06:09:29 alright I want to kick off a convo a while back which I never really finished, so jailing bhyve, within the handbook it is said to add security, but someone here at some point pointed out almost everything is inkernel, so jailing bhyve is nothing more than jailing the userspace utility and that bhyve being pwned would bypass the jail anyways (as its inkernel) 06:09:37 so question is, is jailing bhyve worth it? 06:10:23 I have both used it within a jail and outside of a jail, I find using a jail makes it easier though as I can inject the bhyve command into the startup of the jail, and then when the jail is stopped bhyve gracefully shutdowns 06:38:37 It would make sense if bhyve knows it's inside a jail and keeps to the constraints, but I really can't say about all the in-kernel stuff. It could even facilitate a jailbreak. Maybe ask on the mailinglists? 07:12:10 <[tj]> polarian: jailing bhyve limits some of the risk area to the jail rather than the raw host. the kernel parts of bhyve are setting managing the vmm, but there is also a lot of userspace code to handle vmexits 07:12:40 <[tj]> https://en.wikipedia.org/wiki/Swiss_cheese_model 07:13:36 [tj]: interesting, so I am not doing it all for nothing then, I prefer using a jail anyways as it separates it from the host, just cleaner that way 07:13:43 and with zfs compression, its mostly cost free too 07:14:01 <[tj]> you would hope that most security mitigations are never actually exercised, like airbags 07:57:55 true 07:58:47 andrath: might be worth asking anyways for 1. mailing list history, and 2. would likely get a more indepth answer (as mailing lists are better for that shit, instead of small sync IRC communications) 09:06:50 is most recent iwlwifi ( that is in stable/15 branch ) works only in ac mode for Intel AX210 wireless? it seemed to me it had to be working in ax mode too 09:10:17 <[tj]> we don't have ax support 10:35:08 [tj]: ok, fair enough. 10:36:08 [tj]: too bad you cant just wrap LinuxKPI around that :p 10:36:24 the freebsd way of supporting lots of devices, wrap linuxKPI around Linux drivers and call it a day >:) 10:36:34 wasn't Adrian working on 802.11ax? 10:37:26 <[tj]> we need ieee80211 stack support for ax, we have some? 10:38:53 [tj]: idk for some reason I have some memory of Adrian working on ieee80211 support for ax, or maybe he spoke about the idea or something 10:38:55 idfk 10:39:03 I cant remember 10:39:12 personally I use 802.11n and I dont need anything more... 10:39:28 802.11ac is a nice to have but I dont find it helps me in any way 10:39:29 isn’t ’n’ the short distance one? 10:39:54 GoSox: depends, I actually use 802.11g a lot more (as its 5GHz which is less congested) 10:40:11 wait no 802.11n can do 5Ghz too iirc 10:40:45 sorry g is 2.4GHz 10:40:56 my favorite thing to do when a customer is complaining about constanatly shitty wifi, is to log in to their router and change the channels of their wifi to the middle numbers nobody uses. And like magic, their wifi goes from spotty and unreliable to rock solid 10:40:59 GoSox: you might be thinking of 802.11ac, which was only defined for 5GHz (and falls back to .11n for 2.4GHz)? 10:41:10 oh maybe i don’t know 10:41:14 but funny enough I am using 802.11g right now 10:41:25 because for some reason freebsd likes connecting with 802.11g, I have no fucking clue why 10:41:26 wifi all works so good these days, I don’t even pay attention to whats what 10:41:30 it does do 802.11n sometimes 10:42:02 anyway GoSox 5GHz is shorter distance, but in cities it will travel further due to less congestion, 2.4GHz has only a few non-overlapping bands and thus is heavily congested. 