RhodiumToad: re mrsas driver and 150MB/s - fears alleviated and your assertion is correct. forums.freebsd.org/threads/mrsas-an…ry-of-lost-speed.79585/#post-625705

Title: UFS - mrsas and the mystery of lost speed | The FreeBSD Forums

meena: ports with a dtrace option obviously need it to be turned off if using a system that doesn't include dtrace at all

My IPMI says "You need the latest Java Runtime Environment". I've been away from Java for years, and don't remember what I need. Do I just pick the highest numbered openjdk*-jre ?

sure?

What's the system?

That IPMI question about Java scares me into thinking it is the old, old, old web Java console stuff that requires Java in the web browser.

That's exactly what I thought of too. Why does IPMI need Java?

anyone here that uses certbot with openssl 3.0 and 13.2 ?

n30: I use acme.sh and lego.

Title: Swastika Repair Scene - YouTube

tercaL: what is that ?

ahh found it on github... need to check that out instead so i dont loose the ssl certs

n30: Note that, lego is much stable and better. acme.sh is doing horrible recently.

"pkg install lego"

tercaL: do you know if i need to resetup all my current ssl domains ? or lego will work out of same directory as certbot did ?

You just need to give lego your account key.

hmm it seems that pkg install lego will downgrade openssl from 3.0.11 to 1.1.1w

n30: You register an account/key in terminal with lego -m, and then generate your ssl certs by the help of its switches, lego --help would really help. And when you want a defined folder to be the home folder for your ssl certs, you can add something like --path /etc/ssl/domains

But still, the filenames might be changed (no idea how certbot names the files), so you will still need to configure your software to find the correct filename I think.

n30: Lego is just a Let's Encrypt client, it shouldn't downgrade something - I think?

Title: [root@mail ~]# pkg install legoUpdating FreeBSD repository catalogue...FreeB - Pastebin.com

then i can downgrade openssl and use certbot as usual instead. alots of work both ways

hm, shouldn't they both use base openssl?

3.0.11 is base openssl

on my box

but that isn't managed by pkg

so if i install it from ports it wont be any issues

?

hm, can you try a pkg autoremove ?

why do you even have an openssl installed via pkg?

i dont have openssl installed via pkg ... never uses pkg normally

and why does pkg try to install openssl30 ? as far as I can see lego doesn't depend on openssl

you have an openssl installed via pkg, else pkg wouldn't want to downgrade it

n30: I think something else on your system brings pkg to want to install openssl30 and downgrade openssl and no idea why you even have openssl installed, could you try pkg update; pkg autoremove; pkg upgrade ?

hm, pkg remove -n openssl could also be interesting, to see what pkg would remove if you remove openssl

sorry, I disconnected, n30, what have you done so far?

Is there an easier way to check if a directory is mounted (NFS in my case) than having to parse the output of mount? (doing this from a script, would prefer not to use the hacky approach if possible)

you want to know if it is a mount point?

see if stat -f '%d' -- "$dir" and stat -f '%d' -- "$dir/.." are different?

That seems like it would work too. I ended up just now using jc + yq to do the job.

jc?

Title: FreshPorts -- textproc/yq: Command-line YAML and XML processor, jq wrapper for YAML/XML documents

Though I guess I should have checked the man page first, because I just now saw that mount supports libxo :/

jc doesn't seem necessary since mount has a --libxo... yes

Yup, though I will say that jc is pretty nice in situations like this. Enough so that I'm willing to overlook the python dependency.

I remember using it last to query the output of route without feeling disgusting about parsing unstructured output text.

hm, route could probably do with a --libxo :-)

Yes, that would be nice.

Oooh, just noticed this difference between `jc mount` and `mount --libxo json` ...

jc outputs a root-level array with objects for each mountpoint. libxo outputs a "mount" object with a nested "mounted" object, which then has a nested array with objects that are almost identical to the jc objects.

The libxo version objects have a "fstype" property though, which is pretty nice. With the jc version I have to check whether the options array for each object has "nfs" in it.

Though it does make me wonder why the libxo output from various commands that I've used seems to have at least one or two levels of nesting at the top level before you get to the meat of the data. Not saying there isn't a good reason for it, but it did make me wonder. Only reason I can think of potentially is that having nested objects that like

makes it easier to merge the output from multiple commands in a pipe.

I haven't looked much, but it could be to distinguish between different output types

The only annoying thing I found is that some of the output contains keys with hyphens (e.g. jls has ".jail-information"), so you have to quote it properly in a script.

also I think libxo output always has an object not an array at the top level, because xml needs it that way

Oh, good point.

On a side note, yq is really useful. It recently just added lua support too, so you can transform JSON lists into Lua lists and vice-versa.

