RE: Execution plan caching
[EMAIL PROTECTED] wrote: > Hi, > > I have recently used the MS SQL Server 2005 database, and found out > that there is no mecanism where an execution plan can be reused > between two successive calls to a view. This is only true with stored > procedures. > > Is that also true with the Postgresql engine? Sorry, wrong mailing-list! :) Philippe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Execution plan caching
Hi, I have recently used the MS SQL Server 2005 database, and found out that there is no mecanism where an execution plan can be reused between two successive calls to a view. This is only true with stored procedures. Is that also true with the Postgresql engine? Philippe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: PHP GD 5.2.2 portupgrade and xorg-libraries 6.9
[EMAIL PROTECTED] wrote: > Philippe Lang wrote: >> Is there a way to install PHP GD 5.2.2 without having to update >> xorg-libraries to version 7.2, as mentioned in /usr/ports/UPDATING? >> >> I'm running a FBSD 6.0 server, without X-Windows, which has >> xorg-libraries version 6.9. Everything worked just fine with PHP GD >> 5.2.1. > > WITHOUT_X11 works for me. Hi, I tried this, but unfortunately, the GD library is then not visible anymore in phpinfo(). It is apparently disactivated. Philippe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
PHP GD 5.2.2 portupgrade and xorg-libraries 6.9
Hi, Is there a way to install PHP GD 5.2.2 without having to update xorg-libraries to version 7.2, as mentioned in /usr/ports/UPDATING? I'm running a FBSD 6.0 server, without X-Windows, which has xorg-libraries version 6.9. Everything worked just fine with PHP GD 5.2.1. Thanks Philippe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Virtual Hosting Control Panel
[EMAIL PROTECTED] wrote: > Does anyone have any suggestions for a good hosting control panel for > FreeBSD 6.x (GNU)? For your email domains, have a look at http://sourceforge.net/projects/postfixadmin/ It works great for me. Philippe Lang ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
"ffs_valloc: dup alloc" panic under 6.0 with RAID 5 iir driver
Hi, After 370 days of uptime, I suddenly got an "ffs_valloc: dup alloc" panic under our production server, for the swap partition. - Dump header from device /dev/da0s1b Architecture: i386 Architecture Version: 2 Dump Length: 4026068992B (3839 MB) Blocksize: 512 Dumptime: Mon Apr 2 08:44:33 2007 Hostname: xeon.attiksystem.ch Magic: FreeBSD Kernel Dump Version String: FreeBSD 6.0-RELEASE-p6 #0: Sun Mar 26 15:43:19 CEST 2006 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/SMP-ATTIK Panic String: ffs_valloc: dup alloc Dump Parity: 1261171921 Bounds: 0 Dump Status: good - xeon# more /etc/fstab # DeviceMountpoint FStype Options Dump Pass# /dev/da0s1b noneswapsw 0 0 /dev/da0s1a / ufs rw 1 1 /dev/da0s1e /tmpufs rw 2 2 /dev/da0s1f /usrufs rw 2 2 /dev/da0s1d /varufs rw 2 2 /dev/acd0 /cdrom cd9660 ro,noauto 0 0 - After a reboot in single-user mode, fsck found 200+ errors (a lot of soft updates inconsistencies, plus others), but corrected them apparently well. At the next reboot, except a few things, everything works fine, but this is quite frightening. The server has an INTEL SRCU42L card, with RAID 5, firmware 2.34.05-R043. (iir driver) What would you change first in order to correct that problem? OS patch release? OS version? Raid firmware? The odd thing here is that swap ist not used at all on this server, built with 4 GB and where no more than 2 GB is being used. Thanks! Regards, ---- Philippe Lang Attik System ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Fast SCSI RAID controller
[EMAIL PROTECTED] wrote: > [EMAIL PROTECTED] wrote: > >> Can anyone suggest a fast SCSI RAID controller for FreeBSD 6.2 ? Our >> vendor is having trouble with the latest Adaptec > > Have a look at 3WARE controllers, they work great. All the necessary > tools are available in the kernel and in FBSD ports. Sorry, 3WARE are SATA controllers... Philippe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Fast SCSI RAID controller
[EMAIL PROTECTED] wrote: > Can anyone suggest a fast SCSI RAID controller for FreeBSD 6.2 ? Our > vendor is having trouble with the latest Adaptec Have a look at 3WARE controllers, they work great. All the necessary tools are available in the kernel and in FBSD ports. Philippe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Multiple Directories for Jails
[EMAIL PROTECTED] wrote: > On 29 Jan 2007, at 5:04 PM, Björn König wrote: > >> Karl Fischer schrieb: >>> Hi >>> I'm a n00b to freebsd and jails is there away that I can specify >>> multiple Directories in the jails.conf ? >>> JAIL_HOME="/data1; /data2" etc. >> >> What are you trying to do or what do you expect? >> >> A file system hierarchy can only have one root directory. You >> probably want to play with unionfs. You can read about its concept >> here: http://people.freebsd.org/~daichi/unionfs/ >> http://en.wikipedia.org/wiki/UnionFS >> >> Regards Björn > > Hi > Basically the Drive that the Jails are hosted on is running out of > space. > By adding another mounted Partition I will have more space. > > If I add a new Drive to the Machine ... > mount it under /data2 can I just stop the jails and copy them across > modify the jails.conf and start it up ? I guess the best procedure > should be to back them up and restore them there ? > > Thanks for the help > Karl Hi, Jails don't absolutely need to have the same root. I'm not sure where you found your "JAIL_HOME" and "jails.conf" (a script?), but each jail needs a "rootdir", which can be a path to whatever you want. You can configure this "rootdir" in /etc/rc.conf. Have a look there. Depending on how much space your actual jails are using, you may consider moving all your jails onto a new drive, instead of moving part of them. It is maybe easier to manage your system this way, although not necessary at all. Hope this will help you, Philippe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Postgresql 8.1: plperl code works with LATIN1, fails with UTF8
[EMAIL PROTECTED] wrote: > Hi, > > I've got plperl code that works just fine when the database is > encoded using LATIN1, but fails as soon as I switch to UTF8. > > I've been testing PG 8.1.4 under Linux, and PG 8.1.6 under FreeBSD, > both behave exactly the save. ... Oups, sorry, wrong mailing-list! Cheers, Philippe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Postgresql 8.1: plperl code works with LATIN1, fails with UTF8
# Nombre de vantaux
$output{'nbre_vtx'} = $lignes->{rows}[$lignes_rn]->{'nbre_vtx'};
# Nombre de vantaux total
$output{'nbre_vtx_total'} = $lignes->{rows}[$lignes_rn]->{'nbre_vtx'} *
$lignes->{rows}[$lignes_rn]->{'quant'};
# Largeur de maçonnerie
for ($j = 0; ($fab->{rows}[$j]->{'article'} ne 'Largeur de maçonnerie')
and ($j < $fab_nrows); $j = $j + 1) {};
if ($j < $fab_nrows) { $output{'larg_maconnerie'} =
$fab->{rows}[$j]->{'larg'}; }
else { $output{'larg_maconnerie'} = ''; };
# Hauteur de maçonnerie
for ($j = 0; ($fab->{rows}[$j]->{'article'} ne 'Hauteur de maçonnerie')
and ($j < $fab_nrows); $j = $j + 1) {};
if ($j < $fab_nrows) { $output{'haut_maconnerie'} =
