00:11:24 Lucas covers "native" jails and iocage in his book and that's what got me poking at iocage. I really like it, it's generally worked well for me and is easy to automate. 00:13:25 There's also an "iohyve" that aims to be a similar tool for bhyve VMs, but looks a little dead: https://github.com/pr1ntf/iohyve 00:13:27 Title: GitHub - pr1ntf/iohyve: FreeBSD bhyve manager utilizing ZFS 00:36:21 ghoti spork_css i redid the containers page: https://wiki.freebsd.org/Containers#Container_Tools:_Third-Party 00:36:22 Title: Containers - FreeBSD Wiki 00:36:28 fwiw 00:36:50 must do same for bhyve things 00:36:53 spork_css: I used iohyve for bhyve management for a while, but the project hasn't seen a commit on github since 2017. I migrated to vm-bhyve, which also works nicely. 00:39:15 koobs, do you know if there's a tool or a library that understands config files in the format that jail.conf uses? I've been rolling my own, and I'm never confident that it's 100%, or future-proof. 00:39:50 ghoti: nope im note 00:40:00 not* 00:40:42 Dang. Maybe I'll just write an awk script linter for jail.conf and contribute it.\ 00:40:52 how would you want it to work? 00:40:55 Then others can add what's missing. :) 00:41:33 is jails.conf kind of a standin for what would be a OCI/standard method for declaring a jail? 00:44:23 Perhaps, but the spec doesn't match our configs. https://specs.opencontainers.org/runtime-spec/config/?v=v1.0.2 00:44:25 Title: The OpenContainers Runtime Spec Config 00:44:40 oh i just meant conceptually 00:44:46 ah, maybe. 00:44:49 jails.conf being an 'implementation' of the concept 00:46:14 Anyway, I feel we could use something with a bit of *understanding* of our config. Like, `allow.raw_sockets;` has no = after it, `ip4.addr` can take 1 or more arguments separated by commas, etc. 00:46:21 right 00:46:48 feels like a config 'spec' 00:47:18 'schema' 00:47:20 I have never written a spec, but I have written lots of config automation. :) 00:48:03 there's a concept called a lexer/parser 00:48:12 that programs / languages can be defined in 00:49:13 theres various open source tools to create these 'grammars' 00:50:43 https://en.wikipedia.org/wiki/Lexical_analysis 00:50:44 Title: Lexical analysis - Wikipedia 00:54:47 I've spent the last 15 minutes reading src and about json lexers, to get an idea of what is out there for something more mainstream. 15 minutes is not enough.. 01:04:59 ghoti: https://pypi.org/project/jailconf/ 01:05:00 Title: jailconf · PyPI 01:05:01 ? 01:05:30 https://pypi.org/project/jail/ 01:05:31 Title: jail · PyPI 01:05:32 ? 01:14:23 I love how the lex man page is a full lesson on how to construct an ERE. Never seen that before. 01:38:16 koobs: jailconf looks like just about exactly what I was hoping for. Not sure I get the other one yet, but it also lead me to https://github.com/bsdci/ioc which is interesting. 01:38:19 Title: GitHub - bsdci/ioc: libioc command line tool for BSD jail management 01:38:49 ghoti: nice let us know how it goes 01:45:16 Anyone know if a good app for iphone that I can use for mailing list? 01:45:25 Of* 01:55:14 mail works fine? 01:55:20 depends what specific functionality you want 01:55:27 not many choices for free and open source 02:02:02 * parv moans about Mail (iOS) always stuffing one kind of email in "Junk" folder; there has been no change in behaviour after repeatedly moving that mail from there. He has given up on Mail to see the light 02:06:22 koobs: something that i can track like mutt for iphone or something. that top post and stuff 02:50:55 hi guys ! any info about libreoffice not showing in the pkg search ? 03:36:24 elliot@phil:~$ pkg search -i libreoffice|grep -v language 03:36:24 libreoffice-7.4.2.3_1 Full integrated office productivity suite 03:36:35 accelerat0r: ^ 03:37:41 There is no result in "latest" on stable/13 03:38:39 lets see 03:41:17 oh 03:42:28 pretty weird then 03:44:16 fallout: https://portsfallout.com/fallout?port=&maintainer=&env=amd64&category=&categories=editors&flavor= ; logs for "131amd64-default": https://portsfallout.com/fallout/582676/ 03:44:18 Title: Fallout list - FreeBSD pkg-fallout 06:10:46 ghoti: thanks for the pointer to https://github.com/churchers/vm-bhyve! 06:13:52 koobs: awesome list, looks like you've been busy w/edits on that wiki page 06:53:26 how can I restore the boot loader on a freebsd partition? 07:05:01 dksnd: https://www.freebsd.org/cgi/man.cgi?query=boot0cfg&sektion=8 07:05:01 also have a look at the gpart manpage (last hint) 07:05:01 last hint in the manpage, i mean 07:05:03 Title: boot0cfg(8) 07:07:10 I'm asking about partition, not a disk 07:07:27 also I'm not sure I'm using the bsdlabel nonsense 07:18:15 it should boot from a normal ufs2-formatted partition - is that possible? 