01:37:21 <lw> is 'newfs -U -j -t -S 4096' readonable for a filesystem on a bhyve VM backed by zfs?  i can't keep up with all the new types of su/journalling they keep adding
01:59:49 <rtprio> they added journaling ages ago
02:00:37 <lw> yes, but i haven't used UFS since the original softupdates
02:01:03 <lw> there's also two different types of journal, i guess gjournal is older and SU+J is preferred?  newfs manpage doesn't really offer any guidance
02:09:43 <rtprio> yes, su+j is preferred afaik
07:11:02 <debdrup> it's also the default
07:11:39 <debdrup> as in, it's what's used by bsdinstall
07:13:23 <debdrup> both journaling and soft updates can be enabled at runtime with tunefs(8) too
07:20:10 <parv> Is journaling better (in terms of least data corruption & faster recovery) via "gjournal" or via "soft updates"?
07:22:02 <debdrup> journaling and softupdates and gjournal are three separate things, and SU+J are best used together
07:22:13 <debdrup> gjournal can, in theory, add journaling to any filesystem that doesn't have it
07:22:51 <debdrup> https://www.mckusick.com/softdep/suj.pdf is worth reading.
07:24:35 <parv> I wrote "journaling ... via "soft updates"" because of (from "newfs(8)"): -j      Enable soft updates journaling  ...
07:25:51 <debdrup> Read the paper to understand why it says that ;)
07:28:12 <parv> too long for now; will read later.
08:57:26 <kenrap> parv: btw, I was able to migrate back to CURRENT recently and tried out the drm-61-kmod package for my Arc A770 GPU, and sadly it kernel panics atm, even when I supplied the appropriate firmware bins from the linux-firmware by hand. :(
08:58:08 <kenrap> just to let you know
08:59:16 <parv> kenrap, Much appreciate the update. I had forgotten; after reading 2-3 times I realized why you had addressed me (because I had requested)
08:59:44 <kenrap> yeah, a month back or so :)
08:59:56 <parv> kenrap, Thanks to you for remembering for both of us
09:00:03 <kenrap> ;)
09:06:34 <parv> kenrap, So do you use VESA driver instead?
09:10:02 <kenrap> parv: I went back to my other GPU for now
09:10:14 <parv> Ah. Ok
09:53:27 <Victor> hello hello! I hope you all are having a great Saturday!
10:07:56 <tercaL> Hi
11:47:15 <debdrup> https://freshbsd.org/freebsd/src/commit/aa3b7a2 \o/
11:47:16 <VimDiesel> Title: FreeBSD / src / aa3b7a2 / /etc/rc add trace debug and verify - FreshBSD
11:52:57 <kenrap> Nice!
11:56:41 <debdrup> Yea, it's pretty neat
11:57:34 <kenrap> It will come in handy that's for sure :)
13:22:11 <mynam> Happy Saturday
15:30:07 <SpaceBass> I've been a unix and linux user for decades but for some reason I have the hardest time understanding pam.d ... I'm trying to get winbind working for ssh, console, services, and sudo ... I can ssh in as a directory user and I can sudo for some commands (eg date) but I can'd sudo su -
15:30:14 <SpaceBass> /etc/pam.d/su https://paste.debian.net/1306872/
15:30:17 <VimDiesel> Title: debian Pastezone
16:36:04 <remiliascarlet> pam.d is an asshole.
16:36:13 <SpaceBass> Yep... on day three of fighting this
16:37:47 <SpaceBass> I also cannot mount any NFS shares on this new box, I get Stale NFS file handle every time
16:40:04 <mynam> Pam and I aren't friends... I wish it was as simple as updating nsswitch.conf.
16:40:23 <SpaceBass> I just wish there was good documentation
16:40:38 <SpaceBass> Currently I can't sudo su - because it doesnt think root is a pam_winbind user
16:40:58 <mynam> Does it work outside of sudo?
16:41:12 <SpaceBass> No, I can't login as root on the console anymore either
16:41:57 <mynam> You'll prob want to boot into recovery and look at the contents of nsswitch.conf
16:42:08 <mynam> Did you edit nsswitch.conf or only pam.d stuff?
