Page MenuHomePhabricator
Feed All Stories

Fri, Sep 6

dmbaturin closed T1623: Systemd reports dependency cycle during boot, a subtask of T1598: New implementation of the resolv.conf and hosts update mechanism, as Resolved.
Fri, Sep 6, 5:39 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin closed T1623: Systemd reports dependency cycle during boot as Resolved.

It should have been fixed by https://github.com/vyos/vyos-1x/commit/ff05e2a90edf8af5d7b8ad5c69cae2dd40af2c8d It works for me in post-Sep 01 images and I don't see the error in the latest one, but I'm not sure why it would appear in the Sep 01 image if the commit is from Aug 30.

Fri, Sep 6, 5:39 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin closed T1616: 'renew dhcpv6 interface <interfaceName>' command fails, but work within config session as Resolved.

@nirmal The full fix is a bit more complicated. There are two cases: when it's called from conf mode at commit time, it needs to use the value from the proposed config (that's returnValue). However, in op mode, it also re-generates the config, so your fix would make the send dhcp6.client-id option disappear from the config when a user runs renew dhcpv6 interface .... A full fix needs to handle both cases and use returnEffectiveValue in op mode.

Fri, Sep 6, 5:27 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin closed T1478: libvyosconfig parser does not support escaped quotes inside single-quoted strings as Resolved.
Fri, Sep 6, 5:00 PM · VyOS 1.3 Equuleus
dmbaturin closed T1479: libvyosconfig error reporting doesn't include line numbers as Resolved.
Fri, Sep 6, 4:59 PM · VyOS 1.3 Equuleus
dmbaturin added a comment to T1479: libvyosconfig error reporting doesn't include line numbers.
>>> s="""
... foo {
...   bar {
...     baz quux foo
...   }
... }
... """
>>> import vyos.configtree
>>> c = vyos.configtree.ConfigTree(s)
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/lib/python3/dist-packages/vyos/configtree.py", line 167, in __init__
    raise ValueError("Failed to parse config: {0}".format(msg))
ValueError: Failed to parse config: Syntax error on line 4, character 14: Invalid syntax.
Fri, Sep 6, 4:46 PM · VyOS 1.3 Equuleus
dmbaturin closed T1360: DNS nameservers from dhcp not set, a subtask of T1598: New implementation of the resolv.conf and hosts update mechanism, as Resolved.
Fri, Sep 6, 4:22 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin closed T1360: DNS nameservers from dhcp not set as Resolved.

It was indeed a bug, caused by the same issue as all other subtasks of T1598: lack of proper synchronization.
If it re-appears, please reopen of course.

Fri, Sep 6, 4:22 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin added a parent task for T1360: DNS nameservers from dhcp not set: T1598: New implementation of the resolv.conf and hosts update mechanism.
Fri, Sep 6, 4:21 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin added a subtask for T1598: New implementation of the resolv.conf and hosts update mechanism: T1360: DNS nameservers from dhcp not set.
Fri, Sep 6, 4:21 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin added a project to T1360: DNS nameservers from dhcp not set: VyOS 1.2 Crux (VyOS 1.2.3).
Fri, Sep 6, 4:21 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin edited projects for T1616: 'renew dhcpv6 interface <interfaceName>' command fails, but work within config session, added: VyOS 1.2 Crux (VyOS 1.2.3); removed VyOS 1.2 Crux (VyOS 1.2.4).
Fri, Sep 6, 4:20 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin edited projects for T1540: Static-host-mappings disappear from /etc/hosts after a while, added: VyOS 1.2 Crux (VyOS 1.2.3); removed VyOS 1.3 Equuleus.
Fri, Sep 6, 4:19 PM · VyOS 1.2 Crux (VyOS 1.2.3)
dmbaturin closed T1540: Static-host-mappings disappear from /etc/hosts after a while, a subtask of T1598: New implementation of the resolv.conf and hosts update mechanism, as Resolved.
Fri, Sep 6, 4:19 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin closed T1540: Static-host-mappings disappear from /etc/hosts after a while as Resolved.

Disappearing entries should no longer be a problem, but if it re-appears due to a missing case, please reopen.

