Latest activity

Good point, I missed it, but I was wondering of something generic, for example this doesn't have a workaround: https://www.freebsd.org/security/advisories/FreeBSD-SA-26:33.unbound.asc Initially I didn't mind to do installworld, once in a while...

From the advisory: IV. Workaround The system administrator can install an updated version of the IANA Time Zone Database from the misc/zoneinfo port and run tzsetup(8).

PATH_MAX is still 4K. So just the filename longer doesn't buy you much if you also use such length for directory names.

From the advisory: IV. Workaround The system administrator can install an updated version of the IANA Time Zone Database from the misc/zoneinfo port and run tzsetup(8).

Get a AM4 platform with DDR4 ECC unbuffered, everything else will make you poor. CPU doesn't matter much here.

Whatever Elon Musk does not recommend. Probably another C++ thing, not that anything on C++26 is out yet.

Compilation runs at unlimited speed, so you buy as fast a computer as possible. As far as RAM is concerned you need about 700 MB per core (plus hyperthreading if you turn that on) for the base system, but things like Chromium can have up to...

Rust is 40GB build result... They really should split it up to avoid the full compile for only being minor dependency of things.

Hi trev, thank you. The problem with that solution, due to my failure to disclose additional information is, that I would like to add at least two 3.5 hard-drives (due to $/capacity), and have ECC memory, which these do not support. However...

Rust is 40GB build result... They really should split it up to avoid the full compile for only being minor dependency of things.

@OP: Wait until you try building rust or llvm 🫣

Greetings all, in another thread I was whining that ports-mgmt/synth took a lot of time. As usually, it turned out that part of the problem was my idiocy, I forgot to turn on usage of tmpfs. However, I turned option [N] Fetch prebuilt...

Hi MG, thank you for the reply and, specifically, to look at the top statistics. I have also looked at the logs and I now wonder if I have potential misconfiguration in the ports-mgmt/synth. I summarize my (mis)understanding of the...

Hi MG, thank you for the reply and, specifically, to look at the top statistics. I have also looked at the logs and I now wonder if I have potential misconfiguration in the ports-mgmt/synth. I summarize my (mis)understanding of the...

It really depends on the exact configuration. If you just watch top during the synth work, do you see a lot of idle CPU? Then you need faster storage because the system outruns it. If high swap usage is daily business, you need more RAM, and if...

This is basically because kmods repo builder still does NOT build NVIDIA things other than x11/nvidia-kmod alone and need to be patient until the admins address why. If usual kmod KBI is not changed and your x11/nvidia-kmod* and...

Original article here. Consider this when replying. New committer: Minsoo Choo (src) Continue reading...

Doug41 the Linux rc scripts live in root prefix as FreeBSD components, not /usr/local prefix where 3rd party packages live. Delete the line from your loader.conf. As root, enter sysrc linux_enable="YES" This will put linux_enable="YES" into...

This/etc/pf.conf seems to work both ways. ext_if = "vtnet0" jail_ip = "10.0.0.10" # ← change to your jail’s IP web_ports = "{ 80, 443 }" # NAT for the whole jail network (so the jail can reach the internet) nat on $ext_if from...

About failsave when loaders are updated. I read that some (many?) people are frightened to update their loaders. From a certain point of view, it makes sense. Often, when you do a serious mistake on your system, you can have anyway a boot prompt...

I'm planning to read "the hydrogen sonata". Is that a worthwhile time?

This is what they put togheter!

It really depends on the exact configuration. If you just watch top during the synth work, do you see a lot of idle CPU? Then you need faster storage because the system outruns it. If high swap usage is daily business, you need more RAM, and if...

I changed my mind a bit and fine Claude Code quite useful, if you go in small steps and review the coding.

The second. By configuring the web-server you will never make a local IP public accessible. You can also run a second web server, this time nginx, outside, and configure it as proxy. Or just run everything outside, perhaps chrooted, and of course...

Greetings all, for while, I have been contemplating building a new computer. What prompted me to ask for the specification was the fact that I started compiling some packages to, e.g., having OSS for all audio devices, having the compiled...

I'm very confused (what's new). I have two threads which are basically about the same thing, ie accessing a VPS host jail from the Internet and vice verse. I can ping out from the host's jail, but cannot access a webserver in that jail. I get...

For accessing a web server in jail you must be a prison guard.

Romance of the Three Kingdoms (I like the TV shows and played a lot of Dynasty Warriors :p) Was looking up a quote yesterday and found a site that seemingly has a fully-translated version (random section)...

This is what they put togheter!

/32 rather than /24 ?

I gave my 11 year old kid and his 11 year old cousin a challenge. If they could put togheter an old PC made of some old hardware, without asking me any questions AT ALL, they would get a pizza each, from the towns best makers of pizza. I know...

I changed it as per SirDice 's advice and it works as before.

That's because 10.0.0.1/24 and 10.0.0.0/24 are the exact same range (the host bits of the address are irrelevant). That's why you typically use the network address when specifying ranges, to avoid any confusion. If you need a, single, specific IP...

Ty! Now it works (after building from ports). I was thinking the -kmods repo should take care about that problem - obviously I was wrong 😅.

I'm not sure, apparently it works with both IPs (in my test VM).

If it isn't easy for you what chance have i? As a result of SirDice 's post do I need to change this line nat on $wan from 10.0.0.1/24 to any -> ($wan) to nat on $wan from 10.0.0.0/24 to any -> ($wan)

Your issue is primarily caused by putting /boot on its own partition. That's common on Linux but the FreeBSD boot process is entirely different. The FreeBSD boot loaders (loader.efi or gptzfsboot) have enough knowledge of ZFS to be able to boot...

Thanks, pf is not my forte. The documentation is not exactly easy reading.

You used the bridge set up, right? Then it should be: nat on vtnet0 from bridge0:network to any -> (vtnet0) He's using a network range; 10.0.0.0/24 which is valid. The .0 is the network address. The rule applies to all source addresses in the...

I can now PING the internet from my jail using the settings in #3.

For accessing a web server in jail you must be a prison guard.

The keyfile would be on a removable USB stick (e.g. da0, file system partition labeled "usbkeyf"), the loader would read it from the un-encrypted /boot/loader.conf. Example: geli_usb_keyfile_load="YES" geli_usb_keyfile_type="nda0p4:geli_keyfile"...

This is what they put togheter!

I gave my 11 year old kid and his 11 year old cousin a challenge. If they could put togheter an old PC made of some old hardware, without asking me any questions AT ALL, they would get a pizza each, from the towns best makers of pizza. I know...

I can now PING the internet from my jail using the settings in #3.

You used the bridge set up, right? Then it should be: nat on vtnet0 from bridge0:network to any -> (vtnet0) He's using a network range; 10.0.0.0/24 which is valid. The .0 is the network address. The rule applies to all source addresses in the...

Have your tried this pf.conf (un-commented)? Also, it's 10.0.0.1 (bridge0's IP), not 10.0.0.0 After any edit of the file, the pf(4) service has to be restarted. This pf.conf is a working example in my byhve VM setup (iocage, iocage jails...