16:42:17 <SpaceBass> Both
16:42:28 <mynam> Do you remember what you set for the passwd line?
16:42:35 <SpaceBass> I dont think it's an nsswitch issue... it's almost certainly pam.d
16:42:51 <SpaceBass> passwd: files winbind
16:43:15 <SpaceBass> I can ssh in as a domain user and can sudo many things... I just can't switch to root because it seems to only be looking for domain users
16:43:16 <mynam> files is in there so ya, no issues there like you said.
16:43:56 <mynam> One sec, I run ldap so a little diff but same idea. Let me pull up my notes there. Did you remove anything from the pam files or just add?
16:45:14 <mynam> Ok, in pam.d, I edit: sshd, su, and system
16:45:28 <mynam> And I'm only adding lines
16:45:29 <SpaceBass> Which version of freebsd are you running btw?
16:45:48 <mynam> 13.2
16:50:32 <mynam> https://pastebin.com/RiywNRpa  <-- this is a snip from my notes for how I edit pam.d
16:50:33 <VimDiesel> Title: sshd```bashvi sshd``````bash## $FreeBSD$## PAM configuration for - Pastebin.com
16:50:44 <mynam> bsd.to is throwing http 500 errors.
16:51:47 <SpaceBass> Thanks for sharing that
16:52:41 <mynam> It's ldap instead of winbind but should at least serve as a reference for what I added and where. Just look for the ldap lines.
16:52:56 <SpaceBass> Yep going to try and emulate
17:04:00 <SpaceBass> Damn its just getting worse now
17:05:35 <mynam> Can you restore the pam.d files to their orig?
17:05:52 <SpaceBass> I did, and that gets me back in with local users
17:06:22 <mynam> Ok good! In theory you should be able to drop the winbind entries into the same spots I did my ldap entries.
17:06:53 <SpaceBass> I'm on FreeBSD 14-release so my files look different from yours ... but I essentially dropped them in the same place
17:07:04 <SpaceBass> Now auth.log shows success but ssh and sudo still fail
17:07:18 <mynam> Do the logs say why they failed?
17:08:52 <SpaceBass> pam_winbind(sshd): user 'XXXX' granted access
17:08:53 <SpaceBass> Failed keyboard-interactive/pam
17:10:20 <mynam> I gotta run, going to a bday party.
17:10:47 <mynam> I wish you luck
17:10:52 <mynam> I'll be back later today tho
17:30:30 <umoga> No updates needed to update system to 13.2-RELEASE-p9.
17:30:54 <umoga> freebsd-version -k > 13.2-RELEASE-p8
17:30:58 <umoga> why?
17:31:42 <umoga> i have done freebsd-update -r upgrade for 13.2 and did run install 3 times + rebooted
17:32:04 <nimaje> freebsd-version -kru ?
17:32:34 <nimaje> pretty sure the kernel did not change in -p9
17:32:34 <ivaat> twice 13.2-RELEASE-p8 and third pos 13.2-RELEASE-p9
17:33:35 <ivaat> freebsd-update install > No updates are available to install.
17:34:39 <nimaje> your userland is at -p9, the kernel did not change after -p8 and you are running -p8, all fine
17:38:38 <ivaat> lsof: WARNING: compiled for FreeBSD release 13.2-RELEASE-p9; this is 13.2-RELEASE-p8.
