07:27:16 <nerozero> question, pkg-static is simply similar pkg but statically built with all libs built-in ?
07:28:14 <iRobbery> yessir
07:28:30 <nerozero> awesome
07:28:31 <nerozero> thanks !
07:28:36 <nerozero> I saved ...
07:29:22 <nerozero> acidantly run `freebsd-update install` twice and pkg is not starting
07:29:43 <nerozero> pkg-static bootstrap -f - savior
07:30:06 <nerozero> Thanks to whom make this possible
07:33:12 <iRobbery> one of the first devs that made that same choice :)
07:36:02 <nerozero> The bright person!
08:26:06 <ivy> nerozero: there's also a statically linked copy of most base utilities in /rescue, in case you break the entire system somehow
08:26:36 <nerozero> ivy, yah, helped me A LOT of time
08:26:40 <nerozero> thank you
08:27:19 <nerozero> mostly on bsd4 on fail mount of ufs
09:55:21 <ivy> irssi capsicum mode is somewhat annoying... you can't save the configuration, which i can understand (although being able to save it to a temporary file would be nice) but you also can't reload the configuration after editing it on disk
10:00:32 <nimaje> hm, why doesn't it keep a fd for the configuration dir and some temp dir? openat(2) is still allowed in capsicum mode
10:02:28 <ivy> nimaje: well, you wouldn't want an attacker to be able to overwrite your configuration because then they could just disable capsicum mode
10:11:32 <nimaje> ah, yeah, can you restrict dirfds that files can only be opened for reading from it? that would solve reloading
13:44:24 <dvl> For your non-compression viewing pleasure: https://dan.langille.org/2026/05/10/newsyslog-telling-it-not-to-compress-for-anything/
14:43:39 <nimaje> hm, I would suggest letting the shell do the sorting instead of parsing ls, but no idea if shells other then zsh have that feature, with zsh you would add  (om)  at the end of the glob and get the file list sorted by modification time and there wouldn't be any problem with strange filenames
17:11:57 <hmjsp> ivy, mason: thanks for ur help yesterday. i nearly got the thing working but one small issue: to control transmission remotely, it listens on a certain port. it seems that using fib, that port becomes inaccessible due to the vpn. downloading with the torrent seems to work but i can't control it remotely this way... is there a way to work around this?
17:47:13 <futune_> hmjsp, is this about transmission in a fibbed jail?
17:48:25 <futune_> you should explicitly do
17:49:08 <futune_> setfib $fib route add $jail_ip -interface $main_jail_iface
17:49:13 <futune_> e.g. for me it's
17:49:15 <futune_> setfib 1 route add 192.168.36.100 -interface igb2
17:49:50 <futune_> and then transmission-remote and incoming ssh should work
17:51:03 <futune_> I usually do this from the host, after the vpn is set up and jail is running. Don't know if it's sensitive to order.
17:52:47 <hmjsp> futune_: it's transmission fibbed on its own, no jail
17:53:12 <hmjsp> perhaps jail is the only way to do this then
17:53:56 <nimaje> hmjsp: how about using a unix domain socket for transmission?
17:54:21 <hmjsp> im unsure what you mean
18:00:36 <futune_> hmjsp, I suspect my method can be modified to work outside a jail, too. But I have never tried it.
18:01:19 <futune_> the point is that fib 1 is probably lacking a self route to localhost
18:02:05 <futune_> perhaps you could make a paste of your fib's routing table on some paste site?
18:02:22 <hmjsp> oh yeah, i can definitely just route the local ips back to the non vpn interface
18:02:39 <hmjsp> but i dont want to access transmission from just lan, i also want to be able to access it remotely
18:02:54 <hmjsp> hence needing to somehow route just one port
18:03:16 <futune_> okay. Then I think you're looking at routing + firewall
18:04:43 <hmjsp> https://paste.c-net.org/CausedChews
18:04:51 <hmjsp> current fib is very basic
18:05:05 <nimaje> you could have transmission put its rpc socket on the file system, specify it as  unix:<some path>
18:05:46 <hmjsp> nimaje: how would i let an external client access that local socket tho?
18:07:31 <hmjsp> i added local ip range to route table and i can access from another machine on lan
18:08:09 <hmjsp> it's good enough for now ig, and i can just ssh and use transmission locally if i really need to, tho it would be ideal if i can just forward just that one port to the local interface
18:11:53 <futune_> hmjsp, do you run pf?
18:12:09 <hmjsp> i do indeed
18:12:32 <futune_> I think it should be fib aware, although I haven't tried to use it
18:12:43 <hmjsp> hmm
18:13:03 <futune_> you could possibly have a rewrite rule for outgoing packets on that port and that fib
18:13:10 <hmjsp> potentially
18:13:24 <hmjsp> i'll keep that in mind, but for now im sick of dealing with that thing xD
18:13:32 <hmjsp> im just gonna use it on lan only for now
18:13:43 <futune_> okay! Enjoy!
18:13:50 <hmjsp> and set up other stuff i need to and come back to later since it's lower priority
18:13:52 <hmjsp> thanks!
18:26:48 <futune_> hmjsp, just to add... maybe the reply-to directive in pf does exactly what you want.
18:29:12 <hmjsp> i did try a setup before with only route-to (not reply-to) and i couldn't get it to work, hence getting advice here to use fibs
18:29:40 <hmjsp> i also just realised that my vpn setup might be wonky anyhow because it drops way too many packets for no reason
18:55:03 <nimaje> hm, what was the problem with running transmission-remote via setfib?
19:01:40 <futune_> nimaje, he wants to do it from an external host. the problem is the reply.
20:56:55 <markmcb> on BETA2. is it expected that intel gpu firmware packages all show 2 versions? 20250109.1500068 and .1501000? and that pkg leaves both installed?
