Sup koobs ... This channel is dead without you 😎

jb1277976: nah mate, we just have a timezone overlap :)

Aw

what timezone you in?

utc+11 (sydney, au)

Aw ok

let me google mine

UTC -7 PDT California

interesting

so you stay up late then :)

Yea

@loo

koobs: you hang out on the forums?

nope

good evening all

among i9 CPUs, which internal GPU is supported by FreeBSD?

for example, I know that the uhd630 gpu on the i9-10900k is supported by freebsd, but what about GPUs on other i9 CPUs?

Title: Commits · freebsd/drm-kmod-firmware · GitHub

up to tiger lake i think?

and tiger lake is on which CPU?

Tiger Lake is Intel's codename for the 11th generation Intel Core

does freebsd implement devops?

github.com/freebsd/drm-kmod-firmware notes which Linux-equivalent is in each of 12, 13.0, 13.1

Title: GitHub - freebsd/drm-kmod-firmware: KMS firmware components for graphics/kms-firmware port

or software agility?

sixpiece: definitions please ..

So, 13.1 says it's equivalent to 5.10-lts, which is to say, Debian.

mason: id really love a table (or list items) in the readme.

I have this school project and I need to go to work with a company looking to implement devops

sixpiece: what are your needed learning/experience outcomes?

or software agility and make an evaluation of some sort

the two other choices are evaluation of their application of agility, for a company that pretends to implement agility

or devops is implemented but they could benefit from process improvements

sixpiece: are you looking for companies or opensource projects?

i was in here yesterday asking about how to recover from a zroot pool that was complaining about unrecoverable failures. i hard powered-off the machine, waited a bit, then powered it on. it came up cleanly, none of the zpools reported problems, and scrubbing the zroot pool also reported no problems. i'm not sure how to interpret this. would appreciate any thoughts, insights, etc.

yes company to work with I thought freebsd would be good

sixpiece: freebsd isnt really a company, so you may want to clarify?

freebsd is a company

sixpiece: freebsd is an open source project, not a company

interesting who's the owner?

the community

I mean it showed me Jordan Hubbard

early participant in the project

at one point

noone owns freebsd

the freebsd foundation 'takes care' (has legal responsibility) for some things like the freebsd logo, etc

The Foundation owns such IP as isn't covered by copyrights in source, etc.

the freebsd foundation owns freebsd

and the application

it's good enough for me I will say it's the foundation

koobs: tiger lake is a mobile cpu, right? what about desktop i9 cpus?

the foundation is not involved in develoment processes of the project however

i don't even understand what it means to "own" FreeBSD

I mean, it's a mobile gpu

understood I will try to work with the development team though

to get my project done

Title: Tiger Lake - Wikipedia

Oleg1: ^

koobs: so, anything that is more recent than tiger lake is definitely not supported by freebsd?

Oleg1: i wouldnt say that

Intel UHD Graphics 770 is still not supported by freebsd, right?

koobs it sounds like a good idea right?

what is the development method of freebsd?

do they use software agility methods or devops currently?

Title: FreeBSD Development Projects | The FreeBSD Project

I have to learn what devops is myself

Oleg1, what specific CPU are you using?

devops en.wikipedia.org/wiki/CI/CD

Title: CI/CD - Wikipedia

Modern-day DevOps practices: section at bottom

iio7: I am just curious which internal GPUs of i9 processors are supported by freebsd's drm-kmod.

Oleg1, from looking at intel_device_info.h in the list of drivers for i915, only up to gen 12 is supported, and that is Tigerlake, Rocketlake, DG1 and the max platforms.

You sure 12th gen is supported?

I've read forums posts where only a pci card is required if you're on a 12th gen Intel CPU/GPU.

sixpiece, lots of continuous i.e. rolling release..things are being updated all the time, not updates every patch tuesday/bi annually foobar

From looking at the driver C code, pretty sure.

waiting for the sunsolve tapes to arrive so you can patch the system...cause patches came in the mail...

