From nobody Fri May 22 22:13:22 2026 X-Original-To: questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gMfgS1NNWz6frpJ for ; Fri, 22 May 2026 22:13:40 +0000 (UTC) (envelope-from polarian@polarian.dev) Received: from mail.polarian.dev (mail.polarian.dev [IPv6:2001:8b0:57a:2385::8]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4gMfgR3L5rz3nJF for ; Fri, 22 May 2026 22:13:39 +0000 (UTC) (envelope-from polarian@polarian.dev) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=polarian.dev header.s=polarian header.b=t60bu4F2; dmarc=pass (policy=reject) header.from=polarian.dev; spf=pass (mx1.freebsd.org: domain of polarian@polarian.dev designates 2001:8b0:57a:2385::8 as permitted sender) smtp.mailfrom=polarian@polarian.dev DKIM-Signature: v=1; a=rsa-sha256; c=simple/relaxed; d=polarian.dev; s=polarian; t=1779488008; bh=4Vwx+ewKCdgxIkzBjXy4UrR0j+ua+8YH1OLLABx+hRY=; h=Date:From:To:Subject:In-Reply-To:References; b=t60bu4F2IphLPt3K7CYyP9F6wEwK7KHMikzJn03aOQ/6ThrGHUSeGOwk3fm+0ixOy qeWjhU5OiEMtouKjNjajoLBx1FuLpS+O3ZJ2TvijGT6TLSA0f/pX8U2gxkCUl2xXPm HxiFwM/ks87y86+0Xp/p3EoG0bZyIDDEYsWQXB2Q= Date: Fri, 22 May 2026 23:13:22 +0100 From: Polarian To: questions@freebsd.org Subject: Re: Terminal server with consumer hardware Message-ID: <20260522231322.3a0dbd36@Hydrogen> In-Reply-To: References: <20260521233422.001d364f@Hydrogen> <20260522154731.4cad8798@Hydrogen> X-Mailer: Claws Mail 4.4.0 (GTK 3.24.52; amd64-portbld-freebsd15.0) List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-questions@freebsd.org Sender: owner-freebsd-questions@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Spamd-Result: default: False [-3.49 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.99)[-0.993]; MID_RHS_NOT_FQDN(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[polarian.dev,reject]; R_SPF_ALLOW(-0.20)[+ip6:2001:8b0:57a:2385::8]; R_DKIM_ALLOW(-0.20)[polarian.dev:s=polarian]; MIME_GOOD(-0.10)[text/plain]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:20712, ipnet:2001:8b0::/34, country:GB]; RCPT_COUNT_ONE(0.00)[1]; MLMMJ_DEST(0.00)[questions@freebsd.org]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_NONE(0.00)[]; DKIM_TRACE(0.00)[polarian.dev:+] X-Spamd-Bar: --- X-Rspamd-Queue-Id: 4gMfgR3L5rz3nJF Hey, > It's been quite a while since I looked at this, but AFAIK FreeBSD > can't make use of USB serial devices for the system console. The man pages cause some confusion here then, as freebsd.efi(8) explicitly state that if you do not have support for it within your uefi bios, maybe this is just me getting confused. > I.e. there must be an actual serial port, recognized by the bios and > presented to the OS. Something like this, if found: > > $ dmesg | grep ^uart[0-9]: > uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on > acpi0 uart0: console (115200,n,8,1) Ah so it must be presented by acpi, in which case this requires firmware support within the motherboard full stop. > The most I was able to work out with a USB serial device (e.g. on an > old Intel NUC without a native serial port) was starting a login: > getty on ttyU*, but that's only a terminal, not a system console. Yeah this is pretty easy to do, this is what im doing currently, but it doesn't help with a FDE encrypted server. I am starting to think FDE encrypted servers are too much hassle, but then again they provide good security when it comes to physical security of data at rest. The man page still doesn't make sense on this though. I wonder who would be a good person to ask about it, because if it isn't possible then surely the man page needs improvements for being misleading or not clear enough for idiots like me :p Thank you, -- Polarian Jabber/XMPP: polarian@icebound.dev