FreeBSD - Life!

Ghost recommendation

Use security/portacl-rc to enable privileged port binding: # portmaster security/portacl-rc # sysrc portacl_users+=www # sysrc portacl_user_www_tcp="http https" # sysrc portacl_user_www_udp="https" # service portacl enable # service portacl start Configure caddy to run as www:www # sysrc caddy_user=www caddy_

ZFS

zpool migrations

Featured

HTTP/3 implemented

My website now supports all versions of the http protocol, including http/3. IPv6/IPv4 are also supported. Added also SVCB record type into DNS server: For questions related to how-to enable HTTP/3 support in your favorite browser, you need to google about that information.

FreeBSD

How to display TLS server extensions on FreeBSD

Use openssl command-line utility to display TLS server extensions. #!/usr/local/bin/bash # Display TLS extensions # # Example: # $ get_tls_extensions.sh sleeplessbeastie.eu # Negotiated TLS version: TLSv1.2 # TLS extensions: # - EC point formats # - extended master secret # - session ticket # - renegotiation info # # $ get_tls_extensions.sh debian.org

FreeBSD

Ghost CMS advices

After some period of problems related to the complicated system dependent on many different node.js components, I had to redo the mechanism by which my GhostCMS based blog is launched on FreeBSD 13/stable. First my experience on what to do when you find yourself in the situation where

FreeBSD

HOWTO use Python 3.11-rc2 under FreeBSD13-stable

Update Python 3.11 is out officially. You can easily change the version used in the operating system. I highly recommend only having one version of python installed - otherwise it becomes a big mess. To do this, you must first specify in the /etc/make.conf file which version

FreeBSD

Automate NextCloud updates

Here is my script to automate NextCloud updates. They can be put into crontab in example: #!/bin/csh setenv nextcloud "/usr/local/www/nextcloud" pushd $nextcloud sudo -u www -D $nextcloud /usr/local/bin/php --define apc.enable_cli=1 updater/updater.phar --no-interaction sudo -u www -D

FreeBSD

Automate GHOST updates

Here are my scripts for automaticaly update my GHOST updates on FreeBSD. First i'm listing my rc.d script for starting it: #!/bin/sh # PROVIDE: ghost # REQUIRE: DAEMON SERVERS mysql postgresql slapd # KEYWORD: shutdown # # Add the following lines to /etc/rc.conf to enable powerdns: # # ghost_enable="

MySQL

MySQL 8.0.27 upgrade failure

If after the upgrade the mysql doesn't start don't panic! In mysql8 mysql_upgrade command is dummy, and the database upgrades automatic on first restart. In my scenario I was upgrading from 8.0.26 to mysql8.0.27 and I see errors like bellow and

FreeBSD

Upgrade PostgreSQL 14.5 to 15.x on FreeBSD

New version of postgresql 15 database have arrived. I have updated the manual to newest possible upgraded version on 14 october 2022. Stop your postgresql database daemon on FreeBSD machine: service postgresql stop Create package containing your old version ( 14.5 ) binaries ( depends are you using postgresql14-contrib package, but command

FreeBSD

Howto run and update ghost 4.x on node.js 17.x

It looks that there is big inconsistency in FreeBSD ports [https://www.freebsd.org/ports/] - related to python 3.10 [https://www.python.org] and node.js [https://nodejs.org/en/]. Currently only node.js 17.x can be build if you have such combination of programming languages on

FreeBSD

Installing [matrix]-bridges on FreeBSD

Here is my example using mautrix-facebook [https://github.com/tulir/mautrix-facebook] as example‌ $ mkdir bridges/facebook $ cd bridges/facebook $ virtualenv -p /usr/local/bin/python3.7 . $ bash $ source bin/activate $ pip install --global-option=build_ext --global-option="-I/usr/local/include" --upgrade git+https://github.com/tulir/mautrix-facebook.git#

FreeBSD

ELF binary type "0" not known.

Today I've invested some time to bring back to life my personal Cloud storage [https://cloud.ostreff.info/]. The reason for his death was upgrade to PHP8 [https://www.php.net/releases/8.0/en.php]. So after some research I've found that at this moment

FreeBSD

Build graphics/pecl-imagick PHP 8 compatible extension

The version in the ports tree is not working - it shows some errors when installed. But the source on the master brach of the Imagick repo [https://github.com/Imagick/imagick] seems to work. Here's how you can use it. 1. Clone the repo somewhere on disk

FreeBSD

How to build and install Mattermost plugins on FreeBSD

I was unpleasantly surprised to find that all plugins published on Mattermost plugin marketplace [https://integrations.mattermost.com] are not working on installed server on FreeBSD. They all are failing to start - it doesn't matter did you enabled linux64 emulation [https://docs.freebsd.org/en/books/handbook/

Telco

How to set DSCP/COS in FreeBSD and use it in Telco environment

Preserving QoS [https://en.wikipedia.org/wiki/Quality_of_service] parameters in Telco environment, where part of the equipment is following 3gpp [https://www.3gpp.org] rules and other part is followin ietf [https://www.ietf.org] rfcs rules is really chalenging. And of course there is allways need to

FreeBSD

Problems with transmission-daemon with IPv6 and some other popular issues

Remove IPv6 detection Current port version inside net-p2p/transmission-components must be extracted with command FLAVOR=daemon make extract then edit file work-daemon/transmission-4.0.5/libtransmission/net.cc searching for ipv6. Then just reinstall with FLAVOR=daemon make deinstall install clean The problem with net-p2p/transmission-daemon and IPv6 is that

FreeBSD

How to grow zfs on FreeBSD running inside VMWare

Live ZFS resizing inside VMWare should be possible, but there are several steps: First you should resize your virtual disk in VMWare configuration. Recomendation is all virtual disks to be similar size for best performance in VMWare. Then check what is disk configuration using: # gpart show => 34 629145526 da0

FreeBSD

MySQL command for finding all MyISAM databases, and convert them to innodb

FreeBSD

TCP Fast Open (TFO) on FreeBSD

TCP Fast Open (TFO) is an extension to speed up the opening of successive Transmission Control Protocol (TCP) connections between two endpoints. It works by using a TFO cookie (a TCP option), which is a cryptographic cookie stored on the client and set upon the initial connection with the server.

FreeBSD

How To Secure HAProxy with Let's Encrypt

Combine fullchain.pem and privkey.pem > DOMAIN='example.com' ; sudo -E bash -c 'cat /usr/local/etc/letsencrypt/live/$DOMAIN/fullchain.pem /usr/local/etc/letsencrypt/live/$DOMAIN/privkey.pem > /usr/local/etc/haproxy/$DOMAIN.pem' The first thing we want to add is

FreeBSD

Procedure to replace a zfs on root disk (zroot)

Редактиране на публикация Switch to draftПрегледОбновяванеДобавяне на заглавие The procedure, as typed, for replacing ada2 with ada8: # gpart backup ada2 | gpart restore -F ada8 # zpool replace zroot /dev/ada2p3 /dev/ada8p3 (wait for resilver checking via "zpool status") # swapoff /dev/ada2p2 # swapon /dev/ada8p2 ( verify via swapinfo ) If

FreeBSD

Enable WDDX extension in PHP 7.4 or 8.0

This extension is DEPRECATED and REMOVED as of PHP 7.4 or 8.x. What is WDDX – WDDX (Web Distributed Data eXchange) is a programming language, platform and transport-neutral data interchange mechanism designed to pass data between different environments and different computers. #cd ~<some_user_home> #git clone