00:00:23 https://imgur.com/a/skNCb8H uh what now (last image) 00:11:56 what IS an ifconfig "group"? 00:17:11 just an administrative convenience as far as I know 00:22:34 would the system slow down if i tried to set like 10,000 tap# interfaces in cloned_interfaces? 00:23:37 shrug 00:23:42 that seems rather a lot? 00:24:06 what do jails do? 00:24:33 os level virtualization 00:24:46 eh, not really virtualization 00:25:17 more like sandboxing? (i still don't fully understand what sandboxing does) 00:25:22 a jail provides restricted access to some part of the filesystem, and restricted access to other system facilities subject to various configuration options 00:25:33 so it's like how a flatpak is on linux? 00:25:50 * RhodiumToad doesn't use linux 00:26:14 they're a system for making apps only have certain permissions and access to some files 00:26:22 i think 00:27:07 jails aren't usually used for user applications, but are often used for running services, so that a service can't access stuff belonging to other services or the host 00:27:51 it's like chroot in linux? 00:28:01 but better 00:28:02 a jail can either have restricted access to some of the host's IP addresses, or it can have its own private networking stack so it looks like a separate host (vnet jail) 00:28:22 it's more restrictive than a chroot 00:28:30 yeah 00:29:57 someone in #archlinux-offtopic said that jails are like an evolution of chroots, would that be correct? 00:30:40 ya 00:30:48 check out the jails handbook page 00:31:57 Will do then, I've never used *BSD before except for a very frustrating half hour with OpenBSD. 00:33:52 FreeBSD is kind of more Linux user friendly, since it has stuff like wine and nvidia drivers. 00:35:37 I know package management is hell for someone used to pacman on NetBSD and OpenBSD, is this the same with FreeBSD's package manager? 00:39:50 pkg install whatever 00:39:55 pkg remove whatever 00:39:57 pretty easy 00:40:03 pkg update 00:40:06 pkg upgrade 00:40:14 a few other commands but that's the main ones 00:40:40 are you actually allowed to search package repos from the command line? 00:41:32 search for what? 00:41:42 pkg rquery is a thing 00:41:53 what's pcib0? i get AE_NOT_FOUND for it in /var/log/messages 00:42:09 pcib = PCI bus 00:42:28 like with pacman i can "pacman -Ss keyword" and it spits out a list of packages matching keyword, is that similar to how rquery does things? 00:42:39 well ya 00:43:32 zayd: not quite, but you can do equivalent things 00:46:07 polyex: what is your real question? 00:50:05 why does running su say "su: Sorry"? 00:50:42 that you are not in wheel group (probably, if you entered the password correctly) 00:52:11 yuripv: yeah that was it 00:57:19 why doesn't freebsd symlink /bin as /usr/bin and keep them separate? 00:57:30 sorry for all the questions, i have no idea what i'm doing with this 01:06:04 i put config.conf in /etc/rc.conf.d/ and it's not getting picked up. i thought that's how we're supposed to do it? 01:08:48 how did you check? 01:12:17 (note that you need to name the file exactly as the service is named, e.g. /etc/rc.conf.d/nfsd for /etc/rc.d/nfsd) 01:12:54 oh wow i had no idea that rc.conf.d files were that tightly coupled 01:12:57 that's kinda weird 01:13:12 what's a format string? 01:13:49 zayd: what's the context? 01:14:00 yuripv: trying to use pkg rquery 01:14:18 yuripv where does it say that rc.conf.d files have to be named after the service they're for? man rc.conf doesn't saythat 01:14:19 it's in there in pkg-rquery man page? :) 01:14:48 oh fish hadn't generated a completion for that, my bad 01:15:54 polyex: it does (in a way, could be documented better) "you can also place smaller configuration files for each rc(8) script in the /etc/rc.conf.d directory ... which will be included by the load_rc_config function", so you could *guess* it :D 01:16:09 yikes 01:17:19 oh. didn't realise pkg search was a thing, that makes things much easier 01:19:00 yuripv well how do i set defaultrouter? no rc.d file PROVIDEs it 01:37:49 ok got it 01:38:31 when i'm running bhyve for the first time to install the OS on a vm guest, the initial boot screen is there for 10 seconds. any way to disable it? AFTER the OS is installed it's not a prob because i set autoboot_delay="-1" in /boot/loader.conf. it's the first boot i can't figure out how to change 02:01:58 how do i disable moused from running? 