Page MenuHomeVyOS Platform

erkin (Erkin)
UserAdministrator

Projects

User Details

User Since
Aug 20 2020, 9:55 AM (49 w, 1 d)
Roles
Administrator

Recent Activity

Tue, Jul 13

erkin closed T3679: Point the unexpected exception message link to the new rolling release location as Resolved.
Tue, Jul 13, 5:43 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus
erkin changed the status of T3679: Point the unexpected exception message link to the new rolling release location from Open to In progress.
Tue, Jul 13, 4:27 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus

Wed, Jul 7

erkin added a comment to T3628: commit-archive source-address Interface Broken.

@trae32566 I can't replicate this. Can you post your config?

Wed, Jul 7, 9:04 AM · VyOS 1.4 Sagitta
erkin changed the status of T3628: commit-archive source-address Interface Broken, a subtask of T3356: Script for remote file transfers, from Open to In progress.
Wed, Jul 7, 9:03 AM · VyOS 1.4 Sagitta
erkin changed the status of T3628: commit-archive source-address Interface Broken from Open to In progress.
Wed, Jul 7, 9:03 AM · VyOS 1.4 Sagitta

Thu, Jul 1

erkin changed the status of T3556: Commit-archive via scp causes 100% CPU on boot, a subtask of T3356: Script for remote file transfers, from Open to In progress.
Thu, Jul 1, 2:48 PM · VyOS 1.4 Sagitta
erkin changed the status of T3556: Commit-archive via scp causes 100% CPU on boot from Open to In progress.
Thu, Jul 1, 2:48 PM · VyOS 1.4 Sagitta

Jun 23 2021

erkin closed T3556: Commit-archive via scp causes 100% CPU on boot, a subtask of T3356: Script for remote file transfers, as Resolved.
Jun 23 2021, 9:51 AM · VyOS 1.4 Sagitta
erkin closed T3556: Commit-archive via scp causes 100% CPU on boot as Resolved.
Jun 23 2021, 9:51 AM · VyOS 1.4 Sagitta
erkin added a comment to T3556: Commit-archive via scp causes 100% CPU on boot.

Now that the Paramiko and Cryptography versions have been updated, does this problem persist with the newer nightlies? @SrividyaA @FileGo

Jun 23 2021, 9:19 AM · VyOS 1.4 Sagitta
erkin closed T3356: Script for remote file transfers, a subtask of T3355: Remove all remaining legacy Vyatta code, as Resolved.
Jun 23 2021, 9:11 AM · VyOS 1.4 Sagitta
erkin closed T3356: Script for remote file transfers as Resolved.
Jun 23 2021, 9:11 AM · VyOS 1.4 Sagitta
erkin changed the status of T3506: Migrate loadkey command to op-mode, a subtask of T3355: Remove all remaining legacy Vyatta code, from In progress to On hold.
Jun 23 2021, 8:49 AM · VyOS 1.4 Sagitta
erkin changed the status of T3506: Migrate loadkey command to op-mode from In progress to On hold.

Done with generate public-key-command. loadkey is deprecated and will be removed in a future version.

Jun 23 2021, 8:49 AM · VyOS 1.4 Sagitta
erkin changed the status of T3506: Migrate loadkey command to op-mode, a subtask of T3356: Script for remote file transfers, from In progress to On hold.
Jun 23 2021, 8:49 AM · VyOS 1.4 Sagitta
erkin closed T3644: Replace GCC with a simpler preprocessor for including nested XML snippets in XML documents as Resolved.
Jun 23 2021, 8:32 AM · VyOS 1.4 Sagitta

Jun 22 2021

erkin added a parent task for T3639: GCC preprocessor clobbers C comments: T3644: Replace GCC with a simpler preprocessor for including nested XML snippets in XML documents.
Jun 22 2021, 4:06 PM · VyOS 1.4 Sagitta
erkin added a subtask for T3644: Replace GCC with a simpler preprocessor for including nested XML snippets in XML documents: T3639: GCC preprocessor clobbers C comments.
Jun 22 2021, 4:06 PM · VyOS 1.4 Sagitta
erkin changed the status of T3644: Replace GCC with a simpler preprocessor for including nested XML snippets in XML documents from Open to In progress.
Jun 22 2021, 4:05 PM · VyOS 1.4 Sagitta

