Nostr notes by subnetspider

I tried my home made bolognese with tagliatelle once, and now I ...

2026-10-15T13:19:29Z

In reply to nevent1q…nymq
_________________________

I tried my home made bolognese with tagliatelle once, and now I can't go back to spaghetti. 😋

👀 now I want Tiramisu, and I make you responsible

2026-10-13T17:58:18Z

In reply to nevent1q…an0k
_________________________

👀 now I want Tiramisu, and I make you responsible

I bet the LMM agent upgraded and rebooted FreeBSD without ...

2026-10-12T13:28:22Z

In reply to nevent1q…jjkf
_________________________

I bet the LMM agent upgraded and rebooted FreeBSD without updating the boot code, something which is documented in both the FreeBSD upgrading instructions and in the FreeBSD handbook.

I have just noticed that with FreeBSD Jails updated to ...

2026-10-10T20:33:55Z

I have just noticed that with FreeBSD Jails updated to 15.1-RELEASE, they can't load new firewall rules via "pfctl -f /etc/pf.conf" anymore, if the jail's securelevel is set to 2 or higher. On FreeBSD 15.0 and before this worked.

Is there something I can do to restore this behaviour or do I have to set all my VNET jails to securelevel 1 to allow pfctl to make changes again?

I understand that this is a feature, not a bug, but it still kinda surprised me.

---

Edit

According to the security(7) man page, kern.securelevel should only block changes to pf and ipfw rulesets at level 3, but my jails only run at level 2???

After a couple weeks of procrastinating, I finally migrated my ...

2026-10-10T18:44:59Z

After a couple weeks of procrastinating, I finally migrated my NetBox instance from the Ubuntu 22.04 Proxmox LXC old to the new #FreeBSD 15.1 Jail.

The old NetBox instance was still on v4.1.7, because I would have needed to upgraded Postgres 14 to a later version.

Fortunately, the only thing I had to do was to dump the old netbox database and restore it into the Postgres 18 DB inside the jail, and copy all the images from .../media/devicetype-images over.

The Jails runs v4.6.10 and simply running "manage.py migrate" once after restoring the data was all it took.

Now I can finally shut down my Proxmox VE server, as all services have been migrated to my FreeBSD NAS / home server. 😁

I want to be able to run a Tor Guard or Exit relay, which is not ...

2026-10-05T07:46:17Z

In reply to nevent1q…24qq
_________________________

I want to be able to run a Tor Guard or Exit relay, which is not allowed on BoxyBSD. ;)

Hey there #NetBSD people, I am thinking about installing NetBSD ...

2026-10-05T07:20:03Z

Hey there #NetBSD people,

I am thinking about installing NetBSD on a Linux-only VPS provider, which I have done a lot already with FreeBSD, thanks to the mfsBSD project, which lets you install FreeBSD from a RAM disk.

Does something like that also exist for NetBSD as well? I would love it if I could just attach a custom ISO, but a lot of cheap VPS providers only give you a list of 5-6 Linux distros instead.

I've just ran `pkg upgrade` on my home server and now it runs ...

2026-09-29T18:51:17Z

I've just ran `pkg upgrade` on my home server and now it runs FreeBSD 15.1-RELEASE-p4. I don't know if -p4 was released today, or if I only got the patches because I noticed I had "enabled: no" set on the FreeBSD-base pkg repo. Does someone know the answer?

"IT" notes as in "Italian Tiramisu" notes?

2026-09-26T15:34:37Z

In reply to nevent1q…wd0g
_________________________

"IT" notes as in "Italian Tiramisu" notes?

I always find it funny when someone on the Internet says "ZFS ...

2026-09-17T17:08:41Z

I always find it funny when someone on the Internet says "ZFS is memory hungry" or "ZFS needs at least 8 GB of ECC RAM to run". Nonsense.

To prove it, I installed #FreeBSD 15.1 (64 bit!) on a 23 year old PC, with ZFS and only 1 GB of RAM, running multiple jails without issue. 😎

It has been a bit tricky to get FreeBSD 15.1 to boot off a modern SATA drive, but I found some old PCI SATA controller I bought way back in the Windows 7 days which is still supported.

