-
ketas
lol chatgpt can generate fbsd device drivers now
-
ketas
tho i predict screams and rm -f foo.c
-
ketas
meh, i built a full pkgbase and now i have no src & src-sys packages at all, i recall moaning about it and writing custom configurable exclusion of them
-
ketas
which is not active
-
ketas
so hell knows where they went :p
-
ketas
of 16, not 15, so fuck knows
-
ek
Haha
-
ek
Get your s**t together, ketas! :D
-
ketas
what
-
ek
What!?
-
ketas
we need cpet here
-
ek
He was here the other day, wasn't he?
-
ketas
he was
-
specialbomb
I got my backup system built and got freebsd installed! I will wait til the weekend to do system configuration
-
specialbomb
I have to set up NUT, mainly.
-
specialbomb
after I get that tested and working I'll move onto how to best backup my zfs datasets.
-
black2
I re-read the article about Lee Holloway and felt so bad about his life and the ruined marriage.
-
black2
-
black2
I kind of think that we are inevitably delving into this black hole of social isolation simply because we disregard the relationships around us
-
black2
and we couldn't possibly have been able to do this without heavily indulging ourselves on computers for social activities
-
black2
I've witnessed people going into episodes of depression like that simply because of the anxiety of losing friends due to change social circles
-
black2
changing*
-
black2
Technology is fine. but With great powers comes with great responsibilities. Increasingly I am seeing this trend of "success by tech" by means of mostly the boring "God-playing" upon a massive group of people.
-
black2
instances include most telecom operations and social media "applications". when exercised upon a massive group of people, eventually this Holloway-type brain rot happens because people don't realize they've been played by this scheme of rounding up users for them to only talk to each other over a restricted media
-
specialbomb
just started a disk replacement, resilvers gonna take less than a day. thank you mirrors!
-
WildTuna
I prefer BSD-based system after my over 5+ years with Linux-based systems.
-
WildTuna
Or Windows XP, 7.
-
Reinhilde
congrats. I hope we treat you well
-
kerneldove_
15 RC3 and 4 were cancelled, just to keep the original release deadline? won't that make 15R more buggy or?
-
kerneldove_
alsoi hope RhodiumToad_ is ok, haven't seen him in forever
-
mzar
kerneldove_: no worries, they are picking all these bugs and fixing them, one by one, so 15.0-RELEASE will be 101% OK
-
kerneldove_
that's great
-
mzar
kerneldove_: are you contributing, by testing these ALPHAs, BETAs, RCs ?
-
kerneldove_
no but only because i never use .0 releases. i will be for .1+ tho
-
mzar
please consider testing it at least, we should not rely only on LLMs with this regard, but on real users
-
kerneldove_
ok
-
zip
is there a way to have FreeBSD wait for input before displaying a login prompt?
-
zip
eg so I can run a getty on the default usb-serial interface, but if I plug in a usb gadget such as a raspberry pi it doesn't wind up in a login loop
-
Koston
zip: probably the appropriate solution is using devd(8) to handle it
-
zip
I had a suspicion
-
zip
it doesn't look like standard getty is quite so smart, which makes sense, because it's 2025
-
Koston
it's none of getty's business anyway to deal with devices that have nothing to do with it
-
zip
today's silly project is configuring the pi's getty to know about ppp and working out how to configure pppd to get as far as ipv6 neighbour discovery
-
zip
I think historically variants of getty could be configured to wait for user input so that you could connect two systems together and not have them go into a loop
-
zip
and then local getty would also ignore the line if someone opened the /dev/cu side to connect out
-
zip
but I get the feeling that's more of an mgetty feature
-
vkarlsen
During a shutdown, my desktop hangs for 10 minutes after "All buffers synced." syslogd has already stopped at this point, so there's nothing in the logs. Could this be because a zfs scrub is going on?
-
zip
cool, I got PPP working. And the pi still just browns out or loses connectivity so I'm pretty sure this is a matter of it just sucking
-
zip
Handy to sharpen one's old weapons once in a while: I'd entirely forgotten you could build a VPN out of ssh and ppp
-
polarian
xorg is still vulnerable :/
-
polarian
must be something blocking it :/
-
black2
zip: I think you can do it just with ssh
-
zip
Yeah I think there's a flag now
-
flatdog
guys/gals, anyone of you experienced any issues with the official forums?
-
CrtxReavr
I've noticed a real uptick in FreeBSD appearing in job descriptions.
-
flatdog
Working as expected, probably a glitch on my side. Sorry
-
CrtxReavr
For years I've had a job search on LinkedIn for 'freebsd ipv6 python' and almost never seen matches for all three keywords, and yet all the sudden it's seeing new matches almost every day.
