Re: DigitalOcean offers VMs with FreeBSD!
Beware that they (DO) do not at all grok ipv6. They hand out /124s, or something equally silly. signature.asc Description: Message signed with OpenPGP using GPGMail
Re: DigitalOcean offers VMs with FreeBSD!
Bernhard Fröhlich wrote: > I had a quick look at it and the result is > quite poor considering the time it took them to get it done. > > They had to install quite a few packages (perl, python27, libX11, avahi > ...) and modified the stock FreeBSD image quite a bit. At startup they send > an arping otherwise you do not even have network access in their network. > This looks all a bit hackish and error prone. I am really wondering how > long it will take that a regular update breaks their scripts and let's you > back with a non accessible box. I use http://www.vultr.com/ for FreeBSD - their packages are similarly or better priced than DO. With Vultr, you can run their automated install, (which in itself just automates a typical FreeBSD install - there are no OS hacks) or just install off an ISO etc. I don't know what's unusual with the DO virtualisation, but vultr just works like a normal server (though they do restrict to virtio devices where applicable rather than emulated harware) You can even install a windows ISO (as long as you've sideloaded virtio drivers onto the install disk), or with FreeBSD, "it just works" Cheers, Jamie ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
[RFC] Change OpenSSL derived digest functions to return boolean values
Hi,
I put a patch to Phabricator and Github.
https://reviews.freebsd.org/D1542
https://github.com/kuriyama/freebsd/compare/openssl-digest-return-value
Any comments are welcome!
DESCRIPTION
OpenSSL changed return value type of *_{Init,Update,Final}() functions
at 2001 [1]. Our implementations at libmd do not follow these changes.
[1]
https://github.com/openssl/openssl/commit/2dc769a1c17e1e0c7aef6e11496c8ba2c1db2e28
BACKGROUND
I noticed this problem during using install(1) with net/nss_ldap,
net/openldap24-client and ldaps:// protocol. While install(1) is
linked with libmd, but ports libldap is compiled with libcrypto to
expect OpenSSL's SHA1_Update() function. When using install(1) in this
situation, install(1) uses libmd's SHA1_Update(), but wrapping
functions in OpenSSL expects SHA1_Update() to return boolean. This
causes sometimes fails SHA1_Update() (which depends on value of EAX
register?) call.
Problem is, we have SHA1_Update() functions in libmd and libcrypto,
and both has different return value types. This should be same if they
provides identical functionality.
TBD
Should adjust {SHA{256,512}_,MDX}{Init,Update,Final}() functions, too?
--
Jun Kuriyama // FreeBSD Project
// S2 Factory, Inc.
___
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: Connected sanitizer libraries to the build (for x86)
On 14 Jan 2015, at 22:17, Kurt Lidl wrote: > > This apparently breaks the build when compiling on a > system that has WITHOUT_IPFILTER= in /etc/src.conf: > > --- depend_subdir_libclang_rt --- > In file included from > /usr/src/lib/libclang_rt/asan/../../../contrib/compiler-rt/lib/sanitizer_common/sanitizer_platform_limits_posix.cc:59: > /usr/obj/usr/src/tmp/usr/include/sys/timeb.h:42:2: warning: "this file > includes which is deprecated" [-W#warnings] > #warning "this file includes which is deprecated" > ^ > /usr/src/lib/libclang_rt/asan/../../../contrib/compiler-rt/lib/sanitizer_common/sanitizer_platform_limits_posix.cc:100:11: > fatal error: 'netinet/ip_compat.h' file not found > # include > ^ Thanks for the reminder (I already got a similar report earlier), this has been fixed in r277201. -Dimitry signature.asc Description: Message signed with OpenPGP using GPGMail
Re: DigitalOcean offers VMs with FreeBSD!
