cedwards: i'm familiar with iptables, but i have a DENY policy cedwards: i first have to allow input and output cedwards: then i have -t PREROUTING, and -t nat POSTROUTING -t nat* infrared: I'm _much_ more familiar with iptables than I am pf. infrared: this was part of the appeal though. use BSD in production to force me to learn it better. what time do you start setting up vps' in the morning? Provisioning happens at night, PDT. oh ok i just paid anyhow, but ill check for an email tonight ty RandalSchwartz: have you ever been able to boot into single user mode from the boot prompt on your vps? how can i boot into single user from the boot loader prompt, on a zfs on root system? boot -s ? oh wait, what os? I would guess FreeBSD if its zfs? that's the assumption i made too (though on freebsd isn't there a menu option to boot single user during boot?) i don't often get to see the console of freebsd boxes when they reboot :) thanks guys, tried them both I haven't had my account long enough to need to use single user mode, but I would assume it'd be available via VNC or console. boot -s gives me a weird error I used VNC yesterday and I seem to remember seeing the boot menu what's the error fink? cedwards: it's weird, the console shows nothing, and vnc gets to this point and apparently freezes: "Loading /boot/defaults/loader.conf" bob^^: just a sec, i'll tell you i'll have to hard restart it networking comes up, but apparently the shell never starts? the console gets to right before MOTD and stop, and vnc freezes at that point i mentioned i can ping it, but not ssh it in hmm, strange any special ssh config? seems strange that it'd bring up network but not ssh bob^^: unless pf is borked very possible - can you disable it? but that still doesn't explain why vnc & console won't allow me to log in that said, that shouldn't stop you logging in ^^:) ;) at that point, what happens if you hit control + c ? wondering if something is hanging trying to dns or whatever? bob^^: ok, on hte console, i see dmesg, etc. starting services (sshd, etc.) gets to starting cron & background file checks, displays the current date and then it should display a username prompt, right? pretty much, yup but it just hangs at that point, press control + c see if it suddenly jumps back into life boot off the DVD, mount the filesystem, look at the log oh - you haven't got it set to do serial console have you? I submitted my pubkey for serial console yesterday, which I ended up using this morning. I'd recommend it. bob^^: i hit ctrl-c, nothing, apparently the console is unresponsive too; no console commands work weird! if it's set to do serial console iirc this is the point where the kernel shoves everything out the serial port rather than the monitor could it be something to do with that? RandalSchwartz: right, i was trying to do that, but apparently i can't mount zfs using fixit? bob^^: console access was working before this reboot, dunno :( assuming you haven't changed loader.conf it shouldn't be that :) or is it in boot.config you'd know if you'd done it, that's for sure :) and vnc is really weird, it just stops displaying anything after "Loading /boot/defaults/loader.conf" bob^^: right something sounds ill i can get to the boot prompt, but "boot -s" gives me a weird error, i'll try that again sure you can you mount it the same way you mounted it when you were building it remember to kldload opensolaris and zfs and be sure you set the mountpoint to not be / :) Booting from Hard Disk… // FreeBSD/i386 boot // Default: zroot:/boot/loader boot: boot -s Invalid format RandalSchwartz: ok i'll try it, thanks zroot or zpool? says zroot Hmm. oh right I got those confused too zroot is what you get if you do it from those instructions have you *ever* rebooted your box? and if so, what did you change since the last time? :) RandalSchwartz: yes, i've rebooted a couple times did you add some firewall or anything else that would make it hang on boot? RandalSchwartz: just ntp & tun for openvpn how did you add tun? i was screwing around with pf, but it had restarted pf and was not locked out before i rebooted pf might be freezing on boot then boot from dvd into the fixit shell, mount your disk, and move pf.conf out of the way ok but about tun... :) how are you creating that? i merely have "dev tun" in my openvpn.conf I don't do anything in rc.conf RandalSchwartz: same here, i just reused a working server config from a 7.2 box right except openvpn_enable=YES me too ok so that's probably not it i have a feeling it's somethign with ntp, personally it's probably a borked