-
AndChat186921
What does ada1 mean?
-
mdekstrand
after running freebsd-update, my system is booting from /boot/kernel/INS@n0RyGu instead of /boot/kernel/kernel. what is a safe way to correct this situation?
-
kevans
mdekstrand: that's uniquely bizarre
-
mdekstrand
no wonder I can't find any helpful search results
-
kevans
anything special in loader.conf?
-
mdekstrand
nope
-
mdekstrand
it looks like the INS@ file results from an interrupted 'install -S'
-
mdekstrand
but i'm not sure what's telling it to look at that instead of 'kernel', so I'm hesitant to just delete the file & reboot
-
kevans
how is loader finding it, though? Is this forthloader or lualoader?
-
kevans
kenv script.lang should answer that
-
kevans
lualoader basically only uses literal kernel as the name
-
kevans
there's no way we'd even try a kernel there unless kernel= was explicitly set in loader.conf
-
mdekstrand
lua
-
mdekstrand
at least that's what script.lang reports
-
mdekstrand
the only file that seems to reference this INS@ file is kernel/linker.hints
-
dksnd
what does "ada1" mean?
-
koobs
!man ada
-
VimDiesel`
ada(4) - ATA Direct Access device driver
freebsd.org/cgi/man.cgi?query=ada
-
koobs
device 1 of an ada driver
-
koobs
starting at device 0
-
rtprio
does anyone know why they removed twa from -current? the commit message only said that it was supposed to happen before release.
-
koobs
link to commit
-
dksnd
and sX is a msdos partition? does it use the same numeration as linux?
-
koobs
?
-
koobs
dksnd: s is usually 'slice'
-
koobs
effectively partition
-
kevans
mdekstrand: does /boot/kernel/kernel load and boot if you do it manually?
-
dksnd
so is it 1..4 for each partition except the extended one where it is 5+?
-
kevans
mdekstrand: if so, I'd nuke the INS one and kldxref /boot/kernel/kernel, which should fix it
-
mdekstrand
@kevans have not tried (this machine is headless... I can dig around and plugin in a keyboard and mouse and try)
-
mdekstrand
or just delete the file and roll the dice and dig it out if it breaks
-
kevans
mdekstrand: if kernel file is there and a reasonable size I'd go that route
-
dksnd
also does freebsd use avx?
-
kevans
kldxref -d and see if it complains about the kernel first if you want, to be sure
-
mdekstrand
kldxref -d seems ok, so here goes nothing
-
dksnd
grub has suddently stopped booting freebsd via kfreebsd
-
mdekstrand
@kevans delted, kldxrefed, and it booted and now reports /boot/kernel/kernel.
-
mdekstrand
thanks!
-
dksnd
I thought the issue could be with "mountfrom" but it looks correct
-
dksnd
grub finds the partition at (hd1,msdos11) so it should correspond to ada1s11, but it doesn't seem to work
-
kevans
mdekstrand: awesome, happy booting
-
dksnd
also is it normal not to have /boot/loader?
-
parv
That would be ... abnormal
-
parv
On stable/13 that is linked to /boot/loader_lua
-
kevans
on x86
-
parv
Right; should have mentioned the platform of amd64 in my response
-
dksnd
does freensd have /home?
-
dksnd
I have loader_lua but no loader
-
dksnd
are the freebsd partitions bootable?
-
parv
On recent fresh installs (in last ~2 years) I found /home to be a symbolic link to /usr/home
-
jmnbtslsQE
anyone know what is the replacement for -DNO_CLEAN for buildworld/buildkernel ?
-
kevans
WITHOUT_CLEAN=yes
-
jmnbtslsQE
nice thanks
-
rtprio
-
VimDiesel`
Title: ⚙ D33114 twa: Remove
-
parv
There is dead link to "FreeBSD Journal" -- http:// freebsdjournal .cc (redirects to freebsd .com, available for sale) -- in "Community" menu on freebsd.org web site.
-
dksnd
is a freebsd partition bootable?
-
eoli3n_
Hi
-
eoli3n_
how to delete a route permanently ?
-
eoli3n_
i have a vps with a nginx jail, with rdr redirection through pf
-
eoli3n_
i have a route on the vps which redirect all packets to the public ip, through lo interface
-
eoli3n_
problem is then that acme-tiny can't validate my challenges through internet
-
eoli3n_
because the packet is routed locally, and not over internet
-
eoli3n_
i need to tell to freebsd to remove that route, permanently
-
eoli3n_
"194.163.181.239 link#1 UHS lo0"
-
Reinhilde
I should set up a jail for something or other
-
dksnd
is a freebsd partition bootable?