Is that drm-devel-kmod?

skered, but I am looking at current, so it may not work for 13.x

Ok maybe 12 is supported. wiki.freebsd.org/Graphics/Intel-GPU-Matrix

Title: Graphics/Intel-GPU-Matrix - FreeBSD Wiki

That was last updated 2020 though... suspect.

very interesting rennj will try to box it into a method I guess somehow

you wanted devops info

ci/cd

CI/CD pipeline, forms the backbone of modern day DevOps operations.

all those pkg managers

android updates daily

im still not on 13

pip cargo npm

everything updates itself, youtube-dl -U, yt-dlp -U

back in the day, updates happened much slower, patch tuesday m$ shit, biannually if your lucky

new code, could have new bugs, how can you have a stable system if you always integrate new code

apache log4j

intel uhd graphics 770 is still not supported by drm-kmod, right?

better update openssl or if chose libressl you avoid the x.509 issue

CI/CD realtime...twitter/tweats vs other new sources

*if youre using openssl 3.0 already

amigassl when is the update!

they pushed a new rev of the 1.1.1 line today, too, does it not have the same fix?

i dont even need it on amiga since i have to proxy all web connection which headless chrome server generating clickable png files for websitea

github.com/tenox7/wrp all my old vm's nextstep,freebsd5.4,solaris2.5.1,beos use it to get modern web in old ass browsers

Title: GitHub - tenox7/wrp: Web Rendering Proxy: Use vintage, historical, legacy browsers on modern web

no need for https support

Title: Imgur: The magic of the Internet

https amigaworld.net from http only browser basically

clickable png image works on omniweb from 1993

my mistake 1995 not 1993

Is it normal to have empty /etc/fstab when root is on zfs?

yes

yeh zfs does its own mounting

you could have an entry for swap, though

that's the only thing in my /etc/fstab

Title: FreeBSD-8.0-dyntick/boot.c at master · oza/FreeBSD-8.0-dyntick · GitHub

Title: Chapter 13. The FreeBSD Booting Process | FreeBSD Documentation Portal

hmm perfer something like this wiki.freebsd.org/MasonLoringBliss/ZFSandGELIbyHAND

Title: MasonLoringBliss/ZFSandGELIbyHAND - FreeBSD Wiki

kthnx

docs.freebsd.org/en/books/handbook/zfs pretty straight forward also

Title: Chapter 20. The Z File System (ZFS) | FreeBSD Documentation Portal

all though the fstab issue i dont see in search

beadm and zfs rock

bectl or whatever the default is

beadm on solaris/openindiana so i prefer that name

is there an architectural reason that ZFS manages its own mounting or is that just inherited from the original solaris implementation?

volume manager and filesystem in one

veritas/ibm/hm was original

grrr hp

lvm and fs on linux

which lvm came from like hp/ibm

when linux got lvm and sgi xfs...yeah i remember

zfs does the CRC checksum..avoiding hardware failures like bad bios, or broken cable...

nothing but software

hmmm. interesting. i have reading to do about volume managers. thanks.

Title: Reed–Solomon error correction - Wikipedia

Title: Checksums and Their Use in ZFS — OpenZFS documentation

fletcher4

en.wikipedia.org/wiki/Data_corruption Cosmic rays cause most soft errors in DRAM

Title: Data corruption - Wikipedia

so my ECC ram can see 2 data errors and correct for 1, if memory serves

Some errors go unnoticed, without being detected by the disk firmware or the host operating system; these errors are known as silent data corruption.

and zfs detects those

SAS allows up to 65,535 devices through the use of expanders, while Parallel SCSI has a limit of 8 or 16 devices on a single channel. vs Fibre_Channel ~16777216 (224) /switched fabirc

2^24 ofr fiber channel/switched fabric

why would a pkg upgrade delete firefox?

i dont use it i installed it to test something

Hi all - is freebsd 13.1 vulnerable to the openSSL issues I've been reading about?

jb1277976: either package doesnt exist, or dependencies (package) have been updated or dont exist,so firefox cant

nichos: no version of freebsd uses 3.0.x in base

koobs: great, thank you!

nichos: but some ports may have or be using it, depending on how one has the DEFAULT_VERSIONS=ssl=<version> specified

ok thanks koobs

nichos: the openssl-devel port (3.0.x) update is in progress

but if you dont use it, nothing to worry about (at this stage)

nichos: from our freebsd openssl port/package maintainer today: nitter.net/Sp1l/status/1587509906495660037

Title: Mastodon: brnrd⊙bn (@Sp1l): "FreeBSD base is NOT vulnerabile (has 1.1.1). OpenSSL-devel port is pending fixing ld: error: undefined symbol: __atomic_is_lock_free in providers/libfips.a"|nitter

grep pkg /var/log/messages perhaps.

info logged

Thanks koobs I'm new to bsd and didn't know where to look. I had a look at www.freebsd.org/news/newsflash and didn't see any mention there. I'll follow on mastodon.

