Completely jailed tinderbox?
Dear list, Has anyone ever succeeded to run a tinderbox in a jail who is willing to elaborate on the configuration because it's driving me NUTS. Happy to do that off-list and summarise later on. Looks like neither NFS nor nullfs mounts would work in a jail which is breaking tinderbox builds. Sysctls are set to permit mounts etc. Thanks, Peter. -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
IP-Based Apache Config
Hi there, I could need a quick hand from someone with apache22 and maybe apache-in-a-jail experience. I want to set up locally apache22 on a given IP (it's in a jail here) and use files for name service. nsswitch.conf does this per default so files take precedence -- if resolution worked that way which I currently am not that much sure about anymore. I set Servername to IP:80 just as to resolv-conf-hostname:80 after reading another post [1] and some more of the apache dox [2] (but left the rest of the config alone for the time being). A also do see the connection via tcpdump both at the router connected to the jail as well as the jail server itself as much as I see the connections in netstat both in and outside the jail. However, I do NOT see ANYthing in any apache logs, and tcpdump confirms that all that is established is the TCP connection. Also, when I telnet IP 80 and GET /, it goes into the server, and all remains quiet thereafter. I think I probably overlook something utterly obvious and simple but since I don't have any straws from logs to cling to, I currently don't seem to be able to get my head around it. Hence, any help appreciated. Thanks, Peter. --- [1] http://lists.freebsd.org/pipermail/freebsd-jail/2009-November/001057.html [2] http://httpd.apache.org/docs/2.2/dns-caveats.html -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: 'Serious' crypto?
Hi Matthew, > > And a hardware crypto device will level HTTPS to the HTTP volume > > without it? > > Probably. The usual approach with HTTPS once traffic levels get big > enough is crypto-offload. You use a separate device as the crypto > endpoint: typically built into a load balancer. You can do this using a > PF based firewall using relayd(8) for a lot less money, and in this case > one crypto accelerator card in your firewall could support several > webservers behind it. That's pretty close to what I had in mind though I considered a separate device in a DMZ for load balancing and mod_proxy/mod_security, as a minimum. However, HTTP(s) is only one of so many protocols. > Heh. When I said 'pretty fancy kit' I meant something considerably more > *shiny* than a Cisco ASA5510. In fact, running OpenBSD on a commodity Ok, you win that one :) We typically use one up from that as a minimum. Dunno if that regains me my face though... > server is roughly performance compatible with a 5510 but considerably > cheaper if you want all the trimmings like high-availability, unlimited > numbers of servers, GB on all interfaces etc. That is all true but these arguments do only work if you talk to security-literate people, not managers who prefer "something with a real seal on" and regular updates etc. Since the latter are the ones who authorise the cash, here we go. There are some who I can convince but frequently it's just not worth the discussion. Imho, unfortunately, but I don't want to start an advocacy thread here. > Note that ASA5510 level kit tends to do things like deep packet > inspection, content based filtering etc. [Not to mention fubar'ing EDNS0 > and screwing with SMTP so hard it breaks.] PF itself is purely based on > dealing with packet headers: however you can easily add things like > squid caching and filtering, snort etc. but these will ramp up the CPU > requirements beyond what a small appliance could support. As indicated initially, I intend to shift the load off the firewall to a separate device which then may do a lot more to the traffic than the firewall. But I don't see why I should'nt try to use the same kind of hardware platform for both. However it may be, I first set up this with the hardware I already have and then see what I find and where to optimise best before going to series. I also must improve significantly on my config management before I actually can do that just as others do when I look at other threads. > > My reason for the post was considering more another 'quiet' and > > 'lowpower' project I have, so that's probably a completely different > > pair of shoes. I'll try without first and then see what comes out of > > it. > > Commodity servers certainly don't fulfil the "quiet" requirement. Most > of them have enough fannage to build a fairly respectable hovercraft. Nope, they don't. I used to dry my hair behind the cabinets. And I used to have a lot of that :) Thanks again for your responses, and All the best regards, Peter. -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: 'Serious' crypto?
Hi Matthew, Thanks for the response. > >> NAT. Doing serious crypto slows things up somewhat. > > > > I've been pondering this since a while but thought that crypto > > engines on modern hardware would make 'extra' hardware accelerators > > obsolete? > > Yes -- in many use cases this is true. Modern processors are fast > enough that they don't need an external accelerator to perform. It > doesn't mean that running crypto imposes *no* extra cost on a server. > For instance, a web server running HTTP will (roughly speaking) be able > to support an order of magnitude more simultaneous sessions than the > same site served over HTTPS. And a hardware crypto device will level HTTPS to the HTTP volume without it? > > Or is it still worthwhile to consider hardware accelerators such as > > the ones guys like soekris [1] and others offer? Does anyone have an > > idea "how much" such an accelerator may help on older vs. on newer > > hardware? > > Those soekris boards are designed to work in low power (both in wattage > and in compute capability) appliances. That is a perfectly viable > alternative design for a crypto-gateway router / packet filter intended > for traffic levels within the specification they claim. That is what I currently consider. The low power is a good thing. I just wonder whether it is worthwhile to hunt for a "newer" hardware (= more expensive, both in wattage and