Re: VIMAGE + pf security fix?

2014-11-20 Thread Ermal Luçi
The fix for that was imported with the new import of pf(4) AFARIR.

On Thu, Nov 20, 2014 at 7:07 PM, Craig Rodrigues 
wrote:

> On Wed, Nov 19, 2014 at 6:05 AM, Bjoern A. Zeeb  wrote:
>
> >
> > For people to use pf with VIMAGE we first MUST have the security fix
> > imported that I pointed out a couple of times in the past.
> >
>
> At this link: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3830
>
> I see the security issue mentioned, but I can't find the patch that fixes
> the problem.
> Where is the patch?
>
> Thanks.
> --
> Craig
> ___
> freebsd-...@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
>



-- 
Ermal
___
freebsd-virtualization@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
To unsubscribe, send any mail to 
"freebsd-virtualization-unsubscr...@freebsd.org"


Re: CentOS in bhyve

2014-11-20 Thread Conrad Meyer
On Thu, 20 Nov 2014 18:34:22 +0300
Alex Povolotsky  wrote:

> Hello
> 
> I'm trying to install CentOS in bhyve.
> 
> I do everything accordnig to
> https://www.freebsd.org/doc/handbook/virtualization-host-bhyve.html
> 
> [18:30] backup:/<1>bhyve/oracle #
> cat /etc/bhyve/oracle/device.map (hd0) /dev/zvol/data/oracle
> (cd0) /home/bhyve/CentOS-6.6-x86_64-netinstall.iso
> 
> 
> [18:30] backup:/<1>bhyve/oracle # grub-bhyve -r cd0 -m
> /etc/bhyve/oracle/device.map -M 16G oracle
> 
> grub> ls (cd0)/isolinux
> boot.cat boot.msg grub.conf initrd.img isolinux.bin
> isolinux.cfg memtest splash.jpg TRANS.TBL vesamenu.c32
> vmlinuz
> 
> grub> linux (cd0)/isolinux/vmlinuz
> grub> initrd (cd0)/isolinux/initrd.img
> error: you need to load the kernel first.
> grub>

Hi Alex,

I don't see the same (maybe a newer version of grub-bhyve).
Instead:

grub> linux (cd)/isolinux/vmlinuz
grub> initrd (cd)/isolinux/initrd.img
grub> boot

And then grub-bhyve crashes:

2014-11-20 16:05:11.251+: 34493981696: error : bhyveMonitorIO:88 : Guest 
centos got signal 11 and crashed

(I am running bhyve under libvirt. The "monitor" patch is
pending upstream.)

> 
> 
> And that's all
> 
> Tried CentOS 7.0 and 6.6. No difference. FreeBSD runs in my
> bhyve OK, but need Linux...
> 
> Alex

I'll give 7.0 a whirl...

Best,
Conrad
___
freebsd-virtualization@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
To unsubscribe, send any mail to 
"freebsd-virtualization-unsubscr...@freebsd.org"


VIMAGE + pf security fix?

2014-11-20 Thread Craig Rodrigues
On Wed, Nov 19, 2014 at 6:05 AM, Bjoern A. Zeeb  wrote:

>
> For people to use pf with VIMAGE we first MUST have the security fix
> imported that I pointed out a couple of times in the past.
>

At this link: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3830

I see the security issue mentioned, but I can't find the patch that fixes
the problem.
Where is the patch?

Thanks.
--
Craig
___
freebsd-virtualization@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
To unsubscribe, send any mail to 
"freebsd-virtualization-unsubscr...@freebsd.org"


Re: bhyve remote kgdb does not support kernel modules...

2014-11-20 Thread John Baldwin
On Saturday, November 15, 2014 1:15:23 pm John-Mark Gurney wrote:
> Julian Elischer wrote this message on Sun, Nov 16, 2014 at 00:23 +0800:
> > On 11/15/14, 5:43 PM, John-Mark Gurney wrote:
> > >John-Mark Gurney wrote this message on Sat, Nov 15, 2014 at 01:37 -0800:
> > >>So, I got remote kgdb working w/ bhyve, but kernel modules aren't
> > >>loaded...
> > >>
> > >>I'm getting:
> > >>(kgdb) bt
> > >>#0  kdb_enter (why=0x8102ee88 "panic", msg=)
> > >> at ../../../kern/subr_kdb.c:444
> > >>#1  0x8094aa79 in vpanic (fmt=,
> > >> ap=) at ../../../kern/kern_shutdown.c:739
> > >>#2  0x8094a8c9 in kassert_panic (fmt=)
> > >> at ../../../kern/kern_shutdown.c:634
> > >>#3  0x8093583c in __mtx_lock_flags (c=0xf80002919720, 
opts=0,
> > >> file=0x81c3f0fa 
> > >> 
"/usr/home/jmg/freebsd.p4/opencrypto/sys/modules/aesni/../../crypto/aesni/aesni.c",
 
