Re: SU+J Lost files after a power failure

2013-10-14 Thread RW
On Mon, 14 Oct 2013 05:02:22 -0400
Michael Powell wrote:

 David Demelier wrote:
 
  Hello there,
  
  I'm writing because after a power failure I was unable to log in on
  my FreeBSD 9.2-RELEASE. The SU+J journal were executed correctly
  but some files disappeared, including /etc/pwd.db. Thus I was
  unable to log in.
  
  I've been able to regenerate the password database with a live cd
  but I'm afraid that more files had disappeared somewhere else...
  
  I think this is a serious issue, the journal should not truncate
  files, so something should have gone wrong somewhere..

The journalling in  SU+J has nothing to do with data integrity.

When the system isn't shut-down cleanly, soft-updates are supposed to
leave the filesystem in a self-consistent state, except that it may
lose track of some freed disk space. The journal allows that space to
be recovered without the lengthy background fsck that used to cripple
performance.

If you are having problems with data integrity you might try gjournal or
zfs instead. If you look back at the lists before these were added
there was a lot of suspicion about soft-updates and background checks.
Some of the problems were explained by some (mostly desktop) drives
incorrecty reporting what has been commited to disk - I don't know
whether this is still the case.


 This error about the replay of the journal(s) failing is somewhat 
 disconcerting. 

I think this is probably a good thing. With background checks you would
(if you were looking) occasionally see unexpected soft-update
inconsistency during the background check, which would lead to a
foreground check on the next boot.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: SU+J Lost files after a power failure

2013-10-14 Thread RW
On Mon, 14 Oct 2013 18:34:36 +0200
David Demelier wrote:

 On 14.10.2013 14:39, RW wrote:

  If you are having problems with data integrity you might try
  gjournal or zfs instead.
 
 Why? SU+J is enabled by default. Isn't the purpose of a journaled file
 system to ensure that any bad shutdown will protect data?

SU+J isn't a journalled filesytem, it's a filesystem with soft-updates
that journals information about free space so it can be recovered
without having to go through the whole filesystem.




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: SU+J Lost files after a power failure

2013-10-14 Thread RW
On Mon, 14 Oct 2013 11:48:18 -0700
Charles Swiger wrote:



 Yes.  Without journalling, you'd normally perform the full
 timeconsuming fsck in the foreground.

Journalling removes the need for the background fsck which only recovers
lost space. 

  With journalling, it should be
 able to do a journal replay to restore the filesystem to an OK state,

My understanding is that the journal does nothing to restore the
filesystem other than keep track of orphaned memory. In all other
respect it's the job of soft-updates to keep the filesystem in an OK
state. When it doesn't you need a foreground check.

 but sometimes that doesn't restore consistency, in which case it
 usually fires off a background fsck rather than the foreground fsck.

I think if the journal fails, you would really need to run at least a
foreground preen, maybe a full fsck. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: SU+J Lost files after a power failure

2013-10-14 Thread RW
On Mon, 14 Oct 2013 11:48:18 -0700
Charles Swiger wrote:

 fsck_y_enable=YES

One of the most annoying things about SU+J is that fsck asks if you
want to use the journal. So fsck -y wont do a proper check unless the
journal replay fails. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: How do I ring a bell?

2013-10-07 Thread RW
On Mon, 07 Oct 2013 13:46:53 +0100
Frank Leonhardt wrote:


 Alas, not. The console driver won't ring the BIOS bell on anything
 I've tried. It might on a desktop with a built-in sound card and
 speakers, but it won't do anything with the beep speaker.

Are you sure you have one? The last two cases I bought didn't.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Old GPT/GELI disk issue

2013-09-18 Thread RW
On Tue, 17 Sep 2013 19:22:30 -0400
Andre Goree wrote:

 Hey list,
 
 I have a disk that was at one time part of a GPT/GELI configuration
 and thus, had a passphrase attached to it.
 
 I've since reformatted that disk and am using it for another purpose, 
 but the system still appears to think the disk should be unlocked via 
 passphrase.  I always have to enter some arbitrary passphrase to get 
 past the prompt, after which the system continues to boot as normal.
 I thought all I would need to do is comment the corresponding parts
 in /boot/loader.conf, but that doesn't appear to be the case.  Anyone
 have any insight?


geli metadata is stored in the last sector of the provider which wont
get overwritten by newfs or similar.

I guess you need to run geli clear on it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: AMD Phenom II X4 temperature issues (was Re: hardware monitor)

2013-08-05 Thread RW
On Mon, 5 Aug 2013 10:33:55 +0400
Eugene wrote:

 Hello Gary,
 
 Also make sure there is no packed dirt on the heatsink -- I don't
 know about AMDs, but older Intel heatsinks often tend to accumulate a
 paper-like layer of dirt on the 'top' of heatsink grid, blocking the
 airflow. I once had several thermal shutdowns on my home PC before I
 found that. This does not seem to happen with newer heatsinks so they
 must have changed the design somehow =)

I had a AMD Phenom II X4 and it had exactly that problem. Every few
months I had to remove the fan to get a brush into the fins. An idle
temperature of 45 C sounds about right for one that's been neglected.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Unusual file: /bin/[

2013-07-29 Thread RW
On Mon, 29 Jul 2013 14:25:08 +0100
Paul Macdonald wrote:

 
 Hi, I spotted what i'd call an unusual file in the basejail on a jail 
 install, and have since seen this on other non jailed boxes.
 
 -r-xr-xr-x   2 root  wheel   11488 Jun 10 12:19 [
 
 man [  reveals
 
  test, [ -- condition evaluation utility
 
 just checking thats all ok, and i've not been rooted!

The idea was to make shell scripts more readable as you can have
something like: 

   if [ ${x} -gt 1 ] ...

[ is a hard-link to /bin/test and the closing] ] is its last argument.

In most modern  shells its a builtin feature and /bin/[ isn't used.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: UEFI Secure Boot

2013-07-08 Thread RW
On Mon, 08 Jul 2013 19:24:38 -0300
Sergio de Almeida Lenzi wrote:

 I could not find only a one user that wants to use FreeBSD and/or
 LInux AND windows

Some people don't want to delete a preinstalled copy of Windows so they
can buy another and install it in a virtual server. 

There are also fairly obvious reasons why one may want Windows to have
direct access to the hardware.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD maximum password length

2013-06-17 Thread RW
On Mon, 17 Jun 2013 17:52:48 +
Teske, Devin wrote:

 
 On Jun 17, 2013, at 10:28 AM, Mark Felder wrote:
 
  On Mon, 17 Jun 2013 12:25:54 -0500, Teske, Devin
  devin.te...@fisglobal.com wrote:
  
  The default in FreeBSD is MD5
  
  MD5 is no longer the default.
  
  
  http://svnweb.freebsd.org/base?view=revisionrevision=238484
 
 Huzzah!
 
 9.1-RELEASE and higher indeed use sha512 as the new default.
 
 8.4 still using md5 though (and expected to stay that way).
 
 Question…
 
 Is sha512 the highest it goes in our system?

The precise cipher/hash is almost irrelevant. What's important is the
amount of work needed to evaluate a password in a bruteforce dictionary
attack. MD5 is still OK for password hashing, the problem is an
inadequate number of iterations in our particular implementation. A
similar problem exists with blowfish and arguably all of the rest.

Another problem is that all current schemes are inadvertently optimised
for GPU attack since they run in very little memory.

The bottom line is: don't let anyone steal your password file. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: define more partitions in freebsd

2013-06-02 Thread RW
On Sun, 2 Jun 2013 11:35:58 +0430
s m wrote:

 thanks guys,
 
 i understand another solution is GPT partitioning. but i prefer to
 have more partitions in traditional freebsd (with MBR table i think).
 using GPT is the last solution for me.
 
 i should create more than 8 partitions with gpart command (flag n
 which identifies entries) but i have errors when using it. is there
 any special option which should be included in kernel in order to use
 gpart with flag n? any one test it before?

IIRC it's possible to label traditional BSD partitions recursively
allowing an unlimited number e.g. if you relabel ad0S1f you can have
ad0S1fa, ad0S1fb etc
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: swap partition leads to instability?

2013-05-30 Thread RW
On Wed, 29 May 2013 19:52:02 + (UTC)
jb wrote:

 RW rwmaillists at googlemail.com writes:
 
  

  BTW you mean paging, or swap use, rather that swapping. Linux
  supports only paging, so it can be taken as read that swapping
  means paging, but FreeBSD supports both.
 
 Yes, there is some confusion about the diff, if any, between paging
 and swapping.
 
 Paging - copying or moving pages between physical memory (RAM) and
 secondary storage (e.g. hard disk), in both directions.
 Swapping - nowdays is synonymous with paging.
   But its history is as follows (per Wikipedia):

This is a bit Linux-centric.

 You say that FB supports both, Linux supports paging only.
 Well, Linux utilizes swap space as part of virtual memory.
 So, can you elaborate more on that - what is the essence of the diff,
 why should I avoid the term swapping when referring to Linux,
 assuming VMM systems on both ?

You page-out pages and swap-out processes. 

When FreeBSD is very short of memory it swaps-out entire processes to
concentrate the memory in the running processes. Linux goes directly
from paging to killing processes.

You can also set vm.swap_idle_enabled to allow idle processes to be
swapped during normal use. This may help if a server has a lot memory
tied up in processes that tend to be idle for long periods of time -
traditionally used on shell servers. These days you'd probably want to
be adding more memory.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: swap partition leads to instability?

2013-05-30 Thread RW
On Sun, 26 May 2013 18:48:18 -0500
Adam Vande More wrote:


 Um, that is wrong.  It is in fact the basically the point of TRIM.
 And SSD's typically use the best form of wear leveling and it's
 usually advisable to leave a bit of the drive unpartitioned/unused to
 ensure the wear leveling works optimally.

Would the UFS  default 8% reserve achieve that?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: swap partition leads to instability?

2013-05-29 Thread RW
On Sun, 26 May 2013 12:36:42 + (UTC)
jb wrote:


 But, swapping is also a symptom, not a problem.
 It is never a good idea to let it get to that point.

No, there are thing that are better on disk than in memory. The most
common example is tmpfs. It's much better that files left on tmpfs can
sent to disk rather tying up physical memory indefinitely. 