-
flatdog
ZOMG! Dunno, but if you are the person I think you are, FU! Apologies if you're not.
-
flatdog
long silence tends to confirm "things". Time and chat will tell :)
-
flatdog
mad at me?
-
pertho
any WINE gamers in the channel? If so, have you ever gotten dxvk compiled for wine-devel (WINE 10.15/10.16)? (This would be the Vulkan layer for WINE)
-
mzar
CrtxReavr: maybe AI started creating these job requirements ?
-
CrtxReavr
Indirectly, sure.
-
CrtxReavr
Or maybe some of these big players are learning that Linux's IP stacks and other features are steaming piles of shit.
-
flatdog
mzar: maybe some humans, exposing some buggers.
-
mzar
nope, fully AI-powered HR operations
-
flatdog
be it as you wish
-
flatdog
I still have my concerrns
-
flatdog
s/concerrns/concerns
-
flatdog
*shit happenns :)
-
mzar
only if you don't use FreeBSD
-
nprice
_
-
flatdog
mzar: sorry?
-
flatdog
my humble home lab runs on a mixed patform (linux, FreeBSD), routing and firewalling being the task for FreeBSD. Never had any issues with this setup.
-
flatdog
I would mention that I never used pfSense (and derivatives), plain pf did the job quite well
-
flatdog
Now, if FreeBSD is going to really adopt the "full" pf, yay!
-
flatdog
time will tell
-
rtprio
flatdog: 'full' pf (from openbsd?) are you hoping or is there word of that?
-
flatdog
rtprio: there were some rumours on the forums about OpenBSDs' pf being integrated. I'm ready to stand corrected
-
flatdog
Please, allow me a couple of minutes, I will come back with something more conclusive
-
kevans
not integrated in the sense you're alluding to
-
kevans
replaying patches that make sense and don't break compatibility from the point of divergence
-
rwp
pf source forked some decade ago due to kernel differences but thankfully from a user perspective of configuring it things are mostly still compatible between the systems.
-
wavefunction
CrtxReavr: uptick in job descriptions? Notice any themes among those hiring?
-
mzar
kp@ and ks@ have significantly improved PF, you can test upcoming 15 flatdog
-
mzar
they are doing by picking one by one features from OpenBSD PF that we are/were missing, like new "pass" syntax, "af-to" (aka NAT64 and NAT46), pflow(4) etc
-
mzar
flatdog: a lot of new features to test, please don't hesitate to give it a try
-
flatdog
the guys have done a tremendous work, cannot but rise my hat to them.
-
mzar
sure, we all should, good job
-
flatdog
-
wavefunction
I am hype for "real" PF in 15 :D :D :D
-
flatdog
cannot just jump into 15, its complicated. Will do when the time is right.
-
flatdog
a lot of testing is going on in the background
-
flatdog
things are looking good. Too good.
-
flatdog
forgive my bias :)
-
mzar
flatdog: the time is about right
-
flatdog
indeed mzar
-
mzar
I am now 100% on 15 in production
-
mzar
it's working just fine
-
flatdog
interesting. You did indeed take some risks
-
mzar
yep, someone has to test it
-
flatdog
test and production don't play well together, but hey, you got to make your point
-
zip
I should learn PF
-
flatdog
my respect
-
flatdog
^mzar
-
zip
is this a matter of buying The Book Of PF or is it more of a tutorials-are-fine kinda thing
-
flatdog
recless, or a pro
-
flatdog
without the book of pf, you're lost (or dependent on someone's post)
-
rtprio
ive ran 15 since it was branched and only had one minor issue in that whole time
-
mzar
hhe.. no worries, I migrate machines one by one, waiting a few day in between, submitting PRs if required and... it's basically a lot of fun
-
flatdog
well, my hat's off. I wouldn't go that way, my boss would kill me. Twice.
-
flatdog
Lucky rascal :)
-
mzar
I like this new predictable schedule, respect to @cperciva for planning and and his hard work supervising whole process
-
mzar
your boss is not that bad, at least accepts FreeBSD
-
flatdog
my boss is a guru, learnt a lot from him (no ass kissing here)
-
mzar
ha.. I like him even more
-
flatdog
small company, yet AS 9100 certified, funny contracts(Romania, Eastern Europe), the harshest market one might imagine. Yet we still produce. You don't want to see my logs, I ensure you.
-
flatdog
when the boss is good (as in a pro) everything is good.
-
rtprio
can i ask what you make?
-
flatdog
blades for turbines.
