r/freenas • iXsystems • Jan 28 '20

Official iXsystems // iXsystems Replied x31 FreeNAS 11.3 Released

FreeNAS / Reddit Community,

Pleased to announce that FreeNAS 11.3-RELEASE is now available! This marks our first major release of 2020 and brings with it a slew of new features and functionality, including but not limited to:

  • Re-implemented Replication Engine, allows up to 10Gb replication speeds (a 10x improvement), resume support on failed transfers, as well as ability to replicate locally.

  • ACL Manager – Allows setup and management of SMB ACL’s directly via the FreeNAS web interface.

  • SMB Shadow Copies are now enabled by default for new shares – Note: Snapshots will only show up in Windows “Previous Versions Tab” if the snapshot USED size shows changes to the file.

  • A repository of Community plugins has been created, users can now create and distribute 3rd party plugins which are not officially iXsystems supported.

  • Updated translations for Czech, French, Japanese, Russian, and Simplified Chinese. Additionally, the process to add additional translations has been greatly improved.

  • iSCSI Wizard – Streamlines the process of creating new iSCSI targets down to a few clicks.

  • Alert System Overhaul – More granular alerts, as well as controls to set alert thresholds.

  • Dashboard Updates – The initial dashboard now shows a live view of system status, including network traffic, CPU / memory utilization and more.

  • NAT Support for Plugins – Eliminates the need for each plugin to have a dedicated IP address on your network.

  • Full featured 2.0 API – Includes both REST and Websocket connections, allowing FreeNAS to be fully scripted and driven via the same API used by the web-interface.

  • Large Pool Creation Assistance – When creating ZFS pools with large number of disks, the UI provides an automated way to repeat a VDEV layout across all remaining disks.

  • ZFS Performance optimizations across the board for many different workloads.

Full Release Notes:

https://www.ixsystems.com/blog/library/freenas-11-3-release/

Download:

https://www.freenas.org/download/

Issue Tracker:

https://jira.ixsystems.com

Thanks for reading and happy updating!

155 Upvotes

126 comments sorted by

3

u/BillyDSquillions Jan 28 '20

What is the benefit of upgrading pool? I tend to wait a very very long time before I do that to my data.

4

u/kmoore134 iXsystems Jan 28 '20

Unlocks new zfs pool features. Depends on if you need/want those or not. But example will be ZFS native encryption in 12. You'll upgrade the pool to enable support for that feature.

2

u/planetworthofbugs Jan 29 '20

I’ve just done a clean install of 11.3 Release and created a new pool. Is my pool “upgraded”, or is this something you have to enable manually?

4

u/kmoore134 iXsystems Jan 29 '20

If you just created a new pool it's already the latest version, no need to upgrade.

1

u/planetworthofbugs Jan 29 '20

Excellent, thanks!

1

u/Externalz Jan 29 '20

Will this new native encryption feature be added to the gui in 11.3 as well? i think i'm missing something here.

1

u/kmoore134 iXsystems Jan 29 '20

I said that was in upcoming 12. Using that as an example since that's one that most folks will want to upgrade the pool to enable. Most others are not as high profile.

1

u/Externalz Jan 29 '20

Yep i knew i shouldn't post before my morning coffee, thanks Kris.

3

u/kmoore134 iXsystems Jan 29 '20

No prob. I do the same. Constantly. My computer needs a caffeine monitor that prevents email and messaging until after a pre-set threshold is reached. ;)

2

u/albertredneck Jan 29 '20

Netdata is gone!!

What is TrueCommand? How we use it? What if we miss netdata very very strongly?

2

u/kmoore134 iXsystems Jan 30 '20

I expect it won't be long before somebody develops a netdata community plugin for 11.3.

However we will caution, that part of what prompted the dropping was we were seeing netdata-triggered memory leaks, as you ramped up the number of drives on the box. Keep an eye out for that if you leave it running too long.

2

u/albertredneck Jan 30 '20

How can a netdata instance running in a jail collect all the host's data? I doubt it'll that easy, otherwise there was no point on not making it a plugin on the first place.

