|
To follow up on that: Updating the file server to 11 seems to have fixed it. In hindsight I suspect it's because mountd was changed to use the -S flag by default ("don't break horribly when updating the exports list, but possibly hang for a bit instead") , but I'm not about to roll back to 10.3 to test that theory.
|
|
|
|
|
| # ? Jan 22, 2026 19:02 |
|
https://www.freebsdfoundation.org/blog/freebsd-takes-open-source-to-11-with-latest-release/ posted:FreeBSD Takes Open Source to 11 with Latest Release
|
|
|
|
To get rid of the (TM) graphic, how about a new thread title "The Ultimate BSD Thread - The Devil turned it up to 11"
|
|
|
|
Really just a bit curious - how many people ITT use OpenBSD semi-regularly? e: and if so, I'm also a bit curious on what its being used for. Rooney McNibnug fucked around with this message at 14:57 on Oct 14, 2016 |
|
|
|
Router, pf is awesome.
|
|
|
|
Rooney McNibnug posted:e: and if so, I'm also a bit curious on what its being used for.
|
|
|
|
EvilMoFo posted:Router, pf is awesome. Same, it makes a really great router OS (or whatever poo poo you wanna set up and leave running in a closet forever). At work we use combinations of OpenBGPD, OpenOSPFD, and OpenIKED to build internet routers, VPN gateways, and anycast DNS/RADIUS/internal services. It's typically really stable (both as a platform and uptime-wise) and nice to work with, but it's not super suitable for modern high-velocity development/server stuff- mainly because they only update their package repository every 6 months. Bruno_me fucked around with this message at 07:35 on Oct 15, 2016 |
|
|
|
Rooney McNibnug posted:Really just a bit curious - how many people ITT use OpenBSD semi-regularly? I use it as my home gateway. As configurability, stability and power it beats hands down any consumer level routers out there. Cheap old computer in the basement... running like a champ for the last 13 years (i do upgrade every 6 months though).
|
|
|
|
Ok so now that I'm on 11 I decided to try out the Docker support. It's all unsupported linux syscalls all the way down as far as I can tell, not sure what I was expecting. Is there something I'm missing?
|
|
|
|
roadhead posted:Ok so now that I'm on 11 I decided to try out the Docker support. The documentation wiki is pretty clear on this: quote:Docker on FreeBSD relies heavily on ZFS, jail and the 64bit Linux compatibility layer that was introduced in June, 2015. Docker on FreeBSD is genuine Docker and retrieves containers from the official docker.io repository.
|
|
|
|
roadhead posted:Is there something I'm missing? linux compat linux base linux libraries
|
|
|
|
These wouldn't be automatically installed as dependencies when I installed the port?
|
|
|
|
https://www.freebsd.org/doc/en/books/handbook/linuxemu-lbc-install.html The linux compatibility layer is included in the base system, you merely need to enable it. The linux base system is a separate port that is necessary for binaries to run, it is installed automatically in the event you installed a linux binary port.
|
|
|
|
Edit: Nm I think I found another way.
YouTuber fucked around with this message at 00:41 on Nov 6, 2016 |
|
|
|
Rooney McNibnug posted:Really just a bit curious - how many people ITT use OpenBSD semi-regularly? I used it for my IRC machine for a while, but have moved back to FreeBSD. Their need to mount a disk to update versions just seemed ridiculous to me.
|
|
|
|
Rooney McNibnug posted:Really just a bit curious - how many people ITT use OpenBSD semi-regularly? I use it on my router (pfSense hardware, but OpenBSD runs great), and on my general-purpose server. Systems administration is not my job (I'm a PhD student), and OpenBSD is the only system that is simple enough for me to understand in its entirety.
|
|
|
|
Anyone know how you would mount a remote NFS share in FreeNAS? I have a few Plugins(Jails essentially) running a few apps. Does this need to be done on a jail by jail basis or is there a more elegant solution that Freenas provides?
|
|
|
|
Generally speaking you could just put them in the host fstab, mounting "into" the jail directory. It'll be fun making the user ids match, but you'd kind of have that problem anyway. If FreeNAS has implemented it on top of ezjail, I think it will read and mount from /etc/fstab.jailname (or something like it) when starting the jail, but there isn't anything like that for plain jails. Of course, there might also be a separate FreeNAS solution; I wouldn't know.
