-
koolkat332
hello I had a question for openssl
-
meena
koolkat332: have you tried asking it, or would you like to wait for one of our psychics?
-
V_PauAmma_V
Better ask your question directly. Then someone who can answer it will be able to.
-
koolkat332
RuntimeError: OpenSSL 3.0's legacy provider failed to load. This is a fatal error by default, but cryptography supports running without legacy algorithms by setting the environment variable CRYPTOGRAPHY_OPENSSL_NO_LEGACY. If you did not expect this error, you have likely made a mistake with your OpenSSL configuration.
-
deever
koolkat332: looks like an openssl question/issue, not an freebsd one to me...
-
koolkat332
setting environment variables?
-
meena
koolkat332: what's throwing that error?
-
koolkat332
certbot
-
meena
weird.
-
f451
koolkat332: you need to upgrade py-cryptography and py-certbot
-
f451
-
VimDiesel
Title: 254853 – security/py-cryptography: Update to 41.0.3
-
fold
helloo
-
koolkat332
I reinstalled those packages did not solve the issue
-
fold
I can't pass bhyve_options in vm config using vm-bhyve
-
fold
I mean I set the bhyve_options but seems like it's not being used when launching the vm
-
fold
anyone experienced something similar?
-
fold
I'm trying to passthru a usb device to the vm
-
f451
also py-openssl
-
f451
also py-openssl
-
f451
koolkat332: what os version and where installed from?
-
f451
huh irc lagged a bit there
-
f451
i installed via poudriere, ot built directly from ports
-
koolkat332
freebsd 14 release 3 or 4
-
koolkat332
installed from not sure the question
-
f451
pkg install most likely then
-
f451
in that case then I dunno. hte change meant to accomodate/fix the 'legacy' thing is in that fault report but thats from a while ago..
-
koolkat332
how do I set the environment variable to open ssl?
-
koolkat332
two options either load the legacy provider or set the environmental variable cryptography_openssl_no_legacy this is an error that ensued as a result of upgrading to freebsd 14
-
f451
I think it's a make variable. But I never used that. I rebuilt those three ports locally and it worked
-
meena
env CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1 certbot …
-
rtprio
i use certbot on 14 and don't have this problem
-
rtprio
what's going on
-
rtprio
fold: you can only pass pci devices to bhyve; so are you trying to pass the usb controller?
-
f451
koolkat332: i think the fact it broke after upgrading to 14 is relevant. how did you upgrade to 14 and did you reinstall all your ports?
-
f451
also what does freebsd-version -kru report
-
koolkat332
there were issues I had someone help me after
-
tm512
so if I'm using ZFS on this install, if I don't want to bother with full-disk encryption, but would like to have portions of the disk encrypted, say passwords or stuff in ~/.cache so that stuff like website login cookies wouldn't be able to be hijacked if my laptop is stolen, do I have to plan for that ahead of time during disk partitioning?
-
koolkat332
14.0-RELEASE-p3
-
koolkat332
14.0-RELEASE-p3
-
koolkat332
14.0-RELEASE-p4
-
tm512
I know ZFS basically doubles as a logical volume manager, so I'm basically wondering if geli can operate on those logical volumes or if it can only operate on the actual block devices underlying them
-
f451
ok - did you reinstall all your ports?
-
koolkat332
I believe so
-
f451
pkg upgrade -f ?
-
rtprio
tm512: you could create an encrypted volume using a volume of zfs
-
f451
it's important because the api changes with major version change
-
rtprio
zfs create -V 20G zroot/sekret; and then horse around with geli and ufs on top of that.
-
deever
-
VimDiesel
Title: Mozilla Community Pastebin/preuMHCB (C)
-
tm512
rtprio: thanks. I'm still a complete noob when it comes to ZFS, but I guess now isn't a bad time to learn, since it's also a popular choice over here in Linux-land
-
tm512
for the most part I have mostly avoided these "next-gen" filesystems, just used ext4 on Linux and UFS on BSDs
-
rtprio
that's not 'using zfs' as using a chunk of the disk for othr things;
-
tm512
rtprio: well even if it's UFS on top it's still using ZFS to create the logical volume?
