14:54:51 <gebiert> Hi! I've got a question: I've created a zone on my OmniOS test server called "caddytest". Now I'm trying to set firewall rules from the global zone. I can set the in-zone rules, but not the GZ-controlled rules (I/O error). See https://notebin.de/?37357f48f35b3435#5UzMzcM9PtWu3RPhEkmRwtXuaVv7E8gz8jduH8QAXJvv
14:55:15 <gebiert> Any ideas what I'm doing wrong?
14:55:20 <gebiert> Thanks!
14:56:31 <gebiert> All commands have been run from the GZ
15:14:27 <andyf> Is the `ipfilter` service enabled inside the zone?
15:14:51 <andyf> (I'm trying to remember if that's relevant or not)
15:15:02 <gebiert> yes, otherwise setting the in-zone rules also fails
15:16:31 <ptribble> I was going to say the same, but for the global zone
15:17:10 <andyf> Try `ipf -GE <zonename>` first to enable it
15:18:03 <andyf> I was just reading https://github.com/omniosorg/pkg5/blob/master/src/brand/shared/firewall.ksh#L34-L45 to refresh my memory
15:18:30 <gebiert> # ipf -GE caddytest
15:18:30 <gebiert> SIOCFRENB: Unknown error
15:18:52 <andyf> rules placed in <zonepath>/etc/ipf.conf should be automatically loaded into the GZ-controlled zone firewall by that script
15:19:46 <gebiert> ipf -G -E caddytest works
15:20:53 <gebiert> I can add rules now :-) thank you very much
15:21:15 <andyf> Great, and if you want to make it automatic on zone boot, you can drop files there.
15:24:32 <gebiert> which zonepath is meant here?
15:24:57 <andyf> The one that is reported by `zonecfg -z caddytest info zonepath`
15:34:47 <gebiert> have to leave, cu
16:13:22 <gitomat> [illumos-gate] 16589 zfs: avoid kfpu use when panicking -- Andy Fiddaman <illumos⊙fn>
21:24:23 <jbk> heh.. how many more bugs dare I find in sata.c
21:25:04 <sommerfeld> what now?
21:36:16 <jbk> at least LOG SENSE for page 0 has never worked correctly
21:36:35 <jbk> though I need to dig more, but I suspect most of the other log pages aren't working either
21:37:48 <jbk> i have a bit of cleanup on lots of repetitive (and slightly confusing) code as well as some of the error handling that makes it cleaner (in anticipation of adding support for additional log pages as well as a few more commands)
21:38:02 <jbk> basically to make adding those log pages and commands simpler (and hopefully more foolproof)
21:38:15 <jbk> but in testing those bits, i ran into these bugs :)