Page MenuHomeVyOS Platform

erkin (Erkin)
UserAdministrator

Projects

User Details

User Since
Aug 20 2020, 9:55 AM (34 w, 3 d)
Roles
Administrator

Recent Activity

Fri, Apr 16

erkin added a subtask for T3355: Remove all remaining legacy Vyatta code: T3285: Schedule reboots through systemd-shutdownd instead of atd.
Fri, Apr 16, 11:11 PM · VyOS 1.4 Sagitta
erkin added a parent task for T3285: Schedule reboots through systemd-shutdownd instead of atd: T3355: Remove all remaining legacy Vyatta code.
Fri, Apr 16, 11:11 PM · VyOS 1.3 Equuleus
erkin added a subtask for T3285: Schedule reboots through systemd-shutdownd instead of atd: T3472: commit-confirm script not found.
Fri, Apr 16, 11:07 PM · VyOS 1.3 Equuleus
erkin added a parent task for T3472: commit-confirm script not found: T3285: Schedule reboots through systemd-shutdownd instead of atd.
Fri, Apr 16, 11:07 PM · VyOS 1.4 Sagitta
erkin added a comment to T3472: commit-confirm script not found.

That's a good point. I just might do that.

Fri, Apr 16, 10:59 PM · VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
Fri, Apr 16, 1:19 AM · VyOS 1.4 Sagitta

Wed, Apr 7

erkin triaged T3459: Inform the user when unable to install outdated image as Wishlist priority.
Wed, Apr 7, 12:30 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Thu, Apr 1

erkin added a subtask for T3356: Script for remote file transfers: T3439: Commit-archive location not working for scp.
Thu, Apr 1, 10:19 AM · VyOS 1.4 Sagitta
erkin added a parent task for T3439: Commit-archive location not working for scp: T3356: Script for remote file transfers.
Thu, Apr 1, 10:19 AM · VyOS 1.4 Sagitta

Wed, Mar 31

erkin updated the task description for T3356: Script for remote file transfers.
Wed, Mar 31, 12:40 PM · VyOS 1.4 Sagitta
erkin added a comment to T3351: Installer checking MD5 checksums on the ISO image.

Update: It turns out the md5sum.txt files are put there by Debian's Live Build. Checksums are added on lb binary_checksum step of the build, which defaults to MD5 if no variable is provided to tell it otherwise. As Daniil suggested, we can put a second checksum step with SHA256 variable to produce both checksums, then check for sha256sum.txt files on new images. This way, old update scripts can still find an md5sum.txt in images.

Wed, Mar 31, 2:33 AM · VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
Wed, Mar 31, 2:25 AM · VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
Wed, Mar 31, 2:22 AM · VyOS 1.4 Sagitta

Tue, Mar 30

erkin updated the task description for T3356: Script for remote file transfers.
Tue, Mar 30, 10:43 AM · VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
Tue, Mar 30, 10:40 AM · VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
Tue, Mar 30, 10:20 AM · VyOS 1.4 Sagitta
erkin added a comment to T3356: Script for remote file transfers.

Turns out vyatta-remote-copy.pl has been broken on Crux for a while. It fails to exchange encryption keys when it tries to establish an SSH connection (for SFTP or SCP), possibly because of the old libssh it relies on.

Tue, Mar 30, 9:47 AM · VyOS 1.4 Sagitta

Mon, Mar 22

erkin updated the task description for T3356: Script for remote file transfers.
Mon, Mar 22, 11:30 AM · VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
Mon, Mar 22, 11:21 AM · VyOS 1.4 Sagitta
erkin claimed T3419: show interfaces | strip-private fails.
Mon, Mar 22, 10:43 AM · VyOS 1.4 Sagitta

Mar 15 2021

erkin closed T3354: Convert strip-private script from Perl to Python, a subtask of T3355: Remove all remaining legacy Vyatta code, as Resolved.
Mar 15 2021, 12:38 PM · VyOS 1.4 Sagitta
erkin closed T3354: Convert strip-private script from Perl to Python as Resolved.
Mar 15 2021, 12:38 PM · VyOS 1.4 Sagitta
erkin triaged T3351: Installer checking MD5 checksums on the ISO image as Low priority.
Mar 15 2021, 10:09 AM · VyOS 1.4 Sagitta
erkin claimed T3284: merge/load fail silently if unable to resolve host.

