I might need to create another zpool. Or perhaps move a drives/zpool from one host to another. In this post: FreeBSD 13.1 Background I am combining two hosts (slocum and r720-01) into one new host (r730-01). I have been moving jails from those hosts. I have an ansible playbook for creating new entries in /etc/jail.conf.d/. I thought I had the space calculations done right. Now I think I’m wrong.I’m already at 73% on […]
Maybe I need another zpool Read More »
I’ve started merging these two hosts: r710-01 slocum into this one host: r740-01 The goal is to then retire those first two hosts. This post covers the initial bulk copy of all the data from two hosts into the one. In this post: FreeBSD 13.1 Each jail runs on its own zfs filesystem Not covered by this post Creating jails Creating snapshost Detailed usage of syncoid hosts not using zfs The overall process
Transferring a jail from one host to another Read More »
This is a quick post about the steps I’m using to move my jails from one host to another. This is bing done as I merge two hosts into one. I have not attempted to automate this, apart from the initial syncoid copying of data. This post is base roughly upon my Mastodon post from yesterday. In this post: FreeBSD 13.1 sanoid-2.1.0 copying from slocum copying to r730-01 use of /etc/jail.conf.d/ Right, now,
Moving one jail from host to host Read More »
This host has gone to a new home (2024-03-30). The 5TB drives are still around, and are for sale. I should list those on eBay. For future reference, this is the knew server … oh wait, I think it’s this server which is was mounted in the 4U chassis mentioned in this post. It runs a few jails, including Bacula regression testing services. It is now mounted in a SuperChassis 846E16-R1200B This is
For my own records, I wiped the drives on 2024-01-03. On 2024-01-06, a chap from NY drove down to buy it off me. Thanks, and safe travels to a good server. For reference, the previous post on this server is still available. FYI, this server is named after Joshua Slocum, who was the first person to sail single-handedly around the world. This server was upgraded on Feb 2 2019. Only the storage persisted.
This started off as a Twitter thread earlier this morning. databases/mysql57-client has an optional dependency on security/cyrus-sasl2 which defaults to on. Let’s try turning that off and see if it also removes openldap-client from the dependency list. Why? I install net-mgmt/nagios-plugins in just above every jail and host. Even hosts which don’t use MySQL. I use poudriere to build all my own packages. I added this entry: # Trying to avoid pulling in
Turning off SASLCLIENT for databases/mysql57-client Read More »
To be fair, the name servers weren’t offline, just the two zone files I amended. The effect: none of my services at home were available to anything at home. The other day, I was working on some procedures for adding a jail to a host and then a jail within that jail. I wanted to document the procedure to make it easier to implement when the time comes. The first step, create the
How I took my name servers offline by adding a new hostname Read More »
This post was originally a few tweets. It’s not really about upgrading vulnerabilities in poudriere jails either. Read this as if each paragraph was a tweet. When a FreeBSD security alert comes out, or a package is marked as vulnerable, I try to get that fixed as soon as I can. Even if not using the feature. Sometimes a vuln can be leverages against something you are using. Patch it. When it comes
Fixing vulns in poudriere jails Read More »
See also SSL client vs server certificates and bacula-fd. I use OpenVPN since at least 2008 – now going on 13 years. I find it to be reliable and stable. A few days ago, I added another client to a VPN. I run this particular network with self-signed certificates which I create using ssl-admin – I find it particularly useful for this purpose. The problem Away I went, creating a new certicate, bundled
OpenVPN: unsupported certificate purpose Read More »
Today I was updating a FreeBSD server from 12.2 to 13.0 – I was using a new approach for my upgrades. This was my second host to upgrade like this. The first went smoothly. This one, not so much. NOTE: this turned out to be insufficient because /usr was mounted: [dan@slocum:~] $ zfs get canmount zroot/usr NAME PROPERTY VALUE SOURCE zroot/usr canmount on received This system was manually converted, poorly, to a BE
Moving zroot/usr/local to zroot/usr Read More »