procurement) or stick to a known platform and just add a new component. > Hmmm... 250Mb/s IPSec throughput is (I think -- not having tried this, I > cannot be certain) easily accessible through a fairly run of the mill > server such as the HP Proliant DL120 G6. Of course, the HP box costs > about 4--5 times as much as the Soekris. It will have a great deal more > spare RAM, disk, compute capacity etc. No idea abut on-going support > costs, but I don't think you could get support cover with a 4 hour > on-site response from Soekris... I know the DL series though I have used more the DL360 G4-G6 ones. I like something with low noise and power intake, hopefully achieving passive cooling. > > Would multiple engines work (and help) at all? From crypto(4), I > > would not guess so. One consequence would be that there may be > > certain limitations in using a separate accelerator once the platform > > comes with its own accelerator device? > > One feature that hardware accelerator boards provide which is hard to > get otherwise is plenty of random numbers on tap. Generating > cryptographically strong randomness in volume is pretty hard > computationally, and a hardware solution really helps things like IPSec > throughput. I think I do understand that (I hope :)) > Also, if you need really high volume crypto traffic throughput (multiple > Gb/s levels), then yes, you will need specialised hardware. However, in > this case, you're likely to be using pretty fancy routers (Cisco, > Juniper, etc.) and those all have options for hardware acceleration > built into interface cards. Yes, I know the Ciscos very well but currently the Junipers look more appropriate to me for one application we have. The Junipers probably go outside the ASAs inside. My reason for the post was considering more another 'quiet' and 'lowpower' project I have, so that's probably a completely different pair of shoes. I'll try without first and then see what comes out of it. Thanks again, and All the best, Peter. -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: 'Serious' crypto? (was: FreeBSD router - large scale)
Hi Chuck, Thanks for the response. > > Or is it still worthwhile to consider hardware accelerators such as the > ones guys like soekris [1] and others offer? Does anyone have an idea "how > much" such an accelerator may help on older vs. on newer hardware? > > Something like a 1GHz P3 or equivalent can generally do the symmetric > crypto about as fast as a decent PCI crypto card like the HiFN 795x could; bus > limitations made faster CPUs better, although a newer PCIe crypto device > ought to be more competitive. > > What matters more for some common use cases is that crypto H/W tends to do > asymmetric crypto like RSA/DSA signing to negotiate a shared session key-- > aka SSL session creation for SSL websites, secure email, SSH keys, etc > much faster than normal CPUs could. I guess I try first without and see where I hit the ceiling. Then go to plan b. I was more thinking of many IPSEC connections but then there's also only so many slots and so many NICs in them. I'll try without and monitor that for a while and then see what happens. > > Would multiple engines work (and help) at all? From crypto(4), I would > not guess so. One consequence would be that there may be certain limitations > in using a separate accelerator once the platform comes with its own > accelerator device? > > Sure, you can setup multiple engines, although this does better if you > have separate services using each, since you do want to use an SSL session > cache, but you don't want to pollute one for HTTPS with sessions from IMAPS > and vice versa. Also, the config interface for Apache/IIS/whatever, or > Dovecot/Cyrus/Exchange, etc might not let you specify more than one SSLEngine. > > On the other hand, it's not very much coding to adjust things to use > multiple engines even within Apache or whatever-- I can recall some custom > webserver modules from CryptoSwift for NSAPI / ISAPI / ASAPI which let you use > multiple CryptoSwift boxes via ethernet network or local PCI slots, for > example. Hmm... I was thinking more like round-robin the devices but I probably now too little about 'serious' crypto to see the side-effects. Anyways, I think the question is a bit academic at this time since I probably divide the servers anyways. Thanks again, All the best regards, Peter. -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
'Serious' crypto? (was: FreeBSD router - large scale)
Hi, > NAT. Doing serious crypto slows things up somewhat. I've been pondering this since a while but thought that crypto engines on modern hardware would make 'extra' hardware accelerators obsolete? Or is it still worthwhile to consider hardware accelerators such as the ones guys like soekris [1] and others offer? Does anyone have an idea "how much" such an accelerator may help on older vs. on newer hardware? Would multiple engines work (and help) at all? From crypto(4), I would not guess so. One consequence would be that there may be certain limitations in using a separate accelerator once the platform comes with its own accelerator device? Thanks, Peter. --- [1] http://www.soekris.com/vpn1401.htm -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: kernel build fails - ".depend", line 27905: Need an operator --- SOLVED
Re. lest I forget. > (...) I now will build > world & kernel and hope that it'll come out fine. And so it did. kldxref /boot/kernel The kernel runs now. So back to my ezjails. Thanks to all, Rgds., Peter. -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: kernel build fails - ".depend", line 27905: Need an operator
