FreeBSD

Moving poudriere from the host into a jail

This post is all about moving poudriere from the host into a jail, but you could probably use it for creating a new jail and running poudriere in it. NOTE: If you’re looking for a jail configuration for poudriere, please refer to Configuration for running poudriere in a jail on FreeBSD 14 – it contains new stuff, like mlock (thanks to feld for pointing this out). This also assumes use of iocage, but […]

Moving poudriere from the host into a jail Read More »

My plan for moving the R710 into the R720

Today the drive caddies arrived for the R720. I refer to the services provided by the R710, not the server itself. I will list those services later and outline how I want to move them. I could do all this over this coming weekend but I have already allocated that time to some errands I have to catch up on. Physical things This section discusses the physical things which must move. Drives There

My plan for moving the R710 into the R720 Read More »

Going from partition to label in zpool status

In my recent post you saw this: [dan@r720-01 ~]$ zpool status zroot pool: zroot state: ONLINE scan: resilvered 818M in 0 days 00:00:09 with 0 errors on Tue Oct 15 21:32:12 2019 config: NAME STATE READ WRITE CKSUM zroot ONLINE 0 0 0 mirror-0 ONLINE 0 0 0 ada0p3 ONLINE 0 0 0 gpt/zfs1 ONLINE 0 0 0 errors: No known data errors [dan@r720-01 ~]$ I want to change ada0p3 to gpt/zfs0, as

Going from partition to label in zpool status Read More »

Creating a mirror from your zroot

I planned to create a zroot mirror when I installed FreeBSD on the R720 but the supplier shipped only one of the two purchased SSDs. Today the second drive arrived. Let’s create a zroot mirror. In this post: FreeBSD 12 man 8 zpool Posts I looked at: creating a mirrored ZFS Pool out of a single-disk rpool – not FreeBSD Convert Single disk ZFS-On-Root to Mirror – used the GUID via zbd; I

Creating a mirror from your zroot Read More »

Preparing the Dell R720 for ZFS

I have obtained a Dell R720 containing 10 x 400GB SSDs. The drives are connected to a RAID controller (H710P) which cannot do JBOD / IT mode. This means the drives are effectively hidden from ZFS, which is never good. In this post: FreeBSD 12.0 ZFS Dell R720 SAS 9207-8i This post describes past work and future plans for this server as I get it ready to be a general purpose server running

Preparing the Dell R720 for ZFS Read More »

scripts for monitoring vulns in FreeBSD jails

I have scripts for monitoring vulns in FreeBSD jails. They use third-party scripts. All I wrote was the Nagios part of the solution. I was preparing slides for my Why I prefer thick jails over thin jails talk at EuroBSDCon 2019. There is still time to register and attend. I was explaining my scripts and was providing links to gist.github.com … I realized I should create a repo: https://github.com/dlangille/freebsd-nagios-jail These scripts do the

scripts for monitoring vulns in FreeBSD jails Read More »

poudriere hooks

zi0r suggested I use hooks to accomplish my patches-outside-distfiles question. In this post: FreeBSD 12.0 poudriere 3.3.2 I started reading the documentation and played with the supplied sample files in /usr/local/etc/poudriere.d/hooks. For background, see FreeBSD custom port patches when using poudriere. Eventually I came up with this solution: mkdir during the start phase mount during the mount phase I put stuff into a gist first, then created this post. The hook This is

poudriere hooks Read More »

iocage

I was asked why I was exasperated with iocage: This is the list of issues where I found my name. A given issue may be listed multiple times. Oct 2017 – iocage upgrade is looping: https://github.com/iocage/iocage/issues/399 Jun 2018 – cannot run ‘iocage start’ from my home dir: https://github.com/iocage/iocage/issues/567 Aug 2018 – entries in fstab disappear: https://github.com/iocage/iocage/issues/595 Dec 2018 – Cannot install 12.0 in a jail: https://github.com/iocage/iocage/issues/715 Jan 2019 – iocages puts exec files

iocage Read More »

hacking on iocage

Today is the day after BSDCan 2019. The power cables and extension cords from the hacking lounge have been laid to rest in an Ottawa basement until next year. Sitting in my parents garden, I noticed some Nagios cert warnings: I logged into my certificates server (the website from which all my hosts download their certs). The cert looked OK: [dan@webs01:/usr/local/www/certs.unixathome.org/www/certs/x8dtu.unixathome.org] $ ls -l total 14 -rw-r–r– 1 rsyncer rsyncer 1647 May 11

hacking on iocage Read More »

pkg: http://vuxml.freebsd.org/freebsd/vuln.xml.bz2: No address record

I’ve been making use of some FreeBSD-provided scripts within my Nagios monitoring. Recently, I started seeing a problem after some jail maintenance. This post is about that problem and the fix. Full disclosure: the issue was not what I thought it was and I did not solve it. I’m using: FreeBSD 11.2-RELEASE-p9 The scripts are: 405.pkg-base-audit 410.pkg-audit Where are they from? $ pkg which /usr/local/etc/periodic/security/405.pkg-base-audit /usr/local/etc/periodic/security/405.pkg-base-audit was installed by package base-audit-0.3 You don’t

pkg: http://vuxml.freebsd.org/freebsd/vuln.xml.bz2: No address record Read More »

Scroll to Top