dvl, bot will detect 'issue' 'pr' or 'bug' followed by <#number> in phrases and return the corresponding bugzilla PR -> github.com/bsdlabs/FreeBSD-irc/tree…er/limnoria-plugins/FreeBSDbugcatch

Title: FreeBSD-irc/limnoria-plugins/FreeBSDbugcatch at master · bsdlabs/FreeBSD-irc · GitHub

It should ignore itself though

nimaje: thanks for info on make.conf.

CrtxReavr: I don't believe there is a way to do what you're asking for. If there is, I'd like to know as well as I do the same thing. Vast majority of installations are done with pkg, but some I do fro ports.

I have a problem... I am trying to mount a virtualbox guest folder for my FreeBSD guest. I have virtualbox guest additions installed, and I have vboxvfs.ko installed however I get sudo: mount_vboxfs: command not found

Try "vboxvfs" (extra "v") instead.

Bah. They left already.

hi all, i haven' tried freebsd in a while. last time i checked the ax201 wifi card wasn't supported but there was talk about getting it fixed. also last time the only way i got freebsd to work on this laptop was using a memstick. first things first what is a good version that has everything that just works. current, or release ?

i'm seeing a lot about sudo being a big security risk. but is there any way to admin a system without it that's safe? like even as simple as reloading a service that i'd typically use sudo to do

Hmm can't find any networks. Will use the dvd

polyex: sudo being a security risk is well known. but depending on what you're trying to do, there might be a way to reduce the blast radius

not my question tho. how practical is it to admin systems without using sudo, if even possible?

in my experience, its not practical. You'd have to login as root everytime you want to do anything

so we all basically lug around a trojan to make admin stuff easier

you could try using doas, I don't have much experience with it, but maybe it does a better job of security risks.

yeah we do

something you may want to look at are sudo plugins and also the digest list in sudoers files.

you could use su instead

is su more secure than sudo?

I think the point is logging who did what. If you "su" then do actions its hard to see "who" did them (assuming multiple people can do 'su' here). Using sudo/doas leaves more trail. I think here doas is considered more secure than sudo (in theory) due to the _much_ smaller size (i.e. easier to understand/audit)

if you're on a local system at home with it's services not publicly exposed (and no critical info on it) then use what you want. I personally use sudo for linux systems and doas for my freebsd ones just to keep them in seperate pigeon holes in my head when I work on my boxes

but I'm just a hobbyist really so my opinion does not equal one of these guys that manages corp critical systems

Good morning all.

06:19 <polyex> is su more secure than sudo? <= su has less attack surface, but it also has less features. the only people who can use su are the ones in the wheel group, and they need to know root's (or whoever's) password, which makes it almost pointless: if those two groups don't intersect, the people who know the a password, they can still just

login

ya so maybe try doas

doas works the same way as sudo, but has slightly less attack surface

slightly?

seen the LoC comparison?

one of these things can store config in LDAP, which means local accounts with root access can't just change random shit

huh?

sudo, I'm talking about sudo.

oh

and honestly, given how messed sudo's config parsing is, you might be better off with LDAP as a default lol

hehe

So, yeah, give doas a try

why not just use doas tho?

ya i'm gonna

I'm just trying to lay out the full tradeoffs

doas on OpenBSD has a cool edge compared to the portable edition: it uses a special API where the kernel itself expires keys, so it doesn't need to track it in some files

and i think, we should port that API, cuz it sounds useful af

nice

My first freeBSD install... I can't get an X login using sddm. /var/log/Xorg.0.log shows Failed to load module "intel" (module does not exist, 0). I've followed the Handbook and searched for an answer to no avail.

startx doesn't work either.

have you done that? docs.freebsd.org/en/books/handbook/x11/#x-configuration-intel

Title: Chapter 5. The X Window System | FreeBSD Documentation Portal

Yes

hm, is i915kms loaded? does kldstat list it?

it does

you will, in fact, suffer and be suffered

whats says the error with startx?

Warning, couldn't open module intel , then Failed to load module "intel" (module does not exist, 0)

Have you installed pkg install xf86-video-intel ? And is your user part of the "video" froup?

group...

how can i check from a live Freebsd image if my wifi card words? is there wpa_supplicant pre-installed ?

skeemer: yes it is download installer image and drop to shell

ibanja if you have a really old GPU you probably maybe drm-legacy-kmod instead of drm-kmod

you shouldn't need xf86-video-intel with drm-kmod

xf86-video-intel was not installed... that did it. Thanks.

I am using an older thinkpad

should I switch to drm-legacy-kmod or keep using the xf86-video-intel package?

I'm assuming I should stay with xf86-video-intel.

If it isn't broken don't fix it.

drm-legacy-kmod was for older freebsd releases and doesn't exist anymore, not for older drivers

OK. thanks.

use both drm (3d driver) AND video-intel (2d driver)

nimaje: I need it too on my x250

just booted my x230 to check, I don't have xf86-video-intel there

nimaje: I deinstalled video-intel then startx and have the same problem as OP, i915kms.ko is loaded and Morrowind (OpenMW) works like a charm ;)

But from this blog: These days, you no longer need to install xf86-video-intel for native graphics support. If you leave it uninstalled, X11 should use the new Glamor 2-D acceleration driver by default. c0ffee.net/blog/freebsd-on-a-laptop

Title: FreeBSD on a Laptop

hi all

skeemer: you could try ghostbsd live, maybe it can tell your wifi wirks

Where can one download the man pages for simple C stdlib functions, like for example string.h functions. I hate having to open my browser.

hackerman: I guess your desktop isn't freebsd, so download base.txz for your preferred os version, and look in /usr/share/man/*

hackerman: like usr/share/man/man3/string.3.gz for example

dch, :| I was trying man 2 strcmp

i usually just go man $thing and hope it works out...