21:00:55 <markmcb> ah, disregard, misread the output. all is well. nothing to see here. :)
21:21:18 <markmcb> fwiw, there are two versions in the repo as stated, but the correct one gets installed. pkg incorrectly states (via pkg version) that the installed version is ahead of the repo version.
21:46:33 <polarian> hmmm
21:46:41 <polarian> the vulnerable python is making it difficult to build ports
22:22:16 <CrtxReavr> I lost my notes. . . where's a good guide for upgrading FreeBSD via src with git?  Once I have the source, I know how to build/install/merge everything.
22:36:44 <heston76> CrtxReavr: is this what you are looking for?  https://docs.freebsd.org/en/books/handbook/cutting-edge/index.html#updating-src-obtaining-src
23:00:19 <polarian> CrtxReavr: the above, but the tldr is "make buildworld buildkernel" to populate /usr/obj, then "make installkernel" *reboot* "etcupdate -p; make installworld; etcupdate -B" *reboot* done!
23:00:34 <polarian> note: snapshot first
23:07:04 <ant-x> Hello, all. How come thttpd running as user www can bind to system port 80, but mtg running as the same user cannot bind to system port 443 (permission denied)?
23:08:05 <Gedge> ant-x: setuid-root?
23:08:44 <ant-x> Gedge, don't know what that is. Is that specified in the service's rc file?
23:09:04 <Gedge> it's a permissions setting on the binary
23:09:06 <ant-x> ps shows both thttpd and mtg running as www.
23:09:21 <ant-x> The sticky bit?
23:09:38 <Gedge> allows an app to 1. start as root, 2. grab port 80, 3. drop uid to www
23:11:00 <ant-x> setuid(1) is a utility to run a command as a different user. It does not mention any permissions settings...
23:11:19 <Gedge> https://en.wikipedia.org/wiki/Setuid
23:11:23 <LXGHTNXNG> ant-x: are you from an alternate universe?
23:11:35 <ant-x> LXGHTNXNG, I might be.
23:11:57 <LXGHTNXNG> did you fribble some kernel modules and sysctls in order to be able to do this re: thttpd and mtg?
23:13:31 <ant-x> doas ls -ld $(which thttpd) shows nothing special: -r-xr-xr-x  1 root wheel
23:14:05 <ant-x> LXGHTNXNG, nothing like that at all! I just installed thttpd and mtg from the packages.
23:14:42 <ant-x> ls -ld $(which mtg) shows exactly the same permissions.
23:14:50 <LXGHTNXNG> where does setuid(1) come from‽
23:14:57 <LXGHTNXNG> i don't have it here
23:15:19 <Gedge> Not the command, it's a file-permission thing
23:15:49 <ant-x> I have it nether, as a command.
23:16:04 <Gedge> ls -l /usr/bin/passwd
23:16:39 <ant-x> -r-sr-xr-x  1 root wheel
23:16:40 <Gedge> see `-r-s... root...` = setuid-root
23:17:01 <ant-x> ^ I see. Neither mtg nor httpd have that sticky bit.
23:17:18 <Gedge> (it is not the sticky bit)
23:17:34 <ant-x> Beg pardon.
23:18:43 <ant-x> The correct mnemonic user- and group- [s]pecial .
23:20:43 <ant-x> And I see nothing in /usr/local/etc/rc.d/thttpd that might give it rights to bind port 80 .
23:21:46 <ant-x> ...Looks like thttpd starts as root, and then drops to www (as per its own config), whereas mtg starts as www, but I am not sure yet.
23:29:33 <ant-x> ^ Very likely so, but I can't figure out what the lines like ``: ${mtg_enable:="NO"}'' do. The assing a default value, but why is the initial colon required for the assignment to work?
23:30:40 <Gedge> ant-x: it's a shell idiom
23:31:31 <ant-x> Yes, but it does answer my question. Why is the initial colon required for the assignment?
23:32:01 <Gedge> how would you set the var?  anything else is longer
23:33:02 <Gedge> `var=${var:-NO}` is longer that `: ${var:=NO}` so the latter idiom is used
23:33:17 <Gedge> s/that/than/
23:33:20 <ant-x> Why does ${var:=NO} fail?
23:33:34 <Gedge> it fails?
23:33:35 <ant-x> Ah! Becuase it is the expantion, and not the assignment?
23:33:38 <ant-x> Yes.
23:34:56 <ant-x> ${a:=b} fails with: -sh: b: not found, because the whole things is interpreted as b at the end, and : prevents that.
23:35:07 <ant-x> ^ as I (now) understand it.
23:36:22 <ant-x> So, the : is just a way to swallow the arguments.
23:37:19 <ant-x> Because ${a:=b} not only sets a to b, but also expands to string b
23:37:41 <Gedge> `${a:=b}` (without the `:`) will expand *and* *be* *used* *as* *a* *command*
23:38:03 <ant-x> Right.
23:38:34 <ant-x> As can be demonstrated by: echo ${a:=b}
23:38:35 <Gedge> whereas the `:` says "throw away the result"
23:38:44 <Gedge> (but still assign it)
23:39:31 <Gedge> glad you're not testing `${oops:=shutdown}`  ;)
23:39:37 <ant-x> Bourne Supremancy -- the title of a book on shell programming.
23:39:49 <ant-x> I see the value in that.
23:40:06 <ant-x> Would need doas, though.
23:42:28 <ant-x> <https://imgs.xkcd.com/comics/sandwich.png>
23:54:02 <mjp> https://vez.mrsk.me/freebsd-defaults
23:54:13 <mjp> thoughts? i'd like to see how the project reponds to this
23:58:43 <ant-x> mjp, if you take utmost care to dissect it into so many support requests in <https://bugs.freebsd.org/bugzilla/> ...