Re: 9.1 - 9.2 upgrade, clang question

2013-10-03 Thread Volodymyr Kostyrko

03.10.2013 17:36, dweimer wrote:

When upgrading from 9.1 to 9.2 using source, is there any benefit to
rebuilding twice, due to the clang version change?  So that the second
buildworld/kernel is done from the updated clang 3.3, instead of the
clang 3.1 that was in FreeBSD 9.1?


During the buildworld first new compiler is built and then this new 
compiler is used to build everything else.


There may be other reasons to double build though... Maybe after 
cleaning system with `make delete-old`/`make delete-old-libs`?


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Port of icedtea-web-1.4_1, on 64 bit system might have a problem in the install process.

2013-10-02 Thread Volodymyr Kostyrko

01.10.2013 19:09, dweimer wrote:

I was struggling to get itweb-javaws to execute, due to it not being
able to find libjava.so, after running it through truss, I was able to
determine that its looking for the library under /usr/local/lib/amd64,
the file is located in /usr/local/openjdk7/jre/lib/amd64, I was able to
work around the problem by creating a symbolic link to point
/usr/local/lib/amd64 to /usr/local/openjdk/jre/lib/amd64, as the amd64
sub-directory didn't exist in /usr/local/lib.

This does make me wonder though, if I am just missing something from my
environment, that's causing this.  Or is the port install not doing
something that it should be doing?


Never faced this, itweb-javaws works for me without library shuffling 
but with one tiny fix to startup script: `exec ${COMMAND[@]}`.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Port of icedtea-web-1.4_1, on 64 bit system might have a problem in the install process.

2013-10-02 Thread Volodymyr Kostyrko

01.10.2013 21:12, dweimer wrote:

On 10/01/2013 11:09 am, dweimer wrote:

I was struggling to get itweb-javaws to execute, due to it not being
able to find libjava.so, after running it through truss, I was able to
determine that its looking for the library under /usr/local/lib/amd64,
the file is located in /usr/local/openjdk7/jre/lib/amd64, I was able
to work around the problem by creating a symbolic link to point
/usr/local/lib/amd64 to /usr/local/openjdk/jre/lib/amd64, as the amd64
sub-directory didn't exist in /usr/local/lib.

This does make me wonder though, if I am just missing something from
my environment, that's causing this.  Or is the port install not doing
something that it should be doing?

System is a new build of 9.2-RELEASE, compiled from source, source and
ports all built with clang where possible.


Just an update, this only worked the first time I executed it, now all I
get is:

java.lang.UnsatisfiedLinkError:
/usr/local/openjdk7/jre/lib/amd64/libsplashscreen.so:
/usr/local/openjdk7/jre/lib/amd64/libsplashscreen.so: Undefined symbol
jpeg_resync_to_restart


Try `-headless`. You wont see the shiny logo though...

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: General questions regarding FreeBSD 10

2013-09-28 Thread Volodymyr Kostyrko

27.09.2013 20:47, Nikolas Britton wrote:

7. Is Clang and the build system setup to automatically target cpu
instruction set? i.e. cc -target-cpu corei7-avx? Any performance
improvements of targeted binaries?


Nope, because you can't just ship a full list of packages for a full 
list of processors on the given architecture. You can build your 
world/packages though adding -march=native to CFLAGS.



10. How is the Java ecosystem on FreeBSD? Is LLVM specific to applications?
I make the assumption that the VM in LLVM is referring to something like a
JVM, for code abstraction.


No, LLVM is rather a backend with a lot of copmiler and toolchain stuff. 
There's a Java/.NET rewrite using LLVM named vmkit and I think JVM there 
is almost functional. But it's not even in the ports.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Files in /tmp directory - Is there any timelimit ?

2013-09-25 Thread Volodymyr Kostyrko

25.09.2013 11:34, Sreeram BS wrote:

Hi,
I am using FreeBSD 9. I would like to know as to what is the lifetime of
the files in /tmp directory. The general description says that these files
*may* not be preserved across a reboot. By this I interpret that if the
system is not rebooted, then these files will be there forever. But, just
wanted a confirmation to see if there is any lifespan (expiry-time)
attached with these files (ie the system would flush these files after some
days/months etc automatically).


Not by default. There's a clean-tmps periodic task which can be enabled 
@/etc/periodic.conf. It defaults to three days.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: trouble with PostgreSQL 9.2 on FreeBSD 10.0-CURRENT: superuser can not autheticate anymore with md5 password hash set

2013-08-13 Thread Volodymyr Kostyrko

13.08.2013 17:30, O. Hartmann wrote:

For the past I ran PostgreSQL 9.2 servers on FreeBSD 10.0-CURRENT
successfully. But by now, out of the blue, login as the database's
supervisor pgsql remotely isn't possible any more.

The appropriate lines in pg_hba.conf are:

local   all  pgsql md5
hostssl all  pgsql 0.0.0.0/0   md5

The funny thing is: when login locally without providing a password
(swap md5 to trust in the local line) and setting the password for
the role pgsql via

ALTER ROLE pgsql ENCRYPTED PASSWORD 'FooMe;


I guess ENCRYPTED means you are substituting FooMe with md5 hashed 
password correctly salted with role name as postgresql requires?



or doing the same via pgadmin3 from remotely by also swapping md5 to
trust in the line hostssl for global network, it seems I could
alter/change the password for the supervisor pgsql. But restoring the
password check by setting back md5 leaves me locked out!

By the way, this strange behaviour occurs on ALL(!) PostgreSQL 9.2
servers running on FreeBSD 10.0-CURRENT boxes.

Ports databases/postgresql-XXX as well as FreeBSD is as of the latest
sources and up to date.

What is going wrong?



--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: trouble with PostgreSQL 9.2 on FreeBSD 10.0-CURRENT: superuser can not autheticate anymore with md5 password hash set

2013-08-13 Thread Volodymyr Kostyrko

13.08.2013 17:30, O. Hartmann wrote:

For the past I ran PostgreSQL 9.2 servers on FreeBSD 10.0-CURRENT
successfully. But by now, out of the blue, login as the database's
supervisor pgsql remotely isn't possible any more.

The appropriate lines in pg_hba.conf are:

local   all  pgsql md5
hostssl all  pgsql 0.0.0.0/0   md5

The funny thing is: when login locally without providing a password
(swap md5 to trust in the local line) and setting the password for
the role pgsql via

ALTER ROLE pgsql ENCRYPTED PASSWORD 'FooMe;


I guess ENCRYPTED means you are substituting FooMe with md5 hashed
password correctly salted with role name as postgresql requires?


Silly me, that's wrong. ENCRYPTED only means that password will be 
stored encrypted on the disk. There's a side note about using ENCRYPTED 
password with postgres in the docs though:


Note that older clients might lack support for the MD5 authentication 
mechanism that is needed to work with passwords that are stored encrypted.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: if_bridge and ng_netflow

2013-08-12 Thread Volodymyr Kostyrko

10.08.2013 16:51, Fbsd8 wrote:

if_bridge is relatively new in FreeBSD. Netgraph precedes if_bridge and
is un-aware of if_bridge. Change your if_bridge definition to a
ng bridge definition and everything your trying to do should fall into
place.


ng_bridge lacks some if_bridge goodies like passing by traffic filtering 
and stp. However yes, ng_bridge works for me and I can compose a good 
bridge and even record netflow without data duplication.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Setup HP Laserjet 1120m over network with LPD

2013-08-12 Thread Volodymyr Kostyrko

06.08.2013 22:58, Juris Kaminskis wrote:

after several trials and errors and reading through FreeBSD handbook I am
at dead end on how to proceed further, hope someone can guide me.


I always use foomatic for such things, it's quite easier to set up. For 
example I have:


hplj2420d|lp|HP LaserJet 2420|:\
:af=/usr/local/etc/foomatic/lpd/hplj2420d.ppd:\
:lf=/var/log/lp-errs:\
:ppdfile=/usr/local/etc/foomatic/lpd/hplj2420d.ppd:\
:sd=/var/spool/lpd/hplj2420d:\
:lp=/dev/ulpt0:\
:if=/usr/local/bin/foomatic-rip:\
:sh:\
:mx#0:

I installed those ones:

print/foomatic-db-engine
print/foomatic-db-hpijs

This is local setup, but I think network setup can be done almost the 
same way. This printer was initially set up as a network printer but 
after Windows 7 emerged there were numerous problems with printing 
anything so I grabbed the box and converted it to lpd printer. Now 
everything works flawlessly for years.


In your case the key might be using correct filters to feed raw data to 
printer. Most winprinters doesn't know what ps is and require user to 
provide correct raw data.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


if_bridge and ng_netflow

2013-08-09 Thread Volodymyr Kostyrko

Hi all.

I have one machine with bridge configured. Recently I thinked about 
capturing all traffic on the bridge with ng_netflow.


1. ng_ether doesn't attach to bridge0 interface:

# ngctl list | grep ether
  Name: rl0 Type: ether   ID: 0034   Num hooks: 2
  Name: ste0Type: ether   ID: 0035   Num hooks: 2
  Name: wlan0   Type: ether   ID: 0036   Num hooks: 2

2. If I attach all physical interfaces to netflow I get no statistics 
for data originating from server. I.e. I see all inbound traffic but I 
see no outbound traffic.


Maybe I'm just doing everything wrong? I'm adding interfaces to netflow 
this way:


connect wlan0: netflow0: upper iface2
connect wlan0: netflow0: lower iface3
connect netflow0: netflow0: out2 out3

3. Ok, I can do this other way (sorry, I'm bad at netflow scripting):

mkpeer eiface ether ether
rmhook ngeth0: ether

ifconfig ngeth0 up
ifconfig bridge0 span ngeth0

And again I see only inbound packets. I see no packets coming from me.

Is there any other working way to get stats from bridge interface?

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: issues compiling world

2013-06-27 Thread Volodymyr Kostyrko

27.06.2013 17:10, Chris Knipe написав(ла):

Hi all,

I've been battling the whole day now trying to compile 9 STABLE
I've svn'ed the source from branch base/stable/9 numerious times and
the code base as far as I can tell is up to date...


As me. As I reported my local glitches in the past I prefer now to 
retest everything twice before pointing out some bugs.




cc -O2 -pipe  -I/usr/src/usr.sbin/tcpdump/tcpdump
-I/usr/src/usr.sbin/tcpdump/tcpdump/../../../contrib/tcpdump
-DHAVE_CONFIG_H -D_U_=__attribute__((unused)) -DINET6 -DLBL_ALIGN
-I/usr/obj/usr/src/tmp/usr/include/openssl -DHAVE_LIBCRYPTO
-DHAVE_OPENSSL_EVP_H -DHAVE_NET_PFVAR_H -std=gnu99 -fstack-protector
-Wsystem-headers -Werror -Wall -Wno-format-y2k -W
-Wno-unused-parameter -Wstrict-prototypes -Wmissing-prototypes
-Wpointer-arith -Wno-uninitialized -Wno-pointer-sign -c
/usr/src/usr.sbin/tcpdump/tcpdump/../../../contrib/tcpdump/print-pfsync.c
/usr/src/usr.sbin/tcpdump/tcpdump/../../../contrib/tcpdump/print-pfsync.c:
In function 'print_src_dst':
/usr/src/usr.sbin/tcpdump/tcpdump/../../../contrib/tcpdump/print-pfsync.c:330:
error: 'tcpstates' undeclared (first use in this function)
/usr/src/usr.sbin/tcpdump/tcpdump/../../../contrib/tcpdump/print-pfsync.c:330:
error: (Each undeclared identifier is reported only once
/usr/src/usr.sbin/tcpdump/tcpdump/../../../contrib/tcpdump/print-pfsync.c:330:
error: for each function it appears in.)
*** [print-pfsync.o] Error code 1

Stop in /usr/src/usr.sbin/tcpdump/tcpdump.
*** [all] Error code 1

Can someone perhaps recommend a course of action?


Perhaps the good choice would be waiting for tinderbox to stop mumbling 
about this. You can check reports @stable.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: ZFS: raid VS copies=n

2013-06-07 Thread Volodymyr Kostyrko

07.06.2013 18:52, Quartz:

Question:

How does the ZFS option 'copies=n' and raid relate to and interact with
each other? specifically recovery in the event of a failure. For
example, is having three disks in a raid-1 configuration with copies=1
effectively the same as having three disks in a raid-0 with copies=3?
Are the copies distributed uniformly across all drives in the pool, or
concentrated, or what? What happens with configs like a raid-z2 with
copies=2? Which / how many disks can you lose?

(I'm aware that like a lot of other ZFS options copies=n doesn't have to
be global to the entire pool / directory structure, but for the sake of
simplicity let's assume it is in this case).


copies=n tries to allocate blocks on different disks but doesn't 
guarantee this nor that any single disk can be used to retrieve data.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: TCPmux

2013-05-31 Thread Volodymyr Kostyrko

31.05.2013 10:29, Stefan Desancic:

Good Morning,

Is there a flag or a setting in the PF firewall in FreeBSD that you can set to 
allow TCPmux traffic to flow through it? The pass all rule doesn't seem to 
work, however if I disable PF completely then the TCPmux traffic flow through.


I have no problems with tcpmux and pf. Can you show your config? On my 
machines tcpmux is served from inetd on default port (1).


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: TCPmux

2013-05-31 Thread Volodymyr Kostyrko

31.05.2013 14:10, Stefan Desancic:

Hi,

Thank you for your very speedy response.
Also Attached is the config file.

