00:40:16 installing drm-515-kmod solved the issue 01:10:13 Yaazkal: the drm-kmod packages are built on 14.1 and this is a known issue with 14.2. you can build the port (this worked for me on a laptop) or wait a bit until 14.1 is EOL 01:11:01 it's buried in the release notes somewhere (maybe a different document), there is also a forum thread 01:19:40 ok, thanks. Now I have i3 working 01:20:16 * Yaazkal is deciding wich web browser to use. Never heard of qutebrowser before. 01:36:09 how are you supposed to build individual modules when they depend on an .m template file generating a header? 01:36:40 Yaazkal: i used qutebrowser for a while, it's pretty decent 01:37:19 i built the kernel, and there is mmcbr_if.h in /usr/obj/usr/src/arm64.aarch64/sys/GENERIC/, but when i go to /usr/src/sys/modules/allwinner/aw_mmc && make, it errors out on not finding that .h file 01:37:34 shouldn't the makefile add that include path? 01:37:41 the fact it's not in there means something is wrong 02:38:54 y 02:39:45 -y 09:57:59 so is portsnap like no more in v 14? 09:58:18 agent314: right. use git 09:59:00 portsnap was terrible and was basically a workaround for CVS also being terrible 09:59:10 now that ports are natively in git, there is no more need for portsnap 10:00:05 ok at first i was getting 'fetch-pack: invalid index-pack output' 10:00:15 but i switched to shallow clone and it worked 10:00:47 oh were they not in git before? 10:01:14 sorry, natively? 10:04:18 * agent314 kinda digs ports/pkg for now.. i like that i dont need to specify a ton of USE flags and masking keywords each time i install a package like in gentoo/portage 10:04:58 agent314: "before", ports were in CVS, which is a very old source control system that predates git. portsnap was created to avoid end users having to check out ports from CVS 10:05:18 now that we have git, we do not need portsnap 10:05:59 freebsd is older than git, which is why this migration is needed, if git existed when ports was first created, it would have been in git and there would be no portsnap 10:06:02 * agent314 used CVS in 2005 :) 10:06:44 yeah makes sense, git only came out in 2005 and freebsd what in 1995? 10:07:10 1994 10:07:26 no, 1993 10:07:45 oh i knew it was a little bit after linux 10:08:41 it's just that a lot of manuals are using portsnap so i'll just mentally deprecate it from now on 10:09:24 * agent314 did install freebsd on desktop briefly in 2011-ish but since then havent touched it 10:10:30 https://unixdigest.com/articles/technical-reasons-to-choose-freebsd-over-linux.html caused me to have interest, so i'm installing it on a VPS now where i just need to run some python and nginx to process cvs files 10:11:23 i hope i wont have to use docker, i'm still not sure how friendly freebsd 14.2 is with docker 10:11:52 freebsd doesn't really do docker at all, or at least, if you want docker you should use linux 10:12:04 there's some similar thing on freebsd though, it's called... uh... Podsomething? 10:15:32 pot 10:15:34 https://papers.freebsd.org/2020/fosdem/pizzamig-orchestrating_jails_with_nomad_and_pot/ 10:17:30 that sounded more confident than i intended it to sound lol 10:18:10 yeah, pot sounds right 10:20:59 honestly, i wont be crying all that much about docker 10:23:24 as someone digging through gcc optimization flags and SIMD manuals and assembly tricks to optimize speed, i often found overuse of docker kinda blah 10:27:58 welcome agent314 & have fun 10:28:32 there's also the much newer podman tools, available in ports, these can run linux-flavoured containers, so long as they don't require pid1 / systemd specific featuers 10:29:06 but generally people use jails, often directly. podman will also run freebsd-native OCI containers but docs are sparse at present. 