From owner-freebsd-questions@freebsd.org Mon Sep 27 01:19:02 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id A98446AC08D for ; Mon, 27 Sep 2021 01:19:02 +0000 (UTC) (envelope-from freebsd@chthonixia.net) Received: from mail1.g14.pair.com (mail1.g14.pair.com [66.39.4.16]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HHlCT4WkCz3QRl for ; Mon, 27 Sep 2021 01:19:01 +0000 (UTC) (envelope-from freebsd@chthonixia.net) Received: from mail1.g14.pair.com (localhost [127.0.0.1]) by mail1.g14.pair.com (Postfix) with ESMTP id AF0A3223D75 for ; Sun, 26 Sep 2021 21:18:55 -0400 (EDT) Received: from ghostyhead.chthonixia.net (cpe-74-65-210-255.nyc.res.rr.com [74.65.210.255]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mail1.g14.pair.com (Postfix) with ESMTPSA id 91799223D6B for ; Sun, 26 Sep 2021 21:18:55 -0400 (EDT) Date: Sun, 26 Sep 2021 21:18:54 -0400 From: "J. Altman" To: freebsd-questions@freebsd.org Subject: Exiting X: not so much.... Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Rspamd-Queue-Id: 4HHlCT4WkCz3QRl X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of freebsd@chthonixia.net has no SPF policy when checking 66.39.4.16) smtp.mailfrom=freebsd@chthonixia.net X-Spamd-Result: default: False [-0.43 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[3]; MID_RHS_MATCH_FROMTLD(0.00)[]; NEURAL_SPAM_SHORT(0.67)[0.671]; DMARC_NA(0.00)[chthonixia.net]; R_SPF_NA(0.00)[no SPF record]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:7859, ipnet:66.39.0.0/17, country:US]; RCVD_TLS_LAST(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions]; RECEIVED_SPAMHAUS_PBL(0.00)[74.65.210.255:received] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Sep 2021 01:19:02 -0000 Greetings, list members.... I run 12.2-release-p10 r370449 amd64 with an Nvidia Gforce 1050Ti. On Sept.26, I updated to the newest Nvidia driver. Ports were also updated on that day and more than once over the last month. What follows is a description of the state of things for about the last month. Startx works; Windowmaker works; as do all programs. As indicated in the Subject: line, exiting does not work. I initiate an exit, and after about or not more than ten seconds, an unusable black screen appears with a blinking cursor in the upper left corner. The keyboard and mouse are unusable; no switching to another tty and no ctrl-alt-delete. The desktop can only be rebooted by a warm reset or a power down. There is nothing relevant in Xorg.log: no errors nor warnings. Nothing in dmesg except the expected improper disk unmounting warning followed by fsck. I don't have the first clue what could be wrong nor do I have any idea how to begin troubleshooting. Given the paucity of information I can offer, can any advice be given to me? Thank you, and best regards, J. Altman From owner-freebsd-questions@freebsd.org Mon Sep 27 03:53:48 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 0E1CA6ADA3C for ; Mon, 27 Sep 2021 03:53:48 +0000 (UTC) (envelope-from kob6558@gmail.com) Received: from mail-wr1-x434.google.com (mail-wr1-x434.google.com [IPv6:2a00:1450:4864:20::434]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HHpf31yHpz3q6L for ; Mon, 27 Sep 2021 03:53:47 +0000 (UTC) (envelope-from kob6558@gmail.com) Received: by mail-wr1-x434.google.com with SMTP id d21so48088224wra.12 for ; Sun, 26 Sep 2021 20:53:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=QENSXtBqGpFo3vvD2B0BamZx5x34dIgmd0U5knAq+14=; b=ih3qgMpa6NZKI8XnSF/Z1+VYKX4chqCM1GdCZ+QZIfS/WdS3ncLQS5ZSGqgS8R69IK +/3ipFtO+H5krMvzJBWLQCbhkYfIvUFK0I/8GLU7EBdweN7/OIMg0X+6h0DVikswSj2n xnmYNRhX94S+BUD5TE2yWsKkFWCbh76fUBBc2ETjmx8kmG9e8B+KPAAWKstB230cRGiv 5Y3mpCShc6AFM9EwwK1/8b5iy3x05dsjWl1Z/+9xe2r+M6LspGYYPFp1Wtmqv92tXkxL +EGdH6xR0xMr/BIcxoCX094VEFR7RMXZL/iBvQ5LjenSWyU6SeNSeAUxKca5XMkpnDeJ c36A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=QENSXtBqGpFo3vvD2B0BamZx5x34dIgmd0U5knAq+14=; b=m3IihRBieTA2bR742QxcsRZe8ekYjbapUaLTeZU5c96D5G14Vat3koMbUqFQZB9fla GtQyGejR85IuyDEOMM6p1/32VZLW+HePkmD2RcCSnp8qDhs/CVwKSN4Ilf3AtPFKm9xy 3oz/Wlsavo/2OsaMY8/XLnKtz4XEtTT3ORW0CGbMjx6DziYPSgZX2cgmWS8zWLOfWV9O gpCc0jbWnDLxr5Rc+Ronfg6XDsR8mzH+EbFtf9d16sMR1oIJLOtQRABiwdV9sy81GwWI BsKHRhAPQA2hmgK55aHagEwfRNcfl9RHNLEw8ksuswY67Ljtt2YSrxto8LpQPRewvOBQ qJ/A== X-Gm-Message-State: AOAM533tbvLmcRj3/cFETFDqzEtRD1dHZXKOagtfWXmzF7w43Ez+GX4r 5ps6578E6tJ1hXlBay4bqxaPRGoRVvKOg0l9ZNjIPSd1yG0= X-Google-Smtp-Source: ABdhPJzoYnXGm/7Q8B6Yw3kxuNO8Inzl+VPzcn7JWKxGw1Z0M2gGWIK7quymkCGzln78GbKW7H9zlfJI9ZaAiEQsoas= X-Received: by 2002:a05:600c:4f0b:: with SMTP id l11mr13722316wmq.0.1632714819752; Sun, 26 Sep 2021 20:53:39 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Kevin Oberman Date: Sun, 26 Sep 2021 20:53:23 -0700 Message-ID: Subject: Re: Exiting X: not so much.... To: "J. Altman" Cc: "freebsd-questions@freebsd.org" X-Rspamd-Queue-Id: 4HHpf31yHpz3q6L X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=ih3qgMpa; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of kob6558@gmail.com designates 2a00:1450:4864:20::434 as permitted sender) smtp.mailfrom=kob6558@gmail.com X-Spamd-Result: default: False [-3.70 / 15.00]; TO_DN_EQ_ADDR_SOME(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-0.997]; FORGED_SENDER(0.30)[rkoberman@gmail.com,kob6558@gmail.com]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; FROM_NEQ_ENVFROM(0.00)[rkoberman@gmail.com,kob6558@gmail.com]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::434:from]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Sep 2021 03:53:48 -0000 On Sun, Sep 26, 2021 at 6:19 PM J. Altman wrote: > Greetings, list members.... > > I run 12.2-release-p10 r370449 amd64 with an Nvidia Gforce 1050Ti. > On Sept.26, I updated to the newest Nvidia driver. Ports were also > updated on that day and more than once over the last month. > > What follows is a description of the state of things for about > the last month. > > Startx works; Windowmaker works; as do all programs. As indicated > in the Subject: line, exiting does not work. > > I initiate an exit, and after about or not more than ten seconds, an > unusable black screen appears with a blinking cursor in the upper > left corner. The keyboard and mouse are unusable; no switching to > another tty and no ctrl-alt-delete. > > The desktop can only be rebooted by a warm reset or a power down. > > There is nothing relevant in Xorg.log: no errors nor warnings. > > Nothing in dmesg except the expected improper disk unmounting warning > followed by fsck. > > I don't have the first clue what could be wrong nor do I have any > idea how to begin troubleshooting. Given the paucity of information > I can offer, can any advice be given to me? > > Thank you, and best regards, > > J. Altman > Can you log in over the network and see if you can get some clue as to what is hanging? Are X processes still running and can you kill something to free things up? -- Kevin Oberman, Part time kid herder and retired Network Engineer E-mail: rkoberman@gmail.com PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683 From owner-freebsd-questions@freebsd.org Mon Sep 27 08:36:51 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 5F18C6B0F75 for ; Mon, 27 Sep 2021 08:36:51 +0000 (UTC) (envelope-from parv.0zero9@gmail.com) Received: from mail-ua1-x930.google.com (mail-ua1-x930.google.com [IPv6:2607:f8b0:4864:20::930]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HHwwf4Wtqz4fsn for ; Mon, 27 Sep 2021 08:36:50 +0000 (UTC) (envelope-from parv.0zero9@gmail.com) Received: by mail-ua1-x930.google.com with SMTP id 64so2108637uab.12 for ; Mon, 27 Sep 2021 01:36:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=gdr8iGZ3See5y0DSaTTsKxZuGLT/3jQBPTBefiWubo4=; b=B8PHcFaOgrw31J7GAgBgCOpY6n6z3SpMeua+fcFbXGT5UoYI/WsQTpp+XpbmRoZ+Gt VAdxicV28QbwsVpYgsfQUPRuZ3tbce5XEPmPXpvrpdceilqdBOC4FtNV+OLOOST963wF jUmzm2fT5UrIxz3/ip/8mp6otbsosgNZRHBVmyFvVkBPw3DQPI4B2BTGFNdIgiWDax/r BAqM3gr1OtIaXrDEABX8lz/tF/YGK6Gc32+iA3iRG+JLAhtuSc/wc620DzT09mO4X7BS XqLa4T8niz/k6RryJWfYBVhghRR3aYhxyoQa2k0fcYxRRxakoCIDBvW4GtKEl/2x/36B ZyUQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=gdr8iGZ3See5y0DSaTTsKxZuGLT/3jQBPTBefiWubo4=; b=GMtYcULYvC1Vv+Bk9f4KQi8O7MuVrdUmKY6itgPwhVuU2Cp9/VCGQg5aJaa66GHXoF f3oX92/OsCsfJlpRJc5+Wm7lWNEkD815PeDAS8XfzB063mfvmAq5kxeU5YdGr2uD0jGO A3bKwzMakb3o0lIUR+fjQ9HrFSVuS+KUqrdIgJBPV7A+Aj7RafEJu5vds4gTVCfUm5Cm tYxH/2YNXk8MVw5r8NFAcGzc8xmT30EN0/247jS5kl4sZzpCZRgIYxeHR+n1kXbUsIjT e1ruvEIbLaI21OKiCM0nVQV4LDuvXdYNpT+2egUHLoPRiGQyMczSn068VB4Dbg9mZD+l It6A== X-Gm-Message-State: AOAM532WJWWBOtG8B6dpJBT1/Z/OAuhF2Jb2E9auA1xeb/FFku2/M8pD 4qkAZaFaAJNSvxQ9t1gUukzqcxeK9k0pNAJH3Jc= X-Google-Smtp-Source: ABdhPJxRR4Dzhvr01YNxg87chzu81snQwXC9aKPvNCpldBLsw8g6KDYTDl5hS1rlmgYrFT+RGNTIt0VVNGXt5lhl9LA= X-Received: by 2002:ab0:4acc:: with SMTP id t12mr18340854uae.110.1632731809977; Mon, 27 Sep 2021 01:36:49 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: "parv/freebsd" Date: Sun, 26 Sep 2021 22:36:04 -1000 Message-ID: Subject: Re: Exiting X: not so much.... To: "J. Altman" Cc: freebsd-questions@freebsd.org X-Rspamd-Queue-Id: 4HHwwf4Wtqz4fsn X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=B8PHcFaO; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of parv0zero9@gmail.com designates 2607:f8b0:4864:20::930 as permitted sender) smtp.mailfrom=parv0zero9@gmail.com X-Spamd-Result: default: False [-4.00 / 15.00]; TO_DN_SOME(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; TAGGED_FROM(0.00)[freebsd]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::930:from]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Sep 2021 08:36:51 -0000 On Sun, Sep 26, 2021 at 3:19 PM J. Altman wrote: > I run 12.2-release-p10 r370449 amd64 with an Nvidia Gforce 1050Ti. > On Sept.26, I updated to the newest Nvidia driver. Ports were also > updated on that day and more than once over the last month. > FreeBSD stable/13 in VirtualBox 5.2 on MS Windows 10 with EFI here, using vt & framebuffer. I start "startx" in the background after logging in on the console. ... > Startx works; Windowmaker works; as do all programs. As indicated > in the Subject: line, exiting does not work. > > I initiate an exit, and after about or not more than ten seconds, an > unusable black screen appears with a blinking cursor in the upper > left corner. The keyboard and mouse are unusable; no switching to > another tty and no ctrl-alt-delete. > After exiting X, I see a black screen too. I can type the commands blindly or switch to another tty but cannot verify. During this time, ssh to the VM works as expected; no X11 process are running at this point. I can restart the machine via shutdown (either on console while blind, or when logged in via ssh). Interesting point to note is as long as the VirtualBox VM menubar is being accessed (select "File" or some other item, for example), I can see the text on the console. At this point, I could type blind; pause; access the VM menubar to verify the command; processed to execute the command. - parv > The desktop can only be rebooted by a warm reset or a power down. > > There is nothing relevant in Xorg.log: no errors nor warnings. > > Nothing in dmesg except the expected improper disk unmounting warning > followed by fsck. > > I don't have the first clue what could be wrong nor do I have any > idea how to begin troubleshooting. Given the paucity of information > I can offer, can any advice be given to me? > -- From owner-freebsd-questions@freebsd.org Mon Sep 27 14:40:46 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id D9D396B7256 for ; Mon, 27 Sep 2021 14:40:46 +0000 (UTC) (envelope-from freebsd@chthonixia.net) Received: from mail1.g14.pair.com (mail1.g14.pair.com [66.39.4.16]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJ50Z1CHGz3N18 for ; Mon, 27 Sep 2021 14:40:46 +0000 (UTC) (envelope-from freebsd@chthonixia.net) Received: from mail1.g14.pair.com (localhost [127.0.0.1]) by mail1.g14.pair.com (Postfix) with ESMTP id 7F454223E3A for ; Mon, 27 Sep 2021 10:40:45 -0400 (EDT) Received: from ghostyhead.chthonixia.net (cpe-74-65-210-255.nyc.res.rr.com [74.65.210.255]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mail1.g14.pair.com (Postfix) with ESMTPSA id 59032223E1E for ; Mon, 27 Sep 2021 10:40:45 -0400 (EDT) Date: Mon, 27 Sep 2021 10:40:44 -0400 From: "J. Altman" To: freebsd-questions@freebsd.org Subject: Re: Exiting X: not so much.... Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 4HJ50Z1CHGz3N18 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of freebsd@chthonixia.net has no SPF policy when checking 66.39.4.16) smtp.mailfrom=freebsd@chthonixia.net X-Spamd-Result: default: False [-2.08 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-0.99)[-0.988]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[3]; MID_RHS_MATCH_FROMTLD(0.00)[]; NEURAL_HAM_SHORT(-1.00)[-0.995]; DMARC_NA(0.00)[chthonixia.net]; R_SPF_NA(0.00)[no SPF record]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:7859, ipnet:66.39.0.0/17, country:US]; RCVD_TLS_LAST(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions]; RECEIVED_SPAMHAUS_PBL(0.00)[74.65.210.255:received] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Sep 2021 14:40:46 -0000 On Sun, Sep 26, 2021 at 08:53:23PM -0700, Kevin Oberman wrote: > > Can you log in over the network and see if you can get some clue as to > what is hanging? Are X processes still running and can you kill something > to free things up? Okay; I can login over the network...(which surprised me since I am used to that not working due to my experience with early version of the drm bits which is why I purchased the Nvidia...) X does stop running, no stray processes that I can see in top, systat, nor ps -waux. I can post it if needed. Nothing is logged in Xorg.log. While logged in over my LAN, I tried going to single user mode to see if that would jostle things and restore the display. It didn't work. So I thought to unplug the keyboard and mouse, and then I punched the reset button which did restore the monitor and I could see on the wall that the keyboard and mouse detach/reattach were displayed. Even in this context, that seems weird, right? Maybe it's some weird thing with the monitor heretofore untickled? I note that if I turn on the desktop, prior to turning on the monitor, the display does not...display. ISTR that is normal(?) for vt? Also, for some reason,while the monitor is able to do 144, it is by default set to 60....I can use xrandr to switch to 144 but so far my attempt to specify it in a config file fail and I've used the instructions in the handbook as recently as two weeks ago. Anyway, Kevin, thanks for your reply and if you have any ideas I'm listening. Best regards, J. Altman From owner-freebsd-questions@freebsd.org Mon Sep 27 14:44:50 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 7793E6B6F79 for ; Mon, 27 Sep 2021 14:44:50 +0000 (UTC) (envelope-from freebsd@chthonixia.net) Received: from mail1.g14.pair.com (mail1.g14.pair.com [66.39.4.16]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJ55F6nPxz3PTf for ; Mon, 27 Sep 2021 14:44:49 +0000 (UTC) (envelope-from freebsd@chthonixia.net) Received: from mail1.g14.pair.com (localhost [127.0.0.1]) by mail1.g14.pair.com (Postfix) with ESMTP id BD540223C81 for ; Mon, 27 Sep 2021 10:44:49 -0400 (EDT) Received: from ghostyhead.chthonixia.net (cpe-74-65-210-255.nyc.res.rr.com [74.65.210.255]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mail1.g14.pair.com (Postfix) with ESMTPSA id A28FB223C8A for ; Mon, 27 Sep 2021 10:44:49 -0400 (EDT) Date: Mon, 27 Sep 2021 10:44:48 -0400 From: "J. Altman" To: freebsd-questions@freebsd.org Subject: Re: Exiting X: not so much.... Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 4HJ55F6nPxz3PTf X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of freebsd@chthonixia.net has no SPF policy when checking 66.39.4.16) smtp.mailfrom=freebsd@chthonixia.net X-Spamd-Result: default: False [-2.08 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-0.99)[-0.986]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[3]; MID_RHS_MATCH_FROMTLD(0.00)[]; NEURAL_HAM_SHORT(-0.99)[-0.995]; DMARC_NA(0.00)[chthonixia.net]; R_SPF_NA(0.00)[no SPF record]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:7859, ipnet:66.39.0.0/17, country:US]; RCVD_TLS_LAST(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions]; RECEIVED_SPAMHAUS_PBL(0.00)[74.65.210.255:received] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Sep 2021 14:44:50 -0000 On Sun, Sep 26, 2021 at 10:36:04PM -1000, parv/freebsd wrote: > > After exiting X, I see a black screen too. I can type the commands > blindly or switch to another tty but cannot verify. I don't use a virtual box; but re-tried typing blind and it does not work. The keyboard has no effect. > During this time, ssh to the VM works as expected; no X11 process are > running at this point. I can restart the machine via shutdown (either > on console while blind, or when logged in via ssh). I can remain logged in over SSH via my LAN; and to my eye no stray processes are running. The display and keyboard on the desktop (please see my reply to Kevin Oberman) are not usable. Thank you for your reply, and best regards, J. Altman From owner-freebsd-questions@freebsd.org Mon Sep 27 18:06:42 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E0C9566CCEC for ; Mon, 27 Sep 2021 18:06:42 +0000 (UTC) (envelope-from c.brinkhaus@t-online.de) Received: from mailout04.t-online.de (mailout04.t-online.de [194.25.134.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mailout00.t-online.de", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJ9ZB26c0z4V6X for ; Mon, 27 Sep 2021 18:06:42 +0000 (UTC) (envelope-from c.brinkhaus@t-online.de) Received: from fwd73.dcpf.telekom.de (fwd73.aul.t-online.de [10.223.144.99]) by mailout04.t-online.de (Postfix) with SMTP id 957636A14; Mon, 27 Sep 2021 20:04:38 +0200 (CEST) Received: from esprimo.local ([217.83.200.100]) by fwd73.t-online.de with (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384 encrypted) esmtp id 1mUuzT-3SPCHR0; Mon, 27 Sep 2021 20:04:35 +0200 Received: by esprimo.local (Postfix, from userid 1001) id 5DDAD88105; Mon, 27 Sep 2021 20:04:35 +0200 (CEST) Date: Mon, 27 Sep 2021 20:04:35 +0200 From: Christoph Brinkhaus To: "J. Altman" Cc: freebsd-questions@freebsd.org Subject: Re: Exiting X: not so much.... Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-TOI-EXPURGATEID: 150726::1632765875-0000147C-E7E6E353/0/0 CLEAN NORMAL X-TOI-MSGID: cbcd36d7-ddaa-4962-bfe3-0fa5da9a784f X-Rspamd-Queue-Id: 4HJ9ZB26c0z4V6X X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of c.brinkhaus@t-online.de has no SPF policy when checking 194.25.134.18) smtp.mailfrom=c.brinkhaus@t-online.de X-Spamd-Result: default: False [-1.15 / 15.00]; MID_RHS_NOT_FQDN(0.50)[]; FREEMAIL_ENVFROM(0.00)[t-online.de]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; FREEMAIL_FROM(0.00)[t-online.de]; NEURAL_HAM_LONG(-0.99)[-0.985]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[t-online.de]; AUTH_NA(1.00)[]; RWL_MAILSPIKE_GOOD(0.00)[194.25.134.18:from]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_HAM_SHORT(-0.57)[-0.568]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[194.25.134.18:from]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_SPF_NA(0.00)[no SPF record]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:3320, ipnet:194.25.0.0/16, country:DE]; RCVD_TLS_LAST(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions]; RECEIVED_SPAMHAUS_PBL(0.00)[217.83.200.100:received] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Sep 2021 18:06:42 -0000 Am Mon, Sep 27, 2021 at 10:44:48AM -0400 schrieb J. Altman: > On Sun, Sep 26, 2021 at 10:36:04PM -1000, parv/freebsd wrote: Hello Friends! I have the same issue on one machine running FreeBSD-12.2-RELEASE with i915. It makes no difference if I use i915kms.ko from /boot/modules or from /boot/kernel. I have tried awesome, dwm and twm using startx. When I exit the window manager the keyboard lights get off and do not work anymore. The keyboard is an USB device. > > After exiting X, I see a black screen too. I can type the commands > > blindly or switch to another tty but cannot verify. > > I don't use a virtual box; but re-tried typing blind and it > does not work. The keyboard has no effect. The keyboard has no function here, too. When I press the power button of the PC the system shuts down properly. This seems to be a different configuration issue. What I can do to leave X and drop into a console: 1. Either change to a different console by CRTL-ALT-F2 or so and pkill xinit. 2. Open a X terminal and do pkill xinit. > > > During this time, ssh to the VM works as expected; no X11 process are > > running at this point. I can restart the machine via shutdown (either > > on console while blind, or when logged in via ssh). > > > I can remain logged in over SSH via my LAN; and to my eye no stray > processes are running. The display and keyboard on the desktop > (please see my reply to Kevin Oberman) are not usable. > > Thank you for your reply, and best regards, > > J. Altman I have expected to be a victim of my old hardware. But this seems not to be the case. A different ancient laptop with a radeon graphics card still works as expected. Kind regards, Christoph From owner-freebsd-questions@freebsd.org Tue Sep 28 14:10:53 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 9868867DA26 for ; Tue, 28 Sep 2021 14:10:53 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from wout3-smtp.messagingengine.com (wout3-smtp.messagingengine.com [64.147.123.19]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJhHc58Rvz3Kvh for ; Tue, 28 Sep 2021 14:10:52 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.west.internal (Postfix) with ESMTP id DB3153201F4E for ; Tue, 28 Sep 2021 10:10:51 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Tue, 28 Sep 2021 10:10:51 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:mime-version:content-type; s= fm3; bh=V4y/UxBJnZxro2QGDUydaamyMAwXqWa2yBEzqsBalRA=; b=LGUHFZXV ZkZyxmfYxcFh3LgU9d5eNhwcJQec7wEhAzNEAG8r23qcXAcLcPos+EnB43FxD0Ob NGJgkfWRdv53TYI3GypPlNGxEN2lkQPlcLj/b/ShllyTkB0dj9gxtFWJXnzC7QPL Ij8fQG1TP401AZX99ROnZaeZtjW7Tzh+VHUFYK50KakV6OC5t/xJJdkKp4GOQ6rd 2gy77hD96djA2wfzl5FTGwhFBKMXEdvPwrN11/p0hPgRzHnQMSgfQlobLOS361e2 ZHR3OXdkAx30CnEy/Vb/EFBIbHh58dlFFfkL9don9SdIi+AINqWaROajT/Q7GNJl 3nkYraVOkAgoTg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=V4y/UxBJnZxro2QGDUydaamyMAwXq Wa2yBEzqsBalRA=; b=TpNS3a317diw9tS3lvDCBt8utSo4Cur0bYKWBRnpt9O/s mcqR1ZZi0hYY7Z/bJA5Y0hQhE0QA6iHbxNWbuixe1Pt4J1xbH/yIJZlvvqFYRuSp 6B4uUfW5qntxMqQj8RO0K1AWOM9HT5epGSdzoGhQv1z+OyxeVtN2SFeBcTxpu7x3 Seedor7i5+9viFymjqZEmsSImNc6nZjHeK8rwbRo7N59HUfHlFVZiPid9PJEJ97+ axTCfreGEt4RPRubRq4rgIxLZ+sH6Q1+CalT3/y5JIHggGzPzJikT25QmsFVCtH6 +7fqHLA9wGqq+Wp7+CCCsgETNqm1+IqUYqW2F50pw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudektddgjedtucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkgggtugesghdtreertd dtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseiihiig shhtrdhnvghtqeenucggtffrrghtthgvrhhnpeevgffhffdtfeekleelhedtjeelvdfhvd egieejveffgfduvdfhteegjeeujeeuieenucevlhhushhtvghrufhiiigvpedtnecurfgr rhgrmhepmhgrihhlfhhrohhmpehtvggthhdqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Tue, 28 Sep 2021 10:10:51 -0400 (EDT) Date: Tue, 28 Sep 2021 15:10:49 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: what userid do you update system sources under? Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="7WTWrpfQ/R+laGRe" Content-Disposition: inline X-Rspamd-Queue-Id: 4HJhHc58Rvz3Kvh X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b=LGUHFZXV; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=TpNS3a31; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 64.147.123.19) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-5.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:11403, ipnet:64.147.123.0/24, country:US]; RCVD_TLS_LAST(0.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[64.147.123.19:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm3]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; RWL_MAILSPIKE_POSSIBLE(0.00)[64.147.123.19:from]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Sep 2021 14:10:53 -0000 --7WTWrpfQ/R+laGRe Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, When git updates your system sources, are you updating with a specific git user, or do you just use root, and if *automatically* refreshing your tree (like in a cronjob), again as git user or root? Or some other user? The reason I ask is that some instructions the quoted prompt updating the system is $ or % and not #. What way is the "right" way? thanks, --=20 J. --7WTWrpfQ/R+laGRe Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFTImAACgkQs8o7QhFz NAXujBAAq1I8xy9cCss4HoXcPmMzfGlcgD1r6JmrqHRhSp6CUZKY05pV5WaaQSKv KvH1rmpU9vjavMArQvvFESybUW237X2GCj36vSYdR3g9NSgwwzXfmHi2KZvQh8J1 iZPLjsfcS9DkD3Qhg1s9DT+agMBskt6u8YZxk20F5vyIK1tQrQH1uV6B2w5tqD3S 7Rg6pMY5oEgqesf6UcvARnnrcI4ckQkDbiuN762FNDfVE3UMwKq5+p7TyInkNKcP 5HwVajtPDprQFPlwk5gJav0B6Gv6fplnBgS4f5qxtifB/W6olM0I0OsTnAuvBAGu SXl7rC6LH4MSaBd9xKNo69uEW44+/LzhfrOfFkixMbWo0N/nxgkTcDRaggUfPXSi 6+ZG+4H5pwzke8619350MQOFl1Yf2IsvgwioEqtAJOWIHQlWm7XI3GIStuSFpNyj kE4A3vg0kc4sqq/SMC+Xm0mq5c+x5wXwnPlxOITt1NpnGVhGPjX7IkK+9GbC5VEJ 0cYjc7CfPmkUv4xwRajhY4gg9Fl2isEGaweRpK31R2hVt4VOT7cq3NovDykMw0BK xQTN6NdW6lckvRvPwkx9gDyBl2ImuhsgJG0EGABX9FiohaEy6zE5lef7njqOtwqy NnnQQJJqVVwJNnj2IEM8OV7jgc1ozBFAZLLpCS5Me/WiHhNI0OU= =sKq+ -----END PGP SIGNATURE----- --7WTWrpfQ/R+laGRe-- From owner-freebsd-questions@freebsd.org Tue Sep 28 14:34:49 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 22CE767E426 for ; Tue, 28 Sep 2021 14:34:49 +0000 (UTC) (envelope-from dan@langille.org) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJhqD2hQvz3N4J for ; Tue, 28 Sep 2021 14:34:48 +0000 (UTC) (envelope-from dan@langille.org) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 57F2B5C0089; Tue, 28 Sep 2021 10:34:42 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Tue, 28 Sep 2021 10:34:42 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=langille.org; h= subject:to:cc:references:from:message-id:date:mime-version :in-reply-to:content-type:content-transfer-encoding; s=fm2; bh=Z 0RXMQ2rD7Eg4isukFsiAEG0AjTLXPRo8fias0jp6Yk=; b=arTABS/EXn2L2qR6m l+P6jKPA+0duFzEUJBhXKOzA92jApsYTvoLP/zQISEB+aEKJgy1gz5Jf5lHCF3LI C91EM1LuxtcB9z8iP/BRmFPaqAe6ZOZElYBWan2Jvs7wQaL7ePigK+6mD7rQaauH N7FlEJ9Mronwmr4IiYxISaZvV24GFtkhSla1W/EqADfqttVWS48t8Qdh9s3ClyAd gYgQl0BX7Thdjpg0w7VQZTyyJCgW8YqbVxGsMi43hatX8wHd0d/d9LIy8Wa5H/PG n9PeUsiDho4DbA6dYSlxc8smQqKZOd6C4pYKsHenvtQiYKHTX01zK74WkMr4cl8H 1FkWg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=Z0RXMQ2rD7Eg4isukFsiAEG0AjTLXPRo8fias0jp6 Yk=; b=AkmKEWFMoNZ+WmFeybeQbUu/GCOfb/ggmxCXPcyxV455+zx7Ndq1KjQoy VaxoljlxhgXC2ElVMG/MYU7mWhqePD7d6EVcX3uS/SB3At9Oj7diqpJKUxBBD1vh tf5IoP996c7tD4ibgkyfehy6cyDICm8JSOOXl3r9a0gOMPbnqZTfOqaYvAAbvKbB elkfCmWNpvnGNyMcGXUpwO6sekrifTkRPKll6INKjCHG49mhEWz39dyaBFj9Sl/X gJ9L0X3MPTpi937DP/litlWgm/wbhW0dnSXgOMbdEctLJrS6NIZDFkiGOSGASpuq SlEjPVLcNptpne/r9qcR/o0RwLgEQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudektddgjeegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefuvfhfhffkffgfgggjtgfgsehtke ertddtfeejnecuhfhrohhmpeffrghnucfnrghnghhilhhlvgcuoegurghnsehlrghnghhi lhhlvgdrohhrgheqnecuggftrfgrthhtvghrnhepffejffffgeeuiedtvdfhheejjedtte dtfeegtdefhfejieeuvedvueekledttdelnecuffhomhgrihhnpehlrghnghhilhhlvgdr ohhrghenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpe gurghnsehlrghnghhilhhlvgdrohhrgh X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 28 Sep 2021 10:34:42 -0400 (EDT) Subject: Re: auditdistd - audit trail file retntion To: JB Cc: freebsd-questions@freebsd.org References: <63FzSG9SYK55EYli0V-lgAHWQu0WKoRYoAz1IFKsq8kpIoC3TXLG765IctTawyK_DAYGU4yRzG_MPYFm6bfCujEEMLjPtLumNDhAUcsQO0E=@protonmail.com> From: Dan Langille Message-ID: <587952f9-71e1-590c-aacb-1a4c8be7e053@langille.org> Date: Tue, 28 Sep 2021 10:34:40 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:52.0) Gecko/20100101 PostboxApp/7.0.49 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-Rspamd-Queue-Id: 4HJhqD2hQvz3N4J X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=langille.org header.s=fm2 header.b="arTABS/E"; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=AkmKEWFM; dmarc=pass (policy=none) header.from=langille.org; spf=pass (mx1.freebsd.org: domain of dan@langille.org designates 66.111.4.29 as permitted sender) smtp.mailfrom=dan@langille.org X-Spamd-Result: default: False [-5.10 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:66.111.4.29]; RCVD_COUNT_THREE(0.00)[4]; DKIM_TRACE(0.00)[langille.org:+,messagingengine.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[langille.org,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FREEMAIL_TO(0.00)[protonmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.0.0/20, country:US]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[66.111.4.29:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[langille.org:s=fm2,messagingengine.com:s=fm3]; FREEFALL_USER(0.00)[dan]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[66.111.4.29:from]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Sep 2021 14:34:49 -0000 JB via freebsd-questions wrote on 9/22/21 6:54 PM: > On Wednesday, September 22nd, 2021 at 4:58 AM, Dan Langille wrote: > >> JB via freebsd-questions wrote on 9/21/21 6:37 PM: >> >>> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ >>> >>>> Date: Mon, 20 Sep 2021 11:07:34 -0400 >>>> From: Dan Langille dan@langille.org >>>> To: "freebsd-questions@freebsd.org" freebsd-questions@freebsd.org >>>> Cc: Pawel Jakub Dawidek pjd@freebsd.org >>>> Subject: auditdistd - audit trail file retntion >>>> >>>> Hello, >>>> >>>> I am using auditdistd on FreeBSD 11.4 and 12.2 - I write about audit >>>> trail files retention. >>>> >>>> Is there an option to dispose of older logs in /var/audit/dist ? >>>> >>>> So far, it seems like a custom cronjob is in order. Something like: >>>> >>>> ??? /usr/bin/find /var/audit/dist -type f -mtime +7 -exec rm {} \; >>>> >>>> FYI: I have read up about auditd, /etc/security/audit_control, and the >>>> >>>> audit -e option. They do not apply to auditdistd. >>>> >>>> Thank you. >>>> >>>> Dan Langille - dan@langille.org >>>> >>>> https://langille.org/ >>>> >>>> Why not just use newsyslog to manage them for you? See newsyslog.conf(5) for details. >> newsyslog is a great tool and I've used it for wide range of tasks, not >> just log files. >> >> I use newsyslog when I can. My usual use cases include webserver logs. >> >> The characteristics of the data helps to understand why I think >> newsyslog is not feasible here. >> >> auditdistd does its own rotation. The current log is: >> >> 20210920075929.not_terminated >> >> The previous log is 20210920075923.20210920075929. >> >> There are 457 log files for Sept 20: >> >> $ sudo ls -l /var/audit/dist/ | grep -c ' Sep 20' >> >> 457 >> >> If I used a glob, it won't be a typical /var/audit/dist/*.log - it would >> need to be * or something more complex. >> >> Can newsyslog duplicate the above find? That is, removing only files >> older than 7 days? >> >> The when field may consist of an interval, a specific time, or both. >> >> If an interval is specified, the log file will be trimmed if that many >> hours have passed since the last rotation. I can't see new syslog doing this. >> >> Thank you. > It might still be possible to use newsyslog, but it doesn't match up well with your requirements (auditdistd rotates the logs, and the logs are not uniformly named). There might be an existing base program that can handle the task that I'm not aware of, but at this point I'd use the cron job you created. > This is what I'm using from a periodic daily script:     /usr/bin/find -E /var/audit/dist -type f -mtime +7 -regex "/var/audit/dist/[0-9]+.[0-9]+" -exec rm {} \; -E for extended (modern) regular expressions -regex  Specify the full path, because that's what regex uses: "/var/audit/dist/[0-9]+.[0-9]+" The regex is to avoid removing the '*.not_terminated' log file, which can get to be many days old without being modified. -- Dan Langille dan@langille.org From owner-freebsd-questions@freebsd.org Tue Sep 28 14:46:22 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id A943567E9F2 for ; Tue, 28 Sep 2021 14:46:22 +0000 (UTC) (envelope-from NO-REPLY@FREEBSD.ORG) Received: from hwsrv-906526.hostwindsdns.com (hwsrv-906526.hostwindsdns.com [142.11.236.156]) by mx1.freebsd.org (Postfix) with ESMTP id 4HJj4Z4NJmz3Nlw for ; Tue, 28 Sep 2021 14:46:19 +0000 (UTC) (envelope-from NO-REPLY@FREEBSD.ORG) Received: from 39ESSEX.COM (localhost [IPv6:::1]) by hwsrv-906526.hostwindsdns.com (Postfix) with ESMTP id AA3F11113D for ; Tue, 28 Sep 2021 14:45:53 +0000 (UTC) From: MAILBOX CLOUD SERVICES To: FREEBSD-QUESTIONS@FREEBSD.ORG Subject: NEW DOCUMENTs RECEIVED Date: 28 Sep 2021 16:45:53 +0200 Message-ID: <20210928164553.DD4AAC199CEA0AE4@FREEBSD.ORG> X-Rspamd-Queue-Id: 4HJj4Z4NJmz3Nlw X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [0.00 / 15.00]; ASN(0.00)[asn:54290, ipnet:142.11.192.0/18, country:US]; local_wl_from(0.00)[FREEBSD.ORG] MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Sep 2021 14:46:22 -0000 From owner-freebsd-questions@freebsd.org Tue Sep 28 20:46:24 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id CC5FA6AB9D1 for ; Tue, 28 Sep 2021 20:46:24 +0000 (UTC) (envelope-from dan@langille.org) Received: from wout5-smtp.messagingengine.com (wout5-smtp.messagingengine.com [64.147.123.21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJs3z6HwPz4rLr for ; Tue, 28 Sep 2021 20:46:23 +0000 (UTC) (envelope-from dan@langille.org) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id 23E763201EAD for ; Tue, 28 Sep 2021 16:46:17 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Tue, 28 Sep 2021 16:46:17 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=langille.org; h= subject:to:references:from:message-id:date:mime-version :in-reply-to:content-type:content-transfer-encoding; s=fm2; bh=K BnguoKyZ0ydVF3rqU6/eGdRNw1/z3RHbNEPLDcdXvg=; b=Qe8PMYZnXyacS4T1P 4PnDjYn+FgD8o57diCdRi4kMwxX5wNi/ZJvfYHfAGkK3akDHxuI8aGIvUM0lpYgU 3OFNnWQNGH8QuYDfH/vMCPpeuR0cMk41SvcpMKQrBsxlDLS6QnfqdgoqQF7R9zbF iSZihQsqDM/EuoBLzz9OMdUrPU3nXF6UHf3Dfi6TK5R1ep6aR26t6mUDVWEsK0es WrDE3As555waGAC2QtiI04HCJQT6I1iB4YcHoWHieKQCw45NhbwXV1ZtSm8WA/+w E0IvOUs35ezAg5kNhxlrMFY1cw0K2Y+Lo1lduZVjxA84PCKpEp1hoTqs5/wDgrpk JNqsQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=KBnguoKyZ0ydVF3rqU6/eGdRNw1/z3RHbNEPLDcdX vg=; b=LIEG+EQM+n3dZKeIE4q4zgIu9tfcnLnVLYOltW7/pvgjZUD4pA8TF1sUu xKJW1gliwBfo28oTyLXgWLt/uGs1jOLmGb6K/LaKReWk4BDgJWJeb1Fez8OX8c0i wKl0xm4JU/ynkI9wmT4s3ZY1w6J+ipmqqwQJ9rYcghgifCd+/jL+WiUUIGqdHZ3Y nOrhfgBbuFn4BaWpHNTr+ra8mCwIQQ0zLWdUH04CVEzbYQqFmeCK/FAVl2fSjomZ ox6o3BF3TSoXMwk7E23O04wGpztxksC2f9aY06cSTa/gSiFfP8BRToHHQWEuchD5 PQ+TgNZBdc8pgCi+X0O9hJ+Q81neA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudektddgudegkecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepuffvfhfhkffffgggjggtgfesth ejredttdefheenucfhrhhomhepffgrnhcunfgrnhhgihhllhgvuceouggrnheslhgrnhhg ihhllhgvrdhorhhgqeenucggtffrrghtthgvrhhnpeehgfefkeegvdffgeehkefgjefgte elgeevleffkeeugfevhfeuveevvdeijeefveenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpegurghnsehlrghnghhilhhlvgdrohhrgh X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Tue, 28 Sep 2021 16:46:16 -0400 (EDT) Subject: Re: what userid do you update system sources under? To: freebsd-questions@freebsd.org References: From: Dan Langille Message-ID: Date: Tue, 28 Sep 2021 16:46:15 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:52.0) Gecko/20100101 PostboxApp/7.0.49 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HJs3z6HwPz4rLr X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=langille.org header.s=fm2 header.b=Qe8PMYZn; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=LIEG+EQM; dmarc=pass (policy=none) header.from=langille.org; spf=pass (mx1.freebsd.org: domain of dan@langille.org designates 64.147.123.21 as permitted sender) smtp.mailfrom=dan@langille.org X-Spamd-Result: default: False [-4.10 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:64.147.123.21]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; DKIM_TRACE(0.00)[langille.org:+,messagingengine.com:+]; DMARC_POLICY_ALLOW(-0.50)[langille.org,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; RCVD_IN_DNSWL_LOW(-0.10)[64.147.123.21:from]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; ASN(0.00)[asn:11403, ipnet:64.147.123.0/24, country:US]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[langille.org:s=fm2,messagingengine.com:s=fm3]; FREEFALL_USER(0.00)[dan]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; SUBJECT_ENDS_QUESTION(1.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; RWL_MAILSPIKE_POSSIBLE(0.00)[64.147.123.21:from]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Sep 2021 20:46:24 -0000 tech-lists wrote on 9/28/21 10:10 AM: > Hi, > > When git updates your system sources, are you updating with a specific > git user, or do you just use root, and if *automatically* refreshing your > tree (like in a cronjob), again as git user or root? Or some other user? Are you referring to /usr/src? for example... I would do that as root. > The reason I ask is that some instructions the quoted prompt updating > the system is $ or % and not #. What way is the "right" way? Usually, root owns /usr/src/ because the building is done as root. -- Dan Langille dan@langille.org From owner-freebsd-questions@freebsd.org Tue Sep 28 21:01:50 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id F04156AC285 for ; Tue, 28 Sep 2021 21:01:50 +0000 (UTC) (envelope-from pete@nomadlogic.org) Received: from mail.nomadlogic.org (mail.nomadlogic.org [66.165.241.226]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mail.nomadlogic.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJsPn48dJz4sn6 for ; Tue, 28 Sep 2021 21:01:49 +0000 (UTC) (envelope-from pete@nomadlogic.org) Received: from [192.168.1.160] (cpe-24-24-163-126.socal.res.rr.com [24.24.163.126]) by mail.nomadlogic.org (OpenSMTPD) with ESMTPSA id 5c1b282a (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO) for ; Tue, 28 Sep 2021 21:01:34 +0000 (UTC) Subject: Re: what userid do you update system sources under? To: freebsd-questions@freebsd.org References: From: Pete Wright Message-ID: Date: Tue, 28 Sep 2021 14:01:32 -0700 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-Rspamd-Queue-Id: 4HJsPn48dJz4sn6 X-Spamd-Bar: -- X-Spamd-Result: default: False [-3.00 / 15.00]; RCVD_TLS_ALL(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[nomadlogic.org:s=04242021]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; ARC_NA(0.00)[]; DKIM_TRACE(0.00)[nomadlogic.org:+]; DMARC_POLICY_ALLOW(-0.50)[nomadlogic.org,quarantine]; NEURAL_HAM_SHORT(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:29802, ipnet:66.165.240.0/22, country:US]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Sep 2021 21:01:51 -0000 On 9/28/21 7:10 AM, tech-lists wrote: > Hi, > > When git updates your system sources, are you updating with a specific > git user, or do you just use root, and if *automatically* refreshing your > tree (like in a cronjob), again as git user or root? Or some other user? for my development systems i have a git checkout named "freebsd", i then create a sym-link from the checkout to /usr/src/. this allows me to update my source tree without elevated permissions, and for my uses is perfectly acceptable (single user, development systems). in a shared environment you may want to have a "bot" account own the checkout, but then ensure your users are all part of the group that the bot account is part of. when building i also make sure i own the approprite directory under /usr/obj. in my case it is /usr/obj/usr/home/pete/git/freebsd. this allows me to build sources as my normal user, only needing elevated privs for the installation steps. -pete -- Pete Wright pete@nomadlogic.org @nomadlogicLA From owner-freebsd-questions@freebsd.org Tue Sep 28 21:18:47 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id BD5526AC0FC for ; Tue, 28 Sep 2021 21:18:47 +0000 (UTC) (envelope-from freebsdlists.admin@protonmail.com) Received: from mail-4325.protonmail.ch (mail-4325.protonmail.ch [185.70.43.25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "protonmail.com", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJsnL4FNXz4tSL for ; Tue, 28 Sep 2021 21:18:46 +0000 (UTC) (envelope-from freebsdlists.admin@protonmail.com) Date: Tue, 28 Sep 2021 21:18:36 +0000 To: Dan Langille From: JB Cc: freebsd-questions@freebsd.org Reply-To: JB Subject: Re: auditdistd - audit trail file retntion Message-ID: In-Reply-To: <587952f9-71e1-590c-aacb-1a4c8be7e053@langille.org> References: <63FzSG9SYK55EYli0V-lgAHWQu0WKoRYoAz1IFKsq8kpIoC3TXLG765IctTawyK_DAYGU4yRzG_MPYFm6bfCujEEMLjPtLumNDhAUcsQO0E=@protonmail.com> <587952f9-71e1-590c-aacb-1a4c8be7e053@langille.