Kind Regards

Stefan


# Section: Interfaces
public_if19=em0
private_if18=em1
mgmt_if=em1
# End: Interfaces

# Section: Ports
Management = {22,}
ikeports = {500,4500}
# End: Ports

# Section: Address Table
table CENTER-CONTACT {192.168.50.250}
table CONTACT-EDGE1 {192.168.50.1}
table IP_10.0.0.1 {10.0.0.1}
table IP_10.0.0.2 {10.0.0.2}
table IP_192.168.50.250 {192.168.50.250}
table LPN_192.168.100.0_24 {192.168.100.0/24}
table LPN_192.168.50.0_24 {192.168.50.0/24}
table CENTER-CONTACTN {192.168.50.250}
# End: Address Table

# Section: Options
set ruleset-optimization none
set block-policy return
set skip on lo
# End: Options

# Section: Scrubbing
scrub in all
# End: Scrubbing

# Section: Anti Spoofing
antispoof quick for {$public_if19, $private_if18} inet
# End: Anti Spoofing

# Section: Firewall Rules
# Section: System Rules
block in from any to any label RuleId[111]
pass out from any to any label RuleId[112]
# End: System Rules

# Section: VPN LPN access Rules
pass from {LPN_192.168.100.0_24} to {LPN_192.168.50.0_24} tagged vpn label 
RuleId[140]
pass from {LPN_192.168.50.0_24} to {LPN_192.168.100.0_24} label RuleId[141]
# End: VPN LPN access Rules

# Section: User Rules
# block from any to any no state label RuleId[149]
# pass in from {LPN_192.168.100.0_24} to {LPN_192.168.50.0_24} label 
RuleId[151]
# pass in from {LPN_192.168.50.0_24} to {LPN_192.168.100.0_24} label 
RuleId[152]
pass from any to any label RuleId[157]
# End: User Rules

# Section: IPsec Rules
pass in on $mgmt_if proto {udp} from {CENTER-CONTACTN} to {CONTACT-EDGE1} 
port $ikeports label RuleId[117]
pass in on $mgmt_if proto {esp} from {CENTER-CONTACTN} to {CONTACT-EDGE1} 
label RuleId[118]
pass in on $mgmt_if proto {ipencap} from {CENTER-CONTACTN} to 
{CONTACT-EDGE1} tag management label RuleId[119]
pass proto {udp} from {IP_192.168.50.250} to {IP_10.0.0.2} port $ikeports 
label RuleId[131]
pass proto {udp} from {IP_10.0.0.2} to {IP_192.168.50.250} port $ikeports 
label RuleId[132]
pass proto {esp} from {IP_192.168.50.250} to {IP_10.0.0.2} label RuleId[133]
pass proto {esp} from {IP_10.0.0.2} to {IP_192.168.50.250} label RuleId[134]
pass in on $public_if19 proto {udp} from {IP_10.0.0.2} to {IP_10.0.0.1} 
port $ikeports label RuleId[135]
pass out on $public_if19 proto {udp} from {IP_10.0.0.1} to {IP_10.0.0.2} 
port $ikeports label RuleId[136]
pass in on $public_if19 proto {esp} from {IP_10.0.0.2} to {IP_10.0.0.1} 
label RuleId[137]
pass out on $public_if19 proto {esp} from {IP_10.0.0.1} to {IP_10.0.0.2} 
label RuleId[138]
pass in on $public_if19 proto {ipencap} from {IP_10.0.0.2} to {IP_10.0.0.1} 
tag vpn label RuleId[139]
# End: IPsec Rules

# Section: Management Rules
pass in on $mgmt_if proto {tcp} from {CENTER-CONTACT} to {CONTACT-EDGE1} 
port $Management tagged management label RuleId[120]
# End: Management Rules
# End: Firewall Rules


I'm missing a rule which would pass tcp connections to port 1 on any 
interface. However I can see a pass all rule. Remote connections should 
be enabled.


How your tcpmux server is configured? Can you show the output of 
`sockstat | grep ':1 '`?




Good Morning,

Is there a flag or a setting in the PF firewall in FreeBSD that you can set to 
allow TCPmux traffic to flow through it? The pass all rule doesn't seem to 
work, however if I disable PF completely then the TCPmux traffic flow through.


I have no problems with tcpmux and pf. Can you show your config? On my machines 
tcpmux is served from inetd on default port (1).



--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Status of Chromium port...

2013-05-15 Thread Volodymyr Kostyrko

14.05.2013 23:48, Peter Harrison:

Hello list!

Does anyone know the status of the Chromium port? It's stuck at v25 with 
multiple vulnerabilities. Updated versions have been available for a while, but 
haven't been brought into ports. I've emailed the maintainer but not had a 
response. Anyone know better?


I'm building v27 from port now. Looks like many things have changed 
since v25 - new dependencies, the build flows differently. Seems to be a 
major update.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Status of Chromium port...

2013-05-15 Thread Volodymyr Kostyrko

15.05.2013 18:29, J. Porter Clark:

On Wed, May 15, 2013 at 11:32:31AM +0300, Volodymyr Kostyrko wrote:

14.05.2013 23:48, Peter Harrison:

Hello list!

Does anyone know the status of the Chromium port? It's stuck at v25 with 
multiple vulnerabilities. Updated versions have been available for a while, but 
haven't been brought into ports. I've emailed the maintainer but not had a 
response. Anyone know better?


I'm building v27 from port now. Looks like many things have changed
since v25 - new dependencies, the build flows differently. Seems to
be a major update.


Indeed, seems a real mess now.  I told it not to use
pulseaudio, it wants to install it anyway, along with gdbm and
accessibility/speech-dispatcher.  WTF?  Might want to hold off
until some of this gets fixed...



Oh, a friendly soul. To ditch pulseaudio I told speech-dispatcher to use 
flite, this way we get really short list of extra deps.


I can't build port for now due too -Werror. Clang shrieks about really 
bad things when compiling gcrypt (warning about deprecated interfaces) 
whereas gcc4.6 says the same about gssapi.h.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: scripting zfs send receive, but the script never exits cleanly

2013-04-18 Thread Volodymyr Kostyrko

18.04.2013 19:35, Brian Gold:

Hi all. Quick question for you. I've got a pair of freebsd 9 systems running
zfs. i've got my primary system doing ZFS SEND each night to my secondary
system for backups. I'm using a script I wrote to automate the process. I'm
passing the zfs send  receive through gnetcat as a buffer which increases
the speed of the transfer quite a bit. The script is available here:
http://pastebin.com/2suzs3wP



My problem is, when I run this script it syncs just fine, but it never
actually ends. It just sits there until I kill it. I would love to have this
run as a scheduled cron job, but until I can get this to exit cleanly when
it is done, that won't be an option.



Here is the output I get when I run this: http://pastebin.com/q8hRzuVv



Would really appreciate any advice you may have. If anyone has a
cleaner/more efficient way of doing these incremental send/receives, that
would be great too.


I've done the same with this script: 
https://github.com/kworr/zfSnap/blob/master/xPERIODICx_zfSync.sh


Maybe you would find some ideas useful.

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: [ZFS] recover destroyed zpool - what are the available options?

2013-04-09 Thread Volodymyr Kostyrko

09.04.2013 06:51, Beeblebrox:

Exported the existing zpool  ran # zpool import -D -f -R /bsdr -N -F -X
12018916494219117471 rescue =
Same result unfortunately. 'cannot import 'bsdr' as 'rescue': no such pool
or dataset Destroy and re-create the pool from a backup source.'
I tried the other bsdr zpool as well but result was same error msg.

I feel like I'm overlooking something very simple...


You can try adding verbosity:

vfs.zfs.debug=1
vfs.zfs.recover=1
debug.bootverbose=1

If ZFS doesn't think the pool is eligible to import you are out of luck. 
You can put the disk aside till some sofwtare for data recovering from 
damaged ZFS emerges.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: [ZFS] recover destroyed zpool - what are the available options?

2013-04-08 Thread Volodymyr Kostyrko

05.04.2013 14:13, Beeblebrox:

Thank you for your help Volodymyr,

1. ZPOOL LIST shows that the pool is listed
NAMESIZE  ALLOC   FREECAP  DEDUP  HEALTH  ALTROOT
bsdr   -  -  -  -  -  FAULTED  -
tank0  49.8G  13.3G  36.5G26%  1.00x  ONLINE  -

2. ZPOOL IMPORT = no pools available to import
3. zpool import -D -f -R /bsdr -N -F -n -X bsdr =
Gives error because of condition (#1)
4. ZPOOL IMPORT -D shows 2 BSDR pools:
A) config:  bsdr   UNAVAIL  insufficient replicas
  5853256800575798014  UNAVAIL  cannot open  (THIS IS NOT THE POOL I 
WANT -
THIS ONE IS OLDER POOL, WHOLE-DISK-RAW)
B) config:  bsdrUNAVAIL  insufficient replicas
  17860002997423999070  UNAVAIL  cannot open (THIS SHOULD BE THE POOL I
NEED, BUT LOOK AT PROBLEM IN #5)
5. ZPOOL STATUS -V BSDR shows different guid!!
config: bsdrUNAVAIL  0 0 0
  12606749387939346898  UNAVAIL  0 0 0  was /dev/ada0p2 
(THIS
GUID DOES NOT MATCH THE GUID OF 4-B)
It is normal in my opinion that the guid should not match, but that is why I
cannot import pool 4-B. I must either delete the BSDR POOL that is shown as
on-line, or import 4-B with another name I think.


Personally I feel you should destroy current BSDR pool before importing 
older one or at least export current one. I don't think ZFS will reuse 
devices that are already used for other pools.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.1 panics on a daily basis

2013-04-08 Thread Volodymyr Kostyrko

04.04.2013 11:46, Volodymyr Kostyrko:

Hi all.

I have one machine with problems. I changed memory, motherboard,
interface card with no luck. Yesterday it panics twice.


...


Have anyone faced something similar? It doesn't dump core for me and I'm
trying to fix this.


One more weird kernel message:

Apr  8 09:54:04 kohrah kernel: Expensive timeout(9) function: 
0x803af9b0(0xfe05f4baf000) -1.726848694 s


And reboot afterwards.

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: [ZFS] recover destroyed zpool - what are the available options?

2013-04-05 Thread Volodymyr Kostyrko

04.04.2013 19:26, Beeblebrox:

test them with `zdb -l device`. When the output would be correct - you

guessed your slice!

LABEL 1

 version: 28
 name: 'bsdr'
 state: 2
 txg: 10
 pool_guid: 12018916494219117471
 hostid: 2193536600
 hostname: 'mfsbsd'
 top_guid: 17860002997423999070
 guid: 17860002997423999070
 vdev_children: 1
 vdev_tree:
 type: 'disk'
 id: 0
 guid: 17860002997423999070
 path: '/dev/ad6p2'
 phys_path: '/dev/ad6p2'
 whole_disk: 1
 metaslab_array: 30
 metaslab_shift: 31
 ashift: 9
 asize: 287855869952
 is_log: 0
 create_txg: 4

Do you mean that in this case 'asize 287855869952' is what I should look at?
But 287855869952 /1024 /1024 /2 = 137.260GB is far smaller than I recall
the geom part to be...


I can't has the math. But looking at ashift I can guess your disk should 
be 287855869952/2**9 == 562218496. Is this one right?


Actually if you see all 4 labels correctly you can try to proceed as ZFS 
would guess the correct disk size anyway.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: [ZFS] recover destroyed zpool - what are the available options?

2013-04-05 Thread Volodymyr Kostyrko

05.04.2013 11:54, Beeblebrox:

Actually if you see all 4 labels correctly you can try to proceed as ZFS

would guess the correct disk size anyway.

I should clarify:  # zdb -l /dev/ada0p2 = all 4 LABELS visible and correct
(zpool name: bsdr)
# zdb -l /dev/ada0p1 = all 4 LABELS visible and correct (zpool name: asp)
# zdb -l /dev/ada0 = only LABEL #2 visible (this is an OLDER zpool with
GUID 5853256800575798014, also named bsdr, the pool was whole-disk-as-raw)
This is the gpt table + partitions as I re-created them immediately after
the gpt delete. It looks like I have re-created the gpt partitions
correctly...

I don't understand what you mean by you can try to proceed?
# zpool import -D -f -R /bsdr -N -F -n -X bsdr
cannot import 'bsdr': a pool with that name already exists. use the form
'zpool import pool | id newpool' to give it a new name


Ok, let's check a few things:

zpool import

zpool import -D

From your previous mails I saw that pool bsdr is FAULTED but not 
deleted. If the system would list bsdr on `zpool import` you should 
remove -D from the command.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


9.1 panics on a daily basis

2013-04-04 Thread Volodymyr Kostyrko

Hi all.

I have one machine with problems. I changed memory, motherboard, 
interface card with no luck. Yesterday it panics twice.


Apr  3 12:16:50 kohrah kernel: interrupt   total
Apr  3 12:16:50 kohrah kernel: irq1: atkbd0 534
Apr  3 12:16:52 kohrah kernel: irq18: ehci0 uhci5+  324
Apr  3 12:16:52 kohrah kernel: irq19: uhci2 uhci428
Apr  3 12:16:52 kohrah kernel: irq23: ehci1 uhci3   440
Apr  3 12:16:52 kohrah kernel: cpu0:timer  34856866
Apr  3 12:16:52 kohrah kernel: irq256: mpt043020270
Apr  3 12:16:52 kohrah kernel: cpu1:timer  31869627
Apr  3 12:16:52 kohrah kernel: cpu14:timer 29801107
Apr  3 12:16:52 kohrah kernel: cpu15:timer 30408045
Apr  3 12:16:52 kohrah kernel: cpu4:timer  30991098
Apr  3 12:16:52 kohrah kernel: cpu9:timer  30327632
Apr  3 12:16:52 kohrah kernel: cpu5:timer  31701233
Apr  3 12:16:52 kohrah kernel: cpu13:timer 30256850
Apr  3 12:16:52 kohrah kernel: cpu6:timer  41117749
Apr  3 12:16:52 kohrah kernel: cpu8:timer  29618508
Apr  3 12:16:52 kohrah kernel: cpu7:timer  30929776
Apr  3 12:16:52 kohrah kernel: cpu10:timer 29777448
Apr  3 12:16:52 kohrah kernel: cpu2:timer  31031445
Apr  3 12:16:52 kohrah kernel: cpu3:timer  31696197
Apr  3 12:16:52 kohrah kernel: cpu11:timer 30242224
Apr  3 12:16:52 kohrah kernel: cpu12:timer 29757770
Apr  3 12:16:52 kohrah kernel: irq257: igb0:que 0   7307099
Apr  3 12:16:52 kohrah kernel: irq258: igb0:que 1   7062641
Apr  3 12:16:52 kohrah kernel: irq259: igb0:que 2   7051219
Apr  3 12:16:52 kohrah kernel: irq260: igb0:que 3   8521491
Apr  3 12:16:52 kohrah kernel: irq261: igb0:que 4   6945489
Apr  3 12:16:52 kohrah kernel: irq262: igb0:que 5   7006342
Apr  3 12:16:52 kohrah kernel: irq263: igb0:que 6   7005444
Apr  3 12:16:52 kohrah kernel: irq264: igb0:que 7   6983277
Apr  3 12:16:52 kohrah kernel: irq265: igb0:link  6
Apr  3 12:16:52 kohrah kernel: irq266: igb1:que 0 79225
Apr  3 12:16:52 kohrah kernel: irq267: igb1:que 1 79225
Apr  3 12:16:52 kohrah kernel: irq268: igb1:que 2 79225
Apr  3 12:16:52 kohrah kernel: irq269: igb1:que 3 79225
Apr  3 12:16:52 kohrah kernel: irq270: igb1:que 4 79225
Apr  3 12:16:52 kohrah kernel: irq271: igb1:que 5 79224
Apr  3 12:16:52 kohrah kernel: irq272: igb1:que 6 79225
Apr  3 12:16:52 kohrah kernel: irq273: igb1:que 7 79225
Apr  3 12:16:52 kohrah kernel: irq274: igb1:link  1
Apr  3 12:16:52 kohrah kernel: Total   605922398
Apr  3 12:16:52 kohrah kernel: KDB: stack backtrace:
Apr  3 12:16:52 kohrah kernel: #0 0x803944f0 at kdb_backtrace+0x60
Apr  3 12:16:52 kohrah kernel: #1 0x8031821b at watchdog_fire+0x8b
Apr  3 12:16:52 kohrah kernel: #2 0x80318526 at hardclock_cnt+0x2e6
Apr  3 12:16:52 kohrah kernel: #3 0x80596079 at handleevents+0x129
Apr  3 12:16:52 kohrah kernel: #4 0x80596c00 at timercb+0x2a0
Apr  3 12:16:52 kohrah kernel: #5 0x805c3bac at 
lapic_handle_timer+0x9c