Jun 21 2021

erkin renamed T3378: commit-archive source-address broken for IPv6 addresses from commit-archive source-address Broken to commit-archive source-address broken for IPv6 addresses.
Jun 21 2021, 3:39 PM · VyOS 1.3 Equuleus
erkin changed the subtype of T3378: commit-archive source-address broken for IPv6 addresses from "Task" to "Bug".
Jun 21 2021, 3:38 PM · VyOS 1.3 Equuleus
erkin closed T3628: commit-archive source-address Interface Broken, a subtask of T3356: Script for remote file transfers, as Resolved.
Jun 21 2021, 4:56 AM · VyOS 1.4 Sagitta
erkin closed T3628: commit-archive source-address Interface Broken as Resolved.
Jun 21 2021, 4:56 AM · VyOS 1.4 Sagitta
erkin closed T3563: commit-archive breaks with IPv6 source addresses, a subtask of T3356: Script for remote file transfers, as Resolved.
Jun 21 2021, 4:55 AM · VyOS 1.4 Sagitta
erkin closed T3563: commit-archive breaks with IPv6 source addresses as Resolved.
Jun 21 2021, 4:55 AM · VyOS 1.4 Sagitta

Jun 20 2021

erkin changed the status of T3628: commit-archive source-address Interface Broken, a subtask of T3356: Script for remote file transfers, from Open to In progress.
Jun 20 2021, 3:49 PM · VyOS 1.4 Sagitta
erkin changed the status of T3628: commit-archive source-address Interface Broken from Open to In progress.
Jun 20 2021, 3:49 PM · VyOS 1.4 Sagitta
erkin claimed T3628: commit-archive source-address Interface Broken.
Jun 20 2021, 2:40 PM · VyOS 1.4 Sagitta
erkin added a comment to T3356: Script for remote file transfers.

Now that all major instances of curl have been replaced with the in-house script, we can begin to backport these changes to v1.3 in small pieces ahead of the first stable version.

Jun 20 2021, 2:38 PM · VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
Jun 20 2021, 2:30 PM · VyOS 1.4 Sagitta
erkin updated the task description for T3639: GCC preprocessor clobbers C comments.
Jun 20 2021, 1:57 PM · VyOS 1.4 Sagitta
erkin closed T3639: GCC preprocessor clobbers C comments as Resolved.
Jun 20 2021, 1:56 PM · VyOS 1.4 Sagitta
erkin added a comment to T3563: commit-archive breaks with IPv6 source addresses.

Now I see the problem. paramiko.client.SSHClient().close() calls paramiko.transport.Transport().close() which implicitly calls socket.close() regardless of whether the socket was internally created or externally provided. This is a bit counterintuitive but I'll simply remove the socket closing logic then.

Jun 20 2021, 11:39 AM · VyOS 1.4 Sagitta
erkin changed the subtype of T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up from "Task" to "Bug".
Jun 20 2021, 10:57 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus, VyOS 1.2 Crux
erkin added a subtask for T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up: T3054: unionfs-fuse process never stopped after close terminal in config mode.
Jun 20 2021, 10:57 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus, VyOS 1.2 Crux
erkin added a parent task for T3054: unionfs-fuse process never stopped after close terminal in config mode: T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up.
Jun 20 2021, 10:57 AM · VyOS 1.3 Equuleus, VyOS 1.2 Crux
erkin added a project to T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up: VyOS 1.4 Sagitta.
Jun 20 2021, 10:56 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus, VyOS 1.2 Crux
erkin added a subtask for T3355: Remove all remaining legacy Vyatta code: T689: Converting simple op-mode commands from vyatta-op to new syntax.
Jun 20 2021, 7:33 AM · VyOS 1.4 Sagitta
erkin added a parent task for T689: Converting simple op-mode commands from vyatta-op to new syntax: T3355: Remove all remaining legacy Vyatta code.
Jun 20 2021, 7:33 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Jun 18 2021

erkin removed a project from T3378: commit-archive source-address broken for IPv6 addresses: VyOS 1.4 Sagitta.
Jun 18 2021, 6:35 PM · VyOS 1.3 Equuleus

Jun 17 2021

erkin updated the task description for T3356: Script for remote file transfers.
Jun 17 2021, 2:08 PM · VyOS 1.4 Sagitta
erkin added a comment to T3356: Script for remote file transfers.

copy file still depends on vyatta-image-tools.pl. I think it merits a rewrite, maybe a simple file transfer script that uses a couple of basic routines for file:// and running:// and remote.py for everything else.