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.2 required=10.0 tests=ALL_TRUSTED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM shortcircuit=no autolearn=disabled version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on mailout.protonmail.ch X-Rspamd-Queue-Id: 4HJsnL4FNXz4tSL X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.78 / 15.00]; HAS_REPLYTO(0.00)[freebsdlists.admin@protonmail.com]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[protonmail.com:s=protonmail]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; FREEMAIL_FROM(0.00)[protonmail.com]; R_SPF_ALLOW(-0.20)[+ip4:185.70.43.0/24]; MIME_GOOD(-0.10)[text/plain]; FREEMAIL_REPLYTO(0.00)[protonmail.com]; NEURAL_HAM_LONG(-1.00)[-1.000]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[protonmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[protonmail.com,quarantine]; NEURAL_HAM_SHORT(-0.78)[-0.783]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[protonmail.com]; ASN(0.00)[asn:62371, ipnet:185.70.43.0/24, country:CH]; MID_RHS_MATCH_FROM(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions]; RWL_MAILSPIKE_POSSIBLE(0.00)[185.70.43.25:from] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Sep 2021 21:18:47 -0000 On Tuesday, September 28th, 2021 at 7:34 AM, Dan Langille wrote: > > Date: Mon, 20 Sep 2021 11:07:34 -0400 > > From: Dan Langille dan@langille.org > > To: "freebsd-questions@freebsd.org" freebsd-questions@freebsd.org > > Cc: Pawel Jakub Dawidek pjd@freebsd.org > > Subject: auditdistd - audit trail file retntion > > > > Hello, > > > > I am using auditdistd on FreeBSD 11.4 and 12.2 - I write about audit > > trail files retention. > > > > Is there an option to dispose of older logs in /var/audit/dist ? > > > > So far, it seems like a custom cronjob is in order. Something like: > > > > ??? /usr/bin/find /var/audit/dist -type f -mtime +7 -exec rm {} \; > > > > FYI: I have read up about auditd, /etc/security/audit_control, and the > > audit -e option. They do not apply to auditdistd. > > > > Thank you. > > > This is what I'm using from a periodic daily script: > > /usr/bin/find -E /var/audit/dist -type f -mtime +7 -regex "/var/audit= /dist/[0-9]+.[0-9]+" -exec rm {} \; > > Dan Langille > > dan@langille.org Looks good. You can use the "-delete" flag instead of "-exec rm {} \;" but = it shouldn't make much difference. Also, the `cron' default PATH includes /= usr/bin, so you can probably just use `find' instead of absolute path (that= 's why the "-exec rm" isn't complaining about a missing `rm' program). Again not that it makes much difference, but you can use the exclusion "!" = flag to match the single "*.not_terminated" file, then nuke all other files= inside that dir without needing the "-regex". find /var/audit/dist/ ! -name "*.not_terminated" -type f -mtime +7 -delete Sent with ProtonMail Secure Email. From owner-freebsd-questions@freebsd.org Tue Sep 28 21:24:53 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 3D4086AC987 for ; Tue, 28 Sep 2021 21:24:53 +0000 (UTC) (envelope-from dan@langille.org) Received: from wout5-smtp.messagingengine.com (wout5-smtp.messagingengine.com [64.147.123.21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJswN4Q6Gz4twk for ; Tue, 28 Sep 2021 21:24:52 +0000 (UTC) (envelope-from dan@langille.org) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.west.internal (Postfix) with ESMTP id 902503201E08; Tue, 28 Sep 2021 17:24:51 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Tue, 28 Sep 2021 17:24:51 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=langille.org; h= subject:to:cc:references:from:message-id:date:mime-version :in-reply-to:content-type:content-transfer-encoding; s=fm2; bh=g YtdT5gEblxpZ+OscTjwz0tRA21SsEIu/FTOK9g8FwA=; b=km3nDS1+zDCTeJnW5 7GYnupzZahZQAoBGPQOZQjyiVMr0NcmSlAuZBkrVgqyPY4HrLxEcPorT34TwMYlg cOqwf6hZgF97TS/+UFEWS/dTgBqbWrHtDPu7zaQeTjchuEeHknVVBUo2BWPF+wMI JhvLfGunCkQ8NBm9uLRLhms8xk7qAatS7ecluG09pX2UTukqCb3No4JqEyRdv1PO T0VQh+ugbmST2Keub0YQBuh8Y4KBLBsr1hmI5InI5Wld/252Yo6NxEb59YNS003G Um/PYDUUbi2l1rdTpdQ89/sbakPmoQd9X+1HdeoIlWuui0ydd6lB2wXDm3WoV30J TYdEQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=gYtdT5gEblxpZ+OscTjwz0tRA21SsEIu/FTOK9g8F wA=; b=ujGTyisDGkexxO5klVcLw1Aa8e07DqilI3CzkWML+8jVGXNGxytW8orXV wgYwW1zr3gBXh6nLBn51ERuXt3XJ4Nl13gwSycH/OS1JWhSTLEzeJ+b2gm93VgPt LVoRwiPqwBV2OnFhaK9H8vKJuPnsWTB+A/ERnB9znrZBkCw4g92QYmRHhUcDXcxF MEF59lh1zrp/WnEwsWYNmSR8ROBYAtE/t74BP7yjmz3pnsBZTvhgGvNunR3IqOE6 2hureLga1blKzalTC8J5G8CGcqi+ePaIOvspqZb2YDMO2kcpgaTD/E93WweLAqZ5 /enL9w1i3iEj2abeQAizsUIAOlTdg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudektddgudehjecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepuffvfhfhkffffgggjggtgfesth ejredttdefjeenucfhrhhomhepffgrnhcunfgrnhhgihhllhgvuceouggrnheslhgrnhhg ihhllhgvrdhorhhgqeenucggtffrrghtthgvrhhnpeetleffveeujeetffdujeeugeehff dthfelfeehuddugefhvddvleevjedtjeekveenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpegurghnsehlrghnghhilhhlvgdrohhrgh X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 28 Sep 2021 17:24:50 -0400 (EDT) Subject: Re: auditdistd - audit trail file retntion To: JB Cc: freebsd-questions@freebsd.org References: <63FzSG9SYK55EYli0V-lgAHWQu0WKoRYoAz1IFKsq8kpIoC3TXLG765IctTawyK_DAYGU4yRzG_MPYFm6bfCujEEMLjPtLumNDhAUcsQO0E=@protonmail.com> <587952f9-71e1-590c-aacb-1a4c8be7e053@langille.org> From: Dan Langille Message-ID: <402d471c-2193-49dd-525a-5da749139af9@langille.org> Date: Tue, 28 Sep 2021 17:24:49 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:52.0) Gecko/20100101 PostboxApp/7.0.49 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HJswN4Q6Gz4twk X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=langille.org header.s=fm2 header.b=km3nDS1+; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=ujGTyisD; dmarc=pass (policy=none) header.from=langille.org; spf=pass (mx1.freebsd.org: domain of dan@langille.org designates 64.147.123.21 as permitted sender) smtp.mailfrom=dan@langille.org X-Spamd-Result: default: False [-5.10 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:64.147.123.21]; RCVD_COUNT_THREE(0.00)[4]; DKIM_TRACE(0.00)[langille.org:+,messagingengine.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[langille.org,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FREEMAIL_TO(0.00)[protonmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:64.147.123.0/24, country:US]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[64.147.123.21:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[langille.org:s=fm2,messagingengine.com:s=fm3]; FREEFALL_USER(0.00)[dan]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[64.147.123.21:from]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Sep 2021 21:24:53 -0000 JB wrote on 9/28/21 5:18 PM: > On Tuesday, September 28th, 2021 at 7:34 AM, Dan Langille wrote: > >>> Date: Mon, 20 Sep 2021 11:07:34 -0400 >>> From: Dan Langille dan@langille.org >>> To: "freebsd-questions@freebsd.org" freebsd-questions@freebsd.org >>> Cc: Pawel Jakub Dawidek pjd@freebsd.org >>> Subject: auditdistd - audit trail file retntion >>> >>> Hello, >>> >>> I am using auditdistd on FreeBSD 11.4 and 12.2 - I write about audit >>> trail files retention. >>> >>> Is there an option to dispose of older logs in /var/audit/dist ? >>> >>> So far, it seems like a custom cronjob is in order. Something like: >>> >>> ??? /usr/bin/find /var/audit/dist -type f -mtime +7 -exec rm {} \; >>> >>> FYI: I have read up about auditd, /etc/security/audit_control, and the >>> audit -e option. They do not apply to auditdistd. >>> >>> Thank you. >>> >> This is what I'm using from a periodic daily script: >> >> /usr/bin/find -E /var/audit/dist -type f -mtime +7 -regex "/var/audit/dist/[0-9]+.[0-9]+" -exec rm {} \; >> >> Dan Langille >> >> dan@langille.org > > Looks good. You can use the "-delete" flag instead of "-exec rm {} \;" but it shouldn't make much difference. Also, the `cron' default PATH includes /usr/bin, so you can probably just use `find' instead of absolute path (that's why the "-exec rm" isn't complaining about a missing `rm' program). > > Again not that it makes much difference, but you can use the exclusion "!" flag to match the single "*.not_terminated" file, then nuke all other files inside that dir without needing the "-regex". > > find /var/audit/dist/ ! -name "*.not_terminated" -type f -mtime +7 -delete I'll keep the full path, just because. The -delete option is good. We will use that. Getting rid of regex is good: $ sudo /usr/bin/find /var/audit/dist ! -name "*.not_terminated" -type f -mtime +1 /var/audit/dist/999testingbydan88 /var/audit/dist/999.888 /var/audit/dist/999d Once more, with a typo in the name $ sudo /usr/bin/find /var/audit/dist ! -name "*.not_terminatedd" -type f -mtime +1 /var/audit/dist/20210920075929.not_terminated /var/audit/dist/999testingbydan88 /var/audit/dist/999.888 /var/audit/dist/999d Thank you. -- Dan Langille dan@langille.org From owner-freebsd-questions@freebsd.org Wed Sep 29 00:25:18 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 142A86AE9BE for ; Wed, 29 Sep 2021 00:25:18 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 4HJxwX6wqZz3Pmr for ; Wed, 29 Sep 2021 00:25:16 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id A57A34E6AB; Tue, 28 Sep 2021 17:25:10 -0700 (PDT) From: "Ronald F. Guilmette" To: freebsd-questions@freebsd.org Subject: Upgrading packages (fail) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <4156.1632875110.1@segfault.tristatelogic.com> Content-Transfer-Encoding: quoted-printable Date: Tue, 28 Sep 2021 17:25:10 -0700 Message-ID: <4157.1632875110@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 4HJxwX6wqZz3Pmr X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-1.41 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.90)[-0.901]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[tristatelogic.com]; RCPT_COUNT_ONE(0.00)[1]; MID_RHS_MATCH_FROMTLD(0.00)[]; NEURAL_HAM_SHORT(-1.00)[-0.997]; NEURAL_SPAM_LONG(0.79)[0.787]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 00:25:18 -0000 I have been remiss in not keeping my FreeBSD system fully up to date. I've just now tried to correct that via the following commands and actions= : freebsd-update fetch freebsd-update install pkg upgrade (power cycle / reboot) All seems to have gone mostly smoothly, however there are two things that seem to have gone sideways and I'm utterly perplexed by both. The first is that something in the log file I made while doing the above steps suggests to me that I should have ended up with 12.2-RELEASE-p10 but uname -a is still telling me that I am running 12.2-RELEASE-p7. So what did I do wrong? The second and moere troubling issue is that after the above steps I was left with at least two packages that simply would not work, apparently because of some (non-)compatability issue relating to some things having the following names: libicui18n.so.68 libicuuc.so.68 Firstly, there was Firefox, which complained as follows (and then died): Shared object "libicui18n.so.68" not found, required by "libxul.so" Second there was Postfix which complained (and then died) thusly: ld-elf.so.1: Shared object "libicuuc.so.68" not found, required by "sen= dmail" I see that, because I did "pkg upgrade", I now have the .69 versions of th= e relevant libraries, rather than what I had before, i.e. the .68 versions o= f these libraries. I get that. What I don't get is why the command "pkg upgrade" failed to update my firefox and my postfix, as was obviously required. Again, my question is simple: What did I do wrong? After this I simply did pkg upgrades on firefox and postfix and not everyt= hing seems to be running fine again, but I remain mystified. What oher install= ed packages are now also broken that I just haven't found out about yet? And more to the point, how can I get all those properly upgraded? The FreeBSD Handbook, section 24.2.3.2 seems to be telling me that -might- need to do this? But do I really? This seems rather extreme. pkg-static upgrade -f Note that I have upgraded *neither* to a whole new release of FreeBSD itse= lf, nor even to a new point release of FreeBSD itself. If I had done, then it would make some sense that I would have to update literally EVERY installe= d package on my system, but I haven't. So what command should I use to update just those installed packages, and *only* and *all* of those packages that need to be updated, no more and no less? Regards, rfg From owner-freebsd-questions@freebsd.org Wed Sep 29 00:30:55 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 19E856AEE32 for ; Wed, 29 Sep 2021 00:30:55 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from holgerdanske.com (holgerdanske.com [184.105.128.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "xray.he.net", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJy320X8nz3Pvd for ; Wed, 29 Sep 2021 00:30:53 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=holgerdanske.com; s=nov-20210719-112354; t=1632875445; bh=04tk+Qf6hVmm9aB/PIXi7lsvFKP9+RjCmQlJDDp5dvo=; h=Received:Message-ID:Date:MIME-Version:User-Agent:Subject: Content-Language:To:References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding; b=cVZjl8LUlL81U6Ts1vi+rCQLSpCQOLMppY8EM68rxzq8VgJcJ5EqZ60xqfbykfa1T G80ZtHvJ5dKW2d/9K5/j/YNfBi/ae0k/GZP8MldWOPsKv4hrYtt6rjtMfzv0hFrLfj f8NysGWLJcmvPRs9MwqCmInyuRY+WsAZ5cq9xpC6PzxG4Y8nWXfxvsq35pgUK9asNs O7HBRjTHnZADKw7aigER5LG6wXiUDY03IU5Y6jjViwPLoXcb1mJMTeHltM4CUK4FKJ DyXxUfTu7YlX/3CM0SlKfYa8Cxb+1ZDlkAcXxbDacwHRsUvwvhMp7oLnZ3nBXNblv0 q1totMRpo4RuzBTy31D5zIlJYILH9YPAdZynJm8/jJ7Yg3P01bkhXftz+yX26FERLU /mzNKvP9BFJKAsd5COmJE8x0X4oGBYXxtt6k066sDogHye/6aOqJzzZz5xybN6CXBn tW88diGIwgK5RXB5eEX8k+UULIdfxyyGMTE43hibOVzw0hpyri5/1U6sMcs4oEphaf 3Wuik4vG1JFlRbl1GF9m/V5BO597PAtMbyoX3UaUEUVKEtDfWQgtEWEW/hB5Y/jphu YYtMQ2phjTss92Z/eRkSMlSR/GgatSEQiP+oh7ucvp7UMXu0DTVeom16WZRdeXRyU4 ZUQwlpGgUlUp4SzMyZqir8gY= Received: from 99.100.19.101 (99-100-19-101.lightspeed.frokca.sbcglobal.net [99.100.19.101]) by holgerdanske.com with ESMTPSA (TLS_AES_128_GCM_SHA256:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(128):Mac=AEAD) (SMTP-AUTH username dpchrist@holgerdanske.com, mechanism PLAIN) for ; Tue, 28 Sep 2021 17:30:45 -0700 Message-ID: Date: Tue, 28 Sep 2021 17:30:45 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.1.2 Subject: Re: Upgrading packages (fail) Content-Language: en-US To: freebsd-questions@freebsd.org References: <4157.1632875110@segfault.tristatelogic.com> From: David Christensen In-Reply-To: <4157.1632875110@segfault.tristatelogic.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HJy320X8nz3Pvd X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=holgerdanske.com header.s=nov-20210719-112354 header.b=cVZjl8LU; dmarc=pass (policy=none) header.from=holgerdanske.com; spf=pass (mx1.freebsd.org: domain of dpchrist@holgerdanske.com designates 184.105.128.27 as permitted sender) smtp.mailfrom=dpchrist@holgerdanske.com X-Spamd-Result: default: False [-4.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[holgerdanske.com:s=nov-20210719-112354]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; DKIM_TRACE(0.00)[holgerdanske.com:+]; DMARC_POLICY_ALLOW(-0.50)[holgerdanske.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:6939, ipnet:184.104.0.0/15, country:US]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 00:30:55 -0000 On 9/28/21 17:25, Ronald F. Guilmette wrote: > I have been remiss in not keeping my FreeBSD system fully up to date. > > I've just now tried to correct that via the following commands and actions: > > freebsd-update fetch > freebsd-update install I do 'pkg update' here. > pkg upgrade > (power cycle / reboot) David From owner-freebsd-questions@freebsd.org Wed Sep 29 01:31:39 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 8896B6AFD32 for ; Wed, 29 Sep 2021 01:31:39 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 4HJzP65J7Jz3kFc for ; Wed, 29 Sep 2021 01:31:38 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id 271044E6AB; Tue, 28 Sep 2021 18:31:38 -0700 (PDT) From: "Ronald F. Guilmette" To: freebsd-questions@freebsd.org Subject: Re: Upgrading packages (fail) In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <6069.1632879097.1@segfault.tristatelogic.com> Date: Tue, 28 Sep 2021 18:31:38 -0700 Message-ID: <6070.1632879098@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 4HJzP65J7Jz3kFc X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-1.96 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.97)[-0.969]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[tristatelogic.com]; RCPT_COUNT_ONE(0.00)[1]; MID_RHS_MATCH_FROMTLD(0.00)[]; NEURAL_HAM_SHORT(-1.00)[-1.000]; NEURAL_SPAM_LONG(0.31)[0.313]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 01:31:39 -0000 In message , David Christensen wrote: >> I've just now tried to correct that via the following commands and actions: >> >> freebsd-update fetch >> freebsd-update install > >I do 'pkg update' here. > >> pkg upgrade >> (power cycle / reboot) Wow! Thanks. I did that and then the following pkg upgrade step caused a whole hell of a lot of additional packages installed on my system to get upgraded. Also however, a bunch of stuff got removed, but with no real explanation of why: Installed packages to be REMOVED: abiword: 3.0.4_1 gimp: 2.10.24,2 gimp-app: 2.10.24,1 gimp-gutenprint: 5.3.3_1 libwmf: 0.2.12 wv: 1.2.9_5 So what's up with that? From owner-freebsd-questions@freebsd.org Wed Sep 29 04:29:40 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 7F98166A57F for ; Wed, 29 Sep 2021 04:29:40 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HK3LW4qyWz3vSj for ; Wed, 29 Sep 2021 04:29:39 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 68B325C018D for ; Wed, 29 Sep 2021 00:29:39 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Wed, 29 Sep 2021 00:29:39 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm3; bh=ClCCPnba1eWCkWL5VKnU0duKcNk uyqaKK/+trVB67Vs=; b=3Kk9Se3oHhoWlWa4aMkA9X6V+n/xpvFtwHroZfQT9lo 3ZB8VSQaOM8290N0Vv8bk+XESQrwiToX9wf+QDWaR5VYymyIy0GhHxtGlpSxi1I+ PSSBSvY3LUs3RQlaNXcQb4ulCCibmhUp8+oV6UVIVySYDvAcpPRlmOmZagJyWeMP JTQaKmYsH7CSVie8Fqx97lboHy1wyeC/RxfCPggqQ6/6dvHmMGDZsV7gk32XOnea 45PlxL2eQK7f201koVgMBVNuKBrw1MSHOT3eUzWfGwT7J0ClZ/4Fvmh60FiUXgCX MTXj+UrY4PAfMnYgjOZAmqv5eoQnrDSzqYzFpxmLiIg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=ClCCPn ba1eWCkWL5VKnU0duKcNkuyqaKK/+trVB67Vs=; b=GW5Ze6EBXUt/nwnpt2n613 b29Xu5onRfZpunZUUSEoDnm3GB8BhoAg6z5ME2aG1yiuUmldhzSzaDynskQzSj8w D2cBK3Ex8UZGkdqkHN2IC5c96p9K66/V8anSTpBmEyIXFdYBetEW9gNLooz1gQOW s8963RF0V72V7mIEs5RNY8YvtA3FIPUqJ9zjOeOWQwNb9y7k/GLWjrVSItMfeaAU 4wLvQ6gZ7bI1FdeYOKZTbt/y2NdRQ9A5v4DP2gjFgdmeKI2d/wGUyxpb9NY8qvdC AkoCv6KomEOYIe20MED+AK+ko8dxXZNSQ0KeMoGKilTaVID9sf0h2rVjTWeHtoHw == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudekuddgkedvucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre ertddtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseii hiigshhtrdhnvghtqeenucggtffrrghtthgvrhhnpedtheeigfdvudefkeekvddtfedvte dttdekuddvgeevlefftdekffdujedvhfduteenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehtvggthhdqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Wed, 29 Sep 2021 00:29:38 -0400 (EDT) Date: Wed, 29 Sep 2021 05:29:37 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: Re: what userid do you update system sources under? Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="oedFJJ2SLFqeLB8P" Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 4HK3LW4qyWz3vSj X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b=3Kk9Se3o; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=GW5Ze6EB; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 66.111.4.26) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-5.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; RWL_MAILSPIKE_GOOD(0.00)[66.111.4.26:from]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.0.0/20, country:US]; RCVD_TLS_LAST(0.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[66.111.4.26:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm3]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 04:29:40 -0000 --oedFJJ2SLFqeLB8P Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Sep 28, 2021 at 04:46:15PM -0400, Dan Langille wrote: >Are you referring to /usr/src? for example... > >I would do that as root. When fetching /usr/src with git, are you doing it from system crontab (and specifying a non-root userid), or are you doing it as root, or as some other user/group which has its own crontab? I'm wondering if it's=20 suboptimal from a system security standpoint to run git as the root=20 user. --=20 J. --oedFJJ2SLFqeLB8P Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFT66cACgkQs8o7QhFz NAWiBw//ezHeDOzF8pGRoFb9K9Jubhpuy17guBlf+IRoBJj4SDy77Lh5KMnuCPE9 b/NX1kyXMGusyZIQ3/RaprKBTB8KUAD2AKUUDm0uWZ5VidyHWhgDrRyyFTQNOV6u HvfK1ts7Z76vzmcAL5lkxrG6s0usy3X5qKgeBr0kcByW3r4cQyvAAtSFXV11M5Ut 5l+DKEHDF7GEglQXfhhuW1TfWbt74RBDGCqtT6j+5ENpxjLA+BrK7PdVHf5oogi9 siinxu4cX8VxXFqtBD0BXpWLRwVxvtQSC1x9Zj+4QVUk2Y6QhG/2lskGO9uIond/ sfc3ltTWJbDSulVr8gKdBItSdG/NQ18HVm2BuDXb85meBEA0HZEpdP19vEIDbJ4Y oOKxTOCTb2opU/nWJKbU9ua34EBkRrCvwybylDtvQGPti77FBcoIXBQn+dcLB3dV Z0bNZjkxnf10vwxZ2k+pzIN2Yn2A7BoNLIcXJpy92tH9Jn808CtSlaVnxfwWoSHI lV6psGmlIU2W6igtX2l/VnB0caZ+3J9MWcU9pY3chAcdoxJ0MMUb5UCB2YayIjOW XU/+Z0dg1HSF8YNCutxHJs5jRcdTecqsVc8zdc9IuEfbLpuHLz1cqfhO1jfmK7KH /HCGyWCKIGcWK1SAjwM87DPZh7igdni3FxP9rkW0HLbkbtrzn/s= =354/ -----END PGP SIGNATURE----- --oedFJJ2SLFqeLB8P-- From owner-freebsd-questions@freebsd.org Wed Sep 29 04:49:49 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 2534A66AFE9 for ; Wed, 29 Sep 2021 04:49:49 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HK3nm3SdFz4R3l for ; Wed, 29 Sep 2021 04:49:48 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id 019605C0112 for ; Wed, 29 Sep 2021 00:49:48 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute5.internal (MEProxy); Wed, 29 Sep 2021 00:49:48 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm3; bh=YmLbTT/g5JIlCk2UimfFzL2vPAo 26u1TEVxPA9xaKCw=; b=LAh/FpaOJXYXQdm+fbL84QxwFbIsYJ7R6AKKP4Z11uT wDXSqiUGAQUUEaM3y3keQ6acSazmp3P8605CSZLWbxOUCr7wAesPIL/3zVScAjcq b1+sy58i8wmPYxbO7bdnLvU89pz1Svue3lykg/j9VabUjozPxZZ4pbqHhoththX2 AQGaNbMwCBu5pSUqV6HqSvQtopnF0qrZ8W/qcLvrClxciCNOUB8RNUgbK31NhFK5 Sbm3VdV1JDSrDnwcq6uCs4dO5FSBVmZ8gbXhcN93LntyqZsgQNGX8V8S+DsYKsP8 /6PAlZbwwPlk+Io+kWea6LY+6VPOwlAc2P+SHAfhvGw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=YmLbTT /g5JIlCk2UimfFzL2vPAo26u1TEVxPA9xaKCw=; b=Vpw/nlInP+WdWhOCaSuQjz SfkvLpq2cSRjxX1LPeVQTfo8gxRUg5LBSonrsbAgpfa7uX+05M7zcCLutMcpTuZ1 vQbf3hRUNw41PU1aIL6XXA3gjPqGWaFv1l1tsg1RQNOypF66ICcLnVXtIxDX8V9G I4blf4JKMDUjy1BUU4Wlk5QHbjW5G73of8UbpQz2awAGdZ6n7ckSGvxwaSqpOmZr lnF7Y8IWZCj0CnfzqEz+AEPwf7PxCJpTmhxe04Qhw3KgrO8CLYOt/ryFGSuqcS4i q6z9FQScOGpWw+5GEURzMKqz22u5r+gpll3QKlkDI78MsiSqOv2gKd+q3L7+vqhg == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudekuddgkeehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtro ertddtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseii hiigshhtrdhnvghtqeenucggtffrrghtthgvrhhnpeeivedtleeitdeiteevueelhfegte eujefggedvledthffhfedugfeuudeikeeijeenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehtvggthhdqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Wed, 29 Sep 2021 00:49:47 -0400 (EDT) Date: Wed, 29 Sep 2021 05:49:45 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: Re: what userid do you update system sources under? Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="KcMBUsXsBjJnxZYM" Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 4HK3nm3SdFz4R3l X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b="LAh/FpaO"; dkim=pass header.d=messagingengine.com header.s=fm3 header.b="Vpw/nlIn"; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 66.111.4.26) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-5.49 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; RWL_MAILSPIKE_GOOD(0.00)[66.111.4.26:from]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-0.99)[-0.991]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.0.0/20, country:US]; RCVD_TLS_LAST(0.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[66.111.4.26:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm3]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 04:49:49 -0000 --KcMBUsXsBjJnxZYM Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Sep 28, 2021 at 02:01:32PM -0700, Pete Wright via freebsd-questions= wrote: [snip] Thanks for that, it's a useful approach. The reason I asked was because I was wondering if there was something intrinsically unsafe in using git as the superuser. I mean if a daemon/process makes a socket call outbound, it's usually as the uid/gid of the daemon, the least privileges to get the work done.=20 Maybe my concerns are without foundation in this particular case?=20 or if it was something to be worried about there'd be a warning or=20 some such in the handbook. --=20 J. --KcMBUsXsBjJnxZYM Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFT8GAACgkQs8o7QhFz NAXPfBAAmYQusKQmNb0V1eKl1U/mSFmMA048y103R9Ylm51Rf3A300pYARfaosID U5Me9x/D/M0rOd5sS4L5Mek3dMgDK/hWIc4729kqHmPK3ZWX0zNpSfxilu1RRvAX TTNnBpRCHCt4gmdLBCZGZ3P0nETWiBUCBLK/CgfXQA0fWIVJVA1pswA1tTLU8/JP iSI0nKaE3WfAgeQNVg9hEdmfjzU9N0Fi0kc4PYVPAbmXOxyRdcgAQm2YfIMh6ULY 8aIODNXChzB6jxkK1V33KBM3pgZ+D4RLsoEi3Uxg/UUod7h5jFe9yUMxcPothZgY 1PoFP+5mfHA07UpXpZlsQhdq5JJ24tG4BCDy13Y8mRMgca6RaxMCF0JFNmsYNgPe xRONI47ecvfnB2j/oQN13EG0LpGP2W6hX3LaenJh00DKpZWJx2gNBh2XAgiSSSca HT1XrktHX6CmkJNVhAbPgNBICNodTfJVYVB1iAGugpPRdnRiXvR2qGH4R2MO+Iw+ 4ohKsCTxfdAl5HIkS/kR23niyz7qYT2JjqKJM+/Fg/pdgHZTYEZpy83Isla1et4j 8Uhn1PowEptHsIjhAYGt4yz5vHGqO4mfQ5IyK1liMMUNuNg0cO1xlZMzgBAI/aUG qSS7smhI1QUDDwIlJbhdq5Pc6algM6z3vg1VtlsZ0Cmq54IyAiY= =Uchz -----END PGP SIGNATURE----- --KcMBUsXsBjJnxZYM-- From owner-freebsd-questions@freebsd.org Wed Sep 29 05:48:32 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 509C966C988 for ; Wed, 29 Sep 2021 05:48:32 +0000 (UTC) (envelope-from grahamperrin@gmail.com) Received: from mail-wm1-x32c.google.com (mail-wm1-x32c.google.com [IPv6:2a00:1450:4864:20::32c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HK55W4jchz4TSk for ; Wed, 29 Sep 2021 05:48:31 +0000 (UTC) (envelope-from grahamperrin@gmail.com) Received: by mail-wm1-x32c.google.com with SMTP id j27so914324wms.0 for ; Tue, 28 Sep 2021 22:48:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding:content-language; bh=AONd2cLjHlErjCBu3Zd/Xte42Yx3kT+XtsIyluXYknI=; b=i/ybou1jZJyW3ma8i6YnFS5/JzPSwTNGJLtpO5hajcO/yxlvsSEOGY0uQARdhiMXLr AW88MiReCFRvvOgvt8tkxqaZcfZdd0dMPRbIrGld5P0xqd7doowjbgEKsQbqXbrB/b4l jZoGmmrfuJDbhJjLemJ7Gy3Y2Trqpdd/DypkGcy5PbpJVf076vo4NP3XSgXSXAkHkQPY xmBGZ6DtbdX0Q0QfZx8/f59M/hkeL4YcB4PYaEZwN2Wdi/WCMjO7Z+JdZ3etlLVWIESs oCCFlmn216ZevlkUq0p5uEAlfCeQB6UgHncaKXh5F/lJMeYo7nOU+C8t3xkI93RGdrYX HCHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=AONd2cLjHlErjCBu3Zd/Xte42Yx3kT+XtsIyluXYknI=; b=e41DRcbb1ZneCqeQGWh4RvTqO1DOte/Y8fKXNwNoqhPKPBSbt6O07Qh8BjtFkXUv2v lU2vPzIfMco4/SkGTHPeHhgJifMD7AzX6j/06EuJDMAtSGX6mdTOsKpPoMw0ma2JfaH6 Eb8aGfun59/U13UmCD7AZkCFGQuU8AjsdkdH+v8TsaznSkeUBslh0RfTI400Pxi/0RZM ibNNjZhrkUzumdtxg7wWehG7RqrwB/VdT6zddCp6f2FiSOIdyvUTMUR6ZCkKRw17b2fw fIZ4spiYv/SFm3XVYAC/TohUKO5SWAx5Ve8si6JqOuJm5Wr4U4sg5lPBaixh2TqrFZAC 868w== X-Gm-Message-State: AOAM5317dcxKXlgefjfinB6Ng35nM5H6z9qwZSphOsf4dPIA1JZr3Cx5 jX+mzgEqw/k4IhEeMW9aye+NQba/cGs= X-Google-Smtp-Source: ABdhPJyL3Bb/DqYKewQ4/H02fCZ45jilR18OAkw04ZYV/td3/Ha5kYY502xd4ApzzMMllS5Euc/rJA== X-Received: by 2002:a7b:c390:: with SMTP id s16mr8914652wmj.132.1632894503419; Tue, 28 Sep 2021 22:48:23 -0700 (PDT) Received: from ?IPv6:2001:470:1f1c:a0::2? (tunnel642390-pt.tunnel.tserv1.lon2.ipv6.he.net. [2001:470:1f1c:a0::2]) by smtp.gmail.com with ESMTPSA id z7sm424322wmi.12.2021.09.28.22.48.22 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 28 Sep 2021 22:48:22 -0700 (PDT) Subject: Unexpected removal of packages (was: Upgrading packages (fail)) To: freebsd-questions@freebsd.org References: <6070.1632879098@segfault.tristatelogic.com> From: Graham Perrin Message-ID: <8b710afa-3962-5319-f39f-f038096d65c4@gmail.com> Date: Wed, 29 Sep 2021 06:48:21 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 MIME-Version: 1.0 In-Reply-To: <6070.1632879098@segfault.tristatelogic.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-GB X-Rspamd-Queue-Id: 4HK55W4jchz4TSk X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b="i/ybou1j"; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of grahamperrin@gmail.com designates 2a00:1450:4864:20::32c as permitted sender) smtp.mailfrom=grahamperrin@gmail.com X-Spamd-Result: default: False [-2.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_SPAM_SHORT(1.00)[1.000]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::32c:from]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 05:48:32 -0000 On 29/09/2021 02:31, Ronald F. Guilmette wrote: > … removed, but with no real explanation of why: > > Installed packages to be REMOVED: > abiword: 3.0.4_1 > gimp: 2.10.24,2 > gimp-app: 2.10.24,1 > gimp-gutenprint: 5.3.3_1 > libwmf: 0.2.12 > wv: 1.2.9_5 Without seeing the scrollback in your terminal, it's hard to tell why. When you try to (re)install each one, is there any issue? From owner-freebsd-questions@freebsd.org Wed Sep 29 06:30:37 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id BF4EC66CDCE for ; Wed, 29 Sep 2021 06:30:37 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 4HK6245Hw6z4Y0t for ; Wed, 29 Sep 2021 06:30:36 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id 1A20F4E6B8; Tue, 28 Sep 2021 23:30:35 -0700 (PDT) From: "Ronald F. Guilmette" To: freebsd-questions@freebsd.org Subject: Re: Unexpected removal of packages (was: Upgrading packages (fail)) In-Reply-To: <8b710afa-3962-5319-f39f-f038096d65c4@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <14577.1632897034.1@segfault.tristatelogic.com> Date: Tue, 28 Sep 2021 23:30:35 -0700 Message-ID: <14578.1632897035@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 4HK6245Hw6z4Y0t X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-1.28 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.98)[-0.977]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[tristatelogic.com]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; MID_RHS_MATCH_FROMTLD(0.00)[]; NEURAL_SPAM_SHORT(1.00)[1.000]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 06:30:37 -0000 In message <8b710afa-3962-5319-f39f-f038096d65c4@gmail.com>, Graham Perrin wrote: >> >> Installed packages to be REMOVED: >> abiword: 3.0.4_1 >> gimp: 2.10.24,2 >> gimp-app: 2.10.24,1 >> gimp-gutenprint: 5.3.3_1 >> libwmf: 0.2.12 >> wv: 1.2.9_5 > > >Without seeing the scrollback in your terminal, it's hard to tell why. > >When you try to (re)install each one, is there any issue? Well, apparently not. Once I had done all of the other stuff, specifically "pkg update" and then another pass of "pkg upgrade" I just did: pkg install abiword pkg install gimp and that got all of the above reinstalled and nicely updated. So I'm a happy camper now, but I'm still totally perplexed as to why uname -a is still showing my as running 12.2-RELEASE-p7 rather than 12.2-RELEASE-p10 and also I'm still totally perplexed as to why my firefox and postfix didn't get properly reinstalled/upgraded when I previously did just "pkg upgrade" (thus causing those two to fail). Sometimes I think that the "new" pkg system still has some rough edges. Regards, rfg From owner-freebsd-questions@freebsd.org Wed Sep 29 07:33:58 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id A418366DAA1 for ; Wed, 29 Sep 2021 07:33:58 +0000 (UTC) (envelope-from idefix@fechner.net) Received: from anny.lostinspace.de (anny.lostinspace.de [IPv6:2001:608:a02::33]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HK7R964fWz4dlw for ; Wed, 29 Sep 2021 07:33:57 +0000 (UTC) (envelope-from idefix@fechner.net) Received: from server.idefix.lan (032-137-067-156.ip-addr.inexio.net [156.67.137.32]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: idefix@fechner.net) by anny.lostinspace.de (Postfix) with ESMTPSA id D9B68AEAAA for ; Wed, 29 Sep 2021 09:33:47 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fechner.net; s=default; t=1632900827; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=2v8wxlBzORFA5vs0h6zvQOxnrFQb2uZcKB+vaAmWx38=; b=Se6fP1oIps1ErOiIRHWkO/FSgnXaV3CcnbidgiXA4MzsxZH7GzqjRJSOpZE5K3t3Dv+sbj CKJLChn6JEZNEAiYO51eyBli+pCg22qW1l6aHlRfPxEApEu+hv9QB5RGUxCY78fczbJlU8 mdvxNyUfLh7DRp0VoQlvb/1Jw+dwEag= Received: from [IPv6:2a02:6d40:369a:b401:2012:682c:efb8:b20d] (unknown [IPv6:2a02:6d40:369a:b401:2012:682c:efb8:b20d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by server.idefix.lan (Postfix) with ESMTPSA id 72EC3547433 for ; Wed, 29 Sep 2021 09:33:47 +0200 (CEST) Subject: Re: Unexpected removal of packages (was: Upgrading packages (fail)) To: freebsd-questions@freebsd.org References: <14578.1632897035@segfault.tristatelogic.com> From: Matthias Fechner Message-ID: Date: Wed, 29 Sep 2021 09:33:45 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 MIME-Version: 1.0 In-Reply-To: <14578.1632897035@segfault.tristatelogic.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-Rspamd-Server: anny.lostinspace.de X-Rspamd-Queue-Id: 4HK7R964fWz4dlw X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=fechner.net header.s=default header.b=Se6fP1oI; dmarc=pass (policy=none) header.from=fechner.net; spf=pass (mx1.freebsd.org: domain of idefix@fechner.net designates 2001:608:a02::33 as permitted sender) smtp.mailfrom=idefix@fechner.net X-Spamd-Result: default: False [-5.70 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; TO_DN_NONE(0.00)[]; RCVD_DKIM_ARC_DNSWL_MED(-0.50)[]; RCVD_COUNT_THREE(0.00)[3]; RCVD_IN_DNSWL_MED(-0.20)[2001:608:a02::33:from]; DKIM_TRACE(0.00)[fechner.net:+]; DMARC_POLICY_ALLOW(-0.50)[fechner.net,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:5539, ipnet:2001:608::/32, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[156.67.137.32:received]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[fechner.net:s=default]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[fechner.net:dkim]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 07:33:58 -0000 Am 29.09.2021 um 08:30 schrieb Ronald F. Guilmette: > but I'm still totally perplexed as to why uname -a > is still showing my as running 12.2-RELEASE-p7 rather than 12.2-RELEASE-p10 use freebsd-version for this with the following options:      -k          Print the version and patch level of the installed kernel.                  Unlike uname(1), if a new kernel has been installed but the                  system has not yet rebooted, freebsd-version will print the                  version and patch level of the new kernel.      -r          Print the version and patch level of the running kernel.                  Unlike uname(1), this is unaffected by environment variables.      -u          Print the version and patch level of the installed userland.                  These are hardcoded into freebsd-version during the build. Gruß Matthias -- "Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the universe trying to produce bigger and better idiots. So far, the universe is winning." -- Rich Cook From owner-freebsd-questions@freebsd.org Mon Sep 27 11:18:19 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 4E7FA6B32E4 for ; Mon, 27 Sep 2021 11:18:19 +0000 (UTC) (envelope-from german-support@systemdfree.de) Received: from relay.yourmailgateway.de (relay.yourmailgateway.de [185.244.192.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "*.netcup.net", Issuer "RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJ0Vx5rZ0z4qsG for ; Mon, 27 Sep 2021 11:18:17 +0000 (UTC) (envelope-from german-support@systemdfree.de) Received: from relay01-mors.netcup.net (localhost [127.0.0.1]) by relay01-mors.netcup.net (Postfix) with ESMTPS id 4HJ0Vp0fbHz7wNj for ; Mon, 27 Sep 2021 13:18:10 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=systemdfree.de; s=key2; t=1632741490; bh=sat8QpKMl3rRlflTuLMCHk73xMqhcVo11c9AnP5J7wA=; h=Subject:Reply-To:References:To:From:Date:In-Reply-To:From; b=JfKmjD7AE0XLLdhbyWV2oLhYtj19OX7SNBnLstsb3vYoK6v9XhhDzI+gvDJuqF2lR hct/t6ZPeNtRHRJ6VXN5Cc6Ev798/pR0Ei2OrXzbrpNH8LoaQ0XKi4I4aTDC9Bci0l FklOtn3Of8WT+FCpbs+6VpNmeV7TsE26mCKEXouTbkiOfP0mu8s7MOrGMYynw4Nfpm fI74Fqp5tRquDzVACTgmHAAa6pyjyRDWAbEg/DuAKCPZ8Ujs/q4XZnhuEEfGOGu6w8 OyRqFVYqq4qDL2kAbKrsiWTe0h41Ha55pSQo0XlvKLcUrIivY1IOSZLQOkxzjJ7ql7 kPlHYrDb0HYrA== Received: from policy01-mors.netcup.net (unknown [46.38.225.35]) by relay01-mors.netcup.net (Postfix) with ESMTPS id 4HJ0Vp0Hwhz7wL6 for ; Mon, 27 Sep 2021 13:18:10 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at policy01-mors.netcup.net X-Spam-Flag: NO X-Spam-Score: -2.9 X-Spam-Level: X-Spam-Status: No, score=-2.9 required=6.31 tests=[ALL_TRUSTED=-1, BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mx2e69.netcup.net (unknown [10.243.12.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by policy01-mors.netcup.net (Postfix) with ESMTPS id 4HJ0Vn3gbfz8tL5 for ; Mon, 27 Sep 2021 13:18:09 +0200 (CEST) Received: from [IPv6:2a02:8071:2b95:b700::87c] (unknown [IPv6:2a02:8071:2b95:b700::87c]) by mx2e69.netcup.net (Postfix) with ESMTPSA id 7383714002E for ; Mon, 27 Sep 2021 13:18:08 +0200 (CEST) Received-SPF: pass (mx2e69: connection is authenticated) Subject: Request for cooperation for a german forum Reply-To: german-support@systemdfree.de References: <9687abde-4ae0-4478-3d43-453155e6c247@systemdfree.de> To: freebsd-questions@FreeBSD.org From: Systemdfree X-Forwarded-Message-Id: <9687abde-4ae0-4478-3d43-453155e6c247@systemdfree.de> Message-ID: Date: Mon, 27 Sep 2021 13:18:08 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.12.0 MIME-Version: 1.0 In-Reply-To: <9687abde-4ae0-4478-3d43-453155e6c247@systemdfree.