-
tsoome
it depends on setup
-
tsoome
and which partition....
-
Reinhilde
dksnd, on what hardware platform? x86 standard BIOS, x86 EFI, ARM, SPARC, what?
-
dksnd
x86 bios
-
Remilia
-
VimDiesel
Title: Chapter 13. The FreeBSD Booting Process | FreeBSD Documentation Portal
-
Remilia
see stage one and stage two
-
Remilia
the commands you would often use these days are a bit different though
-
Remilia
but for a ZFS BIOS system you have a small partition of type freebsd-boot that serves strictly to host zfsboot/gptzfsboot
-
dksnd
so how the boot1 is maintained? is there a hook that installs it during the system update?
-
Remilia
and then there is pmbr
-
Remilia
dksnd: FreeBSD writes /boot/pmbr if you do not use the boot manager
-
Remilia
to the first sector of the disk
-
Remilia
that is if your disk is GPT
-
Remilia
pmbr is protective MBR
-
Remilia
I do not remember how it works for non-GPT disks, sorry
-
Remilia
and with UEFI there is no such thing as a ‘bootable partition’, there is ESP
-
dksnd
it is a mbr disk
-
Remilia
speaking of partitions you need to keep in mind that in FreeBSD on non-GPT disks you deal with slices first
-
Remilia
the DOS primary/logical partitions are slices to FreeBSD
-
Remilia
adXsY
-
Remilia
while with GPT disks you have partitions, adXpY
-
dksnd
let's see if chainloading works
-
Remilia
the FreeBSD slice is usually bootable as you install the bootcode into that
-
Remilia
I think it was also possible to just bsdlabel the raw disk without using a partition table? but never tried
-
dksnd
nope it does not boot
-
dksnd
the first sector has invalid signature
-
dksnd
chainloading /boot/boot0 prints a menu that has the other disk, pxe, and only prints hashes
-
dksnd
chainloading /boot/boot1 just prints "boot error"
-
dksnd
loading the kernel simply reboots
-
Teraii
someone have issue with packet loss in a jail (not vnet) ?
-
Remilia
dksnd: if the boot manager does not show a FreeBSD option it means there is no bootable slice/partition present
-
dksnd
what can stop the partition from being bootable? how can I tell it WAS bootable in the first place?
-
dksnd
is there a way to boot it anyway?
-
dksnd
does freebsd partition know where it is located?
-
dksnd
if the partition structure is changed, should freebsd be reinstalled?
-
Reinhilde
you should probably boot a USB stick or a CD with FreeBSD on board and try to figure out your geometry
-
dksnd
bsd partition is located at disk 1 partition 11 (which should be ada1s11) but kernel does not want boot from there and just reboots the machine
-
dksnd
are there some loader.conf parameters to make the kernel print something and do not reboot?
-
debdrup
boot0 is the 510 byte hand-written assembly an x86 BIOS is supposed to jump to and execute, as described on
docs.freebsd.org/en/books/arch-handbook/boot
-
VimDiesel
Title: Chapter 1. Bootstrapping and Kernel Initialization | FreeBSD Documentation Portal
-
debdrup
-
VimDiesel
Title: boot0.S « boot0 « i386 « stand - src - FreeBSD source tree
-
debdrup
it's bonkers complex for being hand-rolled assembly
-
dksnd
I don't need boot0, I need the boot record of the ufs partition
-
dksnd
it's first 512 bytes are not formatted as a boot record
-
debdrup
that's stored in the vfs.root.mountfrom kernel environment variable, accessible at runtime with kenv(8)
-
debdrup
in the loader, you can see it with 'show'
-
debdrup
in the freebsd loader, i mean
-
dksnd
I don't use freebsd loader
-
debdrup
then i can't help you.
-
debdrup
gpart(8) can also install bootcode if you're in freebsd and know where you want to install it, but it'll overwrite anything that's there if you tell it to
-
debdrup
see the 'bootcode' subcommand
-
dksnd
if the vfs.root.mountfrom is incorrect, would the kernel print something?
-
debdrup
yes, it'd ask you whether you want to load /rescue/sh
-
debdrup
that's the rescue shell, obviously
-
debdrup
you might wanna read the BOOTSTRAPPING subheader in gpart(8) too
-
dksnd
but how does it know where / is?
