Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
BlankSystemDaemon
Mar 13, 2009

System Access Node Not Found



Mr. Crow posted:

I'm fuzzy on the details of exactly how it works since it's still very much alpha/beta quality (the rootless side, anyway); but afaik it's not actually "dropping privileges", it's completely in the scope of the user process and namespaces. It's still using cgroups and namespaces because, well, that's what the linux kernel has; but the crux of it come from https://github.com/rootless-containers/slirp4netns which piggy backs off the kernel to handle user networking. Last time I tried to use it (a year or ago or so) it was still pretty limited and by necessity will never have a lot of networking related features you might expect but still a pretty cool idea if it will fit within the scope of what you need it to do.


FreeBSD question: Does FreshPorts or a similar site post build status of ports? I've setup poudriere to build my ports nightly and llvm has been surprisingly failing for a week or so and I want to just save myself the time troubleshooting if it's just failing upstream.
Thanks, that at least gives me something to dig into, should I get the desire.

As for build status, the FreeBSD project runs a build cluster of about 20 machines that build exp runs (ie. testing what happens when, for example, llvm switches default from 10 to 11), package builds (what you're looking for) and qat builds (which I think is quality-assurance-testing, but I've never really looked into that side of it).
Do note, however, that like half the package building servers are IPv6-only, so you might need to setup some sort of tunnel.
This is in addition to the CI cluster, test cluster one, and reference machines (machines provided to FreeBSD developers to work on) as well as the network testing cluster and probably a few others including but not limited to all the infrastructure used to run the FreeBSD project website and authentication infrastructure.

An easier way to figure out what you want to know, though, is via the ports fallout site, which essentially just lets you search the pkg-fallout mailing list archives.

BlankSystemDaemon fucked around with this message at 11:01 on Mar 30, 2021

Adbot
ADBOT LOVES YOU

xzzy
Mar 5, 2009



Anyone know of some kind of product or project that manages connecting to remote console and managing power in a server room in a modern way? We've got a home brewed package that we've been using for 10+ years and it technically does the job, but it's super hard to modify and I've been getting more frequent requests to add features. If I could throw the whole thing out with something fancy that would be loving swell.

Basically we got a few thousand systems with a mix of ipmi and traditional serial port accessible over a private network, and over the years folks in house developed a collection of scripts to connect to a serial console by hostname or cycle the system's power. Now people want to build rack maps and asset tracking in to it (or at least, be able to export that information) and I realllly don't want to be the poor schmuck that has to write that.

There's got to be something out there, right? How do the cloud providers do OOB management "centralization" these days?

RFC2324
Jun 7, 2012

http 418



xzzy posted:

Anyone know of some kind of product or project that manages connecting to remote console and managing power in a server room in a modern way? We've got a home brewed package that we've been using for 10+ years and it technically does the job, but it's super hard to modify and I've been getting more frequent requests to add features. If I could throw the whole thing out with something fancy that would be loving swell.

Basically we got a few thousand systems with a mix of ipmi and traditional serial port accessible over a private network, and over the years folks in house developed a collection of scripts to connect to a serial console by hostname or cycle the system's power. Now people want to build rack maps and asset tracking in to it (or at least, be able to export that information) and I realllly don't want to be the poor schmuck that has to write that.

There's got to be something out there, right? How do the cloud providers do OOB management "centralization" these days?

for the hardware? usually hope, combined with dc techs and either a phone camera or, if you are lucky, a kvm spider

at least based on the last 3 cloud providers I have worked for

xzzy
Mar 5, 2009



Then maybe I should package up our code, clean it up, and start selling it because that sounds like agony.

Methanar
Sep 26, 2013
ASK ME ABOUT NOT TIPPING DELIVERY DRIVERS, OR ABOUT MY DIET OF CANNED BABY CORN AND CHICKEN NUGGETS

RFC2324 posted:

dc techs and either a phone camera

triggered.

I spent so much time looking through bad skype video calls trying to figure out messed up network connections and failed pxe boots from things without remote console.


Nobody tells you that part about being 'on-prem' that's actually 3000km away.

Bob Morales
Aug 18, 2006


Just wear the fucking mask, Bob

I don't care how many people I probably infected with COVID-19 while refusing to wear a mask, my comfort is far more important than the health and safety of everyone around me!