-
flatdog
PraTT&Whithey and Siemens
-
flatdog
sorry, Pratt
-
flatdog
and the final stage (the static one) for the F-35
-
flatdog
sold for export :)
-
rtprio
neat
-
flatdog
yeah, try keeping the Haas machines within 6 microns tolerance (metrichead here)
-
flatdog
+ or - 3
-
flatdog
nightmare
-
wavefunction
zip: Book of PF (2nd or higher ed) is what I'd recommend.
-
flatdog
apologies for derailing the chat
-
wavefunction
flatdog: Welcome the derailment -- it crashed into another fun thoughtline :D
-
wavefunction
"Reasonable companies actually support FreeBSD as a runtime OS"
-
wavefunction
"Even in scary regulatory environments"
-
flatdog
thank you, Sir :)
-
flatdog
you know, FreeBSD shines where nobody see. Security, data safety... things that nobody care about, unless hurt by the lack thereof.
-
flatdog
*apologies, english is my third language
-
wavefunction
flatdog: English is my first, and for the most part, only, so I appreciate the effort regardless.
-
flatdog
I don't know how to type the thumbsup emote, but consider it done :)
-
flatdog
Oh, forgot to mention, we also machine the VGT for Cummins :)
-
flatdog
In case you're riding a bus, 90% of chances you are riding with a part machined by us :)
-
flatdog
I'm so f***ing proud!
-
rwp
In text I usually see :thumbsup: as the plain text representation of the emoji.
-
kenrap
👍
-
mason
I'd tend to go with the slightly more effusive \o/
-
flatdog
It was the idea, not the actual implementation
-
flatdog
sorry for the bragish* wording, but I am really happy with the way FreeBSD deliverrs
-
flatdog
Simple tasks, well implamented
-
flatdog
s/implamented/implemented
-
flatdog
so, adopting the entire OpenBSD pf is going to be a major boost for FreeBSD
-
flatdog
my two brezeln
-
bdrewery
$$$
-
flatdog
in time
-
flatdog
it is there, but I cannot move to something new, just because its new
-
mzar
Pratt&Whithey, cool, we have also here the factory that was sold to them
-
mzar
still in good shape
-
mzar
I didn't know that they are using FreeBSD
-
specialbomb
installed a new system yesterday, and of course its FreeBSD
-
specialbomb
hehe
-
specialbomb
ill probably do more configuration for it tomorrow
-
mzar
cool, is it your first deployment specialbomb ?
-
specialbomb
no, just personal stuff unfortunately
-
specialbomb
I may never be a professional
-
specialbomb
but now I got two hosts running!
-
flatdog
mzar: Pratt&Whitney don't use FreeBSD, we are
-
flatdog
Long story short, we have a somewhat freedom to use whatever we want, as long as the +/- 3 micron tolerance is met. We used to use Catia, an expensive piece of software, capable yet way too expensive.
-
CrtxReavr
wavefunction, well, the fact that they matched they keywords freebsd, ipv6 and python is very noteworthy, at least to me.
-
zip
looks like the book of pf 4th edition is nearly out so it may be worth my while waiting for that
-
zip
for someone who does not need particularly complicated firewalls I sure do know nftables, iptables and mikrotik's weird interface to iptables
-
CrtxReavr
Lot with Meta, nVidia, Oracle, Cisco, Et al.
-
flatdog
So , we had a look at FreeCad, then LibreCad, both open-source. We-ve settlet on FreeCad, and designed our own post-processor.
-
flatdog
Post-processors tent to be an extremely expensive part of designing part of production
-
flatdog
Pythonh seemed to fill the bill, we went with it.
-
mzar
interesting story
-
flatdog
*think of a post-processor costing you around 20K, in dollars
-
flatdog
F*, this, cannot we do our own? And we did.
-
flatdog
And our machines are Haas, Okuma, Hermle
-
flatdog
It was quite a task, but we're rolling :)
-
mzar
... and running FreeBSD in the networks stack IIRC ?
-
flatdog
All those CNC dialects, match them all together, I'm telling you, it was quite a task
-
mzar
good job
-
flatdog
Yep, the entire network is a FreeBSD backed one.
-
mzar
are you using ip6 over there ?
-
flatdog
No
-
flatdog
as of now, no
-
flatdog
We are talking about company
-
mzar
I was just asking out of curiosity, no worries
-
flatdog
in Romania, one usually gets an IPv6 address, by default
-
mzar
yep
-
mzar
it's a very nice country and developing very quickly
-
flatdog
probably the only thing were good at is connectivity
-
flatdog
I have FTTH at 25 miles (roughly 32 kilometres) in the wilderness
-
mzar
what about thier cuisine ? dont you like it ?