$fab->{rows}[$j]->{'haut'}; }
else { $output{'haut_maconnerie'} = ''; };
# Largeur de vantail
if (defined($vtxg) and defined($vtxd))
{
# Vantaux asymétriques
$output{'larg_vtx'} = $vtxg . " / " . $vtxd;
}
else
{
# Vantaux symétriques
for ($j = 0; ($fab->{rows}[$j]->{'article'} ne 'Largeur de
vantail') and ($j < $fab_nrows); $j = $j + 1) {};
if ($j < $fab_nrows) { $output{'larg_vtx'} =
$fab->{rows}[$j]->{'larg'}; }
else { $output{'larg_vtx'} = ''; };
}
# Hauteur de vantail
for ($j = 0; ($fab->{rows}[$j]->{'article'} ne 'Hauteur de vantail')
and ($j < $fab_nrows); $j = $j + 1) {};
if ($j < $fab_nrows) { $output{'haut_vtx'} =
$fab->{rows}[$j]->{'haut'}; }
else { $output{'haut_vtx'} = ''; };
# Type d'ouverture
$output{'ouv'} = $lignes->{rows}[$lignes_rn]->{'ouv'};
# Image des couvre-joints
for ($j = 0; ($fab->{rows}[$j]->{'article'} ne 'Couvre-joints') and ($j
< $fab_nrows); $j = $j + 1) {};
if ($j < $fab_nrows) { $output{'couvre_joints'} =
$fab->{rows}[$j]->{'image'}; }
else { $output{'couvre_joints'} = ''; };
# Image de la coupe verticape
for ($j = 0; ($fab->{rows}[$j]->{'article'} ne 'Coupe verticale') and
($j < $fab_nrows); $j = $j + 1) {};
if ($j < $fab_nrows) { $output{'coupe_verticale'} =
$fab->{rows}[$j]->{'image'}; }
else { $output{'coupe_verticale'} = ''; };
# Vide intérieur
if (defined($vtxg) and defined($vtxd))
{
# Vantaux asymétriques
$output{'vide_interieur'} = ($vtxg - 106) . " / " . ($vtxd - 106);
}
else
{
# Vantaux symétriques
for ($j = 0; ($fab->{rows}[$j]->{'article'} ne 'Largeur de
vantail') and ($j < $fab_nrows); $j = $j + 1) {};
if ($j < $fab_nrows) { $output{'vide_interieur'} =
$fab->{rows}[$j]->{'larg'} - 106; }
else { $output{'vide_interieur'} = ''; };
}
# Type de volet
$output{'typ'} = $lignes->{rows}[$lignes_rn]->{'typ'};
# Sortie
&$ret(@_);
}
#
#-- Fin de la fonction
#
&$end_sub(@_);
$$
LANGUAGE 'plperl' VOLATILE;
#
When running:
-
select * from volets_fiche_fab_1(1)
Database replies:
-
ERROR: error from Perl function: invalid input syntax for integer: "" at line
54.
SQL state: XX000
Does anyone have a small idea where to search?
Thanks
Philippe Lang
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: PCIe Core2 Duo Motherboard?
[EMAIL PROTECTED] wrote: > Philippe Lang wrote: >> [EMAIL PROTECTED] wrote: >> >>>> 2) Can anyone suggest a well supported board with gigabit lan, >>>> onboard video, and PCIe expansion, that accepts Core2 Duo CPUs? >>> If you're willing to pay for it, server boards will suit you better. >>> For example something like this: >>> >> http://www.supermicro.com/products/motherboard/Xeon1333/5000P/X7DBE.cf >> m >> >> This board ships with a 82563EB network controller, which is AFAIK >> not supported under FreeBSD yet. I haven't tested it, so maybe I'm >> wrong? >> >> Latest intel drivers vresion 6.2.9 says:... > > I can't reliably explain it. Maybe I've got an OEM version with some > other NIC or someone stuck an additional NIC in it before it got to > me. Or maybe the documentation or the driver are wrong :) Hum, that means LAN works on a SuperMicro X7DBE motherboard? That's really good news! I was hesitating buying one, because of the supposed lack of 82563EB support, but I see I'm wrong. Can anyone explain how this chip could be supported, even if not mentioned in the driver itself and in the documentation? Ivan, do you have the opportunity to open your server, and check what LAN chip there is inside? Thanks, bye Philippe Lang ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: PCIe Core2 Duo Motherboard?
[EMAIL PROTECTED] wrote:
>> 2) Can anyone suggest a well supported board with gigabit lan,
>> onboard video, and PCIe expansion, that accepts Core2 Duo CPUs?
>
> If you're willing to pay for it, server boards will suit you better.
> For example something like this:
>
http://www.supermicro.com/products/motherboard/Xeon1333/5000P/X7DBE.cfm
This board ships with a 82563EB network controller, which is AFAIK not
supported under FreeBSD yet. I haven't tested it, so maybe I'm wrong?
Latest intel drivers vresion 6.2.9 says:
typedef enum {
em_undefined = 0,
em_82542_rev2_0,
em_82542_rev2_1,
em_82543,
em_82544,
em_82540,
em_82545,
em_82545_rev_3,
em_82546,
em_82546_rev_3,
em_82541,
em_82541_rev_2,
em_82547,
em_82547_rev_2,
em_82571,
em_82572,
em_82573,
em_80003es2lan,
em_ich8lan,
em_num_macs
} em_mac_type;
Philippe
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
82563EB NIC (was: SuperMicro 2U servers?)
> I have just checked on FreeBSD 6.2R hardware compatibility list, and
> they don't mention the network controller. It's an
>
> - Intel(r) (ESB2/Gilgal) 82563EB Dual-Port Gigabit Ethernet Controller
>
> Hardware compatibility list says:
>
> - The em(4) driver supports Gigabit Ethernet adapters based on the
> Intel 82540, 82541ER, 82541PI, 82542, 82543, 82544, 82545, 82546,
> 82546EB, 82546GB, 82547, 82571, 82572 and 82573 controller chips
The intel drivers unfortunately do not support the 82563EB yet. I had a
look in the latest driver version 6.2.9:
typedef enum {
em_undefined = 0,
em_82542_rev2_0,
em_82542_rev2_1,
em_82543,
em_82544,
em_82540,
em_82545,
em_82545_rev_3,
em_82546,
em_82546_rev_3,
em_82541,
em_82541_rev_2,
em_82547,
em_82547_rev_2,
em_82571,
em_82572,
em_82573,
em_80003es2lan,
em_ich8lan,
em_num_macs
} em_mac_type;
This chip is bundled on both motherboards I have just checked:
http://www.supermicro.com/products/motherboard/Xeon1333/5000P/X7DBE.cfm
http://www.intel.com/design/servers/boards/s5000PAL/index.htm
Any idea if an updated driver is supposed to be available one day?
Philippe
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: SuperMicro 2U servers?
[EMAIL PROTECTED] wrote: > On Thu, Jan 11, 2007 at 08:43:06AM +0100, Philippe Lang wrote: >> Hi, >> >> Is anyone using FreeBSD 6.X in production on SuperMicro 2U servers? >> >> http://www.supermicro.com/products/system/2U/ >> >> Thanks for the info, >> >> Philippe Lang > > > Yep, > > We are using them at Juniper Networks. We have had very good luck > with them. However we use SCSI disk instead of SATA so I don't know > how well SATA works with FreeBSD 6.x. Our setup is 2 - dual core > CPUs, 4 gig of ram, a pair of Adaptec SCSI RAID controllers. The OS > disk is a pair of 72 gig SCSI mirrored and the other 6 bays have some > configuration of SCSI disk in RAID 10. We use FreeBSD 6.2-RC2 because > these motherboards use the Intel network chips and there was a > problem with the em device. The patch to fix this got committed > sometime in late October. > > > Josef Hi Josef, thanks for your answer. Are you using this motherboard? http://www.supermicro.com/products/motherboard/Xeon1333/5000P/X7DBE.cfm I have just check on FreeBSD 6.2R hardware compatibility list, and they don't mention the network controller. It's an - Intel(r) (ESB2/Gilgal) 82563EB Dual-Port Gigabit Ethernet Controller Hardware compatibility list says: - The em(4) driver supports Gigabit Ethernet adapters based on the Intel 82540, 82541ER, 82541PI, 82542, 82543, 82544, 82545, 82546, 82546EB, 82546GB, 82547, 82571, 82572 and 82573 controller chips Does the documentation simply need to be updated maybe? Bye Philippe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: SuperMicro 2U servers?