10:31:29 yeah can linux binaries run on freebsd if just use libc and it's the same cpu? 10:31:37 *if they just use 10:31:46 what is going on here 10:31:48 root@uk-myb-2:/usr/local/etc/bird.d # netstat -rn|grep 172.20.129.0/27 10:31:48 172.20.129.0/27 fe80::566:11%wg.surgebytes UG wg.surgebyte 10:31:48 root@uk-myb-2:/usr/local/etc/bird.d # ping 172.20.129.1 10:31:48 PING 172.20.129.1 (172.20.129.1): 56 data bytes 10:31:48 ping: sendto: Network is unreachable 10:31:49 (why am i asking i could just go try) 10:31:49 92 bytes from 172.23.76.2: Destination Host Unreachable 10:31:56 (172.23.76.2 is the local host) 10:32:33 try traceroute 10:32:51 root@uk-myb-2:/usr/local/etc/bird.d # traceroute -I 172.20.129.1 10:32:51 traceroute to 172.20.129.1 (172.20.129.1), 64 hops max, 48 byte packets 10:32:51 traceroute: sendto: Network is unreachable 10:32:51 1 traceroute: wrote 172.20.129.1 48 chars, ret=-1 10:32:52 uk-myb-2.le-fay.dn42 (172.23.76.2) 0.391 ms !Htraceroute: sendto: Network is unreachable 10:33:44 agent314: yes, https://docs.freebsd.org/en/books/handbook/linuxemu/ typically its `service linux onestart && pkg install linux_base-rl9` but sometimes you need to find a few other missing libraries, a little trial and error 10:34:00 172.16.0.0/12 is a private network afaik? 10:34:11 are you trying to ping someone in your own network? 10:34:39 does anything else ping? 10:34:45 it's RFC1918 space, it is not my own network, it's a network received from BGP over Wireguard 10:35:06 oh right you're over wireguard 10:35:07 ivy: is there a more specific route maybe? 10:35:20 dch: nope 10:35:25 and yes weird localhost is unreachable 10:35:29 that is very weird 10:35:35 i'm rebooting to make sure it's not something weird thing about adding the route before the address... 10:35:56 https://wiki.dn42.us/home is pretty neat, if I have more free time I would join up too 10:36:13 is there a firewall issue? 10:36:19 ivy: but its great you will have it all figured out soon and then I can piggy-back on your notes 10:36:21 good idea ivy 10:36:28 agent314: i don't think so, tcpdump shows nothing on pflog0 10:36:38 or at least restart network service 10:37:08 today I am trying to figure out why my server just sends TCP RST to the load balancer, instead of passing it to the application 10:37:13 which is definitely running 10:37:15 ah wait i have an idea 10:37:30 [76355] sonewconn: pcb 0xfffff803c0fda540 (0.0.0.0:4000 (proto 6)): Listen queue overflow: 193 already in queue awaiting acceptance (6 occurrences), euid 1002, rgid 1002, jail 0 10:39:28 well i thought it was this: pass out from (self) to fd00::/8 10:39:40 but changing that to include 172.16.0.0/12 didn't help 10:40:03 and all 'block' rules also have 'log' 10:43:57 oh dear lawd im getting hammered from 125.132.34.65 with ssh logins here 10:44:51 i almost feel like setting up a honeypot 10:47:36 day after i setup an ssh honeypot on linode (i forgot what it was exactly) linode decided to hit me with like an abuse ticket or something 10:49:23 ivy: have you seen anything relevant in /var/log/daemon.log ethcon.log or another log or just dmesg? 10:51:14 (i'll stop pretending like i know anything about freebsd now and go rant about scriptkiddies to #networking) 10:52:26 agent314: blocklistd / blacklistd is in base, works very nicely for these things. fail2ban is in ports. 