-
aGaTHoS
pkg upgrade wants to upgrade nvidia-driver nvidia-kmod and nvidia-settings but no nvidia-drm-66-kmod neither nvidia-drm-kmod so if i install ... its gonna break right?
-
dango
aGaTHoS: ... I don't like how that sounds.
-
aGaTHoS
well i just locked these packages, till pkg upgrade really wants to install new version of all of them, weechat updated so gonna quit and reenter :)
-
grahamperrin
aGaTHoS: uname -mvKU
-
grahamperrin
aGaTHoS: uname -mvKU
-
grahamperrin
Also, latest or quarterly?
-
aGaTHoS
FreeBSD 15.0-RELEASE-p5 GENERIC amd64 1500068 1500068 and im in latest
-
SponiX
Wow 15.0 is already up to patch 5
-
Xinayder
I'm looking at the pkg-status dashboard to see the build queue. I saw on 15-default that sylve 0.2.2 was built, but 0.2.2 is on the queue again to be built? shouldn't it be 0.2.3?
-
grahamperrin
-
grahamperrin
-
Xinayder
ah, I missed it then, was checking beefy23
-
grahamperrin
-
grahamperrin
Sorry, the link to quarterly was n/a
-
Xinayder
ah-ha, my pkg-status was only showing completed builds
-
grahamperrin
Xinayder: <
people.freebsd.org/~grahamperrin/pkg-status> (via <
redd.it/102lt8a>), it's outdated but the principle is much the same.
-
titou
hi
-
titou
I'm trying to upgrade packages on a FreeBSD server with pkg upgrade. It told me that it founds a new pkg version which needs to be installed first and after it writes that the most recent versions of packages are already installed and it loops indefinitely
-
titou
is there a solution to get pkg working again
-
titou
sorry found a solution by removing my local repository and use only the FreeBSD one then pkg succeed to be reinstalled
-
titou
anyway another question: how to get py-certbot and py-caldav since the first one needs urllib3 and the second urllib3-future?
-
GoSox
does ‘timeout’ come already installed on freebsd? and if no, is it in pkg?
-
GoSox
i ask here because my freebsd machine is not running right now
-
Gedge
GoSox: I believe so
-
GoSox
cool that will come in handy
-
Bushmaster
howdy dudes, anyone here, i could use some help ...
-
GoSox
i’m here but i don’t know anything
-
vkarlsen
Bushmaster: Ask your question, people will look and answer if they can
-
Bushmaster
thanks vkarlsen i am in the process of configuring SFTP server which harness the 20 GiB storage partition ada0p5 in my case
-
Bushmaster
if anything goes wrong, i may need some help
-
vkarlsen
Bushmaster: Using ssh from base, or from ports, or...what?
-
Bushmaster
ssh and i am not successful
-
Bushmaster
it says connection closed
-
Bushmaster
-
vkarlsen
Anything in the logs?
-
Bushmaster
this is how i declared the path and permissions etc
dpaste.com/2EK52W2FU
-
Bushmaster
i think it is something to do with permission because /media/gooncat is mounted partition of /dev/ada0p5
-
vkarlsen
Ok, but check the logs
-
Bushmaster
how to check SFTP log
-
vkarlsen
Look at /var/log/messages and /var/log/auth.log
-
Bushmaster
i think i located the problem, on log, let me pastebin you
-
Bushmaster
-
Bushmaster
line number 9 i think is the problem, i need to rediti the sshd_config with correct path
-
Bushmaster
i think
-
vkarlsen
It would indeed seem so
-
Bushmaster
still problem vkarlsen
-
Bushmaster
-
vkarlsen
Can you verify that /media/gooncat/sftpGoon/bushmaster/ exists?
-
Bushmaster
it does not exist, let me pastebin you what i did in sshd_config file
-
vkarlsen
Oh, ok, did you restart sshd after fixing the config?
-
Bushmaster
which i did, i am sure its something to do with wrong path declaration somwehere
-
Bushmaster
Match Group sftp
-
Bushmaster
ChrootDirectory /media/gooncat/sftpGoon/%u/
-
Bushmaster
X11Forwarding no
-
Bushmaster
AllowTcpForwarding no
-
Bushmaster
ForceCommand internal-sftp
-
Bushmaster
this is what i did in sshd_config
-
Bushmaster
i think i just need to do /media/%u/ right?
-
Bushmaster
because /dev/ada0p5 is mounted on /media/gooncat
-
vkarlsen
The dir has to exist, for starters
-
Bushmaster
this is how I laid out directory structure for my SFTP server
dpaste.com/GHN3CCTL4
-
Bushmaster
not sure where i am going wrong
-
vkarlsen
You have /media/gooncat/sftpGoon/uploadDownload on your filesystem, but your config points to /media/gooncat/sftpGoon/<bushmaster>/
-
nimaje
and the users should have access to /media/gooncat/sftpGoon? why do you try to confine them to the non-existing /media/gooncat/sftpGoon/<username>/ then?
