bug report: 1.3-rolling-202009011736 and later fails to boot. Previous releases (eg. 1.3-rolling-202008301444) boot ok
This router is installed as a KVM VM running on a CentOS 8 host.
Output of serial console during boot follows:
---
Press ESC to enter the Grub menu...
GNU GRUB version 1.98+20100804-14+vyos1+helium1
+--------------------------------------------------------------------------+
|VyOS 1.3-rolling-202009011736 (KVM console) |
|VyOS 1.3-rolling-202009011736 (Serial console) |
|Lost password change 1.3-rolling-202009011736 (KVM console) |
|Lost password change 1.3-rolling-202009011736 (Serial console) |
|VyOS 1.3-rolling-202008301444 (KVM console) |
|VyOS 1.3-rolling-202008301444 (Serial console) |
|Lost password change 1.3-rolling-202008301444 (KVM console) |
|Lost password change 1.3-rolling-202008301444 (Serial console) |
|VyOS 1.2.0-rolling+201907090337 (KVM console) |
|VyOS 1.2.0-rolling+201907090337 (Serial console) |
|Lost password change 1.2.0-rolling+201907090337 (KVM console) |v
+--------------------------------------------------------------------------+
Use the ^ and v keys to select which entry is highlighted.
Press enter to boot the selected OS, 'e' to edit the commands
before booting or 'c' for a command-line.
The highlighted entry will be executed automatically in 0s.
Booting 'VyOS 1.3-rolling-202009011736 (Serial console)'
mount: mounting /dev/vda on /live/persistence/ failed: No such device
umount: /root: target is busy.
mount: /root/dev: /dev is not a block device.
Welcome to Debian GNU/Linux 10 (buster)!
[ OK ] Listening on initctl Compatibility Named Pipe.
[ OK ] Reached target Swap.
[ OK ] Set up automount Arbitrary…s File System Automount Point.
[ OK ] Listening on Syslog Socket.
[ OK ] Listening on Journal Audit Socket.
[ OK ] Listening on udev Control Socket.
[ OK ] Created slice User and Session Slice.
[ OK ] Listening on Journal Socket (/dev/log).
[ OK ] Started Forward Password R…uests to Wall Directory Watch.
[ OK ] Created slice system-serial\x2dgetty.slice.
[ OK ] Started Dispatch Password …ts to Console Directory Watch.
[ OK ] Reached target Paths.
[ OK ] Listening on udev Kernel Socket.
[ OK ] Reached target Local Encrypted Volumes.
[ OK ] Reached target Remote File Systems.
[ OK ] Created slice system-getty.slice.
[ OK ] Reached target Slices.
[ OK ] Listening on Journal Socket.
Mounting Huge Pages File System...
Starting Load Kernel Modules...
Starting Remount Root and Kernel File Systems...
Starting Journal Service...
Starting Create list of re…odes for the current kernel...
Mounting Kernel Debug File System...
Starting udev Coldplug all Devices...
Mounting POSIX Message Queue File System...
[ OK ] Mounted Huge Pages File System.
[ OK ] Started Remount Root and Kernel File Systems.
[ OK ] Started Load Kernel Modules.
[ OK ] Started Create list of req… nodes for the current kernel.
[ OK ] Mounted Kernel Debug File System.
[ OK ] Mounted POSIX Message Queue File System.
Starting Apply Kernel Variables...
Starting Load/Save Random Seed...
[ OK ] Started VyOS configuration daemon.
[ OK ] Started VyOS DNS configuration keeper.
Starting Create System Users...
[ OK ] Started Journal Service.
[ OK ] Started Apply Kernel Variables.
[ OK ] Started Load/Save Random Seed.
Starting Flush Journal to Persistent Storage...
[ OK ] Started Flush Journal to Persistent Storage.
[ OK ] Started Create System Users.
Starting Create Static Device Nodes in /dev...
[ OK ] Started udev Coldplug all Devices.
Starting Helper to synchronize boot up for ifupdown...
[ OK ] Started Create Static Device Nodes in /dev.
Starting udev Kernel Device Manager...
[ OK ] Reached target Local File Systems (Pre).
Mounting /tmp...
[ OK ] Started Helper to synchronize boot up for ifupdown.
[ OK ] Mounted /tmp.
[ OK ] Reached target Local File Systems.
Starting Create Volatile Files and Directories...
Starting Raise network interfaces...
[ OK ] Started udev Kernel Device Manager.
[ OK ] Started Create Volatile Files and Directories.
[ OK ] Reached target System Time Synchronized.
[ OK ] Started Entropy daemon using the HAVEGE algorithm.
Starting live-config conta…t process (late userspace)....
Starting Update UTMP about System Boot/Shutdown...
[ OK ] Started Update UTMP about System Boot/Shutdown.
[ OK ] Reached target System Initialization.
[ OK ] Started Daily rotation of log files.
[ OK ] Started Daily Cleanup of Temporary Directories.
[ OK ] Reached target Timers.
[ OK ] Listening on D-Bus System Message Bus Socket.
[ OK ] Listening on ACPID Listen Socket.
[ OK ] Reached target Sockets.
[ OK ] Found device /dev/ttyS0.
[ OK ] Started Raise network interfaces.
[ OK ] Reached target Network.
[ OK ] Reached target Network is Online.
[ OK ] Started live-config contai…oot process (late userspace)..
[ OK ] Reached target Basic System.
[ OK ] Started D-Bus System Message Bus.