02:04:24 sysrc disable moused 02:04:33 sysrc stop moused 02:06:44 apologies, i might have that confused. service moused disable, service moused stop 02:08:38 this doc goes over the services in general: https://docs.freebsd.org/en/books/handbook/config/ 02:08:39 Title: Chapter 14. Configuration, Services, Logging and Power Management | FreeBSD Documentation Portal 03:53:56 if i do a scripted bsdinstall, how do i make it install the services from the system configuration screen? like sshd, local unbound, etc 04:34:24 if i do a scripted bsdinstall, how do i make it install the services from the system configuration screen? like sshd, local unbound, etc 05:16:03 any benefit to using local_unbound vs unbound from pkgs? 05:36:56 there any way to firewall based on domain? basically i wanna be able to block every domain then just whitelist domains i want to function normally. resolve their dns, network traffic that gets through the firewall, etc 05:48:03 yes, you can block entire domains on firewall level 05:48:49 how? 05:51:19 angry_vincent ^ 05:57:30 there are many many guides on the web 05:58:41 which tech does it? because i know pf doesn't 05:59:14 pf does it too 05:59:31 wait how? just give me 1 example rule that shows it pls 06:02:24 via tables 06:02:54 but you gotta put ips in the tables not domains no? 06:23:22 polyex: yeah. i think you can't block based on domains, since connections are not made by the hostname. also different domains can share the same ip 06:25:17 well i read and i think angry_vincent is right. but the danger is if the dns server doesn't start first, and pf can't resolve domains in its tables when it starts, it will fail to start 06:25:29 polyex: you might add ips dynamically based on successful dns lookups, sounds like a fun project to implement 06:26:20 i think RhodiumToad was saying ipfw can do it though 06:26:30 if that's true i'll just switch to it from pf 06:28:01 the networking layer never gets to see the hostname, so i don't know how it would work at all 06:29:23 and if you give hostnames to pf, i think it has to resolve them into ip(s) before putting them into the filter rules 06:30:05 ya it does 06:35:22 So if someone wanted to make a pi-hole thing work in FreeBSD, they just use pf? 06:35:51 how would it work? never used a pi hole 06:36:30 pi-hole is a DNS adblocker which uses a custom fork for dnsmasq 06:37:13 https://pi-hole.net/ 06:37:14 Title: Pi-hole – Network-wide Ad Blocking 06:37:46 I'm looking into doing this using unbound from ports 06:37:50 i wonder why it used dnsmasq and not unbound? 06:38:01 ya i wanna do it too 06:38:02 Beats me 06:38:20 I read unbound is much better and more secure 06:38:28 maybe it's just the authors preference 06:38:46 and good enough for small home networks 06:40:29 but yeah, seems pi-hole is dns only, so browsers (etc) could ignore it by using dns over http 06:43:54 I'm interested in taking advantage of this blocklist (which consists of many blocklists) to feed into an unbound config, but it sounds like I'm better of using pf instead: https://oisd.nl/ 06:43:56 Title: oisd | domain blocklist 07:31:11 what does the "| cat" part do in `env ASSUME_ALWAYS_YES=YES pkg bootstrap -f | cat`? 07:34:56 at least sometimes | cat is used to remove the effect of other commands like 'less' which may be hidden somewhere in previous ones 07:36:08 hmm, what's that mean? 07:37:47 I suppose that means since less functions as a curses TUI and piping to cat helps get all the paging content to stdout? 07:38:18 so like a way to collect interactive output into a single output? 07:38:30 That's what I'm inferring atm 07:38:40 nice ty 07:39:07 ...well, it would be better for la_mettrie to verify that. 07:40:38 i verify 07:40:43 ty 07:40:46 phew 07:40:53 :) 07:41:06 git grep | cat ...is classic 07:41:11 is CueXXIII: btw, I wanted to say thanks sharing about the pf solution. It really made a lot more sense, kind of a "oh, no duh" thing. A simpler and more powerful approach. 07:44:20 kenrap what was the pf solution? 