Don't make things more complicated than it needs to be.

hello I am looking for help on mail

email mail program and sending mail usually was sendmail now dma I don't know what to do also fetch mail I think it's configured somewhat right but this whole thing is not really working

anyone?

hello sorry I disconnected

I'm going to try again later

maybe it's a very extensive topic and will require a lot of reading

ok thank you be around later

rwp: hi thanks for the autossh article, i've bookmarked it :D

my own use case is rather simpler but yeah it's a very useful thing to have for remote admin

f451, Obviously I wrote that up for Debian but the same technique works great on FreeBSD too.

I am also using the spiped setup for servers to connect their email up to my server where I can get email notifications from them now. Since most cloud VPS hosting vendors block port 25 by default (a good thing).

Installing every window manager on FreeBSD

Ah. First base updates with pkgbase and ansible, and everything worked perfectly on first try

lts: itll break then youll come in here saying thats it broke and that your hate freebsd

lts: happens all the time

I'll beat that horse when it gets here

the horse is too big

that's what she said

rtprio, not appropriate for the desired environment

I apologize

rwp, "Who is trying to get autossh working and having problem"> it was me, but f451 has helped me solve them. And I have bothered the maintainer for no good reason.

rwp, many thanks for the article on /Setting Up AutoSSH/ -- it looks very good, will read.

rwp, I did not know SSH tunnel could user HTTPS, because it is picky about mismatching HTTP headers and actuall addresses.

I think my favourite part about 15.0-RELEASE is that you get to spin a roulette wheel on boot in Hyper-V

today it took 12 loops to boot the VM without a kernel panic

very thankful I do not need to *install* it in a VM right now because that is close to impossible (since hv_hid gets loaded automatically and that is a 100% crash)

is it expected that updating a non pkgbase system doesn't get a patched kernel but a pkgbase system does?

(on 15.0R)

markmcb: I think it gets weirder, I just updated my pkgbase poudriere system and rebuilt my custom kernel and it is still tagged 15.0-RELEASE

oh wait

the *kernel*, on 15.0

markmcb: that is probably expected behaviour

not sure why zfs.ko does not get updated though

markmcb: 15.0 kernel is only affected by the ZFS issue which usually means the kernel blob itself is entirely unchanged, so the kernel version stays the same

re: zfs.ko not updated: oh I am an idiot and it is my local problem

actually I didn't notice vmm

markmcb: just checked and your freebsd-update'd system should have the exact same files in /boot/kernel, with the same kernel version string, as before, with the exception of linker.hints, vmm.ko and zfs.ko

freebsd-update does not touch unchanged files

while pkg removes old files and installs new, replacing the full kernel set

thanks Remilia. haven't dug into binary differences yet, but there was definitely a kernel package update and freebsd-update shows -p1 kernel running after reboot. non pkgbase system shows no change to kernel, only userland.

markmcb: ls -l /boot/kernel, you will see that the affected modules were updated

yeah, my point is freebsd-version -kru show different things on two fully patched 15R systems

netcup: 'power cycle your server to take advantage of new KVM features!!'

also netcup: resets EFI vars

fun times today, everyone upgrade FreeBSD-15.0 to p1 for your shiny new rtsold without an RCE

at least updates are quick now with pkgbase :)

the main question still stands... how do we pkgbaseify old setups?

with pkgbasify? :)

where you convert a regular FreeBSD system to pkgbase

its a tool

antranigv: github.com/FreeBSDFoundation/pkgbasify

antranigv: its very good(tm) I did all my pkgbasey stuff with it

make sure you have the lastest pkg installed beforehand

anybody running 15.0-RELEASE and /latest/ pkg branch

then it should run fine from 14.3

last time I ran it on my server it crashed my server. luckily I was able to revert the BE

dch: yes

but I will try now

I'm getting "pkg: sqlite error while executing grmbl in file update.c:154: NOT NULL constraint failed: packages.path" irccloud.com/pastebin/JMt3JcdJ/pkglolwat

leah2: can you do a pkg update and see if you get the same error please?

sure

I'm on pkg 2.4.2, amd64

`pkg update -r FreeBSD-ports` should be sufficient

I don't see this error on the arm64 systems so I'm guessing something new is borked; the arm64 builders are usually behind a bit

indeed

ta, I do a PR for it

curiously the upgrade earlier worked fine tho

let me try latest pkg from src first tho

yes its new last couple of days I think

nope its present in pkg 2.4.990.3-c642c9442 too

so... pkgbasify a BE, not the running syst

MelMalik: pkgbasify will do a BE for you

and check you have enough disk space *cough*

I still need to figure out how to prevent pkgbasify from giving me Everything

just remove packages later

and ensure you're using latest pkg (2.4.2) first as well

very important

yeah i mentioned that already

pkg: sqlite error while executing grmbl in file update.c:154: NOT NULL constraint failed: packages.path

thats weird

as if I would know which packages to remove because removing the -set- ones does not lead to autoremove doing anything

do I need to purge my pkg db, or is this the remote db which is being fetched having an error

shouldnt have corrupted the local db

dch: oh wait you literally just said it

xD

I think this is a remote db issue then

the "remote db" is literally a huge wodge of jsony-yamly-goop

so its a pkg issue

oh right

I didnt update pkg in the last few days tho

last update was Dec 5

that issue happens for me too when poudriere tries to fetch repos

and it worked fine until today...

