Feed Advanced Search

Tue, Feb 20

dmbaturin closed T7: Repository layout revamp as Resolved.

Done for all practical purposes. Everything else will deserve its own task.

Tue, Feb 20, 5:23 AM · VyOS 1.2.x
dmbaturin closed T272: Add op mode command for generating remote side VPN configs as Resolved.

It's done for OpenVPN. We can later add IPsec as a sub-task.

Tue, Feb 20, 5:22 AM · VyOS 1.2.x
dmbaturin closed T392: Add support for missing tags to the interface definitions converter as Resolved.
Tue, Feb 20, 5:21 AM · VyOS 1.2.x
dmbaturin closed T394: Add vyos_*dir copies of vyatta_*dir environment variables as Resolved.
Tue, Feb 20, 5:21 AM · VyOS 1.2.x

Mon, Feb 19

dmbaturin closed T552: journald logs do not appear in the "show log" output as Resolved by committing Restricted Diffusion Commit.
Mon, Feb 19, 3:29 PM · VyOS 1.2.x
dmbaturin created T552: journald logs do not appear in the "show log" output.
Mon, Feb 19, 1:53 PM · VyOS 1.2.x
dmbaturin created T551: IPsec logs do not appear in the system log.
Mon, Feb 19, 1:29 PM · VyOS 1.2.x

Wed, Feb 7

dmbaturin added a comment to T452: WiFi: Enable support for 5GHz AccesPoints with DFS.

It will have to be refactored for the new vyos-1x approach, but then the entire package will, so we'll better have the .ac support now, and refactor later.

Wed, Feb 7, 6:53 PM · VyOS 1.2.x, VyOS 1.3.x
dmbaturin added a comment to T529: Create op command to set regulatory domain.
  1. A nicer version of os.system('iw reg get')

This makes me think we should make a shared nicer version that returns a tuple of exit code and combined stdout/stderr and put it somewhere in a utility module.

Wed, Feb 7, 6:48 PM · VyOS 1.2.x, VyOS 1.3.x

Tue, Feb 6

dmbaturin added a comment to T537: A frank conversation about Debian LTS.

@tic226 If we continue the chemical theme, since 1.1.x is helium, 1.2.x will be lithium, and 1.3.x will be beryllium.

Tue, Feb 6, 1:44 PM · Restricted Project

Jan 12 2018

dmbaturin created T520: Build scripts should use a load balanced Debian mirror.
Jan 12 2018, 4:01 AM · VyOS 1.2.x

Jan 11 2018

dmbaturin closed T519: Make vyos package mirror configurable in build scripts as Resolved.
Jan 11 2018, 6:51 AM · VyOS 1.2.x
dmbaturin added a comment to T422: Packages server and downloads should be available via HTTPS.

The downloads.vyos.io is now using mandatory HTTPS. On the dev.packages.vyos.net, HTTPS is optional. To declare this closed, we need someone to independently verify that ISO build works with HTTPS for them.

Jan 11 2018, 6:01 AM · Infrastructure
dmbaturin created T519: Make vyos package mirror configurable in build scripts.
Jan 11 2018, 5:12 AM · VyOS 1.2.x

Jan 2 2018

dmbaturin added a comment to T452: WiFi: Enable support for 5GHz AccesPoints with DFS.

Hey everyone,

Jan 2 2018, 1:23 PM · VyOS 1.2.x, VyOS 1.3.x

Dec 21 2017

dmbaturin added a comment to T500: arp_filter blocks ARPs for VRRP virtual addresses in 1.2.x.

I'll check, meanwhile, could you verify that you still see this issue in the latest build?

Dec 21 2017, 2:34 PM · VyOS 1.2.x

Dec 14 2017

dmbaturin added Q117: Instructions to build VyOS 1.2 from sources with frr (Answer 168).
Dec 14 2017, 9:12 AM

Dec 6 2017

dmbaturin added a comment to T428: Current 1.1.7 AMI doesn't fetch SSH public key from the EC2 environment.

