements0 Add a simple set of commands to reproduce.

Jun 11 2024, 7:03 AM