-
polyex
ya but this is excessive wear and tear from what i read
-
polyex
what partition scheme should a freebsd bhyve guest get in the bsdinstall zfs configuration dialog? handbook says gpt but bios or uefi? i start the vm with uefi bootroom so i'm assuming GPT (UEFI) right?
-
qmr
why do I keep losing nickserv authentication
-
polyex
doing scripted bsdinstall. why do we have to provide a plain text root password in ROOTPASS_PLAIN? seems like a security risk to have the plaintext pw floating around
-
adiabatic
Hi, I ran freebsd-update fetch just now and it said that it doesn't want to overwrite /etc/ssh/sshd_config because my version has been changed. Is there a way to diff my version with the would-overwrite version so I can see if the new version has any changes I want to integrate?
-
antranigv
adiabatic it would ask you about that
-
antranigv
adiabatic usually it says "diff? view? merge?" etc
-
adiabatic
At only the fetch stage? Or do I have to press on to get prompted to integrate the changes?
-
antranigv
adiabatic freebsd-update install
-
adiabatic
Onward ho, then.
-
antranigv
adiabatic good luck!
-
adiabatic
"No updates are available to install. Run '/usr/sbin/freebsd-update fetch' first."
-
adiabatic
OK, fair enough…
-
adiabatic
Just wait around until 14.0 gets released, and then handle it?
-
bsdbandit01_
8:41 PM <bsdbandit01_> good evening im running freebsd 13.2 with bhyve im trying to install and run openbsd within bhyve ive tried the following configuration when trying to boot the vm loader = "uefi"
-
bsdbandit01_
8:41 PM <bsdbandit01_> and im still not able to boot the vm i keep getting the pxe ipv4
-
polyex
doing scripted bsdinstall. why do we have to provide a plain text root password in ROOTPASS_PLAIN? seems like a security risk to have the plaintext pw floating around
-
rsjw
I'm configuring a FreeBSD install to get X11 working and I'm on this step:
docs.freebsd.org/en/books/handbook/x11/#x-config-monitors-xrandr
-
VimDiesel
Title: Chapter 5. The X Window System | FreeBSD Documentation Portal
-
rsjw
how can I run xrandr? startx doesn't find the display
-
rsjw
sorry, xrandr doesn't find the display. startx doesn't work yet
-
rsjw
"no screens found"
-
coreystephanphd
rsjw: HW?
-
coreystephanphd
+ version of FreeBSD, etc.
-
rsjw
not sure if my message got through because my irc client was acting wonky: I'm following the guide to get xorg configured but it's asking me to run xrandr to get the screen resolution, but xrandr can't run without xorg working. how can I get around this?
-
coreystephanphd
02:53 < coreystephanphd> + version of FreeBSD, etc.
-
rsjw
13.2-RELEASE
-
coreystephanphd
okay, and on what hardware?
-
rsjw
lenovo thinkpad T450. it has an Intel HD Graphics 5500 I believe, but 5500 is not grepping out of dmesg
-
rsjw
is X11 supposed to start automatically?
-
rsjw
on a new install, I mean
-
rsjw
I think the i915kms driver is working though, because I restarted and the console text got smaller
-
coreystephanphd
Yes, you do need i915kms
-
rsjw
yes, I followed the directions in the guide to install i915kms
-
coreystephanphd
-
VimDiesel
Title: Graphics - FreeBSD Wiki
-
coreystephanphd
I have found that xf86-video-intel, libva-intel-driver, mesa-libs, and mesa-dri tend to be less optional than the guides suggest
-
coreystephanphd
Start by making sure that you have drm-kmod, mesa-libs, and mesa-dri installed *AND* kld_list+=i915kms in rc.conf
-
coreystephanphd
if you have not changed any xorg settings, try startx again after rebooting and see if you get into TWM or w/e xorg ships with
-
coreystephanphd
also, make sure that you have full xorg
-
rsjw
how do I make sure I have full xorg? I did pkg install xorg
-
coreystephanphd
then you do, good
-
coreystephanphd
did you try manually tinkering with any xorg settings? have you installed any wm or de?
-
rsjw
and I did install those other things/add that in rc.conf, but rc.conf says = instead of +=. should it be +=?
