00:43:36 I would of thought my WIFI card on a skylake laptop would work out of the box that was made in 2016 on Freebsd 14.0 00:43:42 but nope think again 01:02:00 Who's excited for the event tomorrow with Steve Bourne? 02:05:17 Who's excited for the event tomorrow with Steve Bourne? what event? 02:33:57 @brian|lfs - see https://www.nycbug.org - has some notes about tomorrow's meeting, and they do usually stream these unless they run into some kind of technical issue 02:37:38 cool where do they post the stream links at this site looks very dated? 02:38:17 nevermind I'm blind I see where it is 04:01:05 polarian: wireguard is not really a vpn, just an encrypted tunnel with authentication. very nice until you need to actually route packets. 04:49:19 When I installed 15.0 I selected package based install, is there a link to a good way to compile and install your own kernel without building the whole system? 05:12:39 crb: the most basic steps would be something like; cp /usr/src/sys/amd/conf/GENERIC /usr/src/sys/amd/conf/MYKERNEL ; vi /usr/src/sys/amd/conf/MYKERNEL ; cd /usr/src ; make buildkernel KERNCONF=MYKERNEL ; make installkernel KERNCONF=MYKERNEL - this is a good starting point for reading more https://docs.freebsd.org/en/books/handbook/kernelconfig/ 05:13:22 That works well for not package based installs but I don't think it's right for packbased installs 05:13:28 oh my bad 05:13:50 idk what you mean by 'package based' tbh 05:28:04 when you do an install, starting with 15.0 the system can either be installed as it would be traditionally: the installer just untars a bunch of tarballs for base and etc and usr etcetera OR you can ask for the system to be installed from pacakges. I don't know the granularity but for instance, ls, sh, cat, sort .... are all individual packages 05:28:53 This allows you to pick and choose what things you want installed. If it's a stripped down DNS system maybe you don't install any mail handler, you don't install sort 05:29:36 ah I see. well building your own kernel should still be fine with that 05:30:59 crb: unfortunatly we don't currently have a way to build only a subset of the package repo 05:31:59 [*] modulo build options that remove things; you need a buildworld + buildkernel with an option set that matches what you want to use for update-packages 05:32:16 kevans_: its so common to build your own kernel, I wish this was mentioned at install time as a downside. I'm not mad, I understand it's a free project I appreciate the efforts 05:34:16 oh this is news to me. I will have to do some reading :) 05:34:33 i'm not sure i'm convinced that the current setup is the final form, but I don't really know of any initiatives offhand to try to push the boundaries into allowing a build of, e.g., a world-only or kernel-only repo 05:40:11 kevans_: yep and I guess you don't really need me to point out the short comings. I'm sure you all know 13:39:02 crb: knowing that there's other demand is always a useful data point 16:31:39 hmm.. so you don't have a way to build a subset of the package repo... but there are minimal podman builds, right? it seems like there might be related tooling 16:35:08 scoobybejesus: no, the podman images are generated by building everything but only installing a subset of packages 16:36:30 ah, i see, thank you 16:37:24 several people have asked for a way to only build the kernel package, it's somewhat difficult because of how the packages are built, but i'd like to do it at some point 16:45:39 hi to all. Assuming that I wish to install a database inside a jail, I assume that this "space" will have the same space of FreeBSD machine, right? or not? 16:46:27 puf: if you mean disk space, it depends where you put the jail and what filesystems you mount inside it (if any). you could dedicate an entire disk to a jail if you wanted 16:47:40 puf: define "space" 16:48:12 ivy: interesting.. bdrewery I am just a noob trying to understand the concepts 16:48:42 also in a broad physical sense can anyone define "space"? 16:49:27 and why is the sky blue 16:49:38 that one can be answered 16:49:50 sure, any container use "space" in the main hard drive of the server.. 16:50:11 space is what you buy at a space bar 16:51:23 puf: jails create namespaces, separate places, for disk, process, network. The minimum is separate process namespace. A separate disk space is like a chroot with what is needed in it 16:52:12 ivy: You worked on the 802.1q vlan bridge features, right? 16:52:31 FatalNIX: yes 16:53:30 I just wanted to thank you for getting that going. Ever since I moved to 15, I've migrated away from SR-IOV segmentation of VLANs and moved everything on my hypervisors to vlan filtering. It works spectacularly. Thank you! 16:53:57 +1 I'm moving to that this week 16:54:07 bdrewery: how about memory usage? or CPU usage? only uses what is needed? 