Jun 17 2021, 2:02 PM · VyOS 1.4 Sagitta
erkin added a comment to T3563: commit-archive breaks with IPv6 source addresses.

@trae32566 Does this problem still persist in the newest rolling release?

Jun 17 2021, 1:29 PM · VyOS 1.4 Sagitta

Jun 8 2021

erkin changed the status of T3378: commit-archive source-address broken for IPv6 addresses, a subtask of T3356: Script for remote file transfers, from Open to Needs testing.
Jun 8 2021, 2:31 PM · VyOS 1.4 Sagitta
erkin changed the status of T3378: commit-archive source-address broken for IPv6 addresses from Open to Needs testing.

This is resolved for 1.4. Do you still have this problem in 1.3 as of RC4? If so, I'll need to backport the changes.

Jun 8 2021, 2:31 PM · VyOS 1.3 Equuleus
erkin closed T3563: commit-archive breaks with IPv6 source addresses, a subtask of T3356: Script for remote file transfers, as Resolved.
Jun 8 2021, 2:20 PM · VyOS 1.4 Sagitta
erkin closed T3563: commit-archive breaks with IPv6 source addresses as Resolved.
Jun 8 2021, 2:20 PM · VyOS 1.4 Sagitta

Jun 6 2021

erkin claimed T3459: Inform the user when unable to install outdated image.
Jun 6 2021, 2:21 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Jun 2 2021

erkin changed the status of T3556: Commit-archive via scp causes 100% CPU on boot from Open to Needs testing.
Jun 2 2021, 9:57 AM · VyOS 1.4 Sagitta
erkin changed the status of T3556: Commit-archive via scp causes 100% CPU on boot, a subtask of T3356: Script for remote file transfers, from Open to Needs testing.
Jun 2 2021, 9:57 AM · VyOS 1.4 Sagitta
erkin changed the status of T3563: commit-archive breaks with IPv6 source addresses, a subtask of T3356: Script for remote file transfers, from Needs testing to In progress.
Jun 2 2021, 9:53 AM · VyOS 1.4 Sagitta
erkin changed the status of T3563: commit-archive breaks with IPv6 source addresses from Needs testing to In progress.
Jun 2 2021, 9:53 AM · VyOS 1.4 Sagitta
erkin changed the status of T2855: disabled vti interfaces still working from Open to Needs testing.

Waiting for T3595 to clear up before I can test this on rolling release.

Jun 2 2021, 8:40 AM · VyOS 1.2 Crux (VyOS 1.2.8), VyOS 1.3 Equuleus
erkin created T3595: Cannot create new VTI interface.
Jun 2 2021, 8:07 AM · VyOS 1.4 Sagitta
erkin changed the status of T2911: new pppoe warnings recently from Open to Needs testing.
Jun 2 2021, 7:38 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus
erkin closed T3233: Interface redirect to dum0 as Invalid.

I cannot replicate this bug in a clean install of 1.4-rolling-202105291042.

vyos@vyos# set interfaces dummy dum0 address 192.168.201.1/24
[edit]
vyos@vyos# commit
[edit]

Either there's something in your config meddling with the interface creation or (most likely) this bug was solved in the main branch since then.

Jun 2 2021, 7:34 AM · VyOS 1.4 Sagitta

May 31 2021

erkin added a comment to T1161: Does Vyos take advantage of linux's improved security features?.

Here are some kernel features we need to consider:

  1. Disable kexec. The user should never need to swap the kernel.
  2. Restrict access to /proc/kallsyms for regular users, which makes sense since we're using a custom kernel.
  3. Set hidepid to prevent regular users from seeing process IDs. Might be too intrusive.
  4. Harden BPF JIT. Might interfere with XDP. Testing necessary.
  5. Set kernel lockdown mode. Disables kexec and unprivileged BGP commands. Again, might interfere with XDP.
May 31 2021, 11:12 AM · VyOS 1.3 Equuleus
erkin added a comment to T1161: Does Vyos take advantage of linux's improved security features?.