The single core AMD Athlon 64 3000+ is a bit slow, but pkgbase really helps with speeding up installing patches. It's still fast enough to reach 604 Mbit/s in iperf3 (and 490 Mbit/s in client mode).

If I wanted to, I could even turn this ancient machine into a NAS, which really proves that old PCs aren't trash, but modern software is.

Fun fact: FreeBSD's ifconfig can display information about ...

2026-09-15T09:07:33Z

Fun fact: FreeBSD's ifconfig can display information about installed SFP modules, like their temperature, voltage, and tx/rx power. Example: ifconfig -v ix0

I am 100% sure that even earlier versions of iOS support IPv6 ...

2026-09-15T00:25:58Z

In reply to nevent1q…w2m3
_________________________

I am 100% sure that even earlier versions of iOS support IPv6 (e.g. SLAAC, NAT64, 464XLAT/CLAT ...). What isn't working exactly?

Today I migrated my last Proxmox VE VM to my FreeBSD NAS and ...

2026-09-14T13:44:58Z

Today I migrated my last Proxmox VE VM to my FreeBSD NAS and migrated it to Bhyve. After a quick zfs send | receive of the Zvols I only had to modify the config file vm-bhyve had created and that was it. 😁

Since the Windows Server 2022 VM was already installed as UEFI, I didn't even had to convert the Install from BIOS to UEFI.

Thank you Stefano Marinelli (npub1ef5…gcpc) for your blog post (https://it-notes.dragas.net/2024/11/15/migrating-windows-vms-from-bios-kvm-to-uefi-bhyve/), this helped me a lot. :)

I think I'm going to copy most of what you did and apply it ...

2026-08-27T14:43:49Z

In reply to nevent1q…2yt3
_________________________

I think I'm going to copy most of what you did and apply it to my own FreeBSD server. I already do the same with Samba and NFS, which both run inside VNET jails, so the host stays tidy. :)

Here is how the netgraph setup looks like: ...

2026-08-23T11:33:15Z

In reply to nevent1q…9753
_________________________

Here is how the netgraph setup looks like:

And another #FreeBSD host installed successfully. 😁 After I ...

2026-08-23T11:28:35Z

And another #FreeBSD host installed successfully. 😁 After I retired the Proxmox VE host at my parent's house, all services ran on the FreeBSD NAS, but now the secondary DNS jails run on their own thin client once more.
VNET with bridging didn't work, so I used Netgraph instead.

The realtek re0 driver received all of the ethernet frames addressed to the VNET jails, but the bridge0 interface (I tried the new VLAN aware bridging) didn't receive them from their parent interface.

Luckily, I can just create VLAN interfaces on re0 and use Netgraph together with Bastille to create netgrap bridges and netgraph eiface interfaces, which do not require driver support, as they directly hook into the network card's send/receive buffer.

I have no Idea why, but my Nextcloud jail wants to download 5 GB ...

2026-08-17T21:26:12Z

I have no Idea why, but my Nextcloud jail wants to download 5 GB of new packages when updating php84-pecl-imagick:

doas pkg install php84-pecl-imagick

Number of packages to be installed: 173

The process will require 5 GiB more space.
196 MiB to be downloaded.

Does someone know why this is happening? I don't remember this thing having this many dependencies (wayland, llvm, 10 versions of gcc, Nvigia drivers ...).

I suppose boot times will be rather quick?

2026-08-07T16:22:32Z

In reply to nevent1q…0lgt
_________________________

I suppose boot times will be rather quick?

The cable Internet at my parent's house died and in order for ...

2026-08-01T08:03:53Z

The cable Internet at my parent's house died and in order for IPv6 to work with the 4G internet connection, I've just created a NAT66 source NAT rule on my parent's #OPNsense

This feels very wrong, but since the 4G connection only gets a /64 prefix, I can't do NPTv6, so this is all I can do. But at least it works. 🫣

IPv4 is only NATed by the Cable and 4G routers, and WAN failover is taken care of by Gateway Groups.

Did your apartment pass the rat inspection?

2026-06-11T11:40:19Z

In reply to nevent1q…h9td
_________________________

Did your apartment pass the rat inspection?

Is it just me, or is your blog now loading even faster? Feels ...

