Stuck in postmaster update hell...

How do I change my ruby gem env settings?

I'm getting this: Could not find 'prawn-icon' (~> 3.0.0) - did find: [prawn-icon-3.1.0]

EuroBSDCon 2022 starts in 46 minutes

only courses on the spot today and tommorow tough, but Social online tommorow evening and talk stream on Saturday and Sunday

luna: is URL for the stream known?

meka: not yet i think will be announced during tommorow

hi all

hey

is there some web interface / overview of the `pkg` binary repositories, like the linuxen have?

freshports?

freshports indeed

freshports has the versions of the non-binary packages tho

as in, the ports in the ports repo, not the actual version of the binaries

like it says restic 0.14 on freshports, pkg still has 0.13 tho

see freshports.org/sysutils/restic

Title: FreshPorts -- sysutils/restic: Fast, secure, efficient backup program

whereas `pkg` still installs 0.13.1_1

or am I doing something wrong?

i'm on 13.1-RELEASE-p2, amd64

maybe looking through this? pkg-status.freebsd.org , finding the jail and ports tree you are installing packages from, and looking at what was last built. although you need IPv6 to view the individual poudriere pages as they don't use IPv4

also making sure you are using latest and not quarterly

if I do pkg search restic then it shows me 0.14.0_1 though so I expect you're using quarterly and not latest

do pkg -vv and look at the url

ooh, is it possible my pkg installs the quarterly, not the latest?

ah, just read your commen :P

where would I change that

ah yes ` url : "pkg+http://pkg.FreeBSD.org/FreeBSD:13:amd64/quarterly",`

is it advisable to change to latest even?

it seems I have to create a `/usr/local/etc/pkg/repos/FreeBSD.conf`, is that still current information? its from some old forum post

yeah that. copy the one from /etc/pkg/FreeBSD.conf into that directory and change quarterly to latest

though that will then upgrade everything to the latest version, so be sure that's what you want

quarterly takes a snapshot of latest every 3 months, so you would probably have to wait until 1st October maybe for restic 14 to appear

I think, as this machine is mainly supposed to be stable and low maintenance, I'll stick with quarterly and just compile the port for now

I want the 0.14 mainly to play around with its new compression feature

the other option is to run "restic self-update" and pkg check -r restic

what doesn the pkg check do?

I assume it detects the mismatching binary?

restic is just a single binary with no dependencies which means you can download the binary from the github releases page, which is what self-update does, and then the pkg check -r makes pkg rehash it so that it doesn't complain in the daily security logs that the hash is different to what's expected

oh, the system checks all binaries daily?

that's neat

yep. think it's in /usr/local/etc/periodic/security/460.pkg-checksum

it complains in the daily email/log output that the hash is a mismatch, but if you run that check it changes the expected hash

ah yes, the mail stuff is also kinda arcane to me

the next time the port/pkg is upgraded it will just overwrite the restic binary with the new one

it tells me I have mail, but the `mail` program is kinda annoying to use :P

just saying, that is one option. otherwise you could compile from port

I think the truly prudent thing is to not mess with the backup system on that machine at all for now :P

Any idea why this won't work? portmaster -a -x freebsd-doc-en .... Postmaster insists on trying to rebuild freebsd-doc-en which fails every time

SpaceBass: For -x options, use double-quotes around them and specify the version. Ex: portmaster -a -x "freebsd-doc-en-1.0.40_1"

I'll try - the doc says it uses globstrip and will match anything that starts with the pattern. ek, am I using the updated port or current version in the quotes?

SpaceBass: It will glob if you use "-\*" to match.

You're specifying the currently installed version to exclude.

I tried * but it keeps saying no match

SpaceBass: -x "freebsd-doc-en-\*"

Might not need the escape the char inside the double-quotes but I think you do.

Thanks, I'll give it a try

Err... "freebsd-doc-en\*"

Testing

Drat, still tries to compile it, still fails

SpaceBass: What does "pkg info | grep -i freebsd-doc" say?