16:54:43 puf: it defaults to full resource access 16:55:10 puf: rctl can be used to limit memory in the jail, and cpu, but cpuset is better for the jail cpu use if you want to limit that 16:55:41 puf: something like https://github.com/BastilleBSD/bastille makes managing jails much simpler 16:56:12 FatalNIX: good to hear :-) i've been disappointed by how long it's taking popular jail/vm managers to support it, but i've heard from a few people who are using it anyway 16:57:35 a lot of us roll our own jail handling 16:58:41 Yeah, I've read that it's still on the stack of todo lists or requests for various tools. I've moved almost every single one of my services to jails away from VMs though, and some of my services are just routed with L3 and don't need VLANs... 16:58:45 so if I wish to use many jails, "they will fight" for resources, if I don't define the limits. 16:59:08 checking 16:59:27 I have yet to find a problem with a bunch of jails but I also have 40 threads and 304GB of RAM on my server to play with too... 16:59:42 Maybe I just haven't hit the ceiling yet. 17:00:33 puf: yea, rctl helps with that 17:00:36 as part of that work i removed both cases where packet forwarding in bridge requires traversing the entire member list, so it *should* be fairly scalable now. but you should set member_ifaddrs=0 to get both fixes 17:00:57 (it's still slower than it should be... it just scales better, while stil being quite slow) 17:01:24 the fib code is still kind of bad though :-/ 17:01:48 well, same as multiple processes would, so as you run it, it doesn't really matter if its directly on the host or in a jail 17:04:08 ivy: Oh so it's just not me? I mistakenly complained the other day that fibs can't be tied to interfaces and found out I was wrong. So now, I just wish I could name them. It would be really cool if I could have BGP VPN / EVPN too... Without having to use a bunch of FRR instances... 17:05:00 oh, i mean the bridge fib, not the IP stack fib 17:05:16 Ah 17:05:37 RIBs, FIBS, and FIBS, oh my! 17:05:50 it stores each host address in a hash table, but it doesn't hash the vlan id, so if you have the same mac address (e.g., a router) on hundreds of vlans, it can turn into a pathological list walk 17:06:55 That sounds terrible considering if you are making SVIs they normally would have the same MAC. 17:07:23 (Something that always bothered me about SVI implementations) 17:07:25 well, if it's specifically the host address it's fine since that's handled before the fib lookup 17:07:54 but if you were bridging a bunch of VMs/jails on a host to an L3 switch and the switch is routing all the vlans, it could come up 17:07:57 So, I start a new FreeBSD installation, and here some doubts: "Selected System Components" options.. what are needed and why? Can you explain? there is a extra software .. what is that? 17:08:44 Like, I need the kernel debug symbols? 17:09:15 You can always install them later. 17:09:46 I don't really know what they do.. 17:10:46 Debugging symbols are like tags and handles in the code designed so that you can run a debugger with them. It is useful for stepping execution flow and getting current program state etc. 17:10:58 If you aren't debugging FreeBSD as a developer then you don't need them. 17:11:43 No dev skills with me.. and the "extra software" ? 17:12:17 I will say that there isn't much there so by installing everything you are also not necessarily adding a bunch of disk space usage either. 17:13:38 puf: if you're talking about "optional", that's everything that's part of the system which isn't required for the system to work. that includes jails, iscsi, VMs (bhyve), etc etc. with pkgbase you can easily install that afterwards if you want to 17:14:41 Oh cool! well then I follow the recommendations.. is listing all packages that is fetching from internet.. nice! 17:25:06 more doubts: do you recommend using ports to install software or using pkg for that? 17:26:05 what you get from pkg is just precompiled ports, so it's basically the same thing. for a new user i would recommend using pkg rather than building yourself 17:28:08 pkg and if you want to change options, then use something like synth or poudriere to build isolated from the host system 17:29:46 nimaje: that confuses me: "build isolated from the hosts system", is like, we can build packages that will be globally accessible but they are not part of the system.. is that what you mean? 17:40:49 you wouldn't want want a partially updated system, so synth and poudriere first build packages inside a jail and build a package repo from that, additionally you don't polute the host system with build dependencies 17:44:46 ok, it looks like somwhere in time I can try to look to that if needed. I trying FreeBSD only to test Jails and learn a bit about them, because I wish to host some services in separated machines (jails) .. everything else I will just ignore.. mainly those advanced topics 17:45:54 puf: The idea is to keep your system as clean as possible. Building something isolated makes it not only easier to troubleshoot your system, but also your build system if something goes wrong. 17:46:57 Also, just learning plain jails is definitly worth it, but now I use bastille for managing jails I'm actually using. 