2026-06-11T07:02:14Z

In reply to nevent1q…qqj4
_________________________

Is it just me, or is your blog now loading even faster? Feels almost instant on my 4 year old Smartphone.

True, but IPv6 isn't RFC1918 😉

2026-05-13T16:14:31Z

In reply to nevent1q…3qjc
_________________________

True, but IPv6 isn't RFC1918 😉

It works, unless your router is behind a CG-NAT and you want to ...

2026-05-13T15:07:41Z

In reply to nevent1q…kkt3
_________________________

It works, unless your router is behind a CG-NAT and you want to connect to it via VPN 😁

Looks good, I have only 4 hops (including my OPNsense firewall) ...

2026-05-02T11:52:48Z

In reply to nevent1q…k237
_________________________

Looks good, I have only 4 hops (including my OPNsense firewall) in my traceroute. 😁

Thanks to a lot of help from @npub1fj6…aq90 I now have access ...

2026-05-02T11:42:10Z

Thanks to a lot of help from Larvitz :fedora: (npub1fj6…aq90) I now have access to the DN42 network. :D

CHR on Bhyve, nice. :) What does the network of the RouterOS VM ...

2026-04-22T16:16:06Z

In reply to nevent1q…2eh7
_________________________

CHR on Bhyve, nice. :)
What does the network of the RouterOS VM look like (e.g. bridge + tap / netgraph / ...)?

Pretty sad when all their networks support IPv6 but their ...

2026-04-17T07:55:43Z

In reply to nevent1q…drzk
_________________________

Pretty sad when all their networks support IPv6 but their hardware doesn't. Consumers apparently don't need IPv6...

Yesterday I decided to move my test env at work from VMware ESXi ...

2026-04-15T16:54:56Z

Yesterday I decided to move my test env at work from VMware ESXi 8.0 to Bhyve, so I exported all VMs, Installed FreeBSD 15.0 on a 2x SSD ZFS mirror, and set up the network (bridge / VLAN) today.

Now I just need to converte the vmdk files and import them, let's see if it works.

The host is an old Dell T330, and since it uses the PERC H330, I had to modify the FreeBSD installer again, so it uses the newer mrsas driver. It's Intel Xeon E3-1230 v6 and 32 GiB of RAM are still fast enough for light virtualization tasks, so no reason to toss it. 😁

The realization that 2012 is already 14 years ago ... some pets ...

2026-03-11T18:15:11Z

In reply to nevent1q…ps2h
_________________________

The realization that 2012 is already 14 years ago ... some pets don't even live that long. 😅

VNET Jails really are one of FreeBSD's greatest features. ...

2026-03-02T21:49:34Z

In reply to nevent1q…jnqa
_________________________

VNET Jails really are one of FreeBSD's greatest features. 😁

And while I do not have need for, you could also give a jail of of your FreeBSD hosts physical interfaces, skipping epair and bridge interfaces entirely. 😎

Netgraph VNET Jails are also pretty neat, though I find working with ng_* interfaces a bit too complicated, so I usually stick with epair.

Considering that I pay my ISP around €50 a month just for a ...

2026-02-26T19:03:30Z

In reply to nevent1q…4wlq
_________________________

Considering that I pay my ISP around €50 a month just for a static /56 IPv6 prefix, this is very tempting. 😵‍💫

NAT64? NAT46!

2026-02-15T13:24:50Z

In reply to nevent1q…dpkl
_________________________

NAT64? NAT46!

Does anyone know when the #Tor package for #FreeBSD will be ...

2025-11-24T23:54:14Z

Does anyone know when the #Tor package for #FreeBSD will be upgraded from 0.4.8.20 to 0.4.8.21?

It's been almost a week since 0.4.8.21 was released due to a critical security fix, but nothing's happening... :(

Huh ... just enabled DNS64 and DHCP option 108 on my OPNsense to ...

2025-11-04T21:52:43Z

Huh ... just enabled DNS64 and DHCP option 108 on my OPNsense to see if my phones would enable their CLAT, guessing that I would need to do more work, but it just works™️.

The iPhone reports 192.0.0.3 as it's IPv4 and 192.0.0.1 as gateway, and the Android doesn't show any IPv4 (but 255.0.0.0 as next hop in traceroute?).