nichos: yep, ideal state would be our secteam communicates on freebsd-security mailing list

Title: freebsd-security⊙Fo

the other obvious place would be: freebsd.org/security

Title: FreeBSD Security Information | The FreeBSD Project

nichos: you'll see prior openssl security advisories here: freebsd.org/security/advisories

Title: FreeBSD Security Advisories | The FreeBSD Project

nichos: welcome to the community btw

nichos: if you werent aware, and its your kind of thing: wiki.freebsd.org/Discord too

Title: Discord - FreeBSD Wiki

and/or discord.gg/freebsd

Title: FreeBSD

thanks all! I'm only on irc and matrix, but joining the mailing list might be a good idea

roger that :)

If i don't want to deal with the complications of bhyve or whatever its called is virtualbox the next best thing?

jb1277976: youll find bhyve simpler

and better supported, than virtualbox with a freebsd host

hmm

thought plenty do do it

koobs: there a guide or gui for it?

a few i think

sysutils/vm-bhyve

looking now

deskutils/virt-manager

first is a console program

i used virt-manager in linux i'm familar with it

Title: bhyve gui port - without needing jails or zfs | The FreeBSD Forums

more here

Title: GitHub - DaVieS007/bhyve-webadmin: FreeBSD Bhyve Web Administration Software

web frontend

Title: runhyve · GitLab

probably more

Cool thanks

tidalscale SSI image using bhyve, 0 down time, you keep adding boxes to grow cpu/ram/disk resources

Title: GitHub - chyves/chyves: Resource manager for bhyve using ZFS.

need a wiki page for it apparently

:|

jb1277976: twitter.com/FreeBSDHelp/status/1587643484139589632

Title: FreeBSD Help on Twitter: "Any good FreeBSD bhyve frontends (TUI, GUI) out there? Recommendations please ..." / Twitter

we'll see what reco's we get from the community

Title: FreeBSD Help (@FreeBSDHelp): "Any good FreeBSD bhyve frontends (TUI, GUI) out there? Recommendations please ..."|nitter

to follow anonymously

ill bbl

I got a laptop with 2 usb ports and 1 usbc port. i have a dongle when i had a mac that connects the usbc and usb-a port right. i have a usbc ethernet dongle if i plug it in. i should be able to find the interface then dhclient interface right?

im just gonna try it :P

usbconfig show_ifdrv : List all connected USB devices and their attached interface drivers

Why is my ehternet slower then my wifi ?

is it because its a dongle?

unplugging this is sad

jb1277976, it might be a driver issue.

usb vs m.2 wifi? what bus is the wifi on

i had m.2 combo card in laptop pciE wifi and usb bluetooth

m.2 port can have pciE,usb, acpi devices

ahci device grrr

jb1277976, Some "re" (RealTek) device?

jb1277976, tail the log with "tail -f /var/log/messages", and see what driver it uses when you plugin the dongle.

sorry was afk, let me plug it in right now

What's up with realtek everywhere? are they like major manufactors or something?

Or the *only* manufacturer which produces USB-Ethernet hardware which in turn have the drivers in FreeBSD of varying quality

Got it

Heya. Do we have a favourite configuration management tool in FreeBSD? I've used terraform on cloud services and things that need web configuration, but I'm looking for a way to centralize configuration of some standard servers, and control package installation/updates and configuration of postfix, dovecot, haproxy, BIND, etc on various servers.

Am I looking for an "orchestration system" like k8s?

Or just ansible/puppet/saltstack? Or should i just roll my own with shell scripts or makefiles?

yes

jb1277976, I would consider support for RTL8251/8153 in ure "beta". That's just my opinion, but there are some fairly new work that was put into FreeBSD 13 with the ure driver and several Realtek chipsets which haven't yielded positive results. This is not the same chipset, but just to give you an idea bugs.freebsd.org/bugzilla/show_bug.cgi?id=253374

Title: 253374 – [if_ure] Add support for RTL8153B, RTL8156 and RTL8156B

epony: to all of them? :-)

yes.. but mostly to shell scripts with sed and value toggle out of defaults for normalisation of insane defaults

the "replacement" of files is a failed concept, has to be diffing and/or sed crafring semantic value.. as a minal realiable variant of what the change management tools do (none of them work for production reliable setups)

so all of your ideas could work, but not as real as semantic markup for configuration normalisation

redhat took the approach of "lensing" which are parser/distiller shims per configuration file which they call lensing in their "augeas" tool, which approaches the robust methodology

for your case it may be simplified to "sed"ition or copy over of the "tuned" config, or some "ansible" time waste ;-)

and no, no registry or other such things.. that concept does not work well

Right now, I manage individual servers directly, and manage configuration files largely with RCS. I am trying to evolve. As I see it, I could manage my various servers' various services centrally, and not worry about the diffs on the targets themselves. Is that wrong? I'm wondering whether to drive the process from ansible, puppet, make, etc.

