- Change Summary
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jan 15 2023
Jan 15 2023
Jan 13 2023
Jan 13 2023
c-po closed T4911: Rewrite the LLDP op mode in the new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Viacheslav added a project to T4575: vyos.utill add new wrapper "rc_cmd" to get the return code and output: VyOS 1.3 Equuleus (1.3.3).
We should backport it to 1.3
Jan 12 2023
Jan 12 2023
c-po closed T4929: Update Intel QAT drivers to 4.20.0-00001, a subtask of T4928: Upgrade Linux Kernel to 6.1.y (2022 LTS edition), as Resolved.
Viacheslav changed the status of T4935: ospfv3: "not-advertise" and "advertise" conflict from Open to Needs testing.
Restricted Repository Identity closed T4934: ospf: Fix inter-area route summarization as Resolved by committing rVYOSONEX0b59afbb9fd0: Merge pull request #1754 from vfreex/ospf-area-range-fix.
c-po changed the status of T4911: Rewrite the LLDP op mode in the new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
c-po changed the status of T4911: Rewrite the LLDP op mode in the new format from Open to In progress.
Viacheslav changed the subtype of T4932: Some entries are missing or wrong in toml for builds for the arm64 architecture from "Task" to "Bug".
Jan 11 2023
Jan 11 2023
@jestabro I've created the backport PR just now.
@roedie , thanks.
Will push the backport for 1.3 as well.
c-po changed the status of T4928: Upgrade Linux Kernel to 6.1.y (2022 LTS edition) from Open to In progress.
So there are 2 options
- Live it as it is, it works as before (but maybe it is a legacy way)
- Return the strongswan.service and use it in all required places (conf-mode, op-mode, dmvpn scripts, etc). So old ipsec/starter must not be overlapped with strongswan.service restarts
a.apostoliuk changed the status of T4927: Need to change restart to reload-or-restart in Webproxy module from Open to In progress.
Jan 10 2023
Jan 10 2023
jestabro closed T4880: Expose 'add/delete container image' in HTTP-API, a subtask of T578: Support Linux Container, as Resolved.
I found that if IPSEC lifetime is large(28800) then this problem occurs.
If lifetime eq 1800 sec, everything works.
Viacheslav changed the status of T4906: ipsec connections shows only one connection as up from In progress to Needs testing.
After return strongswan.starer https://github.com/vyos/vyos-1x/commit/f5f43c6639957f95177bb77d2b569e16d4dab9dc
all looks good now, service can be restored without issues
The similar task T3008
jack9603301 renamed T4926: using chronyd service to replace ntpd from Replace ntp with clock to using chronyd service to replace ntpd .
Jan 9 2023
Jan 9 2023
jestabro changed the status of T4880: Expose 'add/delete container image' in HTTP-API, a subtask of T578: Support Linux Container, from Open to In progress.
jestabro changed the status of T4880: Expose 'add/delete container image' in HTTP-API from Open to In progress.
a.apostoliuk added a comment to T4924: Systemctl strongswan.service for some reason is not disabled.
I have tested this bug.
After boot everything woks fine without any problems.
But after restart vpn command all these issues began.
- Error message
vyos charon[2079]: 04[NET] no socket implementation registered, sending failed
- Swanctl shows unnormal info. IPSEC phase is down.
- Traffic passes through the tunnel.
- New process appears
a.apostoliuk added a comment to T4924: Systemctl strongswan.service for some reason is not disabled.
Viacheslav changed the status of T4844: Incorrect permissions of the safeguard DB directory, a subtask of T3810: webproxy squidguard rules don't work properly after rewriting to python. , from In progress to Needs testing.
Viacheslav changed the status of T4844: Incorrect permissions of the safeguard DB directory from In progress to Needs testing.
Fixed in T3810
Viacheslav reopened T3810: webproxy squidguard rules don't work properly after rewriting to python. as "Needs testing".
a.apostoliuk changed the status of T4877: Need verification in using import vrf and import vpn, export vpn commands from In progress to Needs testing.
Viacheslav changed the status of T4906: ipsec connections shows only one connection as up from Open to In progress.
c-po moved T4922: Add ssh-client source-interface CLI option from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Viacheslav changed the status of T1311: WAN load-balancing can't flush connections when conntrack-sync is enabled from On hold to Needs testing.
Jan 9 2023, 8:32 AM · VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, test
Jan 8 2023
Jan 8 2023
DerEnderKeks added a comment to T4923: Zebra sends router advertisements even though it's not supposed to.
I don't think this is a bug in FRR, but rather a configuration issue. I'm not really familiar with FRR, but as far as I can tell, sending RAs is an intended feature of it that can be disabled per interface: https://docs.frrouting.org/en/latest/ipv6.html#clicmd-ipv6-nd-suppress-ra
Not sure why it's enabled by default, since I couldn't find anything in the generated /etc/frr/frr.conf that would enable it.
Viacheslav updated the task description for T4924: Systemctl strongswan.service for some reason is not disabled.
Viacheslav updated the task description for T4924: Systemctl strongswan.service for some reason is not disabled.
Viacheslav added a comment to T4923: Zebra sends router advertisements even though it's not supposed to.
Could you open an issue for FRR?
https://github.com/FRRouting/frr/issues
c-po moved T4922: Add ssh-client source-interface CLI option from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.3) board.
c-po moved T4922: Add ssh-client source-interface CLI option from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T4922: Add ssh-client source-interface CLI option from Open to In progress.
Jan 7 2023
Jan 7 2023
roedie changed the status of T4884: Missing a community6 in snmpd config from Unknown Status to Resolved.
Jan 6 2023
Jan 6 2023
The error is in the respective XML op-mode-definitions; arg '--intf-type' should be passed to 'show_interfaces.py' (1.3); 'interfaces.py' (1.4) so that tag node is correctly filtered.
I have checked this config on VyOS 1.4-rolling-202212310809 (Strongswan 5.9.8). The problem is the same.
Jan 5 2023
Jan 5 2023
I just edited the file /opt/vyatta/sbin/install-image in a running system to try testing this, and it works as expected at least for the primary minisign key. I didn't test GPG or 2nd minisign key, but I see no reason why there would be an issue there. I did touch those parts, though, so it's probably worth at least having another set of eyes look at it all.
er wait hold up i made a mistake saving/pushing my changes
edit: fixed
I created a PR, but I'm not certain how to compile this part of VyOS to test this, and I'm hoping someone could help me do so -- a quick glance makes it look to me like this is compiled into a .deb that's then installed by https://github.com/vyos/vyos-build/blob/current/scripts/build-vyos-image ?
In T1237#140040, @Viacheslav wrote:will be fixed in the next rolling release
The error handling on this line is basically nonexistent, but also the coding style is a little hard to follow.