Vrrp transition scripts breaking my vyos

Hello,
I’m having an issue with vrrp transition scripts. It seems the moving of the floating IP/mac works ok, but when I try to enable the transition scripts my system becomes corrupted in some way and anything I try to do I set/del I get “Set Failed” … I have to manually edit /config/config.boot and remove the transition scripts section and reboot to get both nodes back to working. I have simplified the transition scripts to be very simple, just edit the description of eth0, and I’m still getting the same issue.

vyos@vyos-green:~$ show version
Version:          VyOS 1.4-rolling-202301230317
Release train:    current

Built by:         autobuild@vyos.net
Built on:         Mon 23 Jan 2023 03:17 UTC
Build UUID:       340f2d5f-c685-4e3f-995a-489f662e0a43
Build commit ID:  ac73adf9c19b4e

Architecture:     x86_64
Boot via:         installed image
System type:      KVM guest

Hardware vendor:  QEMU
Hardware model:   Standard PC (i440FX + PIIX, 1996)
Hardware S/N:
Hardware UUID:    582d55c3-ba56-4a6c-969a-a1430b9bf8ba

Copyright:        VyOS maintainers and contributors

other node is the same but with a lower priority, I haven’t added other memebers to the sync group until I get this working, but even if I do it without a sync group I get the same error.

vyos@vyos-green# show high-availability
 vrrp {
     group Test {
         address 192.168.223.1/24 {
         }
         interface eth1
         priority 110
         rfc3768-compatibility
         vrid 10
     }
     sync-group SYNC-GROUP {
         member Test
         transition-script {
             backup /config/scripts/vrrp-master.sh
             fault /config/scripts/vrrp-fail.sh
             master /config/scripts/vrrp-fail.sh
             stop /config/scripts/vrrp-fail.sh
         }
     }
 }
vyos@vyos-green:~$ show vrrp
Name    Interface      VRID  State      Priority  Last Transition
------  -----------  ------  -------  ----------  -----------------
Test    eth1v10v4        10  MASTER          110  7m49s

vyos@vyos-blue:~$ show vrrp
Name    Interface      VRID  State      Priority  Last Transition
------  -----------  ------  -------  ----------  -----------------
Test    eth1v10v4        10  BACKUP          100  7m38s

