I have been using ezjail since at least 2008 (see earlier blog post). A few years ago, I started deploying iocage on new servers. About three months ago, I starting converting systems from ezjail to iocage. When I converted my first system, I found that the existing documentation for conversion was incomplete. Specifically, symlinks were […]
Converting thin jails to thick jails Read More »
We know the routine. You have a desktop, and a laptop, or perhaps two laptops. You want your files in both places. A shared, remotely mounted directory is not ideal. Instead, let’s have the systems synchronize themselves. That’s where syncthing comes in: Syncthing replaces proprietary sync and cloud services with something open, trustworthy and decentralized.
using syncthing between my OSX laptop and my FreeBSD server Read More »
I started playing with /usr/local/etc/periodic/security/405.pkg-base-audit as part of a monitoring system. It works fine from the command line, but when I use Nagios plugins, I am getting unexpected results. By unexpected, I mean messages about FreeBSD 10.2. The host in question runs FreeBSD 12.0. The problem cannot be reproduced on the host, only from the
Getting ‘FreeBSD-10.2 is vulnerable’ messages on a 12.0 host Read More »
This covers the facts regarding the list of things to do on Server Build Saturday. The slocum – the new hardware changes occurred on 2 February 2019, with the help of a guy I’ve known since my early days in PA. jb33z did the heavy lifting, both of the chassis and of the HDD. He
slocum – the new : assembly details Read More »
This post has been replaced by a new one. For reference, the previous post on this server is still available. This server was upgraded on Feb 2 2019. Only the storage persisted. Everything else was upgraded. The hardware M/B – Supermicro X9DRE-TF+ RAM – 128GB composed of 8x 16GB DDR3 1600Mhz 21300 ECC/REG CPU –
I recently became aware that ACME DNS validation can be accomplished via proxy. By proxy, I mean you can update the DNS records of another domain, not the domain for which the certificate is being issued. Why would you do this (as taken from acme.sh DNS Alias Mode): Your DNS provider does not provide API
ACME domain alias mode Read More »
Tomorrow I’ll be doing some server and rack work. I’ll be moving one system into a new chassis, combining two desktops into the old chassis, and putting both chassis back into the rack. There are a bunch of steps here and I want to write them down so they all get done. These steps were
Server build Saturday! Read More »
Back in late November (now 56 days ago), I started getting huge levels of very directed spam. When I tweeted about it, I was getting perhaps 100-250 a day. I thought it would soon stop and they would target someone else. They would get into my spam folder yes, but it still takes time to
Using Postfix to block mail based on From/sender and To/recipient Read More »
I noticed some double timestamps in my logs recently. They started just after I upgraded the host to FreeBSD 12, but I am not convinced they are related. This is from /var/log/messsages: Jan 22 21:41:40 knew 1 2019-01-22T21:41:40.760533+00:00 knew.int.unixathome.org pkg 89351 – – py36-iocage-devel upgraded: 1.0.0.20181219,1 -> 1.0.0.20190122,1 They started late yesterday, this is from
Double timestamps in logs Read More »
Today I will upgrade knew from FreeBSD 11.2 to FreeBSD 12.0. It so happens that this is my last server at home which is still running 11.2, but I do have another server still on 11.2, but that one is at NYI. This post isn’t so much about beadm or about freebsd-update. I have written
Upgrading to FreeBSD 12.0 from FreeBSD 11.2 using beadm and freebsd-update Read More »