weird... a sleeper bug :p

waited a few weeks before making itself known

I dunno it feels like a repo issue to me

because pkg works just fine with my own repos

Remilia: well thats what I thought but dch is a core developer so I assume he knows a lot more than I do :p

only the first part is true, just because I have a pointy hat doesnt mean theres anything under it ...

wait

I think I know what happened

yeah I am pretty sure this is a case of double repo conf

at least for me

Remilia: not for me, I checked my /etc/pkg/FreeBSD.conf

I have a /usr/local/etc/pkg/repos/FreeBSD.conf with url: "pkg+http://pkg.FreeBSD.org/${ABI}/latest",

and /etc/pkg/FreeBSD.conf with FreeBSD-ports url: "pkg+https://pkg.FreeBSD.org/${ABI}/quarterly",

one would surely take priority over the other?

they are different

one is FreeBSD-ports and the other is FreeBSD so it tries to update both

anyway experiments showed that it's latest with issues

quarterly updates fine

quarterly is behind though

I guess no conflicts there because it just gets two different repos for ports, I disabled the old one (I think FreeBSD was renamed to FreeBSD-ports?)

I don't really care about it being behind as long as it has working poudriere

thus, solved my issue for now hahaha

Oh others are seeing the same pkg error, thank dog. Thought I was going to have to hand-repair pkg databases

is anyone else unable to update the latest FreeBSD-ports repository on a FreeBSD 15.0 system?

crest: freebsd/pkg #2575

no

dch: so you have the same problem

alright buildworld time

Remilia: use `pkg repositories` to see what all the resolved pkg repos are

quarterly still works, but i don't want to downgrade

for those using IPv6 please bare in mind there is an RCE in rsold

polarian: link?

dch: freebsd.org/security/advisories/FreeBSD-SA-25:12.rtsold.asc

ta. aah cool "from systems on the same network"

yeah it couldn't be WAN

as your router would drop them

~hopefully~

for the moment, my kids are not at this level of hacking sadly. But one day!

still something I wont leave unpatched, takes one compromised device on the network to then use the RCE to pwn you :p

also public wifi...

polarian: I thought FreeBSD SAs were posted to mailing lists and RSS feeds

well just because the vuln exists doesn't make it exploitable, but again not something to leave up to chance

Remilia: they are

I got the email from the security mailing list last night when I was going to bed

I have just booted my laptop this morning to find pkg not working, and was updating my src tree to buildworld/buildkernel

so did I and people have been posting about it here too hmm

I guess we'll just see it repeated for the next few days haha

@polarian: FreeBSD-SA-25:12.rtsold reads as bad as ShellShock *yikes*

crest: I was going to bed and saw "RCE" and thought "oh shit" until I realised its router solicitation and that is LAN-only

and my laptop is on a separate VLAN

and your wifi?

I mean how many ipv6 enabled systems do you know

do you never connect to any untrusted wifi networks?

Remilia: all my systems :0

crest: of course... but I am at home right now, so I am fixing it, but if I was not home I would have been "oh shit"

if say, I was attending a conference, I would be concerned

but you can also disable router solicitation in rc.conf while patching and enable it after

or install dhcpcd

meh

slaac systems unaffected yeah

most interfaces have nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL> but rtsol/rtsold isn't running on their systems or what they connect to

f451: router solicitation is needed for SLAAC

afaik

the only time you dont need router solicitation (and advertisement gateway side) is when you are statically assigning IPv6

neighbour solicitation and advertisement is always required for the functioning of IPv6 as its a requirement for NDP

so if it's using ipv6 it'll be using rtsol at the very least?

f451: do you have it enabled in /etc/rc.conf?

it is a daemon

no its not enabled

then you dont need to worry

but if you are using slaac you really should use solicitation as its used to request network information from the router

rtsol seems to be misnamed from how I understand Background and Workaround in the SA, it reads like rtsol handles Router Advertisement if ACCEPT_RTADV is set on the interface

the only ipv6 stuff in my rc.conf is ifconfig_bridge1_ipv6="inet6 -ifdisabled auto_linklocal accept_rtadv"

nimaje1: afaik it handles the router advertisements, and sends solicitation

but I haven't read the source, so I cant say for sure

nimaje1: it is also possible that accept_rtadv passes to rtsol if rtsold is not running?