-
flatdog
you have to try it, decide for yourself
-
mzar
TBH I like it
-
flatdog
I'm native, easy for me :)
-
mzar
are you from .ro flatdog ?
-
flatdog
yes, I am romanian, born, raised and living
-
flatdog
(I thought it was obvious)
-
mzar
great !
-
mzar
I was't reading the backlog, I am sorry
-
flatdog
no worries, we used to be all humans :)
-
CrtxReavr
"Romanian. . . it's like Italian with a Russian accent."
-
flatdog
may I ask about your nationality? mzar
-
mzar
do you have any BSD user groups over there ? maybe I can attend a meetup
-
mzar
we were neighbours in the past, I am from .pl
-
flatdog
true, about 20 % of our words are slavic, as origin
-
flatdog
czesc, mzar :)
-
flatdog
about 20 years ago I used to talk quite frequently to vermaden
-
flatdog
time passed, he got another girlfriend and here we are.
-
mzar
hhe.. Buna flatdog
-
flatdog
"i see the beginning of a beautiful friendship"
-
mzar
hhe.. I am quite often there, I have send you a PM flatdog
-
mzar
s/send/sent
-
specialbomb
zip: I preordered that book! im excited to get it
-
specialbomb
PF is very cool.
-
zip
Really it's kind of shame you can't get tiny VMs with like 512mb of RAM and 2GB of storage, lots of stuff barely needs that
-
zip
Well.... I've shopped around a bit and I can't find one hosted in the EU without something Annoying about it, like pathetic 2FA on an account attached to my credit card
-
zip
Or they exist if you want Linux
-
specialbomb
you mean like VPS services?
-
yakubin
Maybe you could use AWS EC2 t3.nano instances using AWS Free Tier.
-
yakubin
Ah, maybe not: > you are required to provide a valid payment method to sign up for an AWS account, whether you choose a free plan or a paid plan.
-
zip
I'm not against it. I ddin't know they had a free tier
-
zip
I suppose I could have a go at OCI free tier too
-
rtprio
oracle free needs a credit card too
-
rwp
. o O ( wonders about getting a larger VM and then using it to host more smaller VMs )
-
rtprio
you could do that, depending what your ipv6 conectivity is like, or proxy it
-
zip
I'm not against putting a credit card in or spending a couple euros a month
-
zip
main annoyance with OCI is I used to work for them so I gotta read those T&Cs real carefully to make sure I'm allowed to use it
-
zip
anyway. not against spending money, I'm just side-eyeing the providers who might not do an exemplary job of avoiding making me a free money glitch for some asshole with a crypto miner is all
-
zip
and I realise I'm being pretty fussy here: looking for something in the £2 range, in Europe, with non-broken 2FA, that I can install BSD on, simply because I feel like everyone's cheapest tier is more computer than I need
-
vkarlsen
zip: Did you look at NetCup? It's more than £2, but not a whole lot more.
-
zip
possibly people are misreading "on an account attached to my credit card" as "_or_ an account attached to my credit card"
-
zip
vkarlsen: I have not, I'll take a look
-
rwp
I have an OVH node at their cheapest price level of USD$4.20/month and though they no longer support FreeBSD I installed it using their Debian rescue system in the way that we do these installations and it has been working well for me.
-
zip
that's not bad
-
zip
they do seem to have a Freebsd 14.3 option
-
zip
really I should get on with setting up the pet mini-pc with the services I want
-
zip
somehow it's easier to sling someone a couple quid for a vps though
-
zip
quieter, if nothing else
-
rwp
Also has the advantage that if there is a hardware failure that it's not your hardware failure to manage.
-
rwp
To be clear I also have my own bare metal systems too.
-
yakubin
I’m currently using a Vultr VPS, but I’m going to be building a FreeBSD-based NAS, that could also host a couple jails and I see that I could maybe use <
ovpn.com/en/features/public-ipv4> to have these jails be available under a public static IP.
-
yakubin
So I’d have a jail connect to that over WireGuard.
-
zip
I'm contemplating doing a quick reformat and putting 15-BETA5 on it as I figure that'll be the easier upgrade pathway
-
zip
right now I have a debian VPS running pi-hole, which feels a bit silly
-
ant-x
Hello, all. Is there a chance FreeBSD will run on a PC with 256 Mb of RAM, or shall I seek an older and/or lighter OS?
-
rwp
If FreeBSD does not run on it then no other OS will run on it either. Why is there any concern at all? Is something wrong with this hardare?
-
vkarlsen
ant-x: It will likely run, but what do you want it to do?