Not even a good error: paste.debian.net/1253971

Title: debian Pastezone

ek that returns the old version en-freebsd-doc-20220527,1

SpaceBass: portmaster -a -x "en-freebsd-doc-20220527,1"

I'll try - thanks. Worth noting that there are a ton of FreeBSD forum posts that just use the name of the port... eg: -x bash ... its confusing

SpaceBass: I've never tried just using the name of an already installed package. I do believe I have used the port location in relation to /usr/ports, though. Like portmaster -a -x misc/freebsd-doc-en

Also, the glob might work for just the name but you'd need the package name and not the port name.

portmaster -a -x en-freebsd-doc

As opposed to freebsd-doc-en

That's kind of a screwed up naming convention.

It looks like its working now ... fingers crossed

Honestly, its a good lesson in sticking with pkg vs ports whenever I can ... in this particular case, I have to use a port of Samba to get a specific compile-time option so I'm stuck

SpaceBass: It happens. You can always use pkg to install everything and then just (re)build Samba with your needed options afterwards.

That

That's the play

bah, why don't OpenBSD and NetBSD have sysrc?

Hello, I have a quick question about interfaces and promiscuous mode.

I have a VM where igb0, the physical nic, shares a bridgeo with vtnet0, all in promiscuous mode with no inet alias assigned to anything

Essentially it's just taking in traffic and passing straight through the VM, to my tap0 interface on host

My question: Is there any way to access the VM from the outside via those interfaces?

I'm assuming no, but I figure it's worth asking

Monegro: I'm somewhat confused about the actual connections

I create the virtual machine with PCI passthrough, so that it contains igb0 which is the physical NIC.

I use a tap to connect it to host, so the VM also has vtnet0 inside the VM, and host has tap0

Inside the VM, I put igb0 and vtnet0 on the same bridge, in promiscuous mode

Nonething gets an assigned IP address

Well, nothing inside the VM. On host, tap0 gets an IP address to connect to my external router.

So I'm wondering if this is at all insecure for the VM itself. I don't think it's possible to make a connection into the VM from the outside, because none of the interfaces have IP addresses to receive packets.

Monegro, what are you trying to do?

It's something that I'm already doing.

It's really a theoretical question -- Is it possible to access a machine through an interface in promiscuous mode, but with no assigned IP address

?

Monegro: you might be able to read some traffic, but i can't imagine how you'd access it

Define "access"? It would have an Ethernet MAC address (or several), so it may work as a bridge to jails, VMs, or other baremetal hosts.

Thanks, that's what I thought. Just wanted to check.

By "access", I mean get a terminal on the VM or send commands that get run inside the VM.

is the debootstrap package broken? It keeps on failing to get release files no matter what address or options I give it

I just want to try out linux jails :-(

Ah, I found debootstrap.log

ld-elf.so.1: /lib/libc.so.7: version FBSD_1.7 required by /usr/local/bin/wget not found

What does "freebsd-version -kru" output? (fold to a single line or use a pastebin)

Also: output of "file /usr/local/bin/wget"

I have to wonder how wget was installed, via package or ports... (and if the package cache is up to date etc.)

I was still on 13.0 but with an upgrade to 13.1 all is fine :-)

hmm, what's the systemd equivalents to go into exec.start/stop in jail.conf?

Not sure what you have in mind (I know next to nothing about systemd), but you can run init(8) in a jail.

My goal really is just to run a linux jail

And for packaging reasons I'm looking at ubuntu bionic

Wait. Do you mean Ubuntu userland with the Linuxulator, or do you actually want a Linux kernel running?

Ubuntu userland with Linuxulator, I don't want a Linux kernel :-)

OK. I was asking because jails can't do the latter.

If you want a full userland for a distro using systemd, my guess is "put in whatever makes your distro go multiuser and start systemd, in whatever order it does that".

AÄ

I should figure that out tomorrow, but at least I got networking working now!

well that was shortlived

chmod() of /var/spool/rsyslog via /proc/self/fd/4 failed: No such file or directory

Oh wait, I don't need rsyslog

hi, in a 13.1 jail I installed vim, but when I try to execute it I get: ld-elf.so.1: /lib/libc.so.7: version FBSD_1.7 required by /usr/local/lib/libpython3.9.so.1.0 not found

listening to BSD Now, before heading to bed here in Sweden, hope people are having it nice at EuroBSDCon in Vienna

morning