-
osin
hi, guys, how long can an image be written using dd? Because my writing takes a long time compared to linux.
-
osin
oops, or should I have asked that in #freebsd-ops? Sorry
-
V_PauAmma_V
No, that channel is for requesting channel operatoes/moderators attention.
-
V_PauAmma_V
s/operatoes/operators/
-
V_PauAmma_V
What dd options did you use? Specifically, what blocl size?
-
V_PauAmma_V
s/blocl/block/
-
osin
I used exactly: dd if=FreeBSD-13.1-RELEASE-amd64-memstick.img of=/dev/da0 bs=1M conv=sync
-
V_PauAmma_V
osin, that command looks OK to me. If that's a USB stick, your USB port and the stick itself may be limiting factors, unless the speed you're getting with Linux is on the same computer and USB port.
-
V_PauAmma_V
(Note, however, that 13.1 no longer gets security updates. If that matters to you, use either 13.5 or 14.3.)
-
ketas
yes opera toes!
-
ketas
i wonder what errors it reports in syslog
-
ketas
maybe
-
ketas
and you can add speed stats with status=progress
-
ketas
maybe write it full of zeros first
-
ketas
then comes the question what is it, how old, what port
-
ivy
what is the actual question? "how long can an image be written?" doesn't seem to make sense
-
ketas
hopefully that won't happen
-
ketas
over usb2 it goes like 20m/s
-
V_PauAmma_V
I took it to mean "how long can writing an image take?"
-
ivy
V_PauAmma_V: yeah, but that's unanswerable
-
ivy
it depends entirely on the size of the image and the speed of the storage device
-
V_PauAmma_V
See also, "Because my writing takes a long time compared to linux."
-
ketas
so 37-40s
-
ivy
okay, but unless OP just wants to have a rant about this, there is no actual question there
-
ketas
maybe it has weird speeds
-
V_PauAmma_V
I think there is one implied, in addition to the semi-explicit one. Namely, "is this normal, or am I making a mistake somewhere?"
-
» V_PauAmma_V <--- former tech support.
-
mjp
takes as long as it takes, if its a rare task so probably not worth wasting much time on it
-
rwp
I find the quality of the storage device is also critical to the time it takes to write it.
-
mason
dmesg can be your friend for things that are inexplicably hanging
-
mason
osin: ^
-
ketas
i bet that usb flash just shat itself
-
ketas
even finding the usb 1.1 hub won't do this
-
kerneldove_
what's the most efficient way to output the last 10 lines from /var/log/messages?
-
kerneldove_
oh tail duh
-
osin
ivy: sorry, I needed to be more clear.
-
nwe
how well will FreeBSD work with ThinkPad X1 Carbon G12/G13 I wondering if I should buy a new laptop and run FreeBSD to replace my macbook.
-
hugohagogo
nwe: actualy, my Thinkpad is a X270 i7 16Gb ram 1Tb SSD, 100% FreeBSD 14.3 and 15 Friendly, but my next will be a X1 Carbon G13 32Gb ram + 1Tb to replace my M1PRO
-
nwe
hugohagogo: =)
-
[tj]
nwe: probably be ok, it is quite new so some stuff might be on the bleeding edge
-
[tj]
hitch would be if the intel wifi is a be model
-
nwe
but I will ensure everything is working with it like,wifi,sound,webcam,suspend/resume etc :) so I dont throw 2328 usd, and the computer will be laying on the shelf.
-
[tj]
assuming the webcam is uvc it should be fine, if it is that new thing then there is no support I'm aware of
-
[tj]
everything else should be supported or close to it
-
nwe
[tj]: oki!
-
nwe
thanks for answering :)
-
[tj]
good luck, please let us know how support actually is
-
hugohagogo
nwe: Intel WIFI AX210, here, with new drivers (iwx and iwlwifi), fully functional with VHT access points
-
remiliascarlet
nwe: ThinkPads in general are very BSD friendly, except of rthose that use an Nvidia GPU, but that has more to do with the GPU than with the laptop.
-
rtprio
i'm on x1 carbon g7? maybe? it's working pretty well except the fn keys
-
nwe
rtprio: doesnt fn keys working for you on your x1 carbon?
-
CrtxReavr
Fn keys are a hardware level thing.
-
zi
f'n keys indeed
-
CrtxReavr
I see what you did there.
-
ketas
yeah the f'n keys don't work
-
ketas
btw, anyone who uses 1-wire or dht sensors, what's the expected way configure gpios for them?
-
ketas
because right now it's about as hard as it could get
-
zi
phrasing!
