With this new server, I am taking a new approach. Each jail will have at least three IP addresses: The public IP4 address, used by internet facing services (e.g. http or https) The public IPv6 address, similar to the above A VPN address, used for system administration and private services (e.g. nrpe) In this article, […]
Accessing FreeBSD Jails over OpenVPN Read More »
A few days I configured a new server to be an Ansible node. This will allow my Ansible configuration tool to configure and install software. Installing Ansible and getting it running is not covered by the post. All I show here is how I got a remote server ready to be configured by Ansible. The
Bootstrapping a new FreeBSD jail host as an Ansible node Read More »
This is zuul, the server I’ve been setting up to be a new jail host. I like to store away this type of documentation, in case I need it later. The partitions: The ZFS file systems: The ada0 drive details: And ada1 drive details: And finally, dmesg:
Over the past few weeks, I worked with two different configuration tools: Salt and Ansible. I started working with Salt. I quickly created a setup for a Salt server and for a Salt minion. The modules I saw looked great. However, I had consistently had trouble converting from the documentation to a practical usage. The
Ansible versus Salt Read More »
Tonight I asked a question in the OpenVPN IRC channel on FreeNode. me: I’m getting ready to set up a new server, running an OpenVPN client. It will be running several virtual machines (FreeBSD Jails). Each VM will have both a public IP address and a non-routable IP address. I’m hoping to access all those
Routing with jails Read More »
I have an exciting project ahead of me. I will soon be configuring a new server. It will be ZFSROOT running a pair of mirrored 500GB disks. I plan to use a configuration tool for management of this server. The final choice of tools is yet to be decided. The services provided by this server
Exciting project ahead Read More »
Sometimes you want to do things alone. Or rather, without intervention. Unattended. Bootstrapping the pkgng package management tool is one of those things. From the pkgng documentation, “FreeBSD 9.1 and later includes a bootstrap utility which can be used to download and install pkgng, along with its manual pages”. Let me show you how that
Bootstrapping / installing pkg on FreeBSD unattended and without answering Yes Read More »
My laptop’s hostname is dent. I want my DNS records to point to that laptop whether I’m connected to my LAN directly (via WIFI or ethernet cable) or via OpenVPN (my VPN of choice). SIDE NOTE: You will see references to nsupdate -k below. Note that in recent versions of this program, the option you
OpenVPN and dynamic DNS Read More »
For some time, I’ve seen these messages and been slightly bothered by them. Today, I found the solution. can’t re-use a leaf (geom_label)! can’t re-use a leaf (geom_part_gpt)! module_register: module g_label already exists! Module g_label failed to register: 17 module_register: module g_part_gpt already exists! Module g_part_gpt failed to register: 17 Those messages appeared on the
can’t re-use a leaf or module_register: module g_label already exists Read More »
Have you ever seen a message like this? From: Nvi recovery program Subject: Nvi saved the file sudoers.tmp Date: November 3, 2013 6:48:00 PM EST To: root@slocum.example.org Reply-To: root@slocum.example.org On Thu Jul 25 18:55:42 2013, the user root was editing a file named /usr/local/etc/sudoers.tmp on the machine slocum.unixathome.org, when it was saved for recovery. You
Nvi saved the file sudoers.tmp Read More »