@begetan Does creating it with one interface first work for you?
Also, I still need the show version output from the running instance (complete with S/N and UUID) to see if it's the same issue or a different one.

Dec 6 2017, 6:33 PM · VyOS 1.1.x (1.1.8)
dmbaturin added a comment to T428: Current 1.1.7 AMI doesn't fetch SSH public key from the EC2 environment.

@begetan It is the same build that the marketplace team at AWS distributes to all regions. I've just made an instance in Frankfurt and it worked for me.

Dec 6 2017, 2:43 PM · VyOS 1.1.x (1.1.8)

Dec 3 2017

dmbaturin added a comment to T484: Rules can't be deleted from firewall rule sets used in zone policies.

I appreciate your work! Could you make the patch easier for us to merge and then to track for release and changelog?
Here's the proper procedure for making patches: https://wiki.vyos.net/wiki/Submit_a_patch

Dec 3 2017, 12:48 PM · VyOS 1.2.x

Dec 1 2017

dmbaturin added a comment to T306: Migration from vyatta-quagga to FRR.

@aopdal I suppose 1.2.0 will stick with quagga, though if we are able to weed out all issues with FRR in reasonable timeframe, perhaps we can attempt migration to FRR in 1.2.0 rather than a release after it.

Dec 1 2017, 4:01 AM · vyos-frr, VyOS 1.2.x

Nov 29 2017

navoyhto awarded Main page a Like token.
Nov 29 2017, 9:17 AM

Nov 15 2017

dmbaturin assigned T463: Nightly builds on jessie64 host hang at cloning the git repo to UnicronNL.
Nov 15 2017, 7:52 AM · Infrastructure
dmbaturin created T463: Nightly builds on jessie64 host hang at cloning the git repo.
Nov 15 2017, 7:51 AM · Infrastructure
dmbaturin claimed T460: VRRP transition scripts no longer get executed.
Nov 15 2017, 7:41 AM · VyOS 1.2.x
dmbaturin updated subscribers of T460: VRRP transition scripts no longer get executed.
Nov 15 2017, 7:40 AM · VyOS 1.2.x
dmbaturin created T462: Make sure automatically run scripts are executed with vyattacfg GID.
Nov 15 2017, 7:38 AM · VyOS 1.2.x
dmbaturin created T460: VRRP transition scripts no longer get executed.
Nov 15 2017, 7:32 AM · VyOS 1.2.x
dmbaturin added a comment to T459: VRRP not working..

It works for me. We need more details of your setup and your config to tell anything.

Nov 15 2017, 6:01 AM · VyOS 1.1.x (1.1.9)

Nov 14 2017

dmbaturin added a comment to T456: lldpd is broken on 1.1.8.

The lldpd package had really insufficient dependencies, it didn't even list libssl. This is why it wasn't rebuilt, we used apt-cache rdepend to find the packages that depend on libssl0.9.8, and due to missing dependencies this one didn't show up.

Nov 14 2017, 3:46 PM · VyOS 1.1.x (1.1.9)

Nov 13 2017

dmbaturin closed T410: dnsmasq in 1.1.x is outdated and vulnerable to many CVEs as Resolved.
Nov 13 2017, 8:56 AM · VyOS 1.1.x (1.1.8), VyOS 1.2.x
dmbaturin triaged T445: iptables error with policy routing as High priority.

I could reproduce the bug. This doesn't appear to be an easy fix though.

Nov 13 2017, 8:50 AM · VyOS 1.2.x
dmbaturin closed T444: Removing an L2TPv3 interface causes an iproute2 error output to appear as Resolved.
Nov 13 2017, 8:24 AM · VyOS 1.1.x (1.1.8)

Nov 11 2017

dmbaturin added a comment to T450: data processing.

Well, it *is* a stupid SEO thing. This person created two seemingly valid (even if irrelevant) tasks that include a link to some website unrelated to the task content. I think we should block @jensenbreck right away.

