FreeBSD backup libraries such as base/FreeBSD-kerberos-lib-backup-libkrb5profile.so

Leave a Comment / FreeBSD, pkg, pkgbase / By /

I build my own FreeBSD packages using poudriere. I do this for various reasons, which include: Getting security updates faster because I build nightly Some packages I install use non-default build options One of the monitoring checks I have in place will identify any installed package which is not in the package repository. That helps me identify any failed package builds or packages I have build once, installed, and did not added to […]

FreeBSD backup libraries such as base/FreeBSD-kerberos-lib-backup-libkrb5profile.so Read More »

Replacing security/pam-ssh-agent-auth with security/pam_ssh_agent

Leave a Comment / FreeBSD, Open Source, Security, ssh / By /

Yesterday, I learned that security/pam-ssh-agent-auth is abandoned and deprecated. Looking back, I first used this about 13 years ago, and wrote about it while describing how I set up ansible clients. Today, I tried one of the two recommended replacement: security/pam_rssh – mentioned by Romain Tartière security/pam_ssh_agent – the one I’m trying Note the package vs the port Note this point. The package name is: [15:03 empty dvl ~] % pkg info -x

Replacing security/pam-ssh-agent-auth with security/pam_ssh_agent Read More »

Attempting to reproduce the missing etcmerge from 15.0 to 15.1 upgrade

Leave a Comment / FreeBSD, Open Source, pkgbase / By /

This post documents my attempt to reproduce the problem outlined in FreeBSD – /etc/pam.d/sshd was updated/overwritten – no merge attempt FYI, this bug report was created before I did this work: pkgbase upgrade to 15.1 restores default /etc/pam.d/* configuration I have a working test jail: testingmerge Snapshot of 15.0 [12:11 r730-03 dvl /usr/local/share] % zfs list | grep testingmerge data01/jails/testingmerge 374M 7.62T 374M /jails/testingmerge [12:16 r730-03 dvl /usr/local/share] % sudo zfs snapshot data01/jails/testingmerge@clean-15.0

Attempting to reproduce the missing etcmerge from 15.0 to 15.1 upgrade Read More »

FreeBSD – /etc/pam.d/sshd was updated/overwritten – no merge attempt

Leave a Comment / FreeBSD, Open Source, pkgbase / By /

I was wondering why hare did not seem to be working anymore. FYI, this bug report was created before I did this work: pkgbase upgrade to 15.1 restores default /etc/pam.d/* configuration I tracked it down to a missing line in /etc/pam.d/sshd. The file is there in this snapshot: [12:24 r730-01 dvl /jails/serpico/.zfs/snapshot] % diff -ruN autosnap_2026-08-04_00:00:18_daily/etc/pam.d/sshd /jails/serpico/etc/pam.d/sshd — autosnap_2026-08-04_00:00:18_daily/etc/pam.d/sshd 2023-12-03 16:38:51.359135000 +0000 +++ /jails/serpico/etc/pam.d/sshd 2026-06-12 09:42:15.000000000 +0000 @@ -21,4 +21,3 @@ # password

FreeBSD – /etc/pam.d/sshd was updated/overwritten – no merge attempt Read More »

Running pkgbasify on a FreeBSD 15.0 host to convert a jail

2 Comments / FreeBSD, Jails, pkgbase / By /

Not long ago, I ran pkgbasify on a FreeBSD 15.0 jail – this time I’m going to do it slightly differently. I’m going to run the script on the host. In this post: FreeBSD 15.0 the jail is named dns1 I’ll use the variable MYJAIL to make your copy/paste easier and my future runs easier Following the instructions at https://github.com/FreeBSDFoundation/pkgbasify I did the following. Download [23:03 r730-01 dvl ~/bin] % fetch https://github.com/FreeBSDFoundation/pkgbasify/raw/refs/heads/main/pkgbasify.lua pkgbasify.lua

Running pkgbasify on a FreeBSD 15.0 host to convert a jail Read More »

Updating a FreeBSD 15.0 jail to FreeBSD 15.1 (via pkgbase)

Leave a Comment / FreeBSD, Open Source, pkgbase / By /

NOTE: I suspect some configuration file changes happened silently. See FreeBSD – /etc/pam.d/sshd was updated/overwritten – no merge attempt On Friday, I finished upgrading all my FreeBSD hosts from FreeBSD 15 to FreeBSD 15.1 (the first host I did is in this blog post ). Before that, I had run pkgbasify on each of those hosts. I also ran pkgbasify in a jail, but I learned that I can run it from the

Updating a FreeBSD 15.0 jail to FreeBSD 15.1 (via pkgbase) Read More »

Updating FreeBSD 15.0 to FreeBSD 15.1 (via pkgbase)

Leave a Comment / FreeBSD, pkgbase / By /

NOTE: I suspect some configuration file changes happened silently. See FreeBSD – /etc/pam.d/sshd was updated/overwritten – no merge attempt I decided that Thursday morning at 8:27 AM was the right time to start my first update from FreeBSD 15.0 to 15.1 – all my hosts are now on pkgbase. I used the pgkbasify script. Now it’s time to update again. In this post: FreeBSD 15.0 (before) FreeBSD 15.1 (after; hopefully) The host is

Updating FreeBSD 15.0 to FreeBSD 15.1 (via pkgbase) Read More »

During a power outage, how do the three servers in the basement react?

Leave a Comment / FreeBSD, nut, Open Source / By /

Over the weekend, some branches fell on a neighbor’s power service line. They still had power, but the branches had to be removed. That removal occurred this morning. I saw the trucks at about 6:45 AM as I walked past. I suspected I might lose power, and I did. This post records the shutdown and power on times/sequences. I might find this useful should I need to reevaluate the power-outage procedures. My thought:

During a power outage, how do the three servers in the basement react? Read More »

data04: DEGRADED

Leave a Comment / ZFS / By /

This morning I noticed this in the logs after doing some pkg upgrade. I was mainly updating openvpn, but in that operation, fail2ban was removed (because I went from python312 to python314). I noticed it missing on one host: I ran this grep to verify fail2ban had been removed from another host: Well, this host doesn’t run fail2ban, but those messages are “interesting”. How much is nvme mentioned in the logs? [12:31 r730-01

data04: DEGRADED Read More »

Running pkgbasify on a FreeBSD 15.0 jail

Leave a Comment / FreeBSD, Jails, Open Source, pkgbase / By /

It’s time. All my hosts are on 15.0 and on pkgbase. Next, let’s move a jail to pkgbase. In this post: FreeBSD 15.0 the jail is named empty NOTE: After running this from within the jail, I learned I should run it from the host and using the -j parameter. I’ll create a new blog post once I do another jail. PLEASE use this updated post instead. I’m following instructions based on the

Running pkgbasify on a FreeBSD 15.0 jail Read More »

Scroll to Top