BTW you mean paging, or swap use, rather that swapping. Linux supports
only paging, so it can be taken as read that swapping means paging, but
FreeBSD supports both.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: swap partition leads to instability?

2013-05-29 Thread RW
On Wed, 29 May 2013 13:57:22 +0200
Fred Morcos wrote:


 Linux has a sysctl variable vm.swappiness which you can set to 0 or 1
 out of 100. Not sure how to achieve the same on FreeBSD, maybe one or
 more combinations of the following?

You'll probably make things worse.

 vm.stats.vm.v_swappgsout: 236969
 vm.stats.vm.v_swappgsin: 28411
 vm.stats.vm.v_swapout: 92607
 vm.stats.vm.v_swapin: 28285

These are just information

 vm.disable_swapspace_pageouts: 0

I'm not entirely sure, but I think this just disables paging at
runtime - rather than compile time. 

 vm.defer_swapspace_pageouts: 0

IIRC this defers paging, but it can end up with the paging done on the
critical path rather in the background - it's usually a bad idea.


 vm.swap_idle_enabled: 0
 vm.swap_idle_threshold2: 10
 vm.swap_idle_threshold1: 2

This why you shouldn't confuse swapping and paging. These are about
actually swapping-out processes. It's mainly about reducing memory use
on multiuser systems where there many terminal idle at at any time. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: BSD sleep

2013-05-29 Thread RW
On Wed, 29 May 2013 12:04:47 +0100
Chris Rees wrote:

 On 29 May 2013 07:13, Matthew Seaman matt...@freebsd.org wrote:


  Right.  The fact that on very rare occasions a minute may not have
  60 seconds in it plus many other corner cases in calculating the
  current wall-clock time is an amusing irrelevance.
 


And in any case where you cared about the leap second, you would
probably care that sleep doesn't wake-up on a second boundary, and
can end-up in the next second. 


 OK, but is this really something the OS should handle?  I'm sure sleep
 `expr 3600 \* 2` will suffice and is perfectly readable, including
 being more portable.


+1
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: BSD sleep

2013-05-29 Thread RW
On Wed, 29 May 2013 10:01:53 -0400
Paul Kraus wrote:

 Agreed. When I first started dealing with Unix professionally (1995,
 I started playing with Unix-like OSes almost 10 years earlier) I was
 taught that each Unix command does one thing and does it well. 

It would still just be doing one thing - sleeping. Support for units
usually comes under  and does it well. I wouldn't want to have to
pipe df through awk to get MBs, or complicate find with arithmetic.

Unit support in sleep is a perfectly legitimate thing to ask for, I
don't think it particularly useful though, and leap-second support is
close to pointless.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: mail/claws-mail: INBOX shows still moved or deleted mails, filtering not working properly

2013-05-28 Thread RW
On Tue, 28 May 2013 09:17:55 +0200
O. Hartmann wrote:


 I tried mail/claws-mail for now and I'm surprised how cryptic and
 fast an email client can be, but I also have serious struggles with
 this email client.
 
 When fetch and filtering Emails from the account of our computer
 center's IMPA4 mail servers, the moved and even deleted emails remain
 visible (but greyished) in the INBOX or any other folder and marked
 deleted.
 ... 
 Nor Evolution nor thunderbird show that weird behaviour and they
 operate as expected on all mail actions.

This is how a traditional IMAP client works, you mark as deleted and
manually expunge - and move is done through copy,delete and expunge.

In the advanced section of the per account preferences there is a
setting that starts  Move deleted mails to trash ..., check that you
haven't unset that.


BTW please don't cross post without a very good reason. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: pkg_version says my ports need to be updated?

2013-05-27 Thread RW
On Mon, 27 May 2013 11:00:52 -0700
Ed Flecko wrote:

 Clearly, I'm doing something wrong.
 
 :-)
 
 I thought I was using svn to keep my ports, src and docs up to date,
 but pkg_version seems to disagree.
 
 I'm running 9.1 and I've installed ports, src, and docs as part of my
 install. After that, I use subversion to (I thought) make sure
 everything was up to date.
 
 I ran these commands:
 
 /usr/local/bin/svn up /usr/src
 
 /usr/local/bin/svn up /usr/ports
 
 /usr/local/bin/svn up /usr/doc
 
 and it says  needs updating (index has ...) on about 1 dozen items.
 So my index is out of sync with my ports???

You updated the source code for the base system, and the ports tree
(instructions for building and installing packages from source). You
updated neither the base system nor the installed packages. Take
another look at the handbook.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: setup journaling for root partition

2013-05-23 Thread RW
On Thu, 23 May 2013 09:57:50 +0430
s m wrote:


 my problem is, i can not run gjournal command for root partition in
 fixit mode nor single user mode. 

Just to check, you did boot into single user mode rather than shut-down
into single user mode?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: List Spam Filtering

2013-05-18 Thread RW
On Fri, 17 May 2013 09:15:35 -0400
Jerry wrote:

 On Fri, 17 May 2013 14:03:01 +0100
 RW articulated:
 
  On Fri, 17 May 2013 08:45:29 -0400
  Jerry wrote:
  
   On Fri, 17 May 2013 13:19:32 +0100
   RW articulated:
   
On Fri, 17 May 2013 12:54:29 +0100
Bruce Cran wrote:

 Yes, seriously.  Have you seen the number of people who post
 messages PLEASE REMOVE ME FROM THIS MAILING LIST!!,
 apparently not understanding how to manage their subscription?

There's also the likelyhood that reluctant subscribers are less
likely to take care about avoiding various types of backscatter.
   
   Well, unless the reluctant subscriber is running an incorrectly
   configured MTA, I don't see a problem with backscatter. Now, if
   they do have a maladjusted MTA, they have more problems then just
   subscribing to a list.
  
  Out of Office replies, sieve rejects, anti-spam challenges etc
 
 Yes, an incorrectly configured MTA or one of its milters. 

Not especially

 There are
 ways to deal with these assholes. 

Only some of it, and there's no general way of dealing with the
out-of-list component.

 Allowing a blanket open-door
 policy is like setting file permissions on everything to 0777 just
 because you are to lazy to find a correct solution to a problem.

Actually requiring subscription is pretty much like setting  0777, it's
really only a protection against accidental list spamming. If a spammer
actually wanted to spam lists he could harvest subscribed addresses, or
simply subscribe. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: List Spam Filtering

2013-05-17 Thread RW
On Fri, 17 May 2013 12:54:29 +0100
Bruce Cran wrote:

 On 17/05/2013 11:42, Jerry wrote:
  Seriously? If some potential poster were so brain dead that he/she 
  could not comprehend how to subscribe to the mailing list then I
  would seriously doubt that they would possess the necessary skills
  to install and run FreeBSD to begin with. Lets be honest here. All
  that the present system does is act as an enabler for Spam
  merchants and Trolls. 
 
 Yes, seriously.  Have you seen the number of people who post messages 
 PLEASE REMOVE ME FROM THIS MAILING LIST!!, apparently not 
 understanding how to manage their subscription?

There's also the likelyhood that reluctant subscribers are less likely
to take care about avoiding various types of backscatter. 

It seems to me that the level of spam in list is pretty much
negligible. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: List Spam Filtering

2013-05-17 Thread RW
On Fri, 17 May 2013 08:45:29 -0400
Jerry wrote:

 On Fri, 17 May 2013 13:19:32 +0100
 RW articulated:
 
  On Fri, 17 May 2013 12:54:29 +0100
  Bruce Cran wrote:
  

   Yes, seriously.  Have you seen the number of people who post
   messages PLEASE REMOVE ME FROM THIS MAILING LIST!!, apparently
   not understanding how to manage their subscription?
  
  There's also the likelyhood that reluctant subscribers are less
  likely to take care about avoiding various types of backscatter.
 
 Well, unless the reluctant subscriber is running an incorrectly
 configured MTA, I don't see a problem with backscatter. Now, if they
 do have a maladjusted MTA, they have more problems then just
 subscribing to a list.

Out of Office replies, sieve rejects, anti-spam challenges etc

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Hot Swapping SATA drive?

2013-05-14 Thread RW
On Tue, 14 May 2013 07:45:21 -0400
Robert Huff wrote:

 
 Ronald F. Guilmette writes:
 
   3) Assuming that I want to do this stuff, what BIOS options
   should I be setting or unsetting on the motherboard?
 
   I am unable to check the BIOS settings on that MB (which may
 be ASrock as well), but I don't believe I had to do anything other
 hand make sure eSATA was enabled.

I don't there there is any difference between SATA and eSATA above the
physical layer. I'm not sure what that setting would do.


You do need to set the SATA channel to AHCI. Note that this may require
Windows to be updated if it's on a the same drive or if it's on a
a group of channels that's switched collectively.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


fsck -y and SU+J

2013-05-01 Thread RW
I see that if you run fsck on a filesystem with SU+J turned-on, fsck
asks whether you want to use the journal.

This causes a problem when running fsck -y. The traditional meaning of
this command was: do a thorough, unconditional, non-interactive check;
but now SU+J filesystems only get a journal sync.

I can't even see the point in the question, surely someone that was
content to use the journal would do a preen.

This in 10-CURRENT. I'm not sure if it's like this in 9.1 or 9-STABLE, I
only spent a week there trying to get intel kms graphics working on new
hardware, so I'm new to SU+J.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Home WiFi Router with pfSense or m0n0wall?

2013-04-24 Thread RW
On Wed, 24 Apr 2013 16:16:32 -0400
Michael Powell wrote:

 Alejandro Imass wrote:
 
 [snip]
  Most consider the answer to use WPA2, which I do use too. Many
  think it is 'virtually' unbreakable, but this really is not true;
  it just takes longer. I've done WPA2 keys in as little as 2-3
  hours before.
 
  Are you saying that any WPA2 key can be cracked or or you simply
  referring to weak keys?
  
  I would also like to specifically if it's for weak keys or are all
  WPA2 personal keys crackable by brute force. Also is WPA2 Enterprise
  as weak also. Could anyone expand on how weak is WPA2 and WPA2
  Enterprise or is this related to weak PSKs only??
  
 
 I'm just a lowly sysadmin and not any kind of crypto expert.  The
 problem is time and horsepower. While a ridiculously easy key of say
 4 characters that is not salted may be doable on a PC, once you start
 to get to 8-9 characters or more the time it takes begins to get huge
 fast. It's a matter of can you tie up the resource long enough to
 wait it out. 