Re... > Can you build GENERIC? Yes. However. I just diff'ed against GENERIC, switched any option on/off that was different to GENERIC, without any change. Finally, [r...@netserv /usr/src/sys/i386/conf]# mv NETSERV NETSERV.bakk [r...@netserv /usr/src/sys/i386/conf]# cp -p GENERIC NETSERV [r...@netserv /usr/src/sys/i386/conf]# ( cd /usr/src/ && make kernel KERNCONF=NETSERV ) -- >>> Kernel build for NETSERV started on Wed May 26 06:19:45 UTC 2010 -- ===> NETSERV mkdir -p /usr/obj/usr/Src-RELENG_8/sys -- >>> stage 1: configuring the kernel -- cd /usr/Src-RELENG_8/sys/i386/conf; PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/games:/usr/obj/usr/Src-RELENG_8/tmp/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/usr/games:/sbin:/bin:/usr/sbin:/usr/bin config -d /usr/obj/usr/Src-RELENG_8/sys/NETSERV /usr/Src-RELENG_8/sys/i386/conf/NETSERV Kernel build directory is /usr/obj/usr/Src-RELENG_8/sys/NETSERV Don't forget to do ``make cleandepend && make depend'' -- >>> stage 2.1: cleaning up the object tree -- cd /usr/obj/usr/Src-RELENG_8/sys/NETSERV; MAKEOBJDIRPREFIX=/usr/obj MACHINE_ARCH=i386 MACHINE=i386 CPUTYPE= GROFF_BIN_PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/bin GROFF_FONT_PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/share/groff_font GROFF_TMAC_PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/share/tmac _SHLIBDIRPREFIX=/usr/obj/usr/Src-RELENG_8/tmp VERSION="FreeBSD 8.0-STABLE i386 800505" INSTALL="sh /usr/Src-RELENG_8/tools/install.sh" PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/games:/usr/obj/usr/Src-RELENG_8/tmp/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/usr/games:/sbin:/bin:/usr/sbin:/usr/bin NO_CTF=1 make KERNEL=kernel cleandir ".depend", line 27905: Need an operator make: fatal errors encountered -- cannot continue *** Error code 1 Stop in /usr/Src-RELENG_8. *** Error code 1 Stop in /usr/Src-RELENG_8. I just built from that KERNCONF !!! as long as it was named GENERIC, all was fine! Now, that's time for the big bat, then. [r...@netserv /usr/src/sys/i386/conf]# rm -rf /usr/obj/usr/Src-RELENG_8 And all of a sudden, life seems well again, see below. I now will build world & kernel and hope that it'll come out fine. So thanks to all who wasted their time with me, All the best regards, Peter. --- [r...@netserv /usr/src/sys/i386/conf]# mv NETSERV.bakk NETSERV [r...@netserv /usr/src/sys/i386/conf]# ( cd /usr/src/ && make kernel KERNCONF=NETSERV ) -- >>> Kernel build for NETSERV started on Wed May 26 06:26:40 UTC 2010 -- ===> NETSERV mkdir -p /usr/obj/usr/Src-RELENG_8/sys -- >>> stage 1: configuring the kernel -- cd /usr/Src-RELENG_8/sys/i386/conf; PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/games:/usr/obj/usr/Src-RELENG_8/tmp/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/usr/games:/sbin:/bin:/usr/sbin:/usr/bin config -d /usr/obj/usr/Src-RELENG_8/sys/NETSERV /usr/Src-RELENG_8/sys/i386/conf/NETSERV Kernel build directory is /usr/obj/usr/Src-RELENG_8/sys/NETSERV Don't forget to do ``make cleandepend && make depend'' -- >>> stage 2.1: cleaning up the object tree -- cd /usr/obj/usr/Src-RELENG_8/sys/NETSERV; MAKEOBJDIRPREFIX=/usr/obj MACHINE_ARCH=i386 MACHINE=i386 CPUTYPE= GROFF_BIN_PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/bin GROFF_FONT_PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/share/groff_font GROFF_TMAC_PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/share/tmac _SHLIBDIRPREFIX=/usr/obj/usr/Src-RELENG_8/tmp VERSION="FreeBSD 8.0-STABLE i386 800505" INSTALL="sh /usr/Src-RELENG_8/tools/install.sh" PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/games:/usr/obj/usr/Src-RELENG_8/tmp/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/usr/games:/sbin:/bin:/usr/sbin:/usr/bin NO_CTF=1 make KERNEL=kernel cleandir rm -f *.o *.so *.So *.ko *.s eddep errs kernel.de
Re: kernel build fails - ".depend", line 27905: Need an operator
Re. > > do the makebuildworld first. > > That's odd - I even *installed* world without any issue? > > Will try now anyways, though. Life's a mystery. Nope, no change. Any other ideas? Thanks, Peter. -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: kernel build fails - ".depend", line 27905: Need an operator
Estimado Jorge, > do the makebuildworld first. That's odd - I even *installed* world without any issue? Will try now anyways, though. Life's a mystery. Gracias por apoyar, Saludos cordiales, Peter. -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
kernel build fails - ".depend", line 27905: Need an operator
Dear list, This probably is obvious but I don't seem to be able to figure out where I should look in order to learn why I can't compile the bloomin' kernel, pse see below. Every time I update my KERNCONF, I try to remember to keep a copy of GENERIC so I can diff against the updated one. This diff shows no change hence I believe my KERNCONF is in order. Which I did not expect since the running kernel is not that old: FreeBSD 8.0-STABLE #17: Thu May 6 10:21:19 UTC 2010 I also read that config(8) was updated so I finally tried to remake world hoping that that's where it comes from but (well in agreement with my expectations that /usr/src should be self-contained :)) without avail. Any enlightenment appreciated... Thanks all, All the best, Peter. --- P.S.: Is it still worthwhile to report lock order reversals on 8-STABLE? --- [r...@netserv /usr/src]# ( DISPLAY="" cvsup -Pm ~/etc/cvsup.netserv.src-all && cd /usr/src/ && make kernel KERNCONF=NETSERV ) Connected to cvsup4.de.FreeBSD.org Updating collection src-all/cvs Finished successfully -- >>> Kernel build for NETSERV started on Tue May 25 14:35:46 UTC 2010 -- ===> NETSERV mkdir -p /usr/obj/usr/Src-RELENG_8/sys -- >>> stage 1: configuring the kernel -- cd /usr/Src-RELENG_8/sys/i386/conf; PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/games:/usr/obj/usr/Src-RELENG_8/tmp/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/usr/games:/sbin:/bin:/usr/sbin:/usr/bin config -d /usr/obj/usr/Src-RELENG_8/sys/NETSERV /usr/Src-RELENG_8/sys/i386/conf/NETSERV Kernel build directory is /usr/obj/usr/Src-RELENG_8/sys/NETSERV Don't forget to do ``make cleandepend && make depend'' -- >>> stage 2.1: cleaning up the object tree -- cd /usr/obj/usr/Src-RELENG_8/sys/NETSERV; MAKEOBJDIRPREFIX=/usr/obj MACHINE_ARCH=i386 MACHINE=i386 CPUTYPE= GROFF_BIN_PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/bin GROFF_FONT_PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/share/groff_font GROFF_TMAC_PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/share/tmac _SHLIBDIRPREFIX=/usr/obj/usr/Src-RELENG_8/tmp VERSION="FreeBSD 8.0-STABLE i386 800505" INSTALL="sh /usr/Src-RELENG_8/tools/install.sh" PATH=/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/legacy/usr/games:/usr/obj/usr/Src-RELENG_8/tmp/usr/sbin:/usr/obj/usr/Src-RELENG_8/tmp/usr/bin:/usr/obj/usr/Src-RELENG_8/tmp/usr/games:/sbin:/bin:/usr/sbin:/usr/bin NO_CTF=1 make KERNEL=kernel cleandir ".depend", line 27905: Need an operator make: fatal errors encountered -- cannot continue *** Error code 1 Stop in /usr/Src-RELENG_8. *** Error code 1 Stop in /usr/Src-RELENG_8. -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Lock order reversals on RELENG_8