10:54:20 this probably isn't ideal but i'm not really sure what it means 10:54:21 Mar 15 10:53:07 uk-myb-2 bird[60388]: nl-myb-1: Invalid NEXT_HOP attribute - neighbor address fd5b:a83:b06b:500::1 10:54:22 Mar 15 10:53:07 uk-myb-2 bird[60388]: nl-myb-1: Invalid route 172.20.24.0/24 withdrawn 10:54:43 that's not the affected route, though 10:55:34 okay, wait, it just magically started working 10:55:42 fc00:: is a private net range, is that being intentionally excluded? 10:56:07 ivy: cool, I guess. hope you figure out what the flakey bit is caused by 10:56:24 ah, that's because the peer i was receiving the route from shut down... 10:56:35 now it's going via another interface 10:57:19 traceroute to 172.20.129.1 (172.20.129.1), 64 hops max, 48 byte packets 10:57:19 1 nl-myb-1.le-fay.dn42 (172.23.76.6) 5.964 ms 5.854 ms 5.791 ms 10:57:19 2 fr1.edge.kioubit.dn42 (172.20.14.39) 13.736 ms 19.244 ms 18.712 ms 10:57:19 3 fr-rbx1.burble.dn42 (172.20.129.189) 14.308 ms 14.057 ms 14.603 ms 10:57:19 4 de-fra1.burble.dn42 (172.20.129.169) 26.338 ms 26.427 ms 26.671 ms 10:57:20 5 ns1.burble.dn42 (172.20.129.1) 27.003 ms 28.709 ms 26.612 ms 10:57:24 such dn42 11:23:12 ah, found the problem. Wireguard AllowedIPs was wrong 11:25:08 oh yeah i found wireguard to be harder than openvpn 11:25:52 what is this dn42 thing i'm curious now 11:26:02 (it's a rhetorical question) 11:26:22 https://dn42.us/ - it's basically a VPN-based overlay network on top of the Internet using BGP over Wireguard/OpenVPN/IPsec 11:27:05 anything that even acknowledges the existence of BGP gets an immediate interest from me 11:28:28 does it still use IP? 11:28:37 ipv4/ipv6, yes 11:29:09 oh ok so it's beginning to deviate somewhere around l3? 11:29:33 i'm not sure what you mean 11:30:14 osi layer 11:30:46 i know what L3 means, but DN42 doesn't "deviate", it's based on standard protocols 11:31:23 sorry it just said "Since dn42 is very similar to the Internet," 11:32:19 which made me think it's something like fideonet 11:32:21 *fidonet 11:32:55 no, it's more like the internet on top of the internet 11:33:16 it's all the same protocols (ip, bgp, ospf/isis/whatever you want to use for igp), just running over vpn tunnels instead of fibres 11:33:41 or meshtastic 11:33:50 oh makes sense 11:34:04 it sounds more like I2P 11:34:37 * agent314 needs to read more of the web-page then i'll come back with something less idiotic to say 11:36:47 i think I2P is a new, separate protocol? so not really 11:39:05 it now makes sense why you were pinging that 172.x.x.x ip and you yourself were on 172.x.x.x 11:40:00 it seems like main IP subnet (but not the only subnet) according to wiki is 172.20.0.0/14 11:40:51 yes, but they also interconnect with some similar networks like freifunk and ChaosVPN that live in 10.0.0.0/8 11:41:38 i just renumbered my wifi network from 172.16.0.0/12 to 198.18.0.0/15 to avoid conflicts :-) 11:41:51 yeah ive heard of freifunk 11:42:13 my openwrt router had something from freifunk somewhere in it 11:47:20 so I think the erlang runtime 28.0rc1 has a socket leak or something like that 11:47:27 not looking forwards to tracking this down 11:47:48 is https://wiki.dn42.us the official "canon" on dn42? 11:48:19 dch: which is why real programmers code in APL 11:48:34 once they remember all its symbols 11:48:36 ;-) "for improved readability" 11:48:44 *some of its symbols 11:48:59 *three of its symbols 11:49:13 :-) 11:57:44 So uh. Any idea why `service pf reload` would take ~75 seconds? (almost exactly 75 seconds each time, actually --- +/- 1 second, typically) 11:58:29 (which makes me suspect it's waiting for something, and then hitting some sort of a timeout) 12:03:12 DarkUranium: DNS? 12:03:55 I don't *directly* use anything DNS-related in there, but I am using Podman, and that has its own tables. 