-
ant-x
rwp, the amount of RAM.
-
rwp
Oh! You said MB and I thought you said 256 GB. My bad.
-
vkarlsen
ant-x: I had 512 on a vm running unbound, but I had to increase it to 768 due to large zone files
-
ant-x
vkarlsen, some very lightweight web hosting, SSH, very lightweight X (e.g. twm without a desktop environment).
-
ant-x
No ZFS, of course.
-
rwp
I was trying to figure out how something couldn't run on a 256 GB RAM system and it befuddled my mind with that concept.
-
zip
I've tried dialling my VM's RAM to 256mb and FreeBSD 14-3 ran
-
ant-x
^ :-)
-
ant-x
I will later probably get more RAM, because the PC itself is circa 2005, and should have more.
-
vkarlsen
-
ant-x
zip, Good to know.
-
rwp
I am running FreeBSD on a 512MB system for a bastion host and it seems acceptable. I am running it on a 4GB storage and that's my main problem with it. 4GB of storage is the minimum without doing pruning of the system.
-
vkarlsen
ant-x: This one does use zfs, btw
-
ant-x
vkarlsen, I heard horror warnings not to use ZFS with less than 4 GB of RAM.
-
rwp
My 512MB one is also running zfs. Probably pkgbase would allow me to trim it down. If I had to partition it again I would give it 6GB instead of 4GB of disk.
-
ant-x
Thanks.
-
rwp
People who have horror stories about zfs and ram have de-duplication turned on and there isn't enough memory to do that for anything.
-
vkarlsen
ant-x: I run a web and mail server on zfs with 1 gig of ram, no issues
-
V_PauAmma_V
Most of my on-laptop VMs have only 2GB, and ZFS is content with that.
-
ant-x
vkarlsen, running your own mail server -- you are an iron man.
-
V_PauAmma_V
2GB RAM, I mean.
-
ant-x
V_PauAmma_V, the official installer itself advices against ZFS for < 4GB RAM.
-
rwp
A lot of us here have always run our own email servers. I have always run my own email server.
-
zip
This week I got a copy of "postfix: the definitive guide" so we'll see how that works out
-
ant-x
rwp, getting any trouble from the big providers not accepting your mail?
-
V_PauAmma_V
ant-x, it does? I must have overlooked it - or maybe it only does on 14.x and 15.0.
-
rwp
My 512MB ssh bastion host is using 25MB of swap. It's not doing anything else though. If running a web server I wouldn't run less than 1GB of RAM. File system buffer cache, ahem I mean ARC, is critically important to performance.
-
vkarlsen
ant-x: Worry less, live more :D
-
rwp
I have no problems with mail delivery to Google, Yahoo, Microsoft, others. But I have somewhat of a special case because I am also hosting friends mailing lists and those conspiracy theorists are active reading and responding to emails from my server. They call that engagement. It is like a vaccine inoculating my server. Victory unintentional.
-
ant-x
I will hardly server more than a few requests a day, unless LLM craslwers find it. I am totally new to BSD administration, and got this PC out of the trash can to try.
-
rtprio
ant-x: that was more or less my first machine with freebsd too
-
rwp
Since you got your bare metal at a bargain cost of free then you have nothing to lose to try running any experiment upon it. Give it a go! Then you will know.
-
ant-x
Do you know of a way to serve a website without a static IP? Or do recommend that I get one? My provider offers a static IP for an extra price...
-
rtprio
mine was a p90 running freebsd 3.4
-
vkarlsen
Reminds me of my first laptop. NetBSD was the only thing I could run on it, because everything else I tried used so much memory that I couldn't load the driver for the PCMCIA NIC
-
rtprio
ant-x: some dynamic ips stay rather static, like the same ip for months or years
-
ant-x
rwp, that's it. It is sitting on my desk all bare, without even a case (but I have ordered an ultra-slim microATX case).
-
rwp
If it is truly just a home experiment you can run a dynamic dns IP address acceptably well. As long as your ISP does not block you for violating their terms and conditions.
-
rtprio
if yours is not (and mine now refreshes every couple of weeks) i just update the dns for the zone when it changes
-
rwp
I call those bare cased systems
en.wikipedia.org/wiki/Lady_Godiva systems. They work great on the home workbench.
-
ant-x
Internet is made for hosting things: an network of nodes.
-
ant-x
rtprio, you mean you update your domain's settings to point to the new IP?
-
vkarlsen
ant-x: Looks like ovpn.com offers static IPv4 for 4 euros/month
-
vkarlsen
I can't vouch for them, though. I just saw this myself
-
rwp
For 4 euro/month can probably spend a few more pence and get a full VPS system along with it.