infact slaac isn't running either ;)

the rtsol part and what I understand rtsold_enable to enable is just sending the Router Solicitation messages

nimaje1: welp from the SA, it states if you have accept_rtadv you are vulnerable

so I would assume rtsol/rtsold is in use in some shape or form if a interface has a the accept_rtadv option

i patched anyway

s/option/flag/

buildworld still running for me :p

i wanna call what rtsol does chirping because i'm a dork

i just patched then make install in /usr/src/usr.sbin/rtsold

f451: theres also erattas to zfs and vmm

but because I use my /usr/obj for jails, I rather have a complete world

vmm one doesnt affect me cos i dont use passthrough

need to look at the zfs one

meh I dont bother reading erattas I just patch them :p

I only tend to read security

~even if it doesnt affect me~

i read em all if i can cos im kinda ocd about it

yeah, I didn't find documentation how Router Advertisement are handled, but as I understand rtsold_enable, that part is just about sending Router Solicitation messages

f451: I did think that buildworld preserved /usr/obj on patch releases

but obviously not

I was decieved

:D

yeah

I wonder if I had make in /usr/src/usr.sbin/rtsold if it would have wiped my obj too

as differing timestamps

prob would have :/

ive been bitten by preserving obj. and by meta mode

meh, I am going out for a pint soon, will leave makeworld going

it makes updating my jails really easy too

best to blat /usr/obj. i know it takes more time

I will provision a build server at some point, I have lying around resources, just lazy :p

going from 14 to 15 especially - blat obj ccache meta modr turn off filemon move src.conf asige build generic

yeah but major releases always need a fresh obj tree

also install compat14x

i broke everything all the different ways the first time. thankfully on a disposable vm

f451: also you said you compiled rtsold

you didnt compile rtsol?

which is also vulnerability

was just thinking that

they are in the same dir

ah, should have looked a bit lower in rc.conf(5) rtsol handles Router Advertisement messages for interfaces which have accept_rtadv

f451: and this is why I just buildworld :p

nimaje1: HAH

I knew it!

I assume with rtsold is running rtsol passes it to rtsold

oh wait nvm

no

nimaje1 was correct in their assumption, rtsold is exclusively handling sending router solicitation, while it appears rtsol actually only handles router advertisement

so the whole "Misnaming" thing makes sense

rtsol is actually rtadv

polarian: the Makefile in the rtsold dir controls both rtlol and rtsold

f451: ah alright

I haven't inspected the repo, I was just asking :p

well, it isn't really documented, just rtsol_flags saying it is used for rtadv

i dont see how the rce should work tho

leah2: how so?

could the duplicated CuraEngine-debuginfo package be caused by a bug in sub package support?

nimaje1: maybe something to bring up with the docs people then?

one of the duplicated CuraEngine-debuginfo packages has no path attribute as noticed by @dch

crest I wondered but there’s nothing I can see in cgit.freebsd.org/ports/tree/cad/cura-engine/Makefile about sub packages am I right?

not directly

like where does this -debuginfo suffix even come from?

has to be from something in Mk/Features/debuginfo.mk

dch: did you do something, pkg upgrade works now?

oh wait nvm!

i think the WITH_DEBUGINFO=yes line enables this

ups

44:WITH_DEBUGINFO= 1 # Will segfault if Release

in cad/cura-engine/Makefile

aaah I missed that probably because I read it on my phone

but WITH_DEBUGINFO is something for a ports user to set, not for a port to set

wait

does that port maybe want to hard code CMAKE_BUILD_TYPE instead? that seems like something a port is allowed to set

- /* TODO: remove security bug */

+ if (security_bug) return;

nimaje1: could be an env var name collision between the ported software and the port

wrt `pkg update` issue, this has been fixed on the main build server, and we are waiting for this to trickle out to mirrors atm

if somebody who does reddit wants to update the thread over there that would be a great help

it's not a variable name collision because the string [DEBUGINFO](github.com/search?q=repo%3AUltimaker%2FCuraEngine+DEBUGINFO&type=code) doesn't appear in the upstream repo

so this port is abusing the WITH_DEBUGINFO ports feature to get specific build flags

Other than using some variant of -g and some variant of the linker / splt command to break out the debuginfo file how is this port abusing WITH_DEBUGINFO?

the a comment in the port makefile says that Release builds of Cura-Engine will segfault

WITH_DEBUGINFO= 1 # Will segfault if Release

in line 44

this should be harmless

but because of the problem in the ports tree infrastructure it isn't

instead of just generating one more package

so three instead of two

There should be other ways to fix a segfault

and one of the two "CuraEngine-debuginfo" packages lacks the required "path": "<path-to-pkg-file>" attribute in the json file "data" inside the "data.tzst" file

download pkg.freebsd.org/FreeBSD:15:amd64/latest/data.tzst if you want to confirm the problem

extract the "data" file from the tarball

I'm more interested in debuginfo and segfaults ;-)

and run it through jq

something quick and dirty like: cat data | jq -C '.packages[] | select(has("path") | not)' | less

(yes it's cat abuse)

crest: "it's cat abuse" glad it's not about animal cruelty.

run this command if you want to see both packages:

< data jq -C '.packages[] | select(.name == "CuraEngine-debuginfo")'

one package has the path and repopath field and the other lacks exactly those two