-
tm512
and I just mean I'm completely unfamiliar with working with ZFS in any capacity
-
nimaje
well, "using"
-
rtprio
tm512: yep; without encryption it'd be zfs create -V 10G zroot/myufs; newfs /dev/zvol/zroot/myufs; and mount it
-
tm512
seems kinda similar to loop mounting a disk image
-
tm512
creating a virtual block device in both cases
-
nimaje
hm, didn't zfs gain native encryption with 14.0? then you could encrypt only some datasets you want to be encrypted and really use zfs
-
tm512
guess for disk setup I should just go with the guided ZFS option? I'm used to guided disk setup doing stuff I don't like, like splitting the disk up into many partitions
-
V_PauAmma_V
Guided ZFS worked for me for both 12.x and 13.x. YMMV if using 14.0 or -current.
-
tm512
at least on other systems, it ends up being really annoying being pushed into a rigid partition layout, I always just want almost everything on / so that I don't have to make guesses about how much space certain parts of the filesystem will need
-
tm512
I'm guessing that guided ZFS is not going to divide the disk into a rigid partition layout, and will instead just use logical volumes that can be resized on the fly without risking data loss
-
V_PauAmma_V
Well, guided ZFS solves that. You end up with a single zpool, out of which several filesystems are created, sharing the same space.
-
tm512
yeah, I figured it was something like that. so I won't end up in a situation where, say, I need 1GB of space somewhere, but the only free space on the disk is allocated to a completely separate partition?
-
tm512
and the separate filesystems under a zpool are only given the appearance of being separate partitions? with the option of disk use quotas presumably
-
tm512
hmm, "Error while extracting lib32.txz: Can't unlike already-existing object"
-
tm512
s/unlike/unlink/
-
tm512
this is in the FreeBSD 14-STABLE installer, the jan 25th snapshot
-
tm512
I'm seeing suggestions that this can happen if you're trying to install FreeBSD over an existing install, but I'm overwriting the Windows 11 install this laptop came with
-
tm512
also other suggestions that it might be due to a lack of disk space, but that also doesn't really make sense. this is a 128GB SSD
-
koolkat332
how do I remove a line from env ?
-
V_PauAmma_V
Yes, quota are possible with ZFS. (Have you read
docs.freebsd.org/en/books/handbook/zfs ?)
-
VimDiesel
Title: Chapter 22. The Z File System (ZFS) | FreeBSD Documentation Portal
-
tm512
V_PauAmma_V: haven't gotten that far yet
-
tm512
can't even get through the installer evidently
-
tm512
well my memstick.img.xz checksum does match, but I wonder if something went wrong in writing it to USB. might try rewriting it
-
tm512
well the installer even checks the checksums of each set before extracting so that probably isn't the issue
-
tm512
it installed fine this time around, though it gave me a warning about the zroot pool already existing, asking me to confirm that it should be reused. and now it's talking about multiple FreeBSD EFI boot entries
-
tm512
should I have nuked the disk before attempting the installer a second time?
-
V_PauAmma_V
Maybe. I've never installed twice on the same hardware or VM.
-
tm512
now unsurprisingly, it's unable to initialize the wifi (rtw88). guess I have to set that up manually after I'm finished with the installer, since I have to have compat.linuxkpi.skb.mem_limit=1 set in order to force it into a 32-bit address space or something like that
-
koolkat332
make: "/usr/ports/Mk/bsd.port.mk" line 1204: UNAME_r (14.0-RELEASE-p3) and OSVERSION (1302001) do not agree on major version number.
-
koolkat332
what can I do about this?
-
V_PauAmma_V
koolkat332, was that host upgraded from 13.2 to
-
V_PauAmma_V
koolkat332, was that host upgraded from 13.2 to 14.0?
-
koolkat332
yes
-
V_PauAmma_V
Looks like either the upgrade is incomplete or you had jails that weren't upgraded.