-
zi
merry halloween
-
ketas
it goes through device tree onto which one should apply an overlay
-
ketas
that thing is not clear or easy either
-
ketas
the gpio pins are even fine, at least for this, have labels, etc
-
ketas
-
ketas
that's not good
-
ketas
but that way i could almost understand it
-
ketas
got it working without full understanding eh
-
zi
happy accident
-
ketas
unsure how many days i spent in src, manpages, in google... and funnily i found all the others trying the same thing
-
[tj]
-
ketas
someone was even bruteforcing bitmask for hint.gpioths.pins
-
ketas
[tj]: but that's the same?
-
[tj]
yeah, but isn't it the answer?
-
ketas
no
-
[tj]
my bad
-
ketas
right way of creating overlays is somewhere via fdt in src
-
ketas
imagine if changing ip or interface would be that hard
-
nerozero
hi there
-
ketas
meow
-
nerozero
I have a question regarding multiple gateway on freebsd, setfib and redirect response packets came from certain interface towards proper gate
-
nerozero
without running multiple instances with setfib xxx service ....
-
nerozero
is it possible to accomplish something like that ?
-
ketas
someone was asking for that just short time ago :p
-
nerozero
can I find logs ?
-
nerozero
was there any solution?
-
ketas
i guess setfib and pf routing options were they key
-
nerozero
I have logs starting from 8am
-
nerozero
nothing is there there
-
ketas
it was days ago :)
-
nerozero
false
-
ketas
so in order to send packet out somewhere you need to know where
-
ketas
so yeah
-
ketas
i recall sorts of hacks i did
-
ketas
if dest is fixed, you can add routes
-
nerozero
back in bsd ~6 I can recall I did it via ipfw forwards things
-
ketas
ipfw still exists
-
nerozero
but firewall was modified and in BSD 8 this method stops working
-
ketas
hmm
-
nerozero
ipfw2 ...
-
ketas
so you have service that youn need to access from both networks?
-
nerozero
common methodology I found is that to run services at different port and then use a port forwarding mambojambo
-
ketas
and reply goes to src?
-
nerozero
which I kinda dont like
-
nerozero
I would love to ...
-
ketas
i had to battle with it in openvpn
-
nerozero
I see a bad strategu to accomplish that but ...
-
ketas
still sucks i think
-
ketas
so, pf reply-to?
-
ketas
even that had issues
-
nerozero
I kinda IPFW guy, once I migrated to pf, but had a bad experience with GRE protocol ... back in that time pf doesn't seems to support it ...
-
nerozero
so I dropped it ,,
-
ketas
i mean lets says ip 1.2.3.4 comes from em1, but machine has fib 0 default route to 9.9.9.9 via em0
-
ketas
meh
-
ketas
i hate routings
-
nerozero
yeah ...
-
nerozero
BSD and routing and advanced firewall thing is hell to me as well
-
ketas
so how does the reply packet to dst 1.2.3.4 get out via correct if?
-
Koston
complex routing is cancer
-
ketas
isn't so complex even
-
Koston
it's like C++ namespaces, "we kinda fucked things up so we're gonna wrap the different shits and make one multi-shit"
-
ketas
just two nets
-
rtprio
nwe: that's correct. so no vol/brightness/etc
-
nerozero
-
» nerozero rubberduck effect - was looking for something similar for entire day...
-
» ketas makes rubber duck noises
-
ketas
but yeah that sucks
-
ketas
hmm what my current openvpn used hmm
-
nerozero
unfortunately I cannot afford deep dive into freebsd routing and firewall staff reading ... It will be nice to have similar config samples on BSD manpages
-
nerozero
nothing even remotely advanced is there ...
-
ketas
fun actually
-
ketas
as two uplinks is totally unknown
-
ketas
as if
-
ketas
pf rdr works i think
-
mzar
works excelletn
-
ketas
i could try it more
-
mzar
please don't hesitate to try PF
-
ketas
maybe nerozero is ipfw dude
-
ketas
i have used ipf before pf
-
ketas
and ipfw where ipf failed
-
ketas
damn, eh
-
mzar
yep, we all have this background
-
ketas
like how many firewalls you need in one machine :)
-
mzar
one
-
ketas
ipfw is closest to fbsd
-
ketas
it's a tight hug
-
ketas
as i get it
-
ketas
but with a hell of a syntax
-
ketas
ipf is somewhere in middle and then there's pf
-
ketas
clearer syntax less features
-
ketas
or different features
-
ketas
obsd examples won't work either :å
-
ketas
:p
-
mzar
Darren's work was removed from OpenBSD long time ago
-
ketas
i think some people told they use obsd for pf only but couldn't use it for anything else
-
ketas
darren?
-
mzar
so they won't help you
-
mzar
yep
-
mzar
weren't you following mailing lists and usenet back then ?