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-PPP-Message-ID: <163274148872.24144.6539948304538361540@mx2e69.netcup.net> X-PPP-Vhost: systemdfree.de X-NC-CID: ZrhBklDw55mUBEPxdQp8Akd+vA43GzZVg8wYtNEbfEzNYnarFlTJxCBK4Goo X-Rspamd-Queue-Id: 4HJ0Vx5rZ0z4qsG X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=systemdfree.de header.s=key2 header.b=JfKmjD7A; dmarc=none; spf=pass (mx1.freebsd.org: domain of german-support@systemdfree.de designates 185.244.192.111 as permitted sender) smtp.mailfrom=german-support@systemdfree.de X-Spamd-Result: default: False [-3.50 / 15.00]; HAS_REPLYTO(0.00)[german-support@systemdfree.de]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_COUNT_FIVE(0.00)[5]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; R_DKIM_ALLOW(-0.20)[systemdfree.de:s=key2]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:185.244.192.111]; MIME_GOOD(-0.10)[text/plain]; REPLYTO_ADDR_EQ_FROM(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; TO_DN_NONE(0.00)[]; DKIM_TRACE(0.00)[systemdfree.de:+]; NEURAL_HAM_SHORT(-1.00)[-0.998]; RCVD_IN_DNSWL_NONE(0.00)[185.244.192.111:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; DMARC_NA(0.00)[systemdfree.de]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:197540, ipnet:185.244.192.0/22, country:DE]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-Mailman-Approved-At: Wed, 29 Sep 2021 07:56:45 +0000 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Sep 2021 11:18:19 -0000 Hello! We are a German support forum for systemd free distributions. We have been around since 2017, switched to a new forum software (Discourse) in April. Our old forum is still reachable at the URL https://systemdfree.de, and the new forum is reachable at https://systemdfree.org. Funding is secured, so the forum will not be shut down in the next few months or even years. We want to build a german speaking community around systemd free operating systems. We want to exchange and bundle experiences and knowledge, for all questions around distributions based on OpenRC, S6, S66, Runit and others, to make systemd free Linux more known and accessible, also especially distribution specific questions. Target group are mainly German speaking users who don’t speak English well. We invite all interested people to cooperate, to link to systemdfree.org, so that also your distribution will be more known and accessible for all (German speaking). If desired, we can also install an internal translator (forum feature), so you can start, or even forever, with support in English, or even in your native language. What do you think about this idea? It would be a win-win situation for both sides! Please give us feedback! With kind regards The team of systemdfree.org From owner-freebsd-questions@freebsd.org Wed Sep 29 07:57:00 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 2F73666E536 for ; Wed, 29 Sep 2021 07:57:00 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: from mail-vs1-xe2b.google.com (mail-vs1-xe2b.google.com [IPv6:2607:f8b0:4864:20::e2b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HK7xl35hqz4gZj for ; Wed, 29 Sep 2021 07:56:59 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: by mail-vs1-xe2b.google.com with SMTP id l19so1899409vst.7 for ; Wed, 29 Sep 2021 00:56:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=b0ZOPXik9c9fb8dftyw04kaFRcrD/5Op6km9R5K41Cc=; b=prkwMdXIRNou0GOr/HfvGRFrPolanF8W4wL6u4X1riokeKwgjwnvoGF+U4fjFoXdzl KjAWbc579bWvosk9G4Knb663uCFMiMmRemyLq0BnFbmMNaFzM0D9veqkvKqhpz0wv74X +IDDqz8UGAOMjRtfJ5P0CSaEhNoK1lfH+z5CR7bxIihjwuOIZPgWMci/qROsHceiHWf1 Or1LgaOBjK/EMMD0KgTmg3Dc0MuQ9ZzCp4B9pFvJ2L65XqWrsUncBL8oFX9CHEdInS9O lCR12kZXYWQA8NE0pJbXFf9Ug7AEX49Elq6GMIb92EUefUm0WuIRkBWwOSawv43n4sP4 ECJQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=b0ZOPXik9c9fb8dftyw04kaFRcrD/5Op6km9R5K41Cc=; b=NJ+FyzsQPGMuBbPZufd8yh2BYB3oqFwh454r9bxLEQY/aHCwohCCg2n33l3Av5zx9d vkf3ubCz4JFxeJvCqaIkoeKZlRzrAHZNs1wtx+A514T5N6zh0EldIQ3+z0IWkH1vhS6i MJzICYc476zK+06A7ihzr50FcdtsjCvUiAiJjGyCN0HnmgyDSVeFPCOsBEgGTMIpdm3X muCKIVcArqJOppQyJd7eB0IbuON5TRdCWQ/Ur4CY1xDy+OCZkU186UGZE8ns+ibPq4nZ xi3L5kaexewKsrEApxQopvKhnELKUKMIzwshvVZ/u7A2TyTp3DKW2H6XOp0cQjZw7jPK /1Sg== X-Gm-Message-State: AOAM530VtDy4yBd+i751UpBd96+FGonq/P/GlF1w81niD4tsVYBLZUx9 RD0HNqJU7ol8wYyYMcA65VFsxl9VAegOum2C21CKlg4AXRx6y1aG X-Google-Smtp-Source: ABdhPJyMnW0SlUa+VzKduH/E5bHM0xg4Z+4WpTheB1wX0Fc9Wu/U0TwQED67tLU1cIf9b9mQ8SviEJ8xuB7hQa9f8LU= X-Received: by 2002:a67:fe4f:: with SMTP id m15mr1141971vsr.2.1632902218768; Wed, 29 Sep 2021 00:56:58 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a59:5706:0:b0:231:f367:1438 with HTTP; Wed, 29 Sep 2021 00:56:58 -0700 (PDT) In-Reply-To: References: From: grarpamp Date: Wed, 29 Sep 2021 03:56:58 -0400 Message-ID: Subject: Re: what userid do you update system sources under? To: freebsd-questions@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 4HK7xl35hqz4gZj X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=prkwMdXI; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of grarpamp@gmail.com designates 2607:f8b0:4864:20::e2b as permitted sender) smtp.mailfrom=grarpamp@gmail.com X-Spamd-Result: default: False [-2.01 / 15.00]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; TO_DN_NONE(0.00)[]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-0.01)[-0.007]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; SUBJECT_ENDS_QUESTION(1.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::e2b:from]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 07:57:00 -0000 > I was wondering if there was something > intrinsically unsafe in using git as the superuser. I mean if a > daemon/process makes a socket call outbound, it's usually as the uid/gid > of the daemon, the least privileges to get the work done. > Maybe my concerns are without foundation in this particular case? > or if it was something to be worried about there'd be a warning or some such in the handbook. Wire protocols... such as git, rsync, ssh, https, etc... the client interprets what the server sends, so exploits can and do happen that way. Remote servers should be considered untrusted. TLS pubkeys should be verified and pinned. Those binaries always full of bugs/sploits themselves. Source code should be considered suspect. The closed source CPU and NIC hardware considered owned by dark enemies and spies. Etc. There are lots of reasons to never use uid 0. Ask why use 0, try finding other ways first. Excepting a few files and dirs, you could chown -Rh 65000:65000 / chmod -Rh -s,ugo-w / mount up the homedirs and the system and users would run just fine. As far as storing and compiling src files, stored by 0 compiled by 60002 provides the same isolation from 60002 as stored by 60001 compiled by 60002. The world should be compiled by !=0. Even making images could avoid 0. Only install needs 0. It's fairly common to use other UID or read-only mounts to keep from accidentally munging sources, etc. Security is a continuum, from powered down and unusable, to wide open to the world and exploited. Those who start learning by trying crazy things like the ch* above, seeing and fixing what breaks, usually better off than depending on some handbooks to teach them everything. Have fun :) From owner-freebsd-questions@freebsd.org Tue Sep 28 09:09:37 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 7206967A0B5 for ; Tue, 28 Sep 2021 09:09:37 +0000 (UTC) (envelope-from luizgreff@gmail.com) Received: from mail-yb1-xb2c.google.com (mail-yb1-xb2c.google.com [IPv6:2607:f8b0:4864:20::b2c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HJYc043h8z4fqX for ; Tue, 28 Sep 2021 09:09:36 +0000 (UTC) (envelope-from luizgreff@gmail.com) Received: by mail-yb1-xb2c.google.com with SMTP id z5so30234517ybj.2 for ; Tue, 28 Sep 2021 02:09:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:from:date:message-id:subject:to; bh=apOp/1hIr0DGv0GSR5dqd0+E6B2wEIw/AQc4GIiZF4w=; b=ALHz/DX2JbNtnBsaY7XFBWwBbGtjFpg/CBBYkgHuPANV4t4Xi+1CBvIZVUDH2VI3Kk 0pq0LA4ROK2CE++iocVHpN/r6Zi5XzohmuFu4ZvPib+GE8kXvG0owUjMbICy/NKPzzKb Q8vGAtJOo3QDINEAE0r8Z/T03wJt/WcKEV1p8JtvQpGE1P58tU9H/csrgO3HFn+0bN6u D3BgTtvBvvJf/Ffh4/SRQp9Q5AtqRTxmarJ4HxWOP8Etc2ts+5CB7xrSSJa8klu8PMAp HNcSkSOA4RbvAEWvSiiTAoCX/jhWyuoYd3YZfxSskD+2VvCm4vE0GS05qcQL/Tnxz4Ec H8Og== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=apOp/1hIr0DGv0GSR5dqd0+E6B2wEIw/AQc4GIiZF4w=; b=4+D2U6JUpZm5WPmHPU+Eb8X1V0+0gLz49uSKnhvDeiWWzIZ48+9RMpWNhLDz4Ue+Ie UfoEc8Uple9RGoEV3wmJChWavzrc5dip9AuYIWvZuzM5R7iavZb0HbwcY5kn2W8xfuTl PrD4UECoG3FizUwsRAGobEm8MC8ZmIb264W7C/XfXITsDs48NA2Fw20S6ILbzZn0RbGZ XdcGYt++hO6Ews49gOFtxIdn9vF+0+PIyd6sQ88LT8ojqNJSPP+DAADIxmZiklYWVyAz uGrgiUz3CXzIkUGewTop8P2Cj4g0qrZI20ugPc6G/izli4kneBLB99xKyIng3RAG3uwJ ag2Q== X-Gm-Message-State: AOAM531v3vDSMzBS6eqIfRR0MxIKxXFicYTbtSlY3Cs4YVeRUVN5hfQo a+zPM/sjhp2KXL1tDehnuKgt+QZ5XO5muVD1v+TpxDg1oLCAmA== X-Google-Smtp-Source: ABdhPJzEeh99s3UyjDCqjRga+Hnie3CXt4TK5AQcIH2VBJ+Cfh/SOMMEYdw7PU3Pc/xC8rV+WoFNfAVi14wOq0vD5lc= X-Received: by 2002:a25:3385:: with SMTP id z127mr5231968ybz.238.1632820175819; Tue, 28 Sep 2021 02:09:35 -0700 (PDT) MIME-Version: 1.0 From: Luiz Greff Date: Tue, 28 Sep 2021 06:08:57 -0300 Message-ID: Subject: Login to FreeBSD To: FreeBSD , Luiz Greff X-Rspamd-Queue-Id: 4HJYc043h8z4fqX X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b="ALHz/DX2"; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of luizgreff@gmail.com designates 2607:f8b0:4864:20::b2c as permitted sender) smtp.mailfrom=luizgreff@gmail.com X-Spamd-Result: default: False [-3.26 / 15.00]; FREEMAIL_FROM(0.00)[gmail.com]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; MID_RHS_MATCH_FROMTLD(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-0.26)[-0.263]; FREEMAIL_TO(0.00)[freebsd.org,gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::b2c:from]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-Mailman-Approved-At: Wed, 29 Sep 2021 07:57:50 +0000 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Sep 2021 09:09:37 -0000 *Dear Friends, Greetings!* I am Luiz Alberto Greff, from Guarulhos, S=C3=A3o Paulo, Brazil, student of Computation Engineering of Univesp, S=C3=A3o Paulo State Virtual University= . For various reasons, even historical ones, and especially to attend my classes, I want to use the FreeBSD, because I know it's the better operating system. On 01Sep2021, I downloaded the following installation files from the FreeBSD website: *File Name File Size Date* FreeBSD-13.0-Release-i386-disc1.iso 792469504 2021-Apr-09 06:58 FreeBSD-13.0-Release-i386-memstick.img 872096256 2021-Apr-09 07:2= 6 https://download.freebsd.org/ftp/releases/i386/i386/ISO-IMAGES/13.0/ FreeBSD-13.0-Release-amd64-disc1.iso 971974656 2021-Apr-09 07:24 FreeBSD-13.0-Release-amd64-memstick.img 1090900480 2021-Apr-09 07:53 https://download.freebsd.org/ftp/releases/amd64/amd64/ISO-IMAGES/13.0/ With the SourceForge's Win32 Disk Imager v0.90, I installed *"FreeBSD-13.0-Release-i386-memstick.img"* on a flash drive, using a Pentium 4 / Win Xp-SP3 / 32-bit computer. With the flash drive I installed FreeBSD on a Hard Drive. All normal, until FreeBSD required Login / Password and rejected all login attempts. I tried everything. Where did I go wrong? How can I finally open the FreeBSD working screen? *Thank you very much for your attention and help,* Luiz Alberto Greff *Guarulhos - S=C3=A3o Paulo - Brazil* *Luiz Alberto Greff / **Ci=C3=AAncia e Tecnologia / * *Guarulhos-SP* From owner-freebsd-questions@freebsd.org Wed Sep 29 08:16:04 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 668A966F092 for ; Wed, 29 Sep 2021 08:16:04 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 4HK8Ml3jnwz4jF4 for ; Wed, 29 Sep 2021 08:16:03 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id E623F4E6B8; Wed, 29 Sep 2021 01:16:02 -0700 (PDT) From: "Ronald F. Guilmette" To: freebsd-questions@freebsd.org Subject: Re: Unexpected removal of packages (was: Upgrading packages (fail)) In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <14954.1632903362.1@segfault.tristatelogic.com> Date: Wed, 29 Sep 2021 01:16:02 -0700 Message-ID: <14955.1632903362@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 4HK8Ml3jnwz4jF4 X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-1.28 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.98)[-0.976]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[tristatelogic.com]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; MID_RHS_MATCH_FROMTLD(0.00)[]; NEURAL_SPAM_SHORT(1.00)[0.998]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 08:16:04 -0000 In message , Matthias Fechner wrote: >{... instructions for getting version(s) snipped...} OK, so here's what I get: % freebsd-version -k 12.2-RELEASE-p7 % freebsd-version -r 12.2-RELEASE-p7 % freebsd-version -u 12.2-RELEASE-p10 The evidence mismatch doesn't seem proper. So now what should I do? From owner-freebsd-questions@freebsd.org Wed Sep 29 08:56:34 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 1ABC466F940 for ; Wed, 29 Sep 2021 08:56:34 +0000 (UTC) (envelope-from m.e.sanliturk@gmail.com) Received: from mail-vs1-xe2f.google.com (mail-vs1-xe2f.google.com [IPv6:2607:f8b0:4864:20::e2f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HK9GT0PSpz4pPh for ; Wed, 29 Sep 2021 08:56:33 +0000 (UTC) (envelope-from m.e.sanliturk@gmail.com) Received: by mail-vs1-xe2f.google.com with SMTP id y141so2058922vsy.5 for ; Wed, 29 Sep 2021 01:56:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=hp9evUHhCFeP6hIxWhNMqwHeVTXgaX7FhUG8y9B50T0=; b=dCJGNyrFj6QvniJf13alRAOMfvQm6GDLZRFKzUGm9vQazAgLgxihiwchQ0BnNgvWx/ 25wBsoub12g/fXHHun/KwBmGmSel2p6qWb/I+k58AJahkPbtVtw0FwkaY9nJOv8WmUWv Jd9tGwdRlMMHRiABUmqkDgbhxnBPG0ueit6o9kPiXH0cOMpVbUnqYi2GYRQfb8cAh3CU C6HVwETCvW65kLtItW2ZzYuxzLH54UJXfasOBsfVdO/q96TekraBAT87uel5u/qftO4n +FE968Bwbue+pLpI8io0jEZQPfhX2ZrjrRL04xdpJswwfhT2riMgY/JmrFTIcj6WVzAS T8Zg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=hp9evUHhCFeP6hIxWhNMqwHeVTXgaX7FhUG8y9B50T0=; b=mQfzvJSRup+YqqVpw65AGEauYMm+O2DVh7v7J2+INEXQ5LN1ceu64dU79GKx1Kw8xa smD9yn5eFOdN9EKM01bwQDTXF/svesoDnrORBkZplQJQ8L2N7dzLW0FfZWDtHVNAnlUZ xxN9hbUTnQp42U+jHo+m0P0hnshOrVQEwmmHvk7b+zCn8GMRoTgBNDBwMyNmtVVE3Ui7 /xykIcJ8vhFfcb6ZVDIFoXxAG2PLePujJiMLjEKmxp4TXAFzOES1Yjahy4DL7Eb1xi4Y KurS8Lj6zNEX4EfBUJexuZbCy3TUCa5nRgDhTKWePl0JTKjshYKZ8H2jOIaFKBR2SIkb W8uQ== X-Gm-Message-State: AOAM530bD7wfOVkGnfRZlp+8+nEhp7o/xPmXaeiF+yeZroKpPj0bPlki ddF8OMyPUEUaIVpcwhZBqYSwiwRA6P76otYgk6Ibsd2PNlU= X-Google-Smtp-Source: ABdhPJygHBylVC0TwwIlhbuLEFj19SGuONjnBFxGjCGfVcxoGfJy9vCpYHLL43YQAWos9DqzSEdoH4HPyyBFwNyyx8c= X-Received: by 2002:a67:f685:: with SMTP id n5mr9721340vso.31.1632905792662; Wed, 29 Sep 2021 01:56:32 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Mehmet Erol Sanliturk Date: Wed, 29 Sep 2021 11:55:56 +0300 Message-ID: Subject: Re: Login to FreeBSD To: Luiz Greff Cc: FreeBSD X-Rspamd-Queue-Id: 4HK9GT0PSpz4pPh X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=dCJGNyrF; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of mesanliturk@gmail.com designates 2607:f8b0:4864:20::e2f as permitted sender) smtp.mailfrom=mesanliturk@gmail.com X-Spamd-Result: default: False [-4.00 / 15.00]; FREEMAIL_FROM(0.00)[gmail.com]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; MID_RHS_MATCH_FROMTLD(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; TAGGED_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::e2f:from]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 08:56:34 -0000 On Wed, Sep 29, 2021 at 10:58 AM Luiz Greff wrote: > *Dear Friends, Greetings!* > > I am Luiz Alberto Greff, from Guarulhos, S=C3=A3o Paulo, Brazil, student = of > Computation Engineering of Univesp, S=C3=A3o Paulo State Virtual Universi= ty. > > For various reasons, even historical ones, and especially to attend my > classes, I want to use the FreeBSD, because I know it's the better > operating system. > > On 01Sep2021, I downloaded the following installation files from the > FreeBSD website: > > *File Name Fi= le > Size Date* > FreeBSD-13.0-Release-i386-disc1.iso 792469504 2021-Apr-= 09 > 06:58 > FreeBSD-13.0-Release-i386-memstick.img 872096256 2021-Apr-09 > 07:26 > https://download.freebsd.org/ftp/releases/i386/i386/ISO-IMAGES/13.0/ > > FreeBSD-13.0-Release-amd64-disc1.iso 971974656 2021-Apr-09 > 07:24 > FreeBSD-13.0-Release-amd64-memstick.img 1090900480 2021-Apr-09 07:53 > https://download.freebsd.org/ftp/releases/amd64/amd64/ISO-IMAGES/13.0/ > > With the SourceForge's Win32 Disk Imager v0.90, I installed > *"FreeBSD-13.0-Release-i386-memstick.img"* on a flash drive, using a > Pentium 4 / Win Xp-SP3 / 32-bit computer. With the flash drive I installe= d > FreeBSD on a Hard Drive. All normal, until FreeBSD required Login / > Password and rejected all login attempts. I tried everything. Where did I > go wrong? How can I finally open the FreeBSD working screen? > > *Thank you very much for your attention and help,* > > Luiz Alberto Greff > *Guarulhos - S=C3=A3o Paulo - Brazil* > *Luiz Alberto Greff / **Ci=C3=AAncia e Tecnologia / * > *Guarulhos-SP* > _______________________________________________ > > You are saying that "I am reaching for the 'Login / Password' screen ." . This means that installation is completed successfully . Unfortunately , within the Handbook : https://docs.freebsd.org/en/books/handbook/ FreeBSD Handbook I could not find any information about how to login to the starting FreeBSD . In the following manual pages , https://www.freebsd.org/cgi/man.cgi FreeBSD Manual Pages ( Please be careful about the phrase in the box and in the URL of the page which should be "manpath=3DFreeBSD+13.0-RELEASE+and+Ports" conforming to the your FreeBSD version . ) ) write login to the empty box at the left of the "man" box and press enter . You will see https://www.freebsd.org/cgi/man.cgi?query=3Dlogin&apropos=3D0&sektion=3D0&m= anpath=3DFreeBSD+13.0-RELEASE+and+Ports&arch=3Ddefault&format=3Dhtml LOGIN(1)=09 Please , proceed from this page ... My knowledge is so much to help you . With my best wishes for all humanity ... Mehmet Erol Sanliturk From owner-freebsd-questions@freebsd.org Wed Sep 29 08:58:43 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id D208A66FD82 for ; Wed, 29 Sep 2021 08:58:43 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HK9Jz4ykTz4ql8 for ; Wed, 29 Sep 2021 08:58:43 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "R3" (verified OK)) (Authenticated sender: matthew/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 5320427C45 for ; Wed, 29 Sep 2021 08:58:43 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from PD0786.local (unknown [IPv6:2001:8b0:151:1:8df6:c934:24bf:67f6]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 94068655C for ; Wed, 29 Sep 2021 08:58:40 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none (p=none dis=none) header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/94068655C; dkim=none; dkim-atps=neutral Subject: Re: Login to FreeBSD To: freebsd-questions@freebsd.org References: From: Matthew Seaman Message-ID: Date: Wed, 29 Sep 2021 09:58:39 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-GB Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 08:58:43 -0000 On 28/09/2021 10:08, Luiz Greff wrote: > With the SourceForge's Win32 Disk Imager v0.90, I installed > *"FreeBSD-13.0-Release-i386-memstick.img"* on a flash drive, using a > Pentium 4 / Win Xp-SP3 / 32-bit computer. With the flash drive I installed > FreeBSD on a Hard Drive. All normal, until FreeBSD required Login / > Password and rejected all login attempts. I tried everything. Where did I > go wrong? How can I finally open the FreeBSD working screen? One of the last actions the installer does is to have you set a root password. Remember this password. Then, when the newly installed system boots up and you get to the Login: prompt, type: root (which is the username you want to log in as) You will then get a Password: prompt, where you should type in the root password you set during the installation. What you type here will not be echoed back on the screen; there won't even be asterisks or anything, just blank. So you're typing completely blind. Still, you should be able to type in the password and hit return, at which point either you'll get an error message saying password or username was incorrect, or you'll get to a shell prompt which will end with a '#' character, which is a successful login. Sorry to belabour the obvious a bit there, but I wanted to make sure all bases were covered. Be aware that both the username and password are case sensitive, so check your caps-lock key... It is also possible to have space characters in a password, that you will need to type in -- unlike many text entry fields, additional space characters do not get automatically trimmed. If you're expecting a graphical user interface to start up, then I'm afraid you're going to be disappointed: the standard FreeBSD installer doesn't assume that is what you want and set it up for you. The handbook describes what you will need to do next in order to get a graphical interface working. Or you could use one of the desktop oriented FreeBSD-based distributions like NomadBSD instead. (These are pretty much the standard BSD base with a bunch of other software installed and automatically configured to make them usable as a desktop system from the start.) Cheers, Matthew From owner-freebsd-questions@freebsd.org Wed Sep 29 09:12:58 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 5AA466702CF for ; Wed, 29 Sep 2021 09:12:58 +0000 (UTC) (envelope-from 4250.82.1d4d40005eea1fc.b0accb09b42e9fd611e322b417b5164b@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HK9dP2ww8z4tCS for ; Wed, 29 Sep 2021 09:12:57 +0000 (UTC) (envelope-from 4250.82.1d4d40005eea1fc.b0accb09b42e9fd611e322b417b5164b@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1632906777; x=1635498777; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:to:from:date:x-thread-info; bh=e9njTLmzWutYk7Iz4nVaRPVfvOsOYfTTiTJoNcUezNQ=; b=begBZqrHfVCs3KGStQyUjA1sp3L2YY92eOx8o+RQm6qsXp4zgGgP/sBzNdlumRXv6WK0NFGu2eCZvmRg3dGpNLwuTzV+2Fb82ODljPytpjownjKXEva7XqR52PhQzapblGClpux0PXqGQfezK4Xr4xwDgdswbGW2mZ9D0zymKBU= X-Thread-Info: NDI1MC4xMi4xZDRkNDAwMDVlZWExZmMuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r3.h.in.socketlabs.com (r3.h.in.socketlabs.com [142.0.180.13]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Wed, 29 Sep 2021 05:12:50 -0400 Received: from smtp.lan.sohara.org (EMTPY [185.202.17.215]) by r3.h.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Wed, 29 Sep 2021 05:12:50 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.94.2 (FreeBSD)) (envelope-from ) id 1mVVdx-000PNs-7m for freebsd-questions@freebsd.org; Wed, 29 Sep 2021 10:12:49 +0100 Date: Wed, 29 Sep 2021 10:12:49 +0100 From: Steve O'Hara-Smith To: freebsd-questions@freebsd.org Subject: Re: Unexpected removal of packages (was: Upgrading packages (fail)) Message-Id: <20210929101249.404c4443f6e09d098909c863@sohara.org> In-Reply-To: <14955.1632903362@segfault.tristatelogic.com> References: <14955.1632903362@segfault.tristatelogic.com> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.33; amd64-portbld-freebsd12.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HK9dP2ww8z4tCS X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=email-od.com header.s=dkim header.b=begBZqrH; dmarc=none; spf=pass (mx1.freebsd.org: domain of 4250.82.1d4d40005eea1fc.b0accb09b42e9fd611e322b417b5164b@email-od.com designates 142.0.176.198 as permitted sender) smtp.mailfrom=4250.82.1d4d40005eea1fc.b0accb09b42e9fd611e322b417b5164b@email-od.com X-Spamd-Result: default: False [-2.70 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[email-od.com:s=dkim]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; MV_CASE(0.50)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[sohara.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+ip4:142.0.176.0/20]; DKIM_TRACE(0.00)[email-od.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FORGED_SENDER(0.30)[steve@sohara.org,4250.82.1d4d40005eea1fc.b0accb09b42e9fd611e322b417b5164b@email-od.com]; RWL_MAILSPIKE_POSSIBLE(0.00)[142.0.176.198:from]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:7381, ipnet:142.0.176.0/22, country:US]; FROM_NEQ_ENVFROM(0.00)[steve@sohara.org,4250.82.1d4d40005eea1fc.b0accb09b42e9fd611e322b417b5164b@email-od.com]; MAILMAN_DEST(0.00)[freebsd-questions]; DWL_DNSWL_NONE(0.00)[email-od.com:dkim] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 09:12:58 -0000 On Wed, 29 Sep 2021 01:16:02 -0700 "Ronald F. Guilmette" wrote: > In message , > Matthias Fechner wrote: > > >{... instructions for getting version(s) snipped...} > > OK, so here's what I get: > > % freebsd-version -k > 12.2-RELEASE-p7 > % freebsd-version -r > 12.2-RELEASE-p7 > % freebsd-version -u > 12.2-RELEASE-p10 > > > The evidence mismatch doesn't seem proper. So now what should I do? Nothing, this is exactly as it should be. There are no kernel changes in the patches for p8, p9 and p10 so the kernel is unchanged since p7. This is why we have freebsd-version and separate kernel and userland versions. -- Steve O'Hara-Smith From owner-freebsd-questions@freebsd.org Wed Sep 29 13:43:06 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id BCBE467455C for ; Wed, 29 Sep 2021 13:43:06 +0000 (UTC) (envelope-from merlyn@geeks.org) Received: from mail.geeks.org (jacobs.geeks.org [204.153.247.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKHd60WPWz3mP3 for ; Wed, 29 Sep 2021 13:43:06 +0000 (UTC) (envelope-from merlyn@geeks.org) Received: from mail.geeks.org (localhost [127.0.0.1]) by after-clamsmtpd.geeks.org (Postfix) with ESMTP id 5BE6EFD0C for ; Wed, 29 Sep 2021 08:42:59 -0500 (CDT) Received: by mail.geeks.org (Postfix, from userid 1003) id 4C5D8FD0B; Wed, 29 Sep 2021 08:42:59 -0500 (CDT) Date: Wed, 29 Sep 2021 08:42:59 -0500 From: Doug McIntyre To: freebsd-questions@freebsd.org Subject: Re: Upgrading packages (fail) Message-ID: References: <6070.1632879098@segfault.tristatelogic.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6070.1632879098@segfault.tristatelogic.com> X-Virus-Scanned: ClamAV using ClamSMTP X-Rspamd-Queue-Id: 4HKHd60WPWz3mP3 X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of merlyn@geeks.org designates 204.153.247.1 as permitted sender) smtp.mailfrom=merlyn@geeks.org X-Spamd-Result: default: False [-1.41 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.999]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ptr]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[3]; DMARC_NA(0.00)[geeks.org]; NEURAL_SPAM_SHORT(0.89)[0.891]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:7753, ipnet:204.153.244.0/22, country:US]; RCVD_TLS_LAST(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 13:43:06 -0000 On Tue, Sep 28, 2021 at 06:31:38PM -0700, Ronald F. Guilmette wrote: > In message , > David Christensen wrote: > > >> I've just now tried to correct that via the following commands and actions: > >> > >> freebsd-update fetch > >> freebsd-update install > > > >I do 'pkg update' here. > > > >> pkg upgrade > >> (power cycle / reboot) There should be another freebsd-udpate install here as well to cleanup and remove old shared libs no longer needed after you did your `pkg upgrade` > Also however, a bunch of stuff got removed, but with no real explanation > of why: > > Installed packages to be REMOVED: > abiword: 3.0.4_1 .... Frequently package dependancies change from time to time, and some dependancy is no longer required by some base package you have installed, and the old dependancy goes away. I see this quite often. You can also do a `pkg autoremove` to clean up packages that may be orphaned but not detected by this process as well. From owner-freebsd-questions@freebsd.org Wed Sep 29 18:01:00 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 54D1667882B for ; Wed, 29 Sep 2021 18:01:00 +0000 (UTC) (envelope-from lobo@bsd.com.br) Received: from mail-io1-xd2c.google.com (mail-io1-xd2c.google.com [IPv6:2607:f8b0:4864:20::d2c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKPLg2fRyz4cqg for ; Wed, 29 Sep 2021 18:00:56 +0000 (UTC) (envelope-from lobo@bsd.com.br) Received: by mail-io1-xd2c.google.com with SMTP id n71so4317149iod.0 for ; Wed, 29 Sep 2021 11:00:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bsd.com.br; s=capeta; h=mime-version:from:date:message-id:subject:to; bh=R6WvxNQXZ+BlN5ely8y/dcTn966YlTXu89YhE++KbPI=; b=AXySAUIkigfr2P5w7B/Y+dnszsv34HgVZFhXSitPfFjKJDwvEiJR1ReynrJWzoKEII vOEdshOQBd46mcIUsBlsPWso8+yZfWCVHEPKZMU/BcyNUkYVCBV/fYnnxaWB+MzEZcom Lw0KZqZ3ZRIMBX7PPgAv7vTQbJXi7KTVuegpM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=R6WvxNQXZ+BlN5ely8y/dcTn966YlTXu89YhE++KbPI=; b=0ywgW3UxQ4mBydMenSz4x+qm2WolV6oi9mcJRzDYm76h2TYuX0/WDgPl8ci+Iui59n DyQrJw+s4LMHsKa3xH+o3ugzjiGJSEx1Vt87jpKsnrrq2exUozx5nLc/A3IX6zELhNh1 bBJsKU1OVkCMY/Ikv/S/drPRhs60wiP3nVxviGkkXLkewkISh31bHHkGCj7c11eCNdNj kowWiLSkZDhw8Qjpjv8WqqBPLeWlnBo7tkaH7iQ1yGT/3su/yCb7EEMdxL7W4/IZo19X cDGJwp1nLrHQWfvZMPWqUQi/xROTLs6CBNDdukooXQQjstXq2m7CQhJCyyiZ8kMxaUey JsEg== X-Gm-Message-State: AOAM531Pq4J0SrQKu5AeFhBmub1a4sR9BnqbDEasGGcwBuHssPHhYPOF ZV71+WVh/JtqzRUT2Zoj/t7C+HY2FaE7BCvoYpmk2Og/hAzR4A== X-Google-Smtp-Source: ABdhPJx+tJY4i6nGn4MU84xps3nc5nX+qifb4RDuPZfubB/AVBNM8JdthSlLpekfJhbwClb7nv5HSwZGTMrT1inouVs= X-Received: by 2002:a5e:c00e:: with SMTP id u14mr790235iol.13.1632938455427; Wed, 29 Sep 2021 11:00:55 -0700 (PDT) MIME-Version: 1.0 From: Mario Lobo Date: Wed, 29 Sep 2021 15:00:43 -0300 Message-ID: Subject: Running VirtualBox as non-root user To: "freebsd-questions@freebsd.org" , freebsd-virtualization@freebsd.org X-Rspamd-Queue-Id: 4HKPLg2fRyz4cqg X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=bsd.com.br header.s=capeta header.b=AXySAUIk; dmarc=none; spf=pass (mx1.freebsd.org: domain of lobo@bsd.com.br designates 2607:f8b0:4864:20::d2c as permitted sender) smtp.mailfrom=lobo@bsd.com.br X-Spamd-Result: default: False [-3.50 / 15.00]; ARC_NA(0.00)[]; TO_DN_EQ_ADDR_SOME(0.00)[]; R_DKIM_ALLOW(-0.20)[bsd.com.br:s=capeta]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[bsd.com.br]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[bsd.com.br:+]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::d2c:from]; NEURAL_HAM_SHORT(-1.00)[-0.998]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[FreeBSD-Questions] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 18:01:00 -0000 Hi; Here is what I've done so far: - Created user vbox and put it in vboxuser group - Went as far as chown -R vbox:vboxuser /usr/local/lib/virtualbox - Executables are with the SUiD bit set -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxSDL -r-s--x--- 1 vbox vboxusers 16064 Sep 21 22:18 VBoxNetAdpCtl -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxNetDHCP -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxNetNAT -r-s--s--- 1 vbox vboxusers 32352 Sep 22 17:55 VirtualBoxVM - Imported a test VM - Ran the VM as root to make sure it's working - started VirtualBox as user vbox, and it starts fine VirtualBox GUI starts fine as user vbox but when I try to start the test VM from it, I get: Effective UID is not root (euid=1001 egid=920 uid=1001 gid=1001) (rc=-10) where: SUPR3HardenedMain what: 2 VERR_PERMISSION_DENIED (-10) - Permission denied. Starting it from VirtualBoxVM --startvm test issues the same error: VirtualBoxVM: Error -10 in SUPR3HardenedMain! VirtualBoxVM: Effective UID is not root (euid=1001 egid=920 uid=1001 gid=1001) where: SUPR3HardenedMain what: 2 VERR_PERMISSION_DENIED (-10) - Permission denied. Any pointer for anything else I should be doing or is missing? Thanks, -- Mario Lobo http://www.mallavoodoo.com.br FreeBSD since version 2.2.8 [not Pro-Audio.... YET!!] From owner-freebsd-questions@freebsd.org Wed Sep 29 18:17:35 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 0EAC4678ED3 for ; Wed, 29 Sep 2021 18:17:35 +0000 (UTC) (envelope-from decke@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKPjp6snRz4ffv for ; Wed, 29 Sep 2021 18:17:34 +0000 (UTC) (envelope-from decke@freebsd.org) Received: from mail-il1-f172.google.com (mail-il1-f172.google.com [209.85.166.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) (Authenticated sender: decke) by smtp.freebsd.org (Postfix) with ESMTPSA id C8A682C541 for ; Wed, 29 Sep 2021 18:17:34 +0000 (UTC) (envelope-from decke@freebsd.org) Received: by mail-il1-f172.google.com with SMTP id a11so3855268ilk.9 for ; Wed, 29 Sep 2021 11:17:34 -0700 (PDT) X-Gm-Message-State: AOAM531IWPRUNeeGPaM+gX9OyrIWfz/er58hNMl9WZ0ONyaUp336kyS8 2Iz/kaWBaGLcE2SyEicVQhQCX7E2oImKLZ8cWD5ucg== X-Google-Smtp-Source: ABdhPJy6duPIkFZbSzO4agEzsZMqouy0eijQ7fG/+mmnF0RBz7szNO4+iRUTpmODuZ5P0asnz4XvmbJZKxUHWGY9Uu4= X-Received: by 2002:a92:d5c4:: with SMTP id d4mr853316ilq.184.1632939453998; Wed, 29 Sep 2021 11:17:33 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: =?UTF-8?Q?Bernhard_Fr=C3=B6hlich?= Date: Wed, 29 Sep 2021 20:17:18 +0200 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: Running VirtualBox as non-root user To: Mario Lobo Cc: "freebsd-questions@freebsd.org" , freebsd-virtualization@freebsd.org Content-Type: text/plain; charset="UTF-8" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 18:17:35 -0000 On Wed, Sep 29, 2021 at 8:01 PM Mario Lobo wrote: > > Hi; > > Here is what I've done so far: > > - Created user vbox and put it in vboxuser group > - Went as far as chown -R vbox:vboxuser /usr/local/lib/virtualbox > - Executables are with the SUiD bit set > -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxSDL > -r-s--x--- 1 vbox vboxusers 16064 Sep 21 22:18 VBoxNetAdpCtl > -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxNetDHCP > -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxNetNAT > -r-s--s--- 1 vbox vboxusers 32352 Sep 22 17:55 VirtualBoxVM > > - Imported a test VM > - Ran the VM as root to make sure it's working > - started VirtualBox as user vbox, and it starts fine > > VirtualBox GUI starts fine as user vbox but when I try to start the test VM > from it, I get: > > Effective UID is not root (euid=1001 egid=920 uid=1001 gid=1001) (rc=-10) > where: SUPR3HardenedMain what: 2 VERR_PERMISSION_DENIED (-10) - Permission > denied. > > Starting it from VirtualBoxVM --startvm test issues the same error: > > VirtualBoxVM: Error -10 in SUPR3HardenedMain! > VirtualBoxVM: Effective UID is not root (euid=1001 egid=920 uid=1001 > gid=1001) > where: SUPR3HardenedMain > what: 2 > VERR_PERMISSION_DENIED (-10) - Permission denied. > > Any pointer for anything else I should be doing or is missing? Puh it's been a long time for me but from what I read there are two things that sound problematic to me. 1) vbox uses something that they call "hardening" which does some checks in addition to the suid/sgid bits. Changing permissions and/or user/group is asking for trouble! I'd recommend to reinstall the vbox package in that case. The instructions in the handbook should be enough. pw groupmod vboxusers -m yourusername 2) Starting a VM as root is definitely not a good idea either. The problem is that vbox it will create some temporary files/directories as root somewhere under /tmp or was it /var? When the VM is stopped the directories are left and you won't be able to write to them as user afterwards. If the VM is not running it should be okay to just delete them but please have a look at the content first to make sure. -- Bernhard Froehlich http://www.bluelife.at/ From owner-freebsd-questions@freebsd.org Wed Sep 29 19:08:05 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 0E61C679918 for ; Wed, 29 Sep 2021 19:08:05 +0000 (UTC) (envelope-from dalescott@shaw.ca) Received: from omta002.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKQr46N5Lz4jtp; Wed, 29 Sep 2021 19:08:04 +0000 (UTC) (envelope-from dalescott@shaw.ca) Received: from shw-obgw-4001a.ext.cloudfilter.net ([10.228.9.142]) by cmsmtp with ESMTP id Vc8jmNep3ps7PVew0mDLx2; Wed, 29 Sep 2021 19:08:04 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=shaw.ca; s=s20180605; t=1632942484; bh=S1BoCAXk9RA/H8GpHSDywgdpKHYhHbxHYdUUIfOcsfI=; h=Date:From:To:Cc:In-Reply-To:References:Subject; b=GL7Y9mUbBtxPYEgJDsI/U0WC5tiwFdR262aNefgdXfHFWB2di/czARE9Z0Br4Xcin 1I8ZS6nFntcypDv2vXbaJtezlj1SVaeHzfHZ/ubsLWePwG0a+9pqfZk4I7OQwxzFD6 OLdSqouZS4rFEh2YFmMxDPh3dwosCDp7RDEGrIubEs4YNKxe9pCnGmFEC1BivlBFrY qesE0sbigSGNVpeDLOlbR9kcK/UuETboDhRpCse4Ka/oLe59z/71zVAGxjSlRhg/2M ihd3uWKT5TLShe7eqmapiq6tXDLnPRyFl9tPpgaRZZmXRp5Anga2xcrixdUWFo9BAh cyPO0T9plVQqw== Received: from cds220.dcs.int.inet ([64.59.134.6]) by cmsmtp with ESMTP id VevzmeDw8U9pxVevzmrllm; Wed, 29 Sep 2021 19:08:04 +0000 X-Authority-Analysis: v=2.4 cv=Bbi7bph2 c=1 sm=1 tr=0 ts=6154b994 a=9zdlX7M534QhL7mOrorEvQ==:117 a=FKkrIqjQGGEA:10 a=on0NmgUIp3IA:10 a=IkcTkHD0fZMA:10 a=5mcg790sAAAA:8 a=6I5d2MoRAAAA:8 a=_pxgbcHMAAAA:8 a=jJSEoD67AAAA:8 a=zWynsvDfuWc8EsIIisgA:9 a=QEXdDO2ut3YA:10 a=uQeDYW1NI25gHNlrW_eK:22 a=IjZwj45LgO3ly-622nXo:22 a=Wq6Fn18McuFsL2SXrvNs:22 a=XYRPOkugSPYE58mp8SVz:22 Date: Wed, 29 Sep 2021 13:08:03 -0600 (MDT) From: Dale Scott To: Bernhard =?utf-8?Q?Fr=C3=B6hlich?= Cc: Mario Lobo , freebsd-questions , freebsd-virtualization@freebsd.org Message-ID: <650834006.36091303.1632942483218.JavaMail.zimbra@shaw.ca> In-Reply-To: References: Subject: Re: Running VirtualBox as non-root user MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Originating-IP: [162.223.103.50, 162.223.103.50] X-Mailer: Zimbra 8.8.15_GA_4125 (ZimbraWebClient - GC94 (Win)/8.8.15_GA_3968) Thread-Topic: Running VirtualBox as non-root user Thread-Index: iMnxaAImQO0KERWEoUesqZWS04v55Q== X-CMAE-Envelope: MS4xfAdwUhMKiQNhuw3Vq3kkKWP9AHK9Uv8OoxXoILxyjmT/R6GxLk4VVRD9wSjDAjfcyoxK/aqXwbBCnL+CSZgjsqGMBgdNuhyt0DaGFvn6E/hryq7OQxJ0 jjIneR+224ZXvo9VtRAkPOCz7jPAumMwqFXXk/7JuAoLQoWRhsERxjWEzcXztvQWO8PVbLQ0WiwqzePfK5vuhpPBmdA5umYgyRaQ6VuWUM56VvNmd51NJ8Il eaASxK8O8tFvE3AIx3fKQJU6IydM2sMKioKQcvgzf8LpJX281LCTSWYMBKThihwcG7xxYtFF6ByPxgbPwjxV8Q== X-Rspamd-Queue-Id: 4HKQr46N5Lz4jtp X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 19:08:05 -0000 I don't have a solution, but I can report I'm happily running virtualbox-os= e headless as a non-root user (me, the vm's are stored in my user directory= ) using phpvirtualbox served by Apache. dale@whizzer:~ % sudo pkg info | grep virtual phpvirtualbox-6.1 AJAX Web Interface for VirtualBox virtualbox-ose-kmod-6.1.22_1 VirtualBox kernel module for FreeBSD virtualbox-ose-nox11-6.1.22_2 General-purpose full virtualizer for x86 har= dware dale@whizzer:~ % uname -a FreeBSD whizzer.dalescott.net 12.2-RELEASE-p7 FreeBSD 12.2-RELEASE-p7 GENER= IC amd64 dale@whizzer:~ % Good luck, Dale ----- Original Message ----- > From: "Bernhard Fr=C3=B6hlich" > To: "Mario Lobo" > Cc: "freebsd-questions" , freebsd-virtuali= zation@freebsd.org > Sent: Wednesday, September 29, 2021 12:17:18 PM > Subject: Re: Running VirtualBox as non-root user > On Wed, Sep 29, 2021 at 8:01 PM Mario Lobo wrote: >> >> Hi; >> >> Here is what I've done so far: >> >> - Created user vbox and put it in vboxuser group >> - Went as far as chown -R vbox:vboxuser /usr/local/lib/virtualbox >> - Executables are with the SUiD bit set >> -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxSDL >> -r-s--x--- 1 vbox vboxusers 16064 Sep 21 22:18 VBoxNetAdpCtl >> -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxNetDHCP >> -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxNetNAT >> -r-s--s--- 1 vbox vboxusers 32352 Sep 22 17:55 VirtualBoxVM >> >> - Imported a test VM >> - Ran the VM as root to make sure it's working >> - started VirtualBox as user vbox, and it starts fine >> >> VirtualBox GUI starts fine as user vbox but when I try to start the test= VM >> from it, I get: >> >> Effective UID is not root (euid=3D1001 egid=3D920 uid=3D1001 gid=3D1001)= (rc=3D-10) >> where: SUPR3HardenedMain what: 2 VERR_PERMISSION_DENIED (-10) - Permissi= on >> denied. >> >> Starting it from VirtualBoxVM --startvm test issues the same error: >> >> VirtualBoxVM: Error -10 in SUPR3HardenedMain! >> VirtualBoxVM: Effective UID is not root (euid=3D1001 egid=3D920 uid=3D10= 01 >> gid=3D1001) >> where: SUPR3HardenedMain >> what: 2 >> VERR_PERMISSION_DENIED (-10) - Permission denied. >> >> Any pointer for anything else I should be doing or is missing? >=20 > Puh it's been a long time for me but from what I read there are two thing= s that > sound problematic to me. >=20 > 1) vbox uses something that they call "hardening" which does some checks > in addition to the suid/sgid bits. Changing permissions and/or > user/group is asking > for trouble! I'd recommend to reinstall the vbox package in that case. Th= e > instructions in the handbook should be enough. >=20 > pw groupmod vboxusers -m yourusername >=20 > 2) Starting a VM as root is definitely not a good idea either. The > problem is that > vbox it will create some temporary files/directories as root somewhere > under /tmp > or was it /var? When the VM is stopped the directories are left and you w= on't be > able to write to them as user afterwards. If the VM is not running it > should be okay > to just delete them but please have a look at the content first to make s= ure. >=20 > -- > Bernhard Froehlich > http://www.bluelife.at/ > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" From owner-freebsd-questions@freebsd.org Wed Sep 29 19:19:55 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 7D954679DAE for ; Wed, 29 Sep 2021 19:19:55 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from holgerdanske.com (holgerdanske.com [184.105.128.