-
debdrup
well if you've gotten past kernel initialization then you'll have to have some kind of filesystem to load the kernel from
-
debdrup
freebsds loader understands the filesystems (both ufs and zfs) enough to not need an ram disk like other unix-likes
-
debdrup
the kernel and loader configuration are both stored on the filesystem that you're booting from
-
debdrup
so any third-party loader would have to understand ufs and zfs equally well
-
debdrup
it's done this way to avoid complexities when maintaining kernels by having to copy files back and forth onto the ramdisk
-
debdrup
the installkernel target for make in /usr/src autommatically makes a copy of the working kernel if the one you're building is different
-
debdrup
also, are you talking about hardware partitions or bsd labels (software partitioning)?
-
debdrup
or some other form of software partitioning?
-
debdrup
i'm thinking it's the last one, since hardware doesn't support up to 11 partitions and you probably aren't using bsd labels if you're just installing freebsd?
-
dksnd
partition 11 is the 7th logical disk in the extended partition
-
debdrup
but you're also chainloading which implies that your boot manager loads boot0
-
debdrup
Oh, EBR.. It's been too long for me to remember that.
-
dksnd
I used grub that booted the kernel directly but it is broken right now
-
debdrup
it _is_ supported
-
debdrup
what's broken?
-
dksnd
now I'm trying to bootstrap it
-
dksnd
booting via grub
-
debdrup
booting freebsd via grub or booting grub?
-
dksnd
booting freebsd via grub, yes
-
debdrup
well, what changed?
-
mason
-
VimDiesel
Title: MasonLoringBliss/BootingFreeBSDfromUEFIGRUB - FreeBSD Wiki
-
debdrup
mason: this is an x86 BIOS setup, as far as I've understood
-
dksnd
I have no idea it used to work on april 21st
-
mason
debdrup: I think the GRUB parts will be pretty similar.
-
debdrup
mason: maybe, I don't know nothing about no grub.
-
debdrup
That TLC reference didn't quite work out as well as I wanted. :/
-
dksnd
there could be grub updates... but it should not break the setup
-
mason
debdrup: GRUB config doesn't really vary whether it's UEFI or legacy - there's a little stub grub config in the ESP, but you can ignore that for this purpose.
-
mason
heh
-
debdrup
dksnd: sorry, I'm in over my head here. I used Linux for a week in 2000 before getting frustrated with the lack of documentation, and haven't touched anything but FreeBSD (except in anger) since.
-
mason
dksnd: Anyway, even with legacy, this is something that you'd invoke from the level of GRUB that gives you your boot menus.
-
debdrup
dksnd: the easiest way might be to figure out what changed, though
-
mason
-
VimDiesel
Title: GRUB Legacy - ArchWiki
-
mason
In this case GRUB's using the legacy specifier (hdwhatever) to point to the partition with the bootloader, and then "chainloader +1" to leap into that new root.
-
dksnd
freebsd partition does not have a valid boot secrot
-
mason
That said, I don't use much legacy any more, so this would take some experimenting.
-
mason
dksnd: Well. Reinstall one from rescue media maybe.
-
mason
gpart bootcode whatever
-
mason
/sbin/gpart bootcode -b /boot/pmbr your-correct-FreeBSD-boot-partition-or-disk
-
dksnd
If I chainload directly into /boot/boot1 or boot0, they just give errors
-
dksnd
pmbr is for efi
-
mason
Well. Whatever the right one is. That was the first bootcode EXAMPLE from the gpart manpage.
-
mason
Maybe something from the following MBR section then.
-
dksnd
the /boot/boot2 also doesn't look chainloadable, as it starts with 512 zero bytes
-
dksnd
I could also try /boot/boot
-
dksnd
I find the fact that no one knows how their OS boot quite disconcerning
-
mason
dksnd: I guess. But putting that in place with gpart bootcode is probably better. Maybe functionally equivalent I guess.
-
mason
dksnd: Well. I mean, of everyone here, you're the one not booting. Just saying.
-
mason
dksnd: Also, verify your assumptions. pmbr is for GPT, but it isn't for UEFI, it's just for GPT.
-
mason
For instance, legacy booting here: gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 1 ada0
-
debdrup
Assuming that there's a single FreeBSD partition is probably the first error.
-
debdrup
Welp, seems they left.
-
mason
There are lots of variables and there's no one true way to do any of this, especially with the multibooting.
-
NerdyMcNerdface
Anyone seen this before? "bhyve: vm_setup_pptdev_msix: No space left on device" Got it while trying to pass 4 pcie Intel ice network adapters through to a bhyve VM. Passthrough of 3 NICs works fine, but 4 or more fails.
-
ghoti
What kind of hardware do I need to use the `ow` device on a PC? Would it easier just to allocate an old r-pi to interface with ow?
-
ghoti
The gpiobus(4) man page mentions arm/mips/ppc drivers, but nothing for, say, amd64..