pf oh? how do you have that? I just have ntpdate_enable=YES, ntpd_enable=YES didn't change anything else, and it just works I'm even using the default ntp.conf :) well i noticed on the console (which gets right up to where there should be a login prompt), that ntp can't resolve the pool servers because dnscache hasn't started yet oh - so you have some dns things too RandalSchwartz: i just changed the ntp.conf to use us servers, that's it I haven't even bothered with that. the ntp pool is geo-dns RandalSchwartz: in fixit, i start an emergency holographic shell…how do i then access it? so any old instructions to change it aren't needed any more RandalSchwartz: you're probably right, i didn't need to screw with it I only know this because my former client, Ask Bjorn Hansen, operates it. :) it's not the holographic shell. it's the fixit shell I tried the holographic thing once and it wasn't what I wanted same shell you used to install zfs in the first place ok, dvd shell then then follow step 6 of http://wiki.freebsd.org/RootOnZFS/GPTZFSBoot then you should be able to say "zfs list" and see your disk there might be something else you have to do... can't remember step 1.6 I mean step 6 of part 1 :) RandalSchwartz: awesome, i think i'm getting somewhere. thanks! this is one feature (of many) that I appreciate about the VPS setup at arp the fact that I can boot my broken system to poke at it ok now vnc has stopped responding again…the prompt is frozen this is too weird i loaded the kernel modules, and then bazinga it died when you loaded the module? ah, i sent a break character, now it's restarting the shell sorry i false alarm i guess? the shell became unresponsible responsive* I seem to remember also needing to type that LD_LIBRARY_PATH export too because the shell you're using is linked against the dvd but now you're mounting a new file for / I *do* know there's a way to do this. sorry for not remembering better. RandalSchwartz: i can't even type anything or access my shell, i guess i'll hard restart this is too weird thanks for your help yes - try export LD_LIBRARY_PATH=/mnt2/lib before you kldload and it might be that zfs is now taking time to ensure the disk is ok or something so boot to the fixit shell, set your library path then invoke the two kldload ok cool at that point, the zfs command should work hey RandalSchwartz hey fink i finally got into single user mode! yeah? what was the trick? i mounted everything with `/sbin/zfs mount -va` or `/sbin/zfs mount -va -o rw`, but when i try to backup my rc.conf, it tells me "Read-only file system" the trick was restarting from the dvd, and then watching the console; i'm in the console now for some bizarre reason, the console was not responding when starting straight from disk anybody get this error in dmesg: "atrtc0: Warning: Couldn't map Interrupt." how can I solve this error within my jails? 'The search target requires INDEX-8. Please run make index or make fetchindex.' RandalSchwartz: i can't figure out how to mount the root part of zfsroot, while in fixit mode 'zpool import -f -R /mnt zroot' just gets me /var & /usr that's a legacy mount you need to give it a mount point fink - still there? hey, yea now i'm back in single user ;) trying to figure out ed zfs set mountpoint=/zroot zroot that'll mount it to /zroot remember to "set mountpoint=legacy" before rebooting ah ok, thanks placed my order :) hello ive placed my order 8 hours ago and still never got an initial email sent litebread: it took about 2 days for mine RandalSchwartz: thanks for your help; i used sed to edit rc.conf, and turned off pf, openvpn, and ntpd…still no login shell though! could i have broken something in regards to consoles… fink 2 days to be setup? litebread: more like 1.6 what? i heard someone say same day idk that fink - sorry to hear im still keepin it, but i wonder if you can pay extra for a quicker hookup it has to be something you did recently find /zroot -mtime -2 -print :) have you guys seen any admin in the last hour? Nope. sometimes my console just freezes randomly :( and i have to reboot the vps oh is there something that i could have done to make both vnc & the console freeze? mike-burns do you know if there is an extra fee payable for setup times? fink: the only time thats happened to me, i installed an experimental kernel litebread: I'm just a customer, not an admin. I also don't know what the current setup process is like, sorry. oh ok, ty tho mike-burns I'm fully migrated to nsd and unbound now :D hi litebread dxtr: bsd? cedwards: Yeah Or wait Wat? Yes, I'm running FreeBSD and