-
joshbsd
-
VimDiesel
Title: JRG Systems - How I Configure Bluetooth Headphones on FreeBSD 13.1
-
joshbsd
this line : virtual_oss -T /dev/sndstat -S -a o,-4 -C 2 -c 2 -r 44100 -b 16 -s 1024 -R /dev/dsp0 -P /dev/bluetooth/WI-C200 -d dsp -t vdsp.ctl
-
joshbsd
return :virtual_oss: Could not open DSP device '/dev/dsp0': Operation not supported
-
trench
sysctl hw.snd.default_unit=1
-
trench
chapter 7 multimedia
-
trench
joshbsd: you need to figure out what hw you have
-
joshbsd
intel all the way
-
trench
<- never had intel :P
-
trench
or maybe in the 90's
-
trench
hehe
-
joshbsd
what can i say... I know
-
trench
right now I have a threadripper :P
-
joshbsd
thanks for the reference in the handbook i'll check it
-
joshbsd
Realtek
-
joshbsd
not intel
-
joshbsd
is that it : RTS5249 PCI Express Card Reader
-
joshbsd
8 Series/C220 Series Chipset High Definition Audio Controller
-
joshbsd
?
-
joshbsd
vendor = 'Intel Corporation' device = '8 Series/C220 Series Chipset High Definition Audio Controller' class = multimedia subclass = HDA
-
joshbsd
hdacc0: <NVIDIA (0x0051) HDA CODEC> at cad 0 on hdac0
-
joshbsd
hdaa0: <NVIDIA (0x0051) Audio Function Group> at nid 1 on hdacc0
-
joshbsd
pcm0: <NVIDIA (0x0051) (HDMI/DP 8ch)> at nid 4 on hdaa0
-
joshbsd
pcm1: <NVIDIA (0x0051) (HDMI/DP 8ch)> at nid 6 on hdaa0
-
joshbsd
pcm2: <NVIDIA (0x0051) (HDMI/DP 8ch)> at nid 7 on hdaa0
-
joshbsd
hdacc1: <Realtek ALC280 HDA CODEC> at cad 0 on hdac1
-
joshbsd
hdaa1: <Realtek ALC280 Audio Function Group> at nid 1 on hdacc1
-
joshbsd
pcm3: <Realtek ALC280 (Analog 2.0+HP/2.0)> at nid 20,21 and 26 on hdaa1
-
koobs
joshbsd: pastebin please (
bsd.to)
-
VimDiesel
Title: dpaste
-
joshbsd
k
-
joshbsd
is the number 1 fort hdaa1? or should it be 3 for pcm3
-
joshbsd
?
-
joshbsd
3 it is and the the hw is realtek
-
ghoti
Is there a filesystem that supports permissions and ownership (i.e. not FAT or exFAT) that folks recommend for portable drives?
-
llua
any that is supported by the operating systems you need to use the device on
-
CrtxReavr
ghoti, I would guess that after FAT, ext2 is probably the most portable filesystem, and it supports unix perms.
-
CrtxReavr
Also, ext3 & ext4 can both me mounted as ext2, just without journaling, and other bells & whistles.
-
CrtxReavr
s/me/be
-
adonis
does this
wonkity.com/~wblock/docs/html/ssd.html still need to be done for partitioning a freebsd ssd? Or normal installer should take care of it.
-
VimDiesel
Title: Using a Solid State Drive with FreeBSD
-
uskerine
Hi, I have seen that I can create tun0 interface with ifconfig, but now I want to configure it to act as a point to point tunnel, in Linux you do: "ip tunnel add tun0 mode ipip remote local "
-
uskerine
what would you do in FreeBSD? Thanks
-
uskerine
I guess TUN devices are not a big thing
-
adonis
is it ok to simply copy over my /usr /var directories which were in a single ufs freebsd partition over to their respective usr var folders on a new ssd, that are setup as filesystems?
-
adonis
tried to use dump but can't since /usr /var on the original drive aren't file systems
-
adonis
dump is giving: unknown file system
-
gnathat
How come when I am following the all mighty handbook my commands do not work. When I log onto libera and before asking the question all of a sudden the command works?
-
CrtxReavr
adonis, probably not a good idea, since there's symlinks, hardlinks, etc.
-
adonis
CrtxReavr: yea I figured.. I had to do some fenagling but I managed to do a dump / restore -interactive to restore the folders
-
CrtxReavr
-
VimDiesel
Title: Full System Backups using dump/restore in FreeBSD | Dan's Blog
-
adonis
interestingly I'm getting warnings like warning: cannot create hardlink ./usr/share/openssl/man/man3/o2i_SCT.3.gz -> ./usr/share/openssl/man/man3/i2o_SCT.3.gz: File exists
-
CrtxReavr
It's a warning. . . not an error.