On Thu, 15 Jan 2015, Slawa Olhovchenkov wrote: > On Thu, Jan 15, 2015 at 06:28:23PM +0300, Lev Serebryakov wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA512 > > > > On 15.01.2015 14:29, Lev Serebryakov wrote: > > > > > https://www.digitalocean.com/company/blog/presenting-freebsd-how-we-made-it-happen/ > > > > > > I didn't see this news on mailing lists :) > > But here are some thread about FreeBSD is way slower than Linux in > > these virtual installations > > > > https://news.ycombinator.com/item?id=487 > > May be IOPS quotation? > Can you test with dd and custom kernel with MAXPHYS=1048576 ? By default, root is mounted with "sync" option: > time dd if=/dev/zero of=/tmp/test bs=64k count=16k 16384+0 records in 16384+0 records out 1073741824 bytes transferred in 57.605991 secs (18639412 bytes/sec) 0.023u 6.128s 0:57.61 10.6% 25+172k 7+81916io 3pf+0w > sudo mount -o nosync -u / > > mount /dev/gpt/rootfs on / (ufs, local, soft-updates) devfs on /dev (devfs, local, multilabel) > time dd if=/dev/zero of=/tmp/test bs=64k count=16k 16384+0 records in 16384+0 records out 1073741824 bytes transferred in 5.135908 secs (209065631 bytes/sec) 0.016u 2.274s 0:05.16 44.1% 24+169k 8+8193io 0pf+0w //Marcin ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: DigitalOcean offers VMs with FreeBSD!
On Thu, 15 Jan 2015, Bryan Venteicher wrote: > On Thu, Jan 15, 2015 at 9:44 AM, Slawa Olhovchenkov wrote: > > > On Thu, Jan 15, 2015 at 06:28:23PM +0300, Lev Serebryakov wrote: > > > > > -BEGIN PGP SIGNED MESSAGE- > > > Hash: SHA512 > > > > > > On 15.01.2015 14:29, Lev Serebryakov wrote: > > > > > > > > > https://www.digitalocean.com/company/blog/presenting-freebsd-how-we-made-it-happen/ > > > > > > > > I didn't see this news on mailing lists :) > > > But here are some thread about FreeBSD is way slower than Linux in > > > these virtual installations > > > > > > https://news.ycombinator.com/item?id=487 > > > > May be IOPS quotation? > > Can you test with dd and custom kernel with MAXPHYS=1048576 ? > > > > > What's the value of kern.timecounter.hardware? It will likely be either > HPET or ACPI which means there is an VM exit whenever the guest reads from > the emulated timecounter hardware. That's why I have some WIP to add > support for KVMCLOCK [1]. I hope to merge those changes to HEAD in a week > and STABLE shortly after. > sysctl kern.timecounter.hardware kern.timecounter.hardware: HPET ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: DigitalOcean offers VMs with FreeBSD!
On Thu, Jan 15, 2015 at 9:44 AM, Slawa Olhovchenkov wrote: > On Thu, Jan 15, 2015 at 06:28:23PM +0300, Lev Serebryakov wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA512 > > > > On 15.01.2015 14:29, Lev Serebryakov wrote: > > > > > > https://www.digitalocean.com/company/blog/presenting-freebsd-how-we-made-it-happen/ > > > > > > I didn't see this news on mailing lists :) > > But here are some thread about FreeBSD is way slower than Linux in > > these virtual installations > > > > https://news.ycombinator.com/item?id=487 > > May be IOPS quotation? > Can you test with dd and custom kernel with MAXPHYS=1048576 ? > What's the value of kern.timecounter.hardware? It will likely be either HPET or ACPI which means there is an VM exit whenever the guest reads from the emulated timecounter hardware. That's why I have some WIP to add support for KVMCLOCK [1]. I hope to merge those changes to HEAD in a week and STABLE shortly after. In the meanwhile, not completely foolproof workaround is to use the TSC-low timecounter source. [1] - https://lists.freebsd.org/pipermail/freebsd-arch/2015-January/016587.html > ___ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org" > ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: DigitalOcean offers VMs with FreeBSD!