-
eoli3n_
could anybody tell me if there was an answer to my morning question ?
-
ghoti
It would be nice if I could hijack a pin on my parallel or RS232 port.
-
eoli3n_
and kindly paste me the answer ?
-
ghoti
eoli3n_: I wasn't here this morning. Might help if you asked it again.
-
eoli3n_
why freebsd populate a route for the main if IP to route locally ? linux seems to not do this. Is that a route push by my vps provider or something that freebsd set up automatically ?
-
eoli3n_
taht route
-
eoli3n_
194.163.181.239 194.163.128.1 UGHS lo0
-
eoli3n_
no
-
ghoti
Is this an IP your machine learns via DHCP?
-
eoli3n_
wrong line
-
eoli3n_
ghoti nop
-
eoli3n_
194.163.181.239 link#1 UGHS lo0
-
eoli3n_
static ip
-
eoli3n_
that route breaks things
-
eoli3n_
i want to delete it, but i don't know how to persist deletion
-
eoli3n_
static_route in rc.conf allow only adding route
-
eoli3n_
not "change" nor "delete"
-
ghoti
eoli3n_: if the gateway is "link#N" then it is an IP assigned to the interface, not routed. Try `ifconfig lo- 194.163.181.239 -alias`.
-
yuripv
'S' means 'manually added', iirc
-
ghoti
lo0
-
eoli3n_
i forged the line
-
eoli3n_
let me reboot to give you the correct one
-
eoli3n_
ghoti i didn't get what you mean
-
eoli3n_
what does that ifconfig line do ?
-
eoli3n_
this is the line : 194.163.181.239 link#1 UHS lo0
-
ghoti
eoli3n_: it removes the IP from the interface. Best to confirm it really is there first, of course, Run `ifconfig lo0` and see if you see it.
-
eoli3n_
why do you want that I remove the ip from the interface ?
-
eoli3n_
ifconfig lo0, to see if I see what ?
-
eoli3n_
sorry I don't follow you
-
ghoti
You wanted it out of your routing table. All local IPs are implicitly in your routing table. That's how to remove it.
-
eoli3n_
here local IP si explictly
-
eoli3n_
s/si/is
-
eoli3n_
lo0 doesn't have ip 194.163.181.239
-
ghoti
Okay, you said this morning that this was an IP on a jail, did you not?
-
eoli3n_
i don't follow you at all
-
eoli3n_
i'm just asking for a way to delete the route
-
ghoti
`route delete <ip>` then.
-
eoli3n_
why would you want to remove an public IP from lo1 ?
-
eoli3n_
persistently
-
eoli3n_
route delete ip, reboot, come again
-
ghoti
What do you mean by "persistently"? What is re-adding it after you reboot?
-
eoli3n_
eoli3n_: this is the line : 194.163.181.239 link#1 UHS lo0
-
eoli3n_
after each reboot, the route come back
-
eoli3n_
what sets up that route ?
-
ghoti
Is it mentioned in /etc/rc.conf? Something in one of your /usr/local/etc/rc.d/ scripts?
-
eoli3n_
lets check
-
eoli3n_
in /etc/rc.conf i only set : defaultrouter=194.163.128.1
-
eoli3n_
grep -ri route /usr/local/etc/rc.d returns nothing
-
eoli3n_
it seems that this route comes by default on a freebsd install
-
eoli3n_
but not on linux nor windows
-
ghoti
What about a recursive grep for the IP in /etc and /usr/local/etc ?
-
eoli3n_
what are you searching for ?
-
ghoti
The answer to your question.
-
ghoti
And mine
-
eoli3n_
ok ok
-
ghoti
13:28 < ghoti> What do you mean by "persistently"? What is re-adding it after you reboot?
-
ghoti
13:29 < eoli3n_> what sets up that route ?
-
eoli3n_
in etc i only foudn the line which set up the interface
-
eoli3n_
in /usr/local/etc nothing
-
eoli3n_
/etc/rc.conf:ifconfig_eth0='194.163.181.239 netmask 255.255.192.0'
-
ghoti
Might as well check /var/log as well
-
yuripv
and there's nothing like blocklisting software that adds stupid routes via lo0? :)
-
eoli3n_
pf ?
-
ghoti
Ah, well, there you go. It is the main IP address on your eth0 interface.
-
yuripv
why lo0 though?
-
eoli3n_
it is yes, that's what i'm trying to say since the beginning
-
eoli3n_
why lo0 what ?
-
eoli3n_
yuripv sorry, didn't get here again
-
ghoti
Why would you send traffic that is local out an interface?