-
koolkat332
I'm not sure
-
koolkat332
there is one jail in the system but it's not active it's only 2gb cloud system that I spend a lot of time with
-
rtprio
tm512: each 'zfs' is a partition. a zpool is a collection of disks
-
rtprio
tm512: the datasets can have quotas and optionally inherit quotas
-
koolkat332
any hints?
-
koolkat332
serious? any way to make it functional?
-
rtprio
koolkat332: did you `pkg upgrade ` again? anything need updating?
-
koolkat332
no it's not even the issue
-
rtprio
the libssl30 issue? what's the issue now?
-
koolkat332
packages are all up to date
-
koolkat332
ok the issue is the same
-
koolkat332
certbot does not work, so I tried to do the setting, apparently that's with /etc/make.conf and then I tried to rebuild openssl but that also doesn't work
-
rtprio
what's the paste of the error message ?
-
koolkat332
because I have two different version numbers
-
rtprio
er, where
-
koolkat332
-
rtprio
i have two version numbers too. 111 and 30
-
VimDiesel
Title: dpaste/XQ17 (Plain Text)
-
tm512
would be nice if the FreeBSD installer let me go back a step, accidentally hit enter instead of space
-
rtprio
koolkat332: and the contents of make.conf ; and again, why are you doing this?
-
koolkat332
because when I do the command certbot I get the following error
-
koolkat332
-
VimDiesel
Title: dpaste/qogG (Plain Text)
-
V_PauAmma_V
tm512, at what stage of the installer are you? I think you can revisit most stages where you enter data or make choices before the install is finalized.
-
koolkat332
and it's not unreasonable to want the ports to work , etc..
-
rtprio
koolkat332: what version of py39-openssl do you have?
-
rtprio
koolkat332: obviously.
-
koolkat332
py39-openssl-23.2.0,1 Python interface to the OpenSSL library
-
tm512
V_PauAmma_V: I was at the point after configuring the network where it was asking me about services to start up automatically. I know I could just go in after the install and put this in /etc/rc.local or whatever, but *shrug*
-
rtprio
that's the same one i have
-
tm512
apparently going and doing gpart destroy on the disk wasn't enough to get rid of the "zroot is already taken" warning
-
V_PauAmma_V
You'll get an option to revisit that in rhe installer.
-
rtprio
oh lookie there; i have the same error message
-
V_PauAmma_V
The services startup part.
-
rtprio
koolkat332: what was wrong with setting th environment variable ?
-
tm512
I'm confused about where the zpool info is being stored if not on the disk I'm trying to install to. I guess gpart destroy wasn't enough to scrub that?
-
rtprio
tm512: you dlted all parts?
-
rtprio
deleted
-
tm512
I thought gpart destroy deletes the entire partition table
-
rtprio
so it does
-
rtprio
but it might be caChed if you did not reboot
-
koolkat332
rtprio the certbot command doesn't work
-
tm512
rtprio: I'll try rebooting
-
koolkat332
I use it to get ssl certificates
-
koolkat332
why do I need that, why do I need to do anything really I mean I don't know
-
koolkat332
I agree but I am trying to learn something
-
rtprio
its a pretty clear message
-
koolkat332
I'm trying to do something
-
koolkat332
but yes I could say why do I need a computer , etc.. but it's supposed to be what I am doing for a lot of years, I need to do something I think
-
tm512
rtprio: still a message about the pool name already being used. I don't even know if it's worth worrying about, like it might be fine to just proceed anyway
-
rtprio
for fucks' sake man, just run CRYPTOGRAPHY_OPENSSL_NO_LEGACY=yes certbot
-
rtprio
like it tells you to
-
tm512
I wonder if the pool info is stored in EFI stuff anywhere
-
koolkat332
command not found
-
koolkat332
rtprio command not found
-
tm512
I'm still seeing a FreeBSD boot entry in the UEFI boot selection, and it's not an entry for the USB flash drive, since it shows up even without the flash drive plugged in, hrm
-
rtprio
koolkat332: what shell do you use?