07:44:38 doing the ad blocking at the firewall-level 07:44:51 but how does that actually work? 07:45:14 of course, it would have to be done with a blocklist of IP addresses instead because DNS is for resolving domains to IPs 07:45:58 you would have find existing trusted blocklists of known bad ips. 07:46:19 kenrap: you'd have to get toe ip addresses first. and they may belong to different subnets for one domain; actually you never know until you look them up 07:47:51 I see... 07:49:17 I'm still new to learning this stuff 07:49:23 me too 07:50:44 Been trying to drill this knowledge into my head for the past couple of days. It's been a lot of head-to-desk banging since thing. 07:50:48 *since then 07:51:10 ya srsly 07:51:23 kenrap: assume you want to whitelist freebsd.org; www.freebsd.org, man.freebsd.org and mx1.freebsd eg. are 3 different hosts 07:51:37 +.org 07:52:10 hmm, a whitelisting approach? 07:52:28 or block for that example 07:52:55 and i guess there are a lot more hosts reachable under the freebsd.org dns domain 07:53:03 Ah 07:53:08 interesting 07:53:23 same gose for other big websites 07:54:12 Ah, that makes sense now and connects more dots since freebsd.org would use a "recursive" DNS configuration. 07:54:22 Much like any other big site, like you said. 07:55:03 You just opened up more synapses in my brain :) 07:55:44 I need to pick your brain more often. 08:04:31 time for me to take some excederin :D 08:06:04 hmm scripted bsdinstall fails when i put pkg bootstrap -f | cat in the post-install section 08:06:24 doesn't resolve the host 09:42:28 how does it fail? what is `pkg bootstrap -f | cat` supposed to achieve? questions, questions… 10:47:29 07:37 i wonder why it used dnsmasq and not unbound? ⬅️ because it's called *pi* hole, implying it's a DNS sinkhole made to be run on tiny devices, like Raspberry PIs, before they became power hungry copaganda devices 16:36:32 i don't like the fact that i'm starting to enjoy using freebsd a bit 16:55:34 how do i use xrandr to set my resolution to 1920x1080? the highest available in mate's display settings is 1280x720 but i know my host's screen size is 1920x1080 17:02:25 kevans: hi! may i ask in pm? 17:07:44 xrandr -q to see the list of displays and their resolutions, then something like xrandr --output the_output_from_-q 1920x1080 17:08:06 err xrandr --output the_output --mode 1920x1080 17:11:02 rsjw: i got this, the one on the bottom is from the command you sent https://bsd.to/vsie 17:11:03 Title: dpaste/vsie (Plain Text) 17:12:19 the output should be something like DP1 or eDP-1 17:13:04 DP stands for display port, the hardware connection that the video chipset knows about 17:13:56 if you had a VGA monitor, it might by called VGA or some variation thereof 17:14:16 i'm not seeing anything matching DP1, eDP-1, or HDMI-A-1 on here. i'm running this in a virtual machine by the way, it's not an actual monitor 17:14:35 can you paste the output of xrandr -q? 17:15:10 rsjw: https://bsd.to/aBuN 17:15:12 Title: dpaste/aBuN (Plain Text) 17:15:52 it looks like your output is named "default" 17:17:47 I'm a little confused by the line that describes the 1920x1080 mode. try one of these (in this order) to see if it works: 17:17:59 xrandr --output default --mode 1920x1080 17:18:03 xrandr --output default --mode 1920x1080_60 17:18:07 xrandr --output default --mode 1920x1080_60.00 17:18:40 none of those worked, all said "xrandr: cannot find mode (mode)" 17:18:50 am i just being really stupid or something 17:19:46 no, you're not. I've done it before and it was just as I said, although that one line is a little different than mine, so that might mean you have to do something a little different, I'm not sure 17:22:00 of course, I wasn't trying to do it under a VM 17:24:59 try xrandr --output default --mode 0x566 17:28:18 I'd look at your VM settings to see if it can present a larger screen to FreeBSD. it says "default connected primary 1280x720+0+0" but one of the modes says 1920x1080 which is bigger 17:29:01 so as a wild guess, maybe the VM software is telling FreeBSD that the monitor is 1280x720, but when FreeBSD queries the monitor, it gets a mode with a larger size 17:29:34 so maybe tell your VM software to imitate a 1920x1080 monitor instead of just a 1280x720 one 17:31:24 (also, it says "Screen 0: ... maximum 1280 x 768", supporting this theory) 19:35:17 what's the freebsd kernel called? is it just "the freebsd kernel"? 