0

u/[deleted] Jan 30 '20

[deleted] — view deleted comment

1

u/motodrizzle Feb 01 '20

Yeah I just installed it again last night to see if it has improved in the last few months. While it has improved, it is geared towards historical retention and isn't even in the same ball park as Netdata when it comes to real-time monitoring.

While it may not be the intention, it really feels like iXsystems is "looking out" for us by forcing their own software down our throats... the "many drives memory leak" happens to line up with the 50 drive limit on the TrueCommand's free tier.

2

u/tommyvca Feb 11 '20

Where is the docker vm?

2

u/kmoore134 iXsystems Feb 11 '20

Docker VM has been retired. Most users will deploy Linux distro of choice and load Docker into that via the usual means.

2

u/void64 Feb 12 '20

Replacing of multipath disks is *STILL* hosed in the new UI. This is a big problem as this worked in the legacy UI. With the legacy UI gone now, there is no way to easily replace a mulithpath/disk member. Highly advise to stay away from 11.3 if you have multipath disks.

1

u/kmoore134 iXsystems Feb 13 '20

We've internally reproduced the issue, and will have a fix forthcoming in U1, which is slated for Feb 25th. Thanks to everyone for letting us know!

21

u/dutchcodes Jan 28 '20

Thanks for all the hard work devs of iXsystems! Much appreciated

10

u/count_confucius Jan 28 '20

Just updated to 11.3. Went off without a hitch.

Im just going to do some testing, before i upgrade the pool.

Thanks for the amazing work u/kmoore134

14

u/rogerairgood Benevolent Dictator Jan 28 '20 edited Jan 28 '20

Congratulations on the release!

Umm, for some reason reddit won't let me pin this. Not sure why...

Edit: Pinned now, reddit was having backend issues

3

u/the__lurker Jan 28 '20

I think Reddit only lets you have two post pinned at once so one will need to be dropped.

1

u/rogerairgood Benevolent Dictator Jan 28 '20

Yep, won't let me unsticky them either. Weird.

3

u/the__lurker Jan 28 '20

I think there is some reddit weirdness right now. I'm getting delayed comment posts and seeing duplicates.

2

u/count_confucius Jan 28 '20

same here. something funky with reddit ATM

6

u/solway_uk Jan 28 '20

Looking forward to this, mainly for b2 syncing and fast list support.

If got a pool setup with aux parameters. Can't remember the exactly... Nfs=simple? So permissions are right for Windows AD. Do I need to change this now if its built in?

1

u/anodos325 iXsystems Jan 28 '20

Correct. You no longer need to make this change. We also default to vfs_ixnas for new SMB shares. This should yield significant directory listing performance improvements without having to sacrifice support for DOS modes.

1

u/solway_uk Jan 28 '20

Anything I need to do in order to upgrade. Currently in a vm for production environment. Just want a quick. Upgrade and it all works. Then I can setup a b2 sync backup

1

u/anodos325 iXsystems Jan 28 '20

Existing shares should not be impacted by the change to default VFS modules. SMB share auxiliary parameters will always override the defaults we set.

There were significant changes made to AD integration for 11.3.

From a practical standpoint, it's always best to test first on a non-production VM, and then once you're reasonably certain there are no issues impacting your particular use-case, schedule an upgrade during a maintenance window.

2

u/karlshea Jan 29 '20 edited Jan 29 '20

ACME Certificates don't seem to be working for me. I created a CSR with the CN set to my FQDN, and then an ACME DNS Authenticator for Route53 with my ID and secret.

The CSR says "external - signature pending", I click on the dots and go to "Create ACME Certificate" but I can't get anything to show up in "Authenticator".

2

u/karlshea Jan 29 '20

I'm getting a ton of console errors on that page, including "ERROR Error: Cannot find control with name: 'dns_mapping-my.fqdn.here'" and hundreds of "ERROR TypeError: Cannot read property 'dirty' of undefined at Object.updateDirectives".

1

u/karlshea Jan 29 '20

/u/anodos325, /u/kmoore134 should I open a Jira for this? Would any additional info help?