Right, but if you were to strip-mine the earth's crust and turn all the
silicon into GPU cores you still wouldn't even come close to
brute-forcing AES256 before the sun turns into a red-giant.

If you're saying that WPA is inadequate because weak keys can be
bruteforced then the answer is don't use a weak key. If someone breaks
such a key then that's pilot error, not an inherent weakness in WPA.

Use a key with 100-256 bits of entropy.

 What I do at home is concatenate 2 ham radio call signs of friends
 that I can remember. Then I sha256 that and select from the end
 backwards 15 characters. 

60 bits tops - assuming that there was 60 bit of entropy in the hashed
data. My key is only twice as long, but about
40,000,000,000,000,000,000,000,000,000 times better at resisting a brute
force attack.

  This won't actually defeat the inherent
 weakness of using a pre- shared key, but it will take longer for a
 simple brute force. You should also throw in additional characters
 from your character set beyond just alpha/numerics.

That's good advice for natural language pass phrases where there is
only  about 1 bit of entropy per character. IMO it's easier to type a
high entropy password using only characters that wont need shifting on
any device i.e. random lower-case letters. 




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Home WiFi Router with pfSense or m0n0wall?

2013-04-22 Thread RW
On Mon, 22 Apr 2013 14:25:30 -0400
Michael Powell wrote:


 Most consider the answer to use WPA2, which I do use too. Many think
 it is 'virtually' unbreakable, but this really is not true; it just
 takes longer. I've done WPA2 keys in as little as 2-3 hours before. 

Are you saying that any WPA2 key can be cracked or or you simply
referring to weak keys?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: geli overhead?

2013-02-07 Thread RW
On Mon, 4 Feb 2013 22:25:33 +0100
mhca12 wrote:


 Does skipping authentication also remove the requirement of
 zeroing the whole eli disk for the checksums?

It's not needed from that perspective, but it makes it a bit more
secure if you do that or fill the device from /dev/random before the
init. If you don't do either an attacker may be able infer information
about the layout of files. 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Cronjob Cvsup - What?

2013-01-27 Thread RW
On Sun, 27 Jan 2013 09:51:12 -0500
MFV wrote:

 Hello Matthew,
 
 Thanks for an outstanding piece of documentation.  It resolves a
 number of concerns I had and convinced me to move from portsnap where
 I discovered an apparent bug  that gave me security concerns.  More
 specifically I manually edited /usr/ports/UPDATING and portsnap did
 not recognise the change and download a proper copy.

I don't see why that's a problem. The function of portsnap update is
to update files in the tree that have been updated, deleted or added
in the repository. Resynchronising the tree and it's metadata with the
snapshot is what portsnap extract is for.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 8.2 with pre-built KDE 3.5 package from FreeBSD 7.1 DVD

2013-01-18 Thread RW
On Fri, 18 Jan 2013 01:25:03 + (GMT)
Georg Reilinger wrote:


 As a consequence, I can see myself do two possible things, to have a
 system 
 
 running with KDE 3.5 once again:
 
 1. Go back to an older release of FreeBSD and install KDE 3.5 from
 the 
 
that's pointless

 2. To be honest, I am quite happy with 8.2 and I would like to keep
 it for some time to come. In other words, is there a way to keep 8.2
 and still have KDE 3.5 along with it? For example has anyone ever
 tried to install a 7.1 pre-built package (KDE 3.5 in this case) on an
 8.2 system? Is that be possible?

You can carry on using 3.5 on any current release. The problem is when
it's eventually removed from ports, updating  other ports may result in
dependency problems. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Replacement for KGET from KDE3

2013-01-17 Thread RW

I'm looking for a replacement for kget from KDE3 which I use
with Konqueror on easynews.com. As the site has download accounting
and I have a slow dsl line I have hundreds of files queued-up - often
for months.

Ideally what I after is something similar

- Browser integration
- The ability to queue and reorder downloads with only one or a few
  downloading at once
- doesn't lose the queue on crashes.
- authentication, and ideally SSL, support


I thought I'd be able to get something working with Firefox+flashgot,
but aria dumps core, flashgot doesn't seem to do anything with
steadflow, urlgfe isn't recognised by flashgot and wxdfast doesn't seen
to be able to authenticate to easynews (any doesn't seem to have any
queue support anyway).

The last time I tried kget from KDE4 they'd removed the queue
management and made it like Opera and  Firefox's built-in download
manager.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: recommendation instead of portmanager

2013-01-14 Thread RW
On Mon, 14 Jan 2013 16:23:08 -0800
David Brodbeck wrote:

 On Fri, Jan 11, 2013 at 2:07 PM, Artifex Maximus
 artife...@gmail.comwrote:
 
  Hello!
 
  I am using portmanager for updating my ports. I love its -p switch.
  Is there any similar program with such option? I am asking because
  portmanager is gone from ports tree.
 
 -p or --pristineUpdates a port if any dependency in it's
  /var/db/pkg/{port name}/+CONTENTS
  does not match what is installed. The effect is when
  a
  port is updated, any port who uses
  the updated
  port in it's dependency chain, no
  matter how
  deep, are rebuilt. Normally only
  ports one level up are rebuilt.
 
 
 I think portupgrade --recursive will do what you want.

It doesn't
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: AARGH... give me some idea for ad-blockers

2013-01-07 Thread RW
On Mon, 7 Jan 2013 14:32:35 +0100
Polytropon wrote:


 Today I don't need to deal with this question anymore. I've
 been using a two browsers approach: Firefox with Flash
 installed, everything works as intended, and Opera as my
 main browser, with Flash deactivated, and quite picky
 about what sites are allowed to do. If I urgently need to
 access something that doesn't show in Opera, I'll use
 Firefox for this one occassion. :-)

There's also an Opera setting enable plugins only on on demand. With
that setting if you click on a place-holder it becomes activated until
you leave the page.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD: GIT instaed of SVN?

2013-01-03 Thread RW
On Thu, 03 Jan 2013 12:19:55 +0200
Volodymyr Kostyrko wrote:

 03.01.2013 11:54, David Demelier:
  subversion is not in base and will probably never? So this is not a
  real problem :)
 
 Nope, importing svnsup would suffice.
 
 http://svnweb.freebsd.org/base/user/des/svnsup/

Even that isn't essential, cvsup was used from ports for years before
csup was written. And now we have portsnap, freebsd-update and pkg. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Full disk encryption without root partition

2012-12-30 Thread RW
On Sun, 30 Dec 2012 10:34:51 +0100
David Demelier wrote:


 I think a good idea would be to store the key directly in the 
 bootloader, but that needs a large enough partition scheme that can 
 store the bootloader (boot0 or boot1) plus the encryption key.
 However this needs to add support for that in both boot files and
 will be bigger. 

I'm not sure what you are trying to say, but the master key is already
in the metadata and putting user keys on the disk would render the
encryption pointless.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Full disk encryption without root partition

2012-12-29 Thread RW
On Sat, 29 Dec 2012 22:43:29 +0100
Martin Laabs wrote:

 Hi,
 
  Are there any plans or is there already support for full
  disk encryption without the need for a boot partition?
 
 Well - what would be your benefit? OK - you might not create another
 partition but I think this is not the problem.
 From the point of security you would not get any improvement because
 some
 type of software has to be unencrypted. And this software could be
 manipulated to do things like e.g. send the encryption key to
 attacker. So from this point of view there is no difference whether
 the kernel is unencrypted or any other type of software (that runs
 before the kernel) is unencrypted.

And the advantage of putting the boot partition on a memory stick is
that it's much easier to keep such a device physically secure.

Bootstrapping code on the main hard drive is easier to attack. IIRC
someone demonstrated such an attack against one of the commercial
encryption packages.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: exclude directories from find command

2012-12-22 Thread RW
On Sat, 22 Dec 2012 06:22:44 -0800 (PST)
Jack Mc Lauren wrote:

 Hi fellas
 How can I exclude specific directories from my find command ? I want
 to look for all files in the whole system except for those in
 e.g /extra directory. I use this command to find all files, but how
 can I exclude /extra directory ?
 
 find / -type f
 

Try this

http://lmgtfy.com/?q=find+exclude+a+directory


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: using AWK

2012-12-18 Thread RW
On Mon, 17 Dec 2012 08:16:26 -0800
Devin Teske wrote:

 
 On Dec 17, 2012, at 3:39 AM, Jack Mc Lauren wrote:
 
  Hi guys
  
  How can I read a file which contains a number and assign that
  number to a variable via awk programming? By the way, I want to use
  this awk program in a shell script.
  
  Thanks in advance
 
 Try this:
 
 awk -v file=/etc/ttys 'BEGIN { getline line file; printf First line
 from %s: %s\n, file, line }'
 
Semms a bit complicated when you could set the awk variable directly
e.g.

$ echo 42  /tmp/f
$ awk -v x=`cat /tmp/f`  'BEGIN{ print x+1 }'
43


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: updatedb?

2012-12-18 Thread RW
On Tue, 18 Dec 2012 21:01:33 + (UTC)
Walter Hurry wrote:

 $ sudo /usr/libexec/locate.updatedb
  WARNING
  Executing updatedb as root.  This WILL reveal all filenames
  on your machine to all login users, which is a security risk.
 $
 
 Why is it a security risk? Security through obscurity? Really? In
 this day and age?
 
 Or am I missing something?

If permissions have been set to prevent other users reading filenames
then obviously leaking file names is security issue.
  

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: updatedb?

2012-12-18 Thread RW
On Tue, 18 Dec 2012 22:53:29 +0100
Polytropon wrote:

 On Tue, 18 Dec 2012 21:32:50 +, RW wrote:
  On Tue, 18 Dec 2012 21:01:33 + (UTC)
  Walter Hurry wrote:
  
   $ sudo /usr/libexec/locate.updatedb
WARNING
Executing updatedb as root.  This WILL reveal all filenames
on your machine to all login users, which is a security risk.
   $
   
   Why is it a security risk? Security through obscurity? Really?
   In this day and age?
   
   Or am I missing something?
  
  If permissions have been set to prevent other users reading
  filenames then obviously leaking file names is security issue.
 
 There are no leaking file names,

There is from the perspective of an ordinary user that's configured
directories under ~ to be confidential.

 as by command, the tool does
 what it is requested to: to not obey the restrictions that apply
 in its _normal_ use and list _all_ file names instead.