Either way, that's another two IPv6-only devices, I'm actually making progress. 😁

#IPv6 #NAT64

I'm currently thinking about the best way to convert my home ...

2025-11-02T09:57:50Z

I'm currently thinking about the best way to convert my home network to IPv6-only / IPv6-mostly (for devices without CLAT), but the biggest obstacle is my Sophos XG Firewall.
- No IPv6 DNS via router advertisement
- No NAT64 support (only via an explicit proxy).
- No DNS64 support

I'm now asking myself whether I should run OPNsense in parallel with the Sophos FW or simply remove the Sophos FW and revert to OPNsense... 😒

So today I tried powerd++ on my physical #FreeBSD hosts as an ...

2025-07-13T19:54:27Z

So today I tried powerd++ on my physical #FreeBSD hosts as an alternative to the native powerd after reating vermaden (npub1wft…s0mg) 's blog post about FreeBSD Power Management (https://vermaden.wordpress.com/2018/11/28/the-power-to-serve-freebsd-power-management/).

The first thing I noticed is that with powerd++, the CPUs stay clocked very low at 800 MHz almost all of the time, while with powerd, the clock speeds keep spiking every couple of seconds, and then coming down again.

I don't have a way to measure how large this change is over days, weeks or months, but I'd guess it should save me a couple of % of power.

As the hosts CPUs usually sit at just 1-2% load 99.9% of the time, performance shouldn't be impacted in a meaningful way. :) Considering how a dozen jails are running on them, they're still way overbuilt.

PF on modern CPUs barely has any trouble filtering packets at ...

2025-07-11T06:08:13Z

In reply to nevent1q…tls9
_________________________

PF on modern CPUs barely has any trouble filtering packets at gigabit speeds, more cores do help with routing though - which also depends on your network card, it's drivers, and it's queues. I would recommend Intel i226 NICs when getting a mini-PC, don't touch the i225 NICs though (they suck at stability). Some good-ish 2.5G Realtek NICs also exist, but I never tried them.

Even a Intel N150 should be more than enough for ...

2025-07-11T05:26:20Z

In reply to nevent1q…rl4n
_________________________

Even a Intel N150 should be more than enough for routing/firewalling 1 gigabit of WAN to LAN traffic. I used to run a pf-based firewall on an AMD GX-222GC (2x 2.2 GHz x86 SoC from 2014) and got up to 770 Mbit/s even with that. 😎

Do you boot FreeBSD with the BIOS or UEFI firmware on the T480?

2025-06-28T20:58:12Z

In reply to nevent1q…pulw
_________________________

Do you boot FreeBSD with the BIOS or UEFI firmware on the T480?

And now there's a Debian 12 VM running on bhyve with the nvme ...

2025-06-03T20:10:27Z

In reply to nevent1q…nrm3
_________________________

And now there's a Debian 12 VM running on bhyve with the nvme disk driver.

To be honest, vm-bhyve seems to be all I need to run my virtual machines. Maybe I'll just replace my Proxmox VE host and use bhyve instead...

Can really recommend this video, that all I needed: ...

2025-06-03T19:26:19Z

In reply to nevent1q…zyeg
_________________________

Can really recommend this video, that all I needed: https://www.youtube.com/watch?v=E47Pd0P58Co

I've just set up vm-bhyve on a vanilla FreeBSD 14.2 server ...

2025-06-03T19:25:12Z

I've just set up vm-bhyve on a vanilla FreeBSD 14.2 server and created my first VM, it was actually a lot easier than I thought. :D

https://www.nasa.gov/image-article/jupiters-south-pole/ He you go ...

2025-02-17T08:04:26Z

In reply to nevent1q…tgu2
_________________________

https://www.nasa.gov/image-article/jupiters-south-pole/ He you go :)

It is, it's just from Jupiters South Pole afaik, instead of ...

2025-02-17T07:37:26Z

In reply to nevent1q…z07z
_________________________

It is, it's just from Jupiters South Pole afaik, instead of the equator.

Just put the #bsdcafe #boxybsd stickers I got from @gyptazy at ...

2024-09-30T21:31:04Z

Just put the #bsdcafe #boxybsd stickers I got from @gyptazy at FrOSCon on my laptop, still more space to fill. 😄