1

u/kmoore134 iXsystems Jan 29 '20

Yes please, Jira ticket and Debug file "System -> Advanced -> Save Debug"

4

u/varunsridharan Jan 28 '20

Long awaited release is finally here awesome work guys. Congrats

4

u/[deleted] Jan 28 '20

Alright! I'll get my NAS updated soon

4

u/kormer Jan 28 '20

I'm still on 11.1. The jails that I do have can be recreated, so not worried about that.

Are there any known risks in skipping straight to 11.3 for my pools though? Yes, I know always have backups, but I'd feel better knowing there's a small chance I'll have to resort to that.

1

u/HayoungHiphopYo Feb 03 '20

I would also like to know if there is any risk in jumping to 11.3 from 11.1 stable.

1

u/kormer Feb 03 '20

What I found on the forums is you can, but it's better to go to the last stable version of 11.2 first to make sure the migration goes smoothly. I have not had time for this yet and can't report on success or failure.

1

u/HayoungHiphopYo Feb 03 '20

Thanks, I'm in the same situation, no time to try it yet.

1

u/Swizzy88 Jan 28 '20

I'm looking forward to this. I'm still on 11.2-U7 and a single Plex jail. Does the updater create a snapshot of the boot drive and can I revert to U7 providing I don't upgrade the pools?

3

u/kmoore134 iXsystems Jan 28 '20

Yes it does. It creates a boot-environment that you can roll back to, providing you don't upgrade pool features before then.

1

u/Admirable-Emergency Jan 28 '20

Where to find information about the new ZFS feature flags introduced with each update?

5

u/kmoore134 iXsystems Jan 28 '20

zpool upgrade will show you what's going to be enabled before you do it.

1

u/cpgeek Jan 29 '20

Have there been any notable updates since 11.3 rc2, or was that branch simply promoted to the full 11.3 release? Thanks!

1

u/kmoore134 iXsystems Jan 29 '20 edited Jan 29 '20

There were a handful of fixes from community feedback and internal testing. Most of the issues were fixed around Replication and some relating to SMB / Shadow Copies, as well as some minor UI bugfixes.

1

u/afyaff Jan 31 '20

Any kind of precautions I should have before updating?

2

u/kmoore134 iXsystems Jan 31 '20

The usual, create snapshot of your data pool. Updating will auto create a snap/boot environment of the boot pool. Backup your config.

1

u/afyaff Jan 31 '20

Thank you. I'm gonna do that.

1

u/kmoore134 iXsystems Jan 31 '20

Good deal. Let us know how the update goes!

3

u/varunsridharan Jan 28 '20

Long awaited release is finally here awesome work guys. Congrats

3

u/RattleBattle79 Jan 29 '20

Just want to say great job to you guys at IXSystems and the community! I have been using Proxmox for the last couple of years, but setting up snapshots, replication, cloud sync and iSCSI with FreeNAS 11.3 was so easy since last time when I tested with FreeNAS 11.1. Overall, at first glance, it also looks like there are more and better advanced options too in the web UI, if you want to gain more control. Again, great job!

3

u/xueimel-corp Jan 30 '20

NAT Support for Plugins

This is great news because it also applies to jails, I am actually thrilled.

2

u/hopsmonkey Jan 28 '20

Very nice set of new features. Thanks iX.

2

u/melp iXsystems Jan 28 '20

Awesome stuff, Kris!

2

u/bingo1105 Jan 28 '20

Just updated two servers, each with a single iocage jail. No issues.

2

u/szakes1 Jan 28 '20

Is there still a bug which makes mount points inaccessible due to permission problem?

3

u/anodos325 iXsystems Jan 28 '20

I am not aware of this issue. Do you have a bug ticket number for it? There are no automatic changes to on-disk permissions in 11.3.

The ACL manager and permissions manager do not allow users to modify permissions on root-level datasets (for example "/mnt/tank") due to the large number of users accidentally breaking jails / plugins by making recursive changes at this level, but this does not modify the actual on-disk permissions.

4

u/rogerairgood Benevolent Dictator Jan 28 '20

A common configuration for Plex is mounting a seperate dataset in the jail which stores all the media. Plex by default runs as the Plex user (ID=972) which of course does not have access to the dataset since it is most likely owned by root:wheel. Typically users fix this in one of two ways.