-
coreystephanphd
no, sorry, you have it right
-
coreystephanphd
and did you try to change any settings, such as in .xinitrc?
-
rsjw
I added 20-intel.conf to make a Section "Device" with the BusID like it said before
-
rsjw
without that, I got a different error
-
coreystephanphd
ah, that normally should not be required and might even cause a problem
-
rsjw
I'll delete it and try again
-
coreystephanphd
it *should* just work out-of-the-box on the T450 if you install drm-kmod, mesa-libs, and mesa-dri and make sure to have i915kms load in rc.conf
-
rsjw
excellent, deleting it worked
-
coreystephanphd
yeah
-
coreystephanphd
your custom setting messed it up
-
qmr
is it possible to mount encrypted HFS+ on freebsd?
-
coreystephanphd
xorg is very finnicky about such things, but it is supposed to work out-of-the-box on supported Intel iGPUs
-
coreystephanphd
it does take some what are IMO unnecessary steps in FreeBSD right now, but that is beside the point. You got it working. Nice
-
coreystephanphd
-
VimDiesel
Title: HFS - FreeBSD Wiki
-
rsjw
thanks for the help. I did read the box saying that config wasnt normally needed, and I even knew that beforehand, but then I got to the later sections and just started following directions heh
-
qmr
bugger
-
qmr
Any idea why what was a text console is now a blank white screen on my server?
-
coreystephanphd
rsjw: FreeBSD's *desktop* documentation is sporadic and randomly spread ATM between Handbook, Wiki, and random forum threads, all of which have varying levels of being up-to-date or not. #freebsd-desktop here in LiberaChat and the Wiki are generally what I consider to be the 2 *best* places for up-to-date info. The Wiki tends to be better on graphics and sound drivers than the Handbook, for
-
coreystephanphd
example -- strictly anecdotally/personally speaking.
-
coreystephanphd
The Handbook is very sysadmin-centric.
-
polyex
true
-
coreystephanphd
qmr: What kind of server, etc.?
-
polyex
anyone seen RhodiumToad?
-
rsjw
coreystephanphd: thanks for the tip on #freebsd-desktop, I'll poke my head in there too
-
coreystephanphd
rsjw: No problem. Happy to help. #freebsd-desktop can seem like it is all about KDE sometimes, because KDE is kind of the FreeBSD project's 'official' flagship, but it is really a place for people using FreeBSD on desktop to have a separate discussion zone, whereas #freebsd (here) tends to be more about server, enterprise, and other things.
-
coreystephanphd
I lurk all around. Join in when I think of it and offer help in those moments.
-
coreystephanphd
Just learning, too :)
-
qmr
coreystephanphd: random craigslist bits. was a text console, after some updates and stuff white screen instead. it's a fancy ish mobo with dual nics and oob. intel graphics. oh, I did turn on something in the bios to enable cpu graphics I think too.
-
qmr
mobo e3c226d2I i5 4440 I think
-
coreystephanphd
OS updates?
-
qmr
that might have been somewhre in the mix yes
-
coreystephanphd
It sounds like you need to find the specific thing that broken the console. It could be a lot of different things.
-
qmr
[root@frisbee /etc]# ps aux|grep X is empty
-
coreystephanphd
polyex: I saw Rhodium lurking as recently as last week. Might just have an ISP outage or something.
-
polyex
ah ok. trying to get this scripted bsdinstall set up and kinda stuck hehe
-
coreystephanphd
qmr: Well, since I, a rookie, seem to be the helper ATM, ummm...I suppose what I would do in that situation is try to boot into a live environment from a flash drive, maybe with GhostBSD, and make sure that the screen is actually working. Since...you *did* do a hardware upgrade, too, right? (sounds like)
-
coreystephanphd
If you can eliminate the hardware itself as the problem, then turn back to the software. look from different angles.
-
coreystephanphd
polyex: I would just ask your question and hope for another pro to respond :)
-
polyex
doing scripted bsdinstall. why do we have to provide a plain text root password in ROOTPASS_PLAIN? seems like a security risk to have the plaintext pw floating around
-
qmr
coreystephanphd: yes but console was working on this same hw previously ( had to change NIC references from em0 to igb0 )
-
polyex
oh just realized ROOTPASS_PLAIN isn't 13.x. damn. so doing scripted bsdinstall, what do we add to the script to set the root password? ideally using the hashed value, not the plain text value.