-
ketas
i can't find who he is, found two guys
-
ketas
well no
-
ketas
when, even?
-
ketas
and i don't think it's humanly possible to follow all
-
ketas
i think proper and easy multihome routing methods should be added somewhere
-
ketas
and also what about that ow/ths thing
-
ketas
i get reasons for why fdt is a thing
-
Koston
I used to read majority of fbsd mailing lists a few decades ago
-
Koston
and yes, IPFilter was removed from OpenBSD like 25 years ago now
-
ketas
but using fdt or it's overlays to tell volatile configuration data to driver is hard
-
Koston
I remember it very well since my back-then cow-orker was maintaining IPFilter for OpenBSD and he was rather peeved that it was just kicked out of OpenBSD without any warning
-
ketas
cow orker :p
-
Koston
I like FDT very much. makes things much simpler than some unholy complex mess of dynamic resource allocation gizmo designed and implemented by drunken lemurs at microsoft
-
ketas
did he have special pin needle for theo's ass?
-
Koston
the classic "plug 'n pray"
-
ketas
or how why
-
ketas
meh
-
Koston
embedded platforms have different issues though; namely, no standards and often poor or nonexistent documentation
-
ketas
oh the no std is fun indeed
-
rtprio
nerozero: /usr/share/examples/pf
-
ketas
fishing out correct gpio was somehow easier than finding way to put it somewhere
-
nerozero
rtprio, will look into it
-
nerozero
thanks a lot
-
nerozero
nothing special in there what I cannot implement in IPFW
-
mzar
nerozero: if you know IPFW syntax, you are used to it, not missing any feature, why would you switch to PF ?
-
nerozero
I dont, I thought there was an opportunity to implement multi-gateway things easier ...
-
ketas
but imagine if each time you need for change ip you need to get the machine readable address of nic you want based on human readable one, then translate your ip into special format it eats, the put the magical key and magical val into file, compile it into binary, then put it into said machine... i can imagine air would be thick of profanities
-
mzar
TBH I don't know how to do it in IPFW, but it's most likely doable
-
zip
I'm tooling around with putting copyparty in a jail... question is, where on the filesystem should I dump the contents of the tarball? /usr/local/share/copyparty? Should I build a package? Contribute a port?
-
nerozero
I see only one path - kinda DMZ on and natting into services listening on say 127.0.0.1 interface
-
nerozero
port forwarding with respect to fibs ...
-
ketas
zip: i put unknowns into subdirs under /root
-
nerozero
but IT IS TOO DAMN UGLY !
-
ketas
but that could be a port
-
mzar
nerozero: there are fib and setfib arguments for ipfw, this approach is probaly seamless when you seek for multi-gateway support scenario
-
zip
ketas: fair enough
-
nerozero
yes, you can use fibs in IPFW rules ...
-
nerozero
with nat things ...
-
mzar
AFAIR IPFW was always faster than PF, but haven't seen any recent benchmarks
-
nerozero
way faster
-
nerozero
especially natting things
-
nerozero
almost no implact on CPU for high loads
-
mzar
now, when we have content avaliable over ip6, nat is no longer bottlenek
-
mzar
bottleneck
-
ketas
it's fun how v6 has stalled
-
ketas
kind of
-
nanach1
my lame ISP doesn't support ipv6
-
nerozero
everyone hates it ( everyone around me )
-
ketas
i have native for >10y
-
ketas
but mobile don't do that yet
-
ketas
funnily it has hidden ip what runs volte iirc, that's v6
-
ketas
damnit
-
nerozero
ipv4 - 4 bytes - 32 bits, easy to see each byte... subnets ....
-
ketas
so i have used v6 since ~2004 and adoption rate is lower than v4
-
ketas
:)
-
ketas
so v4 went live 1983 and in 10 years it was like full swing already
-
ketas
and in 20y nobody even talked about migrating to v4
-
ketas
ipv6 went live, let's say 30y ago
-
rwp
On servers I never have any problems with IPv6. Cloud hosting rentals always work perfectly. (Mostly. Why do some vendors split IPv4 on one virtual interface and IPv6 on a separate virtual interface? No idea!)
-
ketas
maybe they have separate networks
-
ketas
which is fun
-
rwp
On all other systems though I continuously have problems with IPv6! My Nokia fiber modem at the house is quite buggy for IPv6 using SLAAC to assign addresses. It assigns multiple IPv6 addresses! And only one of them works. The others are off prefix and do not function. Impossible to just plug in a client and have working IPv6 networking with it. Buggy!
-
ketas
since when v6 was already swinging around pretty well, all clouds just started
-
rwp
If I manually assign IPv6 addresses to client devices behind the Nokia then they will work. But I have to make manual assignments to have them work.
