00:00:03 interspersed within the article 00:00:30 thinking I might try out mesa-devel to see if the situation is any different as long as libva actually picks up on the drivers 00:02:02 suspecting this is some kind of regression since the hardware support should be here, Mesa just isn't picking up on it 00:05:52 might be worth trying out the amdgpu DDX driver instead of modesetting, since it does seem like VAAPI does have to interact with the X server 00:05:59 grasping at straws though 00:06:17 I don't want to have to test on Linux, but... I might have to 00:07:15 welp, mesa-devel's VAAPI driver reports VP9 support 00:09:38 Firefox picks it up as well 00:15:21 now running into another issue, youtube playback under Firefox drops tons of frames, like roughly half. immediately suspected picom, but disabling picom didn't change anything 00:27:15 guess I'll have to try the amdgpu DDX after all, see if the situation is any different there 00:33:00 exact same issue on the amdgpu DDX :/ 00:37:56 seeing some reports of framerate issues on AMDGPU with kern.sched.steal_thresh at the default value of 2, apparently setting it to 1 fixes it for some people. I can give it a try, but are there going to be any side effects of messing with that setting? 00:48:29 guessing the steal_thresh parameter will affect the latency/throughput tradeoff regarding preemption? 01:34:53 kern.sched.steal_thresh seemingly has no impact, and I'm also finding some youtube videos that don't drop frames except for 1 or 2 at the very start of playback 01:36:34 also weird is that it reports dropping basically 50% of frames, but the video looks more or less like 60fps with a few hitches 02:30:33 i have 5 directories with rar files in them how do I extract them all once 03:42:38 uh, does anyone know why latest does not have packages for chromium or ungoogled-chromium? 03:43:49 i am looking at epair (https://man.freebsd.org/cgi/man.cgi?query=epair&apropos=0&sektion=4&manpath=FreeBSD+15.0-CURRENT&arch=default&format=html) and tap (https://man.freebsd.org/cgi/man.cgi?query=tap&apropos=0&sektion=4&manpath=FreeBSD+15.0-CURRENT&arch=default&format=html) and why would one use epair for jails and tap for bhyve.. is there any reason.. other then convention, that i may be missing? 03:43:51 Title: epair(4) 03:45:03 voy4g3r2: epair is designed for two instances of the kernel IP stack to communicate with each other (for example, the host, and a VNET jail). tap is designed for a userland process to communicate with the kernel IP stack, which is what bhyve does 03:45:38 a tap is an epair where one end of the connection is a userland process instead of a network interface 03:46:59 hwhich is why they mentione VMnet devices in tap not epair 03:47:12 i am trying to move the tap/epair stuff to the intel nics and i did not comment too well.. 03:47:56 ah and i setup a jail with vnet.. hrm 03:52:09 lw: thank you, i was about to drop the epair stuff as i am like.. i can do this with tap.. so i thought 03:56:16 so when i have ifconfig_tap0="link0 up" the link0 is that userland / kernel bridge? 03:56:42 link0 is a flag that tells the kernel not to set the interface down when the process using it (bhyve) exits 03:57:19 ('linkX' are a set of generic interface flags that are used for interface-specific functionality like this when there's no generic flag for it) 03:57:19 oh yeah, i have those notes.. we should NOT bring down these taps with the bhyve as we may want to 'reuse' 03:58:04 which would lead me to believe.. since i have 3 nic , i really should have a link0 link1 link2 each assocaited with a nic 03:58:19 because if i would "reuse" link0 between different bridges that would just be a mess 03:58:49 no... link0 doesn't mean "link number 0", it means "the interface-specific configuration flag number 0", which for tap, means "do not down the interface when the process exits". all your tap interfaces should have link0 set 04:00:10 any way I can install chromium from quarterly without completely switching to quarterly? seems like asking for dependency issues, tbh 04:01:30 so this mess: https://dpaste.org/Gar51 04:01:31 Title: dpaste/Gar51 (Plain Text) 04:02:18 i made sure to add some type of comment 04:02:33 i am not a fan of the one cloned_interfaces entry but it will work 04:03:52 well lets see what happens.. because re0 needs to go 04:04:48 voy4g3r2: having three interfaces on the same subnet is a bit unusual, you probably just want one bridge with