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "holgerdanske.com", Issuer "holgerdanske.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKR5k2Q0Rz4l7L for ; Wed, 29 Sep 2021 19:19:54 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=holgerdanske.com; s=nov-20210719-112354; t=1632943192; bh=O4GDoYZJQTciVbbySE1+KceZz1l1rDO3cXFeg/a6Wkw=; h=Received:Message-ID:Date:MIME-Version:User-Agent:Subject: Content-Language:To:References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding; b=aLIYnJDe9a+L7pwBHpUaGpKunI+iuhpNI20gmswuRKhkqMTY3+q77gZt/l0sj5ONX yYGmBsSLomkr6q0Ik2hmyxdoiWg4U8qAqsAKigPZEXCWYS7ziyVJuAu1mt8D89TA/8 1t7AXzMeyDBuM3b9qVTbA0yCfeGuZSAfDtpx3+A+nE6k24h5B4a7WtTcA5So6AWRVT YdxBUmXm+36f7LtpsMpdvYW0ZG8vYV0IgpdCHGgD9M7qEfW8+OtRlf9m3r8Uf+C318 iFoYM0CFakeei9uhRw54LP8DwN/tPWFDkVCdawedjNpoAMyCVAxGLgDDK8TnPVX591 cJD6QHHxa4Siv95pGDmiDerNmrW86+sAB37K9uge3kXpuX6Eg37IRy/QY3Sd6QvXmO z3OP2va58A7qPmOedG0CnxAcwbyJaYIAhwSfOtlU6aBxgoQHrNAD3CxRCRgpxAQSLh OPci4RmWvEWxvdVz/OImTNgabh7q1VQ4ayc1tmE2sCJddlj02/7y5CyKFjWrFqN9lD SWNDQtUUUCrlmo6wnGPo+Sj4/4+phqMImTLx+2eRLAN7486/Vs5BNFbsmizP9bBpsW 5QkMG0DOzn41L0jv1i6FsRLB0s07EmT0Nh/VCrOW8tyOVUqUdumh0TqOaIYQPowA2x G3K7A90BbASFTMug/czEJZXw= Received: from 99.100.19.101 (99-100-19-101.lightspeed.frokca.sbcglobal.net [99.100.19.101]) by holgerdanske.com with ESMTPSA (TLS_AES_128_GCM_SHA256:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(128):Mac=AEAD) (SMTP-AUTH username dpchrist@holgerdanske.com, mechanism PLAIN) for ; Wed, 29 Sep 2021 12:19:52 -0700 Message-ID: <923927ca-65e4-0278-b25d-0940ca54d79e@holgerdanske.com> Date: Wed, 29 Sep 2021 12:19:52 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.1.2 Subject: Re: Upgrading packages (fail) Content-Language: en-US To: freebsd-questions@freebsd.org References: <6070.1632879098@segfault.tristatelogic.com> From: David Christensen In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HKR5k2Q0Rz4l7L X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=holgerdanske.com header.s=nov-20210719-112354 header.b=aLIYnJDe; dmarc=pass (policy=none) header.from=holgerdanske.com; spf=pass (mx1.freebsd.org: domain of dpchrist@holgerdanske.com designates 184.105.128.27 as permitted sender) smtp.mailfrom=dpchrist@holgerdanske.com X-Spamd-Result: default: False [-4.00 / 15.00]; RCVD_TLS_ALL(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[holgerdanske.com:s=nov-20210719-112354]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; ARC_NA(0.00)[]; DKIM_TRACE(0.00)[holgerdanske.com:+]; DMARC_POLICY_ALLOW(-0.50)[holgerdanske.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:6939, ipnet:184.104.0.0/15, country:US]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 19:19:55 -0000 On 9/29/21 06:42, Doug McIntyre wrote: > On Tue, Sep 28, 2021 at 06:31:38PM -0700, Ronald F. Guilmette wrote: >> In message , >> David Christensen wrote: >> >>>> I've just now tried to correct that via the following commands and actions: >>>> >>>> freebsd-update fetch >>>> freebsd-update install >>> >>> I do 'pkg update' here. >>> >>>> pkg upgrade >>>> (power cycle / reboot) > > There should be another > freebsd-udpate install This is my SOHO server, updated last week: 2021-09-29 12:15:31 toor@f3 ~ # freebsd-version ; uname -a 12.2-RELEASE-p10 FreeBSD f3.tracy.holgerdanske.com 12.2-RELEASE-p7 FreeBSD 12.2-RELEASE-p7 GENERIC amd64 Following your advice: 2021-09-29 12:14:10 toor@f3 ~ # freebsd-update install src component not installed, skipped No updates are available to install. Run '/usr/sbin/freebsd-update fetch' first. Following the error message: 2021-09-29 12:14:19 toor@f3 ~ # freebsd-update fetch src component not installed, skipped Looking up update.FreeBSD.org mirrors... 2 mirrors found. Fetching metadata signature for 12.2-RELEASE from update2.freebsd.org... done. Fetching metadata index... done. Inspecting system... done. Preparing to download files... done. No updates needed to update system to 12.2-RELEASE-p10. 2021-09-29 12:15:25 toor@f3 ~ # freebsd-update install src component not installed, skipped No updates are available to install. Run '/usr/sbin/freebsd-update fetch' first. > here as well to cleanup and remove old shared libs no longer needed after you did > your `pkg upgrade` 2021-09-29 12:13:49 toor@f3 ~ # pkg autoremove Checking integrity... done (0 conflicting) Deinstallation has been requested for the following 1 packages: Installed packages to be REMOVED: python37: 3.7.12 Number of packages to be removed: 1 The operation will free 110 MiB. Proceed with deinstalling packages? [y/N]: y [1/1] Deinstalling python37-3.7.12... [1/1] Deleting files for python37-3.7.12: 100% David From owner-freebsd-questions@freebsd.org Wed Sep 29 20:50:53 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 29F6567C420 for ; Wed, 29 Sep 2021 20:50:53 +0000 (UTC) (envelope-from chris@monochrome.org) Received: from mail.monochrome.org (static-71-163-255-121.washdc.fios.verizon.net [71.163.255.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail", Issuer "mail" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKT6j0T3fz4sJY; Wed, 29 Sep 2021 20:50:52 +0000 (UTC) (envelope-from chris@monochrome.org) Received: from tripel.monochrome.org (tripel.monochrome.org [192.168.1.11]) by mail.monochrome.org (8.15.2/8.15.2) with ESMTP id 18TKoiUl008108; Wed, 29 Sep 2021 16:50:45 -0400 (EDT) (envelope-from chris@monochrome.org) Date: Wed, 29 Sep 2021 16:50:44 -0400 (EDT) From: Chris Hill To: Mario Lobo cc: "freebsd-questions@freebsd.org" , freebsd-virtualization@freebsd.org Subject: Re: Running VirtualBox as non-root user In-Reply-To: Message-ID: References: User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Rspamd-Queue-Id: 4HKT6j0T3fz4sJY X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 20:50:53 -0000 On Wed, 29 Sep 2021, Mario Lobo wrote: > Hi; > > Here is what I've done so far: > > - Created user vbox and put it in vboxuser group > - Went as far as chown -R vbox:vboxuser /usr/local/lib/virtualbox > - Executables are with the SUiD bit set > -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxSDL > -r-s--x--- 1 vbox vboxusers 16064 Sep 21 22:18 VBoxNetAdpCtl > -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxNetDHCP > -r-s--x--- 1 vbox vboxusers 32064 Sep 21 22:18 VBoxNetNAT > -r-s--s--- 1 vbox vboxusers 32352 Sep 22 17:55 VirtualBoxVM Is the group name vboxuser or vboxusers? I see both above. > - Imported a test VM > - Ran the VM as root to make sure it's working > - started VirtualBox as user vbox, and it starts fine > > VirtualBox GUI starts fine as user vbox but when I try to start the > test VM from it, I get: > > Effective UID is not root (euid=1001 egid=920 uid=1001 gid=1001) > (rc=-10) where: SUPR3HardenedMain what: 2 VERR_PERMISSION_DENIED (-10) > - Permission denied. > > Starting it from VirtualBoxVM --startvm test issues the same error: > > VirtualBoxVM: Error -10 in SUPR3HardenedMain! > VirtualBoxVM: Effective UID is not root (euid=1001 egid=920 uid=1001 > gid=1001) > where: SUPR3HardenedMain > what: 2 > VERR_PERMISSION_DENIED (-10) - Permission denied. > > Any pointer for anything else I should be doing or is missing? > > Thanks, > -- > Mario Lobo > http://www.mallavoodoo.com.br > FreeBSD since version 2.2.8 [not Pro-Audio.... YET!!] -- Chris Hill chris@monochrome.org From owner-freebsd-questions@freebsd.org Wed Sep 29 23:30:25 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 0C67367DFEC for ; Wed, 29 Sep 2021 23:30:25 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from wout1-smtp.messagingengine.com (wout1-smtp.messagingengine.com [64.147.123.24]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKXfl5Gcgz3HsS for ; Wed, 29 Sep 2021 23:30:23 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.west.internal (Postfix) with ESMTP id 6CA4A3200BD2 for ; Wed, 29 Sep 2021 19:30:17 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute6.internal (MEProxy); Wed, 29 Sep 2021 19:30:17 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:mime-version:content-type; s= fm3; bh=JKf6IWC4nzdgTrpcUMQ5C6MJC1Ff/8DTsRMCXEebGX8=; b=HuQmb9pY dabY66ff2mg4JMqlJkMmDjo3rtCwd2YXpge7wRkVDiKz1LpNQOp/BfDNEZsXpJrE 6DUmbAwFovCmYUH8GiRWbqVrPqxgLuQ3TWpJMbcH/bQaQ2w6rHiwoUW50Ne/YVWV SUR9Ce/RrRQ5Lvp9BGwGdGQ5Y627IkvMNmd9k7GEFv8Quq/irEetRXybewFzdtct u/qo2WW8LVNTmRwUM5PPSrkWlgB/WcsQ33ctMXLY/wn2Wsrujtr8CTrOniD+Ej2d Ac0xsjwSv/8x1ME/iBooo2G1//dNE6WxoNeEAQaxXkU5xd/xFBv9/ZrU9ZGU0hLI nsSiGYq71ELb2w== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=JKf6IWC4nzdgTrpcUMQ5C6MJC1Ff/ 8DTsRMCXEebGX8=; b=lmKmH1ZfnbSTN1aNMviYmFR2j/zFJ+mm6aohtWAFGm8/Q 9TW/JWGPhaNYOmO0nKeZlvNZZ05Lo9GCTT7ZecRmpfLE2jXXiWVCoeGhkF+0l8lC mPvX60HvOFeZghCohLyVVh58JhjF+2KVm3+sas37C6ikWecBOotdNj+qgetmyd3P gEIYeZ3JFF16PhVPAEErii24/nNhcFgkrfx/D3qHxup5qQNWJc5UheCrNr/xdCH7 1tEnFJ1sSaF3sobb/KQyhoCnLJv1aaxbXpssp3bC9qwCbBygFdUBZns1IQ16bZEX cku9LdAH5XJDLVqbiRFoEkGVyvjc1iJGQlTyH/whA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudekfedgvddtucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkgggtugesghdtreertd dtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseiihiig shhtrdhnvghtqeenucggtffrrghtthgvrhhnpefgkeffhfeigfefhfevgffgvdehgedufe eihfdtgfekgfetleefffeludfffeehffenucffohhmrghinhepshhomhgvrdhnrghmvgen ucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehtvggthh dqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Wed, 29 Sep 2021 19:30:16 -0400 (EDT) Date: Thu, 30 Sep 2021 00:30:14 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: ipv4 and ipv6 question Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="BCae6wrs8Fws5nyx" Content-Disposition: inline X-Rspamd-Queue-Id: 4HKXfl5Gcgz3HsS X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b=HuQmb9pY; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=lmKmH1Zf; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 64.147.123.24) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-6.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:64.147.123.0/24, country:US]; RCVD_IN_DNSWL_LOW(-0.10)[64.147.123.24:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm3]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; RWL_MAILSPIKE_POSSIBLE(0.00)[64.147.123.24:from]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2021 23:30:25 -0000 --BCae6wrs8Fws5nyx Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, I have native ipv4 and ipv6 and a lot more ipv6 addresses available than ipv4. Is there some way of having (externally routable) multiple ipv6-only interfaces behind that one ipv4 address? let's say the machine name is ipv6-a.some.name.whatevertld and its interface has one /64 and only that ip. can I make a machine call it ipv4.some.name.whatevertld, give it its own ipv4 (and its own ipv6 - call it ipv6-b.some.name.whatevertld) address and configure=20 it to route ipv6-a packets to the right machine? Otherwise my ipv6-a machine will only be accessible by someone with ipv6 functionality. Basically i'm asking if I can somehow put an ipv6-only machine on the internet and have it accessible via ipv4. I dimly remember something about 4to6 and 6to4 translation - is that how? thanks, --=20 J. --BCae6wrs8Fws5nyx Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFU9v0ACgkQs8o7QhFz NAXPGBAAqSMwYZ4fuye+DzpWkCS7EmiUk9/p7gRt0a/5zz8IICUvCU4qu+0E4sBn nr+HXHuwH4b0VzaZLVzEcuGh1WdzRcoKL95axuTH5RXpJkRpgsOwCE4U6g+n95+B q/9zxEqq7lMsDnkLQikmeVTADkdqrbxAVYF9ePjXNlY3xgJt54zS9JLMEP1MTLF5 c/lRbN18wKKSGu+vvmW7yDlJ/1WULmFW610f+j1bdK3aCqPS54OAEYTFHgBX7pKa e9lUH3ag0fuVzgF7S9F8p7x8NFn4VRuZ7eXRHD+KklvP1iPBeeO2jvSZjZ26L3CW WL85eqwx9csAnKlYQCAvSfRVcDOHoTy82Nbe4syZ6ish60KEcmhXPEdUkaYdTk2g LV7TjoX2uzZSkWDgjvL75aFuP9OP2cMz3SQZWs/dCJfVZNyR1WlyvPju9jvDAFQ9 gNLCbb5KR19ufiAYFIrJyAefKYloyqz2o/2PKQwDpv4O9riTnWMfdjHrR/d2f5c+ wozUWLxA+E8Pa0Bh5rBu+7nFeH1Smk1nj1fmgl3s8vPo8rd8BNVs9W5mFzJ/bDZK 0yXtWyBbU1fnEYtQIVZ81tlAH73U8hUBWgVGj1/PGWGCu5gQ5bcB6qMwE7kKb0cL rY0NDo5XopO2kR9Hv1SZMi0Qs1O7ohi/4Q7JoooS5bta4z/nTw0= =O3ju -----END PGP SIGNATURE----- --BCae6wrs8Fws5nyx-- From owner-freebsd-questions@freebsd.org Thu Sep 30 05:05:21 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 0F5E26AB05D for ; Thu, 30 Sep 2021 05:05:21 +0000 (UTC) (envelope-from mark@tinka.africa) Received: from the-host.tinka.africa (the-host.tinka.africa [105.22.37.14]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKh5D2CPsz4Zjg for ; Thu, 30 Sep 2021 05:05:20 +0000 (UTC) (envelope-from mark@tinka.africa) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tinka.africa; s=tinka; h=Content-Transfer-Encoding:Content-Type:In-Reply-To :From:References:To:Subject:MIME-Version:Date:Message-ID:Sender:Reply-To:Cc: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=5z68IJztyDEJntkkMIUQSnAr8nd6BaQW65lI/0Qt0sA=; b=QZIjRlyBWgGv0KrhAfDqoOhO4y 51w99LzapnGfYgNx7K9ZzUDNrvsNaa1redMazwUvslfhMURKv/1Vzlw4OQKwdWFfYlnqlukqpdUQf 2kQIVK8o+vd29Zqs4JTpD7llYTDBeq/ljRCmr1wv2htYTvaVO1WYFeIoxvhDKjKuiPttl0R34bA50 DANhYV6pDLQx8YErf6W/t3e/HzseaRz2ZE3ba9BUOeOEvJQDpNjNOdbc8D7FWqcApsKjD29z+SUXt EY7Z7PqyhwYdutejRL0uL6cqZKGwo/4H/FoFtdYj5joadoBzc0Dgdo6QLgZpX6UF9CfBQdHebwGTr K3gSxZuA==; Received: from localhost ([127.0.0.1]) by the-host.tinka.africa with esmtp (Exim 4.94) (envelope-from ) id R08E4K-00073V-MB for freebsd-questions@freebsd.org; Thu, 30 Sep 2021 07:05:08 +0200 Message-ID: <3f61bb73-f5dd-ca19-bbef-e494bc450a30@tinka.africa> Date: Thu, 30 Sep 2021 07:05:08 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Thunderbird/91.1.2 Subject: Re: ipv4 and ipv6 question Content-Language: en-US To: freebsd-questions@freebsd.org References: From: Mark Tinka In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HKh5D2CPsz4Zjg X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=tinka.africa header.s=tinka header.b=QZIjRlyB; dmarc=pass (policy=none) header.from=tinka.africa; spf=pass (mx1.freebsd.org: domain of mark@tinka.africa designates 105.22.37.14 as permitted sender) smtp.mailfrom=mark@tinka.africa X-Spamd-Result: default: False [-3.00 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[tinka.africa:s=tinka]; FREEFALL_USER(0.00)[mark]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:105.22.37.14]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; DKIM_TRACE(0.00)[tinka.africa:+]; HFILTER_HELO_2(1.00)[the-host.tinka.africa]; DMARC_POLICY_ALLOW(-0.50)[tinka.africa,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:37100, ipnet:105.16.0.0/12, country:MU]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 05:05:21 -0000 On 9/30/21 01:30, tech-lists wrote: > Hi, > > I have native ipv4 and ipv6 and a lot more ipv6 addresses available than > ipv4. Is there some way of having (externally routable) multiple > ipv6-only interfaces behind that one ipv4 address? > > let's say the machine name is ipv6-a.some.name.whatevertld and its > interface has one /64 and only that ip. can I make a machine > call it ipv4.some.name.whatevertld, give it its own ipv4 (and its own > ipv6 - call it ipv6-b.some.name.whatevertld) address and configure it > to route ipv6-a packets to the right machine? > > Otherwise my ipv6-a machine will only be accessible by someone with ipv6 > functionality. Basically i'm asking if I can somehow put an ipv6-only > machine on the internet and have it accessible via ipv4. I dimly > remember something about 4to6 and 6to4 translation - is that how? Look into enabling 464XLAT. Mark. From owner-freebsd-questions@freebsd.org Thu Sep 30 07:36:32 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 57F526ACB2B for ; Thu, 30 Sep 2021 07:36:32 +0000 (UTC) (envelope-from m.e.sanliturk@gmail.com) Received: from mail-ua1-x934.google.com (mail-ua1-x934.google.com [IPv6:2607:f8b0:4864:20::934]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKlRg3y4Rz4lhG for ; Thu, 30 Sep 2021 07:36:31 +0000 (UTC) (envelope-from m.e.sanliturk@gmail.com) Received: by mail-ua1-x934.google.com with SMTP id 37so3492704uaq.11 for ; Thu, 30 Sep 2021 00:36:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=AHYBVJRzzTWCH9TwlKvd3hNVEgM1YJykNioToPEC78A=; b=FtyrChMCCW6LCbVRHU2yOSuBoZmJbG6iUgqvGQD1nBApC2iIn67cuqYBaPaNhwIxc9 ujWXAbqj1nh8qbWdZM+/Zb+dp4PipB+PauMXU57BtBYUV50Mz5TmKHMBaCS/XOKB1kvN rEAGNnDKzPkq7WX0T7SqviEINVkOtnLpgifFM5unB+/EVEVDxkupQt5hkt2EXQ39tWW1 5LorAFVajb8ADsf0igmFCIFmLUtRaTb5CihyRuBlLRUTv7xH8U231HLVlSKlUze5s/6p u8fmx1CuIRgB+p8WI83fotvZtMxapd+Zcny43O6kzrU4CkQMMuNKn6i7VW8C2bQkFlo3 bEFA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=AHYBVJRzzTWCH9TwlKvd3hNVEgM1YJykNioToPEC78A=; b=BUlJjufYtqsU6ruRwvxee9tZV6VTE5KV/X7oNXs1HnMwOg1uHI2CgxE30px87dlL6Z QJkp1jNVX6xFTqGYkUzOZqB0Nn6AaU2W0Wt2FOhyAL/AZBCAomFEH1V0vMvU6yKkSe3A nbSzReUcwcrvEivYA66g7decEOt2TJaC2xzCD+T/+Z03ceR375WEqAjb8k+mkre932nM 9xgHHSkMt0uph69A3gTFQSNe62PSUDHpW5zXucII5cVh9zosnp5M05Pe16Wip2lBwUiC bO7UMS7vPe9VMaGAKDa0wflYT7FvU2onmFOqHtw7MX142ZLGfSrG2uoYcnpVLQZTE5+4 z7hw== X-Gm-Message-State: AOAM532DikM0YkSgtlEibRYF8aVj5U6B3TNVXiX3fp7zpZ7yxQnsCCa9 SiwSBDF0d6DChC0J2AidQEcguj9tw3XBhuSXhGancENauW4= X-Google-Smtp-Source: ABdhPJypOcvXl99ZbLXfXghmhrlEgQ0O/SGy4K02ra5desgzU9JHj3uLLero1iL2qNIF0lT+I7fzMdC3XFtC59Pdd1M= X-Received: by 2002:ab0:3d13:: with SMTP id f19mr4314431uax.140.1632987391139; Thu, 30 Sep 2021 00:36:31 -0700 (PDT) MIME-Version: 1.0 References: <3f61bb73-f5dd-ca19-bbef-e494bc450a30@tinka.africa> In-Reply-To: <3f61bb73-f5dd-ca19-bbef-e494bc450a30@tinka.africa> From: Mehmet Erol Sanliturk Date: Thu, 30 Sep 2021 10:35:54 +0300 Message-ID: Subject: Re: ipv4 and ipv6 question To: Mark Tinka Cc: FreeBSD Questions Mailing List X-Rspamd-Queue-Id: 4HKlRg3y4Rz4lhG X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=FtyrChMC; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of mesanliturk@gmail.com designates 2607:f8b0:4864:20::934 as permitted sender) smtp.mailfrom=mesanliturk@gmail.com X-Spamd-Result: default: False [-4.00 / 15.00]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; MID_RHS_MATCH_FROMTLD(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; TAGGED_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::934:from]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 07:36:32 -0000 On Thu, Sep 30, 2021 at 8:05 AM Mark Tinka wrote: > > > On 9/30/21 01:30, tech-lists wrote: > > > Hi, > > > > I have native ipv4 and ipv6 and a lot more ipv6 addresses available than > > ipv4. Is there some way of having (externally routable) multiple > > ipv6-only interfaces behind that one ipv4 address? > > > > let's say the machine name is ipv6-a.some.name.whatevertld and its > > interface has one /64 and only that ip. can I make a machine > > call it ipv4.some.name.whatevertld, give it its own ipv4 (and its own > > ipv6 - call it ipv6-b.some.name.whatevertld) address and configure it > > to route ipv6-a packets to the right machine? > > > > Otherwise my ipv6-a machine will only be accessible by someone with ipv6 > > functionality. Basically i'm asking if I can somehow put an ipv6-only > > machine on the internet and have it accessible via ipv4. I dimly > > remember something about 4to6 and 6to4 translation - is that how? > > Look into enabling 464XLAT. > > Mark. > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > When you search 464XLAT in Google , you may find some links below : https://datatracker.ietf.org/doc/html/rfc6877 464XLAT: Combination of Stateful and Stateless Translation https://sites.google.com/site/tmoipv6/464xlat 464XLAT -- A Solution for Providing IPv4 Services Over and IPv6-only Network https://en.wikipedia.org/wiki/IPv6_transition_mechanism IPv6 transition mechanism among many others ... "464XLAT" information is based on the above message , because I am learning it from the above message . I thought more extensive information would be useful ... With best wishes for all humanity ... Mehmet Erol Sanliturk From owner-freebsd-questions@freebsd.org Thu Sep 30 07:55:28 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id C5D436AD4C6 for ; Thu, 30 Sep 2021 07:55:28 +0000 (UTC) (envelope-from m.e.sanliturk@gmail.com) Received: from mail-vs1-xe2a.google.com (mail-vs1-xe2a.google.com [IPv6:2607:f8b0:4864:20::e2a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKlsX13byz4n7N for ; Thu, 30 Sep 2021 07:55:28 +0000 (UTC) (envelope-from m.e.sanliturk@gmail.com) Received: by mail-vs1-xe2a.google.com with SMTP id az15so6194498vsb.8 for ; Thu, 30 Sep 2021 00:55:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=TOy+inIGERzppkaNgD8OQ80F8sePlBrngIPLPnMJwl4=; b=f8P4pOJK/OiCtW8evM76/ARpLM4giedN9ade6Kt57dU2flSimujq7/CrnIROIqKi69 7yyqldruAFBGYrm+eotsvrSiJ0PmyloPlcZp9jqFn1cb2kESmqmH+7SCxL8/eupsuA1R mymZ5Aohdllqh1o1b19BQtg8ZW8RYdOMoWtYWllKxTeoxgyXILnvpPoyXWhK+lufrDWV rC5uM1MCN5Axc/y9ErOpd9P0YsA8cYx9sNhNWMSqEKhKpYMp+EYtiaIPKsrJdEaXYeiY R3KelWTpdt1alyLlbuX6iWzsAfRwo8C2O+mufXoERj4I7hazAs6LGTCufB2hhgWUGPzi odJw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=TOy+inIGERzppkaNgD8OQ80F8sePlBrngIPLPnMJwl4=; b=QwZltIWyenYatQ4JpOBSHHIY2b+6zFjG7xsAYd3cEJqSGp6kjfapvLvUuyQF2nkf1l LtbshCdiaQv6tNitBv7e+xaT0dOKco6RgDsJHmv0RP91QHz4d+Ezz1qq0JdCzF1eCRMB ZnAnP35Z/nePjWiSReUzQkKb72FQw/Y5+wwJ+kij5fc9qcqY0wpifo1oQuJeiWlvyutO 78gSrv0gKSdGLpQPsJP61PwnVowrPh3R/x5dJ0QwtdJM49mwfqGnwIPIa9bOe/EA2pny mltOQxVXJY/6itNyG9XXBNiJqkk4aN6whiqnRUcaVZeFluPPDh5y4J1noCSkQcTOQCSo qs2g== X-Gm-Message-State: AOAM532dq/0JkF8K4ytvOZG5Q1dFadXkU200ftAI2qF1oX+MxfuXzvWW l3AQbUhmbAY/aslEjLz78OXhowgmWtvKZ2L2XiERzAY/dqo= X-Google-Smtp-Source: ABdhPJwLwAEsL4GqKKv38nSbHgS8rAajYe3vOQ3BEZS+F/oEAQOQU8iBPW8gkpPSyqO6uGDZdn62zL/8lqbcffzVYWo= X-Received: by 2002:a67:f685:: with SMTP id n5mr2029265vso.31.1632988527444; Thu, 30 Sep 2021 00:55:27 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Mehmet Erol Sanliturk Date: Thu, 30 Sep 2021 10:54:51 +0300 Message-ID: Subject: Re: Login to FreeBSD To: Luiz Greff Cc: FreeBSD X-Rspamd-Queue-Id: 4HKlsX13byz4n7N X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=f8P4pOJK; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of mesanliturk@gmail.com designates 2607:f8b0:4864:20::e2a as permitted sender) smtp.mailfrom=mesanliturk@gmail.com X-Spamd-Result: default: False [-4.00 / 15.00]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; MID_RHS_MATCH_FROMTLD(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-0.998]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; TAGGED_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::e2a:from]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 07:55:28 -0000 I am resending my message as a more informative email based on http://docs.freebsd.org/cgi/mid.cgi?f7176147-4965-0090-700c-9e5ca22a3fa6 *Date: * Wed, 29 Sep 2021 09:58:39 +0100*From: * Matthew Seaman Amended part is written inside the message . On Wed, Sep 29, 2021 at 11:55 AM Mehmet Erol Sanliturk < m.e.sanliturk@gmail.com> wrote: > > > On Wed, Sep 29, 2021 at 10:58 AM Luiz Greff wrote: > >> *Dear Friends, Greetings!* >> >> I am Luiz Alberto Greff, from Guarulhos, S=C3=A3o Paulo, Brazil, student= of >> Computation Engineering of Univesp, S=C3=A3o Paulo State Virtual Univers= ity. >> >> For various reasons, even historical ones, and especially to attend my >> classes, I want to use the FreeBSD, because I know it's the better >> operating system. >> >> On 01Sep2021, I downloaded the following installation files from the >> FreeBSD website: >> >> *File Name >> File >> Size Date* >> FreeBSD-13.0-Release-i386-disc1.iso 792469504 >> 2021-Apr-09 >> 06:58 >> FreeBSD-13.0-Release-i386-memstick.img 872096256 2021-Apr-09 >> 07:26 >> https://download.freebsd.org/ftp/releases/i386/i386/ISO-IMAGES/13.0/ >> >> FreeBSD-13.0-Release-amd64-disc1.iso 971974656 2021-Apr-09 >> 07:24 >> FreeBSD-13.0-Release-amd64-memstick.img 1090900480 2021-Apr-09 07:53 >> https://download.freebsd.org/ftp/releases/amd64/amd64/ISO-IMAGES/13.0/ >> >> With the SourceForge's Win32 Disk Imager v0.90, I installed >> *"FreeBSD-13.0-Release-i386-memstick.img"* on a flash drive, using a >> Pentium 4 / Win Xp-SP3 / 32-bit computer. With the flash drive I install= ed >> FreeBSD on a Hard Drive. All normal, until FreeBSD required Login / >> Password and rejected all login attempts. I tried everything. Where did = I >> go wrong? How can I finally open the FreeBSD working screen? >> >> *Thank you very much for your attention and help,* >> >> Luiz Alberto Greff >> *Guarulhos - S=C3=A3o Paulo - Brazil* >> *Luiz Alberto Greff / **Ci=C3=AAncia e Tecnologia / * >> *Guarulhos-SP* >> _______________________________________________ >> >> > > > You are saying that "I am reaching for the 'Login / Password' screen ."= . > > This means that installation is completed successfully . > > Unfortunately , within the Handbook : > > https://docs.freebsd.org/en/books/handbook/ > FreeBSD Handbook > > I could not find any information about how to login to the starting > FreeBSD . > > Please check installation steps specified in the Handbook to determine whether there is a missed part or erroneously skipped part or unrecorded information such as passwords . If there are such incorrect steps , correct your installation ( if possible ) or reinstall the image correctly once more . > In the following manual pages , > > https://www.freebsd.org/cgi/man.cgi > FreeBSD Manual Pages > > > ( Please be careful about the phrase in the box and in the URL of the > page which should be > "manpath=3DFreeBSD+13.0-RELEASE+and+Ports" > conforming to the your FreeBSD version . ) > ) > > > write > > login > > to the empty box at the left of the "man" box and press enter . > > > You will see > > > https://www.freebsd.org/cgi/man.cgi?query=3Dlogin&apropos=3D0&sektion=3D0= &manpath=3DFreeBSD+13.0-RELEASE+and+Ports&arch=3Ddefault&format=3Dhtml > > LOGIN(1)=09 > > Please , proceed from this page ... > > > > > My knowledge is so much to help you . > > > With my best wishes for all humanity ... > > > Mehmet Erol Sanliturk > > > > > > > From owner-freebsd-questions@freebsd.org Thu Sep 30 08:08:37 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 03B276AD821 for ; Thu, 30 Sep 2021 08:08:37 +0000 (UTC) (envelope-from mark@tinka.africa) Received: from the-host.tinka.africa (the-host.tinka.africa [105.22.37.14]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKm8h0NPlz4njM for ; Thu, 30 Sep 2021 08:08:36 +0000 (UTC) (envelope-from mark@tinka.africa) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tinka.africa; s=tinka; h=In-Reply-To:From:References:Cc:To:Subject: MIME-Version:Date:Message-ID:Content-Type:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=/cVZH0FwHMMHvqBW8QUd5GWeLncfPNJV6k9Km1m32wo=; b=YIEiAppAJfOhhOttYS16tKCHL QHzak7ZV5RxRTkWCwyiUHF5jyVr2Wc3gPAyjx/a5FhuCZUeye0Jc9M1rZ0Qclqfg6UZJEFccVSAeD 4KmGmHvfK2gg6xgNoR97kYFkbqcZCAKeqAS986Sr8oNKzyTSyHpVWGHoS6TITCXEXizJUpvYrSs32 QL2/lPGviPlbVrlFkFzwDDpzFtk/FQQaJQV64dxgdGXranA/YI0UUov6IGTrdvSjwUIqh0d1VP3X0 0Yc1WlF6zC1aFjoNHfI/FAaCzXXIGrUPoRQqRWwJs6Of2dkJAvamnzyi4NNlOupaUTdhQRWQcNpti 8GG1VV3Ng==; Received: from localhost ([127.0.0.1]) by the-host.tinka.africa with esmtp (Exim 4.94) (envelope-from ) id R08MM8-000B6J-AX; Thu, 30 Sep 2021 10:08:32 +0200 Message-ID: <770daea1-bb29-8883-86d2-d6fd2f9b8f54@tinka.africa> Date: Thu, 30 Sep 2021 10:08:31 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Thunderbird/91.1.2 Subject: Re: ipv4 and ipv6 question Content-Language: en-US To: Mehmet Erol Sanliturk Cc: FreeBSD Questions Mailing List References: <3f61bb73-f5dd-ca19-bbef-e494bc450a30@tinka.africa> From: Mark Tinka In-Reply-To: X-Rspamd-Queue-Id: 4HKm8h0NPlz4njM X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=tinka.africa header.s=tinka header.b=YIEiAppA; dmarc=pass (policy=none) header.from=tinka.africa; spf=pass (mx1.freebsd.org: domain of mark@tinka.africa designates 105.22.37.14 as permitted sender) smtp.mailfrom=mark@tinka.africa X-Spamd-Result: default: False [-3.00 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[tinka.africa:s=tinka]; FREEFALL_USER(0.00)[mark]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:105.22.37.14]; NEURAL_HAM_LONG(-1.00)[-1.000]; TAGGED_RCPT(0.00)[]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[tinka.africa:+]; RCPT_COUNT_TWO(0.00)[2]; HFILTER_HELO_2(1.00)[the-host.tinka.africa]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[tinka.africa,none]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:37100, ipnet:105.16.0.0/12, country:MU]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 08:08:37 -0000 On 9/30/21 09:35, Mehmet Erol Sanliturk wrote: > > When you search > > 464XLAT > > in Google , you may find some links below : > > > https://datatracker.ietf.org/doc/html/rfc6877 > 464XLAT: Combination of Stateful and Stateless Translation > > https://sites.google.com/site/tmoipv6/464xlat >  464XLAT -- A Solution for Providing IPv4 Services Over and IPv6-only > Network > > > https://en.wikipedia.org/wiki/IPv6_transition_mechanism > IPv6 transition mechanism > > among many others ... > > > > "464XLAT" information is based on  the above message , because I am > learning it from the above message . > I thought more extensive information would be useful ... I'd also recommend Googl'ing "Jordi Palet" in relation to 464XLAT as well. Plenty of preso's he has done on deployment guidelines, e.t.c., on various platforms including Linux. I operate a service provider backbone, so we would deploy 464XLAT on a Juniper or Cisco router. But I know that it can be deployed on Linux (and perhaps, other UNIX) platforms. I've seen some rambling in the wild. Mark. From owner-freebsd-questions@freebsd.org Thu Sep 30 08:48:11 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id CC9546AE03E for ; Thu, 30 Sep 2021 08:48:11 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from wout2-smtp.messagingengine.com (wout2-smtp.messagingengine.com [64.147.123.25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKn2L71MPz4s4V for ; Thu, 30 Sep 2021 08:48:10 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.west.internal (Postfix) with ESMTP id 37E8B3200C6B for ; Thu, 30 Sep 2021 04:48:04 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute6.internal (MEProxy); Thu, 30 Sep 2021 04:48:04 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm3; bh=avDxQLbwHHHQR1uNOoLOnoOjwdq BaWk95IG05oO13Rw=; b=ycJS2qAXQpbCbDM+fILGmrlzfV+TKyTTP8avWN8+C/C mG4GStp+gsP518eOqvikIwBUQgIYVKXi8jiC/OeqBcn+FdyorgxZOr1iTtpq+9Ol LmHiFDRU947QRj2uuhg0hAym1QMEJzvRkc2TmQ1hkksCAzTs0WOAMgPzt7t8lDbK Jwqkav1gq2SUzRgyNPP4Y6eQ6NMOiTL2HduBQt3T6x87EyIClB3PPEtnS/tkhkV4 bSSvFtkkyziT6sNBIAgfe3OFAVn8KevvVfaF5jnV+j7KlzVBxTrZu2RZDndQLVBU JFTk7WCeVUPuFa+BXQScUQWb/AkaPo1i6OJhGca5bhg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=avDxQL bwHHHQR1uNOoLOnoOjwdqBaWk95IG05oO13Rw=; b=i3PMMNa9eMvjry0BkvZd9H 2dBxyn6b8hoz2wjzZ1NAZm9xHj2Jf1c3pwTOM4LEsXCD9qRNdmkuH/c22h4Qp8Wm aTg5rmfzuWbDoCmNKEiBuVt/P0wu5rOBFFJbfS18dkIKE1Va+9c7iHvOzFd6Jlff GCL0D4ZRnxZ/lpt04qwje99KWphvPQl8uxVZm5WWtct7orV+/NWVqtu/4FwE/0Pi gd6GUrqrbDYLPvYYkXi70UobJ5OwJdXcOPGFp85g1F2bTJRAcr5c/pEyYGMftPdh 9AwpbxgxO3xBfhwT+Uy3XRTfoclvKDn2pPp7ST0IXkRLVSBbsV4mUJBmng8yagQg == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudekgedgtdejucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre ertddtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseii hiigshhtrdhnvghtqeenucggtffrrghtthgvrhhnpedtheeigfdvudefkeekvddtfedvte dttdekuddvgeevlefftdekffdujedvhfduteenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehtvggthhdqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Thu, 30 Sep 2021 04:48:03 -0400 (EDT) Date: Thu, 30 Sep 2021 09:48:01 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: Re: ipv4 and ipv6 question Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org References: <3f61bb73-f5dd-ca19-bbef-e494bc450a30@tinka.africa> <770daea1-bb29-8883-86d2-d6fd2f9b8f54@tinka.africa> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="A9j5RWh5MYJ9YWm0" Content-Disposition: inline In-Reply-To: <770daea1-bb29-8883-86d2-d6fd2f9b8f54@tinka.africa> X-Rspamd-Queue-Id: 4HKn2L71MPz4s4V X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b=ycJS2qAX; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=i3PMMNa9; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 64.147.123.25) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-6.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:64.147.123.0/24, country:US]; RCVD_IN_DNSWL_LOW(-0.10)[64.147.123.25:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm3]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; RWL_MAILSPIKE_POSSIBLE(0.00)[64.147.123.25:from]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 08:48:11 -0000 --A9j5RWh5MYJ9YWm0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Thanks for the suggestions, looks like i've got some reading to do! --=20 J. --A9j5RWh5MYJ9YWm0 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFVebgACgkQs8o7QhFz NAXYIw//Z1Kn+T82XdKIQr4IK0oywa45GXp2p0AGRmTPDpUTCQ/8yZk1ZIHa33Td BqX0ltm577W5ZRlEs2fNwt+KNshmOOn8z1BFj6LL+h5+8d8J7nI644S72ef3ZU7P KxRjOoMp2ajVr69RyjHSxz+ITbw3kF+fdvAUFhZwHPt6Zp3OVIx5cvl72j0wn6za 0H8l7l3U+rK7KXh+VYGGD7cIqgi5ALw1TNK2skec6scuKOuSlT444XZMEAVykDog Ku9ok1SMjT+1AHXJ/G2pUTbcS+6HQG/fwoBOqPX42jLy2ZVe6+kB512WNgiAhrIG OaRXt83i+E/Fh4muEHyu5JWJPqa31Cnl0X7DR1jt0jkZ9gMRet+dFOkYdP9GYVCa SS3xXAN3jcCQB8xFyAXh8PzUBxeNZ291c0ya3FvJbz+uB27bkRaDy4qMBw7wejN5 lPLpLNgtIoaGIyqtTg2AMKUMiOFRBgmiRT3EzVkOtaKYPQVHMnU0HRz3hn5JleWS Xif+VWaf15Sir/28XZ5gfuU1tZPzu99CG7PigrAjhOMKItDH5HQ3Tlwx1wPykD0I l4a1HuyjfzfhHs/bmFStVf1DM7VGjClUrbkxMODC8fJsMzEpkWIXKtb2k+Yx2G9W j232yk9oddJ5sP2UAt0C+d5iF61QGZtt34bMUYk5yOsGwLcxPCY= =hYHq -----END PGP SIGNATURE----- --A9j5RWh5MYJ9YWm0-- From owner-freebsd-questions@freebsd.org Thu Sep 30 15:46:58 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id EFFCD6B39C5 for ; Thu, 30 Sep 2021 15:46:58 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [IPv6:2607:f3e0:0:1::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smarthost1.sentex.ca", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKyKZ0HT2z3wS9 for ; Thu, 30 Sep 2021 15:46:57 +0000 (UTC) (envelope-from mike@sentex.net) Received: from pyroxene2a.sentex.ca (pyroxene19.sentex.ca [199.212.134.19]) by smarthost1.sentex.ca (8.16.1/8.16.1) with ESMTPS id 18UFkoGd031201 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Thu, 30 Sep 2021 11:46:51 -0400 (EDT) (envelope-from mike@sentex.net) Received: from [IPv6:2607:f3e0:0:4::29] ([IPv6:2607:f3e0:0:4:0:0:0:29]) by pyroxene2a.sentex.ca (8.16.1/8.15.2) with ESMTPS id 18UFkoe3001755 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO); Thu, 30 Sep 2021 11:46:50 -0400 (EDT) (envelope-from mike@sentex.net) To: FreeBSD Questions From: mike tancsa Subject: expired Lets Encrypt CA and fetch Message-ID: Date: Thu, 30 Sep 2021 11:46:50 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 Content-Language: en-US X-Rspamd-Queue-Id: 4HKyKZ0HT2z3wS9 X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of mike@sentex.net designates 2607:f3e0:0:1::12 as permitted sender) smtp.mailfrom=mike@sentex.net X-Spamd-Result: default: False [-1.21 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; FREEFALL_USER(0.00)[mike]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f3e0::/32]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[sentex.net]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[3]; NEURAL_HAM_MEDIUM(-1.00)[-0.999]; TO_DN_ALL(0.00)[]; MIME_BASE64_TEXT(0.10)[]; NEURAL_SPAM_SHORT(0.99)[0.992]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:11647, ipnet:2607:f3e0::/32, country:CA]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 15:46:59 -0000 SSBub3RpY2VkIG9uIFJFTEVOR18xMSBib3hlcyB0aGF0IGZldGNoIGlzIGZhaWxpbmcsIGV2 ZW4gd2l0aCBhbiB1cGRhdGVkDQpjYSBidW5kbGUuDQoNCmVnLg0KDQolIGZldGNoIGh0dHBz Oi8vZXhwaXJlZC1yMy10ZXN0LnNjb3R0aGVsbWUuY28udWsvDQpDZXJ0aWZpY2F0ZSB2ZXJp ZmljYXRpb24gZmFpbGVkIGZvciAvTz1EaWdpdGFsIFNpZ25hdHVyZSBUcnVzdA0KQ28uL0NO PURTVCBSb290IENBIFgzDQozNDM3NDM2MDQ3MjplcnJvcjoxNDA5MDA4NjpTU0wNCnJvdXRp bmVzOnNzbDNfZ2V0X3NlcnZlcl9jZXJ0aWZpY2F0ZTpjZXJ0aWZpY2F0ZSB2ZXJpZnkNCmZh aWxlZDovY3Jvc3NidWlsZHMvc3JjLzExL2NyeXB0by9vcGVuc3NsL3NzbC9zM19jbG50LmM6 MTI2OToNCmZldGNoOiBodHRwczovL2V4cGlyZWQtcjMtdGVzdC5zY290dGhlbG1lLmNvLnVr LzogQXV0aGVudGljYXRpb24gZXJyb3INCg0KZmFpbHMgb24gcmVsZW5nMTEgYW5kIHNvbWUg UkVMRU5HXzEyLCBidXQgbm90IHJlY2VudCByZWxlbmcxMy7CoCBEb2VzDQphbnlvbmUga25v dyB3aGF0cyBnb2luZyBvbiBhbmQgd2h5IGl0cyBzbyBpbmNvbnNpc3RlbnQgPyBJZiBJIHJl bW92ZSB0aGUNCmV4cGlyZWQgQ0EgZW50cnkgZnJvbSB0aGUgYnVuZGxlLCBpdCB3b3JrcyBi dXQgSSBkb250IGhhdmUgdG8gb24gYWxsDQpjbGllbnRzID8gQW55b25lIGtub3cgd2hhdHMg Z29pbmcgb24gPw0KDQotLS0gY2Etcm9vdC1uc3MuY3J0wqDCoMKgwqAgMjAyMS0wOS0wMyAy MToxMzoxMC4wMDAwMDAwMDAgLTA0MDANCisrKyAvdG1wL2NhLXJvb3QtbnNzLmNydMKgwqDC oMKgwqDCoMKgIDIwMjEtMDktMzAgMTA6NTQ6MzYuMDAwMDAwMDAwIC0wNDAwDQpAQCAtNDE3 OCw4OCArNDE3OCw2IEBADQrCoC0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0NCsKgDQrCoA0K LQ0KLUNlcnRpZmljYXRlOg0KLcKgwqDCoCBEYXRhOg0KLcKgwqDCoMKgwqDCoMKgIFZlcnNp b246IDMgKDB4MikNCi3CoMKgwqDCoMKgwqDCoCBTZXJpYWwgTnVtYmVyOg0KLcKgwqDCoMKg wqDCoMKgwqDCoMKgwqAgNDQ6YWY6YjA6ODA6ZDY6YTM6Mjc6YmE6ODk6MzA6Mzk6ODY6MmU6 Zjg6NDA6NmINCi3CoMKgwqDCoMKgwqDCoCBTaWduYXR1cmUgQWxnb3JpdGhtOiBzaGExV2l0 aFJTQUVuY3J5cHRpb24NCi3CoMKgwqDCoMKgwqDCoCBJc3N1ZXI6IE8gPSBEaWdpdGFsIFNp Z25hdHVyZSBUcnVzdCBDby4sIENOID0gRFNUIFJvb3QgQ0EgWDMNCi3CoMKgwqDCoMKgwqDC oCBWYWxpZGl0eQ0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgTm90IEJlZm9yZTogU2VwIDMw IDIxOjEyOjE5IDIwMDAgR01UDQotwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBOb3QgQWZ0ZXIg OiBTZXAgMzAgMTQ6MDE6MTUgMjAyMSBHTVQNCi3CoMKgwqDCoMKgwqDCoCBTdWJqZWN0OiBP ID0gRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uLCBDTiA9IERTVCBSb290IENBIFgzDQot wqDCoMKgwqDCoMKgwqAgU3ViamVjdCBQdWJsaWMgS2V5IEluZm86DQotwqDCoMKgwqDCoMKg wqDCoMKgwqDCoCBQdWJsaWMgS2V5IEFsZ29yaXRobTogcnNhRW5jcnlwdGlvbg0KLcKgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBSU0EgUHVibGljLUtleTogKDIwNDggYml0KQ0K LcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBNb2R1bHVzOg0KLcKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIDAwOmRmOmFmOmU5Ojk3OjUwOjA4OjgzOjU3 OmI0OmNjOjYyOjY1OmY2OjkwOg0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgIDgyOmVjOmM3OmQzOjJjOjZiOjMwOmNhOjViOmVjOmQ5OmMzOjdkOmM3OjQwOg0K LcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIGMxOjE4OjE0OjhiOmUw OmU4OjMzOjc2OjQ5OjJhOmUzOjNmOjIxOjQ5OjkzOg0KLcKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgIGFjOjRlOjBlOmFmOjNlOjQ4OmNiOjY1OmVlOmZjOmQzOjIx OjBmOjY1OmQyOg0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIDJh OmQ5OjMyOjhmOjhjOmU1OmY3Ojc3OmIwOjEyOjdiOmI1Ojk1OmMwOjg5Og0KLcKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIGEzOmE5OmJhOmVkOjczOjJlOjdhOjBj OjA2OjMyOjgzOmEyOjdlOjhhOjE0Og0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgIDMwOmNkOjExOmEwOmUxOjJhOjM4OmI5Ojc5OjBhOjMxOmZkOjUwOmJkOjgw Og0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIDY1OmRmOmI3OjUx OjYzOjgzOmM4OmUyOjg4OjYxOmVhOjRiOjYxOjgxOmVjOg0KLcKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgIDUyOjZiOmI5OmEyOmUyOjRiOjFhOjI4OjlmOjQ4OmEz OjllOjBjOmRhOjA5Og0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg IDhlOjNlOjE3OjJlOjFlOmRkOjIwOmRmOjViOmM2OjJhOjhhOmFiOjJlOmJkOg0KLcKgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIDcwOmFkOmM1OjBiOjFhOjI1Ojkw Ojc0OjcyOmM1OjdiOjZhOmFiOjM0OmQ2Og0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgIDMwOjg5OmZmOmU1OjY4OjEzOjdiOjU0OjBiOmM4OmQ2OmFlOmVjOjVh OjljOg0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIDkyOjFlOjNk OjY0OmIzOjhjOmM2OmRmOmJmOmM5OjQxOjcwOmVjOjE2OjcyOg0KLcKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIGQ1OjI2OmVjOjM4OjU1OjM5OjQzOmQwOmZjOmZk OjE4OjVjOjQwOmYxOjk3Og0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgIGViOmQ1OjlhOjliOjhkOjFkOmJhOmRhOjI1OmI5OmM2OmQ4OmRmOmMxOjE1Og0KLcKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIDAyOjNhOmFiOmRhOjZlOmYx OjNlOjJlOmY1OjVjOjA4OjljOjNjOmQ2OjgzOg0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgIDY5OmU0OjEwOjliOjE5OjJhOmI2OjI5OjU3OmUzOmU1OjNkOjli OjlmOmYwOg0KLcKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIDAyOjVk DQotwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIEV4cG9uZW50OiA2NTUzNyAoMHgx MDAwMSkNCi3CoMKgwqDCoMKgwqDCoCBYNTA5djMgZXh0ZW5zaW9uczoNCi3CoMKgwqDCoMKg wqDCoMKgwqDCoMKgIFg1MDl2MyBCYXNpYyBDb25zdHJhaW50czogY3JpdGljYWwNCi3CoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgQ0E6VFJVRQ0KLcKgwqDCoMKgwqDCoMKgwqDC oMKgwqAgWDUwOXYzIEtleSBVc2FnZTogY3JpdGljYWwNCi3CoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqAgQ2VydGlmaWNhdGUgU2lnbiwgQ1JMIFNpZ24NCi3CoMKgwqDCoMKgwqDC oMKgwqDCoMKgIFg1MDl2MyBTdWJqZWN0IEtleSBJZGVudGlmaWVyOg0KLcKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoCBDNDpBNzpCMTpBNDo3QjoyQzo3MTpGQTpEQjpFMTo0Qjo5 MDo3NTpGRjpDNDoxNTo2MDo4NTo4OToxMA0KLcKgwqDCoCBTaWduYXR1cmUgQWxnb3JpdGht OiBzaGExV2l0aFJTQUVuY3J5cHRpb24NCi3CoMKgwqDCoMKgwqDCoMKgIGEzOjFhOjJjOjli OjE3OjAwOjVjOmE5OjFlOmVlOjI4OjY2OjM3OjNhOmJmOjgzOmM3OjNmOg0KLcKgwqDCoMKg wqDCoMKgwqAgNGI6YzM6MDk6YTA6OTU6MjA6NWQ6ZTM6ZDk6NTk6NDQ6ZDI6M2U6MGQ6M2U6 YmQ6OGE6NGI6DQotwqDCoMKgwqDCoMKgwqDCoCBhMDo3NDoxZjpjZToxMDo4Mjo5Yzo3NDox YToxZDo3ZTo5ODoxYTpkZDpjYjoxMzo0YjpiMzoNCi3CoMKgwqDCoMKgwqDCoMKgIDIwOjQ0 OmU0OjkxOmU5OmNjOmZjOjdkOmE1OmRiOjZhOmU1OmZlOmU2OmZkOmUwOjRlOmRkOg0KLcKg wqDCoMKgwqDCoMKgwqAgYjc6MDA6M2E6YjU6NzA6NDk6YWY6ZjI6ZTU6ZWI6MDI6ZjE6ZDE6 MDI6OGI6MTk6Y2I6OTQ6DQotwqDCoMKgwqDCoMKgwqDCoCAzYTo1ZTo0ODpjNDoxODoxZTo1 ODoxOTo1ZjoxZTowMjo1YTpmMDowYzpmMTpiMTphZDphOToNCi3CoMKgwqDCoMKgwqDCoMKg IGRjOjU5Ojg2OjhiOjZlOmU5OjkxOmY1Ojg2OmNhOmZhOmI5OjY2OjMzOmFhOjU5OjViOmNl Og0KLcKgwqDCoMKgwqDCoMKgwqAgZTI6YTc6MTY6NzM6NDc6Y2I6MmI6Y2M6OTk6YjA6Mzc6 NDg6Y2Y6ZTM6NTY6NGI6ZjU6Y2Y6DQotwqDCoMKgwqDCoMKgwqDCoCAwZjowYzo3MjozMjo4 NzpjNjpmMDo0NDpiYjo1Mzo3Mjo2ZDo0MzpmNToyNjo0ODo5YTo1MjoNCi3CoMKgwqDCoMKg wqDCoMKgIDY3OmI3OjU4OmFiOmZlOjY3Ojc2OjcxOjc4OmRiOjBkOmEyOjU2OjE0OjEzOjM5 OjI0OjMxOg0KLcKgwqDCoMKgwqDCoMKgwqAgODU6YTI6YTg6MDI6NWE6MzA6NDc6ZTE6ZGQ6 NTA6MDc6YmM6MDI6MDk6OTA6MDA6ZWI6NjQ6DQotwqDCoMKgwqDCoMKgwqDCoCA2Mzo2MDo5 YjoxNjpiYzo4ODpjOToxMjplNjpkMjo3ZDo5MTo4YjpmOTozZDozMjo4ZDo2NToNCi3CoMKg wqDCoMKgwqDCoMKgIGI0OmU5OjdjOmIxOjU3Ojc2OmVhOmM1OmI2OjI4OjM5OmJmOjE1OjY1 OjFjOmM4OmY2Ojc3Og0KLcKgwqDCoMKgwqDCoMKgwqAgOTY6NmE6MGE6OGQ6Nzc6MGI6ZDg6 OTE6MGI6MDQ6OGU6MDc6ZGI6Mjk6YjY6MGE6ZWU6OWQ6DQotwqDCoMKgwqDCoMKgwqDCoCA4 MjozNTozNToxMA0KLVNIQTENCkZpbmdlcnByaW50PURBOkM5OjAyOjRGOjU0OkQ4OkY2OkRG Ojk0OjkzOjVGOkIxOjczOjI2OjM4OkNBOjZBOkQ3OjdDOjEzDQotLS0tLS1CRUdJTiBDRVJU SUZJQ0FURS0tLS0tDQotTUlJRFNqQ0NBaktnQXdJQkFnSVFSSyt3Z05hako3cUpNRG1HTHZo QWF6QU5CZ2txaGtpRzl3MEJBUVVGQURBLw0KLU1TUXdJZ1lEVlFRS0V4dEVhV2RwZEdGc0lG TnBaMjVoZEhWeVpTQlVjblZ6ZENCRGJ5NHhGekFWQmdOVkJBTVQNCi1Ea1JUVkNCU2IyOTBJ RU5CSUZnek1CNFhEVEF3TURrek1ESXhNVEl4T1ZvWERUSXhNRGt6TURFME1ERXhOVm93DQot UHpFa01DSUdBMVVFQ2hNYlJHbG5hWFJoYkNCVGFXZHVZWFIxY21VZ1ZISjFjM1FnUTI4dU1S Y3dGUVlEVlFRRA0KLUV3NUVVMVFnVW05dmRDQkRRU0JZTXpDQ0FTSXdEUVlKS29aSWh2Y05B UUVCQlFBRGdnRVBBRENDQVFvQ2dnRUINCi1BTit2NlpkUUNJTlh0TXhpWmZhUWd1ekgweXhy TU1wYjdObkRmY2RBd1JnVWkrRG9NM1pKS3VNL0lVbVRyRTRPDQotcno1SXkyWHUvTk1oRDJY U0t0a3lqNHpsOTNld0VudTFsY0NKbzZtNjdYTXVlZ3dHTW9PaWZvb1VNTTBSb09FcQ0KLU9M bDVDakg5VUwyQVpkKzNVV09EeU9LSVllcExZWUhzVW11NW91SkxHaWlmU0tPZUROb0pqajRY TGg3ZElOOWINCi14aXFLcXk2OWNLM0ZDeG9sa0hSeXhYdHFxelRXTUluLzVXZ1RlMVFMeU5h dTdGcWNraDQ5WkxPTXh0Ky95VUZ3DQotN0JaeTFTYnNPRlU1UTlEOC9SaGNRUEdYNjlXYW00 MGR1dG9sdWNiWTM4RVZBanFyMm03eFBpNzFYQWljUE5hRA0KLWFlUVFteGtxdGlsWDQrVTlt NS93QWwwQ0F3RUFBYU5DTUVBd0R3WURWUjBUQVFIL0JBVXdBd0VCL3pBT0JnTlYNCi1IUThC QWY4RUJBTUNBUVl3SFFZRFZSME9CQllFRk1TbnNhUjdMSEg2MitGTGtIWC94QlZnaFlrUU1B MEdDU3FHDQotU0liM0RRRUJCUVVBQTRJQkFRQ2pHaXliRndCY3FSN3VLR1kzT3IrRHh6OUx3 d21nbFNCZDQ5bFpSTkkrRFQ2OQ0KLWlrdWdkQi9PRUlLY2RCb2RmcGdhM2NzVFM3TWdST1NS NmN6OGZhWGJhdVgrNXYzZ1R0MjNBRHExY0Vtdjh1WHINCi1BdkhSQW9zWnk1UTZYa2pFR0I1 WUdWOGVBbHJ3RFBHeHJhbmNXWWFMYnVtUjlZYksrcmxtTTZwWlc4N2lweFp6DQotUjhzcnpK bXdOMGpQNDFaTDljOFBESEl5aDhid1JMdFRjbTFEOVNaSW1sSm50MWlyL21kMmNYamJEYUpX RkJNNQ0KLUpER0ZvcWdDV2pCSDRkMVFCN3dDQ1pBQTYyUmpZSnNXdklqSkV1YlNmWkdMK1Qw eWpXVzA2WHl4VjNicXhiWW8NCi1PYjhWWlJ6STluZVdhZ3FOZHd2WWtRc0VqZ2ZiS2JZSzdw MkNOVFVRDQotLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQ0KLQ0KLQ0KLQ0KwqBDZXJ0aWZp Y2F0ZToNCsKgwqDCoMKgIERhdGE6DQrCoMKgwqDCoMKgwqDCoMKgIFZlcnNpb246IDMgKDB4 MikNCg0K From owner-freebsd-questions@freebsd.org Thu Sep 30 16:41:02 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id D5A1B6B4917 for ; Thu, 30 Sep 2021 16:41:02 +0000 (UTC) (envelope-from merlyn@geeks.org) Received: from mail.geeks.org (mail.geeks.org [IPv6:2001:4980:3333:1::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKzWy1fQvz4V0Q for ; Thu, 30 Sep 2021 16:41:02 +0000 (UTC) (envelope-from merlyn@geeks.org) Received: from mail.geeks.org (localhost [127.0.0.1]) by after-clamsmtpd.geeks.org (Postfix) with ESMTP id E1A8410154 for ; Thu, 30 Sep 2021 11:40:54 -0500 (CDT) Received: by mail.geeks.org (Postfix, from userid 1003) id D19FE10153; Thu, 30 Sep 2021 11:40:54 -0500 (CDT) Date: Thu, 30 Sep 2021 11:40:54 -0500 From: Doug McIntyre To: FreeBSD Questions Subject: Re: expired Lets Encrypt CA and fetch Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-Virus-Scanned: ClamAV using ClamSMTP X-Rspamd-Queue-Id: 4HKzWy1fQvz4V0Q X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of merlyn@geeks.org designates 2001:4980:3333:1::1 as permitted sender) smtp.mailfrom=merlyn@geeks.org X-Spamd-Result: default: False [-3.16 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ptr]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[geeks.