Search results

  1. C

    Way to set sshd_config to selectively set auth policy based on source address

    OK...it is coming back to me now that I tried this before and found that ChallengeResponseAuthentication cannot be set within a Match... for some reason hidden deep within the semantics of the OpenSSH code which I dare not touch :) Are there any issues security-wise with enabling...
  2. C

    dump freezes every time I try to run it.

    Thanks; I was able to simply control C it. Just for kicks I tried doing a dump without -L, and came back with many errors from the mirror... so I had further underlying issues. After doing some over-zealous fsck and breaking, I was able to more or less recover everything to workable from an...
  3. C

    Way to set sshd_config to selectively set auth policy based on source address

    Hi, I have a FreeBSD box that sits on a trusted network behind a router/NAT to the Internet. The router/NAT device has port forwarding set up to allow SSH access from outside. If I understand correctly, use of keys is preferable to passwords from a security standpoint. I do understand that...
  4. C

    Should I consider jails or virtual machines?

    Although myself having more experience with Solaris zones than FreeBSD jails, I would imagine that a VM would provide a greater level of isolation from a security perspective for the simple fact that while a jail is using the same kernel as the host system, a VM is not. Thus, it would be harder...
  5. C

    dump freezes every time I try to run it.

    Hi all, Sorry to resurrect a long dead thread, but I think I just hit this bug and am trying to determine the best route forward. I am running FreeBSD 9.0-RELEASE-p7 (which I know is no longer supported, but was just taking a backup with dump prior to upgrading to 9.1!). Something to the effect...
  6. C

    ZFS and tmpfs together

    @SirDice Hmm OK. Having messed around a lot with the ZFS ARC on Solaris a lot the drop in tmpfs doesn't surprise me at all. ZFS will generally try to cache whatever it can (up to the limit you set on the ARC) What surprises me a lot though is how it went back up after copying, not moving (if...
  7. C

    ZFS and tmpfs together

    I have read a few places that tmpfs and ZFS on the same box is a bad idea. However in all that I've found, it predates 9.0-RELEASE. Today now I see some recommending it, but I'd just like to know if this was in fact an issue, and if so, has it been fixed. Thanks!
  8. C

    Drive cloning

    Can you elaborate on the SATA controller hanging and the fix you did, or point me to those threads? I think I may be having something similar. (Manifested not in rsync but in tar.)
  9. C

    Apparent crash when creating lots of files on UFS

    Things get weirder. I tried doing an fsck of the root filesystem. Figured it couldn't hurt with all those hard resets. Turns out, all of a sudden, some directories from earlier failed tests all of a sudden appear!
  10. C

    Apparent crash when creating lots of files on UFS

    And actually regardless of how this is best categorized: while true; do mkdir a; cd a; touch b; done crashes the box also. And stranger, none of the directories exist post crash. I am thinking there is an issue with the filesystem and/or underlying device. Any ideas of anything I should be...
  11. C

    Apparent crash when creating lots of files on UFS

    Is this a package issue? Use of tar to extract things is apparently causing my system to hard reset, and that is part of the base system. (Although, to be honest I thought it was a package issue when I started it.)
  12. C

    Apparent crash when creating lots of files on UFS

    OK I think I'm narrowing down that the issue is something to do with the untarring. $ tar jxvf ../en-freebsd-doc.tbz x +CONTENTS x +COMMENT x +DESC x +MTREE_DIRS x share/doc/freebsd/en_US.ISO8859-1/articles/5-roadmap/article.html x...
  13. C

    ZFS on AF drives today and partitioning

    In the end, am using GPT on 1MiB boundaries, and gnop trick to set ashift=12. In the end I decided not to worry too much about the zpool not being reimported via their GPT label names. I prefer not to muck around too much with zpools unless necessary, and if I need to match up, I can always do...
  14. C

    Swap and ZFS

    OK thanks. Wasn't sure if maybe it did block-level caching or something. In any event I've partitioned off some space from my zpool disks, totaling two times my RAM, so I think that should be enough. Haven't activated it yet, but haven't really started doing anything yet either.
  15. C

    RAID 1 on the boot disk

    Where are you reading that FreeBSD 9 is not compatible with GEOM? Although I haven't actually tried it yet, I've been told that gmirror is the way to go.
  16. C

    Migrate ZFS to FreeBSD 9 from OpenIndiana

    Can you elaborate on how you only have 5? It looks from your OpenIndiana output that you have 6. As far as GPT is concerned, my understanding is that what they call "EFI" labels in the Solaris world is the same thing as "GPT" in the BSD world. By default I know if you give Solaris 10 or 11 a...
  17. C

    Apparent crash when creating lots of files on UFS

    EDIT Since I first posted I've gained some clarity on the specific issue. It seems to have nothing specific to do with pkg_add or tar, but rather just creating lots of files quickly. See below. Hi, As has been mentioned in my other threads I am very much a n00b to FreeBSD, but not to...
  18. C

    ZFS on AF drives today and partitioning

    If it's anything like Solaris it actually is just looking at the block device itself and sees metadata that seems to indicate it's part of the already mounted pool. Why? I know I'm playing "devil's advocate" here, but I really had never heard of people always using labels to identify disks like...
  19. C

    ZFS pool creation - preserving data?

    When you do a zpool create you can specify the name of a regular file as a vdev (as opposed to a block device). The tricky part here though would be having a file big enough.
  20. C

    organizing files

    I guess I like the idea of the TaggedFS, but some of it's shortcomings would be prohibitive to me; most notably seems to be the requirement that each filename is unique. Also is the inability to remove tags. What I do like about it though, and I would do also, is to leave the actual storage of...
Back
Top