"path": "All/Hashed/CuraEngine-debuginfo-5.7.0_5,1~ba3686b059.pkg",

"repopath": "All/Hashed/CuraEngine-debuginfo-5.7.0_5,1~ba3686b059.pkg",

the fixed repo has been replicated to all mirrors

freebsd:15:x86:64 latest 2025-12-17 15:18:41Z 1.02 100 present

How can I check whether the patches were applied on my system?

check /var/log/messages

freebsd-version -ru and compare the output to "Fixed in ...-p<n>" in the announcement email.

hmm I wonder if I could have a clean pkgbase install in a separate BE and then switch to that

V_PauAmma_V: this approach will not work for vmm/zfs patches with freebsd-update, and might scare the user into thinking they have not updated when they have

JetpackJackson: freebsd-version -u -k should be -p1

polarian: kernel version will not be -p1 if not pkgbase

Remilia, duly noted.

polarian: yippee it is

one downside of pkgbase in jails: you cannot update some packages without allow.chflags

though I guess you can pkg -r .... from the host system

tbf that problem exists without pkgbase, too

libc and other critical things are noschg no matter the install mechanism

instagram.com/p/DSYC-jMDglu/?utm_so…web_copy_link&igsh=NTc4MTIwNjQ2YQ== <-- kookies & bred.

hello, later on with 15.0 -> 16.0 will freebsd-version still exists or? also will branch releng/15.0 get updated patches etc?

?

who knows

mzar: forget what I wrote :D

slimmed down my pkgbasified system by vicious, prejudiced use of bectl jail

all right, writing this down for the future: `BSDINSTALL_CHROOT=/jail/path/here bsdinstall pkgbase --jail`

unticking every set gives you a 121 MB jail

is that how you can whip out a jail? that's amazing

if you are wise.

you can do a 40MB jail with OccamBSD

it's not even particularly dark magic

i don't like openbsd as much

but it's a whole build

nono github.com/michaeldexter/occambsd

it is a script to turn off every build option that can be turned off, and then turn on what you need

thankfully I do not need this

Remilia, Thanks for that! I am writing it down to try later...

you are wise, Remilia :)

rwp: I wish I read that bsdinstall man page two days ago but nevertheless, pkg -r also works hahaha

i would love to convert some of these bhyve freebsd vms into jails

rwp: if you copy the repo keys over to the jail directory, you can `pkg -r /path/to/jail install FreeBSD-set-minimal-jail` and that's basically the same

you don't even need anything else, that pkg command will do everything needed

i reeber back in the day when APC was APC and not APAC schneider asking them for a battery they told me my UPS is not replaceable, then I managed to find the exact same battery the apc website said i needed on officedepot.com

but bsdinstall is definitely more convenient

cpet: they use generic lead batteries iirc

at least for BackUPS series

cant find 12V 6Ah only 5 at lowes

i still have not diagnosed my eaton :'(

i got new batteries and they did not help

was surprised that office depot had the exact pn

the UPS is old and it was connected to my cable modem, switch and voip

so I was upset when it ble up at 2am heh

:( isn't that the way

but APC support is beyond shit

but then again most companies which get bought end up

well shit :D

Remilia, Thanks! I am still on 14.3R everywhere but as soon as I dig myself out of my current task queue debt I will be testing out the new stuff. There is some cool stuff in 15 that I really want to try out.

desktop hasnt crashed in over a day

maybe ill be the one submiting a PR for updated gpu-firmwares

rwp: in other things I learnt today: pkgbasify WILL bloat your system (it installs every single set), and for clean and safe trimming you can do the following (I will probably write a weblog post tomorrow):

cpet, APC makes both user replaceable battery UPS units and supposedly user NOT replaceable UPS units. I think the disposable ones should be outlawed as a crime against the environment. But anyway, as you find it is possible to replace those batteries too.

opened it up and d/c the cables

i would call that user replaceable

if they were dolered on i would classify that as user no replaceable

heh

after upgrading to 15 create a new BE, `bectl jail -U` it and leave the BE; then `pkg -r /tmp/be_whateveritgaveyou set -v0 FreeBSD-set-[every set you do not need]` followed by `pkg -r .... autoremove`

but I bought the battery at 58 and I should receive it on 29th of Dec

I think all of the batteries have spade lugs which are just slide off and slide on connectors. But you had to use a screwdriver to disassemble it, right? That made it disposable rather than user replaceable.

you will probably have to manually `pkg -r ... remove FreeBSD-tests` etc.