|
|
|
|
I'm trying to learn a bit about BSD, so I've started looking into OpenBSD installation options. As far as I understand, they provide installer for release version, daily build of current branch, but no installer for stable branch. So if I want an iso with stable version I have to build the system from source? I'm a bit confused by the logic here.
|
|
|
|
Forgall posted:I'm trying to learn a bit about BSD, so I've started looking into OpenBSD installation options. As far as I understand, they provide installer for release version, daily build of current branch, but no installer for stable branch. So if I want an iso with stable version I have to build the system from source? I'm a bit confused by the logic here. They provide full system install ISO for quite a while now. Go to https://ftp.spline.de/pub/OpenBSD/6.0/amd64/ and grab install60.iso if you want the iso or install60.fs if you want to write it to an USB. Then just boot with the media and the installation process will start. For full mirror list see http://www.openbsd.org/ftp.html .
|
|
|
|
Volguus posted:They provide full system install ISO for quite a while now. Go to https://ftp.spline.de/pub/OpenBSD/6.0/amd64/ and grab install60.iso if you want the iso or install60.fs if you want to write it to an USB. Then just boot with the media and the installation process will start.
|
|
|
|
Forgall posted:Yes, but that's the release version from July of last year. It doesn't have those 19 patches applied. Yep. Install 6.0 and rebuild the system. It sounds like a lot but it doesn't take very long and it's easy: https://www.openbsd.org/stable.html You could also run -current, but it's more annoying and problem-prone: https://www.openbsd.org/faq/current.html An Enormous Boner fucked around with this message at 22:17 on Mar 18, 2017 |
|
|
|
anatoliy pltkrvkay posted:I used it for my IRC machine for a while, but have moved back to FreeBSD. Their need to mount a disk to update versions just seemed ridiculous to me. What do you mean? You just need to boot from the ramdisk kernel. That doesn't require any additional disks. An Enormous Boner fucked around with this message at 22:43 on Mar 18, 2017 |
|
|
|
An Enormous Boner posted:Yep. Install 6.0 and rebuild the system. It sounds like a lot but it doesn't take very long and it's easy: https://www.openbsd.org/stable.html Can I skip building Xenocara and bundling it into the iso if I don't need desktop environment? Forgall fucked around with this message at 10:13 on Mar 19, 2017 |
|
|
|
Forgall posted:I'd give it a try. Ideally I'd like to have fully automated build process in a VM creating an iso which can be booted from to autoinstall the patched system and software I want. Seems to be possible from what I've read. Many packages require the X libraries anyway. You're better off just including it.
|
|
|
|
What's the proper OpenBSD way to set up a daemon that auto-restarts on crash? I was assuming rc would be in charge of that, but apparently not?
|
|
|
|
Forgall posted:What's the proper OpenBSD way to set up a daemon that auto-restarts on crash? I was assuming rc would be in charge of that, but apparently not? OpenBSD has watchdog(4) and watchdogd(8) for rebooting the machine after a crash or hang. If you want to do the same but at process granularity (i.e. restart a hung process, not the whole box) then you need something like Monit. The rc system is just a bunch of shell scripts, so it can't really do anything for process monitoring and fault recovery. That's one of the main problems that systemd was created to solve in Linux. Solaris solved this problem by replacing their rc scripts with SMF, but it's not easily portable. The Illumos distros like OmniOS and OpenIndiana have it though, if what you're doing isn't necessarily tied to OpenBSD.
|
|
|
|
In addition to Monit, there are more permissively licensed process control systems including supervisord (which is BSD, I think) and daemontools (which is Public Domain) depending on whether you want python or something which is probably quite secure.
BlankSystemDaemon fucked around with this message at 21:06 on Apr 6, 2017 |
|
|
|
|
I just found nosh as well, which was inspired by daemontools and seems like it's intended to replace init on the BSDs.
|
|
|
|
Do the devs expect "rcctl check $service || rcctl restart $service" cron jobs or something? If you asked most experienced OpenBSD admins, would they just tell you to install nosh/supervisord/daemontools/Monit? Writing scripts yourself seems costly.
