Open Source

Moving some ZFS filesystems to the ‘trash’ and removing all their snapshots – sanoid

I recently discovered that you can delete all snapshot from a ZFS filesystem with a single command. It came to me via fortune: You can delete a range of ZFS snapshots (a-z) in multiple ways. The following will delete d and all earlier snapshots: zfs destroy mypool/data@%d To delete d and all later snapshots: zfs destroy mypool/data@d% To delete all dataset snapshots: zfs destroy mypool/data@% Make sure to let ZFS perform a dry […]

Moving some ZFS filesystems to the ‘trash’ and removing all their snapshots – sanoid Read More »

mosquitto: upgrade from 1.x to 2.x requires configuration changes to keep working

I updated net/mosquitto from 1.6.7_1 to 2.0.8 on March 14, 2021. It did not get restarted at that time. It wasn’t until sysutils/anvil brought in a new certificate and attempted to restart mosquitto did the monitoring start detecting the problem: mosquitto wasn’t running. It’s the pid file Looking into it, nothing was logged when starting via rc.d: $ sudo service mosquitto start Starting mosquitto. Starting it from the command line gave useful information:

mosquitto: upgrade from 1.x to 2.x requires configuration changes to keep working Read More »

Eaton ePDU Auth Algorithm & Crypto Algorithm for SNMPv3 Configuration

I recently acquired an Eaton EMA114-10 PDU. When adding it to LibreNMS, I did not know what Authorization Algorithm or Crypto Algorithm to use when configuring it for SNMPv3. Searching did not find anything. IRC did. dagb on the LibreNMS IRC channel knew what was used for older EATON devices. Turns out, that hasn’t changed. These are the answers: Auth Algorithm – MD5 Crypto Algorithm – AES I hope this saves you time.

Eaton ePDU Auth Algorithm & Crypto Algorithm for SNMPv3 Configuration Read More »

Labelling tapes in bulk – Bacula

This is not a significant post. It is for the record. I received 20 new LTO4 tapes recently. I attached the external labels to them after using https://kelvin.nu/barcode *label barcodes pool=Scratch storage=bacula-sd-02 drive=0 slot=1-7,11-15,17-23,39,47 Connecting to Storage daemon bacula-sd-02 at bacula-sd-02.int.unixathome.org:9103 … 3306 Issuing autochanger “slots” command. Device “bacula-sd-02” has 47 slots. Connecting to Storage daemon bacula-sd-02 at bacula-sd-02.int.unixathome.org:9103 … 3306 Issuing autochanger “list” command. The following Volumes will be labeled: Slot Volume

Labelling tapes in bulk – Bacula Read More »

Irssi: Unknown command: keepnick

I use irssi and a script keepnick for grabbing my nick when it becomes available. From time to time, I get this message: Irssi: Unknown command: keepnick How do I fix this? It has happened before. I did not blog it. Ouch. I could have this solved by now if I had. My solution, this time: sudo pkg delete irssi-scripts I also created this file: [dan@supernews:~/.irssi] $ cat startup load perl keepnick dvl

Irssi: Unknown command: keepnick Read More »

Converting an iocage jail to a vanilla jail

Tonight I got blocked by iocage and handling a ZFS filesystem from within an iocage jail. These are the steps I followed to convert that jail from iocage to a vanilla jail. The variable To make this solution easier to use, at least for me, on future jail migrations, I have these variables: For example, my devgit-nginx01 jail is at: [dan@knew:~] $ zfs list system/iocage/jails/mysql56 NAME USED AVAIL REFER MOUNTPOINT system/iocage/jails/mysql56 11.5G 20.6T

Converting an iocage jail to a vanilla jail Read More »

Preventing a given package from being installed

I have a few development jails dedicated to my work on FreshPorts. It’s been a hobby of mine since the late 1990s. The code I create gets packaged, ready to deploy onto the test, stage, and production hosts. What I absolutely do not want to happen, and it’s happened recently, is for those packages to be installed on the development environments. Why? It installs to the same location as the working copy of

Preventing a given package from being installed Read More »

Today I faced the first consequences of my TXT & Let’s Encrypt strict policy

Today I faced the first implications of deciding to tightly restrict the use of nsupdate keys for modifying TXT records for dns-01 challenges with Let’s Encrypt. Context This section should be on news.freshports.org and you can skip it to get to the real stuff. Today I’m working on a mostly automated FreshPorts node deployment. A FreshPorts node consists of: host server – A FreeBSD host which contains the other nodes database – holds

Today I faced the first consequences of my TXT & Let’s Encrypt strict policy Read More »

The replacement – a followup

Yesterday, I started a zpool replace. It finished overnight, and dropped the suspect drive out of the vdev. The resilver finished in the middle of the night: As you can see, da22p1 has taken the place of da17p1. The resilver took As the new drive is being resilvered, I started looking at metrics. Here is gstat. Look at how da22, the replacement drive is getting all the writes, compared to the others. LibreNMS

The replacement – a followup Read More »

Replacing a failing drive in a ZFS zpool

In this post I will replace a working, but suspect, drive with another drive. No down time. The server is knew. In this post: FreeBSD 12.2 ZFS TOSHIBA MD04ACA500 5TB drive – the suspect drive: da17 TOSHIBA HDWE150 5TB drive – the replacement: da22 None of these drives are under warranty What drives are in this server? I have had good luck with Toshiba DT01ACA300 3TB drives (presenting as Hitachi HDS723030BLE640), starting a

Replacing a failing drive in a ZFS zpool Read More »

Scroll to Top