Nov 11 2017, 12:47 PM

Nov 10 2017

dmbaturin closed T449: Commit fails if OpenVPN is setup in server mode and there are clients with fixed IP addresses as Resolved.
Nov 10 2017, 4:20 PM · VyOS 1.1.x
dmbaturin added a comment to T426: CVE-2017-13077 - Update wpa_supplicant.

I've done pkg-release in that package to include the latest commits into debian changelog and update the package version (helium4 now).

Nov 10 2017, 1:17 PM · wpa, VyOS 1.2.x
dmbaturin added a comment to T449: Commit fails if OpenVPN is setup in server mode and there are clients with fixed IP addresses.

The issue was with variable scoping, the variable for server subnet that was supposed to be global was instead updated in the local scope.

Nov 10 2017, 5:11 AM · VyOS 1.1.x
dmbaturin created T449: Commit fails if OpenVPN is setup in server mode and there are clients with fixed IP addresses.
Nov 10 2017, 4:10 AM · VyOS 1.1.x

Nov 9 2017

dmbaturin added a comment to T426: CVE-2017-13077 - Update wpa_supplicant.

@UnicronNL Just to make sure, the package included in helium now is also patched?

Nov 9 2017, 3:53 PM · wpa, VyOS 1.2.x

Nov 4 2017

dmbaturin created T444: Removing an L2TPv3 interface causes an iproute2 error output to appear.
Nov 4 2017, 3:05 AM · VyOS 1.1.x (1.1.8)

Nov 2 2017

dmbaturin closed T435: Cannot create vif interface attached to bridge group as Resolved.
Nov 2 2017, 3:42 PM · VyOS 1.1.x (1.1.8)
dmbaturin added a comment to T438: System option "Send anonymous system statistic to VyOS maintainers" broken.

@c-po I agree. By now I have a way better prototype of that thing than the original. I'll make a task about it.

Nov 2 2017, 3:41 PM · VyOS 1.2.x

Nov 1 2017

dmbaturin added a comment to T442: Allow more than one loopback interface..

If you want multiple interfaces with the same properties as the loopback, use dummy interfaces.

Nov 1 2017, 4:59 PM · VyOS 1.1.x
dmbaturin created T441: Enable VyOS images to build with FRR instead of vyatta-quagga.
Nov 1 2017, 3:03 PM · vyos-frr, VyOS 1.2.x

Oct 30 2017

dmbaturin reopened T435: Cannot create vif interface attached to bridge group as "In progress".

@S3m1r6 Could you test this image? http://dev.packages.vyos.net/iso/testing/vyos-1.1.8-rc2-amd64.iso I tested loading a config similar to yours (with ingress/egress QoS values added to make sure they get processed) and it works for me.

Oct 30 2017, 7:03 PM · VyOS 1.1.x (1.1.8)
dmbaturin reopened T435: Cannot create vif interface attached to bridge group as "Open".

Not resolved yet. ;)

Oct 30 2017, 4:06 PM · VyOS 1.1.x (1.1.8)

Oct 27 2017

dmbaturin claimed T435: Cannot create vif interface attached to bridge group.
Oct 27 2017, 8:45 PM · VyOS 1.1.x (1.1.8)

Oct 26 2017

dmbaturin created T433: Add "effective" observers and inSession to the vyos.config library.
Oct 26 2017, 10:46 AM · VyOS 1.2.x

Oct 24 2017

dmbaturin created T431: Protocol negation in NAT is not handled correctly.
Oct 24 2017, 6:54 PM · VyOS 1.2.x, VyOS 1.1.x (1.1.8)

Oct 21 2017

dmbaturin added a comment to T428: Current 1.1.7 AMI doesn't fetch SSH public key from the EC2 environment.

An AMI updated by hand was submitted to Amazon for testing.

Oct 21 2017, 11:47 AM · VyOS 1.1.x (1.1.8)
dmbaturin created T428: Current 1.1.7 AMI doesn't fetch SSH public key from the EC2 environment.
Oct 21 2017, 11:47 AM · VyOS 1.1.x (1.1.8)

Oct 16 2017

dmbaturin added a comment to T142: DSA-3659-1.