-
eoli3n_
stop
-
eoli3n_
let's restart
-
eoli3n_
we are going nowhere here
-
eoli3n_
.
-
eoli3n_
So
-
ghoti
It is literally the local machine, no?
-
eoli3n_
i really meant stop
-
yuripv
oh right, it's same here for my local ip :)
-
eoli3n_
let me reexplain the whole thing
-
eoli3n_
yuripv yes it is, for all freebsd install
-
eoli3n_
and that's what i'm trying to understand
-
eoli3n_
that route is illogical
-
eoli3n_
and it came by default on all your installations too
-
eoli3n_
so how to remove it persistently
-
eoli3n_
the problem is that i'm on a VPS, and that route breaks my acme-tiny challenge verification from a nginx jail
-
eoli3n_
because the route catch all packets to my eoli3n.eu.org public IP
-
ghoti
Why would you want to remove it? Where else should a host send traffic destined for itself?
-
ghoti
What kind of a VPS are you using?
-
eoli3n_
and that public IP is locally routed by default
-
eoli3n_
contabo
-
ghoti
Does it virtualize a network stack?
-
eoli3n_
yes, proxmox
-
eoli3n_
"ghoti: Why would you want to remove it?" : because i want to reach my public IP from internet, to validate my ssl certificate
-
eoli3n_
i don't want to route locally for a public ip
-
eoli3n_
it breaks acme-tiny
-
eoli3n_
my question is, why does that route exist anyway ?
-
eoli3n_
no, that's not really my question
-
ghoti
Reaching the public Internet requires a default route. Traffic to yourself is generated from an IP that matches the subnet of the closest interface, the route should be immaterial.
-
eoli3n_
my question is more "why linux/windows doesn't add this route ?"
-
eoli3n_
i have a default route
-
eoli3n_
what means immaterial ?
-
eoli3n_
not english native here
-
ghoti
unimportant.
-
eoli3n_
but it is created by default
-
eoli3n_
let me paste all my routing table
-
ghoti
Because traffic from your machine to your machine does not need to leave your machine.
-
eoli3n_
-
eoli3n_
yes, that answer why freebsd creates it
-
eoli3n_
but it creates problem too
-
ghoti
Yes, that looks perfectly normal.
-
eoli3n_
the route seems logical, but not on a vps, when using a public ip directly on the main interface
-
ghoti
Are you saying the outside world can't reach your machine?
-
eoli3n_
i'm not
-
ghoti
This is really an X-Y problem?
-
eoli3n_
did you understand my main problem ?
-
eoli3n_
do you know what is acme-tiny and how it works ?
-
eoli3n_
i can explain from the begenning
-
eoli3n_
beginning
-
ghoti
Apparently not. How does running in a VPS affect anything? Your outside interface is bridged with the host's. Your localhost is emulated.
-
eoli3n_
because, the public ip is configured directly on the interface, and my dns solve my domain name by this IP
-
eoli3n_
so when the ssl certifacation process try to reach eoli3n.eu.org from the jail, passing through internet, the route catch it, and run it locally
-
eoli3n_
so, this is breaking
-
eoli3n_
because I need to prove that i own eoli3n.eu.org
-
ghoti
Sure, you are renewing your lets-encrypt certs. But the problem does not make sense to me. There is no reason for it to do that as far as I can see.
-
eoli3n_
from internet
-
ghoti
Oh you do?
-
eoli3n_
i don't get your question
-
eoli3n_
i autoamted ssl renewing from the jail directly
-
ghoti
So, is it nginx that is answering the door when someone rings at port 443?
-
eoli3n_
port 80
-
ghoti
You are using certs on port 80?
-
ghoti
Or are you just using this for domain verification?
-
eoli3n_
try this at home :
0x0.st/o3RU.txt
-
eoli3n_
this is how acme-tiny works
-
eoli3n_
-
VimDiesel
Title: GitHub - diafygi/acme-tiny: A tiny script to issue and renew TLS certs from Let's Encrypt
-
eoli3n_
my challenge is reachable from outside
-
eoli3n_
but not from the VPS
-
eoli3n_
because of the route
-
eoli3n_
which is sad, because the only purpose of this, is to be reachable FOR the vps FROM internet
-
ghoti
I haven't run acme-tiny in a few years, but I never had problems like what you are describing. I was running from jails.
-
eoli3n_
wrong paste :
-
eoli3n_
-
eoli3n_
if you use a hosting server which have an interface configured with a public ip, and that route, you can't use acme-tiny
-
eoli3n_
or i'm missing something
-
eoli3n_
but here i am
-
ghoti
So.. You say you want the IP accessible from the outside, but your problem is that you can't reach it from the inside?