Fri, Sep 6, 4:19 PM · VyOS 1.2 Crux (VyOS 1.2.3)
dmbaturin renamed T1316: Support for IS-IS from Support for ISIS to Support for IS-IS .
Fri, Sep 6, 4:17 PM · VyOS 1.3 Equuleus
dmbaturin merged T1303: Implement ISIS into T1316: Support for IS-IS .
Fri, Sep 6, 4:17 PM · VyOS 1.3 Equuleus
dmbaturin merged task T1303: Implement ISIS into T1316: Support for IS-IS .
Fri, Sep 6, 4:17 PM · VyOS 1.3 Equuleus
dmbaturin closed T1264: /usr/libexec/vyos/conf_mode/host_name.py improvments, a subtask of T1598: New implementation of the resolv.conf and hosts update mechanism, as Resolved.
Fri, Sep 6, 4:16 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin closed T1264: /usr/libexec/vyos/conf_mode/host_name.py improvments as Resolved.
Fri, Sep 6, 4:16 PM · VyOS 1.2 Crux (VyOS 1.2.3)
dmbaturin added a subtask for T1598: New implementation of the resolv.conf and hosts update mechanism: T1264: /usr/libexec/vyos/conf_mode/host_name.py improvments.
Fri, Sep 6, 4:15 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin added a parent task for T1264: /usr/libexec/vyos/conf_mode/host_name.py improvments: T1598: New implementation of the resolv.conf and hosts update mechanism.
Fri, Sep 6, 4:15 PM · VyOS 1.2 Crux (VyOS 1.2.3)
dmbaturin added a parent task for T1398: Remove vyatta-config-migrate package: T805: Drop config compatibility with Vyatta Core older than 6.5.
Fri, Sep 6, 4:15 PM · VyOS 1.3 Equuleus
dmbaturin added a subtask for T805: Drop config compatibility with Vyatta Core older than 6.5: T1398: Remove vyatta-config-migrate package.
Fri, Sep 6, 4:15 PM · VyOS 1.3 Equuleus
dmbaturin closed T808: replace lighthttpd with nginx, a subtask of T1443: New "service https" implementation, as Resolved.
Fri, Sep 6, 4:14 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin closed T808: replace lighthttpd with nginx as Resolved.
Fri, Sep 6, 4:14 PM · VyOS 1.3 Equuleus
dmbaturin added a subtask for T1443: New "service https" implementation: T808: replace lighthttpd with nginx.
Fri, Sep 6, 4:13 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin added a parent task for T808: replace lighthttpd with nginx: T1443: New "service https" implementation.
Fri, Sep 6, 4:13 PM · VyOS 1.3 Equuleus
hagbard added a comment to T1572: Wireguard keyPair per interface.

It's not so much the implementation as I wrote before, it just doesn't seem beneficial. It gets implemented anyway, but I try to understand why a user would like to use that. The private key is by the way no identity and also won't interfere with multiple VPN peers if you are using only one pk. On IP:12345 arrives an encrypted packet, it is simply decrypted using your pk. If it works it's given to your kernel netlink interface as far as I recall and routed there, so no verification of the private key anywhere. If it can't be decrypted, it's discarded. If you have multiple wg interfaces, your 'crypto routing' either allows the traffic to the peer or discards it if it doesn't fit, the private key has nothing to do with that, since the public key of your peer is used to encrypt it. Summary, I still cna't see any benefit having that, which doesn't mean that I won't implement it.