Apr  3 12:16:52 kohrah kernel: #6 0x8056aaec at Xtimerint+0x8c
Apr  3 12:16:52 kohrah kernel: #7 0x80eb5ef7 at 
kcs_wait_for_obf+0x87

Apr  3 12:16:52 kohrah kernel: #8 0x80eb6455 at kcs_read_byte+0x45
Apr  3 12:16:52 kohrah kernel: #9 0x80eb5fab at kcs_loop+0x7b
Apr  3 12:16:52 kohrah kernel: #10 0x803355f5 at fork_exit+0x75
Apr  3 12:16:52 kohrah kernel: #11 0x8056a4ce at fork_trampoline+0xe

Apr  3 18:30:54 kohrah kernel: interrupt   total
Apr  3 18:30:54 kohrah kernel: irq18: ehci0 uhci5+  324
Apr  3 18:30:56 kohrah kernel: irq19: uhci2 uhci426
Apr  3 18:30:56 kohrah kernel: irq23: ehci1 uhci3   440
Apr  3 18:30:56 kohrah kernel: cpu0:timer   6820267
Apr  3 18:30:56 kohrah kernel: irq256: mpt0 4610726
Apr  3 18:30:56 kohrah kernel: cpu1:timer   5915601
Apr  3 18:30:56 kohrah kernel: cpu9:timer   5549735
Apr  3 18:30:56 kohrah kernel: cpu6:timer   6674702
Apr  3 18:30:56 kohrah kernel: cpu15:timer  5569165
Apr  3 18:30:56 kohrah kernel: cpu7:timer   5798112
Apr  3 18:30:56 kohrah kernel: cpu11:timer  5550018
Apr  3 18:30:56 kohrah kernel: cpu3:timer   5800384
Apr  3 18:30:56 kohrah kernel: cpu13:timer

Re: [ZFS] recover destroyed zpool - what are the available options?

2013-04-04 Thread Volodymyr Kostyrko

04.04.2013 08:08, Beeblebrox пишет:

I had a second pool on another partition of the same HDD, which was in the
same degraded state as the bsdr pool. The data on that pool had been
backed-up previously. I decided to try the export  re-import method on that
pool (-Z gives message: invalid option 'Z'). Result:


Sorry, that was -X aka extreme_rewind.


# zpool export oldpool
# zpool import -D -f -R /mnt -N -F -n  oldpool
Now the pool just disappears.
# zpool list - does not show oldpool
# zpool import -  no pools available to import

So the export  re-import method is NOT the way to do this.


Option -D was intended only for deleted pools, not exported ones.

Try `zpool list -D` or `zpool import -D`.

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: [ZFS] recover destroyed zpool - what are the available options?

2013-04-04 Thread Volodymyr Kostyrko

2013-04-04 18:50, Beeblebrox wrote:

Hi Mark.


What does gpart show return?

=   34  625142381  ada0  GPT  (298G)
34   62914560 1  freebsd-zfs  (30G)
62914594  562227821 2  freebsd-zfs  (268G)


Are all the pool members there and working?

Yes - ada0p2 is the ONLY pool member.


My guess is that one member is missing or a mbr is bad.

After 'zpool destroy', I also deleted the partition before realising my
mistake, I tried to recover the partition table with testdisk, but this was
not successful. Next I created a new GPT table and the 2 partitions at the
original size as I recalled them - so ada0p1 and ada0p2 have been
re-created.

I just realized a problem: gpart show -r =
62914594  562227821 2  516e7cba-6ecf-11d6-8ff8-00022d09712b  (268G)
The guid (?) that ZFS is looking for is most likely wrong. I need to find
the ID that ZFS is looking for and change the ID of ada0p2 to that number -
am I correct?


ZFS operates on metadata. If ZFS can clearly see one side of the 
partition it would see it all, you can try reconstruct partitions taking 
in account data obtained from zdb. And again - when you obtained correct 
zdb data ZFS was available. Maybe or maybe the slice was too small...


Oh hey, you uzed `zdb -C`, testing what local machine knows about the 
pool. When recreating partitions test them with `zdb -l device`. When 
the output would be correct - you guessed your slice!


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: [ZFS] recover destroyed zpool - what are the available options?

2013-04-03 Thread Volodymyr Kostyrko

2013-04-03 18:17, Beeblebrox wrote:

If anyone has ideas, zdb -C is now giving me detailed output. zpool status
is:


You are mostly out of luck. The worst thing about ZFS is that when 
something happens ZFS just gives you NO.


I posted this before, you can try this too:

zpool import -D -f -R /bsdr -N -F -n -Z bsdr

-D   work on deleted pools
-f   force import
-R   custom root folder to not interfer with your mounts
-N   do not mount filesystems
-F   recovery mode - tries last transactions to find a good one
-n   doesn't modify data on disk while in recovery mode
-Z   (undocumented) verify transactions in recovery mode by doing a 
partial scrub (?).


I hope this will help you... Anyway you can try any other ZFS 
implementation. For example FreeBSD loader can read files too while booting.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Enlightenment, libcurl undefined references to SLL_CTX_set_srp_password/username

2013-04-02 Thread Volodymyr Kostyrko

01.04.2013 21:39, Jim Ballantine пишет:

OK, I ran just pkg_libchk and the output is:

# pkg_libchk
xfce4-tumbler-0.1.27_1:
/usr/local/lib/tumbler-1/plugins/tumbler-poppler-thumbnailer.so misses
libpoppler.so.18

I'll install it and try again, but it doesn't seem like the cause.


Yes.

Can you show your config for ftp/curl? Does it have OPENSSL support? Is 
openssl installed from ports?


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Enlightenment, libcurl undefined references to SLL_CTX_set_srp_password/username

2013-04-02 Thread Volodymyr Kostyrko

2013-04-02 15:12, Jim Ballantine wrote:

the config is the default
   lqq curl-7.24.0_2
qk
  x
lqqk
x
  x x [ ] CARESAsynchronous DNS resolution
via c-ares  x x
  x x [x] CA_BUNDLEInstall CA bundle for
OpenSSL   x x
  x x [ ] CURL_DEBUG   curl diagnostic
output  x x
  x x [x] DOCS Build and/or install
documentation  x x
  x x [x] EXAMPLES Build and/or install
examples   x x
  x x [x] IPV6 IPv6 protocol
support   x x
  x x [ ] KERBEROS4Kerberos 4
support  x x
  x x [ ] LDAP LDAP
supportx x
  x x [ ] LDAPSLDAPS
support   x x
  x x [ ] LIBIDN   Internationalized Domain
Names via libidn   x x
  x x [x] LIBSSH2  SCP/SFTP support via
libssh2x x
  x x [ ] NTLM NTLM
authentication x x
  x x [x] PROXYProxy
support   x x
  x x [ ] RTMP RTMP protocol support via
librtmp   x x
  x x [ ] TRACKMEMORY  curl memory diagnostic
output   x x
  x xqqq SSL protocol
support qx x
  x x (*) OPENSSL  SSL/TLS support via
OpenSSL x x
  x x ( ) GNUTLS   SSL/TLS support via
GnuTLS  x x
  x
mqqj
x

tqqu
  x OK  
Cancel   x

mqqj

Yes, openssl is installed from ports.


Please, don't top post. And remember to add list to the recepients.

What does curl-config --libs give you?

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Enlightenment, libcurl undefined references to SLL_CTX_set_srp_password/username

2013-04-01 Thread Volodymyr Kostyrko

2013-04-01 17:00, Jim Ballantine wrote:

I'm trying to re-build enlightenment and it fails with
/usr/local/lib/libcurl.so.6: undefined reference to
`SSL_CTX_set_srp_password'
/usr/local/lib/libcurl.so.6: undefined reference to
`SSL_CTX_set_srp_username'


You can further debug the issue by installing sysutils/bsdadminscripts 
and providing output of pkg_libchk.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Enlightenment, libcurl undefined references to SLL_CTX_set_srp_password/username

2013-04-01 Thread Volodymyr Kostyrko

01.04.2013 19:47, Jim Ballantine пишет:

I believe I'm running it correctly, when I enter
pkg_libchk -vr enlightenment


Nope, just run pkg_libchk without any arguments. I don't think problem 
is in enlightenment or curl, by rather some library that depends on curl 
and is required by enlightenment.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Upgrade devel/py-setuptools

2013-03-27 Thread Volodymyr Kostyrko

2013-03-27 14:22, Loic Capdeville wrote:

Hi !

I'm trying to update devel/py-setuptools which has been replaced by
devel/py-distribute.
As mentioned in /usr/ports/UPDATING I did portupgrade -fo
devel/py-distribute devel/py-setuptools since I'm using ports, but
nothing happens.

Output of pkg_version -vIL= :
py27-setuptools-0.6c11_3   succeeds index (index has 0.6.35)

I already tried to fix the package registry using pkgdb -F.

I've been trying to fix this for days, but still can't find a solution.

Any idea ?


Can you post contents of 
/usr/local/lib/python2.7/site-packages/easy-install.pth* files?


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Upgrade devel/py-setuptools

2013-03-27 Thread Volodymyr Kostyrko

2013-03-27 15:06, Loic Capdeville wrote:

/usr/local/lib/python2.7/site-packages/easy-install.pth:

import sys; sys.__plen = len(sys.path)
../setuptools-0.6c11-py2.7.egg
../Pygments-1.5-py2.7.egg
../Babel-0.9.6-py2.7.egg
../MarkupSafe-0.15-py2.7-freebsd-9.0-RELEASE-amd64.egg
../Jinja2-2.6-py2.7.egg
../Sphinx-1.1.3-py2.7.egg
../virtualenv-1.9.1-py2.7.egg
import sys; new=sys.path[sys.__plen:]; del sys.path[sys.__plen:];
p=getattr(sys,'__egginsert',0); sys.path[p:p]=new; sys.__egginsert =
p+len(new)


/usr/local/lib/python2.7/site-packages/easy-install.pth.dist:

import sys; sys.__plen = len(sys.path)
../setuptools-0.6c11-py2.7.egg
import sys; new=sys.path[sys.__plen:]; del sys.path[sys.__plen:];
p=getattr(sys,'__egginsert',0); sys.path[p:p]=new; sys.__egginsert =
p+len(new)


Looks like py-distribute is not installed at all.

what was the outcome of portupgrade -fo devel/py-distribute 
devel/py-setuptools? Can you try running that again?


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Upgrade devel/py-setuptools

2013-03-27 Thread Volodymyr Kostyrko

2013-03-27 15:33, Loic Capdeville wrote:

On 27/03/2013 14:27, Volodymyr Kostyrko wrote:

2013-03-27 15:06, Loic Capdeville wrote:

/usr/local/lib/python2.7/site-packages/easy-install.pth:

import sys; sys.__plen = len(sys.path)
../setuptools-0.6c11-py2.7.egg
../Pygments-1.5-py2.7.egg
../Babel-0.9.6-py2.7.egg
../MarkupSafe-0.15-py2.7-freebsd-9.0-RELEASE-amd64.egg
../Jinja2-2.6-py2.7.egg
../Sphinx-1.1.3-py2.7.egg
../virtualenv-1.9.1-py2.7.egg
import sys; new=sys.path[sys.__plen:]; del sys.path[sys.__plen:];
p=getattr(sys,'__egginsert',0); sys.path[p:p]=new; sys.__egginsert =
p+len(new)


/usr/local/lib/python2.7/site-packages/easy-install.pth.dist:

import sys; sys.__plen = len(sys.path)
../setuptools-0.6c11-py2.7.egg
import sys; new=sys.path[sys.__plen:]; del sys.path[sys.__plen:];
p=getattr(sys,'__egginsert',0); sys.path[p:p]=new; sys.__egginsert =
p+len(new)


Looks like py-distribute is not installed at all.

what was the outcome of portupgrade -fo devel/py-distribute
devel/py-setuptools? Can you try running that again?



It hasn't printed anything since the first time I tried to run it...
and still print nothing.


So here is a main problem. If it prints nothing it doesn't work.

Do you have portupgrade or portmaster installed? Did it yield at least 
one line? Some errors? If it doesn't that's surely a sign that something 
is going wrong.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Upgrade devel/py-setuptools

2013-03-27 Thread Volodymyr Kostyrko

2013-03-27 18:37, Loic Capdeville wrote:

import sys; sys.__plen = len(sys.path)
../setuptools-0.6c11-py2.7.egg
import sys; new=sys.path[sys.__plen:]; del sys.path[sys.__plen:];
p=getattr(sys,'__egginsert',0); sys.path[p:p]=new; sys.__egginsert =
p+len(new)


Looks like py-distribute is not installed at all.

what was the outcome of portupgrade -fo devel/py-distribute
devel/py-setuptools? Can you try running that again?



It hasn't printed anything since the first time I tried to run it...
and still print nothing.


So here is a main problem. If it prints nothing it doesn't work.

Do you have portupgrade or portmaster installed? Did it yield at least
one line? Some errors? If it doesn't that's surely a sign that something
is going wrong.


I use portupgrade regularly to upgrade my ports, and usually everything
goes right.
If fails only with that particular operation (or these portupgrade options)
Do I have to install devel/py-distribute separately, or should the
portupgrade -fo command do everything itself (uninstall py-setuptools
and install py-distribute) ?


This command should forcefully deintsall second package and replace it 
with first one. I'm not using portupgrade, I switched to portmaster long 
time ago so I can't help you with it.