12:04:19 (IOW, it's all IPs and interface names) 12:04:54 I just tried commenting out everything Podman-related, and it's still taking a while. Hm. 12:25:30 DarkUranium: dtrace 12:28:13 I'm not used to dtrace, but you did remind me that truss is a thing, ha. 12:28:38 Looks like there is 75 seconds of `ioctl(3,DIOCIGETIFACES,0x324ab144e9d0) = 0 (0x0)` going on, in a rapid (~11ms between calls) loop. 12:36:34 gt, ivy: (I've added the `time` for good measure, since truss is following multiple forked processes --- and thus the runtime is off): http://vpaste.net/tzZ6s 12:36:59 I'm not sure what to make of it. Why would it run ~10000 of the same ioctl over ~74s? 12:38:22 Once it's reloaded, pf runs 100% fine (at least as far as I can tell) 12:38:35 DarkUranium: how long does a normal `ifconfig` take? and how many interfaces do you have? 12:40:07 dch: I've quite a lot of interfaces, including (for some inexplicable reason) duplicated `eth0`s and whatnot --- I'm guessing related to podman's vnet stuff, maybe. 12:40:16 But ifconfig takes 0.00 real/user/sys 12:40:18 I.e. immediate. 12:40:29 define "quite a lot" perhaps ... 12:40:33 Lemme grep it. 12:40:35 like 50? 100? more ? 12:40:45 9. 12:40:55 ok so not a lot then ;-) 12:40:56 And 17×vnet* 12:40:59 Heh, fair. 12:41:07 I mean, it's a lot for me --- I wasn't expecting more than 1 interface with the same name :P 12:41:21 FTR, my external IF is not eth0, which is why I suspect it's vnet-related. 12:41:39 (also, it's always listed just after an vnet*) 12:41:46 you will never have an interface called ethN on freebsd 12:41:47 My external is ext0, renamed from igb0. 12:41:53 Sounds like vnet-related, then. 12:41:58 (unless you manually rename it...) 12:42:08 brb, bio 12:42:37 oh, podman, who knows 12:42:45 maybe it does that to be more like linux 12:42:56 I have podman and it doesnt rename stuff 12:43:32 9 ifaces here too, just on my desktop 12:43:36 without even trying 12:43:40 no vnet tho 12:44:30 Weird. 12:44:34 dch: which podman version? 12:44:41 I'm on 5.2.5 12:45:02 (also, re, in case you haven't guessed) 12:45:02 5.3.2 here, latest wot dfr@ put in ports 12:45:46 I need to try that one, 5.2.5 had a nasty bug with --remote (I use --remote for my Linux thingies) 12:45:48 DarkUranium: so `service pf reload` does actually 2 things 12:46:00 you can time these independently 12:46:07 `pfctl -n /etc/pf.conf` 12:46:23 and append any $pf_flags you might have set in rc.conf 12:46:35 I'm expecting that to be quick, it just parses the rules, not loading them 12:47:01 -nf, you mean? 12:47:07 Yeah, 0.00 12:47:08 derp yes sorry 12:47:24 and we can run the other one in the foreground, maybe the timing of output is interesting 12:47:25 OH RIGHT 12:47:27 I forgot! 12:47:35 I tried this yesterday, and it's relevant. 12:47:53 `pfctl -vvef /etc/pf.conf` 12:47:55 Even if I put a single rule in some random file, and do `pfctl -f /tmp/single-rule`, it'll take the same amount of time. 12:48:08 oh that *is* curious 12:48:16 Mind, that's without a flush first. 12:48:24 Feels very relevant, but I did this yesterday, so I completely forgot by today xD 12:48:30 reload doesn't flush, so thats fine 12:48:57 i am very curious how you ended up with multiple interfaces all called "eth0", something seems very wrong there 12:49:09 ivy: so am I :D 12:49:15 a) because freebsd will never create such interfaces, and b) because two interfaces with the same name does not seem right 12:49:18 Maybe I should just reboot the server and see if podman fixes it. 12:49:20 maybe pastebin your `ifconfig` 12:49:41 Yeah, b) is especially weird to me. Q. 12:49:53 If I have the same interface in two different vnets, e.g. eth0.1 / eth0.2 12:50:03 Will that show up as eth0 twice in ifconfig, or will it actually show eth0.