An easy start would be adding

export DEB_BUILD_MAINT_OPTIONS = hardening=+all
export DEB_CFLAGS_MAINT_APPEND  = -Wall -pedantic
export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed -Wl,-z,-defs

to debian/rules to harden our C programs (which is currently only VyShim and XDP). hardening=+all passes PIE and bindnow linker options to GCC.

May 31 2021, 10:27 AM · VyOS 1.3 Equuleus

May 30 2021

erkin changed the status of T3506: Migrate loadkey command to op-mode, a subtask of T3355: Remove all remaining legacy Vyatta code, from Open to In progress.
May 30 2021, 10:21 AM · VyOS 1.4 Sagitta
erkin changed the status of T3506: Migrate loadkey command to op-mode, a subtask of T3356: Script for remote file transfers, from Open to In progress.
May 30 2021, 10:21 AM · VyOS 1.4 Sagitta
erkin changed the status of T3506: Migrate loadkey command to op-mode from Open to In progress.
May 30 2021, 10:21 AM · VyOS 1.4 Sagitta
erkin added a comment to T3378: commit-archive source-address broken for IPv6 addresses.

This is possibly a problem on curl's end but funnily enough, there's a similar problem with the native implementation over T3563. Once that's solved, this bug will be rendered moot.

May 30 2021, 10:17 AM · VyOS 1.3 Equuleus
erkin closed T3351: Installer checking MD5 checksums on the ISO image as Resolved.
May 30 2021, 10:16 AM · VyOS 1.4 Sagitta
erkin renamed T3563: commit-archive breaks with IPv6 source addresses from commit-archive Broken to commit-archive breaks with IPv6 source addresses.
May 30 2021, 10:04 AM · VyOS 1.4 Sagitta
erkin claimed T3378: commit-archive source-address broken for IPv6 addresses.
May 30 2021, 10:03 AM · VyOS 1.3 Equuleus
erkin closed T3508: Check if there's enough drive space for an upgrade before downloading an image, a subtask of T3356: Script for remote file transfers, as Resolved.
May 30 2021, 10:03 AM · VyOS 1.4 Sagitta
erkin closed T3508: Check if there's enough drive space for an upgrade before downloading an image as Resolved.

install-image now calls a routine that queries the size of the remote file and aborts if there isn't enough space to download the image.

May 30 2021, 10:03 AM · VyOS 1.3 Equuleus
erkin changed the status of T3563: commit-archive breaks with IPv6 source addresses, a subtask of T3356: Script for remote file transfers, from Open to Needs testing.
May 30 2021, 10:00 AM · VyOS 1.4 Sagitta
erkin changed the status of T3563: commit-archive breaks with IPv6 source addresses from Open to Needs testing.
May 30 2021, 10:00 AM · VyOS 1.4 Sagitta
erkin closed T1506: commit-archive scp/sftp public key authentication, a subtask of T3356: Script for remote file transfers, as Resolved.
May 30 2021, 9:59 AM · VyOS 1.4 Sagitta
erkin closed T1506: commit-archive scp/sftp public key authentication as Resolved.

commit-archive now uses Paramiko for SSH connections instead of curl and directly reads ~/.ssh/known_hosts if it exists.

May 30 2021, 9:59 AM · VyOS 1.3 Equuleus
erkin closed T3518: Warning messages when using SCP commit-archive, a subtask of T3356: Script for remote file transfers, as Resolved.
May 30 2021, 9:56 AM · VyOS 1.4 Sagitta
erkin closed T3518: Warning messages when using SCP commit-archive as Resolved.

This is a consequence of using an old Paramiko version. I just sent a PR upping the version of cryptography and Paramiko.

May 30 2021, 9:56 AM · VyOS 1.4 Sagitta
erkin claimed T3563: commit-archive breaks with IPv6 source addresses.
May 30 2021, 9:55 AM · VyOS 1.4 Sagitta
erkin updated the task description for T3356: Script for remote file transfers.
May 30 2021, 9:54 AM · VyOS 1.4 Sagitta
erkin added a parent task for T1866: Commit archive over SFTP doesn't work with non-standard ports: T3356: Script for remote file transfers.
May 30 2021, 9:54 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus
erkin added a subtask for T3356: Script for remote file transfers: T1866: Commit archive over SFTP doesn't work with non-standard ports.
May 30 2021, 9:54 AM · VyOS 1.4 Sagitta
erkin closed T1866: Commit archive over SFTP doesn't work with non-standard ports as Resolved.