vyos@vyos-green:~$ cat /config/scripts/vrrp-master.sh
#!/bin/vbash

source /opt/vyatta/etc/functions/script-template

configure
set interfaces ethernet eth0 description 'WAN Hello'
commit
exit

vyos@vyos-green:~$ cat /config/scripts/vrrp-fail.sh
#!/bin/vbash

source /opt/vyatta/etc/functions/script-template

configure
set interfaces ethernet eth0 description 'WAN bye'
commit
exit
vyos@vyos-green:~$ show log vrrp
-- Journal begins at Mon 2023-01-23 18:56:13 UTC, ends at Mon 2023-01-23 19:17:26 UTC. --
Jan 23 19:14:56 systemd[1]: Started Keepalive Daemon (LVS and VRRP).
Jan 23 19:14:56 Keepalived[1576]: Starting Keepalived v2.2.7 (01/16,2022)
Jan 23 19:14:56 Keepalived[1576]: Running on Linux 6.1.7-amd64-vyos #1 SMP PREEMPT_DYNAMIC Wed Jan 18 20:33:00 UTC 2023 (built for Linux 5.10.149)
Jan 23 19:14:56 Keepalived[1576]: Command line: '/usr/sbin/keepalived' '--use-file' '/run/keepalived/keepalived.conf' '--pid'
Jan 23 19:14:56 Keepalived[1576]:               '/run/keepalived/keepalived.pid' '--dont-fork' '--snmp'
Jan 23 19:14:56 Keepalived[1576]: Configuration file /run/keepalived/keepalived.conf
Jan 23 19:14:56 Keepalived[1576]: NOTICE: setting config option max_auto_priority should result in better keepalived performance
Jan 23 19:14:56 Keepalived[1576]: Starting VRRP child process, pid=1592
Jan 23 19:14:56 Keepalived_vrrp[1592]: Starting SNMP subagent
Jan 23 19:14:56 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:14:56 Keepalived_vrrp[1592]: SECURITY VIOLATION - scripts are being executed but script_security not enabled.
Jan 23 19:14:56 Keepalived_vrrp[1592]: Sync group SYNC-GROUP has only 1 virtual router(s) - this probably isn't what you want
Jan 23 19:14:56 Keepalived_vrrp[1592]: use_vmac or no_accept/strict specified, but no firewall configured - using nftables
Jan 23 19:14:56 Keepalived_vrrp[1592]: (Test) Entering BACKUP STATE (init)
Jan 23 19:14:56 Keepalived[1576]: Startup complete
Jan 23 19:14:57 keepalived-fifo.py[1606]: Starting FIFO pipe for Keepalived
Jan 23 19:14:57 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 1/20)
Jan 23 19:14:58 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 2/20)
Jan 23 19:14:59 keepalived-fifo.py[1606]: Loaded configuration: {'group': {'Test': {'address': {'192.168.223.1/24': {}}, 'interface': 'eth1', 'priority': '110', 'rfc37:
-- Journal begins at Mon 2023-01-23 18:56:13 UTC, ends at Mon 2023-01-23 19:17:26 UTC. --
Jan 23 19:14:56 systemd[1]: Started Keepalive Daemon (LVS and VRRP).
Jan 23 19:14:56 Keepalived[1576]: Starting Keepalived v2.2.7 (01/16,2022)
Jan 23 19:14:56 Keepalived[1576]: Running on Linux 6.1.7-amd64-vyos #1 SMP PREEMPT_DYNAMIC Wed Jan 18 20:33:00 UTC 2023 (built for Linux 5.10.149)
Jan 23 19:14:56 Keepalived[1576]: Command line: '/usr/sbin/keepalived' '--use-file' '/run/keepalived/keepalived.conf' '--pid'
Jan 23 19:14:56 Keepalived[1576]:               '/run/keepalived/keepalived.pid' '--dont-fork' '--snmp'
Jan 23 19:14:56 Keepalived[1576]: Configuration file /run/keepalived/keepalived.conf
Jan 23 19:14:56 Keepalived[1576]: NOTICE: setting config option max_auto_priority should result in better keepalived performance
Jan 23 19:14:56 Keepalived[1576]: Starting VRRP child process, pid=1592
Jan 23 19:14:56 Keepalived_vrrp[1592]: Starting SNMP subagent
Jan 23 19:14:56 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:14:56 Keepalived_vrrp[1592]: SECURITY VIOLATION - scripts are being executed but script_security not enabled.