OpenBSD. But I still migrated to nsd and unbound ohh, nsd. I was thinking you fat-fingered bsd. n being just next to b afterall. Maybe I'm using dvorak!? ;) i am :( i've been qwerty-free since 2007 I tried migrating around that time too but thought "Fuck this" when I couldn't type with the keyboards at school anymore I rarely use any machines other than my own RandalSchwartz: wow. that took all day. i have ssh back RandalSchwartz: thanks so much for your help i still have no clue what went wrong; just turned off a bunch of stuff time to sleep litebread: you should have got an order confirmation email, they are sent immediately. check your spam folder. hi up_the_irons :) cd $meeting :o cedwards: you use dvorak? infrared: I do. why? i've thought about converting to maybe help with the pain in my hands I used to get wrist and hand pain quite frequently. how long did it take to get comfortable? and do you program? i'm not sure i could re-train away from qwerty now at first I figured I'd switch because a friend was, and he won me over with some technical benefits (mostly numbers and stats). i have to say though, the #1 reason I use it now is that I haven't had wrist/hand pain in 3yrs since switching! really?! it tooks about 3 weeks to be back to my previous speed on qwerty, and let me tell you it can be a rough three weeks. i tried for a half hour.. i got so frustrated i couldn't even login :( honestly, no more wrist pain and I type at minimum 8hrs a day, every day. do you program? i don't like where the { } are on dvorak i was thinking of getting a das keyboard (the totally blank one) oh wait { } didn't move (i think) I can't rationalize the cost (I have three kids..), but I'd *love* one of those keyboards. infrared: I don't program, much. I do a good amount of bash scripting and I also teach PHP as a cont. ed course but it isn't my full-time gig. I'm a sysadmin, so its a lot of ssh here and there, commands, etc. yeah.. i'm a sys admin, and try to do perl whenever i have time up_the_irons ty i found it in the blocked folder the {} doesn't really bug me. what gets me is l and / ( p [ ) spam caught it? yes it did particularly on *nix where / and ls are so common hmm.. up_the_irons, is your PTR set correctly? i wanted to ask you what the avg setup time is for today? litebread: for me < 8 hrs i think.. can't remember for sure though its in your email litebread :) i just have a range of 24-48 cedwards: while you learned.. do you go back 'n forth to a qwerty to "get work done" ? heh litebread: I think my new account was setup the next day after signing up. It's really not bad. infrared: no. if you do that you'll never learn. oh okay ty cedwards: heh.. cause i can imagine something down, and my boss watching behind my shoulder as i try to fix something and typing 1 word per minute :) infrared: http://www.dvzine.org/ i didnt know if would be you know a while if they had like some places a price for speedy setup or what have you infrared: print out the layout as a reference and just switch cold-turkey. that should be fine though, if they dont and its tomorrow itll still be fine typerwriter hah cute comic infrared: I think BSD has it, but I know Linux has a 'gtypist' package which includes a dvorak typing tutor. infrared: I used that a lot when I was starting out. cedwards: i use opensuse.. i've used it before infrared: you're a sysadmin and use opensuse? thats.. must be an old habit? :) i cant type on a dvorak at all i have an old sparc machine here with that home row - aoeuidhtns cedwards: opensuse for a desktop? can't go wrong. i'm a freebsd fan for servers, and we use SLES at work the vowels first infrared: I'll agree that suse makes a pretty desktop, but it's all german over-engineering underneath! :) opensuse is a great desktop cedwards: better than using RedHat. (at work) litebread: all vowels on the left hand and most common consonants on the right hand. cool im looking at the one i have here at the house now, i have not checked it out in a while and wow hah, that's a great comic :) infrared: I have my problems with Red Hat, but I do have a bit of a bias. I'm RHCT/CE/CI/CX (tech,engineer,instructor,examiner) it would take me sooo long to adjust infrared: we're all centos at work, with a few debian servers mixed in. cedwards: certifications mean nothing to me. it's what you can prove infrared: but I run arch on my laptop, and BSD or debian on my servers. cedwards: certifications only matter when you're job hunting trying to get past those "HR firewalls" infrared: i suppose. i do like the RH exams though. They do try to