00:31:57 parv: the pages _around_ FreeBSD Journal are somewhat peculiar, in that the start is near the end (the foot). 00:32:20 Try 00:32:21 Title: FreeBSD Journal DE September/October 2022 03:56:03 meka: I got it working, thanks for all of your help :) 04:01:04 i thought that: if out xmit bridge0 recv gre0 matches for a packet, then surely via gre0 must match, right? i am seeing that out xmit bridge0 recv gre0 actually requires a separate rule 04:18:06 is there a simple way to install an older port in the ports tree? 04:38:52 hello how do I change the mirror to a faster oneÉ 04:39:13 I have a computer that can download 1gb per second 04:39:21 and its working at 100 kb per second 04:39:57 its really horrible is there anything I can do 04:44:04 its frustrating i always get bad luck and lose my time 04:44:13 lol 04:57:20 i just lost an hour was hoping to have it up and running in 15 minutes not a huge headache... 05:27:50 Guest706: https://www.freshports.org/ports-mgmt/fastest_sites 05:27:51 Title: FreshPorts -- ports-mgmt/fastest_sites: Sort MASTER_SITE_* based upon TCP handshake times 05:28:38 Never tried it, mind you 05:29:00 If I am downloading an ISO I will use aria2c and list a few mirrors and make them all threaded. 05:29:11 I can saturate 5Gbit like that 05:31:32 Another tip: https://adufray.com/blog/2016/10/24/finding-the-fastest-freebsd-mirror 05:31:33 Title: Finding the Fastest FreeBSD Mirror – adufray.com 05:31:54 https://gist.github.com/farrokhi/71151176a961af88efc30aea8a998ee9 05:31:56 Title: A shell script to select the fastest freebsd-update mirror · GitHub 05:32:02 etc... 05:42:24 thank you Erhard 05:43:09 With a Gig connection familiarize yourself with aria2c because it can help you make use of the bandwidth, even with a single server (much to the admin's chagrin of course) 05:44:12 I have it installed at home it`s just teh school computers 05:44:30 Cool. 05:44:39 like right now I am using my computer through the cloud and ssh to be able to go on weechat 05:44:44 freebsd installed 05:45:07 but sort of fed up with these computers it`s just the problem is I am here at school and want to be able to do something 05:45:15 but cant a lot of the time... 05:45:44 they have some weird french canadian keyboard that I don`t know how to hit all the buttons correctly and so many user restrictions 05:46:06 You at McGill? 05:46:14 but they have virtual box and I thought freebsd was the fastest and easiest to install 05:46:18 how did you knowÉ 05:46:25 My son just graduated from there 05:46:31 oh cool in what 05:46:38 Software Engineering 05:46:44 congratulations 05:46:48 to your son 05:46:53 Yeah, he already has a job 05:46:53 i`m at uqam 05:47:02 Ah, close enough 05:47:06 sounds pretty awesome what kind of job I want to be able to get a job 05:47:08 Just walked by there a couple weeks ago 05:47:11 yes exactly one block 05:47:36 one metro station place des arts basically and the next station is mcgill 05:47:45 He is doing software engineeering for work. Already making total of 6 figures US. 05:47:57 unbelievable and I can`t even get a job 05:47:57 Not bad for a puk kid, lol 05:48:06 pretty impressive 05:48:10 What are you studying? 05:48:27 software engineering but I have my Bachelors of Engineering 05:48:33 Nice 05:48:37 I am on the Masters level 05:48:44 Cool 05:49:02 yes it`s not bad but I somehow missed the money tree I guess 05:49:15 I`m planning on doing a project on freebsd for my course 05:49:16 Well, if you are in school it's different 05:49:28 I graduated 12 years ago 05:49:43 For the BS? 05:49:47 And now doing an MS? 05:49:51 Bachelor of Engineering 05:50:01 Oh, I guess that is different 05:50:13 B.Eng. but not an engineer I was a junior engineer and now a candidate for the profession 05:50:23 His is a BS. Software Engineering at McGill is not in the faculty of engineering. 05:50:31 we`re apparently not allowed to write that 05:50:45 LOL. Yeah that is regulated aparently 05:50:49 yes not the same degree 05:51:25 I think mine was harder and more thorough but he probably has a higher gpa than I had of 2.37 and almost 2 degrees worth of credits 05:51:35 I could literally get a Bachelor of Arts as well< 05:51:47 Heh. HIs wasn't amazing, but I think it was over 3. 