Remilia, debloating the result of pkgbasify requires a jail?

set-base includes everything

rwp: well that is stupid now is it

ant-x: I prefer to do it in a separate BE

to be safe

OK.

bectl lets you jail a BE

FreeBSD ist hardcore

Lol

ximon: didnt you say yesterday that you would go back to arch cause you couldnt find netoworkmanager ?

ximon: now you say freebsd is hardcore ?

ant-x: basically I am very paranoid and it is a production system with a ton of stuff on it

so I switched to the new BE and kept the old one for now

for some reason ive noticed that people jut like to do thing just to do things rather to do things when they need to do things rather than just using the computer

Cpet yes

FreeBSD is simple and self-evident

I get stumped every time I have to deal with Linux

Remilia try nixos

Linux was not made for dumb people like me

Boot Environments rock! I can't believe I lived without them for all of the while before.

ximon: I will not, ever

Remilia how comes I'm dumb I can use Linux bot not

But not freebsd

Lol

ximon, Illusion of control, because of an initially low-effort install?

Illusia

Illusion of controll was always there never was gone

Nobody verify the code your running

ximon: different type of dumb

I guess Solaris is there on the Netras

Remilia, I always have spare systems that I test things on before doing anything I haven't done before on production systems. When possible. I have some systems that I inherited to maintain and they are one-off unique systems without a development area and I always dread working on those systems live.

if you have a production system ill be dumb enough to try tech preview stuff on it

that is on you though

rwp: I know that feeling, it overwhelms me every time BoT/MUFJI ask me to knock sense into their COBOL code

because they spent 30 years migrating off System/360 and are not done yet

I find that configuring FreeBSD is really nice, since so much can be achieved simply by editing /etc/rc.conf, instead of having to go to a million different config files all of different formats on Linux... Things get a bit more difficult when you have to debug things though, since there's less documentation and a lot of things can error out in quite mysterious ways, like with NFS

Remilia, It's a journey not a destination! :-)

MUFJ, the I is extra there

DaliborFox: i dont like json

and UCL

JSON is better than XML, anyway.

rwp: they really wish it wasn't because as it turns out nothing modern can replace COBOL and Erlang

it cost too much to replace it

I think they're emulating System/360 now and that's their best solution

then they realize they have to replace it cause no one knows cobol any more

Putting COBOL and Erlang in the same era in the same sentence blows my mind! I mean, decades between them, right?

ant-x: XML is has schemata, JSON does not

except for retired old school IT peoples

at least use TOML

-is*

i still like the bleh = yes

rwp: Erlang is 1986

Remilia, true, that. But JSON is so much more readable, editable, a parseable.

same age as me

think there were talks in making rc.conf either UCL or jason

cpet, Sometimes facing rewriting 10 million lines of undocumented code that must be correct or people die or have $$$ lawsuits is too daunting to actually do. And that's why we have COBOL, ADA, and the others still running.

cpet, Oh, no. Please, keep it text!

rwp: yeap

and like seriously, COBOL appeared in 1960, and that's closer to 1986 than 1986 to 2020

rwp, Ada is a good modern language.

my first non-machine code, non-Assembler language was PL/M followed by Ada

and I love Ada

Ada is Pascal improved.

I like Modula-3 ;/

(but since I was never a programmer or an IT person I don't really know much about serious programming)

I guess I put my foot in it when I grouped ADA in there. I admit I have never programmed in it.

Ada is not capitalised

it's named after Ada Lovelace

you mean da is not capitalized :P

Algorithmic Description Annotation :P

Pascal on the other hand was the language used all through my university days. I was so happy when I switched to C. It felt like so freeing.

Pascal is better than C, fight me

first class I had was C and i blew through all the exam examples

did the same with python

it wasn't until I had a class with jscript that made me actually learn something

Remilia: Not the standard version though. However, Modula-2, which fixed most of Pascal's short-comings, is pretty nice

C is small yet compilcated. Pascal is small /and/ clean /and/ simple.

Pascal makes sense, has standards, and is well defined

C has standards, too.

yeah I was going to say hah

lol

C/C++ both have stds

Unfortunately there aren't a lot of Modula-2 compilers out there

yes they have stds and give you stds

Remilia: Pascal's standard version is _very_ limited

GNU Modula-2 ?

DaliborFox: i used to create all my sys admins tools in m3 as no one knew wtf it was

DaliborFox: :P

In other news... I just a moment ago had to switch my Firefox User-Agent so I could log into my Discover credit card site. The default user agent was rejected with an obscure and vaguely worded login failed message. After I got past the login then I could switch it back to the default.

C can come back when they define UBs

Standard Pascal is indeed hard after the Borland dialect: <standardpascal.org>

Remilia, I hate UBs, but they are intentionally there. Silly!

Turbo C was kind of nice

but C was still not nice

But C++ is much worse.

ant-x: I used Turbo Pascal 3.0 on CP/M 2.2 ha ha...

3.0! Before they had syntax highligtin and their signature look and feel!

3.0 had WordStar editing

I used Turbo Pascal 3.0 in DOSBox with text-mode vector-font output.

Not Borland Brief?

can you guess that to exit the editor you need ^K^K

It was amazing how fast Turbo Pascal compiled and how small the program code was to be both a compiler and an editor.