all the tap/epair interfaces and igb0 in it? 04:05:07 and then don't use re0/igb1 at all 04:06:59 if i ever decide to execute the mikrotik stuff i want to use igb1 as an isolated network all together 04:07:10 i am decomissioning the re0 now :) just baby steps 04:07:47 1.) get the igb0,1 working 2.) get a bridge setup on igb0 3.) shutdown re0 04:11:59 well it looks like it worked ifconfig bridge0 down 04:12:05 and still have music going and bhyve is still up 04:18:10 bah.. bridge1 not getting an ip.. deep diving again 04:22:28 you can only have one bridge 04:22:36 you can make more, but you can't actually use them 04:22:45 I just encountered this today 04:23:02 that's not true, i have a system right here using two bridges just fine 04:23:19 huh, then I don't know why my second bridge didn't work 04:23:34 I don't have the url handy that said to not make multiple 04:27:15 there are quite a few ways to configure bridges wrongly which are not well documented, and also some related driver bugs like the ixgbe(4) vlan issue 04:28:00 (which don't prevent having multiple bridges, but can cause otherwise reasonable configurations to not work for no apparent reason) 04:29:25 i am pretty good at configuring things wrongly 04:29:51 but i figured the bridge on different nic would be okay as the if_bridge manual pages state, as long as you cloned the interfaces, i should be good 04:32:12 make me wonder how the heck my -CURRENT bhyve is working as the config points to bridge1 device 05:23:03 if anyone here has run into this issue with Firefox dropping frames in videos, despite no apparent hardware bottleneck, and has managed to find a way to work around it, I'd love to hear. it seems specific to Firefox, because I tried out Falkon, and despite that being restricted to software decoding, videos play back smoothly 05:24:39 on Firefox, WebRender is hardware accelerated and I've got VAAPI enabled to decode both VP9 and H.264 but at least VP9 drops about 50% of frames on most 60fps videos, the issue apparently doesn't show up on 30fps videos 05:43:27 voy4g3r2: For what it’s worth: https://gist.github.com/Crest/3c89deed4e9d8e9f5160ccdbee4c4745 05:43:28 Title: mk-epair · GitHub 06:21:05 so I haven't tested this solution extensively, so an obligatory "knock on wood", but setting Firefox's layout.frame_rate setting from -1 (unlimited?) to 60 (the monitor's refresh rate) seems to have almost completely fixed youtube's frame drops 06:21:17 down to about a 1% drop rate from nearly 50% 07:56:48 michaeldexter: is there an advantage to epair over tun (for bhyve) 07:57:14 rtprio: bhyve cannot use epair at all, as far as i know 08:01:12 jails only, eh 08:01:57 right. tap is for when the traffic originates from userland (as in bhyve), epair is for when the traffic originates from the kernel, which is mostly jails, although you could perhaps use it for other things 08:10:32 I hope the reason the gzdoom port is still on a release from 2021 is just because nobody is actively maintaining it, and not any technical reasons 08:10:35 i've wondered about, if you have a bunch of bhyve VMs with tap interfaces in a bridge, putting one end of an epair interface into the bridge as well to make the host's network config / firewalling easier... but i've never actually tried that. (i would be concerned about performance, but if_bridge performance is already quite bad) 08:11:19 gzdoom's port is on 4.7.1 whereas the latest stable release is 4.11.3 from last october 08:11:39 guess I will have to try compiling it to see 08:32:40 is it that bad? 08:36:38 regarding GZDoom? 4.7.1 is old enough to be lacking compatibility with newer map/mod releases, afaik 08:40:53 guess I need to hold cmake's hand here. the ninja build file it generated doesn't put /usr/local/include in the include path, evidently 08:41:05 I would think that'd be a given on FreeBSD 08:41:26 especially weird since it has found libraries I've got in /usr/local 08:46:24 tm512: regarding your question on figuring out why something doesn't have packages, try https://portsfallout.com/ you can reach the poudriere web interface of the builders from there too to find skipped ports 08:46:26 Title: Dashboard - FreeBSD pkg-fallout 08:48:33 thanks for the pointer 08:54:20 there doesn't appear to be any entry for chromium in the 140amd64-default build environment, but the package is just nowhere to be found in the latest repo still 08:57:37 lw: what do you mean if_bridge's performance is