05:52:18 I had personal problems social and it wasn`t the right school for me 05:52:27 Yeah, stuff happenes 05:52:42 I needed a sheltered environment they didn`t give me that 05:53:15 I wanted to go to mit but I wasn`t going to get a scholarship there so my family was like we can`t afford it 05:53:26 and no need it`s better to get the degree in Canada 05:53:31 Yeah, expensive. 05:53:47 Especially if you live there. MCGill is cheap if you live there. We had to pay wuite a bit 05:53:50 yes so I got through in the end 05:53:55 around 40k US a year 05:54:00 INternational 05:54:01 ouch 05:54:17 Yeah about the samne as a good school here. 05:54:25 Not ivy league, but a good school 05:54:42 But it's more the person anyway. 05:54:45 yes my parents put a trust fund for me I exhausted it in 4 years then I had my grandparents die and inherited money and my aunt grandfather`s sister 05:54:56 And who you know. 05:54:57 and then I got major money from the government 05:55:17 Glad you made it happen without massive debt. 05:55:18 and then my parents helped me a little bit and the costs are generally low 05:55:37 well I had debt but I used my grandfather`s inheritance to pay for it 05:55:41 My parents paid for my school so I wanted to pay for my kid's 05:55:45 like 80000$ 05:55:55 Cool 05:56:46 and the government paid me $700 a month for my rent but it was like 1100 and tutors extreme amounts, other costs, school itself, etc.. 05:56:58 like a little bit for food $300 a month , etc.. 05:57:11 Budgeting is a good life skill 05:57:35 so between that, a student loan, a tiny bit of side income, and parents support I was more or less covered 05:57:56 knick knack side income in different ways... 05:58:16 Cool. 05:59:18 and I didn`t do anything that was too extremely lavish in any way I just went to school, did some sports like tennis, skiing would be expensive but I had it very inexpensive with no hotels 05:59:46 rollerblading , I worked at a gym so that was free with swimming, etc.. 06:00:49 they gave me a rate that it would cost me maybe $500 a year... yoga teacher training was an expense , car was not expensive 06:01:47 they robbed me at one place for $2000 another place didn`t really rob me at all so I paid $1000+ but I got my money`s worth 06:02:00 heh 06:02:23 then never found a job in the field really 06:02:59 didn`t really make any money worked hard though 06:03:44 cause like I made some money from Amazon but then they stole it all from me, giving me credit card debt and taxes owing so that shouldn`t count as making anything... 06:04:25 so then I got a good scholarship to go back to school 06:05:07 it somehow doesn`t feel like it`s worth it but I think it is I`m probably getting more exerting myself like crazy here then I would sitting at home playing on freebsd I suppose 06:05:47 Sweet. I gotta hit the hay. Good luck on everything. Have a good one. 06:05:57 thanks good night 07:06:58 e 11:46:30 How can I get unabridged thread names from procstat -t ? 12:38:18 hi, can recordsize property be set on a zvol? would it be usable to the guest OS 12:48:27 Ltning, have you tried libxo? 12:48:50 (There's no other way obvious to me.) 13:15:40 does zfs compression still work if the zfs was set to encrypted at initial setup? 13:18:29 afaik zfs should first do compression and then encryption so it should work 13:19:27 ok so it's done on a block-by-block basis and not at the outset 13:20:48 i guess that on install, if encryption is selected, then what happens is the flag is set but it doesn't happen till it's written to? 13:21:09 (just trying to wrap my head around it) 13:25:29 f451: I have ZFS with GELI encryption and ZFS compression. That way GELI is "under" ZFS. With ZFS native encryption, I'm almost sure it's compression first, encryption later (I didn't read the code, so don't trust me on this) 13:49:34 https://cgit.freebsd.org/src/commit/?id=460ed6106cf0 neat! 13:49:35 Title: src - FreeBSD source tree 13:51:02 meka: tyvm 13:51:07 f451: zvols use volblocksize iirc 13:51:19 see zfsprops(7) 13:53:42 yeah that is neat ;) 13:54:52 what the context is, is bhyve 13:55:30 the compression context is the host zvol 13:55:43 the encryption one, the guest 13:56:29 zfs in-line compression happens at a record level, not