10:42:51 most people use the default channels, hardly anyone actually goes in to their router to change that 10:43:04 i’m sure people in a freebsd chat room do, but “normies” do not 10:43:25 GoSox: its usually not worth it 10:43:31 the point is that 5GHz is less congested because you can't see the other traffic at all (as least not as much), regardless of what channels you use 10:43:39 your AP will switch channels to the least congested (or should) 10:43:57 if you hard set it, if more APs pop up, you will be hard coded onto a congested band 10:43:59 when you’re in a multi-unit buildling or in a dense area where houses are very close together, it can be very worth it 10:44:02 s/band/channel/ 10:44:28 GoSox: what you can do is narrow your channels that will help, but also affect performance (less bandwidth) 10:45:05 unfortunately most routers by default use the max channel width + max power... so its basically just a shouting match in the cities, who can have the biggest antenna :) 10:45:49 the benefit of 5GHz is it cant pass through thick walls, so for the most part your home is more shielded from it, downside is it struggles to cover a medium sized house, so you then need to mesh or run ethernet, meanwhile 2.4GHz can cover large spaces, but easily congested (2.4GHz better for countryside for example, or outdoor APPs) 10:45:53 s/APPs/APs/ 10:47:12 also hi ivy IPv6 nexthop didn't work, turns out OpenBSD doesn't support it, thus it won't route OpenBSD side :( 10:47:25 the router gets the packet, doesn't know what the fuck to do with it, and drops it 10:47:40 polarian: i suggest writing a strongly worded letter 10:47:53 ivy: I just binat'd 10:47:55 pf ftw 10:48:00 its not worth any more months of my life 10:48:10 motivating myself to do something is hard enough, these setbacks just cause further issues 10:48:13 its being worked on, but its low priority 10:48:23 hopefully in a few releases (few years) it will be supported... 10:48:30 until then binat works fine (aka 1:1 NAT) 10:48:55 I wished I just binat'd in the first place, instead of fighting with IPv4-only on FreeBSD, and then IPv6 nexthop on OpenBSD *sigh* 10:50:44 i wonder if pf with route-to would work... although that's terrible and you should never use it 11:05:42 wifi is just poor 11:06:37 ISPs are always like “our router has the fastest wifi!” and I’m always like, who cares about wifi speed, if something is important it will be on ethernet 11:08:05 GoSox: not everyone can run Ethernet cables all over their house, and something may not be "important" but still benefit from increased download speeds 11:09:34 i bought a 1000’ spool of cat6 for my house and wired up everything :) 11:11:55 good for you, as i said, not everyone can do that 11:24:55 polarian: according to an OpenBSD user, IPv4 routes with IPv6 nexthops are supported since at least 7.8: https://x0r.be/@lw⊙bc/116317731957010927 11:43:07 ivy: I got told on the ML today its NOT supported 11:43:21 theres no way for route(8) to add a route for nexthop 11:44:11 hmm one says snapshot 11:44:14 one says 7.8 11:44:18 ML says none 11:44:34 fun! 11:45:07 ivy: unfortunately thats the only way to realistically have any reliable internet 11:45:22 I have knocked a few holes in walls (dont tell landlord) to run ethernet through 11:45:42 no mesh system, no enterprise wifi solution would work in a house with 20 APs surrounding i 11:45:44 it* 11:45:48 the house also has abnormally thick walls 11:45:58 it seems like that would depend on how large your house is 11:46:07 I would say its medium 11:46:42 in any case I just ran an external cable to my room, have a wifi AP there, and ethernet to my desk, and then I have a wifi AP along the trunk downstairs, and it gives me decent enough reliability, albeit not going to be the fastest 11:46:48 but if I need speed, I plug in, simples 11:47:07 in American-style/newbuilds wifi is better, but I am in a victorian home, and they are NOT designed for wifi xD 11:47:19 in any case I do want to move the fuck out anywqays :p 12:30:07 why does 'make CROSS_TOOLCHAIN=llvm19 WITHOUT_LLVM=yes buildworld' build libllvm? do i need another option to disable that? 12:31:12 ah, possibly WITHOUT_CROSS_COMPILER=yes 12:57:16 ivy: curious what you building llvm for 12:57:29 you into apple ecosystem stuff? 