-
rtprio
sounds like csh still
-
koolkat332
yes
-
rtprio
setenv CRYPTOGRAPHY_OPENSSL_NO_LEGACY=yes ; certbot
-
V_PauAmma_V
tm512, what I think happened is: After the "gpart destroy", the data in the partition that says "this is a ZFS partition with a zpool named zroot (or whatever) on it" was still present. Then, the installer recreated a partition table with the same partitions as already existed, and that made the parition reappear as ZFS.
-
tm512
V_PauAmma_V: in which case I guess I could probably safely ignore the warning and continue with it named zroot?
-
V_PauAmma_V
I think so. Worth a try anyway.
-
tm512
I just don't want to run into any weird issues from ignoring warnings and not fully understanding the implications
-
V_PauAmma_V
Fair enough.
-
koolkat332
same error rtprio
-
tm512
guess the alternative would be to dd garbage to the SSD and use up write cycles, which doesn't seem appealing
-
tm512
or maybe I could get by by just making some UFS partitions on the drive
-
V_PauAmma_V
That may also have potential to cause issues down the road. I've never done that, so I don't know.
-
tm512
well, install appears to have been successful, gonna try to get rtw88 working, otherwise I'll get wifibox set up
-
tm512
seems like one of the things I was worried about (sleep) was a justified worry. the screen doesn't come back on waking from sleep
-
» V_PauAmma_V should go to sleep himself.
-
fold
rtprio: yes I'm trying to pass the usb controller
-
fold
I mean the only one that have usb when running pciconf
-
tm512
so, after waking up this laptop from sleep, I can ssh in, and I don't see anything weird in dmesg even though the screen doesn't turn back on on the laptop itself :/
-
tm512
nothing in /var/log/messages either
-
tm512
not sure where I should look
-
markmcb
is there a list of planned features for the next release? for the curious?
-
rtprio
tm512: i think you'd have to press a key
-
rtprio
on they keyboard
-
tm512
rtprio: I do, and it wakes up, I can ssh in, but the screen stays off
-
tm512
the laptops page on the wiki has this under the suspend/resume section for the ThinkPad E14: (./}
-
tm512
guessing that's supposed to be a checkmark?
-
rtprio
why do you want the screen off when you ssh in?
-
tm512
I don't think you're understanding. I want the screen on, because this is a laptop, and the screen is a vital thing to have
-
tm512
I'm ssh'ing in just as an attempt to debug what's going on
-
rtprio
you're saying the screen doesn't turn on when you press a key
-
tm512
but I'm not seeing any indication that the i915 driver is having issues regarding the screen
-
rtprio
or after sleep
-
tm512
after waking up from sleep
-
rtprio
what's your `sysctl hw.acpi.lid_switch_state`
-
rtprio
-
VimDiesel
Title: SuspendResume - FreeBSD Wiki
-
tm512
yeah, I've looked at that page. I can check the lid switch state sysctl momentarily, though I dunno how relevant it is. I'm suspending with zzz
-
rtprio
so does resetting the videocard work from ssh ?
-
rtprio
is the laptop in x, wayland or at the console?
-
tm512
rtprio: sorry, was eating. this is at the console, I haven't installed any packages yet, so no GUI
-
tm512
I'm not sure how I'd reset the video card
-
rtprio
it's in that wiki page
-
rtprio
Try "sysctl debug.acpi.suspend_bounce=1" followed by "acpiconf -s 3". This tests SUSPEND/RESUME methods of all loaded device drivers.
-
tm512
not sure what this is going to do to help given that suspend/resume already appears to function, just the screen doesn't turn back on
-
tm512
like I need to know where to look for debug information regarding the screen
-
tm512
well the screen stays on with acpiconf -s 3 while suspend_bounce is set
-
tm512
network connection seems to drop though, which it wasn't doing earlier
-
tm512
hopefully I don't end up having to resort to Linux. super reliable, I run it on my desktop, but it gets boring
-
tm512
gonna try this reset_video sysctl, see if that has any impact
-
tm512
this isn't like my desktop where I already leave it on basically 24/7 so it doesn't really matter whether suspend works properly, whereas on a laptop it's kind of a dealbreaker
-
kenrap
it almost sounds like you already convinced yourself to go back to Linux for your laptop
-
kenrap
And "boring" is usually a good thing, "if it ain't broke, don't fix it" :)
-
tm512
kenrap: I mean, Linux was always the backup plan, but I want FreeBSD to work
-
tm512
so there don't seem to be any kernel modules loaded that are related to i915
-
tm512
is this built-in to the GENERIC kernel, or...?