Jan 23 19:14:56 Keepalived_vrrp[1592]: Sync group SYNC-GROUP has only 1 virtual router(s) - this probably isn't what you want
Jan 23 19:14:56 Keepalived_vrrp[1592]: use_vmac or no_accept/strict specified, but no firewall configured - using nftables
Jan 23 19:14:56 Keepalived_vrrp[1592]: (Test) Entering BACKUP STATE (init)
Jan 23 19:14:56 Keepalived[1576]: Startup complete
Jan 23 19:14:57 keepalived-fifo.py[1606]: Starting FIFO pipe for Keepalived
Jan 23 19:14:57 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 1/20)
Jan 23 19:14:58 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 2/20)
Jan 23 19:14:59 keepalived-fifo.py[1606]: Loaded configuration: {'group': {'Test': {'address': {'192.168.223.1/24': {}}, 'interface': 'eth1', 'priority': '110', 'rfc3768:
-- Journal begins at Mon 2023-01-23 18:56:13 UTC, ends at Mon 2023-01-23 19:17:26 UTC. --
Jan 23 19:14:56 systemd[1]: Started Keepalive Daemon (LVS and VRRP).
Jan 23 19:14:56 Keepalived[1576]: Starting Keepalived v2.2.7 (01/16,2022)
Jan 23 19:14:56 Keepalived[1576]: Running on Linux 6.1.7-amd64-vyos #1 SMP PREEMPT_DYNAMIC Wed Jan 18 20:33:00 UTC 2023 (built for Linux 5.10.149)
Jan 23 19:14:56 Keepalived[1576]: Command line: '/usr/sbin/keepalived' '--use-file' '/run/keepalived/keepalived.conf' '--pid'
Jan 23 19:14:56 Keepalived[1576]:               '/run/keepalived/keepalived.pid' '--dont-fork' '--snmp'
Jan 23 19:14:56 Keepalived[1576]: Configuration file /run/keepalived/keepalived.conf
Jan 23 19:14:56 Keepalived[1576]: NOTICE: setting config option max_auto_priority should result in better keepalived performance
Jan 23 19:14:56 Keepalived[1576]: Starting VRRP child process, pid=1592
Jan 23 19:14:56 Keepalived_vrrp[1592]: Starting SNMP subagent
Jan 23 19:14:56 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:14:56 Keepalived_vrrp[1592]: SECURITY VIOLATION - scripts are being executed but script_security not enabled.
Jan 23 19:14:56 Keepalived_vrrp[1592]: Sync group SYNC-GROUP has only 1 virtual router(s) - this probably isn't what you want
Jan 23 19:14:56 Keepalived_vrrp[1592]: use_vmac or no_accept/strict specified, but no firewall configured - using nftables
Jan 23 19:14:56 Keepalived_vrrp[1592]: (Test) Entering BACKUP STATE (init)
Jan 23 19:14:56 Keepalived[1576]: Startup complete
Jan 23 19:14:57 keepalived-fifo.py[1606]: Starting FIFO pipe for Keepalived
Jan 23 19:14:57 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 1/20)
Jan 23 19:14:58 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 2/20)
Jan 23 19:14:59 keepalived-fifo.py[1606]: Loaded configuration: {'group': {'Test': {'address': {'192.168.223.1/24': {}}, 'interface': 'eth1', 'priority': '110', 'rfc3768_compat:
-- Journal begins at Mon 2023-01-23 18:56:13 UTC, ends at Mon 2023-01-23 19:17:26 UTC. --
Jan 23 19:14:56 systemd[1]: Started Keepalive Daemon (LVS and VRRP).
Jan 23 19:14:56 Keepalived[1576]: Starting Keepalived v2.2.7 (01/16,2022)
Jan 23 19:14:56 Keepalived[1576]: Running on Linux 6.1.7-amd64-vyos #1 SMP PREEMPT_DYNAMIC Wed Jan 18 20:33:00 UTC 2023 (built for Linux 5.10.149)
Jan 23 19:14:56 Keepalived[1576]: Command line: '/usr/sbin/keepalived' '--use-file' '/run/keepalived/keepalived.conf' '--pid'
Jan 23 19:14:56 Keepalived[1576]:               '/run/keepalived/keepalived.pid' '--dont-fork' '--snmp'
Jan 23 19:14:56 Keepalived[1576]: Configuration file /run/keepalived/keepalived.conf