Obviously. But the warning is intended for people that haven't
thought through the consequences of what they are doing.

On Tue, 18 Dec 2012 22:49:43 +0100
Bas Smeelen wrote:


 Yes. But as stated before it defaults to run as user nobody.
 
 Line 26 /etc/periodic/weekly/310.locate
 echo /usr/libexec/locate.updatedb | nice -n 5 su -fm nobody || rc=3

This is true but not very relevant.

It runs as nobody from the periodic script, but the warning comes from
locate.updatedb itself, which may be run independently of 310.locate.  

 If someone runs it as root it can be, as everything being run as
 root, a security issue.

Not really, mostly when things are run as root there is an additional
risk. Very few things do the wrong thing simply as a consequence of
running as root so it warrants a warning.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: switching from i386 to amd64

2012-12-16 Thread RW
On Sun, 16 Dec 2012 06:00:51 -0500
Aryeh Friedman wrote:

 I have been using i386 (-STABLE) for years now and was wondering if
 switching to amd64 ... nvidia-kmod are the minimal ones I need]) the
 main reason for asking is PAE seems to be broken now 

The last I heard the nvidia driver wasn't compatible with PAE
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: PPPoE

2012-12-06 Thread RW
On Thu, 06 Dec 2012 16:13:40 +0100
Ralf Mardorf wrote:
 ##enable dns   # request DNS info (for resolv.conf)

You probably need this if you haven't set resolv.conf manually

  set dial
  set login

I don't think you need these.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: how to correct portsnap corruption

2012-11-27 Thread RW
On Tue, 27 Nov 2012 08:13:50 +
Arthur Chance wrote:

 On 11/27/12 05:50, Dale Scott wrote:
  Hi, I was running portsnap fetch on a remote terminal when my
  connection failed. After connecting running portsnap again, it
  appeared to complete correctly. However, when I run portsnap
  extract I get the following error:
 
 
 
  casper# portsnap extract
 
  /usr/ports/.cvsignore
 
  /usr/ports/CHANGES
 
  /usr/ports/COPYRIGHT
 
  /usr/ports/GIDs
 
  /usr/ports/KNOBS
 
  /usr/ports/LASTCOMMIT.txt
 
  files/bfd9e7e5d0fff1e0c601614c35085494c8de06eb100b2fe025a6c9a226ec0e09.gz
  not found -- snapshot corrupt.
 
  casper#
 
 
 
  How can I recover from this without losing any app configs I have
  in the ports tree? (i.e. make config)
 
 Port configs are stored in /var/db/ports/portname/options, not in 
 /usr/ports so are safe from any overwriting by portsnap.

In any case, it's the snapshot that needs replacing, i.e. the contents
of /var/db/portsnap.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: PPPoA section of FreeBSD Handbook

2012-11-20 Thread RW
On Tue, 20 Nov 2012 11:51:51 +1100
andrew clarke wrote:

 On Tue 2012-11-20 11:49:38 UTC+1100, andrew clarke
 (m...@ozzmosis.com) wrote:
 
  In the meantime I've switched to using mpd5 (/usr/ports/net/mpd5)
  and /sbin/ipnat. So far, so good:
  
  # ifconfig ng0
  ng0: flags=88d1UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST
  metric 0 mtu 1492 inet 124.170.51.116 -- 203.215.7.251 netmask
  0x 
 
 Incidentally the PPPoA section of the FreeBSD is very out of date:
 
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/pppoa.html
 
 The ambiguously named net/pppoa port in section 28.6.1 has been marked
 as broken since 2009. (Ambiguous since it's only for a particular
 brand of USB ASDL modem.)
 
 In section 28.6.2 the example provided is a config file for mpd 4.x
 which does not work in mpd 5.x.
 
 net/mpd4 was deleted from the ports tree 11 months ago.
 
 net/mpd5 doesn't seem to support PPPoA, only PPPoE. I could find no
 reference to PPPoA in the manual or source code.

Not many people really need that these days.  
 
PPPoA support is needed for obsolete USB modems which pass-through
ATM for the host to terminate. There are also some pci modems supported
by Linux, but I don't think they've been well supported on FreeBSD, if
at all. 

These days there are better options that only require standards-based
support in the host. Most PPPoA-based ISPs also support  PPPoE over ATM
- even if they don't advertise it or tell their low-level technical
support.  Alternatively you can:

- use a NAT router that terminate PPPoA
- use a router/modem that bridges PPPoA to PPPoE
- use a router/modem that terminates PPPoA and passes the public IP
  address to the host
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: portsnap

2012-11-19 Thread RW
On Mon, 19 Nov 2012 15:21:19 + (UTC)
jb wrote:

 Hi,
 have i caught portsnap with its pants down ?
 
 # rm -rf /usr/ports
 # portsnap fetch update
 Looking up portsnap.FreeBSD.org mirrors... 6 mirrors found.
 Fetching snapshot tag from ec2-eu-west-1.portsnap.freebsd.org... done.
 Fetching snapshot metadata... done.
 Updating from Sun Nov 11 15:54:03 CET 2012 to Mon Nov 19 15:34:57 CET
 2012. Fetching 4 metadata patches... done.
 Applying metadata patches... done.
 Fetching 0 metadata files... done.
 Fetching 24085
 patches.102030405060708090... ...
 0240602407024080.. done.
 Applying patches... done.
 Fetching 18 new ports or files... done.
 /usr/ports was not created by portsnap.
 You must run 'portsnap extract' before running 'portsnap update'.
 #
 # ls /usr/ports
 ls: /usr/ports: No such file or directory
 #
 
 ...
 So, why did it do so much work (ca. 5 min, 24085 patches), even
 claiming to have applied patches, before telling me the env was not
 properly set up ? jb

You gave portsnap two commands - one succeeded and the other failed.

fetch downloads and applies patches to the compressed 
snapshot. update uses the compressed snapshot to update a
pre-existing ports tree created by an extract 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: portsnap

2012-11-19 Thread RW
On Mon, 19 Nov 2012 16:10:48 + (UTC)
jb wrote:


  You gave portsnap two commands - one succeeded and the other failed.
  
  fetch downloads and applies patches to the compressed 
  snapshot. update uses the compressed snapshot to update a
  pre-existing ports tree created by an extract 
  ...
 
 OK.
 But this looks like a flaky entry validation - it should be rejected
 up front as invalid entry, even if it applied to the second part -
 update. Because the effect of processing the entire entry fetch
 plus update is lost anyway.

Not isn't, you've brought the snapshot up to date.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: well, try here first...

2012-11-14 Thread RW
On Wed, 14 Nov 2012 00:58:02 -0600 (CST)
Robert Bonomi wrote:


 In 'classic' English (as taught in the 60s and earlier), a comma was
 _required_ before a trailing 'and' in a list of 3 or more items, and
 forbidden if there were only two items.

Not really:

http://oxforddictionaries.com/words/what-is-the-oxford-comma

Perhaps is should be taken to chat, it has nothing to do with
FreeBSD.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 9.1 and SU+J

2012-11-04 Thread RW
On Sun, 04 Nov 2012 11:44:28 +0100
Bas Smeelen wrote:

 On 11/03/2012 07:30 PM, Herbert J. Skuhra wrote:
  On 03.11.2012 13:48, Doug Hardie wrote:
 
  I didn't notice that journaling is on by default and now dump is
  failing.  The only way I can see to disable journaling requires
  that the file system be dismounted, or read-only.  This is a
  remote machine and journaling is on root.  Is there any other way
  that would not require me to make a long trip out to the site?
 
  This is a task for mfsBSD: http://mfsbsd.vx.sk
 
 Hmm, I think you have to make a trip or get some kind of remote
 console over ip.
 I tried it remote on a 9.1-RC2 system that has / /tmp /var and /usr
 as seperate partions
 For / i can do a mount -o ro / and tunefs -j disable /dev/da0p2 then 
 mount -o rw /
 For the /tmp /var and /usr filesystems this does not work bcause hey 
 cannot be remounted ro while they are busy.

A quick and dirty way to do it would be to edit /etc/rc.d/fsck and put
your tunefs commands at the bottom of fsck_start(), then do a reboot.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD based, standalone, print server

2012-10-25 Thread RW
On Thu, 25 Oct 2012 16:20:35 +0700 (ICT)
Olivier Nicole wrote:

 Hi,
 
 The network card on my HP 4300 is definitely dead. I don't want to
 invest in a new network card though, while I have a bunchg of old
 systems lying around.



Have you considered the cost of powering an additional computer?

If you plan on leaving it on most of the day, it's likely to be more
expensive than replacing the network card.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: pppoe configuration and dns name resolution

2012-10-20 Thread RW
On Sat, 20 Oct 2012 09:42:31 +0530
Jack wrote:

 Hi again,
 
 This time I disabled DHCP on my fxp0 interface and
 in my adsl modem too.
 But the problem still exists.
 
 This time I tried both approaches:
  assigned an IP address explicitly to fxp0, and
 then no explicit assignment to fxp0.

I'd leave fxp0 unset until you've fixed the other problems - it's not
necessary for PPP. 

Modems and routers in PPPoE bridging mode don't normally require any
adjustment or other access so there's probably no need to assign
address anyway.


 I still don' get why FreeBSD is having trouble
 connecting via PPP.

The original problem you quoted was with DNS and
that's explained by the DHCP on fxp0 overwriting resolv.conf with the
router/modem's own non-functional DNS proxy.


As regards ppp.conf mine was simply:

default:
  set log Phase tun command

adsl:
  set device PPPoE:vr0
  set authname my username
  set authkey  my password
  add default HISADDR


 ppp_adsl_unit=0
 
 
 I tried to specify tun0 interface explicitly,
 but still no luck.
 When I start ppp using:
   service ppp start
 It shows tun0 is busy.

Don't try to specify the tun device number. I've noticed in the past
that occasionally tun0 becomes unusable and ppp will switch to tun1.
I've seen this happen when I've been restarting ppp a lot. 


 From my understanding it shoud not matter whether fxp0 is
 assigned the  ip address via DHCP server on local lan or via
 manually - at least this concept works on windows.
 
