9.10 is now in Nightlies testing

Status
Not open for further replies.

Mirfster

Doesn't know what he's talking about
Joined
Oct 2, 2015
Messages
3,215
That would be the same program that for the same reason reported 10<9 as true! Is there a completely foolproof way of correctly ordering all varieties of version numbering?
I was just poking fun. FreeNas actually does their versions correctly (FreeNAS-9.3-STABLE-201602031011). Looks like YYYY + MM +DD + Build Version? That is easy enough to use for numerical comparisons.
 

danpoleary

Dabbler
Joined
Nov 29, 2013
Messages
42
This is great news. I was in the midst of ordering new parts for my second freenas build and was debating going skylark now, or waiting until freenas 10 was released, when I saw this post. Now I can get the best of both worlds.

Thanks for all the effort.
 

Ericloewe

Server Wrangler
Moderator
Joined
Feb 15, 2014
Messages
20,194
I was just poking fun. FreeNas actually does their versions correctly (FreeNAS-9.3-STABLE-201602031011). Looks like YYYY + MM +DD + Build Version? That is easy enough to use for numerical comparisons.
It's actually an ISO8601-compliant machine-readable date+timestamp.

Human-readable format would be 2016-02-03T10:11.

I can only congratulate the FreeNAS project for spreading ISO8601 compliance, which the world sorely needs.
 
Joined
Feb 2, 2016
Messages
574
The upgrade from 9.3 to 9.10 was easy as pie with one minor exception: ssh is complaining of missing ciphers...

Mar 4 13:07:40 freetest sshd[8037]: fatal: Unable to negotiate with 192.168.150.104: no matching cipher found. Their offer: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour [preauth]
Mar 4 13:07:40 freetest kernel: <118>Mar 4 13:07:40 freetest sshd[8037]: fatal: Unable to negotiate with 192.168.150.104: no matching cipher found. Their offer: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour [preauth]
Mar 4 13:07:40 freetest kernel: <118>Mar 4 13:07:40 freetest sshd[8037]: fatal: Unable to negotiate with 192.168.150.104: no matching cipher found. Their offer: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour [preauth]

Everything else seems to be working like a champ.
 

rogerh

Guru
Joined
Apr 18, 2014
Messages
1,111
I was just poking fun. FreeNas actually does their versions correctly (FreeNAS-9.3-STABLE-201602031011). Looks like YYYY + MM +DD + Build Version? That is easy enough to use for numerical comparisons.
So we actually need a new 'train' for 9.10 if that's going to work.

Edit. Oh! I see it has replaced the 9.3 nightlies - that makes sense.
 

malco_2001

Dabbler
Joined
Sep 10, 2013
Messages
20
Will jails, and plugins be dropped from 9.10? I do like the idea of getting the latest samba without major UI changes, and removal of my jails which I need. Just wondering how much time I have to move them....
 
J

jkh

Guest
Will jails, and plugins be dropped from 9.10? I do like the idea of getting the latest samba without major UI changes, and removal of my jails which I need. Just wondering how much time I have to move them....
No, everything is the same, including jails and plugins. It's only in 10 that jails will be created inside a VM dedicated to the purpose and everything else will be hosted via VMs and Docker Containers.
 
J

jkh

Guest
The upgrade from 9.3 to 9.10 was easy as pie with one minor exception: ssh is complaining of missing ciphers...

Mar 4 13:07:40 freetest sshd[8037]: fatal: Unable to negotiate with 192.168.150.104: no matching cipher found. Their offer: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour [preauth]
Mar 4 13:07:40 freetest kernel: <118>Mar 4 13:07:40 freetest sshd[8037]: fatal: Unable to negotiate with 192.168.150.104: no matching cipher found. Their offer: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour [preauth]
Mar 4 13:07:40 freetest kernel: <118>Mar 4 13:07:40 freetest sshd[8037]: fatal: Unable to negotiate with 192.168.150.104: no matching cipher found. Their offer: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour [preauth]

Everything else seems to be working like a champ.
What's the client in this case? I haven't observed SSH problems with any of my test machines, so this is a little surprising!
 

INCSlayer

Contributor
Joined
Apr 4, 2015
Messages
197
What's the client in this case? I haven't observed SSH problems with any of my test machines, so this is a little surprising!
i had that issue aswell but it turned out i was using an old version of putty and i just had to update my ssh client

No, everything is the same, including jails and plugins. It's only in 10 that jails will be created inside a VM dedicated to the purpose and everything else will be hosted via VMs and Docker Containers.

i still havent understood what this means for our old jails do they simply stay the same or is there a conversion proccess?
 
Last edited:

Jailer

Not strong, but bad
Joined
Sep 12, 2014
Messages
4,977
i still havent understood what this means for our old jails do they simply stay the same or is there a conversion proccess?

Well from what I've found in playing with this in a VM is something happens. The freebsd-version command run from a jail isn't recognized which would indicate that a jail created with 9.3 stays at 9.3 but the command freebsd-update fetch returns en error and says that no update is available for 10.3 beta 3? o_O

One other question regarding jails. I created a new jail after updating to 9.10 via the GUI and it's downloading the jail template again but it seems to be the same 9.3 template. Is this correct behavior?
 
J

jkh

Guest
i still havent understood what this means for our old jails do they simply stay the same or is there a conversion proccess?
We have not yet decided the best approach but our thinking is that for existing jails, we will migrate them to a FreeBSD 9.3 VM since there are ABI compatibility issues and that's the best way of hosting them going forward. For new applications, you'll use your own VMs or Docker containers.
 