Starting Login Service...
[ OK ] Started VyOS Router.
Starting OpenBSD Secure Shell session cleanup...
Starting LSB: powerful, ef…alable Mail Transport Agent...
Starting /etc/rc.local Compatibility...
Starting Permit User Sessions...
[ OK ] Started ACPI event daemon.
Starting LSB: AWS EC2 inst…tch and load ssh public key...
Starting LSB: Brings up/down network automatically...
Starting Atop process accounting daemon...
Starting Deferred execution scheduler...
Starting System Logging Service...
[ OK ] Started Regular background program processing daemon.
Starting Restore /etc/reso… the ppp link was shut down...
[ OK ] Started OpenBSD Secure Shell session cleanup.
[ OK ] Started LSB: powerful, eff…scalable Mail Transport Agent.
[ OK ] Started /etc/rc.local Compatibility.
[ OK ] Started Permit User Sessions.
[ OK ] Started LSB: Brings up/down network automatically.
[ OK ] Started Atop process accounting daemon.
[ OK ] Started Deferred execution scheduler.
[ OK ] Started Restore /etc/resol…re the ppp link was shut down.
[ 40.788514] vyos-router[712]: Waiting for NICs to settle down: settled in 1sec..
[ 46.450987] vyos-router[712]: Started watchfrr.
[ 46.530202] vyos-router[712]: Mounting VyOS Config...done.
---
After the above the router simply hangs. This router's only purpose is to provide tunneled IPv6 connectivity (courtesy Hurricane Electric) to a lab environment. Config follows:
---
vyos@rtr1:~$ show configuration
firewall {
all-ping enable
broadcast-ping disable
config-trap disable
group {
address-group admin_addresses {
address **.***.***.***-**.***.***.***.***
address **.***.***.***
address **.***.*.**
description "admin nets"
}
ipv6-network-group admin_nets_IPv6 {
description "admin nets"
network ****:***:****:**::/64
network ****:****:****:****::/64
}
network-group admin_nets {
description "admin nets"
network **.**.**.**/28
network ***.***.***.*/22
network ***.***.***.*/18
}
}
ipv6-name WANv6_IN {
default-action drop
enable-default-log
rule 10 {
action accept
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
rule 30 {
action accept
description "Allow IPv6 icmp"
protocol icmpv6
}
}
ipv6-name WANv6_LOCAL {
default-action drop
description "WAN inbound traffic to the router"
enable-default-log
rule 10 {
action accept
description "Allow established/related sessions"
state {
established enable
related enable
}
}
rule 15 {
action accept
protocol all
source {
group {
network-group admin_nets_IPv6
}
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
rule 30 {
action accept
description "Allow IPv6 icmp"
protocol ipv6-icmp
}
rule 40 {
action accept
description "allow dhcpv6"
destination {
port 546
}
protocol udp
source {
port 547
}
}
}
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name WAN_IN {
default-action drop
description "WAN to internal"
rule 20 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 30 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
}
name WAN_LOCAL {
default-action drop
description "WAN to router"
rule 5 {
action accept
description "HE.NET IPv6 Tunnel source"
protocol all
source {
address **.**.***.**
}
}
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 15 {
action accept
description "allow admin nets"
protocol all
source {
group {
address-group admin_addresses
}
}
}
rule 20 {
action accept
description "allow admin nets"
protocol all
source {
group {
network-group admin_nets
}
}
}
rule 30 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
}
receive-redirects disable
send-redirects enable
source-validation disable
syn-cookies enable
twa-hazards-protection disable
}
interfaces {
ethernet eth0 {
address **.***.***.***/24
duplex auto
firewall {
local {
ipv6-name WANv6_LOCAL
name WAN_LOCAL
}
}
hw-id **:**:**:**:**:**
ipv6 {
address {
eui64 ****:***:****:**::/64
}
dup-addr-detect-transmits 1
}
smp-affinity auto
speed auto
}
loopback lo {
}
tunnel tun0 {
address ****:***:****:**::2/64
description "HE.NET IPv6 Tunnel"
encapsulation sit
local-ip **.***.***.***
multicast disable
remote-ip **.**.***.**
}
}
protocols {
static {
interface-route6 ::/0 {
next-hop-interface tun0 {
}
}
route 0.0.0.0/0 {
next-hop **.***.***.* {
}
}
}
}
service {
lldp {
interface all {
}
legacy-protocols {
cdp
}
}
router-advert {
interface eth0 {
hop-limit 64
interval {
max 600
}
name-server 2001:470:20::2
name-server 2001:4860:4860::8844
prefix ****:***:****:**::/64 {
valid-lifetime 2592000
}
reachable-time 0
retrans-timer 0
}
}
ssh {
disable-host-validation
port 22
}
}
system {
config-management {
commit-revisions 20
}
console {
device ttyS0 {
speed 9600
}
}
domain-name *********
host-name rtr1
login {
user vyos {
authentication {
encrypted-password ****************
plaintext-password ****************
}
}
}
name-server 74.82.42.42
name-server 2001:470:20::2
ntp {
server 2.pool.ntp.org {
}
server 2.rhel.pool.ntp.org {
}
server 2.us.pool.ntp.org {
}
server ********* {
}
server stratum2-01.sfo01.publicntp.org {
}
}
syslog {
global {
facility all {
level notice
}
facility protocols {
level debug
}
}
}
time-zone US/Hawaii
}
---
Please let me know if you need additional info.