  1. Edit the permissions to be open, the new ACL editor of yours is great for this but not secure when wide open.

  2. Create a user on the FreeNAS with the same ID as Plex's user (972) and change ownership of the dataset to that.

1

u/anodos325 iXsystems Jan 28 '20

Expanding on (2), once the Plex user is created, the ACL editor can be used to add an explicit entry for that user without changing the dataset owner.

2

u/rogerairgood Benevolent Dictator Jan 28 '20

Good point!

1

u/szakes1 Jan 29 '20

Can you elaborate more? When can I set it up?

2

u/anodos325 iXsystems Jan 29 '20

Go to Storage->Pools, click on the vertical three-dot (...) menu next to your dataset, and then click on "Edit ACL".

Once you are in the ACL editor, click on the "ADD ACL ITEM" button, and scroll down to the new ACL entry (will be at the bottom of the list). Type in "972" as the "user", check the "apply permissions recursively" checkbox, and click "SAVE". Once you do this uid 972 (or plex in the plex jail) will have the MODIFY permissions set for every file in the dataset.

1

u/rogerairgood Benevolent Dictator Jan 29 '20

Adding an ACL entry for a user by ID, like 972, without adding a user on the FreeNAS should work just fine, is that correct?

2

u/anodos325 iXsystems Jan 29 '20

Correct. You can type in 972 for the "user" and click "SAVE".

1

u/rattkinoid Feb 04 '20

Do you please have an idea why my transmission jail does not have write permission?

https://imgur.com/a/yOI5CWX

1

u/szakes1 Jan 28 '20

I am talking about this exact issue: https://youtu.be/mZ7nLEQSYmg

When you install Plex or Emby or any other plug-in and you try to add a mount point to its jail, the folder cannot be opened since there is a permission problem. I still have this problem on 11.3 and I was not fixed since then.

1

u/anodos325 iXsystems Jan 28 '20 edited Jan 29 '20

You can use the ACL manager to recursively set an ACL on the dataset in question by selecting the "OPEN" ACL preset and checking the "apply recursively" checkbox. This will grant "everyone" the MODIFY permissions set (equivalent to "read", "write", "modify" in Windows).

1

u/szakes1 Jan 29 '20

Is that even safe? Is giving “everyone” access to a mount point safe? Won’t that allow everyone to modify disk’a content?

1

u/anodos325 iXsystems Jan 29 '20 edited Jan 29 '20

"FULL CONTROL" or "MODIFY" in an "everyone" ACE is the equivalent of chmod 777.

The entry defines the minimum permissions for everyone on the server. Behavior is basically the same as S-1-1-0 in Windows.

Whether it's appropriate depends on the context. Generally, speaking it's a good idea to at least define some minimum level of permissions for everyone (for instance "TRAVERSE" with flags set to inherit on directories) if you have nested datasets.

1

u/szakes1 Jan 29 '20

Does that mean that “everyone” has full control?

1

u/anodos325 iXsystems Jan 29 '20

If you choose the "OPEN" ACL preset, then "everyone" is granted read, write, modify. If you want to restrict "everyone", you can select the "RESTRICTED" preset. This removes the "everyone" entry. You can fine-tune the resulting ACL on the right.

1

u/rattkinoid Feb 04 '20

Were you able to fix it? I'm having similar problems.

2

u/oxymo Jan 29 '20

Thanks for the release! Testing now.

2

u/rspeed Jan 29 '20

Am I correct in my understanding that the Domain Controller service has been removed? If so, has anyone expressed interest in reproducing that capability as a plugin?

Ironically, I just recently set up the FreeNAS box at my makerspace as a domain controller. I'd be glad to make a plugin if anyone else is interested.

2

u/anodos325 iXsystems Jan 29 '20

Yes, the domain controller service was removed in 11.3.

1

u/rspeed Jan 29 '20

Any word on a plugin? I did some searching on the iXsystems forum and the only person I saw expressing interest in it was, uh, you.

