In T379#7550, @dmbaturin wrote:

And now that I've actually looked into it... ;)

There are some bad practices that I think should be changed before we call it complete as well.

First, now that the Python configuration library and the templates convertor work, can we stop adding new Perl code? Those scripts are short at least.
There are some very good reasons to do that as well. For example, now that we are using systemd, why should we have start-stop-daemon? We should never had it right in Perl code to begin with.
Second, I'm strongly against mixing VyOS configuration code with applications it configures. Let's move that out of this, and if we are going to move the configuration code to vyos-1x package, it will come naturally. We can merge the bcast-relay and mDNS repeater into one package perhaps.

The features are appreciated, but let's add them in a fashion that will make VyOS easier to maintain, not harder.

merged to lithium

@syncer can we close this task? see @higebu fix..

falso fixed in 1.1.8

changes cherry-picked to lithium branch

Is it possible to do an strace of the snmp process?

@c-po https://github.com/vyos/vyos-cfg-avahi.git is created, and ci integration is also done.

https://github.com/vyos/vyatta-cfg-system/commit/2f3ec2cd1f5ec543abb8fc46c5ab606ebe8edcdc
https://github.com/vyos/vyos-build/commit/53bd0ad27836eee5be5caee0f34d15205800a510

https://github.com/vyos/vyos-build/commit/51e4718ed2d77fcad6448fd09814e8e3272f10b4

could you please confirm if it is working for you in the latest buid (starting from 26 juli) http://dev.packages.vyos.net/iso/current/amd64/

The commands are in the packages, mostly if not all in the templates folder:

set interfaces tunnel tun0 parameters ip bridge-group bridge br0

is already merged : https://github.com/vyos/vyatta-cfg-dhcp-server/pull/10

Can You please elaborate on this, or create an example?

update squidguard package in 1.2

Do previously nightly images work?
is the boot order correct? (probably is)

you should download it (wget) an do a sudo dpkg -i of the package.
you can do a dpkg -l to check which snmp packages are installed.
this is the location of the 1.7 packages.
http://dev.packages.vyos.net/tmp/khagen/snmp/

@syncer Yes, the package is for 1.1.7

done and tested! ( was a merge request)
https://github.com/vyos/vyatta-cfg-system/commit/dcf69cdf83dd215c66bed0a22166619e78ff1b67

exit 1 if prefix already exists so it gets not put in config.
https://github.com/vyos/vyatta-cfg-quagga/commit/888c927fc526b112da3b94d8edc73fa50a24988b

fix for 1.2:
https://github.com/vyos/vyos-kernel/commit/31097c58bc2674bd5f0be5a6d08678af8fcedfa5

fix for 1.2:
https://github.com/vyos/vyos-kernel/commit/31097c58bc2674bd5f0be5a6d08678af8fcedfa5

@Boltsie It should be fixed in this iso: http://dev.packages.vyos.net/iso/current/amd64/vyos-999.201704290958-amd64.iso and next to follow.
Could you please test if this fixes it for you?

Damn!

https://github.com/vyos/vyatta-cfg/commit/3b8b2e11f322994cfa82fc6b09ce6af4ed715dfa
used 10MB for size and 6 rotates, for embedded devices and space...

This was done:
https://github.com/vyos/vyatta-op/commit/76822101f04681402df67fcb194e8c0fdd71c96d

:)

note: maybe i can find something usefull in this commit:
https://github.com/vyos/vyatta-cfg-system/commit/4a92157b9e077514fdbf5845169323ed7370bedb

https://github.com/vyos/vyatta-cfg-system/commit/84a94fd063c27c60f1cdd8902b549d375c02ceb7

https://github.com/vyos/vyatta-cfg-vpn/commit/876cb466c7256973917dc56f81f08bf8364b900d

This is a Debian upstream package, the bug will be fixed when we move to sarge.

add the key:
https://github.com/vyos/vyatta-cfg-system/commit/84a94fd063c27c60f1cdd8902b549d375c02ceb7

@MustDie did you try 1.1.7 ?