If you want to make the switch by hand I think you should:

pkg_delete -f py27-setuptools-0.6c11_3
# now write down the whole list of dependent packages

cd /usr/ports/devel/py-distribute ; make install clean
portupgrade -f ..list of packages that require setuptools..

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: cmake fails to build under 9.1

2013-03-05 Thread Volodymyr Kostyrko

05.03.2013 18:51, Paul Kraus:

In trying to build NagIOS, one of the dependencies is cmake and it is failing 
to build. See below. And if I run make again it will fail on a different file, 
see further down. Any ideas ? I am running 64 bit 9.1 under VBox 4.2.6 and the 
parent host is Mac OS X 10.8.

[ 61%] Building CXX object 
Source/CMakeFiles/CMakeLib.dir/cmComputeLinkInformation.cxx.o
{standard input}: Assembler messages:
{standard input}:14628: Warning: end of file not at end of a line; newline 
inserted
{standard input}:16093: Error: bad register name `%r1'
c++: Internal error: Killed: 9 (program cc1plus)
Please submit a full bug report.
See URL:http://gcc.gnu.org/bugs.html for instructions.
*** [Source/CMakeFiles/CMakeLib.dir/cmBootstrapCommands.cxx.o] Error code 1
1 error
*** [Source/CMakeFiles/CMakeLib.dir/all] Error code 2
1 error
*** [all] Error code 2
1 error
*** [do-build] Error code 1

Stop in /usr/ports/devel/cmake.


Any messages on the system console?

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ZFS - whole disk or partition or BSD slice?

2013-01-29 Thread Volodymyr Kostyrko

29.01.2013 04:37, Thomas Mueller:

28.01.2013 01:57, james:

I have a 9.1 system with some SATA disks in RAIDZ, upgraded from 9.0.

The disks are all the same type, and I formatted them for FreeBSD and
put ZFS in a slice covering most of them.

I have seen suggestions for OpenIndiana etc that it is better to let ZFS
have the whole raw disk and that this can control the way it manages the
disk writeback mode.


Responses from Vladimir Kostyrko ^ :

^ My home computer is set up in the dedicated mode. No grave difference.
^ Not even a scratch.


Does this apply to FreeBSD and ZFS too?


^ No.


Presumably the disks are currently FreeBSD-specific.  If I used raw
disks instead of slices, could I read them from a Solaris system too?


^ I'm mostly sure you would be able to read disks from Solaris/x86.
^ However Solaris/Sparc uses another labeling scheme. If you want to be
^ fully compatible with other system GPT is a better choice.

Is GPT compatible with Solaris, can Solaris access a GPT disk?


Yes. I'm not sure if it can boot off GPT disk but on Solaris zpool 
automatically creates boundary GPT partition to protect ZFS vdev.




I tried OpenIndiana installable live USB stick, and my Western Digital
Caviar Green 3 TB hard disk, partitioned with GPT, was not recognized or
readable; same was true for Western Digital My Book Essential 3 TB USB 3.0
hard disk, also partitioned GPT.  This was on amd64 system.


Except OI. https://www.illumos.org/issues/208

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ZFS - whole disk or partition or BSD slice?

2013-01-28 Thread Volodymyr Kostyrko

28.01.2013 03:36, Shane Ambler:

On 28/01/2013 10:27, james wrote:

I have a 9.1 system with some SATA disks in RAIDZ, upgraded from 9.0.

The disks are all the same type, and I formatted them for FreeBSD and
put ZFS in a slice covering most of them.

I have seen suggestions for OpenIndiana etc that it is better to let ZFS
have the whole raw disk and that this can control the way it manages the
disk writeback mode.

Does this apply to FreeBSD and ZFS too?

Presumably the disks are currently FreeBSD-specific.  If I used raw
disks instead of slices, could I read them from a Solaris system too?


I recall reading that using partitions for zfs on FreeBSD was as good as
full disks. For a boot zpool we need to at least have a partition for
the boot-code and one for zfs preventing the use of a full disk.


No, ZFS support booting from dedicated disks. There's a zfsboot file 
that should be written upon disk first sector and ZFS reservation space 
to make it bootable.


The bad sides are:

1. Difficulties with boot code upgrading.
2. No swap.

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ZFS - whole disk or partition or BSD slice?

2013-01-28 Thread Volodymyr Kostyrko

28.01.2013 08:05, Michael Sierchio:

On Sun, Jan 27, 2013 at 5:36 PM, Shane Ambler free...@shaneware.biz wrote:


I recall reading that using partitions for zfs on FreeBSD was as good as
full disks.


No, it isn't - ZFS can fully utilize disk caches when presented with
whole devices. There are possible reasons to create partitions - one
being that if an unfriendly OS sees the device, it won't try to
initialize it if it sees a partition map.  Another is using a cheap
RAID controller that can't be fully disabled - in which case you
generally need to create a partition that doesn't include the last few
sectors of the disk, where such controllers keep magic data.


That's wrong for long ago. This problem was solaris specific. Current 
ZFS code sees no difference between disks and partitions. One should 
think twice when putting two vdevs on one physical disk though.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ZFS - whole disk or partition or BSD slice?

2013-01-28 Thread Volodymyr Kostyrko

28.01.2013 09:03, Steve O'Hara-Smith:

On Sun, 27 Jan 2013 22:05:05 -0800
Michael Sierchio ku...@tenebras.com wrote:


On Sun, Jan 27, 2013 at 5:36 PM, Shane Ambler free...@shaneware.biz
wrote:


I recall reading that using partitions for zfs on FreeBSD was as good as
full disks.


No, it isn't - ZFS can fully utilize disk caches when presented with
whole devices. There are possible reasons to create partitions - one
being that if an unfriendly OS sees the device, it won't try to
initialize it if it sees a partition map.  Another is using a cheap
RAID controller that can't be fully disabled - in which case you
generally need to create a partition that doesn't include the last few
sectors of the disk, where such controllers keep magic data.


There's one other good reason to use partitions when mirroring.
When the time comes to replace a drive in a mirror it is necessary that the
new drive be the same size (or larger) than the one it replaces. Given that
drives of nominally the same capacity (and even of the same type and brand
bought at different times) tend not to be exactly the same size using a
partition a little smaller than the whole drive makes it certain that a
replacement drive will be big enough to use in the mirror when it arrives.


There's no need for that as ZFS can use same or bigger partition to 
mirror existing one. If the second one would be smaller - do some math 
and cut out some swap space.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ZFS - whole disk or partition or BSD slice?

2013-01-28 Thread Volodymyr Kostyrko

28.01.2013 01:57, james:

I have a 9.1 system with some SATA disks in RAIDZ, upgraded from 9.0.

The disks are all the same type, and I formatted them for FreeBSD and
put ZFS in a slice covering most of them.

I have seen suggestions for OpenIndiana etc that it is better to let ZFS
have the whole raw disk and that this can control the way it manages the
disk writeback mode.


My home computer is set up in the dedicated mode. No grave difference. 
Not even a scratch.



Does this apply to FreeBSD and ZFS too?


No.


Presumably the disks are currently FreeBSD-specific.  If I used raw
disks instead of slices, could I read them from a Solaris system too?


I'm mostly sure you would be able to read disks from Solaris/x86. 
However Solaris/Sparc uses another labeling scheme. If you want to be 
fully compatible with other system GPT is a better choice.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Crontabbing a Ruby script inside a screen

2013-01-24 Thread Volodymyr Kostyrko

24.01.2013 13:27, Dwayne Henderson:

Hi, I run this Ruby + Sequel script inside a screen that records data from
this live stream 24/7. But it tends to core dump every once in a while, and
since I run it in a screen (so it's easy to check in on), I can't really
scroll up to catch the error whenever it happens.

So how do I crontab the screen with the Ruby script inside it? Has to be
with a don't run it if it's already running check to avoid fatal
consequences. So far I have:

$ crontab -e

*/10 * * * * lockf -t 0 /home/anonymous/.myscript.rb.lock
/usr/local/bin/screen -d -m -S myscript
/home/anonymous/.rvm/rubies/ruby-1.9.3-p0/bin/ruby
/home/anonymous/myscript.rb


Another suggestion would be using daemon(8) with -r option.

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: zfs configuration

2013-01-21 Thread Volodymyr Kostyrko

21.01.2013 17:50, Don Dugger:

Hi All,

So I use zfs for the root file system. Works well. However now I want to
move /tmp to ram-disk (memory disk or what ever). When I try to unmount
/tmp with the zfs command of course it won't because its busy. With ufs I
would just edit fstab and reboot what do I don with zfs??


I've been moving a lot of machines from 9.0 to 9.1 with some patches 
this days (like tmpfs-nrbtree). I inject some code inde /etc/rc.d/zfs to 
update this. I'm adding this to /etc/fstab:


tmpfs /tmp tmpfs rw,nosuid 0 0

After this I'm changing /etc/rc.d/zfs:

@@ -23,6 +23,12 @@

 zfs_start_main()
 {
+   umount /tmp
+   zfs destroy mypool/tmp
+   rm -rf /tmp
+   mkdir -p /tmp
+   chmod ugo+rwxt /tmp
+   mount /tmp
zfs mount -a
zfs share -a
if [ ! -r /etc/zfs/exports ]; then

After reboot zfs filesystem for tmp is gone and tmpfs is in charge.

The code is harmless upon reexecution and just does the job. I haven't 
found easier way of doing this.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Change branch with svn

2013-01-17 Thread Volodymyr Kostyrko

17.01.2013 10:47, David Demelier:

Hello folks,

Just wanted to switch from RELEASE-9.1 to 9-STABLE my /usr/src, I was
used to csup, this tool was updating the src tree without removing it.

How can I switch my /usr/src tree to stable/9 branch without removing
old files?


# svn switch ^/stable/9


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: SSH on FreeBSD

2013-01-15 Thread Volodymyr Kostyrko

15.01.2013 12:50, Matthias Apitz:

El día Tuesday, January 15, 2013 a las 05:45:36PM +0700, Erich Dollansky 
escribió:


Hi,

On Tue, 15 Jan 2013 10:10:16 +
Mannase Nyathi mann...@cipherwave.co.za wrote:


CipherWave Fibre Broadband with FREE installation from only
R8840/month

Good day,

I have just configured FreeBSD on my server. I would like to find out
how can I be able to login to it via ssh?

Looking forward to hear from you soon.

Thank you



you must enable ssh in /etc/inetd.conf and then read


In FreeBSD it is in rc.conf

$ man rc.conf | col -b | fgrep -i ssh


In FreeBSD there are two ways of enabling sshd: default, fast and easy 
through rc.conf and a bit tricky and secure via inetd.conf. Everyone can 
select their own poison. I personally prefer the latter one.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: SSH on FreeBSD

2013-01-15 Thread Volodymyr Kostyrko

15.01.2013 14:48, Frank Staals:

Volodymyr Kostyrko c.kw...@gmail.com writes:


snip
In FreeBSD there are two ways of enabling sshd: default, fast and easy through
rc.conf and a bit tricky and secure via inetd.conf. Everyone can select their
own poison. I personally prefer the latter one.


You seem to imply that enabling sshd through inetd is more secure than
directly through rc.conf. Care to elaborate on that?


* there's no central process to target with attacks;
* SSHv1 server key is regenerated every time new connection is created;
* with inetd you can force max connections per minute rate or max 
connections per ip.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: openjdk6 + iced-teaweb installed, cannot open *.jnlp

2013-01-09 Thread Volodymyr Kostyrko

09.01.2013 02:57, Antonio Olivares:

Dear folks,

I am having difficulties with java on my machine I have the java
openjdk6 and the iced-teaweb ports installed.  As the old diablo jdk
has been depracated and has been recommended to remove, I have done
this, I cannot open *.jnlp files on my machine.  I have changed the
/usr/local/bin/javaws to the replacement /usr/local/bin/itweb-javaws,
and I have tried to do what is recommended.  On three of four machines
I have deleted the diablo jdk, but I want to use at lease one  FreeBSD
box and there I have not removed it till I solve this issue.


$ itweb-javaws jviewer.jnlp
Error: could not find libjava.so
Error: could not find Java 2 Runtime Environment.
$

E-213-3W# pkg_version  | grep 'openjdk'
bootstrap-openjdk   =
openjdk6=
E-213-3W# pkg_version  | grep 'icedtea-web'
icedtea-web =
E-213-3W#

Question:
Should I install openjdk7 and iced-teaweb ports?
How can I get java to open the *.jnlp files as the old javaws did correctly?

Please share ideas and suggestions.


http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/173603

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: openjdk6 + iced-teaweb installed, cannot open *.jnlp

2013-01-09 Thread Volodymyr Kostyrko

09.01.2013 18:53, Antonio Olivares:

How do I do the suggested fix?
As root?
as regular user?
i.e, how do I change the attributes.  I see the fix, but don't know
how to apply it :(


I changed the script to not include '-a javaws' in the last line of your 
log:


--- launcher/javaws.in   2012-11-01 18:51:04.0 +0200
+++ launcher/javaws.in  2013-01-09 18:57:35.278323886 +0200
@@ -59,6 +59,6 @@
   k=$((k+1))
 done

-exec -a javaws ${COMMAND[@]}
+exec ${COMMAND[@]}

 exit $?

I don't know why this works actually, maybe there's a misuse of 
PROGRAM_NAME in javaws.in, i.e. PROGRAM_NAME is declared but not used in 
this command. Regardless what I did with the script the only working 
solution for me was removing '-a' option.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: openjdk6 + iced-teaweb installed, cannot open *.jnlp

2013-01-09 Thread Volodymyr Kostyrko

09.01.2013 19:24, Antonio Olivares:

where does this file launcher/javaws.in reside?
/usr/local/bin/?


Sorry, I had to write that this file is at distribution sources, 
installed copy is at /usr/local/bin/itweb-javaws.



So I can remove the ``-a javaws '' from it to fix it?


I guess so...

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD: GIT instaed of SVN?

2013-01-04 Thread Volodymyr Kostyrko

03.01.2013 20:30, Mark Felder:

On Thu, 3 Jan 2013 12:24:31 -0400
Joseph Mingrone j...@ftfl.ca wrote:


A little of topic, but Fossil is BSD licensed.


It also would work poorly as an SCM for FreeBSD because everything would be in 
a giant sqlite database :(


Why this is bad? Even for SVN I prefer bdb backend as it works faster 
and better regardless what SVN authors say.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD: GIT instaed of SVN?