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[3]; TO_DN_ALL(0.00)[]; NEURAL_HAM_SHORT(-0.86)[-0.860]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:7753, ipnet:2001:4980::/32, country:US]; RCVD_TLS_LAST(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 16:41:02 -0000 Let's Encrypt used to cross-sign with DST Root CA X3, but that expired, and they stopped doing that a year ago. They've been cross-signing with their own root, but there is still fallout from DST Root CA X3 expiring. I am seeing my own stuff be affected in weird ways too. https://community.letsencrypt.org/t/production-chain-changes/150739/4 On Thu, Sep 30, 2021 at 11:46:50AM -0400, mike tancsa wrote: > I noticed on RELENG_11 boxes that fetch is failing, even with an updated > ca bundle. > > eg. > > % fetch https://expired-r3-test.scotthelme.co.uk/ > Certificate verification failed for /O=Digital Signature Trust > Co./CN=DST Root CA X3 > 34374360472:error:14090086:SSL > routines:ssl3_get_server_certificate:certificate verify > failed:/crossbuilds/src/11/crypto/openssl/ssl/s3_clnt.c:1269: > fetch: https://expired-r3-test.scotthelme.co.uk/: Authentication error > > fails on releng11 and some RELENG_12, but not recent releng13. Does > anyone know whats going on and why its so inconsistent ? If I remove the > expired CA entry from the bundle, it works but I dont have to on all > clients ? Anyone know whats going on ? > > --- ca-root-nss.crt 2021-09-03 21:13:10.000000000 -0400 > +++ /tmp/ca-root-nss.crt 2021-09-30 10:54:36.000000000 -0400 > @@ -4178,88 +4178,6 @@ > -----END CERTIFICATE----- > > > - > -Certificate: > - Data: > - Version: 3 (0x2) > - Serial Number: > - 44:af:b0:80:d6:a3:27:ba:89:30:39:86:2e:f8:40:6b > - Signature Algorithm: sha1WithRSAEncryption > - Issuer: O = Digital Signature Trust Co., CN = DST Root CA X3 > - Validity > - Not Before: Sep 30 21:12:19 2000 GMT > - Not After : Sep 30 14:01:15 2021 GMT > - Subject: O = Digital Signature Trust Co., CN = DST Root CA X3 > - Subject Public Key Info: > - Public Key Algorithm: rsaEncryption > - RSA Public-Key: (2048 bit) > - Modulus: > - 00:df:af:e9:97:50:08:83:57:b4:cc:62:65:f6:90: > - 82:ec:c7:d3:2c:6b:30:ca:5b:ec:d9:c3:7d:c7:40: > - c1:18:14:8b:e0:e8:33:76:49:2a:e3:3f:21:49:93: > - ac:4e:0e:af:3e:48:cb:65:ee:fc:d3:21:0f:65:d2: > - 2a:d9:32:8f:8c:e5:f7:77:b0:12:7b:b5:95:c0:89: > - a3:a9:ba:ed:73:2e:7a:0c:06:32:83:a2:7e:8a:14: > - 30:cd:11:a0:e1:2a:38:b9:79:0a:31:fd:50:bd:80: > - 65:df:b7:51:63:83:c8:e2:88:61:ea:4b:61:81:ec: > - 52:6b:b9:a2:e2:4b:1a:28:9f:48:a3:9e:0c:da:09: > - 8e:3e:17:2e:1e:dd:20:df:5b:c6:2a:8a:ab:2e:bd: > - 70:ad:c5:0b:1a:25:90:74:72:c5:7b:6a:ab:34:d6: > - 30:89:ff:e5:68:13:7b:54:0b:c8:d6:ae:ec:5a:9c: > - 92:1e:3d:64:b3:8c:c6:df:bf:c9:41:70:ec:16:72: > - d5:26:ec:38:55:39:43:d0:fc:fd:18:5c:40:f1:97: > - eb:d5:9a:9b:8d:1d:ba:da:25:b9:c6:d8:df:c1:15: > - 02:3a:ab:da:6e:f1:3e:2e:f5:5c:08:9c:3c:d6:83: > - 69:e4:10:9b:19:2a:b6:29:57:e3:e5:3d:9b:9f:f0: > - 02:5d > - Exponent: 65537 (0x10001) > - X509v3 extensions: > - X509v3 Basic Constraints: critical > - CA:TRUE > - X509v3 Key Usage: critical > - Certificate Sign, CRL Sign > - X509v3 Subject Key Identifier: > - C4:A7:B1:A4:7B:2C:71:FA:DB:E1:4B:90:75:FF:C4:15:60:85:89:10 > - Signature Algorithm: sha1WithRSAEncryption > - a3:1a:2c:9b:17:00:5c:a9:1e:ee:28:66:37:3a:bf:83:c7:3f: > - 4b:c3:09:a0:95:20:5d:e3:d9:59:44:d2:3e:0d:3e:bd:8a:4b: > - a0:74:1f:ce:10:82:9c:74:1a:1d:7e:98:1a:dd:cb:13:4b:b3: > - 20:44:e4:91:e9:cc:fc:7d:a5:db:6a:e5:fe:e6:fd:e0:4e:dd: > - b7:00:3a:b5:70:49:af:f2:e5:eb:02:f1:d1:02:8b:19:cb:94: > - 3a:5e:48:c4:18:1e:58:19:5f:1e:02:5a:f0:0c:f1:b1:ad:a9: > - dc:59:86:8b:6e:e9:91:f5:86:ca:fa:b9:66:33:aa:59:5b:ce: > - e2:a7:16:73:47:cb:2b:cc:99:b0:37:48:cf:e3:56:4b:f5:cf: > - 0f:0c:72:32:87:c6:f0:44:bb:53:72:6d:43:f5:26:48:9a:52: > - 67:b7:58:ab:fe:67:76:71:78:db:0d:a2:56:14:13:39:24:31: > - 85:a2:a8:02:5a:30:47:e1:dd:50:07:bc:02:09:90:00:eb:64: > - 63:60:9b:16:bc:88:c9:12:e6:d2:7d:91:8b:f9:3d:32:8d:65: > - b4:e9:7c:b1:57:76:ea:c5:b6:28:39:bf:15:65:1c:c8:f6:77: > - 96:6a:0a:8d:77:0b:d8:91:0b:04:8e:07:db:29:b6:0a:ee:9d: > - 82:35:35:10 > -SHA1 > Fingerprint=DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13 > ------BEGIN CERTIFICATE----- > -MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/ > -MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT > -DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow > -PzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uMRcwFQYDVQQD > -Ew5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB > -AN+v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi+DoM3ZJKuM/IUmTrE4O > -rz5Iy2Xu/NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEq > -OLl5CjH9UL2AZd+3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9b > -xiqKqy69cK3FCxolkHRyxXtqqzTWMIn/5WgTe1QLyNau7Fqckh49ZLOMxt+/yUFw > -7BZy1SbsOFU5Q9D8/RhcQPGX69Wam40dutolucbY38EVAjqr2m7xPi71XAicPNaD > -aeQQmxkqtilX4+U9m5/wAl0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV > -HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62+FLkHX/xBVghYkQMA0GCSqG > -SIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or+Dxz9LwwmglSBd49lZRNI+DT69 > -ikugdB/OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX+5v3gTt23ADq1cEmv8uXr > -AvHRAosZy5Q6XkjEGB5YGV8eAlrwDPGxrancWYaLbumR9YbK+rlmM6pZW87ipxZz > -R8srzJmwN0jP41ZL9c8PDHIyh8bwRLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5 > -JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubSfZGL+T0yjWW06XyxV3bqxbYo > -Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ > ------END CERTIFICATE----- > - > - > - > Certificate: > Data: > Version: 3 (0x2) > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" From owner-freebsd-questions@freebsd.org Thu Sep 30 16:55:40 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 0A7366B48E2 for ; Thu, 30 Sep 2021 16:55:40 +0000 (UTC) (envelope-from kudzu@tenebras.com) Received: from mail-lf1-x12f.google.com (mail-lf1-x12f.google.com [IPv6:2a00:1450:4864:20::12f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKzrq3gc8z4WfT for ; Thu, 30 Sep 2021 16:55:39 +0000 (UTC) (envelope-from kudzu@tenebras.com) Received: by mail-lf1-x12f.google.com with SMTP id j5so23218847lfg.8 for ; Thu, 30 Sep 2021 09:55:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tenebras-com.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=6UwGWbTIMWoaa30TXhmmX6avQFOdk/WSp7PFpVB11P0=; b=AXFxlamMMaRZY961m9Sw2CgqhOUASvoE1OZHUi7KHum7U25+xeS1Py/IXKl1kl2vtf jb/lHf3fjOLD4s4qeo+ypXRlrEZAIOwuxaYpRQ9cy95UU1t7rq4gKbgwUywwQbdfr4GE 5M8XCyi4WjFIilfGK/oubmPUClu+8B2IMj3EJZ3FxFbx6SqRVlB4HdcnF8spx2bfT3yW eLE5NUQCLQZ+XJcRGKExdgZqccFp+QFOeOxa/QEZtWEVqC2lDbcHxQU+HNuY2I7cLXnT AZwGlRYSdHmfYjs3VmdRamJho8dfsATosI4R00tVDUBSCRaQolbFPhqhzWdw1H1MD6ER 0rAw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=6UwGWbTIMWoaa30TXhmmX6avQFOdk/WSp7PFpVB11P0=; b=TkGfBojhEeumK5gvzKK/x/ptfWt1w13ztvrEOwBtzrR8CJnwB9Pt69RF4yDVOuSz5X zL75Nk6uyPV7lboRFia6T+0QxcO9CCWrXdL/SVFLrUDY1M8FFiqfx7H8vgHE32g87ZUE dHlvZcyoC6la4Gnep6Vbk/3OXFRHBGhwiAcxqH4Dl/oqrE0o5vQPI9q7CUiahjizRYsZ 9ICxrTltd0dkPN92N55US0v9jpt4ba6186SEuL+xPpxxMuCHjucyEocmhFWpO0PfYVO5 CNqwn/g5ek2FfUFc7axx/SPhvsRA4XS17GjA5/0NKzZOH8/ay2+TWRmwmaqs9C8UgW2m QL/w== X-Gm-Message-State: AOAM5316DcShycSObT4M/ZsucJN/VAoxplY5orq3huAoLAVis4WjciBn QvRGmWICEPEv4v7kq2afCmqdmjgMq8F0CuX/KsEjd653ZjaCmg== X-Google-Smtp-Source: ABdhPJxAZyLUIj0agvjDFgo/asjl0/OBu8w2Wt37XVAZQtUnpYdsGFzGil3d0tGbg93FhujViHpVRz+CX3OCCSN7OzM= X-Received: by 2002:a05:6512:12d4:: with SMTP id p20mr281561lfg.328.1633020937828; Thu, 30 Sep 2021 09:55:37 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Michael Sierchio Date: Thu, 30 Sep 2021 09:55:02 -0700 Message-ID: Subject: Re: expired Lets Encrypt CA and fetch To: FreeBSD Questions X-Rspamd-Queue-Id: 4HKzrq3gc8z4WfT X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=tenebras-com.20210112.gappssmtp.com header.s=20210112 header.b=AXFxlamM; dmarc=none; spf=none (mx1.freebsd.org: domain of kudzu@tenebras.com has no SPF policy when checking 2a00:1450:4864:20::12f) smtp.mailfrom=kudzu@tenebras.com X-Spamd-Result: default: False [-3.30 / 15.00]; RCVD_TLS_ALL(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[tenebras-com.20210112.gappssmtp.com:s=20210112]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[tenebras.com]; RCPT_COUNT_ONE(0.00)[1]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[tenebras-com.20210112.gappssmtp.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::12f:from]; R_SPF_NA(0.00)[no SPF record]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 16:55:40 -0000 Are there unexpired certs in the chain that have DST Root CA X3 as their root? Because that should never happen, right? On Thu, Sep 30, 2021 at 9:41 AM Doug McIntyre wrote: > Let's Encrypt used to cross-sign with DST Root CA X3, but that > expired, and they stopped doing that a year ago. > > They've been cross-signing with their own root, but there is still fallout > from > DST Root CA X3 expiring. I am seeing my own stuff be affected in weird > ways too. > > https://community.letsencrypt.org/t/production-chain-changes/150739/4 > > > > On Thu, Sep 30, 2021 at 11:46:50AM -0400, mike tancsa wrote: > > I noticed on RELENG_11 boxes that fetch is failing, even with an updated > > ca bundle. > > > > eg. > > > > % fetch https://expired-r3-test.scotthelme.co.uk/ > > Certificate verification failed for /O=Digital Signature Trust > > Co./CN=DST Root CA X3 > > 34374360472:error:14090086:SSL > > routines:ssl3_get_server_certificate:certificate verify > > failed:/crossbuilds/src/11/crypto/openssl/ssl/s3_clnt.c:1269: > > fetch: https://expired-r3-test.scotthelme.co.uk/: Authentication error > > > > fails on releng11 and some RELENG_12, but not recent releng13. Does > > anyone know whats going on and why its so inconsistent ? If I remove the > > expired CA entry from the bundle, it works but I dont have to on all > > clients ? Anyone know whats going on ? > > > > --- ca-root-nss.crt 2021-09-03 21:13:10.000000000 -0400 > > +++ /tmp/ca-root-nss.crt 2021-09-30 10:54:36.000000000 -0400 > > @@ -4178,88 +4178,6 @@ > > -----END CERTIFICATE----- > > > > > > - > > -Certificate: > > - Data: > > - Version: 3 (0x2) > > - Serial Number: > > - 44:af:b0:80:d6:a3:27:ba:89:30:39:86:2e:f8:40:6b > > - Signature Algorithm: sha1WithRSAEncryption > > - Issuer: O = Digital Signature Trust Co., CN = DST Root CA X3 > > - Validity > > - Not Before: Sep 30 21:12:19 2000 GMT > > - Not After : Sep 30 14:01:15 2021 GMT > > - Subject: O = Digital Signature Trust Co., CN = DST Root CA X3 > > - Subject Public Key Info: > > - Public Key Algorithm: rsaEncryption > > - RSA Public-Key: (2048 bit) > > - Modulus: > > - 00:df:af:e9:97:50:08:83:57:b4:cc:62:65:f6:90: > > - 82:ec:c7:d3:2c:6b:30:ca:5b:ec:d9:c3:7d:c7:40: > > - c1:18:14:8b:e0:e8:33:76:49:2a:e3:3f:21:49:93: > > - ac:4e:0e:af:3e:48:cb:65:ee:fc:d3:21:0f:65:d2: > > - 2a:d9:32:8f:8c:e5:f7:77:b0:12:7b:b5:95:c0:89: > > - a3:a9:ba:ed:73:2e:7a:0c:06:32:83:a2:7e:8a:14: > > - 30:cd:11:a0:e1:2a:38:b9:79:0a:31:fd:50:bd:80: > > - 65:df:b7:51:63:83:c8:e2:88:61:ea:4b:61:81:ec: > > - 52:6b:b9:a2:e2:4b:1a:28:9f:48:a3:9e:0c:da:09: > > - 8e:3e:17:2e:1e:dd:20:df:5b:c6:2a:8a:ab:2e:bd: > > - 70:ad:c5:0b:1a:25:90:74:72:c5:7b:6a:ab:34:d6: > > - 30:89:ff:e5:68:13:7b:54:0b:c8:d6:ae:ec:5a:9c: > > - 92:1e:3d:64:b3:8c:c6:df:bf:c9:41:70:ec:16:72: > > - d5:26:ec:38:55:39:43:d0:fc:fd:18:5c:40:f1:97: > > - eb:d5:9a:9b:8d:1d:ba:da:25:b9:c6:d8:df:c1:15: > > - 02:3a:ab:da:6e:f1:3e:2e:f5:5c:08:9c:3c:d6:83: > > - 69:e4:10:9b:19:2a:b6:29:57:e3:e5:3d:9b:9f:f0: > > - 02:5d > > - Exponent: 65537 (0x10001) > > - X509v3 extensions: > > - X509v3 Basic Constraints: critical > > - CA:TRUE > > - X509v3 Key Usage: critical > > - Certificate Sign, CRL Sign > > - X509v3 Subject Key Identifier: > > - > C4:A7:B1:A4:7B:2C:71:FA:DB:E1:4B:90:75:FF:C4:15:60:85:89:10 > > - Signature Algorithm: sha1WithRSAEncryption > > - a3:1a:2c:9b:17:00:5c:a9:1e:ee:28:66:37:3a:bf:83:c7:3f: > > - 4b:c3:09:a0:95:20:5d:e3:d9:59:44:d2:3e:0d:3e:bd:8a:4b: > > - a0:74:1f:ce:10:82:9c:74:1a:1d:7e:98:1a:dd:cb:13:4b:b3: > > - 20:44:e4:91:e9:cc:fc:7d:a5:db:6a:e5:fe:e6:fd:e0:4e:dd: > > - b7:00:3a:b5:70:49:af:f2:e5:eb:02:f1:d1:02:8b:19:cb:94: > > - 3a:5e:48:c4:18:1e:58:19:5f:1e:02:5a:f0:0c:f1:b1:ad:a9: > > - dc:59:86:8b:6e:e9:91:f5:86:ca:fa:b9:66:33:aa:59:5b:ce: > > - e2:a7:16:73:47:cb:2b:cc:99:b0:37:48:cf:e3:56:4b:f5:cf: > > - 0f:0c:72:32:87:c6:f0:44:bb:53:72:6d:43:f5:26:48:9a:52: > > - 67:b7:58:ab:fe:67:76:71:78:db:0d:a2:56:14:13:39:24:31: > > - 85:a2:a8:02:5a:30:47:e1:dd:50:07:bc:02:09:90:00:eb:64: > > - 63:60:9b:16:bc:88:c9:12:e6:d2:7d:91:8b:f9:3d:32:8d:65: > > - b4:e9:7c:b1:57:76:ea:c5:b6:28:39:bf:15:65:1c:c8:f6:77: > > - 96:6a:0a:8d:77:0b:d8:91:0b:04:8e:07:db:29:b6:0a:ee:9d: > > - 82:35:35:10 > > -SHA1 > > Fingerprint=DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13 > > ------BEGIN CERTIFICATE----- > > -MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/ > > -MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT > > -DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow > > -PzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uMRcwFQYDVQQD > > -Ew5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB > > -AN+v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi+DoM3ZJKuM/IUmTrE4O > > -rz5Iy2Xu/NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEq > > -OLl5CjH9UL2AZd+3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9b > > -xiqKqy69cK3FCxolkHRyxXtqqzTWMIn/5WgTe1QLyNau7Fqckh49ZLOMxt+/yUFw > > -7BZy1SbsOFU5Q9D8/RhcQPGX69Wam40dutolucbY38EVAjqr2m7xPi71XAicPNaD > > -aeQQmxkqtilX4+U9m5/wAl0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV > > -HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62+FLkHX/xBVghYkQMA0GCSqG > > -SIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or+Dxz9LwwmglSBd49lZRNI+DT69 > > -ikugdB/OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX+5v3gTt23ADq1cEmv8uXr > > -AvHRAosZy5Q6XkjEGB5YGV8eAlrwDPGxrancWYaLbumR9YbK+rlmM6pZW87ipxZz > > -R8srzJmwN0jP41ZL9c8PDHIyh8bwRLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5 > > -JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubSfZGL+T0yjWW06XyxV3bqxbYo > > -Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ > > ------END CERTIFICATE----- > > - > > - > > - > > Certificate: > > Data: > > Version: 3 (0x2) > > > > _______________________________________________ > > freebsd-questions@freebsd.org mailing list > > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Thu Sep 30 17:23:03 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 58EA96B4B79 for ; Thu, 30 Sep 2021 17:23:03 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [IPv6:2607:f3e0:0:1::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smarthost1.sentex.ca", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HL0SQ4nzqz4bQ6 for ; Thu, 30 Sep 2021 17:23:02 +0000 (UTC) (envelope-from mike@sentex.net) Received: from pyroxene2a.sentex.ca (pyroxene19.sentex.ca [199.212.134.19]) by smarthost1.sentex.ca (8.16.1/8.16.1) with ESMTPS id 18UHN1Hk038701 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Thu, 30 Sep 2021 13:23:01 -0400 (EDT) (envelope-from mike@sentex.net) Received: from [IPv6:2607:f3e0:0:4::29] ([IPv6:2607:f3e0:0:4:0:0:0:29]) by pyroxene2a.sentex.ca (8.16.1/8.15.2) with ESMTPS id 18UHN1rs032393 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO); Thu, 30 Sep 2021 13:23:01 -0400 (EDT) (envelope-from mike@sentex.net) Subject: Re: expired Lets Encrypt CA and fetch To: Michael Sierchio , FreeBSD Questions References: From: mike tancsa Message-ID: Date: Thu, 30 Sep 2021 13:23:01 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US X-Scanned-By: MIMEDefang 2.84 X-Rspamd-Queue-Id: 4HL0SQ4nzqz4bQ6 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of mike@sentex.net designates 2607:f3e0:0:1::12 as permitted sender) smtp.mailfrom=mike@sentex.net X-Spamd-Result: default: False [-3.21 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; FREEFALL_USER(0.00)[mike]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f3e0::/32]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[sentex.net]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; NEURAL_HAM_SHORT(-0.91)[-0.912]; RCPT_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:11647, ipnet:2607:f3e0::/32, country:CA]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 17:23:03 -0000 On 9/30/2021 12:55 PM, Michael Sierchio wrote: > Are there unexpired certs in the chain that have DST Root CA X3 as their > root? Because that should never happen, right? I think its the intermediary cert that is given by the server and the client is not always able to figure out what to use.  Chrome on Windows can hit the URL https://expired-r3-test.scotthelme.co.uk/ ok but my MAC laptop cannot. I was trying to use https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/ to get fetch to work on releng12, but no luck. Its still broken despite trying to explicitly blacklist the CA as suggested. Note, with https://expired-r3-test.scotthelme.co.uk/ I can not get fetch nor curl to work on any freebsd branch.     ---Mike > On Thu, Sep 30, 2021 at 9:41 AM Doug McIntyre wrote: > >> Let's Encrypt used to cross-sign with DST Root CA X3, but that >> expired, and they stopped doing that a year ago. >> >> They've been cross-signing with their own root, but there is still fallout >> from >> DST Root CA X3 expiring. I am seeing my own stuff be affected in weird >> ways too. >> >> https://community.letsencrypt.org/t/production-chain-changes/150739/4 >> >> >> >> On Thu, Sep 30, 2021 at 11:46:50AM -0400, mike tancsa wrote: >>> I noticed on RELENG_11 boxes that fetch is failing, even with an updated >>> ca bundle. >>> >>> eg. >>> >>> % fetch https://expired-r3-test.scotthelme.co.uk/ >>> Certificate verification failed for /O=Digital Signature Trust >>> Co./CN=DST Root CA X3 >>> 34374360472:error:14090086:SSL >>> routines:ssl3_get_server_certificate:certificate verify >>> failed:/crossbuilds/src/11/crypto/openssl/ssl/s3_clnt.c:1269: >>> fetch: https://expired-r3-test.scotthelme.co.uk/: Authentication error >>> >>> fails on releng11 and some RELENG_12, but not recent releng13. Does >>> anyone know whats going on and why its so inconsistent ? If I remove the >>> expired CA entry from the bundle, it works but I dont have to on all >>> clients ? Anyone know whats going on ? >>> >>> --- ca-root-nss.crt 2021-09-03 21:13:10.000000000 -0400 >>> +++ /tmp/ca-root-nss.crt 2021-09-30 10:54:36.000000000 -0400 >>> @@ -4178,88 +4178,6 @@ >>> -----END CERTIFICATE----- >>> >>> >>> - >>> -Certificate: >>> - Data: >>> - Version: 3 (0x2) >>> - Serial Number: >>> - 44:af:b0:80:d6:a3:27:ba:89:30:39:86:2e:f8:40:6b >>> - Signature Algorithm: sha1WithRSAEncryption >>> - Issuer: O = Digital Signature Trust Co., CN = DST Root CA X3 >>> - Validity >>> - Not Before: Sep 30 21:12:19 2000 GMT >>> - Not After : Sep 30 14:01:15 2021 GMT >>> - Subject: O = Digital Signature Trust Co., CN = DST Root CA X3 >>> - Subject Public Key Info: >>> - Public Key Algorithm: rsaEncryption >>> - RSA Public-Key: (2048 bit) >>> - Modulus: >>> - 00:df:af:e9:97:50:08:83:57:b4:cc:62:65:f6:90: >>> - 82:ec:c7:d3:2c:6b:30:ca:5b:ec:d9:c3:7d:c7:40: >>> - c1:18:14:8b:e0:e8:33:76:49:2a:e3:3f:21:49:93: >>> - ac:4e:0e:af:3e:48:cb:65:ee:fc:d3:21:0f:65:d2: >>> - 2a:d9:32:8f:8c:e5:f7:77:b0:12:7b:b5:95:c0:89: >>> - a3:a9:ba:ed:73:2e:7a:0c:06:32:83:a2:7e:8a:14: >>> - 30:cd:11:a0:e1:2a:38:b9:79:0a:31:fd:50:bd:80: >>> - 65:df:b7:51:63:83:c8:e2:88:61:ea:4b:61:81:ec: >>> - 52:6b:b9:a2:e2:4b:1a:28:9f:48:a3:9e:0c:da:09: >>> - 8e:3e:17:2e:1e:dd:20:df:5b:c6:2a:8a:ab:2e:bd: >>> - 70:ad:c5:0b:1a:25:90:74:72:c5:7b:6a:ab:34:d6: >>> - 30:89:ff:e5:68:13:7b:54:0b:c8:d6:ae:ec:5a:9c: >>> - 92:1e:3d:64:b3:8c:c6:df:bf:c9:41:70:ec:16:72: >>> - d5:26:ec:38:55:39:43:d0:fc:fd:18:5c:40:f1:97: >>> - eb:d5:9a:9b:8d:1d:ba:da:25:b9:c6:d8:df:c1:15: >>> - 02:3a:ab:da:6e:f1:3e:2e:f5:5c:08:9c:3c:d6:83: >>> - 69:e4:10:9b:19:2a:b6:29:57:e3:e5:3d:9b:9f:f0: >>> - 02:5d >>> - Exponent: 65537 (0x10001) >>> - X509v3 extensions: >>> - X509v3 Basic Constraints: critical >>> - CA:TRUE >>> - X509v3 Key Usage: critical >>> - Certificate Sign, CRL Sign >>> - X509v3 Subject Key Identifier: >>> - >> C4:A7:B1:A4:7B:2C:71:FA:DB:E1:4B:90:75:FF:C4:15:60:85:89:10 >>> - Signature Algorithm: sha1WithRSAEncryption >>> - a3:1a:2c:9b:17:00:5c:a9:1e:ee:28:66:37:3a:bf:83:c7:3f: >>> - 4b:c3:09:a0:95:20:5d:e3:d9:59:44:d2:3e:0d:3e:bd:8a:4b: >>> - a0:74:1f:ce:10:82:9c:74:1a:1d:7e:98:1a:dd:cb:13:4b:b3: >>> - 20:44:e4:91:e9:cc:fc:7d:a5:db:6a:e5:fe:e6:fd:e0:4e:dd: >>> - b7:00:3a:b5:70:49:af:f2:e5:eb:02:f1:d1:02:8b:19:cb:94: >>> - 3a:5e:48:c4:18:1e:58:19:5f:1e:02:5a:f0:0c:f1:b1:ad:a9: >>> - dc:59:86:8b:6e:e9:91:f5:86:ca:fa:b9:66:33:aa:59:5b:ce: >>> - e2:a7:16:73:47:cb:2b:cc:99:b0:37:48:cf:e3:56:4b:f5:cf: >>> - 0f:0c:72:32:87:c6:f0:44:bb:53:72:6d:43:f5:26:48:9a:52: >>> - 67:b7:58:ab:fe:67:76:71:78:db:0d:a2:56:14:13:39:24:31: >>> - 85:a2:a8:02:5a:30:47:e1:dd:50:07:bc:02:09:90:00:eb:64: >>> - 63:60:9b:16:bc:88:c9:12:e6:d2:7d:91:8b:f9:3d:32:8d:65: >>> - b4:e9:7c:b1:57:76:ea:c5:b6:28:39:bf:15:65:1c:c8:f6:77: >>> - 96:6a:0a:8d:77:0b:d8:91:0b:04:8e:07:db:29:b6:0a:ee:9d: >>> - 82:35:35:10 >>> -SHA1 >>> Fingerprint=DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13 >>> ------BEGIN CERTIFICATE----- >>> -MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/ >>> -MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT >>> -DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow >>> -PzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uMRcwFQYDVQQD >>> -Ew5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB >>> -AN+v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi+DoM3ZJKuM/IUmTrE4O >>> -rz5Iy2Xu/NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEq >>> -OLl5CjH9UL2AZd+3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9b >>> -xiqKqy69cK3FCxolkHRyxXtqqzTWMIn/5WgTe1QLyNau7Fqckh49ZLOMxt+/yUFw >>> -7BZy1SbsOFU5Q9D8/RhcQPGX69Wam40dutolucbY38EVAjqr2m7xPi71XAicPNaD >>> -aeQQmxkqtilX4+U9m5/wAl0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV >>> -HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62+FLkHX/xBVghYkQMA0GCSqG >>> -SIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or+Dxz9LwwmglSBd49lZRNI+DT69 >>> -ikugdB/OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX+5v3gTt23ADq1cEmv8uXr >>> -AvHRAosZy5Q6XkjEGB5YGV8eAlrwDPGxrancWYaLbumR9YbK+rlmM6pZW87ipxZz >>> -R8srzJmwN0jP41ZL9c8PDHIyh8bwRLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5 >>> -JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubSfZGL+T0yjWW06XyxV3bqxbYo >>> -Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ >>> ------END CERTIFICATE----- >>> - >>> - >>> - >>> Certificate: >>> Data: >>> Version: 3 (0x2) >>> >>> _______________________________________________ >>> freebsd-questions@freebsd.org mailing list >>> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >>> To unsubscribe, send any mail to " >> freebsd-questions-unsubscribe@freebsd.org" >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to " >> freebsd-questions-unsubscribe@freebsd.org" >> > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Thu Sep 30 22:50:35 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 97446671E4E for ; Thu, 30 Sep 2021 22:50:35 +0000 (UTC) (envelope-from freebsd-questions@freebsd.org) Received: from estert.com (static.109.134.4.185.clients.grserver.gr [185.4.134.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HL7kM0pmdz50g4 for ; Thu, 30 Sep 2021 22:50:35 +0000 (UTC) (envelope-from freebsd-questions@freebsd.org) Received: from abaforum.es (unknown [195.133.18.123]) by estert.com (Postfix) with ESMTPA id 225B5FB0A for ; Fri, 1 Oct 2021 01:31:03 +0300 (EEST) From: Mail Admin To: freebsd-questions@freebsd.org Subject: FAILURE TO UPDATE EMAIL Date: 1 Oct 2021 00:37:36 +0200 Message-ID: <20211001003735.85577593EB00FFE6@freebsd.org> X-Rspamd-Queue-Id: 4HL7kM0pmdz50g4 X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [0.00 / 15.00]; ASN(0.00)[asn:199246, ipnet:185.4.132.0/22, country:GR]; local_wl_from(0.00)[freebsd.org] MIME-Version: 1.0 Content-Type: text/plain X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 22:50:35 -0000 From owner-freebsd-questions@freebsd.org Thu Sep 30 23:48:47 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 6E2A4672E72 for ; Thu, 30 Sep 2021 23:48:47 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HL91V4dXFz535H for ; Thu, 30 Sep 2021 23:48:46 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 239435C0070 for ; Thu, 30 Sep 2021 19:48:39 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Thu, 30 Sep 2021 19:48:39 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:mime-version:content-type; s= fm3; bh=9tvqFXd6lm5uppAgJT+S75IX8jVSgZ3Q5GiCSL21j3M=; b=tp2JiNyJ QwwwItiP6o+vZt/7PIjt+ad2XrB04gsaThuDrQj5FekSgRWyIed8OK7HhFVqJy5s 0ptRyT8R7nBoXy9tXBDs7fvmvzeVJ5F4s8qCDY1lBHziNaKUjF2rSTr8Oij0OCzz pwPobdfgMDup8pgOnyM+ceZ/7cf4FH/WyTtdZePuM0vEhDG/YvqDXV6jaFdKj8I1 sox11MPSkMF6ZqmtdqwCi8RGPB52YVLcwTYW30holeylOKGrsBqQf2yraXI5na5c ubRrF43xBLD3DHi82Mfs2eRj86cLAuFKRsSb781sIdVWydjIPpo4I883dbOrk2Z4 m0KzKGTUzo+Oqg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; bh=9tvqFXd6lm5uppAgJT+S75IX8jVSg Z3Q5GiCSL21j3M=; b=ePhqIOHRjy1hJEgZCeq80p4iprHJkpSszcqFbo6Z6NUnX 6tYwIjCXzctb8uvaLrjvTPzQT+IuOaXfmfkGCdbRhB1ln+x4A43+m/icLlUqpHR5 UIBVJqtCFZTnw7iB5ZJqXcdl4rXqMsEBAAchcBQc2xc7Lg08kubPueyBOAPox95w XX7TBSNM2ddWtZ9UMiStCOPAQqw4xQbm6Fp/T0lGls7TXuX9wyQVEo30Y62XRxLl vU/9ers+ybKaQSNfAPoNxnYzI0/jUALlROyjZVVy3/utHjnA2x9s+finU9aO3ow9 mWbE7aHn6ngmwiHQs2FfaNtYCnKrMEa7hmcpw85eg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudekhedgvdegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkgggtugesghdtreertd dtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseiihiig shhtrdhnvghtqeenucggtffrrghtthgvrhhnpeevgffhffdtfeekleelhedtjeelvdfhvd egieejveffgfduvdfhteegjeeujeeuieenucevlhhushhtvghrufhiiigvpedtnecurfgr rhgrmhepmhgrihhlfhhrohhmpehtvggthhdqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Thu, 30 Sep 2021 19:48:38 -0400 (EDT) Date: Fri, 1 Oct 2021 00:48:36 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: zfs q regarding backup strategy Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="boN+YW9GFVkJSx36" Content-Disposition: inline X-Rspamd-Queue-Id: 4HL91V4dXFz535H X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b=tp2JiNyJ; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=ePhqIOHR; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 66.111.4.28) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-6.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; RWL_MAILSPIKE_GOOD(0.00)[66.111.4.28:from]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.0.0/20, country:US]; RCVD_IN_DNSWL_LOW(-0.10)[66.111.4.28:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm3]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Sep 2021 23:48:47 -0000 --boN+YW9GFVkJSx36 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, This is a bit chicken-and-egg for me, in that I might be formulating the wrong question, and so getting wrong answers, so I apologise in advance=20 if I'm being dense. Basically the end result I want is to be in a position at a backup site with full backups that can be restored to the live site if needed,=20 or even to get just one required file from that backup, given the filename= =20 and modification time. The backup site has very much more diskspace than the live site. I know how to make the full backup and to send it. What I'm looking for is incremental (or would it be differential) zfs backups (snapshots).=20 So let's say an incremental/differential backup to the remote site=20 happens every 6hrs. If 10 incremential backups happen after the full one, and on the live service someone loses a few files, later adding another few, maybe a couple of those have the same name as before just with a different modification time, all the while this is happening 24hrs pass. How are the accumulated differential/incremental snaps incorporated into the main backup? Would I need to run something else on the backup server to integrate the snaps with the full backup? Or would all=20 the snaps need to be kept?=20 How would one tell if the required files in this example are in one snap and not in the others? If the policy was to keep everything in backup regardless of whether it was deleted or not from the live service (so the backup is like a=20 write-only representation) I guess the approach would be different=20 to say if the backup just had to be the latest representation of the=20 data on the live server. But if it's "keep everything" then what happens if the live server makes foo.txt then deletes it then makes foo.txt 10 days later in the same place? All the while these (incremental/differential) snaps have been arriving every 6 hrs. Additionally the live site is the old zfs on releng/12.2-p10 and=20 the backup site is with the OpenZFS on stable/13 which might be an issue if they handle things significantly differently. thanks advance for any suggestions or any scripts/tools you can recommend. --=20 J. --boN+YW9GFVkJSx36 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFWTMwACgkQs8o7QhFz NAUdHg/+IDQBKwdvpa9M1MpQcswefXin+QwdFJBhrcklnu84pWa2hVZvi/gLNJUe KIGvoTpRHQe8cGOiKoqJs7seazUp8IP7UN90h117feUKAZfBTqtWMl7IjyN4F05Z 9RhudykJ6YUIyVTzmXC/ZZOpaBTENaeIJkthofKekVKyMZhJ/35MBSfWno0GOqbS MzwNxk/g+vMIRHWRnZEB00DceCPwd6qYypnBFBNWojf6Bvc9V4S9muUTvO2ubUFL nr+7/2GqiJvKYC2rk/huYzjHdSR5gF50pEyENDWyw0MDNk6a44T9/ByZokVup3V3 oEUXcBIYlT+AaO93qJbHGZg6aj62l4JXZxX8h/MhuU5cn0WSw/YEI8btNN3m/SI9 L2o54MT3Eev0E1YDcSVuTqVdVdPzKCH82rkbY8jF39XkpVpQG+A9lMYAgMb0oJCM KrrrZ5NOMwqGr+jIZhDllIqTTTxrDDiWrjxdBo9irw5YeIg7OPilLBn4qzX7/If9 EAi0O9BTl2nGt75SkvpIAMcbLwj93CCocCPUDq9G3A5Bc7ww9gNELALHl0eZDIUa F/L5m99KWT+/L9w8n4ZdvWb7p+8JRieYRALMUOB4ee92+P+ogPCSzcLQa7e6uNzi hg9D5FERLbUrKRYVHwKAtyY2hIOFQS5ocdPtBMS0tMNGMQFhuLA= =1jSr -----END PGP SIGNATURE----- --boN+YW9GFVkJSx36-- From owner-freebsd-questions@freebsd.org Fri Oct 1 01:15:00 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id A9FC2674327 for ; Fri, 1 Oct 2021 01:15:00 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from wout2-smtp.messagingengine.com (wout2-smtp.messagingengine.com [64.147.123.25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLBwz1Pwyz58s1 for ; Fri, 1 Oct 2021 01:14:59 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.west.internal (Postfix) with ESMTP id 25373320079B for ; Thu, 30 Sep 2021 21:14:58 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Thu, 30 Sep 2021 21:14:58 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm3; bh=BsUY4jHaoVz8g4keZ0wGrztQt7z coRUH/SNwfgT1MEc=; b=gwnKoMB0e1wSzFsu2u2myYSsKUWpmW8yyw8jQw56zuZ BclEo61Qiq94O0+XNhQ538of0wX1v2eYJik7vZ+auAjf4jkUcN6xDImFAmIcPseK BONGV0KcI+N2XLrtusvWnjb/+S66m7YPXWBO6RkID5v+TttaBWjMQusnTADjwnmh 5IPOd3Tef8+Wsskxe3QurOAXUnFa7iXBRdKZADfxRUFPpDoGwLQQo7TTDg5OsMGt 0vPoRbmivYPmhBobs4BWfbYoFtDAm+hMx5OpnOASZqy5HhpEMG8N/ZiaTOYVar+3 CYmE7T20fZDo8xnaIBynWAHnoaSEofnVt/n+Ddoqvyw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=BsUY4j HaoVz8g4keZ0wGrztQt7zcoRUH/SNwfgT1MEc=; b=O1/1aurhHyn5Qmea+ZD4bB SuyuF6nnM516yXogQYgq/43NFcXtc9upQJoAwPHwjg//7eF4YJ6aaZLTviErGe6E J6ts+ZGQu7e3ksUY0dg/oQFySMd6LyzcC6ZToVVDq75F7qrkjawzuJ6dE7U3y33Y vQ75czwl+sig+UkiHYN0S+t1G2EhUf4E9ALVCUz54xk5xWvzMOnbQlWXCspfeJQM VRNYl+0M1K/rLpoEbKCdXBiBF/LBNPTByGsM9Ko2yjboOS7fEFwo9/Qmo9BPQgmG kOEc9Di6UG8YbsUl/5dPrTMUo9O1K7g5iIHZxVtnivk8C/Ol6OS6Y4FLT6AuEbKA == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudekhedggeefucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre ertddtudenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseii hiigshhtrdhnvghtqeenucggtffrrghtthgvrhhnpeevffeujefggefhfeekudetvdehtd ehudfgffeigeefveefheegvddvtdehffeljeenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehtvggthhdqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Thu, 30 Sep 2021 21:14:57 -0400 (EDT) Date: Fri, 1 Oct 2021 02:14:55 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: Re: expired Lets Encrypt CA and fetch Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="/aLlHImdz615w1yu" Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 4HLBwz1Pwyz58s1 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b=gwnKoMB0; dkim=pass header.d=messagingengine.com header.s=fm3 header.b="O1/1aurh"; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 64.147.123.25) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-6.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:64.147.123.0/24, country:US]; RCVD_IN_DNSWL_LOW(-0.10)[64.147.123.25:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm3]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; RWL_MAILSPIKE_POSSIBLE(0.00)[64.147.123.25:from]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 01:15:00 -0000 --/aLlHImdz615w1yu Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, On Thu, Sep 30, 2021 at 11:46:50AM -0400, mike tancsa wrote: >fails on releng11 and some RELENG_12, but not recent releng13.=A0 Does >anyone know whats going on and why its so inconsistent ? If I remove the >expired CA entry from the bundle, it works but I dont have to on all >clients ? Anyone know whats going on ? It fails for me on 12.2-p7 and 13.0-p4 and stable/13 as of a few days ago with fetch. On the stable/13 the site works in firefox-93.0,2 On lynx-2.8.9.1_1,1 on the same system I get a warning if I want to continue as it's expired (n) choose (y) and it loads On 12.2-p7 lynx-current-2.9.0d9 is the same. I have no clue why your recent releng13 works. Maybe your fetch on=20 there is linked to the ssl a browser would use?=20 --=20 J. --/aLlHImdz615w1yu Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFWYQUACgkQs8o7QhFz NAWoERAAiNEeGpDw3R25bUxbnMKUE11HXAKVeneHLvyiriLtkLZ80hbW4U1VtR3F Am3qONyG4e9/xidnZAqTlRzhwQXUud22iRmzNpessg3+GzAiQFBGBx1T8kfrEfuh NcVPE6e2XJ3HJtQRpM0CmmQMb5JuUPxa6mfhGw80x0ES4ZnHuVJHFPB24mAaXB1z swifx+wIrM4rFf9J3zcJs+aQREXRsV2yfzovSH5uZXgXpd8Fp/JWkdkiZetTrj/W zZJcdP8S1BcJUDi/JWNe0z5hZAr3lTE0FgOPyeohiG90H1o5HBq55xkhHOjtec0E pvRtSV2Nl8STN9VzVnyEMGDY9H0JZdrWTIVmSDUfEMQHyC0WUkCMmThps82NXPs0 Kykd35Etts+FDKND5JPXQTC9m9AZDpamkB2NdcPrI7Pmbu9wuHnGhW4Z31MHyjhD nEn1jDAJJ/5HIX01BxpZ38TeIzVfnxHWTALx8BS+wJgDxtMj2lz8Y9B8Ta+Tmm7a VNjicRe3E7jRAWUc6gn5Y0MxL1ECl8OKdAxsWVttrm4iPO4t3Sv7HcMblXqj63Da lRYRHRtalQWEpKBGyGeHdXD3h2mJ31svGoxGX41rNjL2aKUE18OaZV41W72VJttt kRwQvRbIpLE1UDqxhnDmnXjcp60oIAqBQ8oK97f+owlxjJTiiU4= =2UQD -----END PGP SIGNATURE----- --/aLlHImdz615w1yu-- From owner-freebsd-questions@freebsd.org Fri Oct 1 03:06:38 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 875826762E3 for ; Fri, 1 Oct 2021 03:06:38 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from holgerdanske.com (holgerdanske.com [184.105.128.