-
vkarlsen
I put bushmaster in <> because that's what %u will translate to
-
Bushmaster
excellent problem solving skills you have and excellent question, i am kind of new to these, let me think and think
-
Bushmaster
users will only have access to uploadDownlaod directory under sftpGoon
-
Bushmaster
# pw useradd -n bushmaster -d /media/gooncat/sftpGoon -g sftp -s /sbin/nologin
-
Bushmaster
# mkdir -m 0750 /media/gooncat/sftpGoon
-
Bushmaster
# chown root:sftp /media/gooncat/sftpGoon
-
Bushmaster
# mkdir -m 0770 /media/gooncat/sftpGoon/uploadDownload
-
Bushmaster
# chown bushmaster:sftp /media/gooncat/sftpGoon/uploadDownload
-
nimaje
then you have to change ChrootDirectory to reflect that
-
Bushmaster
ChrootDirectory, giving me headache and I am lost there
-
Bushmaster
lack of knowledge of path declaration I guess
-
Bushmaster
is this look okay aligning with my directory structure? ChrootDirectory /media/gooncat/sftpGoon/uploadDownload/%u/
-
vkarlsen
No, because that %u at the end will resolve to the username of the user logging in
-
vkarlsen
/media/gooncat/sftpGoon/uploadDownload/%u/ ==> /media/gooncat/sftpGoon/uploadDownload/bushmaster/
-
vkarlsen
You cannot chroot to a directory that does not exist
-
vkarlsen
This is why your auth.log says: stat("/media/gooncat/sftpGoon/bushmaster/"): No such file or directory
-
nimaje
your user(s) will only have access to ChrootDirectory and sub-directories of it, so if you don't want that user-specific, then don't add %u in it
-
Bushmaster
you folks have conceptions very clear, and i am struggling to understand the theory
-
Bushmaster
what i do not want is user can access my FreeBSD root system
-
Bushmaster
cannot
-
Bushmaster
i do not want remote user end up accessing my root system
-
Bushmaster
and that is where I am struggling
-
vkarlsen
Is this any clearer: your sshd config points to /media/gooncat/sftpGoon/<USERNAME>. That last part of the path does not exist.
-
vkarlsen
Please let me know if you understand what I'm saying
-
vkarlsen
I have to go eat, will be back a bit later
-
Bushmaster
vkarlsen, i will take a break, and return to change the directory structure, and will message you
-
Bushmaster
vkarlsen, and nimaje thank you so much, you really broadened my conceptual understanding specially with SFTP path declaration
-
Bushmaster
i have finally resolved it, thanks to your brilliant minds
-
Bushmaster
here is the final output
dpaste.com/7E7C2SDRX
-
vkarlsen
Bushmaster: Happy to hear that! \o/
-
Bushmaster
few more things I need to do over the coming weeks
-
Bushmaster
i need to configure apache webserver and i want to bring certbot for https if that is even possible
-
rtprio
sure it's possible
-
grahamperrin
-
mfisher
how complex is your apache config? could now be a time to liberate yourself to caddy?
-
Bushmaster
cool rtprio mfisher i have not configured apache in freeBSD, my last project was on Debian 13 but Certbot challenge failed with Debian 13
-
wsky
is there a simple way to run php7 on freebsd?
-
wsky
maybe in a jail?
-
rtprio
why php7
-
wsky
becaue i need to run legacy software
-
rtprio
it's not going to be simple
-
wsky
that what worries me :[
-
wsky
i can do a jail and pass packets to it i guess
-
ek
Definitely not "simple". It is doable, though. You'll need to pull an old ports tree repo and build it manually.
-
ek
It's not terribly difficult. You may run into some gotcha's, though. Some older PHP7 code might not be fetchable.
-
wsky
it's like
-
wsky
every time i tryu to do something in a freebsd jail i meet this wall i cannot breach
-
wsky
maybe freebsd is not for me :[
-
ek
wsky: Would it be easier or more beneficial to do the same task on another OS?
-
wsky
well
-
ek
If so, I'd do that. But, I'd also stick with FBSD for other things that it does excel at.
-
wsky
on debian i could debootstrap a legacy debian system in a simple way\
-
wsky
i'm a debianer :[
-
ek
Fair enough.
-
wsky
freebsd is like stabbing me constantly with the every command i type
-
ek
If you're familiar with ports, it should just be a simple git command to pull an old tree. Then, just run your "make install" for PHP7. It shouldn't be too bad.
-
ek
wsky: How so? What issues are you running into?
-
wsky
it's like everything is not right
-
ek
That's the exact way I feel about Linux. Haha
-
ek
I'm not bad-mouthing Linux, though. Don't get me wrong. I just never know what to expect or where anything is.
-
ek
I get lost and then it all starts to feel broken.
-
hodapp
when I have to use Windows 11 at work, both Linux and FreeBSD are a huge breath of fresh air
-
ek
hodapp: I've heard REALLY bad things about Win11. Especially the ad stuff.
-
ek
Like, even if you pay for a license you still get ads all over the place? Is that true?