07:18:35 hello, I am study some of periodic scripts for inspiration. Why is colon before this? ": ${daily_scrub_zfs_default_threshold=35}" ....It is a null command according to man page but why is it needed? Thanks 07:25:54 also, why /boot/boot2 doesn't have the first sector? is it combined with something else? 07:37:04 i mean, that's what gpart is for 07:37:27 I'm getting a feeling that the last person who knew how that stuff works died in 1982 07:37:54 have you read the handbook? 07:38:06 yes 07:38:23 and it's not in there? 07:38:54 no, it is not there 07:39:11 dksnd: https://docs.freebsd.org/en/books/handbook/cutting-edge/#updating-bootcode 07:39:12 Title: Chapter 25. Updating and Upgrading FreeBSD | FreeBSD Documentation Portal 07:39:41 stands to reason that "restoring loader" is akin to "upgrading loader" 07:40:36 something something gpart 07:40:48 it doesn't work obviously 07:41:03 what have you tried and how has this failed for you? 07:44:48 pvalenta, https://stackoverflow.com/questions/7444504/explanation-of-colon-operator-in-foo-value 07:44:50 Title: bash - Explanation of colon operator in ": ${foo=value}" - Stack Overflow 07:49:35 first, gpart doesn't seem to see the partition 07:53:51 post the output to a pastebin 07:54:37 output of what? 08:27:34 I can't even reproduce the environment in a vm because your wonderful os doesn't work in virtualbox 08:27:56 of course it does 08:28:02 you're just doing it wrong 08:29:32 I'm trying to install it but it just hangs 08:36:20 parv, oh, nice. Thank you 08:59:54 playing with boot options doesn't do anything either -  i'm not even sure they are applied because the output is the same 09:04:27 https://paste.pics/e0ef4420e9f4bec73047202ac95fabf6 09:04:28 Title: Screenshot, 2022-11-03 12:03:58 - Paste.Pics 09:28:50 and of course the wonderful community has no solution on their wonderful forums 09:36:55 also, why /boot/boot2 doesn't have the first sector? is it combined with something else? 13:29:11 ooo, openzfs devsummit videos are starting to show up. 13:31:02 if that image is the first boot from media, there's no /etc/hostid and /boot/entropy included on the install media, so the problem isn't anything to do with those messages 13:31:40 i'm guessing that since there are blue borders around the image, this is some sort of serial redirection console attached to hardware? 13:32:01 so you need to set up the serial redirection properly 13:32:50 or maybe that's part of the website, but that doesn't really preclude serial redirection 15:45:19 is mixing pkg repositories still discouraged? i recently switched back to the official pkg repo, but my xmpp server is currently broken because the luadbi package is built without postgres support… 15:45:52 so I'm wondering whether i can just make a tiny pkg repo with only the packages for which i need different build-time options without it messing things up… 15:50:14 If you have to use multiple package repositories, it's best if you overlay them with priorities. 15:51:01 pkg.conf(5) describes the property. 15:52:51 debdrup: I assume you're talking about "PRIORITY"? 15:52:59 Yup. 15:53:02 Great, thanks. 15:53:17 It'd be quite odd for it to be named anything else ;) 15:53:44 debdrup: I wouldn't be surprised by that, tho. :P 15:54:26 Really? 15:54:31 I assume one problem with mixed repos would be if my overlay repo has some ports built with some option deactivated that's active by default when others ports not in the overlay depend on it? 15:54:56 Yes, really. This is IT, things don't necessarily make sense. :P 15:54:58 Depends on the priority. 15:55:17 Usually things make a _little_ more sense in FreeBSD though. 15:55:24 The overlay would obviously have a higher priority so the packages that are in there override the ones from official pkg repo. 15:55:38 Yes, usually. :P 15:55:55 Big reason why I picked FreeBSD ;) 15:56:26 The biggest problem with mixed repos is when you're not in-sync with the latest checkout of the packages, really. 20:10:09 morning 20:12:44 Full FreeBSD DevSummit Day 1 Video is up: https://youtu.be/RxSTqxpT1y0 20:12:45 Title: November 2022 FreeBSD Vendor Summit - Day 1 - YouTube 20:18:14 spork_css: my pleasure 20:18:17 glad its useful 20:55:07 * dch waves to phryk 20:55:20 heya, dch! 20:55:51 meena: hey I set up hedgedo today, its cake now. 21:21:47 Thanks koobs all those FreeBSD heads talking about stuff. Makes me feel not alone 😁 21:30:46 \o/ 21:31:19 anyone have any idea why i can ping a jail's host, but cannot ping anything else beyond that? 21:31:28 this is a vnet jail. shared jail works fine 21:32:23 usually that means you didn't enable forwarding on the host 21:32:46 if not that, it's likely either a routing or firewall problem 21:33:26 RhodiumToad: net.inet.ip.forwarding=1 # Enable IP forwarding between interfaces 21:33:34 in my sysctl.conf 21:34:31 i have unifi hardware, say the jail is 192.168.1.17, and the host is 192.168.1.125, and the router is 192.168.1.1 21:34:45 dch: did you put it into ports? 