-
SponiX
phlux: I'm bored, so if you have any more basic questions let me know
-
AmyMalik
can we show our new first officer the magic of the printer animal?
-
phlux
SponiX: still bored :P
-
phlux
coming from Linux, I'm used to either using Docker or a Kubernetes environment. Looks like we use jails in FreeBSD?
-
ivy
phlux: jails are lightweight virtualisation, something like a combination of LXC and cgroups/namespaces. you can build Docker-like functionality on top of jails, i think most people use podman for that, which can run OCI container images
-
phlux
ivy: ah, podman I'm familiar with. Thanks.
-
dch
hm does dummynet require either of ipfw or ipf ? I plan to find out the traditional way by breaking my internet connection
-
[tj]
no you can use it with pf
-
[tj]
dummynet doesn't work with ipf
-
dch
thanks. I am removing the FreeBSD-ipf / FreeBSD-ipfw packages
-
ivy
dch: you might find it difficult to use dummynet without /sbin/dnctl, which is in FreeBSD-ipfw
-
dch
ivy: ahaha this is the secret lore I am missing :-)
-
[tj]
huh that is the wrong package for it
-
ivy
yes, we should probably put that somewhere else, since dummynet hasn't been specific to ipfw for a while
-
[tj]
I've never used dnctl, I just assumed it was a pf interface, but it seems not
-
» dch adds the firewalls back to my "essentials" list
-
ivy
but it turns out...
-
ivy
95503 -r-xr-xr-x 2 root wheel 200520 Oct 2 04:25 /sbin/dnctl*
-
ivy
95503 -r-xr-xr-x 2 root wheel 200520 Oct 2 04:25 /sbin/ipfw*
-
ivy
now what
-
dch
getting rid of these 30 surplus packages turns my freebsd upgrades into a 300m download. I like this.
-
phlux
wee...that was fun...messing with jails and lost my network :)
-
dch
phlux: its a rite of passage. I do it at least once a month.
-
phlux
Hahahaha
-
phlux
I must admit, I kind of like the idea of native FreeBSD jails vs emulated linux podman containers
-
phlux
This is a good learning experience
-
dch
phlux: the podman jails are not emulated linux, its a real native freebsd jail, running freebsd binaries inside.
-
phlux
FreeBSD was my introduction to anything not Microsoft back in the 4.x days...I believe the last time I used it, 4.3 was the current -RELEASE, so I've got a bit to learn.
-
dch
so you can do `jexec $id` and all the usual things
-
dch
phlux: welcome back :)
-
dch
I started off with 9.3
-
phlux
dch: I see, well, it looked like I was going to have to run emulated linux for the traefik docker image since they don't have a FreeBSD image available.
-
phlux
dch: Thanks! My son got me back, actually. He saved up enough for 6 months of a dedicated server, so I met him halfway and bought him another 6 months...asked him what OS he wanted, and he said he wanted to learn BSD, so here we are.
-
dch
net/traefik is in ports, is that not sufficient ?
-
dch
go kids!
-
phlux
I've been in Linux (mainly RHEL hell) for my professional endeavors, so this will be fun.
-
phlux
I wonder when the move was made from pkg_add, etc to just `pkg`
-
phlux
Ah, 2014
-
paulf
most of the time there's not that much of a big difference
-
paulf
pkg works much like dnf
-
paulf
service is a bit like systemctl without systemd ;-)
-
paulf
finding what tweaks you need in rc.conf is usually the hardest thing
-
Macer
-
Macer
hopefully that card has a jbod mode. i think it does.
-
Macer
I want to use my current proxmox server as a fbsd server and scale up the storage
-
Retrofan
Hi
-
CrtxReavr
phlux, when it comes to finding the right rc.conf syntax, for system stuff, look at /etc/defaults/rc.conf (but never edit it - put your changes in /etc/rc.conf).
-
CrtxReavr
phlux, and for rc.conf changes for ports/packages, run '/usr/local/etc/rc.d/whatevs rcvar')
-
CrtxReavr
Or just read the script.