-
tm512
as in, not something that would show up in kldstat
-
tm512
oh, they are an external package? that seems odd to me, but hopefully with i915kms actually loaded, this will start working again
-
kenrap
-
VimDiesel
Title: Chapter 5. The X Window System | FreeBSD Documentation Portal
-
tm512
yeah, I found that
-
tm512
let's see if this fixes the resume issues
-
tm512
yes, yes it does
-
tm512
what's weird is that I ran FreeBSD on my desktop for over 2 years and I have absolutely no recollection of needing to install kernel modules through pkg
-
tm512
not out of the woods yet though because I also need to get wifi working, and ensure that the wifi (whether natively through rtw88 or through wifibox) survives a suspend/resume
-
tm512
now I'm hoping that compat.linuxkpi.skb.mem_limit=1 (to get rtw88 working, supposedly) won't break stuff with the GPU since that appears to be using linuxkpi as well
-
tm512
seems that sysctl limits DMA to a 32-bit address space and that feels like there's the potential for a performance hit at least
-
deever
-
VimDiesel
Title: Mozilla Community Pastebin/preuMHCB (C)
-
tercaL
Under FreeBSD 14.0, I've a VM running as a mail server, and my host machine has a single physical NIC with public IP address. The VM is connected to a subnet of 192.168.2.0/29 as vm-vmswitch. How can I open VM to the public internet, so that the mail server could update packages from time to time, via PF without NAT?
-
tercaL
Without NAT, redirections are working fine; such as; an SSH redirection from VM's local IP to my PublicIP:2222, like; "rdr on $ext_if inet proto tcp from any to ($ext_if:0) port 2222 -> 192.168.2.4 port 22"
-
tercaL
However, the only thing remains is; how could I give my VM outgoing Internet access?
-
tercaL
Any advices please? Much appreciated.
-
meena
tercaL: that should just be a matter of routing
-
meena
what does your routing look like, on the host?
-
tercaL
meena: On the host, (a remote dedicated server with no physical access), I have a "re0" interface with a public IP provided by my server provider; inet 135.181.116.26 netmask 0xffffffc0 broadcast 135.181.116.27
-
tercaL
And one more interface named "vm-vmswitch" (and tap0) with: inet 192.168.2.1 netmask 0xfffffff8 broadcast 192.168.2.7
-
meena
I can't read hex, I'm sorry
-
tercaL
my VM has; 192.168.2.4 and gateway as; 192.168.2.1 (IP dedicated to vm switch), and subnet as; 255.255.255.248
-
meena
what does netstat -nr look like?
-
tercaL
-
VimDiesel
Title: Mozilla Community Pastebin/5qy41ZpT (Bash)
-
tercaL
My server's public IP: 49.12.126.150 - my VM network: 192.168.2.0/29
-
tercaL
And this is the output of 'netstat -nr', within the VM itself:
pastebin.mozilla.org/OKQ0fKE6
-
VimDiesel
Title: Mozilla Community Pastebin/OKQ0fKE6 (Bash)
-
meena
tercaL: 192.168.2.0/29 192.168.2.4 UCn 1 0 - 4 vio0
-
meena
what's that for
-
tercaL
meena: This might give an idea?
pastebin.mozilla.org/5cCH3AH6
-
VimDiesel
Title: Mozilla Community Pastebin/5cCH3AH6 (Bash)
-
meena
tercaL: can you get rid of that route and see if anything still works?
-
tercaL
meena: How can I try that?
-
tercaL
I mean getting rid of the route
-
meena
man route, see del
-
meena
it's usually the same as add
-
tercaL
meena: Got it, in the host machine, right?
