FreeBSD - Life!

Life!

Sign in Subscribe

FreeBSD

A collection of 27 posts

Ghost CMS now supports Node.js 22

Ghost CMS now supports Node.js 22

Because of declaring Node.js 20.x LTS to Maintenance state since his EOL in April 2026 it was really important to migrate to newer Node.js LTS version. Of course the performance of newer node.js versions is important too. But the wait is over, with latest released version

PHP 8.4.4 recommendation for php-fpm setting

PHP 8.4.4 recommendation for php-fpm setting

My experiments with php 8.4.4 to found no high cpu and memory usage has following results: For PHP.INI opcache and jit: [opcache] opcache.enable=1 opcache.enable_cli=1 opcache.interned_strings_buffer=128 opcache.max_accelerated_files=20000 opcache.save_comments=1 opcache.jit=1235 opcache.

Upgrade to 17.0

Upgrade to 17.0

The postgresql 17 was released 2 days ago. So here is quick manual to upgrade to latest version from 16.4. pkg create postgresql16-server mkdir /tmp/pg-upgrade tar xf postgresql16-server-16.4.pkg -C /tmp/pg-upgrade pkg delete -f databases/postgresql16-server databases/postgresql16-client portmaster databases/postgresql17-server databases/postgresql17-client su -l postgres

Removing old files after rebuilding world

# cd /usr/src && yes | make delete-old cd /usr/src/ && make BATCH_DELETE_OLD_FILES=YES delete-old delete-old-libs

Caddy security recommendation

Caddy security recommendation

Use security/portacl-rc to enable privileged port binding: # portmaster security/portacl-rc # sysrc portacl_users+=www # sysrc portacl_user_www_tcp="http https" # sysrc portacl_user_www_udp="https" # service portacl enable # service portacl start Configure caddy to run as www:www # sysrc caddy_user=www caddy_

zpool migrations

HTTP/3 implemented

HTTP/3 implemented

My website now supports all versions of the http protocol, including http/3. IPv6/IPv4 are also supported. Added also SVCB record type into DNS server: For questions related to how-to enable HTTP/3 support in your favorite browser, you need to google about that information.

How to display TLS server extensions on FreeBSD

Use openssl command-line utility to display TLS server extensions. #!/usr/local/bin/bash # Display TLS extensions # # Example: # $ get_tls_extensions.sh sleeplessbeastie.eu # Negotiated TLS version: TLSv1.2 # TLS extensions: # - EC point formats # - extended master secret # - session ticket # - renegotiation info # # $ get_tls_extensions.sh debian.org

Ghost CMS advices

After some period of problems related to the complicated system dependent on many different node.js components, I had to redo the mechanism by which my GhostCMS based blog is launched on FreeBSD 13/stable. First my experience on what to do when you find yourself in the situation where

HOWTO use Python 3.11-rc2 under FreeBSD13-stable

Update Python 3.11 is out officially. You can easily change the version used in the operating system. I highly recommend only having one version of python installed - otherwise it becomes a big mess. To do this, you must first specify in the /etc/make.conf file which version

Automate NextCloud updates

Here is my script to automate NextCloud updates. They can be put into crontab in example: #!/bin/csh setenv nextcloud "/usr/local/www/nextcloud" pushd $nextcloud sudo -u www -D $nextcloud /usr/local/bin/php --define apc.enable_cli=1 updater/updater.phar --no-interaction sudo -u www -D

Automate GHOST updates

Here are my scripts for automaticaly update my GHOST updates on FreeBSD. First i'm listing my rc.d script for starting it: #!/bin/sh # PROVIDE: ghost # REQUIRE: DAEMON SERVERS mysql postgresql slapd # KEYWORD: shutdown # # Add the following lines to /etc/rc.conf to enable powerdns: # # ghost_enable="

MySQL 8.0.27 upgrade failure

If after the upgrade the mysql doesn't start don't panic! In mysql8 mysql_upgrade command is dummy, and the database upgrades automatic on first restart. In my scenario I was upgrading from 8.0.26 to mysql8.0.27 and I see errors like bellow and