bad? 08:58:47 sfox: i don't have a link off hand, but received knowledge if that network performance via if_bridge is noticably lower than via a normal network interface 08:59:14 hm, http://beefy12.nyi.freebsd.org/build.html?mastername=140amd64-default&build=cd2e1424dd41 has build/timeout for *chromium 09:00:32 trying to compile the latest GZDoom source from git. eventually, it gets to a file which includes sys/stat.h, which leads to: 09:00:40 /usr/include/sys/time.h:326:5: error: member access into incomplete type 'struct timeval' 09:01:42 reminding me of one of the annoyances that helped move me away from daily driving FreeBSD, and not really something that's FreeBSD's fault, just the fact that many developers don't really ever keep it in mind 09:04:14 nimaje: that gives "unable to connect" for me 09:08:03 regarding these compilation issues, I guess investigating further is gonna have to wait until tomorrow, but if anyone knows why sys/stat.h would include sys/time.h in a way that would ever break compilation, I'd like to know 09:08:31 errors like this make me think another header is not being included somewhere, or a necessary define is missing 09:08:43 no ipv6? they are mirrored for that reason https://pkg-status.freebsd.org/beefy12/build.html?mastername=140amd64-default&build=cd2e1424dd41 09:08:44 Title: Poudriere bulk results 09:09:52 that link works 09:11:58 hm, but struct timeval gets unconditionally defined by sys/_timeval.h which unconditionally gets included by sys/time.h, so it seems strange that it would be incomplete 09:12:57 this is where sys/stat.h is being included: https://github.com/ZDoom/gzdoom/blob/master/src/common/filesystem/source/fs_findfile.cpp#L70 09:12:58 Title: gzdoom/src/common/filesystem/source/fs_findfile.cpp at master · ZDoom/gzdoom · GitHub 09:21:05 I don't think I saw any patches to this file in the gzdoom port, so either this file didn't exist in 4.7.1, or they've done something since then to break it 09:22:58 seems the file did not exist in 4.7.1, they were using something else for filesystem stuff 09:28:06 can you confirm, that on your system too sys/time.h unconditionally includes sys/_timeval.h and that unconditionally defines struct timeval ? (well, except for the include guards) I really can't see how struct timeval could be incomplete at that point 09:35:17 voy4g3r2: tap and epair interfaces are similar in that they connect two parts of software inside the same (freebsd) system 09:35:43 but epair connects two kernel network stacks (e.g. the host and a vnet enabled jail) 09:36:14 while a tap interface connects a userspace process (e.g. bhyve, openvpn) with the kernel network stack 09:36:54 so the tap interface is both a network interface and a character device 09:37:07 if you write to the tap device the kernel sees the data as ethernet frame 09:37:46 and if you send on the tap device the userspace sees it a data (to be interpreted as ethernet frame) on the device file 09:40:34 epairs a different from all other clonable network interfaces because they always exist pairs 09:41:04 if you ask the kernel to create epair0 it will (attempt to) create epair0a and epair0b as a pair 09:41:13 you can't have one without the other 09:41:43 if you destroy epair0b it also destroys epair0a (works the other way around too) 09:44:07 nimaje: yes, on line 37 09:44:23 regarding the _timeval.h include anyway 09:44:56 and that does indeed define struct timeval 09:47:30 the member access that triggers the "incomplete type" error is line 326 in sys/time.h 09:49:04 @sc@s 09:49:07 oops, sorry 10:48:24 nimaje: I may look at the preprocessor output when I get the opportunity to continue investigating this 12:43:49 crest: yes i did learn about that neat epair thing.. it makes an a and b 12:44:35 voy4g3r2: did my script work for you? 12:44:48 (the one michaeldexter linked to) 12:45:27 oh i did not see that .. scrolling up buffer 12:45:35 and if not is there something missing that would help? 12:45:51 voy4g3r2: https://gist.github.com/Crest/3c89deed4e9d8e9f5160ccdbee4c4745 12:45:52 Title: mk-epair · GitHub 12:46:13 it's a shell script to setup epairs 12:46:55 intersting i never "created" epairs just added them to /etc/rc.conf and they just appear... 