DRON4eg

How to compile and install latest realtek network driver in pfSense 2.4.x (FreeBSD 11.1)

Download FreeBSD 11.1 VMDK and create a VM with it as HDD.

Get FreeBSD source tree for your exact FreeBSD version and uncompress it to /usr/src:

fetch -o /tmp ftp://ftp.freebsd.org/pub/`uname -s`/releases/`uname -m`/`uname -r | cut -d'-' -f1,2`/src.txz
tar -C / -xvf /tmp/src.txz

Download latest Realtek network driver (you need to input an email address).

Made possible with this reddit post.

Install

wine regedit wine-breeze-dark.reg

Uninstall (Reset Wine color scheme)

wine regedit wine-reset-theme.reg

RKE2 commands

Updated on May 29 to accommodate etcd container not having /bin/sh available anymore.

Install

curl -sL https://get.rke2.io | sh
systemctl daemon-reload
systemctl start rke2-server

Nexus-Cleanup

Remove old releases from a Nexus3-repository

This Groovy-script will purge old versions (sorted by version-number) from a repository hosted on Nexus 3.x.

You can set the desired repository and a maximum amount of versions at the beginning of this script.

About

I faced bandwidth issues between a WG Peer and a WG server. Download bandwidth when downloading from WG Server to WG peer was reduced significantly and upload bandwidth was practically non existent.
I found a few reddit posts that said that we need to choose the right MTU. So I wrote a script to find an optimal MTU.
Ideally I would have liked to have run all possible MTU configurations for both WG Server and WG Peer but for simplicity I choose to fix the WG Server to the original 1420 MTU and tried all MTUs from 1280 to 1500 for the WG Peer.

Testing

On WG server, I started an iperf3 server
On WG peer, I wrote a script that does the following:
- wg-quick down wg0
Edit MTU in the /etc/wireguard/wg0.conf file

This (and related gists) captures how i created my docker swarm architecture. This is intended mostly for my own notes incase i need to re-creeate anything later! As such expect some typos and possibly even an error...

Installation Step-by-Step

Each major task has its own gist, this is to help with maitainability long term.

	version: '3.4'

	secrets:

	# Find your registration token at: "Your project" > "Settings" > "CI/CD" > "Runners settings" > "Specific Runners" (look for registration token)
	# Register it as `GITLAB_REGISTRATION_TOKEN`: `docker secret create GITLAB_REGISTRATION_TOKEN YOUR_REGISTRATION_TOKEN`
	GITLAB_REGISTRATION_TOKEN:
	external: true
	# Find your personal access token at: "Your user account" > "Settings" > "Access Tokens" > "Create personal access token" (for api)
	# Register it as `GITLAB_PERSONAL_ACCESS_TOKEN`: `docker secret create GITLAB_PERSONAL_ACCESS_TOKEN <YOUR ACCESS TOKEN>`

	:global fGoogleIpRange
	if (!any $fGoogleIpRange) do={ :global fGoogleIpRange do={
	:local addressList $1
	:local ipRangeUrl $2
	:local exceptionsJsonUrl $3

	# load JSON parser - https://github.com/Winand/mikrotik-json-parser
	/system script run JParseFunctions

	# read file into JSONIn

	#!/bin/sh
	# Assumes backup was made using sysupgrade -k -b <name>
	# Paste package list into /etc/backup/installed_packages.txt
	# Reinstalls packages (ignoring source descriptors "overlay" and "rom" using awk)
	opkg update
	cat /etc/backup/installed_packages.txt \| awk 'gsub(/overlay\|rom/, ""){print}' \| xargs opkg install
	# Clean up duplicate conffiles generated by OPKG
	rm /etc//-opkg
	echo "Done. Any duplicate conffiles created by OPKG have been deleted"

	# The full public facing url
	#root_url = %(protocol)s://%(domain)s:%(http_port)s/
	root_url = http://localhost:80/grafana/