I'll give backporting a try. It should be doable as long as Paramiko is in our reach. If not, I'll see if I can cobble together something to check for hostname resolution failure.

Mar 15 2021, 6:58 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Mar 11 2021

erkin added a comment to T3351: Installer checking MD5 checksums on the ISO image.

MD5 checksums are generated by Packer at build time (configured in vyos-build). We can switch to SHA256 or SHA512 (which Packer supports) although it seems redundant when the install script also fetches SHA256 sum file (guessed by the ISO URL) and compares against that. I'd say configuring Packer to use SHA256 and omitting SHA256 files from download directories altogether would be the cleanest solution.

Mar 11 2021, 6:14 AM · VyOS 1.4 Sagitta

Mar 1 2021

erkin renamed T936: Reimplementation of tech-support diagnostic file generation from Reimplementaion of tech-support diagnostic file generation to Reimplementation of tech-support diagnostic file generation.
Mar 1 2021, 10:09 AM · VyOS 1.4 Sagitta
erkin triaged T3356: Script for remote file transfers as Low priority.
Mar 1 2021, 9:20 AM · VyOS 1.4 Sagitta
erkin added a comment to T3356: Script for remote file transfers.

remote.py declaring support for TFTP and HTTP(S) might complicate things further. Since it's only for downloading, the latter shouldn't be too complicated to handle with urllib but if we need HTTP(S) uploading capabilities, an external library like requests would be preferable. As for TFTP, there's no support for it in the standard library, but instead of pulling in a third-party library for TFTP alone, we can just write an ad hoc wrapper for curl dedicated to TFTP. It wouldn't be as complicated since TFTP has no form of authentication so there's no need to worry about host keys and such.