Jan 23 19:14:56 Keepalived[1576]: NOTICE: setting config option max_auto_priority should result in better keepalived performance
Jan 23 19:14:56 Keepalived[1576]: Starting VRRP child process, pid=1592
Jan 23 19:14:56 Keepalived_vrrp[1592]: Starting SNMP subagent
Jan 23 19:14:56 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:14:56 Keepalived_vrrp[1592]: SECURITY VIOLATION - scripts are being executed but script_security not enabled.
Jan 23 19:14:56 Keepalived_vrrp[1592]: Sync group SYNC-GROUP has only 1 virtual router(s) - this probably isn't what you want
Jan 23 19:14:56 Keepalived_vrrp[1592]: use_vmac or no_accept/strict specified, but no firewall configured - using nftables
Jan 23 19:14:56 Keepalived_vrrp[1592]: (Test) Entering BACKUP STATE (init)
Jan 23 19:14:56 Keepalived[1576]: Startup complete
Jan 23 19:14:57 keepalived-fifo.py[1606]: Starting FIFO pipe for Keepalived
Jan 23 19:14:57 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 1/20)
Jan 23 19:14:58 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 2/20)
Jan 23 19:14:59 keepalived-fifo.py[1606]: Loaded configuration: {'group': {'Test': {'address': {'192.168.223.1/24': {}}, 'interface': 'eth1', 'priority': '110', 'rfc3768_compati:
-- Journal begins at Mon 2023-01-23 18:56:13 UTC, ends at Mon 2023-01-23 19:17:26 UTC. --
Jan 23 19:14:56 systemd[1]: Started Keepalive Daemon (LVS and VRRP).
Jan 23 19:14:56 Keepalived[1576]: Starting Keepalived v2.2.7 (01/16,2022)
Jan 23 19:14:56 Keepalived[1576]: Running on Linux 6.1.7-amd64-vyos #1 SMP PREEMPT_DYNAMIC Wed Jan 18 20:33:00 UTC 2023 (built for Linux 5.10.149)
Jan 23 19:14:56 Keepalived[1576]: Command line: '/usr/sbin/keepalived' '--use-file' '/run/keepalived/keepalived.conf' '--pid'
Jan 23 19:14:56 Keepalived[1576]:               '/run/keepalived/keepalived.pid' '--dont-fork' '--snmp'
Jan 23 19:14:56 Keepalived[1576]: Configuration file /run/keepalived/keepalived.conf
Jan 23 19:14:56 Keepalived[1576]: NOTICE: setting config option max_auto_priority should result in better keepalived performance
Jan 23 19:14:56 Keepalived[1576]: Starting VRRP child process, pid=1592
Jan 23 19:14:56 Keepalived_vrrp[1592]: Starting SNMP subagent
Jan 23 19:14:56 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:14:56 Keepalived_vrrp[1592]: SECURITY VIOLATION - scripts are being executed but script_security not enabled.
Jan 23 19:14:56 Keepalived_vrrp[1592]: Sync group SYNC-GROUP has only 1 virtual router(s) - this probably isn't what you want
Jan 23 19:14:56 Keepalived_vrrp[1592]: use_vmac or no_accept/strict specified, but no firewall configured - using nftables
Jan 23 19:14:56 Keepalived_vrrp[1592]: (Test) Entering BACKUP STATE (init)
Jan 23 19:14:56 Keepalived[1576]: Startup complete
Jan 23 19:14:57 keepalived-fifo.py[1606]: Starting FIFO pipe for Keepalived
Jan 23 19:14:57 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 1/20)
Jan 23 19:14:58 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 2/20)
Jan 23 19:14:59 keepalived-fifo.py[1606]: Loaded configuration: {'group': {'Test': {'address': {'192.168.223.1/24': {}}, 'interface': 'eth1', 'priority': '110', 'rfc3768_compatibili:
-- Journal begins at Mon 2023-01-23 18:56:13 UTC, ends at Mon 2023-01-23 19:17:26 UTC. --
Jan 23 19:14:56 systemd[1]: Started Keepalive Daemon (LVS and VRRP).
Jan 23 19:14:56 Keepalived[1576]: Starting Keepalived v2.2.7 (01/16,2022)
Jan 23 19:14:56 Keepalived[1576]: Running on Linux 6.1.7-amd64-vyos #1 SMP PREEMPT_DYNAMIC Wed Jan 18 20:33:00 UTC 2023 (built for Linux 5.10.149)
