Needed fix here:
https://github.com/vyos/vyos1x-config/pull/40
https://github.com/vyos/vyconf/pull/18
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Apr 3 2025
Apr 3 2025
GitHub <[email protected]> committed rVYOSONEXfa3140b0efe3: Merge pull request #4432 from jestabro/relative-path-submod (authored by Viacheslav).
jestabro added a comment to T7292: Expose vyconf commit algorithm for CLI and ConfigSession instance.
markh0338 added a comment to T7314: Improve firewall remote-group op-mode output with details from nftables.
PR incoming shortly.
Pull request created to fix this issue:
https://github.com/vyos/vyos-1x/pull/4433
Apr 2 2025
Apr 2 2025
Note that the duplicate messages are malformed - including what looks like part of the time stamp at the beginning of the message entry.
@dmbaturin Are you sure that should be 100 instead of a two digit number? I think those will be done in lexicographic order, I suspect there may be confusion generated if someone tries to make a 110, and 11 runs first.
Thank you for the quick response to this, and the work to mitigate it 🙌
Viacheslav updated the task description for T7312: VPP static NAT without destination IP address unexpected behavior.
Viacheslav updated the task description for T7312: VPP static NAT without destination IP address unexpected behavior.
Viacheslav updated the task description for T7312: VPP static NAT without destination IP address unexpected behavior.
dmbaturin changed Issue type from cosmetic to bug on T7019: Use VyOS release-train in /etc/os-release codename over Debian release name.
Viacheslav closed T7074: VPP interface mode interrupt or polling does not work, a subtask of T7070: VPP related bugs the root task, as Resolved.
dmbaturin moved T7217: Private SSH key reuse in the console server service from Need Triage to Completed on the VyOS Rolling board.
dmbaturin moved T7217: Private SSH key reuse in the console server service from Open to Finished on the VyOS 1.5 Circinus board.
dmbaturin moved T7217: Private SSH key reuse in the console server service from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
@mjones-vsat I think the wording is good.
dmbaturin closed T7219: VXLAN needs to make remote and group options mutually exclusive as Resolved.
dmbaturin moved T7219: VXLAN needs to make remote and group options mutually exclusive from Need Triage to Completed on the VyOS Rolling board.
dmbaturin moved T7219: VXLAN needs to make remote and group options mutually exclusive from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
dmbaturin edited projects for T7285: CVE-2024-3596 (BlastRADIUS) mitigations for pam_radius, added: VyOS 1.4 Sagitta (1.4.3); removed VyOS 1.4 Sagitta (1.4.2).
dmbaturin moved T7295: ACME certificate updates fail due to missing timezone info from Need Triage to Completed on the VyOS Rolling board.
dmbaturin moved T7295: ACME certificate updates fail due to missing timezone info from Open to Finished on the VyOS 1.5 Circinus board.
dmbaturin moved T7295: ACME certificate updates fail due to missing timezone info from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
Viacheslav triaged T7312: VPP static NAT without destination IP address unexpected behavior as Normal priority.
Viacheslav closed T7076: VPP check ethernet interface exist before adding to vpp, a subtask of T7070: VPP related bugs the root task, as Resolved.
dmbaturin removed a project from T7076: VPP check ethernet interface exist before adding to vpp: VyOS 1.5 Circinus.
Viacheslav closed T7069: VPP CPU main-core should be verified, a subtask of T7070: VPP related bugs the root task, as Resolved.
jestabro added a comment to T7272: Vyconf: update in memory config tree on response from vyos-commitd.
PR
https://github.com/vyos/vyconf/pull/17
merged
Viacheslav renamed T7255: Impossible to delete protocols under VRF from Impossible to delete protocols OSPF under VRF to Impossible to delete protocols under VRF .
