os-builds/vyos

VyOS build in github actions with custom vyatta packages.

VyOS: Live Build using Github Actions

This repository provides a live build environment for VyOS using Github Actions.

TODO

• How to build Vyatta Packages for VyOS >= 1.4 (see pkgs-hub)?
• arm64 builds (e.g. for Banana Pi Routerboard)? - would be nice, but is not required

Releases

When initiating releases, ensure to create a new tag following the format: major version dot minor version anything (e.g., 1.3.3-4). This tagging approach is crucial for GitHub Actions workflow, specifically for ISO creation.

Presently, VyOS 1.3 (Equuleus) serves as the Long-Term Support (LTS) version. For instance, a release might be tagged as 1.3.3-4, signifying it as the fourth release within version 1.3.

Please note that the "latest release" checkbox should only be selected for LTS versions of VyOS.

Custom Packages

Building VyOS enables the ability to add custom packages to your iso image.

We added the following packages:

• prometheus/node_exporter: prometheus exporter for host metrics
• tynany/frr_exporter: prometheus exporter for free range routing metrics
• secshellnet/wpm-api-vyos: wireguard peer manager api
• marcelcoding/zia: Wireguard thorugh websockets
• simple webserver: for preseed, kickstart, ...

We are looking forward to add the following packages too:

• prometheus/snmp_exporter: prometheus exporter for metrics from snmp
• prometheus_wireguard_exporter: prometheus exporter for for wireguard metrics

vyos's Issues

Update PowerDNS recursor version to enable ipv6 records via /etc/hosts

dig AAAA services.domain.net @vyos.domain.net

doesn't respond with the ipv6 address, which has been created as static host mappings in vyos and do exist in /etc/hosts.

• https://forum.vyos.io/t/vyos-1-4-static-host-mapping-and-ipv6/8539
• https://blog.mana.ee/2017/11/30/configuring-a-and-aaaa-records-in-vyos/
• https://phabricator.vyos.net/T2683
• https://phabricator.vyos.net/T4239

Fixed in: github.com/PowerDNS/pdns/pull/11682

Provide checksum

Can you please provide a sha checksum for the iso release file?

node_exporter Integration

Integrate node_exporter as service.

ZIA-Server integration

It would be nice to be able to configure zia-server using the vyatta cli.
Possible commands may be something like this in the configuration mode:

# currently configured in /etc/default/zia-server
set service zia-server listen-address 0.0.0.0 port 80
set service zia-server upstream address 12.34.56.78
set service zia-server upstream port 51920
set service zia-server mode ws   # or tcp

For the operation mode something like this may be nice

# systemctl status zia-server
show zia-server

# journalctl -u zia-server | less
show log zia-server

# systemctl restart zia-server
restart zia-server

I found the following blog about adding custom operational mode commands:
https://blog.vyos.io/adding-custom-operational-mode-commands-to-vyos

The operation commands are easy to implement (working in my setup), but I'm not sure if this is the right path for the persistent implementation in the iso.

Maybe read blog.vyos.io/new-style-operational-mode-command-definitions-are-here and blog.vyos.io/things-the-new-style-configuration-mode-definitions-intentionally-do-not-support before.

sudo mkdir /opt/vyatta/share/vyatta-op/templates/show/zia-server
sudo cat <<_EOF > /opt/vyatta/share/vyatta-op/templates/show/zia-server/node.def
help: Show zia-server status
run: systemctl status zia-server
_EOF

sudo mkdir /opt/vyatta/share/vyatta-op/templates/show/log/zia-server
sudo cat <<_EOF > /opt/vyatta/share/vyatta-op/templates/show/log/zia-server/node.def
help: Show zia-server logs
run: journalctl -u zia-server | less
_EOF

sudo mkdir /opt/vyatta/share/vyatta-op/templates/restart/zia-server
sudo cat <<_EOF > /opt/vyatta/share/vyatta-op/templates/restart/zia-server/node.def
help: Restart zia-server
run: sudo systemctl restart zia-server
_EOF