I recently implemented Fail2ban on a FreeBSD jail host. It monitors log files within the jails, from the host. Offensive IP addresses which act up in one jail will be blocked at the host, thus blocking the rascal IP from all jails. This has been running for about two weeks. Today I added another tool, the WP fail2ban plugin. The plugin comes with a wordpress.local file, but to make it work with FreeBSD, […]
WordPress and Fail2ban Read More »
I felt I was backing up way too much on my jail server. I was backing up files which would be installed as part of the OS. Let’s look at the esimate: *estimate level=full job=”slocum jail snapshots” Using Catalog “MyCatalog” Connecting to Client slocum-fd at slocum.int.unixathome.org:9102 2000 OK estimate files=2,824,716 bytes=239,568,332,325 * I decided to add these to the FileSet: Options { Exclude = yes WildDir = “/usr/jails/*/.zfs/snapshot/basejail” WildDir = “/usr/jails/*/.zfs/snapshot/bin” WildDir =
Excluding the base-OS when backing up FreeBSD jails with Bacula Read More »
I noticed this tonight: {:timestamp=>”2015-04-18T01:01:54.363000+0000″, :message=>”Failed parsing date from field”, :field=>”syslog_timestamp”, :value=>”Apr 18 01:01:49″, :exception=>java.lang.IllegalArgumentException: Invalid format: “Apr 18 01:01:49″ is malformed at ” 18 01:01:49″, :level=>:warn} It seems this is the cause: For the record, here are all such instances: One day, I’ll come back here and fix that.
I have no idea when I wrote this. It got saved but never published, until today. I recently had the boot drive at one of my servers change. It’s really a VM on a box, but at least it’s running FreeBSD. To fix it, I got a VNC session going to their server, and was greeted by the prompt: mountroot> ? List of GEMO managed disk devices: ufsid/48ee594bdcbf83e3 ufsid/48dd594bad4c1d6f ufsif/48ee594b514a21e1 ufsid/48ee594b75a0ff85 acd0 ad1s1f
drive letters changed? Read More »
I wrote this back in July 2013, but never published it. Might as well share it now. Lately, I’ve been moving away from tracking FreeeBSD STABLE and more towards using freebsd-update(8). Today, I’ll be setting up a jail, using ezjail and freebsd-update. ############## NOTE: Please read the comments before you read the article. ############## Installing Installing ezjail is straight forward: Installing the base jail My first attempt at creating a base jail failed:
ezjail with freebsd-update Read More »
This is an old post I wrote, but never published, back in 2010. I’ve started using Munin for some statistical monitoring. Using the hddtemp_smartctl plugin, I was getting some permission errors. After printing the output of the command, I noticed these in the logs: 2010/03/11-18:30:05 [60845] [ERROR] Command /usr/local/sbin/smartctl -A /dev/ad8 on drive ad8 failed: 256. The plugin needs to have read permission on all monitored devices. smartctl 5.39 2009-12-09 r2995 [FreeBSD 8.0-STABLE
Last night I upgraded the main jail server in my lab from FreeBSD 9.3 to FreeBSD 10.1. I just started using the term, home lab, after discovering http://www.reddit.com/r/homelab/. That server contains, amongst other things, these jails: my development environment for http://dev.freshports.org/ my in house webserver, which hosts the above mentioned website my svn repo an installation of ElasticSearch and Kibana (ELK) an Nginx for web proxy 21 instances of Bacula for tutorial sessions
What I would do differently when upgrading from 9.3 to 10.1 Read More »
In this post, I will use boot environments to upgrade an existing FreeBSD 9.3 to FreeBSD 10.1, and I will do this from within a chroot. Why? Because I can. You might want to read about my previous attempt and one or two, actually three, things I did to get ready for this. In the following commands, I clone the existing running environment to 10.1-RELEASE, then I mount it to /mnt, chroot into
Upgrading from FreeBSD 9.3 to FreeBSD 10.1 using beadm and freebsd-update Read More »
Much like the system/bootenv/default/usr does not contain /usr issue I recently wrote about, I found the same issue with system/bootenv/default/var For this post, I have booted my FreeBSD 9.3 system from mfsBSD thumb drive. I will import the pool, but not mount it. # zpool import -N system I mounted the filesystem in question, and confirm that there is just one ZFS thing mounted: # mount -t zfs system/bootenv/default/var /mnt # mount -t
system/bootenv/default/var does not contain /var Read More »
I just upgraded from 9.3 to 10.1. I have not yet complete the install. My userland has been upgraded to 10.1 but my apps have not. I have a tmux session sitting like this: [root@slocum:~] # /usr/sbin/freebsd-update install Installing updates… Completing this upgrade requires removing old shared object files. Please rebuild all installed 3rd party software (e.g., programs installed from the ports tree) and then run “/usr/sbin/freebsd-update install” again to finish installing updates.
Building for new version of system Read More »