-
rtprio
you can use openssl to get a hashed password value, iirc
-
polyex
ya but how do i use it?
-
rtprio
openssl passwd
-
rtprio
or use ROOTPASS_ENC in your script
-
polyex
ROOTPASS_ENC is -current only no?
-
rtprio
it's in 14
-
polyex
i'm on 13.x so i can't use it
-
polyex
how did ppl set root pw in scripted bsdinstall in 13.x?
-
rtprio
does the system have network connectivity?
-
polyex
ya
-
rtprio
then drop a ssh key in place and don't set a password
-
polyex
ya, but is there a way to do what i want tho?
-
polyex
jc
-
rtprio
run openssl passwd, and write a script to put it in master.passwd
-
rtprio
or run 14 >:|
-
polyex
oh so you're saying if there isn't an env var for providing root pw in hashed format, just hardcode it in the script part in a command?
-
polyex
like with a command
-
rtprio
yeah
-
rtprio
you just have to sed ^root with your hashed full line
-
rtprio
i`m out
-
polyex
ty
-
angry_vincent
i set dummy password for root just for the matter of having it and then simply disable the root account on running system. and use doas/su instead
-
qmr
hmm seeing some freebsd or zfs smartness here. rsyncing these old storage SSDs to file server so I can wipe and use for something else, tons of read from the SSD, then brief bursts of full speed writes to the HDDs intermittently
-
polyex
ya me too but i still need to set initial root pw. and i wanna set it with a hash instead of plaintext
-
polyex
trying to figure out how to do that
-
qmr
what's the larger context here? I would say just do that later. you can do it with pssh or ansible or puppet or whatever after the system is provisioned
-
polyex
well rather just make installs right from the start
-
grawity
is it possible to install freebsd "from outside" somehow? I want to create a CF card for a small device (probably using nanobsd), but I don't have any running freebsd systems yet
-
polyex
is there a command to change root's password hash from commandline?
-
polyex
if i have sudo set up, can i just disable root login entirely? (set pw to *)
-
polyex
any downside to that?
-
angry_vincent
Yes.
-
polyex
what're the downside?
-
angry_vincent
None. well, assuming you trust sudo and it's big code base
-
polyex
ya hehe
-
polyex
and all of the normal system level periodic crons and stuff will run?
-
meena
polyex: one big downside is: what if an upgrade goes awry and sudo doesn't work?
-
polyex
can you think of any others meena?
-
meena
that's the main point. upgrade goes funny, sudo needs a lib that's in limbo
-
kenrap
raspberry pi 5 is coming out
-
meena
it's literally the main reason we've kept toor around for thirty years
-
meena
-
VimDiesel
Title: ⚙ D40565 Remove toor backup account
-
polyex
wow it's being debated today still
-
polyex
i wonder if it'll be accepted to remove toor?
-
meena
it's planned for 15.0
-
meena
we got around two years
-
bapt
the historic reason toor was created was to get a root user defaulting on bourne shell, nothing more, it got useful later, so the reasoning that some are pushing to remove toor is now root is having a bourne shell
-
polyex
looks like default root shell is /bin/csh
-
polyex
so as long as i don't change that, i don't need toor?
-
bapt
not in freebsd 14
-
bapt
the root shell is /bin/sh i freebsd 14
-
polyex
oh the default ... ahhh
-
bapt
toor gecos being literally bourne-again superuser ;)
-
polyex
bapt do you see any problem with me disabling root login (by setting its pw to *)
-
polyex
?
-
bapt
depends on you, not on me
-
bapt
I really don't see the point of doing it
-
polyex
if i do that then i don't need to set a pw or key for root. isn't that a good enough reason?
-
bapt
then you have your reason, you don't need my opinion on it ;)
-
polyex
there's a few ways to disable login. can set its shell to nologin, can set its pw to *, can also 'lock' the user
-
polyex
apparently setting pw to * stops shell login, but not ssh auth. that's weird
-
polyex
ok i just set root account to a * password AND locked it
-
polyex
didn't touch the shell because it has ignorenologin in login.conf so it would be useless
-
polyex
i miss anything?