-
Hund
How can I activate something like i3lock when closing the lid on my Thinkpad? I can't figure it out. :/
-
TommyC
acpi?
-
roccosano
some1 knows how to create deterministic fat32's? i'm going crazy..
-
rtprio
deterministic?
-
rtprio
what kind does /sbin/newfs_msdos make?
-
roccosano
nondeterministic
-
roccosano
idk if it's possible with newfs_msdos i've tried several things in the recent 2 days i'm rly about to crashout :@
-
strssndktn
roccosano: you specify a timestamp?
-
roccosano
strssndktn Wow thank you! You are so smart! i spent 2 days on this but i would have never thought about timestamps.
-
rtprio
oh
-
CrtxReavr
rtprio, it has a manpage.
-
divlamir
full of smart people around, there's sth interesting to learn every day :)
-
divlamir
never had the usecase to recreate the eact same volume id, but noted... just in case
-
divlamir
what about the FAT label btw, how can I change it afterwards?
-
rtprio
CrtxReavr: but it doesn't get into the details of a volume label vs id and why they're different
-
CrtxReavr
I'm not sure how you'd change the label after creation, with only FreeBSD tools. .
-
CrtxReavr
I'm sure it's easy with other OSes.
-
CrtxReavr
-
CrtxReavr
That's not FreeBSD specific, but the the green-checked answer, down about the middle of the page, is probably the easiest.
-
CrtxReavr
zi, who pissed in your fruitloops?
-
zi
all good today
-
zi
(:
-
CrtxReavr
And yesterday?
-
Ltning
Between yesterday and today, stable/15 wants to rebuild llvm. Is that expected, I wonder?
-
zi
Ltning: if you arent rebuilding at least 2 copies of llvm, rust and some erlangs every few days, something is prolly broken
-
zi
at least, that's my takeaway
-
Ltning
:D
-
Ltning
No rust in base yet, afaik? I think that discussion didn't quite conclude yet...
-
zi
mostly joking
-
Ltning
Same
-
zi
go us
-
zi
haha
-
wavefunction
I absolutely understand how there's a pile of memory-related CVEs and rust "should" help that, but I question how much we can add rust to existing bases compared to... constraining what we allow in C.
-
zwr
rust static and runtime checking are far more strict than what is possible in C. statistics say most vulnerabilities are in new code though, so rewriting an existing codebase in rust is a bad idea
-
zwr
for new projects or for code that is constantly modified it's worth considering
-
zwr
also, if you try to make C runtime checking more strict, you'll just end up becoming slower than rust since it's also designed to prove at compile-time that some checks are not needed and elide them, while adding the same checks to C as an afterthought definitely won't be as easy to optimize away
-
phlux
I've accomplished a lot today with FreeBSD jails, methinks
-
phlux
Set up a jail for traefik, set up individual jails for different web servers, ingressed them via traefik, set up gitea, and set up vaultwarden
-
phlux
Containers!
-
c3p1
hi. i may need your help. i had to rollback (my whole root dataset and all its children) to a snapshot i made before updating my freebsd with freebsd-update fetch / freebsd-update install, but after the rollback, freebsd-update fetch is telling me that there is no update available.
-
zi
c3p1: what does freebsd-version -kru say?
-
rtprio
phlux what drew you to traefik?
-
c3p1
14.3-RELEASE-p3 / 14.3-RELEASE-p3 / 14.3-RELEASE-p4
-
phlux
rtprio: just used to it from Kubernetes deployments
-
c3p1
zi : i dont know how that's possible
-
zi
c3p1: im guessing you didnt switch BEs?
-
c3p1
zi : BEs ?
-
phlux
boot env iirc
-
zi
^^
-
c3p1
ah, right
-
phlux
bectl list
-
zi
-
c3p1
-
kerneldove_
phlux, see any noticable perf overhead to putting services into jails vs running them directly in the host?
-
c3p1
zi / phlux : my system is working correctly. If I wait for the next patch, will things get back to normal?
-
c3p1
zi : okay, i switched to the BE created before the update, im now able to reupdate my system :)
-
c3p1
okay, thank you very much zi / phlux, you saved my evening ^^