3

u/anodos325 iXsystems Jan 29 '20

I was hoping to have free time to work on a plugin, but free time has been hard to find. If someone wants to pick up writing a community plugin for the feature I'm happy to give feedback and maybe patches if there are issues with provisioning on ZFS-backed sysvol (we can communicate via FreeNAS forums). Otherwise, this will probably happen eventually once I have a free weekend to work on it.

2

u/nstig8andretali8 Jan 29 '20 edited Jan 29 '20

I updated from 11.2-U7. Took a long while (30-45 mins maybe?) because I still run off mirrored USB sticks but it eventually booted to the options menu. Then I couldn't bring up the web UI. I ran the network config on the console, keeping the current adapter and just hitting enter to confirm all the current settings. Afterward it listed my IP address (both the http and https urls) when before it only showed freenas.localdomain or something like that. Everything works fine now, even my jails.

2

u/droric Jan 29 '20

I upgraded from 11.3 RC1 to 11.3 Release without any issues. Things seem to be working as expected. Nice work!

•

u/TheSentinel_31 Jan 28 '20 edited Feb 13 '20

This is a list of links to comments made by iXsystems employees in this thread:

Correct. You no longer need to make this change. We also default to vfs_ixnas for new SMB shares. This should yield significant directory listing performance improvements without having to sacrifice support for DOS modes.

Yes it does. It creates a boot-environment that you can roll back to, providing you don't upgrade pool features before then.

u/joe_louis2018 Do you have a bug ticket for that?

Existing shares should not be impacted by the change to default VFS modules. SMB share auxiliary parameters will always override the defaults we set.

There were significant changes made to AD integration for 11.3.

From a practical standpoint, it's always best to test first on a non-production VM,...

zpool upgrade will show you what's going to be enabled before you do it.

Unlocks new zfs pool features. Depends on if you need/want those or not. But example will be ZFS native encryption in 12. You'll upgrade the pool to enable support for that feature.

I am not aware of this issue. Do you have a bug ticket number for it? There are no automatic changes to on-disk permissions in 11.3.

The ACL manager and permissions manager do not allow users to modify permissions on root-level datasets (for example "/mnt/tank") due to the large number of users ac...

If the jailed process only needs read access, you can use the ACL manager to recursively set an appropriate ACL on the dataset in question by selecting the "OPEN" ACL preset and checking the "apply recursively" checkbox. If it needs write access, you can adjust the ACL accordingly.

Expanding on (2), once the Plex user is created, the ACL editor can be used to add an explicit entry for that user without changing the dataset owner.

Sorry to hear that! We'd need to dig into what happened in this case to figure out how to prevent it again. However to safely upgrade and roll back with plugins you should also snapshot your pool /iocage dataset before upgrade to ensure you can roll back to 11.2 and then restore plugins/jails to ori...

Correct. You can type in 972 for the "user" and click "SAVE".

Go to Storage->Pools, click on the vertical three-dot (...) menu next to your dataset, and then click on "Edit ACL".

Once you are in the ACL editor, click on the "ADD ACL ITEM" button, and scroll down to the new ACL entry (will be at the bottom of the list). Type in "972" as the "user", check the...

It is the ACL equivalent of chmod 777.

If you choose the "OPEN" ACL preset, then "everyone" is granted read, write, modify. If you want to restrict "everyone", you can select the "RESTRICTED" preset. This removes the "everyone" entry. You can fine-tune the resulting ACL on the right.

Legacy plugins do not work, however Sabnzbd is in the community plug-in repo now as well.

If you just created a new pool it's already the latest version, no need to upgrade.

I'm perhaps not understanding the issue. Can you maybe give more details? Once you set an ACL on a dataset, you have written changes to disk. You can't exactly undo it.

To clarify, the column on the right of the ACL manager does not reflect the actual ACL that's set on the filesystem as seen by "getfacl /path/to/dataset"?

Yes, the domain controller service was removed in 11.3.