-
ant-x
vkarlsen, thanks.
-
rtprio
ant-x: yes
-
ant-x
Can I use L2TP/ipsec -- offered for free here <
web1.0hosting.net> ? Will it work with a FreeBSD server?
-
ant-x
Does FreeBSD have its native server software, or does it use httpd/nginx typically?
-
rtprio
it does not have it's own, but among nginx there are practically dozens of web servers to choose from, depending on your needs
-
ant-x
among nginx? Isn't there only one nginx?
-
V_PauAmma_V
nginx and a fork when a RU-based developer was barred from working on it, IIRC.
-
rtprio
yes, and dozens of others
-
yakubin
My FreeBSD VPS using VPS and hosting 2 jails, one with Caddy, and another one with cgit, is using 329MiB currently.
-
yakubin
using UFS*
-
rwp
There was a falling out in the nginx development and now a main developer has forked off freenginx which is the version I use.
-
rtprio
apache, tomcat, lightty minihtpd microhttpd etc etc
-
rwp
rtprio, Those are not actually nginx though!
-
vkarlsen
If you want to get technical, there are nginx-full and nginx-lite in addition to nginx :)
-
rwp
V_PauAmma_V, As I understand it the nginx fork had nothing to do with it being a Russian developer being Russian. It had to do with the commercial corporation of nginx itself being more corporate than community.
-
rtprio
i said dozens other ones to choose from
-
rwp
-
ant-x
Sounds good. Now -- to install FreeBSD.
-
rwp
-
V_PauAmma_V
rwp, maybe? I vaguely remember that was (a side-effect of) sanctions against Russia. But I've been known to be wrong.
-
ant-x
Is not nginx more difficult than httpd, in that it delegate everything to external async components?
-
V_PauAmma_V
*reads* Ah, yes. That email makes it clearer what caused it and what was unrelated.
-
rwp
I think in this case it is just F5 being a corporation and acting like it. To be clear though I support the sanctions against Russia for starting a war invading Ukraine.
-
polarian
hmmm reading the man pages, pkg-info has -a but thats lists all the installed ports, I want explicitly installed ports, no dependencies included
-
polarian
I dont see anything in the man page, do I need to filter it somehow?
-
rwp
I generally try to avoid politics in IRC channels but I didn't want to appear as an apologizer for them here either.
-
rwp
polarian, As I understand it you need pkg-query and the query language with %this and %that filters. I don't know off the top of my head further.
-
polarian
rwp: ah... I such at pkg-query
-
polarian
:P
-
polarian
possible feature request to pkg-info though
-
rtprio
%V in `man pkg-query`
-
polarian
rtprio: that returns an int tho
-
rwp
ant-x, Regarding what you say is a negative that nginx delegates backend processing to fcgiwrap and other backends others such as myself see as a positive that those are separate. It's one of the things that makes nginx so fast at being a frontend to the hostile Internet. Much faster than other all-compiled-into-one servers.
-
polarian
oh wait im stupid
-
polarian
I need to use -e
-
polarian
rtprio: %V is always 0 for some reason :/
-
ant-x
rwp, the negatives are relative: I found it hard to host a PHP page that way -- but I am a nooob. Another negative in nginix is that it has nothing like httpd's local .htaccess files that can give non-privileged users of a pubnix lots of control. With nginx, you have to be root, AFAIK.
-
zip
I've been wondering if step 1 of setting up a webserver is configuring blocklistd to nuke the subnet of anything that tries to talk to it other than my home network or letsencrypt, then getting the letsencryt certificate, and then letting the firewall tables fill themselves up for a while
-
zip
step 2 being to add some honeypot endpoints to robots.txt and nuke anything that touches them, or /admin, or a couple other popular ones
-
ant-x
robots.txt is a genrlemen't agreeement. It can be enforced by the server.
-
ant-x
I see: the scavengers read your robots.txt, and try paths listed in it.
-
rwp
zip, At one time firewalls were open and we tried to block bad actors. Eventually came around to blocking all by default and only allowing known good actors. I think we are heading that way with the web. I think soon most sites will be blocking all by default and only allowing known good clients through after they register. Sigh.
-
ant-x
I think that in our moder age, some LLM poison like Iocaine should be in place, too.
-
ant-x
Just yesterday, this website blocked me on the ground that I was using a "suspiciosly old browser". He whitelisted my User-Agents (including the old FireFox on Windows XP).
-
hodapp
ant-x: what's Iocaine?
-
rwp
ant-x, Use fcgiwrap+spawncgi+multiwatch for a full robust configuration. The Apache .htaccess feature is a good way to slow down the server and so I always avoided using it. With Apache you should be root as well.