-
meena
no, on the machine it's on
-
meena
the vm
-
tercaL
meena: Did "route delete -inet 192.168.2.0/29" in the VM, and it seems the port forwardings (from VM to Public IP) are stopped. (a sample rule, like; rdr on $ext_if inet proto tcp from any to ($ext_if:0) port 2222 -> 192.168.2.4 port 22)
-
meena
cool cool cool cool cool
-
meena
wait
-
meena
what does your pf rules look like, in general?
-
meena
-
VimDiesel
Title: website/howto/jails.md at main - pkgbase/website - Codeberg.org
-
tercaL
-
VimDiesel
Title: Mozilla Community Pastebin/Ymv5kRXc (Bash)
-
tercaL
And it works. Just trying to give outgoing internet access to VM, without NAT. So just simple port redirections and outgoing internet in VM.
-
meena
i don't think you can do that without assigning it an external IP to give to to the vm, and if you don't have one, then NAT it is
-
tercaL
meena: I see, so, without NAT, a public Internet access in a VM is not possible?...
-
meena
unless you have more IPs to spare, no, it's not possible
-
meena
what's your aversion to NAT?
-
tercaL
I can request additional IP from my server provider for that VM, but would you suggest having two different PF on the same box? (one for host, and other for VM itself)?
-
meena
you're probably sitting behind a CGNAT yourself right now
-
tercaL
meena: I feel like under NAT, if the number of my VMs increase in the future, the host machine would remain portless, no?
-
meena
what
-
tercaL
number of the connections
-
tercaL
from public Internet to those VMs
-
meena
how many thousand VMs are you planning to run? how busy are they gonna be?
-
meena
are we talking one couple thousand VMs or couple hundred thousand VMs?
-
tercaL
meena: I've been reading a warning on that kind of networking with NAT. Oh, not really more than 15-20 VMs I think..
-
tercaL
So it's not that easy to get out of ports..
-
meena
I would like to know what you read that have you that impression
-
tercaL
and secondly, in terms of network performance, I thought NAT would be slower than direct stuff.
-
tercaL
as it's always translating and translating things.
-
tercaL
but as you said, assigning VMs public IPs are the only way it seems.
-
tercaL
meena: I really don't know, big, bold, red letters with that warning.. :) "don't exceed number of VMs on a single box"
-
meena
this kind of translation has been optimised for decades, so i would say you shouldn't notice
-
meena
what was the number? what was the context?
-
meena
those things matter
-
tercaL
Well, I definitely see your point now. Great ideas and tips! Much appreciated.
-
tercaL
and see my mistake and mistakenly thoughts.
-
tercaL
I'd request additional IPs and implement PF within each VM then.
-
meena
that sounds expensive but fun
-
ascreen
anyone know what happened to the bsd devroom at fosdem?
-
meena
ascreen: there isn't one
-
meena
they didn't accept anything BSD this year
-
V-T60
Hello
-
V-T60
Can i temporarily pause one of HDD in mirror?
-
V-T60
of the HDDs
-
V-T60
in ZFS
-
V-T60
since 3.5" is very noicy
-
V-T60
noisy*
-
lw
V-T60: depending on what you want to do, you could offline it, detach it, or split it. sounds like you want the first
-
V-T60
lw: i wanna offline like during night
-
V-T60
or tweak for my needs
-
V-T60
but how do i do that? and how do i revert?
-
lw
you can put zpool-offline(8) in cron or something, but i don't think i would want to do this, i believe zfs will refuse to import the pool if the other disk fails while one is offline
-
isley
this seems like a really bad idea, if you're not going to use the second drive in the mirror for most of the time then just use that drive for backups.
-
V-T60
i want to replace later
-
V-T60
ok
-
V-T60
yeah, sounds like a bad one
-
lw
V-T60: if you want to keep a copy of data, you could set up something to use zfs send | zfs recv to copy one drive to the other at whatever interval you like. with incremental sends it doesn't need to copy the entire filesystem every time
-
ascreen
meena: so it was rejected and not just no interest i guess
-
Dieterbe
hi folks. i'm trying to use mod_openssl in lighttpd. i keep getting this message: 2024-01-31 15:30:35: (/wrkdirs/usr/ports/www/lighttpd/work/lighttpd-1.4.73/src/mod_openssl.c.3010) SSL:openssl library version is outdated and has reached end-of-life. As of 11 Sep 2023, only openssl 3.0.0 and later continue to receive security patches from openssl.org
-
Dieterbe
i assumed freebsd-update fetch + freebsd-update install would fix it, i also updated from 13.2 to 14.0, but getting the same error again
-
meena
ascreen: I don't know. That's the amount of information I have, and it's only from FreeBSD, not from FOSDEM itself.