-
rwp
This is just an example of why IPv6 is /still/ having problems becoming pervasive.
-
ketas
multi slaac eh?
-
ketas
it's device thing maybe
-
ketas
my phone took 3
-
ketas
unsure what google smoked
-
ketas
i didn't check if they privacy change too
-
stl
rwp: any chance you could tell me which Nokia modem that is? (model or ISP..)
-
ketas
wait, it announces wrong prefixes?
-
ketas
funnily it all could happen if...
-
ketas
as if nobody uses v6
-
aic
with god awful CGNAT people may started demanding ipv6 more
-
rwp
stl, It's a Nokia WiFi Gateway 3.
-
aic
may start*
-
rwp
-
ketas
no cgnat here yet
-
ketas
in mobile, yes
-
ketas
but yeah, no servers, no clients
-
ketas
offical introduction years of 4 and 6 are 1980 and 1995 actually
-
rwp
I don't really have a good way to debug at the protocol level to determine exactly where things go wrong but setting ifconfig_em0_ipv6="inet6 accept_rtadv" for example results in multiple inet6 addresses with the default one being out of prefix and not routing. But if I ping -S pick the other source addresses in prefix then they work. If I assign a working address statically then it works.
-
ketas
but at this pace last machines get v6 in >2100
-
rwp
Setting ifconfig_em0_ipv6="DHCP" results in a slightly better result in that it seems to randomly default to one of the working addresses in that case. But it all depends. And over time as the inet6 addresses change things phase from working to not working depending upon which default inet6 address is used for the outgoing source address.
-
rwp
That's why I blame the Nokia firmware as being buggy and the problem. That seems the most likely place for the problem to be existing. It does route if I set static IPv6 addresses and router.
-
ketas
can you get rid of it
-
ketas
but i'm more like how can v6 be still the nonserious plaything
-
ketas
-
rwp
Time has passed and our city's municipal fiber has switched to the next newer model of that fiber modem. If I complained I am sure they would start the debug by swapping me to the next version of the modem. Which I will probably do soon. I have simply been too busy to deal with it. And if I assign a static address then it works.
-
ketas
i have fiber bridge here
-
ketas
they supply a separate router which you can decline
-
rwp
I /feel/ that most of those IPv6 users in that graph are mobile phone users. Because mobile networks are running out and it is either CG-NAT or IPv6 and they control both ends so IPv6 is very common here.
-
ketas
next fiber also follows same path
-
CrtxReavr
rwp, when you say "out of prefix and not routing," what is the address in question? Does it start with a 2 or a 3?
-
ketas
if you order 2.5/2.5g they replace huawei with adtran
-
ketas
i recall when first ever actual routers went live in this isp, all sorts of problems appeared
-
rwp
CrtxReavr, For example using RA or DHCPv6 it will assign multiple IPv6 addresses 2605:b40:13a3:8c00:2e0:4cff:fe14:5d27/64 2605:b40:1516:a200:2e0:4cff:fe14:5d27/64 with the first one 2605:b40:13a3:8c00 being the default that will be selected for the outbound source address. But it will not route out. If I select the second address, and it is never the default one, then it will work.
-
ketas
tcpdump time
-
CrtxReavr
2605:b40:1516:a200:2e0:4cff:fe14:5d27/64
-
CrtxReavr
That one is your MAC-based EUI-64 address.
-
rwp
I have been there with tcpdump but I can't tcpdump the WAN side of the fiber modem.
-
CrtxReavr
IT's beeing assigned by stateless autoconfig.
-
CrtxReavr
The others are temporary IPs to be used as source addresses to obfucate your MAC address. . . at least across the router.
-
rwp
Yes. Agreed.
-
CrtxReavr
Um, actually. .I was looking a bit too fast.
-
rwp
Notice that 3rd and 4th quads differ.
-
ketas
and what isp thinks of this?
-
rwp
I haven't opened a support ticket. But have discussed this with other friends on the same municipal fiber. All of us have the same result. Which results in only IPv4 working for us. But I am the only one talking about trying to make IPv6 work. No one else cares.
-
ketas
so yeah, after all sorts of problems appeared with first gen router, isp was confused and one of their guys told but we like tested it in lab, we bittorrented using two machines
-
ketas
seems like production is hard
-
CrtxReavr
Thsoe are all SLAAC addresss, for for different prefixes. . . it's like your ISP is changing them too fast on you.
-
mzar
rwp: that's really sad story.... "No one else cares."
-
ketas
and they all run like absolute lowest bidder hw and sw
-
ketas
if they actually provide v6 too they should fix it :p
-
rwp
They have not run into something they can't do using only IPv4, they can stream Netflix, so they don't have any itch to scratch.
