Turning Mailman 2.1 into static archives, at the same URLs

Leave a Comment / FreeBSD, Mail, Mailing Lists, Mailman, Open Source / By /

I have been running Mailman 2.1 since at least 2006. It is long past end of life, it still needs Python 2.7, and the lists it carries have all gone quiet. Some moved elsewhere (BSDCan went in April 2024), the rest just stopped. Time to turn it off. The one thing I did not want to lose was the archives. Lots of old links point at them, from mailing list posts, from blog

Turning Mailman 2.1 into static archives, at the same URLs Read More »

Search gate traffic – how a cookie helped performance

Leave a Comment / FreshPorts, nginx, Open Source, PostgreSQL / By /

On 17 October, at 10:17 UTC, the search gate went live on www.freshports.org. A search from a visitor without a login or a search_ok cookie now gets a small challenge page instead of a search. I wrote about the first day in the FreshPorts October speed-up post. This post looks at the twelve days since. I expected the traffic to drop once the bots got nothing for their trouble. It didn’t. What dropped

Search gate traffic – how a cookie helped performance Read More »

Quieting a jail’s mail, and a prompt that wasn’t mine

Leave a Comment / FreeBSD, Jails, Mail, Open Source / By /

I was looking inside the index jail today and found this: root@index:/ # ls -l /var/mail/ total 25 -rw–w—- 1 root mail 51258 Oct 27 03:27 root That jail doesn’t do much. Nobody reads that mail. I wanted it gone. Along the way, I fixed something else which had been bothering me for a while: a broken prompt whenever I used jexec. What was in the mailbox Before turning anything off, I checked

Quieting a jail’s mail, and a prompt that wasn’t mine Read More »

4098 bits strikes again: pam-ssh-agent and an RSA key that was 2 bits too big

Leave a Comment / pam-ssh-agent / By /

In August, I wrote about replacing security/pam-ssh-agent-auth with security/pam_ssh_agent. The old module is abandoned and deprecated. The new one, pam-ssh-agent, was a drop-in replacement in /usr/local/etc/pam.d/sudo: auth sufficient /usr/local/lib/pam_ssh_agent.so file=~/.ssh/authorized_keys I saw no problems with it, except when this one case. The symptom With an ssh-rsa key, sudo fell through to the next PAM entry, and this showed up in the logs: pam_ssh_agent(sudo:auth): authorized keys from ‘/usr/home/foo/.ssh/authorized_keys’ pam_ssh_agent(sudo:auth): signature error: cryptographic error pam_ssh_agent(sudo:auth):

4098 bits strikes again: pam-ssh-agent and an RSA key that was 2 bits too big Read More »

Backing up my gitea via mirroring

Leave a Comment / Backups, git / By /

I run a Gitea instance at git.langille.org. Some of what’s on there is a pull mirror of a GitHub repo. Some of it exists nowhere else. That second group bothers me. If that server goes away, so do those repos. I’m sure I can find another existing script and use that. Please point one out to me if you find it. UPDATE 2026-10-27: This script just automagically mirrored a recently added repo. This

Backing up my gitea via mirroring Read More »

data04: DEGRADED – S7KGNU0Y912955D again

2 Comments / nvme, ZFS / By /

Two days ago, I was greeted with these message. There are two recent issues: data04: DEGRADED – 102 days ago data04: DEGRADED – oh and have I mentioned WatchGoose? – 30 days ago The first link mentions the problem device (S7KGNU0Y912955D) as seen below on the highlighted line 129. Fixing it This time, as in the previous two incidents, a power cycle failed to bring back the missing device. Today, I pulled the

data04: DEGRADED – S7KGNU0Y912955D again Read More »

Migrated your repo from subversion to git? Here’s how I migrated my working copies.

Leave a Comment / git, subversion / By /

The long-used FreshPorts subversion repositories have been converted from subversion to git. The process I used is documented in https://github.com/FreshPorts/git-conversion. Today, I’m moving the working copy subversion checkouts to git working copies. The original code is retained and any local changes will be available for check-in / diff after the conversion. Here’s an outline of that process. FreshPorts left Subversion on 5 October 2026, but the hosts didn’t. The ingress code on each

Migrated your repo from subversion to git? Here’s how I migrated my working copies. Read More »

data04: DEGRADED – oh and have I mentioned WatchGoose?

Leave a Comment / nvme, ZFS / By /

I saw this today in my logs on r730-01. It looks similar to a previous DEGRADED even back on July 2. In this case, the device is S7KGNU0Y915666E, not S7KGNU0Y912955D as it was back then. The zpool status is: [12:16 r730-01 dvl ~] % zpool status data04 pool: data04 state: DEGRADED status: One or more devices have been removed. Sufficient replicas exist for the pool to continue functioning in a degraded state. action:

data04: DEGRADED – oh and have I mentioned WatchGoose? Read More »

FreeBSD backup libraries such as base/FreeBSD-kerberos-lib-backup-libkrb5profile.so

Leave a Comment / FreeBSD, pkg, pkgbase / By /

I build my own FreeBSD packages using poudriere. I do this for various reasons, which include: Getting security updates faster because I build nightly Some packages I install use non-default build options One of the monitoring checks I have in place will identify any installed package which is not in the package repository. That helps me identify any failed package builds or packages I have build once, installed, and did not added to

FreeBSD backup libraries such as base/FreeBSD-kerberos-lib-backup-libkrb5profile.so Read More »

Replacing security/pam-ssh-agent-auth with security/pam_ssh_agent

Leave a Comment / FreeBSD, Open Source, Security, ssh / By /

Yesterday, I learned that security/pam-ssh-agent-auth is abandoned and deprecated. Looking back, I first used this about 13 years ago, and wrote about it while describing how I set up ansible clients. Today, I tried one of the two recommended replacement: security/pam_rssh – mentioned by Romain Tartière security/pam_ssh_agent – the one I’m trying Note the package vs the port Note this point. The package name is: [15:03 empty dvl ~] % pkg info -x

Replacing security/pam-ssh-agent-auth with security/pam_ssh_agent Read More »

Scroll to Top