-
NatSocSiD
Is there a place where I can see all the packages:
pkgmir.geo.freebsd.org/FreeBSD:14:amd64/latest/All gives me a 403 forbidden, same for pkg.freebsd.org
-
yuripv
you can use pkg rquery
-
polyex
doing scripted bsdinstall how can i provide config files in the installer iso that the packages installed by the bsdinstall script need?
-
polyex
for example nginx.conf that will end up going into /usr/local/etc/nginx after pkg install nginx in the script part of the bsdinstall script, after its preamble
-
polyex
i don't wanna use heredoc and dump ALL of the configs into the bsdinstall script
-
polyex
actually wanna put as little in bsdinstall script as possible, and leave as much in files that'll just go into the right spot
-
polyex
re: zfs disk partitioning, how can i tell on a running system if GPT (UEFI) or GPT (BIOS + UEFI) was selected during bsdinstall?
-
angry_vincent
sysctl machdep.bootmethod
-
antranigv
polyex ^
-
polyex
NICE!!!
-
danel1
Hey guys, we have a build host running 13.2, which we use, to build the kernel & world from source with a custom kernelconfig and patches to /usrc/src. When then usually mount /usr/src & /usr/obj via nfs on our "productive" servers and run make installkernel installword. That worked without a problem until now, as we want to upgrade from 12.4 to 13.2 - which fails with undefined symbol errors. Do we need a 12.4 build host, where we build
-
danel1
13.2 so that we can install 13.2 by source on the 12.4 servers?
-
polyex
daniel1 do you do scripted bsdinstall?
-
polyex
danel1
-
antranigv
danel1 what is the exact error?
-
yuripv
polyex: check if you have just efi (gpt/uefi selected) or efi+freebsd-boot (gpt/bios+uefi selected) in gpart show output
-
danel1
polyex: No, we simply use make.
-
danel1
antranigv: ld-elf.so.1: /usr/obj/usr/src/amd64.amd64/tmp/legacy/usr/sbin/make: Undefined symbol "regcomp@FBSD_1.6"
-
yuripv
running newer binaries (native make built on 13.2 is "newer") on older host is not supported
-
yuripv
it can work, or it can break
-
danel1
thats what we tought.. so we'd have to build 13.2 on a 12.4 build host and then it should work i guess?
-
yuripv
yes, that *is* supported :)
-
antranigv
danel1 oh yeah, seems like a versioning issue indeed. if you're upgrading from 12.4 to 13.2, then your build machine should be 12.4 :)
-
danel1
well then, i guess we gonna create a new build host... :-)
-
antranigv
danel1 good luck!
-
antranigv
polyex I do scripted BSD Install, a very complex one.
-
antranigv
polyex I think you had a question?
-
polyex
ya tyvm
-
polyex
bsdinstall manpage says for zfs i gotta declare zfsboot_vdev_type and zfsboot_disks to create the pool. but i don't declare zfsboot_vdev_type because its default stripe is what i want. is that ok?
-
antranigv
lemme check my scripts
-
antranigv
polyex I have `export ZFSBOOT_VDEV_TYPE=stripe`
-
polyex
but that's the default
-
polyex
so why include it?
-
antranigv
polyex just to be safe, I guess ¯\_(ツ)_/¯
-
polyex
hmm
-
antranigv
I also have all the other defaults set as well, such as ZFSBOOT_BOOTFS_NAME and ZFSBOOT_BEROOT_NAME
-
polyex
why?
-
antranigv
you know never what could go wrong. shell scripts are not very predictable, you know :))
-
polyex
i got freebsd running zfs. it's a host for bhyve vm guest that's also running freebsd and zfs using a 40G dev volume the host makes for it. there any reason to set copies=2 in the guest vm? can a vol created by the host zfs ever fail and need healing in the guest vm?
-
polyex
antranigv
-
antranigv
nah it would be useless to set that inside the guest. use the ZFS features in the guest for better management, i.e. snapshots, clones, whatever you wanna do. but for other things use the host, i.e. raid, copies, etc
-
polyex
yep ok makes sense
-
polyex
doing scripted bsdinstall how can i provide config files in the installer iso that the packages installed by the bsdinstall script need?