ansible

I *would* like an easy way to take, say, all by web server configuration, and point it at a new server, so as to avoid having to do all that setup manually.

or your own micro-variant of that (ssh, rsync, scp, rdist etc)

So, bespoke service management solutions are still a thing?

the only real thing, that works

heh. There's so much I don't know, like if there is one tool to rule them all that I just haven't heard of.

ansible

distilling configuration files is not a novel idea

ansible is foolproof.

but each of these concepts has stale modules.. so you have to be able to "fix" it or adjust it

I'd estimate the peak times were five-six years ago, that's when even all the BigCos jumped on the ansible train

now there's ample supply of talent that knows how to handle it around

the problem with thse are, they are commercial products and the free tier is.. community self-help

Like the #freebsd channel on LC? :)

and their bootstrapping is unreliable / not solid enough, not system native etc.. but ansible is ssh/python/yml etc

if you need one i'd be happy to sell you a support contract

the unix tooling is distributing configuration files out of repos and template toolking processing

I used chef a long time ago. I will look at ansible, and will not shy away from doing it myself it that seems better/faster/easier.

right

m4 to rule them all

gh00p: if you have less than 20 servers to manage, look at ansible. if you have more than 20, look at saltstack

ansible it is then.

salt scales way better

until its message passing can't scale

But perhaps salt would be useful to *know* for future employment...

en.wikipedia.org/wiki/Promise_theory#History but it's agent based

Title: Promise theory - Wikipedia

Title: CFEngine - Wikipedia

epony: eh, seen salt used with 20k servers

scales fine

does not list the authoring team / organisation / business model / scale capacity but is a start in the implementation detail review and agent / push-pull mode en.wikipedia.org/wiki/Comparison_of…anagement_software#Basic_properties

Title: Comparison of open-source configuration management software - Wikipedia

Title: Apropos rdist

it's one of those topics that are critical to system maintenance and management and nobody agrees with anybody: monitoring, backups, configuration, upgrades, repositories, filesystems ;-)

and then.. databases

yet all of these have system built-ins that are reliable and robust over decades

at least logging is somewhat "generically" the _same_

I heard lots of servers are going virtualized to Dave cost. Can you imagine having 29 vms running all at the same time on one desktop.. shees

save*

"why you no..?" jails/containers OS level virtualisation.. if on one system

peak intelligence (overhead mastery): local cluster of SFF SBC armboards with proprietary orchestration that depends on the "internet"

Thinking of using Virt-manager. On Linux I installed qemu libvirt with systemd. Anyone have experience with FreeBSD with Virt-manager ?

libvirt can use bhyve, everything besides kvm and maybe xen is very much treated as second class hypervisors tho.

yes it works from BSD systems can connect and manage remote ones

llua: how is libvirt support for bhyve these days?

can I use a freebsd usb to boot into my hdd?

how can I restore the bootloader in a freebsd partition? bsdlabel doesn't work

if it's MBR or GPT the modern tool is gpart

if it's EFI it's a bit more involved

gpart bootcode, with the -b, -p, and -i switches and the appropriate files from /boot

and can use gpart show to see what exists

gpart says there is no label

if you just type "gpart show" it says that?

*bsdlabel

nothing else

gpart doesn't show that partition at all

it doesn't show like half of the partitions it seems

hmmm. maybe it's using slices inside the partitions like in the old days. not sure about that. may need someone else to help then

got a strange one today folks. i can set up a jail that will not communicate with anything except the host (nothing else on the network) when in vnet, but will do just fine on nat=1 (iocage) can anyone guide me further on this

hello gut morgen

hmm, cgit.freebsd.org/src/commit/?id=923…4f7b8efefd988bedd88ab68540332efa3f8 says "This driver is for ESXi product which only supports x86/x64.", i thought esxi on arm is a reality now :)

Title: src - FreeBSD source tree

What's up with FreeBSD not being able to hibernate and suspend?

jb1277976: I'm not sure what you're talking about, but for me it's enough to "sysctl hw.acpi.lid_switch_state=S3" and close my laptop

Of course, if you want it to be permanent, you write it to /etc/sysctl.conf

Title: SuspendResume - FreeBSD Wiki

meka: let me do some research on that command

jb1277976: docs.freebsd.org/en/books/handbook/config/#_suspendresume

Title: Chapter 13. Configuration and Tuning | FreeBSD Documentation Portal

Thanks meka

There a way to list all hw options for any laptop/desktop wanna do research on them so I know how to get the most out of my laptop sus to hw will that list then all?