12:57:37 scottpedia: LLVM is shipped with FreeBSD, even time you build FreeBSD src, you build llvm 12:57:52 okay interesting 12:58:56 ivy: is it something depended by the freebsd in any way? 12:59:19 it's the C/C++ compiler, so yes 12:59:58 you can use an external toolchain, which means you use a compiler (llvm or gcc) which is not part of the system itself, e.g. from ports, but it seems like right now we still need to build some bits of llvm when doing that, perhaps for the ELF toolchain 13:00:10 ohh right freebsd doesn't use gcc/g++ 13:01:28 i might actually switch to using gcc, since the gcc build often breaks and people don't notice or fix it 13:01:44 (on the downside, that means you have to fix the gcc build before getting around to the real work...) 13:05:32 isn't there a github integration that does gcc builds? 13:06:21 cyric: the Github pull request workflow runs a GCC build, if that's what you mean. but since it's always broken, no one cares if it fails 13:17:43 ivy: broken in what way? I thought the compiler are normally super reliable. 13:18:17 scottpedia: the compiler isn't broken, the build is broken, i.e. it doesn't build with gcc. this usually happens because gcc has some warning that llvm doesn't have, and we build most things with -Werror by default 13:19:22 sorry wdym the "build"? are you talking about the binary output? 13:19:35 scottpedia: the build of FreeBSD. building FreeBSD using GCC as the compiler. 13:20:24 okay so you mean you can't build freebsd with gcc? 13:21:14 can I say to "compile" freebsd with gcc? is there a difference when using either terms? 13:21:53 sorry i am not very familiar with the c/c++ ecosystem 13:26:23 ivy: #srcmgr's diverse enough that I think assigning to them for lack of better candidate is reasonable 13:27:18 i don't recall if they'd promised to re-route things that they can't do or not, but given current initiatives to try and fix stale review problems I'd imagine they will 13:43:49 I've got a newb question about using pf tables that source files and i'm not sure where to ask it :3? 13:45:08 then start with explaining what you want to do, then what you tried to do that and where you are stuck 13:46:15 it's more of how they work. I was just wondering if I need to reload pf when the files the tables point to are changed 13:46:31 <[tj]> yes 13:46:39 yes, you do, but there's a way to reload only tables with pfctl 13:47:08 (i can't remember what it is, though) 13:47:12 I'll read the manpage for that thank you :3 14:56:01 people can somebody give me recommendations regarding the best option between UnionFS, aufs and OverlayFS? 14:59:06 what are aufs and overlayfs? 15:02:23 rtprio: both are similar to unionfs with a copy-on-write feature 15:04:07 scottpedia: best option for what? what is the use case you are evaluating against? 15:04:51 voy4g3r2: i am planning on re-installing my OS with either one of these systems 15:05:15 filesystems* 15:05:29 i am looking for mainly the best compatibility 15:05:47 and reliability too, obviously 15:08:20 not familar with eithre of those in freebsd 15:09:38 also, zfs uses copy on write and that's what most folks use 15:11:37 yes. zfs seems to be the most professional choice 15:13:15 okay thx for the help rtprio 15:15:40 but seriously, do the latter two even work on freebsd? i've never heard of them; not in ports, not in /sbin so not sure you're going to swing an install with that 15:24:18 yeah i came to same conclusion as rtpio 15:25:02 scottpedia: my recommendation would be to minimize variables.. zfs exists and it is tested.. going outside of that would introduce risk which is fine.. but may not be fine when "something" goes boom 15:25:02 but you can't use unionfs or overlayfs as sole filesystem, they are for combining filesystems, so what is your use case here? (I assume that applies to aufs too, as you say that it is similar to unionfs) 15:40:19 scottpedia: have a look at the BUGS section in mount_unionfs man page 15:41:06 clearly states "IT DOESN'T WORK" 16:47:10 freebsd got pwned 16:47:14 fucks sake 16:47:18 https://forums.freebsd.org/ 16:47:24 they look like script kiddies too 16:47:36 the fact they put a Discord server there, they must not be any older than 18 16:47:50 is it known that the forums have been defaced? 