-
hodapp
ad stuff, Copilot shit, pushing OneDrive & Teams shit everywhere
-
hodapp
it's a fucking obnoxious mess
-
ek
Holy cow! That is definitely something I couldn't deal with. Sorry to hear you've got to. :(
-
lts
Are Macs an option?
-
hodapp
for my work?
-
lts
Yes
-
ek
I'd go with a Mac before Windows any day of the week.
-
hodapp
sort of but not until they get past some other regularity nonsense
-
hodapp
regularity? regulatory.
-
ek
Bummer.
-
ek
At one of my old ${JOBS} they would give you a Windows laptop unless you requested a Mac specifically.
-
ek
And, if you did, you had to fill out all kinds of questionnaires to explain why you needed it.
-
lts
I had success with FreeBSD as work laptop until Teams came along. Screensharing was the unbeatable boss
-
ek
lts: Yep. There are some hurdles, for sure.
-
hodapp
have never done FreeBSD on a laptop before
-
ek
Does that work with Linux?
-
hodapp
I've done Teams on Linux before, yes
-
lts
Worked with Linux last I tried. Switched to a Mac a couple years ago
-
lts
($DAYJOB requires either Mac or Windows nowadays)
-
hodapp
we *had* Linux laptops for awhile, System76 ones
-
ivy
i'm pretty sure i've used Teams on FreeBSD via the webapp, but it's been a while since i used it on desktop, so i might be remembering wrong there
-
lts
It worked fine until you had to share your screen
-
lts
I had a role which required presenting now and then so it just didn't work. I'm sure it was Microsoft's fault.
-
multisn8
it did work on linux -- during COVID lockdown, I threw it into a systemd-nspawn container
-
ek
ivy: Were you able to screenshare?
-
ek
I'm actually surprised I've never tried this. I'll have to give it a go.
-
ek
Very rarely have I ever shared my screen. I usually just have people join my tmux session or something.
-
ek
Granted, I don't do a lot of work involving point-and-click.
-
scoobybejesus
I'd say i gotta try that tmux session sharing thing, but i have practically no friends who use the command line for anything hehe
-
ivy
ek: maybe i didn't try that, i don't do it very often
-
ek
scoobybejesus: Welp, time for some training! :)
-
ek
ivy: Samsies. I'm gonna spin up a VM and see if I can get it to work.
-
aGaTHoS
anyone knows if nvidia drivers are broken? when doing pkg upgrade it wants to install nvidia-driver nvidia-kmod and nvidia-settings but don't nvidia-drm-kmod and nvidia-drm-66-kmod, lasta time i've got one of these packages with diferent version than other the module failed to load giving a missmatch version, so this time i have locked the packages to be updated until there are new versions for
-
aGaTHoS
all of them, is this correct?
-
titou
I resend my question: how to get py-certbot and py-caldav since the first one needs urllib3 and the second urllib3-future?
-
rtprio
i have py311-certbot, what is the problem?
-
rtprio
er, to rephrase, what's the problem with urllib3?
-
titou
rtprio: urllib3 and urllib3-future are mutually exclusive. py-certbot use urllib3 and py-caldav use urllib3-future.. so when I try to install both pkg ask me to remove the other etc.
-
rtprio
ah, that's tough
-
rtprio
there are other acme clients, if your setup is simple
-
titou
this situation is quite boring :(
-
rtprio
what uses py-caldav ?
-
titou
a custom application
-
rtprio
yeah, use a different acme client, or run one or both of your python utilites inside a virtualenv
-
titou
:(
-
rtprio
the general school of thought is custom apps should not use system packages such as that
-
vkarlsen
aGaTHoS: You can do it that way. I like to build them myself and thus avoid the whole problem. They don't take that long to build.
-
aGaTHoS
i use packages not the ports
-
vkarlsen
And that's why you will sometimes run into this problem, because the packages come from different pkg repos that aren't updated synchronically :)
-
aGaTHoS
i think its possible to mix packages and ports but i would have to do research first, so i better wait to developers to upgrade the two missing packages
-
vkarlsen
Mixing the nvidia drivers from ports with the rest from pkgs won't cause you any grief
-
aGaTHoS
different repos? what do you mean? i only have one repo and one for kmods
-
vkarlsen
The kmod pkg probably came from the kmod repo, and the driver and libs came from the ports repo, and they are not necessarily updated at the same time, causing a version mismatch between them
-
aGaTHoS
i think i dont really have any package installed from FreeBSD-ports-kmods, gonna see if i can guess
-
aGaTHoS
ok i have one, one of these missing precicely: FreeBSD-ports-kmods drm-66-kmod-6.6.25.1500068_8
-
aGaTHoS
ups no, its not the nvidia-drm-66-kmod its just drm...
-
aGaTHoS
all the nvidia packages belong to FreeBSD-ports repo
-
aGaTHoS
so they just updated 3 of them and not the other 2
-
vkarlsen
The kmods repo contains only a few kernel modules, so it doesn't take long to build the whole thing. The regular ports repos (latest and quarterly) contain every distributable pkg, and take much longer to build. There can be a window of time where their versions are out of sync.
-
aGaTHoS
well i will wait