-
polyex
do you tar them all up and add them to DISTRIBUTION?
-
polyex
as just another tar.xzf
-
polyex
tgz
-
polyex
antranigv
-
antranigv
polyex yup!
-
antranigv
that's what we do
-
antranigv
we have company.txz
-
antranigv
that we ship
-
antranigv
and we added that to distribution
-
antranigv
that's pretty much it
-
polyex
can that overwrite other files that will be there by default, like /etc/rc.conf with ur own custom?
-
bapt
put your stuff in rc.conf.d/ and don't touch rc.conf
-
polyex
wow, no kidding?
-
polyex
no rc.conf.local either or?
-
antranigv
polyex it can, but don't do that. instead use either rc.conf.d or post-install scripts
-
meena
12:06 <bapt> put your stuff in rc.conf.d/ and don't touch rc.conf <<= Puppet for instance does this
-
polyex
post install script meaning something in the company.txz that you run from the script part of the bsdinstall script?
-
antranigv
polyex yes
-
polyex
ok!!
-
polyex
so i got freebsd running zfs. it's a host for bhyve vm guest that's also running freebsd and zfs. in bsd when i select the disk to use, looks like bhyve created vtbd0 and ada0 for me. vtbd0 worked but ada0 didn't. that make sense? what's ada0 then?
-
antranigv
vtbd is for sure the hard drive. what is ada0? you can check in the `dmesg` of the guest
-
antranigv
or you can run `gpart show ada0`
-
antranigv
or `geom disk list`
-
polyex
hm only the vtbd0 shows up
-
polyex
weird
-
polyex
the ada0 description was something like bhyve SSD
-
polyex
and i could look at the disk info for it through the zfs configuration dialog
-
polyex
looking now
-
polyex
ok got it
-
polyex
disk info option in zfs configuration dialog, shows 2 disks
-
polyex
ada0 bhyve sata disk
-
polyex
vtbd0 virtio block device
-
polyex
antranigv
-
RhodiumToad
what devices show in the guest depends on the bhyve config
-
RhodiumToad
ada0 is an emulated sata device, vtbd0 is a virtio-blk device
-
RhodiumToad
if you boot an installer image, you might get the image on ada0 and the intended destination volume on vtbd0
-
polyex
i see in my bhyve command virtio-blk, but i don't see anywhere i init an ada0
-
polyex
ahhh
-
RhodiumToad
how did you run bhyve?
-
polyex
that's p;rolly it
-
polyex
bhyve -AHu -c ... -m ... -w -s 0, amd_hostbridge -s 1, virtio-blk, ... -s 2, virtio-net, tap25 -s 3, ahci-hd, ...
-
polyex
gets pretty long heh
-
RhodiumToad
that ahci-hd is the ada0 one
-
polyex
that's what i was thinking
-
polyex
tyvm!!!
-
polyex
good to have you back btw
-
RhodiumToad
the vmrun.sh example script adds an ahci-cd or ahci-hd device if you use its -I option, choosing which to use based on whether the filename is *.iso or not
-
polyex
i have a few dozen bhyve vms. i make a tap# interface for each 1 and add it to cloned_interfaces in rc.conf. it's kinda tedious. any way to eliminate that?
-
Ltning
So .. the ARC is/can be compressed; I presume this means that there's no additional compression/decompression step to benefit the ARC - it's already compressed on/for disk, so it's "free", in a sense?
-
Ltning
Question then is this also applies to encrypted datasets?
-
dvl
My brain hurts.... if I want the same ZFS dastaset mounted rw in two different jails, how?
-
danel1
antranigv yuripv - well now the build on 12.4 fails :-).. cp: /usr/src/sys/modules/irdma/../../dev/ice/ice_rdma.h: Function not implemented
-
RhodiumToad
did you install any 13.x binaries on the 12.4 host?
-
RhodiumToad
from scrollback, the problem with trying to installworld from an NFS /usr/obj is that the "host" tools in the built world are built for the build host's arch and version, and won't necessarily run on the target host
-
danel1
We didn't. We tried cloning the 13.2 source and run buildkernel / buildworld on there.
-
danel1
on there = on a fbsd 12.4 host
-
Ltning
dvl: mount_nullfs ?