Mar 1 2021, 9:17 AM · VyOS 1.4 Sagitta

Feb 25 2021

erkin renamed T936: Reimplementation of tech-support diagnostic file generation from re-implementaion for 'show tech-support' to Reimplementaion of tech-support diagnostic file generation.
Feb 25 2021, 3:48 PM · VyOS 1.4 Sagitta
erkin added a parent task for T936: Reimplementation of tech-support diagnostic file generation: T3355: Remove all remaining legacy Vyatta code.
Feb 25 2021, 3:46 PM · VyOS 1.4 Sagitta
erkin added a subtask for T3355: Remove all remaining legacy Vyatta code: T936: Reimplementation of tech-support diagnostic file generation.
Feb 25 2021, 3:46 PM · VyOS 1.4 Sagitta
erkin changed the status of T936: Reimplementation of tech-support diagnostic file generation from Open to In progress.
Feb 25 2021, 3:46 PM · VyOS 1.4 Sagitta
erkin merged T3179: Add the ability to generate a support file into T936: Reimplementation of tech-support diagnostic file generation.
Feb 25 2021, 3:45 PM · VyOS 1.4 Sagitta
erkin merged task T3179: Add the ability to generate a support file into T936: Reimplementation of tech-support diagnostic file generation.
Feb 25 2021, 3:45 PM · VyOS 1.4 Sagitta
erkin changed the status of T3354: Convert strip-private script from Perl to Python, a subtask of T3355: Remove all remaining legacy Vyatta code, from Open to In progress.
Feb 25 2021, 3:44 PM · VyOS 1.4 Sagitta
erkin changed the status of T3354: Convert strip-private script from Perl to Python from Open to In progress.
Feb 25 2021, 3:44 PM · VyOS 1.4 Sagitta
erkin changed the status of T3356: Script for remote file transfers, a subtask of T3355: Remove all remaining legacy Vyatta code, from Open to In progress.
Feb 25 2021, 3:44 PM · VyOS 1.4 Sagitta
erkin changed the status of T3356: Script for remote file transfers from Open to In progress.
Feb 25 2021, 3:43 PM · VyOS 1.4 Sagitta
erkin created T3356: Script for remote file transfers.
Feb 25 2021, 3:43 PM · VyOS 1.4 Sagitta
erkin added a subtask for T2546: The root task for rewriting [op-mode] to XML: T2511: Migrate vyatta-op-quagga to new XML format..
Feb 25 2021, 3:28 PM · VyOS 1.3 Equuleus
erkin removed a subtask for T3355: Remove all remaining legacy Vyatta code: T2511: Migrate vyatta-op-quagga to new XML format..
Feb 25 2021, 3:27 PM · VyOS 1.4 Sagitta
erkin edited parent tasks for T2511: Migrate vyatta-op-quagga to new XML format., added: T2546: The root task for rewriting [op-mode] to XML; removed: T3355: Remove all remaining legacy Vyatta code.
Feb 25 2021, 3:27 PM · VyOS 1.3 Equuleus
erkin added a subtask for T3355: Remove all remaining legacy Vyatta code: T2546: The root task for rewriting [op-mode] to XML.
Feb 25 2021, 3:27 PM · VyOS 1.4 Sagitta
erkin added a parent task for T2546: The root task for rewriting [op-mode] to XML: T3355: Remove all remaining legacy Vyatta code.
Feb 25 2021, 3:27 PM · VyOS 1.3 Equuleus
erkin added a parent task for T2459: Migrate vyatta-show-nat-rules.pl to Python: T3355: Remove all remaining legacy Vyatta code.
Feb 25 2021, 3:23 PM · VyOS 1.3 Equuleus
erkin added a parent task for T2511: Migrate vyatta-op-quagga to new XML format.: T3355: Remove all remaining legacy Vyatta code.
Feb 25 2021, 3:23 PM · VyOS 1.3 Equuleus
erkin added subtasks for T3355: Remove all remaining legacy Vyatta code: T2511: Migrate vyatta-op-quagga to new XML format., T2459: Migrate vyatta-show-nat-rules.pl to Python.
Feb 25 2021, 3:23 PM · VyOS 1.4 Sagitta
erkin added a parent task for T3354: Convert strip-private script from Perl to Python: T3355: Remove all remaining legacy Vyatta code.
Feb 25 2021, 3:21 PM · VyOS 1.4 Sagitta
erkin added a subtask for T3355: Remove all remaining legacy Vyatta code: T3354: Convert strip-private script from Perl to Python.
Feb 25 2021, 3:21 PM · VyOS 1.4 Sagitta
erkin created T3355: Remove all remaining legacy Vyatta code.
Feb 25 2021, 3:16 PM · VyOS 1.4 Sagitta
erkin removed a subtask for T689: Converting simple op-mode commands from vyatta-op to new syntax: T3354: Convert strip-private script from Perl to Python.
Feb 25 2021, 3:15 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
erkin removed a parent task for T3354: Convert strip-private script from Perl to Python: T689: Converting simple op-mode commands from vyatta-op to new syntax.
Feb 25 2021, 3:15 PM · VyOS 1.4 Sagitta
erkin added a parent task for T3354: Convert strip-private script from Perl to Python: T689: Converting simple op-mode commands from vyatta-op to new syntax.
Feb 25 2021, 2:15 PM · VyOS 1.4 Sagitta
erkin added a subtask for T689: Converting simple op-mode commands from vyatta-op to new syntax: T3354: Convert strip-private script from Perl to Python.
Feb 25 2021, 2:15 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
erkin triaged T3354: Convert strip-private script from Perl to Python as Wishlist priority.
Feb 25 2021, 2:15 PM · VyOS 1.4 Sagitta

Feb 24 2021

erkin claimed T3351: Installer checking MD5 checksums on the ISO image.
Feb 24 2021, 3:54 PM · VyOS 1.4 Sagitta
erkin edited projects for T3179: Add the ability to generate a support file, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus, VyOS 1.2 Crux.
Feb 24 2021, 7:54 AM · VyOS 1.4 Sagitta
erkin added a comment to T3179: Add the ability to generate a support file.

VyOS is still on the ancient shell-based diagnostic file generator spaghetti inherited from Vyatta. First of all, I'm going to dike out {show,generate} tech-support from vyatta-op and write a rudimentary stub as a replacement in Python/XML. Then we'll need to discuss what exactly needs to go in there.

Feb 24 2021, 7:53 AM · VyOS 1.4 Sagitta

Feb 20 2021

erkin closed T2647: ipsec disableuniqreqids generate a wrong ipsec.conf as Resolved.
Feb 20 2021, 12:38 AM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus

Feb 6 2021

erkin closed T3285: Schedule reboots through systemd-shutdownd instead of atd as Resolved.

This PR does the switch over.

Feb 6 2021, 1:42 PM · VyOS 1.3 Equuleus
erkin closed T661: Show a warning if router going to reboot soon (due to "commit-confirm" command), a subtask of T3285: Schedule reboots through systemd-shutdownd instead of atd, as Resolved.
Feb 6 2021, 1:41 PM · VyOS 1.3 Equuleus
erkin closed T661: Show a warning if router going to reboot soon (due to "commit-confirm" command) as Resolved.