2013-01-03 Thread Volodymyr Kostyrko

03.01.2013 11:54, David Demelier:

subversion is not in base and will probably never? So this is not a real
problem :)


Nope, importing svnsup would suffice.

http://svnweb.freebsd.org/base/user/des/svnsup/

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Installing chromium port

2012-12-19 Thread Volodymyr Kostyrko

19.12.2012 15:34, Jack Mc Lauren:

Hi guys
When I attempt to install chromium port I face this error :
===  chromium-6.0.472.63 is forbidden: several security vulnerabilities.*** 
Error code 1
What should I do with this ??
Thanks in advance


6.0.472.63 is very old. Try updating your ports first.

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what replaces javaws? using icedtea-web and openjdk6.

2012-11-30 Thread Volodymyr Kostyrko

30.11.2012 18:39, Antonio Olivares:

/usr/ports/java/icedtea-web/work/icedtea-web-1.3.1/netx.build/lib/classes.jar
/usr/local/share/icedtea-web/netx.jar
install  -o root -g wheel -m 555 launcher.build/itweb-javaws /usr/local/bin

  

install  -o root -g wheel -m 444 extra-lib/about.jar
/usr/local/share/icedtea-web/about.jar
install  -o root -g wheel -m 555 launcher.build/itweb-settings /usr/local/bin
/usr/local/bin/bash



I need an application that requires /usr/local/bin/javaws and it is
not found what should I do to install it or substitute it to make it
work?


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what replaces javaws? using icedtea-web and openjdk6.

2012-11-30 Thread Volodymyr Kostyrko

30.11.2012 19:05, Antonio Olivares:

On Fri, Nov 30, 2012 at 10:53 AM, Volodymyr Kostyrko c.kw...@gmail.com wrote:

30.11.2012 18:39, Antonio Olivares:



/usr/ports/java/icedtea-web/work/icedtea-web-1.3.1/netx.build/lib/classes.jar
/usr/local/share/icedtea-web/netx.jar
install  -o root -g wheel -m 555 launcher.build/itweb-javaws
/usr/local/bin


   


I have tried this itweb-javaws , but it does not work :(
It does nothing, the application does not open :(

How should I troubleshoot it?


http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/173603

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Anyone using squid and pf?

2012-11-26 Thread Volodymyr Kostyrko

24.11.2012 17:39, Leslie Jensen:


I've upgraded squid from 3.1 to 3.2. Starting squid 3.2 with the same
configuration file now gives me errors in cache.log when one tries to
access any site, and of course no access!

2012/11/24 16:24:56 kid1| WARNING: Forwarding loop detected for:

Reverting back to 3.1 works.

I know there are some changes in 3.2 that does this

+ 3.2 intercept port receiving forward-proxy requests will reject them
due to NAT failure/lies.

+ 3.2 Host header validation *will* reject if forward traffic is
validated as being intercepted.

I would appreciate suggestions for changes to squid.conf so that squid
will work for me with version 3.2.


When switching to 3.2 I had to split listening ports - one for 
transparency and one for the local machine. However this doesn't looks 
like your case.


Can you please provide relevant parts of pf.conf and full log output, 
not just the first line?


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Anyone using squid and pf?

2012-11-26 Thread Volodymyr Kostyrko

26.11.2012 20:40, Leslie Jensen:

Rules from pf.conf


# macros
ext_if=xl0
int_if=bge0

tcp_services={ 22, 993, 5910:5917 }
tcp_priv_services={ 389, 443 }
proxy_services = { 21, 80 }
icmp_types={ echoreq unreach squench timex }
internal_net = 172.18.0.0/16
proxy = 172.18.0.1
proxyport=8021

# tables
table goodguys persist
table sshguard persist

# options
set block-policy return # ports are closed but can be seen
set loginterface $ext_if

set skip on lo0

# scrub
scrub in

rdr pass proto tcp from any to any port ftp - 127.0.0.1 port 8021

# redirect www trafic to proxy
rdr on $int_if inet proto tcp from $internal_net to any port
$proxy_services - $proxy port 8080


I could be wrong here but I think you have a loop. You are redirecting 
from local interface to local interface i.e. the result of redirect is 
still subject for redirect. Could you try one of the following:


1. Make this a `rdr in on $int_if`.

2. Make this a `rdr pass ... - 127.0.0.1 port 8080`. I prefer this way 
so port for transparent forwarding is unreachable except when explicitly 
redirecting to it.


Personally I newer allow such ambiguity in my configs.

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: after youtube .swf, black xterm text = transparent

2012-11-23 Thread Volodymyr Kostyrko

23.11.2012 06:22, Gary Aitken:

Do you have a nvidia card ?

If yes right click on the youtube image and disable hardware acceleration,
it will probably solve it (solved for me)


I'm seeing this too. nvidia-driver is installed. I'm using E17 without opengl.

While this should work for flash plugin I was always hit by another bug -

 I can't use mouse on flash settings dialog unless flash is maximized.

Hmmm.  Seems to work for me whether normal sized, large sized, or full screen.
So the menu comes up on the right click,
and you can select Settings...
and the settings dialog comes up,
but you cannot change any of the settings?


I can navigate partially by keyboard.


But you can close the dialog using the close button using the mouse?


Mouse doesn't work at all.


And you can switch tabs in the settings dialog using the mouse?


Nope, only with keyboard.

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

2012-11-19 Thread Volodymyr Kostyrko

19.11.2012 14:34, Ivan Voras wrote:

On 17/11/2012 22:48, Chris Rees wrote:


(and is GPL btw)


Since we're discussing it, Mercurial is BSDL-ed, and apparently has
proper crypto signing using GPG:

http://mercurial.selenic.com/wiki/FAQ#FAQ.2FTechnicalDetails.How_do_Mercurial_hashes_get_calculated.3F


:%s/BSD/LGP/

http://mercurial.selenic.com/about/

--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: wine-fbsd64 -- no longer in ports

2012-11-19 Thread Volodymyr Kostyrko

any
19.11.2012 15:03, C. P. Ghost wrote:

On Mon, Nov 19, 2012 at 1:31 PM, Hexing hexhex...@gmail.com wrote:

per...@pluto.rain.com (Perry Hutchison) writes:


Bernt Hansson b...@bananmonarki.se wrote:

On 2012-11-17 21:36, Gary Aitken wrote:

# portmaster -n emulators/wine-fbsd64
   === No /usr/ports/emulators/wine-fbsd64 exists, and no information
   === about emulators/wine-fbsd64 can be found in /usr/ports/MOVED
hints?

There has never been such a port, you have to install from package.


Ordinarily, packages are created by building ports.
If this one is an exception, how is it created?


I guess that just remove it and install /usr/ports/emulators/wine or
/usr/ports/emulators/wine-devel would be OK.


Nope, not for amd64:

% grep 'ONLY_FOR_ARCHS' /usr/ports/emulators/wine/Makefile
ONLY_FOR_ARCHS= i386
% grep 'ONLY_FOR_ARCHS' /usr/ports/emulators/wine-devel/Makefile
ONLY_FOR_ARCHS= i386

The wine and wine-devel ports won't even compile on amd64.

There was some guy who claims to have managed creating a
binary _package_ for amd64 somehow, and wo sent periodic
announcement updates about to this list. I don't know if it was
legit or not: I never install stuff bypassing ports. But apparently,
he didn't create a _port_, nor did he modify/enhance the current
i386-only wine ports.


He does created a port but didn't like to commit it into ports as this 
one gobbles all libraries that wine depend upon from local system and 
other installed ports and installs them as part of wine-fbsd64. And this 
is not good from a security/maintainability perspective yet it gives 
everyone a choice to use wine on amd64 machine. The port is freely 
available and regularly updated on mediafire with guides on how someone 
can make this package himself without downloading binaries compiled by 
some third party.


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Questions about ZFS Tuning

2012-09-17 Thread Volodymyr Kostyrko

17.09.2012 13:36, Jamie Paul Griffin wrote:

When I installed FreeBSD on my Lenovo Think Center Desktop I created a full ZFS 
Root file system using Matthew Seaman's excellent article:

http://www.infracaninophile.co.uk/articles/install-on-zfs/

My system now is: /home/jamie $ uname -a
FreeBSD kontrol.kode5.net 9.1-PRERELEASE FreeBSD 9.1-PRERELEASE #4 r240560: Sun 
Sep 16 18:40:56 BST 2012 
r...@kontrol.kode5.net:/usr/src/sys/amd64/compile/KONTROL  amd64

I've been wondering about ZFS tuning and have read some articles, including the 
FreeBSD handbook and wiki articles and also some posts in the FreeBSD forum.

The FreeBSD handbook 
[http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/filesystems-zfs.html],
 section 21.2.1.3 Loader Tunables
suggests adding tunables to /boot/loader.conf for ALL architectures - which I 
tested:


Handbook is old and cripsy about that all thing yet provides a useful 
link to http://wiki.freebsd.org/ZFSTuningGuide


 - you don't need kmem_size/arc tuning on amd64 generally;
 - zfs.zfs.prefetch_disable=0 will cause system eat more RAM then 
without it;
 - there are a lot of tunables but you should learn what you are doing 
before setting anything, for example changing recordsize for already 
running MySQL database filesystem will do nothing at all.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: how to speed up port make??

2012-07-26 Thread Volodymyr Kostyrko

Mr U wrote:

is it possible to speed up port make ??
i want to install openbox and xorg on a Pentium 4 and 2gb ram,
compiling xorg takes about 2 hours


1. You can use devel/ccache to cache compiled data. This way when you 
are compiling anything for a second time you'll get a big speed boost. 
Consider compiling kernel+world in 1 hour instead of 8 hours.


1a. If using clang setenv CCACHE_CPP2.

2. Try switching to clang, it has lower memory requirements and 
compilation speed. Be ready to disable it for some ports that have 
nonstandard code.


2a. Don't try to build world with clang if you need 
wine/openoffice/libreoffice. They are known not to work on a world built 
with clang.


3. Use tmpfs for port building. I always use a big swap and point 
WRKSRCDIR to /tmp/ports.


4. Finetune your compilation flags. The safest way to select one is to 
run `(gcc|gcc46|clang) -E -v -march=native -  /dev/null` and select the 
lowest -march value then write it down to /etc/make.conf as CPUTYPE.


5. Use port management tools like portmaster. When building big ports it 
will split building down to individual ports cleaning disk between 
builds. This keeps cache from holding temporary files.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: how to speed up port make??

2012-07-26 Thread Volodymyr Kostyrko

Wojciech Puchar wrote:


2. Try switching to clang, it has lower memory requirements and
compilation




this is simply not true.


This is simply not the point. Let's not start it again. The question was 
clearly about compilation speed where clang outperforms gcc by far. As 
for execution speed for now there's no clear winner:


http://www.phoronix.com/scan.php?page=news_itempx=MTA5Nzc

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Locally modifying ports

2012-07-24 Thread Volodymyr Kostyrko

Chris Ross wrote:

   So, I've been a NetBSD user for many years, and am looking more
at FreeBSD now.  Trying to build myself a system, I find that I have a
long-held delta to a package on my NetBSD system, and I keep it
in a patch-local-* file in NetBSD pkgsrc.

   I can't figure out if FreeBSD ports has a way to keep and automatically
apply local patches to ports.  I want to modify the way the internals of
a package/port operate, and not in a way that makes sense to move up-
stream.  It's just my preference.

   Is there a way in FreeBSD ports to keep a make this change to the
source code after extracting and before compiling type of thing in the
tree?


Ports just has been transferred to subversion. With subversion you can 
apply your patches to the tree and subversion will maintain them 
notifying you on possible conflicts. I'm already using this one for the 
patches to Mk that hasn't been committed for a long time.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: CLANG vs GCC tests of fortran/f2c program

2012-06-22 Thread Volodymyr Kostyrko

Chad Perrin wrote:

Someone in this extended discussion mentioned that there are efforts
underway to make sure the base system will compile cleanly with both
Clang and GCC 4.2+, so I think you're just making up complaints here.
Someone (other than Wojciech Puchar, who would just be talking out of his
ass) correct me if I'm mistaken.


That was me. I don't have pure facts but I read svn logs daily. Today we 
have a bunch of:



r237428 | eadler | 2012-06-22 08:48:53 +0300 (пт, 22 чер 2012) | 5 lines

MFC r237253:
Remove variables which are initialized but never used 
thereafter reported by gcc46 warning


Approved by:cperciva (implicit)

So at least there are some people working on polishing CURRENT/STABLE up 
to the point it will build with gcc46.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Why Clang

2012-06-22 Thread Volodymyr Kostyrko

Wojciech Puchar wrote:

Because it doesn't address an of the *OTHER* valid reasons why GCC is
being replaced -- among them:
1) GCC's continuously increasing propensity to generate bad code,


examples? All test shows that gcc code is not only bad, but very good.
Why are you just saying things you know isn't true?


0k, what if I add my example?

Hardware:
Processor: Intel Xeon E5620 (16 Cores), Motherboard: Supermicro X8DT3 
1234567890, Memory: 24576MB, Disk: SEAGATE ST3146855SS S527 + SEAGATE 
ST31000640SS 0001 + SEAGATE ST31000640SS 0001 + SEAGATE ST3146855SS S528 
+ TOSHIBA Trans 1.00 + TEAC DV-28S-V 1.0B


Software:
OS: FreeBSD, Kernel: 9.0-RELEASE-p3 (x86_64), Compiler: GCC 4.2.1 
20070831 + Clang 3.0 (SVN 142614), File-System: zfs


CPUTYPE=core2

clang 3.0
Test project /tmp/ports/usr/ports/graphics/png/work/libpng-1.5.11
Start 1: pngtest
1/2 Test #1: pngtest ..   Passed0.02 sec
Start 2: pngvalid
2/2 Test #2: pngvalid .   Passed   14.03 sec

gcc 4.6 (lang/gcc, USE_GCC=4.6+)
Test project /tmp/ports/usr/ports/graphics/png/work/libpng-1.5.11
Start 1: pngtest
1/2 Test #1: pngtest ..   Passed0.02 sec
Start 2: pngvalid
2/2 Test #2: pngvalid .   Passed   14.40 sec

gcc 4.2.1
Test project /tmp/ports/usr/ports/graphics/png/work/libpng-1.5.11
Start 1: pngtest
1/2 Test #1: pngtest ..   Passed0.02 sec
Start 2: pngvalid
2/2 Test #2: pngvalid .   Passed   14.96 sec

This one shows that clang is superior to both gcc 4.2.1 and gcc 4.6.

I haven't test data now but a month or so ago I tested them on one of 
the Alioth Shootout examples (nestedloop probably). gcc 4.2.1 was 
winning, clang was close with fractions of percent drop of speed but gcc 
4.6 was off for nearly 7%.