Thanks, I'm looking at it now.

Oct 16 2017, 9:24 AM · VyOS 1.2.x, VyOS 1.1.x (1.1.8)

Oct 12 2017

dmbaturin created T423: No completion for uncommited IKE and ESP groups.
Oct 12 2017, 11:32 PM · VyOS 1.2.x (VyOS 1.2.0 LTS Lithium), VyOS 1.1.x (1.1.8)
dmbaturin added a comment to T417: Allow bonding non-ethernet interfaces.

The only remotely sensible use case I can see is active/standby bonding of L2 VPNs to provide redundant paths. But then again, the real answer to this is distributed switches such as openvswitch.

Oct 12 2017, 9:57 PM · VyOS 1.2.x
dmbaturin added a comment to T87: VTI interface and BGP update-source bug.

BGP configuration is definitely loaded after VTI configuration is loaded.

Oct 12 2017, 9:32 PM · VyOS 1.1.x (1.1.9), VyOS 1.2.x
dmbaturin closed T199: openVPN client/server bridge : need to specify server subnet. as Resolved.

Fixed in both 1.1.8 and current.

Oct 12 2017, 6:18 AM · VyOS 1.2.x, VyOS 1.1.x (1.1.8)
dmbaturin renamed T198: l2tpv3 instance not reconfigured when changing session-id or tunnel-id parameters from l2tpv3 instance not reconfigured when changing parameters to l2tpv3 instance not reconfigured when changing session-id or tunnel-id parameters .
Oct 12 2017, 5:53 AM · VyOS 1.1.x (1.1.8)
dmbaturin closed T198: l2tpv3 instance not reconfigured when changing session-id or tunnel-id parameters as Resolved.

Well spotted! Fixed the typos.

Oct 12 2017, 5:51 AM · VyOS 1.1.x (1.1.8)
dmbaturin added a comment to T373: incorporate cloud-init development into main project.

Should we add it to 1.1.8? It's a pretty big change, I'm not sure if it should be in a maintenance rather than a major release.

Oct 12 2017, 5:38 AM · VyOS 1.2.x
dmbaturin closed T204: Merge fix for clustering bug "vyatta-cluster: wait for link up on clustering for up to 10 seconds" in 1.1.8 as Resolved.

The commit is indeed in helium now.

Oct 12 2017, 5:36 AM · VyOS 1.1.x (1.1.8)
dmbaturin closed T64: Add support for named {,extended} community-lists as Resolved.

Imported it to 1.1.8: https://github.com/vyos/vyatta-cfg-quagga/commit/973afef2f599538ccda19a2befcf16e6730eaad2

Oct 12 2017, 5:32 AM · VyOS 1.1.x (1.1.8)
dmbaturin closed T202: Cannot apply qos to l2tpv3 and dummy links as Resolved.

That commit was in helium as well, but the real issue was in the debian install file: those paths were missing from it, so templates were generated but not included in the package.

Oct 12 2017, 5:30 AM · VyOS 1.2.x, VyOS 1.1.x (1.1.8)
dmbaturin renamed T202: Cannot apply qos to l2tpv3 and dummy links from Cannot apply qos to l2tpv3 links to Cannot apply qos to l2tpv3 and dummy links.
Oct 12 2017, 5:27 AM · VyOS 1.2.x, VyOS 1.1.x (1.1.8)
dmbaturin closed T191: Add route-map set as-path exclude option as Resolved.

Imported into 1.1.8

Oct 12 2017, 5:18 AM · VyOS 1.1.x (1.1.8)

Oct 10 2017

dmbaturin added Q112: Can we please get a mapping, or redirects, from Bugzilla to Phabricator? (Answer 155).
Oct 10 2017, 9:56 PM

Oct 4 2017

dmbaturin created T412: Add rsync to the list of squid safe ports.
Oct 4 2017, 7:42 AM · VyOS 1.2.x
dmbaturin created T411: Squid is not functional due to legacy config statements that are no longer working in Squid3.
Oct 4 2017, 7:40 AM · VyOS 1.2.x

Oct 3 2017

dmbaturin added a comment to T354: Outstanding CVEs - StrongSwan.