This PR adds the notification script.

Feb 6 2021, 1:41 PM · VyOS 1.3 Equuleus
erkin placed T469: Problem after commit with errors up for grabs.
Feb 6 2021, 12:10 PM · VyOS 1.3 Equuleus

Feb 4 2021

erkin added a comment to T469: Problem after commit with errors.

It's better to let this problem be solved by the migration to pftables (per T3286) instead of try and a band-aid over this isolated issue.

Feb 4 2021, 3:20 PM · VyOS 1.3 Equuleus
erkin created T3286: Switch the firewall from iptables to nftables.
Feb 4 2021, 3:01 PM · VyOS 1.4 Sagitta
erkin added a project to T3285: Schedule reboots through systemd-shutdownd instead of atd: VyOS 1.3 Equuleus.
Feb 4 2021, 2:14 PM · VyOS 1.3 Equuleus
erkin added a project to T3274: ask_yes_no() doesn't handle EOFError: VyOS 1.3 Equuleus.
Feb 4 2021, 2:14 PM · VyOS 1.3 Equuleus
erkin added a comment to T661: Show a warning if router going to reboot soon (due to "commit-confirm" command).

I opened T3285 to it. Once the switch to shutdownd is done, I'll incorporate a service that warns the user of an impending shutdown.

Feb 4 2021, 1:31 PM · VyOS 1.3 Equuleus
erkin added a parent task for T661: Show a warning if router going to reboot soon (due to "commit-confirm" command): T3285: Schedule reboots through systemd-shutdownd instead of atd.
Feb 4 2021, 1:29 PM · VyOS 1.3 Equuleus
erkin added a subtask for T3285: Schedule reboots through systemd-shutdownd instead of atd: T661: Show a warning if router going to reboot soon (due to "commit-confirm" command).
Feb 4 2021, 1:29 PM · VyOS 1.3 Equuleus
erkin triaged T3285: Schedule reboots through systemd-shutdownd instead of atd as Wishlist priority.
Feb 4 2021, 1:29 PM · VyOS 1.3 Equuleus
erkin created T3285: Schedule reboots through systemd-shutdownd instead of atd.
Feb 4 2021, 1:29 PM · VyOS 1.3 Equuleus

Feb 3 2021

erkin closed T627: IPSec configuration directive deletion fails, causes bad IPSec state on reboot. , a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
Feb 3 2021, 11:58 AM · VyOS 1.3 Equuleus
erkin closed T627: IPSec configuration directive deletion fails, causes bad IPSec state on reboot. as Resolved.
Feb 3 2021, 11:58 AM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
erkin closed T2873: "show nat destination translation address" doesn't filter at all as Resolved.
Feb 3 2021, 9:24 AM · VyOS 1.3 Equuleus

Feb 2 2021

erkin changed the subtype of T2873: "show nat destination translation address" doesn't filter at all from "Task" to "Bug".

This is caused by the omission of a call to conntrack --orig-dst in the new Python script.

Feb 2 2021, 12:54 PM · VyOS 1.3 Equuleus
erkin added a comment to T2873: "show nat destination translation address" doesn't filter at all.

I have successfully replicated this on 1.3-rolling-202101052023 and 1.4-rolling-202101240218. It's absent in 1.2.6. I'm going to investigate this regression.

Feb 2 2021, 11:25 AM · VyOS 1.3 Equuleus

Feb 1 2021

erkin closed T3274: ask_yes_no() doesn't handle EOFError as Resolved.
Feb 1 2021, 1:56 AM · VyOS 1.3 Equuleus

Jan 31 2021

erkin changed the status of T3274: ask_yes_no() doesn't handle EOFError from Open to In progress.
Jan 31 2021, 4:25 AM · VyOS 1.3 Equuleus

Jan 27 2021

erkin added a comment to T661: Show a warning if router going to reboot soon (due to "commit-confirm" command).

Would it be too hard to hack the legacy config management script into using systemd for scheduling reboots instead of atd?