-
adonis
I know, just wondering why they are showing
-
CrtxReavr
Look at the 'restore -u' option.
-
adonis
cool. Also, I interactively told restore to add usr, but I don't want the usr directory to show up in the target, I want the contents of usr to show. What did I do wrong?
-
CrtxReavr
I've used dump/restore only a handful of times over the years.
-
CrtxReavr
Google & manpages are your friend.
-
adonis
:)
-
adonis
I do see the -h option
-
adonis
I'll play with it a bit.
-
adonis
CrtxReavr: seems like there's no way to tell restore to ignore that top level folder and extract the contents, I'm doing a restore but then moving usr/* to . hopefully that’s ok
-
CrtxReavr
adonis, dump/restore is a volume level utility.
-
CrtxReavr
-
VimDiesel
Title: View paste KLSA
-
CrtxReavr
dump is a filesystem (volume) utilty.
-
CrtxReavr
Restore can do filesystems or file level stuff.
-
adonis
So the real prob is that my original partition is a single ufs partition that contained /var /usr / for example. But my new disk has those as different partitions.
-
CrtxReavr
So if your desired source is a sub-directory of a filewsystem, then you need to find a different tool.
-
adonis
dump can't be done on the original disk /var /usr because those are all one partition. So I don't see what else to do but simply restore(8) those folders from the dump on to the /var /usr / file systems on the new disk.
-
CrtxReavr
Looks like you need to dig into cp(1).
-
adonis
still think restore(8) extraction should be better than that though.
-
ghoti
CrtxReavr: thanks for the response, re filesystems. If I only plan to use this with FreeBSD, would UFS be "as good as" ext2? Or are there reasons not to use it on a portable drive or an SSD?
-
ccx
ghoti: UFS and ZFS would be better supported. IME the ext* support isn't all that great.
-
CrtxReavr
UFS2 is a great choice - very mature, also surprisingly portable.
-
CrtxReavr
ZFS has a lot of bells & whistles.
-
ghoti
adonis: when copying unknown stuff like /usr and /var be careful of special files, as CrtxReavr said -- perhaps `pax -rwpe` would help. But filesystem flags could still get in your way. espescially in /var. That said, don't forget rsync.
-
ghoti
I use ZFS for everyhing I can, but .. mobile drives?
-
CrtxReavr
Oh yeah. . . rsync is a great tool for local stuff too.
-
adonis
rsync is not available in single user mode for me
-
CrtxReavr
It is a port/package, yes.
-
adonis
:)
-
ghoti
adonis: if it not available because /usr/local is not mounted, and it is mentioned in /etc/fstab, perhaps you can just `mount -a`.
-
dh
Is there a way to get the ID of jail from inside the jail? sysctl-s don't have that info.
-
Erhard
You could write a script in jail.conf of the host machine that writes this info to a file after startup. Not sure if it is there be default
-
ghoti
dh, I think that would count as leakage. What do you need it for?
-
dh
For jail to identify itself for outside systems .. but on a second thought, jail ID is not unique enough anyway
-
Erhard
Give the jail a hostname and use that ?
-
dh
But how would it be leakage?
-
Erhard
What are you trying to do?
-
dh
Jails with the same hostname are created and destroyed several times, but a script running inside the jail would need to register itself to outside system as a different system than the one before it that had the same hostname
-
dh
But like I said - jail ID is not foolproof enough for that
-
Erhard
Do they need unique names each time?
-
Erhard
Could they just get a hostname from DHCP?
-
Erhard
Or regeister it in DNS perhaps?
-
dh
Too difficult, there's bunch of constraints I'm not going into right now. But generating large random number outside the jail and writing it into the file inside the jail is a good enough solution, thanks for the hint Erhard
-
Erhard
OK. Glad it helped
-
Erhard
For better random numbers use something like openssl to generate them (vs. rand(3) )
-
Erhard
If it is critical
-
Erhard
I did find this:
-
Erhard
-
VimDiesel
Title: register DNS entry with dhclient
-
Erhard
Never actually registered in DNS myself. I always turn that off
-
Erhard
But the ability of the host to write to files in the vm is pretty cool.
-
Erhard
*vm == jail in this case
-
Erhard
Beware of race conditions. Probbaly best to write the file before the jail starts rather than after
-
dh
But still the leakage .. I know that I'm in jail by looking at sysctl-s, what would jail ID leak? Only actually useful value would be jail ID 1 - then I would know I'm in the first jail created after system reboot. All other values would indicate that either 1) I'm not the first 2) there may be other jails 3) this may still be the only jail that has been stopped and re-created?
