To be fair, the name servers weren’t offline, just the two zone files I amended. The effect: none of my services at home were available to anything at home. The other day, I was working on some procedures for adding a jail to a host and then a jail within that jail. I wanted to […]
How I took my name servers offline by adding a new hostname Read More »
Bought a new NVMe drive. Installed it using cheap PCIe adaptor bought off Amazon. From /var/run/dmesg.boot nvd0: NVMe namespace nvd0: 244198MB (500118192 512 byte sectors) Surprisingly, the device is already partitioned. [dvl@test ~]$ gpart show nvd0 => 34 500118125 nvd0 GPT (238G) 34 500118125 – free – (238G) [dvl@test ~]$ Eh, is is this a
I bought a new nvme drive – or did I? Read More »
On one recent FreeBSD 13 host, I noticed a lack of motd. The MOTD (Message Of The Day) appears when you login. Typically, it looks like this: [dan@rose:~] $ r720 Last login: Mon Aug 2 00:30:13 2021 from air01.startpoint.vpn.unixathome.org FreeBSD 13.0-RELEASE-p3 (GENERIC) #0: Tue Jun 29 19:46:20 UTC 2021 Welcome to FreeBSD! Release Notes, Errata:
suppressing motd on FreeBSD 13.0+ Read More »
In the past, I have tried vnet jails with pf, and hit trouble. I was never able to get pf to allow the vnet traffic when having a default ‘block log all’ rule. More recently, I encountered the same problem when using byhve. This time, I moved byhve to another host, which is not using
Trouble with vnet and pf Read More »
NOTE: This post was composed in June 2020. I think I got started running conferences in 2002 when I helped with Open Source Weekend 2003. The next year, I started BSDCan. Three years later, PGCon start. All up, I think I’ve run at least 32 conferences, two of which have been online: BSDCan 2020 and
Tips for running an online conference Read More »
HEADS UP: this is still under review. Until this notice is removed, I recommend not using this. I have a Dell R720 at an ISP. The iDRAC connection is filtered, by the ISP, and is accessible only from a small number of IP addresses. Sure, this talks about a web proxy. It works. So does
Accessing a Dell iDRAC 7 via Nginx reverse proxy Read More »
To ignore files in your subversion working directory, try this. [dan@dev-ingress01:~/scripts]: $ svn st M . ? helper_scripts ? show-config.sh ? test-categories.pl ? test-new-xml-code-single.sh ? test-new-xml-code-starting-from.sh I want to ignore all those files, so: $ svn st > .IgnoreThese Then I edit the file, so only the file names are shown. Something like this: Then
Ignore files in a subversion working copy Read More »
This post was originally a few tweets. It’s not really about upgrading vulnerabilities in poudriere jails either. Read this as if each paragraph was a tweet. When a FreeBSD security alert comes out, or a package is marked as vulnerable, I try to get that fixed as soon as I can. Even if not using
Fixing vulns in poudriere jails Read More »
This started earlier today and I solved it only just now. It took me a while to find out it was duplicate cron jobs, and even longer to find out why. It started with lockf notifications (if you’ve never heard of lockf before, please read this Twitter thread for examples). In short, one of those
cron is running all jobs twice – solved Read More »
See also SSL client vs server certificates and bacula-fd. I use OpenVPN since at least 2008 – now going on 13 years. I find it to be reliable and stable. A few days ago, I added another client to a VPN. I run this particular network with self-signed certificates which I create using ssl-admin –
OpenVPN: unsupported certificate purpose Read More »