Note that if the version of HAProxy used in Vyos is upgraded to version 2.8 or later (as proposed in T7142), then HTTP/2 is enabled by default and this task can be closed as "overcome by events".
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Apr 1 2025
Apr 1 2025
HAProxy documentation for this:
I was looking into backporting it myself lately, at a glance your approach seems correct. I'll look deeper into it.
Mar 31 2025
Mar 31 2025
Just gonna bump this again. Would be great to see support for this as it would be super helpful for complex architecture-based netboot configurations.
zsdc added a comment to T7299: pki: race condition for acme requested certificates - CA auto import only on the second run.
The current fix is necessary, but it's not complete.
jestabro renamed T7302: Implement commit dry-run for vyconfd/vyos-commitd from Implemen commit dry-run for vyconfd to Implement commit dry-run for vyconfd/vyos-commitd.
The above linked PR is ready for review by a maintainer. I've tried to cherry-pick only the most relevant commits from the upstream. The build was tested in the vyos-build container (as modified in https://vyos.dev/T7300) after each commit and the overall authentication flow was tested once as described in the PR.
@MPStudyly Well, it's open-source, so anyone can remove the banner by editing the script. The intention of the banner is simply to explain that rolling release and stream builds offer no stability guarantees.
Regarding the failure of the PR integration tests, this may have been a result of a typo, now corrected in rolling here:
https://github.com/vyos/vyos-1x/pull/4425
or an inconsistent github action (I will check that).
GitHub <[email protected]> committed rVYOSONEXbc86b5750033: Merge pull request #4420 from c-po/veth-mtu (authored by c-po).
GitHub <[email protected]> committed rVYOSONEXa6ff1933a99a: Merge pull request #4424 from c-po/acme-race-T7299 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX5ec0a28f6b5b: Merge pull request #4425 from jestabro/submod-typo (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX1e7e1c53afc8: Merge pull request #4426 from jestabro/restrict-opam-package-version (authored by c-po).
jestabro moved T7294: image upgrade will replace symlinks with a copy from Open to Finished on the VyOS 1.4 Sagitta board.
jestabro moved T7294: image upgrade will replace symlinks with a copy from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav added a comment to T7297: FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes.
SUMMARY:
working versions:
7.5.1-20240509-02-gc9dd2977e 8.0.1
Not working:
8.1 8.2.2 8.3-2 9+ 10+
Mar 30 2025
Mar 30 2025
c-po renamed T7122: PKI: Unable to switch from custom cert to ACME when haproxy service is running with 'redirect-http-to-https' option from PKI: Unable to switch from custom cert to ACME when haproxy service is running to PKI: Unable to switch from custom cert to ACME when haproxy service is running with 'redirect-http-to-https' option.
also failed in PR
c-po updated the task description for T7299: pki: race condition for acme requested certificates - CA auto import only on the second run.
c-po changed the status of T7299: pki: race condition for acme requested certificates - CA auto import only on the second run, a subtask of T6481: Auto import Lets Encrypt root CA while using pki certificate acme, from Open to In progress.
c-po changed the status of T7299: pki: race condition for acme requested certificates - CA auto import only on the second run from Open to In progress.
Using relative url in .gitmodules will get forked repos difficult to build if not modify .gitmodules manually.
I looked through some Debian and Ubuntu ISOs and didn't notice dropbear installed in the live image. It's likely we are mostly susceptible to this because the live image is used as a loopback mount during normal installation. Many other Debian-based systems would be debootstrapped onto the host.
Mar 29 2025
Mar 29 2025
GitHub <[email protected]> committed rVYOSONEX79b357a4afc6: Merge pull request #4417 from jestabro/submod-libvyosconfig (authored by jestabro).
c-po changed the status of T4627: Ability to set host part IPv6 address via interface ip token from Open to In progress.
c-po moved T7270: syslog: typos in rsyslog.conf from Need Triage to Completed on the VyOS Rolling board.
GitHub <[email protected]> committed rVYOSONEXa2563828340f: Merge pull request #4409 from woodsb02/patch-2 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX55abc8214574: Merge pull request #4416 from sever-sever/T7286 (authored by c-po).
Viacheslav renamed T7297: FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes from FRR 9.1.x does not redistribute OSPF kernel table x routes to FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes.
kumvijaya <[email protected]> committed rVYOSONEX713dd52f98a0: T7291: disabled codeowners review.
GitHub <[email protected]> committed rVYOSONEX3306de1c8938: Merge pull request #4418 from kumvijaya/current (authored by c-po).
Viacheslav triaged T7295: ACME certificate updates fail due to missing timezone info as High priority.
Viacheslav updated the task description for T7297: FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes.
GitHub <[email protected]> committed rVYOSONEXd22dd8325c57: Merge pull request #4423 from jestabro/preserve-symlinks (authored by c-po).
Viacheslav triaged T7297: FRR 9.1.x 10.2.x does not redistribute OSPF kernel table x routes as Normal priority.
Mar 28 2025
Mar 28 2025
GitHub <[email protected]> committed rVYOSONEX53a7d9b6cb2f: Merge pull request #4421 from dmbaturin/T7295-tzdata-dependency (authored by dmbaturin).
c-po edited projects for T7293: virtual-ethernet interface vif MTU does not work, added: VyOS 1.4 Sagitta (1.4.3); removed VyOS 1.4 Sagitta (1.4.0).
c-po changed the status of T7293: virtual-ethernet interface vif MTU does not work from Open to In progress.
sajiby3k renamed T7293: virtual-ethernet interface vif MTU does not work from Virtual-Interface vif mtu does not work to Virtual-ethernet Interface vif mtu does not work.
c-po moved T7249: certbot: When using ACME certificates, consuming daemons are not reloaded on update from Open to Finished on the VyOS 1.5 Circinus board.
jestabro closed T6946: Add initial commit algorithm to vyconf, a subtask of T6718: Use vyconf daemon for validation of set commands, as Resolved.
jestabro added a parent task for T7121: Set up communication vyconfd <-> vyos-configd: T6946: Add initial commit algorithm to vyconf.
Viacheslav moved T7278: Impossible to create users from Need Triage to Completed on the VyOS Rolling board.