21:34:46 host network works fine 21:35:14 codersmoke: I think you're probably misunderstanding how routing works with vnet 21:35:28 RhodiumToad: I probably am :) 21:35:45 the vnet jail behaves like an entirely separate host, attached by a _separate_ network interface 21:36:04 have you set up a bridge for the host and the jail to share the network? 21:36:18 yes, i'll share my ifconfig, if that's ok? 21:36:24 sure 21:37:34 https://dpaste.org/Y200b 21:37:40 RhodiumToad: ^ 21:39:14 https://dpaste.org/jL0LZ is my rc.conf on the host 21:39:25 you've put the host ip on the physical interface not on the bridge, in my experience this doesn't work properly though the failures can be subtle 21:39:47 any firewall rules? 21:40:36 none 21:40:36 thought i'd get it going before i implement firewall 21:40:36 so, em0 on host shouldn't have ip? 21:41:14 oh, also you have two ifconfig_em0 lines, that doesn't work 21:42:11 I would try it like this: ifconfig_em0="up" ifconfig_bridge0="inet 192.168.1.150 netmask 255.255.255.0 addm em0" 21:43:51 gateway_enable="YES" should enable forwarding without needing to have that separately in sysctl.conf 21:44:28 ok, i'll give this a go right now 21:44:44 thanks for your help RhodiumToad 21:46:58 host inaccessible now via ssh 21:47:31 what exactly does the rc.conf look like now? 21:51:39 https://dpaste.org/ubxQa RhodiumToad i had to type it over from vmware interface 21:52:16 no i won't win any awards for following instructions, maybe i botched your tip 21:54:03 I should add, i have a functioning vnet on my freenas server, and it puts the inet ip on the igb0 interface and not the bridge0 21:56:43 you missed out the ifconfig_em0="up" 21:57:20 (you need that to bring the interface up in the absence of an address) 21:58:27 thanks, is that before or after the ifconfig_bridge0 line? 21:58:35 doesn't matter 21:58:53 rc.conf is just a set of variable assignments, not a list of commands 21:59:20 that's why specifying some name twice doesn't work, the second assignment just overwrites the first 22:02:54 so, I added it, and still can't ping the host 22:03:16 (from my laptop) 22:03:24 "addm em0" not "add em0" in the bridge0 line 22:14:28 codersmoke: any progress? 22:14:40 not yet, i'm messing a bit with ifconfig though 22:14:46 thanks for hanging around though. 22:20:28 RhodiumToad: hardly as simple as a static route in my unifi controller? 22:21:12 shouldn't be needed if the bridge is correctly set up. 22:24:02 resorting to tcpdump 22:24:37 can you see the ARP table on the router? 22:28:34 a bit complicated on the unifi controller, it can be done, but i just don't have immediate access to the console 22:29:03 strange thing though. i am seeing ARP requests in tcpdump in the jail itself 22:29:14 yes, you should 22:29:33 seeing reference to my wife's iphone too, which make me certain that *something* is coming through 22:29:43 i can only suspect its a routing issue 22:30:02 the vnet jail should see any broadcasts on the network that it's bridged to 22:30:17 which will include all arp requests 22:30:31 possibly an in-jail routing issue, perhaps 22:30:35 it should answer arp requests for its own IP 22:31:28 there is no reference to the jail's ip, or even the host's ip for that matter 22:31:52 in the tcpdump that is 22:32:22 if you try pinging the jail from outside, do you see arp requests for it? 22:34:18 no 22:34:19 none 22:34:37 oh wait, 22:33:26.522137 ARP, Request who-has 192.168.1.240 tell 192.168.1.17, length 28 22:34:38 do you see the pings? 22:35:01 and do you see a response to that request? 22:35:03 no 22:35:28 nothing there. so it's outbound issue (jail--->host) presumably? 22:35:44 what's the ifconfig look like from within the jail? 22:36:26 https://dpaste.org/vjosB 22:37:28 hm 22:37:53 ah 22:37:58 .17 is the jail 22:38:02 yes 22:38:13 what is .240 ? the box you were pinging from? 22:38:21 correct 22:38:25 and the host is .150 22:38:47 so the jail sent out an arp request to find out where .240 is, and got nothing? 22:39:25 oh wait yes, that makes more sense 22:41:39 frustrating, right? 22:43:21 can you check with tcpdump on the host em0 to see if that arp request got out, and on .240 to see if it was received there? 22:45:27 RhodiumToad: I must hit the sack now, but I'll try tomorrow, is it ok to /msg you with the end result? 22:45:37 sure, if you like 22:46:45 thanks mate! appreciate the help.