Jan 27 2021, 9:00 PM · VyOS 1.3 Equuleus
erkin closed T3110: Broken pipe in show interfaces as Resolved.
Jan 27 2021, 8:04 PM · VyOS 1.3 Equuleus
erkin renamed T469: Problem after commit with errors from Problem after commit with erros to Problem after commit with errors.
Jan 27 2021, 8:03 PM · VyOS 1.3 Equuleus
erkin added a comment to T469: Problem after commit with errors.

I can confirm that the issue of accepting configurations that yield errors is present in the latest LTS (1.2.6) and latest rolling release (1.4-202101240218). However, I couldn't replicate the issue of the configuration parser breaking at startup. Do we want to prevent the user from committing erroneous input at the risk of annoying false positives?

Jan 27 2021, 8:02 PM · VyOS 1.3 Equuleus
erkin claimed T661: Show a warning if router going to reboot soon (due to "commit-confirm" command).
Jan 27 2021, 7:17 PM · VyOS 1.3 Equuleus
erkin claimed T627: IPSec configuration directive deletion fails, causes bad IPSec state on reboot. .
Jan 27 2021, 7:11 PM · VyOS 1.2 Crux (VyOS 1.2.7), VyOS 1.3 Equuleus
erkin claimed T521: Network services may fail if vyatta-router.service startup takes longer than a few seconds.
Jan 27 2021, 7:05 PM · VyOS 1.3 Equuleus
erkin claimed T469: Problem after commit with errors.
Jan 27 2021, 7:04 PM · VyOS 1.3 Equuleus

Jan 26 2021

erkin renamed T3110: Broken pipe in show interfaces from Broken pipe in show intefaces to Broken pipe in show interfaces.
Jan 26 2021, 7:33 PM · VyOS 1.3 Equuleus
erkin claimed T3179: Add the ability to generate a support file.
Jan 26 2021, 6:35 PM · VyOS 1.4 Sagitta
erkin claimed T3110: Broken pipe in show interfaces.
Jan 26 2021, 6:33 PM · VyOS 1.3 Equuleus
erkin merged task T3073: sh nat source translations python error into T2859: show nat source translation - Errors out.
Jan 26 2021, 6:04 PM · VyOS 1.3 Equuleus
erkin merged T3073: sh nat source translations python error into T2859: show nat source translation - Errors out.
Jan 26 2021, 6:04 PM · VyOS 1.3 Equuleus
erkin closed T2859: show nat source translation - Errors out as Resolved.
Jan 26 2021, 6:03 PM · VyOS 1.3 Equuleus
erkin claimed T2873: "show nat destination translation address" doesn't filter at all.
Jan 26 2021, 5:02 PM · VyOS 1.3 Equuleus

Sep 9 2020

erkin renamed T2344: PPPoE server client static IP assignment silently fails from PPPoE server client static IP assignment does not work to PPPoE server client static IP assignment silently fails.
Sep 9 2020, 1:09 PM · VyOS 1.2 Crux (VyOS 1.2.6), VyOS 1.3 Equuleus
erkin renamed T2448: `monitor protocol bgp` subcommands fail with 'command incomplete' from monitor command does not work for protocol BGP to `monitor protocol bgp` subcommands fail with 'command incomplete'.
Sep 9 2020, 1:05 PM · VyOS 1.2 Crux (VyOS 1.2.6)
erkin renamed T2701: `vpn ipsec pfs enable` doesn't work with IKE groups from VPN ipsec pfs "enabled" doesn't work with IKE groups to `vpn ipsec pfs enable` doesn't work with IKE groups.
Sep 9 2020, 1:03 PM · VyOS 1.3 Equuleus, VyOS 1.2 Crux (VyOS 1.2.6)
erkin renamed T1938: syslog doesn't start automatically from Firewall logging not working to syslog doesn't start automatically.
Sep 9 2020, 1:01 PM · VyOS 1.2 Crux (VyOS 1.2.6), VyOS 1.3 Equuleus
erkin renamed T1575: `show snmp mib ifmib` crashes with IndexError from `show snmp mib ifmib` crashed to `show snmp mib ifmib` crashes with IndexError.
Sep 9 2020, 1:00 PM · VyOS 1.2 Crux (VyOS 1.2.6), VyOS 1.3 Equuleus
erkin renamed T1699: Default net.ipv6.route.max_size 32768 is too low from net.ipv6.route.max_size = 32768 to Default net.ipv6.route.max_size 32768 is too low.
Sep 9 2020, 12:58 PM · VyOS 1.2 Crux (VyOS 1.2.6)