-
ghoti
I still don't see the problem. nginx binds to the port on the IP. How traffic gets there should not matter.
-
eoli3n_
i want my jail -> gateway -> public ip -> rdr -> nginx
-
eoli3n_
ghoti : if i remove the route, acme-tiny rework
-
eoli3n_
if i change the route to pass throught my default gateway : acme-tiny rework
-
eoli3n_
i explained 3 times why it is breaking, i don't know precisly how acme-tiny work
-
eoli3n_
but the route IS the problem
-
eoli3n_
or acme-tiny is
-
eoli3n_
but i mean that both can't work together
-
ghoti
So, are you saying that acme-tiny can't reach the IP, or gets something unexpected when it connects?
-
ghoti
I think changing acme-tiny, if that's required, is probably safer than breaking your network.
-
eoli3n_
removign the route is not breaking the network
-
ghoti
I haven't experienced the problem you describe, and from what I know of the two parts here, it should not occur. So I'm clearly missing a part of your situation.
-
eoli3n_
that route only exist on freebsd
-
eoli3n_
maybe other bsd distro too
-
eoli3n_
ghoti i tried my best to explain
-
eoli3n_
i need a pause :)
-
eoli3n_
thanks for you attention, anyway
-
eoli3n_
and your help
-
eoli3n_
did you read acme-tiny readme ?
-
eoli3n_
the link i gave
-
eoli3n_
if you don't get that, you will not get my problem
-
eoli3n_
-
VimDiesel
Title: GitHub - diafygi/acme-tiny: A tiny script to issue and renew TLS certs from Let's Encrypt
-
ghoti
fwiw, the route exists in macos as well, but that is expected. I have a vps with haproxy answering public queries, and it has no problem reaching itself. But my setup is a little different from yours.
-
ghoti
The link you gave was not a readme, but I have read it before. I will refresh though.
-
ghoti
Ok, the step-3 link was fine.
-
eoli3n_
it is a readme .. why do you say it is not ?
-
eoli3n_
ah :)
-
ghoti
I clicked the acme-challenge URL without reading it closely enough. :)
-
eoli3n_
xse, i copy/paste the backlog here if you have the energy
-
eoli3n_
-
eoli3n_
xse ^
-
ghoti
I have haproxy in one jail and the web server in another jail. The jails have private IPs, and I do not use NAT. Inbound access to the haproxy jail is via a reverse-nat firewall rule, and outbound queries from both are through tinyproxy, so I always know what is happening.
-
ghoti
Why do I need the chat log?
-
eoli3n_
ghoti not for you
-
eoli3n_
for xse
-
ghoti
ah
-
xse
I have not touched jails for quite some time but since deleting it seems to fix it for you i'd either:
-
xse
1) script smth that deletes it every time the jail is started
-
xse
or 2) skip the whole .well-known thing and use dns challenge via rfc-smth-smth
-
xse
s/-smth-smth/2136
-
debdrup
NerdyMcNerdface: if you're looking to virtualize lots of NICs, you want to get a NIC and a motherboard that supports PCI SR-IOV as that lets you assign virtual functions via iovctl(8).
-
debdrup
Alternatively, if that's not an option, you're limited to using vNICs via netgraph as described on
klarasystems.com/articles/using-net…graph-for-freebsds-bhyve-networking if you want proper network virtualization, vale (via netmap) if you need fast interconnects, or a simple software bridge(4) with if_vtnet or the like.
-
VimDiesel
Title: Using Netgraph for FreeBSD's Bhyve Networking - Klara Inc.
-
eoli3n_
-
VimDiesel
Title: acme-tiny/acme_tiny.py at master · diafygi/acme-tiny · GitHub
-
meena
-
VimDiesel
Title: morse(6) sound
-
meena
I wonder if you could use… eject to make sounds with your cdrom drive
-
meena
remember cdrom drives? and cdroms??
-
rtprio
meena: i doubt it
-
NerdyMcNerdface
debdrup: thanks! Will look into iovctl and see if passthrough of virtual functions works better, and then vale/netmap and netgraph if that fails.
-
NerdyMcNerdface
In my use case I have just 1 VM using each physical NIC, so PCI passthrough of the whole physical interface to just 1 VM is fine. But when one thing is broken I guess I'll have to iterate to the next. ;)
-
debdrup
SR-IOV is by far the best option as it just gives you a bunch of what appears to the OS as NICs, that you only have to ensure that the host doesn't try to do anything with.
-
debdrup
Netmap is for +50Gbps interconnects, mind you. It isn't really worth it if you're not using those speeds.