-
zip
I think what I've learned is I don't want to use copyparty
-
ketas
copyparty seems funthing
-
ketas
but what you actually want?
-
rwp
CrtxReavr, Yes. It does seem like that. Through the course of a day there might be 15+ inet6 addresses pass through a Debian/Devuan system I have sitting there for debugging. My house FreeBSD system I need to work and I have it configured with the static IPv6 address so that I can rely upon it working.
-
rwp
I haven't had time to put into debugging this further but I hope to have some time in the next couple of months. I will open a support ticket. They will swap my modem for the newer model. And likely nothing will change. I have been hesitant to do this because I have been traveling away from home and what I have is working and it is the devil you know versus new devils that I will need to get to know.
-
ketas
hopefully it's your allocated /64 or more
-
rwp
Another bug in that Nokia firmware is that if I let it run without a reboot for "a while" like maybe two months then the IPv4 DHCP server will stop working at some point. Probably a memory leak or something. It will keep routing okay. But if you reboot the client such that the ethernet link drops then it will never give out another DHCP address and the client can't get back online.
-
rwp
My workaround is that whenever I depart from the house I always power cycle the Nokia before leaving. That resets the resource leak or whatever and then it is good for at least another month and will survive until I return home again.
-
rwp
It takes a while to debug something that must run for 2-3 months before exhibiting the problem!
-
ketas
that's a hell
-
ketas
so no way go get rid of it or hack or?
-
mzar
rwp: perhaps they have just buggy and not fully ip6 capable equipment ?
-
rwp
What do you suggest? Open up the ISP modem, solder an ICE fixture onto the circuit board and start reverse engineering it?
-
Koston
burn the modem
-
ketas
i would be very pissed if it were main required device
-
ketas
and wouldn't even work
-
rwp
I think mzar's assessment matches mine. It's just buggy and not yet working. It is likely the configuration on the ISP side of things. I keep hoping that it will get fixed and then updated and then magically start working.
-
ketas
you can't access it otherwise0
-
ketas
?
-
ketas
like via ip
-
rwp
Burning the modem is not really an option because I really like having the GigE fiber connection. I am NOT going back to Comcast's 30MbpsDn/4MbpsUp cable modem.
-
ketas
what they do there anyway
-
ketas
gpon?
-
Koston
PON?
-
rwp
ketas, I don't understand your question. Of course we access the Nokia web admin interface by IP. But that only exposes the web interface. It does not have any capability to debug the internal workings of the firmware.
-
ketas
no telnet there eh? :p
-
ketas
but yeah
-
Koston
well most likely your fiber comes in either as P2P or *PON, and only latter requires special equipment. former you can just hook up to any fiber module you have and rock on
-
ketas
i have high bets it won't work better later either
-
Koston
^^
-
ketas
like dhcp dying
-
ketas
classic shit isp cpe
-
ketas
failure is sad, but it won't even recover
-
Koston
it's absolutely not beyond nokia to just consider it normal for customer to powercycle a device periodically to keep it running
-
CrtxReavr
Nokia should have stuck to cellphones - they had a good run with those.
-
Koston
except they didn't
-
ketas
nokia does still make networking gear but
-
ketas
yeah who knows
-
rwp
I am also in a squeeze between having time to work on things I need to work on and having this be the devil I know how to workaround already. Once you get something working and known it is hard to break it just because.
-
rwp
Speaking of which I must focus on work until the top of the hour and then I must afk. Later!
-
ketas
i currently run Huawei EchoLife HG8010H
-
ketas
it seems factory def cfg
-
CrtxReavr
I use a FreeBSD box full of NICs.
-
ketas
it's not meant to be accessed on l3
-
CrtxReavr
No one to blame but myself.
-
zip
ketas: basically some encrypted storage for personal shit and some less-encrypted storage for media
-
Koston
CrtxReavr: nokia basically just got lucky with their early cellphones - the company far exceeded itself and was in no way prepared to actually perform well consistently, or as it turns out, almost ever.