-
dvl
What RhodiumToad said, we hit that problem many times.
-
dvl
danel1: When upgrading a 12.4 host, you must do the build on a 12.4 host
-
danel1
thats what i am trying
-
dvl
Ltning: That seems to be the way. In the past, all my nullfs has been readonly. In this case, I want rw.
-
dvl
Ltning: But I see now, that's just history. nullfs can do rw.
-
Ltning
dvl: this is not a split-brain situation since it's still the same brain (kernel)
-
dvl
danel1: Good. I've been through this several times and it's bit multiple times.
-
dvl
Ltning: ... we're still talking about nullfs? Yeah, same kernel, so no different than two processes trying to write to the same place (that will be controlled by clients, given the situation).
-
RhodiumToad
danel1: and you started with a clean /usr/obj ?
-
RhodiumToad
danel1: and no ccache?
-
danel1
Ehrm.. maybe its my fault.. i tried running buildkernel before buildworld.. buildworld now seems to run smothly..
-
RhodiumToad
right, buildworld goes first
-
RhodiumToad
when you've built both, remember that you have to do etcupdate -p, installkernel, reboot, installworld
-
dvl
RhodiumToad: For 12.4 to 13.x, does the etcupdate need to be boot strapped?
-
dvl
I recall doing that at work
-
RhodiumToad
dunno offhand. I tend to update by building entire new images
-
veg
antranigv: thanks for your Devuan jail article, there's surprisingly little thorough documentation on the subject
-
veg
antranigv: reading it a first question comes to mind: why openrc & not sysvinit?
-
veg
secondly, I love that you mention using /rescue, I just do by nullfs mounting /rescue into /bsd in the Linux jail
-
antranigv
veg anytime!. I hope everything worked fine?
-
veg
I just discovered it, so I haven't given your approach a try
-
antranigv
veg sysvinit works fine too, I'm just more familiar with OpenRC because I used to run Gentoo for years
-
veg
oh, thanks for the clarification
-
veg
have you encountered issues in running non-vnet Debian jails?
-
antranigv
veg that's a good point, we can use nullfs indeed for /resuce -> /native
-
veg
I haven't gone through the trouble of VNET'ing anything yet
-
antranigv
I never run non-VNET Jails, but one of our employees tried it using my guide (but without VNET) and reported that it all worked fine. the only exception is that you'd need to configure the networking via jail/jail.conf instead of /native/ifconfig
-
veg
right, totally fine for me
-
antranigv
veg I can report that, however, with VNET Linux Jails, you can have pf inside Linux :))) NOW LINUX HAS CLEAN WATERS!
-
veg
hahaha
-
antranigv
I just need to add DTrace inside Jails securely, and we'd be on-par with illumos features.
-
veg
well, just the uname -a kicked me off my chair the first time
-
veg
I was very interested by Debian kFreeBSD when it was a thing
-
veg
looks like Debian jails come closest
-
veg
have you found Devuan jails to be stable & production ready, antranigv?
-
veg
I was very impressed with speed & performance, seems like the linux compat code is efficient, yet I'm slightly worried to involve more moving parts, and possibly moving parts that won't attract much love from core devs
-
antranigv
veg for my use case, yes. but I don't think that I'd recommend it for everyone.
-
veg
I may be mistaken, and there may be a big crew of FreeBSD devs who are obssessed with Linux emulation,
-
veg
but it seems somehow unlikely
-
antranigv
simplest example: modern epoll is not implemented, hence we cannot run modern nginx. unless we compile it ourselves.
-
veg
at the moment I just wanna run rtorrent/libtorrent on 10k torrents, I figured out to lift the maximum files limits thanks to compat.linux.default_openfiles, that's a start
-
veg
but I wonder how network performances could be affected?
-
RhodiumToad
what's the problem with running natively?
-
veg
RhodiumToad: I can't get rtorrent-ps-ch to compile
-
veg
it has some linuxisms, some patches depending on random_r from glibc
-
veg
I need to migrate the exact config from a running Debian server, and I can't afford to downgrade to vanilla rtorrent for the time being
-
antranigv
veg yeah something like that would most probably work fine.
-
antranigv
altho, you don't need a jail for that, maybe try a chroot?