You guys want me to see if I can find the plans for the homemade remote PDUís I posted

Saukkis
May 16, 2003

Unless I'm on the inside curve pointing straight at oncoming traffic the high beams stay on and I laugh at your puny protest flashes.
I am Most Important Man. Most Important Man in the World.

xzzy posted:

Anyone know of some kind of product or project that manages connecting to remote console and managing power in a server room in a modern way? We've got a home brewed package that we've been using for 10+ years and it technically does the job, but it's super hard to modify and I've been getting more frequent requests to add features. If I could throw the whole thing out with something fancy that would be loving swell.

Basically we got a few thousand systems with a mix of ipmi and traditional serial port accessible over a private network, and over the years folks in house developed a collection of scripts to connect to a serial console by hostname or cycle the system's power. Now people want to build rack maps and asset tracking in to it (or at least, be able to export that information) and I realllly don't want to be the poor schmuck that has to write that.

There's got to be something out there, right? How do the cloud providers do OOB management "centralization" these days?

I believe Redfish is the standard you would want to use for at least the IPMI portion of your needs.

RFC2324
Jun 7, 2012

http 418



xzzy posted:

Then maybe I should package up our code, clean it up, and start selling it because that sounds like agony.

I think the problem is that cloud providers won't pay for anything that customers aren't going to see. everything else is either FOSS(cool), developed in house(mixed), or a collection of scripts that someone found on a github somewhere

I work for a company that does white glove service for high profile clients, and we don't actually have a deployment process, just someone in supports roommate building out servers based on specs sales gives him

never work in hosting, kids

xzzy
Mar 5, 2009



Saukkis posted:

I believe Redfish is the standard you would want to use for at least the IPMI portion of your needs.

That's a pretty cool standard that I hadn't run across and certainly looks more fun than ipmitool. Supermicro's implementation seems pretty thorough too. So next time I'm told to reinvent this stuff that's where I'll start.

But my hunt is more for some kind of access portal that makes it easy to connect to a system's console. Like it keeps a database of all BMC's, console servers and PDU's, associating the correct addresses/ports to a given hostname so an admin can Do Stuff with a couple simple commands.


RFC2324 posted:

never work in hosting, kids


I work in hosting.

But my only customer is my employer so it's slightly less agonizing, there's no sales team to promise stuff that doesn't exist. I feel like we've done pretty good using existing tools for managing hardware lifecycle when such tools exist, but there's a couple sore points left to deal with.

DerekSmartymans
Feb 14, 2005

The
Copacetic
Ascetic


Are there any distros that work with WSL2 that arenít on the Microsoft Store? Iíd never heard of it before and itís much easier than setting up a VM, as well as tons of setups on YouTube and tutorials (I havenít set up a VM since around Ubuntu 12? 13? Long ago). Iím sure the process is seamless and faster these days, but I was bringing up a bash terminal in WSL2 Debian within like 10 minutes. Itís more fun to play around and crash doing poo poo and learning not to do things than dual booting, too 🤓.

NihilCredo
Jun 6, 2011

iram omni possibili modo preme:
plus una illa te diffamabit, quam multæ virtutes commendabunt



DerekSmartymans posted:

Are there any distros that work with WSL2 that arenít on the Microsoft Store? Iíd never heard of it before and itís much easier than setting up a VM, as well as tons of setups on YouTube and tutorials (I havenít set up a VM since around Ubuntu 12? 13? Long ago). Iím sure the process is seamless and faster these days, but I was bringing up a bash terminal in WSL2 Debian within like 10 minutes. Itís more fun to play around and crash doing poo poo and learning not to do things than dual booting, too 🤓.

Gentoo runs on WSL2 and it's pretty much the ultimate "play around and crash doing poo poo and learning not to do things" distro.

xzzy
Mar 5, 2009



Thread title still relevant:

https://arstechnica.com/gadgets/2021/04/xinuos-finishes-picking-up-scos-mantle-by-suing-red-hat-and-ibm/

Except now they're mad that IBM+RedHat are trying to destroy freebsd.

waffle iron
Jan 16, 2004


xzzy posted:

Thread title still relevant:

https://arstechnica.com/gadgets/2021/04/xinuos-finishes-picking-up-scos-mantle-by-suing-red-hat-and-ibm/

Except now they're mad that IBM+RedHat are trying to destroy freebsd.