* ? 12:50:04 do you mean vlans 12:50:07 Bah. Yes. 12:50:09 Sorry. 12:50:27 those will show up as eth0.1 and eth0.2 in ifconfig, they're separate interfaces from the kernel's point of view 12:54:30 Weird then. Hm. 12:57:20 dch: my ifconfig (I've replaced my real IP with 100.100.100.*, I hope that's okay): http://vpaste.net/BdSH1 12:59:52 Though OTOH, it's pretty easy to get anyway <_< 13:00:51 ivy: `pfctl -vvef ...` --- I've added timestamps to be able to better log where the delay is: http://vpaste.net/va8m8 13:42:30 so to go from `ALTQ related functions disabled` to `[2025-03-15T12:55:32,126035591+00:00] warning: macro 'ext_ip_a' not used` takes basically all the time 13:43:52 when DU comes back, ask them to remove the unused macro perhaps 13:44:10 it doesnt look like a very long ruleset 13:44:40 and anyway reloading with a single ruleset suggests this is nothing to do with the rules themselves 13:59:38 agent314: dn42 is a BGP based overlay network. basically its members run their own AS which is *NOT* connected to any BGP speaker on the "real" internet. any kind of IP capable link works from vpn tunnels to long range radio links to carrier pidgeons (if you adjust the bgp timings :-P) 13:59:49 its a great place to learn about dynamic routing protocols 14:00:17 and can be useful to interconnect hackerspaces or makerspaces with their members or other similar locations 14:00:49 think of it as dozens (or 100s) of interconnected home labs etc. 14:01:02 i want to see people actually using birds 14:01:24 you'll not just learn BGP, OSPF, but also do deal with other operators and their fuck ups 14:01:56 the ip over avian carrier was a reference to an old april fools day rfc 14:02:15 if you want to play multiplayer game but don't want fps nor rpg 14:02:19 so you do this 14:02:20 :p 14:12:42 crest: but you can avoid having to learn OSPF by deploying IS-IS instead 14:13:03 then you get to learn about freebsd layer 2 tunneling solutions 14:13:07 spoiler: there aren't any 14:13:21 (ok, there's vxlan) 14:31:34 crest: i wonder how dn42 works 14:32:41 radhitya: what do you wonder specifically? 14:33:28 it's basically just BGP over Wireguard tunnels 14:33:35 dn42[a] is a decentralized peer-to-peer network built using VPNs and software/hardware BGP routers.[1][2][3][4] 14:33:37 (some people use OpenVPN or IPsec+GRE...) 14:33:47 oh yeah, i understand now 15:25:34 Good afternoon. Is it possible to add a vlan interface to a jail without a vnet? thanks 15:43:53 sukamu: you can add ip{4,6} address to the jail and you don't need any vnet for it 16:01:23 How can I address this? I have the line `php_fpm_enable="YES"` in my rc.conf file. Yet, service php-fpm start gives "php-fpm does not exist in /etc/rc.d or the local startup directories (/usr/local/etc/rc.d), or is not executable" 16:01:43 montxero: service php_fpm start 16:02:34 vkarlsen: That doesn't work 16:02:52 montxero: What happens when you try? 16:03:21 vkarlsen: Sorry! it worked! 16:03:32 It was changed from php-fpm to php_fpm a while ago :) 16:03:43 service php_fpm start worked. Thanks 16:03:47 silly me 16:04:04 Thanks vkarlsen 16:04:55 I remember it well because I updated php on a prod web server without reading the updating info. My face melted. 