line=442) at ../../../kern/kern_mutex.c:217
> > >>#4  0x81c3e3a7 in ?? ()
> > >>#5  0xf80002a474a0 in ?? ()
> > >>#6  0xf80002919720 in ?? ()
> > >>
> > >>Where those should be in the aesni.ko module...  If I run kgdb on a
> > >>local machine, it properly finds the kernel modules... Any hits on
> > >>how to fix this?
> > 
> > works for me..
> > the modules I'm debugging are not compiled in.
> > you have to have the modules in the standard place ONE THE GDB HOST.
> > I make a chroot with an image of the machine being debugged, PLUS the 
> > sources.
> > and then run kgdb from inside that chroot.
> 
> Ahh, that's right, kgdb isn't smart enough to know when you've pointed
> it to the kernel build dir whereh the modules are... :(

gdb isn't smart enough if you run with all the shared libraries in the
current directory either.  Note you can always use 'add-kld /path/to/foo.ko'
when it can't find a useful module path.  Also, you don't have to use a
chroot.  You can use 'solib-absolute-prefix' (it's documented for shared
libraries and kgdb treats modules as shared libraries) and set it to the 
DESTDIR you use when you install the kernel.

That is:

% cd /path/to/kernel/amd64/compile/FOO
% make
% make install BINOWN= DESTDIR=/someplace
% kgdb kernel.debug
(kgdb) set solib-absolute-prefix /someplace/
(kgdb) target remote 

(I have a local patch to vmrun.sh on my laptop that always ties a nmdm 
interface on COM2 if nmdm is loaded so I can now attach kgdb to any VM
without having to plan ahead).

-- 
John Baldwin
___
freebsd-virtualization@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
To unsubscribe, send any mail to 
"freebsd-virtualization-unsubscr...@freebsd.org"


Re: 'repz' instruction not supported.

2014-11-20 Thread John Baldwin
On Thursday, November 20, 2014 1:30:41 am Ashutosh Kumar wrote:
> Hi
> We have found that emulation of 'repz' instruction is not supported in 
bhyve. This is causing VM_EXIT for Guest OS. Do we have plans to add support 
for instructions like 'repz'. 

What are you using repz for?  Is it memory access to some device?

-- 
John Baldwin
___
freebsd-virtualization@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
To unsubscribe, send any mail to 
"freebsd-virtualization-unsubscr...@freebsd.org"


Re: CentOS in bhyve

2014-11-20 Thread Peter Grehan

Hi Alex,


[18:30] backup:/<1>bhyve/oracle # grub-bhyve -r cd0 -m
/etc/bhyve/oracle/device.map -M 16G oracle


 grub-bhyve only accepts memory in units of MB, so you'll have to 
change that to 1024.


 Note that grub-bhyve has now been fixed to allow the K|M|G|T suffixes 
to be used.


later,

Peter.
___
freebsd-virtualization@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
To unsubscribe, send any mail to 
"freebsd-virtualization-unsubscr...@freebsd.org"


Re: CentOS in bhyve

2014-11-20 Thread Alex Povolotsky
grub2-bhyve-0.24

Updated to 0.30

And everything worked on. Sorry, I did not think that grub2-bhyve
evolves THAT fast!



On 20.11.2014 19:18, Conrad Meyer wrote:
> On Thu, 20 Nov 2014 18:34:22 +0300 Alex Povolotsky
>  wrote:
> 
>> Hello
>> 
>> I'm trying to install CentOS in bhyve.
>> 
>> I do everything accordnig to 
>> https://www.freebsd.org/doc/handbook/virtualization-host-bhyve.html
>>
>>
>> 
[18:30] backup:/<1>bhyve/oracle #
>> cat /etc/bhyve/oracle/device.map (hd0) /dev/zvol/data/oracle 
>> (cd0) /home/bhyve/CentOS-6.6-x86_64-netinstall.iso
>> 
>> 
>> [18:30] backup:/<1>bhyve/oracle # grub-bhyve -r cd0 -m 
>> /etc/bhyve/oracle/device.map -M 16G oracle
>> 
>> grub> ls (cd0)/isolinux boot.cat boot.msg grub.conf initrd.img
>> isolinux.bin isolinux.cfg memtest splash.jpg TRANS.TBL
>> vesamenu.c32 vmlinuz
>> 
>> grub> linux (cd0)/isolinux/vmlinuz grub> initrd
>> (cd0)/isolinux/initrd.img error: you need to load the kernel
>> first. grub>
>> 
>> 
>> And that's all
>> 
>> Tried CentOS 7.0 and 6.6. No difference. FreeBSD runs in my bhyve
>> OK, but need Linux...
>> 
>> Alex
> 
> Hi Alex,
> 
> Ok I'm dumb — my earlier issue was a result of failing to create
> the backing HDD. Now it boots and loads CentOS 6.6 fine. Try
> updating grub-bhyve?
> 
> Best, Conrad
> 
___
freebsd-virtualization@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
To unsubscribe, send any mail to 
"freebsd-virtualization-unsubscr...@freebsd.org"