19:38:25 FreeBSD is not a kernel. It's a complete OS. It is; "FreeBSD". This is not Linux. 19:39:19 Is it considered rude to bump a thread on the bugzilla? I sent a patch for www/caddy and the maintainer seemed OK with it after some changes, but hasn't responded since the "final" patch I sent wednesday. I wonder if he hasn't seen the notification e-mail? 19:39:28 tercaL: I know FreeBSD isn't just a kernel, i'm asking what the kernel itself is called 19:45:57 it's probably just called "freebsd kernel" 19:46:06 what else... 19:46:28 ok thanks, i know macos/darwin has "XNU" as their kernel name so figured i should ask 19:49:46 darwin was released in 2000, macos in 2001 and XNU in 1996. they have originally been separated things, hence the separated names 19:55:46 tmtt: it's the weekend tho, so who knows what they're up to 19:59:04 meena: You're right 20:32:08 test 20:37:50 zayd: there was project that packaged together the FreeBSD kernel and the GNU userland and called the FreeBSD kernel kFreeBSD, but that's particular to that project, not FreeBSD. https://wiki.debian.org/Debian_GNU/kFreeBSD 20:37:55 Title: Debian_GNU/kFreeBSD - Debian Wiki 21:21:59 at the end of a command string, is ` polyex: only in (t)csh 21:26:36 tcsh is weird about white space 21:27:01 oh hm so for max portability i need to remove the space? 21:27:48 tcsh isn't really compatible with anything 21:28:25 ok well i'm in a fresh system as root and my shell is csh, so it comes up 21:28:30 so for max portability i need to remove the space? 21:28:51 in other words does (t)csh require the space or lack of space? 21:30:13 I cannot recommend writing scripts for csh 21:30:58 it's the default for fbsd root 21:31:11 sh should be the default 21:31:43 at least now 21:32:16 k but not my point. ffs, the point is csh is the default for root ATM so making commands compatible with it makes sense to me but not meena 21:32:20 just confused by that 21:32:32 you can put spaces in there all you want, if it helps you with readability, but honestly, all i do is https://www.shellcheck.net/ 21:32:33 Title: ShellCheck – shell script analysis tool 21:33:05 anyway, csh isn't compatible with sh / bash, ksh, zsh 21:33:34 if you want something that's extra incompatible, but also usable for scripting, i suggest fish :D 21:33:38 so if csh sucks so bad why is it the default for fbsd root? 21:33:48 it isn't, sh is. 21:33:57 no it isn't 21:33:58 it used to be. 21:34:06 whicin 13.2 it's not 21:34:13 I'm on 14.0 21:34:18 so it's been changed? 21:34:21 yes 21:34:23 cool 21:34:31 so as not to have that issue anymore 21:34:32 but the reason we make root's shell sh (now since 14?), or csh before is because they are in Base 21:34:37 also cool that you talk about an unreleased version as if it's the state of the OS lol 21:34:42 great communication skills engineer 21:34:59 you can't pkg upgrade your root shell into pieces 21:35:33 14 is about to drop on Halloween. 21:35:41 spooky 21:35:49 it's been working great for me since BETA2 21:36:02 * meena has moved on to 15.0-CURRENT 21:36:06 it is (was) default shell for interactive use, no one is forcing you to write scripts in csh 21:36:12 14 have anything big? 21:37:27 home directly is finally /home 21:37:38 damn that's nice 21:38:02 that too isn't something that was really forced, just changing the default 21:38:04 we got virtio drivers for 2D GPU on ARM 21:42:18 im making a scripted bsdinstall in a bhyve vm. after the preamble i try to pkg bootstrap, but before bsdinstall reboots i can see in the output that it can't resolve the freebsd.org domain. what am i doing wrong? 21:47:16 polyex: what does your script look like? 21:53:11 meena https://termbin.com/3adk 21:54:37 will a scripted bsdinstall environment have a dhcp connection normally or do we have to configure it and bring it up after the preamble? 22:02:54 polyex: i think dhcp is the default. but i could be wrong. 22:06:00 polyex: man 8 bsdinstall comes with an example on how to set it to dhcp 22:06:23 SKull so dhcp isn't initialized by default during a scripted bsdinstall? 