evilham

evilham, 25 days ago

@Ransil mi profe de euskara mencionó esto: https://www.inguraonline.eus/

evilham, 1 month ago

@goetz @feld afaik, yes. But I don't use DHCPv6 beyond as a client for prefix delegation from ISP, internally I use SLAAC with the privacy extensions disabled for machines.
This means I just assign and route the /64s I need, and apply changes to the DNS zones, which I manage with the prefixes as a variable.
Then, ofc, firewalls usually have to be checked a tad, but provisioning takes care of the pf macros :-) and of programs that need the IP addresses (like pg_hba to limit hosts).

evilham, 1 month ago

@feld @goetz is it stupid though?

Yes, in certain cases it can be an overhead, but it really is just layered security. Should sth be funky with my firewall, each database can still only be accessed by their allowed hosts, also using authentication.

Of course this depends on the nature of the service, but I'd argue most of the time, the list of hosts that need access to a given database is pretty static and short.

I do prefer adding effective layers of security for little overhead :-).

evilham, 2 months ago

@subpop
TL;DR: probs no remote OpenSSH vuln in #BSD, but maybe things to be discovered along with Linux'

From what I gathered: it relies on glibc, and on OpenSSH-server being patched to depend on libsystemd0.
So, in theory, the #BSD s would not vulnerable to this instance of issues.

HOWEVER: xz 5.4.4 is included in e.g. #FreeBSD base, and it is posterior to the account being involved in xz, and a similar thing happens with libarchive.
I can imagine something similar happens with other #BSD

evilham, 3 months ago

@vicgrinberg @david yeeeees, totally Kipo!
And adding to that: The Owlhouse :-)

evilham, 4 months ago

@noellemitchell you could also look for a BookWyrm instance on the fediverse that targets your interests or community :-)

evilham, 5 months ago

@pludikovsky @viennawriter @nextcloud this, yes.

They are quite responsive over there.

evilham, 6 months ago

@JustineSmithies it shouldn't!

This is one of those instances where the separation of ports and base isn't great.

Mind trying a last thing before giving up?

I happen to build drm-kmod packages for 14 on each commit, that ought to work for you, I am pretty sure this should be your issue.

You can get the matching packages from:
https://pkg.freebsd.evilham.com/packages-kmod/FreeBSD%3A14%3Aamd64/All/

And use pkg add -f to install them.

evilham, 6 months ago

@JustineSmithies download the .pkg files :-) then pkg add expects a local file.

You probs only need
https://pkg.freebsd.evilham.com/packages-kmod/FreeBSD%3A14%3Aamd64/All/drm-515-kmod-5.15.118_2.pkg

evilham, 6 months ago

@JustineSmithies puzzled! Sure you didnt get that before?

I'd need an actual computer to check, but you can also try getting the appropriate intel firmware pkg from the same link (pkg info | grep firmware should tell you the name of the package).

Will tell you more tomorrow!

evilham, 6 months ago

@neurothing
Queen: '39
Rocky Horror Picture Show: Time Warp
Björk: I miss you
Pink Floyd: Wish you were here
Nightwish: where were you last night?

evilham, 7 months ago

@feld I thought this was something related to our boot-loader, but no, it seems like it's grub2 itself which cannot boot from XFS and Debian will happily let one install things like that :-).

So I guess that if one doesn't want a journaling FS, the answer is to make sure there is an ext2 partition for grub2 and then the XFS partition for the rest.

evilham, 7 months ago

@JustineSmithies as someone else mentioned: GhostBSD should help you test.

As someone with an AMD Ryzen too, but a different GPU: I can conjecture that it does work, there is actually a DRM package for your Renoir!

This is how I did it in 2019: https://evilham.com/en/blog/2019-ThinkPad-A485-FreeBSD/
It should be super outdated and the issues I found there are already solved in main / by events (like newer BIOS)

evilham, 7 months ago

@JustineSmithies hah, that's how it starts!

FWIW: I just had one of those "OMG #FreeBSD keeps making my life easier" moments.

Turns out, routing tables are surprisingly easy to manage, I just had never had a need for that, but was able to figure a "complex" networking situation in a matter of a couple minutes by looking at tcpdumps and a couple manuals :-).

evilham, 7 months ago

@JustineSmithies nice! Soooo, how do the permissins for /tmp look like? is it backed by ZFS's tmp dataset? or is it a tmpfs?

evilham, 7 months ago

@JustineSmithies I think the 777 for XDG_RUNTIME_DIR is not critical, but rather a warning (should be: 700).

The critical error seems to be /tmp/dbus-....! which is also /tmp! :-D

evilham, 7 months ago

@JustineSmithies great, so your user doesn't have permissions there! (try with your user mkdir /tmp/test)

That's probably the issue, are you sure it's a temporary file system? (mount -l should say something like tmpfs)
The permissions should probably look like this: drwxrwxrwt

evilham, 7 months ago

@JustineSmithies haha, no biggy, we've all been in these situations, it is better not to go alone :-).

evilham, 7 months ago

@JustineSmithies

ooh, so, to figure out which FS is actually under /tmp (I'd bet on ZFS' tmp as IIRC that runs later) you can run: df -h /tmp

In any case, to isolate that, you can force yet another mount on the same dir (mount -t tmpfs tmpfs /tmp) and check / change the permissions, then try to run river :-D.
If it works we can make these changes permanent!

evilham, 7 months ago

@JustineSmithies oooh, the thing is: by default I think the permissions are 1777 as @feld was mentioning.

Maybe along the tests something changed that!

I'm glad it's fixed :-) in any case!

evilham, 7 months ago

@JustineSmithies I'd think so! But I'd leave it, it doesn't matter really and in certain cases can be useful (e.g. you are booting in recovery and not all datasets are mounted)