Re: CentOS in bhyve

2014-11-20 Thread Conrad Meyer
On Thu, 20 Nov 2014 18:34:22 +0300
Alex Povolotsky  wrote:

> Hello
> 
> I'm trying to install CentOS in bhyve.
> 
> I do everything accordnig to
> https://www.freebsd.org/doc/handbook/virtualization-host-bhyve.html
> 
> [18:30] backup:/<1>bhyve/oracle #
> cat /etc/bhyve/oracle/device.map (hd0) /dev/zvol/data/oracle
> (cd0) /home/bhyve/CentOS-6.6-x86_64-netinstall.iso
> 
> 
> [18:30] backup:/<1>bhyve/oracle # grub-bhyve -r cd0 -m
> /etc/bhyve/oracle/device.map -M 16G oracle
> 
> grub> ls (cd0)/isolinux
> boot.cat boot.msg grub.conf initrd.img isolinux.bin
> isolinux.cfg memtest splash.jpg TRANS.TBL vesamenu.c32
> vmlinuz
> 
> grub> linux (cd0)/isolinux/vmlinuz
> grub> initrd (cd0)/isolinux/initrd.img
> error: you need to load the kernel first.
> grub>
> 
> 
> And that's all
> 
> Tried CentOS 7.0 and 6.6. No difference. FreeBSD runs in my
> bhyve OK, but need Linux...
> 
> Alex

Hi Alex,

Ok I'm dumb — my earlier issue was a result of failing to
create the backing HDD. Now it boots and loads CentOS 6.6
fine. Try updating grub-bhyve?

Best,
Conrad
___
freebsd-virtualization@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
To unsubscribe, send any mail to 
"freebsd-virtualization-unsubscr...@freebsd.org"

Re: CentOS in bhyve

2014-11-20 Thread Allan Jude
On 2014-11-20 10:38, Allan Jude wrote:
> On 2014-11-20 10:34, Alex Povolotsky wrote:
>> Hello
>>
>> I'm trying to install CentOS in bhyve.
>>
>> I do everything accordnig to
>> https://www.freebsd.org/doc/handbook/virtualization-host-bhyve.html
>>
>> [18:30] backup:/<1>bhyve/oracle # cat /etc/bhyve/oracle/device.map
>> (hd0) /dev/zvol/data/oracle
>> (cd0) /home/bhyve/CentOS-6.6-x86_64-netinstall.iso
>>
>>
>> [18:30] backup:/<1>bhyve/oracle # grub-bhyve -r cd0 -m
>> /etc/bhyve/oracle/device.map -M 16G oracle
>>
>> grub> ls (cd0)/isolinux
>> boot.cat boot.msg grub.conf initrd.img isolinux.bin isolinux.cfg
>> memtest splash.jpg TRANS.TBL vesamenu.c32 vmlinuz
>>
>> grub> linux (cd0)/isolinux/vmlinuz
>> grub> initrd (cd0)/isolinux/initrd.img
>> error: you need to load the kernel first.
>> grub>
>>
>>
>> And that's all
>>
>> Tried CentOS 7.0 and 6.6. No difference. FreeBSD runs in my bhyve OK,
>> but need Linux...
>>
>> Alex
>> ___
>> freebsd-virtualization@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
>> To unsubscribe, send any mail to 
>> "freebsd-virtualization-unsubscr...@freebsd.org"
>>
> 
> If you read the handbook, it first does an 'ls' on the cd. You have to
> load files that actually exist, they might have slightly different names.
> 
> The instructions in the handbook were based on how the files were named
> on a CentOS 6.5 cd, 6.6 might be slightly different.
> 

Er, I see you did that, my bad.