16:48:10 what did freebsd do to get pwned 16:48:16 i couldnt find a proper communication channel to report it to, and the mailing list server seems to be taking a hit as well. it's super slow 16:48:30 as long as this is not a vuln in freebsd 16:48:33 and just a skill issue with sysadmins 16:48:36 I am happy 16:48:45 but if this is a potential RCE in the wild... I am fucking terrified 16:49:04 clusteradm is aware of the issue, the forum is not hosted on freebsd.org infrastructure 16:49:16 ivy: ahhhhh phew okay 16:49:21 can blame someone ele 16:49:23 else* 16:49:28 ivy is the mailing list also getting a hit or is it normally slow? 16:49:37 time to push freebsd foundation to run its own forums now! 16:49:44 Xinayder: mailing lists are always slow 16:49:46 Xinayder: hit by what? 16:49:57 i haven't noticed any issues with the lists today 16:50:10 it gives me a 503 backend error when I try to open the archives, plus it's taking so long to load here 16:50:14 Xinayder: slow meaning a few mins or a fe w hours 16:50:18 hmmm archives 16:50:20 slow meaning a few minutes 16:50:28 compared to about 20 minutes ago it's super slow 16:50:35 oh 16:50:38 502 to lists.freebsd.org 16:50:43 that is hosted by freebsd no? 16:51:10 might be down - just as a precaution 16:51:18 maybe. 16:51:29 what do some Turkish script kiddies want anyways 16:51:29 I hope. :) 16:51:42 well, the hackers mangaed to inject some code into xenforo, as it seems like every topic section in html is embedding the defacement web page, which is hosted on github 16:52:26 ah they are political 16:53:39 here I was shitting my pants thinking i ahd installed some malware by downloading sylve on my mini pc 16:54:55 right how are the pkg repos 16:55:21 this ^ 16:56:13 I dont know what is hosted by who 16:56:17 and how its hosted 16:56:20 so whats the scope on this 16:56:26 from the sounds of it the forums are hosted separately 16:56:33 in which case everything else should be fine 16:59:01 well, that's creepy... 17:00:09 if this is creepy to you don't start thinking about what happens when somebody abuses their commit bit 17:00:29 well, of course 17:00:37 nah freebsd devs are nice 17:00:41 I only know one or two arseholes 17:01:04 they know who they are, they know full well how I feel about them :) 17:01:26 but is it even fully known what the scope of this is yet? 17:03:36 mewt: I dont think there is much to worry about 17:03:42 it seems like a bunch of political script kiddies 17:04:03 the limited info I can find on them is they hack people on political grounds 17:04:22 fair enough 17:05:11 We should be worried about what enabled this though 17:05:48 well I dont have a forums account so I couldn't give a toss 17:06:02 think of the poor LLM trainers 17:06:43 A part of the project's infrastructure has been breached and that is always serious 17:07:03 yeah idk, even if the impact is limited there, seems quite bad 17:07:09 to* 17:07:17 I wonder what the openbsd folks will think about it 17:07:25 they are probably munching on popcorn right now 17:08:44 * elarks munches popcorn 17:08:51 Jokes aside, I just discovered it 17:10:35 I do wonder how it got pwned though 17:12:26 Likely a forum software vuln or something. Maybe social engineering. 17:13:40 I would prob go with social engineering 17:13:48 one of the admins prob got compromised 17:14:10 It's Kevin Mitnick 17:14:21 From the grave 17:15:29 Just one last hack 17:16:00 Crash Override 17:17:08 90% of the time it’s safe to blame php 17:17:42 Surely. 17:18:01 I remember way back there was a very easy way to gain admin access of a phpbb forum by changing a variable in a cookie 17:18:02 I don't remember what forum software they're using. 17:18:21 elarks: Sounds about right. 17:19:21 Forum software is pretty notorious for being vulnerable to injections and stuff. I wouldn't be surprised at all if was something simple. 17:19:30 I hope we get a nice postmortem 17:19:35 they use xenforo 17:20:12 There was a search string you could use on google to find forums with that specific version on phpbb 17:20:44 Xinayder: Ah. Thanks. 