Jan 23 19:14:56 Keepalived[1576]: Command line: '/usr/sbin/keepalived' '--use-file' '/run/keepalived/keepalived.conf' '--pid'
Jan 23 19:14:56 Keepalived[1576]:               '/run/keepalived/keepalived.pid' '--dont-fork' '--snmp'
Jan 23 19:14:56 Keepalived[1576]: Configuration file /run/keepalived/keepalived.conf
Jan 23 19:14:56 Keepalived[1576]: NOTICE: setting config option max_auto_priority should result in better keepalived performance
Jan 23 19:14:56 Keepalived[1576]: Starting VRRP child process, pid=1592
Jan 23 19:14:56 Keepalived_vrrp[1592]: Starting SNMP subagent
Jan 23 19:14:56 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:14:56 Keepalived_vrrp[1592]: SECURITY VIOLATION - scripts are being executed but script_security not enabled.
Jan 23 19:14:56 Keepalived_vrrp[1592]: Sync group SYNC-GROUP has only 1 virtual router(s) - this probably isn't what you want
Jan 23 19:14:56 Keepalived_vrrp[1592]: use_vmac or no_accept/strict specified, but no firewall configured - using nftables
Jan 23 19:14:56 Keepalived_vrrp[1592]: (Test) Entering BACKUP STATE (init)
Jan 23 19:14:56 Keepalived[1576]: Startup complete
Jan 23 19:14:57 keepalived-fifo.py[1606]: Starting FIFO pipe for Keepalived
Jan 23 19:14:57 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 1/20)
Jan 23 19:14:58 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 2/20)
Jan 23 19:14:59 keepalived-fifo.py[1606]: Loaded configuration: {'group': {'Test': {'address': {'192.168.223.1/24': {}}, 'interface': 'eth1', 'priority': '110', 'rfc3768_compatibility:
-- Journal begins at Mon 2023-01-23 18:56:13 UTC, ends at Mon 2023-01-23 19:17:26 UTC. --
Jan 23 19:14:56 systemd[1]: Started Keepalive Daemon (LVS and VRRP).
Jan 23 19:14:56 Keepalived[1576]: Starting Keepalived v2.2.7 (01/16,2022)
Jan 23 19:14:56 Keepalived[1576]: Running on Linux 6.1.7-amd64-vyos #1 SMP PREEMPT_DYNAMIC Wed Jan 18 20:33:00 UTC 2023 (built for Linux 5.10.149)
Jan 23 19:14:56 Keepalived[1576]: Command line: '/usr/sbin/keepalived' '--use-file' '/run/keepalived/keepalived.conf' '--pid'
Jan 23 19:14:56 Keepalived[1576]:               '/run/keepalived/keepalived.pid' '--dont-fork' '--snmp'
Jan 23 19:14:56 Keepalived[1576]: Configuration file /run/keepalived/keepalived.conf
Jan 23 19:14:56 Keepalived[1576]: NOTICE: setting config option max_auto_priority should result in better keepalived performance
Jan 23 19:14:56 Keepalived[1576]: Starting VRRP child process, pid=1592
Jan 23 19:14:56 Keepalived_vrrp[1592]: Starting SNMP subagent
Jan 23 19:14:56 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:14:56 Keepalived_vrrp[1592]: SECURITY VIOLATION - scripts are being executed but script_security not enabled.
Jan 23 19:14:56 Keepalived_vrrp[1592]: Sync group SYNC-GROUP has only 1 virtual router(s) - this probably isn't what you want
Jan 23 19:14:56 Keepalived_vrrp[1592]: use_vmac or no_accept/strict specified, but no firewall configured - using nftables
Jan 23 19:14:56 Keepalived_vrrp[1592]: (Test) Entering BACKUP STATE (init)
Jan 23 19:14:56 Keepalived[1576]: Startup complete
Jan 23 19:14:57 keepalived-fifo.py[1606]: Starting FIFO pipe for Keepalived
Jan 23 19:14:57 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 1/20)
Jan 23 19:14:58 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 2/20)
Jan 23 19:14:59 keepalived-fifo.py[1606]: Loaded configuration: {'group': {'Test': {'address': {'192.168.223.1/24': {}}, 'interface': 'eth1', 'priority': '110', 'rfc3768_compatibility':