I saw that earlier today and was hoping it was an April fools thing.

CaptainSarcastic
Jul 6, 2013

HAIL SATAN



Good lord, just last week I was explaining to someone what the thread title meant and went down a little rabbit hole into the utter failure of SCO's patent trolling attempts. Can't believe it's been necroed in some way.

DerekSmartymans
Feb 14, 2005

The
Copacetic
Ascetic


NihilCredo posted:

Gentoo runs on WSL2 and it's pretty much the ultimate "play around and crash doing poo poo and learning not to do things" distro.

Excellent! I should be able to find downloads and tutorials on my own, now that I have a search term!

BlankSystemDaemon
Mar 13, 2009

System Access Node Not Found



xzzy posted:

Thread title still relevant:

https://arstechnica.com/gadgets/2021/04/xinuos-finishes-picking-up-scos-mantle-by-suing-red-hat-and-ibm/

Except now they're mad that IBM+RedHat are trying to destroy freebsd.
Yes, XinuosServer is based off of FreeBSD but that's entirely separate - though it is an extremely hilarious twist of fate.
They're simply a downstream consumer, not a single line of code has gone into FreeBSD as having been tagged by them at any point, not even sponsored code.

I'm not a lawyer, but I'm pretty sure the basis they're using to sue IBM+RedHat is that they somehow own what others have owned in the past which at some point might've been something UNIXy, although it's not entirely clear which company owns what, as some companies that seem to own some of it don't even lay claim to it or have released it to academic research (see the pdf of the Alcatel-Lucent V8, V9 and V10 UNIX releases).

BlankSystemDaemon fucked around with this message at 12:23 on Apr 2, 2021

tuyop
Sep 14, 2006

Every second that we're not growing BASIL is a second wasted


Fun Shoe

Kind of a weird issue going on here. I have an Ubuntu server 20.04.2 VM running using VMWare Player, started with an NSSM service when my Windows computer boots. All of this works perfectly and I can ssh into the VM after the computer boots.

But after a restart, I can't access any of my docker containers over the network. They're all listed as running if I do a systemctl status docker, and I have docker added to my user group and all that stuff.

If I do systemctl restart docker, then it restarts and I can access everything perfectly. The only thing that changes in the systemctl status output is the PIDs of the processes.

Any ideas what's going on here? Should I just set up a script that runs systemctl restart docker like 90 seconds after boot or what?

RFC2324
Jun 7, 2012

http 418



tuyop posted:

Any ideas what's going on here? Should I just set up a script that runs systemctl restart docker like 90 seconds after boot or what?

Docker is probably trying to bring up interfaces too fast, and either a timer or a dependency should do the trick. Depends how mich effort you want to invest and how immediately you need the containers available

hbag
Feb 13, 2021

CEO of Posting




alright fellas im doing completely legal things with my pi and i want my plex media server to start outside of my vpn so i can do some poo poo with it
i have a script that would run it outside the vpn if passed as an argument, but the thing about that is of course the plex systemd unit is complicated as gently caress so i cant figure out what i need to override or how
the script that runs its argument outside the vpn is just called 'novpn.sh', i've stuck it in /usr/bin, so if i wanted to run 'foo' outside the VPN, i'd just do novpn.sh foo
get a loada this poo poo

pre:
[Unit]
Description=Plex Media Server
After=network.target network-online.target