17:42:08 <nimaje> that seems to be a bug in how lsof detects the freebsd version
17:46:00 <ivaat> so i was useful
17:46:05 <ivaat> :)
17:49:00 <nimaje> ah, well, while building packges in poudriere you can't know what the kernel version will be, so the userland version gets compiled in for that https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=225986#c27
17:49:03 <VimDiesel> Title: 225986 – sysutils/lsof false warning
18:12:49 <ivaat> ok
18:38:45 <ivaat> hm php 8.2 yourls installed. configured. under nginx all php pages blank. running directly php info.php does not produce any error. in nginx error nothing. access log shows 200
18:39:14 <ivaat> in php.ini errors turned on
18:39:27 <ivaat> i cant get any php in web showing up. all blank
18:42:02 <ivaat> php-fpm
18:42:13 <ivaat> this was pkg upgrade from php 7 as well
18:46:16 <ivaat> i mean no error
18:50:28 <ivaat> so nginx gives 200, no error on logs, from command line works info.php for example but when requesting over web server then blank
18:56:20 <ivaat> hm php-fpm is configured ritgh way and nginx uses same socket
19:05:17 <rtprio> ivaat: obviously not or it would be working. do you want to share your configs or should we just guess
19:09:27 <ivaat> rtprio, if socket would be wrong then nginx would throw error. i get 200 ok. sharing conf right now. one moment
19:16:55 <rtprio> it's probably php that's unhappy; turn up the logging for it
19:18:19 <ivaat> rtprio, www.conf for php-fpm https://paste.ovh/view/6842b91e | nginx.conf https://paste.ovh/view/d3bc319a | https://paste.ovh/view/f0560b74
19:18:21 <VimDiesel> Title: nginx.conf - paste.ovh - troubleshoot easily
19:18:33 <ivaat> error loggin is turned on
19:19:18 <ivaat> on command line php does not print any error
19:19:33 <ivaat> when executing php info.php for example
19:19:51 <rtprio> i suspect that your app is more complicated than info.php eh
19:20:41 <rtprio> did you turn up errors in php.ini too ?
19:21:29 <rtprio> ovh has their own TLD? what a bunch of clowns.
19:22:48 <ivaat> app may be complicated than that but phpinfo should run too.. all php files under freebsd 13.2 nginx, php-fpm php 8.2.14 over web white blank page
19:23:13 <ivaat> in old php 7 worked.. this was upgrade
19:23:38 <rtprio> and the app supports php 82?
19:24:06 <rtprio> turn up the error level and logging in php.ini too
19:24:20 <ivaat> yes but again simple <?php phpinfo();?> should work as well
19:24:21 <tercaL> ivaat: Start removing all the stuff from line 9, up to (including) line 124, save and exit. make sure there is no mistake, so check with: nginx -t and if it says OK, then reload nginx with; nginx -s reload
19:24:29 <tercaL> and finally try a sample php file again.
19:24:34 <tercaL> https://paste.ovh/view/d3bc319a
19:24:35 <VimDiesel> Title: nginx.conf - paste.ovh - troubleshoot easily
19:25:13 <tercaL> adding the file into; /usr/local/www/shareurl.net/http/sample.php and checking with: yourwebsite/sample.php
19:25:41 <ivaat> thats what i did
19:25:59 <ivaat> you think sql injectiopn protection rules may affect?
19:26:04 <ivaat> i will try
19:26:13 <ivaat> used to work
19:28:55 <ivaat> nope, nothing
19:29:13 <tercaL> location / { try_files $uri $uri/ /yourls-loader.php$is_args$args; }
19:29:16 <tercaL> What's this?
19:29:28 <ivaat> this yourls docs nginx rule
19:29:43 <ivaat> yourls is php app
19:33:44 <tercaL> ivaat: Do you have /usr/local/etc/php.ini file
19:33:46 <tercaL> ?
19:35:00 <tercaL> ivaat: You removed an older version of PHP and installed PHP 8.2, have you created/updated your /usr/local/etc/php.ini file?
19:35:46 <ivaat> yes i copied for test production ini file to /usr/local/etc/php.ini
19:36:25 <ivaat> cp /usr/local/etc/php.ini-production /usr/local/etc/php.ini
19:43:58 <tercaL> ivaat: How about the content of /usr/local/etc/nginx/nginx.conf?
19:44:21 <ivaat> tercaL, i removed the lines you recommended. did not help
19:44:38 <tercaL> Pastelink the /usr/local/etc/nginx/nginx.conf file please.
19:48:06 <ivaat> tercaL, https://paste.ovh/view/484017dd
19:48:07 <VimDiesel> Title: nginx.conf - paste.ovh - troubleshoot easily
19:58:48 <ivaat> i have to go for today. thank you for responding
20:42:42 <lw> hmm, what does this mean Feb 10 19:33:15 thyme gssd[913]: gss_acquire_cred: principal_name for non-root
21:45:40 <jbo> only one more PR and then I have nothing else assigned \o/