3) The continuously increasing trend of introducing 'non standard'
features,

No need to use them.


There's no 'Unsubscribe me' link included...

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Why Clang

2012-06-20 Thread Volodymyr Kostyrko

Wojciech Puchar wrote:

Here[1] we can read a program linking agains a gpl v3 library should
be released
under the gplv3 too. However, the only concern would be when the
program is
implicitly linked against libgcc right? Well, there's even an
exception[2] for this.


this is exactly how i understand that. Anyway DragonFly BSD developers
(which is BSD licenced) don't have any problems and just use latest gcc.


I'm not saying moving to clang is a bad idea.


I am saying this. Moving to worse compiler is a definitely bad idea.

This is not a place of politics. As GPLv3 doesn't prevent it from being
used in FreeBSD and is better - it should be used. It's simple.

If clang would be better - it should be used.


Can anyone provide an example of viral propagation of the license if
we compile
the base system with a gpl v3 gcc?


there are none probably.

Before actually testing it i believed we move to clang because it is
better compiler AND and supported a move. Good lesson to test first and
don't believe, even with FreeBSD.


The bad thing about GPLv3 is that if anyone commits any code under this 
license into the tree vendors that use our code base for making their 
own OSes will ditch FreeBSD as they can be sued by FSF. Juniper for 
example. It would be wise to listen to their point of view on GPLv3.


As for DragonflyBSD they AFAIK are taking the path of fixing world to 
build on any stock compiler as we currently do. And they have no such 
user base to support.


FreeBSD is heading the right way: bringing BSD toolchain to the world 
and fixing world compilation with gcc46 from ports would give anyone a 
choice on which compiler to use keeping GPL out of tree.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Why Clang

2012-06-20 Thread Volodymyr Kostyrko

Wojciech Puchar wrote:


The bad thing about GPLv3 is that if anyone commits any code under
this license into the tree vendors that use our code base for making
their own OSes will ditch FreeBSD as they can be sued by FSF. Juniper
for example. It would be wise to listen to their point of view on GPLv3.


not really understood this.


if anyone commits any code under this
license into the tree

into what tree? gcc tree or FreeBSD tree?


I was talking about FreeBSD sources here.


FreeBSD has it's own copy of gcc so any change in gcc doesn't
automatically change FreeBSD code and licencing.


FreeBSD has old and abandoned copy of gcc, the last version available 
under GPLv2 license.



FreeBSD is heading the right way: bringing BSD toolchain to the world
and fixing world compilation with gcc46 from ports would give anyone a
choice on which compiler to use keeping GPL out of tree.


the right way is to use best performing tools as long as no law problems
exist.


There can be different ways for selecting best tools. Someone needs 
better performance while other one state that stability is a must. For 
now clang is a choice for stability and not the performance. Yet due to 
the rapid development this is subject to change while gcc is not. Think 
of it like we are changing a car that shines for the one that can move.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: CLANG vs GCC tests of fortran/f2c program

2012-06-20 Thread Volodymyr Kostyrko

Wojciech Puchar wrote:

5. clang/llvm is more modular than gcc, although there are plans for
gcc to become as modular, it will take time.


Doesn't matter how it is written, but how it performs.


That's a hard one. I remember an error in gcc loop optimizer which makes 
gcc produce SSE2 opcodes for pre-SSE2 athlon chips. Due to gcc internal 
design such errors are often seen and almost never patched as you should 
have eternal knowledge of gcc code. gcc's bugtraq is just a cemetery.


Opposing to this ones most fixes to clang touch minimal source lines and 
minimal set of files.



Same should be used for clang. AS LONG as it is not better it should not
be imported into base system or worse - used as default.


And why you think it's not better then gcc?

With gcc I can result in code that will hang locking some parts of 
system forever, yet with clang the code will break predictably yielding 
a core and a point on where the debugging should start. That was long 
ago and I can't correctly remember the PR's are I noted this but that 
was long ago and helped me to debug ZFS issues a lot.


The code that runs faster is not the best one. The code that is 
predictable and runs as fast as possible is.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: CLANG vs GCC tests of fortran/f2c program

2012-06-20 Thread Volodymyr Kostyrko

Wojciech Puchar wrote:


And why you think it's not better then gcc?


because - as you already should know - test shows otherwise.


Test show only that clang-compiled binaries are still subject for 
improvement. It doesn't show how strict and clear this binary is.



As well as FreeBSD running predictable with gcc anyway.


You mileage may vary. I'm using clang-compiled world  ports on 
production servers since clang was added to the ports. And nothing bad 
happens to me.



Still theory and ideology.


That what you do too. You are stating clang is less potent only by 
counting speed estimates. You leave aside things like standard 
compliance, ease of use and healthy ecosystem.


Besides, NetBSD and OpenBSD has already selected and using pcc now. And 
they are fine with that one.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Why Clang?

2012-06-18 Thread Volodymyr Kostyrko

Thomas Mueller wrote:

Now one concern is wine not working when Clang is used to make buildworld.


For me I'm just waiting on toolchain stabilization as both this one and 
(open|libre)office fail because of libgcc_s compiled with clang on amd64.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: milter wants erase sendmail

2012-06-15 Thread Volodymyr Kostyrko

Andrey S. Rybak wrote:

hello!
i use bundle sendmail and milter greylist on my e-mail freebsd server.
every time I want upgrade milter-greylist it wants install sendmail
port. But I use sendmail+tls+sasl2 port.
There is conflict. I should deinstall sendmail+tls+sasl, install
milter-greylist, deinstall sendmail and then install sendmail+tls+sasl2.
Every time doing so I think something going not elegant. Is there more
simple path to upgrade milter-greylist?


IMHO creating multiple ports is horrible way for managing different 
configurations...


You can build mail/sendmail with SENDMAIL_WITH_TLS and 
SENDMAIL_WITH_SASL2. This way you will get exactly the same package 
originating from mail/sendmail.


You can simply alter package +CONTENTS to originate it from mail/sendmail.

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: setting gcc46 as default compiler?

2012-06-08 Thread Volodymyr Kostyrko

Jeff Hamann написал:

I've built and installed the gcc46 compiler(s) - need gfortran - and I can't 
seem to find the correct documentation on how to update /etc/make.conf for 
including the gfortran46.

This is what mine currently looks like:

$ cat make.conf
# added by use.perl 2012-06-07 03:03:21
PERL_VERSION=5.10.1
..if !empty(.CURDIR:M/usr/ports/*)  exists(/usr/local/bin/gcc46)
CC=gcc46
CXX=g++46
CPP=cpp46
FC=gfortran46
..endif

FFLAGS=-O2 -mtune=athlon64
CC=gcc46
CXX=g++46
CPP=cpp46
FC=gfortran46

$

Am I close? Help?


When I want some port to use gcc46 I use USE_GCC=4.6+. This takes care 
of depending ports on gcc port.


--
Sphinx of black quartz judge my vow.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: netstat: kvm_read: Bad address

2012-06-01 Thread Volodymyr Kostyrko

Anton Shterenlikht wrote:

On ia64 r231193 I get:

# netstat -r
netstat: kvm_read: Bad address

What's the problem?

Thanks



For jail environment this means that /dev is not mounted.

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


does anyone care about periodic scripts?

2012-05-07 Thread Volodymyr Kostyrko

Hi all.

It seems that patches to periodic scripts have hard time coming into the 
tree. I personally filed 
http://www.freebsd.org/cgi/query-pr.cgi?pr=conf/165817 and still there's 
no move despite change is purely cosmetical and just fixes right way of 
things.


And this is not just one and only case, pr's are numerous and get 
minimal to no attention at all:


http://www.freebsd.org/cgi/query-pr.cgi?pr=conf/165956

http://www.freebsd.org/cgi/query-pr.cgi?pr=conf/30938

How can I assist with this pr's? Whom should I bug to get some answer 
about them?


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: how often to update ports?

2012-04-09 Thread Volodymyr Kostyrko

Aleksandr Miroslav wrote:

How often do you folks update your ports/packages. I was manging two
servers for years for my personal web/email, and I've rarely gone for
more than 3 months with any single package being not up to date,
usually about once a month I would update all my ports.


Recently, in the past few months or so, I've added several more
servers, I currently have around 10 servers that I'm managing, and
because of changes in my work schedule, it has become somewhat quite
tedious to do this (keep ports updated as frequently, I mean).


From what I've gleaned from this list and other BSD mailing lists that

I'm on, is that some people don't update their port-installed packages
nearly as frequently (security patches/updates aside). Some people go
for months/years without doing so.

So I'm curious, how often do you keep your ports update, and what are
the reasons for doing so?


I update my desktops daily. The process is streamlined and doesn't need 
an eye on it. I'm updating servers weekly or so.


This means I have smaller blob of updates and almost never face large 
updates that broke everything.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 9.0 Snapshots

2012-03-22 Thread Volodymyr Kostyrko

Dean E. Weimer wrote:

Has anyone been using Snapshots on UFS with journaled soft-updates enabled?

I have a couple of new systems built after 9.0 came out, my backup
scripts take snapshots, and then mount them to backup the files, the
couple older servers that I upgraded from 8.2 to 9.0 from source are not
having any problems, a quick check shows their file systems aren't
running the new journaled Soft-Updates options. The new systems which
are, frequently hang up and become unresponsive when taking the snapshots.


Known issue, don't use SUJ with snapshots on 9.0 for now.

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.0 spontaneously reboots

2012-03-13 Thread Volodymyr Kostyrko

Matthew Seaman wrote:

On 12/03/2012 14:07, Volodymyr Kostyrko wrote:

What should I blame now? Is it some programming error or should I
continue with testing/changing motherboard and cpu?


Instability that appears spontaneously (and especially if it persists
across system updates) is almost always caused by hardware problems.
So, yes, carry on swapping out components until you can isolate where
the problem is.

Some common hardware problems which might result in the problems you've
seen:

* PSU going flakey.  If you have the right measuring equipment, this
  is pretty easy to detect by looking at the output voltages -- if
  they've drifted out of spec, or if you've got mains frequency
  jitter leaking through then its no wonder your system crashes.


Sensors report everything is good.


* Similarly, if the crashing is associated with system load,
  (particularly at startup, when things are happening like disks
  spinning up) this can indicate a power supply fading under load.
  That can happen due to age, or because you've been adding extra
  hardware and haven't considered the power requirements.


The only load I know to cause sure lockup in some hours is memcached. 
Right now project is migrated to redis and machines survives for two 
weeks. Most common problem for lockup is ECC error.



* The other reason for crashing under load is overheating.
  Sometimes this can be cured easily by cleaning dust out of vents
  and heat-sinks.  Check too for fans either seized or running
  slowly.


Sensors reports normal temperature.


* You may need to clean off any old heat-sink compound and re-apply
  a fresh layer, especially if you've taken CPU coolers off at
  some point.

* There's also the old capacitor problem: electrolytic capacitors
  have a failure mode that generates some positive pressure inside
  them.  This is detectable by the end of the capacitor being bowed
  out, rather than slightly concave. (Generally this means a new
  motherboard, although I've heard of people being able to solder in
  replacements successfully.)


It's fully serviced SuperMicro server without any additional problems.


Other than that, try disconnecting and reconnecting peripherals like
disks or DVDs and so forth in various combinations to test if that
improves system stability.  One faulty component can knock the whole
machine over.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.0 spontaneously reboots

2012-03-13 Thread Volodymyr Kostyrko

Adam Vande More wrote:

I have one machine behaving unstable. This happened before 9.0. After
upgrading to 9.0 machine was given a light load and now it reboots. Memory
was already tested (without any errors) and changed after another reboot.



So your RAM is good enough to pass a memory test.  It doesn't mean it's not
the culprit.  Way too many false negatives from those things.


True. First server was stacked with Kingston memory, and now I moved to 
Hynix. And is still gives me sometimes ECC errors.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.0 spontaneously reboots

2012-03-13 Thread Volodymyr Kostyrko

Da Rock wrote:

I have one machine behaving unstable. This happened before 9.0. After
upgrading to 9.0 machine was given a light load and now it reboots.
Memory
was already tested (without any errors) and changed after another
reboot.


So your RAM is good enough to pass a memory test. It doesn't mean it's
not
the culprit. Way too many false negatives from those things.


Overnight soak test with memtest possible?


I'm currently thinking of moving projects from this server to get to it 
more closely. I can't take server down for so long. But it survives an 
hour in memtest.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 9.0 spontaneously reboots

2012-03-13 Thread Volodymyr Kostyrko

Matthew Seaman wrote:

The only load I know to cause sure lockup in some hours is memcached.
Right now project is migrated to redis and machines survives for two
weeks. Most common problem for lockup is ECC error.


I see.  That puts a different complexion on things.  Although it is
application specific it doesn't rule out hardware problems.  In fact,
given the nature of the error -- ECC problems -- it pretty much nails it
as something wrong with the RAM in that machine.

Given that memtest86 doesn't show any problems, and you can run a
similar workload with different software it suggests that you have a
memory stick (or sticks) that are marginal.  Something like extra heat
due to higher rates of memory accesses from a particular application
could be tipping it over the edge into failure.

The 'marginal' behaviour need not be a fault in the memory stick per se.
  It could simply be the particular characteristics of the memory you
have installed not being exactly compatible with your motherboard.  In
theory the memory conforming to a particular standard should avoid this
sort of problem, but this is unfortunately not completely infallible.
Swapping out memory sticks for an equivalent specification from a
different manufacturer should give good results.


I already moved from Kingston to Hynix with no luck. Next guess points 
is motherboard problem (as memory is separated between processors) or 
processor problem. I'll gonna pop one processor out Leaving all memory 
on another one.


The only other weird thing about this server is:

dev.cpu.0.temperature: 37,0C
dev.cpu.1.temperature: 37,0C
dev.cpu.2.temperature: 35,0C
dev.cpu.3.temperature: 35,0C
dev.cpu.4.temperature: 43,0C
dev.cpu.5.temperature: 43,0C
dev.cpu.6.temperature: 38,0C
dev.cpu.7.temperature: 38,0C
dev.cpu.8.temperature: 38,0C
dev.cpu.9.temperature: 38,0C
dev.cpu.10.temperature: 37,0C
dev.cpu.11.temperature: 37,0C
dev.cpu.12.temperature: 33,0C
dev.cpu.13.temperature: 33,0C
dev.cpu.14.temperature: 34,0C
dev.cpu.15.temperature: 34,0C

And it's consistent - cores 4 and 5 always are hotter then any other. 
This can be something with scheduler, however this started before any 
actual load. Though numbers are normal I had never seen something alike...