17:48:44 sure, that was the recommendation that someone gave me few minutes ago.. I will test it for sure.. maintaining the traditional jails looks "scary", but I was willing to try.. having a dedicated tool to simplify the job.. is always welcome. 17:51:59 I did straight jails for some time. Honestly, I thought setting up bastille to be just as hard as setting up jails. The advantage came later once bastille was setup. It made setting up new jails easier. 18:34:16 i wish i could remember the bastille line i used to create my first jail 18:34:23 since now i need another one 18:38:15 for a thick jail its straight fwd, something like: 'cd /usr/src && DESTDIR=/tmp/jail make installworld && jail -c -m path=/tmp/jail -n test'. thats the essence of it, then you can configure params. I didnt test this, rough estimation. 19:01:17 zfs send tank/var/jail/base@stable | mbuffer | zfs receive tank/var/jail/somethingnew is my favourite way to stand up new jails, or at least seed their storage. 19:08:08 more questions.. in case of exposing this machine to the world, I should setup security recommendations before starting to setup jails right? While it make sense to me, I found an article that talks about the security levels, and I feel like maybe I should setup jails first and then apply security level to the main machine.. 19:08:45 securelevels are of fairly dubious utility... to make them provide more than a false sense of security you need to make a lot of changes to the system 19:09:57 the article is from freebsdsoftware.org .. they list a big list of changes .. I was about to follow their recommenmdations 19:11:24 the link is this one: https://www.freebsdsoftware.org/blog/hardening-freebsd-server/ 19:11:37 importent bit from that page "Not affiliated with The FreeBSD Project.", but no idea who is behind it 19:13:39 does affiliation is important? I mean, by reading that article you can accept / validate or not, what is there.. 19:21:08 but ok, I will follow first the handbook which talks about some topics that, that article don't 19:40:41 so usb stick, fat32lba partition type, with msdosfs (fat32), created on FreeBSD, works fine, move it to a OpenBSD device, load it up with some audio files, plug it into freebsd, 2 files show up in the filesystem but cant be read. Plug it into android, no issues, plug it into Linux no issues. 19:40:49 I have never seen this happen before 19:40:52 so I am clueless how to fix it 19:41:13 this usb stick was fucking formatted on freebsd... and then after another OS dumps data on it, now it cant be read!?!?! 19:41:42 oh I know why 19:41:48 nvm it makes sense 19:42:36 the two songs which freebsd cant see is because they contain special characters 19:42:45 it seems freebsd ignores them, and thus the files dont exist 19:43:16 \302 \200 \220 \231 are the codes 19:43:23 linux can handle them just fine 19:44:01 so can OpenBSD apparently, so er... FreeBSD is the only one? 19:52:24 don't exist? 19:52:38 with msdosfs? 19:53:33 not even PROGRA~1.mp3 ? 19:59:17 rtprio: ?? 20:00:46 See if you can mount it as fat instead of vfat 20:01:53 its due to the codes above within the filename 20:02:00 vkarlsen: it is mounted as fat 20:03:09 If it is really true fat, the filenames should be max ABCDEFGH.ABC 20:03:27 hmmm 20:03:37 Also, can you get around it by globbing? 20:03:47 then it probably is vfat, but the mount_msdosfs handles the fat detention 20:03:51 as long as its not exfat (requires fuse) 20:04:21 and I dont see a way to alter this in mount_msdosfs(8) 20:06:36 Is one of your shells able to complete the filenames? 20:08:35 vkarlsen: hmmm 20:08:47 actually you're rigth the issue is likely the shell 20:09:14 I use st which cant render anything other than ASCII iirc 20:09:46 but the terminal emulator not being able to render it should in theory not stop the shell... 20:09:52 I guess theres one way to try 20:10:00 use the terminal and not a terminal emulator 20:10:25 What kind of exotic music are you listening to? :) 20:10:37 Or trying to listen to, I suppose 20:11:42 vkarlsen: its a rip, but it seems some of the song titles on the cd have weird characters in them 20:11:47 I already sanatised them when I realised its the symbols 20:11:53 and now it works just fine 20:12:14 btu I am curious if it was st which was the problem 20:12:17 but* 20:30:46 Honestly sounding like the terminal emulator being buggy. What were you using? 20:34:13 VVelox: st like I said above 20:34:30 https://st.suckless.org/ 20:34:39 oh wait no, it wouldnt be st 20:34:45 because I run st on the linux machine too 20:34:48 and that worked fine on linux 20:35:05 * polarian shrugs 21:27:34 hello. I just created a Finnish-language channel at ##freebsd-fi for any potential freebsd-users in Finland 21:28:27 just for your information. let's see if there are any in our linux-oriented wonderland 21:38:27 I am feeling all proud of myself because I installed a new SSD into my server without breaking it. New to FreeBSD, uncertain still what to do at times, but hey, success. 22:00:52 joepublic: Congrats! 22:02:33 LapsangS: I am Finnish-American! Unfortunately, I don't speak Finnish/Suomi. :(