for now it is set to fixed speed.
please close if agreed on this.
https://github.com/vyos/vyatta-cfg-system/commit/d582bbaf3ad95566de9b90d1572d60e39936a1a7

snmp is fixed!
https://github.com/vyos/vyos-replace/commit/53fcb00d65e248eb6a74ce5b93a5314c7362cd9f
https://github.com/vyos/vyatta-cfg-system/commit/cec74f1820271384f9b6554114bf2db7648723bd

I will mark this as 'Resolved' i have seen your chat... thanks

I have replaced this with a openssl command to generate the new key.
https://github.com/vyos/vyatta-op-vpn/commit/9608b691012160836fd0fdcc1c8f9357d89c4de1

For now they are working again.

I heard there will come a new server available to run jenkins on, i have to wait until i have more information.

Please see https://phabricator.vyos.net/T220

Nightly builds are working again, need to fix web hooks next.

The issue is that strongswan in 1.1.7 when configures as ikev1 wil use default dh groups (modp1024 and modp1536).
Vyos 1.2 does not use default dh groups, so if you want this config to work you have to set dh group in your "ike-group IKE-YYYY proposal"
(modp1024 or modp1536 if you leave your proposal in 1.1.7 empty).

I tested your config, and it works for me (between vyos 1.1.7 and 1.2)
Also can you Please open an new task for this, this is different than the above issue.

If i test your config the okey gets set for me, this is also the same as in 1.1.7..
Does the okey get set for you correctly, and what are the troubles you are having?

what is the config?

Pluto has changed to charon.

https://github.com/vyos/vyatta-op-vpn/commit/8a80669f305983de512466e3e2bad0924d7f37a0

This is the fix for the config issue...

https://github.com/vyos/vyatta-cfg-quagga/commit/2b1b825268f0f87f60b2a2c4fba372d3c70a2660

Solution taken from this commit:
https://anonscm.debian.org/cgit/pkg-ssh/openssh.git/commit/?h=debian/7.2p2-6&id=b66f1de1c94fcf912b3a1bc0cd73c3b73cdae8a1

As it is now it can not break the config, that is why "wontfix".
If we block it then configs that have non existent interfaces in them (due to breakage or removed and forgot to remove from dns forwarding) will fail at boot.

I see no reference to all lowercase squidguard.conf at all in the source???

persistent net rules is not used in vyos? where do you get that from?
it uses hw-id from config file.

https://github.com/vyos/vyatta-vrrp/commit/86a3e32d367c6936fe424d6aace06ea7262f4300

to what version did you upgrade? (vyos) squeeze 1.7 or debian jessie?

/opt/vyatta/sbin/vyos-persistpath Is used for an other type of install, not for add system image.

It actually looks worse than it is!
The first message is a pain in the ass :( it is live boot trying to find persistence.. it should not be verbose, but somehow it is.

These should be gone now.

https://github.com/vyos/vyatta-cfg-system/commit/b66cc78521db17628efa3dd27766527816c170cc

Makes code simpler and easier to read. Makes kernel a bit smaller (leave out floppy module)
Makes booting a little bit faster.

For kernel 4.4 yes,

Here i have put the info for the clearfog.

@syncer How can i help with the clearfog?

Do we even use this package?

Packages are rebuild, can you please retry?

Awsome!!

why do you use /32 as for your ip for wan? if you use /32 zebra can not set route.

updated package name to iproute2
created dummy package iproute
changed depends for vyatta/vyos packages to iproute2

@higebu I think the build process picks the debian jessie upstream version over our version, I'll dive in to this

https://github.com/vyos/vyatta-iproute/commit/1f6e71a2b12599ba6c1f53c1e75a6cc036b2a0ac

https://github.com/vyos/vyatta-quagga/commit/d9823008822c536dcd995a9d3c9ca444b85a66be
https://github.com/vyos/vyatta-quagga/commit/f58e94cb1c452faadb4dd86e347fd1945eee408d
https://github.com/vyos/vyatta-quagga/commit/d0d6f926cd7c842cd1818bacd469e91874ec5605

@Boltsie 'show dhcp client leases' should also be fixed in builds, for fast local testing remove /etc/dhcp/dhclient-exit-hooks.d/ddclient