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


9.0 spontaneously reboots

2012-03-12 Thread Volodymyr Kostyrko

Hi all.

I have one machine behaving unstable. This happened before 9.0. After 
upgrading to 9.0 machine was given a light load and now it reboots. 
Memory was already tested (without any errors) and changed after another 
reboot.


I just have one snippet in the logs:

Mar 12 07:51:56 beeb kernel: interrupt   total
Mar 12 07:51:56 beeb kernel: irq18: ehci0 uhci5+  325
Mar 12 07:51:56 beeb kernel: irq19: uhci2 uhci4  4350
Mar 12 07:51:56 beeb kernel: irq23: ehci1 uhci3272776
Mar 12 07:51:56 beeb kernel: cpu0:timer 306304013
Mar 12 07:51:56 beeb kernel: irq256: mpt0   106758743
Mar 12 07:51:56 beeb kernel: cpu1:timer  50588836
Mar 12 07:51:56 beeb kernel: cpu14:timer 40862828
Mar 12 07:51:56 beeb kernel: cpu12:timer 0057
Mar 12 07:51:56 beeb kernel: cpu6:timer  51650325
Mar 12 07:51:56 beeb kernel: cpu13:timer 35826328
Mar 12 07:51:56 beeb kernel: cpu3:timer  47414874
Mar 12 07:51:56 beeb kernel: cpu10:timer101158759
Mar 12 07:51:56 beeb kernel: cpu2:timer 116817563
Mar 12 07:51:56 beeb kernel: cpu8:timer 137051223
Mar 12 07:51:56 beeb kernel: cpu7:timer  31732225
Mar 12 07:51:56 beeb kernel: cpu11:timer 43244351
Mar 12 07:51:56 beeb kernel: cpu4:timer  83143936
Mar 12 07:51:56 beeb kernel: cpu9:timer  49622770
Mar 12 07:51:56 beeb kernel: cpu5:timer  40662969
Mar 12 07:51:56 beeb kernel: cpu15:timer 27434472
Mar 12 07:51:56 beeb kernel: irq257: igb0:que 0  20058599
Mar 12 07:51:56 beeb kernel: irq258: igb0:que 1  15054525
Mar 12 07:51:56 beeb kernel: irq259: igb0:que 2  14738762
Mar 12 07:51:56 beeb kernel: irq260: igb0:que 3  14702046
Mar 12 07:51:56 beeb kernel: irq261: igb0:que 4  14842310
Mar 12 07:51:56 beeb kernel: irq262: igb0:que 5  15035818
Mar 12 07:51:56 beeb kernel: irq263: igb0:que 6  14826606
Mar 12 07:51:56 beeb kernel: irq264: igb0:que 7  14924631
Mar 12 07:51:56 beeb kernel: irq265: igb0:link  2
Mar 12 07:51:56 beeb kernel: Total  1461395023
Mar 12 07:51:56 beeb kernel: KDB: stack backtrace:
Mar 12 07:51:56 beeb kernel: #0 0x8038d458 at kdb_backtrace+0x58
Mar 12 07:51:56 beeb kernel: #1 0x80315b4b at watchdog_fire+0x8b
Mar 12 07:51:56 beeb kernel: #2 0x80315e10 at hardclock_anycpu+0x2a0
Mar 12 07:51:56 beeb kernel: #3 0x80583278 at handleevents+0xd8
Mar 12 07:51:56 beeb kernel: #4 0x80583e36 at timercb+0x2d6
Mar 12 07:51:56 beeb kernel: #5 0x805aec46 at 
lapic_handle_timer+0xb6

Mar 12 07:51:56 beeb kernel: #6 0x80557f2c at Xtimerint+0x8c
Mar 12 07:51:56 beeb kernel: #7 0x8055c348 at cpu_idle_acpi+0x38
Mar 12 07:51:56 beeb kernel: #8 0x8055c402 at cpu_idle+0xa2
Mar 12 07:51:56 beeb kernel: #9 0x80380b7f at sched_idletd+0x37f
Mar 12 07:51:56 beeb kernel: #10 0x80331d36 at fork_exit+0x76
Mar 12 07:51:56 beeb kernel: #11 0x8055790e at fork_trampoline+0xe

What should I blame now? Is it some programming error or should I 
continue with testing/changing motherboard and cpu?


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Dynamic Libraries

2012-03-07 Thread Volodymyr Kostyrko

Doug Hardie wrote:

I have encountered something that I do not understand.  Everything works fine.  
Basically I have a bunch of user modules (low level) that are built into a 
dynamic library.  If I write top level code that calls modules in that library, 
everything works just fine on i386 and AMD64.  However, the application 
involved has another library of modules.  Some of them call modules in the low 
level library.  The top level code call modules in both libraries.  Often when 
it calls a module in the mid level library, that module calls several modules 
in the low level library.

All this works just fine on i386.  However, when I compile everything on AMD64 
I get an error message that says the lower level library needs to be compiled 
with fPIC.  If I add that to the Makefile for the lower level library and 
rebuild everything, it all works again.  I don't understand why the fPIC is 
required for AMD64.

Also, how do I tell if the lower level library is being dynamically linked at 
run time, or being directly incorporated into the mid level library or top 
level application?  Since both of these libraries are quite large, and they are 
in use by a number of top level applications, I want just one copy to exist in 
physical memory.


This sounds exactly like compiling with clang through ccache. There are 
issues with clang and ccache cooperation. Actually the one you may hit 
is libtool detecting implicit fPIC requirement when running clang 
through ccache.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: openssl from ports

2012-03-03 Thread Volodymyr Kostyrko

Matthew Seaman wrote:

Stable/9, but this hasn't changed in 9.0-RELEASE:

worm:~:# /usr/bin/openssl version
OpenSSL 0.9.8q 2 Dec 2010


Matthew, why does FreeBSD continue to use an older version of OPENSSL
for the base system when a newer version is available? While I could
understand, even if not fully approve the use of an older version in
the same major version, its continues use as the de facto standard in an
entirely new major version release is counter productive. There have
been many improvements in the 1.x release of OPENSSL so I fail to see
the logical use of the older version. If anything, they (the FreeBSD
developers) could keep this older version available in the ports system
and use the newer version as the default in the base system.


Unfortunately I can't answer that.  I'm not in any position to decide
such things.

However I can hazard a guess at some of the possible reasons:

* openssl API changes between 0.9.x and 1.0.0 mean updating the
  shlibs is not a trivial operation, and it was judged that the
  benefits obtained from updating did not justify the effort.

* no one had any time to import the new version.  There's plenty of
  security-critical stuff depending on openssl, and making sure all
  of that didn't suffer from any regressions is not a trivial job.

* simply that no one thought of doing the upgrade.


Actually there is something weird about openssl maintenance:

http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/163951

I asked in the lists, bugged different persons and still can't get clear 
answer about this vulnerability.


You know I'm just not feeling safe with ECDSA keys...

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: VERY slow performance on igb+FreeBSD8.2+mpd5.6

2012-02-24 Thread Volodymyr Kostyrko

Коньков Евгений wrote:


#uname FreeBSD 8.3-PRERELEASE #2 r231881: Thu Feb 23 00:53:28 UTC 2012
и Version 5.6 (root@ 10:03 20-Feb-2012)
http://www.speedtest.net/result/1790445113.png
try to reconnect to mpd 10-20times and you get next:
http://www.speedtest.net/result/1790454801.png


Used server differs in your images. Would you please track down assigned 
IP's?


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


system reboot yielding no coredump

2012-02-09 Thread Volodymyr Kostyrko

Hi all.

Has anyone else seen this:

Feb  9 14:41:33 beeb kernel: interrupt   total
Feb  9 14:41:33 beeb kernel: irq18: ehci0 uhci5+  325
Feb  9 14:41:33 beeb kernel: irq19: uhci2 uhci4  5180
Feb  9 14:41:33 beeb kernel: irq23: uhci3 ehci1 78296
Feb  9 14:41:33 beeb kernel: cpu0:timer  87480961
Feb  9 14:41:33 beeb kernel: irq256: igb0:que 0   4233015
Feb  9 14:41:33 beeb kernel: irq257: igb0:que 1   3164805
Feb  9 14:41:33 beeb kernel: irq258: igb0:que 2   3230196
Feb  9 14:41:33 beeb kernel: irq259: igb0:que 3   3149873
Feb  9 14:41:33 beeb kernel: irq260: igb0:que 4   3120911
Feb  9 14:41:33 beeb kernel: irq261: igb0:que 5   3207821
Feb  9 14:41:33 beeb kernel: irq262: igb0:que 6   3135338
Feb  9 14:41:33 beeb kernel: irq263: igb0:que 7   3237378
Feb  9 14:41:33 beeb kernel: irq264: igb0:link  2
Feb  9 14:41:33 beeb kernel: irq274: mpt034436250
Feb  9 14:41:33 beeb kernel: cpu1:timer   8585682
Feb  9 14:41:33 beeb kernel: cpu12:timer 10785198
Feb  9 14:41:33 beeb kernel: cpu6:timer   6794891
Feb  9 14:41:33 beeb kernel: cpu13:timer  6626277
Feb  9 14:41:33 beeb kernel: cpu7:timer  13703957
Feb  9 14:41:33 beeb kernel: cpu11:timer  8628910
Feb  9 14:41:33 beeb kernel: cpu5:timer   7938263
Feb  9 14:41:33 beeb kernel: cpu14:timer  6264729
Feb  9 14:41:33 beeb kernel: cpu4:timer  14017666
Feb  9 14:41:33 beeb kernel: cpu10:timer 18995834
Feb  9 14:41:33 beeb kernel: cpu9:timer   9905748
Feb  9 14:41:33 beeb kernel: cpu2:timer  23572337
Feb  9 14:41:33 beeb kernel: cpu8:timer  29507301
Feb  9 14:41:33 beeb kernel: cpu3:timer   9653985
Feb  9 14:41:33 beeb kernel: cpu15:timer  5084039
Feb  9 14:41:33 beeb kernel: Total   328545171
Feb  9 14:41:33 beeb kernel: KDB: stack backtrace:
Feb  9 14:41:33 beeb kernel: #0 0x8038d458 at kdb_backtrace+0x58
Feb  9 14:41:33 beeb kernel: #1 0x80315b4b at watchdog_fire+0x8b
Feb  9 14:41:33 beeb kernel: #2 0x80315e10 at hardclock_anycpu+0x2a0
Feb  9 14:41:33 beeb kernel: #3 0x80583278 at handleevents+0xd8
Feb  9 14:41:33 beeb kernel: #4 0x80583e36 at timercb+0x2d6
Feb  9 14:41:33 beeb kernel: #5 0x805aec46 at 
lapic_handle_timer+0xb6

Feb  9 14:41:33 beeb kernel: #6 0x80557f2c at Xtimerint+0x8c
Feb  9 14:41:33 beeb kernel: #7 0x80dc8e53 at kcs_wait_for_obf+0x83
Feb  9 14:41:33 beeb kernel: #8 0x80dc935d at kcs_read_byte+0x2d
Feb  9 14:41:33 beeb kernel: #9 0x80dc91ce at kcs_loop+0x34e
Feb  9 14:41:33 beeb kernel: #10 0x80331d36 at fork_exit+0x76
Feb  9 14:41:33 beeb kernel: #11 0x8055790e at fork_trampoline+0xe

I can't get a full dump for some reason unknown. This happens on RELENG_9_0.

Feb  9 14:46:56 beeb kernel: CPU: Intel(R) Xeon(R) CPU   E5620 
@ 2.40GHz (2394.05-MHz K8-class CPU)
Feb  9 14:46:56 beeb kernel: Origin = GenuineIntel  Id = 0x206c2 
Family = 6  Model = 2c  Stepping = 2
Feb  9 14:46:56 beeb kernel: 
Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH

,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE
Feb  9 14:46:56 beeb kernel: 
Features2=0x29ee3ffSSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,

SSE4.1,SSE4.2,POPCNT,AESNI
Feb  9 14:46:56 beeb kernel: AMD 
Features=0x2c100800SYSCALL,NX,Page1GB,RDTSCP,LM

Feb  9 14:46:56 beeb kernel: AMD Features2=0x1LAHF
Feb  9 14:46:56 beeb kernel: TSC: P-state invariant, performance statistics

What can I do in such case? How can I create a goot dump to inspect it?

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: no borders with firefox, terminal (xfce on FreeBSD 9.0 amd64 STABLE)

2012-02-01 Thread Volodymyr Kostyrko

Antonio Olivares wrote:

Dear folks,

I am having some difficultites when starting up the desktop.  The
desktop starts up automagically and when I start firefox or terminal
there is no border :(.  Upon logging out and unchecking Save Settings,
and relogging back in the borders appear.  I have had this happen once
on one of my FreeBSD 8.2 amd64 boxes, but I fixed it somehow with the
settings.  Now I can't find the settings that cause this.  All I know
is that if I log out and un check save settings, the border appear
again and all is well.  But if I reselect the save settings box, and
log out and back in, the borderless windows appear :(  How can I
troubleshoot this?  Any ideas, suggestions, comments are greatly
appreciated.


What is your DM and does it save logs? You can find some hints there.

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: portmaster best practices

2012-01-24 Thread Volodymyr Kostyrko

Victor Sudakov wrote:

If portaudit shows that some installed packages have vulnerabilities,
what do you usually do?


Greatly depend on where am I. All my systems are staying up-to-date
whereas when I'm visiting someones system I prefer to update only
required pieces of software. Anyway if you tell portmaster to update
port x it would try to update all ports it depends on.


Does it often screw things up when updating dependencies (both
ascending and descending ones)? Do you recommend to always update the
ascending dependencies (portmaster -r) also?


I never faced any problems updating ports with portmaster. Mostly 
because portmaster always backups old libraries to compat folder for me 
as stated in my configuration file:


/usr/local/etc/portmaster.rc:
NO_BACKUP=Bopt
PM_VERBOSE=vopt
SAVE_SHARED=wopt
DONT_SCRUB_DISTFILES=Dopt

NO_BACKUP means don't create a temporary package when deleting 
something. This is unsuitable for me as /usr/ports in my network is 
distributed via NFS ro.


PM_VERBOSE increases detail level.

SAVE_SHARED is a must, it tells portmaster to propagate deleted shared 
libraries to compat directory. This way updating any port to newer lib 
version will have no impact on ports requiring previous versions.


DONT_SCRUB_DISTFILES also is redundant for me as /usr/ports is read only 
and I don't want to drop sources of python 2.5 when building python 2.7 
as python2.5 is still needed for AppEngine for example.