-
Dieterbe
i don't use ports. it's a pretty standard machine with lighttpd installed (as a normal package)
-
Tabmow
Dieterbe, what version do you have installed?
-
Tabmow
14.0-RELEASE should have 3.0.12
-
Dieterbe
uh oh. seems like my day is about to get worse: pkg --list says this: ld-elf.so.1: Shared object "libssl.so.111" not found, required by "pkg"
-
Tabmow
Dieterbe, did you run freebas-update install after you rebooted?
-
Tabmow
freebsd*
-
Tabmow
Also, you need to look at
docs.freebsd.org/en/books/handbook/…ng-edge/#freebsdupdate-portsrebuild as well to upgrade your ports/packages afterwards
-
VimDiesel
Title: Chapter 26. Updating and Upgrading FreeBSD | FreeBSD Documentation Portal
-
lw
Dieterbe: you should upgrade pkgs before the last freebsd-install step that removes old libraries (it should prompt you to do that). you can try 'pkg-static update; pkg-static upgrade' and see if that works to install the 14.0 packages
-
Dieterbe
i followed
freebsd.org/releases/14.0R/installation, i'm pretty sure i ran 'freebas-update install' , i just ran it again to be safe. it says 'No updates are available to install.' and running pkg --list still breaks with the same error. i skipped the ports stuff because i don't use ports
-
lw
you run freebsd-update install three times, the third times removes old libraries. you need to upgrade your packages before the third time or this will happen. ('pkg' itself is a pkg, so you can't skip that step if you want to use pkg)
-
Dieterbe
oh, i never ran an explicit command to upgrade packages as such
-
lw
you can't skip that step just because you don't use ports, the page says 'ports installed from the ports tree or packages installed by pkg(8)'
-
Dieterbe
ok, my bad. so how screwed am i now?
-
lw
try the pkg-static command i suggested
-
lw
pkg-static is statically linked specifically to recover from this situation
-
Tabmow
The commands are in that handbook link I provided and it explains all you need to know.
-
Dieterbe
thank you. i will try 'pkg-static update; pkg-static upgrade' now
-
Dieterbe
that worked! any point rebooting at this time?
-
Dieterbe
my .so error for pkg is gone, it works. and also mod_oppensl in lighttpd is happy now :-] thanks so much for your help folks
-
BenBE2
Anyone an idea for when OPNsense 24.1 hangs in pkg update at fetching the package lists? How to force upgrade to 24.1_1?
-
uuidNuniq
2 rules can make freebsd reboot
-
uuidNuniq
pass out route-to $tun_if all ; pass in fastroute all ; then run the tun... boom...
-
nasmConnoisseur
Heòòp
-
nasmConnoisseur
Hello
-
nasmConnoisseur
<nasmConnoisseur> I'm installing FreeBSD on my new thinkpad
-
nasmConnoisseur
Any tips?
-
nasmConnoisseur
help
-
mason
nasmConnoisseur: Tell us what problems you encounter and we can help.
-
xa0z
... i need somebody... help... not just anybody... help... you know i need someone... help!
-
» xa0z lolz
-
nasmConnoisseur
lol
-
nasmConnoisseur
@mason, well first of all: how do I know if my hardware is compatible?
-
xa0z
Google "hardware here" +FreeBSD
-
mason
freebsd.org/releases/14.0R/readme notes the hardware compatibility list, but it's not a link, so half a sec.
