Search results

  1. X

    "service wireguard restart" leaves behind the old process. is this expected?

    I can confirm. I see the same thing. stop destroys the network interface but the process is still running. Probably worth reporting it to the maintainer of the wg-tools port. I stopped using wireguard on FreeBSD and moved it to my router though.
  2. X

    Firefox sends domain names unencrypted in TLS handshake

    The initial ClientHello in HTTPS sends the hostname of the site you want in plain text as part of the Server Name Indication field. The webserver uses this to send the correct TLS certificate back to the client. This is before any encryption parameters are exchanged. As you've noticed this is a...
  3. X

    how to delete /usr/local

    Good point. Yes it would be better to do pkg delete -a first to cleanly uninstall everything.
  4. X

    how to delete /usr/local

    Stop any installed software running that was installed from packages/ports, scripts that are located in /usr/local/etc/rc.d that are enabled in /etc/rc.conf. And then you can rm -rf /usr/local and /var/db/pkg/local.sqlite. This will delete all files that were installed by package/port...
  5. X

    Solved boot environments, beadm

    The temporary mount thing is great because you can upgrade offline and then reboot into the fully upgraded BE and only reboot once. I do something like this, notice the -b switch to freebsd-update and -c on pkg. bectl create 13.1-RELEASE bectl mount 13.1-RELEASE /mnt freebsd-update upgrade -b...
  6. X

    Updating FreeBSD With ZFS Boot Environments (beadm)

    All good points and I agree with everything you’ve said. I take more risks, for me if it works on boot then I will fix forward rather than revert. I edited the release names slightly to make it more generic rather than having RC4 and RC5 in there as I mentioned in the original post. However, I...
  7. X

    Updating FreeBSD With ZFS Boot Environments (beadm)

    There used to be when bectl first came out, but there was a commit which made it do it automatically and made the behaviour of bectl identical to beadm. And yes, agree about the rest of what you said. That's why I commented the gpart command. That has to be changed to suit your setup. If it...
  8. X

    Updating FreeBSD With ZFS Boot Environments (beadm)

    I mentioned my procedure earlier in this thread for doing major version upgrades using boot environments and minimising the reboots and I said that there were probably better ways to do it. I have now successfully upgraded my server from 13.1-RC4 to 13.1-RC5 using this method, although I've...
  9. X

    Updating FreeBSD With ZFS Boot Environments (beadm)

    Yes. Do what you were originally doing, see how it works, then when you list the boot environments you will likely see three new ones. The one you originally created, and two that freebsd-update created when you ran install. Then you can decide how you want to handle it next time around.
  10. X

    Updating FreeBSD With ZFS Boot Environments (beadm)

    You don't actually need the sysutils/beadm package any longer. There is a bectl in the base now that does exactly the same thing. You can actually do full major version upgrades easily in a chroot (or jail). I do this which cuts down on the number of reboots: bectl create 13.0-RELEASE...
  11. X

    How to unlock the root account ?

    Try running sysctl kern.geom.debugflags=16 and then try again. This is the debug option that allows you to shoot yourself in the foot.
  12. X

    Dovecot: Time moved forwards

    Mine is bare metal, and my NTP sync is pretty accurate. I don't have any CPU power management enabled. System time : 0.000030218 seconds slow of NTP time Last offset : -0.000077508 seconds RMS offset : 0.000084565 seconds According to the NTP stats there's no huge 0.1 slews at all.
  13. X

    Dovecot: Time moved forwards

    Yeah OK. Sorry about the thread hijack! We did move to DST last weekend but my maillog has rotated too much to go back that far now. I can't recall if it was doing it before the DST change. I've tried restarting both dovecot and chrony which I use for ntp, hasn't made any difference. But OK...
  14. X

    Dovecot: Time moved forwards

    Not related to the original problem, but will hijack the thread slightly now it's solved. Is anyone seeing messages like this since 2.3.17? dovecot[46267]: master: Warning: Time moved forwards by 0.105716 seconds - adjusting timeout s. Happens to me about every 3 hours or so. NTP is perfectly...
  15. X

    sudo or doas

    I have a few sudo rules where the command is something like "/sbin/pfctl -t blocks -T *" where the * acts as a wildcard for any further arguments after the command. doas can't do that so it's useless for me. Shame really as I also dislike sudo. What I mostly do though is have one window in my...
  16. X

    Strange zfs filesystems

    The boot environment is everything that is mounted under zroot/ROOT/<name>. All of the other datasets are outside of the boot environment, so things like zroot/usr/home or zroot/usr/src will not change. If you want to take something out of a boot environment then you have to create a new...
  17. X

    PF update pf table via web

    Think you've misunderstood what's going on. It's not making things easier at all. It's making them considerably more difficult. Doesn't matter if it was a server at home or a VPS, I'd still set up the same security on it. Bottom line is port 22 is completely closed to the internet, there is no...
  18. X

    PF update pf table via web

    I do this for allowing remote access via SSH. I have some code on my website that allows me to go to example.com/s/123456 where 123456 is an OTP code I read from an app on my phone. If the code isn't correct it responds with a 404 not found. If the code is correct it adds the remote IP to a pf...
  19. X

    Strange zfs filesystems

    It's because the listed datasets are not part of the boot environment. Because if you switch between boot environments you don't want things like your home directories or mail folders going back in time along with the rest of the o/s. If you deleted the default one then the 12.2 one would have...
  20. X

    Solved git cannot fetch src tree

    You can set this to be automated by using git config --global fetch.prune true and git config --global fetch.pruneTags true. Or use --local within the repository if you only want it to apply to that repository.
Back
Top