00:03:49 <CrtxReavr> dnp1, my ISP would disconnect me after 24 hours, then I had a ppp chat script that would demon-dial 'til I was connected again.
00:04:43 <CrtxReavr> Then I got cable internet. . . tossed an extra ISA 10Mbit NIC in there and changed a couple things in rc.conf and badda-bing.
00:09:42 <glenny2> where do i find the source to build a kernel from?
00:30:46 <rtprio> glenny2: /usr/src
00:34:20 <glenny2> rtprio: is it pre-installed?
00:34:45 <dnp1> Optinally
00:35:35 <glenny2> i am following this to get the source: https://docs.freebsd.org/en/books/handbook/mirrors/#git
00:35:40 <glenny2> am i doing this right?
00:35:56 <nesta> thats the place :)
00:36:51 <nesta> just be mindful of the branch that you checkout and make sure its the right one glenny2
00:37:17 <glenny2> nesta:  i need the 15.1 branch, correct?
00:37:38 <nesta> yah that is probably the one you want
00:37:57 <nesta> unless you specifically want to run a 14.x system
00:39:56 <nesta> glenny2: something like git clone --branch releng/15.1 https://git.freebsd.org/src.git /usr/src should do the trick
02:20:10 <glenny2> i sent a message to the mods asking why my post wasn't approved and i've yet to hear anything back :(  i don't know if i should try making another post or waiting.  i'm confused.  i'm told to download source and apply a patch but i have no idea how to apply a patch or even know if the patch will even affect my issue
02:37:34 <glenny2> even more frustrating is that i just downloaded and started using this OS maybe two weeks ago?  apart from some of the similarities to linux, i am completely ignorant of this OS.
02:53:39 <rdr> glenny2: what is your issue?
02:54:09 <rdr> you're trying to update the system? or compile the OS? :|
02:54:14 <glenny2> rdr:  no audio from speakers.
02:54:34 <rdr> ohhhhh
02:54:43 <nesta> ahh
02:54:44 <rdr> hmm... maybe your audio card is not supported?
02:54:46 <glenny2> yeah, it's been an issue i've talked about here for awhile
02:54:58 <rdr> or maybe you have to get a specific driver?
02:55:03 <glenny2> the mic input works.  the output audio doesn't.
02:55:19 <rdr> hmm... maybe then it is just a matter of changing OSS to use the right output?
02:55:25 <rdr> do you have a desktop installed?
02:55:30 <glenny2> tried all of that
02:55:58 <glenny2> yes, i am using xfce
02:58:17 <sig`> glenny2: cat /dev/sndstat
02:59:48 <glenny2> sig`: it lists three devices Realtek ALC257 for both input and output and Intel Jasper Lake for HDMI audio output
03:01:42 <glenny2> i can post the output of sysctl dev.hdaa  it will list the speaker as [DISABLED]
03:01:58 <glenny2> volume is also turned up in mixer
03:27:04 <sig`> glenny2: what is your actual sysctl dev.hdaa
03:27:39 <sig`> sounds like it can easily be fixed once we see the actual nid #
03:35:21 <glenny2> sig`: https://termbin.com/ypo9
03:36:31 <sig`> sorry just saw this
03:38:05 <glenny2> i have tried adding the device in device.hints using nid and seq etc.  maybe i had the wrong settings?
03:38:14 <sig`> glenny2: /boot/device.hints - hint.hdaa.0.nid20.config="as=1 seq=15"
03:38:25 <sig`> https://man.freebsd.org/cgi/man.cgi?snd_hda
03:39:19 <sig`> glenny2: your internal speaker (nid20) is disabled because it's in its own association group (as=2), separate from your working headphones. add this to /boot/device.hints:
03:39:43 <sig`> I'm actually curious if this works for you.
03:44:40 <glenny2> sig`: no audio
03:45:08 <sig`> did you reboot
03:45:16 <glenny2> sig`: yes
03:45:26 <LXGHTNXNG> didn't think you needed to reboot to test those configs
03:45:40 <sig`> yes hints only reads on boot
03:46:05 <sig`> device.hints is only read at boot that is
03:46:18 <rdr> disabled? can you enable it
03:46:27 <rdr> mixer volume wont matter if it's disabled
03:46:27 <sig`> glenny2: can you paste the sysctl dev.hdaa
03:46:30 <LXGHTNXNG> correct, but I distinctly recall there being a way to reconfigure the hdaa stuff in sysctl
03:46:53 <glenny2> sig`: the link i posted earlier is the output from that command
03:47:03 <glenny2> https://termbin.com/ypo9
03:47:45 <LXGHTNXNG> man snd_hda says `dev.hdaa.%d.config          Run-time equivalent of the hint.hdaa.%d.config tunable.`
03:48:17 <sig`> LXGHTNXNG: tru for reconfig but only works on nids that were not alreadyy disabled to start.
03:48:33 <sig`> glenny2: that is unchanged
03:48:49 <sig`> nid20 still shows as=2 seq=0
03:49:06 <glenny2> sig`: ok, let me do a new output
03:50:48 <glenny2> sig`: https://termbin.com/8lin
03:51:48 <sig`> so it is now grouped and enabled with headphones nid33
03:52:03 <glenny2> it doesn't say [DISABLED] which is new
03:52:10 <sig`> cat /dev/urandom > /dev/dsp0.0
03:52:42 <glenny2> i'm not trying to get audio from my headphones.  i'm trying to get audio from my speakers
03:53:17 <glenny2> no sound from speakers
03:53:19 <sig`> that should test that speaker
03:53:39 <sig`> nid20 is the speaker not the headphones
03:53:52 <sig`> did you run cat /dev/urandom > /dev/dsp0.0 ?