-
Erhard
And make sure (using perms) somebody cannot make a link to the file you are writing from within the vm such that you overwrite some other file.
-
Erhard
What are you worried about leaking? I don't follow
-
dh
21:08 < ghoti> dh, I think that would count as leakage. What do you need it for?
-
Erhard
Can non-root users do anything with the jail ID ?
-
Erhard
I mean, I am all in favor of limiting the info as much as possible, but not sure if that is super valuable info
-
Erhard
The jail ID is only meaningful in the conext of the host
-
Erhard
context even
-
Erhard
Not from within the jails
-
dh
True
-
Erhard
IIRC there are ways to do IPC between jails. But that would open up more security issues.
-
Erhard
Though might be safer than files depending on how you use them.
-
dh
In my case, security is not a concern, everything that's running inside the jails is controlled by me anyway
-
dh
Oh wait, I don't even need to generate random number outside the jail, I may as well do it inside - even better
-
Erhard
Oh, then files seems like the simplest method if you can do basic scripting
-
jetchisel
ls
-
V_PauAmma_V
. ..
-
jetchisel
sorry folks, wrong window ^^
-
Snaffu
@jetchisel --- at least it wasn't your sudo password :)
-
uskerine
hi, I am trying to configure PF, I would like to block everything except ports 22 and another one for example 10000. Which would be the config file?
bpa.st/EWPA
-
VimDiesel
Title: View paste EWPA
-
otis
block on $external_if
-
otis
pass in quick on $external_if proto tcp from any to ($external_if) port { 22, 10000 } keep state
-
otis
pass out on $external_if keep state
-
otis
where external_if is the name of external interface
-
otis
you'd want to also allow icmp as a whole
-
uskerine
do I have to define $external_if?
-
uskerine
-
VimDiesel
Title: View paste 6CYQ
-
uskerine
how do I enable ICMP
-
uskerine
?
-
otis
pass in quick on $external_if inet proto icmp from any to any
-
otis
just after the first block rule
-
jetchisel
Snaffu: Nope, sudo does not exist on this side! ^^
-
uskerine
this one gives error: pass in quick on $external_if proto tcp from any to ($external_if) port $tcp_pass keep state
-
nacelle
why icmp as a whole? you only need a few things from it (more than just echo/echo reply, but not much more) -
cymru.com/Documents/icmp-messages.html
-
VimDiesel
Title: ICMP Packet Filtering v1.2
-
CrtxReavr
nacelle, chill on the OMGTEHICMPPAKETZ nonsense.
-
uskerine
when I enable PF I can not ping the local IP of a tun0 interface despite I ahve pass in quick on tun0 inet proto icmp from any to any
-
uskerine
I do have all that right after block all
-
uskerine
how do I forward all traffic arriving at a given IP in a host to a GW
-
uskerine
?
-
uskerine
(PF)
-
uskerine
maybe it is just routing
-
uskerine
how do I add an IP alias with ifconfig
-
uskerine
?
-
Erhard
Something like:
-
Erhard
ifconfig ix0 192.168.2.70/24 alias
-
Erhard
where ix0 is of course your interface
-
uskerine
ifconfig em0 alias x.x.x.x netmask y.y.y.y
-
uskerine
thanks
-
Erhard
That works too
-
Demosthenex
hrm. my snmp counter returned a negative (uint32 rollover). can i correct that in a shell script assuming it only rolled once?
-
Erhard
How does a uint become negative? Something must be misinterpretting it.
-
idwer
... count the amount of collected rollovers
-
idwer
(ew)
-
daemon
lol
-
daemon
unsigned indeed :)
-
Demosthenex
Erhard: its actually returned by snmpwalk
-
Demosthenex
i'm pretty sure it only overflowed once, and was just trying to use the number in a shell script
-
Demosthenex
i can't fix the snmpd returning the abnormally large value
-
daemon
wonder if its really a uint64
-
Demosthenex
i don't think i can override the MIB.
-
Demosthenex
basically, i'm querying hrStorageTable from a host with terabyte sized filesystems, which returns the # of 4k blocks used/total
-
daemon
I mean it is possible on the basis of a single rollover to determine mathmatically the real number
-
Demosthenex
part of my concern was overflowing in my shell script too
-
daemon
beh think I would use perl to do it
-
Demosthenex
that may be wiser
-
daemon
it will be INT_MAX_SIZE+flip(negative overflow value * 2)
-
Demosthenex
its like ($x - 2^31) + 2^31
-
Demosthenex
er i may have that backward
-
daemon
yeah should not take much hackery to get there
-
ghoti
I'm subscribed to a number of FreeBSD mailing lists, and I'd like to change my address. Is there a way to make the change across the board, all at once, or do I have to do it to each list, one by one?