On Thu, Jan 15, 2015 at 12:29 PM, Lev Serebryakov wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > > https://www.digitalocean.com/company/blog/presenting-freebsd-how-we-made-it-happen/ > > I didn't see this news on mailing lists :) I had a quick look at it and the result is quite poor considering the time it took them to get it done. They had to install quite a few packages (perl, python27, libX11, avahi ...) and modified the stock FreeBSD image quite a bit. At startup they send an arping otherwise you do not even have network access in their network. This looks all a bit hackish and error prone. I am really wondering how long it will take that a regular update breaks their scripts and let's you back with a non accessible box. -- Bernhard Froehlich http://www.bluelife.at/ ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: [RFC] kern/kern_timeout.c rewrite in progress
On Thu, Jan 15, 2015 at 05:42:36PM +0100, Hans Petter Selasky wrote: > On 01/15/15 16:58, Slawa Olhovchenkov wrote: > > On Thu, Jan 15, 2015 at 04:51:00PM +0100, Hans Petter Selasky wrote: > > > >> On 01/15/15 16:46, Slawa Olhovchenkov wrote: > >>> On Thu, Jan 15, 2015 at 04:37:51PM +0100, Hans Petter Selasky wrote: > >>> > >>> Only stability impovement? > >>> Or performance too? > >> > >> Hi, > >> > >> Stability improvement mostly. Should not affect performance from what I > >> know. Some changes are made about when and how we can select a different > >> callback CPU for a callout callback. Try reading the updated timeout(9) > > > > I am not kernel guru and can't be draw a conclusion from manual page. > > > >> man manual page first. Maybe it answers your question. Else feel free to > >> ask here. > > > > As I understand performance for massive TCP connections (tens of > > thousands connections) will be same, no improvement, no degraded? > > (very high lock congestion on TCP timers working). > > Hi, > > There is no difference in memory footprint per TCP connection. > > There is no significant different in the amount of code executed when a > callout is started/stopped or reset. > > There might be a reduction in the number of times the spinlocks inside > the callout subsystem are locked/unlocked, due to some simplifications > made and checks for redundant locking. > > The changes are mainly about closing some races in the callout subsystem > and cornercases towards the TCP/IP stack which use callouts. > > There is a patch for the TCP/IP stack coming possibly next week to take > advantage of the new callout_drain_async() function. It is not ready > yet, and I'm waiting for the current callout patch to settle first. Thanks. I am going to try this patch in 10-STABLE branch. ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: [RFC] kern/kern_timeout.c rewrite in progress
On 01/15/15 16:58, Slawa Olhovchenkov wrote: On Thu, Jan 15, 2015 at 04:51:00PM +0100, Hans Petter Selasky wrote: On 01/15/15 16:46, Slawa Olhovchenkov wrote: On Thu, Jan 15, 2015 at 04:37:51PM +0100, Hans Petter Selasky wrote: Only stability impovement? Or performance too? Hi, Stability improvement mostly. Should not affect performance from what I know. Some changes are made about when and how we can select a different callback CPU for a callout callback. Try reading the updated timeout(9) I am not kernel guru and can't be draw a conclusion from manual page. man manual page first. Maybe it answers your question. Else feel free to ask here. As I understand performance for massive TCP connections (tens of thousands connections) will be same, no improvement, no degraded? (very high lock congestion on TCP timers working). Hi, There is no difference in memory footprint per TCP connection. There is no significant different in the amount of code executed when a callout is started/stopped or reset. There might be a reduction in the number of times the spinlocks inside the callout subsystem are locked/unlocked, due to some simplifications made and checks for redundant locking. The changes are mainly about closing some races in the callout subsystem and cornercases towards the TCP/IP stack which use callouts. There is a patch for the TCP/IP stack coming possibly next week to take advantage of the new callout_drain_async() function. It is not ready yet, and I'm waiting for the current callout patch to settle first. --HPS ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: DigitalOcean offers VMs with FreeBSD!