New file transfer script parses the port field in the URL.

May 30 2021, 9:54 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus
erkin triaged T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up as Low priority.
May 30 2021, 9:51 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus, VyOS 1.2 Crux
erkin changed the status of T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up from Open to Confirmed.
May 30 2021, 9:50 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus, VyOS 1.2 Crux

May 18 2021

erkin added a subtask for T3356: Script for remote file transfers: T3556: Commit-archive via scp causes 100% CPU on boot.
May 18 2021, 11:19 AM · VyOS 1.4 Sagitta
erkin added a parent task for T3556: Commit-archive via scp causes 100% CPU on boot: T3356: Script for remote file transfers.
May 18 2021, 11:19 AM · VyOS 1.4 Sagitta
erkin claimed T3556: Commit-archive via scp causes 100% CPU on boot.
May 18 2021, 11:19 AM · VyOS 1.4 Sagitta
erkin added a subtask for T3356: Script for remote file transfers: T3508: Check if there's enough drive space for an upgrade before downloading an image.
May 18 2021, 11:18 AM · VyOS 1.4 Sagitta
erkin added a parent task for T3508: Check if there's enough drive space for an upgrade before downloading an image: T3356: Script for remote file transfers.
May 18 2021, 11:18 AM · VyOS 1.3 Equuleus

May 6 2021

erkin changed Is it a breaking change? from none to compatible on T3351: Installer checking MD5 checksums on the ISO image.
May 6 2021, 10:33 AM · VyOS 1.4 Sagitta
erkin triaged T3355: Remove all remaining legacy Vyatta code as Normal priority.
May 6 2021, 8:49 AM · VyOS 1.4 Sagitta
erkin changed the status of T3355: Remove all remaining legacy Vyatta code from Open to In progress.
May 6 2021, 7:55 AM · VyOS 1.4 Sagitta
erkin changed the status of T3351: Installer checking MD5 checksums on the ISO image from Open to In progress.
May 6 2021, 7:55 AM · VyOS 1.4 Sagitta
erkin changed the status of T936: Reimplementation of tech-support diagnostic file generation from In progress to On hold.
May 6 2021, 7:54 AM · Restricted Project, VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
erkin changed the status of T936: Reimplementation of tech-support diagnostic file generation, a subtask of T3355: Remove all remaining legacy Vyatta code, from In progress to On hold.
May 6 2021, 7:54 AM · VyOS 1.4 Sagitta
erkin changed the status of T3508: Check if there's enough drive space for an upgrade before downloading an image from Open to In progress.
May 6 2021, 7:54 AM · VyOS 1.3 Equuleus
erkin updated the task description for T3356: Script for remote file transfers.
May 6 2021, 6:36 AM · VyOS 1.4 Sagitta

May 1 2021

erkin claimed T3508: Check if there's enough drive space for an upgrade before downloading an image.
May 1 2021, 12:50 PM · VyOS 1.3 Equuleus

Apr 29 2021

erkin added a subtask for T3356: Script for remote file transfers: T3506: Migrate loadkey command to op-mode.
Apr 29 2021, 2:28 PM · VyOS 1.4 Sagitta
erkin added a parent task for T3506: Migrate loadkey command to op-mode: T3356: Script for remote file transfers.
Apr 29 2021, 2:28 PM · VyOS 1.4 Sagitta
erkin added a parent task for T3506: Migrate loadkey command to op-mode: T3355: Remove all remaining legacy Vyatta code.
Apr 29 2021, 2:17 PM · VyOS 1.4 Sagitta
erkin added a subtask for T3355: Remove all remaining legacy Vyatta code: T3506: Migrate loadkey command to op-mode.
Apr 29 2021, 2:17 PM · VyOS 1.4 Sagitta
erkin triaged T3506: Migrate loadkey command to op-mode as Low priority.
Apr 29 2021, 2:17 PM · VyOS 1.4 Sagitta

Apr 24 2021

erkin closed T3439: Commit-archive location not working for scp, a subtask of T3356: Script for remote file transfers, as Resolved.
Apr 24 2021, 2:18 PM · VyOS 1.4 Sagitta