-
Demosthenex
ghoti: one by one
-
ghoti
Dang. I miss mailman.
-
ghoti
Thanks.
-
Demosthenex
unless you find an admin willing to sed regexp ;]
-
daemon
ghoti, one by one I had that pain recently, and for whatever reason -hackers will not accept my unsub request and keeps annoying me ;p
-
V_PauAmma_V
daemon, I'd email postmaster@.
-
V_PauAmma_V
For help unsubscribing, I mean.
-
yuripv
Demosthenex: is it net-snmp or bsnmp?
-
iio7
I have installed FreeBSD on a couple of SSDs in a ZFS mirror for zroot. I have since added other SSDs in the box, and the FreeBSD installer did not use IDs for the SSDs when it did the installation, but used device names in fstab for swap (i.e. /dev/ada0p2). This doesn't work as the device names has changed. How do I locate the disk ID? Not UUID, but the ID.
-
iio7
Is it the ident in "geom list"?
-
koobs
morning
-
iio7
And if so, how do I use that in fstab?
-
yuripv
hrm, looking at the HOST-RESOURCES-MIB it's "SYNTAX Integer32 (0..2147483647)", not uint32
-
koobs
morfn
-
meena
koobs: you seen the freebsd-hackers@ email about python3?
-
koobs
meena: is it the one thats been going a while?
-
koobs
if so i havent been through it (but have seen it)
-
meena
-
VimDiesel
Title: proper python3 interpreter invocation
-
meena
it's fresh
-
koobs
scrary first line
-
koobs
have you participated?
-
meena
nope, I'm busy programming in python3
-
koobs
the broad answer to that thread is 'PEP394'
-
koobs
ive seen cederom on irc too no?
-
meena
and arguing with ports developers that we should be following PEP-394
-
koobs
we should be
-
koobs
but the issue is nuanced
-
rwp
I thought about responding that I only have /usr/local/bin/python3.9 without really doing anything otherwise.
-
koobs
because theres multiple considerations and factors involved
-
meena
koobs: i know, it's complicated
-
koobs
so
-
koobs
if anyones involved in that thread
-
koobs
re: "Hey! The issue is nuanced, lets have a chat about it on IRC and get to the bottom of whats possible'
-
koobs
irc: notification added for cederom
-
koobs
if i see them ill ping
-
koobs
-
VimDiesel
Title: Python - FreeBSD Wiki
-
koobs
we're pretty obvious about how to get in touch with the team
-
koobs
i might write a /PEP-394 one day.
-
koobs
that page definitely needs a refresh
-
rwp
So no one is going to say that right now today in 13.1 that "#!/usr/bin/env python3.9" is needed? As it seems to be to me?
-
koobs
its not, you can (as a user) pkg install python3 to get the convenience symlink
-
koobs
if its a ports relevent question, thats not the correct answer
-
koobs
there was a discussion about this exact thing in #freebsd-python a few days ago
-
rwp
Okay. Then the answer is "#!/usr/bin/env python3" with python3 installed?
-
rwp
That has the advantage of being portable between FreeBSD and Debian/Devuan/Ubuntu/Mint/Trisquel anyway.
-
koobs
rwp meena
bsd.to/Bja3/raw there you go
-
VimDiesel
Title: Bja3
-
koobs
rwp: its more than that, its what pep394 says
-
koobs
the only pep394 thing we *dont* do is 'auto' include python3/python symlinks when installing a pythonXY
-
koobs
and thats the thing theres nuance and reasons for
-
koobs
checkout pastebin above
-
koobs
for all the gore
-
koobs
its really not that gory.
-
meena
koobs: oh no… that's jrm poking at python because of me…
-
rwp
It is longer than a 30-second read. I am reading through it now.
-
koobs
meena: thats fine, jrm is sorted
-
meena
i should sort myself, too… either into bed, or into the shower…
-
koobs
rwp: its really a 2 minute read that wraps the tldr; python3 is for end users, we provide those convenience ports, python/python3 in ports, hides many QA issues
-
koobs
which break user expectations of what points to where
-
koobs
thats really iy
-
rwp
I read all of that as detailed as I could. I'm not really a python person but I think there is not yet a satisfactory answer.
-
koobs
rwp: then the comms arent as clear as they can be, so feel free to ask questions so we can clarify