An Enormous Boner fucked around with this message at 21:25 on Apr 6, 2017 |
|
|
SamDabbers posted:I just found nosh as well, which was inspired by daemontools and seems like it's intended to replace init on the BSDs. An Enormous Boner posted:Do the devs expect "rcctl check $service || rcctl restart $service" cron jobs or something? If you asked most experienced OpenBSD admins, would they just tell you to install nosh/supervisord/daemontools/Monit? Writing scripts yourself seems costly. BlankSystemDaemon fucked around with this message at 21:26 on Apr 6, 2017 |
|
|
|
|
D. Ebdrup posted:Wouldn't that make it closer to OpenRC, which is done by Roy Marples of NetBSD? I'm confused as to why it isn't in the FreeBSD ports repository itself, and only distributed as a package by the developer, or as a source file. OpenRC doesn't do process supervision though, so it can't detect a crashed service and attempt to restart it. I'm also confused as to why the developer hasn't submitted a port, but he hosts his own package repository, and uses a wacky DJB-style build tool he re-implemented called redo, which is also in his repo but not in ports. I wouldn't be terribly surprised to learn that he's home-rolled his own packaging scripts instead of just using ports and poudriere like pretty much everyone else in FreeBSD-land. An Enormous Boner posted:Do the devs expect "rcctl check $service || rcctl restart $service" cron jobs or something? If you asked most experienced OpenBSD admins, would they just tell you to install nosh/supervisord/daemontools/Monit? Writing scripts yourself seems costly. Why don't you just fix your service so it doesn't crash SamDabbers fucked around with this message at 22:02 on Apr 6, 2017 |
|
|
|
D. Ebdrup posted:Wouldn't they tell you not to install anything and only use what's in base? That's what I'm asking, though. What would some smartypants guy (or a loose consensus of smartypants people) say is a generalized solution for this kind of problem using the base installation? I can only think of 'roll your own scripts', which could range from a somewhat trivial exercise to a real gigantic waste of time. I'm almost certainly ignorant of something. I don't think they're averse to third-party software. Packages are important. Maybe there's someting in the collection. edit: OK... http://ports.su/sysutils/supervisor supervisor is in ports http://ports.su/sysutils/freedt this reimplementation of daemontools is in ports http://ports.su/sysutils/monit monit is in ports So, basically, everyone here probably gave good advice. Strange.... An Enormous Boner fucked around with this message at 00:26 on Apr 7, 2017 |
|
|
|
If you want questionable advice, use launchd
|
|
|
|
Comedy option: Impliment systemd on BSD.
|
|
|
|
|
An Enormous Boner posted:Do the devs expect "rcctl check $service || rcctl restart $service" cron jobs or something?
|
|
|
|
I really wish Firefox worked well on OpenBSD. You can increase datasize-max and datasize-cur in login.conf for the paths that contain the binaries. You can increase the ulimit values. I can still reliably crash it by launching mpv from thunar or pcmanfm. Apart from that, it's not performant. I know they're aware of this and are working on some optimizations. Chrome doesn't seem much better, either, and it's not significantly more stable (in my experience).
|
|
|
|
I've made a site61.tgz set and uploaded it (and index.txt file) to amazon s3 bucket. When installing OpenBSD, it complains that it can't connect over https. Http fallback works, but obviously it's not a good solution. What could be the problem and where do I start troubleshooting it? Looks like s3 is using certificate from Symantec, which I heard were involved in some controversy. Did OpenBSD devs just purge them from trusted root or something?
|
|
|
|
I have a question about OpenBSDs pf: I have an OpenBSD pc in the basement that's my internet gateway. It does forwarding, NAT and a bunch of other things. I want to implement a rule in the firewall where it blocks internet access for certain IPs (internal IPs). I came up with this as the last rules in my pf.conf: code:And it works. But, it doesn't do anything for already opened connections (such as games). Is it possible to somehow easily drop those too?
|
|
|
|
|
| # ? Jan 22, 2026 19:02 |
|
code:
|
|
|




