I wrote: > Hi, > > Is anyone using FreeBSD 6.X in production on SuperMicro 2U servers? > > http://www.supermicro.com/products/system/2U/ More specifically: The motherboard of the server I'm interested in is: http://www.supermicro.com/products/motherboard/Xeon1333/5000P/X7DBE.cfm In the OS compatibility list, Super Micro does not mention anything regarding FreeBSD 6.0... http://www.supermicro.com/support/resources/OS/5000PCompatibility.cfm Does that mean "untested", or "uncompatible"? Bye Philppe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
SuperMicro 2U servers?
Hi, Is anyone using FreeBSD 6.X in production on SuperMicro 2U servers? http://www.supermicro.com/products/system/2U/ Thanks for the info, Philippe Lang ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
PHP 5.2.0 Curl module compiled but unavailable?
Hi, I'm trying to add CURL support to PHP 5.2.0. I installed Apache modules like always, with the /usr/ports/lang/php5-extensions port. But the module does not show up in phpinfo(). I tried adding the --with-curl flag to the Makefile of the /usr/ports/lang/php5 port, but then compilation fails. Does anyone have the same problem maybe? FreeBSD 6.0 curl-7.16.0_1 php5-5.2.0 php5-curl-5.2.0_1 Thanks! --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: VPN server to run in FreeBSD jail ...
[EMAIL PROTECTED] wrote: > Marc G. Fournier wrote: > >> Does anyone know of any software that would allow a client attach a >> VPN *to* a process running within a FreeBSD jail from a Windows >> machine? > It doesn't help now, but there is work underway to make the > whole network stack clonable under FreeBSD -- meaning each > jail gets the ability to have as many IP numbers as it wants, > and to have a separate firewall from the host system and do > all the other networking tricks you can think of. > > http://www.tel.fer.hr/zec/papers/zec-03.pdf Hi, This document is dated 2003, and tests were done for FreeBSD 4.8. Is there a chance to have a clonable network stack in a near future? --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
fsck problems under 6.0
Hi, I'm running a RAID 5, 6.0-RELEASE-p6 server, with multiple jails on it, more precisely 17 at the moment. It runs great, no problems at all until now, and even at that moment the server is fine. I have just done an fsck, and the results frighten me: ** Phase 2 - Check Pathnames I have 3 "UNEXPECTED SOFT UPDATE INCONSISTENCY" errors, like: --- UNALLOCATED I=23364960 OWNER=www MODE=100644 SIZE=1084 MTIME=Oct 10 22:35 2006 FILE=/jails/j27/usr/home/www/data/tools/smarty/cache/%%08^081^081AA588%%mail.tpl UNEXPECTED SOFT UPDATE INCONSISTENCY REMOVE? no --- ** Phase 4 - Check Reference Counts I have around 100 "UNREF FILE" errors, like: --- UNREF FILE I=21409205 OWNER=88 MODE=100600 SIZE=0 MTIME=Jun 5 08:55 2006 CLEAR? no UNREF FILE I=21409206 OWNER=88 MODE=100600 SIZE=0 MTIME=Jun 5 08:55 2006 CLEAR? no UNREF FILE I=21481298 OWNER=88 MODE=100600 SIZE=0 MTIME=Jun 7 12:16 2006 CLEAR? no --- ** Phase 5 - Check Cyl groups --- SUMMARY INFORMATION BAD SALVAGE? no BLK(S) MISSING IN BIT MAPS SALVAGE? no ALLOCATED FILE 23365029 MARKED FREE ALLOCATED FILE 23365042 MARKED FREE ALLOCATED FRAG 93343103 MARKED FREE ALLOCATED FRAGS 93360560-93360564 MARKED FREE --- As I said, I never had any problem with the server, no power interruption or whatever. I never "played" with tunefs. It uses the 6.0-RELEASE configuration. Now the questions: 1) Is that a serious problem? 2) What can be the cause of that? Faulty hardware, or software? I'm running an INTEL SRCU24L raid card, and I think I read posts mentioning problems with some iir driver version, under medium to high load. 3) How do I correct that? Booting single-mode, fsck -f? Is there a danger my whole filesystem gets broken? 4) Should I upgrade to 6.1 maybe? Thanks for reading! --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: SSH connection cut during dump on tape
[EMAIL PROTECTED] wrote: >> While doing a backup on an HP Ultrium LTO1 tape, my ssh connection >> froze, and since then, I'm not able to use the tape device anymore. > > Presumably there is another instance of dump or whatever is > still running; try to kill -INT or kill -9 it. Works just fine, thanks. I just had to kill processes in the right order. --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
SSH connection cut during dump on tape
Hi,
While doing a backup on an HP Ultrium LTO1 tape, my ssh connection froze, and
since then, I'm not able to use the tape device anymore.
xeon# mt -f /dev/nsa0 rewind
mt: /dev/nsa0: Device busy
xeon# dump -0uaL -f /dev/nsa0 /dev/da0s1a
DUMP: Date of this level 0 dump: Wed Sep 27 23:21:56 2006
DUMP: Date of last level 0 dump: the epoch
DUMP: Dumping snapshot of /dev/da0s1a (/) to /dev/nsa0
DUMP: mapping (Pass I) [regular files]
DUMP: mapping (Pass II) [directories]
DUMP: estimated 56238 tape blocks.
DUMP: Cannot open output "/dev/nsa0".
DUMP: Do you want to retry the open?: ("yes" or "no")
Is there a way to reset the tape device without rebooting the server? I'm using
the 6.0 version.
---
Philippe Lang
Attik System
smime.p7s
Description: S/MIME cryptographic signature
RE: sendmail + milter + postfix + jails question
[EMAIL PROTECTED] wrote: > hi, > > i don't like sendmail very much, but have been happily using > postfix for years now, > > on a freebsd mailserver with jails i was wondering whether > the following is possible : > > - all incoming email goes to 1 jail which only runs > sendmail + milter and blocks all email with .gif attachments > - sendmail then let's through all other emails with some transport-map > which doesn't need individual aliases (per user) > - other jails (separate jail for lists and email) accept the email > via postfix > > can sendmail do this ? or is there other mailserver-software > which can block gif and hand over all email to other jails > with postfix > > i'm asking this for the following reasons : > > - i have a jail with postfix+mysql+spamassassin+maildrop, > esp. the maildrop-part took me many many hours to figure out, > (turned out that courier maildrop default mysql-support was dropped > in favour for courier authdaemon+mysql-support) > it's working fine now, so i prefer not to add more to this jail, > but i'd like to stop .gif-images attached now > - it looks like postfix needs per user aliases for transport-situation > to virtual domains (or am i missing something ?) > > possible or not good ? Hi, Is there a specific reason why you absolutely want to keep sendmail? Why don't you do everything with postfix, and a content filtering tool you haven't mentioned: amavis? Jails runs all of the software you mentioned just fine. Just remember to bind on the IP of your jail. --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
Serial port speed & Terminal configuration
Hi, I've just installed a nanobsd soekris box next to the serial port of my server, in order to be able to boot in single-mode from a remote network location. Everything runs fine, except two things: 1) I am unable to connect to the server with anything else than 9600 bds. I've tried setting ttyd0 "/usr/libexec/getty std.57600" dialup on secure ... on the server, and using cu -l/dev/cuad0 -s57600 ... on the client, but without luck: I get strange characters on my ssh terminal (putty on windows) Working at 9600bds is really slow, I'd appreciate a little more speed... 2) vi and ee do not work well through this remote access connection. All lines are mixed-up. Is there a terminal configuration that could help here? Thanks! --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: apache 1.x and 2.x on same server
[EMAIL PROTECTED] wrote: > Are there any options I can use when installing apache 2.x > from the ports tree so it won't overwrite apache 1.x? Hi, Yes, you have one option: use jails in your server. http://docs.freebsd.org/44doc/papers/jail/jail.html Cheers, --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
Nanobsd and CF geometry
Hi, I'm trying to flash Nanobsd on a Compact Flash which is not listed in /usr/src/tools/tools/nanobsd/FlashDevice.sub. Does anyone know how to calculate NANO_MEDIASIZE, NANO_HEADS and NANO_SECTS for a specific CF, in my case a Transcend 512 MB CF? I found a datasheet, but I'm not sure what do do with it: http://www.transcendusa.com/Support/DLCenter/Datasheet/TSXMCF80.pdf Thanks! --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: Recommended remote management card for FreeBSD 6.X?