Hi, Are these lock order reversals reported any reason for preoccupation and/or should I report elsewhere? The kernel I just built does not boot at all, so I don´t know whether these are a closed issue already. I´m off for a couple of days and will retry then. Thanks & regards, Peter. --- Note: Kernels are GENERIC w/o i386/i486 options, Plus from no 4 onwards with VIMAGE and w/o SCTP option, All fs encrypted with geli except /. --- Aug 16 13:51:56 netserv kernel: FreeBSD 8.0-BETA2 #3: Sun Aug 16 10:28:08 UTC 2009 Aug 16 13:51:56 netserv kernel: r...@netserv.ka.cornelius:/usr/Obj-RELENG_8/usr/Src-RELENG_8/sys/NETSERV Aug 16 13:51:56 netserv kernel: WARNING: WITNESS option enabled, expect reduced performance. Aug 16 13:51:56 netserv kernel: Timecounter "i8254" frequency 1193182 Hz quality 0 Aug 16 13:51:56 netserv kernel: CPU: Intel Pentium III (1004.52-MHz 686-class CPU) Aug 16 13:51:56 netserv kernel: Origin = "GenuineIntel" Id = 0x686 Stepping = 6 Aug 16 13:51:56 netserv kernel: Features=0x383fbff Aug 16 13:51:56 netserv kernel: real memory = 1610612736 (1536 MB) Aug 16 13:51:56 netserv kernel: avail memory = 1559375872 (1487 MB) Aug 16 13:51:56 netserv kernel: ACPI APIC Table: Aug 16 13:51:56 netserv kernel: FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs Aug 16 13:51:56 netserv kernel: FreeBSD/SMP: 2 package(s) x 1 core(s) Aug 16 13:51:56 netserv kernel: cpu0 (BSP): APIC ID: 3 Aug 16 13:51:56 netserv kernel: cpu1 (AP): APIC ID: 0 (...) Aug 16 13:58:56 netserv kernel: lock order reversal: Aug 16 13:58:56 netserv kernel: 1st 0xd8d413f0 bufwait (bufwait) @ /usr/Src-RELENG_8/sys/kern/vfs_bio.c:2559 Aug 16 13:58:56 netserv kernel: 2nd 0xc5782000 dirhash (dirhash) @ /usr/Src-RELENG_8/sys/ufs/ufs/ufs_dirhash.c:285 Aug 16 13:58:56 netserv kernel: KDB: stack backtrace: Aug 16 13:58:56 netserv kernel: db_trace_self_wrapper(c0c73804,e782c75c,c08c0d25,c08b1a0b,c0c7675b,...) at db_trace_self_wrapper+0x26 Aug 16 13:58:56 netserv kernel: kdb_backtrace(c08b1a0b,c0c7675b,c4d2be90,c4d2f228,e782c7b8,...) at kdb_backtrace+0x29 Aug 16 13:58:56 netserv kernel: _witness_debugger(c0c7675b,c5782000,c0c97efa,c4d2f228,c0c97b8a,...) at _witness_debugger+0x25 Aug 16 13:58:56 netserv kernel: witness_checkorder(c5782000,9,c0c97b8a,11d,0,...) at witness_checkorder+0x839 Aug 16 13:58:56 netserv kernel: _sx_xlock(c5782000,0,c0c97b8a,11d,c58d9ae0,...) at _sx_xlock+0x85 Aug 16 13:58:56 netserv kernel: ufsdirhash_acquire(d8d41390,da0ab800,200,da0ab818,e782c888,...) at ufsdirhash_acquire+0x35 Aug 16 13:58:56 netserv kernel: ufsdirhash_add(c58d9ae0,e782c8d0,818,e782c874,e782c878,...) at ufsdirhash_add+0x13 Aug 16 13:58:56 netserv kernel: ufs_direnter(c596953c,c596696c,e782c8d0,e782cbd0,0,...) at ufs_direnter+0x729 Aug 16 13:58:56 netserv kernel: ufs_makeinode(e782cbd0,0,e782cabc,e782ca18,c0bbc895,...) at Aug 16 13:58:56 netserv kernel: ufs_makeinode+0x508 Aug 16 13:58:56 netserv kernel: ufs_create(e782cabc,e782cad4,0,0,e782cba4,...) at ufs_create+0x30 Aug 16 13:58:56 netserv kernel: VOP_CREATE_APV(c0d77740,e782cabc,e782cbd0,e782ca54,0,...) at VOP_CREATE_APV+0xa5 Aug 16 13:58:56 netserv kernel: vn_open_cred(e782cba4,e782cc5c,1a4,0,c51d2b00,...) at vn_open_cred+0x215 Aug 16 13:58:56 netserv kernel: vn_open(e782cba4,e782cc5c,1a4,c51fadc8,c0c98f76,...) at vn_open+0x3b Aug 16 13:58:56 netserv kernel: kern_openat(c5232000,ff9c,28412180,0,a02,...) at kern_openat+0x11f Aug 16 13:58:56 netserv kernel: kern_open(c5232000,28412180,0,a01,1a4,...) at kern_open+0x35 Aug 16 13:58:56 netserv kernel: open(c5232000,e782ccf8,c,c0c77024,c0d55f6c,...) at open+0x30 Aug 16 13:58:56 netserv kernel: syscall(e782cd38) at syscall+0x2a3 Aug 16 13:58:56 netserv kernel: Xint0x80_syscall() at Xint0x80_syscall+0x20 Aug 16 13:58:56 netserv kernel: --- syscall (5, FreeBSD ELF32, open), eip = 0x28335923, esp = 0xbfbfe7bc, ebp = 0xbfbfe7e8 --- (...) Aug 16 14:16:04 netserv kernel: lock order reversal: Aug 16 14:16:04 netserv kernel: 1st 0xc6df37ac ufs (ufs) @ /usr/Src-RELENG_8/sys/kern/vfs_lookup.c:497 Aug 16 14:16:04 netserv kernel: 2nd 0xd8debf40 bufwait (bufwait) @ /usr/Src-RELENG_8/sys/ufs/ffs/ffs_softdep.c:6177 Aug 16 14:16:04 netserv kernel: 3rd 0xc6e3f164 ufs (ufs) @ /usr/Src-RELENG_8/sys/kern/vfs_subr.c:2083 Aug 16 14:16:04 netserv kernel: KDB: stack backtrace: Aug 16 14:16:04 netserv kernel: db_trace_self_wrapper(c0c73804,e78b33cc,c08c0d25,c08b1a0b,c0c76774,...) at db_trace_self_wrapper+0x26 Aug 16 14:16:04 netserv kernel: kdb_backtrace(c08b1a0b,c0c76774,c4d2be90,c4d2f1c0,e78b3428,...) at kdb_backtrace+0x29 Aug 16 14:16:04 netserv kernel: _witness_debugger(c0c76774,c6e3f164,c0c690c7,c4d2f1c0,c0c7db33,...) at _witness_debugger+0x25 Aug 16 14:16:04 netserv kernel: witness_checkorder(c6e3f164,9,c0c7db33,823,0,...) at witness_checkorder+0x839 Aug 16 14:16:04 netserv kernel: __lockmgr_args(c6e3f164,80100,c6e3f180,0,0,...) at __lockmgr_args+0x7a7 Aug 16 14:16:04 netserv kernel: ffs_lock(e78b3538,
Re: Desktop Install Option
Hi, > So, I've been wondering about something. FreeBSD is a general purpose > operating system, even though it has historically only heavily been used > on > servers. Why is it that FreeBSD doesn't provide a desktop installation, > something similar to say Debian's option of "Standard Desktop"? For those > who need it, it'd be great. Not sure what you are looking for but I have a feeling that it may be something like http://www.freebsd.org/cgi/url.cgi?ports/sysutils/desktopbsd-tools/pkg-descr http://desktopbsd.net/ Rgds, Peter. -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: su'ing not sourcing .bash_profile
Hi, > > When I am logged in as a non-root user and I try to become root by > > entering "su" and typing the root password, the resulting bash prompt > > does not reflect the contents of /root/.bash_profile > Because .bash_profile is only seen on login, not on 'su'. Put > it in .bashrc which is read when the shell is invoked. su - maybe? If you can live with ending up in ~root/, of course ;-) Rgds., Peter. -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
getfib?
