Moin,
i currently bit on this in 1.4.0; The issue is that, ideally LE reissuance should be automated in the background. One can, of course, add a ca statement. However, that statement is single-valued, i.e., if a reissuance due to the cycling of intermediates (see: https://letsencrypt.org/certificates/) ends up with another intermediate, configuration breaks.

Jul 15 2024, 8:51 AM · VyOS 1.5 Circinus

tfiebig added a comment to T6481: Auto import Lets Encrypt root CA while using pki certificate acme.

Imho, this should be reflected in the documentation, at least; Ideally with an example for how to import the most recent ACME intermediates.

Jul 15 2024, 8:32 AM · VyOS Rolling, VyOS 1.5 Circinus

dmbaturin triaged T6570: Firewall bridge allways passes traffic to IP layer as Normal priority.

Jul 15 2024, 6:34 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

dmbaturin triaged T6575: op-mode: ntp: add support for NTP service restart via CLI as Normal priority.

Jul 15 2024, 6:32 AM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

dmbaturin changed Is it a breaking change? from none to compatible on T6577: op-mode: create generic service restart helper to work with the API.

Jul 15 2024, 6:32 AM · VyOS Rolling, VyOS 1.5 Circinus

dmbaturin triaged T6577: op-mode: create generic service restart helper to work with the API as Normal priority.

Jul 15 2024, 6:32 AM · VyOS Rolling, VyOS 1.5 Circinus

dmbaturin triaged T6578: Unhandled exception in "show openconnect-server sessions" as Normal priority.

Jul 15 2024, 6:31 AM · Bugs, VyOS 1.4 Sagitta (1.4.1), VyOS Rolling, VyOS 1.5 Circinus

dmbaturin renamed T6578: Unhandled exception in "show openconnect-server sessions" from ocserv op mode needs improvement to Unhandled exception in "show openconnect-server sessions".

Jul 15 2024, 6:31 AM · Bugs, VyOS 1.4 Sagitta (1.4.1), VyOS Rolling, VyOS 1.5 Circinus

jestabro added a comment to T6559: vyos-configd should return commit error on config dependency error.

PR:
https://github.com/vyos/vyos-1x/pull/3813

Jul 15 2024, 5:31 AM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

patrickli added a comment to T5867: Upgrade podman to Debian Trixie version 4.7.x.

This PR missed another location to add --no-healthcheck.

Jul 15 2024, 5:01 AM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus

Giggum added a comment to T6575: op-mode: ntp: add support for NTP service restart via CLI.

Hi, I’d be happy to take this on.

Jul 15 2024, 12:59 AM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

Jul 14 2024

c-po closed T6566: op-mode: "monitor bandwidth" add support for listing all interfaces concurrently as Resolved.

Jul 14 2024, 8:40 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po moved T6566: op-mode: "monitor bandwidth" add support for listing all interfaces concurrently from In Progress to Finished on the VyOS 1.4 Sagitta (1.4.1) board.

Jul 14 2024, 7:38 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

dmbaturin created T6581: Missing completion for `show firewall <ipv4|ipv6> name <name> rule` commands.

Jul 14 2024, 2:11 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

c-po added a subtask for T6577: op-mode: create generic service restart helper to work with the API: T6576: op-mode: ntp: add support for NTP service restart via CLI.

Jul 14 2024, 8:22 AM · VyOS Rolling, VyOS 1.5 Circinus

c-po added a parent task for T6576: op-mode: ntp: add support for NTP service restart via CLI: T6577: op-mode: create generic service restart helper to work with the API.

Jul 14 2024, 8:22 AM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po created T6577: op-mode: create generic service restart helper to work with the API.

Jul 14 2024, 8:22 AM · VyOS Rolling, VyOS 1.5 Circinus

vyosbot placed T6239: command/parameter to configure the vlan priority 0-7 on vif or vif-c+vif-s up for grabs.