(why would strcmp be a syscall?)

Aw back on freebsd my real home. Was having issues yesterday getting X started after reading the handbook. Did some googling actually I think it was in the forums. Instead of Intel for my card I used modesettings and everything worked ASAP

vkarlsen: ok

In Linux I disable pulse-audio because it is problematic. Is there a way to do that in FreeBSD? I am under the assumption that sndio is a better choice.

FreeBSD has a BuildIn OSS, thats kind of the best choice, no need to ever install pulse-audio

OK

Title: Sound - FreeBSD Wiki

I was reading that, but wasn't sure if I should be installing sndio or stick with OSS. Sounds like I don't need sndio from what you just said.

I noticed on my first install of xorg (I am reinstalling due to messing some things up.) that pulse-audio was included. Can I ban it from being installed?

I think pkg lock is what I am looking for.

The man says "Prevent modification or deletion of a package." Does it prevent installation of a non existing package?

I'm looking at docs.freebsd.org/en/books/handbook/ports/#ports-using and it said don't mix ports and binary packages. Does that mean don't use poets ? I need to because of a printer driver

Title: Chapter 4. Installing Applications: Packages and Ports | FreeBSD Documentation Portal

jb1277976: I use ports for somethings, but pkg for 95% of what I need. I've not had a problem so far. You'd have to pay attention when doing upgrades and such.

Ok

Nixkernal: technically speaking, it has a OSS(v4)-compatible sound stack - but it does more than what OSS(v4) mandates.

true

When I was on freebsd a while ago there was a way to compile a port with options of let's says gentoos use flags like things I want and things I don't want. What is that called and can I read up on it ?

jb1277976: /etc/make.conf?

Nothing good comes out of mentioning gentoo.

I think jb1277976 is asking about port configuration; make -sC /usr/ports/$cat/$port config

Lol CrtxReavr I just removed gentoo last night and put on freebsd

There is syntax where you can pass configure script options to a port. . . been forever and a day since I've used it, so I don't remember it.

Though, ports are pretty well optimized by default.

Like say I don't want ssl from a specific port how do I compike the port without it ?

Compile*

If a port has build options, you'll get prompted to set them, the first time you build it, of if those options change.

You can always redo those make options by: cd /usr/ports/what/evs & make config

jb1277976: you'll want to have a look at /usr/ports/Mk/bsd.options.mk to see what you want to set in the /etc/make.conf file. Also read ports(5) and of course The Porter's Handbook

Aw thanks I'm glad I'm back

Porter's Handbook is geared more towards creating ports.

It's good info, but may not the best thing for your first day.

jb1277976: I do things like: emulators_qemu50_SET+= STATIC_LINK in my /etc/make.conf file. You can do simiarl for the port you are dealing with, just use UNSET rather than SET, note the use of "+="

I have a ton of stuff I disable in /etc/make.conf because I'm on a headless system and don't care for GUI stuff. Order matters in /etc/make.conf

ibanja: FreeBSD's soundstack is part of the basesytem not a package you dont have to pkg lock anything.

gcc13 has come out and has support for Modula-2 which harks back to my college days in the previous century, so figured I'd give it a try. Unfortunately I can't get it to build on amd64 running FreeBSD-13.2. How do I collect information from the build so I can put in a PR ?

mns: if you build the port and it fails, it should show on the cli

souji: its a build that takes about 10 hours, so I wm trying to see if there is anything I would need besides the basic stuff.

I think I found what I wanted. Instead of make install clean I run make install then it comes up with options I can enable or disable

jb1277976: you can also do 'make config' to explicitly force the setting of the options, and there is a way to ecursively set the options for dependencies as well

mns: ohhh, ok ... I don't know of any other tools sorry

Thanks

mns: on a first throw, you shouldn't need anything other than enabling the option. when it fails, it should stop, and last failure should be all that's necessary to for a first bug report

meena: thanks. I'm going to narrow it down a little further, but yeah config.log and few other files will be a good start.

lets see what happens

meena: btw, thanks for your jail setup blog on your site, was useful in helping me with jails.

pretty sure that site is dead

where did you find it?

codeberg.org/pkgbase/website/src/branch/main/howto/jails.md ?

Title: website/jails.md at main - website - Codeberg.org

let me check

I know I jotted it down somewhere lol

meena: I think it was alpha.package.live I can't seem to find it now on this laptop.

I ran out of sponsor support, so that's down

ahh ok

but we have official PkgBase builds now:

but yes similar to the codeberg.org one

Title: official packages

mns: it's literally the same, cuz that's the source the site is built from

nice work on the pkgbase !

What's a good app to find ports fast instead of freshports ? Something from the terminal

Or instead of make quicksearch

jb1277976: what about pkg search?

if you already know part of the name, my trick is ls -lthrd /usr/ports/*/*emacs*

how do i not babysit a ports compile ? make install clean still gave me some prompts. i dd make config-recurisive and i thought i got everything

what prompts? Can't think of anything other than sudo

yea one of them says jbig2dec-0.20 G1 for ports collection help

im at my laptop now

no idea what prompt is that

wtf

i got 2 compiles going on

0_o /me just checked his other desktop

g2g thanks all

jb1277976: BATCH=yes make install

hello

deacon426, hi. Best to ask your question directly and wait for someone who can answer to look in.