-
rwp
Remember that by default apache and nginx and the others all drop priviledges and run as a non-root non-priviledged user account.
-
zip
honestly for the next year or two you can probably get a pretty low false positive rate by blocking anything over http 1.1
-
polarian
rtprio: the correct one is %a and then check if it =0
-
polarian
sorry for my stupidity
-
polarian
thx for the help
-
rwp
Additionally on FreeBSD if one has security concerns then one should run web servers inside of a jail configuration. And compartmentalize the backend services in jails too. It's straightforward.
-
tavvva
Hello everyone. Anyone knows a working way of PXE-booting FreeBSD installer with Grub?
-
zip
I've also been wondering how effective it'd be against a scanner to basically have ssh set up to port-knock on... port 22. A scan is gonna drive by and think your socket is closed, whereas I know that the second time is the charm
-
rwp
If one is already running a VM VPS as a compartment anyway then that's already a container though so doing so on a dedicated system like that is an optional additional layer.
-
rwp
tavvva, I have not tried that combination. I have configured PXE to boot other installers. Seems reasonable to have it with FreeBSD too. Immediately after you mention it I want to work on setting it up for my own use.
-
tavvva
I tried pxeboot chainload and it crashes
-
rwp
tavvva, Is there a reason you want to boot FreeBSD with GRUB? It's a valid combination but not a native combination.
-
rwp
Coincidentally a couple of weeks ago I tried to get PXE booting of a FreeBSD NFS diskless system. It starts the boot but then fails due to being out of space on something along the way. I tabled it for a while until I get back to debugging it. This was on 14.3-RELEASE for me.
-
tavvva
rwp: yeah ... The reason is an already functioning broad ecosystem on top of Grub
-
rtprio
tavvva: why grub?
-
rtprio
oh
-
rtprio
i used ipxe.org
-
rwp
tavvva, Apparently no so well functioning since it was failing for you. Just saying! :-)
-
tavvva
rtprio: believe it or not, it's the best solution :] it supports architecture based menu selection
-
ant-x
-
tavvva
rtprio: it reliably supports fallback to the 1st HDD boot
-
ant-x
rwp, I am a member on a pubnix that uses httpd, and .htaccess let's me do a lot without root access.
-
rwp
When last I set up PXE booting from scratch some years ago the best practice was using the syslinux boot loader system. And I found syslinux to be a very good capable system for PXE booting.
-
hodapp
ant-x: hmmmm interesting...
-
tavvva
rwp: well ...maybe it is not caused by grub :]
-
rwp
ant-x, If the only way to operate is with hands tied behind your back but it works for you then don't let me disparage the method. Just keep doing it and be happy.
-
tavvva
rwp: the crash happens in pxeboot and I'd love to overcome it with direct kernel+modules load, if possible
-
tavvva
rwp: openbsd and netbsd works
-
ant-x
Well, I am going to become king on this ancient computer (which does not seem to boot from USB...)
-
rwp
tavvva, It's sad that FreeBSD is behind NetBSD and OpenBSD on this. But those are also very good operating systems too.
-
tavvva
rwp: moreover ... openbsd and netbsd offer ramdisk version of the kernel with builtin installer as one file
-
tavvva
rwp: something that you can directly load with knetbsd or kopenbsd command and it just works!
-
rwp
Friendly competition among the family is good for pushing technology forward.
-
christoff
more so someone coding it out of spite
-
rwp
I am not an expert in this area but I recall a FreeBSD something which did load the installer fully into ram...
-
tavvva
when chainloading the fbsd version of pxeboot I get BTX halted and a registry dump
-
rwp
My neurons are vaguely remembering discussion about bhyve booting grub and *BSD and thinking there is information in that topic area of bhyve for doing this that would be useful.
-
tavvva
ant-x: yeah :) computers not booting from USB are pita .... do you know you can PXE-boot plop boot manager v5 to boot from the USB afterwards? you can boot plop boot v5 also from Floppy or CDROM
-
rwp
tavvva, Ah...
mfsbsd.vx.sk is a fully ram based FreeBSD installer.
-
tavvva
rwp: mmmm ... the address looks "official" :D
-
rwp
It's the author's main site. You can also look here:
people.freebsd.org/~mm/mfsbsd/mfsbsd.pdf
-
rwp
mfsBSD has been around for a long time and is fairly well known.
-
ant-x
tavvva, yes: I know plop can sometimes boot what the BIOS won't.