 But in FreeBSD, if I enable dhcp on fxp0, then
 /etc/resolv.conf is created each time I boot in FreeBSD,
 so the only nameserver being 192.168.1.1, ie adsl
 modem ethernet interface.
 Even if I edit it to include nameservers of my ISP or OpenDNS
 this file is created each time FreeBSD boots, and these entries
 are lost, with only entry being 192.168.1.1
 

There's no good reason to use DHCP in this case, you can simply set a
static private IP address (typically a high address in the same /24 as
the modem). If you really must use DHCP then it can be reconfigured
globally or per interface  (type apropos dhclient).

  
I notice that the original resolv.conf you quoted was set by resolvconf.
I've never used this so I can't comment on whether it's helping or
hindering. I suspect it aimed at laptops switching between different
networks.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: pppoe configuration and dns name resolution

2012-10-18 Thread RW
On Tue, 16 Oct 2012 20:38:47 +0530
Jack wrote:


 My network schematic is:
 
 PC --- ADSL modem - Internet
  192.168.1.2   192.168.1.1
 
...
 /etc/resolv.conf
 
 # Generated by resolvconf
 nameserver 192.168.1.1

If 192.168.1.1 is the modem, how can it be a proxy nameserver? It
doesn't have an internet connection if it's not terminating PPP.

You have

   ifconfig_fxp0=DHCP

which means  you are picking up DHCP from the modem itself not the
other side of the PPP link.  In bridging mode you only need to
configure the underlying ethernet device if you want to route back-out
into the router's LAN (PPPoE and IP can share a lan).

You don't necessarily need DHCP with PPPoE because PPP can deliver the
IP address, DNS etc by itself. If the ISP requires you to use DHCP you
should probably have configured the tun0 interface instead of fxp0.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: portmaster options

2012-10-12 Thread RW
On Fri, 12 Oct 2012 04:35:43 + (UTC)
jb wrote:

 Hi,
 what is the diff between
 --index
 and
 --index-only

From a *very* quick look, it appears that --index-only means don't use
the the port-directory at all, so that the index file is downloaded
into /tmp, and some checks and optimizations are skipped or done
less efficiently.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: cksum entire dir??

2012-09-12 Thread RW
On Wed, 12 Sep 2012 14:47:04 -0700
Gary Kline wrote:

 On Wed, Sep 12, 2012 at 10:55:57AM -0700, Waitman Gobble wrote:
 
  are you sure it's not 'md5sum' ? ... that seems to be on all my
  GNU/Linux machines.
  
  Waitman Gobble
  San Jose California USA
  
 
   yup, you be right.  altho we have no md5 [[does FBSD?]],
 fedora does have md5sum.  makes me wonder why this flavor didnt do at
 least a symlink.   oh well.

FreeBSD's md5 and GNU's md5sum don't behave the same. Specifically when
reading from stdin (as in a pipeline) md5 sensibly just outputs the hash
and a newline, whereas md5sum follows the hash with a - to indicate
stdin as the filename.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: /tmp filesystem full

2012-08-23 Thread RW
On Wed, 22 Aug 2012 21:24:47 -0700
Michael Sierchio wrote:

 On Wed, Aug 22, 2012 at 7:17 PM, RW rwmailli...@googlemail.com
 wrote:
 
   tmpfs and swap md devices don't actually need swap. I don't seen
  any advantage in your way of creating an md device for /tmp.
 
 Then you don't understand. ;-)  The advantage of my approach is
 avoiding a kernel panic when writing to the tmpfs 

md device

 when you haven't
 pre-allocated all the filesystem space at creation time.  If that
 happens to matter to you...

It's the other way around, malloc md devices can cause kernel
panics.  swap md device use ordinary VM memory. If you set the limit
too high without swap you can slow performance, but it shouldn't
cause a kernel panic.

The default of 2MB isn't going to make a significant difference on any
normal install.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: /tmp filesystem full

2012-08-22 Thread RW
On Wed, 22 Aug 2012 12:59:13 +0200
Andy Wodfer wrote:

 Hi,
 I have about 500MB in my /tmp and it seems to be too small when the
 periodic LOCATE script runs every week.
 
 What's the best way to increase the size of /tmp ? Could I simply
 remove it and create a symbolic link ln -s to say /usr/tmp instead
 (where I have several hundred GBs free)?
 


Either that or you could use tmpfs. You could also change the locate
tmp directory in /etc/locate.rc.


There's also a periodic script to remove older files from /tmp which
may help.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: /tmp filesystem full

2012-08-22 Thread RW
On Wed, 22 Aug 2012 14:14:17 -0700
Michael Sierchio wrote:

 This will happen automatically if you go to multiuser without a
 writeable /tmp.  See /etc/rc.d/tmp

It doesn't, the default is an old-fashioned md device, not tmpfs.


 I have a problem with the semantics of the rc scripts for this and
 var, though - if you are going to use a memory-backed filesystem, you
 should reserve all the space at the outset.  

It defaults to 20MB. There's no such thing as an unlimited md-backed
device


 Bad things can occur as
 you approach the memory limit (like a kernel panic) otherwise.

Provided that you have swap you can have a /tmp that's much bigger
than memory with either md or tmpfs.

 I'd prefer something like this:
 
 _mdunit=`mdconfig -a -n -t malloc -o reserve -s ${tmpsize}`

It's a bad idea to use a malloc device as it uses wired kernel memory, the 
default allows the files to be written out
to swap rather than panic the kernel.

 newfs /dev/md${_mdunit}  /dev/null 21
 mount -o ${tmpmfs_flags} /dev/md${_mdunit} /tmp
 
 But that's just me. mount_md doesn't quite do this.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: /tmp filesystem full

2012-08-22 Thread RW
On Wed, 22 Aug 2012 23:21:12 +0100
RW wrote:

 On Wed, 22 Aug 2012 14:14:17 -0700
 Michael Sierchio wrote:
 
  This will happen automatically if you go to multiuser without a
  writeable /tmp.  See /etc/rc.d/tmp
 
 It doesn't, the default is an old-fashioned md device, not tmpfs.

Sorry I misread the previous post which *was* referring to an md device,
but the rest is right.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: /tmp filesystem full

2012-08-22 Thread RW
On Wed, 22 Aug 2012 17:35:29 -0700
Michael Sierchio wrote:

 On Wed, Aug 22, 2012 at 3:29 PM, RW rwmailli...@googlemail.com
 wrote:
 
  Sorry I misread the previous post which *was* referring to an md
  device, but the rest is right.
 
 Not really. ;-)  The one compelling reason to use an md filesystem for
 /tmp or /var is when you have no swap, and/or your root fs is
 read-only

 tmpfs and swap md devices don't actually need swap. I don't seen any
 advantage in your way of creating an md device for /tmp.

 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: doom, quake, hexen...

2012-08-20 Thread RW
On Mon, 20 Aug 2012 20:09:15 +0200
Polytropon wrote:


 I'm not sure if wine can run those native DOS games, but
 the big virtualisation software (VirtualBox, VMWare)
 should be able to emulate a PC, t

You don't need to go that far, dosbox will run most dos games. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Why can't I set my cpu type in kernel config ?

2012-08-07 Thread RW
On Tue, 7 Aug 2012 23:26:33 +0200
Polytropon wrote:

 On Tue, 7 Aug 2012 14:14:30 -0500 (CDT), Robert Bonomi wrote:
   From owner-freebsd-questi...@freebsd.org  Tue Aug  7 02:44:36 2012
   Date: Tue, 7 Aug 2012 09:41:41 +0200 (CEST)
   From: Wojciech Puchar woj...@wojtek.tensor.gdynia.pl
   To: Chris Hill ch...@monochrome.org
   Cc: RW rwmailli...@googlemail.com, freebsd-questions@freebsd.org
   Subject: Re: Why can't I set my cpu type in kernel config ?
  
That's the amd64 (64-bit) GENERIC
   
Jason: It looks like you may have installed the 64-bit
distribution on your
  
   nonsense. 64-bit distribution doesn't run on 32-bit computer.
  
  *PRECISELY* why the OP is having problems.   He _is_ trying to
  build amd64 kernel on 34-bit only processor.
  
  Unlike Wojciech the infallible people _do_ get things wrong on
  occasion.
 
 That's why the statement you may have installed the 64-bit
 distribution Wojciech refered to as nonsense: On a 32 bit
 system, the 64 bis OS version should not run. So the OP seems
 to be using the (correct!) 32 bit OS version, but trying to
 compile the 64 bit kernel (from /sys/amd64/conf instead of
 from /sys/i386/conf). Therefore, it's a matter of having
 chosen the wrong kernel config, not the wrong OS version. :-)

The architecture isn't defined in GENERIC, it defaults to what's
already installed. You have to explicitly set it to cross-build, and I
find it hard to believe that someone would set TARGET/TARGET_ARCH to
amd64 by mistake

I think it's likely that it is a 64-bit installation.





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Why can't I set my cpu type in kernel config ?

2012-08-06 Thread RW
On Mon, 6 Aug 2012 16:53:04 -0700 (PDT)
Jason Usher wrote:

 I am installing 8.3-RELEASE on an old 900mhz pentium laptop ... it's
 an i686 CPU.
 
 By default, GENERIC has HAMMER as the cpu, and that isn't working.
 So I tried both:

That's the amd64 (64-bit) GENERIC

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: buggy awk regex handling?

2012-08-02 Thread RW
On Thu, 02 Aug 2012 13:20:52 +0200
kaltheat wrote:

 
 
 Hi,
 
 I tried to replace three letters with three letters by awk using the
 sub-routine. I assumed that my regular expression does mean the
 following:
 
 match if three letters of any letter of alphabet occurs anywhere in
 input
 
 $ echo AbC | awk '{sub(/[[:alpha:]]{3}/,cBa); print;}'
 AbC
 
 As you can see the result was unexpected.
 When I try doing it for at least one letter, it works:
 
 $ echo AbC | awk '{sub(/[[:alpha:]]+/,cBa); print;}'
 cBa
 ...
 What am I doing wrong?
 Or is awk buggy?

Traditional awk implementations don't support {n}, but I think POSIX
implementations should. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: geli - selecting cipher

2012-07-27 Thread RW
On Thu, 26 Jul 2012 17:47:10 +0200
Ivan Voras wrote:

 On 26/07/2012 04:14, RW wrote:
 
  I asked a similar questions to the OPs in the geom list and didn't
  get an answer. Geli doesn't need or isn't using any advantages of
  XTS. And CBC in geli is actually equivalent to ESSIV (see the
  previously linked wikipedia page). 
 