[EMAIL PROTECTED] wrote: > Philippe Lang skrev: >> Hi, >> >> What remote management card (like Drac, for example) would > you recommend for a FreeBSD 6.X Server? > > I guess you'll get as many replies as there are vendors here, > but my 2 cents worth of advice is to go with the HP iLO / > iLO2 - they work like a charm! Hi, I had a look at the iLO2 card, but tell me if I'm wrong: this hardware is specific to HP Proliant Servers, right? --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
Recommended remote management card for FreeBSD 6.X?
Hi, What remote management card (like Drac, for example) would you recommend for a FreeBSD 6.X Server? -- Philippe Lang, Ing. Dipl. EPFL Attik System rte de la Fonderie 2 1700 Fribourg Switzerland http://www.attiksystem.ch Tel: +41 (26) 422 13 75 Fax: +41 (26) 422 13 76 smime.p7s Description: S/MIME cryptographic signature
RE: Cacti & FreeBSD Jail CPU & RAM monitoring
Here a better formatted version.
#!/usr/bin/perl
@jails = `jls`;
$title = shift @jails;
chomp $title;
print $title . "\t\t%CPU\t%MEM\n";
foreach (@jails)
{
my ($jid) = /\s+(\S+)\s/;
@jexec = `jexec $jid ps -afxu`;
@mem = map {/\S+\s+\S+\s+\S+\s+(\S+)\s/} @jexec;
shift @mem;
$tot_mem = 0;
foreach (@mem) { $tot_mem = $tot_mem + $_; }
@cpu = map {/\S+\s+\S+\s+(\S+)\s/} @jexec;
shift @cpu;
$tot_cpu = 0;
foreach (@cpu) { $tot_cpu = $tot_cpu + $_; }
chomp $_;
print $_ . "\t";
printf('%4.1f', $tot_cpu);
print "\t";
printf ('%4.1f', $tot_mem);
print "\n";
}
---
Philippe Lang
Attik System
smime.p7s
Description: S/MIME cryptographic signature
RE: Cacti & FreeBSD Jail CPU & RAM monitoring
[EMAIL PROTECTED] wrote:
> On Aug 15, 2006, at 9:16 AM, Philippe Lang wrote:
>
>> Hi,
>>
>> Based on answers of my first post, I wrote a small perl script in
>> order to find out the CPU and MEMORY used by each jail.
>> Here it is:
>>
>> --
>> - jls.ps
>> --
>> #!/usr/bin/perl @jails = `jls`;
>> $title = shift @jails;
>> chomp $title;
>> print $title . "\t\t%CPU\t%MEM\n";
>> foreach (@jails)
>> {
>> my ($jid) = /\s+(\S+)\s/;
>> @jexec = `jexec $jid ps -afxu`;
>>
>> @mem = map {/\S+\s+\S+\s+\S+\s+(\S+)\s/} @jexec;
>> shift @mem;
>> $tot_mem = 0;
>> foreach (@mem) { $tot_mem = $tot_mem + $_; }
>>
>> @cpu = map {/\S+\s+\S+\s+(\S+)\s/} @jexec;
>> shift @cpu;
>> $tot_cpu = 0;
>> foreach (@cpu) { $tot_cpu = $tot_cpu + $_; }
>>
>> chomp $_;
>> print $_ . "\t$tot_cpu\t$tot_mem\n"; }
>> --
>
>
> What are the units on the MEM?
Hi,
Just like for a "ps -u", but it's here the sum of the percentages of all the
processes owned by the jail. The same for %CPU.
This might not be very accurate, but it gives a very good idea of which jails
are using a lot of memory or cpu.
---
Philippe Lang
Attik System
smime.p7s
Description: S/MIME cryptographic signature
RE: Cacti & FreeBSD Jail CPU & RAM monitoring
Hi,
Based on answers of my first post, I wrote a small perl script in order to find
out the CPU and MEMORY used by each jail.
Here it is:
--
- jls.ps
--
#!/usr/bin/perl
@jails = `jls`;
$title = shift @jails;
chomp $title;
print $title . "\t\t%CPU\t%MEM\n";
foreach (@jails)
{
my ($jid) = /\s+(\S+)\s/;
@jexec = `jexec $jid ps -afxu`;
@mem = map {/\S+\s+\S+\s+\S+\s+(\S+)\s/} @jexec;
shift @mem;
$tot_mem = 0;
foreach (@mem) { $tot_mem = $tot_mem + $_; }
@cpu = map {/\S+\s+\S+\s+(\S+)\s/} @jexec;
shift @cpu;
$tot_cpu = 0;
foreach (@cpu) { $tot_cpu = $tot_cpu + $_; }
chomp $_;
print $_ . "\t$tot_cpu\t$tot_mem\n";
}
--
I still haven't connected anything to cacti yet, but I wanted to share that. I
think it can be quite useful.
Cheers,
------
Philippe Lang, Ing. Dipl. EPFL
Attik System
rte de la Fonderie 2
1700 Fribourg
Switzerland
http://www.attiksystem.ch
Tel: +41 (26) 422 13 75
Fax: +41 (26) 422 13 76
smime.p7s
Description: S/MIME cryptographic signature
Cacti & FreeBSD Jail CPU & RAM monitoring
Hi, I'd like to use Cacti for CPU and RAM usage monitoring on my FreeBSD Server. Is there a way to do monitoring for each jail independently? I guess the answer is "no" for CPU usage, but is there a way maybe to get the RAM usage of the processes of each jail? Thanks, --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: Are hardware vendors starting to bail on FreeBSD ... ?