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "xray.he.net", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLFPm6Xfwz3HCX for ; Fri, 1 Oct 2021 03:06:36 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=holgerdanske.com; s=nov-20210719-112354; t=1633057588; bh=Pqool6n08TZ7HtRTWMgb+bTGPz2dGTS87KhWfJCad94=; h=Received:Message-ID:Date:MIME-Version:User-Agent:Subject: Content-Language:To:References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding; b=1NZ5h9zG68x/oHy9lPZqDVsA6dxDMJP2oVUxBw5+wDKVb+B7S9U07jw6N3hIYQ5Zq vCy+Dwa+P/O3J67F6DWJIio/Ha3LYbRAPY/YNIFtiNKOa+VjutWbhDvcNuB1xODRT7 I6oYgPIYjDr3XZT4/lWrCBsMKxi09sO0hDEpj0unyqeZ58uoLuriFZ7zcjWcu4j3oW 4i9bEDrYz2cxljQAIgERm9NQl8O5ESL8lUEMuORQmpNWAo0gfL6kNPn6EUl+uFO0qZ ODRcxwpozulM7xLpvfheMZoFqQcFc145LeeVp+AAZ+826N7wFsOEF7O8GmMV/mTcp4 +/GEWYyEiLP4x057ZU6WmMxqo3q5RjGLyKF78Uqgu7YXvq5EJwveOzPxpHBZgCYhcO c2V9Vx5uZ+XGMAT8cBRAwtDRXCJs1ZLMt0cGfb5AAD2VHbytWI3SUkdZU/nMtL8QMz F+d9CZRdZ8OHHxhwfU/HiBxUcos7k5mU5jNxdv49pQs0FZ36aP8ffAywzY0JprYbU1 gM0lU6nGgt14cvz7kGO4fFqhdAMqhMheWTJuWRZ71YYE0WOoWFoXc1V5eo+jNNcjdS ky+AZyeKVU2/6kNDqrG7O7fC4u36pwUaiouzv2YUMzkUckBs6VOZ3zy3vR3tuYcvcR hHc0VobPURVt4SAdzPX/KeR4= Received: from 99.100.19.101 (99-100-19-101.lightspeed.frokca.sbcglobal.net [99.100.19.101]) by holgerdanske.com with ESMTPSA (TLS_AES_128_GCM_SHA256:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(128):Mac=AEAD) (SMTP-AUTH username dpchrist@holgerdanske.com, mechanism PLAIN) for ; Thu, 30 Sep 2021 20:06:28 -0700 Message-ID: Date: Thu, 30 Sep 2021 20:06:28 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.1.2 Subject: Re: zfs q regarding backup strategy Content-Language: en-US To: freebsd-questions@freebsd.org References: From: David Christensen In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HLFPm6Xfwz3HCX X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=holgerdanske.com header.s=nov-20210719-112354 header.b=1NZ5h9zG; dmarc=pass (policy=none) header.from=holgerdanske.com; spf=pass (mx1.freebsd.org: domain of dpchrist@holgerdanske.com designates 184.105.128.27 as permitted sender) smtp.mailfrom=dpchrist@holgerdanske.com X-Spamd-Result: default: False [-4.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[holgerdanske.com:s=nov-20210719-112354]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; DKIM_TRACE(0.00)[holgerdanske.com:+]; DMARC_POLICY_ALLOW(-0.50)[holgerdanske.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:6939, ipnet:184.104.0.0/15, country:US]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 03:06:38 -0000 On 9/30/21 16:48, tech-lists wrote: > Hi, > > This is a bit chicken-and-egg for me, in that I might be formulating the > wrong question, and so getting wrong answers, so I apologise in advance > if I'm being dense. > > Basically the end result I want is to be in a position at a backup site > with full backups that can be restored to the live site if needed, or > even to get just one required file from that backup, given the filename > and modification time. The backup site has very much more diskspace than > the live site. > > I know how to make the full backup and to send it. What I'm looking for > is incremental (or would it be differential) zfs backups (snapshots). So > let's say an incremental/differential backup to the remote site happens > every 6hrs. > > If 10 incremential backups happen after the full one, and on the > live service someone loses a few files, later adding another few, maybe > a couple of those have the same name as before just with a different > modification time, all the while this is happening 24hrs pass. > > How are the accumulated differential/incremental snaps incorporated into > the main backup? Would I need to run something else on the backup > server to integrate the snaps with the full backup? Or would all the > snaps need to be kept? > How would one tell if the required files in this example are in one snap > and not in the others? > > If the policy was to keep everything in backup regardless of whether it > was deleted or not from the live service (so the backup is like a > write-only representation) I guess the approach would be different to > say if the backup just had to be the latest representation of the data > on the live server. But if it's "keep everything" then what happens > if the live server makes foo.txt then deletes it then makes foo.txt 10 > days later in the same place? All the while these > (incremental/differential) snaps have been arriving every 6 hrs. > > Additionally the live site is the old zfs on releng/12.2-p10 and the > backup site is with the OpenZFS on stable/13 which might be an issue > if they handle things significantly differently. > > thanks advance for any suggestions or any scripts/tools you can > recommend. I have a SOHO environment with a FreeBSD 12.2-RELEASE machine providing Samba and CVS services. Michael Warren Lucas is my go-to author for FreeBSD and ZFS: https://mwl.io/nonfiction/os https://mwl.io/archives/2128 https://mwl.io/archives/2140 I use zfs-auto-snapshot for snapshot creation/ management, and homebrew commands/ scripts for replication. The homebrew stuff is problematic. I need to evaluate something like zfs-replicate (available as a FreeBSD package of the same name): https://pypi.org/project/zfs-replicate/ David From owner-freebsd-questions@freebsd.org Fri Oct 1 06:23:19 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 45C3C673A42 for ; Fri, 1 Oct 2021 06:23:19 +0000 (UTC) (envelope-from dhenin@gmail.com) Received: from mail-qk1-x730.google.com (mail-qk1-x730.google.com [IPv6:2607:f8b0:4864:20::730]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLKmk3c0Vz4b4Y for ; Fri, 1 Oct 2021 06:23:18 +0000 (UTC) (envelope-from dhenin@gmail.com) Received: by mail-qk1-x730.google.com with SMTP id 73so8198938qki.4 for ; Thu, 30 Sep 2021 23:23:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:message-id:date:delivered-to:mime-version; bh=Mb6/luWgnQ+XEZBe4ZVP/QtorjUMXTgGAzxFXuZ9ySM=; b=Z1O8OurPR6pccOY46JO8eJl99mBilc9rvsB67DnTwVN7cpIOljSodIa26+e7nEYYmw BSeblzj/DRGVv+E0MRhF/jfOAKVxV8jrugrAQ9Nrd9UmkIlXvFx/iFykaRDbB4al2G4R OmivNyMTjoR4sWh2a8ngRR7plYbg0+5yDlz/Rn///Qm3fxoULiS0HPdBJyV9rAiBbhDe j+/zTa1wJVH+ARlhd7XxFVUE4xnTq1QFNmefRoP9xQDIm7sjBIzGdWPZ9l0fz4wbIN2t q9PlVK56QHbwCuruE6AcP0GoJeIuTJa/QNEw87MT7g3rZizMvH2nEhOtYm8sepR6QaD2 Dlvw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:message-id:date:delivered-to :mime-version; bh=Mb6/luWgnQ+XEZBe4ZVP/QtorjUMXTgGAzxFXuZ9ySM=; b=q1G95LRGVaPAlwXvs8wQi7aHcjlG64r+/roQb+Bc449vEWX7n8ZMzo7x/HLMhGVzTT MHjpEnE1UMCfaXqSp6CbhDc10NjoJruwOhUCxXdCINuf/8BfyYcbj/XNZ8xSwI+3HnLd X8hZ0oiF1ksS8YMPIvSd/1L1nKRkatgIQMdJAPexwZCJB39N5bVixed82N9L8xcm2ytp 3TrRyDEeurhE9/TDbOYd7+Ez2pzGY9mcE2VOsvt+QdWKLTydkOFI4JcQO9WDqziv/G0Z Ar3ky+XfMoJ7KX8eYb94kupn9bK3OxDbIzKU+1BDtroBhyw1Ud5PA0RmQOLI7LUhLXeV vggg== X-Gm-Message-State: AOAM532gSM5PLD2i+H6R1UvfPvZyY0F6WP1PQ16wjjTiy+5F79koEIPV 2r3nRsdlefrUlTm58Ocfa862GCwG47Y= X-Google-Smtp-Source: ABdhPJxgQf+thoOjeXeWpzl8tzS8ZYKSz4t+NOumLePgkhe4EpIXygxszdqeY1ID4FRPYEYcrkUGfA== X-Received: by 2002:a05:620a:142:: with SMTP id e2mr8406887qkn.249.1633069391992; Thu, 30 Sep 2021 23:23:11 -0700 (PDT) Received: from send-14.prod.mixmax-mailer.com (send-14.prod.mixmax-mailer.com. [52.200.43.104]) by smtp.gmail.com with ESMTPSA id o16sm3387025qta.54.2021.09.30.23.23.11 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 30 Sep 2021 23:23:11 -0700 (PDT) From: "=?UTF-8?Q?=CF=86__Dh=C3=A9nin_Jean-Jacques?=" To: freebsd-questions@freebsd.org Subject: day of the date in french Message-Id: Date: Fri, 01 Oct 2021 06:23:08 +0000 Delivered-To: rsm@mixmax.com MIME-Version: 1.0 X-Rspamd-Queue-Id: 4HLKmk3c0Vz4b4Y X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=Z1O8OurP; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of dhenin@gmail.com designates 2607:f8b0:4864:20::730 as permitted sender) smtp.mailfrom=dhenin@gmail.com X-Spamd-Result: default: False [-3.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::730:from]; FROM_NAME_EXCESS_SPACE(1.00)[]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 06:23:19 -0000 Hello, despite my research i am not able to get the day of the date in = french on freebsd, while on mac it works: on mac os terminal: [Desktop]:;=C2=A0 ( export lc_all=3Dfr_FR.UTF-8 ; export LC_TIME=3Dfr_FR.= UTF-8 ; date +\%A_\%Y\%m\%d )Vendredi_20211001 on freebsd: [Desktop]:;=C2=A0 uname -aFreeBSD pyracmon.dhenin.fr 12.2-RELEASE-p7 ...= [Desktop]:;=C2=A0 (export lc_all =3D fr_FR.UTF-8; export LC_TIME =3D fr_FR.= UTF-8; date + \% A _ \% Y \% m \% d)Friday_20211001 An idea ? thanks=C2=A0a lot Best regards ----------------------------------= -----------------------=F0=9F=93=9E 06 89 66 51 35 (V)=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 Dh=C3=A9nin Jean-Jacques ( ..)=C2=A0=C2=A0=C2=A0=C2=A0 48, rue= de la Justice 78300 Poissy c(')(')=C2=A0 dhenin@gmail.com --------------------------------------------------------- From owner-freebsd-questions@freebsd.org Fri Oct 1 07:03:46 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 9C45767EC94 for ; Fri, 1 Oct 2021 07:03:46 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from ms-10.1blu.de (ms-10.1blu.de [178.254.4.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLLgP56jBz4s77 for ; Fri, 1 Oct 2021 07:03:45 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from [188.174.50.169] (helo=localhost.unixarea.de) by ms-10.1blu.de with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mWCa2-0007pF-4o for freebsd-questions@freebsd.org; Fri, 01 Oct 2021 09:03:38 +0200 Received: from localhost.my.domain (localhost [127.0.0.1]) by localhost.unixarea.de (8.16.1/8.14.9) with ESMTPS id 19173bfG001713 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for ; Fri, 1 Oct 2021 09:03:37 +0200 (CEST) (envelope-from guru@unixarea.de) Received: (from guru@localhost) by localhost.my.domain (8.16.1/8.14.9/Submit) id 19173bpT001712 for freebsd-questions@freebsd.org; Fri, 1 Oct 2021 09:03:37 +0200 (CEST) (envelope-from guru@unixarea.de) X-Authentication-Warning: localhost.my.domain: guru set sender to guru@unixarea.de using -f Date: Fri, 1 Oct 2021 09:03:37 +0200 From: Matthias Apitz To: freebsd-questions@freebsd.org Subject: Re: day of the date in french Message-ID: Reply-To: Matthias Apitz Mail-Followup-To: freebsd-questions@freebsd.org References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-Operating-System: FreeBSD 13.0-CURRENT r368166 (amd64) X-message-flag: Mails containing HTML will not be read! Please send only plain text. X-Con-Id: 51246 X-Con-U: 0-guru X-Originating-IP: 188.174.50.169 X-Rspamd-Queue-Id: 4HLLgP56jBz4s77 X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of guru@unixarea.de has no SPF policy when checking 178.254.4.101) smtp.mailfrom=guru@unixarea.de X-Spamd-Result: default: False [-1.52 / 15.00]; HAS_REPLYTO(0.00)[guru@unixarea.de]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_XOIP(0.00)[]; HAS_XAW(0.00)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; NEURAL_HAM_SHORT(-1.00)[-1.000]; RECEIVED_SPAMHAUS_PBL(0.00)[188.174.50.169:received]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:42730, ipnet:178.254.0.0/19, country:DE]; MIME_TRACE(0.00)[0:+]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.95)[-0.953]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-0.96)[-0.964]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; DMARC_NA(0.00)[unixarea.de]; R_SPF_NA(0.00)[no SPF record]; RWL_MAILSPIKE_POSSIBLE(0.00)[178.254.4.101:from]; MID_RHS_NOT_FQDN(0.50)[]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 07:03:46 -0000 El día viernes, octubre 01, 2021 a las 06:23:08a. m. +0000, φ Dhénin Jean-Jacques escribió: > Hello, > despite my research i am not able to get the day of the date in french on > freebsd, while on mac it works: > on mac os terminal: > [Desktop]:;  ( export lc_all=fr_FR.UTF-8 ; export LC_TIME=fr_FR.UTF-8 ; date > +\%A_\%Y\%m\%d )Vendredi_20211001 > on freebsd: > [Desktop]:;  uname -aFreeBSD pyracmon.dhenin.fr 12.2-RELEASE-p7 ...[Desktop]:;  > (export lc_all = fr_FR.UTF-8; export LC_TIME = fr_FR.UTF-8; date + \% A _ \% Y > \% m \% d)Friday_20211001 > > An idea ? thanks a lot guru@vm-r368166:~ $ export LANG=fr_FR.UTF-8 guru@vm-r368166:~ $ date ven. 1 oct. 2021 09:02:01 CEST guru@vm-r368166:~ $ export LANG=es_ES.UTF-8 guru@vm-r368166:~ $ date viernes, 1 de octubre de 2021, 09:02:44 CEST matthias -- Matthias Apitz, ✉ guru@unixarea.de, http://www.unixarea.de/ +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub August 13, 1961: Better a wall than a war. And, while the GDR was still existing, no German troups and bombs have been killed in Yugoslavia, Afghanistan, Afrika... From owner-freebsd-questions@freebsd.org Fri Oct 1 07:11:35 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 5EE2067E9E5 for ; Fri, 1 Oct 2021 07:11:35 +0000 (UTC) (envelope-from dhenin@gmail.com) Received: from mail-qt1-x834.google.com (mail-qt1-x834.google.com [IPv6:2607:f8b0:4864:20::834]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLLrQ2Ldhz4tx4 for ; Fri, 1 Oct 2021 07:11:34 +0000 (UTC) (envelope-from dhenin@gmail.com) Received: by mail-qt1-x834.google.com with SMTP id d8so8113351qtd.5 for ; Fri, 01 Oct 2021 00:11:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:message-id:date:in-reply-to:references:delivered-to :mime-version; bh=sFBzlRUsX8clPlF0tfqJVvZIDqtvF5PWmGVoCN/c9eA=; b=ckpcCDd2/2q0Q2RFiOdDDJCAA87Hr5QLkakkCw2a6U7IbIGWZW9NmbUUwG39jBF4Tf Rl5wHH0JsfVLisRzfbC/4zCbW16JpRF0wLyzUHQ8vCyAnYx1Nah5AWyCEi6gaMZUyfTC QmuYnE2lQVrUZf1jf2ENnZPRxzOTzdXjBm8MIRi9k7874UKbfiI6jSpI/tfIYal6gOxI Vj1BzRNr8I8hFe4QDlbYImwtk2tyxTMgXK5EMQpj4M1OIAN93B5+yn/XJEgh6npFopOg qHaKJhorZN3U7/JzcPReezoTnyj/+1e3otsxHndx8R4l5dA4LaqgFyOONo/f9dDyif5j ka5g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:message-id:date:in-reply-to :references:delivered-to:mime-version; bh=sFBzlRUsX8clPlF0tfqJVvZIDqtvF5PWmGVoCN/c9eA=; b=OOPxu+6vw/umfGcarWqnUBUVrRCYNvzpdlP6eaZ3k69WjmQwL+3aoc5UfTOWUtIHaO 5lVyaUV9BY+aOx4eWvYfyQaiwdi+h97BVY/8qIQ0WHt/ui0ijR+HmB+HKJhJoktW5rPH 52cK/0eiALQPmDvTds+X77RrfRaZEvSqVguyu98O0isnTKNEJQM2Z/gFj46h6aB2cudC IDGBNY9SWkd7OWN28QVSjtMwkXvZuhluRHiK10JNuZyP6Uk4I8WgBPXmxCcNUn0eALo7 GSCq2I/l3EQv/geefbjqa4zuvPlY2lMS0uTafdQncaYZKu/DHyQeaFVPeMVl56C+mSTL /0Ng== X-Gm-Message-State: AOAM531tH37PSfBBmH+/uPqofFvMPmhwdZI1Iy+E8HrIXjy/ogsJspjp gpZ8bquCdeahJ82fht6LmZtPNnNy/D0= X-Google-Smtp-Source: ABdhPJw66FZrvhWFlU3oR9KZ8EgQqGZQCKtspCDRZZ9+iytkb+k2h24aNak1OIvnnu39BffrD25CpQ== X-Received: by 2002:ac8:4b4f:: with SMTP id e15mr11493895qts.219.1633072287393; Fri, 01 Oct 2021 00:11:27 -0700 (PDT) Received: from send-14.prod.mixmax-mailer.com (send-14.prod.mixmax-mailer.com. [52.200.43.104]) by smtp.gmail.com with ESMTPSA id u20sm2662346qke.66.2021.10.01.00.11.26 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 01 Oct 2021 00:11:26 -0700 (PDT) From: "=?UTF-8?Q?=CF=86__Dh=C3=A9nin_Jean-Jacques?=" To: Matthias Apitz , freebsd-questions@freebsd.org Subject: Re: day of the date in french Message-Id: Date: Fri, 01 Oct 2021 07:11:22 +0000 In-Reply-To: References: Delivered-To: rsm@mixmax.com MIME-Version: 1.0 X-Rspamd-Queue-Id: 4HLLrQ2Ldhz4tx4 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=ckpcCDd2; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of dhenin@gmail.com designates 2607:f8b0:4864:20::834 as permitted sender) smtp.mailfrom=dhenin@gmail.com X-Spamd-Result: default: False [-3.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::834:from]; FROM_NAME_EXCESS_SPACE(1.00)[]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 07:11:35 -0000 Le=C2=A0ven. 1 oct. 2021 =C3=A0=C2=A009:03, Matthias Apitz a =C3=A9crit=C2=A0: El d=C3=ADa viernes, octubre 01, 2021 a las = 06:23:08a. m. +0000, =CF=86=C2=A0 Dh=C3=A9nin Jean-Jacques escribi=C3=B3: > Hello, > despite my research i am not able to get the day of the date in = french on > freebsd, while on mac it works: > on mac os terminal: > [Desktop]:;=C2=A0 ( export lc_all=3Dfr_FR.UTF-8 ; export LC_TIME=3Dfr_FR.= UTF-8 ; date > +\%A_\%Y\%m\%d )Vendredi_20211001 > on freebsd: > [Desktop]:;=C2=A0 uname -aFreeBSD pyracmon.dhenin.fr 12.2-RELEASE-p7 ...[Desktop]:; > (export lc_all =3D fr_FR.UTF-8; export LC_TIME =3D fr_FR.= UTF-8; date + \% A _ \% Y > \% m \% d)Friday_20211001 >=20 > An idea ? thanks=C2=A0a lot guru@vm-r368166:~ $ export LANG=3Dfr_FR.= UTF-8 guru@vm-r368166:~ $ date ven.=C2=A0 1 oct. 2021 09:02:01 CEST H=C3=A9las ! Non ici dhenin@pyracmon:; export LANG=3Dfr_FR.= UTF-8dhenin@pyracmon:; dateFri Oct=C2=A0 1 09:08:56 CEST 2021 Etrange ---------------------------------------------------------=F0=9F=93=9E 06 89= 66 51 35 (V)=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Dh=C3=A9nin Jean-Jacques ( ..)=C2=A0=C2=A0=C2=A0=C2=A0 48, rue de la Justice 78300 Poissy c(')(')=C2=A0 dhenin@gmail.com --------------------------------------------= ------------- From owner-freebsd-questions@freebsd.org Fri Oct 1 07:24:34 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 5D78D67F297 for ; Fri, 1 Oct 2021 07:24:34 +0000 (UTC) (envelope-from 4250.82.1d4d40006475922.4364a87fdd146113bd20d06e3553d325@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLM7N4SBfz3FVf for ; Fri, 1 Oct 2021 07:24:32 +0000 (UTC) (envelope-from 4250.82.1d4d40006475922.4364a87fdd146113bd20d06e3553d325@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1633073073; x=1635665073; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:cc:to:from:date:x-thread-info; bh=Ilon1ou1QBihOrdIiiCfGTDndcDj/7JWenuv6Dug5kw=; b=UgDDUbwCLWcCtaw3d+Oxg8zeZyyPq5+0KscP+K3PLHzvXn5UMk69ieLRVB+bDoA23NAcjgXytY/yttt0ElA3N8tDaD9ES7HcHJ1A9dGz4+FUSRMtC8v0n7XAbyy5FU9ou6vh2C2O0YyiDZMx57VY3n+ZpCmatXuZjcanqzbjDAw= X-Thread-Info: NDI1MC4xMi4xZDRkNDAwMDY0NzU5MjIuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r2.us-east-2.aws.in.socketlabs.com (r2.us-east-2.aws.in.socketlabs.com [142.0.189.2]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Fri, 1 Oct 2021 03:24:19 -0400 Received: from smtp.lan.sohara.org (EMTPY [185.202.17.215]) by r2.us-east-2.aws.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Fri, 1 Oct 2021 03:24:18 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.94.2 (FreeBSD)) (envelope-from ) id 1mWCu1-000LMk-0U; Fri, 01 Oct 2021 08:24:17 +0100 Date: Fri, 1 Oct 2021 08:24:16 +0100 From: Steve O'Hara-Smith To: =?UTF-8?B?Is+GICBEaMOpbmluIEplYW4tSmFjcXVlcyI=?= Cc: Matthias Apitz , freebsd-questions@freebsd.org Subject: Re: day of the date in french Message-Id: <20211001082416.ab1730fdad3a823b8262c823@sohara.org> In-Reply-To: References: X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.33; amd64-portbld-freebsd12.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 4HLM7N4SBfz3FVf X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=email-od.com header.s=dkim header.b=UgDDUbwC; dmarc=none; spf=pass (mx1.freebsd.org: domain of 4250.82.1d4d40006475922.4364a87fdd146113bd20d06e3553d325@email-od.com designates 142.0.176.198 as permitted sender) smtp.mailfrom=4250.82.1d4d40006475922.4364a87fdd146113bd20d06e3553d325@email-od.com X-Spamd-Result: default: False [-2.70 / 15.00]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; R_SPF_ALLOW(-0.20)[+ip4:142.0.176.0/20]; RCVD_COUNT_THREE(0.00)[4]; DKIM_TRACE(0.00)[email-od.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FREEMAIL_TO(0.00)[gmail.com]; FORGED_SENDER(0.30)[steve@sohara.org,4250.82.1d4d40006475922.4364a87fdd146113bd20d06e3553d325@email-od.com]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:7381, ipnet:142.0.176.0/22, country:US]; MID_RHS_MATCH_FROM(0.00)[]; FROM_NEQ_ENVFROM(0.00)[steve@sohara.org,4250.82.1d4d40006475922.4364a87fdd146113bd20d06e3553d325@email-od.com]; DWL_DNSWL_NONE(0.00)[email-od.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[email-od.com:s=dkim]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[sohara.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[142.0.189.2:received]; RWL_MAILSPIKE_POSSIBLE(0.00)[142.0.176.198:from]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 07:24:34 -0000 On Fri, 01 Oct 2021 07:11:22 +0000 "φ Dhénin Jean-Jacques" wrote: > Hélas ! Non ici > dhenin@pyracmon:; export LANG=fr_FR.UTF-8dhenin@pyracmon:; dateFri Oct  1 > 09:08:56 CEST 2021 > Etrange What shell are you using ? -- Steve O'Hara-Smith From owner-freebsd-questions@freebsd.org Fri Oct 1 09:12:19 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E75FE6A9A5E for ; Fri, 1 Oct 2021 09:12:19 +0000 (UTC) (envelope-from dhenin@gmail.com) Received: from mail-qt1-x836.google.com (mail-qt1-x836.google.com [IPv6:2607:f8b0:4864:20::836]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLPWk4sbSz3Ngp for ; Fri, 1 Oct 2021 09:12:18 +0000 (UTC) (envelope-from dhenin@gmail.com) Received: by mail-qt1-x836.google.com with SMTP id r1so8266436qta.12 for ; Fri, 01 Oct 2021 02:12:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:message-id:date:in-reply-to:references :delivered-to:mime-version; bh=xx6PNoSMsFdXdGPVsCjUe6LyMIH/cq+GyhDEWuuFSO0=; b=SM31vc6+TM0z1NdOOAsDuWQ62WuJRzlF/SWdK+LgLrWFojH3/q9uHKZQFtgDJH5qQB kZKoJU0stYHUf80lRZQCxo3SKcDmbnwl+4jANVAh5ykkfcwuVqV5agJ0PIfkU9TooSun hwId8E094Ol4vn9BjWQMJzN57MUGG4qnCkXYnd2ku9+ysFOAIBw5HuSr2QOEJ2jjY72M JX81EKSn1/S6L+KQCgULvx/2n2SbeRTznGWcpAtFs2IJLjoa2rwqHkRUOLthAes8yehJ 3+EwznrnS1en3vA5pfyWwtxft2S/ynMLESLR4xf1LxFIB5jWDv1bfpRHHSFCWAbpmGUS LW0A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:message-id:date:in-reply-to :references:delivered-to:mime-version; bh=xx6PNoSMsFdXdGPVsCjUe6LyMIH/cq+GyhDEWuuFSO0=; b=u0Ca/1V7vIMmTFybfiOkvecK/9h7Jywp7+eKl/t8baUZe/sTz91h9vsyvsMgzZImKX hezt2P/c9lhUWwjdxglEnMK6UUViZ0IcRSCkEV/hxmkiBp6PTmEKruYt5Mtu/VmQwwLH 2Ifl+7T7Wg11zJc5pcklbnkv//mVJbStZ1uevCjNqYNYFtJ87XzWRhCrZ3pqAqh27H67 5DNPUbE8QFFWkeAXMZLzSOSOY1EIezgDDNK+ZzJc/s4JYXs4dd3t8kmaVYiXHIYek9Ht 0BJm2HlHNTQAFSkMQWRFa9lBXidX6ky4nV6GnuqMCnZdfEhagC+WD74Kj5L1ZjPU81uL 0XpQ== X-Gm-Message-State: AOAM531g7rbfN6/b8XOJ79/ooUlqd5/pB1nNpF4na/iAx9Lho4xZOrkK QggSY2rLa6qnehViIFCjtnRXJU29DS8= X-Google-Smtp-Source: ABdhPJwniN8h/69nXiWKA1BWsGm8sYpDsG+OTLWYg0DfnmQG8pU+YDZnKQAYYgwckGuHKack9jr4iQ== X-Received: by 2002:ac8:4751:: with SMTP id k17mr11947390qtp.22.1633079531477; Fri, 01 Oct 2021 02:12:11 -0700 (PDT) Received: from send-12.prod.mixmax-mailer.com (send-12.prod.mixmax-mailer.com. [52.200.39.124]) by smtp.gmail.com with ESMTPSA id c139sm2701238qkg.2.2021.10.01.02.12.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 01 Oct 2021 02:12:10 -0700 (PDT) From: "=?UTF-8?Q?=CF=86__Dh=C3=A9nin_Jean-Jacques?=" To: "Steve O'Hara-Smith" Cc: Matthias Apitz , freebsd-questions@freebsd.org Subject: Re: day of the date in french Message-Id: Date: Fri, 01 Oct 2021 09:12:06 +0000 In-Reply-To: <20211001082416.ab1730fdad3a823b8262c823@sohara.org> References: <20211001082416.ab1730fdad3a823b8262c823@sohara.org> Delivered-To: rsm@mixmax.com MIME-Version: 1.0 X-Rspamd-Queue-Id: 4HLPWk4sbSz3Ngp X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=SM31vc6+; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of dhenin@gmail.com designates 2607:f8b0:4864:20::836 as permitted sender) smtp.mailfrom=dhenin@gmail.com X-Spamd-Result: default: False [-3.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::836:from]; FROM_NAME_EXCESS_SPACE(1.00)[]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 09:12:20 -0000 Le=C2=A0ven. 1 oct. 2021 =C3=A0=C2=A009:24, Steve O'Hara-Smith = a =C3=A9crit=C2=A0: On Fri, 01 Oct 2021 07:11:22 +0000 "=CF=86=C2=A0 Dh=C3=A9nin Jean-Jacques" wrote: > H=C3=A9las ! Non ici > dhenin@pyracmon:; export LANG=3Dfr_FR.= UTF-8dhenin@pyracmon:; dateFri Oct=C2=A0 1 > 09:08:56 CEST 2021 > Etrange What shell are you using ? I am using bash root@pyracmon #acmon # = root@pyracmon #=C2=A0 uname -r12.2-RELEASE-p7root@pyracmon # ps=C2=A0 PID TT=C2=A0 STAT=C2=A0 =C2=A0 TIME COMMAND=C2=A07619 v0=C2=A0 = Is+=C2=A0 0:00.00 /usr/libexec/getty Pc ttyv0=C2=A07620 v1=C2=A0 Is+=C2=A0 = 0:00.00 /usr/libexec/getty Pc ttyv1=C2=A07621 v2=C2=A0 Is+=C2=A0 0:00.00 /usr/libexec/getty Pc ttyv253806=C2=A0 1=C2=A0 IJ=C2=A0 =C2=A00:00.00 ...= 53807=C2=A0 1=C2=A0 I+J=C2=A0 0:00.01 bash 53871=C2=A0 0=C2=A0 I=C2=A0 = =C2=A0 0:00.00 ...53872=C2=A0 0=C2=A0 S=C2=A0 =C2=A0 0:00.01 = bash53876=C2=A0 0=C2=A0 R+=C2=A0 =C2=A00:00.00 ps root@pyracmon # bash = --version=C2=A0 | grep bashGNU bash, version 5.1.8(0)-release (amd64-portbld-freebsd12.2)root@pyracmon #=C2=A0 ( export LANG=3Dfr_FR.= UTF-8 ; export lc_all=3Dfr_FR.UTF-8 ; export LC_TIME=3Dfr_FR.UTF-8 ; date = +\%A_\%Y\%m\%d ) ;Friday _20211001root@pyracmon # locale -a | grep = fr_FRfr_FR.ISO8859-1fr_FR.ISO8859-15 fr_FR.UTF-8 I am confused=C2=A0 = =C2=A0? ---------------------------------------------------------= =F0=9F=93=9E 06 89 66 51 35 (V)=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Dh=C3=A9nin = Jean-Jacques ( ..)=C2=A0=C2=A0=C2=A0=C2=A0 48, rue de la Justice 78300 = Poissy c(')(')=C2=A0 dhenin@gmail.com -------------------------------------= -------------------- From owner-freebsd-questions@freebsd.org Fri Oct 1 12:37:11 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 2F8586AE0CA for ; Fri, 1 Oct 2021 12:37:11 +0000 (UTC) (envelope-from paulz42@gmail.com) Received: from mail-ed1-x532.google.com (mail-ed1-x532.google.com [IPv6:2a00:1450:4864:20::532]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLV461YVkz3sC5 for ; Fri, 1 Oct 2021 12:37:10 +0000 (UTC) (envelope-from paulz42@gmail.com) Received: by mail-ed1-x532.google.com with SMTP id dj4so35257976edb.5 for ; Fri, 01 Oct 2021 05:37:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:mime-version:subject:message-id:date:to; bh=2QBcVcUuEIXUMmvVAxk/S05OjJrCWj+bnj51Y3RXT1I=; b=YPY3oWgJdkKAB/JjbxEkc6nIlkU8bDxBaZzqGF+Ro6AnijDbqmfQsxhlUgelOxAdiH 8rL5E3k8RrtnNX1nxzoNgT9tswvhjE/sJWb2uBwao5IHyAFpS1CnCtFjklQ4ne3R5O5p 1UhZlOyuQMKDB4uUnLseSyVB/5yhTm82BbGThn+Sta/CV20SNuyu266sh2VvznJHthG/ u5LNIi5g71PcRnIjsVmuEnJix/w2T/BTeAaPRzt0wr8KxrFvcjJixtcCYUtA9nhQXPPN HR9t/6xGtK06rMiGUlct5Py4CCY9AS9NCE3tH8FmfNfNBDn90+qF1cHWxLVlTv60XKMa mzuA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:mime-version:subject:message-id:date:to; bh=2QBcVcUuEIXUMmvVAxk/S05OjJrCWj+bnj51Y3RXT1I=; b=GRGBOQsouQ1E2vagEo0QNiHm2GHvVkT29gCB8zGT6tGnP01JM7WIiW16bQCNKqaUdC 5wu19ZeZHGTRNhImCvlWRIRT16TlJ3mECqzd+h8PaIkt7QtkM/vis77ttAh27G2h+Wkj WJFHp4UlWnot4RKpsWRJYMDy7NQ/0QdnmI9ZTxwEKAN7LPpUURb8S4CLEMC+EEd4e/1d j3kLDseyqdbApN9okUTTU62BG7NDAwBLTIZjG9m25UuhUmc606Cuzc2ISSbZV1vq7IwM UI2CXL4mAr3UGWJraMzdTpGeSWrBqV95Q5Q6eTj4Ki6JgbY1Olj46E5fV2H9/yPjjpdL BXgg== X-Gm-Message-State: AOAM532hJInlt82omV7STiRlR7mBkF1gHCMP62AUKo97BcCgbfjwuO7u YhEg/exP1CSPbLNGMFB3nz5XwechMjc= X-Google-Smtp-Source: ABdhPJwvleCKrXRTJPI/nlc0IIebTbVG9ol/jLFzC/PJl5yfPnTCkBYhZSX6SC+rhzGE+fnS2QuiHg== X-Received: by 2002:a50:d948:: with SMTP id u8mr14269626edj.306.1633091829277; Fri, 01 Oct 2021 05:37:09 -0700 (PDT) Received: from smtpclient.apple ([2a02:a461:283f:1:e505:273:7670:84a0]) by smtp.gmail.com with ESMTPSA id q6sm2798406ejm.106.2021.10.01.05.37.08 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 01 Oct 2021 05:37:08 -0700 (PDT) From: Paul van der Zwan Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.120.0.1.13\)) Subject: FreeBSD.org MX servers refusing mail from host via ipv6 Message-Id: <8BF8713A-6677-4BAD-A61B-9A7B5D9CC297@gmail.com> Date: Fri, 1 Oct 2021 14:37:08 +0200 To: freebsd-questions@freebsd.org X-Mailer: Apple Mail (2.3654.120.0.1.13) X-Rspamd-Queue-Id: 4HLV461YVkz3sC5 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=YPY3oWgJ; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of paulz42@gmail.com designates 2a00:1450:4864:20::532 as permitted sender) smtp.mailfrom=paulz42@gmail.com X-Spamd-Result: default: False [-3.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; TO_DN_NONE(0.00)[]; MV_CASE(0.50)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::532:from]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 12:37:11 -0000 Hi, It looks like the freebsd.org servers are refusing = mails from unresolvable hosts: 2021-10-01T11:49:53.891959+02:00 mail.info = MyMailRelay sm-mta[78439] 1918bDet078021: = to=3D>, ctladdr=3D> (544/544), delay=3D01:12:35, = xdelay=3D00:00:03, mailer=3Desmtp, pri=3D336150, relay=3Dmx66.freebsd.org = . [IPv6:2610:1c1:1:606c:0:0:19:5], dsn=3D4.7.25,= reply=3D450-4.7.25 Client host rejected: cannot find your hostname, = [2001:1af8:4700:a116:1::42], stat=3DDeferred: 450-4.7.25 Client host = rejected: cannot find your hostname, [2001:1af8:4700:a116:1::42] For IPv6 this seems like a very strict requirement as it=E2=80=99s = almost impossible to get reverse DNS working for autoconfigured IPv6 = adresses ? Is there an IPv4 only alias I can route mail to for freebsd.org = domain ? TIA Paul From owner-freebsd-questions@freebsd.org Fri Oct 1 12:58:39 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 809D66AEB2E for ; Fri, 1 Oct 2021 12:58:39 +0000 (UTC) (envelope-from dhenin@gmail.com) Received: from mail-qt1-x82a.google.com (mail-qt1-x82a.google.com [IPv6:2607:f8b0:4864:20::82a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLVXt5httz3vF4 for ; Fri, 1 Oct 2021 12:58:38 +0000 (UTC) (envelope-from dhenin@gmail.com) Received: by mail-qt1-x82a.google.com with SMTP id e16so8752687qte.13 for ; Fri, 01 Oct 2021 05:58:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:message-id:date:in-reply-to:references :delivered-to:mime-version; bh=f89KgKpmesmBCam7mFplTJNUS9qXFwKyXxI2U3o9j5E=; b=CTrUgZ1D7xd3uA23J1gB1m3VtpTSCgfS3+Rb+c5ATCLF21mHYukNmEd5uqPNjTotCO +j3mkaN6byvYMQPZ/Gdff84IJ5+YtkZ5wVWaV1Emnb0tUdf+FngF7rfKSSLJR+ZuoL98 dTylIKgvWF3E4t3w+c5b+uzGGsxMrcmAQEcDr3telH378GEdg8bMmW/fe9MuMTAmDEUl KGRm4LraqmCsNeou3cOEnF111MQjuXTqQeFhoqFqzgXJgQkWKaxdN9r44NyCKK5QnMN/ ckYiyavkD+tylmaGWP3EI/A+Hqze1Vjug0N2xfq/Jv0n2A45Zg7CiKcxlcWBh66c3Unj H4qA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:message-id:date:in-reply-to :references:delivered-to:mime-version; bh=f89KgKpmesmBCam7mFplTJNUS9qXFwKyXxI2U3o9j5E=; b=vMrhdYZWMjITqIFZdEi+n0a0x7oFXft0WnvS4UoLZGosjUCle6FWVYkTF9YKv05fND 4tH3FdR7XKQ9H5x57Uak9885gnRxiSKhKBpHdxyVI8cEI1F47bZhV06VGjTwYE19pS6j JiE9AItGxIYTtx7fmo67LBbTdye+t+XrtsRzaz66LCKJfqyVBiTvhfSalOO8HjSz8Gwz Ffd/erD7N1B0mhD19vRPVaRYH4igAMBgtfDnGHN0SVvH1KLPsysHFnZ+t2XIaF/TgEba gC3eA1fBPxHkuXOLmFqSCfJ6JPWuzJ4DQEROd2Xfxv/4901v395DtDs3mPR5LOmEoojv QI2g== X-Gm-Message-State: AOAM5305Nnbfmcx6gAKXHqERJnoR+py3zklwQSVlNMyLMBCO02vPOYka Ou8vSEIeuhVF0cXFW+Z5GKPvOUJUC9w= X-Google-Smtp-Source: ABdhPJwTXY7kkwmA/lcxtQEhAJPFPRzEoAWgQFUKewt7uLpK91rabsZcYBrw9A508Txpz+02TBQ2fg== X-Received: by 2002:ac8:5a4a:: with SMTP id o10mr12492295qta.61.1633093117667; Fri, 01 Oct 2021 05:58:37 -0700 (PDT) Received: from send-12.prod.mixmax-mailer.com (send-12.prod.mixmax-mailer.com. [52.200.39.124]) by smtp.gmail.com with ESMTPSA id c17sm3339375qtn.65.2021.10.01.05.58.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 01 Oct 2021 05:58:37 -0700 (PDT) From: "=?UTF-8?Q?=CF=86__Dh=C3=A9nin_Jean-Jacques?=" To: "Steve O'Hara-Smith" Cc: Matthias Apitz , freebsd-questions@freebsd.org Subject: Re: day of the date in french Message-Id: Date: Fri, 01 Oct 2021 12:58:33 +0000 In-Reply-To: References: <20211001082416.ab1730fdad3a823b8262c823@sohara.org> Delivered-To: rsm@mixmax.com MIME-Version: 1.0 X-Rspamd-Queue-Id: 4HLVXt5httz3vF4 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=CTrUgZ1D; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of dhenin@gmail.com designates 2607:f8b0:4864:20::82a as permitted sender) smtp.mailfrom=dhenin@gmail.com X-Spamd-Result: default: False [-2.96 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-0.96)[-0.956]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::82a:from]; FROM_NAME_EXCESS_SPACE(1.00)[]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 12:58:39 -0000 Le=C2=A0ven. 1 oct. 2021 =C3=A0=C2=A011:12, =CF=86 Dh=C3=A9nin Jean-Jacques= a =C3=A9crit=C2=A0: Le=C2=A0ven. 1 oct. 2021 = =C3=A0=C2=A009:24, Steve O'Hara-Smith a = =C3=A9crit=C2=A0: On Fri, 01 Oct 2021 07:11:22 +0000 "=CF=86=C2=A0 Dh=C3=A9nin Jean-Jacques" wrote: > H=C3=A9las ! Non ici > dhenin@pyracmon:; export LANG=3Dfr_FR.= UTF-8dhenin@pyracmon:; dateFri Oct=C2=A0 1 > 09:08:56 CEST 2021 > Etrange What shell are you using ? I am using bash root@pyracmon #acmon # = root@pyracmon #=C2=A0 uname -r12.2-RELEASE-p7root@pyracmon # ps=C2=A0 PID TT=C2=A0 STAT=C2=A0 =C2=A0 TIME COMMAND=C2=A07619 v0=C2=A0 = Is+=C2=A0 0:00.00 /usr/libexec/getty Pc ttyv0=C2=A07620 v1=C2=A0 Is+=C2=A0 = 0:00.00 /usr/libexec/getty Pc ttyv1=C2=A07621 v2=C2=A0 Is+=C2=A0 0:00.00 /usr/libexec/getty Pc ttyv253806=C2=A0 1=C2=A0 IJ=C2=A0 =C2=A00:00.00 ...= 53807=C2=A0 1=C2=A0 I+J=C2=A0 0:00.01 bash 53871=C2=A0 0=C2=A0 I=C2=A0 = =C2=A0 0:00.00 ...53872=C2=A0 0=C2=A0 S=C2=A0 =C2=A0 0:00.01 = bash53876=C2=A0 0=C2=A0 R+=C2=A0 =C2=A00:00.00 ps root@pyracmon # bash = --version=C2=A0 | grep bashGNU bash, version 5.1.8(0)-release (amd64-portbld-freebsd12.2)root@pyracmon #=C2=A0 ( export LANG=3Dfr_FR.= UTF-8 ; export lc_all=3Dfr_FR.UTF-8 ; export LC_TIME=3Dfr_FR.UTF-8 ; date = +\%A_\%Y\%m\%d ) ;Friday _20211001root@pyracmon # locale -a | grep = fr_FRfr_FR.ISO8859-1fr_FR.ISO8859-15 fr_FR.UTF-8 Solved=C2=A0: root@pyracmon # pkg upgrade=C2=A0 =C2=A0locales[...]=C2=A0Your packages = are up to date. root@pyracmon #=C2=A0 ( export=C2=A0 ( export = lc_all=3Dfr_FR.UTF-8 ; export LC_TIME=3Dfr_FR.UTF-8 ; date +\%A_\%Y\%m\%d = )vendredi_20211001 Thanks--------------------------------------------------= -------=F0=9F=93=9E 06 89 66 51 35 (V)=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Dh=C3=A9nin Jean-Jacques ( ..)=C2=A0=C2=A0=C2=A0=C2=A0 48, rue de la = Justice 78300 Poissy c(')(')=C2=A0 dhenin@gmail.com --------------------------------------------------------- From owner-freebsd-questions@freebsd.org Fri Oct 1 13:23:55 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 4C6346AF2BD for ; Fri, 1 Oct 2021 13:23:55 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [IPv6:2607:f3e0:0:1::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smarthost1.sentex.ca", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLW622ks4z4QsS for ; Fri, 1 Oct 2021 13:23:54 +0000 (UTC) (envelope-from mike@sentex.net) Received: from pyroxene2a.sentex.ca (pyroxene19.sentex.ca [199.212.134.19]) by smarthost1.sentex.ca (8.16.1/8.16.1) with ESMTPS id 191DNrpW035011 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL) for ; Fri, 1 Oct 2021 09:23:53 -0400 (EDT) (envelope-from mike@sentex.net) Received: from [IPv6:2607:f3e0:0:4::29] ([IPv6:2607:f3e0:0:4:0:0:0:29]) by pyroxene2a.sentex.ca (8.16.1/8.15.2) with ESMTPS id 191DNrIh024456 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO) for ; Fri, 1 Oct 2021 09:23:53 -0400 (EDT) (envelope-from mike@sentex.net) To: freebsd-questions@freebsd.org References: From: mike tancsa Subject: Re: expired Lets Encrypt CA and fetch Message-ID: <0a181938-ca91-4e79-19b3-f774b854a600@sentex.net> Date: Fri, 1 Oct 2021 09:23:53 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: base64 Content-Language: en-US X-Scanned-By: MIMEDefang 2.84 X-Rspamd-Queue-Id: 4HLW622ks4z4QsS X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of mike@sentex.net designates 2607:f3e0:0:1::12 as permitted sender) smtp.mailfrom=mike@sentex.net X-Spamd-Result: default: False [-2.24 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; FREEFALL_USER(0.00)[mike]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f3e0::/32]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[3]; DMARC_NA(0.00)[sentex.net]; NEURAL_HAM_SHORT(-0.04)[-0.040]; MIME_BASE64_TEXT(0.10)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:11647, ipnet:2607:f3e0::/32, country:CA]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 13:23:55 -0000 T24gOS8zMC8yMDIxIDk6MTQgUE0sIHRlY2gtbGlzdHMgd3JvdGU6DQo+IEhpLA0KPg0KPiBP biBUaHUsIFNlcCAzMCwgMjAyMSBhdCAxMTo0Njo1MEFNIC0wNDAwLCBtaWtlIHRhbmNzYSB3 cm90ZToNCj4NCj4+IGZhaWxzIG9uIHJlbGVuZzExIGFuZCBzb21lIFJFTEVOR18xMiwgYnV0 IG5vdCByZWNlbnQgcmVsZW5nMTMuoCBEb2VzDQo+PiBhbnlvbmUga25vdyB3aGF0cyBnb2lu ZyBvbiBhbmQgd2h5IGl0cyBzbyBpbmNvbnNpc3RlbnQgPyBJZiBJIHJlbW92ZSB0aGUNCj4+ IGV4cGlyZWQgQ0EgZW50cnkgZnJvbSB0aGUgYnVuZGxlLCBpdCB3b3JrcyBidXQgSSBkb250 IGhhdmUgdG8gb24gYWxsDQo+PiBjbGllbnRzID8gQW55b25lIGtub3cgd2hhdHMgZ29pbmcg b24gPw0KPg0KPiBJdCBmYWlscyBmb3IgbWUgb24gMTIuMi1wNyBhbmQgMTMuMC1wNCBhbmQg c3RhYmxlLzEzIGFzIG9mIGEgZmV3IGRheXMNCj4gYWdvIHdpdGggZmV0Y2guDQo+DQo+IEkg aGF2ZSBubyBjbHVlIHdoeSB5b3VyIHJlY2VudCByZWxlbmcxMyB3b3Jrcy4gTWF5YmUgeW91 ciBmZXRjaCBvbg0KPiB0aGVyZSBpcyBsaW5rZWQgdG8gdGhlIHNzbCBhIGJyb3dzZXIgd291 bGQgdXNlPyANCg0KRGlnZ2luZyBhIGJpdCBmdXJ0aGVyLCBpdCBkZXBlbmRzIHdoYXQgdGhl IHNlcnZlciBzZW5kcyBhbmQgaG93IHRoZQ0KY2xpZW50IHdvcmtzLiBlLmcuIGRvZXMgdGhl IHNlcnZlciBzZW5kIGFsb25nIGJvdGggdGhlIGV4cGlyZWQNCmludGVybWVkaWFyeSBhbmQg bm90IGV4cGlyZWQuIENhbiBhbiBpbnRlcm1lZGlhcnkgYmUgdHJ1c3RlZCBsaWtlIGENCnJv b3Q/IGV0Yy4NCg0KVGhlIE9wZW5CU0QgZ3V5cyBtYWRlIGEgY2hhbmdlIHRoYXQgY291bGQg YnJlYWsgc29tZSBhcHBsaWNhdGlvbnMsIGJ1dCBJDQphbSBub3Qgc3VyZSB3aGF0DQoNCmh0 dHBzOi8vZnRwLm9wZW5ic2Qub3JnL3B1Yi9PcGVuQlNEL3BhdGNoZXMvNi44L2NvbW1vbi8w MzJfY2VydC5wYXRjaC5zaWcNCg0KDQpJIGFtIGd1ZXNzaW5nIChub3QgdGVzdGVkKSBzb21l dGhpbmcgbGlrZSB0aGlzIG9uIFJFTEVOR18xMSA/oCBOb3RlIHRoZQ0KZGlzY3Vzc2lvbiBh dA0KDQpodHRwczovL3d3dy5vcGVuc3NsLm9yZy9ibG9nL2Jsb2cvMjAyMS8wOS8xMy9MZXRz RW5jcnlwdFJvb3RDZXJ0RXhwaXJlLw0KDQotLS0gY3J5cHRvL29wZW5zc2wvY3J5cHRvL3g1 MDkveDUwOV92cG0uYy5wcmV2oCAyMDIxLTEwLTAxDQowOToxNjo1MS43NTM1MzMwMDAgLTA0 MDANCisrKyBjcnlwdG8vb3BlbnNzbC9jcnlwdG8veDUwOS94NTA5X3ZwbS5joKCgoKCgIDIw MjEtMTAtMDENCjA5OjE5OjM5LjcwODEwNjAwMCAtMDQwMA0KQEAgLTUzNyw3ICs1MzcsNyBA QA0KoKCgoKAgImRlZmF1bHQiLKCgoKCgoKCgoKCgoKCgoKAgLyogWDUwOSBkZWZhdWx0IHBh cmFtZXRlcnMgKi8NCqCgoKCgIDAsoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgIC8qIENoZWNr IHRpbWUgKi8NCqCgoKCgIDAsoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgIC8qIGludGVybmFs IGZsYWdzICovDQotoKCgoCAwLKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoCAvKiBmbGFncyAq Lw0KK6CgoKAgWDUwOV9WX0ZMQUdfVFJVU1RFRF9GSVJTVCwgLyogZmxhZ3MgKi8NCqCgoKCg IDAsoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgIC8qIHB1cnBvc2UgKi8NCqCgoKCgIDAsoKCg oKCgoKCgoKCgoKCgoKCgoKCgoKCgIC8qIHRydXN0ICovDQqgoKCgoCAxMDAsoKCgoKCgoKCg oKCgoKCgoKCgoKCgoCAvKiBkZXB0aCAqLw0KDQoNCqCgoCAtLS1NaWtlDQoNCg== From owner-freebsd-questions@freebsd.org Fri Oct 1 06:50:12 2021 Return-Path: Delivered-To: freebsd-questions+confunsub-5bbe02f517b49387@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 3086167804F for ; Fri, 1 Oct 2021 06:50:12 +0000 (UTC) (envelope-from Gabriel.Moyano@dlr.de) Received: from mailin.dlr.de (mailin.dlr.de [194.94.201.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mailin.dlr.de", Issuer "DFN-Verein Global Issuing CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLLMl2f4Zz4mlJ for ; Fri, 1 Oct 2021 06:50:08 +0000 (UTC) (envelope-from Gabriel.Moyano@dlr.de) IronPort-SDR: UNxCbhtHtfo1dv6kFo5HdqtOsSy3p61yuuK8OUCcqozrVW2Z4OuvOw752rjJ04Chph16BY2GXn 4zj6KAYDrO+A== X-IPAS-Result: =?us-ascii?q?A2EGBgBHrlZh/xWKuApagQmBWYMLgVcLhD2RDAOCJZoGg?= =?us-ascii?q?WgLAQEBAQEBAQEBCAFBBAEBhH0CF4IqJjcGDgECBAEBAQEDAgMBAQEBBQEBB?= =?us-ascii?q?gEBAQEBAQUEAQECgSCFL0aCNSKDdQYjERogGwIBIgImAgICLwEVEAIEEwgVB?= =?us-ascii?q?Lc9gTGBAYRphQ+BECqHBg+GcIJQhH2EEAESAQchMxOCS4JlBIlwAoIuDFEbV?= =?us-ascii?q?Q4JGjCVVZV7kmQHggaffS8Ug2eLaoYQg2yNQBmDOYMgsASEaAIEAgQFAhaBd?= =?us-ascii?q?4EPcHFPgmlRFwIPjidJjgB0OAIGAQoBAQMJjweBEAEB?