-- Journal begins at Mon 2023-01-23 18:56:13 UTC, ends at Mon 2023-01-23 19:17:26 UTC. --
-- Journal begins at Mon 2023-01-23 18:56:13 UTC, ends at Mon 2023-01-23 19:17:26 UTC. --
Jan 23 19:14:56 systemd[1]: Started Keepalive Daemon (LVS and VRRP).
Jan 23 19:14:56 Keepalived[1576]: Starting Keepalived v2.2.7 (01/16,2022)
Jan 23 19:14:56 Keepalived[1576]: Running on Linux 6.1.7-amd64-vyos #1 SMP PREEMPT_DYNAMIC Wed Jan 18 20:33:00 UTC 2023 (built for Linux 5.10.149)
Jan 23 19:14:56 Keepalived[1576]: Command line: '/usr/sbin/keepalived' '--use-file' '/run/keepalived/keepalived.conf' '--pid'
Jan 23 19:14:56 Keepalived[1576]:               '/run/keepalived/keepalived.pid' '--dont-fork' '--snmp'
Jan 23 19:14:56 Keepalived[1576]: Configuration file /run/keepalived/keepalived.conf
Jan 23 19:14:56 Keepalived[1576]: NOTICE: setting config option max_auto_priority should result in better keepalived performance
Jan 23 19:14:56 Keepalived[1576]: Starting VRRP child process, pid=1592
Jan 23 19:14:56 Keepalived_vrrp[1592]: Starting SNMP subagent
Jan 23 19:14:56 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:14:56 Keepalived_vrrp[1592]: SECURITY VIOLATION - scripts are being executed but script_security not enabled.
Jan 23 19:14:56 Keepalived_vrrp[1592]: Sync group SYNC-GROUP has only 1 virtual router(s) - this probably isn't what you want
Jan 23 19:14:56 Keepalived_vrrp[1592]: use_vmac or no_accept/strict specified, but no firewall configured - using nftables
Jan 23 19:14:56 Keepalived_vrrp[1592]: (Test) Entering BACKUP STATE (init)
Jan 23 19:14:56 Keepalived[1576]: Startup complete
Jan 23 19:14:57 keepalived-fifo.py[1606]: Starting FIFO pipe for Keepalived
Jan 23 19:14:57 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 1/20)
Jan 23 19:14:58 keepalived-fifo.py[1606]: Attempt to load keepalived configuration aborted due to a commit in progress (attempt 2/20)
Jan 23 19:14:59 keepalived-fifo.py[1606]: Loaded configuration: {'group': {'Test': {'address': {'192.168.223.1/24': {}}, 'interface': 'eth1', 'priority': '110', 'rfc3768_compatibility':
 {}, 'vrid': '10'}}, 'sync_group': {'SYNC-GROUP': {'member': ['Test'], 'transition_script': {'backup': '/config/scripts/vrrp-master.sh', 'fault': '/config/scripts/vrrp-fail.sh', 'master
': '/config/scripts/vrrp-fail.sh', 'stop': '/config/scripts/vrrp-fail.sh'}}}}
Jan 23 19:14:59 keepalived-fifo.py[1606]: PIPE already exist: /run/keepalived/keepalived_notify_fifo
Jan 23 19:14:59 keepalived-fifo.py[1606]: Message reading start
Jan 23 19:14:59 keepalived-fifo.py[1606]: Message processing start
Jan 23 19:14:59 keepalived-fifo.py[1606]: Received message: GROUP "SYNC-GROUP" BACKUP 0
Jan 23 19:14:59 keepalived-fifo.py[1606]: GROUP SYNC-GROUP changed state to BACKUP
Jan 23 19:14:59 keepalived-fifo.py[1606]: Running the command: /config/scripts/vrrp-master.sh
Jan 23 19:14:59 sudo[1924]:     root : PWD=/ ; USER=root ; COMMAND=/usr/bin/sh -c /usr/sbin/vyshim VYOS_TAGNODE_VALUE='eth0' /usr/libexec/vyos/conf_mode/interfaces-ethernet.py
Jan 23 19:14:59 sudo[1924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Jan 23 19:14:59 sudo[1924]: pam_unix(sudo:session): session closed for user root
Jan 23 19:15:00 sudo[1984]:     root : PWD=/ ; USER=root ; COMMAND=/usr/bin/mv /tmp/config.boot.1977 /opt/vyatta/etc/config/archive/config.boot