at a block level 13:56:46 and it'll only happen if it can compress by at least 12.5% (at least with lz4, which is the default) 13:57:05 was going to go with zstd 13:57:05 plus it needs to save at least one sector size of diskspace, otherwise it also doesn't help 13:57:55 the lz4 early abort doesn't exist for zstd (not in a release, yet - but it might be in head; i watched a presentation about it being developed the other day) 13:58:10 aha 13:58:22 https://www.youtube.com/watch?v=_5JeyCYV5nE 13:58:23 Title: Refining OpenZFS Compression by Rich Ercolani - YouTube 13:58:45 compression in my context is the lesser value 13:59:23 also, you should be aware of https://docs.google.com/spreadsheets/d/1OfRSXibZ2nIE9DGK6swwBZXgXwdCPKgp4SbPZwTexCg/view 13:59:24 the guest will be a nextcloud in a datacentre so encryption is important 13:59:25 Title: OpenZFS open encryption bugs (public RO) - Google Sheets 13:59:42 oog 13:59:55 remember that encryption (both GELI and ZFS in-line encryption) is only useful at-rest, so typically when the server is powered off 14:00:16 not the guest only? 14:01:19 well, that depends i guess 14:01:24 what im trying to guard against is the host getting broken into and someone accessing the guest vm data 14:02:20 if you've got a bhyve guest and encryption is used inside the hypervisor guest, it'll theoretically be at-rest (although depending on how your key invalidation works, a sufficiently motivated attacker could do host persistence and still access it 14:02:49 GELI does proper key invalidation if memory serves 14:02:59 was about to say 14:04:07 also within the nextcloud itself, there is an addon available that encrypts the live data and ties that key to auth credentials i think 14:06:50 hmm 14:06:53 i'm not sure i'd put my trust in that 14:07:00 so geli is the way to go it seems 14:07:36 no - it doesn't encrypt the filemames funnily enough 14:11:07 what the threat model is, is protection from gaining of unauthorised access 14:13:38 GELI works at a different level; once something is encrypted with GELI and the key hasn't been used to unlock it, it just looks like a block of random data 14:13:44 GBDE more so 14:14:07 one is newer than the other isn't it 14:14:49 GELI is newer 14:15:19 big scary notice for gbde on the man page! 14:17:06 i think gbde prob more suitable for a shell account where eg you have a dir with all yr credentians in that you want to keep secret 14:17:47 s/credentians/credentials/g 14:19:29 ok - think i know how to proceed 14:19:36 debdrup: tyvm 14:20:54 gbdes real advantage is that it's made for an adverserial environment where, as long as you can access the system before you're subject to rubberhose cryptoanalysis, you can use `gbde nuke` to provably get rid of it 14:21:10 err, `gbde destroy` 14:21:57 https://papers.freebsd.org/2003/phk-gbde-paper/ and https://papers.freebsd.org/2003/phk-gbde-slides/ are worth re ading 14:21:58 Title: GBDE - GEOM Based Disk Encryption :: FreeBSD Presentations and Papers 14:22:12 thanks 14:23:05 the environment this is for isn't adversarial like that 14:23:25 for what it's worth, i used gbde for my buttcoin wallet back when that waste of electricity was possible to mine on a regular cpu, and then proceeded to forget the keyphrase, and i haven't been able to recover the key, even after talking with phk :P 14:23:58 it's to protect against casual cracking/what if php/nginx/mysql/postgres breaks 14:24:17 ahhh 14:24:22 sorry to hear that 14:24:36 eh, it's whatever 14:25:03 you might be a theoretical millionaire 14:26:04 xkcdpasswd is your friend 14:26:04 meh 14:27:01 the password had some 280 bits of entropy, so there's almost no way of remembering it no matter what 14:29:29 V_PauAmma_V: Yeah, and just like with various other tools, output is truncated before it's even handed to libxo. 14:29:42 (yes, it's pretty stupid, but apparently much harder to fix than one might think) 14:32:03 debdrup: xkcdpass -d . -C random -n 10 14:32:49 Charsetsize: 84 14:32:51 ShannonEntropyBits: 400.36 14:33:34 and how's that supposed to help me if i forget the password? 