Upgrade PostgreSQL 14.5 to 15.x on FreeBSD

New version of postgresql 15 database have arrived. I have updated the manual to newest possible upgraded version on 14 october 2022. Stop your postgresql database daemon on FreeBSD machine: service postgresql stop Create package containing your old version ( 14.5 ) binaries ( depends are you using postgresql14-contrib package, but command

Howto run and update ghost 4.x on node.js 17.x

It looks that there is big inconsistency in FreeBSD ports [https://www.freebsd.org/ports/] - related to python 3.10 [https://www.python.org] and node.js [https://nodejs.org/en/]. Currently only node.js 17.x can be build if you have such combination of programming languages on

Installing [matrix]-bridges on FreeBSD

Here is my example using mautrix-facebook [https://github.com/tulir/mautrix-facebook] as example‌ $ mkdir bridges/facebook $ cd bridges/facebook $ virtualenv -p /usr/local/bin/python3.7 . $ bash $ source bin/activate $ pip install --global-option=build_ext --global-option="-I/usr/local/include" --upgrade git+https://github.com/tulir/mautrix-facebook.git#

ELF binary type "0" not known.

Today I've invested some time to bring back to life my personal Cloud storage [https://cloud.ostreff.info/]. The reason for his death was upgrade to PHP8 [https://www.php.net/releases/8.0/en.php]. So after some research I've found that at this moment

Build graphics/pecl-imagick PHP 8 compatible extension

The version in the ports tree is not working - it shows some errors when installed. But the source on the master brach of the Imagick repo [https://github.com/Imagick/imagick] seems to work. Here's how you can use it. 1. Clone the repo somewhere on disk

How to build and install Mattermost plugins on FreeBSD

I was unpleasantly surprised to find that all plugins published on Mattermost plugin marketplace [https://integrations.mattermost.com] are not working on installed server on FreeBSD. They all are failing to start - it doesn't matter did you enabled linux64 emulation [https://docs.freebsd.org/en/books/handbook/

How to set DSCP/COS in FreeBSD and use it in Telco environment

Preserving QoS [https://en.wikipedia.org/wiki/Quality_of_service] parameters in Telco environment, where part of the equipment is following 3gpp [https://www.3gpp.org] rules and other part is followin ietf [https://www.ietf.org] rfcs rules is really chalenging. And of course there is allways need to

Problems with transmission-daemon with IPv6 and some other popular issues

Remove IPv6 detection Current port version inside net-p2p/transmission-components must be extracted with command FLAVOR=daemon make extract then edit file work-daemon/transmission-4.0.5/libtransmission/net.cc searching for ipv6. Then just reinstall with FLAVOR=daemon make deinstall install clean The problem with net-p2p/transmission-daemon and IPv6 is that

How to grow zfs on FreeBSD running inside VMWare

Live ZFS resizing inside VMWare should be possible, but there are several steps: First you should resize your virtual disk in VMWare configuration. Recomendation is all virtual disks to be similar size for best performance in VMWare. Then check what is disk configuration using: # gpart show => 34 629145526 da0

MySQL command for finding all MyISAM databases, and convert them to innodb

Today most popular storage engine in latests MySQL databases is InnoDB. But if you have older databases, before the times when InnoDB becomes the king, you must somehow convert your data. You can easy find which tables are using an older storage engine using: > SELECT TABLE_SCHEMA as DbName

TCP Fast Open (TFO) on FreeBSD

TCP Fast Open (TFO) is an extension to speed up the opening of successive Transmission Control Protocol (TCP) connections between two endpoints. It works by using a TFO cookie (a TCP option), which is a cryptographic cookie stored on the client and set upon the initial connection with the server.

How To Secure HAProxy with Let's Encrypt

Combine fullchain.pem and privkey.pem > DOMAIN='example.com' ; sudo -E bash -c 'cat /usr/local/etc/letsencrypt/live/$DOMAIN/fullchain.pem /usr/local/etc/letsencrypt/live/$DOMAIN/privkey.pem > /usr/local/etc/haproxy/$DOMAIN.pem' The first thing we want to add is