-
VimDiesel
Title: FreeBSD 14.0-RELEASE README | The FreeBSD Project
-
mason
-
VimDiesel
Title: freebsd-src/sys/dev/isp/Hardware.txt at e6b8c1d780b490283dd378aa560591a14583caf1 · freebsd/freebsd-src · GitHub
-
xa0z
nasmConnoisseur: what kind of hardware?
-
nasmConnoisseur
thinkpad e16 gen1
-
xa0z
Which wireless card?
-
nasmConnoisseur
03:00.0 Network controller: Realtek Semiconductor Co., Ltd. RTL8852BE PCIe 802.11ax Wireless Network Controller
-
xa0z
That may be your only issue.
-
xa0z
Everything else looks supported
-
nasmConnoisseur
In case anything goes wrong I have a USB adapter that is compatible xa0z
-
tm512
nasmConnoisseur: worth looking into setting up wifibox, as long as Linux has proper support for the RTL8852BE
-
nasmConnoisseur
Linux does have support for it
-
tm512
basically proxies your traffic through a Linux VM, with the VM having control over the wifi card
-
xa0z
What a hassle. When my Asus ROG's wireless card didn't work, I bought one on eBay for $15 that did work and swapped it out.
-
weust
anyone know why sysutils/cpu-microcode is to be removed by a "pkg autoremove" ? I can't figure it out
-
xa0z
because it's no longer a dependency of something else that has been, or is being removed.
-
weust
yes, except in this case it's *the* package I installed
-
weust
no wait, sorry
-
lw
weust: iirc it was split into separate packages for intel and amd, then a separate rc script
-
lw
see what 'pkg search microcode' says
-
weust
it shows -1.0, -amd<date>, intel-<date> and -rc. but pkg autoremove shows inly -intel and -rc. this is a intel based machine
-
lw
so mark -intel and -rc as manually installed then remove cpu-microcode
-
lw
(pkg-set -A0 cpu-microcode-intel cpu-microcode-rc)
-
lw
unless you really want to keep all of them i guess
-
weust
I guess not, no need.
-
weust
I also read about locking(wrong term?) them, but why is it listing in the first place? error in the pkg?
-
weust
package*
-
weust
I also know with plg I can list the dependencies of a package, but not the reverse. for exmaple, which package pulled in perl5? because I didn't do it myself.
-
lw
try: pkg query '%rn' perl5
-
weust
no results
-
lw
i'm not sure what exactly changed in cpu-microcode to make it do that but i assume it's somehow related to the package split, maybe it's missing a depdency or something
-
lw
well, does pkg remove perl5 list any dependencies? if not, nothing depends on it :-) i'm not sure how you would work out what installed it in that case though
-
weust
Think I will email the maintainer
-
weust
I did do a pkg all-depends on each package listed by pkg prime-list. nothing for perl5, or pcre or pkgconf. those are the other three I don't really get atm
-
weust
thanks lw. will see what breaks in a short term, or not :-)
-
lw
might want to check it still works the next time you reboot, but i'm fairly sure you don't need the base cpu-microcode package if you have -rc and -intel
-
weust
I checked, I was wrong on the meta package. it's not installed. nor is the amd one.
-
weust
just -intel en -rc
-
lw
weust: pkg does log installs to /var/log/message, perhaps grep for perl5 and see if anything else was installed at the same time... but that won't help if it was over a week ago
-
weust
I amsure it's was way over a week ago
-
weust
But it's OK. if something break I will find out soon enough, I hope
-
llua
famous last words
-
weust
yup
-
weust
luckily it's my home server for Samba and Poudriere. Samba won't go kaput, Poudriere maybe. will see
-
jns
This is probably a long shot, but do any of you know how (if it's possible) to make pipewire on freebsd emulate a jack server? I figure it'd need wireplumber, which we don't have yet -- i did manage to compile wireplumber with some minor build system tweaks, and while it does seem to run and connect to pipewire, i still can't quite get the jack server bit going
-
CrtxReavr
Now you're just making shit up.
-
jns
me? no :) pipewire has a built-in jack server, normally.
-
jns
i suppose i could do with just jackd on oss, if there were a way to make a virtual oss device that combines multiple real devices.
-
jns
i do believe that's the point of virtual_oss