Search results

green post-it, I see that was your first post. Welcome to the forums :) Adding to SirDice's post, perhaps you don't need ports-mgmt/poudriere for your purposes. If you are building for a single system, perhaps building from ports would be adequate. ports-mgmt/portmaster is a very helpful tool...

The error is here: How did you create your signing key? I suspect that your usr/local/etc/ssl/certs/poudriere.cert doesn't contain what you need. There is an example in the man page for pkg-repo, which boils down to running openssl genrsa -out repo.key 2048 to create a private RSA key...

I found I didn't need the path= statement in /usr/local/etc/i3status.conf. The following works fine for me: order += "battery 0" battery 0 { format = "%status %percentage %remaining" integer_battery_capacity = true low_threshold = 15 threshold_type = percentage }

From a security perspective, filling the container with random data is a better choice to avoid a potential known-plaintext attack. I've updated my earlier post for anyone reading this in the future.

From the geli man page: When you create a new GELI container you can use dd for the initialization, writing directly to the provider like dd if=/dev/zero of=/dev/da1p2.eli bs=1m* dd if=/dev/random of=/dev/da1p2.eli bs=1m. Since you already installed your system, you probably don't want to do...

A ZFS pool containing ZFS datasets is different to a simple UFS partition. It's not quite as simple as mounting the device and you might want to do some reading about ZFS before attempting to fix your server. zpool is the tool you need. zpool list will show the name(s) of your ZFS pool(s). I...

Sysadmins and developers alike may be interested in a bundle of security eBooks available to buy from Humble Bundle until 31 July. Highlights for me are "Security Engineering" by Ross Anderson and "Applied Cryptography" by Bruce Schneier though there are a least two that may feel rather behind...

Have a look at 56874 and the tool it mentions by obsigna. I've been meaning to look at it myself.

Apologies for the slow reply. The card isn't anything special: SanDisk SDHC 4GB Class 4. I bought it a while back so it may have been superseded.

RPi 1 Model B works just fine for me with the FreeBSD 11.0 image. I used mine as a wireless bridge for a little while. Lack of official precompiled ports and updates put me off trying to do anything more meaningful with it.

UEFI does provide "runtime services" that are available to the OS after it has booted (in contrast with "boot services"). This kind of service is useful for things like changing the boot order from within the OS. I believe it would therefore be possible for a UEFI BIOS to include a malicious...

Phishfry, thanks for the information. I've not seen a 32-bit UEFI implementation in the wild but you piqued my interest. Perhaps it is because I have a looming work deadline :) I found an interesting Intel blog posting on the subject: Why Cheap Systems Run 32-bit UEFI on x64 Processors...

What are you trying to boot from? A FreeBSD UEFI memstick image? Can you see the install media in the list of boot options? If you can't successfully set the boot device from the UEFI boot menu then it may be that the UEFI shell won't help. However, the shell is very powerful and should...

Ouch. I think that would put me off trying to nest ZFS pools on a production system.

Great! Sounds like a success to me. :) For next time (hoping there won't be a next time for this particular issue) you might find script useful. Running script /tmp/usb/thingsThatIDid.txt before you started would have recorded your terminal session as you saw it; commands and outputs. It...

An interesting solution and certainly ZFS volumes offer a lot of flexibility. Like you I would be concerned about the integrity of your nested ZFS pool secure if you did not export it before taking the snapshot, since the pool hosting the volume doesn't know anything about the volume itself. I...

You are correct. Under normal circumstances you will not need the GELI metadata backup files. If you use key files with your GELI containers, it is absolutely essential that you back these up. Without them you will not be able to decrypt your data! You don't need to wait until you have...

duce, if you are still looking for someone you may attract more interest by sending a message to the freebsd-jobs mailing list.

You could add the following to rc.conf to have /tmp emptied on startup: clear_tmp_enable="YES" I would wager that the files you see can safely be deleted but you can check whether they are currently in use using fstat: fstat /tmp/tpl-* If you're worried they might not be in use now but are...

I also find there is a short delay of the order you describe whilst the scanner actuators seem to activate and move the arm slightly forwards before resetting for the start of the scan. Perhaps it is a method of ensuring the scanning arm is in the correct starting position? Using OS X and the...