22:07:00 SKull: it should be, but… i think… i would be explicit 22:07:04 polyex: i think it is, but if you want to make sure just put sysrc ifconfig_DEFAULT=DHCP in your bsdinstall script 22:07:13 doesn't the #! need to be the first thing in the file? 22:07:29 meena: yeah, i'd be explicit as well. but more out of principle than anything else 22:07:33 rsjw: bsdinstall is weird 22:08:10 SKull are you explicit in your configs with everything that's already set that way by default? 22:08:15 rsjw: according to the manpage, yes. i expect people to read it so i didn't think i'd have to mention it 22:08:46 polyex: yeah, because otherwise i have to remember defaults. and i'm not good in terms of remembering things ^^ 22:09:53 rsjw i guess not because if you look at the examples in man bsdinstall, shebang comes after the preamble 22:10:19 well nothing in bsdinstall says it starts dhcp automatically so hmm maybe we do have to make it explicit 22:11:00 how can i make the scripted bsdinstall env use dhcp ONCE, but not write anything into /etc/rc.conf or anywhere else? it has a static ip config it needs to use after the reboot 22:11:33 maybe just add "dhclient vnet0" after the preamble? 22:15:41 that failed 22:15:56 says that interface doesn't exist 22:19:16 what interface is it? 22:19:25 vnet0 is what i put 22:19:39 oops 22:19:46 vtnet0 ? 22:21:34 :P 22:21:40 dhcp works now 22:21:58 ok so it DOES need to be explicit, and dhclient vtnet0 works for a temporary connection 22:25:03 i mean dhclient will litter it's lease and shit, if it's not in rc.conf it won't try again 22:25:15 huh? 22:25:35 what 22:25:47 i guess dhclient doesn't have -a anymore; or perhaps that's only isc dhclient 22:26:04 so it's ok to use dhclient like i am for a temporary connection? 22:26:26 yeah, why wouldn't it be 23:11:18 there any way to have dns resolution working during scripted bsdinstall before pkg is bootstrapped? 23:12:24 set up a resolv.conf ? dhclient should do it 23:13:20 does anyone else's var/run behave weirdly? https://bsd.to/d8ow 23:13:21 Title: dpaste/d8ow (Plain Text) 23:13:51 i'm just wondering if i can do this without dhcp. so i can do service netif start to bring up IP, but i don't have unbound installed yet to have resolution going, so i can't bootstrap pkg 23:14:21 you can't use the network's resolver ip then 23:14:31 ? 23:14:37 ? 23:14:54 is there a command to temporarily set an ip to use for resolution? 23:15:29 echo "nameserver 1.1.1.1" > /etc/resolv.conf 23:15:46 i don't want the change permanent though, only during the scripted bsdinstall 23:16:00 because once network is up, i'll bootstrap pkg, install unbound pkg, then that'll be used upon reboot 23:16:19 you don't go about things the less difficult way, do you ? 23:16:42 well dhcp requires a dhcp server and i wanna make this self contained to start 23:17:52 hosts or resolv.conf are the only way afaik 23:18:16 can we tell dhclient to use a specific ip? 23:18:40 sure; set a fixed-address on your dhcp server 23:19:00 i'm stuck at trying to wrap my brain about not having a dhcp server on the network 23:19:27 you might be able to do something with resolvconf(8) but i've never looked at it 23:19:39 or at least it might be able to undo the damage on the other side 23:19:49 i have a problem with poudriere and nfs 23:20:06 my /usr/local/poudriere/data/packages is on a nfs server 23:20:27 so the packages i build on my host are supposed to be on another server 23:20:45 thing is, nfsv4 doesn't allow the packages to be chown'd to nobody 23:21:04 before the package step, there's always a line "No name and/or group mapping for uid,gid:(65534,-1)" 23:21:41 previously i wasn't even able to save the package via nfs, now it works but with non-ideal exports mapall=root:wheel 23:22:06 and obviously the resulted files are not chown'd to nobody, but stay on root user 23:22:23 what would be the proper fix for that? 23:23:10 i use nfsv4, because with nfsv3 i had lots of "NLM: failed to contact remote rpcbind, stat = 0, port = 0" which resulted in damaged packages 23:31:06 rtprio ok in the scripted bsdinstall in echo "nameserver 1.1.1.1" > /etc/resolv.conf, then i run service netif start. i can see IP comes up before the reboot but name resolution fails. know why? 23:31:48 after the reboot, i can resolve from the terminal after logging in, so i know the resolv file is getting set up right 23:33:09 no i don't know 23:34:00 i wonder what dhclient vtnet0 does that service netif start doesn't?