17:21:15 discourse gets regular security disclosures too iirc 17:21:17 so yeah 17:23:42 No recent CVEs from Xenforo. If it's a 0day, many others are interested about this 17:25:30 Quick look at exploit-db nothing stands out 17:28:36 Someone on the list just pointed out it’s only defaced is you have js enabled 17:30:01 baz: I disabled js 17:30:05 it still loads it 17:30:14 soooo 17:30:16 idk 17:31:40 It loads the defacement from github, but the loader JS is in forums.freebsd.org 17:32:26 hmmm 17:32:46 lts: the hackers look like script kiddies, like they could find a 0day and exploit it 17:32:49 I will be shocked if they did 17:33:15 True 17:33:41 I'm rather hoping it's that, perhaps via some automated fuzzing or (brr) AI 17:34:11 lol 17:34:18 AI couldn't pwn a fucking open system 17:35:04 in any case I am interested how in the infra is handled 17:35:07 It would be worse if the compromise happened due to bad processes 17:35:14 Anyone join that discord? I don’t have that cancer installed or have an account 17:35:52 I’m curious if they are relaying these chats over there 17:36:03 if xenforo is pwned, serves freebsd right for using proprietary shi 17:36:05 shit 17:36:14 My bet would be the attackers are sitting on this channel too 17:36:14 baz: I dont have Discord 17:36:20 hey ivy you around, I know you have Discord :) 17:36:28 lts: nah doubt it 17:36:34 script kiddies cant figure out how to use IRC 17:37:18 freebsd forums is back!!!!!!! 17:38:02 down for me, that's potentially good 17:40:17 I wonder if its managed hosting by xenforo themselves 17:40:25 ivy said its not on freebsd infra 17:40:36 so I wonder if xenforo themself got pwned, and or socially engineered 17:40:47 in which case, time to drop them like a hot potato! 17:44:26 nah, if it was xenforo then the damage would be far worse 17:44:53 > Forum upgrade in progress. 17:44:53 theres probably a library or js file that was updated that allowed an entry point or something like that 17:45:02 uh oh 17:45:06 seems like it looks like a 0day 17:45:37 looking at the IP addresses within the freebsd infra 17:45:42 it seems the forums isnt part of it 17:45:44 soooooooo 17:45:58 I am going to guess its hosted by xenforo directly or something 17:46:01 and its a them issue :p 17:46:28 maybe related to this: > In addition to the usual bug fixes, XenForo 2.3.10 includes a critical security fix involving a potential stored XSS vector in structured text mentions (mostly legacy profile post content). We'd like to extend thanks to metho for responsibly disclosing the issue. 17:49:28 I hope this wasn't a case of not installing security patches 17:50:12 tbh I just got started with freebsd today, at least it's not the 6th time they allow SSL certificates to expire like some certain arch-based distro 17:50:52 just to reiterate what i said above, the forum is not managed by the freebsd.org cluster admin team. (beyond i have no more information on it than anyone else here) 17:50:54 Xinayder: expired ssl certs is minor compared to being pwned 17:51:16 ivy: so its managed hosting by xenforo right? 17:51:21 thats what it looks like 17:51:29 i have no idea 17:51:55 Seems to live in some NetActuate datacenter 17:52:10 One would think they’ve got more important shit to do than admin a forum 17:52:25 lts: yeah I can whois an IP 17:52:31 but freebsd doesnt use netactuate 17:52:38 so thats how I figured out its not freebsd infra 17:52:51 so I can only assume its managed hosting... 17:53:10 ivy: how do you know about the freebsd cluster admin team? are you one of them? 17:53:48 i am not, but there was some internal communication about the issue 17:54:11 (which literally just said what i said above... i am sure there will be more information forthcoming later) 17:54:12 I would be very interested in learning more about freebsd infra 17:54:20 mk, thanks for the assurance 17:54:22 gotta bump into the right peopl eat a conf ig 17:55:20 it's actually managed by aliens, humans are not intelligent enough to comprehend the complexity of it 17:56:57 > XenForo Cloud systems are hardened against attack vectors to prevent data theft or leakage. Automated systems regularly snapshot and back up your data to off-site servers located in the EU for GDPR compliance purposes. 