= IronPort-PHdr: A9a23:ZQ0MIhyXAVEWPDTXCzIIylBlVkEcU1XcAAcZ59Idhq5Udez7ptK+Z hSZvKUwxwaRA83y0LFts6LuqafuWGgNs96qkUspV9hybSIDktgchAc6AcSIWgXRJf/uaDEmT owZDAc2t360PlJIF8ngelbcvmO97SIIGhX4KAF5Ovn5FpTdgsipy+y+4YDfbgZIiTayfL9+M BS7phjNu8cLhodvNrw/wQbTrHtSfORWy2JoJVaNkBv5+8y94p1t/TlOtvw478JPXrn0cKo+T bxDETQpKHs169HxtRnCVgSA+H0RWXgLnxVSAgjF6Bb6Xortsib/q+Fw1jWWMdHwQLspXzmp8 qVlRwLyiCofNzA37nzZitB+gqxYrhKupR1/zJLbbo6aL/d+YrjSfdEGSWZdQspcVSpMCZ68Y YsVCOoBOP5Voo78qVQUthS+HwisC/3ryjNSgXH22q073P4nEQHBxwEvAtYOsG7OoNroKqgfS Oa4x7THwjvfdf1Zwyv96JTWfRA7p/GBRbx+fdbPxUQrGQ7IjFWepIjlMT2a2ekAvXaX4/ZgW O6zimMrtQ9/rzagy8oviYTEiIAYx17L+yh9w4s4JMO1RFN9bNW5E5VQrzmXO5ZqTs84Xm1lu yk3xqcbtZO1fyUG0oorywPHZ/Cab4SE+A/vWeWeLDtimX5odrGyiwys/UWgxeDxUNS/3kxQo SpfiNbMs2gA1xnU6seaVPRw5lyh2TOT1wDL7eFEPFw0mbLbK5E/xr4wkYIev0rFECH4l0v4j K+YeEIn9Oav8errfKjqqJCdOIJqkA3+M6IumtClAesiKAQBQmyb+f6m2LL+40L1WLRKjvson anFqJ3WONgXqrSkDwJW3Ysv8QuzAjml3dgCg3ULMUpJeBedgIjoP1HOLur4DfC6g1m0kTlk3 evJPqfgAprTKnjPirDvfbF96kFGzgozystS6I9QCrEbOv78R1H+uMTCDhAlKwy03/rnCNJl2 4MQQ2KAHLGWP7jJsVCV/+4vOvSMa5EOuDbhKvgl4PjujWQ+lVABeqmp25UXaG2+HvR9PkWWe mPgj9caHmgRoAUyUPLmiFOCXDJOZXu9RK0x6zU1BY+lD4rOXY6tgKaf0yilBZJWfX1JBkqLE XfyeIXXE8sLPXacOMJsmCcIEKG8RpQ91Baor0zxzLxpM+zP5ydd6Jjp2YAv6bCKyhtupGckU OyzyWyAZVpY2GQSSGll8rp4pBkp5V6Jy6l1h7p9Es1a4fRhXgMgc5LRmb8pQ+vuUx7MK4/aA G2tRc+rVGlZcw== IronPort-Data: A9a23:pQJNZ6/xpb18OaZrifXmDrUDMHyTJUtcMsCJ2f8bNWPcYEJGY0x3y 2UeUG+GPqreMTSnKt1+OYi0pB4AvcSEmtdnHAdorn1EQiMRo6IpJzg4wmQcnc+2BpeeJK6yx 5xGMrEsFC23J5Pljk/F3oLJ9BGQ7onVAOqhYAL4EnopH1Y9EH940UgLd9MR2+aEv/DoW2thh vuv+6UzCHf9s9KjGjtJg04rgEoHUMXa4Fv0jHRnDRx4lAO2e00uMX4qDfrZw00U42VjNrXSq +7rlNlV945ClvsnIovNfr3TKiXmTlNOVOQnZ7U/t6WK23B/SiIOPqkTC+YRW1pNujezj5Nq5 4RctrOObQsJF/iZ8Agde0Ew/yBWEYlq1ZHpBFmaiZbK4n3tNXrq3+9nSk0yJ8sU946bA0kXr bpBeGxLN0vTwbjvqF64YrAEasALA8DhJoISvjdFyiDQC/EOTZTZBanHjTNd9Gpv158VR62HD yYfQQM0QQjFPExmAQcWI7Yvl+2IhUDPNAQN/Tp5ooJyuQA/1jdZ3qLgPdDOdpmTWMhOgkefo HmF9GP/DAwcL8GVjGeP+H/03OGSxHzxBNNJROKQ+ORnjVeIyioUEhJ+aLegifW9hkOwVddeL lROoyc+pu4z8lCxR5/xWwf+rHPsUgMgZue82tYSsGmlopc4KS7CboTYZlatsOAbifI= IronPort-HdrOrdr: A9a23:3cyJ7aAFnwuX/HnlHemI55DYdb4zR+YMi2TDj3oBLSC9Afbo8P xG+85rqCMc6QxhIk3I9urhBEDtex7hHNtOkOws1NSZLXXbUQmTXeJfBOLZqlWKcREWtNQtt5 uIGJIQNDSENzlHZLHBjjVQfexN/DDNytHPuQ6X9QYVcehFUdAZ0+82YDzraXFLeA== X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.85,337,1624312800"; d="scan'208";a="57973231" From: To: Subject: AW: Confirm unsubscribe from freebsd-questions@FreeBSD.org Thread-Topic: Confirm unsubscribe from freebsd-questions@FreeBSD.org Thread-Index: AQHXtpAgbCgQ8lzHtUqgk8MrdqLwMqu9s/Aw Date: Fri, 1 Oct 2021 06:50:00 +0000 Message-ID: <8d75f80b3fcd4b92a2b3ce8c6438ac49@dlr.de> References: <1633070772-9801-mlmmj-35ec37b5@FreeBSD.org> In-Reply-To: <1633070772-9801-mlmmj-35ec37b5@FreeBSD.org> Accept-Language: en-US, de-DE Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-tm-snts-smtp: 0F4A64831164E8969015E02D8E3A85AA472EFD8B618C60306702B7C7B101D84C2000:8 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Rspamd-Queue-Id: 4HLLMl2f4Zz4mlJ X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of Gabriel.Moyano@dlr.de designates 194.94.201.12 as permitted sender) smtp.mailfrom=Gabriel.Moyano@dlr.de X-Spamd-Result: default: False [-3.40 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; RWL_MAILSPIKE_GOOD(0.00)[194.94.201.12:from]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TAGGED_RCPT(0.00)[confunsub-5bbe02f517b49387]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[dlr.de]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_IN_DNSWL_MED(-0.20)[194.94.201.12:from]; MIME_BASE64_TEXT(0.10)[]; FROM_NO_DN(0.00)[]; NEURAL_HAM_SHORT(-1.00)[-0.999]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:680, ipnet:194.94.0.0/15, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-Mailman-Approved-At: Fri, 01 Oct 2021 14:03:39 +0000 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 06:50:12 -0000 DQoNCj4gLS0tLS1VcnNwcsO8bmdsaWNoZSBOYWNocmljaHQtLS0tLQ0KPiBWb246IGZyZWVic2Qt cXVlc3Rpb25zK2hlbHBARnJlZUJTRC5vcmcgPGZyZWVic2QtcXVlc3Rpb25zK2hlbHBARnJlZUJT RC5vcmc+DQo+IEdlc2VuZGV0OiBGcmVpdGFnLCAxLiBPa3RvYmVyIDIwMjEgMDg6NDYNCj4gQW46 IE1veWFubyBIZXJlZGlhLCBWaWN0b3IgR2FicmllbCA8R2FicmllbC5Nb3lhbm9AZGxyLmRlPg0K PiBCZXRyZWZmOiBDb25maXJtIHVuc3Vic2NyaWJlIGZyb20gZnJlZWJzZC1xdWVzdGlvbnNARnJl ZUJTRC5vcmcNCj4gDQo+IEhpLCB0aGlzIGlzIHRoZSBNbG1taiBwcm9ncmFtIG1hbmFnaW5nIHRo ZSA8ZnJlZWJzZC1xdWVzdGlvbnNARnJlZUJTRC5vcmc+IG1haWxpbmcgbGlzdC4NCj4gDQo+IEFu IGFkbWluaXN0cmF0b3IgaGFzIHJlcXVlc3RlZCB0aGF0IHRoZSBlbWFpbCBhZGRyZXNzIDxnYWJy aWVsLm1veWFub0BkbHIuZGU+IGJlIHJlbW92ZWQgZnJvbSB0aGUgbGlzdC4NCj4gDQo+IFRvIGNv bmZpcm0geW91IHdhbnQgdG8gZG8gdGhpcywgcGxlYXNlIHNlbmQgYSBtZXNzYWdlIHRvIDxmcmVl YnNkLXF1ZXN0aW9ucytjb25mdW5zdWItNWJiZTAyZjUxN2I0OTM4N0BGcmVlQlNELm9yZz4gd2hp Y2gNCj4gY2FuIHVzdWFsbHkgYmUgZG9uZSBzaW1wbHkgYnkgcmVwbHlpbmcgdG8gdGhpcyBtZXNz YWdlLiBUaGUgc3ViamVjdCBhbmQgdGhlIGJvZHkgb2YgdGhlIG1lc3NhZ2UgY2FuIGJlIGFueXRo aW5nLg0KPiANCj4gQWZ0ZXIgZG9pbmcgc28sIHlvdSBzaG91bGQgcmVjZWl2ZSBhIHJlcGx5IGlu Zm9ybWluZyB5b3UgdGhhdCB0aGUgb3BlcmF0aW9uIHN1Y2NlZWRlZC4NCj4gDQo+IElmIHlvdSBk byBub3Qgd2FudCB0byBkbyB0aGlzLCBzaW1wbHkgaWdub3JlIHRoaXMgbWVzc2FnZS4NCj4gDQoN Cg== From owner-freebsd-questions@freebsd.org Fri Oct 1 14:14:18 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 9E8376AFD5E for ; Fri, 1 Oct 2021 14:14:18 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from wout2-smtp.messagingengine.com (wout2-smtp.messagingengine.com [64.147.123.25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLXD95F9fz4Tkx for ; Fri, 1 Oct 2021 14:14:17 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.west.internal (Postfix) with ESMTP id CDA3F3200F73 for ; Fri, 1 Oct 2021 10:14:10 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute1.internal (MEProxy); Fri, 01 Oct 2021 10:14:10 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm3; bh=r0+iJja9GnbiTuHYtB/h2e5ZSTk 9g7FYzHn3uAnW6Es=; b=XFSZpM2FKZftofFbqh+lZ7F9PA96w4Rr1MwLZeKBMwW SdQbydOMR+Gk4BlIRkFYncKhRTCzGKsulCyLpzYDFLdCR/lO1Be7NKUxTqypAqla Xb7d3z5SdUVqcHjqsY2OqhDhbdMaZHiaY5U05PzrzTFCTd87hijWpRuQKDT4rAN9 fGpbKWTyAHCGrat0qd5ls7Vn++IVMy05V+V5RZFGKtq2Y0MENZXvbEoFAqSoN7Th l1Q9myg2zqa6i2bshqw95vdP73YjGQv286mEPvgLfD4Qmzqeg+2LGJ4u5QI5SUpb sQSHTLcGRfwR1XibkyUukMFc1YTyK+Pr7jNmz4aR/oQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=r0+iJj a9GnbiTuHYtB/h2e5ZSTk9g7FYzHn3uAnW6Es=; b=C0pPjJGpcnzzY0ZG01iGML +JSa9JAXKxPorOI1KvteW2GZF4Z9NXEX0LvYaEpcMJo3LaQqWHqVB2h98LxD8owi Oay66z4eQAcqYuXaLxWpxp14OqSAe/LSIKGDTWPezaxn0IDkVuGU0XVKcnQNYbg0 aHzA/oia74b6Gb9BPWGnqfu+Ln7ugcR6mdZxJp6q3ew5ThT/gcnzoBAsS+k+fZ8x OkZz1RbxWjYzXru52oh4nLm/VUpkuBqBKd8Jz7nBMBGNXolNkZ2Re2UNM39LFe5X 71sorfn+dC7CdH6d2fNEix8jAPku7psBNyzB0AmX/EVHSnvEIL6SRPjkNLGuZTpw == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudekiedgjeduucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre ertddtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseii hiigshhtrdhnvghtqeenucggtffrrghtthgvrhhnpedtheeigfdvudefkeekvddtfedvte dttdekuddvgeevlefftdekffdujedvhfduteenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehtvggthhdqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Fri, 1 Oct 2021 10:14:09 -0400 (EDT) Date: Fri, 1 Oct 2021 15:14:08 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: Re: zfs q regarding backup strategy Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="erl2uAFuAlkL2s4n" Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 4HLXD95F9fz4Tkx X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b=XFSZpM2F; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=C0pPjJGp; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 64.147.123.25) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-6.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:64.147.123.0/24, country:US]; RCVD_IN_DNSWL_LOW(-0.10)[64.147.123.25:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm3]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; RWL_MAILSPIKE_POSSIBLE(0.00)[64.147.123.25:from]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 14:14:18 -0000 --erl2uAFuAlkL2s4n Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, On Thu, Sep 30, 2021 at 08:06:28PM -0700, David Christensen wrote: >Michael Warren Lucas is my go-to author for FreeBSD and ZFS: I think those were written quite a while ago? I need something covering both the old zfs and OpenZFS. I'm looking for the differences, any incompatibilities that might apply in my context. It'd be great if he has more recent stuff. >I use zfs-auto-snapshot for snapshot creation/ management, and homebrew >commands/ scripts for replication. The homebrew stuff is problematic. yeah homebrew I'm trying to avoid for lots of reasons. >I need to evaluate something like zfs-replicate (available as a FreeBSD >package of the same name): Thanks for the suggestion. Problem with zfs-replicate is its dependence on python, which from what I've observed historically, is a bit of a mess. On my desktop there's lots of ports still needed that are dependent on python2 even though upstream have retired it. They show up in reports as EoL'd due to python2; there's loads right now and the desktop builds its ports in poudriere weekly. What I'm looking for is something (ideally) written in sh. Or even perl. But even before that, need to understand incremental backups properly. Basically the backup needs to be (effectively) write-only. By that, I mean only added to. Maybe zfs snapshots aren't the way to go; maybe rsync in the backup direction only (apart from when something needs to be restored) would suit my context better. What do you think? --=20 J. --erl2uAFuAlkL2s4n Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFXF6gACgkQs8o7QhFz NAXSSQ//ZEfS11RmyvAVlfiuU8XSf4mNMbckWxKm8g+REVmw4kgjwqQExzwYHpj0 dlJWdbEoKLPpb0zNOfNOHZRlP2f1vBxMRPv2PEw+mDrqxlPSPkRXKYoPXAjvZKUX bSerW6arerJkWBBTp/cv/gXv2g7QXZaENFn6AQRAD3vk+svtARV/4/jnFys4KZ4r P7bJXrrhgFc1ObVjx7nH+xO78htdPNKr02O6tShl99lS4TZ5XfKKxRhDW3Ig/iFZ 0DeqZKb/mF0/oeuJzoWBqHCe5EuJwtsBbJ96C1XI3FC7HS5NCXgeft41lteevFqO sh5mj1KCnoU4gGIu1e3iMQPq99hzw4JrBedZjg454OR2xfsQGdvbbFpdSa9QA1TD n9nsMKohe5ZCJyYF8XdLoJsocMH8TmgVApxw5rW6zvTsCj2bQY3rGBWV0G98dXTY rGrszxSVv9iayyiREL4ucSqgLNCKvnflHURBch/tJQYU9i/0yPRwJ/UMY5r80cv5 kWnr2xhAsAOEpI6B08nPWYC8GZP0R0h2gOr0mwKoOy8tRzP8X/PtmbsQeCkG5Pwk kLp9Un0RSoB88c6++5dYXAXjFgnzBbBDaIqs+J/Q9KqUTFsPHRED8vgkqL8YZgl3 jgIOWg84JzxAWbgfqD0TrrdrsSmMir4Cr6sd87k7la8BRZOBwfI= =wDTq -----END PGP SIGNATURE----- --erl2uAFuAlkL2s4n-- From owner-freebsd-questions@freebsd.org Fri Oct 1 14:21:05 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E960C6B01CD for ; Fri, 1 Oct 2021 14:21:05 +0000 (UTC) (envelope-from SRS0=/Re9=OV=perdition.city=julien@bebif.be) Received: from orval.bbpf.belspo.be (orval.bbpf.belspo.be [193.191.208.90]) by mx1.freebsd.org (Postfix) with ESMTP id 4HLXN06k0hz4Vdq for ; Fri, 1 Oct 2021 14:21:04 +0000 (UTC) (envelope-from SRS0=/Re9=OV=perdition.city=julien@bebif.be) Received: from x1 (unknown [77.109.105.148]) by orval.bbpf.belspo.be (Postfix) with ESMTPSA id B35D91D4FC16 for ; Fri, 1 Oct 2021 16:20:57 +0200 (CEST) Date: Fri, 1 Oct 2021 16:20:55 +0200 From: Julien Cigar To: freebsd-questions@freebsd.org Subject: Re: zfs q regarding backup strategy Message-ID: <20211001142055.fv6dqigixdgos2xu@x1> Mail-Followup-To: freebsd-questions@freebsd.org References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="r5cvot5bxqywiq27" Content-Disposition: inline In-Reply-To: X-Rspamd-Queue-Id: 4HLXN06k0hz4Vdq X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of "SRS0=/Re9=OV=perdition.city=julien@bebif.be" designates 193.191.208.90 as permitted sender) smtp.mailfrom="SRS0=/Re9=OV=perdition.city=julien@bebif.be" X-Spamd-Result: default: False [-2.63 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; MID_RHS_NOT_FQDN(0.50)[]; NEURAL_HAM_SHORT(-0.99)[-0.992]; NEURAL_SPAM_LONG(0.86)[0.863]; DMARC_NA(0.00)[perdition.city]; SIGNED_PGP(-2.00)[]; FORGED_SENDER(0.30)[julien@perdition.city,SRS0=/Re9=OV=perdition.city=julien@bebif.be]; RCVD_NO_TLS_LAST(0.10)[]; RECEIVED_SPAMHAUS_PBL(0.00)[77.109.105.148:received]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:2611, ipnet:193.191.192.0/19, country:BE]; FROM_NEQ_ENVFROM(0.00)[julien@perdition.city,SRS0=/Re9=OV=perdition.city=julien@bebif.be]; MAILMAN_DEST(0.00)[freebsd-questions]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 14:21:06 -0000 --r5cvot5bxqywiq27 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Oct 01, 2021 at 03:14:08PM +0100, tech-lists wrote: > Hello, >=20 > On Thu, Sep 30, 2021 at 08:06:28PM -0700, David Christensen wrote: >=20 > > Michael Warren Lucas is my go-to author for FreeBSD and ZFS: >=20 > I think those were written quite a while ago? I need something covering > both the old zfs and OpenZFS. I'm looking for the differences, any > incompatibilities that might apply in my context. It'd be great if he > has more recent stuff. >=20 > > I use zfs-auto-snapshot for snapshot creation/ management, and homebrew > > commands/ scripts for replication. The homebrew stuff is problematic. >=20 > yeah homebrew I'm trying to avoid for lots of reasons. >=20 > > I need to evaluate something like zfs-replicate (available as a FreeBSD > > package of the same name): >=20 > Thanks for the suggestion. Problem with zfs-replicate is its dependence > on python, which from what I've observed historically, is a bit of a mess. > On my desktop there's lots of ports still needed that are dependent on > python2 even though upstream have retired it. They show up in > reports as EoL'd due to python2; there's loads right now and the desktop > builds its ports in poudriere weekly. >=20 > What I'm looking for is something (ideally) written in sh. Or even perl. > But even before that, need to understand incremental backups properly. > Basically the backup needs to be (effectively) write-only. By that, I > mean only added to. >=20 > Maybe zfs snapshots aren't the way to go; maybe rsync in the backup > direction only (apart from when something needs to be restored) would > suit my context better. What do you think? We use zrepl at work and it works pretty well. It handles snapshots, send/recv, pruning, etc. > --=20 > J. --=20 Julien Cigar Belgian Biodiversity Platform (http://www.biodiversity.be) PGP fingerprint: EEF9 F697 4B68 D275 7B11 6A25 B2BB 3710 A204 23C0 No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. --r5cvot5bxqywiq27 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEnF27CBNtOraRNmgqCLYqJMpBHmkFAmFXGUMACgkQCLYqJMpB HmnH4g//Qsdr+tm/0G8EWLlPp0NpZF6dsgUgskrBJOh8ouJ8RyXwOHpbM7nBxxVt XQL5uFFPTw1cIGmAjND/iZyLnrF6Q60eH2bG/4gwmriraybJU1NSZvBq6FjtA8E3 baMtlY6RQ0jRTQmbxr1Mt5BIAHmnSs9N2MN4nlboVwKz+yZkXb2iwo80Rthj9V+P 98Upw5equyVSHW+w7zeo+bitdD55wM1cpmFOTjWObqWdwkpvX1p9mMHRD7jU10Rd 0Uj1sEOIIz0s8QWJnIjIhXPUVe5k+SpAWh9Kit9LYA289ztzc6B/j7NFDTdvblSM sjqV4q+zdZ48W9DiWGhcYqRX+dpeHewNqnIivp9LIqWGBu2HExwd5l/FRugVMq3e r38USDjTr8dSTFqggVIBLvyubSUCHEEXTGui27A0bAVUHtNxU/xGSIclCQq34RF/ +zW9qutIsJycToBLBt+k5a3u9FZ9bkw53yGwhWfrBZoyuzlCBaMAFARJ/SAXSsgl nV+h0vKP81qnLU/MX+/HsyngPEDJFtg31LUrxxhALIHeX/2kysOo6wNQoLS5oi3Y UF3O26x43B2Ivm+n6wfxD1vB3EGjhAfbf2XqtVXHuC7bC5RLP9bjJYB2WpJ1VWCu 30TiOGkrCg08BIuTE4DhTEoRPkJx/UcBXjtnRoSqct3KIqqW8Ds= =VjwE -----END PGP SIGNATURE----- --r5cvot5bxqywiq27-- From owner-freebsd-questions@freebsd.org Fri Oct 1 14:24:48 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id D9B766B024D for ; Fri, 1 Oct 2021 14:24:48 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [IPv6:2607:f3e0:0:1::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smarthost1.sentex.ca", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLXSH672kz4W5F for ; Fri, 1 Oct 2021 14:24:47 +0000 (UTC) (envelope-from mike@sentex.net) Received: from pyroxene2a.sentex.ca (pyroxene19.sentex.ca [199.212.134.19]) by smarthost1.sentex.ca (8.16.1/8.16.1) with ESMTPS id 191EOk55004350 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL) for ; Fri, 1 Oct 2021 10:24:47 -0400 (EDT) (envelope-from mike@sentex.net) Received: from [IPv6:2607:f3e0:0:4::29] ([IPv6:2607:f3e0:0:4:0:0:0:29]) by pyroxene2a.sentex.ca (8.16.1/8.15.2) with ESMTPS id 191EOkQO043885 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO) for ; Fri, 1 Oct 2021 10:24:46 -0400 (EDT) (envelope-from mike@sentex.net) Subject: Re: expired Lets Encrypt CA and fetch From: mike tancsa To: freebsd-questions@freebsd.org References: <0a181938-ca91-4e79-19b3-f774b854a600@sentex.net> Message-ID: <10ff4d55-9889-9b79-d89a-2a0bca19f648@sentex.net> Date: Fri, 1 Oct 2021 10:24:47 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 MIME-Version: 1.0 In-Reply-To: <0a181938-ca91-4e79-19b3-f774b854a600@sentex.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Content-Language: en-US X-Scanned-By: MIMEDefang 2.84 X-Rspamd-Queue-Id: 4HLXSH672kz4W5F X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of mike@sentex.net designates 2607:f3e0:0:1::12 as permitted sender) smtp.mailfrom=mike@sentex.net X-Spamd-Result: default: False [-3.28 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; FREEFALL_USER(0.00)[mike]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f3e0::/32]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[3]; DMARC_NA(0.00)[sentex.net]; NEURAL_HAM_SHORT(-0.98)[-0.984]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:11647, ipnet:2607:f3e0::/32, country:CA]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 14:24:48 -0000 On 10/1/2021 9:23 AM, mike tancsa wrote: > On 9/30/2021 9:14 PM, tech-lists wrote: >> Hi, >> >> On Thu, Sep 30, 2021 at 11:46:50AM -0400, mike tancsa wrote: >> >>> fails on releng11 and some RELENG_12, but not recent releng13. Does >>> anyone know whats going on and why its so inconsistent ? If I remove the >>> expired CA entry from the bundle, it works but I dont have to on all >>> clients ? Anyone know whats going on ? >> It fails for me on 12.2-p7 and 13.0-p4 and stable/13 as of a few days >> ago with fetch. >> >> I have no clue why your recent releng13 works. Maybe your fetch on >> there is linked to the ssl a browser would use? > Digging a bit further, it depends what the server sends and how the > client works. e.g. does the server send along both the expired > intermediary and not expired. Can an intermediary be trusted like a > root? etc. > > The OpenBSD guys made a change that could break some applications, but I > am not sure what > > https://ftp.openbsd.org/pub/OpenBSD/patches/6.8/common/032_cert.patch.sig > > > I am guessing (not tested) something like this on RELENG_11 ? Note the > discussion at > > https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/ > > --- crypto/openssl/crypto/x509/x509_vpm.c.prev 2021-10-01 > 09:16:51.753533000 -0400 > +++ crypto/openssl/crypto/x509/x509_vpm.c 2021-10-01 > 09:19:39.708106000 -0400 > @@ -537,7 +537,7 @@ > "default", /* X509 default parameters */ > 0, /* Check time */ > 0, /* internal flags */ > - 0, /* flags */ > + X509_V_FLAG_TRUSTED_FIRST, /* flags */ > 0, /* purpose */ > 0, /* trust */ > 100, /* depth */ > > > ---Mike This does seem to work. If I patch the file then cd /usr/src/secure make depend make make install fetch on RELENG_11 no longer complains. Whether or not I am doing some massive foot shooting, I am not sure. I think I will ask on freebsd-security ---Mike > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Fri Oct 1 15:51:37 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id ACEA06B1B88 for ; Fri, 1 Oct 2021 15:51:37 +0000 (UTC) (envelope-from andipersti@gmail.com) Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLZNS5TGZz4dsf for ; Fri, 1 Oct 2021 15:51:36 +0000 (UTC) (envelope-from andipersti@gmail.com) Received: by mail-wr1-x42d.google.com with SMTP id v25so5576345wra.2 for ; Fri, 01 Oct 2021 08:51:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:date:mime-version:user-agent:content-language:to :references:from:subject:in-reply-to:content-transfer-encoding; bh=smtN9Mh9tbujc3pmzCX/NBEFuieF5UUZuhEC23A8Qao=; b=R0MkTZT0YiPe1sQUFaApXz3sTjiGXijOlguOFK1LsrOYIwicEDlmEHHxubSEoe/7Zv 9e8PLc2YMzAn0of8BaLbruhXb4wJ8h/LLy+C7dys77c3rhZZXxx3r400cdBcrsGLphBK 7L1sgLSzSaDpcCMzLr3i26vyWKz0Taj77t8TbusAQofvhZPNcOX+gvACv6mJ4UbYOwgq Ma16KQvMRz+GOZsAQXuD/ZtPG9saYT8Oa3mDns38DcWiPoq1WDnDd5Kz/C6eI998aPCH PQV/a+hDW/XT99oDAy8p0akqjZappfJQSflX3ECBy7LJCACAouO8niwCSDhwQW3Syrmm b4YQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent :content-language:to:references:from:subject:in-reply-to :content-transfer-encoding; bh=smtN9Mh9tbujc3pmzCX/NBEFuieF5UUZuhEC23A8Qao=; b=3F8kulQIl5K83IRP5ngNwU5HOccdHo6KpaIjrn/FHbUIskI080c6bqn2vbYN1wBzkT pVPvmt2e80eprl1kEUExNkHxrOKW9jWpXB0OFGf5T1ftGiqxeALUtpZQZPVIEjUcIYHq XTthjImk3N8xDaqF2Hf/69bNjpQ0p+tCf8jNuV4SKfgDtXsqw9M0W1/6Bzwx8Mk/ZfYl w3PyBxhir9BP4ygxJMydjFfkHPUEbR4iErYQvinqktBbZFOG6PQxssgnWK3V9vBtFOcx 01tLHzYSN4XUkvEhktgUawK0fyuZsZMCiAHE5VQSP7V/te95UHMF51bZuk6F/gS8r+gM QPrg== X-Gm-Message-State: AOAM532SicgOb3XfvDkG8aDKpvWyvT7BWpHMav2eFZFS9pOPTf0DHX4L R232X5HOGozmG79Bakx1UMu5Nk7SvSE= X-Google-Smtp-Source: ABdhPJwqHz4qbadTRUcbQM/qkk4zVD2dZALjtW/uUnnU+1aXj2glMJHX9RknWNlL9p9Dr7VAUkgzFg== X-Received: by 2002:adf:e68e:: with SMTP id r14mr13895255wrm.344.1633103489946; Fri, 01 Oct 2021 08:51:29 -0700 (PDT) Received: from [192.168.178.20] (91-118-242-180.static.upcbusiness.at. [91.118.242.180]) by smtp.googlemail.com with ESMTPSA id e18sm6034227wrp.53.2021.10.01.08.51.29 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 01 Oct 2021 08:51:29 -0700 (PDT) Message-ID: <5746516c-ca9f-a364-ec33-3aee1b1d59d1@gmail.com> Date: Fri, 1 Oct 2021 17:51:28 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.1.1 Content-Language: en-US-large To: freebsd-questions@freebsd.org References: <20211001082416.ab1730fdad3a823b8262c823@sohara.org> From: Andreas Perstinger Subject: Re: day of the date in french In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 4HLZNS5TGZz4dsf X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=R0MkTZT0; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of andipersti@gmail.com designates 2a00:1450:4864:20::42d as permitted sender) smtp.mailfrom=andipersti@gmail.com X-Spamd-Result: default: False [-2.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_SPAM_SHORT(1.00)[1.000]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::42d:from]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 15:51:37 -0000 On 01.10.21 14:58, φ Dhénin Jean-Jacques wrote: > root@pyracmon #  ( export  ( export lc_all=fr_FR.UTF-8 ; export > LC_TIME=fr_FR.UTF-8 ; date +\%A_\%Y\%m\%d )vendredi_20211001 If you want to change the environment temporarily for a simple command, prefixing the command with the variable assignment should work: $ LC_TIME=fr_FR.UTF-8 date +\%A_\%Y\%m\%d Bye, Andreas From owner-freebsd-questions@freebsd.org Fri Oct 1 19:53:23 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 687566B4C2A for ; Fri, 1 Oct 2021 19:53:23 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from holgerdanske.com (holgerdanske.com [184.105.128.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "holgerdanske.com", Issuer "holgerdanske.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLglQ2h8qz3DNv for ; Fri, 1 Oct 2021 19:53:22 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=holgerdanske.com; s=nov-20210719-112354; t=1633118000; bh=KrB8QJpzq+zarTD8iQbE+fq4wAwQA1VCxFakE60S2OI=; h=Received:Message-ID:Date:MIME-Version:User-Agent:Subject: Content-Language:To:References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding; b=Mp0l/Ys8bOfD+88kUcGiWC4ST/07I6MCDHw7uJlUY6gqaacXl4gorfMY83bEoRtnk TJaEhXlB9/lYMiSRmgqbsgpMQHEuCAfcm6vpJL/ZmjU6L1Rp2p9c7p1IudnMRy2W6L dNDJh04lInFUeB2Zg8aUvjL1aZb6oIDNjyVQrWkcB/YsuhmdLzDb6TSd4dCXaE862T 6ZS5aF/qGZ+heRFRsyBCnsBKk4WohWZvs2jkVZPbAfvU80OCNi9bsGQB8h7q8dYbQd 7xTbCtpDZCeB6Ywe1Jm1so/EwGPCSEpU55p/4jPzDuBEwa8IFHPbziq97T3mpv+0gl FyY3cxK0LSsrliWdZN/LL0ZkHYvG4vFtqsWKnk0U3yHCoguwaTIupGmNj81SGPhYPw tzC/GuFPazZSbtlyLc3RROCqoNWt45ny1MKNy1Y55R3E/nsMmPyRjyAEAL4eXWDIFB mRB99F8wa/mIQab+VWvlCYviQcQ5dJqCCG/kZ07JGNtwfgRc9ocLA6imTiOaMAO/1t RhEz1/GghWcfcHc/23hkbLbd30YybCC7tgWRy2GxQ+WHTI1SPx9Cho9QmKVoTe5Dt9 QeyErjLjievZzhhrH1PypK7qYvTCNN0CPt5CL23lPz20dFqlttZ1Vu1xtbUKlAY5zD Ey0C9jaKWmeqmfZ0GVs1Epqg= Received: from 99.100.19.101 (99-100-19-101.lightspeed.frokca.sbcglobal.net [99.100.19.101]) by holgerdanske.com with ESMTPSA (TLS_AES_128_GCM_SHA256:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(128):Mac=AEAD) (SMTP-AUTH username dpchrist@holgerdanske.com, mechanism PLAIN) for ; Fri, 1 Oct 2021 12:53:20 -0700 Message-ID: <87e5fe55-4b93-694e-397b-e383926fb6c2@holgerdanske.com> Date: Fri, 1 Oct 2021 12:53:11 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.1.2 Subject: Re: zfs q regarding backup strategy Content-Language: en-US To: freebsd-questions@freebsd.org References: From: David Christensen In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 4HLglQ2h8qz3DNv X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=holgerdanske.com header.s=nov-20210719-112354 header.b="Mp0l/Ys8"; dmarc=pass (policy=none) header.from=holgerdanske.com; spf=pass (mx1.freebsd.org: domain of dpchrist@holgerdanske.com designates 184.105.128.27 as permitted sender) smtp.mailfrom=dpchrist@holgerdanske.com X-Spamd-Result: default: False [-4.00 / 15.00]; RCVD_TLS_ALL(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[holgerdanske.com:s=nov-20210719-112354]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; ARC_NA(0.00)[]; DKIM_TRACE(0.00)[holgerdanske.com:+]; DMARC_POLICY_ALLOW(-0.50)[holgerdanske.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:6939, ipnet:184.104.0.0/15, country:US]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 19:53:23 -0000 On 10/1/21 07:14, tech-lists wrote: > Hello, > > On Thu, Sep 30, 2021 at 08:06:28PM -0700, David Christensen wrote: > >> Michael Warren Lucas is my go-to author for FreeBSD and ZFS: > > I think those were written quite a while ago? I need something covering > both the old zfs and OpenZFS. I'm looking for the differences, any > incompatibilities that might apply in my context. It'd be great if he > has more recent stuff. I find MWL's writings to be recent enough. He updates his books. I expect he has a process for updating blog posts. >> I use zfs-auto-snapshot for snapshot creation/ management, and homebrew >> commands/ scripts for replication.  The homebrew stuff is problematic. > > yeah homebrew I'm trying to avoid for lots of reasons. > >> I need to evaluate something like zfs-replicate (available as a FreeBSD >> package of the same name): > > Thanks for the suggestion. Problem with zfs-replicate is its dependence > on python, which from what I've observed historically, is a bit of a mess. > On my desktop there's lots of ports still needed that are dependent on > python2 even though upstream have retired it. They show up in > reports as EoL'd due to python2; there's loads right now and the desktop > builds its ports in poudriere weekly. Thankfully, I can find what I need in packages; and zfs-replicate is a current package. > What I'm looking for is something (ideally) written in sh. Or even perl. Available in the links I already posted. > But even before that, need to understand incremental backups properly. I learned by beating my head against the console. :-/ > Basically the backup needs to be (effectively) write-only. By that, I > mean only added to. ZFS snapshots are read-only by design. When you replicate a read-write filesystem, you replicate via snapshots. The snapshots arrive read-only, and the filesystem arrives read-write. If you touch the destination filesystem, the next incremental replication will fail. The '-F' option to 'zfs receive' is required to discard changes on the destination. I do not see an option for 'zfs receive' to set properties during replication, but you could write a script to set 'readonly=on' on the destination after replication. If so, I don't know what happens on the next incremental replication -- properties are overwritten? Replication fails? Testing is required. Eventually, the destination will fill up. Choices include replacing the media and deleting snapshots. I do the latter (by hand). > Maybe zfs snapshots aren't the way to go; Snapshots and replication are killer features of ZFS, and primary reasons why I use ZFS. > maybe rsync in the backup > direction only (apart from when something needs to be restored) would > suit my context better. I use rsync(1) to backup from non-ZFS sources to ZFS. > What do you think? "More than enough rope to shoot yourself in the foot". David From owner-freebsd-questions@freebsd.org Fri Oct 1 20:41:55 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 0C5AC6B5AAD for ; Fri, 1 Oct 2021 20:41:55 +0000 (UTC) (envelope-from merlyn@geeks.org) Received: from mail.geeks.org (jacobs.geeks.org [204.153.247.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLhqQ01gcz3GHr for ; Fri, 1 Oct 2021 20:41:53 +0000 (UTC) (envelope-from merlyn@geeks.org) Received: from mail.geeks.org (localhost [127.0.0.1]) by after-clamsmtpd.geeks.org (Postfix) with ESMTP id 7CF4B13207 for ; Fri, 1 Oct 2021 15:41:47 -0500 (CDT) Received: by mail.geeks.org (Postfix, from userid 1003) id 6F2D7131F0; Fri, 1 Oct 2021 15:41:47 -0500 (CDT) Date: Fri, 1 Oct 2021 15:41:47 -0500 From: Doug McIntyre To: freebsd-questions@freebsd.org Subject: Re: FreeBSD.org MX servers refusing mail from host via ipv6 Message-ID: References: <8BF8713A-6677-4BAD-A61B-9A7B5D9CC297@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <8BF8713A-6677-4BAD-A61B-9A7B5D9CC297@gmail.com> X-Virus-Scanned: ClamAV using ClamSMTP X-Rspamd-Queue-Id: 4HLhqQ01gcz3GHr X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of merlyn@geeks.org designates 204.153.247.1 as permitted sender) smtp.mailfrom=merlyn@geeks.org X-Spamd-Result: default: False [-3.30 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ptr]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[3]; DMARC_NA(0.00)[geeks.org]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:7753, ipnet:204.153.244.0/22, country:US]; RCVD_TLS_LAST(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 20:41:55 -0000 On Fri, Oct 01, 2021 at 02:37:08PM +0200, Paul van der Zwan wrote: > It looks like the freebsd.org servers are refusing mails from unresolvable hosts: As much as I think it is worthless security, this has been the standard for quite some time on IPv4, and IPv6 copied it along. I'm not sure you'd find more than a handful of mail servers out there that would let a mailserver without a reverse PTR setup to talk to them either on IPv4 nor IPv6. So, if you don't get to control your IPv6 reverse PTR, you probably shouldn't be sending email from that machine, because none of it is going to get through. GMail certainly will never let you talk on IPv6 without a reverse PTR record. I'm sure FreeBSD MX is just following "best" practices. > For IPv6 this seems like a very strict requirement as it’s almost impossible to get reverse DNS working for autoconfigured IPv6 adresses ? Mail servers typically have static IP addresses? Servers that aren't mail servers but still send email should probably relay through a fixed submission server. > Is there an IPv4 only alias I can route mail to for freebsd.org domain ? You could always configure your email server to only be sending IPv4 email to certain domains. Ie for postfix, something like https://tanguy.ortolo.eu/blog/article109/google-ipv6-smtp-restrictions From owner-freebsd-questions@freebsd.org Fri Oct 1 21:23:29 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 338FA6B6423 for ; Fri, 1 Oct 2021 21:23:29 +0000 (UTC) (envelope-from paulz42@gmail.com) Received: from mail-ed1-x533.google.com (mail-ed1-x533.google.com [IPv6:2a00:1450:4864:20::533]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLjlN39pSz3KcK for ; Fri, 1 Oct 2021 21:23:28 +0000 (UTC) (envelope-from paulz42@gmail.com) Received: by mail-ed1-x533.google.com with SMTP id s17so38542693edd.8 for ; Fri, 01 Oct 2021 14:23:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=VSPgb7l7qqDQgNZ1telCU04oKNcNi5LigF0xZCsRn0U=; b=dwod/lSuRn3TOw76vXTQByP96VkvDQ9ge3gxY36grls9i2WNNoZTTAjlR8sT3WEeMR ucOM3BrK5OHQpgin02ehUgVCRbUo7xyLKZY/dRUIwIIwPEyfHM4465ifY9BhnhK5DkqX 96D7UZMQptHikVULraww9IZ/p0h1mtZU2sW3ckxv+X3R/3QeB+9g79ovkT4vp8cAvF1n 8ER40qKuw9ykByhsAMlydKTg0HPreux4Ju0qW9kiCqhTi0ZIMIyD+40YFDnW+qCa1Rro jd3JJfGTrc5EiLPd2El83IML0wFmMzWTV6oye0ifLMiP5X/FM5i+gbq+g8Ef+S0VxOnW aDSw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=VSPgb7l7qqDQgNZ1telCU04oKNcNi5LigF0xZCsRn0U=; b=xX9hrWTf5cGow8Gb/B3tPN387TN25TYCCkppCa2B3UYVPA6zdnlODL4iHbRR5Tme0Z nbWxJPlX76QWkkH3EBjY03ijHhZ/E1qQyzy9ZMtV2DNt6titxvEe/kLMKKuML6dENDyD P6E5GIcxRnHZAvTnG8mmwbH4HLjG3JFFD6ygVazsN1gFVdQcyvoQC4iqyr9rYa9syIwY J++Nxbp7K6tKKl02mdQVGkqW/HRjuY1MmwWwIQiRePSkr4L27IlQ0BbJJB4Kb2upS2NS bsnDBx0UgUxIqzz6OddJJxzT+3fhZkBGOKaExKrf8gmVct3LgOaajrp+6VWrDo22JD0R g4UA== X-Gm-Message-State: AOAM530QutK4qJLly1CA0P2gvS5ZcdanqOKLl4uS9nAl8OjG3AzNeMZ+ OYWlUZvKZX4+Da1wx7y7EsMLjQrsvWk= X-Google-Smtp-Source: ABdhPJyzlYi7dJAt3/v40wzs0VCKcHY4QvQFZihF4WfVFFgidbaurskT2+UwtvBrM0E/AXFWeidRpw== X-Received: by 2002:a17:906:25d7:: with SMTP id n23mr211546ejb.322.1633123407470; Fri, 01 Oct 2021 14:23:27 -0700 (PDT) Received: from smtpclient.apple ([2a02:a461:283f:1:e02d:9dc6:377:abc9]) by smtp.gmail.com with ESMTPSA id j14sm3802473edl.21.2021.10.01.14.23.27 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 01 Oct 2021 14:23:27 -0700 (PDT) From: Paul van der Zwan Message-Id: <7F187395-7DAC-440E-9F3A-259DAB7A63C9@gmail.com> Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.120.0.1.13\)) Subject: Re: FreeBSD.org MX servers refusing mail from host via ipv6 Date: Fri, 1 Oct 2021 23:23:25 +0200 In-Reply-To: Cc: freebsd-questions@freebsd.org To: Doug McIntyre References: <8BF8713A-6677-4BAD-A61B-9A7B5D9CC297@gmail.com> X-Mailer: Apple Mail (2.3654.120.0.1.13) X-Rspamd-Queue-Id: 4HLjlN39pSz3KcK X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b="dwod/lSu"; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of paulz42@gmail.com designates 2a00:1450:4864:20::533 as permitted sender) smtp.mailfrom=paulz42@gmail.com X-Spamd-Result: default: False [-2.49 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; MV_CASE(0.50)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; URI_COUNT_ODD(1.00)[7]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-0.99)[-0.985]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::533:from]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 21:23:29 -0000 > On 1 Oct 2021, at 22:41, Doug McIntyre wrote: >=20 > On Fri, Oct 01, 2021 at 02:37:08PM +0200, Paul van der Zwan wrote: >> It looks like the freebsd.org servers are refusing mails from = unresolvable hosts: >=20 >=20 > As much as I think it is worthless security, this has been the > standard for quite some time on IPv4, and IPv6 copied it along. I'm > not sure you'd find more than a handful of mail servers out there that > would let a mailserver without a reverse PTR setup to talk to them > either on IPv4 nor IPv6. So, if you don't get to control your IPv6 > reverse PTR, you probably shouldn't be sending email from that > machine, because none of it is going to get through. >=20 My own mailserver refuses to relay when no PTR is found but accepts mail = destined for the local domain. Which I considered an acceptable compromise. > GMail certainly will never let you talk on IPv6 without a reverse PTR = record. Gmail has no problem whatsoever accepting mail from my mailserver. > I'm sure FreeBSD MX is just following "best" practices. >=20 This is the first time I ever ran into this so FreeBSD MX seems to be an = exception. >> For IPv6 this seems like a very strict requirement as it=E2=80=99s = almost impossible to get reverse DNS working for autoconfigured IPv6 = adresses ? >=20 > Mail servers typically have static IP addresses? Servers that aren't > mail servers but still send email should probably relay through a > fixed submission server. >=20 >> Is there an IPv4 only alias I can route mail to for freebsd.org = domain ? >=20 > You could always configure your email server to only be sending IPv4 > email to certain domains. Ie for postfix, something like > https://tanguy.ortolo.eu/blog/article109/google-ipv6-smtp-restrictions >=20 Having an ipv4 only MX would be nice but I guess I=E2=80=99ll have to = figure out a local solution. Running sendmail here so the postfix solution will not work but I think = I can add an IPV4 only mailer and use mailertable to route domains like = freebsd.org to that mailer. Thanks Paul > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org" >=20 From owner-freebsd-questions@freebsd.org Fri Oct 1 21:24:39 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 98F9D6B661C for ; Fri, 1 Oct 2021 21:24:39 +0000 (UTC) (envelope-from kudzu@tenebras.com) Received: from mail-lf1-x131.google.com (mail-lf1-x131.google.com [IPv6:2a00:1450:4864:20::131]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLjmk6kqQz3KlC for ; Fri, 1 Oct 2021 21:24:38 +0000 (UTC) (envelope-from kudzu@tenebras.com) Received: by mail-lf1-x131.google.com with SMTP id b20so43928073lfv.3 for ; Fri, 01 Oct 2021 14:24:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tenebras-com.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=rmYxvH6iPDpml5rIR7T1HKXMMyDOr6TohrB+EmYSjx8=; b=r22adknNxB08WOxZ8bdQI7n2VIJ2eL+zTUox+Fz5vOeUFeGChSl+P9Vo/mLUWPc7++ 5f79ihiilCov1nyySPa/7gSDLowrixJzDytzuz3d49ircvw1ur26Eo+EfCo6o9MG3vRC gHJJ1arEMa6jI/42QYjopU/+5hPZOitXBE3YQNA7maxuB/1ELNBT9AxeU/xYKmICKGMG 4yloBjmDZmP6FUBeSWwqxhKyzm0XfH10EZq/nXNFmDBsVZjPvw9/I83rJ5XUyrOgABIc 28s0ix8Yy/3ivVZx01kb8MIGXzADQCiAJbCo76zgv2dDE3fnvDd1d/qbuTBJlvtyqTcT Yorg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=rmYxvH6iPDpml5rIR7T1HKXMMyDOr6TohrB+EmYSjx8=; b=MvYLu5NFJNFjiCJHMfqS2sOwSRdB87LFfEi+CeC2kMEoJMJ4YudBOCh869drmiH/ye osbgnYlvjFsUIevbKCDtj9KPIHqcqlnXQmXo47HLtY9umM6SrwzzzpN2MhtMowjx0Mfl 8IXEnfOOdPxtFvxSRN/6cIIqfl2dYzyRmjlu2MA9JnMjFvhWeUuzZ45FzNXYEqAIlkOY Nvit8ua91kgJmavVZOKzvmKd2SraFcNOA29dpqMw7TIouLRzOCxK9LVVbvLiXH7arRxo h184xyaY817RysMnyddTYKPVkk38SvHrCrGyhDPZi02Z0QasytJv3UqBfvOqksd4/l++ LlSQ== X-Gm-Message-State: AOAM532TkUOEjJ+AfgfuX8f49baPhP35kMJ0Fu+BPfLxVGkANS5gq+ou t6ONR02xrj+rOIt9xqqKOkdKah+Oq5F0mCj8tSHgHGusrHE= X-Google-Smtp-Source: ABdhPJxm0NcCCeKbfkiGtKPlZlNSUs4oYzMUVkLxQvEA7wEcVcJYWRdz6VsXt2lq06gf8HXyofZXWo0s1Wo5iI/Y0Gg= X-Received: by 2002:a05:6512:16a4:: with SMTP id bu36mr267961lfb.255.1633123477448; Fri, 01 Oct 2021 14:24:37 -0700 (PDT) MIME-Version: 1.0 References: <8BF8713A-6677-4BAD-A61B-9A7B5D9CC297@gmail.com> In-Reply-To: From: Michael Sierchio Date: Fri, 1 Oct 2021 14:24:01 -0700 Message-ID: Subject: Re: FreeBSD.org MX servers refusing mail from host via ipv6 To: Doug McIntyre Cc: FreeBSD Questions X-Rspamd-Queue-Id: 4HLjmk6kqQz3KlC X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=tenebras-com.20210112.gappssmtp.com header.s=20210112 header.b=r22adknN; dmarc=none; spf=none (mx1.freebsd.org: domain of kudzu@tenebras.com has no SPF policy when checking 2a00:1450:4864:20::131) smtp.mailfrom=kudzu@tenebras.com X-Spamd-Result: default: False [-3.30 / 15.00]; RCVD_TLS_ALL(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[tenebras-com.20210112.gappssmtp.com:s=20210112]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[tenebras.com]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[tenebras-com.20210112.gappssmtp.com:+]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::131:from]; NEURAL_HAM_SHORT(-1.00)[-0.999]; R_SPF_NA(0.00)[no SPF record]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-questions] Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.34 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 21:24:39 -0000 On Fri, Oct 1, 2021 at 1:42 PM Doug McIntyre wrote: > > As much as I think it is worthless security, this has been the > standard for quite some time on IPv4, and IPv6 copied it along. I'm > not sure you'd find more than a handful of mail servers out there that > would let a mailserver without a reverse PTR setup to talk to them > either on IPv4 nor IPv6. So, if you don't get to control your IPv6 > reverse PTR, you probably shouldn't be sending email from that > machine, because none of it is going to get through. > It's not only not a positive security tactic, it's negative =E2=80=93 if I= can get you to do a PTR lookup from the NS host that's authoritative for my domain, I can craft a response that does interesting things to vulnerable versions of BIND. It's almost as stupid as doing an ident on the TCP connection. From owner-freebsd-questions@freebsd.org Fri Oct 1 21:28:23 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E26696B6786 for ; Fri, 1 Oct 2021 21:28:23 +0000 (UTC) (envelope-from 4250.82.1d4d40006635d6a.2771f05be17fe4266ff3a878638d009f@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLjs30QgZz3Kq7 for ; Fri, 1 Oct 2021 21:28:23 +0000 (UTC) (envelope-from 4250.82.1d4d40006635d6a.2771f05be17fe4266ff3a878638d009f@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1633123703; x=1635715703; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:cc:to:from:date:x-thread-info; bh=qRZXjR/BGNZ3YaJCigGe3F0Crh2I8PgfYTFy4Lo0O2A=; b=VLa7809/OAF3hEHU7A96DsrTomtHwxQr0n0iuOnzxCGIGVSv/DxlZAeQHW9c2zAyKkHiSfIvOFnxXpSBiJ1PLyaw0VXsP2yR8nUKxaJzB3ei50A8/Qc7nJ5/cfv2N0qZTf4DhYtUDw+uHmfFJl3SumPjjToEAK3RV0QOwF/AZwQ= X-Thread-Info: NDI1MC4xMi4xZDRkNDAwMDY2MzVkNmEuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r1.us-east-2.aws.in.socketlabs.com (r1.us-east-2.aws.in.socketlabs.com [142.0.189.1]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Fri, 1 Oct 2021 17:28:18 -0400 Received: from smtp.lan.sohara.org (EMTPY [185.202.17.215]) by r1.us-east-2.aws.