Borland was my first IDE

ant-x: Yeah, it's great that we now have GNU Modula-2, and that it was even integrated into the base GCC distribution not long ago

but then my brother worked for MS and I got all the fancy stuffs

wait was it ^K^D sorry

(before, it was a standalone module that had to be compiled separately)

GNU are doing a good job, but what with the rust-cancer?

DaliborFox: you know theres a version 3 right ?

cpet: There's also Oberon :P

DaliborFox: i first messwed with m3 when I looked at the cvsup code

DaliborFox: forsome reason the syntax made sense to me and I learned it to an extent

DaliborFox: I liked having the other admins looking at the code and going wtf is this?

ant-x: C++, while it is a mess, did bring some interesting ideas to the table, so someone had to clean it up and bring those ideas to a more sanitized environment :P

as most of the stuff was in perl or python

Oberon -- the language written in proportaional font and without syntax highlighting?

Hello! This CVE does not include upgrade instructions for pkgbase installations freebsd.org/security/advisories/FreeBSD-SA-25:12.rtsold.asc

Oberon (/ˈoʊbərɒn/) is a king of the fairies in medieval and Renaissance literature. He is best known as a character in William Shakespeare's play A Midsummer Night's Dream, in which he is King of the Fairies and spouse of Titania, Queen of the Fairies.[1]

How do I update the kernel when using pkgbase? I see "freebsd-update is incompatible with the use of packaged base."

kind of the fieries

mr_sm1th: pkg upgrade

looks like I am affected:  uname -a

FreeBSD rowpad-cx23 15.0-RELEASE FreeBSD 15.0-RELEASE releng/15.0-n280995-7aedc8de6446

I did that, but it's still the old one

speaking of which I finally replaced cairosvg as mediawiki's SVG renderer

(that is a mix of python and C I believe?)

mr_sm1th: what does freebsd-version say

now running resvg (Rust)

15.0-RELEASE

cpet, It's still the old one because the binary compiled build either hasn't finished yet or failed to build it. It will eventually flow through.

Python cannot work without C, it relies on C in all its operations and packages.

mr_sm1th: `pkg upgrade` should update your kernel packages

mr_sm1th, , It's still the old one because the binary compiled build either hasn't finished yet or failed to build it. It will eventually flow through.

Sorry cpet! Miss-typo-tab complete there!

rwp: but the package is there

Oh OK. The CVE is from yesterday though.

FreeBSD-kernel-generic-15.0p1

But thanks for the info!

mr_sm1th: like I said, pkg upgrade should handle this for you, the package is long out

Remilia, What pkg pulls in the version spectic FreeBSD-kernel-generic-15.0p1? Maybe mr_sm1th doesn't have that one installed?

s/spectic/specific/

rwp: if you have pkgbase, it will update the kernel

and I do not understand your question

root@server:~ # freebsd-version

15.0-RELEASE-p1

root@server:~ #

I have two VMs that run generic kernels with pkgbase and both were updated this morning without issue

oh

Remilia, You can ignore my question. Eventually when I try out pkgbase it will be something I will see myself. But usually version specific packages don't upgrade to the new version without using a second package that is generically named which upgrades and pulls in the version specific package.

ant-x: Then again, so do pretty much all languages these days, unless your compiler happens to come with its own kernel-facing standard library... which most do not, most use the C standard library as the interface to the OS

rwp: sorry, I do not understand, because a pkgbasified system and a fresh 15.0 RELEASE install simply update packages

But only slow scripted languages use libraries writtin in another language. Julia libraries are written in Julia.

i forgot to update two system to p1

pkg will update FreeBSD-kernel-generic-15.0 to FreeBSD-kernel-generic-15.0p1

desktop runs stable

Maybe my mirror is stale?

cpet, writing admin "scripts" in Modula is extermist :-)

ant-x: why?

mr_sm1th: do `pkg update` and check if `pkg search FreeBSD-kernel-generic` shows 15.0p1

doing consulting work doesnt include "the software I used to configure you email server"

if you get no matches at all you have the repo disabled

Remilia, For example I have mariadb106-client-10.6.23 installed on a system. The pkg upgrade command will never upgrade it. I find that terribly annoying! I must manually pkg install mariadb114-server-11.4.8_1 to upgrade. And of course mariadb118-server-11.8.3_1. And then next and the next!

Remilia No hits

cpet, 1) compiled laguage needs a compiler, 2) the choice of a unpopular compiled language. What did you write in Modula?

Remilia, pkg will never upgrade those because the version is encoded in the pkg name and therefore they appear as different pkgs.

rwp: why did it upgrade it for me?

If you can figure that out and tell me I would appreciate it!