[EMAIL PROTECTED] wrote: > I've recently been experiencing lock ups with the three > servers that I've upgraded to 6.x ... one of which is <1 year > old, the other two are 3 years old ... after getting > everything setup with DDB, to the point that I could provide > some very detailed traces, and core dumps, it looks like the > problem is the one thing common between all three servers: > the iir driver ... the two older machines are running Intel > 0CH RAID controllers, the newer one an ICP Vortex card ... > both were rock solid machines under 4.x ... I don't have lockups on my 6.0 server, but I confirm there is something strange with the iir driver. On dmesg.*, I can read iir0: Bus B: The SCSI controller successfully recovered from a SCSI BUS issue. The issue may still be present on the BUS. Check cables, termination, termpower, LVDS operation, etc iir0: SCSI-B, ID 3: MPI returned 0x0048 I have an INTEL SRCU42L raid board. Maybe that's REALLY a cable problem I have here? --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
FreeBSD 6 Jails - REJ apache processes? [was: Apache 2 in 6.0 jails: Connection refused: connect to listener on 0.0.0.0:80]
LISTEN tcp4 0 0 j25.smtp *.*LISTEN tcp4 0 0 j25.ssh*.*LISTEN netstat: kvm not available Active UNIX domain sockets Address Type Recv-Q Send-QInode Conn Refs Nextref Addr cce7bdac stream 0 00 c621383400 c6213834 stream 0 00 cce7bdac00 ccc5b7a8 stream 0 0 c7f52dd0000 /tmp/mysql.sock c6213230 dgram 0 00 c5b0294c00 c5b02b7c dgram 0 00 c5b02af000 c5b02af0 dgram 0 0 c61df3300 c5b02b7c0 /var/run/logpriv c5b0294c dgram 0 0 c61df4400 c62132300 /var/run/log Can anyone explain what happens here, and in what direction to search? In advance, thank for any idea that could help me solve this problem! ------ Philippe Lang, Ing. Dipl. EPFL Attik System rte de la Fonderie 2 1700 Fribourg Switzerland http://www.attiksystem.ch Tel: +41 (26) 422 13 75 Fax: +41 (26) 422 13 76 >>> Hi, >>> >>> Every now and then, Apache 2.2.2 starts filling my httpd-error.log >>> with thousands of lines like: >>> >>> [Sat Jul 08 20:57:32 2006] [warn] (61)Connection refused: >>> connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:33 2006] [warn] >>> (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul >>> 08 20:57:34 2006] [warn] (61)Connection >>> refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 >>> 20:57:35 2006] [warn] (61)Connection refused: connect to listener on >>> 0.0.0.0:80 [Sat Jul 08 20:57:36 2006] [warn] (61)Connection refused: >>> connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:37 2006] [warn] >>> (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul >>> 08 20:57:38 2006] [warn] (61)Connection refused: connect to listener >>> on 0.0.0.0:80 [Sat Jul 08 20:57:39 2006] [warn] (61)Connection >>> refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:40 >>> 2006] [warn] (61)Connection refused: connect to listener on >>> 0.0.0.0:80 >>> >>> I'm running Apache in FreeBSD 6.0 RELEASE-p2 jails. >>> >>> Restarting Apache cures the problem for some time, until the problem >>> appears again. It is not that frequent, but the servers are not >>> much loaded either. >>> >>> I think I saw this problem appear with Apache 2.0, 2.1, and 2.2, so >>> it's apparently here for a while. And others had this problem too: >>> >>> http://groups.google.ch/group/lucky.freebsd.apache/browse_thre >>> ad/thread/7a5735ae7a3a4c2d/e2d0d9ba4ad7266e?lnk=st&q=Connectio >> n+refused%3A+connect+to+listener+on+0.0.0.0%3A80&rnum=1> >> &hl=de#e2d0d9ba4ad7266e >>> >>> I'm pretty sure this problem must be BSD or Jails specific. >>> Does anyone have the same problem, or maybe a workaround? >>> Note that Lighttpd NEVER had this problem on this server. >> >> One more precision: of course, when apache starts filling the log >> with "Connection refused: connect to listener on 0.0.0.0:80", the web >> server does not respond anymore, until I restart it. > > Hi again, > > I did some further tests with Apache under FreeBSD 6.0 - > Jail, and unfortunately, there is still the same annoying > problem: suddenly the log starts being filled with hundreds > of lines "Connection refused: connect to listener on > 0.0.0.0:80", and Apache does not respond anymore. > > I have a log example, that shows the Apache freeze: > > -- > [Sat Jul 15 14:25:36 2006] [error] [client 66.147.238.238] > File does not exist: > /home/verticaldrape/www/data/adserver > [Sat Jul 15 14:25:37 2006] [error] [client 66.147.238.238] > File does not exist: > /home/verticaldrape/www/data/phpAdsNew > [Sat Jul 15 14:25:37 2006] [error] [client 66.147.238.238] > File does not exist: > /home/verticaldrape/www/data/phpadsnew > [Sat Jul 15 14:25:37 2006] [error] [client 66.147.238.238] > File does not exist: > /home/verticaldrape/www/data/phpads > [Sat Jul 15 14:25:37 2006] [error] [client 66.147.238.238] > File does not exist: > /home/verticaldrape/www/data/Ads > [Sat Jul 15 14:25:38 2006] [error] [client 66.147.238.238] > File does not exist: > /home/verticaldrape/www/data/ads > [Sat Jul 15 14:25:38 2006] [error] [client 66.147.238.238] > script '/home/verticaldrape/www/data/xmlrpc.php' not found or > unabl e to stat [Sat Jul 15 14:25:39 2006] [error] [client > 66.147
RE: Apache 2 in 6.0 jails: Connection refused: connect to listener on 0.0.0.0:80
0.0:80 [Sat Jul 15 14:25:46 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 15 14:25:47 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 15 14:25:48 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 15 14:25:49 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 15 14:25:50 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 15 14:25:51 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [snip] [Sun Jul 16 04:50:10 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:11 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:12 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:13 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:14 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:15 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:16 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:17 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:18 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:19 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:20 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sun Jul 16 04:50:21 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 -- The freeze appears apparently under high load, with about 4 connections a second from a robot. I made 2 changes in httpd.conf the last days, which apparently did not help: 1. Commented out: #LoadModule ssl_module libexec/apache22/mod_ssl.so 2. Added: AcceptFilter http none Does anyone have an idea where this problem might come from? I'm pretty sure it must be linked to the jail system in some way... Any chance things might be corrected in FreeBSD 6.1? My jails are all configured like this: jail_j29_hostname="j29.attiksystem.ch" jail_j29_ip="83.222.129.29" jail_j29_rootdir="/usr/jails/j29" jail_j29_exec="/bin/sh /etc/rc" jail_j29_devfs_enable="YES" I'm using the network interface "em" driver. Thanks for your help, --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: *bsd firewall appliance?
[EMAIL PROTECTED] wrote: > Hi all, > > Just doing some early morning brainstorming, and my crazy thought of > the day is this: > > My life would be so much easier if I could just get rid of my > stupid PIX firewalls, and replace them what I know and love: > FreeBSD. It's not that the PIX's have been causing me > problems or anything like that, it's just that I believe in > streamlining whenever possible, and since we've already > exterminated Microsoft in my server room for at least 3 > years, the only thing left that's not running FreeBSD are my > appliances (firewalls and switches) and 2 leftover legacy > servers still running Redhat that haven't been worth the > effort to migrate to FreeBSD. I'm a one-man shop, and I can > survive using the PIX IOS when I have to, but would just as > soon use BSD if I could. Questions: > > 1) If I did this, I would probably only do it if I could > figure out how to rack up some diskless servers to my 2-post > communications rack. Any thoughts on hardware candidates, etc.? > > 2) If I did this, maybe it would be wiser to go with OpenBSD > instead, since it is known for security? > > 3) Any good tutorials on setting up a diskless servers for > Free/OpenBSD? > > 4) Any other considerations? > > 5) Am I just being stupid and should I just keep my PIX's > going? I know, I know, if it ain't broke, don't fix it. Hi, Maybe a good start for you would be to have a look at http://www.m0n0.ch/wall/. Cheers, --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: Apache 2 in 6.0 jails: Connection refused: connect to listener on0.0.0.0:80