But here are some thread about FreeBSD is way slower than Linux in these virtual installations https://news.ycombinator.com/item?id=487 May be IOPS quotation? Can you test with dd and custom kernel with MAXPHYS=1048576 ? Don't know about DO, but networking over virtio is also slower under VirtualBox (FreeBSD guest and host), compared to the emulated em0. Mark ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: DigitalOcean offers VMs with FreeBSD!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 15.01.2015 18:44, Slawa Olhovchenkov wrote: >>> https://www.digitalocean.com/company/blog/presenting-freebsd-how-we-made-it-happen/ >>> >>> >>> I didn't see this news on mailing lists :) >> But here are some thread about FreeBSD is way slower than Linux >> in these virtual installations >> >> https://news.ycombinator.com/item?id=487 > > May be IOPS quotation? Can you test with dd and custom kernel with > MAXPHYS=1048576 ? I haven't Digital Ocean instance(s) right now :) - -- // Lev Serebryakov -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (MingW32) iQJ8BAEBCgBmBQJUt+Q7XxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRGOTZEMUNBMEI1RjQzMThCNjc0QjMzMEFF QUIwM0M1OEJGREM0NzhGAAoJEOqwPFi/3EePvnMQAJviVsAGTxG0yFOqmBFDVAda N/HQ2Px5PBPwYBPmyY0GFPIRUW6dpRbiAKuchDTOxmOrRwjBj+2NNN03ktR7qzIk vD0xz3q72Jw/5CfnpUqb8/HXwRGX/6wPX+YVK4L54RFco3QlslyzFJ8T+lGUQ5wA Fk+Gus1ibz5NNsSoIhsbb/QJzbEhMVj2DaSoMm0D4MAI+0/cl/GmtWUSgY0y6N7t /w3NR1Bon3d4FblQOGqdF/VovN5tX2YInMttD5s+Av/OQTxX+VPfp3qx41BcC3pa 0CFp0le4TQp980vJuUbZ1RmJycp7AfkYU4v89foDcqNlyX9KIqBTBQoadVl37jud fBcAOmc7/wu4y1CVSY6btOFuOaAUFY5vglIixXqabJsJyFc3ymx6yP1MNOjUfTzK k/azAZis7DnV8YsyUQbJv5rl9VH2G3qwDpwB7ae9dG2kA2zicrN0cTfEIYJkrrFe VF+oyzR7PyRGQ98/lE4ewLiHW2zWUyzo+YJp1MJTkWIvWAp7Q/FyyaayXQ9Kju4a FtQMwD46lvPhQKsg5245Sn3Fg18HJmrWwGM5Qr3axs2aOKNvj5fPuStelaKQVYIi oIG30WSZcK/RnUuS5rvPgLzOM+O27ez3oj861cd3itYR8yz9qun5PDBAiwZgf2T+ 7ROGjnFANJvQtr5pUBXV =Tpza -END PGP SIGNATURE- ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: [RFC] kern/kern_timeout.c rewrite in progress
On Thu, Jan 15, 2015 at 04:51:00PM +0100, Hans Petter Selasky wrote: > On 01/15/15 16:46, Slawa Olhovchenkov wrote: > > On Thu, Jan 15, 2015 at 04:37:51PM +0100, Hans Petter Selasky wrote: > > > > Only stability impovement? > > Or performance too? > > Hi, > > Stability improvement mostly. Should not affect performance from what I > know. Some changes are made about when and how we can select a different > callback CPU for a callout callback. Try reading the updated timeout(9) I am not kernel guru and can't be draw a conclusion from manual page. > man manual page first. Maybe it answers your question. Else feel free to > ask here. As I understand performance for massive TCP connections (tens of thousands connections) will be same, no improvement, no degraded? (very high lock congestion on TCP timers working). ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: DigitalOcean offers VMs with FreeBSD!
On Thu, Jan 15, 2015 at 06:28:23PM +0300, Lev Serebryakov wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 15.01.2015 14:29, Lev Serebryakov wrote: > > > https://www.digitalocean.com/company/blog/presenting-freebsd-how-we-made-it-happen/ > > > > I didn't see this news on mailing lists :) > But here are some thread about FreeBSD is way slower than Linux in > these virtual installations > > https://news.ycombinator.com/item?id=487 May be IOPS quotation? Can you test with dd and custom kernel with MAXPHYS=1048576 ? ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: [RFC] kern/kern_timeout.c rewrite in progress
On 01/15/15 16:46, Slawa Olhovchenkov wrote: On Thu, Jan 15, 2015 at 04:37:51PM +0100, Hans Petter Selasky wrote: Only stability impovement? Or performance too? Hi, Stability improvement mostly. Should not affect performance from what I know. Some changes are made about when and how we can select a different callback CPU for a callout callback. Try reading the updated timeout(9) man manual page first. Maybe it answers your question. Else feel free to ask here. --HPS ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: [RFC] kern/kern_timeout.c rewrite in progress