Fri, Sep 6, 3:08 PM · VyOS 1.3 Equuleus
kroy added a subtask for T1598: New implementation of the resolv.conf and hosts update mechanism: T1638: vyos-hostsd not setting system domain name .
Fri, Sep 6, 2:17 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
kroy added a parent task for T1638: vyos-hostsd not setting system domain name : T1598: New implementation of the resolv.conf and hosts update mechanism.
Fri, Sep 6, 2:17 PM · VyOS 1.2 Crux (VyOS 1.2.3)
kroy updated the task description for T1638: vyos-hostsd not setting system domain name .
Fri, Sep 6, 2:13 PM · VyOS 1.2 Crux (VyOS 1.2.3)
kroy created T1638: vyos-hostsd not setting system domain name .
Fri, Sep 6, 2:12 PM · VyOS 1.2 Crux (VyOS 1.2.3)
c-po changed the status of T1637: Rewrite ethernet interface in new style XML syntax from Open to In progress.
Fri, Sep 6, 1:26 PM · VyOS 1.3 Equuleus
c-po changed the status of T1637: Rewrite ethernet interface in new style XML syntax, a subtask of T1579: Rewrite all interface types in new XML/Python style, from Open to In progress.
Fri, Sep 6, 1:26 PM · VyOS 1.3 Equuleus
c-po created T1637: Rewrite ethernet interface in new style XML syntax.
Fri, Sep 6, 1:26 PM · VyOS 1.3 Equuleus
c-po changed the status of T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes from Open to Needs testing.
Fri, Sep 6, 1:20 PM · VyOS 1.3 Equuleus
c-po changed the status of T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes, a subtask of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python, from Open to Needs testing.
Fri, Sep 6, 1:20 PM · VyOS 1.3 Equuleus
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.

OpenVPN now runs as user openvpn with the above helper script. Please also test this new implementation, it will be in the rolling ISO which is building right now.

Fri, Sep 6, 1:19 PM · VyOS 1.3 Equuleus
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.

Persistent tunnel is a configuration option set interfaces openvpn vtun10 persistent-tunnel

Fri, Sep 6, 11:07 AM · VyOS 1.3 Equuleus
c-po closed T1636: Rewrite VXLAN in new style XML/Python, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
Fri, Sep 6, 11:03 AM · VyOS 1.3 Equuleus
c-po closed T1636: Rewrite VXLAN in new style XML/Python as Resolved.
Fri, Sep 6, 11:03 AM · VyOS 1.3 Equuleus
c-po updated the task description for T1636: Rewrite VXLAN in new style XML/Python.
Fri, Sep 6, 11:03 AM · VyOS 1.3 Equuleus
runar added a comment to T1572: Wireguard keyPair per interface.

i agree with allowing this.

Fri, Sep 6, 10:23 AM · VyOS 1.3 Equuleus
jonaswre added a comment to T1572: Wireguard keyPair per interface.

@hagbard the private key should stay where its generated. But thats not the point I was trying to make. The point @zx2c4 and I are making, is each interface represent a diffrent Identity. There are only some special cases where you would need the same private key on two interface. Useally you would just add all peers that connect with the same publickey to the same interface. You only need a second interface if there is a second identity you want to assume. For example wg01 might be used to connect to your workplace and wg02 vpn service. In that case you would want clients in wg01 and wg02 to know you under different identities.

Fri, Sep 6, 9:16 AM · VyOS 1.3 Equuleus
jdevincentis added a comment to T508: ISC DHCP incorrect UDP checksum generation.

I can confirm this is still a problem in current rolling versions.

Fri, Sep 6, 9:08 AM · VyOS 1.3 Equuleus, vyatta-dhcp3
Dmitry added a comment to T1594: l2tpv3 error on IPv6 local-ip.

Hello @kruisdraad . I trying to reproduce this issue, but without success. Tunnel works.

set interfaces l2tpv3 l2tpeth1010 address '192.168.37.2/27'
set interfaces l2tpv3 l2tpeth1010 encapsulation 'ip'
set interfaces l2tpv3 l2tpeth1010 local-ip '2001:db8::2'
set interfaces l2tpv3 l2tpeth1010 peer-session-id '100'
set interfaces l2tpv3 l2tpeth1010 peer-tunnel-id '200'
set interfaces l2tpv3 l2tpeth1010 remote-ip '2001:db8::1'
set interfaces l2tpv3 l2tpeth1010 session-id '100'
set interfaces l2tpv3 l2tpeth1010 tunnel-id '200'

Can you provide show log tail 100 after creating l2tpv3?

Fri, Sep 6, 7:23 AM · VyOS 1.3 Equuleus

Thu, Sep 5

rps added a comment to T1058: hw-id is ignored when naming interfaces.

I'm able to reproduce this bug.

Thu, Sep 5, 10:31 PM · VyOS 1.3 Equuleus
jjakob added a comment to T1604: equuleus: buster: vbash: tab completion breaks.