-
tavvva
rwp: Martin Matuska seems to be Czech too ... I could at least discuss that with him in my native language :)
-
rwp
There you go! Win-Win! :-)
-
tavvva
however ... after a bit of reading it seems it supports a bit different scenario .... it looks like it loads a pre-installed system, not the installer itself and it would have to be hacked more
-
rwp
I have used it to launch bsdinstall on a system before. Probably pretty easy to have it do that automatically.
-
tavvva
Grub supports extra options for freebsd .... 1.] modules 2.] hints
-
tavvva
any chance using them for starting the installer?
-
tavvva
or even better ... any chance you could start releasing a PXE-bootable ramdisk kernel like OpenBSD and NetBSD ?
-
ant-x
OK, bootin from a USB-HDD was hidden with other HDDs in BIOS. I have booted from FreeBSD-14.3-RELEASE-i386-mini-memstick.img, but the setup told me that some of the necessaryt files were not found on the boot media, and is asking for an internet connection. Can I skip that? Or is that mimi-memstick version intended for network setup?
-
rwp
I assume that "you" is referring to the general large group here. You might address that to the freebsd-hackers mailing list though. You and I have been chatting and I don't make those releases so no chance for me to do it.
-
tavvva
rwp: oh ok ... sorry .... for some reason I thought you're one of the devs :]
-
rwp
My beard is grey and I have been around a long time but I am not one of the committers.
-
ant-x
OK, I have installed FreeBSD, and booted into a 640x480 VGA mode, althougth my display is 1600x1200. A vesa.ko driver is loaded, but no specific Radeon drivers are in sight. There should exist radeon and radeonkms driers, but I can't locate them with pkg. Where can they be?
-
rtj
-
ant-x
The WIKI <
wiki.freebsd.org/Graphics/AMD-GPU-Matrix> tells me to install the drm-kmod port. I can see it in freshports: <
freshports.org/graphics/drm-kmod>, but ``pkg install drm-kmod'' will not find it.
-
ant-x
rtj, it is not about X at all.
-
ant-x
(I am configuring the TTY).
-
ant-x
^ The Handbook also mentions ``pkg install drm-kmod''. This command fails for me with "No packages available".
-
ant-x
And it is looking in FreeBSD-kmods, as exptected of 14.3 .
-
rwp
I am running 14.3-RELEASE with the radeonkms graphics driver from ports. "pkg install drm-kmod" and "sysrc kld_list+=radeonkms" installs it and configures it okay for me. But it is in ports and that is sometimes out of sync with the base kernel and sometimes failing to build due to other reasons.
-
rtprio
i don't think you need any kmods for tty modes
-
ant-x
But ``pkg search drm | grep kmod'' finds: gpu-firmware-kmod -- firmware modules for the drm-kmod drivers. Is that it?
-
rwp
What version of FreeBSD have you installed?
-
ant-x
rwp, 14.3 here. Just downloaded and installed. I did not not ``pkg install'' could install ports in addition to packages.
-
ant-x
rtprio, the vt manpage says I need a KMS driver to set the high framebuffer resolutions for my tty's.
-
rwp
Correct.
-
rwp
Also did you boot Legacy BIOS or UEFI?
-
ant-x
Legacy.
-
rwp
Me too booting Legacy BIOS. BIOS has a built in character generator. UEFI does not and requires a graphical boot right from the start. BIOS boots in the default resolution character mode and then loading the driver allows it to change to higher resolutions.
-
ant-x
What I don't like, is that ``pkg install drm-kmod'' fails to find that package.
-
ant-x
rwp, yes -- as explained in the man pages.
-
ant-x
I have a graphical 640x480 mode (not text mode), but I cannot use my display's native resolution. Many Linuxes automatically get it from EDID.
-
ant-x
^ Shall we compare our repository configurations?
-
rwp
I don't know why that (pkg install drm-kmod) is not working for you. It worked for me when I did it previously. Sometimes the pkg repository build fails and packages are not in the repository.
-
ant-x
I fear I made a non-standard insrall, via mini-memstick.img .
-
rwp
There has also been a recent change to build kernel modules from ports with newer versions of the kernel. There is an example of that in the man page. That does not work for me though so I can't comment upon it.
-
ant-x
``pkg update'' says all is up-to-date.
-
rwp
Really though "pkg install drm-kmod" is in the handbook and it should be working. That's the documented process. I don't know why it would not be working.
-
ant-x
Yes, it is sad. I don't even have the path mentioned in the Handbook: /usr/local/etc/pkg .
-
rwp
If you don't have that path then you have not run pkg yet. pkg creates that path the first time it is run.
-
ant-x
No, I have already bootstrapped pkg, and it now fully functional!