Dear list, Now, there, we've got setfib(1). Very well. But -- how do I figure out the FIB associated with a running process? Thanks, Peter. --- [1] setfib(1), cf. http://www.freebsd.org/cgi/man.cgi?query=setfib&sektion=1&apropos=0&manpath=FreeBSD+8-current -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: FreeBSD Networking Questions / vlan, lagg, routing, FIBs, ezjail
> Now, it is my suspicion that the apparent need for promisc at the router > end indeed is an apperent one and not really the router's fault but rather > the other end's. The other end, in this case, is the server below. > > If the server, with its single MIB, default-routes its packets through one > specific of its vlans which may not be the one, at the router's end, with > the corresponding IP network the traffic entered into the net, would it be > possible that there's something preventing them be received? Unless there's > promisc on, of course... > > I'll grab the laptop next time I think of it and have the switch monitor > traffic to it to see what really is on the wire, maybe that helps and gives > me a clue. I just keep forgetting the bl**dy thing each time I leave... Ok, after a good portion of fiddling with the switch, it seems that you cannot copy traffic from link-aggregated ports to a monitor port on a Linksys SRW2016. Now out at my wits end here it seems. I'll try the FIB approach hopefully next week then. > > - On my "server", is there any way to set up individual > > > "default" routes (to the router) for each of the vlans short of > > > tucking the ezjails behind the vlan interfaces each into their own > > > FIB (btw,. has anyone ever done that?)? > > > > Yes, from FreeBSD-7.1 and beyond, there is support > > for up to 16 routing tables. Use the setfib command > > to select routing table for outgoing connections. > > So, I interpret your response as that I am correct, I have a single > default route per FIB, and that's it. Which effectively means that I do need > FIBs. I agree that this behaviour might make some sense :) > > > Something like, "setfib 10 jail $JAILOPTSANDARGS", > > in the jail case. You have to compile a kernel > > with the option ROUTETABLES=n. Read the message for > > revision 1.1485 from here: > > http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/conf/NOTES > (...) > Generally speaking, or rather, inquiring, has anyone ever done FIBs with > ezjail? It probably is very easy, and I consider(ed) looking into it myself > but I currently spend about max. an hour every 2-3 days on FreeBSE so I > don't really progress. Well, might eventually, but that'll be dunno when. But > well, such is life, and this is pleasure not work :) and I hope to learn > something useful on the way. (...) > [1] > http://lists.freebsd.org/pipermail/freebsd-arch/2007-December/007331.html Regards, Peter. -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: FreeBSD Networking Questions / vlan, lagg, routing, FIBs, ezjail
Hiya Nikos, re list, > Hm, the promiscuous mode must be needed for the vlan driver. > But you don't have to set it. It does not work without, at the router end. Suspicions, please see below. > I can't think of any implication in a switched ethernet environment. > > It is just that every frame received from the cable is offered > to the operating system for further evaluation. In a switched > ethernet environment every frame that will reach your card will > be either: > 1) for you. > 2) a broadcast frame. > 3) a multicast frame. And hence there should be no (notable) effect. That is my interpretation, yes. > Things would be very different, if your system was connected to a > hub where a multitude of frames(every frame on the ethernet) would > be interrupting the kernel for no reason. Exactly. But I connect to a switch and hence expect the behaviour detailed above. Now, it is my suspicion that the apparent need for promisc at the router end indeed is an apperent one and not really the router's fault but rather the other end's. The other end, in this case, is the server below. If the server, with its single MIB, default-routes its packets through one specific of its vlans which may not be the one, at the router's end, with the corresponding IP network the traffic entered into the net, would it be possible that there's something preventing them be received? Unless there's promisc on, of course... I'll grab the laptop next time I think of it and have the switch monitor traffic to it to see what really is on the wire, maybe that helps and gives me a clue. I just keep forgetting the bl**dy thing each time I leave... > - On my "server", is there any way to set up individual > > "default" routes (to the router) for each of the vlans short of > > tucking the ezjails behind the vlan interfaces each into their own > > FIB (btw,. has anyone ever done that?)? > > Yes, from FreeBSD-7.1 and beyond, there is support > for up to 16 routing tables. Use the setfib command > to select routing table for outgoing connections. So, I interpret your response as that I am correct, I have a single default route per FIB, and that's it. Which effectively means that I do need FIBs. I agree that this behaviour might make some sense :) > Something like, "setfib 10 jail $JAILOPTSANDARGS", > in the jail case. You have to compile a kernel > with the option ROUTETABLES=n. Read the message for > revision 1.1485 from here: > http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/conf/NOTES I have seen that section as a separate posting [1] which is why I suspected to possibly be able to resolve my issues above with it. It is my intention to insert 4 to 8 FIBs asap but I currently don't know when I take my time doing so. Generally speaking, or rather, inquiring, has anyone ever done FIBs with ezjail? It probably is very easy, and I consider(ed) looking into it myself but I currently spend about max. an hour every 2-3 days on FreeBSE so I don't really progress. Well, might eventually, but that'll be dunno when. But well, such is life, and this is pleasure not work :) and I hope to learn something useful on the way. Thanks a lot, and All the best, Peter. [1] http://lists.freebsd.org/pipermail/freebsd-arch/2007-December/007331.html -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Fujitsu Siemens Promergy RX100S4
Hi, > I think that if it is hardware RAID, you should see only one disk. My Promise controller does have my disks show up as ar0 -- but the disks are there as individuals (ad*) as well, and accessible (though I only use ar0*, for hopefully obvious reasons). At least, that's what I saw last time I looked (running 7-STABLE around ~7.1-RELEASE). I can check tonight if you want (and I get home on time ;-)). Regards, Peter. -- Aufgepasst: Sind Ihre Daten beim Online-Banking auch optimal geschützt? Jetzt informieren und absichern: https://homebanking.web.de/?mc=m...@footer. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: MGA(0): Unable to map BAR 0. Invalid argument (22) / X.Org Server V. 1.5.3, mga_drv V. 1.9.100, 7.1-STABLE
Hiya, re... > > The 1.4.9 version of mga may work. I'd give portdowngrade instructions > > for it, but the anoncvs server isn't answering. > > I did eye that, funny you say so. I found on some X.org repository that > 1.4.9 was considerably 'younger' than 1.9.100. I may (might) have a look at > it tonight depending on when I may get outta here. I did get out late but I could not leave it, as usual, so got the 1.4.9 (Makefile,v 1.7 2009/01/08 16:58:29 and the corresponding distinfo), rebuilt the port and, success... Well, mostly. I had to DefaultDepth 16 in the Screen to really get her up (errors otherwise, [1]). The other option probably is to go w/o DRI, and I really may consider that since it looks kinda crappy still -- but not today anymore. At least, we're back to xorg.conf, and also there still is the option with the junk box... :) So thanks for the hint, and All the best regards, Peter. --- [1] Errors remain at 24 bpp depth. (EE) MGA(0): Static buffer allocation failed, not initializing the DRI (EE) MGA(0): Need at least 9216 kB video memory at this resolution, bit depth -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: MSI "nettop" supported?
Re... > Flash disks are no big deal, especially if they will already be inserted > at boot time. I take it that the atom CPU just works, right? Regarding the WindPC 2713 (if that's the one you look at), I am not even sure whether there is a WLAN card in it at all (the Wind U100X netbook allegedly has an Atheros AR928X as per iX 3/2009, [1]), and iX also comments that it was somewhat slow in their test. In their article, they recommend to buy parts, and so do other people [3] but due to lack of time & funding, I have no personal experience. Hth., anyways... Regards, Peter. --- [1] http://www.ix.de/ [2] Links of the article, http://www.heise.de/ix/artikel/2009/03/links/078.shtml [3] http://www.skyline-service.de/stromsparserver.php Babelfish: http://66.196.80.202/babelfish/translate_url_content?.intl=de&lp=de_en&trurl=http%3A%2F%2Fwww.skyline-service.de%2Fstromsparserver.php -- Neu: GMX FreeDSL Komplettanschluss mit DSL 6.000 Flatrate + Telefonanschluss für nur 17,95 Euro/mtl.!* http://dsl.gmx.de/?ac=OM.AD.PD003K11308T4569a ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: MGA(0): Unable to map BAR 0. Invalid argument (22) / X.Org Server V. 1.5.3, mga_drv V. 1.9.100, 7.1-STABLE
Hi Warren, > The last time I saw that error was on a -CURRENT test system several > months ago. That system is updating now to the latest -CURRENT. Time > will not be available for at least the next few days to try 7.1, but > I'll see what I can do. I know that feeling, so thanks for offering. Please take it easy :) > The 1.4.9 version of mga may work. I'd give portdowngrade instructions > for it, but the anoncvs server isn't answering. I did eye that, funny you say so. I found on some X.org repository that 1.4.9 was considerably 'younger' than 1.9.100. I may (might) have a look at it tonight depending on when I may get outta here. > If you have the option of replacing the Matrox card, better-supported > Radeons are available in AGP, PCI, and PCIE versions. Oh, I had even less success with a radeon in an IBM box but that's admittedly before 7.4 and probably another story. I'll have another dig into my junk box but so far I only got PCI out of it (and the G200 has AGP, dunno if that makes *the* difference though ;-)). Alright, then, Thanks a lot, and All the best, Peter. -- Peter Cornelius - Karlsruhe DE Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Speeding up exit(2)?