Ericloewe

Server Wrangler
Moderator
Joined
Feb 15, 2014
Messages
20,194
Do I hear "Does XHCI work"?

I'll just leave this here:
WP_20160305_22_03_18_resized.jpg


XHCI FTW.jpg


XHCI.PNG


Big thumbs up!
 

SlackerDude

Explorer
Joined
Feb 1, 2014
Messages
76
No, everything is the same, including jails and plugins. It's only in 10 that jails will be created inside a VM dedicated to the purpose and everything else will be hosted via VMs and Docker Containers.
So... I'm safe in switching over to the 9.10 Nightlies train...after having taken snapshots. My prettier, smarter half tells me I'm a dead man if I lose plex. :smile:
 
J

jkh

Guest
So... I'm safe in switching over to the 9.10 Nightlies train...after having taken snapshots. My prettier, smarter half tells me I'm a dead man if I lose plex. :)
Yes, the situation with 9.10 plugins/jails is completely unchanged. We've been conflating 10 and 9.10 topics here (that was probably a mistake) and what's in 10 bears no resemblance to what's in 9.10. Also, in 10 you will have at least 4 different plex plugins, JFYI. :)
 

SlackerDude

Explorer
Joined
Feb 1, 2014
Messages
76
Yes, the situation with 9.10 plugins/jails is completely unchanged. We've been conflating 10 and 9.10 topics here (that was probably a mistake) and what's in 10 bears no resemblance to what's in 9.10. Also, in 10 you will have at least 4 different plex plugins, JFYI. :)
No worries, but thanks for the clarification/confirmation. One of my concerns has been what form of migration would be involved, going to 10. If current jails will transmorgrify into true VMs, then people like me should have nothing to fear. :smile: Wow, 4 different plex plugins? If there is a place to read up on this, I'd love to see it, just to whet the appetite. I'm what most here would consider novice level, but am trying to absorb & learn as I go. I currently employ 4 of the plugins: plex, sickrage, couchpotato & transmission, and am about to tackle a manual setup of a FEMP with Wordpress for a very small website and blog.
 
J

jkh

Guest
No worries, but thanks for the clarification/confirmation. One of my concerns has been what form of migration would be involved, going to 10. If current jails will transmorgrify into true VMs, then people like me should have nothing to fear. :) Wow, 4 different plex plugins? If there is a place to read up on this, I'd love to see it, just to whet the appetite. I'm what most here would consider novice level, but am trying to absorb & learn as I go. I currently employ 4 of the plugins: plex, sickrage, couchpotato & transmission, and am about to tackle a manual setup of a FEMP with Wordpress for a very small website and blog.
Again, we should probably move this to another thread since discussing 10 issues in a 9.10 thread is only going to confuse people, but we're not thinking of moving each existing jail into its own VM, but rather moving all existing 9.3 jails into a single FreeBSD 9.3 VM in 10. To study up on the array of potential 10 Containers, look at DockerHub. :)
 

nanopete

Dabbler
Joined
Nov 20, 2014
Messages
47
The upgrade from 9.3 to 9.10 was easy as pie with one minor exception: ssh is complaining of missing ciphers...

Mar 4 13:07:40 freetest sshd[8037]: fatal: Unable to negotiate with 192.168.150.104: no matching cipher found. Their offer: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour [preauth]
Mar 4 13:07:40 freetest kernel: <118>Mar 4 13:07:40 freetest sshd[8037]: fatal: Unable to negotiate with 192.168.150.104: no matching cipher found. Their offer: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour [preauth]
Mar 4 13:07:40 freetest kernel: <118>Mar 4 13:07:40 freetest sshd[8037]: fatal: Unable to negotiate with 192.168.150.104: no matching cipher found. Their offer: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour [preauth]

Everything else seems to be working like a champ.
I also had a problem with a replication task between a Freenas 9.3 PUSH and a Freenas 9.10 PULL when the encryption cipher is set to none, that worked between 9.3 PUSH and 9.3 PULL.
It's not a problem setting Encryption Cipher to standard, as it should be, but just for your information.
I used to put encryption cipher to none when making a new replication task and change to standard after the first replication finished.
 
Joined
Feb 2, 2016
Messages
574
What's the client in this case? I haven't observed SSH problems with any of my test machines, so this is a little surprising!

I'm using Secure Shell Client 3.2.9 from SSH Communications (ssh.com). It worked fine with FreeNAS 9.3. It's an older client for sure. More modern clients don't seem to have a problem.

So I don't have to change my beloved ssh client, I added these lines to /etc/ssh/sshd_config and it works again...

Code:
Ciphers 3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,blowfish-cbc,cast128-cbc,chacha20-poly1305@openssh.com
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521


Not the best of solutions because I'm sure some of those ciphers have been depreciated but quick.

Cheers,
Matt
 
J

jkh

Guest
I also had a problem with a replication task between a Freenas 9.3 PUSH and a Freenas 9.10 PULL when the encryption cipher is set to none, that worked between 9.3 PUSH and 9.3 PULL.
Unfortunately, the SSH folks have removed support for the None cipher in later revisions so when we updated our ports, we lost that. We're going to create some other mechanism for "zero overhead replication" in 10 and then back-port it to 9.10, but that's not going to happen right away, so for now, just consider the None cipher dead and use one of the "cheaper" ciphers SSH offers. Sorry, but this one was just outside our control!
 

Arwen

MVP
Joined
May 17, 2014
Messages
3,611
It's annoying that SSH folks removed the None cipher. Quite useful for internal network
copies of large media files. They don't mater if someone steals them, but does mater how
long it takes to copy large, (400MB to 5GB SD), video files.
 
Status
Not open for further replies.
Top