[EMAIL PROTECTED] wrote: > Hi, > > Every now and then, Apache 2.2.2 starts filling my > httpd-error.log with thousands of lines like: > > [Sat Jul 08 20:57:32 2006] [warn] (61)Connection refused: > connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:33 2006] > [warn] (61)Connection refused: connect to listener on > 0.0.0.0:80 [Sat Jul 08 20:57:34 2006] [warn] (61)Connection > refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 > 20:57:35 2006] [warn] (61)Connection refused: connect to > listener on 0.0.0.0:80 [Sat Jul 08 20:57:36 2006] [warn] > (61)Connection refused: connect to listener on 0.0.0.0:80 > [Sat Jul 08 20:57:37 2006] [warn] (61)Connection refused: > connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:38 2006] > [warn] (61)Connection refused: connect to listener on > 0.0.0.0:80 [Sat Jul 08 20:57:39 2006] [warn] (61)Connection > refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 > 20:57:40 2006] [warn] (61)Connection refused: connect to listener on > 0.0.0.0:80 > > I'm running Apache in FreeBSD 6.0 RELEASE-p2 jails. > > Restarting Apache cures the problem for some time, until the > problem appears again. It is not that frequent, but the > servers are not much loaded either. > > I think I saw this problem appear with Apache 2.0, 2.1, and > 2.2, so it's apparently here for a while. And others had this problem > too: > > http://groups.google.ch/group/lucky.freebsd.apache/browse_thre > ad/thread/7a5735ae7a3a4c2d/e2d0d9ba4ad7266e?lnk=st&q=Connectio n+refused%3A+connect+to+listener+on+0.0.0.0%3A80&rnum=1> &hl=de#e2d0d9ba4ad7266e > > I'm pretty sure this problem must be BSD or Jails specific. > Does anyone have the same problem, or maybe a workaround? > Note that Lighttpd NEVER had this problem on this server. One more precision: of course, when apache starts filling the log with "Connection refused: connect to listener on 0.0.0.0:80", the web server does not respond anymore, until I restart it. --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
Apache 2 in 6.0 jails: Connection refused: connect to listener on 0.0.0.0:80
Hi, Every now and then, Apache 2.2.2 starts filling my httpd-error.log with thousands of lines like: [Sat Jul 08 20:57:32 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:33 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:34 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:35 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:36 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:37 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:38 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:39 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 [Sat Jul 08 20:57:40 2006] [warn] (61)Connection refused: connect to listener on 0.0.0.0:80 I'm running Apache in FreeBSD 6.0 RELEASE-p2 jails. Restarting Apache cures the problem for some time, until the problem appears again. It is not that frequent, but the servers are not much loaded either. I think I saw this problem appear with Apache 2.0, 2.1, and 2.2, so it's apparently here for a while. And others had this problem too: http://groups.google.ch/group/lucky.freebsd.apache/browse_thread/thread/7a5735ae7a3a4c2d/e2d0d9ba4ad7266e?lnk=st&q=Connection+refused%3A+connect+to+listener+on+0.0.0.0%3A80&rnum=1&hl=de#e2d0d9ba4ad7266e I'm pretty sure this problem must be BSD or Jails specific. Does anyone have the same problem, or maybe a workaround? Note that Lighttpd NEVER had this problem on this server. Cheers, ---- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: jail login and replication problems
Chad Leigh -- Shire.Net LLC wrote: >>> Hi Dan, >>> >>> Did you ever find a solution to this problem? I've had the exact >>> same problem, and have tried various different things to resolve >>> it... all to no avail. It's really annoying have to remake the jail >>> from scratch every time, as I'd much rather do the configuration >>> once, and use it as a cookie-cutter for future jails. >> >> Hi, >> >> For duplicating jail, use the utility called "cpdup". Tar does not >> work for this. > > Why not? I use it (though in a modified way -- I tar a base > jail without /bin /usr etc but with /etc etc and then I use > nullfs mounts to duplicate one base jail install. > > But my /etc in each jail is copied with tar (as is a bunch of > stuff including the base / with dirs for usr bin sbin etc) and it > works Well, Well, to be precise, tar did work for me too once or twice, but because of some filesystem related issues, I read several times that cpdup is a preferred method. I cannot tell more (I'm sure others readers in this list will), I'm sorry, except that you can use cpdup both eyes closed... --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: jail login and replication problems
[EMAIL PROTECTED] wrote: > Hi Dan, > > Did you ever find a solution to this problem? I've had the > exact same problem, and have tried various different things > to resolve it... all to no avail. It's really annoying have > to remake the jail from scratch every time, as I'd much > rather do the configuration once, and use it as a > cookie-cutter for future jails. Hi, For duplicating jail, use the utility called "cpdup". Tar does not work for this. Bye Philippe > Patrick > > On 7/26/05, Dan Rue <[EMAIL PROTECTED]> wrote: >> Greetings, >> >> I am setting up multiple jails on a machine. The first jail, >> everything works fine. If I add a user, that user can log in. If I >> tar cvzpf the jail, tar xvzpf to create a new one, some people can >> log into the new jail, and some can not. >> >> The user that can log in to the new one was the first user created >> (me), but any subsequent users can not log into new jails.. >> >> The symptom is right after accepting the password via ssh, the >> connection will just get dropped. I could not find any good error >> messages using ssh.. But if I enable telnet and try to telnet in, I >> receive this error in /var/log/messages: >> >> Jul 26 16:11:46 jail3 login: _secure_path: cannot stat >> /home/user3/.login_conf: Permission denied Jul 26 16:11:46 jail3 >> login: _secure_path: cannot stat /etc/login.conf: Permission denied >> Jul 26 16:11:46 jail3 login: _secure_path: cannot stat >> /home/user3/.login_conf: Permission denied Jul 26 16:11:46 jail3 >> login: _secure_path: cannot stat /etc/login.conf: Permission denied >> >> The permissions on those files are fine. >> >> So what would cause that error in jails that have been replicated >> using tar, but only to some users? I'm stumped.. >> >> Here's my rc.conf exerpt: >> >> jail_enable="YES" >> jail_list="jail3" >> jail_socket_unixiproute_only="NO" >> jail_sysvipc_allow="YES" # allow shared mem on all jails >> >> jail_jail3_rootdir="/jails/jail3" >> jail_jail3_hostname="jail3.example.com" >> jail_jail3_ip="10.0.0.203" >> jail_jail3_procfs_enable="YES" >> jail_jail3_devfs_enable="YES" >> jail_jail3_devfs_ruleset="devfsrules_jail" >> >> tia, >> Dan >> ___ >> freebsd-questions@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to > "[EMAIL PROTECTED]" >> > ___ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: Raid card for FreeBSD
[EMAIL PROTECTED] wrote: > Hi, > > I will host a mail server in FreeBSD 6.x. Since we are going > to use Raid for mirroing, can anyone please recommend a RAID > CARD that is fully compatible with FreeBSD? I found the > following RAIDCARD sounds good, what is your opinon about it? > > http://www.cwol.com/serial-ata/rocketraid-2320-pci-express.htm > > > Thanks > S > ___ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" Hi, Check out 3WARE products, they work great with FreeBSD. --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: ICH5R, ICH7R or Promise PDC20378 RAID?
Ted Mittelstaedt wrote: >> Hi, >> >> I'm sure there are solutions to make things work, but personnaly, I >> don't feel confortable with a RAID system that acts that way, and >> that is supposed to make the whole system more robust and >> problem-free. > > Your missing the point. > > If a disk crashes it wipes the metafile off the disk. > > If you want to simulate a disk crash, issue a raid detach command > first, then pull the disk. > > The ata raid in the ata driver isn't written to handle the > condition of > a disk being pulled that has nothing wrong with it then reinserted. > It is written to handle the condition of a disk crashing, then being > pulled, then a new one replaced. > >> I used to play with hardware SCSI RAID controllers, and was never >> able to trash the system. > > I have SCSI raid controllers too that I can do that with. But keep in > mind that these controllers firmware is written to if a disk > is pulled then > replaced, it immediately assumes that the disk is toast, and > rebuilds it > from scratch. Hi, I'm not an expert in RAID Ted, and I don't want to be. Simply, in situations where a disk crashes, and the server is not redundant anymore, I prefer having a controller that I can rely on, both eyes closed. I have just installed the 3WARE controller this morning, and did the exact same operations I did with the ICH5/7R and onboard Promise controller of my ASUS boards. It's simply not comparable at all, and for a really affordable price. The server did not crash, and is by the way rebuilding the RAID at the moment... Despite all my efforts, I was not able to trash it. A 3WARE controller is really worth the investment, really. Cheers, --- Philippe Lang Attik System smime.p7s Description: S/MIME cryptographic signature
RE: ICH5R, ICH7R or Promise PDC20378 RAID?