The same, but on current (jessie):


The above 2 files can be diffed to see where the bug is triggered.
The _filedir function from /usr/share/bash-completion/bash_completion was changed, the offending part is:

reset=$(shopt -po noglob); set -o noglob
toks=( $( compgen -d -- "$cur" ) )
eval $reset

when eval is called, it expands to eval 'set -o noglob' which triggers _vyatta_op_run set -o noglob, which chokes on the input.
_vyatta_op_run was set up as alias for "set" in https://github.com/vyos/vyatta-op/blob/66753705b86a3d104dfe127d4dd2b904a54ab404/functions/interpreter/vyatta-op-run#L38

eval alias ${cmd:0:$pos}=\'_vyatta_op_run ${cmd:0:$pos}\'

due to "set" being part of the templates.

Thu, Sep 5, 10:25 PM · VyOS 1.3 Equuleus
hagbard changed Difficulty level from unknown to hard on T770: Bonded interfaces get updated with incorrect hw-id in config..
Thu, Sep 5, 9:38 PM · VyOS 1.2 Crux, VyOS 1.3 Equuleus
hagbard added a comment to T770: Bonded interfaces get updated with incorrect hw-id in config..

So there are 2 issues as I found out, I fixed one so far. `/opt/vyatta/sbin/vyatta-interfaces.pl``` has been fixed, if it's called with a bonding interface it doesn't care about hw-id as long as it's a bond member, otherwise the legacy code just continues as before.
That helps with config changes and a cold boot, reboot however brings in another issue. Before the system goes down it compares mac addresses and sorts them. bond is still active and 2 eth interface have the same mac which confuses `/lib/udev/vyatta_net_name```

Thu, Sep 5, 7:42 PM · VyOS 1.2 Crux, VyOS 1.3 Equuleus
hagbard added a comment to T770: Bonded interfaces get updated with incorrect hw-id in config..
/opt/vyatta/sbin/vyatta-interfaces.pl
Thu, Sep 5, 6:13 PM · VyOS 1.2 Crux, VyOS 1.3 Equuleus
c-po added a comment to T770: Bonded interfaces get updated with incorrect hw-id in config..

Huh? Which perl script?

Thu, Sep 5, 5:43 PM · VyOS 1.2 Crux, VyOS 1.3 Equuleus
hagbard added a comment to T770: Bonded interfaces get updated with incorrect hw-id in config..

To reproduce:

Thu, Sep 5, 4:51 PM · VyOS 1.2 Crux, VyOS 1.3 Equuleus
hagbard added a comment to T770: Bonded interfaces get updated with incorrect hw-id in config..

@c-po vyos config does touch it via a perl script. I have a patch ready today for it.

Thu, Sep 5, 4:48 PM · VyOS 1.2 Crux, VyOS 1.3 Equuleus
hagbard changed the status of T770: Bonded interfaces get updated with incorrect hw-id in config. from On hold to In progress.
Thu, Sep 5, 4:47 PM · VyOS 1.2 Crux, VyOS 1.3 Equuleus
c-po added a comment to T770: Bonded interfaces get updated with incorrect hw-id in config..

As the bonding interface has been completely rewritten this should not be an issue as I do not touch underlaying interface MAC addresses

Thu, Sep 5, 4:19 PM · VyOS 1.2 Crux, VyOS 1.3 Equuleus
hagbard added a comment to T770: Bonded interfaces get updated with incorrect hw-id in config..

No worries, I checked it out, the issue still persists but is not easily fixable.

Thu, Sep 5, 3:04 PM · VyOS 1.2 Crux, VyOS 1.3 Equuleus
hagbard added a comment to T1572: Wireguard keyPair per interface.

Well, it's not so much the technical implementation via cli. The private key gets exposed on the computer you generate it, then you transfer it to the vyos box, now you have a duplicate if the origin is not removed. It creates multiple point where you can get the private key. If you have that key and the connection is not secured via pre-shared key, you can decrypt the traffic easily. Ot do i See that completely wrong?

Thu, Sep 5, 2:44 PM · VyOS 1.3 Equuleus
syncer moved T1443: New "service https" implementation from In Progress to Finished on the VyOS 1.3 Equuleus board.
Thu, Sep 5, 8:43 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
syncer closed T1443: New "service https" implementation as Resolved.
Thu, Sep 5, 8:43 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po added a comment to T1572: Wireguard keyPair per interface.

