14:02:57 <fgudin> hi, a quick one, as i can’t find anything useful online or in the manual
14:03:31 <fgudin> can the GZ be firewalled ? i’ve got to expose the admin nic to internet, and i’d like to restrict it to basically 2 IP addr
14:06:01 <jbk> it should.. what I can't recall offhand is if the management bits will manage rules for the admin nic or just the VMs
14:06:29 <jbk> if not, you'd just have to use ipfilter directly (and probably setup a bit to apply the rules at boot)
14:19:06 <fgudin> yes, fwadm mentions zones without being explicit wrt global or not; i assume it doesn’t handle it
14:19:27 <fgudin> however, i’ll look at ipfilter, thanks!
14:21:11 <fgudin> btw, another topic: weeks ago i asked about a poor-man’ solution to have disks encrypted, somehow
14:21:41 <fgudin> i planned to write something about it, but i didn’t get around to it, so here’s a short feedback:
14:22:52 <fgudin> long story short, i resorted to use a ’clear’ boot pool and have ’zones’ encrypted
14:23:23 <fgudin> the trick was to edit /lib/svc/method/fs-joyent so:
14:23:48 <fgudin> --- fs-joyent.orig      Sun Jun 14 18:44:48 2026
14:23:48 <fgudin> +++ fs-joyent   Sun Jun 14 18:48:15 2026
14:23:48 <fgudin> @@ -121,7 +121,7 @@
14:23:48 <fgudin> is_encr="$(zfs get -Hpo value encryption $pool)"
14:23:48 <fgudin> -        [[ "$is_encr" != "off" ]] && unlock_pool $pool
14:23:50 <fgudin> +        [[ "$is_encr" != "off" ]] && zfs load-key -a
14:25:06 <fgudin> sorry, here it is: https://okturing.com/src/20694/body
14:25:58 <fgudin> the tricky part of the story is the editing of platform/i86pc/amd64/boot_archive with xxd
14:26:18 <fgudin> plus the convoluted way to run the installer
19:17:45 <danmcd> Hello.  Tonight's SmartOS release will fix these:
19:17:50 <danmcd> fenix illumos#18003
19:17:52 <fenix> BUG 18003: 18003 poll(4D) needs to better-check numfds (CVE-2026-35384) (Closed)
19:17:52 <fenix> ↳ https://www.illumos.org/issues/18003
19:17:56 <danmcd> fenix illumos#18020
19:17:57 <fenix> BUG 18020: Double copyin of dld_ioc consumers (Closed)
19:17:57 <fenix> ↳ https://www.illumos.org/issues/18020
19:18:03 <danmcd> fenix illumos#18117
19:18:03 <fenix> BUG 18117: SCTP needs to better-check INIT ACK chunk parameters (Closed)
19:18:04 <fenix> ↳ https://www.illumos.org/issues/18117
19:18:20 <danmcd> There are mitigations and defenses for all, but updating is the best solution.