[Service]
Environment="PLEX_MEDIA_SERVER_APPLICATION_SUPPORT_DIR=/var/lib/plexmediaserver/Library/Application Support"
Environment=PLEX_MEDIA_SERVER_HOME=/usr/lib/plexmediaserver
Environment=PLEX_MEDIA_SERVER_MAX_PLUGIN_PROCS=6
ExecStartPre=/bin/sh -c '/usr/bin/test -d "${PLEX_MEDIA_SERVER_APPLICATION_SUPPORT_DIR}" || /bin/mkdir -p "${PLEX_MEDIA_SERVER_APPLICATION_SUPPORT_DIR}"'
ExecStart=/bin/sh -c '\
export PLEX_MEDIA_SERVER_INFO_VENDOR="$(grep ^NAME= /etc/os-release | awk -F= "{print \\$2}" | tr -d \" )"; \
export PLEX_MEDIA_SERVER_INFO_DEVICE="PC"; \
export PLEX_MEDIA_SERVER_INFO_MODEL="$(uname -m)"; \
export PLEX_MEDIA_SERVER_INFO_PLATFORM_VERSION="$(grep ^VERSION= /etc/os-release | awk -F= "{print \\$2}" | tr -d \" )"; \
export LD_LIBRARY_PATH=/usr/lib/plexmediaserver/lib; \
exec "/usr/lib/plexmediaserver/Plex Media Server"'
Type=simple
User=plex
Group=plex
Restart=on-failure
RestartSec=5
StartLimitInterval=60s
StartLimitBurst=3
SyslogIdentifier=Plex Media Server
StandardOutput=journal
StandardError=journal

[Install]
WantedBy=multi-user.target
of course, they're saying to override it instead of directly editing the unit, so...

xtal
Jan 9, 2011



You need to change the `ExecStart` line which unfortunately is a big mess in this case. I don't think there's a way to just wrap the value with your script, you need to write a new `ExecStart` that has the same value as that, except changing the `exec /usr/lib/...` line at the end to be `exec novpn.sh /usr/lib/...`

Source: https://unix.stackexchange.com/questions/567296/can-one-wrap-a-systemd-execstart-in-a-shim-without-reiterating-or-changing-the-c

Using an override will mean you can make a separate file that only has your `ExecStart` line and not the rest, so the original file can keep being updated and your changes will continue to apply. So you want an override that says this: (the source linked above says to clear the value first, not sure if that's necessary)

code:
[Service]
ExecStart=
ExecStart=/bin/sh -c '\
export PLEX_MEDIA_SERVER_INFO_VENDOR="$(grep ^NAME= /etc/os-release | awk -F= "{print \\$2}" | tr -d " )"; \
export PLEX_MEDIA_SERVER_INFO_DEVICE="PC"; \
export PLEX_MEDIA_SERVER_INFO_MODEL="$(uname -m)"; \
export PLEX_MEDIA_SERVER_INFO_PLATFORM_VERSION="$(grep ^VERSION= /etc/os-release | awk -F= "{print \\$2}" | tr -d " )"; \
export LD_LIBRARY_PATH=/usr/lib/plexmediaserver/lib; \
exec novpn.sh "/usr/lib/plexmediaserver/Plex Media Server"'
See https://wiki.archlinux.org/index.php/Systemd#Replacement_unit_files, specifically the part about `systemd edit` might be useful.

I realize this is a huge pain in the rear end so, if you explain a bit about how the no-VPN script works, there might be a less convoluted way to accomplish it.

xtal fucked around with this message at 00:39 on Apr 8, 2021

Methanar
Sep 26, 2013
ASK ME ABOUT NOT TIPPING DELIVERY DRIVERS, OR ABOUT MY DIET OF CANNED BABY CORN AND CHICKEN NUGGETS

hbag posted:

alright fellas im doing completely legal things with my pi and i want my plex media server to start outside of my vpn so i can do some poo poo with it
i have a script that would run it outside the vpn if passed as an argument, but the thing about that is of course the plex systemd unit is complicated as gently caress so i cant figure out what i need to override or how
the script that runs its argument outside the vpn is just called 'novpn.sh', i've stuck it in /usr/bin, so if i wanted to run 'foo' outside the VPN, i'd just do novpn.sh foo
get a loada this poo poo

pre:
[Unit]
of course, they're saying to override it instead of directly editing the unit, so...

Post the script you use.