-
antranigv
(if you're okay with running it inside tmux :D)
-
RhodiumToad
huh. we have code for random_r but it's not exported from libc
-
veg
I need to learn tmux first, heavy GNU screen user here, but I know "tmux is the way"
-
veg
true, a chroot might suffice
-
veg
what's an additional jail amongst friends, though?
-
veg
especially with zfs snap && zfs clone
-
veg
interesting RhodiumToad, the other one is initstate_r
-
veg
but my c++ is non-existent, so aside from using patches from net-p2p/libtorrent to add the proper includes, I haven't made any headway to making rtorrent-ps-ch compile
-
veg
it's probably not much
-
veg
I'd be happy to learn how to make a proper port, since I assume FreeBSD is being used as a seedbox/NAS by quite a few people who could see it handy, but I seemingly lack some building blocks
-
RhodiumToad
all of random_r, initstate_r, etc. exist in libc but without them being exported, there's no easy way to get at them
-
antranigv
veg I created my own, because everything else was way "not my way"
-
antranigv
veg you can check it out here. in case you like it too.
github.com/illuria/jailer but it forces stuff. like you have to use ZFS
-
VimDiesel
Title: GitHub - illuria/jailer: Minimal, flexible, and easy-to-expand FreeBSD jail manager.
-
veg
that's unfortunate, but thank you for the clarification, RhodiumToad
-
veg
interesting, antranigv, thanks
-
veg
I actually decided to not use any jail manager for the time being, as I wanted to properly understand what was going on under the hood
-
veg
bastille looks nice enough, but I figure it will stop being maintained sometime in the future
-
veg
pot looked like an interesting contender too
-
veg
but plain jails.conf (& the occasional deboostrap) have been easy enough so far
-
polyex
runj too maybe
-
veg
interesting polyex, more reading 🤓
-
veg
looks like your script is "vnet all the way", antranigv, it may force me to try :)
-
veg
I was reading about some heavy performance penalty for using vnet though?
-
polyex
antranigv what's the key reason to go all in on vnet?
-
veg
with some workarounds documented on a klara page?
-
polyex
you guys using pf or ipfw?
-
veg
I want to use pf, polyex, but I haven't started writing my firewall
-
veg
this leads to a question, however
-
» RhodiumToad uses ipfw
-
polyex
i use pf and like it but i'm gonna try switching to ipfw. it's the native freebsd fw
-
veg
I was under the impression that having jails using an IP within the same range as the hosts, on the same interface (bge0 in my case) allowed for not configuring NAT?
-
veg
may I be mistaken?
-
RhodiumToad
vnet or non-vnet jail?
-
RhodiumToad
non-vnet jail shares the host's networking, so you just put some alias IP on the host interface and have the jail use that
-
veg
non-vnet, I have host:bge0(10.30.20.30) & jail:bge0(10.30.20.31)
-
RhodiumToad
for vnet jail, you can bridge the jail's epair and the host interface
-
RhodiumToad
that should work fine
-
veg
only networking conf for jail is ip4.addr & interface in jail.conf
-
veg
well, it does work fine for ping, ssh in/out
-
veg
but I don't manage to transfer any data using the previously mentionned rtorrent
-
veg
tried it in a regular jail with rtorrent from ports, same
-
veg
so I figured I may be missing some pf action
-
veg
though I fail to understand which
-
veg
I do launch have rtorrent bind to the jail's IP
-
RhodiumToad
I'm guessing it needs inbound connections? I haven't used torrent in years
-
veg
yes, inbound connections
-
veg
outbound works fine, ssh'ing from the local network & the host works fine too
-
veg
sockstat -4 shows outbound, but inbound is a no go
-
RhodiumToad
so since you're on a private IP, you must be doing nat _somewhere_, and that's where you need to map inbound connections
-
veg
I do it on a Linux firewall, yes
-
veg
the ports are mapped
-
veg
I'll go through the conf again, but the very same lines work flawlessly when redirecting traffic to the Debian server I need to migrate
-
veg
once I swap the IP for the FreeBSD jail's, no action
-
veg
is there a sysctl trigger I may have forgotten?
-
RhodiumToad
doubt it... did you check with tcpdump what packets if any are getting through?