Jul 14 2024, 6:01 AM · Restricted Project, VyOS Rolling

Jul 13 2024

c-po added a comment to T6576: op-mode: ntp: add support for NTP service restart via CLI.

https://github.com/vyos/vyos-1x/pull/3810

Jul 13 2024, 7:23 PM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po changed the status of T6576: op-mode: ntp: add support for NTP service restart via CLI from Open to In progress.

Jul 13 2024, 7:22 PM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po created T6576: op-mode: ntp: add support for NTP service restart via CLI.

Jul 13 2024, 7:22 PM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po created T6575: op-mode: ntp: add support for NTP service restart via CLI.

Jul 13 2024, 7:21 PM · VyOS Rolling, VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po added a comment to T5797: MSS Clamping Not Applied to VRF Interface from MPLS Cloud.

In T5797#195193, @marekm wrote:

Hmmm... nothing before today in this task seems related to ddclient at all, isn't this task referenced by mistake?
BTW, does anyone know what happened that Debian un-released ddcilent 3.10.0-3 (reverted to 3.10.0-2.1)?

Jul 13 2024, 3:08 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS 1.4 Sagitta (1.4.4), VyOS Rolling

Jul 12 2024

ServerForge created T6573: Add CLI for FRR BGP Input/Output Queue limits.

Jul 12 2024, 10:34 PM · VyOS Rolling

marekm added a comment to T5797: MSS Clamping Not Applied to VRF Interface from MPLS Cloud.

Hmmm... nothing before today in this task seems related to ddclient at all, isn't this task referenced by mistake?
BTW, does anyone know what happened that Debian un-released ddcilent 3.10.0-3 (reverted to 3.10.0-2.1)?

Jul 12 2024, 10:23 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS 1.4 Sagitta (1.4.4), VyOS Rolling

c-po moved T6566: op-mode: "monitor bandwidth" add support for listing all interfaces concurrently from Backlog to In Progress on the VyOS 1.4 Sagitta (1.4.1) board.

Jul 12 2024, 6:57 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

c-po moved T6566: op-mode: "monitor bandwidth" add support for listing all interfaces concurrently from Open to Finished on the VyOS 1.5 Circinus board.

Jul 12 2024, 6:57 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

SrividyaA claimed T6571: OpenVPN: Rename the CLI node option "ncp-ciphers" to "data-ciphers".

Jul 12 2024, 5:32 PM · VyOS 1.5 Circinus

natali-rs1985 claimed T6571: OpenVPN: Rename the CLI node option "ncp-ciphers" to "data-ciphers".

Jul 12 2024, 4:02 PM · VyOS 1.5 Circinus

SrividyaA created T6571: OpenVPN: Rename the CLI node option "ncp-ciphers" to "data-ciphers".

Jul 12 2024, 2:43 PM · VyOS 1.5 Circinus

n.fort changed the status of T6570: Firewall bridge allways passes traffic to IP layer from Open to Confirmed.

Jul 12 2024, 12:13 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

n.fort created T6570: Firewall bridge allways passes traffic to IP layer.

Jul 12 2024, 12:13 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling

SrividyaA added a comment to T6545: OpenVPN CLI mistakenly has "none" as an ncp-cipher option.

@Viacheslav, Thank you for the hint. After further analysis, these are the findings from the tests done in the lab running 1.4.0 version on both sides with server/client setup.

Jul 12 2024, 12:02 PM · Restricted Project, VyOS Rolling, Bugs

Viacheslav added a comment to T4945: Telegraf- allow the plugin to run custom-script.

@fernando Any idea for CLI?

Jul 12 2024, 7:03 AM · VyOS Rolling

vyosbot placed T2554: Failsafe reboot timer up for grabs.

Jul 12 2024, 6:02 AM · VyOS 1.4 Sagitta (1.4.0)

vyosbot placed T3224: Implement 'feasible' RPF up for grabs.

Jul 12 2024, 6:02 AM · VyOS Rolling, VyOS 1.5 Circinus

vyosbot placed T200: Automated config deployment from a removable drive at installation time up for grabs.

Jul 12 2024, 6:02 AM · Ideas

vyosbot placed T4190: Add commit comment to the configuration API. up for grabs.