 Hi,
 
 You didn't get an answer because in security, the answer depends on
 exact circumstances of use. The short answer is that if you don't
 have a specific adversary you need to protect your data from, I'd say
 that GELI's CBC is good enough for you.

Actually the reason I asked is that I wanted to check whether I was
ovelooking some key advantage of XTS that justified its being the
default.

AES-XTS was chosen to provide the best protection against modified
ciphertext without using authentication which would expand the size
of the data.

It seem to me than anyone that worries about attackers tampering with
a drive should use authentication in geli, and anyone that doesn't
should leave it off and use CBC.

If you run geli init without -a or -e options, you get AES-XTS
without authentication, a default that doesn't seem right for
anyone.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: geli - selecting cipher

2012-07-26 Thread RW
On Thu, 26 Jul 2012 15:49:00 +0200
Fabian Keil wrote:

 RW rwmailli...@googlemail.com wrote:
 
  In the end I went with 128 bit aes-cbc since it's the fastest
  setting and Bruce Schneier recommends 128 over 256 AES as being
  more secure.  
 
 Can you provide the source for the as being more secure part?

More likely to remain secure, if you prefer. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: geli - selecting cipher

2012-07-25 Thread RW
On Wed, 25 Jul 2012 19:52:39 -0500 (CDT)
Robert Bonomi wrote:

  From owner-freebsd-questi...@freebsd.org  Wed Jul 25 14:00:27 2012
  Date: Wed, 25 Jul 2012 20:57:30 +0200 (CEST)
  From: Wojciech Puchar woj...@wojtek.tensor.gdynia.pl
  To: freebsd-questions@freebsd.org
  Subject: geli - selecting cipher
 
  i need high speed disk encryption (many disks running in parallel,
  lots of data movement). i have processor with AES-NI.
 
  geli give 150MB/s performance (tested from/to md ramdisk) using
  default and recommended AES-XTS
 
  and ca 400MB/s read and 700MB/s write using AES-CBC.
 
  I'm not cryptography expert, is CBC somehow less secure, and if
  so is it really a problem?
 
 If you don't know what strength encryption you need, and/or the
 difference between the methods, you need to hire a data-security
 professional to examine your situation and make recommendations
 appropriate for _your_ needs.
 
 'CBC' -- [C]ypher [B]lock [C]hainig -- is well-suited for strictly
 -sequential- data access.   Try reading the blocks of a large (say
 10gB) file in *reverse* order and see what kind of performance you
 get.  

Exactly the same, in geli the encryption is done per sector. 


I asked a similar questions to the OPs in the geom list and didn't get
an answer. Geli doesn't need or isn't using any advantages of XTS. And
CBC in geli is actually equivalent to ESSIV (see the previously linked
wikipedia page). 

In the end I went with 128 bit aes-cbc since it's the fastest setting
and Bruce Schneier recommends 128 over 256 AES as being more secure.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Question about install from ports

2012-07-23 Thread RW
On Mon, 23 Jul 2012 03:45:35 -0700 (PDT)
Mr U wrote:

 hi all
 
 I want to install openbox from ports collection.
 freebsd attempting to download libxml2 from fr.rpmfind.net but 
 I don't know why connection speed slow down after a while and finally
 failed.
 
 is it possible to change download location (mirror) or is it possible
 to download file manually and add file in openbox dir?
 


Temporarily set RANDOMIZE_MASTER_SITES 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Nasty reference loop in login.conf

2012-07-17 Thread RW
On Tue, 17 Jul 2012 13:26:10 -0700 (PDT)
Jakub Lach wrote:

 Or vi in place.
 
 Really, it always surprises me there's 
 no vi available in single user mode.
 

There is /rescue/vi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: qbittorrent freezes, ioctl sign-extension ioctl ffffffff8004667e

2012-07-08 Thread RW
On Sat, 7 Jul 2012 20:52:50 +0200
Jens Schweikhardt wrote:

 hello, world\n
 
 is anybody else seeing this? On a fresh 9-STABLE/amd64 as of July 7,
 with all ports compiled from scratch. Qbittorrent (2.9.11) freezes
 after about 10 to 20 seconds, reacts to mouse clicks only after a
 minute or so; the window isn't redrawn when it was obscured by other
 windows and ...

I tried it a few weeks ago on 8.3. I found that it locks-up just after
the first torrent is added, or if it's started with a torrent already
loaded. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: video buffer location

2012-07-04 Thread RW
On Wed, 4 Jul 2012 22:34:21 +0200
Harald Weis wrote:

 On Mon, Jul 02, 2012 at 05:46:00PM +0200, Wojciech Puchar wrote:
 
   I would recommend you to remove flash at all. It actually improves
   web browsing experience, removing problems with constant CPU load
   because you have few tabs with flash crap running, and will teach
   you good habit of actually OWN all  interesting things ON YOUR
   DISK, not on the internet that happens to disappear in a short
   time.
 
 Great idea. Thank you. The difference is really tremendous. I've added
 though a tiny script to switch flash off and on with nspluginwrapper.
 Could be useful on some occasion.

Actually Opera already has a setting: Enable plug-ins only on
demand (under preferences-advanced-content). It disables all
plugins by default and you can click on an individual placeholder to
enable a plug-in for a specific object, so you can watch a flash
movie or turn on a flash navigation menu without having to turn-on any
flash adverts on the same page.  




 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 freebsd-questions-unsubscr...@freebsd.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: freebsd-update from recent 8-STABLE to 9.0-RELEASE issues

2012-06-25 Thread RW
On Mon, 25 Jun 2012 04:21:18 -0500
Zane C. B-H. wrote:

 Howdy!
 
 Any one have any idea what is going on below?
 
 [root@shiela]/root# uname -a
 FreeBSD shiela.vulpes.vvelox.net 8.3-PRERELEASE FreeBSD
 8.3-PRERELEASE #0: Sat Feb 25 04:55:35 CST 2012
 kits...@shiela.vulpes.vvelox.net:/usr/obj/usr/src/sys/sheila  amd64
 [root@shiela]/root# freebsd-update -r 9.0-RELEASE upgrade Looking up
 update.FreeBSD.org mirrors... 3 mirrors found. Fetching public key
 from update5.FreeBSD.org... failed. Fetching public key from
 update4.FreeBSD.org... failed. Fetching public key from
 update3.FreeBSD.org... failed. No mirrors remaining, giving up. Exit 1
 [root@shiela]/root#

freebsd-update doesn't support development branches, you have to go
from security branch to security branch.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: freebsd-update from recent 8-STABLE to 9.0-RELEASE issues

2012-06-25 Thread RW
On Mon, 25 Jun 2012 06:53:45 -0500
Zane C. B-H. wrote:

 On Mon, 25 Jun 2012 12:26:12 +0100
 RW rwmailli...@googlemail.com wrote:
 

  freebsd-update doesn't support development branches, you have to go
  from security branch to security branch.
 
 I know it can't be used to update to stable, but I've not encountered
 any thing in the documentation saying it can't be used to update from
 stable it to a release.
 

From the man page:

... the FreeBSD Security Team only builds updates for releases shipped
in binary form by the FreeBSD Release Engineering Team



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: portupgrade -- is there a way to only build and update ports that actually NEED it?

2012-06-25 Thread RW
On Mon, 25 Jun 2012 00:53:50 -0700 (PDT)
Dan Mahoney, System Admin wrote:

 Hey there,
 
 I'm presently in the process of trying to do a portupgrade from
 rt-3.8.8 to 3.8.13.  By all estimations, this is a minor bump.
 
 Already, I've encountered several annoyances due to ABI changes, such
 as the libtool2.4 fun.  With normal portupgrade, this forces you to
 go fix the dependent port.

I don't know what you mean by that

 Finally, I just applied -r, which should update all dependent
 packages, but it seems to upgrade them unconditionally.

That's because the revisions numbers will have been bumped, it's
nothing to do with portupgrade.

 Ergo, I've since built a new version of perl, a new verion of python, 
 rebuilt every perl module on the system, am presently rebuilding
 apache22, and I'm sure the system will turn around and require me to
 rebuild postgres real soon.
 
 You would think there's an option to portupgrade that says don't
 upgrade every single package I've got, 

Firstly it doesn't. Secondly no one is forcing you to do this, if you
want to go through the ports and work out which need an update and which
don't then portupgrade will let you do that.

 but if somewhere in the
 dependency chain I need a newer version of a thing, then do it.
 
 Am I just missing it in the manpages, or does such a thing really not 
 exist?
 
 -Dan
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: fsck_ufs running too often

2012-06-22 Thread RW
On Fri, 22 Jun 2012 14:56:39 -0700 (PDT)
Leonardo M. Ramé wrote:

 Hi, since a few of days ago, I noticed my home server turns very slow
 more than once a day, so every time I run top to see what's
 processes are running, I can see fsck_ufs at the very top, and the
 hard drive working like mad.
 
 I've checked my crontab and there's nothing related to fsck_ufs,
 where can I start searching for the cause of the problem?, I thought
 this process should run only at boot or shutdown, but this time it is
 running -apparently- without a cause.


If you have background fsck enabled it runs just after the boot has
completed. Have you checked the uptime? It may be that your
server is spontaneously rebooting.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: seems i cannot fully understand {/,/usr/local/}/etc/rc.d/*

2012-06-20 Thread RW
On Wed, 20 Jun 2012 09:45:07 +0100
Matthew Seaman wrote:

 #!/bin/sh
 #
 # Persuade vboxheadless to start before samba.
 
 # PROVIDE: precedence
 # REQUIRE: vboxheadless
 # BEFORE: samba
 
 :
 
 Make it executable.  Note -- the ':' does seem to be necessary.

Why? None of the dummy scripts in the base system have a :.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Freebsd without swap

2012-06-15 Thread RW
On Fri, 15 Jun 2012 12:22:37 +0300
mbsd wrote:

 Hi there.
 
 Now I'm using FreeBSD 9 without swap, and without additional swap -
 related configurations.
.. 
 And the question is:
 Does it correct to use freebsd like this? Or I need specific setup?
 
 Option NO_SWAPPING if I understand right not for this purpose.
 Sysctl vm.swap_enabled=0 seems to be useful.