I believe this is caused by the /run/rsyslog/rsyslog.conf file including these 2 entries:
- module(load="imklog") # provides kernel logging support
- module(load="imjournal"...
pull-reqeust created: https://github.com/vyos/vyos-1x/pull/4430
Apr 1 2025
Apr 1 2025
sarthurdev changed the status of T5636: Add GeoIP matching support for policy route from Open to In progress.
sarthurdev changed the status of T5636: Add GeoIP matching support for policy route, a subtask of T4299: Firewall - GeoIP filtering, from Open to In progress.
Response Policy Zone (RPZ)
It would be very very useful feature in VYOS
RPZ allows admins to easily block access to websites via DNS lookup. The lookup is done before the main communication which is based on IP addresses ( which can be blocked by IP Address Blocklists ). Usually the URLs of malicious websites do change much less often, compared to the IPs of them.
natali-rs1985 closed T7283: VPP add static NAT support, a subtask of T7221: VPP related features the root task, as Resolved.
natali-rs1985 moved T7283: VPP add static NAT support from Need Triage to Completed on the VyOS Rolling board.
natali-rs1985 renamed T7283: VPP add static NAT support from VPP add 1:1 NAT support to VPP add static NAT support.
dmbaturin edited projects for T7226: LDP Hello packets are generated to answer incoming Hello before forming neighbor adjacency, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta (1.4.3).
Viacheslav moved T7286: Add CLI to disable LDP establish hello packets from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
Viacheslav moved T7286: Add CLI to disable LDP establish hello packets from Need Triage to Completed on the VyOS Rolling board.
Viacheslav edited projects for T7286: Add CLI to disable LDP establish hello packets, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin changed Is it a breaking change? from none to compatible on T7299: pki: race condition for acme requested certificates - CA auto import only on the second run.
dmbaturin edited projects for T7299: pki: race condition for acme requested certificates - CA auto import only on the second run, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta (1.4.3).
dmbaturin edited projects for T7294: image upgrade will replace symlinks with a copy, added: VyOS 1.4 Sagitta (1.4.2); removed VyOS 1.4 Sagitta.
c-po moved T7293: virtual-ethernet interface vif MTU does not work from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.2) board.
c-po moved T7293: virtual-ethernet interface vif MTU does not work from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
c-po moved T7293: virtual-ethernet interface vif MTU does not work from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T7293: virtual-ethernet interface vif MTU does not work from Need Triage to Completed on the VyOS Rolling board.
GitHub <[email protected]> committed rVYOSONEX2c1e0b5c7374: Merge pull request #4428 from dmbaturin/T7159-conditional-nonproduction-banner (authored by c-po).
GitHub <[email protected]> committed rVYOSONEXe882b3d42465: Merge pull request #4429 from dmbaturin/T7301-goodbye-gnupg (authored by c-po).
c-po added a comment to T7299: pki: race condition for acme requested certificates - CA auto import only on the second run.
your assumption is correct, but:
In T7159#219749, @dmbaturin wrote:@MPStudyly Well, it's open-source, so anyone can remove the banner by editing the script. The intention of the banner is simply to explain that rolling release and stream builds offer no stability guarantees.
SrividyaA added a comment to T6691: Console access lost after updating from 1.3.8 or 1.4 version to latest 1.5 releases.
In VMware vSphere, in multiple devices these log messages are seen after upgrading to 1.4.1 version:
jmg.caguicla updated the task description for T7305: Container network loses VRF on container restart.
Viacheslav triaged T7264: VPP NAT: All traffic get NATed if out interface is set with output-feature as Normal priority.
Viacheslav triaged T7289: Add libvyosconfig as git submodule of vyos-1x for stream builds as Normal priority.
Viacheslav triaged T7300: Missing dependencies for libpam-radius-auth build in the vyos-build container as Normal priority.
The 2.6.12-1+deb12u1 is the latest package available from the Debian bookworm https://packages.debian.org/bookworm/haproxy
If you need the newest HAproxy version, you should build this by building scripts https://github.com/vyos/vyos-build/tree/current/scripts/package-build
Or waiting until bookworm updates the major package version.
jmg.caguicla updated the task description for T7305: Container network loses VRF on container restart.
jmg.caguicla updated the task description for T7305: Container network loses VRF on container restart.