Create an override for your unit like this where you set the exec to be however you instantiate your novpn.sh
/etc/systemd/system/plex.service.d/novpn.conf


But make sure plex.service is what the real one is actually named

pre:
#/etc/systemd/system/plex.service.d/novpn.conf
[Service]
ExecStart=/usr/local/bin/novpn.sh foo

Methanar fucked around with this message at 00:42 on Apr 8, 2021

hbag
Feb 13, 2021

CEO of Posting




xtal posted:

You need to change the `ExecStart` line which unfortunately is a big mess in this case. I don't think there's a way to just wrap the value with your script, you need to write a new `ExecStart` that has the same value as that, except changing the `exec /usr/lib/...` line at the end to be `exec novpn.sh /usr/lib/...`

Source: https://unix.stackexchange.com/questions/567296/can-one-wrap-a-systemd-execstart-in-a-shim-without-reiterating-or-changing-the-c

Using an override will mean you can make a separate file that only has your `ExecStart` line and not the rest, so the original file can keep being updated and your changes will continue to apply. So you want an override that says this: (the source linked above says to clear the value first, not sure if that's necessary)

code:
[Service]
ExecStart=
ExecStart=/bin/sh -c '\
export PLEX_MEDIA_SERVER_INFO_VENDOR="$(grep ^NAME= /etc/os-release | awk -F= "{print \\$2}" | tr -d " )"; \
export PLEX_MEDIA_SERVER_INFO_DEVICE="PC"; \
export PLEX_MEDIA_SERVER_INFO_MODEL="$(uname -m)"; \
export PLEX_MEDIA_SERVER_INFO_PLATFORM_VERSION="$(grep ^VERSION= /etc/os-release | awk -F= "{print \\$2}" | tr -d " )"; \
export LD_LIBRARY_PATH=/usr/lib/plexmediaserver/lib; \
exec novpn.sh "/usr/lib/plexmediaserver/Plex Media Server"'
See https://wiki.archlinux.org/index.php/Systemd#Replacement_unit_files, specifically the part about `systemd edit` might be useful.

I realize this is a huge pain in the rear end so, if you explain a bit about how the no-VPN script works, there might be a less convoluted way to accomplish it.


Methanar posted:

Post the script you use.

Create an override for your unit like this where you set the exec to be however you instantiate your novpn.sh
/etc/systemd/system/plex.service.d/novpn.conf


But make sure plex.service is what the real one is actually named

pre:
#/etc/systemd/system/plex.service.d/novpn.conf
[Service]
ExecStart=/usr/local/bin/novpn.sh foo

Yeah, I know I need to override the ExecStart, but my issue was, like the first quote said, that the ExecStart is a huge mess in this case.

And, sure, I'll stick the novpn script in a pastebin. I didn't write it, so...
https://pastebin.com/Hi5AEWY9

Nitrousoxide
May 30, 2011

do not buy a oneplus phone





After playing in Gnome 40 in Fedora 34 for a few days now, I'm really liking the experience. A much snappier response than KDE Plasma was. I really didn't need the billion options to customize Plasma to be honest, and the virtual desktop analogy works better for me than KDE's version.

Only real weirdness on Fedora 34 so far is some sound issues with a WINE application I use (it doesn't see any devices) I assume this is probably due to Pipewire being implemented in Fedora 34.

hbag
Feb 13, 2021

CEO of Posting




...maaaaaybe i could just put THIS in the override file?
pre:
ExecStart=novpn.sh $(/bin/sh -c '\)
but i dunno if that'd actually work, even though the poo poo in the $() is just the regular ExecStart

KozmoNaut
Apr 23, 2008

Happiness is a warm
Turbo Plasma Rifle


Nitrousoxide posted:

After playing in Gnome 40 in Fedora 34 for a few days now, I'm really liking the experience. A much snappier response than KDE Plasma was. I really didn't need the billion options to customize Plasma to be honest, and the virtual desktop analogy works better for me than KDE's version.

Did you try changing the animation speed in KDE? Every complaint I've heard about snappiness has been resolved by doing that.

What's the difference in how the virtual desktops work?

other people
Jun 27, 2004
Associate Christ

I don't know off the top of my head if that ExecStart syntax is valid but you must put it under a [Service] header.

I use plex but i really loving hate it. imho it is nicer to run it as a container. set up one container network that is routed through the vpn and another that isn't. put the plex container on the network without vpn.

hbag
Feb 13, 2021

CEO of Posting




other people posted:

I don't know off the top of my head if that ExecStart syntax is valid but you must put it under a [Service] header.