On Thu, Jan 15, 2015 at 04:37:51PM +0100, Hans Petter Selasky wrote: > On 01/14/15 15:31, Hans Petter Selasky wrote: > > On 01/11/15 19:08, Jason Wolfe wrote: > >> Hans, > >> > >> We've had 50 machines running 10.1-STABLE with this patch for the > >> better part of a week without issue. Prior we would have seen a panic > >> every few days at the least, so things are looking very promising on > >> our front. > >> > >> Jason > > > > Hi, > > > > I've updated D1438 including the manual page changes needed for > > timeout.9 aswell in addition to a minor fix for those using timeout() > > and untimeout() and KTR(). > > > > https://reviews.freebsd.org/D1438 > > > > --HPS > > FYI: > > Now in -current: > > https://svnweb.freebsd.org/changeset/base/277213 > > Thanks for all good comments and reviews. Only stability impovement? Or performance too? ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: [RFC] kern/kern_timeout.c rewrite in progress
On 01/14/15 15:31, Hans Petter Selasky wrote: On 01/11/15 19:08, Jason Wolfe wrote: Hans, We've had 50 machines running 10.1-STABLE with this patch for the better part of a week without issue. Prior we would have seen a panic every few days at the least, so things are looking very promising on our front. Jason Hi, I've updated D1438 including the manual page changes needed for timeout.9 aswell in addition to a minor fix for those using timeout() and untimeout() and KTR(). https://reviews.freebsd.org/D1438 --HPS FYI: Now in -current: https://svnweb.freebsd.org/changeset/base/277213 Thanks for all good comments and reviews. --HPS ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: DigitalOcean offers VMs with FreeBSD!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 15.01.2015 14:29, Lev Serebryakov wrote: > https://www.digitalocean.com/company/blog/presenting-freebsd-how-we-made-it-happen/ > > I didn't see this news on mailing lists :) But here are some thread about FreeBSD is way slower than Linux in these virtual installations https://news.ycombinator.com/item?id=487 - -- // Lev Serebryakov -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (MingW32) iQJ8BAEBCgBmBQJUt9yXXxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRGOTZEMUNBMEI1RjQzMThCNjc0QjMzMEFF QUIwM0M1OEJGREM0NzhGAAoJEOqwPFi/3EePU9YP/22oUffmkkbbd0KUbJgDQqDi PaohQ/LiFs3elpIQboQXuMIQtYqcAEE/3IXskc/ShHfnKNm0V9V1gPkn9wpaAWza cbOPwwE8RStpN52z6wKpAy6FM1aXkuL4idDc6ErHfIP4VDW4sgaJhBb0hnIsSWO1 745MTWJg8bldr5Kqzr/8mFDgCuNWHZi/QTNHSggDni566T0xn7hEbPbQoiALpZT8 3b5I8KGu/4VnvT7vmZmj65HyX9N9MtllfbpmCv9iQAJd+Tf6kTiURiFv/6vJDN0m 1cD5j5EZU+mJOjfU9n3dbP3M2xIhbVOZBrUtD23S2CeZtHPtZgcgt19aBQ2ZjTlx TcpykUDoIfAwmD8bjNe8mc06rn6MM7QYnKTxUN9WdkVpTzu+GcA2g00ET4fY8EnF 4R36/vnula2S8f5ON+MrBmtQ/vdiHc7w1QNxq41McegZzmkF4lcjHVS39MNAiXaf eG6fQHaEibVGBUBsPX5FjUWIWugAG6CFDX435AN2bx0WM7ocgQd+ITEWIVytG68c jqpnGF15crFzZCEYpeHUhrieYrzIHqxarrkWMBefLVxflricB/alPeYc+jNT6wcm K5MUcBVXfWTcUVP0SgXNAnWY8Tmvwfbmb9MkNPudIOFjDBc3pEPICW23uviNizLt OoYcVXcOj+ALB27alZi1 =uggy -END PGP SIGNATURE- ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
DigitalOcean offers VMs with FreeBSD!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 https://www.digitalocean.com/company/blog/presenting-freebsd-how-we-made-it-happen/ I didn't see this news on mailing lists :) - -- // Lev Serebryakov AKA Black Lion -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (MingW32) iQJ8BAEBCgBmBQJUt6STXxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRGOTZEMUNBMEI1RjQzMThCNjc0QjMzMEFF QUIwM0M1OEJGREM0NzhGAAoJEOqwPFi/3EePp6oP/3yvWOpt83MiEVuoTxZpGuVI 4vpWyv+U9SaDzFNo7HGOO5qI0L1vqe77mzzlqA2bVUcITKx+YckO5gtRdSDh3GtB FzpHpVHXDD96YacyxYaPFIqnGYAUoeNgX/mcTQz2IYouWWDuRsy17joetXVmtunP 2SFntiAnf8xYYfc/T3Bwjhff+TUgcQhmVH567EUpa2QTtWEesxeISqUj54/JwPzX 1sI0Yy2t293g/udCQxROU1rFqjmjTW6r31iS27IUbwdQtyGXR1EHMMopKXxxOq5x w1THJyLOQOETTRAYJpEpHgNRmgFZazfvxe6mPDQyuEQ/tuCZgO1WLwPajhy8Ckws Fa9vQsVyQOFjj5hP1BbGJFtIpc0BMuyXESfABRTBQZsD/SHJzly59wGqgl1lwFQ5 fUb5oDyc07M6jquQo/Pc05cwHxgsRumAYZ1CIxNTR930ShL4mpcYTS6xWlkzm4bA cqfSZ2FW57RKjWrArI7xOrG83aneHjkwJtNQ/5nLbpmemmRMW9qRzd9YaWkGfmNn jsnwwS5gmIuLK5GTkprWQ1wBltdV7BiFFNAIRi6OBpM/pmwshOVXHOPJp+9YXCLJ UfmLedFGSp/J/BESsRmJ1rlt52coy/NY3AxA+z/JW3kgD/EIRdiNSswktTTn9nCR 8bOmQUvmMdQ/bRjlGomh =shHj -END PGP SIGNATURE- ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
Re: Devops question: unattended installs of FreeBSD?