Ted Mittelstaedt wrote: >>> On Mon, Jun 19, 2006 at 10:18:05AM +0200, Philippe Lang wrote: >>>> Hi, >>>> >>>> I've got two boxes that would be perfect for a small server. The >>>> motherboards are: >>>> >>>> - ASUS P4C800-E Deluxe, with ICH5R and Promise PDC20378 >>>> - ASUS P5WD2, with ICH7R >>>> >>>> I intend to install FreeBSD 6.1, and I wonder which chipset you >>>> would recommend me for RAID 1? I need something rock-solid, of >>>> course... >>>> >>> I'm running -STABLE on a P4C800-E. I've never had a problem with >>> the PDC20378. Recently, I added two drives on the ICH5R with no >>> issues. A little benchmarking shows the ICH5R to be a little faster. >> >> Hi, >> >> I wasn't as lucky as Doug with my ASUS P4C800-E Deluxe board, both >> with the ICH5R and Promise RAID controller. >> >> 1) With the Promise controller, after simulating a disk problem >> (shutdown - disk disconnection - reboot - shutdown - disk >> reconnection - reboot), I wasn't able to rebuild the array at all, >> either with "atacontrol rebuild ar0" or from the bios. I suspect a >> spare disk is necessary for a complete rebuild. >> >> 2) With the ICH5R controller, installation went fine too. If I >> disconnect a disk, the system still boots, but when I plug the disk >> back (computer shut down), no boot is possible anymore. At boot, a >> kernel panic says: "softdep_setup_inomapdep". No array rebuild is >> possible from the bios, so I'm stuck. >> > > You need to take the disk you unplugged to some other machine > and wipe it, then make sure the one disk with the system left > on it is in the 0 position, put the wiped disk in the 1 > position, then you should be able to boot. > > Your simulating a failure when you pull the one disk, but > your not simulating a recovery when you insert that disk back in. > > Ted Hi, I'm sure there are solutions to make things work, but personnaly, I don't feel confortable with a RAID system that acts that way, and that is supposed to make the whole system more robust and problem-free. I used to play with hardware SCSI RAID controllers, and was never able to trash the system. Arrays are being rebuilt in the background, that's just great. I hope this is the kind of ease and quality I will get with the 3WARE raid controller I have ordered... Apparently, everyone says very good things about 3WARE. --- Philippe Lang Attik System ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: ICH5R, ICH7R or Promise PDC20378 RAID?
[EMAIL PROTECTED] wrote: > Hi, > > I wasn't as lucky as Doug with my ASUS P4C800-E Deluxe board, > both with the ICH5R and Promise RAID controller. > > 1) With the Promise controller, after simulating a disk > problem (shutdown - disk disconnection - reboot - shutdown - > disk reconnection - reboot), I wasn't able to rebuild the > array at all, either with "atacontrol rebuild ar0" or from > the bios. I suspect a spare disk is necessary for a complete rebuild. > > 2) With the ICH5R controller, installation went fine too. If > I disconnect a disk, the system still boots, but when I plug > the disk back (computer shut down), no boot is possible > anymore. At boot, a kernel panic says: > "softdep_setup_inomapdep". No array rebuild is possible from > the bios, so I'm stuck. > > > I use freebsd 6.1 RELEASE, with the latest BIOS for the > motherboard, and > 2 SATA 1.0 Western Digital 160GB disks. I'm trying to > configure RAID 1. > > I'm surprised I have so many problems. Am I doing anything > wrong? With INTEL hardware controllers for SCSI disks, I > never had any problems until now. Does anyone successfully > use another ASUS board, and is able to rebuild the array, > without rebooting? > > Thanks for your time, I have made some further tests with another ASUS board, with an INTEL ICH7R chipset. Installation of FreeBSD 6.1 went fine. I shut down the computer, disconnect a disk, reboot, and... And no reboot at all. Kernel panic. The ar raid driver seems to be very buggy... I'm looking forward to receiving my 3WARE RAID controllers... --- Philippe Lang Attik System ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: ICH5R, ICH7R or Promise PDC20378 RAID?
[EMAIL PROTECTED] wrote: >> My conclusion, if you need something stable, don't use the onboard >> raid, get a RAID card even the cheap ones will do better job!! > > Hi, > > Thanks for the confirmation the onboard controller is not the > way to go... What reliable and good raid controller would you > recommend for a simple RAID 1 in SATA? I have just ordered a AMCC 3ware 8006-2LP, it seems to be the cheap controller I needed, with great support for FreeBSD. Cheers, --- Philippe Lang Attik System ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: ICH5R, ICH7R or Promise PDC20378 RAID?
[EMAIL PROTECTED] wrote: >> 1) With the Promise controller, after simulating a disk problem >> (shutdown - disk disconnection - reboot - shutdown - disk >> reconnection - reboot), I wasn't able to rebuild the array at all, >> either with "atacontrol rebuild ar0" or from the bios. I suspect a >> spare disk is necessary for a complete rebuild. >> >> 2) With the ICH5R controller, installation went fine too. If I >> disconnect a disk, the system still boots, but when I plug the disk >> back (computer shut down), no boot is possible anymore. At boot, a >> kernel panic says: "softdep_setup_inomapdep". No array rebuild is >> possible from the bios, so I'm stuck. >> >> >> I use freebsd 6.1 RELEASE, with the latest BIOS for the motherboard, >> and 2 SATA 1.0 Western Digital 160GB disks. I'm trying to configure >> RAID 1. >> >> I'm surprised I have so many problems. Am I doing anything wrong? >> With INTEL hardware controllers for SCSI disks, I never had any >> problems until now. Does anyone successfully use another ASUS board, >> and is able to rebuild the array, without rebooting? >> > > Few things I noticed about the on-board Promise chipset on > ASUS that it is very poorly designed. If you do the > unplug/replug test, it most likely won't work, you need to > use a spare drive or re-format the drive and then replug it. > > It also goes out of sync very often, so you want to make sure > you're running consistency checks at least once a month. > > Sometimes when one of the RAID-1 drives develops bad sectors, > the whole array won't boot until you unplug one of the > drives, and plug a spare one. > > My conclusion, if you need something stable, don't use the > onboard raid, get a RAID card even the cheap ones will do better job!! Hi, Thanks for the confirmation the onboard controller is not the way to go... What reliable and good raid controller would you recommend for a simple RAID 1 in SATA? --- Philippe Lang Attik System ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: ICH5R, ICH7R or Promise PDC20378 RAID?
[EMAIL PROTECTED] wrote: > On Mon, Jun 19, 2006 at 10:18:05AM +0200, Philippe Lang wrote: >> Hi, >> >> I've got two boxes that would be perfect for a small server. The >> motherboards are: >> >> - ASUS P4C800-E Deluxe, with ICH5R and Promise PDC20378 >> - ASUS P5WD2, with ICH7R >> >> I intend to install FreeBSD 6.1, and I wonder which chipset you would >> recommend me for RAID 1? I need something rock-solid, of course... >> > I'm running -STABLE on a P4C800-E. I've never had a problem > with the PDC20378. Recently, I added two drives on the ICH5R > with no issues. A little benchmarking shows the ICH5R to be a little > faster. Hi, I wasn't as lucky as Doug with my ASUS P4C800-E Deluxe board, both with the ICH5R and Promise RAID controller. 1) With the Promise controller, after simulating a disk problem (shutdown - disk disconnection - reboot - shutdown - disk reconnection - reboot), I wasn't able to rebuild the array at all, either with "atacontrol rebuild ar0" or from the bios. I suspect a spare disk is necessary for a complete rebuild. 2) With the ICH5R controller, installation went fine too. If I disconnect a disk, the system still boots, but when I plug the disk back (computer shut down), no boot is possible anymore. At boot, a kernel panic says: "softdep_setup_inomapdep". No array rebuild is possible from the bios, so I'm stuck. I use freebsd 6.1 RELEASE, with the latest BIOS for the motherboard, and 2 SATA 1.0 Western Digital 160GB disks. I'm trying to configure RAID 1. I'm surprised I have so many problems. Am I doing anything wrong? With INTEL hardware controllers for SCSI disks, I never had any problems until now. Does anyone successfully use another ASUS board, and is able to rebuild the array, without rebooting? Thanks for your time, Regards, -- Philippe Lang, Ing. Dipl. EPFL Attik System rte de la Fonderie 2 1700 Fribourg Switzerland http://www.attiksystem.ch Tel: +41 (26) 422 13 75 Fax: +41 (26) 422 13 76 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
ICH5R, ICH7R or Promise PDC20378 RAID?