17:57:05 Would be funny if they got pwned now wouldnt it 17:57:58 on that note its nap time 18:06:03 You get naps!? Where do I get those!? 18:10:28 At $work we have dedicated nap rooms 18:15:47 lts: where do you work google? 18:16:14 or a sleep clinic? 18:16:21 I don't think Google employees get to sleep 18:16:23 At all 18:22:52 I sure know I don't get to sleep! 18:23:00 Must be nice. 18:56:19 since the forums are down, what is the correct way of changing freebsd to a rolling release, or the least, get the latest version of certain ports? 18:58:21 Xinayder, are you asking about the OS or the ports? 18:58:41 I suppose it's not a good idea to mix quarterly OS with latest ports? 18:58:47 for ports: a default installation tracks quarterly packages. you can change that to latest instead. 18:58:59 there is no such thing as a quarterly OS (unless I am missing something with regards to pkgbase in 15) 18:59:54 if I need/want something that is more recent than -RELEASE, I just go with stable. that however means that you're going to compile from source yourself on every update you want to make. I'd say that is the closest to "rolling release" you can get without actually running -CURRENT 19:00:20 -CURRENT is latest and -RELEASE is what? 19:00:27 assuming this is about ports, you shouldn't mix quarterly and latest packages. you can run quarterly and backport updates from main yourself, but that requires building your own ports and is a lot of work 19:00:34 Sounds like you'll just want to edit /etc/pkg/FreeBSD.conf and change quarterly to latest 19:01:02 that's the idea, yes, but should I change the freebsd-base repo to point to base_latest, or just keep the major release? 19:01:03 -CURRENT is the main branch, typically not what you want to use unless you're a developer 19:01:18 ivy, does pkgbase have a stable repo? 19:01:54 Xinayder: you probably want to touch only the FreeBSD-ports and -ports-kmods 19:02:11 Xinayder: FreeBSD-base is the OS itself, so unless you want to switch from (say) 14.4-RELEASE to 14-STABLE, you should *not* change that - that's completely unrelated to the version of ports you're using (latest/quarterly) - yes, it is a bit confusing that "latest" is used for both 19:02:43 jbo: yes, "base_latest" is stable 19:02:54 jbo: as opposed to say "base_release_0" which is X.0-RELEASE 19:03:08 I'm still scared of pkbase :p 19:03:19 "anything new is bad" - old man yelling at clouds 19:04:08 (except in 16, where base_latest is CURRENT, since there is no 16-STABLE yet, of course) 19:04:17 reasonable 19:05:11 ivy, lts: I see, thanks! 19:05:57 Xinayder: just to be clear (because this isn't always obvious to new users) - FreeBSD is split into two almost entirely unrelated parts, one is the base OS (usually called 'base' or 'src'), and the other is ports, which contains the majority of third-party software. if you aren't sure which is which, anything in /usr/local comes from ports, anything else comes from base 19:06:19 unlike most Linux distributions, you can use the same ports version on any supported freebsd release (13, 14, or 15) 20:03:23 hello 20:14:48 is there a way I can change the repo url from pkg.freebsd.org to use any of the ftp mirrors? or the ftp mirrors don't host binary packages? 20:16:14 Xinayder: you can put any URL you want, if you know a particular mirror you want to use. although i don't know if anyone has ever tested pkg with an FTP mirror... 20:16:27 i would probably prefer HTTP just because it's more widely tested 20:18:12 the format of the url string changes if you switch to plain https, no? 20:18:27 that is, mine is currently set to pkg+https://pkg.FreeBSD.org/${ABI}/latest 20:21:35 hmm, i was looking at mirrorservice.org for an example but it seems like they don't carry packages anymore, although i'm sure they used to... maybe something to do with the fastly transition 20:24:11 what happend to the forums ? 20:29:57 /join #bash 21:17:35 any updates on the hack/ 21:24:25 baier: you should be able to space once then /join #bash 21:24:33 you on thelounge ? 