Man sysctl prob

jb1277976: you can get sysctl descriptions by running "sysctl -da | less"

To get all the values not descriptions "sysctl -a | less"

Thanks meka

i'm getting a panic when trying to import a pool that may have been corrupted by an issue with the storage virtualisation. i would rather not abandon the pool. is there anything further i can do to recover? i am using zpool import -fFnN $POOL

Where did you get those flags from?

just a sec

Also, if you get a panic you should grab debug symbols and read docs.freebsd.org/en/books/developers-handbook/kerneldebug

Title: Chapter 10. Kernel Debugging | FreeBSD Documentation Portal

started with -fN to import since it was online from a different system (different boot partition) and to not mount it ; it informed me that there would be data loss due to corruption ("last N seconds will be irreversibly discarded"), and to use -F to attempt recovery. then after the first panic i added -n

not sure if i will be able to debug like that since it's in a virtualisation environment that i don't control

i will take a look, for now i will need to migrate things over to a fail over system

I'm looking at the loader erratum here: freebsd.org/security/advisories/FreeBSD-EN-22:27.loader.asc and it says the UEFI loader needs updating, yet if I run freebsd-update fetch & install, when I mount my EFI partition the bootloader is still dated Jan 2021. Is there somewhere I can get the bootloader and copy it over? Very weird freebsd-update doesn't do it's job here

My laptop reboots 2x gets a kernel panic then i can log into X can you see whats going on termbin.com/www5 didn't happen right there but something should pop out im guessing

vortexx: should be in /boot/loader.efi to be copied to EFI/BOOT/BOOTX64.efi (assuming that's your platform)

jwmaag: thanks

Gentle bump, can anyone answer this? <markmail.org/message/dtzsm4xs7nok3m4q>

Title: poudriere jail update from source: syscall.mk does not exist - Graham Perrin - org.freebsd.freebsd-current - MarkMail

grahamperrin: you seem to have a lot of other error messages in there, right after the start: awk: can't open file /usr/src/sys/sys/param.h

bad checkout?

yuripv: thanks, similar observations in #poudriere:libera.chat

linsysfs on /usr/src/sys (linsysfs, local)

– is the offender, but not specified in fstab.

is there an issue with python 3.9 pkg ? I am getting this error: ld-elf.so.1: /lib/libc.so.7: version FBSD_1.7 required by /usr/local/lib/libpython3.9.so.1.0 not found

grahamperrin: weird mount :)

There a defenetive guide on installing kde?

Lots of stuff online but not really for freebsd. the wiki and freebsd.org said there is a core team on it. but i really couldn't find anything

found this community.kde.org/FreeBSD/Setup#KDE_and_the_rest

Title: FreeBSD/Setup - KDE Community Wiki

jb1277976: reference for 'core team on it' ?

koobs: i found something the other day. nvm

:D

ok

koobs: isn't it early for you?

jb1277976: technically

kevans_: 8am now, ive had coffee

couldnt sleep past 6:30

dont ask

how are you ?

koobs: not bad, you?

whoops

jb1277976: 8am now, ive had coffee

:-p

kevans_: im lovely, you?

less confused than I was a minute ago

hows the farm?

wow i can't belive how the world has diffrent timezones and everyone just lives there life

s/farm/homestead

jb1277976: whats the alternative?

the swatch internet time

great, received a donation of a tractor from my step-father and got that fixed up, so now I have a snow plow / gravel scraper

kevans_: lovely!@

yeah- how's life down under?

not too shabs

im going to miss the cool/cold night as we go into summer

might have to move to alaska

if i ran sudo pkg install --quiet --yes kde5 plasma5-sddm-kcm sddm how can i see the progress ?

jb1277976: what do you want to quiet but not progress?

koobs: hit up rew@ if you go :-p

who's rew?

koobs: following this guide community.kde.org/FreeBSD/Setup#KDE_and_the_rest

Title: FreeBSD/Setup - KDE Community Wiki

rob, used to go by fbynite here but I don't think I've seen him in a while

he's a pilot up there

never seen that login@

itneresting

*takes note*

im going to need airdrops so

running kde for the first time since the 90's lol

very nice

Wow so much setup 0_o

Yeah, beautiful desktop, however I tend to get distracted when I try to set it up

I'm building a replacement for an old mail server and waffling between sendmail and postfix. The catch is, it needs to handle remapping address in the format tag⊙uec to username+tag⊙ec for local delivery using procmail to username. I know I can do this easily in sendmail, but is it possible in postfix?