Hi, I've got two boxes that would be perfect for a small server. The motherboards are: - ASUS P4C800-E Deluxe, with ICH5R and Promise PDC20378 - ASUS P5WD2, with ICH7R I intend to install FreeBSD 6.1, and I wonder which chipset you would recommend me for RAID 1? I need something rock-solid, of course... Thanks! -- Philippe Lang Attik System Switzerland ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Simultaneous portupgrade in 2 jails -> compilation problem?
Hi, I'm running FreeBSD 6.0 / jails as a VPS server. I've just tried doing a portupgrade of mysql-server in 2 jails simultaneously, and I noticed compilations problems. The problem must be due to the fact ports are only available on the base machine, and mounted in every jail, at /usr/ports. Is there a way to avoid that, without having to manage a private /usr/ports in each jail? -- Philippe Lang, Ing. Dipl. EPFL Attik System rte de la Fonderie 2 1700 Fribourg Switzerland http://www.attiksystem.ch Tel: +41 (26) 422 13 75 Fax: +41 (26) 422 13 76 smime.p7s Description: S/MIME cryptographic signature
WebObjects 5 ?
Hi, Does anyone run WebObjects 5.3 under Freebsd 6.x? Although not officially supported, is it sufficently stable to be used in production? Philippe Lang smime.p7s Description: S/MIME cryptographic signature
RE: jails or chroot?
Hi, Sure, jails require more work regarding administration. Ports are not the biggest problem I think, it's the easy part. The problem is when you have to update the world. But even here, with a good script, it's not such a nightmare. Maybe all you need is Michael's solution. But take into account that with jails, you have a great flexibility regarding the application you install for a particular client. And all the security that a jail system can offer, plus a fantastic way of managing your backups. I personally run a jail based VPS server, based on FreeBSD 6.0, with 13 jails at the moment. It's a dual xeon, with 4GB RAM, and RAID 5 SCSI HDs. I have 355 MB RAM active, 1525 inactive and 1679 MB RAM are free. I intend to run a maximum of 50 jails on this server. And until now, nothing seems to oppose to my plans. Beware of one thing with jails, though: a bug in FreeBSD does not permit a clean shutdown of jails. But tust me: you never need to! Hope this helps, and keep us informed of your choice. Philippe Lang -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Jahilliya Envoyé : mardi, 9. mai 2006 14:48 À : Michael Grant Cc : freebsd-questions@freebsd.org Objet : Re: jails or chroot? On 5/9/06, Michael Grant <[EMAIL PROTECTED]> wrote: > > I host a bunch of websites on my box. Recently I had some problems > with file access problems with php which caused me to look into > putting each of my clients into their own jail or chroot. I have > roughly 100 different domains I'd need to split. > > Has anyone done this for more than a handfull of clients? Using > apache and their "mass virtual hosting", 100 domains is a breeze. But > with a jail or chroot, I need a separate apache process for each > domain. This is going to mean hundreds of apache processes. This > seems unreasonable. Agreed that creation hundreds of chroots or jails would be an administrative nightmare. File access can be solved with suexec (compile apache with suexec enabled), this means that for each virtual host entry in your apache config you add User and Group (check http://httpd.apache.org/docs/2.2/suexec.html or your apache version doc set). This will make each apache process run as the user specified in virtual host entry (not www) allowing you to restrict their access to files with filesystem ACL's and even ugidfw, you could also then setup process/memory restrictions in /etc/login.conf It will also make updating pretty much as standard as it is now. Give it a burl if it sounds like what you need. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" smime.p7s Description: S/MIME cryptographic signature
Jails CPU / RAM accounting?
Hi, We sell virtual private server hosting, on a FreeBSD 6.0 server. We have a client interested in our offer, but his applications are apprently quite CPU and RAM intensive. Since there is no way (at least I know of) to limit RAM or CPU in a jail, is there a way to monitor and do some accounting on jails CPU / RAM used? Thanks, -- Philippe Lang, Ing. Dipl. EPFL Attik System rte de la Fonderie 2 1700 Fribourg Switzerland http://www.attiksystem.ch Tel: +41 (26) 422 13 75 Fax: +41 (26) 422 13 76 smime.p7s Description: S/MIME cryptographic signature
RE: jls shows dead jails too?
Hi, I mentioned this bug a few months ago, and it is listed in the open bug reports, here: http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/89528 But except that, jails run like a charm. I'm running a production server with about 15 jails for the moment, and no problem. Cheers, Philippe Lang -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Marc G. Fournier Envoyé : mardi, 4. avril 2006 21:22 À : Chad Leigh -- Shire.Net LLC Cc : freebsd-questions@freebsd.org; Daniel Johansson Objet : Re: jls shows dead jails too? On Tue, 4 Apr 2006, Chad Leigh -- Shire.Net LLC wrote: > > On Apr 4, 2006, at 9:20 AM, Daniel Johansson wrote: > >> I'm setting up a few jails on my FreeBSD 6.0 box and when I run jls >> to list my jails it shows all my started jails. >> >> The problem is that when I kill a jail with kill -TERM -1, thats what >> the man page tells me to use, it still is listed when I run jls. Why >> is that and is there any way to clear the jls list? Where does jls >> get the list of the jails? >> > > The jail is not completely did in that case. It still "owns" some > resources of some sort. Is there some way of finding out what resources? Right now, on one of my boxes: # jls JID IP Address Hostname Path 4 200.46.204.254 mx2.hub.org /vm/1/mx2.hub.org 2 200.46.204.254 mx2.hub.org /vm/1/mx2.hub.org 1 200.46.204.254 mx2.hub.org /vm/1/mx2.hub.org It doesn't bother me too much, as 1/2 doesn't appear to be affecting 4, but still ... Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" smime.p7s Description: S/MIME cryptographic signature
Make installworld in single-user mode all the time?
Hi, I'd like to patch a production server, with about 10 jails, running FreeBSD 6.0 Release, in order to get FreeBSD 6.0-p6. Since this server is being hosted on a remote location, rebooting in single-user mode before doing the installworld requires me to move to the hosting center. Documentation mentions that a reboot in single-user mode is necessary. But on the opposite, /usr/src/UPDATING says: > Also, when doing a major release upgrade, it is required that > you boot into single user mode to do the installworld. Since this is no "major release upgrade", does that mean I can do the installworld in multi-user mode? I have tested that on a smaller test server yesterday evening, I have even done the installworld in running jails, and it worked just fine. Was I lucky maybe? Does anyone have a definitive guide to update FreeBSD correctly? Here is what I did: -- 1) Cleaning > cd /usr/obj > chflags -R noschg * > rm -rf 2) Buildworld & Kernel > cd /usr/src > make buildworld (/usr/src/UPDATING mentions we should avoid the -j option) > make kernel KERNCONF= 4) When doing a major release upgrade: > reboot in single-user mode > fsck -p > mount -u / > mount -a -t ufs > swapon -a > adjkerntz -i 6) Installworld > cd /usr/src > mergemaster -p > make installworld > mergemaster 7) Update jail1 > mergemaster -p -D /usr/jails/my_jail1 > make installworld DESTDIR=/usr/jails/my_jail1 > mergemaster -D /usr/jails/my_jail1 8) Update jail2 > mergemaster -p -D /usr/jails/my_jail2 > make installworld DESTDIR=/usr/jails/my_jail2 > mergemaster -D /usr/jails/my_jail2 9) Reboot -- Regards, -- Philippe Lang, Ing. Dipl. EPFL Attik System rte de la Fonderie 2 1700 Fribourg Switzerland http://www.attiksystem.ch Tel: +41 (26) 422 13 75 Fax: +41 (26) 422 13 76 Email:[EMAIL PROTECTED] smime.p7s Description: S/MIME cryptographic signature
