link request spammers – sometimes they help

If you have a blog, or anything online, I’m sure you have received an email saying: Hey, great article, would you mind linking to my website please? A few days later: hey! did you get my email? Then later still: I know you’re busy…. The one I received today was at first annoying but then turned out helpful. I went to that blog post but I couldn’t find a link to Wikipedia anywhere. […]

link request spammers – sometimes they help Read More »

bectl details

This is just a placeholder for me to find this later. I was cleaning up some old snapshots. I’m not sure I should have removed those snapshots and I’m saving this here for next time I use bectl. [dan@slocum:~] $ grep -v autosnap ~/tmp/snapshots/snapshots zroot/bootenv/default@2020-01-11-18:16:51 zroot/bootenv/default/tmp@2020-01-11-18:16:51 zroot/bootenv/default/usr@2020-01-11-18:16:51 zroot/bootenv/default/usr/local@2020-01-11-18:16:51 zroot/bootenv/default/usr/obj@2020-01-11-18:16:51 zroot/bootenv/default/usr/src@2020-01-11-18:16:51 zroot/bootenv/default/var@2020-01-11-18:16:51 zroot/bootenv/default/var/audit@2020-01-11-18:16:51 zroot/bootenv/default/var/empty@2020-01-11-18:16:51 zroot/bootenv/default/var/log@2020-01-11-18:16:51 zroot/bootenv/default/var/tmp@2020-01-11-18:16:51 [dan@slocum:~] $ sudo zfs destroy zroot/bootenv/default/var/tmp@2020-01-11-18:16:51 [dan@slocum:~] $ sudo zfs destroy zroot/bootenv/default/var/log@2020-01-11-18:16:51 [dan@slocum:~] $ sudo zfs destroy zroot/bootenv/default/var/empty@2020-01-11-18:16:51

bectl details Read More »

Right up until you need it, resilience looks like waste

This sounds slightly political, and it is. Intentionally so. 1. the capacity to recover quickly from difficulties; toughness. “the often remarkable resilience of so many British institutions” 2. the ability of a substance or object to spring back into shape; elasticity. “nylon is excellent in wearability and resilience” Christophe Pettus recently said: Right up until you need it, resilience looks like waste If you use ZFS, you should know about this issue. For

Right up until you need it, resilience looks like waste Read More »

ssh with 2FA

2FA has its critics: It’s so unreliable! Phones are so easily hijacked It’s not a lot of added security etc Some of these make assumptions not necessarily in evidence. In this post: FreeBSD 12.1 pam_google_authenticator-1.08 Most of the 2FA I use is time-based one-off passwords (TOTP), as opposed to text messages. These are often 6-digit numbers which change every 30 seconds. These are hard to guess and cannot be intercepted as they reside

ssh with 2FA Read More »

The backups have been wrong for about 97 days

I backup my databases daily. They get dumped to a disk file and copied somewhere else. Then they are backed up into a file system. Once a month they get copied to tape. Yesterday I upgraded a PostgreSQL database server, and it went well. Overnight, a backup failed. This is the story of how that led to me discovering my backups have been at risk for nearly 100 days. The error This morning

The backups have been wrong for about 97 days Read More »

Creating a ZFS dataset for testing iocage within a jail

Be warned, this failed. I’m stalled and I have not completed this. I’m going to do jails within a jail. I already do that with poudriere in a jail but here I want to test an older version of iocage before upgrading my current jail hosts to a newer version. In this post: FreeBSD 12.1 py36-iocage-1.2_3 py36-iocage-1.2_4 This post includes my errors and mistakes. Perhaps you should proceed carefully and read it all

Creating a ZFS dataset for testing iocage within a jail Read More »

What files installed by this package have been modified post-install?

You’ve seen it. A package gets installed. Some shell scripts are included. They get modified. It happens. But how do you know what has changed? I know there is a tool in pkg for this. I know there is a periodic script which uses it. Let’s go looking. In this post: FreeBSD 12.1 periodic $ cd /usr/local/etc/periodic/ $ find . | grep checksum ./security/460.pkg-checksum There it is! Looking inside, I found pkg check.

What files installed by this package have been modified post-install? Read More »

Migrating FreshPorts from one db server to another

FreshPorts runs on a FreeBSD server which hosts multiple jails. Two of these jails run PostgreSQL server. When upgrading from one version of PostgreSQL to another, we run pg_dump in the new jail, and load the backup into that database server. I’m writing this blog post to keep track of this procedure so I do not have to remember it each time. take website offline sudo mv mv offline.conf.disabled offline.conf && \ sudo

Migrating FreshPorts from one db server to another Read More »

pkg: vulnxml parsing error: no element found

Today I found this annoying situation on FreeBSD 12.1 in a FreeBSD 12.0 jail (neither of which are directly relevant to the problem at hand). [dan@serpico:~] $ sudo pkg audit -F vulnxml file up-to-date pkg: vulnxml parsing error: no element found pkg: cannot process vulnxml After a bit if thinking, I figured the vulnxml file was corrupt. I guessed it might be in /var/db/pkg: [dan@serpico:/var/db/pkg] $ ls -l total 5226 -rw-r–r– 1 root

pkg: vulnxml parsing error: no element found Read More »

Scroll to Top