Personally I never use -r as anything that can be fixed with that one 
can be fixed with pkg_libchk and careful planning.



The better way of debugging such problems for me is pkg_libchk from
sysutils/bsdadminscripts.


I use sysutils/libchk when I have to, but it is a tedious manual job I
would like to avoid.


They are almost the same except pkg_libchk doesn't depend on ruby and 
works in parallel better (for me).


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: portmaster best practices

2012-01-23 Thread Volodymyr Kostyrko

Victor Sudakov wrote:

Hello portmaster users,

If portaudit shows that some installed packages have vulnerabilities,
what do you usually do?


Greatly depend on where am I. All my systems are staying up-to-date 
whereas when I'm visiting someones system I prefer to update only 
required pieces of software. Anyway if you tell portmaster to update 
port x it would try to update all ports it depends on.



Do you upgrade only the vulnerable packages, or vulnerable packages
and dependent packages (portmaster -r), or perhaps all packages
(portmaster -a)? Or do you pkg_delete -a all packages first and then
reinstall from scratch (from `portmaster --list-origins` perhaps)?

I am a bit uneasy about portmaster -a because, for example, in the
output below it intends to install a package which is already
installed:


pg01-sibptus# portmaster -n -a
===  Gathering distinfo list for installed ports

[dd]
Upgrade php5-ldap-5.3.5_1 to php5-ldap-5.3.9
Install net/openldap24-sasl-client
Upgrade postgresql-server-9.0.1 to postgresql-server-9.0.6_3
Upgrade tcl-8.5.9 to tcl-8.5.11
Upgrade vim-7.3.81 to vim-7.3.121
Install devel/gettext

===  Proceed? y/n [y] n

===  If you would like to upgrade or install some, but not
all of the above try adding '-i' to the command line.
pg01-sibptus#
pg01-sibptus#
pg01-sibptus# pkg_info -xo openldap
Information for openldap-sasl-client-2.4.24:

Origin:
net/openldap24-client


As far as I recall there was some glitches with correct detection of 
openldap24-client presence (some symbols moving around or so). Generally 
I never pay attention to this glitches and when (or if) update process 
fails I try to recompile mentioned port with portmaster. Then update 
process can be continued with `portmaster -a`.


The better way of debugging such problems for me is pkg_libchk from 
sysutils/bsdadminscripts.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: problem to kill -KILL process

2012-01-23 Thread Volodymyr Kostyrko

Коньков Евгений wrote:

Hi

# ps ax|grep rad
45471  ??  TLs   263:35.44 /usr/local/sbin/radiusd
26473   1  S+   0:00.00 grep rad
flux# date
Fri Jan 20 23:20:28 UTC 2012
flux# kill -KILL 45471
flux# date
Fri Jan 20 23:20:41 UTC 2012
flux# kill -KILL 45471
flux# date
Fri Jan 20 23:20:54 UTC 2012
flux# kill -KILL 45471


top
 9 root16- 0K 8K syncer  2   7:12  0.00% syncer
45471 freeradius  20  -20   311M   283M STOP0   3:38  0.00% {radiusd}
49114 root210 10460K  4240K select  0   2:43  0.00% zebra


Looks like some bad things happen. Try kill -19 45471 to continue 
radiusd execution, maybe that helps.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: 3.6.13 firefox fonts are blurred on my 8.2 freebsd

2012-01-12 Thread Volodymyr Kostyrko

akshay sreeramoju wrote:

Hi,

I am running a freebsd 8.2 and it is fun. But firefox displays its fonts
blurred. Can any one guide/point me on how to correct this?

A snapshot of my screen is here: http://tinypic.com/r/vhar82/5


This pic is awful, can you post a better one?

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


what is a correct way to build ports with clang

2012-01-11 Thread Volodymyr Kostyrko

Hi all.

I recently stumbled upon minor inconsistency when building misc/mc. The 
build goes well when CPP is unset or when CPP=clang -E, but fails when 
CPP=clang-cpp:


/tmp/ports/usr/ports/misc/mc/work/mc-4.7.5.5/config.log:

configure:23603: checking for slang.h
configure:23618: clang-cpp -ltermcap -I/usr/local/include 
-I/usr/include -L/usr/lib conftest.c

Stack dump:
0.  Program arguments: clang-cpp -ltermcap -I/usr/local/include 
-I/usr/include -L/usr/lib conftest.c

1.  Compilation construction
2.  Building compilation actions
configure:23618: $? = 139

What is the correct way to build ports with clang? Wiki states that CPP 
should be set to clang-cpp for everyone however this doesn't work here.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Building FreeBSD for two or more architectures but not all

2012-01-11 Thread Volodymyr Kostyrko

Thomas Mueller wrote:

How would I build FreeBSD, in this case 9.0-RELEASE, for two or more 
architectures, in this case i386 and amd64?

One build (amd64) would update the present system (9.0 RC3), but the other 
would go on a USB stick, likely 16 GB.

Real question is how to keep things like /usr/obj and other things from the two 
builds separate.

I don't want to 'make universe' when I won't run on anything other than i386 
and amd64.

I want to build both on the new computer because the old computer is short on 
disk space and has only 256 MB RAM.


You can add TARGET=i386 to 'make' commands. It would use other directory 
inside /usr/obj.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Updating FreeBSD

2012-01-11 Thread Volodymyr Kostyrko

Артем Каялайнен wrote:

I don't have any options in make.conf on first machine, nor on second
machine. I've googled a little and found, that _p is profiling library
and it can be ignored with -DNO_PROFILE option. But in this case,


How about compairing /etc/src.conf?

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: VirtualBox USB support

2011-12-28 Thread Volodymyr Kostyrko

27.12.2011 19:55, Alain G. Fabry wrote:

Hello in the FreeBSD handbook it mentions there's USB support in 
Virtualbox. In other sources I read however that the VBoxPuelMain module is not 
supported in FreeBSD.


VirtualBox comes with basic USB support, extension pack provides USB2.0 
support.



So I'm wondering if the VBox extension pack needs to be installed since it is 
not mentioned in the Handbook. When trying to install the extension Pack, I get 
the VBoxPuelMain error, but without this and following the instructions in the 
handbook, my guest OS's don't see any USB devices (Nor do I see them in 
preferences of VBox)


You have to enable usb in machine preferences.

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: PAM configuration to allow passwords from both Unix and Kerberos

2011-12-13 Thread Volodymyr Kostyrko

12.12.2011 20:35, Matt Mullins wrote:

On Mon, Dec 12, 2011 at 1:40 AM, Volodymyr Kostyrkoc.kw...@gmail.com  wrote:

10.12.2011 04:22, Matt Mullins wrote:

auth optional   pam_deny.so
auth sufficient pam_unix.so no_warn try_first_pass
auth sufficient pam_krb5.so no_warn try_first_pass



Why you just haven't changed the last line to `required`?


I did try that, but I omitted it due to completely failing behavior.
pam_krb5.so returns failure during pam_setcred() if the user did not
log in with Kerberos credentials, whereas pam_unix.so succeeds as long
as the uid exists (I'm using nss_ldap for that part, so all the uids
do indeed exist).  Thus, pam_unix.so will work with required, but
pam_krb5.so won't.


Why just don't get stock `/usr/src/etc/pam.d/sshd` and uncomment anything
related to kerberos? That's quite simple unlike managing `su`.


That's pretty much what I did.  I'm a little unhappy since pam_krb5.so
is before pam_unix.so in the list, so if the KDC goes down I have to
wait for a time-out to log in to my system... but that's always better
than letting anyone in :)


So how about:
auth sufficient pam_unix.so no_warn try_first_pass
auth sufficient pam_krb5.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: PAM configuration to allow passwords from both Unix and Kerberos

2011-12-12 Thread Volodymyr Kostyrko

10.12.2011 04:22, Matt Mullins wrote:

For my systems, the canonical source of authentication information is
a Kerberos server, but I also want to support old-fashioned Unix
passwords for a handful of users (including myself) just in case the
Kerberos system is unreachable.  I'm having a bit of trouble adjusting
to the semantics of FreeBSD's PAM configuration, it seems.  The
following is what I have tried in /etc/pam.d/sshd:

auth optional   pam_deny.so
auth sufficient pam_unix.so no_warn try_first_pass
auth sufficient pam_krb5.so no_warn try_first_pass


Why you just haven't changed the last line to `required`?


This does what I want: tries Unix authentication, and for most users,
then goes and tries Kerberos authentication.  However, it also seems
to allow access if the module does something other than success or
failure: I hit ^D at the SSH password prompt and it grants me access!
Adding debug to these lines doesn't seem to get anything additional
logged, so I'm actually not sure why PAM ends up with a success code
somewhere.

I flipped this logic around and did:

auth sufficient pam_unix.so no_warn
auth sufficient pam_krb5.so no_warn try_first_pass
auth required   pam_deny.so


That's not what you want. Read pam_deny(8). It has no use for real world 
scenarios except when something goes weird.



This does exactly what I want for services like sudo, that just use
pam_authenticate(), but since sufficient is equivalent to optional
in pam_setcred(), sshd fails all authentications with:
Dec  9 15:05:18 boron-shell sshd[66617]: fatal: PAM: pam_setcred():
failed to retrieve user credentials

I am completely stumped how to get this behavior working for both
pam_authenticate and pam_setcred calls.  Can someone enlighten me what
a more normal way to do this would be?


Why just don't get stock `/usr/src/etc/pam.d/sshd` and uncomment 
anything related to kerberos? That's quite simple unlike managing `su`.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FS of choice for max random iops ( Maildir )

2011-09-17 Thread Volodymyr Kostyrko

17.09.2011 00:39, free...@top-consulting.net wrote:

I even went as far as disabling the cache flush option of ZFS through
this variable: vfs.zfs.cache_flush_disable: 1, since I already have the
write cache of the controller. I've also set some other variables as per
the Tuning guide but according to several benchmarks ( iozone, bonnie++,
dd ) ZFS still comes in slower than UFS at pretty much everything.


Oh, so you are making setup for running iozone, bonnie++ and dd 
continuously?


You really like to wait for hours before fsck will finish checking for 
your volume?


Listen to the others, you need real world benchmark, not some stress-tests.

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FS of choice for max random iops ( Maildir )

2011-09-17 Thread Volodymyr Kostyrko

16.09.2011 16:35, Terje Elde wrote:

Note: you might be in trouble if you loose your ZIL, thus the doubling up. I 
*think* you can SSD a cache without risking dataloss, but don't take my word 
for it.


Let me summarize this. ZFS will work even without ZIL or cache. Losing 
ZIL will make you LOSE DATA. It would be last 0 to 30 seconds of work. 
Losing cache gives you nothing bad.


I didn't tested but I think ZFS will panic when losing log device.

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Alternative windowmanagers

2011-08-07 Thread Volodymyr Kostyrko

07.08.2011 16:24, Matthias Apitz wrote:

El día Sunday, August 07, 2011 a las 12:05:12AM +0300, Volodymyr Kostyrko 
escribió:


05.08.2011 22:12, Christian Barthel wrote:

As a Gnome 2.3x user too, I am also a bit nervouse. Gnome 3 is a big
mistake. And there are also rumors that Gnome will be Linux only. Maybe,
we will never see Gnome3 under FreeBSD, but this is not a tragedy :)


Once a year I build up a Gnome or KDE to look at all this stuff... Then
I go back to E17.


I have installed /usr/ports/x11-wm/enlightenment
Could you please point me to a starters guide for beginners? Normaly I'm
using KDE 3.5.10, but will check it out. Thanks


Try http://www.enlightenment.org for example.

I'm starting it from .xsession like this:

exec /usr/local/bin/enlightenment_start

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Alternative windowmanagers

2011-08-06 Thread Volodymyr Kostyrko

05.08.2011 22:12, Christian Barthel wrote:

As a Gnome 2.3x user too, I am also a bit nervouse. Gnome 3 is a big
mistake. And there are also rumors that Gnome will be Linux only. Maybe,
we will never see Gnome3 under FreeBSD, but this is not a tragedy :)


Once a year I build up a Gnome or KDE to look at all this stuff... Then 
I go back to E17.



I am not very interested in eyecandy: I want a stable and fast wm (less
memory and cpu, quick access to important places), different workspaces,
and it should be configurable with ordinary files. Of course, It must
run under FreeBSD.

I sniffed into AfterStep, fvwm2 and fluxbox (I don't want to use KDE). I
think, fluxbox is a nice wm and for my future, it will be the default wm
for me. It's also very fast and easy to configure.

Are there any other window manager worth looking?

What is your window manager?


0k, I'll describe mine one for you:

= Enlightement 17 =

Eyecandy: 5. Maybe you don't need that, but that's doesn't eats up your 
cpu and mem. I think only KDE4 or MacOS can beat this one.


Memory: 4. The process eats up 30M on i386. Most plugins are loaded as 
modules so it's fairly light for most machines.


CPU: 4. With all eyecandy and staff it eats something about 18 secs per 
hour for me in average. It can eat more if some heavy plugins are loaded.


Configuration: 4. Not 5 because there's no text files for that. Apart 
that everything can be changed. I prefer unloading most modules like 
file manager, desktops, taskbars and other staff staying only with 
desktop, gadgets and fullscreen windows. You can set everything to work 
without a mouse, or you can set everything to work only with mouse. It 
gives me even higher level of freedom as XFCE.


Also it works perfectly with two monitors, while XFCE shows garbage on 
second one... Maybe I'm missing something though.


--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Virtualbox - no /dev/acd0 in VM even if it's booting from CD

2011-01-24 Thread Volodymyr Kostyrko

24.01.2011 15:22, Arthur Chance wrote:

I just upgraded to virtualbox-ose-3.2.12 (ditto the vbox kmod port), and
then tried to install a new VM. It booted from the CD fine but
sysinstall reported that it couldn't find a CD drive to install from.
Booting another VM that already existed showed the same problem -
/dev/ad0 exists but /dev/acd0 doesn't and there's no sign of it during
the device detection part of the boot.

Anyone else seeing this problem?

Details:

The host machine is amd64, running 8.1-RELEASE-p2 GENERIC.

The new VM is booting FreeBSD-8.1-RELEASE-i386-disc1.iso

The old VM is running i386 8.1-RELEASE-p1 GENERIC, and can't see
/dev/acd0 regardless of whether or not an ISO is attached to it.


VBoxManage showvminfo machine | grep Storage

Most likely you are using ICH6 based IE controller. Try switching to PIIX4.

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


  1   2   >