Title: FreeBSD Help on Twitter: "The FreeBSD November DevSummit starts TOMORROW (Thursday November 3, PDT) with several half-day sessions including Wei-Hu from @Microsoft &amp; @PouliotPeter from @AmpereComputing Tickets are free! Register now and retweet: t.co/ySX5IGAxi0 Schedule: t.co/SMp3s3JoSN" / Twitter

ok, bit of a nightmare jail problem. i have a freebsd instance running in an esxi vm. I can set up jails on this freebsd, and using the shared jails i can ping outside the host (anywhere), however, i need to use

vnet, which I can set up no problem, and the jail will ping only the host, and no further

i feel like pulling my hair out

and I'm balding, so you know I'm truly desperate

I don't use vnet, but since it's basically a whole networking stack just for that jail, you probably have to set a default route inside the jail to get anywhere?

codersmoke: are you using public IPs for all, or might you be forgetting to NAT?

And maybe the host needs "gateway_enable" too?

spork_css, ghoti thanks for your replies

may need net.inet.ip.forwarding=1

Oh, oops, I have one here actually (running a vpn client inside it for torrents), and you do apparently have to have the jail's interface in a bridge group that includes one of your host's interfaces.

My jail has this interface (as seen from the host):

vnet0.2: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500

description: associated with jail: torrent as nic: epair0b

spork_css: i have default_router = 192.168.1.1

Then the bridge:

bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

ether 02:09:78:cc:18:00

member: vnet0.2 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>

ifmaxaddr 0 port 5 priority 128 path cost 2000

member: bge0 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>

ifmaxaddr 0 port 1 priority 128 path cost 55

(bge0 is the host's interface)

i have a similar ifconfig

dpaste.org/9xfKT that's the host ifconfig @spork_css

spork_css: do you create the bridge membership with exec.start and remove it with exec.stop?

i have a very similar setup on another machine, too, spork_css for torrents.

Oddly enough I do *not* have a default route in the vnet jail, or other networking stuff other than setting up a tun interface for openvpn client...

I'm using iocage, so this was all automatic I believe (but migrated from ezjail, so the history is a little hazy). My host's rc.conf only has this for the bridge:

cloned_interfaces="bridge0"

ifconfig_bridge0="addm bge0 up"

it's probably set behind the scenes using iocage

Interesting, iocage's config.json has this, so the default route seems to be set there and not inside the jail:

"defaultrouter": "10.3.2.1",

Is there some great reason for using vnet in a torrent jail? :)

Easy way to get a VPN client running without a bunch of shenanigans.

ghoti: yes, you can set up a kill switch

And on my firewall that jail's IP can only hit 2 DNS servers and a handful of VPN server IPs. No VPN, no internet.

hmm. I feel like I do something like that without vnet.. I mean, an IP is an IP to the rest of the network, it only matters to the local machine.

spork_css: where did you find that defaultrouter for iocage?

But a killswitch? Lik,e something faster than setting a firewall rule or shutting down the jail?

is that in the individual jail

In the jail's config.json file.

jail's config

ah

yes

i have that too :)

I have no memory of setting this up for some reason... Literally my only vnet jail.

Oh, hey, I still have a vnet config from before iocage in /etc/jail.conf - perhaps this is helpful? Known working under 12.x: pastebin.com/EGMyeLh8

Title: #private {# host.hostname = "private.example.com";# $ip_addr = "10.3. - Pastebin.com

codersmoke: what about simply `killall -j torrent -STOP` ?

My "killswitch" is for when my vpn account runs out of credit...

ah. Mine is for when wife says Netflix isn't working again.

IIRC my jail.conf snippet there is based on my first read of Lucas' jail book.

lol

well now, tcpdump is telling a really different story here

I do my jails with my own tools, partially modelled on the "Application of Jails" chapter in the handbook. (Use to be ch. 15. It might also have been renamed by now.)

Never looked at iocage, but maybe I should. Looks like the jails part of the handbook has been compacted over the years. Now 15 is just called "Jails". :)