12:48:55 but i do have to say my use of jail is limited.. i use bhyve more 12:49:09 but have thought about setting up dnsmasq to help with local dns.. as bind seemed to be too much 12:50:46 e.g. `mk-epair -n host-$name -N jail-$name -m bridge0 -J $name` could be used as exec.created inside a jail.conf 12:51:14 to let the kernel pick the next available epair unit number 12:51:25 rename both interfaces 12:51:42 add one end to a bridge on the host 12:51:57 and move the other to the vnet enabled jail 12:52:21 if any step fails the script cleans up (e.g. destroys the epair under its current name) 12:53:18 it looks quite clean and easy to follow 12:53:47 the script handles the tedious steps creating the pair, infering the names of both elements of the pair, renaming them as desired, setting MAC addresses, moving them to jails, adding them to bridges, adding them to groups 12:54:14 and can also run ifconfig inside the appropriate jail/host context 12:54:32 the latter feature depends on the ifconfig -j flag that only got added in freebsd 14 12:54:52 i don't know if it was backported to 13.3 12:55:05 yeah i am on 14 12:55:23 but good tidbit to know 12:55:46 its an annoying thing to automate well, because you have to recover to a sane operational state from partial errors 12:56:38 i do not fully understand why just doing this.. would NOT suffice https://dpaste.org/hkKK0 12:56:39 Title: dpaste/hkKK0 (Plain Text) 12:56:56 but i take it that requires a reboot and rebooting a big server is not the best 12:57:08 or just bringing down network services and restarting.. which would impact EVERYTHIGN on that host 12:57:19 it doesn't require a reboot if you know the right commands to the netif rc.d script 12:57:39 you can use something like service netif start epair10 12:57:49 to only start a single interface 12:58:12 but yes running service netif restart on a remote system is a bad idea 12:58:47 you have to restart at least the routing service too 12:59:02 because otherwise you're left without a default route 12:59:06 yeah, i have edone that a few times and hading to move the server to an area with a monitor 12:59:21 this time, i kept the re0 bridge around just in case something went boom 12:59:54 you can do it protected by screen/tmux/nohup if you like play fast and loose with a lab system 13:00:12 you config should work correctly 13:00:39 but it's all static and doesn't rename the interface to meaninful names 13:00:47 yeah.. it should but bridge1 is NOT getting an ip.. but 13:00:54 i like to embed the jail/guest name in interface names 13:00:55 oh agree 13:01:16 thankfully i had igb0 and re0 operational .. so i could get into the box 13:01:20 you can rename interfaces in rc.conf 13:01:37 you can automate it all with sysrc 13:02:33 but i prefer to keep my jail config in one place (the per jail jail.conf included from the global jail.conf) 13:02:52 and create the interface on demand 13:03:11 can you show the output of ifconfig bridge1? 13:03:50 the rc.conf snippet you shared assigns 192.168.0.30/24 to bridge1 13:04:50 why do you configure two bridges (bridge0 and bridge1) with the same IPv4 prefix 192.168.0./24 13:04:57 *192.168.0.0/24 13:08:09 (leaving out equal-cost multipath routing) there can be only one most specific route for each destination 13:09:14 and both 192.168.0.25/24 and 192.168.0.30/24 imply a network route for 192.168.0.0/24 directly attached to conflicting interfaces (bridge0 vs bridge1) 13:09:48 why did you create two bridges? 13:11:36 i would recommend that you create a lagg(4) interface containing igb0 and igb1 and add the lagg interface as first member interface to the remaining single bridge 13:12:45 if supported and enabled on your switch you can use LACP to share the load among all working members of the lagg 13:13:34 but each flow uses only the bandwidth of the link it's hashed to 13:13:51 so if you want to exceed the bandwidth of a single link you have to use multiple connections 13:24:59 i am not sure.. i am cat herding now.. and will need to think a little 13:25:07 did not want to give impression i just went away 13:45:12 btw why did you set the tap interfaces to "link0 up"? 13:46:01 wouldn't it be easier to use vmnet${unit} instead of tap${unit}? 13:46:34 vmnet is just tap with link0 as default, so there's no particular benefit from doing that 13:46:47 lw: less lines in rc.conf 13:46:57 and it's atomic on interface creation 13:47:00 crest: i rather be verbose, as i am learning 13:47:05 crest: is it? don't you have to set vmnetX up anyway? 