NO_SWAPPING builds-out code related to paging to swap along with the
related sysctl options, and is probably what you are after.

vm.swap_enabled enables actual swapping in addition to normal paging
when short of memory, and isn't relevant if you have no swap space.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Freebsd without swap

2012-06-15 Thread RW
On Fri, 15 Jun 2012 12:48:13 +0100
RW wrote:

 On Fri, 15 Jun 2012 12:22:37 +0300
 mbsd wrote:
 
  Hi there.
  
  Now I'm using FreeBSD 9 without swap, and without additional swap -
  related configurations.
 .. 
  And the question is:
  Does it correct to use freebsd like this? Or I need specific setup?


Sorry, missed this bit. No, you don't have to do anything.

  Option NO_SWAPPING if I understand right not for this purpose.
  Sysctl vm.swap_enabled=0 seems to be useful.
 
 NO_SWAPPING builds-out code related to paging to swap along with the
 related sysctl options, and is probably what you are after.
 
 vm.swap_enabled enables actual swapping in addition to normal paging
 when short of memory, and isn't relevant if you have no swap space.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Lost /var/db/pkg

2012-06-13 Thread RW
On Wed, 13 Jun 2012 19:17:20 + (UTC)
jb wrote:

 William Orr will at worrbase.com writes:
 
  
  Hello,
  
  I had a hard disk failure some time ago, and I ended up losing
  /var/db/pkg/ and everything under it (before you say I should've
  been backing it up, I know, I was actually doing an initial full
  when this happened). Is there a way I can restore it, or at least
  manually add entries I know for sure about?
 
 forums.freebsd.org/showthread.php?t=6466
 The application themselves are still installed and will keep
 functioning, you just removed the records of their installation. When
 you later install newer versions, you may have to use a force flag to
 overwrite files (the port thinks it is uninstalled after all). The
 new port installations will get recorded in /var/db/pkg again.'

I wouldn't do that, it's not as simple as that post suggests. It's
likely to lead to a lot of files being orphaned, which may lead to
build or runtime errors in the future, or vulnerabilities  that
portaudit can't detect.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ran out of inodes on /var, recommended value?

2012-06-09 Thread RW
On Sat, 09 Jun 2012 07:22:50 -0600
Gary Aitken wrote:

 I reconfigured my ssd filesystem with the /var partition of size
 512M.  Unfortunately, something in portsnap or the ports tree in
 general uses a boatload of small files, and i ran out of inodes.  Can
 anyone recommend an appropriate size for the newfs -i value?  1024?
 less?

portsnap needs roughly one file per port plus one for each
out of date port during a fetch. There are 23658 ports.

In FreeBSD 9 the fragment size increased, halving the default number of
inodes. With only 32k inodes it's possible to run out with portsnap
alone. You can probably get away with the old default of 64k (-i
8192), or perhaps 128k (-i 4096). Check how many files you have outside
of portsnap and do the arithmetic. 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Is this something we (as consumers of FreeBSD) need to be aware of?

2012-06-06 Thread RW
On Wed, 6 Jun 2012 07:36:24 -0400
Jerry wrote:


 In any event, it won't belong before some hacker comes up with a way
 to circumvent the entire process anyway,

It sounds like Fedora already have. They say that they are only going to
sign a thin shim that loads grub.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Dependencies for dns/unbound

2012-06-04 Thread RW
On Mon, 4 Jun 2012 15:47:29 +0200
Rada alive wrote:

 I was hoping to test dns/unbound as a lighter-weight DNS cache
 service to replace BIND. A few hours into make install i decided to
 abort and have a look at the dependencies.
 Can someone tell me why a DNS server needs packages like
 graphics/jpeg and x11/randrproto?


It doesn't 

$ make all-depends-list
/usr/ports/devel/gmake
/usr/ports/textproc/expat2
/usr/ports/dns/ldns
/usr/ports/devel/gettext
/usr/ports/devel/libtool
/usr/ports/converters/libiconv

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: freebsd-update no mirrors?

2012-06-03 Thread RW
On Sun, 03 Jun 2012 12:47:47 +0100
Chris Whitehouse wrote:

 
 c400# uname -a
 FreeBSD c400 9.0-RELEASE FreeBSD 9.0-RELEASE #0: Tue Jan  3 07:15:25
 UTC 2012
 r...@obrian.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386
 
 Following the handbook:
 
 c400# freebsd-update -r 9-STABLE upgrade
...
 Am I doing something wrong?

freebsd-update only works on release security branches - not
development branches. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: portsnap update won't update original /usr/ports

2012-05-23 Thread RW
On Tue, 22 May 2012 21:30:44 -0400 (EDT)
Thomas Mueller wrote:

 - Original Message -
 From: Gary Aitken free...@dreamchaser.org
 To: freebsd-questions@freebsd.org
 Sent: Tue, 22 May 2012 19:02:30 -0400 (EDT)
 Subject: portsnap update won't update original /usr/ports
 
 According to the handbook, one can do
portsnap fetch
portsnap update
 and the update will work with a previously created ports tree;
 I presume this includes one created during system install.

It says:

If you are running Portsnap for the first time, extract the snapshot
into /usr/ports: # portsnap extract

If you already have a populated /usr/ports and you are just updating,
run the following command instead...

If you have the tree from the disk then that means you are running
portsnap for the first time, the second sentence refers to a /usr/ports
populated by a portsnap extract.


  My response: 
 
 
 Now I wonder if it's feasible to switch between portsnap fetch
 update and csup ports-supfile, or if it's strictly one or the
 other.

You'll probably get away with it most of the time, but it's not safe to
mix them.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Startup from script

2012-05-22 Thread RW
On Tue, 22 May 2012 13:50:10 +0200
Jos Chrispijn wrote:

 I have this issue with running commands from a script:
 
 In my crontab I define script 'do_daily.run':
 30  23  *   *   *   root
 /root/cronjobs/do_daily.run
 
 The content of this script (amongst others) is:
 rsync -avpog /etc   /backup/$DATE/
 
 Funny thing now is that in the output of the script, the following
 appears: /root/cronjobs/do_daily.run: rsync: not found
 
 file credentials of the script itself:
 -rwx--  1 root  wheel   246 Jun 20  2010 do_daily.run
 
You need to set PATH in the crontab or script, or use the full path for
rsync.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: stay up to date with ports and packages, problem

2012-05-19 Thread RW
On Sat, 19 May 2012 11:08:19 -0700 (PDT)
Beastie-Boy wrote:

 Ok, many thanks for your replies.
 I forgot to tell that i recently upgraded from 8.1 to 9.0-RELEASE.
 That excplains maybe why i had obsolete/old packages/ports on my disk.


When you cross a major OS release boundary, you need to force a rebuild
of all installed package, or reinstall from package files.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: KPPP

2012-05-17 Thread RW
On Thu, 17 May 2012 13:37:49 +0200
Matthew Seaman wrote:

 On 17/05/2012 08:27, Peter Barnes wrote:
  I would like to use BSD but I use KPPP to connect to my ISP. Is
  anyone working on KPPP to include it with BSD? According to
  Distrowatch no BSD O/S's have KPPP
 
 KPPP is just a KDE-based GUI wrapper around the OS provided PPP
 functionality.  At a guess, the only reason it isn't available on
 FreeBSD is that FreeBSD pppd uses different configuration syntax to
 Linux, and no-one has yet written appropriate support.

It's because FreeBSD finally dropped pppd in 8-current, and KPPP doesn't
support user ppp.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Video not view-able

2012-05-08 Thread RW
On Tue, 8 May 2012 15:09:26 -0400
Carmel wrote:

 I have been visiting several sites lately in which the video content
 was not view-able.
 
 Example:
 http://www.huffingtonpost.com/2012/05/05/republicans-get-in-my-vagina-kate-beckinsale_n_1484918.html?ref=fbsrc=spcomm_ref=false
  
 
 There is a video there that displays perfectly in MS Windows in either
 IE8 or 9 and Firefox. However, under FreeBSD-8.3 with the latest
 version of Firefox all I get is a black box. No controls to click,
 etcetera. This sort of thing happens way to frequently on way to many
 sites. It cannot be a simple blame Microsoft thing since these sites
 work under Firefox when used in MS Windows.

I know this isn't what you want to hear, but it works just fine for me.

It's a bit anecdotal, but I've had fewer problems with flash video since
upgrading to modern hardware a year ago. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Video not view-able

2012-05-08 Thread RW
On Tue, 8 May 2012 16:51:06 -0400
Carmel wrote:

 On Tue, 8 May 2012 21:14:23 +0100
 RW articulated:

 It's a bit anecdotal, but I've had fewer problems with flash video
 since upgrading to modern hardware a year ago. 
 
 Define modern hardware. The Windows machine is actually older then
 the FreeBSD one.

There's no point in comparing performance on Windows and FreeBSD.
Anything other than Windows is an afterthought as far as Flash
development is concerned. 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: bsdpan-* ports, portmanager, and @comment ORIGIN:

2012-04-29 Thread RW
On Sun, 29 Apr 2012 12:25:39 -0400
Daniel Staal wrote:


 So, is there any way to *avoid* getting that error?  Some way where I
 can actually use the ports system to keep my stuff up to date?  (Even
 if it doesn't include the manually-installed software?)
 

It think you should be able to prevent the package entries by setting 
DISABLE_BSDPAN in the environment.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD vice OS X memory management

2012-04-26 Thread RW
On Thu, 26 Apr 2012 08:32:39 + (UTC)
jb wrote:

 Adam Vande More amvandemore at gmail.com writes:
 
  ... 
  http://workstuff.tumblr.com/post/19036310553/two-things-that-really-helped-
  speed-up-my-mac-and
  http://dywypi.org/2012/02/back-on-linux.html
  
 
 2) Inactive memory (which is memory that has been recently used but
 is no longer) is supposed to be seamlessly reclaimed automatically by
 the OS when needed for new programs. In practice, I’ve found that
 this isn’t the case, and my system slows to a crawl and starts paging
 out to disk when free memory drops to zero, even as half of the
 available RAM (which is a lot) is marked as inactive. ...

That's not a good description of inactive memory, most of which
contains useful data. The situation described is undesirable, but not
abnormal. It can happen when your physical memory is spread thinly, but
most of it isn't being frequently accessed. In that case the inactive
queue can be dominated by dirty swap-backed pages. 