14:36:06 that's a horse already bolted context 14:36:14 i mean in future ;) 14:36:46 i'm not interested in destroying the world by wasting electricity like that 14:37:04 yup 14:37:12 ive never been into it 14:37:39 might be ameliorated using solar in a sunny climate 14:38:12 make a fortune in the desert ;) 14:40:20 the reason i posted the xkcd thing was that 10 words with dots and capitals have 400 bits of entropy and it surprised me, just 10 words 14:41:12 it's supposed to be random unrelated words though. and good luck remembering 10 unrelated random words easily 14:41:23 4 or 5 words is more likely 14:43:30 i think if one can devise a silly story (the sillier and therefore the more rememberable) that links all the words in the order they should be in, then one would be able to remember them easier than expected 14:43:55 i mean actors memorise whole screeds of text 14:45:31 yes but the words are not meant to be linked to each other in anyway as that reduces the keyspace. if you do a story where a horse goes into a stable and make the words horsewalksstable an algorithm could work that out far more quickly than the horsebatterystaple 14:46:17 People memorize Pi to I-don't-know-how-many decimals. 14:46:20 it'll probably put you off ever changing the passphrase too 14:46:31 10 completely random words sounds doable. 14:47:04 the linking doesn't have to be logical in the understood sense. it just needs to be internally logical, in your mind. you get to choose the logic 14:47:31 i do have a 64 character wifi password, because that mitigates brute force, that's made out of about 7 words and I can remember that to be honest. so maybe it's not so bad 14:47:34 Memorizing pi means you're doing it regularly. I forgot the wallet passphrase because I didn't use it for several years. 14:48:15 You're applying technical solutions to a problem that isn't technical in nature. 16:19:57 hi guys, does bsd have a concept of a tmp file (discard on close) that will use ram as much as possible and only write to disk if low on ram? 16:20:37 try `man 5 tmpfs` maybe? 16:26:47 tmpfs looks plausible - thanks 16:29:57 hi, anyone can help me with zpool import? 16:30:13 zpool import Segmentation fault (core dumped) 16:30:37 just zpool import (without name) and I got seg fault 16:31:03 anybody? 16:45:11 lisu are you sure your kernel and userland bits are from the same build? 16:56:44 jafa, (gman999): note tmpfs will at most use swap, depending on what you want mmap, memfd_open and shm_open are options 16:57:24 yes, tmpfs hungry 17:22:51 tsoome: init6 does the job, TY. 17:23:30 :) 17:23:39 another question: can I mount btrfs under fbsd? 17:25:10 I just intalled fresh fbsd on baremetal and I need to transfer files from zfs to btrfs disk. 17:40:38 I finally figured out how to have a bhyve linux guest with audio on host, now I can stream widevine drm content without linuxulator :o 17:45:58 jafa: check out mdmfs(8) 20:03:33 lisu: unless you already have lots of data locked in a btrfs there are no good reasons to mount btrfs into freebsd 20:04:37 but there is the fusefs-lkl package that may include what you're looking for 20:04:58 it basically runs a stripped down linux kernel in userspace as fuse server 20:05:12 but it's based on a fairly old kernel 20:05:26 https://www.freshports.org/sysutils/fusefs-lkl 20:05:27 Title: FreshPorts -- sysutils/fusefs-lkl: Full-featured Linux BTRFS, Ext4, XFS as a FUSE module 20:06:43 yep, I readed this. thx. So ... freebsd is not so universal. 20:07:50 for now I got installed openzfs on manjaro, works well, this will do the job. 20:08:42 linux doesn't support ufs, so it's not universal either - and ufs is both actively developed and dates back to 1980 20:08:59 true, 20:09:16 nfs is the filesystem du jour for transferring between unix-likes, and linux doesn't support that properly either (no NFSv4 ACL support, and nothing is planned) 20:10:10 beside, as I got freebsd on ma laptop, Im will try to use this for my daily. 20:10:28 that's a good start :) 20:12:23 freebsd is very well documented, but for example, I want to manage few wifi networks via gui... and networkmgr is compiling for 20 minutes... 20:13:57 the ghostbsd wifi manager? I think it is just a python script, what could it be compiling? 