-
zip
so, probably, a machine running samba, some kinda DLNA (probably rclone serve?) and then sshfs
-
ketas
currently they only rent cpes or stbs, don't sell them anymore
-
zip
the main problem to solve is that of how to secure data
-
ketas
otherwise they have modified openwrt shitshow genexis
-
zip
I expect there's a way to zfs-encrypt mountpoints and unlock them with user passwords, though that'd be annoying if it breaks ssh
-
ketas
i didn't take it
-
ketas
it's as if it's normal for customers to keep rebooting their routers like windows machines
-
ketas
it sw as well as hw problem actually
-
zip
I guess freebsd doesn't really have a nice way to encrypt filesystems using TPM storage, so no shenanigans with that. I suppose the best option there is perhaps to deploy the spare raspberry pi or something and do some kind of juxtaposed auto-decryption
-
zip
or to treat it as insecure storage and make sure whatever I've got running backups acts accordingly
-
Koston
Huawei is a good example of how stewed western networking companies are. EU had to come up with a bunch of FUD propaganda to block them from market (and Intel stopped selling the x86 chips entirely too) just because their gear is far too good and cheap
-
Koston
cisco, nokia, netapp etc have all grown fat and lazy, banking on continued profits based on past merits and brand name alone
-
ketas
btw from isp internal semipublic data i got that this is the best hw available on market that worked... but if i look inside on what the top quality is it looks like something where if rip one piece of ductape off, whole contraption comes tumbling down
-
ketas
so sad
-
Koston
so it goes
-
ketas
encrypted is hassle
-
ketas
i looked into openzfs implemented encryption and it looks weird
-
ketas
oracle one is as bad too?
-
ketas
for good encryption we have a geli
-
ketas
but i have no idea how well it runs over or under zfs
-
ketas
or ufs even
-
Koston
-
ketas
Koston: i laughed at attempts to use lawyers to make gpon devices interoperate
-
ketas
lawyers failed
-
ketas
:p
-
Koston
unsurprising
-
Koston
but amusing, hehe
-
ketas
imagine if you try to be isp and you step into cowshed and you have to choose where you step
-
ketas
where's the less damage
-
ketas
:p
-
Koston
capitalism basics dictates companies only produce interoperable standards when it benefits them, and making gpon ones interoperable would benefit none of them
-
ketas
ericsson and what else was tested
-
ketas
huawei specific downstream ecryption
-
ketas
what the hell
-
zip
I suppose the other thing I should do is get on with working out disk layout for my local, blu-ray backups. You simply cannot beat a readonly offline backup.
-
ketas
that was probably blurted out because ton of people asked how come you selected like last possible manuf
-
Koston
hehe, they're certainly shameless in cracking competitor products, modifying and then reselling them with their own heavy tamper proofing
-
zip
but of course it's a pain, ideally I'd want to make sure each disc is independent but it'd also be helpful if I wasn't manually shuffling files around to put on them
-
ketas
hmm are blus good for bak0
-
ketas
?
-
Koston
depends how much data and how often you want to backup, I think
-
ketas
should backup more
-
zip
mm. mostly stuff like photos and music
-
zip
I learned this lesson the gentle way when it turned out a file was missing and none of my backups had it because they all just cycled out old shit and it had been too long
-
zip
however, in 2008 I'd backed up my music onto DVD, and that DVD? Still perfectly readable, still had the file I wanted
-
» Koston still has some porn on 20+ year old DVD-Rs
-
Koston
no idea if they work though lol
-
zip
thanks for sharing
-
Koston
how long is the average optical media lifetime? at least things like original playstation 2 games are now suffering major disc rot
-
zip
also if I ever got some ransomware on my system I'd really, really be wanting backups that can't be fucked with using credentials on my system
-
ketas
isn't cost effective way just to rotate disks around
-
zip
I'd be tempted to get tape drives but I reckon blu-ray and maybe making new backups of the old stuff every few years will do
-
ketas
tapes have crazy price
-
Koston
yeh, I think tapes are more industrial strength solution, when you also have a big tape robot for automated rotation etc..
-
ketas
unsure what their lifetime is
-
ketas
tape wasn't so shove and forget too
-
ketas
can't beat read only media like optical tho
-
ketas
i only have had cd burner and i have unchecked cd backups
-
Koston
one (rather gung-ho) backup method is just uploading heavily encrypted archives onto multiple public services, counting on that at least one of them will still be up if/when you need it
-
Koston
disk space in general isn't very expensive
-
ketas
unsure how real complete compromise risk is
-
ketas
what's bluray prices btw
-
Koston
risk of something getting compromised is roughly [interest * difficulty] of the hacking, so unless your backup becomes a very interesting target to someone, the risk should be very low for a long, long time
-
ketas
and
-
ketas
tpm isn't support but
-
ketas
i wonder
-
ketas
actually
-
Koston
I still wouldn't use such a method for anything beyond something like, my illegally obtained .mkv movies collection or such..
-
ketas
wtf everyone uses?