13:47:13 you can't fail with a tap interface created, but the link0 flag not applied 13:47:35 lw: not for bhyve. it will bring the tap interface up when it starts 13:47:45 crest: the routing stuff, i did not think there would be an impact by using /24 on both.. my objective is to REMOVE the re0 bridge eventually 13:48:05 and you shouldn't have any IP addresses configured directly on bridge member interfaces 13:48:41 because having the addresses on the bridge members instead of only the bridge would cause really nasty IP link scope violations 13:48:57 which instantly break IPv6 and over time will break IPv4 too 13:49:10 could explain why i have "lags" with the freaking bhyve -CURRENT 13:49:19 i login and it just "waits" a few seconds 13:49:28 but now i am jut fixating on that issue. 13:49:39 how do you login? 13:49:43 ssh 13:49:51 iirc UseDNS defaults to yes 13:50:10 so it could just be waiting for a slow reverse DNS lookup 13:50:44 try to set UseDNS no in /etc/ssh/sshd_config, run service sshd restart and try again 13:51:04 or make sure even missing reverse DNS entry fail (near) instantly 13:51:19 well i have /etc/hosts messes on all the machiens which is probably making the problem worse 13:51:26 the dnsmasq setup is after this 13:51:40 voy4g3r2: ssh wants to look up other record types too 13:51:43 e.g. SSHFP 13:52:35 try ssh -vv, press enter a quickly a few times while it hangs 13:52:54 logout and look at the line just above the block of empty liens 13:52:56 *lines 13:53:15 if the delay is long enough to do it like that 13:53:37 of course there are better ways to do it, but this is the easiest if your terminal has enough scrollback 13:54:21 and no fancy shell config (e.g. a clock with second resolution that updates in the prompt) because that would cause the terminal to jump down agian 13:54:24 *again 13:55:13 but regarding the link0 flag on tap/vmnet: you want the bridge to not even attempt to deliver frames to the tap interfaces if the interface is down 13:55:40 because copying each multicast/broadcast/unknown unicast frame to the tap interfaces only to discard them is wasteful 13:56:13 the flag is important if you want to reuse tap interfaces in a routed network configuration 13:57:16 e.g. a /31 or /127 prefix per tap interface and the host redistributing all direct routes to tap*/vmnet* into a dynamic routing protocol 13:58:16 so then would that just mean it would be "easier" to isolate bhyve (tap) related traffic on one bridge and have another bridge with jails (epair) 13:58:18 because with the link0 the addresses and the routes that use them as nexthop would be deleted everytime the tap device is closed 13:58:24 voy4g3r2: no 13:58:44 there is no downside to mixing vnet enabled jails and bhyve guests on a shared bridge 13:58:52 only bad routing 13:58:59 :) that i introduced 13:59:00 just use epairs for the jails 13:59:13 err cat herding again (code word for meeting) 13:59:15 and tap interfaces for bhyve 13:59:33 yeah that is what i am using them for but it looks like my routing on the bridge itself is no bueno 14:20:12 Does anyone have experience with USB (SIM card) modems? I'm wondering which one has the best compatibility with FreeBSD. 14:20:39 Ideally something on a budget --- I don't need fast speed or anything of the sort. 14:54:04 crest: i am going to walk through and figure this all out, would it be cool to share iwth you my notes? i am thinking i am making a post about this. 14:54:47 voy4g3r2: sure. just send me a DM if you don't want it to get lost in the noise 19:58:03 DarkUranium: anything that can aggregate bands. Personally I'd avoid "USB stick" format and choose between smartphone tethering or a dedicated device like ZTE MF286D (which is ancient, underpowered, and cheap) over WiFi 20:10:34 I have my own Jail scheduler (jailer) and I'm going to be doing some massive changes in the codebase but keeping the front-end the same. I was wondering, what's the best way to write tests on FreeBSD? Is it still kyua? cheers 20:10:58 antranigv: yes, kyua is still the preferred way 20:11:06 dstolfa thank you. 20:11:07 not the best, but the standard 20:11:41 That's okay, I just need to run some code (jailer create jail0, jailer subcommand somearg) and then make sure that it does what it's supposed to do 20:11:52 e.g. returns 0, actually creates the jail files, etc 20:12:13 Also, if there's a getting started guide for Kyua, that would be even better 20:12:30 so I can first write the tests and then write the code, like a #SoftwareEngineer 20:12:36 perhaps see pf tests, I seem to recall them using a lot of jail infrastructure 20:12:56 antranigv: https://github.com/freebsd/kyua/wiki/Quickstart 20:12:57 Title: Quickstart · freebsd/kyua Wiki · GitHub 20:13:20 you probably care about tests written in shell, so: https://github.com/freebsd/kyua/wiki/Quickstart-atf-sh-test 20:13:21 Title: Quickstart atf sh test · freebsd/kyua Wiki · GitHub 20:14:48 dstolfa thank you <3 20:46:24 Is there a way to set sysctl values in loader.conf? I need to set "debug.debugger_on_panic=0", I tried setting this in sysctl.conf but it appears that that happens too late 20:47:00 My crash is at least earlier than those settings get applied 20:53:27 TMM_ I think there is. one sec lemme check 20:53:40 TMM_ I assume you also cannot get into single-user mode? 20:54:14 No, this crashes during PCI bus enumeration, and before my keyboard works. So to do anything I'll have to get the kernel to dump immediately so I can recover a minidump 20:54:39 I now get a ddb prompt I can't interact with :) 20:54:56 TMM_ I see. I just noticed that I was able to do that with OmniOS (which also use FreeBSD's bootloader), but lemme check if kernel supports that 21:18:39 I love how I keep forgetting to forward the ports into my IRC bouncer 21:18:53 TMM_ I still can't find it :D 21:19:10 I actually have time to debug these gzdoom compilation errors now 21:25:34 this is the full error from this invocation of clang++ https://termbin.com/mtt3 21:25:41 why are you compiling gzdoom? sounds exciting 21:26:21 it's funny you mention it but that uses cmake right? 21:26:30 i guess when porting to freebsd you have to uncmake it? 21:26:54 we use cmake in the gzdoom port 21:26:55 yes, but no. cmake works fine on FreeBSD 21:27:18 the only reason I haven't updated the gzdoom port is because I'm not ready for people to bitch at me about having to disable i386 21:27:33 I have a vacation coming up, so maybe it's the right time 21:28:19 well upstream gzdoom has broken at least some stuff, that's what I'm trying to sort out 21:28:45 johnjaye: just trying to build it because I'd like to play some Doom 21:29:14 that error's going to be because of needing sys/time.h included 21:29:23 most likely 21:29:44 but sys/stat.h is including sys/time.h 21:29:58 well, for __BSD_VISIBLE 21:30:33 there could be conflicting _*_SOURCE definitions being defined that would mean __BSD_VISIBLE doesn't get defined 21:31:46 where would I include sys/time.h, including it before sys/stat.h gives the same incomplete type errors 21:32:37 hmm, odd 21:33:34 oh, that's gross 21:34:06 I bet one of the includes outside of the FileSys namespace there ends up transitively including sys/time.h 21:34:22 so then include guards mean that we don't get _timeval.h *inside* the namespace like it wants 21:34:46 gack 21:35:14 hooray for C++ 21:35:49 antranigv: no worries, I can't find it either. Maybe I just need to rebuild the kernel with some other option 21:40:02 kevans: if you figure something out I would be happy to test it 21:45:45 tp512: not going to have time for a while, but I'll think on it a bit 21:46:06 what they're doing is dirty and fragile imo 21:55:05 lovely, so 14-STABLE keeps panicking on me 21:56:16 openzfs zap_get_leaf_byblk calls _sx_slock_int and _sx_slock_hard which page faults 21:57:38 tp512: (re: gzdoom) do you actually need newer features past 4.7.1, or would games/gzdoom be able to fill the urge for now? 21:58:51 kevans: honestly, just trying to go with git HEAD since that's what I've done for the last 6 years, heh. 4.7.1 would probably suffice 21:59:10 *nod* 21:59:20 though the fact that this system might panic at any moment is kinda discouraging 22:01:13 I'm on the feb 29th snapshot, might be worth seeing if this is already something that's been fixed, though I'm torn on whether to use pkgbase 22:02:03 also hoping this is just a software issue and there's not an issue with this SSD causing the page faults 22:11:40 I wonder if these panics are related to the merging of openzfs 2.2 22:31:15 seems it's firefox ultimately doing something that leads to the crash and coincidentally I'm running firefox on an encrypted zfs dataset so I wonder if the panics are related to encryption somehow 22:38:39 has anyone else on 14-STABLE run into this? https://termbin.com/4vep 22:45:16 going to test w/o running the browser on this encrypted dataset. the idea was so that stuff like login cookies and would be safe if my laptop got stolen, but not something I have to worry about atm 23:02:21 kevans, how's the ecc stuff coming along? :)