Why not specify the keys or the key file location via CLI like other VPN implementations do it?

Thu, Sep 5, 3:51 AM · VyOS 1.3 Equuleus
c-po changed the status of T1636: Rewrite VXLAN in new style XML/Python, a subtask of T1579: Rewrite all interface types in new XML/Python style, from Open to In progress.
Thu, Sep 5, 3:49 AM · VyOS 1.3 Equuleus
c-po changed the status of T1636: Rewrite VXLAN in new style XML/Python from Open to In progress.
Thu, Sep 5, 3:49 AM · VyOS 1.3 Equuleus
c-po created T1636: Rewrite VXLAN in new style XML/Python.
Thu, Sep 5, 3:49 AM · VyOS 1.3 Equuleus
dmbaturin changed Is it a breaking change? from none to behavior on T1443: New "service https" implementation.
Thu, Sep 5, 1:10 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin changed the status of T1443: New "service https" implementation from In progress to Needs testing.
Thu, Sep 5, 1:10 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
dmbaturin added a project to T1443: New "service https" implementation: VyOS 1.2 Crux (VyOS 1.2.3).
Thu, Sep 5, 1:09 AM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
jjakob added a comment to T1604: equuleus: buster: vbash: tab completion breaks.

Here's the output of set -x redirected to a file when doing "ls <TAB>" as root.


At first glance it seems like a call to "set -o tag" from within a script is interpreted as an argument to the template "set" node somewhere, which causes it to break.
If anyone wants to dig in to vyatta-op, this is a starting point.

Thu, Sep 5, 12:18 AM · VyOS 1.3 Equuleus
mb300sd added a comment to T770: Bonded interfaces get updated with incorrect hw-id in config..

@hagbard I no longer have the hardware the issue was found on, or anything else with identical interfaces to bond at the moment.

Thu, Sep 5, 12:15 AM · VyOS 1.2 Crux, VyOS 1.3 Equuleus

Wed, Sep 4

hagbard claimed T1635: Rewrite interface pseudo-ethernet in new XML/Python style.
Wed, Sep 4, 10:34 PM · VyOS 1.3 Equuleus
hagbard created T1635: Rewrite interface pseudo-ethernet in new XML/Python style.
Wed, Sep 4, 10:34 PM · VyOS 1.3 Equuleus
hagbard added a comment to T1395: Improve boot time for instances with a big count of DHCP servers.

@zsdc Can you please provide a relevant config snippet? I won't have a system with 400 interfaces, but I try to measure the difference with 4 to see if it exponentially increases the boot time.

Wed, Sep 4, 10:30 PM · VyOS 1.3 Equuleus
hagbard moved T1299: Allow SNMPd to be extended with custom scripts from In Progress to Finished on the VyOS 1.3 Equuleus board.
Wed, Sep 4, 10:27 PM · VyOS 1.2 Crux (VyOS 1.2.4), VyOS 1.3 Equuleus
hagbard changed the status of T770: Bonded interfaces get updated with incorrect hw-id in config. from Confirmed to On hold.

@mb300sd can you please test with the latest rolling image and see if the issue still exists?

Wed, Sep 4, 10:26 PM · VyOS 1.2 Crux, VyOS 1.3 Equuleus
hagbard changed the status of T1572: Wireguard keyPair per interface from Open to On hold.
Wed, Sep 4, 10:05 PM · VyOS 1.3 Equuleus
hagbard added a comment to T1572: Wireguard keyPair per interface.

@zx2c4 The private key stays on the system it is generated in a directory only accessible by the user who created it. Now when you create an interface let's say wg01 with 20 peers set up, you hand out 20 time the same public key and to decrypt the incoming traffic you use the single private key. Now, let's say you create an interface wg02, also with 20 peers. Why would it be better to generate a new key pair for wg02 on the same system and use a new private key just for that interface?