@UnicronNL The debian repo for helium is here: http://dev.packages.vyos.net/legacy/repos/debian/helium/

Oct 3 2017, 7:39 PM · vyatta-strongswan, VyOS 1.1.x (1.1.8)

Oct 2 2017

dmbaturin added a comment to T408: Improve the AMI build scripts.

Fixed 1, 2, and 3.

Oct 2 2017, 8:59 PM · AWS Support, VyOS 1.1.x, build-ami, VyOS 1.2.x
dmbaturin updated the task description for T408: Improve the AMI build scripts.
Oct 2 2017, 8:25 PM · AWS Support, VyOS 1.1.x, build-ami, VyOS 1.2.x
dmbaturin updated the task description for T408: Improve the AMI build scripts.
Oct 2 2017, 8:23 PM · AWS Support, VyOS 1.1.x, build-ami, VyOS 1.2.x
dmbaturin updated the task description for T408: Improve the AMI build scripts.
Oct 2 2017, 8:16 PM · AWS Support, VyOS 1.1.x, build-ami, VyOS 1.2.x
dmbaturin created T408: Improve the AMI build scripts.
Oct 2 2017, 8:15 PM · AWS Support, VyOS 1.1.x, build-ami, VyOS 1.2.x

Sep 20 2017

dmbaturin created T401: Add functions for reading VyOS version data.
Sep 20 2017, 10:44 PM · VyOS 1.2.x

Sep 16 2017

dmbaturin closed T396: Add support for value constraint tags to the build-command-templates script as Resolved.
Sep 16 2017, 6:25 PM · VyOS 1.2.x
dmbaturin created T396: Add support for value constraint tags to the build-command-templates script.
Sep 16 2017, 6:00 PM · VyOS 1.2.x
dmbaturin closed T395: Implement a numeric value validator for use in the 2.0-style interface definitions as Resolved.
Sep 16 2017, 5:02 PM · VyOS 2.0.x, VyOS 1.2.x
dmbaturin created T395: Implement a numeric value validator for use in the 2.0-style interface definitions.
Sep 16 2017, 3:34 PM · VyOS 2.0.x, VyOS 1.2.x
dmbaturin updated subscribers of T370: lldpctl: invalid option 'L'.

Yes, @Tania and I are working on the rewrite.

Sep 16 2017, 11:28 AM · vyatta-lldp, lldpd, VyOS 1.2.x

Sep 15 2017

dmbaturin created T394: Add vyos_*dir copies of vyatta_*dir environment variables.
Sep 15 2017, 7:20 AM · VyOS 1.2.x

Sep 14 2017

dmbaturin updated subscribers of T7: Repository layout revamp.

Create a new repo (dev.packages.vyos.net/debian) and moved hvinfo to there.

Sep 14 2017, 4:16 AM · VyOS 1.2.x
dmbaturin closed T388: Add debug mode to the build-command-templates script as Resolved.
Sep 14 2017, 3:18 AM · VyOS 1.2.x
dmbaturin created T393: Migrate vyatta-lldpd to vyos-1x.
Sep 14 2017, 3:18 AM · VyOS 1.2.x
dmbaturin added a comment to T388: Add debug mode to the build-command-templates script.

https://github.com/vyos/vyos-1x/commit/ecdbe7b6fb64ae7d27d9147aa2c4a55b3a491735
https://github.com/vyos/vyos-1x/commit/5404d4108b510765150c2ac54098cd26ec18a683

Sep 14 2017, 3:02 AM · VyOS 1.2.x
dmbaturin added a comment to T338: maintainers@vyos.net is unreachable. .

The current implementation with postfix aliases is/was a bit problematic because all spam sent to it is forwarded to all members, and the mail servers where member addresses are get upset with mine and report me to spam lists.