21:24:59 I'm trying to install jellyfin with freebsd-ports set to latest, but the pkg cannot be found. it exists in freebsd-ports 15.0, though. 21:27:57 seems like it fails on extract or checksum, maybe the distfile got remade https://portsfallout.com/fallout?port=multimedia%2Fjellyfin%24 21:43:45 polarian: No updates that I've seen. 21:43:56 sad 21:48:04 Xinayder: I have (what appears to be) the latest Jellyfin amd64 package available if you want it. 21:48:54 Xinayder: Are you saying that "pkg install jellyfin" doesn't work with the package repo set to "latest" or are you actually trying to build from the port? 21:49:19 ek: the former 21:50:58 Gotcha'. Well, like I said, I can provide you the package I have if you want it (and trust it). 21:51:10 I won't be offended if not. Haha 21:51:34 it's fine, I can use the previous version from the quarterly release. it's not that outdated 21:52:26 I remember having issues with one of the previous versions. There was something broken withe generation of thumbnails or something? Had to replace some file to get it working. 21:52:32 Not sure what version that was fixed in. 22:24:32 ek, does hw acceleration work for you in jellyfin? 22:29:30 Xinayder: To be honest, I don't know. I have running in a jail on a NAS without a GPU. I've never tested HWA. But, I do like that I can tell it to use whatever number of threads I want for thumbnailing and trickplay generation. 22:54:33 forums are back up, yay 23:02:34 Xinayder: i do not think jellyfin in ports is GPU enabled.. it uses the ffmpeg package from ports and does not use an optimized version, available at jellyfin.org https://jellyfin.org/docs/general/post-install/transcoding/hardware-acceleration/ 23:03:44 voy4g3r2, it worked after some setup. fwiw I'm running a jail under sylve, was a bit tricky to get it working. long story short, had to install drivers, mesa-gallium-va, on both host and jail 23:04:30 oh.. i have mine in a jail also, never got it to work.. but the amount of usage i get.. the cpu transcoding worked just fine.. plus my GPU is mainly for llama-cpp.. would you by chance have "notes"? it would be interesting 23:04:46 but hte whole getting a host GPU to work in a jail.. was always a epic fail for me 23:05:09 I used this https://sylve.io/guides/deployments/jellyfin-jail/ there's a section about adding the devfs rules for the jail 23:06:19 oh mucho gracias.. i may have to look at this in more details. thank you 23:06:21 the important thing to keep in mind is, after you change transcoding settings, restart your jellyfin through the web panel... I was stuck on this part for about 30 minutes because the ffmpeg call wouldnt initialize the device 23:07:03 but it still doesn't work properly, I just got a movie and tried playing it, transcoding started and it's being killed before finishing the job 23:07:03 i use base jails.. i would just reboot the jellyfin jail.. but good to know.. never heard of this sylve tool 23:19:50 Sylve is kinda cool. Been meaning to play with that and ClonOS when I get a chance. 23:23:34 i've had good results passing intel iGPU through to a an ubuntu bhyve vm 23:24:09 GPU acceleration works flawlessly out of the box 23:24:31 my freebsd machine is a mini pc, gmktec g10. has a Ryzen 5 3500U cpu with integrated radeon graphics 23:26:41 could work, you'll get a /dev/dri/renderD128 in linux 23:27:29 i personally got worried when llama-server is using it for vector models (not in a jail) then trying to share the card with a jail.. 23:27:43 but this is good to see, that other people were more successful than me.. maybe worth another try 23:28:40 now if magically CUDA would work on freebsd.. it would make my life a lot easier.. vulkan works 23:32:33 mjp, it "works", I just need to find a way to tweak it. the transcode timer is killing the transcode job on jellyfin, dunno why 23:35:25 how did you confirm its using GPU and not CPU? 23:41:19 good question. I suppose /dev/dri/renderD128 refers to a GPU? 23:41:30 (you can configure which device to use) 23:49:04 on linux with intel gpu its very easy to confirm as there is a utility called intel_gpu_top which shows actual GPU usage