> Yes, clearly web browsers should be optimized for speed of exiting. Oh, yes, definitely. But, honestly, a marginally minor resource footprint would not be bad, either. But I've got a certain feeling that this thread'll go to advocacy sooner or later :) Regards, Peter. -- Nur bis 16.03.! DSL-Komplettanschluss inkl. WLAN-Modem für nur 17,95 ¿/mtl. + 1 Monat gratis!* http://dsl.gmx.de/?ac=OM.AD.PD003K11308T4569a ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: where is xorg located?
Hi Stefan, > ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/xorg.tbz You may miss a 'All' in there, try something like fetch ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7-stable/Latest/All/xorg-7.4.tbz Regards, Peter. --- ftp> ls All/*xorg* 229 Entering Extended Passive Mode (|||62822|) 150 Opening ASCII mode data connection for '/bin/ls'. -rw-r--r-- 1 1006 1006 2456850 Jan 28 12:48 All/linux-xorg-libs-6.8.2_5.tbz -rw-r--r-- 1 1006 1006 4209 Jan 31 06:12 All/xorg-7.4.tbz -rw-r--r-- 1 1006 1006 3179 Jan 28 20:46 All/xorg-apps-7.4_1.tbz -rw-r--r-- 1 1006 1006 179022 Jan 28 12:10 All/xorg-cf-files-1.0.2_3.tbz -rw-r--r-- 1 1006 1006 677256 Jan 31 09:09 All/xorg-dmx-1.5.3_1,1.tbz -rw-r--r-- 1 1006 1006 5525165 Sep 18 03:41 All/xorg-docs-1.4,1.tbz -rw-r--r-- 1 1006 1006 3129 Jan 28 20:45 All/xorg-drivers-7.4.tbz -rw-r--r-- 1 1006 1006 266275 Jan 31 06:04 All/xorg-edit-07.08.11_1.tbz -rw-r--r-- 1 1006 1006 2246 Jan 28 12:52 All/xorg-fonts-100dpi-7.4.tbz -rw-r--r-- 1 1006 1006 2723 Jan 28 12:55 All/xorg-fonts-7.4.tbz -rw-r--r-- 1 1006 1006 2258 Jan 28 12:51 All/xorg-fonts-75dpi-7.4.tbz -rw-r--r-- 1 1006 1006 2255 Jan 28 12:51 All/xorg-fonts-cyrillic-7.4.tbz -rw-r--r-- 1 1006 1006 2404 Jan 28 12:48 All/xorg-fonts-miscbitmaps-7.4.tbz -rw-r--r-- 1 1006 1006 2275 Jan 28 12:47 All/xorg-fonts-truetype-7.4.tbz -rw-r--r-- 1 1006 1006 2273 Jan 28 12:50 All/xorg-fonts-type1-7.4.tbz -rw-r--r-- 1 1006 1006 3648 Jan 28 13:59 All/xorg-libraries-7.4.tbz -rw-r--r-- 1 1006 1006 7682 Jan 28 12:11 All/xorg-macros-1.2.1.tbz -rw-r--r-- 1 1006 1006 3017 Jan 31 06:07 All/xorg-minimal-7.4.tbz -rw-r--r-- 1 1006 1006 553929 Jan 31 09:06 All/xorg-nestserver-1.5.3_1,1.tbz -rw-r--r-- 1 1006 1006 2070960 Jan 28 16:27 All/xorg-server-1.5.3_2,1.tbz -rw-r--r-- 1 1006 1006 636849 Jan 28 14:12 All/xorg-vfbserver-1.5.3_1,1.tbz -rw-r--r-- 1 1006 1006 5822 Jan 31 05:08 All/xorg-wrapper-1.0_7.tbz 226 Transfer complete. -- Pt! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger01 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
MGA(0): Unable to map BAR 0. Invalid argument (22) / X.Org Server V. 1.5.3, mga_drv V. 1.9.100, 7.1-STABLE
Dear all, I have an odd Xorg error with a Matrox G200 card here. I have googled for it but only found dual-head installations, plus comments that it allegedly is fixed with the new FreeBSD Xorg 1.5.3 ports. However, as I still see the error, I poked about and could not find much of the changes people had suggested in the driver as unpacked from current ports. But since XFree, Xorg and the various releases are a complete miracle to me, my evaluation may just be plain wrong. So, if there was anyone knowing how to possibly fix the matter, I'd appreciate a hint (or two or so ;-)). All the best, Peter. --- [1] On the web: http://petercornelius.multiply.com/reviews/item/1 [2] uname -a: FreeBSD anton 7.1-STABLE FreeBSD 7.1-STABLE #2: Fri Feb 20 21:04:56 CET 2009 r...@anton:/usr/obj/usr/src/sys/GENERIC i386 [3] Installed Xorg ports, MGA driver xorg-7.4 xorg-apps-7.4_1 xorg-cf-files-1.0.2_3 xorg-docs-1.4,1 xorg-drivers-7.4 xorg-fonts-100dpi-7.4 xorg-fonts-7.4 xorg-fonts-75dpi-7.4 xorg-fonts-cyrillic-7.4 xorg-fonts-miscbitmaps-7.4 xorg-fonts-truetype-7.4 xorg-fonts-type1-7.4 xorg-libraries-7.4 xorg-macros-1.2.1 xorg-server-1.5.3_7,1 xf86-video-mga-1.9.100,1 [4] /var/log/Xorg.0.log X.Org X Server 1.5.3 Release Date: 5 November 2008 X Protocol Version 11, Revision 0 Build Operating System: FreeBSD 7.1-STABLE i386 Current Operating System: FreeBSD anton 7.1-STABLE FreeBSD 7.1-STABLE #2: Fri Feb 20 21:04:56 CET 2009 r...@anton:/usr/obj/usr/src/sys/GENERIC i386 Build Date: 14 March 2009 10:04:28AM Before reporting problems, check http://wiki.x.org to make sure that you have the latest version. Markers: (--) probed, (**) from config file, (==) default setting, (++) from command line, (!!) notice, (II) informational, (WW) warning, (EE) error, (NI) not implemented, (??) unknown. (==) Log file: "/var/log/Xorg.0.log", Time: Sun Mar 15 11:29:19 2009 (==) Using config file: "/etc/X11/xorg.conf" (==) ServerLayout "X.org Configured" (**) |-->Screen "Screen0" (0) (**) | |-->Monitor "Monitor0" (**) | |-->Device "Card0" (**) |-->Input Device "Mouse0" (**) |-->Input Device "Keyboard0" (==) Automatically adding devices (==) Automatically enabling devices (==) Including the default font path /usr/local/lib/X11/fonts/misc/,/usr/local/lib/X11/fonts/TTF/,/usr/local/lib/X11/fonts/OTF,/usr/local/lib/X11/fonts/Type1/,/usr/local/lib/X11/fonts/100dpi/,/usr/local/lib/X11/fonts/75dpi/. (**) FontPath set to: /usr/local/lib/X11/fonts/misc/, /usr/local/lib/X11/fonts/TTF/, /usr/local/lib/X11/fonts/OTF, /usr/local/lib/X11/fonts/Type1/, /usr/local/lib/X11/fonts/100dpi/, /usr/local/lib/X11/fonts/75dpi/, /usr/local/lib/X11/fonts/misc/, /usr/local/lib/X11/fonts/TTF/, /usr/local/lib/X11/fonts/OTF, /usr/local/lib/X11/fonts/Type1/, /usr/local/lib/X11/fonts/100dpi/, /usr/local/lib/X11/fonts/75dpi/ (**) ModulePath set to "/usr/local/lib/xorg/modules" (WW) AllowEmptyInput is on, devices using drivers 'kbd' or 'mouse' will be disabled. (WW) Disabling Mouse0 (WW) Disabling Keyboard0 (II) Loader magic: 0x81bcde0 (II) Module ABI versions: X.Org ANSI C Emulation: 0.4 X.Org Video Driver: 4.1 X.Org XInput driver : 2.1 X.Org Server Extension : 1.1 X.Org Font Renderer : 0.6 (II) Loader running on freebsd (--) Using syscons driver with X support (version 2.0) (--) using VT number 9 (--) PCI:*(0...@1:0:0) Matrox Graphics, Inc. MGA G200 AGP rev 3, Mem @ 0xde00/0, 0xfedf8000/0, 0xfe00/0, BIOS @ 0x/65536 (II) System resource ranges: [0] -1 0 0x0010 - 0x3fff (0x3ff0) MX[B]E(B) [1] -1 0 0x000f - 0x000f (0x1) MX[B] [2] -1 0 0x000c - 0x000e (0x3) MX[B] [3] -1 0 0x - 0x0009 (0xa) MX[B] [4] -1 0 0x - 0x (0x1) IX[B] [5] -1 0 0x - 0x00ff (0x100) IX[B] (II) "extmod" will be loaded. This was enabled by default and also specified in the config file. (II) "dbe" will be loaded. This was enabled by default and also specified in the config file. (II) "glx" will be loaded. This was enabled by default and also specified in the config file. (II) "freetype" will be loaded. This was enabled by default and also specified in the config file. (II) "record" will be loaded. This was enabled by default and also specified in the config file. (II) "dri" will be loaded. This was enabled by default and also specified in the config file. (II) LoadModule: "extmod" (II) Loading /usr/local/lib/xorg/modules/extensions//libextmod.so (II) Module extmod: vendor="X.Org Foundation" compiled for 1.5.3, module version = 1.0.0 Module class: X.Org Server Extension ABI class: X.Org Server Extension, version 1.1 (II) Loading extension SHAPE (II) Loading extension MIT-SUNDRY-NONSTANDARD (II) Loading ext
FreeBSD Networking Questions / vlan, lagg, routing, FIBs, ezjail
Dear all, While I'm at it, I don't seem to be able to get my head around some networking items I observed (currently only vlan(4), not ng_vlan(4), if that makes a difference): - On my router, why do I have to set the base interface to promiscuous mode in order to get packets from/to my vlans through? Am I doing something wrong? Are there any implications of working this way? - On my "server", is there any way to set up individual "default" routes (to the router) for each of the vlans short of tucking the ezjails behind the vlan interfaces each into their own FIB (btw,. has anyone ever done that?)? So I'm stuck and would appreciate a hand. It probably is something pretty obvious which I persistently ignore, or something stupid I attempt to do here but I got curious now :) Thanks a lot, and All the best, Peter. -- Nur bis 16.03.! DSL-Komplettanschluss inkl. WLAN-Modem für nur 17,95 ¿/mtl. + 1 Monat gratis!* http://dsl.gmx.de/?ac=OM.AD.PD003K11308T4569a ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
dump/restore don't work, handbook lies
On Tue Sep 2 14:01:06 UTC 2008 Kirk Strauser wrote: > On Sunday 31 August 2008 18:03:53 Lloyd M Caldwell wrote: > > > I needed to increase the size of my freebsd root (/). I booted, > single > > user, attached a large usb freebsd formatted file system to receive > the > > backup image. > > And you're sure that the "large usb freebsd formatted file system" is > intact > and that your dump is uncorrupted? I have just been bitten by a very similar problem as Lloyd Caldwell. - restore complains about '/' not being writable (it is but what should happen there??) - restore extracts a few files but leaves most of the dump unrestored with 'expecting YY got ZZ' I have checked the dump several times with restore -rNf /dev/cd0 (yes, it's to a series of DVD-RAMs) plus have extracted a few samples from the first disk apparently from the area which works. Like Lloyd, I am extremely ... delighted ... about the situation but well. Like Lloyd, I have been using FreeBSD for several years with little to complain. Like Lloyd, any help appreciated... Meanwhile I think I will reinstall the box from scratch with 7.0-RELEASE and return to 7-STABLE but I do miss my "backup" I must say... Oh well. All the best regards, Peter. --- pcc at gmx dot net. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help sought for new nvtv (NVidia TV-Out) port (was: ? getopt_long(), iopl() and ioperm() ?)