03:53:56 <glenny2> yes
03:54:14 <glenny2> dsp0.0 doesn't exist.  dsp0 does.  i sent it to /dev/dsp0
03:54:21 <sig`> I had this exact deal and this got me through it
03:54:49 <sig`> try that
03:54:53 <sig`> dsp0
03:54:59 <glenny2> i did
03:55:07 <glenny2> no audio
03:55:58 <sig`> dang
04:04:18 <glenny2> sig`: oh, headphone output doesn't work either.  if the idea was to redirect output from there to the speaker, that wasn't going to work to begin with
04:05:22 <sig`> does mixer show volum and pcm
04:05:27 <sig`> as unmuted
04:05:43 <glenny2> mixer -a shows no muted devices
04:05:58 <sig`> you could check cat /dev/sndstat to make sure the pcm is default and match /dev/dsp0
04:06:06 <sig`> yeah no idea man
04:06:34 <glenny2> sig`: i appreciate you trying
04:10:19 <sig`> is this a laptop or pc?
04:10:53 <glenny2> sig`: it is a laptop.  it is a Lenovo Ideapad 1i
04:11:12 <sig`> can you pastbin cat /dev/sndstat
04:11:53 <glenny2> again?
04:12:15 <glenny2> nothing has changed
04:12:15 <sig`> well since it took
04:13:08 <sig`> we never saw the sndstat
04:14:15 <glenny2> i'll just post it here: pcm0: <Realtek ALC257 (Analog 4ch/2.0)> (play/rec) default  pcm1: <Realtek ALC257 (Right Analog Mic)> (rec)  pcm2: <Intel Jasper Lake (HDMI/DP 8ch)> (play)  No devices installed from userspace.
04:16:32 <sig`> something isn't right because nid20's output sill shows mute=1 step=0 size=0 offset=0...
04:17:01 <sig`> it is hardware muted which is separate from oss mixer
04:18:07 <sig`> you coul d try 'mixer pcm 100'
04:18:26 <sig`> mixer vol 100 / mixer speaker 100
04:19:25 <sig`> other than reasigning I have no clue
04:19:50 <glenny2> yep :(
04:19:59 <glenny2> that was the wall i ran into
04:20:13 <sig`> wierd that is is hardware muted but mixer shows unmuted
04:59:07 <glenny2> i decided to make a new post on the forums since i thought my previous post wasn't approved.  it turns out it was approved and now i can't delete the new duplicate post :(
09:54:23 <sbr> Is there a simple vanilla freebsd version of pfBlockerNG? I've been using pfsense for a while but am tired of netgate so have been replicating when I need with a vanilla install. I can relatively easily replicate pulling spamhaus etc and loading into pf/unbound but wanted to check someone hasn't already solved this
10:14:41 <Gedge> sbr: you're aware of #opnsense ?
11:33:55 <runxiyu_> Let's see if phabricator decides to work for me today.
12:09:26 <sbr> Gedge: ya but thats not very vanilla freebsd
14:32:46 <kerneldove> any advice for how to set up a few jails with their own private network? they're vnet fwiw. i got the config to the point where i can create epair interfaces for each of them and give them ips, so i just give them a range in private ip space like 192.168.2.0/24 and as long as they all have that network configured for their nif it's enough?
14:36:43 <dch> other than the bridge, yes kerneldove thats all you need
14:37:44 <kerneldove> ok ty. if i gave a few jails to friends, what would prevent them from changing the nif to some other private network range and maybe colliding with another private range already used for other jails?
14:37:54 <kerneldove> is that where i gotta use vlans or is there another solution?
14:39:04 <dch> 3 options at least
14:39:09 <dch> 1. dont give them root
14:39:34 <dch> 2. wrap the internal jail with an outer jail that holds the network config so it can't be changed
14:39:57 <dch> 3. I think there's some mac / acl stuff for this, I need to look it up
14:40:35 <dch> aah yes https://man.freebsd.org/mac_ipacl
14:41:29 <kerneldove> oh wow that's nice, tyvm!
14:41:43 <dch> but personally I would just tell my friends not to do that and they would respect that ;-)
14:41:52 <dch> or immediately try it to see what happens ofc
14:42:42 <kerneldove> well what i wanna do is create a throwaway vps jail host then give out jails to 'friends' that are really just online pieces of sht and hope they try to hack me so i can test my ids
14:44:16 <sbr> could do jails inside vm's for real PoS's if you don't mind the slight overhead
14:45:34 <geometry> I'm looking at an upgrade which failed due to /var ending up full at in inauspicious time.
14:45:35 <kerneldove> well part of this exercise is to see how hardened i can make jails on their own, and then once that's all done use vm encapsulation on top of that where it makes sense
14:46:13 <geometry> I got past the kernel upgrade step, but I think userland is mostly non-upgraded.
14:47:09 <geometry> I'm thinking I should restart the upgrade instructions from `freebsd-update upgrade -r 15.1-RELEASE` and hopefully everything should recover?
14:53:31 <dch> geometry: yup. if you have zfs, a boot environment is a good thing at this time.
14:54:03 <dch> you can also use `freebsd-update IDS ..` which will tell you exactly what's not up to date
14:54:04 <geometry> Not available in this case.
14:58:37 <kerneldove> dch i'm looking at security.mac.ipacl.rules, is there any way to append rules to it so i don't have to assign it to 1 super giant long string with all rules for all jails?
15:00:04 <geometry> dch: I would almost prefer to have it simply plow over everything, except /etc for which I'm pretty sure it hasn't yet done the merging.
16:10:35 <kerneldove> dch i'm looking at security.mac.ipacl.rules, is there any way to append rules to it so i don't have to assign it to 1 super giant long string with all rules for all jails?