-
shbrngdo
the_oz - you can mount a file as a file system - same trick you use to mout DVD ROM image etc. - man mdconfig if that helps
-
shbrngdo
there's a similar trick in Linux
-
shbrngdo
heh - everyone's away from terminal. worthy of mention.
-
shbrngdo
Oh I see uskerine wanted to know... a hard link to a file within the jail's file system would probably work. Then you mount it from a memory device. Have not tried in jail context. Also would not share it with other jails directly (for that NFS mounts would be better)
-
shbrngdo
in fact that might be your best bet, an NFS mount on the host. Yhen just put it in fstab
-
shbrngdo
make that 'NFS export' on ther host. yeah I meant THAT.
-
uskerine
nimaje I am listening. Can you elaborate on nullfs?
-
nimaje
as I understand, you want to mount the partition on the host and give some jails access, you can mount the directory into the jail via nullfs to archive that
-
uskerine
I will google about nullfs
-
uskerine
thanks nimaje
-
uskerine
what about data integrity, while the scenario I am considering is controlled writes and the rest reads when the first is not writing, I suppouse locks do not work between jails, right?
-
uskerine
what I mean is that my case is simple, as a few jails might be reading and that it is
-
uskerine
but what would happen if I would like to handle data integrity via locks
-
nimaje
what kind of locks? why would they not work?
-
uskerine
flock
-
uskerine
I do not know if they would work or not, I am asking because it is my understanding that jails have certain level of isolation
-
nimaje
with nullfs you explicitly share a part of the filesystem, so I would expect flock to work, but never tried it
-
dch
sigh.. I can't use umlauts today, any other keys like euro symbol aren't working
-
dch
aargh `setxkbmap us -variant altgr-intl -option compose:menu` seems to have come unset
-
dch
I wonder what did that
-
dch
ü€ aaah we're back
-
bz
im running freebsd 14 on an asus chromebox cn60 and the io speed is insanely slow, it takes a very long time to extract packages with pkg install
-
bz
i checked top while it was stuck extracting the rust package and the cpu usage was minimal, so im pretty sure its an io issue
-
bz
the drive is an m.2 sata ssd and the filesystem is ufs
-
bz
and i havent had this issue with other oses, eg linux and netbsd, only freebsd
-
bz
i havent yet tried it with zfs because this device only has 2gb of ram
-
dch
you can run zfs on 2g ram, could be difficult if you want to run a browser simultaneously tho
-
dch
bz what do you see if you run `doas gstat -soBpd -I 1s`
-
dch
while its lagging io
-
dch
its quite conceivable that the chromebook has shitty h/w with crappy i/o path
-
dch
so looking at `L(q)` should show total pending io, `% busy` is basically if its going flat out or not, and `ms/w` is how long it takes on average to do a write
-
dch
theres probably similar data available in `iostat(8)` try `iostat -dxw 1`
-
scoobybejesus
dvl, i've been running vaultwarden in a jail for a bit over 4 years. never had a problem. works with the bitwarden mobile apps and browser extensions. love it
-
dvl
scoobybejesus: Seems fine so far. Now I have to decide: do I want to do this, or just let Bitwarden take care of it for me.
-
scoobybejesus
i decided to have mine in a jail at home. when i'm out, i would need to vpn home in order to update passwords or add new logins. that has never hindered me. i like having my data at home. and backups have been easy. but, yeah, good service for a good price for a good company...
-
dvl
scoobybejesus: With an "offline" solution like that.... hmm, I use VaultWarden only for TOTP, which rarely changes....
-
dvl
I could move all my OTOP into Keeper (which is what I've been using for years).
-
scoobybejesus
since i didn't say it outright, I only have my mobile vault or laptop vault "locked" which is to say that the db is cached on the device. so i can use the apps while i'm on the go for passwords and TOTP. i just can't make updates while out and about
-
scoobybejesus
my employer uses Keeper. i like it. i like bitwarden/vaultwarden more. but both are good in my book.
-
dvl
For those to work "offline", was there a specfic setting you needed to do?
-
scoobybejesus
It must be that the Session timeout action be set to Lock, not Log out
-
scoobybejesus
which i thought was the default
-
dvl
When you do need to create/modify something, and you're not connected to home, what is your procedure?
-
scoobybejesus
of course the day i comment on it, the web app stops behaving. updating fixed
-
scoobybejesus
when i need to modify, i generally don't. when i need to add, i will create the account with the relevant service, not using the app, and use a strong-enough password that i can remember, and then just change the password later when i add the record to vaultwarden
-
rtprio
interesting
-
rtprio
i use syncthing and keep my keepassxc file where i need it
-
skered
If I need to replace a disk that was originally setup by the install root on zfs is there a simple process to that disk via some built in script or do you have to do it by hand?
-
rtprio
skered: is it one in a pair of mirrors?
-
rtprio
you would need to partition it to match the other one, but zpool replace would do the synchronizing
-
skered
raidz. Yeah I did a gpart backup other | gpart restore -F new
-
skered
But I think I know the steps to get it back.
-
skered
I'm just wondering if there is something builtin that would just do it all for you.
-
rtprio
it should be something like 'zpool replace zroot ada1s3'
-
skered
repart, replace, bootcode, copy ESP, replace swap, etc...
-
rtprio
there's no script for it as far as i'm aware
-
rtprio
replace swap what?
-
skered
zfs on root cretes a 2G swap on each disk
-
rtprio
that's part of the gpart
-
» ober has noticed after three installs the user I create has a home directory owened by root.
-
rtprio
ober: how do you create it ?
-
rtprio
skered: i didn't know you could boot from a raidz