-
veg
I see traffic but length 0
-
veg
I haven't used tcpdump in a while, I need a crash course I suppose
-
veg
-
VimDiesel
Title: rtorrent to jail - Pastebin.com
-
veg
(this is an excerpt trying to retrieve a Debian image, should be safe to share)
-
dch
every 3 months, ansible's acme_certificate module bites me in the arse
-
dch
and every 3 months, I swear I will replace it with a tiny shell script
-
dch
and every 3 months, I forget about it
-
dch
the reason it's not straightforwards is multiple internal & external services, needing DNS-01 auth and some automation
-
» dch shakes fist at ansible again
-
RhodiumToad
veg: there's definitely packets going both ways there? e.g. line 23 has an incoming SYN which leads to an established connection which is then closed cleanly
-
RhodiumToad
veg: however, the initiator of the connection sent 68 bytes of data and whatever was running in the jail just acknowledged that and then immediately disconnected
-
RhodiumToad
veg: so you might want to check your logs and config for what's in the jail
-
veg
thank you, RhodiumToad
-
veg
logs are empty, but I'll double check the config file indeed
-
veg
vanilla rtorrent (compiled from ports) is what's running
-
veg
this test is in a plain FreeBSD jail, not the Devuan one running the patched version
-
veg
OMG RhodiumToad
-
veg
MANY thanks to you
-
veg
I don't know what exactly, but it was something in rtorrent's config
-
veg
thank you so much for pointing me in the right direction
-
veg
I'll dive into FreeBSD's networking later on as a result :)
-
RhodiumToad
yw
-
danel1
RhodiumToad antranigv yuripv Thanks again for your help - it's working as expected now :)
-
rsjw
how can I get the volume up/down keys to work?
-
KingShark
rsjw, i solved this for myself.. let me see how i did it x)
-
rsjw
the keys are recognized by xev so I'm not sure why they're not having an effect
-
rsjw
although I'd probably want the volume to change even without x11
-
KingShark
rsjw, for me to make multimedia keys work on freebsd, i added usbhid_load="YES" hw.usb.usbhid.enable=1 in /boot/loader.conf
-
KingShark
two lines
-
RhodiumToad
if xev sees them, then it's a matter for your window manager to adjust the volume accordingly
-
KingShark
yeah xev didnt see mine so thats a difference
-
RhodiumToad
if you want the volume to change without x11, then the next question would be whether the keys are detected by ACPI
-
rsjw
how would I check whether the kays are detected by APCI?
-
antranigv
Test
-
rwp
Test was successful. You are now authorized.
-
antranigv
Greetings! I am lurrrrrr, leader of omicron perciay eight!
-
antranigv
Lol
-
rwp
On the Internet no one knows if you are a dog or not. Note there is useful information in the channel Topic. That may be truncated. Most IRC clients will repeat it with the /topic command.
-
dch
antranigv: 10 seconds to look at a weird error?
-
dch
on 15.0-CURRENT *and* OTP26.1+ I get this cat vomit
-
dch
-
VimDiesel
Title: Snippet | IRCCloud
-
dch
no function clause matching in :prim_tty.cols/2 (kernel 9.1) prim_tty.erl:980: :prim_tty.cols([{:ansi, "\e[G"}, "\e[92m" ...
-
dch
if I use OTP25 its fine. If I *don't use 15.0-CURRENT*, it's fine.
-
dch
I'm starting off in OTP src but yuck anything with termcap is The Dark One's territory
-
dch
ok, it's to do with my .iexs
-
dch
I think its actually
erlang/otp #7631
-
VimDiesel
Title: kernel: fix prim_tty xenl glitch by frazze-jobb · Pull Request #7631 · erlang/otp · GitHub
-
dch
it seems this `{:ansi, "\e[G"}` is enough to break OTP26
-
meena
wow
-
dch
so, not that prim_tty issue, but possibly similar.
-
adiabatic
antranigv: thanks from earlier!
-
cedb
im using poudriere-devel, for a given jail/ports combo i have a bunch of "queued" ports in the web interface but they are already built (i think from a previous run that failed cause browser made cpu go a bit too wee)
-
cedb
whats the odds its just a little ux/ui artifact and not something i should "worry about"
-
antranigv
dch hey! sorry, just got back