@dirkjanm added that script - it will be shipped with next rolling
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
All Stories
Mar 1 2020
One of the offeners is
https://github.com/jjakob/vyos-build/tree/conntrack-tools-wip builds conntrack-tools from upstream git snapshot 20200301.
Feb 29 2020
All works as expected; thanks.
Fixed temporarily for now in https://phabricator.vyos.net/R3:1c4414dd363bdb268038ae238686be3e0b7f988b
We should re-add building it from upstream to fix T1538.
redeployed. please try again
Problem is local to crux only
One explanation could be that during the lstvdeployment ae of ixgbe something crashed leading to the missing module. I just started a rebuild of the crux kernel, lets see - module should reappear
The changes are also part of the patch for T2057 which was merged.
All my apologies for this stupid bug.
This is a result of a missing package vyos-intel-ixgbe_5.6.3-0_amd64.deb in http://dev.packages.vyos.net/repositories/crux/ --- when missing, the build will use an outdated package, leading to incorrect dependencies on the kernel version. On the other hand, if the correct intel module is built as a local package, there is only one resident linux-image, and update-initramfs succeeds as usual. The build/upload mechanism for the intel modules will be fixed soon, and the issue resolved.
Feb 28 2020
@cpo I think you need to add it to CI in addition to vyos-build
That's bad, because debian stable (=buster) is fixing security bugs only. They will not fix/add this patches to conntrack package, they leave conntrack buggy. So you sould build an own conntrack-tools package for 1.3 too :( If not, vyos will be less good software.
Upstream still hasn't made a release with this patch: https://git.netfilter.org/conntrack-tools/commit/?id=c12fa8df76752b0a011430f069677b52e4dad164
So we could wait on upstream to release it and debian to package it, or build our own as we used to in 1.2.
It would be better to ask upstream to make a release as there's less work for us.
We don't build conntrack-tools in 1.3 (current/equuleus) any more, upstream Debian Buster conntrack and conntrackd packages are used. So as upstream gets patched, we'll pull in those patches automatically.
If I see things correctly, there are references to conntrack-tools in the build scripts that still need to be removed.
Sorry, I titled the task wrong. The error is in building conntrack-tools.
I think you're right, I couldn't find any package depending on it, vyatta-conntrack-sync only depends on conntrack.
I also found this https://phabricator.vyos.net/T1538 in which the conclusion is we should upgrade conntrack-tools.
I guess that one is deprecated as we also don‘t have it in our CI at https://ci.vyos.net/
looks for my like an frr bug. Has someone contacted upstream?
As PPPoE is now denested the logic in Vyatta::Interfaces needs to be adjusted
I think this needs to be fixed from VyOS crux package repos, Because after applying this patch, ISO was created with two kernel images, And after ISO installation VyOS was showing boot entries for kernel versions 4.19.4 and 4.19.84.
I can confirm this bug also with VyOS 1.2.4
It seems that in the process of ISO creation, kernel deb packages are installed in the chroot directory.
Firstly, we need to determine why there are two kernel images.
Feb 27 2020
In debugging, It's found that chroot for ISO build had two kernel images in the boot directory