[follow-ups please to FreeBSD-Multimedia and Cc: to me, for the time being. - Thanks!] Hi there, I have started to fiddle with a program called nvtv which supposedly makes the tv-out on my graphics card work (an nVidia Corporation NV20 [GeForce3 Ti200]), and possibly some other NVidia-based cards, too. However, as it turns out, odds are against me and my (very) limited programming abilities; I have the bugger on my table for several weeks now without making real progress. To a certain extent, this is also due to the workload I currently have from the hand that feeds me. Therefore, I have decided to make a preliminary port and start to look for someone who knows more & better than I do. Please find enclosed a tar ball (relative to /usr/ ports) of the port skeleton I made. To build, it needs a modified version of the pciutils port as it requires the pci.h headers and the libpci.a library. There is a diff against pciutils-2.1.11's Makefile below (I took the freedom to label it PORTREVISION=1 ;-)). The preliminary port apparently installs and deinstalls ok, but it has a good lot of pecularities and todos which I also list and discuss below. So, if you wish to help, it is very much so appreciated. Please be patient with me, however, as I probably only have time at weekends for some time to come. 8-S Keep me Cc'd if urgent ;-) I dig into the digest otherwise... Please also be advised that this program may still be very unstable, crash your box, burn your video and cause data loss, make your wife go away, etc., so understand that you play with it at your own risk. Finally, my special thanks go to the people on the Bcc list for providing hints, help and/or other support on the way here. Thank you, folks! Thanks again and all the best, Peter. --- --- --- Here is the patch to pciutils-2.1.11's Makefile (sorry, cut&paste, you may have to replace some spaces with tabs 8-S): $ diff Makefile Makefile.orig 10d9 < PORTREVISION= 1 44,49c43 < # This makes nvtv compile under FreeBSD: < @${INSTALL_DATA} ${WRKSRC}/lib/libpci.a ${PREFIX}/lib < @${MKDIR} ${PREFIX}/include/pci < @${INSTALL_DATA} ${WRKSRC}/lib/pci.h ${PREFIX}/include/pci < @${INSTALL_DATA} ${WRKSRC}/lib/config.h ${PREFIX}/include/pci < @${INSTALL_DATA} ${WRKSRC}/lib/header.h ${PREFIX}/include/pci --- > $ diff pkg-plist pkg-plist.orig 5,9d4 < lib/libpci.a < @dirrm include/pci < include/pci/pci.h < include/pci/config.h < include/pci/header.h --- --- --- Here's a list of issues I have with my attached port skeleton. Most of these are included as todos in my Makefile. I include some remarks further below. (i) Currently, nvtv is 'untested' (ii)Unknown/unsure whether to add nvidia-drivers dependency or not (iii) Find bsd replacement for iopl() and ioperm() (iv)Fix port to honour MANx (v) Fix configure/configure.in to properly configure gtk in (vi)Fix port to install properly named binaries/manpages (see pkg-plist) (vii) Clear up handling of different gtk versions (viii) Write pkg-descr. --- --- --- Here's the above list with a couple of cents of my thoughts about these. (i) Currently, nvtv is 'untested' At this point, I have not been able to successfully use my tv-out, because apparently my card's Philips SAA7108E is not detected properly. This may or may not be a bug in nvtv, and I already have loose contact to the author of it about that matter, so please let me know if you have or have not success with that chip (or any other). (ii)Unknown/unsure whether to add nvidia-drivers dependency or not I would not expect any effect, but as I currently can't properly test, please do check the -N/--nvdev option if you have a chance (and the confidence ;-). (iii) Find bsd replacement for iopl() and ioperm() There is an occurrence of either one in the code once. I don't know what they do and even less whether there's an appropriate replacement for them on FreeBSD. Since I simply commented these out in order to be able to build (see the patch file in files/ patch-src___card_direct.c.aa), owners of Vodoo 3 and Intel cards currently will have no joy with this nvtv port. (iv)Fix port to honour MANx Should be minor, but must probably fix the binary naming issue first (see below). Don't forget to amend pkg-plist accordingly, as this currently catches the man pages. (v) Fix configure/configure.in to properly configure gtk in To me, this smells like a problem inherited from the configure.in/.ac files. That's a terrain in which I am *absolutely* lost, so please do help, thank you. In any case, currently configure is broken and 'forgets' to add the gtk version to ${WRKSRC}/src/ config.h (if you manually fix it in there, the gui can be built and used, thoug
Re: ? getopt_long(), iopl() and ioperm() ?
> > # [EMAIL PROTECTED] / 2003-10-19 01:59:45 +0200: > > > I'm hacking at a piece of code that I want to turn into a port. It's from > > > Linux and uses libpci and some other 'strange' functions. > > > While I think that I've managed to modify the libpci port to install the > > > required lib, I'm more or less lost at getopt_long() which I > > > assume is in the libgnugetopt port. However, for some reason, even if I > > > include it explicitly (#include "/usr/local/include/getopt.h"), I > > > run into problems. Please note that I'm not a programmer at all, so it's > > > very much hacking along, so I may look for someone patient > > > to bear with me ;-) But I am willing to learn. > > > > AFAICT you need to tell the compiler about the library. The rule in > > your Makefile needs to have "-L /usr/local/lib -lgnugetopt". Thanks for that, Roman, I did so and got some sort of binary to play with. For a port, however, I think I must dig in deeper, or rather climb higher for that matter -- autoconf & co. are used for making the makefiles, so I probably must fix it there somewhere there. If it was for plain makefiles, I might not have the problems I see, but this is something entirely new for me ;-) > The best way is to set USE_GETOPT_LONG=yes in your port Makefile. > > # USE_GETOPT_LONG - Says that the port uses getopt_long. If OSVERSION > # less than 500041, automatically adds devel/libgnugeopt > # to LIB_DEPENDS, and pass adjusted values of > # CPPFLAGS and LDFLAGS in CONFIGURE_ENV. > # Default: not set. Thanks, Dan, I'm not that far yet. As I said above, I'm still trying to understand what is required by nvtv in the first place. There still seem to be bugs in there, at least with my card. I have contact with the author who is willing to help as long as I can build and test. Which I sort of achieved now with your help and the of a friend. Anyways, as I must have overread that comment in bsd.ports.mk, thanks for the pointer. In any case, if it makes to be a port, I'll proceed as suggested. So, thanks for the help and watch ports@ if it ever makes it there ;-)==) All the best, Peter. Btw, iopl() and ioperm() I currently simply get around by uncommenting them. Which probably makes those sections unuseable for the cards covered there, so I would not mind a hint for these by any other reader ;-) -- NEU FÜR ALLE - GMX MediaCenter - für Fotos, Musik, Dateien... Fotoalbum, File Sharing, MMS, Multimedia-Gruß, GMX FotoService Jetzt kostenlos anmelden unter http://www.gmx.net +++ GMX - die erste Adresse für Mail, Message, More! +++ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
? getopt_long(), iopl() and ioperm() ?
Hi there, I'm hacking at a piece of code that I want to turn into a port. It's from Linux and uses libpci and some other 'strange' functions. While I think that I've managed to modify the libpci port to install the required lib, I'm more or less lost at getopt_long() which I assume is in the libgnugetopt port. However, for some reason, even if I include it explicitly (#include "/usr/local/include/getopt.h"), I run into problems. Please note that I'm not a programmer at all, so it's very much hacking along, so I may look for someone patient to bear with me ;-) But I am willing to learn. A similar story applies to the iopl() and the ioperm() functions which are used in a part of the code which I personally don't require but others may (if this ever reaches port status which I hope it does ;-)). For these functions, I don't even know how to replace them. Well, I think there still is some bug in the configure script that goes with it, but basically that's the story for the time being. Hints are very much so appreciated, though I may need some time to think them over and apply them due to my limited programming abilities. Thanks a lot for reading this far, all the best, Peter. PS: Please be so kind and keep me Cc:'ed on this matter, it helps me to note replies earlier and ensures a slightly more timely response, thank you! -- NEU FÜR ALLE - GMX MediaCenter - für Fotos, Musik, Dateien... Fotoalbum, File Sharing, MMS, Multimedia-Gruß, GMX FotoService Jetzt kostenlos anmelden unter http://www.gmx.net +++ GMX - die erste Adresse für Mail, Message, More! +++ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"