17:14:45 ivy: what address do you expect to be used as a source instead of 0.0.0.0 ? 17:53:43 Is there any way to redirect all internet traffic via ssh. I run this command ssh -D .... I managed to curl via socks5 , but I want all traffic pass via ssh 17:58:17 holopeinen: sure, see ssh(1) -w option 19:15:43 ivy: there 1000s of ways to use netgraph for layer 2 encap 19:15:54 then there is etherip (add a gif interface to a bridge) 19:45:48 is there an easy way to display which drives are under what controllers? i'm trying to figure out the best way to spread out the drives in my pool 19:48:55 rtprio, I got help solving that problem in this channel once, and I think I can dig it out from my shell history 19:49:00 it was a little convoluted 19:49:44 that would be great, thanks 19:53:56 rtprio, actually "dmesg | grep -i 'ahci'" does most of the work... the only thing which was convoluted is matching adaX to physical drives 19:55:16 for example, this gives me the following 19:55:21 ahci0: 19:55:33 ahcich0: at channel 0 on ahci0 19:55:47 ada0 at ahcich0 bus 0 scbus0 target 0 lun 0 19:56:04 so I can deduce that ada0 is attached to the Marvell controller card 19:56:08 thre's all sorts of weird structures in dmesg, like xml and dot files for geom but a tree format for some of these would be nice 19:56:55 futune_: https://pastebin.com/PRwbEXmn 19:59:36 rtprio, what is pmp0? I don't recognize this driver 20:00:49 anyway it seems that ada0, ada1, ada8, ada9 are on ahcich0 which belongs to ASMedia ASM1061 20:02:26 ada2 until ada7 are on various channels which belong to Intel ESB2 20:02:33 does that look reasonable? 20:05:42 devinfo? 20:07:00 e.g. devinfo -p ahcich0 20:20:47 crest, can I deduce from this which drives are attached to the controller? if so I don't understand 20:21:08 if i try that I get ahcich0 ahci0 pci4 pcib4 pci0 pcib0 acpi0 nexus0 20:21:41 pciconf -lv ahci0 ? 20:22:47 camcontrol devlist? 20:22:50 camcontrol identify ada0 20:23:03 sysctl kern.disks? 20:23:13 geom disk list / geom disk status? 20:23:25 each tells you something slightly different 20:23:49 devinfo / pciconf looks at the (system) bus attachment 20:24:06 camcontrol is the scsi (like) storage subsystem 20:25:10 geom is a (block) storage transformation layer that handles things like partition tables, multi pathing, raid, encryption, and optionally even its own network storage protocol 20:25:29 its what sits between the device drivers and the file systems 20:26:09 so it consumes complete disks, and provides partitions, labels, raid, decryption, etc. to the file systems 20:30:04 DarkUranium: did you ever solve your problem? 20:30:18 gt: the reload one? No. 20:31:20 DarkUranium: i can't tell you exactly what it is, but having a bunch of interfaces with the exact same name seems very fishy 20:31:53 gt: I've rebooted the system, and those IFs are gone (though I did notice they all belonged to jails, anyway) 20:32:10 pf reload is now instantanoues, though granted, the podman thingies aren't running, so 20:32:31 oh ok so it was probabaly that then 20:32:43 i was going to suggest that you removed them 20:33:28 crest, none of your suggestions give the mapping from disks to controllers 20:34:01 it's an educated guess, but i'm pretty sure most programs and programmers are expecting interface names to be unique, so having a bunch with the same name can definitely lead to unexpected behaviors 20:34:23 tbh i didn't even know you could have multiple interfaces with the same name 23:52:14 moving files from one zpool to another, would it probaby be faster to zfs send-recv or rsync?