bryce?
you have a strange alias
hahaha
mercutio: ?
Oh, the KILLALLHUMANS01 nick
I have some great nicks...
heh
A few of my other favourites: IM_AWESOME the_cheat Always_Batman lpr0
there we go
my nick is boring :)
lolol
so Ubuntu is going to systemd just like Debian, fml
haha
it's not that bad
binary logs?  can't even tail shit without a tool.  no thanks
bloat bloat bloat
it's like GRUB
i just wanna fucking boot my machine, and you (grub) make it so difficult because you tried to tackle every other fucking problem on earth, making it horrible just to boot my system
if i want to boot a FreeBSD system, it's "fdisk -BI ad0" and CALL IT A DAY.  it works as intended.  *nix philosophy, do one simple thing and do it right
it appears as though systemd still provides a socket to give you the ability to bind your syslogger to a socket and write logs to discrete files on disk vs the journal
i mean, it'll still write to the journal, but it'll also allow you to write to log files
see, reading that make me vomit a little in my mouth
*made
haha
up_the_irons: As a Linux user looking in on FreeBSD from the outside, it looks equally crazy. It has three distinct firewalls with incompatible syntaxes, and kernel modules and userland tools for all of them in the base image.
pf or gtfo
i understand what you're saying, but it so f'in overkill.  it should not be necessary to jump through those hoops just to log in text.
retrieving a specific log from the journal isn't terribly painful though - journalctl -u nginx = nginx logs
plett: i thought everyone used pf...
yeah, i don't know anyone who uses bsd who doesn't use pf
up_the_irons: ipfw and ipf are also there and supported
ipfw back in the day maybe
yeah but who uses ipfw and ipf anymore?
pf is so well documented and designed, there's no reason not to use it
but if you want to, it's there
don't get me wrong, freebsd isn't immune to this problem; it's just less
And yes, pf is lovely
I've been told that the journald binary logging stuff isn't tightly tied to systemd, and that you can just run a good old syslogd instead
i c
is there any practical reason that iptables doesn't have ipv6 support built in vs using ip6tables?
i always use ufw or afp or whatever to manage iptables rules because i hate the syntax
s/afp/apf
<m0unds> i always use ufw or apf or whatever to manage iptables rules because i hate the syntax
I suppose now is a bad time to link this - http://www.openbsdfoundation.org/gsoc2014.html#systemd
ha
One nice thing about the journal, up_the_irons et al, is that it makes it easy to pull specific timeframes.
indeed
ah that is indeed useful
i like the boot logging functionality - you can query current boot, previous boot, boot prev to that, etc
linux has a new netfilter API called nftables, apparently the syntax is quite nicer
ah
http://netfilter.org/projects/nftables/
staticsafe: I read through some of the example syntax a while ago, it's still nowhere near as nice as pf
yeah
https://wiki.archlinux.org/index.php/Nftables certainly much nicer than iptables though
<3 pf syntax, soooooo readable :D
that's junos-ish
i never use iptables directly, always through ferm.  <3 ferm
tree-based rules, basically
http://ferm.foo-projects.org/ interesting
i've used it for years
oh, that's neat
looks like nftables has a tree-like syntax too
yeah
brycec: that's what i use most of the time
HERESY
other than the occasional DROP rule for some abuser
I didn't used to either, just kept services listening on the right ports. But then there were some services I couldn't configure quite like that
like mysql? :P
RouterOS firewall sytax is a bit weird but consistent with the rest of the system
yea, it's not bad to manage
add action=log chain=forward comment="Filter port 25 outbound" dst-address=::/0 dst-port=25 log-prefix=SMTPOUTBOUND protocol=tcp src-address=::/0
they finally stopped doing stupid shit like changing syntax between releases and things
staticsafe: nah mysql is easy to bind to an interface, or not bind at all (socket only)
ah
(can't remember what it was though... oh well)
Cisco IOS ACLs ugh
yuck
yay, lightning
up_the_irons: re: grub - try syslinux (or extlinux) instead
i c
e.g. to multiboot between root-on-ZFS and mfsbsd: https://gist.github.com/dne/1054313
Gist: "Multi-boot FreeBSD w/ ZFS root on a GPT partitioned disk using Syslinux"
dne: that's cool
i like ferm too
tomorrow... the big upgrade day
freebsd from 8.3 (EOL) to 8.4 (supported for another year)
perl from 5.10(!) to 5.16
pkg to pkgng
thank goodness for snapshots :)
good luck
up_the_irons: did you go with the i5 or i7 T520
i5
i7's were hard to find actually
whats the screen resolution?
1080p or lower?
1600x900
15" T520 here
well, atleast its widescreen
i miss the prevalence of 16:10 displays