-
polarian
hmmm
-
polarian
-
polarian
for some reason pf is not working within my jail?
-
polarian
it works within another one of my jails
-
polarian
this is really weird :/
-
polarian
I am going to reinstall the jail and then see if I can reproduce this
-
Zerock
polarian: different devfs ruleset on the other jail?
-
polarian
no?
-
Zerock
well the error there definitely looks like /dev/pf is hidden by the ruleset
-
polarian
you dont need to expose /dev/pf to the jail
-
polarian
my other jail doesn't expose it
-
polarian
and it works just fine
-
Zerock
I have "add path 'bpf* unhide" in my jail ruleset and pf works
-
Zerock
the only other problem I remember having with pf in a jail is that the host hadn't loaded the kernel module yet, but since you say you have another jail that works, then I suspect that's not the problem
-
Zerock
er, there should be a close quote around bpf* in that line above
-
polarian
Zerock: so it is a devfs issue but its confusing
-
polarian
so a blank devfs I believe means unhide everything and works
-
Zerock
I think that's right
-
divlamir
For pf to work in a vnet jail, you'd need "add path pf unhide"
-
polarian
divlamir: but for some reason I didnt with my other devfs ruleset
-
polarian
and it works
-
divlamir
can you paste that ruleset?
-
polarian
wait I am fucking about with tihs
-
Macer
whats the thing to use nowadays for jail and vm management for freebsd? i tried out bastille and cbsd but something about them.. i was hoping there was an ncurses based management tool
-
ek
Macer: For jails, I use bhyve-vm. For jails, I use iocage (although, I'm not sure how much longer that'll be around.)
-
ek
Both are command-line management tools.
-
Macer
You mean for VMs you use bhyve-vm right?
-
Macer
I think iocage isn’t maintained anymore.
-
futune
Still using ezjail... I considered changing to something else, but I'm worried that what I pick will just become deprecated too...
-
Macer
Bastille seemed like one of the better ones I tested out. Pretty straightforward for the most part. I think clonos is the only web manager
-
Macer
futune: I wondered the same thing.
-
Macer
iocage was typically the go to. I mean you can probably just use the jail command or just script / alias it which I think is what iocage (and most of them) do.
-
Macer
I think the jail command can get pretty convoluted. Not sure about bhyve but I seldom run VMs.
-
futune
I would use the base jail commands, but I'm really liking thin jails and it seems like there would be a lot of overhead to consider to use thin jails with base alone
-
Macer
I’ve been considering migrating off proxmox to fbsd but I think I may have become too institutionalized .
-
futune
for what it's worth cbsd was top of my list when I was considering a migration of jail management
-
futune
you mentioned you tried it? How did it fall short?
-
ek
Whoopsie-doodle! Yes, that's what I meant. Sorry.
-
Macer
cbsd is nice too but it’s kind of overkill going through it. Maybe if I could get rid of the extras like xen and strip it down to just jails and bhyve. There’s probably a really sane way to do that but I did t give it much time.
-
ek
Macer: I migrated from Proxmox (from ESXi before that) to vm-byhve and it really wasn't much fuss. Depending on what VM's you run, it's pretty straight forward and easy.
-
Remilia
inscrutable stuff: server load averages
i.koumakan.jp/2025-09-27/1759004591.png where on Aug 14th I upgraded PHP from 8.4.10 to 8.4.12, with nothing in change logs suggesting anything related
-
Remilia
I will never understand PHP
-
Remilia
(MediaWiki was spending hundreds of milliseconds checking if a given thumbnail file exists, and somehow trashed ZFS ARC)
-
LxGHTNxNG
PHP is strange
-
rtj
I use mostly thick jail's with the included managment tools.
-
rtj
I'm right handed too.
-
LxGHTNxNG
?
-
jaredj
macer: i migrated from iocage to jail.conf pretty easily
-
jaredj
the thin jails were a bit confusing though. snapshot and clone skullduggery
-
jaredj
i took to using OccamBSD to make my jails smaller
-
psychonate
I have a Thinkpad E595, and setxkbmap was showing my keyboard model as generic "pc105". Most of my function keys do nothing. I tried the "thinkpad," "thinkpad60", and "thinkpadz60" models, but still no luck with those extra function keys. I think those models are too much older than this one. Is there a quick and easy tool to, say, copy the pc105 config and add some extra keys? Just checking for an
-
psychonate
easy option before I go down a rabbit hole.
-
jaredj
a tool? for xkb?
-
jaredj
if there is an answer for you, i'd love to know it too :)
-
psychonate
I haven't looked at how xkb really works yet and the format of the files it looks at. That's what I meant by "go down a rabbit hole." But based on your answer, it sounds like I will be going down that hole.
-
vkarlsen
It never occured to me to try and get those extra function keys working. I was just happy they did nothing in the event I accidentally pressed any of them.
-
psychonate
I like to configure one of the function keys as a quick lock screen button.
-
psychonate
I guess I could use some other key combo instead, but... I don't want to :)
-
vkarlsen
Could you capture the keycode with xev and use, say, xmodmap to map it?
-
psychonate
I think xkb will reset anything set with xmodmap, but I haven't had to mess with this much before, so I'm not sure.
-
psychonate
When I used 'xev' with a function key that worked, I see a keycode when I press my "Fn" key, then another keycode when I also press the specific function key. But for this function key that doesn't work, 'xev' shows the keycode when I press "Fn" but does not show a keycode when I subsequently also press this other function key.
-
vkarlsen
That's a non-starter, then
-
psychonate
I think this function key may have been working with Gentoo, which is still on my other laptop drive. I may be able to boot to it and check and see if there are some xkb files I can copy to this FreeBSD install.
-
psychonate
But given't that 'xev' didn't even show another key code, I'm not sure that will even work. I don't know enough about xkb quite yet. Slowly reading through docs.