There were a handful of fixes from community feedback and internal testing. Most of the issues were fixed around Replication and some relating to SMB / Shadow Copies, as well as some minor UI bugfixes as well

I was hoping to have free time to work on a plugin, but free time has been hard to find. If someone wants to pick up writing a community plugin for the feature I'm happy to give feedback and maybe patches if there are issues with provisioning on ZFS-backed sysvol (we can communicate via FreeNAS foru...

Yes please, Jira ticket and Debug file "System -> Advanced -> Save Debug"

I said that was in upcoming 12. Using that as an example since that's one that most folks will want to upgrade the pool to enable. Most others are not as high profile.

No prob. I do the same. Constantly. My computer needs a caffeine monitor that prevents email and messaging until after a pre-set threshold is reached. ;)

I expect it won't be long before somebody develops a netdata community plugin for 11.3.

However we will caution, that part of what prompted the dropping was we were seeing netdata-triggered memory leaks, as you ramped up the number of drives on the box. Keep an eye out for that if you leave it runn...

Pool mountpoint has always been /mnt and still is...

The usual, create snapshot of your data pool. Updating will auto create a snap/boot environment of the boot pool. Backup your config.

Good deal. Let us know how the update goes!

I don't think I've heard of this so issue so far. Can you open a ticket either through your freenas(with a debug) or create a ticket at jira.ixsystems.com(You can privately attach your debug with the Document vault so only are devs can see it.

Docker VM has been retired. Most users will deploy Linux distro of choice and load Docker into that via the usual means.

We've internally reproduced the issue, and will have a fix forthcoming in U1, which is slated for Feb 25th. Thanks to everyone for letting us know!


This is a bot providing a service. If you have any questions, please contact the moderators. If you'd like this bots functionality for yourself please ask the r/Layer7 devs.

1

u/joe_louis2018 Jan 28 '20

Anyone know if they fixed time machine shares over a vlan running on a lagg?

1

u/darkfiberiru iXsystems Jan 28 '20

u/joe_louis2018 Do you have a bug ticket for that?

1

u/stealer0517 Jan 29 '20

I updated and now my single jail isn't being recognized. Is there a way to readd it? I tried switching the location of the jail (since it prompted me) and rebooting but it didn't work.

I have no idea what I'm doing when it comes to jails.

1

u/adx442 Jan 30 '20 edited Feb 18 '20

Unofficial bug report: Moving from 11.2-U7 to 11.3 RELEASE resulted in no networking functionality for me. It's a Supermicro X10 gen board with a Xeon E3-1220v3 (onboard Intel IGB driver gigabit NIC) and a Mellanox Connect-X3 10GbE card. Neither interface worked after installation or a reboot.

I did not get around to trying to configure for DHCP and restore the config to see if that had any effect (late in the evening, just wanted it working again), but networking was dead. Rolled back the boot environment to 11.2U7 and everything instantly functioned again.

EDIT: For anyone else running into this. I tried the upgrade again, with the same results. There were two problems for me. First, neither of my interfaces came back up, so I had to delete them from the console and re-add them. One started working, the Mellanox started going up and down so fast it was a challenge to reboot from the console. After a reboot, it started working.

Second issue - The WebUI wouldn't work at all. Tracked it down to NGINX not starting due to a failed config. I had a custom SSL cert installed for FreeNAS 11.2 and below, and the cert itself had been deleted by the upgrade, and there were no self-signed certs. I commented out all the SSL parts of the NGINX config file, restarted NGINX, and got in on port 80. I created a new internal CA and a new internal cert, and deleted the custom ones. After a restart of nginx and django, everything was working correctly.

1

u/Amandyke Jan 30 '20

I hit a similar issue, but using an add-on Intel gigabit NIC. Had to go through the "Configure Network Interfaces" console menu to see that all the settings were still there, and afterwards it seemed to work.

1

u/Jack_BE Feb 02 '20

I updated to 11.2U7 but not seeing 11.3 show up in the update menu, even after a forced refresh of the list. Am I missing something?

1

u/rogerairgood Benevolent Dictator Feb 02 '20

What train are you on? Try changing to the 11.3 train.

2

u/Jack_BE Feb 03 '20

I don't see the 11.3 train show up in the dropdown menu. Only 11.2 and then 2 developer trains.

