FreeBSD

scripts for monitoring vulns in FreeBSD jails

I have scripts for monitoring vulns in FreeBSD jails. They use third-party scripts. All I wrote was the Nagios part of the solution. I was preparing slides for my Why I prefer thick jails over thin jails talk at EuroBSDCon 2019. There is still time to register and attend. I was explaining my scripts and

scripts for monitoring vulns in FreeBSD jails Read More »

poudriere hooks

zi0r suggested I use hooks to accomplish my patches-outside-distfiles question. In this post: FreeBSD 12.0 poudriere 3.3.2 I started reading the documentation and played with the supplied sample files in /usr/local/etc/poudriere.d/hooks. For background, see FreeBSD custom port patches when using poudriere. Eventually I came up with this solution: mkdir during the start phase mount during

poudriere hooks Read More »

iocage

I was asked why I was exasperated with iocage: This is the list of issues where I found my name. A given issue may be listed multiple times. Oct 2017 – iocage upgrade is looping: https://github.com/iocage/iocage/issues/399 Jun 2018 – cannot run ‘iocage start’ from my home dir: https://github.com/iocage/iocage/issues/567 Aug 2018 – entries in fstab disappear:

iocage Read More »

pkg: http://vuxml.freebsd.org/freebsd/vuln.xml.bz2: No address record

I’ve been making use of some FreeBSD-provided scripts within my Nagios monitoring. Recently, I started seeing a problem after some jail maintenance. This post is about that problem and the fix. Full disclosure: the issue was not what I thought it was and I did not solve it. I’m using: FreeBSD 11.2-RELEASE-p9 The scripts are:

pkg: http://vuxml.freebsd.org/freebsd/vuln.xml.bz2: No address record Read More »

Converting thin jails to thick jails

I have been using ezjail since at least 2008 (see earlier blog post). A few years ago, I started deploying iocage on new servers. About three months ago, I starting converting systems from ezjail to iocage. When I converted my first system, I found that the existing documentation for conversion was incomplete. Specifically, symlinks were

Converting thin jails to thick jails Read More »

Scroll to Top