Wed, Sep 4, 10:05 PM · VyOS 1.3 Equuleus
hagbard closed T1628: Adopt WireGuard configuration script to new vyos.ifconfig class, a subtask of T1557: Create generic abstraction for configuring interfaces e.g. IP address, as Resolved.
Wed, Sep 4, 9:58 PM · VyOS 1.3 Equuleus
hagbard closed T1628: Adopt WireGuard configuration script to new vyos.ifconfig class as Resolved.

available via rolling releases
https://github.com/vyos/vyos-1x/blob/current/python/vyos/ifconfig.py#L1270
https://github.com/vyos/vyos-1x/blob/current/src/conf_mode/interface-wireguard.py

Wed, Sep 4, 9:58 PM · VyOS 1.3 Equuleus
Dmitry added a comment to T1360: DNS nameservers from dhcp not set.

@yun can you check this issue on last rolling release, I think it fixed.

Wed, Sep 4, 7:47 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
kruisdraad added a comment to T1593: Support ip6gre.

That is great to hear, i will schedule upgrade of our infra soon and add some tunnels on GRE6. Ill report back when i have info

Wed, Sep 4, 7:37 PM · VyOS 1.2 Crux (VyOS 1.2.4), VyOS 1.3 Equuleus
zsdc changed the status of T1593: Support ip6gre from Open to Needs testing.

Hello, @kruisdraad!
IP6GRE tunnels are supported in 1.2-rolling-201909041703. You are welcome to test.

Wed, Sep 4, 7:31 PM · VyOS 1.2 Crux (VyOS 1.2.4), VyOS 1.3 Equuleus
c-po closed T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id as Resolved.
Wed, Sep 4, 7:28 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po moved T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.3) board.
Wed, Sep 4, 7:28 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po moved T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id from VyOS 1.2.4 to VyOS 1.2.3 on the VyOS 1.2 Crux board.
Wed, Sep 4, 7:28 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po moved T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Wed, Sep 4, 7:27 PM · VyOS 1.2 Crux (VyOS 1.2.3), VyOS 1.3 Equuleus
c-po closed T1632: OpenVPN 'push' options with quotes as Resolved.
Wed, Sep 4, 6:35 PM · VyOS 1.3 Equuleus
c-po added a comment to T1632: OpenVPN 'push' options with quotes.

You could use quoting like mentioned in T1129.

Wed, Sep 4, 6:31 PM · VyOS 1.3 Equuleus
jjakob created T1634: Commit fails when changing policy route "set table" and adding the table at the same time, results in config deadlock.
Wed, Sep 4, 3:59 PM
c-po added a comment to T1614: Rewrite bonding interface in new style XML syntax.

Rewrite was tested using:

Wed, Sep 4, 2:43 PM · VyOS 1.3 Equuleus
c-po closed T1557: Create generic abstraction for configuring interfaces e.g. IP address as Resolved.
Wed, Sep 4, 2:39 PM · VyOS 1.3 Equuleus
c-po closed T1557: Create generic abstraction for configuring interfaces e.g. IP address, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
Wed, Sep 4, 2:39 PM · VyOS 1.3 Equuleus
c-po closed T1631: Multiple push-route options cause error generating openvpn configuration, a subtask of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python, as Resolved.
Wed, Sep 4, 2:39 PM · VyOS 1.3 Equuleus
c-po closed T1631: Multiple push-route options cause error generating openvpn configuration as Resolved.
Wed, Sep 4, 2:39 PM · VyOS 1.3 Equuleus
c-po closed T1614: Rewrite bonding interface in new style XML syntax, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
Wed, Sep 4, 2:38 PM · VyOS 1.3 Equuleus
c-po closed T1614: Rewrite bonding interface in new style XML syntax as Resolved.
Wed, Sep 4, 2:38 PM · VyOS 1.3 Equuleus
c-po updated the task description for T1614: Rewrite bonding interface in new style XML syntax.
Wed, Sep 4, 2:38 PM · VyOS 1.3 Equuleus
hexes added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.

So in conf file should be enabled by default:
iproute /usr/local/sbin/unpriv-ip
persist-tun

Wed, Sep 4, 2:38 PM · VyOS 1.3 Equuleus
hexes added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.

As i understand this script only generate conf file, but we need to change init script, add wrapper script and grant sudo access to the openvpn user to exec this wrapper script...

Wed, Sep 4, 2:27 PM · VyOS 1.3 Equuleus
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.

I like the openvpn:openvpn ownership idea

Wed, Sep 4, 2:15 PM · VyOS 1.3 Equuleus