Running PHP on Nginx

I’ve been running Apache since 1998. Nginx didn’t exist then. FreshPorts runs on Apache mostly because that’s what I was using. There was no selection process. I use Nginx in a few locations, but I’ve never run FreshPorts on it. I am configuring a new server (x8dtu) for FreshPorts. So far, I have two jails: nginx01 pg01 My next task: get PHP running on nginx01. Name confusion While I was researching, I became […]

Running PHP on Nginx Read More »

Bacula – ran out of space, moved some volumes to another zpool

I’m using Bacula 9.0.3 for this post, on FreeBSD 10.3 and 11.1. I did not document this as I went along, however, the details should be enough to get you started. NOTE: when I refer to the bacula-sd configuration, I mean the bacula-sd in question, not necessarily on the same server as bacula-dir. This will hopefully make you think carefully about which file you are modifying. NOTE: I am moving a whole Bacula

Bacula – ran out of space, moved some volumes to another zpool Read More »

Bacula – copy to tape by job size

Backups are pretty amazing. The things you can do with them can be both highly entertaining and surprisingly easy. Today, we will venture into the easy part. Yesterday was the first Sunday of the month, which, according to my Bacula installation’s schedule is the day for full backups. Today, now that that is done, is copy-to-tape day according to my schedule. I do this manually because I don’t want the tape library, and

Bacula – copy to tape by job size Read More »

Getting acme.sh to renew certs via cronjob on FreeBSD

In the past, I’ve written about using acme.sh to automatically generate SSL certificates and distribute them to the required locations. I do this in a single central location, and the websites and mail servers grab their new certs from a webserver. At the time of writing, I was using FreeBSD 11.1 and acme.sh 2.7.4, supplied by the FreeBSD port, in a jail. Nagios warned me that one of my Let’s Encrypt certificates was

Getting acme.sh to renew certs via cronjob on FreeBSD Read More »

FreeBSD – what processes in what jails are using swap?

Sometimes stuff gets swapped out. When it does, it’s good to know what is swapped. I was getting this Nagios alert this morning. I started searching. I found this post about showing what is using swap via: [dan@knew:~] $ ps ax | awk ‘NR==1{print};$3 ~ /W/’ PID TT STAT TIME COMMAND 12 – WL 54:27.37 [intr] 10147 – IWsJ 0:00.00 /bin/sh /usr/local/bin/mysqld_safe –defaults-extra-file=/usr/local/etc/mysql/my.cnf –based 12791 – IWsJ 0:00.00 /bin/sh /usr/local/bin/mysqld_safe –defaults-extra-file=/var/db/mysql/my.cnf –user=mysql –

FreeBSD – what processes in what jails are using swap? Read More »

Booting off the new 5TB drives

This is about FreeBSD 11.1 on my knew server. I recently replaced the 3TB drives with 5TB drives. Along the way, it didn’t boot, the swap was adjusted, I got concerned about power, and there was a brief CAM status: SCSI Status Error scare. Then today, the planned reboot, I started asking questions on Reddit and on Twitter. The booting issue BIOS cannot boot from drives which present only 4096-byte sectors. This is

Booting off the new 5TB drives Read More »

Replaced a drive? What about that gmirror swap?

I just swapped out a drive which was involved in a gmirror swap. This is the current status: $ gmirror status Name Status Components mirror/swap DEGRADED da0p2 (ACTIVE) da2p2 (ACTIVE) da3p2 (ACTIVE) da4p2 (ACTIVE) da5p2 (ACTIVE) da9p2 (ACTIVE) da10p2 (ACTIVE) Here is how I can fix that: sudo gmirror forget swap The above tells gmirror to forget about components which are not connected. As you can see here, it makes gmirror happy. $

Replaced a drive? What about that gmirror swap? Read More »

subversion via ssh passphrase-less key

In general, passphrase-less ssh keys are a security nightmare. It is similar to leaving the key to your front door in the lock. Anyone stumbling across it has access to your house. Similarly, if someone gets your ssh key, and there is no passphrase on it, they can use that key for anything which grants access to that key. Side note: How can you tell if a given ssh key has a passphrase?

subversion via ssh passphrase-less key Read More »

After replacing 3TB drive with 5TB drive, FreeBSD 10.3 system did not reboot

I started replacing 3TB drives with 5TB drives in a 10 drive raidz3 array on a FreeBSD 10.3 box. I was not sure which drive tray to pull, so I powered off the server, and, one by one, pulled the drive tray, photographed it, and reinserted the drive tray. No changes were made. The first reboot Upon powering up, I was greeted by this (I have typed out the text for search purposes):

After replacing 3TB drive with 5TB drive, FreeBSD 10.3 system did not reboot Read More »

Scroll to Top