-
Koston
I'm using just full disc zfs encryption
-
ketas
i don't believe every company uses some closed hsm's and stuff they click click click install pray and sue
-
ketas
trade secret for sure but
-
ketas
wtf do they use :)
-
Koston
uh.. ones I've been at, the most they've done is ask me "pls setup your desktop/laptop with disk encryption"
-
Koston
with no further instructions or guidelines or requirements whatsoever
-
ketas
i mean more like inside
-
ketas
i bet they could blame you for leaks
-
ketas
:)
-
Koston
I'm not legally bound by any NDA anymore
-
ketas
funnily companies have been hit by windows ransomware
-
ketas
and havr lost data
-
ketas
so
-
ketas
hell knows
-
ketas
oh security is fun
-
Koston
not so long ago, one cloud provider imploded entirely after being hit by hackers. their entire infra got owned and utterly destroyed.
-
ketas
whooops
-
ketas
all hw, keys, backups?
-
ketas
like wipe zero and retry?
-
ketas
:/
-
Reinhilde
the name is forgotten at this location
-
Koston
-
ketas
The attackers succeeded in encrypting all servers’ disks, as well as on the primary and secondary backup system, whereby all machines crashed and we lost access to all data.
-
zip
yikes
-
zip
that's a bad day
-
ketas
i mean i'm not sure if large data provider can do offlines but
-
Koston
definitely a good "on today's episode of how fucked up is fucked up"
-
ketas
apart from hacker you could also get this from fired worker, etc
-
ketas
must have some segmentation here
-
ketas
CloudNordic could not be reached for comment. Its website notice said that the company had difficulty in communicating. An email with questions about the incident bounced back with an error message saying the message could not be delivered.
-
ketas
lol
-
ketas
but yeah
-
ketas
how to not do exactly this
-
ketas
almost like fb crashed and couldn't get into office even as door entry is also ip
-
ketas
and that's the company that can build whole large dc
-
wipt
Hey there! I set up a backup server a few years back with GELI encryption. I've been able to get the password correct a few times, but seemingly only when the installer USB stick is in. I've sorta given up and just want to wipe the system at this point, but I seemingly can't boot the USB image, even when trying to bypass it in the bios, it just goes to this disk. IDK if this is a EFI thing?
-
wipt
I wish I could have it display what I'm typing into GELI. I have to be hitting something wrong. It really dosn't help that I use dvorak, and it's in qwerty until I get the system up.
-
ketas
how can passphrase be correct if installer is there?
-
ketas
and then installer won't work
-
wipt
That's the odd thing, with the USB installer inserted, it goes to the GELI prompt, and if I get it correct, it starts the installer rather than the image that GELI is on. I have the something like this going on with another image,
-
ketas
unsure where and when those ade enteted but
-
Koston
it's an EFI thing yes
-
ketas
can't you test keyboard
-
ketas
hmm
-
Koston
if you can switch to legacy bios boot only, then use that to bootup from usb stick and wipe the hdd
-
ketas
never used geli eh :/
-
Koston
I dunno exactly what the loader is doing; automatically searching all connected disks if they're encrypted and then requiring password to continue
-
ketas
decryption works?
-
ketas
then it boots wrong thing?
-
Koston
nah if you input correct password then you can continue booting up from the usb stick
-
ketas
with geli?
-
ketas
anyway if pass is still known why wipe it
-
wipt
It's almost like there's a bug in it. I'm entering the same thing everytime, but seemingly only on the third try will it go through. Got the installer up, just going to nuke this.
-
ketas
3rd boot?
-
ketas
i wonder why
-
ketas
well you can wipe whatever you wish
-
ketas
if you want
-
ketas
just curious about random faults
-
ketas
what's the hw and sw config of this?
-
Koston
I assume 1st stage bootloader wants to be accommodating for situations where full disk encryption setup changes and disk names change
-
Koston
as a side effect, well, you can have trouble when trying to bootup from usb stick
-
ketas
with efi, there's just one loader anyway?
-
ketas
i should try geli sometimes
-
ketas
there's also no efi hw at hand :p
-
wipt
ketas: third time I try entering the password. It prompts 3 times, if you don't get it, it fails.
-
ketas
hmm
-
wipt
It's an old Xeon low power system, I think this is something like a 1220-Lv3, ECC RAM, all ZFS
-
wipt
18 watt processor, my main is a 13 watt processor with ECC
-
ketas
unless things are really wrong keyboard can't emit password right 33% of time
-
Koston
ketas: loader.efi is now combined stage 1-3 bootloader when booting under UEFI, but full disk encryption with GELI works equally well under MBR and I assume that extremely constrained amount of loader code is shared between both
-
Koston
I really need sleep now though, but what wipt describes sounds like a bug
-
wipt
Or I just am really bad with a keyboard :/
-
ketas
wipe would wipe the bug away too
-
ketas
so
-
ketas
again
-
ketas
without installer, it won't boot?