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Fri, 1 Oct 2021 17:28:18 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.94.2 (FreeBSD)) (envelope-from ) id 1mWQ4m-00013s-PO; Fri, 01 Oct 2021 22:28:16 +0100 Date: Fri, 1 Oct 2021 22:28:16 +0100 From: Steve O'Hara-Smith To: tech-lists Cc: freebsd-questions@freebsd.org Subject: Re: zfs q regarding backup strategy Message-Id: <20211001222816.a36e9acbd4e8829aed3afb68@sohara.org> In-Reply-To: References: X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.33; amd64-portbld-freebsd12.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HLjs30QgZz3Kq7 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=email-od.com header.s=dkim header.b="VLa7809/"; dmarc=none; spf=pass (mx1.freebsd.org: domain of 4250.82.1d4d40006635d6a.2771f05be17fe4266ff3a878638d009f@email-od.com designates 142.0.176.198 as permitted sender) smtp.mailfrom=4250.82.1d4d40006635d6a.2771f05be17fe4266ff3a878638d009f@email-od.com X-Spamd-Result: default: False [-2.70 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[email-od.com:s=dkim]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; R_SPF_ALLOW(-0.20)[+ip4:142.0.176.0/20]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[sohara.org]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[email-od.com:+]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[142.0.189.1:received]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FORGED_SENDER(0.30)[steve@sohara.org,4250.82.1d4d40006635d6a.2771f05be17fe4266ff3a878638d009f@email-od.com]; RWL_MAILSPIKE_POSSIBLE(0.00)[142.0.176.198:from]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:7381, ipnet:142.0.176.0/22, country:US]; FROM_NEQ_ENVFROM(0.00)[steve@sohara.org,4250.82.1d4d40006635d6a.2771f05be17fe4266ff3a878638d009f@email-od.com]; MAILMAN_DEST(0.00)[freebsd-questions]; DWL_DNSWL_NONE(0.00)[email-od.com:dkim] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 21:28:23 -0000 On Fri, 1 Oct 2021 15:14:08 +0100 tech-lists wrote: > What I'm looking for is something (ideally) written in sh. Or even perl. > But even before that, need to understand incremental backups properly. > Basically the backup needs to be (effectively) write-only. By that, I > mean only added to. With zfs send every stream is a send up to some 'target' snapshot, a full stream is the complete history while an incremental stream is from an earlier 'source' snapshot. It is therefore necessary for any successful incremental backup system to know what the last snapshot sent was so that the next cycle can start by creating a new snapshot and sending the increment from the last sent to the latest. On the receiving end the options are to either store each send as a file named in such a way as to make it obvious what order to process them in should restore be needed or (more usefully) to use zfs recv to load them into filesystems in a pool on the receiving machine. If you do this there will be no pruning of the received snapshots unless you set something up to do it. This sounds nice and simple and is the basis of most homebrew and packaged zfs replication systems - proper error handling is *difficult* especially handling errors in the zfs recv phase. Also there is the irritating detail that one of the properties of a ZFS filesystem is its mount point and while you can run zfs recv in such a way as not to mount the received filesystems they will get mounted on reboot which makes backing up several root filesystems to an archive server a little tricky! The bad news is that I haven't found a solution I really like, zrepl comes close but it solves that last problem by dropping *all* the zfs properties in the archive and I'm pretty sure it ignores some error conditions that eventually lead to an incomplete backup. What I really want is a rok solid reliable archive server with all the hierarchies archived mounted read only under something like /archive//. I haven't got it yet. -- Steve O'Hara-Smith From owner-freebsd-questions@freebsd.org Fri Oct 1 23:10:47 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id BAF716B7ADE for ; Fri, 1 Oct 2021 23:10:47 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from holgerdanske.com (holgerdanske.com [184.105.128.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "xray.he.net", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HLm7B5RNZz3RGd for ; Fri, 1 Oct 2021 23:10:46 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=holgerdanske.com; s=nov-20210719-112354; t=1633129844; bh=oJbmp0/GZODGTSqfMD6tjWsDm4sA8lbklBAyz5bQmLs=; h=Received:Message-ID:Date:MIME-Version:User-Agent:Subject: Content-Language:To:References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding; b=XJMRlI+e9M1ZSYTDWsFoWvC8i8bFEw9LgRCIG+ib3+Qv7RWMaWv79Ikl2cN85jgmc LtYhF+ERWiOOyRixOu1eAYkACb9tYMZq4TAq47/t79VD56t3Mw1O6IXBuqr8fUjBl2 fV3CPczCPNgaa6EV8z8V+aMKeScYftGTQFW506RBK2aBDAzp1chQC/GdueNauwBBUW oVpH17IQuLYqzsDKmJdcN6ZwEyzL+JZExsQG1u9U85WTMgU6LdHUa86z2YLuffQM0G 1XSou+78jRHopPQojRtKSzWs4EHaO2uCQwnxh71/GZOyAUO2wWGi9Zw2WJV0+BzMDE QRHbdD1ppINzpa26u3mdUAxwSMO0qDrda45a76eLFyGcns8XHPZwyuQ6AJfbx7e93e z5/C20w8ELL4dV7UXUaMsXtWgZh1hp65iV9nfOhqQP5qamg4pqIdw6Xrr+wyklkMa4 Hm1ZpO8Ir4LW2McV9VzRF1Le/J8FuMgcEKYlNE1MUKLfNZZxgY+Tpygk7VQL9QTVhZ V2nHxqB7Vclk9HYhltjMtbDmt4zC5xhou+e5xBnf25j4rywutb9RqBwkYSNdOwPuZ7 iRpHn7nr+7+w/oKeATFpv2FwXC6RUOfdrPPBDUsZX8KlMfeohWLgu2Rvi2+T1+3ef1 lqwExXc9Y4lbZD4TSxgFOW0E= Received: from 99.100.19.101 (99-100-19-101.lightspeed.frokca.sbcglobal.net [99.100.19.101]) by holgerdanske.com with ESMTPSA (TLS_AES_128_GCM_SHA256:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(128):Mac=AEAD) (SMTP-AUTH username dpchrist@holgerdanske.com, mechanism PLAIN) for ; Fri, 1 Oct 2021 16:10:44 -0700 Message-ID: <809e4f3b-9e59-eb53-5b7d-0bcf7e401cd5@holgerdanske.com> Date: Fri, 1 Oct 2021 16:10:44 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.1.2 Subject: Re: zfs q regarding backup strategy Content-Language: en-US To: freebsd-questions@freebsd.org References: <20211001222816.a36e9acbd4e8829aed3afb68@sohara.org> From: David Christensen In-Reply-To: <20211001222816.a36e9acbd4e8829aed3afb68@sohara.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HLm7B5RNZz3RGd X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=holgerdanske.com header.s=nov-20210719-112354 header.b=XJMRlI+e; dmarc=pass (policy=none) header.from=holgerdanske.com; spf=pass (mx1.freebsd.org: domain of dpchrist@holgerdanske.com designates 184.105.128.27 as permitted sender) smtp.mailfrom=dpchrist@holgerdanske.com X-Spamd-Result: default: False [-4.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[holgerdanske.com:s=nov-20210719-112354]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; DKIM_TRACE(0.00)[holgerdanske.com:+]; DMARC_POLICY_ALLOW(-0.50)[holgerdanske.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:6939, ipnet:184.104.0.0/15, country:US]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2021 23:10:47 -0000 On 10/1/21 14:28, Steve O'Hara-Smith wrote: > On Fri, 1 Oct 2021 15:14:08 +0100 > tech-lists wrote: > >> What I'm looking for is something (ideally) written in sh. Or even perl. >> But even before that, need to understand incremental backups properly. >> Basically the backup needs to be (effectively) write-only. By that, I >> mean only added to. > > With zfs send every stream is a send up to some 'target' snapshot, > a full stream is the complete history while an incremental stream is from > an earlier 'source' snapshot. > > It is therefore necessary for any successful incremental backup > system to know what the last snapshot sent was so that the next cycle can > start by creating a new snapshot and sending the increment from the last > sent to the latest. On the receiving end the options are to either store > each send as a file named in such a way as to make it obvious what order to > process them in should restore be needed or (more usefully) to use zfs recv > to load them into filesystems in a pool on the receiving machine. The one time I tried booting a system with two OS drives, two boot pools, and two root pools convinced me to never to try that again. My backup plan for OS instances is to take an image of the device with dd(1). For this reason, I keep my OS instances small enough to fit on "16 GB" devices and use one device per OS instance. > If you do > this there will be no pruning of the received snapshots unless you set > something up to do it. +1 > This sounds nice and simple and is the basis of most homebrew and > packaged zfs replication systems - proper error handling is *difficult* > especially handling errors in the zfs recv phase. +1 > Also there is the > irritating detail that one of the properties of a ZFS filesystem is its > mount point and while you can run zfs recv in such a way as not to mount > the received filesystems they will get mounted on reboot which makes > backing up several root filesystems to an archive server a little tricky! Are you referring to the zpool(8) property 'altroot'? altroot Alternate root directory. If set, this directory is prepended to any mount points within the pool. This can be used when examining an unknown pool where the mount points cannot be trusted, or in an alternate boot environment, where the typical paths are not valid. altroot is not a persistent property. It is valid only while the system is up. Setting altroot defaults to using cachefile=none, though this may be overridden using an explicit setting. I recall that FreeNAS uses altroot, and it is persistent across reboots. I wonder how they accomplished that? Import scripts on boot and export scripts on shutdown? But, how to deal with an unclean shutdown and/or failed export? STFW I do not see any clues. > The bad news is that I haven't found a solution I really like, > zrepl comes close but it solves that last problem by dropping *all* the zfs > properties in the archive and I'm pretty sure it ignores some error > conditions that eventually lead to an incomplete backup. Not good. > What I really want > is a rok solid reliable archive server with all the hierarchies archived > mounted read only under something like /archive//. That would be nice. > I haven't got it yet. Perhaps a top-level "archive" pool, one ZFS volume per , one pool per volume, and some work-around to achieve persistent altroot's (?). David From owner-freebsd-questions@freebsd.org Sat Oct 2 10:54:55 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id C107E679442 for ; Sat, 2 Oct 2021 10:54:55 +0000 (UTC) (envelope-from 4250.82.1d4d4000669c414.b908473c1c135159b30d7487f8fce126@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HM3lf5hFlz3hQW for ; Sat, 2 Oct 2021 10:54:54 +0000 (UTC) (envelope-from 4250.82.1d4d4000669c414.b908473c1c135159b30d7487f8fce126@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1633172095; x=1635764095; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:cc:to:from:date:x-thread-info; bh=EzGGAx/+cq0CGfQmp7htqOLGZElbTUrRoPO8Z36ksSc=; b=SK7VKAiBoVwfMpsrYbgNjJEmis/jjOoPNtd4LS9uqsNPp5rEEBHN0o1p8IuTuZO/VlpvOVgvj/Ghe6rZdSuoiYcr85L1j7Sp8wWqiVrNKXRbXkbD1wwg73SOsgXnR1YW6DKRAWHqh394Yy7Lgf2y9ooVu2Gfwh237wkb0W19elA= X-Thread-Info: NDI1MC4xMi4xZDRkNDAwMDY2OWM0MTQuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r3.h.in.socketlabs.com (r3.h.in.socketlabs.com [142.0.180.13]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Sat, 2 Oct 2021 06:54:43 -0400 Received: from smtp.lan.sohara.org (EMTPY [185.202.17.215]) by r3.h.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Sat, 2 Oct 2021 06:54:42 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.94.2 (FreeBSD)) (envelope-from ) id 1mWcfB-0007p9-12; Sat, 02 Oct 2021 11:54:41 +0100 Date: Sat, 2 Oct 2021 11:54:40 +0100 From: Steve O'Hara-Smith To: David Christensen Cc: freebsd-questions@freebsd.org Subject: Re: zfs q regarding backup strategy Message-Id: <20211002115440.85c4342a49fe6e4573c37dd0@sohara.org> In-Reply-To: <809e4f3b-9e59-eb53-5b7d-0bcf7e401cd5@holgerdanske.com> References: <20211001222816.a36e9acbd4e8829aed3afb68@sohara.org> <809e4f3b-9e59-eb53-5b7d-0bcf7e401cd5@holgerdanske.com> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.33; amd64-portbld-freebsd12.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HM3lf5hFlz3hQW X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=email-od.com header.s=dkim header.b=SK7VKAiB; dmarc=none; spf=pass (mx1.freebsd.org: domain of 4250.82.1d4d4000669c414.b908473c1c135159b30d7487f8fce126@email-od.com designates 142.0.176.198 as permitted sender) smtp.mailfrom=4250.82.1d4d4000669c414.b908473c1c135159b30d7487f8fce126@email-od.com X-Spamd-Result: default: False [-2.70 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[email-od.com:s=dkim]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; R_SPF_ALLOW(-0.20)[+ip4:142.0.176.0/20]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[sohara.org]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[email-od.com:+]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FORGED_SENDER(0.30)[steve@sohara.org,4250.82.1d4d4000669c414.b908473c1c135159b30d7487f8fce126@email-od.com]; RWL_MAILSPIKE_POSSIBLE(0.00)[142.0.176.198:from]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:7381, ipnet:142.0.176.0/22, country:US]; FROM_NEQ_ENVFROM(0.00)[steve@sohara.org,4250.82.1d4d4000669c414.b908473c1c135159b30d7487f8fce126@email-od.com]; MAILMAN_DEST(0.00)[freebsd-questions]; DWL_DNSWL_NONE(0.00)[email-od.com:dkim] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Oct 2021 10:54:55 -0000 On Fri, 1 Oct 2021 16:10:44 -0700 David Christensen wrote: > On 10/1/21 14:28, Steve O'Hara-Smith wrote: > The one time I tried booting a system with two OS drives, two boot > pools, and two root pools convinced me to never to try that again. Been there, done that, rebuilt the system! > My backup plan for OS instances is to take an image of the device with > dd(1). For this reason, I keep my OS instances small enough to fit on > "16 GB" devices and use one device per OS instance. Sounds like a good strategy, I'm relying on mirrors and simplicity for OS images currently. > > Also there is the > > irritating detail that one of the properties of a ZFS filesystem is its > > mount point and while you can run zfs recv in such a way as not to mount > > the received filesystems they will get mounted on reboot which makes > > backing up several root filesystems to an archive server a little > > tricky! > > > Are you referring to the zpool(8) property 'altroot'? If only it were a persistent property it would be more useful and if it were available at filesystem level. > I recall that FreeNAS uses altroot, and it is persistent across reboots. Oh now that's a neat trick. > I wonder how they accomplished that? Import scripts on boot and > export scripts on shutdown? But, how to deal with an unclean shutdown > and/or failed export? STFW I do not see any clues. Thinking about it I'd guess they register the altroot in some database (append to a text file perhaps) at the time they set it on receiving the initial stream for the filesystem and creating the filesystem, then as you say use a boot time script to restore the altroot settings. I wonder if the FreeNAS solution is available for use, I only see some python libraries in the ports. > Perhaps a top-level "archive" pool, one ZFS volume per , one > pool per volume, and some work-around to achieve persistent altroot's (?). A separate pool for each archive ? I don't like that pools are rather inflexible things, I rather want to share that stack of big disks. -- Steve O'Hara-Smith From owner-freebsd-questions@freebsd.org Sat Oct 2 18:23:42 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 86EF26A86E1 for ; Sat, 2 Oct 2021 18:23:42 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from holgerdanske.com (holgerdanske.com [184.105.128.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "xray.he.net", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HMFjS72pkz4qPT for ; Sat, 2 Oct 2021 18:23:40 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=holgerdanske.com; s=nov-20210719-112354; t=1633199011; bh=vSPq6fZDNliJVRh4i56xD1mO12Jl1Ao5U3P6xDX9uWU=; h=Received:Message-ID:Date:MIME-Version:User-Agent:Subject: Content-Language:To:References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding; b=Ip6s7y3pxsonvJd9Ek1m3EI14eyFW9RpPTjobO46FhGX1QxfXPmP29awPsvzDv89U PMtqSoEPYpLDjPq5QMyq7MrCkQfw7AgjHoOb2O2n8JQpwBjlNbZpROhqhpKYrqYRVn NOFLNTiif/ArHaA6EneDs4E+tW+mnPteyBXXvRQXJq1Yps15mZLdDFw9y68e0TP7jY HjL0oAuqXanuuz+DQoFl3NUuJYRLcRYcMJKC0SUGQIj+IVX+kMLtCJzjOabSubXagv scUKNoVqeley+Ie2NZUKtW5igUbKasYzYSWXg8OMH2ffcDEuMfcax0kWyRbNfnYFI4 mWGo/ueQm46kPvVMKzo8zk673VNyuDpoEseuKhdCnh2NIm5GwvB1oTScYlQ104daKK 9rD1RltudW2kTHqsEwmYbm3IMMzgsxh7HGTtKTkOOfkfkrHXMth5N0YgIJpbCWI3uM MygkKhEKrsYF5FGm7CDsj2/PukoPxIwV+oH62zX2g71m8jhGTvhkSO3Dyr00xSWW40 M8pTdXcAhJ+1QS5QijSml5ND19xBu+TKgKU40g/e1FJqe5u7k+0uYwttYsk4UZfd3L mHYGHUnlbAWZuuXNcuNu8YUPU/Y6ey2IdG7Sa6rHPzsPdtCP0v2ofTwwPRcWqKnDP8 AanCCoa8YAO+cp+P8Y7XICcg= Received: from 99.100.19.101 (99-100-19-101.lightspeed.frokca.sbcglobal.net [99.100.19.101]) by holgerdanske.com with ESMTPSA (TLS_AES_128_GCM_SHA256:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(128):Mac=AEAD) (SMTP-AUTH username dpchrist@holgerdanske.com, mechanism PLAIN) for ; Sat, 2 Oct 2021 11:23:31 -0700 Message-ID: Date: Sat, 2 Oct 2021 11:23:30 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.1.2 Subject: Re: zfs q regarding backup strategy Content-Language: en-US To: freebsd-questions@freebsd.org References: <20211001222816.a36e9acbd4e8829aed3afb68@sohara.org> <809e4f3b-9e59-eb53-5b7d-0bcf7e401cd5@holgerdanske.com> <20211002115440.85c4342a49fe6e4573c37dd0@sohara.org> From: David Christensen In-Reply-To: <20211002115440.85c4342a49fe6e4573c37dd0@sohara.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HMFjS72pkz4qPT X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=holgerdanske.com header.s=nov-20210719-112354 header.b=Ip6s7y3p; dmarc=pass (policy=none) header.from=holgerdanske.com; spf=pass (mx1.freebsd.org: domain of dpchrist@holgerdanske.com designates 184.105.128.27 as permitted sender) smtp.mailfrom=dpchrist@holgerdanske.com X-Spamd-Result: default: False [-4.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[holgerdanske.com:s=nov-20210719-112354]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; DKIM_TRACE(0.00)[holgerdanske.com:+]; DMARC_POLICY_ALLOW(-0.50)[holgerdanske.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:6939, ipnet:184.104.0.0/15, country:US]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Oct 2021 18:23:42 -0000 On 10/2/21 03:54, Steve O'Hara-Smith wrote: > On Fri, 1 Oct 2021 16:10:44 -0700 David Christensen wrote: >> On 10/1/21 14:28, Steve O'Hara-Smith wrote: >>> Also there is the >>> irritating detail that one of the properties of a ZFS filesystem is its >>> mount point and while you can run zfs recv in such a way as not to mount >>> the received filesystems I failed to respond to that on my previous reply. Yes -- 'zfs receive' and the '-u' option. I'm not using it now, but can see its usefulness. >>> they will get mounted on reboot which makes >>> backing up several root filesystems to an archive server a little >>> tricky! >> >> >> Are you referring to the zpool(8) property 'altroot'? > > If only it were a persistent property it would be more useful and > if it were available at filesystem level. I have found that ZFS is very carefully engineered, and that any issues I encounter are invariably PEBKAC. So, there must be compelling reasons why 'altroot' is a pool property and why 'altroot' is not persistent. Similar, the absence of property manipulation options for the 'zfs send' and 'zfs receive' commands. >> I recall that FreeNAS uses altroot, and it is persistent across reboots. > > Oh now that's a neat trick. > >> I wonder how they accomplished that? Import scripts on boot and >> export scripts on shutdown? But, how to deal with an unclean shutdown >> and/or failed export? STFW I do not see any clues. > > Thinking about it I'd guess they register the altroot in some > database (append to a text file perhaps) at the time they set it on > receiving the initial stream for the filesystem and creating the > filesystem, then as you say use a boot time script to restore the altroot > settings. > > I wonder if the FreeNAS solution is available for use, I only see > some python libraries in the ports. > >> Perhaps a top-level "archive" pool, one ZFS volume per , one >> pool per volume, and some work-around to achieve persistent altroot's (?). > > A separate pool for each archive ? I don't like that pools are > rather inflexible things, I rather want to share that stack of big disks. RTFM/STFW some more, I discovered the dataset 'canmount' property: When the noauto value is set, a dataset can only be mounted and unmounted explicitly. The dataset is not mounted automatically when the dataset is created or imported, nor is it mounted by the "zfs mount -a" command or unmounted by the "zfs umount -a" command. So, between zpool 'altroot', dataset 'canmount', and suitable scripting, it might be possible to achieve your goal: >>> What I really want is a [rock] solid reliable archive server with >>> all the hierarchies archived mounted read only under something >>> like/archive//. David From owner-freebsd-questions@freebsd.org Sat Oct 2 19:55:15 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 594FC6A947B for ; Sat, 2 Oct 2021 19:55:15 +0000 (UTC) (envelope-from 4250.82.1d4d4000672ec1f.1c1d77db550350e1bab0e3d2d4ace2dd@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HMHl62HBZz4v93 for ; Sat, 2 Oct 2021 19:55:14 +0000 (UTC) (envelope-from 4250.82.1d4d4000672ec1f.1c1d77db550350e1bab0e3d2d4ace2dd@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1633204514; x=1635796514; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:cc:to:from:date:x-thread-info; bh=5eUrFph/cerN6SYXUYiERxTGBw0GruEIjSnZUwwyEQw=; b=EVRdMVlOlgmcyBWHSDK2pCegVZ+kolmAfCk73FfId9GDLVeVUYfuuvbH1Brq+j5mQ/S1Qg8LsJgyqUwW14Q8/H+qEAeX/yxDsCyrBMSR10pHRMaYzkGHII3WZyUjtq1ARdL9gWMZGSQuolXYQzNFpU2FW1efLt0GUEqiMeB1Ad4= X-Thread-Info: NDI1MC4xMi4xZDRkNDAwMDY3MmVjMWYuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r2.us-east-1.aws.in.socketlabs.com (r2.us-east-1.aws.in.socketlabs.com [142.0.191.2]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Sat, 2 Oct 2021 15:55:06 -0400 Received: from smtp.lan.sohara.org (EMTPY [185.202.17.215]) by r2.us-east-1.aws.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Sat, 2 Oct 2021 15:55:05 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.94.2 (FreeBSD)) (envelope-from ) id 1mWl68-000BQf-B1; Sat, 02 Oct 2021 20:55:04 +0100 Date: Sat, 2 Oct 2021 20:55:04 +0100 From: Steve O'Hara-Smith To: David Christensen Cc: freebsd-questions@freebsd.org Subject: Re: zfs q regarding backup strategy Message-Id: <20211002205504.9d81ee94caa231ee9b008d6a@sohara.org> In-Reply-To: References: <20211001222816.a36e9acbd4e8829aed3afb68@sohara.org> <809e4f3b-9e59-eb53-5b7d-0bcf7e401cd5@holgerdanske.com> <20211002115440.85c4342a49fe6e4573c37dd0@sohara.org> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.33; amd64-portbld-freebsd12.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HMHl62HBZz4v93 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=email-od.com header.s=dkim header.b=EVRdMVlO; dmarc=none; spf=pass (mx1.freebsd.org: domain of 4250.82.1d4d4000672ec1f.1c1d77db550350e1bab0e3d2d4ace2dd@email-od.com designates 142.0.176.198 as permitted sender) smtp.mailfrom=4250.82.1d4d4000672ec1f.1c1d77db550350e1bab0e3d2d4ace2dd@email-od.com X-Spamd-Result: default: False [-2.70 / 15.00]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[email-od.com:s=dkim]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; R_SPF_ALLOW(-0.20)[+ip4:142.0.176.0/20]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[sohara.org]; NEURAL_HAM_LONG(-1.00)[-1.000]; RCVD_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[email-od.com:+]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[142.0.191.2:received]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FORGED_SENDER(0.30)[steve@sohara.org,4250.82.1d4d4000672ec1f.1c1d77db550350e1bab0e3d2d4ace2dd@email-od.com]; RWL_MAILSPIKE_POSSIBLE(0.00)[142.0.176.198:from]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:7381, ipnet:142.0.176.0/22, country:US]; FROM_NEQ_ENVFROM(0.00)[steve@sohara.org,4250.82.1d4d4000672ec1f.1c1d77db550350e1bab0e3d2d4ace2dd@email-od.com]; MAILMAN_DEST(0.00)[freebsd-questions]; DWL_DNSWL_NONE(0.00)[email-od.com:dkim] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Oct 2021 19:55:15 -0000 On Sat, 2 Oct 2021 11:23:30 -0700 David Christensen wrote: > I have found that ZFS is very carefully engineered, and that any issues > I encounter are invariably PEBKAC. So, there must be compelling reasons > why 'altroot' is a pool property and why 'altroot' is not persistent. > Similar, the absence of property manipulation options for the 'zfs send' > and 'zfs receive' commands. I know exactly what you mean, trying to do this feels like trying to force the mechanism to do something it wasn't designed for. The only trouble I have with that is that I can't figure out what use case it was designed for. > So, between zpool 'altroot', dataset 'canmount', and suitable scripting, > it might be possible to achieve your goal: Yes likely, I have a design doc I tinker with occasionally trying to chart a path to perfection, altroot is neat but a pool for each archive is not nice that means lots of smallish vdevs for flexibility. Might not be too bad at that, easy to expand at least. -- Steve O'Hara-Smith From owner-freebsd-questions@freebsd.org Sat Oct 2 22:09:29 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id B91E36AB185 for ; Sat, 2 Oct 2021 22:09:29 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from holgerdanske.com (holgerdanske.com [184.105.128.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "xray.he.net", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HMLk03Jrcz3Hs3 for ; Sat, 2 Oct 2021 22:09:28 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=holgerdanske.com; s=nov-20210719-112354; t=1633212564; bh=lSu4VTPH1S2oQsHM58i0TEpbnzQkj/1BERbwekq01/8=; h=Received:Message-ID:Date:MIME-Version:User-Agent:Subject: Content-Language:To:References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding; b=ffhuv8bYbLkdPwHEHi8X43549EoK9k62o+DaYSnXmpW6K3N8db9u62L6+ZA0PTZnc PFsLAGHW/rrOSjAiBuhrgzqCLvQ25UOexw3Vk4gjEgk4LxESJRbCyv3dKy7/4z7nxC hkl8aHnw/k530qes8cKpRc+i2GcG0C6jlgx8QEJ2gV+US/jntHRPgR8Zm705gftJZq t/fsJR4JGHf58VBP3x7cLfHOAE77kdPn4sOgGqD01N0UzF7UYTAPlBdHJgVdXIlpEc INKMwFMA445HuWaP1/lSwEZ2pKURGjnf6tLbJMXdJrBY7ggL3qI8r6xEneevDHX43t OJBhwQLzhfqb8SjtjOkf7NNGJ5XrwHG3AZqssNz4SW3x5pYNIMocNPEbjSQdO0a+3M 4L4luUnlcdJK+jVDBC5zTxxrlezYRNImbyiYqormjpffCP2UyHxlrh9bTB+65IcF/t MwWAtQZ2okKfCiDFRyq4fWaaTOlH/OMp7dcnFhos6Vg63E+xFb6QuyxaVejsp7kOn2 eLikkYkyG0LyRbr9DqBHn85mg0BvE1L+L+Iw4Z5kRwOevK2UYlESE4MM/wgeWvJYZN yZXnaOY0hXC0NiKLWFunCXlu39mmuXv/4Gbl6OF9ls6vqtdKAjtY6ml6ugVBrQC46e 608XLBnn7fx5+B/fxuwDicf8= Received: from 99.100.19.101 (99-100-19-101.lightspeed.frokca.sbcglobal.net [99.100.19.101]) by holgerdanske.com with ESMTPSA (TLS_AES_128_GCM_SHA256:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(128):Mac=AEAD) (SMTP-AUTH username dpchrist@holgerdanske.com, mechanism PLAIN) for ; Sat, 2 Oct 2021 15:09:24 -0700 Message-ID: <69954781-9e3c-ba96-5f1e-9b4043ecf56c@holgerdanske.com> Date: Sat, 2 Oct 2021 15:09:23 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.1.2 Subject: Re: zfs q regarding backup strategy Content-Language: en-US To: freebsd-questions@freebsd.org References: <20211001222816.a36e9acbd4e8829aed3afb68@sohara.org> <809e4f3b-9e59-eb53-5b7d-0bcf7e401cd5@holgerdanske.com> <20211002115440.85c4342a49fe6e4573c37dd0@sohara.org> <20211002205504.9d81ee94caa231ee9b008d6a@sohara.org> From: David Christensen In-Reply-To: <20211002205504.9d81ee94caa231ee9b008d6a@sohara.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4HMLk03Jrcz3Hs3 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=holgerdanske.com header.s=nov-20210719-112354 header.b=ffhuv8bY; dmarc=pass (policy=none) header.from=holgerdanske.com; spf=pass (mx1.freebsd.org: domain of dpchrist@holgerdanske.com designates 184.105.128.27 as permitted sender) smtp.mailfrom=dpchrist@holgerdanske.com X-Spamd-Result: default: False [-4.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[holgerdanske.com:s=nov-20210719-112354]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; DKIM_TRACE(0.00)[holgerdanske.com:+]; DMARC_POLICY_ALLOW(-0.50)[holgerdanske.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:6939, ipnet:184.104.0.0/15, country:US]; RCVD_TLS_ALL(0.00)[]; MAILMAN_DEST(0.00)[freebsd-questions]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Oct 2021 22:09:29 -0000 On 10/2/21 12:55, Steve O'Hara-Smith wrote: > On Sat, 2 Oct 2021 11:23:30 -0700 > David Christensen wrote: > >> I have found that ZFS is very carefully engineered, and that any issues >> I encounter are invariably PEBKAC. So, there must be compelling reasons >> why 'altroot' is a pool property and why 'altroot' is not persistent. >> Similar, the absence of property manipulation options for the 'zfs send' >> and 'zfs receive' commands. > > I know exactly what you mean, trying to do this feels like trying to > force the mechanism to do something it wasn't designed for. The only > trouble I have with that is that I can't figure out what use case it was > designed for. > >> So, between zpool 'altroot', dataset 'canmount', and suitable scripting, >> it might be possible to achieve your goal: > > Yes likely, I have a design doc I tinker with occasionally trying > to chart a path to perfection, altroot is neat but a pool for each archive > is not nice that means lots of smallish vdevs for flexibility. Might not be > too bad at that, easy to expand at least. Assuming I can create a ZFS pool from one or more ZFS volume datasets (?), here is an idea: 1. Create a large 'archive' pool. Say, 10 TB. 2. Within the archive pool, create many small volumes. Say, 100 volumes of 100 GB each. 3. For each source, create a 'archive-source' pool using the 'zpool create -R' option and one or more volumes as required for capacity. 4. From the archive server, replicate datasets from their respective source pools to their corresponding archive-source pools using the 'zfs receive -u' option. 5. Upon receipt of a replica dataset, save the 'canmount' property (for restore). If it is 'on', set it to 'notauto'. 6. Upon receipt of a replica dataset, save the 'readonly' property (for restore). If it is 'off', set it to 'on'. 7. Mount or do not mount the replica datasets, as desired. 8. On shutdown, export all archive-source pools. 9. On boot, import all archive-source pools using the 'zpool import -R' option, and then mount or do not mount replica datasets. The most obvious problem is if the system crashes between #4 and #5. On subsequent boot, AIUI all previously active pools will be automatically imported (e.g. without 'altroot') and all datasets with 'canmount=on' will be mounted (according to 'mountpoint'). If two or more datasets are mounted at the same mount point, the results could be bad. 'bootpool' and 'zroot' are likely cases. The FreeBSD installer allows me to set the root pool name at install time, so I prepend the base hostname. I use serialized names when creating data pools. But I have not dared to rename boot pools, as I assume 'bootpool' is hard-coded into the bootloader chain (?). Can the boot pool ('bootpool') be renamed on FreeBSD? David From owner-freebsd-questions@freebsd.org Sat Oct 2 23:21:34 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 446DE6AC200 for ; Sat, 2 Oct 2021 23:21:34 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HMNK92843z3N60 for ; Sat, 2 Oct 2021 23:21:33 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id ABBBA5C00D5 for ; Sat, 2 Oct 2021 19:21:27 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Sat, 02 Oct 2021 19:21:27 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm3; bh=er5kDnT1sjCaalRv/AKZHCXA8ZX 19egm/sLvRhJmMmQ=; b=kOmCk0DAFquUwPvKBVZbHotROJuZM/61EkoKpx0blTx 1VKmKGZ6pK3Lg7j939k1xejex6yhkMfj/CV8Q2zjt8JxoicNv47zZw563kCLAD+Y 9iY+m4ZLwtEaUIKvyS9pICUqK8aY4LEV9daL72ZxHlRcONya11KmCiZjT9UdaUUI R9x2u2X6vu5Zb6hCdMyoYRmKdp3/WPD2ytdRGSgdZ8CHQ1LdPaIROF6UrmCiwaLL iYt2DOnhYTyq5crMAS2cjZPZV0E99NsBFcHS6oahYbPHa+2t6MjZSYg+Dy3gyNs3 FzgLzXWSrVmtXX/pICUfVvZ95QwH6An6Gs2pccy2sVQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=er5kDn T1sjCaalRv/AKZHCXA8ZX19egm/sLvRhJmMmQ=; b=XW32Rujb3g2ZYebae6+OQ8 rxQFFWLNob2L8UB5vWF4Vf6T44Z2nATNJWiAVMJ6tfk1Y7rmIoiv8j6d/7NgFXjl G3iN/EoWHNmZMtWyfqd96yuSm0lgC/XRG5zk6zeIVMtOOMRHqE8GthdjnBbLR0Lz /kiKDOSicOtuFrIveyhTJqZJ+ht84F3QpZvYrNUsV6ONWxtC6bPV3Rfxe8Ub3cNv iaxV41IlWwm7pRKndacvfqK7uDv0xZ7XXPmND5Zjo3qhbL/2LcMHb1vGx3OLYdOC o70EMjyEdpi/EfdtcpuH8CTA9rD/XiZtqGwpQUIxt/Tx1wSJ0DxrdneaC4L6glxw == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudekledgvdduucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesghdtre ertddtvdenucfhrhhomhepthgvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseii hiigshhtrdhnvghtqeenucggtffrrghtthgvrhhnpedtheeigfdvudefkeekvddtfedvte dttdekuddvgeevlefftdekffdujedvhfduteenucevlhhushhtvghrufhiiigvpedtnecu rfgrrhgrmhepmhgrihhlfhhrohhmpehtvggthhdqlhhishhtshesiiihgihsthdrnhgvth X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Sat, 2 Oct 2021 19:21:27 -0400 (EDT) Date: Sun, 3 Oct 2021 00:21:24 +0100 From: tech-lists To: freebsd-questions@freebsd.org Subject: Re: zfs q regarding backup strategy Message-ID: Mail-Followup-To: freebsd-questions@freebsd.org References: <20211001222816.a36e9acbd4e8829aed3afb68@sohara.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Cvx1CJLqaQgzmSfz" Content-Disposition: inline In-Reply-To: <20211001222816.a36e9acbd4e8829aed3afb68@sohara.org> X-Rspamd-Queue-Id: 4HMNK92843z3N60 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm3 header.b=kOmCk0DA; dkim=pass header.d=messagingengine.com header.s=fm1 header.b=XW32Rujb; dmarc=none; spf=none (mx1.freebsd.org: domain of tech-lists@zyxst.net has no SPF policy when checking 66.111.4.28) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-6.50 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; RWL_MAILSPIKE_GOOD(0.00)[66.111.4.28:from]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.0.0/20, country:US]; RCVD_IN_DNSWL_LOW(-0.10)[66.111.4.28:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm3,messagingengine.com:s=fm1]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[zyxst.net]; RCPT_COUNT_ONE(0.00)[1]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; R_SPF_NA(0.00)[no SPF record]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Oct 2021 23:21:34 -0000 --Cvx1CJLqaQgzmSfz Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Oct 01, 2021 at 10:28:16PM +0100, Steve O'Hara-Smith wrote: >On Fri, 1 Oct 2021 15:14:08 +0100 >tech-lists wrote: > >> What I'm looking for is something (ideally) written in sh. Or even perl. >> But even before that, need to understand incremental backups properly. >> Basically the backup needs to be (effectively) write-only. By that, I >> mean only added to. > > With zfs send every stream is a send up to some 'target' snapshot, >a full stream is the complete history while an incremental stream is from >an earlier 'source' snapshot. > > It is therefore necessary for any successful incremental backup >system to know what the last snapshot sent was so that the next cycle can >start by creating a new snapshot and sending the increment from the last >sent to the latest. On the receiving end the options are to either store >each send as a file named in such a way as to make it obvious what order to >process them in should restore be needed or (more usefully) to use zfs recv >to load them into filesystems in a pool on the receiving machine. If you do >this there will be no pruning of the received snapshots unless you set >something up to do it. OK. if I think I understand correctly then if we need to keep everything th= en=20 I'll need to keep every incremental snapshot. Let's say there are 3 files in a zfs dir 1, 2 & 3 full backup happens on day 1, all three files are fully backed up first snapshot happens on day 2: theres nothing added nothing removed becau= se nothing changed at source second snapshot happens on day 3, file 2 disappears at source so the=20 difference is this file is not there but the other two are. third snapshot happens file 2 of the same name appears at source but has different content. A month (30 days) later someone looks for file 2 as it was on day 1, and it's not the one they expected on the source. So I have to get it from the backup somehow. In order to do this, and given that when I'm looking for this I might not know *when* file 2 was deleted from the source, then changed and then added, do I have to keep every single snapshot? If this is the case, then how can I scan through the snapshots looking for the right file? there may be thousands of snapshots. Or can I incorporate or expire the snapshots into the full backup and tell it that I want to look back to day 1 and retreive file 2? The reason I'm thinking this might be possible is via zfs redundancy. copies=3D3 that sort of thing. Like a time machine but for a backup, I guess. Or some other method that I've not understood (there's lots about zfs I don't understand) or haven't read about yet? thanks, --=20 J. --Cvx1CJLqaQgzmSfz Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE8n3tWhxW11Ccvv9/s8o7QhFzNAUFAmFY6WsACgkQs8o7QhFz NAVELw//bi/KHoGaBOLH+cxTBlZJsuQ7SYNwdQk+nWGvU/sOS21yPJCAgaCfg5PU cc4r6SCxnYtlEY9hmmhipqJgqWUES19yKoYWlgVIropYRXeO/iQpvixzY7HlI3uN XX0gVBNh3i0Q3CC2FPNBgsRPOfWgLskkDmw+cRSSRbp8DZJU8Vq6R3Rs4QoNQpC7 y34yTtK1cnNNIMdI52ZuJ1++28lBN+qR7wMam5vIdT6DEKfzaAPKn6FwuVSOMTZG v3eTipCocM1jpHPuA2PrVF9tg/Wc4trORKbRvnqpWpm+2/4WJr7vuHqCfRQD70o9 byptIb3SVU7OhHB/XCHSyV2MyDSjpFXsOJD/CDDXUgG6sNCtQ4+hqF6+1ZWF4EpM ORmvqjrF+peOrLbS0QFA7f+XKNVPqvOwR+yT75WFLrUs48hzeOMMzAsUwFgFaN3z /IertI7zl3wAjJ0GTg545PgByPZXR83G+IVv2JbD1mGZi6vxYpugLoDqlqHt9tOO 7DqHgHXzrxkbkOP4RnO30mVdEa2f5HPCW/NsbnOHvxyzB4YFGBTc0/PIFlGN81hW +PJrrmnjAaQKYdQEPdEZGRGFTiaFdV0MtY/7fJs0LBJhIprntstmWCztoPHDdh0W uaCHbQoQfouC0HkKK8GgOioZUdSqpeWcbxb3tCRDya3xbdhr9XE= =7zsW -----END PGP SIGNATURE----- --Cvx1CJLqaQgzmSfz--