Remilia it's installed though pkg info -all | grep FreeBSD-kernel-generic-15.0

FreeBSD-kernel-generic-15.0:

mr_sm1th: I asked you to check pkg search, not pkg info, though

at /usr/local/etc/pkg/repos/FreeBSD.conf

FreeBSD: { url: "pkg.FreeBSD.org/${ABI}/latest" }

pkg info has no hits

Remilia sorry pkg search no hits, pkg info finds it

that's not the right repo

as in, it does not match /etc/pkg/ content

check if FreeBSD-base is enabled in /etc/pkg/FreeBSD.conf

Ah now it makes sense, I messed up my installation then

I should have chosen a pkgbase specifc repo

Yes it is enabled in /etc/pkg/FreeBSD.conf

if not, add "FreeBSD-base { enabled: yes }" to /etc/pkg/FreeBSD.conf

hmm

Actually

enabled: no

errrr

sorry

actually its /usr/local/etc/pkg/..

to /usr/local/etc

[22:08:23] <mr_sm1th> at /usr/local/etc/pkg/repos/FreeBSD.conf <- add "FreeBSD-base { enabled: yes }" here

(if pkg info has FreeBSD-set-* stuff)

ant-x: small programs used to setup email,web mostly just simple what domain would you like to use and what mail server domain would you like

Remilia That did the trick!

mr_sm1th: :(

Sorry I am very new to FreeBSD and I think I followed some old guide or something

mr_sm1th: does it offer to upgrade 15.0 to 15.0p1?

Yes

cpet, indeed, those are typicall scripted. Good job!

[22:06:10] <rwp> Remilia, pkg will never upgrade those because the version is encoded in the pkg name and therefore they appear as different pkgs. <- also you are incorrect here

rwp: [mia@outpost ~]$ pkg info FreeBSD-kernel-generic-15.0p1 \ FreeBSD-kernel-generic-15.0p1 \ Name : FreeBSD-kernel-generic \ Version : 15.0p1 \ Installed on : Wed Dec 17 13:55:44 2025 UTC

ant-x: i did more freelance work back then now it's not so easy as people aren't as reluctant to allow people in that in the early 00

's

rwp: can you explain which version is encoded where?

Remilia: pkg version info is in the meta data

the package is named FreeBSD-kernel-generic

it does not include version in its name

so I don't understand rwp's argument here

is it like saying pkg will not automatically upgrade apache24-2.4.1p1 to apache24-2.4.2 or something because of the p1?

Remilia: unix.beer/~chris/%2bMANIFEST.txt

cpet: sorry, I know about package metadata, since around 1990s

and I'm not sure what you are trying to explain to me

ok you dont see the "version":"3.5..?

what does it have to do with anything?

16:14 < cpet> Remilia: pkg version info is in the meta data

I do not think you are following the arguments

rwp's stance is that the kernel package name, without version, is "FreeBSD-kernel-generic-15.0p1"

mine is that 15.0p1 is the version

actually its just p1

[22:06:10] <rwp> Remilia, pkg will never upgrade those because the version is encoded in the pkg name and therefore they appear as different pkgs.

cpet: it is not

why not?

cpet: [mia@outpost ~]$ pkg info FreeBSD-kernel-generic-15.0p1 \ FreeBSD-kernel-generic-15.0p1 \ Name : FreeBSD-kernel-generic \ Version : 15.0p1 \ Installed on : Wed Dec 17 13:55:44 2025 UTC

well there you go

please point me at where it says 'Version: p1'

after the 0

lol

;/

all right I guess you were, what is it called, trolling?

Pretty sure the version is 15.0p1 as evidence by the part where it clearly says "Version: 15.0p1"

sorry, I do not have time for that, so you will have to excuse me

isley: it is

isley: sometimes it just fun to play with the know it alls

i don't know what that means

Remilia: you're excused

seems more likely you were just wrong and realized it at some point and don't have the faculties to handle it like a normal person

but i guess also could be your thing. i'll never know. i'm going to back to something else.

5 hours and 40 mins to buildworld O.o

buildkernel time

isley: ok

isley: it means I was helping mr_sm1th earlier with the OS/kernel upgrade and they were told something slightly incorrect earlier, so cpet took offence

polarian: how in the name of jebs does it take you 5 hours for a build world ?

polarian: that's fast

cpet: i5-3320M

I think my home router takes a day

takes me like 30 mins

its dual core but because of SMT it has 4 threads

but its only clocking at 2.6GHz

it takes me 2 minutes

(well 2601MHz)

oh you are talking about build time

for some reason freeBSD doesnt detect the boost clock of 3100MHz

I remember building 4.8 I think it was, on a Pentium 90 with 16 MB RAM

now that took me around 1.3 days

Remilia: thats a router :p

yes it was a router!

cpet: what specs tho

for my 192/96 kbps DSL

no doubt you got a lot of memory (for caching) and a lot of cpu power

the HDD was PIO3 only :D

polarian: intel core 7 h270 15gigs of ram ccache

er 16*

I have 8GB i5-3320M at base clock

desktop has 64 gigs of rams

you need to give it some more juice

cpet: h270 is the chipset tho

no its the CPU model

what?!!?