-
debdrup
So, short of special-purpose hardware where SR-IOV is validated (which it isn't for a lot of gear, even today), netgraph is always the best option.
-
debdrup
As several people in here can testify to, just because a vendor claims that SR-IOV is supported, it doesn't mean it is.
-
NerdyMcNerdface
the VMs are going to be allocated a mix of 2x25gbps and 4x25gbps, so performance is definitely a plus
-
debdrup
Netgraph should be able to do 25Gbps
-
debdrup
I should probably add that it depends on the CPU speed, as does vale/netmap.
-
debdrup
vale is made to go _exceptionally_ fast, though - back when I used it in production at a campus network, it was doing +70Gbps
-
NerdyMcNerdface
nice, I think both netgraph and vale will be performant enough
-
NerdyMcNerdface
I've got a stack of mellanox/nvidia connectx-4 and intel E810 cards for testing + a couple of dual socket xeon e5 2680 v4 servers
-
NerdyMcNerdface
maybe I'll beat your 70 Gbps record ;)
-
jb1277976
koobs: You a dev?
-
koobs
jb1277976: depends on definition
-
debdrup
/dev/koobs
-
koobs
jb1277976: and depends on what youre trying to ascertain about me :)
-
koobs
i am not a device driver no
-
koobs
:]
-
jb1277976
Lol
-
jb1277976
koobs: Saw your name right now on a bud report I was looking at for my mic issue
-
jb1277976
Bug*
-
debdrup
/dev/koobs: character special (0/51)
-
debdrup
That also makes me a character device, but is that because I emit characters or is it because I have a lot of character?
-
koobs
-
VimDiesel
Title: KubilayKocak - FreeBSD Wiki
-
koobs
jb1277976: then click 'Bugmister'
-
debdrup
koobs is friend-shaped :3
-
mason
mknod koobs
-
koobs
Bugmeister
-
koobs
awww
-
debdrup
mason: what, making koobs nod? :P
-
koobs
thats one of the sweetest things anyone has ever said
-
» mason nods.
-
koobs
i dont mind beinbg friend-shaped at all
-
koobs
called that, anyway
-
debdrup
I quite like the descriptor, as it applies to most people.
-
koobs
aww, im not special :)
-
debdrup
A special snowflake, just like everyone else. ;)
-
koobs
awww
-
jb1277976
So koobs
bug 262579 for framebuffer computers like mine the last two commmit and a comment like two days ago so they can add it to stable
-
VimDiesel
262579 – Framework Laptop: headset/mic input issues
bugs.freebsd.org/bugzilla/show_bug.cgi?id=262579
-
jb1277976
Does that mean I should try stable instead of release?
-
koobs
i thought you were on current for iwlwifi already ?
-
koobs
jb1277976: ^
-
jb1277976
koobs: nope release. I got discouraged v from stable and release cause I couldn't do freebsd-update fetch but I didn't know I could start installing stuff
-
jb1277976
Noob at work
-
koobs
jb1277976: bit of a tough tradeoff/decision to make, head (current) and stable get bugfixes (current more often, sometimes stable/ doesnt get what current does), and for new hardware and testing, particularly graphics/wifi, current is going to be better, but as you said, you dont get freebsd-update
-
koobs
jb1277976: release's only get errata notices (super fix bugs) and security fixes, so new features, driver fixes can take multiple years (next -release)
-
koobs
jb1277976: being on stable requires the same as current (source builds, etc), and current is better for you, that that drops stable/ out of the running
-
jb1277976
😁
-
koobs
jb1277976: So the choice is: run current, and do source builds every now and then (every few months or less), which is easy to do, and get latest features, driver fixes, and participate in the future with feedback
-
koobs
jb1277976: or, use release, and be constrained by not having the latest and greatest
-
koobs
I would opt for running CURRENT
-
debdrup
The stable branches are good if you're going to be making a product based on FreeBSD but expect to keep a stable ABI and KBI throughout the lifecycle of the product (ie. it's not something that's always actively being developed upon).
-
jb1277976
If I go current how do I get updates?
-
debdrup
Via git.
-
koobs
jb1277976: source builds 'make buildworld'
-
debdrup
The development(7) manual page describes everything you'll need.
-
jb1277976
Ok
-
jb1277976
Current is more building then binary packages right?