Please take a look on this: https://wiki.freebsd.org/SummerOfCode2014/FreeBSD_PXE_preseed This is extension for bsdinstall script, you can configure for example local mirror, root password, zfs options etc. The most straightforward solution: - save configured template to www server ( http://svnweb.freebsd.org/socsvn/soc2014/kczekirda/pxe-fai-head/others/template.input?view=markup ) - add option bootfile-name "http://example.com/configs/"; to your DHCP server - run mfsfai from iso file (for example: http://svnweb.freebsd.org/socsvn/soc2014/kczekirda/pxe-fai-head/tools/mfsbsd-10.0-RELEASE-fai-amd64.iso?view=co ) Fai will download configuration file called as mac address from network card, if not exist file called default and do installation with this configuration. You can also boot this iso file by PXE using for example iPXE or PXELINUX and MEMDISK module. Please don't hesitate to contact me if you need assistant or questions. Regards, Kamil 2015-01-13 22:10 GMT+01:00 Craig Rodrigues : > On Mon, Jan 12, 2015 at 12:12 PM, John Nielsen wrote: > > > > > I'd be happy to provide more specific suggestions if needed. It really > > depends on how fully automated you want things to be and how much > > customization you want to include, as well as what you have available in > > the install environment. If you're installing on live VMs then you first > > have to get them booted. A custom ISO or MFS image is probably the > simplest > > for that, though PXE is also an option. (Actually, serving an mfsBSD > image > > via PXE is pretty straightforward.) > > > > > Thanks! You provided some excellent concrete examples for how to do > unattended FreeBSD installs. > > In the past 6 months, I have had two different people ask me how to: > -> create a PXE boot server > -> take the ISO image for FreeBSD 9.2, FreeBSD 10.1, etc. > -> create a kickstart environment where it is possible to PXE boot a > cluster of machines, and > have an unattended "kickstart" install take place of the various > FreeBSD versions > > I have coded this kind of stuff up myself in the past and written my own > scripts. > However, it would be really nice if we had more straightforward > documentation and example scripts for doing this. > That way, the average devops engineer experienced with Linux and kickstart > can set this up with no problem, instead of having to struggle and figure > things out. > > It looks like all this stuff is possible under FreeBSD. The main problem I > see is that the > access to the documentation for doing this is not straightforward at all. > > If I do a web search for "Linux kickstart", the search results I get lead > me to documentation > that is actually quite good. I am not a Linux expert, but I can read that > stuff and figure out how to set it > up reasonably quickly. > > If I do a web search for "FreeBSD kickstart", the top search results I get > lead to a few broken > web links, and some private notes from different people on the Internet. > The notes are not bad, > but not as straightforward to follow as the Linux documentation links. > > Since you have some good experience with this, can we create a thread on > https://forums.freebsd.org > with the title "FreeBSD kickstart" with some step-by-step examples for > creating a "kickstart" environment? > > That way over time, a web search for "FreeBSD kickstart" will show the > forum post with top-notch examples. > > Thanks. > -- > Craig > ___ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org" > ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