or actually let e look or else Remilia sill get upset with me again

ok so its the 240H

ah

polarian: btw I also ran a mail server on that P90 system, and could always tell that new mail came in because the 540 MB PIO3 HDD would screech

cpet: now that makes sense

you are building on rapter lake no wonder you have high compile speed

ivy bridge is fucking 12+ years old

hey, 3770K was pretty powerful :(

you need to give it some more juice

you have 5x more cores and boost clock to 5.1GHz

I used it until 2019

if you load isnt 300+ youre doing it wrong

cpet: I run an old laptop

it is doesnt take 5-10 secs to see txt coming in

youre doing it wrong

I need to provision a build server mainly for ports, but for buildworld/buildkernel too would be cool

I have a ryzen 5 1600 lying around

desktop is a ryzen 7

not going to be the fastest, but its a whole lot faster than my laptop

but yu cant use it as a lap warer though

polarian: btw Makefile supports creating pkgbase repos

warmer

in /usr/src that is

Remilia: fuck that

never

I will never pollute my system with pkgbase

such harsh words

:)

I'm building my custom kernels as .pkgs now

:o

why

very comfy

squad*

spent a day researching how to build a kernel pkg without buildworld but it works now

cpet: probablt because Remilia prefers Linux over BSD

im wating until .1 before i play with pkgbase

so would want FreeBSD to mimic Linux

polarian: have you read this channel

polarian: damn linux people

cpet: dont do it!!!

dont drink the pkgbase poison

within the last 2 hours I clearly stated I do not understand and do not use Linux

polarian: either i do it now or im forced to in 2 years

either way its happening

Remilia: and yet you endorse a Linuxism of packaging the base system :)

SunOS, AIX, IRIX, 386BSD

polarian: nice catch

cpet: move to OpenBSD

:p

polarian: I run openbsd on a firewall

If Linux users breathe air, breathibg air is a Linuxism?

polarian: yes I do, it's comfy and fast

cpet: likewise

incredibly comfy with jails

ant-x: yes

I love my base

I will not give it up for the world

you could offer me a million dollars and I wouldn't accept

All you base are blong to FreeBSD.

fail

I'm so happy updates are practically instant now, especially on my old routers

You can pry my base system out of my cold dead hands

freebsd-update on a Jaguar with 4 GB RAM takes 20 minutes just analysing system

freebsd-update was slow

Remilia: freebsd-rustdate exists

doesnt take that long

polarian: would it *really* matter on a 1 GHz 6W SoC with a very slow mSATA SSD?

or compile freebsd on a build server, mount /usr/src and /usr/obj and then installkernel/installworld

ez

Remilia: ah so instead use tons of bandwidth

I do not work in tech

also I wouldnt be against a tarball with the entire base in it

polarian: what i do

I do not have a 'build server'

im against splitting off the base into hundreds of packages

if we are to package base, it shall be one package

"base", not a metapackage

one entire system

why?

probably very easy to upgrade then

and quick to download

no because its one system...

you dont have dependency hell

you dont have compatiblity issues of where one package updates, and it doesnt work with another

the system is built together, runs together and works together

are you mistaking FreeBSD for Linux?

no

pkg's have dep hell as well

what you described is impossible with pkgbase

cpet: yup

but they are extra software

when pkg breaks, the base system wont

when pkg breaks with pkgbase

your base is fucked

because pkgbase is built as buildworld

yeap

i am sure that there will be a time when pkgbase eat itself up

just like linux does sometimes

you will stay on 15 though so it will not affect you

if pgbase removed my kernel or some libs it will

but in the long run no really cares how you manage your system

on polarian does

heh

er only

personally i dont understand why people waste there time custom buildng ports just to remove a option removing 2 deps

but at the end of the day who cares right ?

what ever happened to openrc ?

nice to see thats not dead

i know PCBSD used it

polarian: does this mean youll hate having a gfx installer as well?

polarian: what if you had a choice of TUI or gfx ?

I realized this chat is quite a bit more active when the Americans are awake

cpet: WAIT THEY ARE MAKING A GFX INSTALLER TO REPLACE BSDINSTALL?!!?!?

mr_sm1th: this chat is always active

Hi, what's up?

so - are shared IP jails still a thing?

like i know they work, but did everyone drop them like a hot rock as soon as VNET didn't crash?

i've found plenty of IPv6 + VNET jail tutorials but no shared IPv6 jail tutorials

cpet: I think openrc is still used by alpine linux?

openrc exists, and some people still f- with it

polarian: yeap

wavefunction: and a few others

wavefunction: the gentoo people made it so

LXGHTNXNG: so people still fuck with it ?

... yes

LXGHTNXNG: i see

jaredj: what is a shared jail ?

jaredj: blog.burghardt.pl/2009/01/multiple-…reebsd-jails-sharing-one-ip-address

ant-x: why not ?

Too obvious.

Fear of rejection :-)

ant-x: fears of being rejected

so he joined TR club

Which club is that?

go watch suburbia

No in the near future.

Good night, all!

what future ?

I shan't watch Suburbia in the near future.

you shant that cant

its a movie from the 80's

good movie youre missing out

I have too many odler movies on my list, from the thirties and up.

Going to bed now!