-
koobs
jb1277976: more accessible instructions:
docs.freebsd.org/en/books/handbook
-
VimDiesel
Title: FreeBSD Handbook | FreeBSD Documentation Portal
-
koobs
jb1277976: the issue of binary packages (from ports) is a separate thing, from base updates
-
koobs
jb1277976: the official repo's have binary packages for 14:amd64:
pkg.freebsd.org/FreeBSD:14:amd64
-
VimDiesel
Title: Index of /FreeBSD:14:amd64/
-
koobs
you can use those
-
koobs
or build your own
-
debdrup
Isn't the word accessible doing a lot of work there? :P
-
koobs
debdrup: no
-
jb1277976
Dam I just installed arch Linux like 20 mins ago
-
koobs
but i did mean to link elsewhere
-
koobs
-
VimDiesel
Title: Chapter 24. Updating and Upgrading FreeBSD | FreeBSD Documentation Portal
-
koobs
jb1277976: you have the info you need to make whatever decision you like
-
jb1277976
Thanks
-
debdrup
That quickstart is something I still return to from time to time, it's very good :3
-
meena
i just realized: Firecracker is a minimal KERNCONF that actually works.
-
fragcula
Hey! I just installed freebsd on my raspberry pi, anything I could have fun with? It'll be accessible over SSH
-
wez
fragcula: I wish I could help, I generally install debian instead
-
fragcula
wez: heh, me too. Absolute blast from the past for me (freeBSD). I inherited a server circa 2005 and became a fanatic. Not long after I became a linux fanatic
-
fragcula
Excited just to have a freebsd box again :)
-
fragcula
I can't for the life of me remember, but I used to have it on my laptop too. Then I think the distro I used died and ended up on knoppix randomly.
-
wez_jw
yay!
-
koobs
fragcula: what kinds of things/areas do you have an interest in ?
-
fragcula
koobs: so far I have been setting up some practical things like mutt to access some email accounts
-
koobs
fragcula: any particular things you might want to learn more about or play with? network services, web serving, ?
-
fragcula
I do rememebr I was utterly blown away when I learnt Linux and BSD had different calling conventions but didn't occur to me there was more stuff like that
-
koobs
dev stuff?
-
koobs
can provide tailored answers based on that
-
fragcula
koobs: I've been meaning to start using matrix, homeserver might be good but think it'd be too low powered?
-
koobs
synapse might bork, but there's a go server WIP no ?
-
koobs
that might be interesting
-
koobs
having said that, ive run a matrix server (lightweight) on a very constrained virtualbox guest (freebsd)
-
koobs
and it was fine
-
koobs
golang server: dendrite
-
koobs
but there's also 'ligase
-
koobs
-
VimDiesel
Title: FreshPorts -- net-im/dendrite: Matrix protocol homeserver
-
koobs
\o/
-
koobs
that'll also expose you to ssl certificate automation (letsencrypt), network/performance tuning, etc, among other things
-
koobs
ligase doesnt have a port/package, so you could also tinker with that, and if you prefer it to dendrite, learn to port too :)
-
koobs
golang ports are pretty darn easy to port
-
fragcula
ooo nice, looks like only synapse available I can see
-
fragcula
its an older rpi so not arm64
-
koobs
koobs | dendrite has a port/package:
freshports.org/net-im/dendrite
-
VimDiesel
Title: FreshPorts -- net-im/dendrite: Matrix protocol homeserver
-
koobs
go based homeserver (much lighterweight) ^
-
fragcula
oh sorry mixed up port and pkg. would be fun to see if it compiles :)
-
koobs
well, packages are just precompiled ports
-
koobs
so if a package exists, that implies a port exists
-
koobs
and that it builds
-
koobs
if you prefer python (over not having a preference), then you could always tune the hell out of the synapse server
-
koobs
good learning experience
-
koobs
but yeh, resource constrained, id start with dendrite, run package first, get a homeserver running
-
koobs
then custom build (via port) to tune/customise it
-
fragcula
koobs: I tried synapse on a VPS not long ago and it was poor performance wise (I didn't meet the requirements)
-
fragcula
I'd expect a Go version to be much better though.
-
koobs
fragcula: yup, likely, that was its prime reason for being created in the first place
-
jb1277976_
Quick question. is there a quick guide to setup ports with git from the freebsd guides?
-
jb1277976_
want the latest
-
koobs
git clone the ports repo
-
koobs
i believe there's a handbook section on it
-
koobs
with ports, the default is latest (there's no other preconfiguration to do otherwise)
-
koobs
as opposed to packages (quarterly by default), see
wiki.freebsd.org/Ports/QuarterlyBranch
-
VimDiesel
Title: Ports/QuarterlyBranch - FreeBSD Wiki
-
grahamperrin
-
VimDiesel
Title: release: Add support for creating ZFS-based VM images · 89585511cc - freebsd-src - Codeberg.org