Jan 23 19:15:00 sudo[1984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Jan 23 19:15:00 sudo[1984]: pam_unix(sudo:session): session closed for user root
Jan 23 19:15:00 sudo[1986]:     root : PWD=/ ; USER=root ; COMMAND=/usr/sbin/logrotate -f -s /opt/vyatta/etc/config/archive/lr.state /opt/vyatta/etc/config/archive/lr.conf
Jan 23 19:15:00 sudo[1986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Jan 23 19:15:00 sudo[1986]: pam_unix(sudo:session): session closed for user root
Jan 23 19:15:00 commit[1988]: Successful change to active configuration by user root on unknown
Jan 23 19:15:00 keepalived-fifo.py[1606]: Received message: INSTANCE "Test" BACKUP 110
Jan 23 19:15:00 keepalived-fifo.py[1606]: INSTANCE Test changed state to BACKUP
Jan 23 19:15:00 Keepalived_vrrp[1592]: (Test) Entering MASTER STATE
Jan 23 19:15:00 Keepalived_vrrp[1592]: VRRP_Group(SYNC-GROUP) Syncing instances to MASTER state
Jan 23 19:15:00 keepalived-fifo.py[1606]: Received message: INSTANCE "Test" MASTER 110
Jan 23 19:15:00 keepalived-fifo.py[1606]: INSTANCE Test changed state to MASTER
Jan 23 19:15:00 keepalived-fifo.py[1606]: Received message: GROUP "SYNC-GROUP" MASTER 0
Jan 23 19:15:00 keepalived-fifo.py[1606]: GROUP SYNC-GROUP changed state to MASTER
Jan 23 19:15:00 keepalived-fifo.py[1606]: Running the command: /config/scripts/vrrp-fail.sh
Jan 23 19:15:00 sudo[2075]:     root : PWD=/ ; USER=root ; COMMAND=/usr/bin/sh -c /usr/sbin/vyshim VYOS_TAGNODE_VALUE='eth0' /usr/libexec/vyos/conf_mode/interfaces-ethernet.py
Jan 23 19:15:00 sudo[2075]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Jan 23 19:15:01 sudo[2075]: pam_unix(sudo:session): session closed for user root
Jan 23 19:15:01 sudo[2134]:     root : PWD=/ ; USER=root ; COMMAND=/usr/bin/mv /tmp/config.boot.2127 /opt/vyatta/etc/config/archive/config.boot
Jan 23 19:15:01 sudo[2134]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Jan 23 19:15:01 sudo[2134]: pam_unix(sudo:session): session closed for user root
Jan 23 19:15:01 sudo[2136]:     root : PWD=/ ; USER=root ; COMMAND=/usr/sbin/logrotate -f -s /opt/vyatta/etc/config/archive/lr.state /opt/vyatta/etc/config/archive/lr.conf
Jan 23 19:15:01 sudo[2136]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Jan 23 19:15:01 sudo[2136]: pam_unix(sudo:session): session closed for user root
Jan 23 19:15:01 commit[2138]: Successful change to active configuration by user root on unknown
Jan 23 19:15:11 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:15:26 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:15:41 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:15:56 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:16:11 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:16:26 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:16:41 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:16:56 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:17:11 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
Jan 23 19:17:26 Keepalived_vrrp[1592]: Warning: Failed to connect to the agentx master agent ([NIL]):
vyos@vyos-green:~$ date -u
Mon 23 Jan 2023 07:18:09 PM UTC

Any help would be appreciated… thanks!

It happens because scripts run as ‘root’ and after running the script the permissions on the config lock out normal users.

To fix, add

if [ $(id -gn) != vyattacfg ]; then
    exec sg vyattacfg "$0 $*"
fi

at top of script, before source /opt/vyatta/etc/functions/script-template

1 Like

Hi @einsibjarni thanks! that fixed it!