 The above and the past FreeBSD thread here, both I referred to, have
 something in common - the system seems to progressively come under
 stress due to what one user experienced as missing memory,

The FreeBSD link involved ZFS which manages its own disk caching and
is relatively new. My guess is that if there is a problem it's ZFS
specific. If it were a more general problem I think we'd see a lot more
complaints, whereas  ZFS already has a reputation for needing lots of
memory.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Can FreeBSD 9.0-RELEASE mount Ext3 file system ?

2012-04-18 Thread RW
On Wed, 18 Apr 2012 14:12:41 +0200
Julian H. Stacey wrote:


 No mention of ext3 there, nor from find (above).
 
 .. so you May be out of luck ..

ext3 is ext2+journalling. If fsck supports ext3, then it can sync the
journal and the partition can be safely mounted as ext2.

It's a long time since I've used ext3 so this may have changed, but
when I did it needed an fsck from ports.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


LD_TRACE_LOADED_OBJECTS and Linux binaries

2012-04-11 Thread RW

What's the explanation for this:


  $ ldd /usr/compat/linux/bin/pwd
  /usr/compat/linux/bin/pwd:
  /tmp

  $ LD_TRACE_LOADED_OBJECTS=1  /usr/compat/linux/bin/pwd
  libc.so.6 = /lib/libc.so.6 (0x28076000)
  /lib/ld-linux.so.2 (0x2805)

From what I've read ldd works through setting LD_TRACE_LOADED_OBJECTS,
and neither form should work on a linux binary.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD's backwards webdesign / corporate identity

2012-04-08 Thread RW
On Sun, 8 Apr 2012 14:40:12 +0200
Tony wrote:

 Tony
 http://siegelgale.com/ 

The FreeBSD site isn't great, but this site is worse.

Has no-one ever pointed-out the irony that the top 20% of the page
bangs-on about simplifying, and has a fight bloat on your website
link, but the other 80% is a cluttered mess. 

It also has a pet hate of mine: menus that make the rest of the page
move around even when the pointer is just passing-over them. I can
forgive the FreeBSD site all its faults for not doing that.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD's backwards webdesign / corporate identity

2012-04-08 Thread RW
On Mon, 9 Apr 2012 01:25:54 +0200
Mikkel Bang wrote:

 Den 23:44 8. april 2012 skrev RW rwmailli...@googlemail.com
 følgende:
 
 
  The FreeBSD site isn't great, but this site is worse.
 
  Has no-one ever pointed-out the irony that the top 20% of the page
  bangs-on about simplifying, and has a fight bloat on your website
  link, but the other 80% is a cluttered mess.
 
  It also has a pet hate of mine: menus that make the rest of the page
  move around even when the pointer is just passing-over them. I can
  forgive the FreeBSD site all its faults for not doing that.
 
 
 I understand you're trying to stand up for FreeBSD, 

You understand wrongly. I don't really care about the FreeBSD site. I
genuinely think that Siegel+Gale have a substandard website. Take a
look at the Royal Academy  and Design Council sites he linked - it's not
in the same league.

 but what you're
 saying makes little sense. Siegel+Gale is one of the world's most
 respected design agencies. And like, who are you? 

So what are you saying?

- I'm automatically wrong (irrespective of the facts) because they're
  respected design agency and I'm a nobody
- You didn't understand what I wrote. 
- you disagree with a specific point that you're not bothering to
  mention

Haters gonna hate.

I'm not a hater. I'm at most a mocker. In particular I find it amusing
that their own website fails to follow the vision that they advocate for
other peoples.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Access to Time Warner cable network

2012-04-02 Thread RW
On Mon, 02 Apr 2012 15:18:19 +0100
Dave wrote:

 
 fbsd8
 
 How do you connect to your TW ISP?  Just a Cable modem of some sort,
 or is there a Router involved somewhere?   It makes a whole world of 
 difference

If you read the rest of the thread you'll see that that the problem
was solved yesterday.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Access to Time Warner cable network

2012-04-01 Thread RW
On Sat, 31 Mar 2012 20:52:26 -0400
Fbsd8 wrote:

 Da Rock wrote:
  On 04/01/12 09:52, Fbsd8 wrote:
  Just purchased an account on the northern Ohio Time Warner cable
  system. Having problem connecting to their service. Seems their
  dhcp server has an ip address of 10.2.0.1 which is not public
  routable. I know my Freebsd 8.2 box functions because it worked
  fine under att service which I just left for Time Warner service.
  MY xp laptop works fine with time warner. I can see that during
  the connection hand shake they first issue ip addresses
  192.168.x.x then end up with real public routable ip address for
  dns and my ip address. Just the dhcp ip is 10.2.0.1. XP seems to
  handle this connection hand shake ok.

I had a modem that did something similar, it issued a temporary private
ip address and the replaced it with a routable address.

The difference here is that the DHCP server is in a different address
block to the DHCP server, but I'm not sure that's a problem. I think
that FreeBSD associates  DHCP traffic with the interface its operating
on irrespective of normal routing.


  Have you got a firewall or something else blocking dhcp from 
  communicating? What does ifconfig say? 
  
 No firewall running and NIC status is no carrier

This is what you get when something isn't plugged-in or turned-on.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Access to Time Warner cable network

2012-04-01 Thread RW
On Sun, 1 Apr 2012 14:35:41 +0100
RW wrote:


 The difference here is that the DHCP server is in a different address
 block to the DHCP server, 

That should be: the temporary address is in a different address
 block to the DHCP server
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Printer recommendation please

2012-03-30 Thread RW
On Fri, 30 Mar 2012 16:14:20 -0400
Mike Jeays wrote:

 I strongly recommend a laser printer over an inkjet even for home
 use. The reduced running costs and better reliability are easily
 worth the lack of colour, IMO. 

How do they compare for light and  occasional use? I'm thinking in
terms of a few pages, a few times a year, so presumably the
consumables become perishables.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


libc regex word-boundary support fallen-off?

2012-03-08 Thread RW

I've noticed for some time that claws-mail and less (which I think use
libc's regex(3)) don't support word boundaries in searches. I might be
delusional, but I think I've used \b in the past in both of those
applications in FreeBSD.  

According to regex(3) it's an implementation POSIX.2, so the feature
needn't be supported, but at the bottom of the page it says
word-boundary matching is a bit of a kludge, so presumably it has
been.

Does anyone know what's going on?


I switched from i386 to amd64 last year so it might be something to do
with that. I'm currently using 8.2p6.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Still having trouble with package upgrades

2012-03-07 Thread RW
On Wed, 7 Mar 2012 11:28:47 -0500
David Jackson wrote:


 One faulty argument I heard was that it is often not a good idea to
 upgrade to new software release.

This is an argument that you appear to have completely misunderstood.
The point of suggesting that you use release package is that it's a
workaround for your problems, and minor releases are not all that far
apart. 


 As for compile options, the solution is simple, compile in all feature
 options and the most commonly used settings into the binary packages,
 for the standard i386 CPU. 

Surely that would be the standard amd64.


 A good software philosophy is to allow software to work out of the
 box with as little configuration as possible, but allow everything to
 be configured by the user if they want, by shipping software with
 reasonable defaults which can be overridden by the user. Make simple
 things easy and complicated things doable. In GUI, by default,
 complexity can be hidden from users, but if people want fine grain
 control, they should be free to use advanced screens of the GUI to
 get complex, fine grained control. In GUI design, more commonly used
 settings can be provided more upfront while advanced features for use
 by experts can be placed deeper in advanced or expert screens oft the
 GUI. Everything should be able to be configured or accomplished by
 both GUI and CLI and API.

Are aware that FreeBSD is mostly a server OS? 


 doing any system wide all at once OS-release upgrades at all. There
 is no reason why kernel and userland programs have to be upgraded at
 the same time... The idea of  waiting on a FreeBSD kernel release to
 upgrade firefox is absurd, and the idea that firefox must be upgraded
 during a kernel upgrade is also absurd. 

You don't have to do that, that's complete nonsense.


 There really should be little reason for release upgrades anymore
 these days, when the different parts of the system can be upgraded
 independantly through a binary package management tool, including
 kernel and user programs.
 
 When a new kernel is released, there is no reason to reinstall all of
 the packages on the system at the same time. 

You reinstall packages because there are major library changes
when you cross  a major base-system release. 

 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 8.2 - active plus inactive memory leak!?

2012-03-06 Thread RW
On Tue, 06 Mar 2012 18:30:07 -0500
Chuck Swiger wrote:

 On 3/6/2012 2:13 PM, Luke Marsden wrote:

 * Resident corresponds to a subset of the pages above: those
  pages which actually occupy physical/core memory.  Notably pages may
   appear in size but not appear in resident for read-only
  text pages from libraries which have not been used yet or which have
   been malloc()'d but not yet written-to.
 
 Yes.
 
  My understanding for the values for the system as a whole (at the
  top in 'top') is as follows:
 
 * Active / inactive memory is the same thing: resident
  memory from processes in use.  Being in the inactive as opposed to
  active list simply indicates that the pages in question are less
   recently used and therefore more likely to get swapped out
  if the machine comes under memory pressure.
 
 Well, they aren't exactly the same thing.  The kernel implements a VM
 working set algorithm which periodically looks at all of the pages
 that are in memory and notes whether a process has accessed that page
 recently.  If it has, the page is active; if the page has not been
 used for some time, it becomes inactive.

I think the previous poster  has it about right, it's mostly about
lifecycle. The inactive queue contains a mixture of resident and
non-resident memory. It's commonly dominated by disk cache pages, and
consequently is easily blown away by recursive greps etc.

 * Cache is freed memory which the kernel has decided to keep
  in case it correspond to a useful page in future; it can be cheaply
   evicted into the free list.
 
 Sort of, although this description fits the inactive memory
 category also.
 
 The major distinction is that the system is actively trying to flush
 any dirty pages in the cache category, so that they are available for
 reuse by something else immediately.

Only clean pages are added to cache. A dirty page will go twice around
the inactive queue as dirty, get flushed and then do a third pass as a
clean page. 

The point of cache is that it's a small stock of memory that's
available for immediate reuse, the pages have nothing else in common.



On Wed, 07 Mar 2012 00:36:21 +
Luke Marsden wrote:

 But that's what I'm saying...
 
 sum(process resident sizes) = active + inactive


Inactive memory contains disc cache. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


  1   2   3   4   5   6   7   8   9   10   >