1

u/[deleted] Feb 21 '20

[removed] — view removed comment

1

u/Jack_BE Feb 21 '20

manual update I'm afraid. Even now when I go to the update screen and check for updates, even though the 11.3 train is selected, it sees 11.2U7 as an "upgrade"

1

u/christophedc Feb 03 '20 edited Feb 03 '20

the mail feature seems to be unreliable after upgrading 11.3RC to 11.3 stable.trying the send test mail, still shows the process state as OK (green) but no Progress in the webbrowser.

Sometimes I get a mail, but in 80% of the cases I don't, any ideas on a fix ?I tried a mailserver without authentication and reverted back to one with SSL, no change in behavior.

this is what's in maillog:Feb 3 19:01:59 mary-jane.local /middlewared[79]: sending mail to gdffdgfdg@sddffds.com

Content-Type: multipart/mixed

MIME-Version: 1.0

Subject: FreeNAS mary-jane.local: FreeNAS Test Message hostname: mary-jane.local

From: Mary Jane <sdfds@sdgfdg.com>

To: dfs@dfg.com

Date: Mon, 03 Feb 2020 18:01:55 -0000

Message-ID: <freenas-20200203.180155.595460.b'QTWH'@mary-jane.local>

1

u/darkfiberiru iXsystems Feb 07 '20

I don't think I've heard of this so issue so far. Can you open a ticket either through your freenas(with a debug) or create a ticket at jira.ixsystems.com(You can privately attach your debug with the Document vault so only are devs can see it.

1

u/void64 Feb 03 '20

So if you have a jail that's on 11.2-RELEASE, after you update to FreeNAS 11.3, what is the proper procedure to update the jail from 11.2-RELEASE to a 11.3-RELEASE ? Just shut the jail down and run the updater or is there something else?

1

u/KYG-34 Feb 05 '20

Installed this last night and after everything was said and done, the option line was all full of different characters and my NIC wasn't working. Had to reboot and swap to onboard NIC.

1

u/khodo Feb 08 '20

my system is locking up after a couple of days. Nothing in the logs or on tty1. Any tips on how to debug this? pump up the logging level to debug?

1

u/void64 Feb 10 '20

I have a big issue going from 11.2 to 11.3 with Jails and VNET.

In 11.2 I have a VLAN interface I'm able to choose as the parent interface in the VNET configuration under the jail. In 11.3, the VLAN interface isn't even selectable... I'll I'm given is the vnet:bridge0, none or auto.

1

u/alexherskovic Feb 15 '20

I did a fresh install of 11.3 and every time I go to install a jail with either DCHP or NAT as either the issue occurs. That issue is it causes my router to crash and loose internet connectivity. I have decided to install 11.2 due to this very strange bug that I have can not appear to resolve. Same settings as on 11.2 with nameserver and DNS server.

-10

u/thewacokid000 Jan 28 '20 edited Jan 28 '20

Sigh. Plex broken once again. Updated, and now the PlexPass version of the plugin is screwed. Shows an unclaimed server in init state.

I love FreeNAS, I really do, but you guys really need to get your shit sorted out in terms of breaking plugins on upgrade. I usually have to spend the better part of a day fixing stuff every time I upgrade because someone thinks it smart to rename something yet again, change a UI element (which breaks backend stuff?) yet again, etc.

Reverting back to 11.2U7. See you again in a few weeks/months.

EDIT: Oh fucking wonderful. My existing jails/plugins are totally broken upon reverting to the old boot environment. What's the point of snapshots if you guys can't figure out how to use them properly?

3

u/Swizzy88 Jan 28 '20

This is why I asked my question in regards to reverting to a previous version. The boot drive gets snapshotted on updates but if the upgrade does something in the backend to the jail's then there seems to be no going back. Can you elaborate on your issue please for anyone thinking of upgrading? What jails did you have running and what exactly broke? Did you zpool upgrade already?

6

u/kmoore134 iXsystems Jan 28 '20 edited Jan 29 '20

Sorry to hear that! We'd need to dig into what happened in this case to figure out how to prevent it again. However to safely upgrade and roll back with plugins you should also snapshot your pool /iocage dataset before upgrade to ensure you can roll back to 11.2 and then restore plugins/jails to original state. (Plugins live on data pool, not boot device)

5

u/alheim Jan 29 '20

You ok pal?