Oh yeah, just noticed. That textproc/yq port isn't the version I'm talking about. That one is older and implemented in python. The one I use is newer, has a lot more functionality, and is implemented in go: github.com/mikefarah/yq

Title: GitHub - mikefarah/yq: yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor

Forgot that I created a quick textproc/go-yq internal port for that one.

(barring the occasional use of hugo installed from a package)

How come? You mean just the toolchain or also go-compiled executables?

go ports can't even be downloaded without having go installed.

my port build process relies on downloading everything in advance with fetch-recursive, and the machine doing the fetching doesn't have go on it

I assume you mean the distfiles?

yup

Ah yeah that's true for go:modules. Not sure that's the case for plain go without modules, but at that point it's not worth it if you have to do that for any go port that's going to be used.

rwp, _xor: yes, this is an old IPMI. :) Supermicro X9DRL-iF with firmware circa 2015. But I don't want to let it go yet -- 128GB RAM, 32 CPUs (Xeon E5). Do I just install openjdk8-jre? I have openjdk8 installed as a dependency of something already.

ghoti: which tool exactly are you talking about?

babz: I'm trying to access an IPMI interface from Firefox running on my FreeBSD workstation. It's an old IPMI that implements the console in a java app.

java in firefox ? I thinks it's been deprecated somthing like... 20 years ago ?

I think I might be looking for java/icedtea-web.

*10 years

The goal here is to get a console via a Java-dependent IPMI. Might you know of another browser that could do this?

internet explorer ?

That I can run on a FreeBSD workstation, obviously. I suppose I could run an older FF in bhyve and export its DISPLAY to my workstation..

this technology was an infinite source of security flaws, but worse than that the APIs used to implement them were themselves, in essence, completely flawed

I think your best hope is to build a very old version of a browser like firefox, and find a compatible plugin on an archive.

I'll try that

Ez all! \o/

is it just me or is firefox completely broken nowadays?

It seems to work for me

the notes also indicated that many features were not available in freebsd, I've also noticed that chrome seems to perform overall better

i've had not problems with firefox

*no

I probably hit a hick up or something (bus errors, had to make a new profile)

has anyone here run FreeBSD on AWS EC2 and if so.. how come freebsd-update doesn't work on it?

i do and it does

I've got 13.1-RELEASE-p9 on this ec2 box.. if I run freebsd-update -r 13.2-RELEASE it goes through all the motions but when I reboot, it's still on 13.1

freebsd-update -r 13.2-RELEASE upgrade that is

After reboot, still need to do: freebsd-update install

Where can I find the release notts for 13.2-RELEASE-p4? Im having difficulity finding it freebsd.org

*notes

RoyalYork_, Are you looking for the notes specifcally for the patch version, "-p4"? Those would be collected in security & errata announements.

RoyalYork_, For 13.2-RELEASE see "Production" subsection under "Most Recent" section at freebsd.org/releases

Title: Release Information | The FreeBSD Project

... as of now

parv: ahh I know what happened.. didn't merge in the config files right.. aborted it so it aborted the upgrade.

pertho, Ah, ok

pertho, Before starting again, make sure that password & group files are ok by "vipw", "vigr" commands

parv: yeah it went OK this time.. thanks :)

pertho, Excellent

on 13.2-RELEASE-p4 now

Cool

really dislike the =================> lines in the merge.. the OpenBSD sysmerge is so much easier to look at, diff-wise.. ah well

yeah vimdiff would be nicer

*nod* *nod*

ah cool.. they fixed the mtu problem with VNET jails in 13.2.. I had to hack /usr/local/bin/jib in 13.1

oh that could have been a package

ahh not a package after all

if 'jib' is in /usr/local/bin, why's it not in a package but in base? SHouldn't it be in /usr/bin/jib?

pertho: pkg provides /usr/local/bin/jib

wait, no, the other way around

pkg which ?

probably

not found in the database

did you put it in there

I think bastille or something copied it from /usr/share/examples/jails

yeah I think it was originally part of bastille's handling of VNET jails.. the 13.2 upgrade didn't touch the file

cool thanks for the upgrade tips :)

pertho, Hmm... I don't see such a change in the log history. (shrug) cgit.freebsd.org/src/log/share/examples/jails/jib

ghoti, The way I solved that at one time back a few years was to create a Windows XP virtual machine with Java matching that era and could use it to talk to the IPMI Java console.

Today perhaps an older Windows 7 virtual machine might be more practical but still within the support window for browser+Java to use with the IPMI Java console.

Two less objectionable options might be to see if you can use IPMI to get a serial port console. Serial port consoles are perfectly usable! FTW!

The other is to buy or build a PyKVM pikvm.org to use with the system. It's both Free Software and also a totally awesome solution.

Title: PiKVM - Open and inexpensive DIY IP-KVM on Raspberry Pi