-
ketas
at all?
-
ketas
that would be fun
-
ketas
that would mean you managed to put installer as part of your boot
-
ketas
eg loader
-
ketas
actually how did geli even work
-
ketas
have to have something outside of disk
-
wipt
My other system, I forgot to update gpt when updating ZFS, tried installing another system, did the GPT update, but now I have the new system boot, but it boots into the old system. I can NOT remove the new system and have the old system boot. Absolute kludge.
-
ketas
meh
-
ketas
gpt?
-
ketas
loader?
-
wipt
ketas: idk, again, this system was set up like three years ago.
-
wipt
ketas: the new disk descriptors, what replaced MBR
-
ketas
but this was gpt?
-
wipt
GUID Partition Table
-
ketas
corrupting a gpt has recover method
-
ketas
if it's that
-
mzar
wipt: it looks like you have messed with the loaders, you have to fix it
-
ketas
where are the old and new systems anyway
-
wipt
I dug around in the forums and elsewhere, tried a bunch of things, didn't have any luck. I'll have to wipe that system too. It's an old install from like 2014, so it's probably due for that anyways.
-
wipt
under my desk
-
ketas
anyway if bug or misconfig, wipe clears it all and you won't even know what was wrong
-
ketas
i still have my first install from 2002 :p
-
mzar
you can transfer data to new disk instead of wiping it, good, old FreeBSD deserves to be cherished
-
wipt
If I was younger and had more free time I might dig into it, just brought home my third child last week, sorta not a priority anymore. Have to be much more pragmatic with things. My work is more centered around manufacturing CAD now a days.
-
ketas
managed to nuke the /bin once but i restored it from that tape drive i had in that old server and i had gotten tape for
-
wipt
mzar: all of the data is a backup of my main server, maybe I can get to the zpool.
-
ketas
in fact i was removing / but i ^c
-
ketas
:p
-
wipt
ketas: old 4.x?
-
wipt
I only started using FBSD in 5.x days
-
ketas
yea i installes 4.6
-
ketas
d
-
mzar
-rw-r--r-- 1 root wheel 302 22 maj 2004 adduser.conf < I can't find older files in /etc ATM
-
ketas
maj
-
ketas
:p
-
mzar
guess what does it mean
-
ketas
drwxr-xr-x 5 root wheel 39B Sep 13 2002 stand
-
mzar
OK
-
ketas
so that's likely the date
-
mzar
you beat me, I wiped all these 4.11 - it wasn't possible to upgrade them directly to 6.0
-
skered
6 was the one that could/would kill your install if you didn't do a magic dance before hand
-
ketas
4.6 (June 15, 2002)
-
ketas
why wipe *tho*?
-
ketas
*wipe*
-
mzar
they got vanished
-
ketas
even if you can't selfhost upgrade a system
-
ketas
you can still take it's files at minimum and usually access the disk
-
ketas
from other system
-
mzar
the most challenging AFAIR was the transiotion from i386 to amd64 in-place
-
ketas
i should try some of that for fun
-
ketas
i recall i installed 4.6.2 over 4.6
-
ketas
after that i learned installworld
-
mzar
yep, we learn from mistakes ;-p
-
ketas
so funnily within a few months of installing fbsd i was already able to dev on it
-
ketas
how nice
-
mzar
708 nicks here and noone seeking real support - LLMs took it ober
-
mzar
over
-
ketas
-r-xr-xr-x 1 root wheel 7.0K Jun 11 2002 dhclient-script
-
ketas
looks like that's the release time date
-
mzar
digging in backups doesn't count, so I won't ;-p
-
ketas
well if you have backup of earlier install
-
ketas
why not :p
-
ketas
unsure where's the old ts
-
ketas
used to be /dist now /media ?
-
ketas
it won't get touched
-
mzar
# tail -1 dumpdates
-
mzar
/dev/mirror/gm1s1a 6 Mon Dec 14 03:14:15 2009
-
mzar
not that odl
-
ketas
2009 eh?
-
ketas
hmm
-
ketas
even with pkgbase managed system iirc if mtree runs
-
ketas
some dirs stay
-
ketas
and that should be in ls -lhatoi / | tail -1
-
ketas
-
ketas
look what i found
-
ketas
anyway
-
zip
okay is it just my imagination or is it a little goofy that bhyve has options like -H
-
zip
or is there a good reason for ever not setting it that I'm missing
-
zi
dedicated VM host vs a scenario where you're sharing resources between the host and guests
-
zip
hm
-
zip
so it kinda lets you overcommit CPU
-
wipt
Fresh install, and init is missing?
-
wipt
Reinstalled and got it again, it's causing it to panic on boot