make it more "real world" than fill-in-the-blanks. we used to cover suse in our courseware, and I always found it a little overcomplicated. ..but I guess that's why I like Arch. well, SLES (nowadays) is built on opensuse it's really nice (for a linux distro) man, irssi has too many big depends irssi is life I'll try opensuse for workstation some day :) irssi+bitlbee+screen+ssh. i can't remember life without it. what is bitlbee? Terminal.app + ssh + screen + emacs + irc.el :) cedwards: I prefer tmux RandalSchwartz: Why would you use your text editor as an irc client? :( infrared: im->irc gateway. basically allows you to do your im (jabber, etc) in irssi as well. bah.. pidgin++ RandalSchwartz: Terminal.app, or even iTerm.app can't quite cut it over Konsole. bah. pidgin is awwful no way..i need *some* level of smiley icons and chat windows makes sense to me to do im/irc in the same place. it is nearly the same thing anyway. infrared: What's so good with Pidgin? I mean, it got smiley icons I even turn those off whenever I end up with pidgin :P I do *everything* inside emacs mail, usenet, irc, even edit files! Why would you do that? :( dxtr: it does what i need it to. and I run terminal sessions inside emacs too infrared: Like...? :) dxtr: multiple protocols Bitlbee can do that? RandalSchwartz: forgive me if I should know why and I'm spacing, but your name seems so familiar to me. dxtr: can do what? there's a wikipedia page about me maybe that will ring a bell. :) cedwards: Some random internet celebrity :D just a geek. :) RandalSchwartz: must be the Perl stuff. I know I had seen the name somewhere. RandalSchwartz: My friend about you: "He must possess a lot of information! Just imagine! Seriously!" not FLOSS Weekly? you have an odd friend dxtr Literally "possess a lot of information" :P No kidding? RandalSchwartz: I grew up in Portland.. but I wasn't a geek by the time I left there, so it couldn't have been that. RandalSchwartz: what's your cpan username merlyn it was the very first six-char name i've seen "stonehedge" somewhere..i think it was in the Moose docs because they had to rebuild the database for me :) the moose docs refer to my "moose is flying" articles I think ... http://www.stonehenge.com/merlyn/LinuxMag/col94.html ... http://www.stonehenge.com/merlyn/LinuxMag/col95.html ah yes so do you still have root on a bunch of intel's machines that nobody knows about which I had to re-read when I had to use Moose for a project last year. yeah - I re-read my own articles. :) RandalSchwartz: "HAHA!" nelson style nelson? http://en.wikipedia.org/wiki/Nelson_Muntz oh - simpsons I've been using FreeBSD jails for a while now and I still get impressed with how efficient it all is very slow :( you can do it! infrared: how 'bout this. I'll use qwerty as long as you're using dvorak. infrared: we'll suffer together, but it'll be worth it. haha RandalSchwartz: not to "be that guy" but, emacs? really? why would you want to do that? eh? RandalSchwartz: you mentioned you do everything from within emacs earlier. sure. one user interface that sits well inside a long running screen session with universal cut-n-paste-n-edit and fully customizable RandalSchwartz: I request (demand!) screenshots of this insanity :) granted I've never given it a long chance, but the idea that it does *everything* seems kind of opposite the unix philosophy to me. are we talking emacs or Perl here? :) lol. emacs yeah, emacs i'm not trying to troll, I've just never got a straight answer on emacs vs unix philosophy before I don't see them in opposition "do one thing and do it well" vs emacs: everything && the kitchen sink Do one thing great vs. do everything at once? :P I'm sorry. still don't see it. I'm much more practical than positional. that's why I'm using OSX. It works better for me. Im using it as well could anyone tell me how much it would be for more ram on the vps? litebread: its on the site <-- ancient xterm on openbsd laptop to openbsd colo running irssi over v6 the whole way. wheeeezorz. sorry infrared i do not see it of course, my FLOSS fanboy friends can't figure out why I'd have an iphone and not an android, and OSX and not pc-bsd on my desktop to some of them I'm some kind of traitor nice toddf :) says to contact us for cutomized vps, i found it :) litebread: its practically on the main page toddf: I'm stoked to play with ipv6 on this new vps. haven't gotten around to it yet. some people (myself included) think floss support is a lifestyle. use something proprietary, you support the other side. others (good friend of mine who loves to rib me