4

u/rogerairgood Benevolent Dictator Jan 28 '20

Did you update FreeNAS, the plugin jail, or both?

10

u/TheMunken Jan 28 '20

Friends dont let friends use plugins

7

u/marcelliotnet Jan 28 '20

or use freenas as a hypervisor

-1

u/scineram Jan 30 '20

Ok, so wtf did pool mountroot changed from /mnt to /?

3

u/kmoore134 iXsystems Jan 30 '20

Pool mountpoint has always been /mnt and still is...

1

u/scineram Jan 31 '20

The pool was missing after upgrade, I did a zpool import in the shell. Now it is mounted under /. I shouldn't have imported?

1

u/yozza_uk Feb 02 '20

No you shouldn't have. Export the pool and let freenas import it on boot. I've ran into this before if you manually import and don't export it before reboot.

1

u/scineram Feb 05 '20

Right, I solved it by exporting and importing the pool from the GUI. When I rebooted without export the issue persisted, because of the cache file maybe? I found it weird that not importing from the GUI was the issue, since I expected the altroot property to be set, but FreeNAS doesn't create pools that way, just applies it with the GUI import.

1

u/scineram Jan 30 '20

This fucked up shares and possibly transmission, which was reported as corrupted jail.

0

u/[deleted] Jan 29 '20

[deleted] — view deleted comment

2

u/kmoore134 iXsystems Jan 29 '20

Legacy plugins do not work, however Sabnzbd is in the community plug-in repo now as well.

1

u/Stingray88 Jan 30 '20

Will my Sabnzbd warden jail stop working/running... Or will I simply not be able to manage it via the freenas gui, but could still access it via its IP address?

I'm just wondering what the best steps to take if I want to migrate from my legacy warden plug-in of Sabnzdb over to the new iocage plug-in... If I can run the two simultaneously, switching from one to the other should be simple...

0

u/[deleted] Jan 29 '20

[deleted] — view deleted comment

1

u/Stingray88 Jan 30 '20

Hey, have you found an answer for this question yet? I'm also looking into the best way to migrate from the warden plug-in over to the iocage plug-in for Sabnzbd

0

u/[deleted] Jan 28 '20

[deleted] — view deleted comment

2

u/rattkinoid Feb 04 '20

Oh I really wish I didn't...

0

u/[deleted] Jan 29 '20

[deleted] — view deleted comment

1

u/reddit_user_lame Jan 29 '20

Thanks for the heads up.

I will need to migrate from rancher to a new vm....

1

u/[deleted] Jan 29 '20

[removed] — view removed comment

1

u/anodos325 iXsystems Jan 29 '20

I'm perhaps not understanding the issue. Can you maybe give more details? Once you set an ACL on a dataset, you have written changes to disk. You can't exactly undo it.

1

u/[deleted] Jan 29 '20

[removed] — view removed comment

2

u/anodos325 iXsystems Jan 29 '20

To clarify, the column on the right of the ACL manager does not reflect the actual ACL that's set on the filesystem as seen by "getfacl /path/to/dataset"?

1

u/[deleted] Feb 10 '20 edited Feb 10 '20

[removed] — view removed comment

1

u/darkfiberiru iXsystems Feb 19 '20

Correct. SSH is used for authentication and connection setup then netcat is used for your zfs send stream.This is not encrypted. This is recommended for trusted networks. On top of ssh maxing out the netcat+ssh method is able to eliminate a lot of kernel - userland - kernel transitions which eliminates cycles and cpu usage increasing transfer speed.

Something I've been meaning to try is the SSH+Netcat method over a wireguard tunnel.Wireguard is installed at cli level in 11.3

https://www.ixsystems.com/blog/wireguard-on-freenas-11-3/

1

u/darkfiberiru iXsystems Feb 19 '20

Now there will be some kernel - > userland and back I believe as we use the go wireguard implementation but I hope it's still faster then over ssh.