Sep 14 2017, 2:41 AM · Infrastructure
dmbaturin created T392: Add support for missing tags to the interface definitions converter.
Sep 14 2017, 1:44 AM · VyOS 1.2.x

Sep 13 2017

dmbaturin added a comment to T275: Add BGP as-override.

I've merged the quagga pull request. Do you have implementation of the CLI for it, or shall I add it?

Sep 13 2017, 8:41 AM · VyOS 1.2.x

Sep 12 2017

dmbaturin closed T391: Add support for completion help to the interface definition schema as Resolved.
Sep 12 2017, 2:11 PM · VyOS 1.2.x, VyOS 2.0.x
dmbaturin created T391: Add support for completion help to the interface definition schema.
Sep 12 2017, 2:07 PM · VyOS 1.2.x, VyOS 2.0.x

Sep 9 2017

dmbaturin added a comment to T379: UDP Broadcast Packet Relay.

@c-po The post I made yesterday (http://blog.vyos.net/vyos-development-digest-number-10), the vyos-1x package is pretty much that, the future single package for all config scripts and data. I would be reluctant to put things that are not VyOS-specific into it though. With small things such as the mDNS repeater things get shaky of course. Something like PMACCT is a clear case, merging it into another package would be insanity. Those relays are small enough to make one wonder if they really need their own packages.

Sep 9 2017, 3:11 AM · VyOS 1.2.x

Sep 8 2017

dmbaturin added a comment to T379: UDP Broadcast Packet Relay.

@JulesT I'm afraid Perl code is going to be around for quite a while, as many things need to be fixed before any rewrite of them can take place.
It's the code for new features that concerns me, not as much in the language as in the old approach that is not conductive to either automated testing or future implementation of transactional commit.

Sep 8 2017, 12:05 PM · VyOS 1.2.x
dmbaturin added a comment to T379: UDP Broadcast Packet Relay.

@JulesT 99% of new EdgeOS code is proprietary. I see no reason to stick with it for the tiny open source bits they may release once in a while. EdgeOS could use their departure from Vyatta Core as a chance to rethink those decisions, but apparently due to time pressure they didn't... Now they are stuck with backporting UnionFS forever and never getting e.g. fully transactional commits or

Sep 8 2017, 10:51 AM · VyOS 1.2.x
dmbaturin added a comment to T379: UDP Broadcast Packet Relay.

And now that I've actually looked into it... ;)

Sep 8 2017, 9:45 AM · VyOS 1.2.x
dmbaturin changed the status of T379: UDP Broadcast Packet Relay from Open to In progress.

I think before we call it finished, we should move those repos under vyos organization and give @c-po access to them (frankly, I also propose to add him to maintainers).

Sep 8 2017, 9:36 AM · VyOS 1.2.x
dmbaturin added a comment to T319: show vpn ipsec status returns incorrect information.

We should, but somehow I don't have write access to this task. We should find a way to change the default permissions so that all maintainers can do that.

Sep 8 2017, 9:30 AM · VyOS 1.2.x
dmbaturin created T388: Add debug mode to the build-command-templates script.
Sep 8 2017, 6:09 AM · VyOS 1.2.x
dmbaturin created T387: Prevent command injection in VyConf external validator execution.
Sep 8 2017, 6:05 AM · VyConf

Sep 7 2017

dmbaturin added a comment to V3: Tag node syntax for VyOS 2.0.

@sebastianm In VyConf it's going to be fairly easy (ok, possible at least) to implement different input and output formats, so chances are we can add | display json or | display yaml filters if there's demand for it.

Sep 7 2017, 10:23 PM · VyOS 2.0.x, VyConf

Sep 6 2017

dmbaturin created T385: Integrate pmacct 1.6+ into the current branch.
Sep 6 2017, 9:05 PM · pmacct, VyOS 1.2.x

Aug 21 2017

dmbaturin created T362: Proper target dependencies and error checking in the vyos-build makefile.
Aug 21 2017, 11:29 PM · VyOS 1.2.x