Jul 12 2024, 6:02 AM

vyosbot placed T3109: Add a disable option to the WAN load balancing rules up for grabs.

Jul 12 2024, 6:02 AM · VyOS Rolling

vyosbot placed T3973: Feature Request: Multicast ping. Change TTL in Echo-reply from VyOS up for grabs.

Jul 12 2024, 6:02 AM · Restricted Project, VyOS Rolling

vyosbot placed T5390: VyOS public/private Swarm up for grabs.

Jul 12 2024, 6:02 AM

vyosbot placed T3096: Add a build option to disallow live CD boot up for grabs.

Jul 12 2024, 6:02 AM · VyOS Rolling

vyosbot placed T4599: run vyos in lxc/lxd up for grabs.

Jul 12 2024, 6:02 AM

vyosbot placed T4945: Telegraf- allow the plugin to run custom-script up for grabs.

Jul 12 2024, 6:02 AM · VyOS Rolling

vyosbot placed T5391: Swarm Service up for grabs.

Jul 12 2024, 6:02 AM

vyosbot placed T5392: Swarm consent PoC up for grabs.

Jul 12 2024, 6:02 AM

vyosbot placed T5395: Swarm discovery PoC up for grabs.

Jul 12 2024, 6:02 AM

vyosbot placed T5393: Swarm Service VyOS configuration and tooling up for grabs.

Jul 12 2024, 6:02 AM

vyosbot placed T5394: Swarm node evolution PoC up for grabs.

Jul 12 2024, 6:02 AM

vyosbot placed T5396: Swarm Client up for grabs.

Jul 12 2024, 6:02 AM

vyosbot placed T5657: Add VRF support for zabbix-agent up for grabs.

Jul 12 2024, 6:02 AM · VyOS Rolling

vyosbot placed T5569: Make it possible to verify the signature of an installed image up for grabs.

Jul 12 2024, 6:02 AM · VyOS Rolling

vyosbot placed T4406: Make an API endpoint for for anonymous host info retrieval (e.g. by a login page) up for grabs.

Jul 12 2024, 6:02 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling, Restricted Project

vyosbot placed T4914: Rewrite the PKI op mode in the new style up for grabs.

Jul 12 2024, 6:02 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q4), VyOS Rolling

vyosbot placed T5263: Generalization of REST configure endpoint up for grabs.

Jul 12 2024, 6:02 AM · VyOS 1.4 Sagitta

Jul 11 2024

jestabro added a comment to T6559: vyos-configd should return commit error on config dependency error.

The solution sketched above will be handled in subtask T6569; in this task we will revert to using only the local redundancy removal in order to provide per-script error reporting.

Jul 11 2024, 5:21 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

jestabro removed a subtask for T5731: Add ability to call config dependencies by canonical function instead of whole script: T6559: vyos-configd should return commit error on config dependency error.

Jul 11 2024, 5:18 PM · VyOS Rolling

jestabro removed a parent task for T6559: vyos-configd should return commit error on config dependency error: T5731: Add ability to call config dependencies by canonical function instead of whole script.

Jul 11 2024, 5:18 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

jestabro added a subtask for T5731: Add ability to call config dependencies by canonical function instead of whole script: T6569: Cache results of config script stages under configd, for use by configdep.

Jul 11 2024, 5:18 PM · VyOS Rolling

jestabro added a subtask for T6559: vyos-configd should return commit error on config dependency error: T6569: Cache results of config script stages under configd, for use by configdep.

Jul 11 2024, 5:18 PM · VyOS 1.4 Sagitta (1.4.1), VyOS 1.5 Circinus

jestabro added parent tasks for T6569: Cache results of config script stages under configd, for use by configdep: T6559: vyos-configd should return commit error on config dependency error, T5731: Add ability to call config dependencies by canonical function instead of whole script.

Jul 11 2024, 5:18 PM · VyOS Rolling

jestabro created T6569: Cache results of config script stages under configd, for use by configdep.