I use plex but i really loving hate it. imho it is nicer to run it as a container. set up one container network that is routed through the vpn and another that isn't. put the plex container on the network without vpn.

man i really cba to figure out containers i dont think
especially since im guessing the movie files would also need to be in the container

Methanar
Sep 26, 2013
ASK ME ABOUT NOT TIPPING DELIVERY DRIVERS, OR ABOUT MY DIET OF CANNED BABY CORN AND CHICKEN NUGGETS

hbag posted:

man i really cba to figure out containers i dont think
especially since im guessing the movie files would also need to be in the container
pre:
docker run \
    -v /mnt/legal_movies/:/home/plex \
    linuxserver/plex

hbag
Feb 13, 2021

CEO of Posting




Methanar posted:

pre:
docker run \
    -v /mnt/legal_movies/:/home/plex \
    linuxserver/plex

im very sleep deprived so that might be it but i have no idea what im looking at here


also lol at the fact my vpn used to offer UPnP port forwarding so this wouldnt have been an issue but they stopped doing that for now so i cant use that
loving mullvad

NihilCredo
Jun 6, 2011

iram omni possibili modo preme:
plus una illa te diffamabit, quam multæ virtutes commendabunt



Also check out jellyfin instead of plex. The LinuxServer guys have made a good image with good documentation in case you need stuff like 4K hardware acceleration:

https://docs.linuxserver.io/images/docker-jellyfin

calusari
Apr 18, 2013

It's mechanical. Seems to come at regular intervals.

hbag posted:

im very sleep deprived so that might be it but i have no idea what im looking at here

mounting a volume (-v) from host onto the container. this way the container can interact with files on the host

Mr. Crow
May 22, 2008

Snap City mayor for life


Please don't use anything by LinuxServer if you plan on exposing it to the world at all, at least a couple years ago it was a complete poo poo show.

tuyop
Sep 14, 2006

Every second that we're not growing BASIL is a second wasted


Fun Shoe

RFC2324 posted:

Docker is probably trying to bring up interfaces too fast, and either a timer or a dependency should do the trick. Depends how mich effort you want to invest and how immediately you need the containers available

Thanks. Would I just use systemctl to delay the start of docker.service? Kind of like this article here? https://wiki.archlinux.org/index.php/Systemd/Timers

RFC2324
Jun 7, 2012

http 418



tuyop posted:

Thanks. Would I just use systemctl to delay the start of docker.service? Kind of like this article here? https://wiki.archlinux.org/index.php/Systemd/Timers

I would either make the docker file dependent on the network service being fully up, or create a unit file that completes when it can successfully ping, and put that between the two.

I'm sorry about the lack of reference, I do most of my posting from the bathtub 😅

If you want a timer, i would just add 'sleep 90' to the launch script, its a quick easy fix from every angle

NihilCredo
Jun 6, 2011

iram omni possibili modo preme:
plus una illa te diffamabit, quam multæ virtutes commendabunt



Mr. Crow posted:

Please don't use anything by LinuxServer if you plan on exposing it to the world at all, at least a couple years ago it was a complete poo poo show.

Can you expand on the poo poo show? I normally stick to the official images whenever possible, but for Jellyfin in particular I have in fact been using the linuxserver image because the official one had trouble on the Pi (don't remember exactly what).

hbag
Feb 13, 2021

CEO of Posting




calusari posted:

mounting a volume (-v) from host onto the container. this way the container can interact with files on the host

right, but is that a command, or a script? the indentation's throwing me off

xzzy
Mar 5, 2009



It's an argument to the docker command. The backslash causes the shell to ignore the newline and treat the next line as a continuation of the current command. Handy for making shell commands legible!

hbag
Feb 13, 2021

CEO of Posting




ah
if it isnt obvious i have never touched docker in my life and barely understand what it even is besides "sort of a virtual machine except it isn't"

BlankSystemDaemon
Mar 13, 2009

System Access Node Not Found



hbag posted:

ah
if it isnt obvious i have never touched docker in my life and barely understand what it even is besides "sort of a virtual machine except it isn't"
Don't worry, almost nobody understands what it is (and more importantly, isn't).
Also, now I wanna watch SEL. drat you.

Adbot
ADBOT LOVES YOU

hbag
Feb 13, 2021

CEO of Posting




BlankSystemDaemon posted:

Also, now I wanna watch SEL. drat you.

good

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply