FreeBSD

FreeBSD backup libraries such as base/FreeBSD-kerberos-lib-backup-libkrb5profile.so

Leave a Comment / FreeBSD, pkg, pkgbase / By /

I build my own FreeBSD packages using poudriere. I do this for various reasons, which include: Getting security updates faster because I build nightly Some packages I install use non-default build options One of the monitoring checks I have in place will identify any installed package which is not in the package repository. That helps me identify any failed package builds or packages I have build once, installed, and did not added to […]

FreeBSD backup libraries such as base/FreeBSD-kerberos-lib-backup-libkrb5profile.so Read More »

Replacing security/pam-ssh-agent-auth with security/pam_ssh_agent

Leave a Comment / FreeBSD, Open Source, Security, ssh / By /

Yesterday, I learned that security/pam-ssh-agent-auth is abandoned and deprecated. Looking back, I first used this about 13 years ago, and wrote about it while describing how I set up ansible clients. Today, I tried one of the two recommended replacement: security/pam_rssh – mentioned by Romain Tartière security/pam_ssh_agent – the one I’m trying Note the package vs the port Note this point. The package name is: [15:03 empty dvl ~] % pkg info -x

Replacing security/pam-ssh-agent-auth with security/pam_ssh_agent Read More »

Attempting to reproduce the missing etcmerge from 15.0 to 15.1 upgrade

Leave a Comment / FreeBSD, Open Source, pkgbase / By /

This post documents my attempt to reproduce the problem outlined in FreeBSD – /etc/pam.d/sshd was updated/overwritten – no merge attempt FYI, this bug report was created before I did this work: pkgbase upgrade to 15.1 restores default /etc/pam.d/* configuration I have a working test jail: testingmerge Snapshot of 15.0 [12:11 r730-03 dvl /usr/local/share] % zfs list | grep testingmerge data01/jails/testingmerge 374M 7.62T 374M /jails/testingmerge [12:16 r730-03 dvl /usr/local/share] % sudo zfs snapshot data01/jails/testingmerge@clean-15.0

Attempting to reproduce the missing etcmerge from 15.0 to 15.1 upgrade Read More »

FreeBSD – /etc/pam.d/sshd was updated/overwritten – no merge attempt

Leave a Comment / FreeBSD, Open Source, pkgbase / By /

I was wondering why hare did not seem to be working anymore. FYI, this bug report was created before I did this work: pkgbase upgrade to 15.1 restores default /etc/pam.d/* configuration I tracked it down to a missing line in /etc/pam.d/sshd. The file is there in this snapshot: [12:24 r730-01 dvl /jails/serpico/.zfs/snapshot] % diff -ruN autosnap_2026-08-04_00:00:18_daily/etc/pam.d/sshd /jails/serpico/etc/pam.d/sshd — autosnap_2026-08-04_00:00:18_daily/etc/pam.d/sshd 2023-12-03 16:38:51.359135000 +0000 +++ /jails/serpico/etc/pam.d/sshd 2026-06-12 09:42:15.000000000 +0000 @@ -21,4 +21,3 @@ # password

FreeBSD – /etc/pam.d/sshd was updated/overwritten – no merge attempt Read More »

Running pkgbasify on a FreeBSD 15.0 host to convert a jail

2 Comments / FreeBSD, Jails, pkgbase / By /

Not long ago, I ran pkgbasify on a FreeBSD 15.0 jail – this time I’m going to do it slightly differently. I’m going to run the script on the host. In this post: FreeBSD 15.0 the jail is named dns1 I’ll use the variable MYJAIL to make your copy/paste easier and my future runs easier Following the instructions at https://github.com/FreeBSDFoundation/pkgbasify I did the following. Download [23:03 r730-01 dvl ~/bin] % fetch https://github.com/FreeBSDFoundation/pkgbasify/raw/refs/heads/main/pkgbasify.lua pkgbasify.lua

Running pkgbasify on a FreeBSD 15.0 host to convert a jail Read More »

Updating a FreeBSD 15.0 jail to FreeBSD 15.1 (via pkgbase)

Leave a Comment / FreeBSD, Open Source, pkgbase / By /

NOTE: I suspect some configuration file changes happened silently. See FreeBSD – /etc/pam.d/sshd was updated/overwritten – no merge attempt On Friday, I finished upgrading all my FreeBSD hosts from FreeBSD 15 to FreeBSD 15.1 (the first host I did is in this blog post ). Before that, I had run pkgbasify on each of those hosts. I also ran pkgbasify in a jail, but I learned that I can run it from the

Updating a FreeBSD 15.0 jail to FreeBSD 15.1 (via pkgbase) Read More »

Updating FreeBSD 15.0 to FreeBSD 15.1 (via pkgbase)

Leave a Comment / FreeBSD, pkgbase / By /

NOTE: I suspect some configuration file changes happened silently. See FreeBSD – /etc/pam.d/sshd was updated/overwritten – no merge attempt I decided that Thursday morning at 8:27 AM was the right time to start my first update from FreeBSD 15.0 to 15.1 – all my hosts are now on pkgbase. I used the pgkbasify script. Now it’s time to update again. In this post: FreeBSD 15.0 (before) FreeBSD 15.1 (after; hopefully) The host is

Updating FreeBSD 15.0 to FreeBSD 15.1 (via pkgbase) Read More »

During a power outage, how do the three servers in the basement react?

Leave a Comment / FreeBSD, nut, Open Source / By /

Over the weekend, some branches fell on a neighbor’s power service line. They still had power, but the branches had to be removed. That removal occurred this morning. I saw the trucks at about 6:45 AM as I walked past. I suspected I might lose power, and I did. This post records the shutdown and power on times/sequences. I might find this useful should I need to reevaluate the power-outage procedures. My thought:

During a power outage, how do the three servers in the basement react? Read More »

Running pkgbasify on a FreeBSD 15.0 jail

Leave a Comment / FreeBSD, Jails, Open Source, pkgbase / By /

It’s time. All my hosts are on 15.0 and on pkgbase. Next, let’s move a jail to pkgbase. In this post: FreeBSD 15.0 the jail is named empty NOTE: After running this from within the jail, I learned I should run it from the host and using the -j parameter. I’ll create a new blog post once I do another jail. PLEASE use this updated post instead. I’m following instructions based on the

Running pkgbasify on a FreeBSD 15.0 jail Read More »

after pkgbasify – not finding all the repos?

Leave a Comment / FreeBSD, Open Source, pkgbase / By /

If, after moving to pkgbase (for me, that was via pkgbasify), you discover you can’t find the package in question, you might, like me, run this command: % pkg repos -e [18:25 r720-02 dvl ~] % pkg repos -e local: { url : “https://fedex.example.org/packages/FreeBSD:15:amd64/”, enabled : yes, priority : 0, signature_type : “PUBKEY”, pubkey : “/etc/ssl/slocum.unixathome.org.cert” } Not to worry, that’s my local repo. What’s missing there is pkgbase. When I compare this

after pkgbasify – not finding all the repos? Read More »

Scroll to Top