What /etc/shells is and isn't

In traditional Unix, /etc/shells has only one true purpose: itlists programs that chsh will let you change your shell to (ifit lets you do anything). Before people are tempted to make otherprograms use this file for something else, it is important tounderstand the limits of /etc/shells . These include but arenot limited to:

  • Logins may have /etc/passwd entries that list other shells.For example, back when restricted shells were popular it wasextremely common to not list

Our tradeoffs on ZFS ZIL SLOG devices for pools

As I mentioned in my entry on the effects of losing a SLOG device , our initial plan (or really idea) for SLOGsin our new fileservers was to use a mirroredpair for each pool that we gave a SLOG to, split between iSCSIbackends as usual. This is clearly the most resilient choice for aSLOG setup, assuming that you have SSDs with supercaps; it wouldtake a really unusual series of events to lose any committed datain the pool.

On ZFS mailing lists that I've read,


I've now seen comment spam attempts from Tor exit nodes

As I mentioned on Twitter , I'verecently started seeing some amount of comment spam attempts fromIPs that are more or less explicitly labeled as Tor exit nodes.While I haven't paid exhaustive attention to comment spam sourcesover time, to the best of my awareness this is relatively newbehavior on the part of my comment spammers. To date not very manycomment spam attempts have been made from Tor IPs and other sourcesstill dominate.

Since none of the comment spam attempts have succeeded, I face notemptation


The effects of losing a ZFS ZIL SLOG device, as I understand them

Back when we planned out our new fileservers ,our plan for any ZIL SLOG devices we'd maybe eventually put on hotpools was to use mirrored SLOG SSDs, just as we use mirrored disksfor the main data storage. At the time when I put together theseplans, my general impression was that losing your SLOG was fatalfor your pool; of course that meant we had to mirror them to avoida single device failure destroying a pool. Since then I've learnedmore about the effects of ZIL SLOG


Autoplaying anything is a terrible decision, doubly so for video

Me on Twitter :

Youtube's autoplay behavior makes me so angry. No no no aughwrong. What a way to rudely demand attention.

The single thing I hate the most about Youtube is that its videosstart playing the moment you open one. On the one hand I can kindof see why Youtube does this; I'm sure they have plenty of userexperience studies that tell them that without autoplay peopledislike having to do an extra step to get what they came to Youtubefor and that a certain


Why filesystems need to be where data is checksummed

Allegedly (and I say this because I have not looked for primary sources)some existing Linux filesystems are adding metadata checksums and thenexcusing their lack of data checksums by saying that if applicationscare about data integrity the application will do the checksummingitself. Having metadata checksums is better than having nothing and adding data checksums to existing filesystems is likely difficult , but this does not excuse their viewsabout who should do what with checksums.

There are at least two reasons why filesystems should do datachecksums. The first is that data


ZFS should be your choice today if you need an advanced filesystem on Unix

The other day I ran down why ZFS is your only real choice on Linuxif you need an advanced filesystem .Well, it's not just Linux. I don't know enough about the landscapeof filesystems on other Unixes to confidently say it's your onlychoice on non-Linux Unixes, but I do think it is by far your bestchoice for this job .

Let's start with the first and biggest reason: ZFS works and hasfor years . At this point ZFS has been running


Forwarding access to only a subset of ssh-agent's identities

Suppose, not entirely hypothetically, that you have three machines:a laptop or desktop, some general access login servers thatyou do most of your sysadmin work from, and some fileservers that the login server mounts allsorts of things from. It's convenient to have passwordless ssh accessfrom the login server where I work to the fileservers so that I cando things like conveniently run a command on several of them atonce , but at the same time there are some security andconvenience issues.

If I use an


Choices filesystems make about checksums

If you are designing integrity checksums into a new filesystem or trying to adding them to an existing one, thereare some broad choices you have to make about them. These choices willdetermine both how easy it is to add checksums (especially to existingfilesystems) and also how much good your checksums do. Unfortunatelythese two things pull in the opposite direction from each other.

Two big choices are: do you have checksums for just filesystem metadataor both data and metadata, and are your checksums 'internal' (stored


Today on Linux, ZFS is your only real choice for an advanced filesystem

Yesterday I wrote about what I consider advanced filesystems arein general , namely filesystemswith the minimum feature of checksums so you know when your datahas been damaged and ideally with some ability to use redundancyto repair from damage. As far as I know, today on Linux there areonly two filesystems that are advanced in this way: btrfs and ZFS, via ZFSon Linux .

(If you don't care about disk checksums, you have lots of choiceamong perfectly good filesystems. I would just run ext4