Greg Truskey, TruCo

I’m writing this to document the facts. I’ll leave adjectives and opinions to you. Greg Truskey, TruCo was hired to perform renovations which started in August 2015. The estimate was 11 weeks. He was on site from about 9am to 3:30pm. Arriving earlier or late was uncommon. On days he would not arrive, we would not be notified. It would be fine weather, and he would not be present. You will recall the […]

Greg Truskey, TruCo Read More »

pkg upgrade: Certificate verification failed for /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Class 2 IV Server CA

I noticed this on one FreeBSD server today: $ pkg -vv | grep url url: “pkg+http://services.unixathome.org/packages/103amd64-default-master-list/”, I decided: let’s use https, not http, there. After making the change (in my case, it was in /usr/local/etc/pkg/repos/local.conf, I tried upgraded packages, and it barfed: $ sudo pkg upgrade Updating local repository catalogue… Certificate verification failed for /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Class 2 IV Server CA 34401225432:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1191: Certificate verification failed for /C=IL/O=StartCom Ltd./OU=StartCom

pkg upgrade: Certificate verification failed for /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Class 2 IV Server CA Read More »

Changing the default host for Cisco AnyConnect OSX client

My first day back from EuroBSDCon 2016, I wanted to fix an issue which arose before the conference. My Cisco AnyConnect client configuration contained old hosts which I no longer used, but didn’t contain the host I was primarily using now. I could add the host, but upon restart, that new host was no longer there. Plus, when started, AnyConnect would attempt to connect to the old host, which is not even remotely

Changing the default host for Cisco AnyConnect OSX client Read More »

Moving from shelves to racks

The time has come for me to move from shelving to racks. My first thought was to list the various racks over the years. Look below for old photos and links to the posts I lifted them from. Why a rack? In the past, I have always built my own servers, computers, from parts. I always chose tower cases for space and quiet. A large fan and heatsink can be easily mounted in

Moving from shelves to racks Read More »

leapsecond file (‘/var/db/ntpd.leap-seconds.list’): expired less than N days ago

After upgrading all my servers to FreeBSD 10.3 last weekend, I started to see these messages in the logs: Aug 3 21:15:19 slocum ntpd[29456]: leapsecond file (‘/var/db/ntpd.leap-seconds.list’): expired less than 64 days ago I found this post which suggested running service ntpd fetch but that did not fix it. While debugging the issue, I added ntp_leapfile_fetch_verbose=”YES” to /etc/rc.conf, which provides more output to the fetch command: $ sudo service ntpd fetch ntp_src_leapfile version

leapsecond file (‘/var/db/ntpd.leap-seconds.list’): expired less than N days ago Read More »

PGCon 2016 charity auction

Every year PGCon holds a charity auction as part of the closing session. All proceeds go to The Ottawa Mission, a local group. The auction includes items you would keep as art, and some you would consume before you left town. Others, such as empty paper bags or cardboard boxes are left in the recycling bin. It is all in good fun. 1 Chocolate from Japan $20.00 2 Elephant with cloud $220.00 3

PGCon 2016 charity auction Read More »

pfsense 2.3, now on FreeBSD 10.3 with pkg

I upgraded my pfSense box to 2.3 last night. Here is what I got: # uname -a FreeBSD bast.int.unixathome.org 10.3-RELEASE FreeBSD 10.3-RELEASE #4 05adf0a(RELENG_2_3_0): Mon Apr 11 19:09:19 CDT 2016 root@factory23-amd64-builder:/builder/factory-230/tmp/obj/builder/factory-230/tmp/FreeBSD-src/sys/pfSense amd64 These are the package repos they are using (as taken from pkg -vv): Repositories: pfSense-core: { url : “pkg+http://firmware.netgate.com/pkg/pfSense_factory-v2_3_0_amd64-core”, enabled : yes, priority : 0, mirror_type : “SRV”, signature_type : “FINGERPRINTS”, fingerprints : “/usr/local/share/pfSense/keys/pkg” } pfSense: { url : “pkg+http://firmware.netgate.com/pkg/pfSense_factory-v2_3_0_amd64-pfSense_factory-v2_3_0”, enabled

pfsense 2.3, now on FreeBSD 10.3 with pkg Read More »

Adding SLOG to a zpool

I have recently added two 480 GB SSDs to a 10 x HDD raidz2 system. The SSDs will be mainly used for spooling to tape during backups, but I’m going to use a small part of it for a SLOG. Not all systems benefits from a SLOG (Separate intent LOG), but synchronous writes, such as databases, do. All ZFS systems have a ZIL (ZFS Intent Log); it is usually part of the zpool.

Adding SLOG to a zpool Read More »

Scroll to Top