all the time) use what works for them regardless of cost or free-ness. its a choice, not a religion. there ya go I am so glad I'm over my free-tard stage. free-tard ? lol I even tell people to pronounce my last name as 'free software' then 'drop the "oftware"' you know. the real free software zealots that will all but tell you you're going to rot in hell for using non-free firmware. firmware that can be distributed freely that is required for the os to load for the device to work (i.e. most wifi chipsets these days) is one thing the source to the same firmware is quite another freely distributable firmware should be a given, not a hard fight that happens now and then the source to the firmware, well, have fun firmware is not binary blob drivers for the os, that's another ball of wax if you use binary blobs you're handing the keys to the kingdom to whomever handed you that blob at this point, while I generally feel free software is the better solution, using non-free software is not one of the seven deadly sins no hell involved in any event, clearly a choice of convenience vs freedom and inspectability infared: thank you, i used the email part of the 'contact page' to inquiry about the extra memory and ips its a choice, some justify wrongly perhaps, but a choice nonetheless personally I find it more convenient I can install an os w/out phoning for a license or going through my wallet to get one, but that's just me ohh I definitely agree holy smokes im slow with this infrared: keep it up. you're doing great ;) haha teh vast majority of my software is open, but I still break for flash and skype and junk like that skype++ infrared: didn't take you long to type that! :) but hopefully html5 will kill flash. fingers crossed. cedwards: fingers, and toes, and everything inbetween, yes indeedy youtube even lets you try out html5 but only in evil H.264 I can play h.264 on any player I have, so at least its not so evil I require binary blobs to play it did i really start the free-vs-nonfree war? /facepalm and here I thought it was a civil discussion *gpl vs bsd* !BOOOM! Artistic 2.0, all the way, baybee! but even Artistic 1.0 was recently found enforcable in federal court recently oops. redundant *and* redundant cedwards: / is in a horrible spot infrared: yeah, that one takes some getting used to. infrared: seriously. wrist pain or a few weeks of discomfort Hello, any arp admins active? if you get on typewriter and are as unfortunately obsessive as I am you'll have it figured out quite quickly typeracer*** :( so much for rearranging my keyboard i guess certain keys need to be in certain rows alias no='ls' haha lol infrared: I was lucky in that I didn't really learn vim until _after_ I had learned dvorak. infrared: otherwise that would have made the learning curve quite a bit worse. sweet. my Dropbox is now at 8.5G after referrals. rsync++ ohh I use that too, but Dropbox can be very convenient at times. similarly, one of my fairly recent setups that I really like is tracking my home folder (particularly .dotfiles) in a git repo inotify -> rsync :) man if i type this slow at work i might get demoted :) for the sake of your job man. keep practicing! is it wrong that I'm already very tempted to pickup a second machine here? not at all I've already provisioned 2 thinking of a third (at the $20 rate) just to have a second machine to "play" I would love to migrate my linode to FreeBSD here. and freebsd has full linux execution (*not* emulation) I've really enjoyed Linode--I'd recommend them--but the availability of FreeBSD is just too tempting (plus, better deal!) so you could probably move most of yoru binaries I'm sure I could rebuild it (webserver) on FreeBSD and get better performance. sure well maybe not *much* better necessarily like I said, not emulation. native calls part of my problem is I built 64bit there, but only have 360M. That uses more of my limited memory. for the same price I'd get double the RAM and I'd likely build 32bit and get that little bit extra. I still haven't been convinced of the benefits of 64bit at < 4G RAM. if anyone is thinking of another vps, get 'em while they are hot b/c at the end of the month i will most likely be sold out; and unlike before when i would just buy a new box, i am going on hiatus for May, b/c LA data center expansion has taken up all resources probably won't have a new box until mid-to-end of May hi up_the_irons I placed my order earlier :) aem: ok, you should get it tonight then :) cool thanks man! np up_the_irons: the site says, in regards to the promo, one per customer. up_the_irons: if I were to get one more, what would the specs be on the second? cedwards: oh forget that, you can get another if you want up_the_irons: even better :) :) looks like the only difference is 100GB more of b/w 768 / 20 / 100 for $20 instead of 768 / 20 / 200 for the special RandalSchwartz: hey, bandwidth is bandwidth. the "currency of the internet". yeah - I don't think I've ever gotten near my limits cedwards: which promo are you referring to if I may ask? arpnetworks.com/vps the $20 special like insightcruises.com mail/dns is running and soon maybe even web etc aem: I guess the extra 100G of bandwidth ah yes of course i rarely use much bandwidth either, but I'd rather have extra than not enough I don't think up_the_irons is going to show up at my door if I go over though. :) at least once or twice. at my current host I have currently used: 51.8 GB for the month. that is pretty well average for me. oh cool! to be honest, it wasn't clear to me that the bandwidth was the special. maybe I just didn't read closely enough, but i initially thought it was the storage. Friday and Gannon, at my door! which of course, dates me. :) since nobody else will :) Dragnet? yeah - that was fbi wasn't it? oh maybe not they were LAPD better shoot off to support@ is email or support tickets preferred? cedwards: they are equivalent up_the_irons: thanks np up_the_irons: i had placed an order at 4am PDT, i wanted to know when did i need to do this and how much a ram upgrade would be litebread: all the prices are here: http://arpnetworks.com/vps litebread: i generally don't do piecemeal upgrades; so if you want more ram, pick the next highest plan litebread: "when did i need to do this" <-- what do you mean? add the extra ram, its fine however ive placed my order ill just go with that i had another question to regarding ips, i noticed 13 was the highest listed, if i needed anoymore than that will they be available after setup? get your customers to connect in v6 you get millions of those. :) ....yeah. heh yes i see that you do get quite a few, no, millions.. a /48 lots and lots ehe yes indeed 2 ** (128 - 48) :) litebread: you can upgrade at any time; you can get more IPs than 13 but you'll have to fill out an IP Justification form and comply with RFC 2050 yeah ipv4 is pretty scarce now up_the_irons: ok thank you right i think its what about a year left or a little more at the rate they are going I've been playing with miredo right which lets me tunnel v6 over v4 so I can ssh into my box using v6 cool host -t aaaa red.stonehenge.com why do you need 13 ips? vhosts prolly i will be setting up a few different things vhosts is actually one of the needs for them irc vhosts? vhosts don't need it but SSL does litebread: just use ipv6 for irc vhosts yes most major irc networks support ipv6 sorry was afk, coil ty ill do that then most of the world sanely has v6 it's just the US that sucks althogh comcast is rolling out v6 trials 6rd and dual stack soon imagine port knocking in a /48 :) yeah you could probably even encode a couple of bytes in each icmp packet IP over ICMP, anyone? :) this will be my first non-lab foray into v6. i'm stoked. i wish my isp supported it :( im getting pretty good at this keyboard. :) infrared: good to hear RandalSchwartz: after all that ntp junk, i found that the vps' clock was off by about 5 hours. do you think that might have had something to do with all the weirdness? what ipv6 tunneling service(s) do you all like? hetunnel i like how about you? I don't have a preference. Never really bothered using one before. yeah i had to because of this vps i had litebread: hetunnel you say? is that the same thing as tunnelbroker.net? sponsored by he.net? yes, cedwards let me check coil it is sponser by hurricane electric tunnelbroker.net it is brb guys looks like my home router doesn't support protocol 41. ;( oh man all the more reason to migrate from the netgear router to a pfsense setup. yeah thatd be nice just need to make sure I can 1) auth to my DSL provider 2) still use the netgear as a wireless AP. yeah, hopefully everthing works out with that that'll be quite the project. definitely going to have to wait on that. or just go buy a new router/AP yeah time vs money sup? idk bro im about to afk for the night here soon, and maybe have better luck tomorrow in about a half hour litebread: ttyl ttyl fink hello? i ordered the server an wanted to see its almost 24 hours atm how long until it would be setup? i guess ill try back tomorrow morning (PDT) and see. also wanted to know if there is an extra 'speedy setup' cost ok im sleep