20:14:41 fbsd is similar to linux i've used to, but have own way to do simple things realy strange 20:15:01 I dont know... just folowing: https://www.freshports.org/net-mgmt/networkmgr 20:15:02 Title: FreshPorts -- net-mgmt/networkmgr: FreeBSD/GhostBSD network connection manager 20:15:46 im installing from ports 20:16:27 now python 3.8 is building 20:16:46 ah, yeah Python sounds like a likely culprit 20:17:17 ports is kind of overkill for a newish user, but could be a good learning experience too 20:17:54 ports is nothing fancy, just another way to install 20:18:08 one good-kept secret is `bsdconfig networking` (surprised I didn't see it mentioned in the handbook), it's a simple tui-based wifi manager 20:18:51 I believe it is similar to the network selection that happens during system install, if not the same exact thing 20:19:16 * _xor notices that the RealTek(TM) driver is still...shakey 20:19:27 <_xor> Heh, didn't know about net/realtek-re-kmod. 20:20:06 question is, why are you building p orts instead of using packages? 20:20:11 so far so good, I got netmgr, but no wifi ... 20:22:01 installing from ports make error 1.... python got problem with somethink like pycairo/py3cairo.h... so... I got it from pkg. 20:22:04 works 20:22:30 now wifi drivers... 20:26:31 bsdconfig wireless -> very nice 20:27:02 I was annoyed that the 13.1 installer couldn't detect any networks, but if I dropped into a terminal afterwards and set it up manually it was fine 20:29:42 yeah, not sure why bsdconfig was removed from the handbook, it used to be mentioned in the installation section 20:29:51 I found it on an obscure fbsd user wiki page 20:31:16 init 6... and we will see what ive done ;) 20:33:53 nice, detecting wifi network, but cannot connect 20:36:30 lisu: can't connect in what sense? dhclient issues? Can you ping the gateway? 20:39:23 it looks like link connected, but dhcpdiscover gives time out, no dhcpoffers received... 20:39:50 strange, I got at least 3 wifi clients connected 20:40:46 is it an unprotected network? 20:41:00 I had an issue in a coffee shop a while back, although I think that bug was patched 20:41:30 this is wpa2-psk aes home network 20:41:37 lisu: might it be, that you have limited the number of clients that may connect the dhcp server (disconnect another deviece first) or that the Mac adresses is not allowed in the dhcp server? 20:42:20 probably typoed key 20:42:22 this is not a limit of my access point client, belive me. 20:43:05 key_mgmt=wpa-psk or wpa-psk2 ? 20:43:20 wrong way 20:44:30 I think wifi & driver issues would be solved in a week if we just donated coffee shop gift cards and laptops to all the devs :D 20:48:31 belive me... they will drink this coffee, and ...drink... and drink, and they say: this is more complicated than we think... ;) 20:48:35 just kidding 20:50:07 wlan0 ..... no link giving up. 20:50:28 i know 20:50:31 init 6 20:50:39 it will help ;) 20:51:16 nope 20:56:10 1 character missed in wpa_supplicant, but still somethink is strange about that wifi driver 20:58:21 but i must admite: freebsd is quite fast on my obsolete hardware 20:59:04 attaching without anything else when you have the wrong key is normal 20:59:26 you dont get to actually be on the network, but your client will try to transmit with that key anyways 21:01:01 failed to reach wpa_supplicant: wpa_cli(8) ping failed 21:01:09 what the hack? 21:11:06 I think, I know what is going on.... antenas in this laptop are disconnected... I forgot. Wifi works now. I was searching in software, but hardware wasnt right. 21:11:44 OK, have a nice day/night whatever. Thx for tips. 21:11:52 bye 21:21:39 ROTFL ;-) 21:31:49 that's why every troubleshooting guide ever starts with "did you check the power?" :) 21:32:13 it's hard to fix a hardware issue in software 22:06:09 best distro OS to use on a NAS? 22:06:16 TrueNAS 22:06:37 (which is modified FreeBSD) 22:06:53 FreeBSD 22:07:00 (which is unmodified FreeBSD) 22:07:04 ;-) 22:07:20 cut out the middle man ;) 22:07:50 Dunno, TrueNAS makes it very convenient, esp if you want a backup box. You can do it all manually yourself of course. 22:08:16 I used to do it myself, but really been liking TrueNAS lately. 22:08:31 dkeav, can i use it on a sinology? 22:08:40 no that i know of 22:08:44 Synology has its own OS. 22:08:53 It's decent. 22:09:07 dkeav, what do you think of OpenMediaVault? 22:09:28 never heard of it