-- 
Allan Jude



signature.asc
Description: OpenPGP digital signature


Re: CentOS in bhyve

2014-11-20 Thread Allan Jude
On 2014-11-20 10:34, Alex Povolotsky wrote:
> Hello
> 
> I'm trying to install CentOS in bhyve.
> 
> I do everything accordnig to
> https://www.freebsd.org/doc/handbook/virtualization-host-bhyve.html
> 
> [18:30] backup:/<1>bhyve/oracle # cat /etc/bhyve/oracle/device.map
> (hd0) /dev/zvol/data/oracle
> (cd0) /home/bhyve/CentOS-6.6-x86_64-netinstall.iso
> 
> 
> [18:30] backup:/<1>bhyve/oracle # grub-bhyve -r cd0 -m
> /etc/bhyve/oracle/device.map -M 16G oracle
> 
> grub> ls (cd0)/isolinux
> boot.cat boot.msg grub.conf initrd.img isolinux.bin isolinux.cfg
> memtest splash.jpg TRANS.TBL vesamenu.c32 vmlinuz
> 
> grub> linux (cd0)/isolinux/vmlinuz
> grub> initrd (cd0)/isolinux/initrd.img
> error: you need to load the kernel first.
> grub>
> 
> 
> And that's all
> 
> Tried CentOS 7.0 and 6.6. No difference. FreeBSD runs in my bhyve OK,
> but need Linux...
> 
> Alex
> ___
> freebsd-virtualization@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
> To unsubscribe, send any mail to 
> "freebsd-virtualization-unsubscr...@freebsd.org"
> 

If you read the handbook, it first does an 'ls' on the cd. You have to
load files that actually exist, they might have slightly different names.

The instructions in the handbook were based on how the files were named
on a CentOS 6.5 cd, 6.6 might be slightly different.

-- 
Allan Jude



signature.asc
Description: OpenPGP digital signature


CentOS in bhyve

2014-11-20 Thread Alex Povolotsky
Hello

I'm trying to install CentOS in bhyve.

I do everything accordnig to
https://www.freebsd.org/doc/handbook/virtualization-host-bhyve.html

[18:30] backup:/<1>bhyve/oracle # cat /etc/bhyve/oracle/device.map
(hd0) /dev/zvol/data/oracle
(cd0) /home/bhyve/CentOS-6.6-x86_64-netinstall.iso


[18:30] backup:/<1>bhyve/oracle # grub-bhyve -r cd0 -m
/etc/bhyve/oracle/device.map -M 16G oracle

grub> ls (cd0)/isolinux
boot.cat boot.msg grub.conf initrd.img isolinux.bin isolinux.cfg
memtest splash.jpg TRANS.TBL vesamenu.c32 vmlinuz

grub> linux (cd0)/isolinux/vmlinuz
grub> initrd (cd0)/isolinux/initrd.img
error: you need to load the kernel first.
grub>


And that's all

Tried CentOS 7.0 and 6.6. No difference. FreeBSD runs in my bhyve OK,
but need Linux...

Alex
___
freebsd-virtualization@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
To unsubscribe, send any mail to 
"freebsd-virtualization-unsubscr...@freebsd.org"


Re: How to update bhyve (supporting amd) from freebsd-10.1

2014-11-20 Thread Allan Jude
On 2014-11-20 01:40, Ilya Larin wrote:
> 
> Hi! 
> I know, that bhyve support AMD processors from version r273375..
> I have processor, that support RVI and Freebsd-10.1 (release).
> So.. How to update (patch/rebuild/something else) bhyve to r2773375 on my 
> fresh freebsd 10.1? Is it possible? 
> I just want to install several virtual freebsd )) 
> --
> With respect, Ilya
> ___
> freebsd-virtualization@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
> To unsubscribe, send any mail to 
> "freebsd-virtualization-unsubscr...@freebsd.org"
> 

Currently, you would have to upgrade to running FreeBSD 11-CURRENT
rather than 10.1-RELEASE to get that feature. Eventually, once the
feature is considered stable, it will be merged back to FreeBSD
10-STABLE (what will eventually be 10.2 some day).

This section of the handbook describes the steps required to upgrade
your system to FreeBSD 11-CURRENT:

https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/current-stable.html#current


-- 
Allan Jude



signature.asc
Description: OpenPGP digital signature


Re: RFC: Enabling VIMAGE in GENERIC

2014-11-20 Thread Craig Rodrigues
On Wed, Nov 19, 2014 at 4:33 PM, Bjoern A. Zeeb  wrote:

>
>
> https://people.freebsd.org/~bz/20100530-02.vnet.9.html
>
> The man page should be in that perforce branch you converted to github.
>


Thank you for pointing that out.  It is indeed in github:
https://github.com/rodrigc/bz-vimage/tree/master/share/man/man9

I committed it to HEAD:
https://lists.freebsd.org/pipermail/svn-src-all/2014-November/095037.html

I used the textproc/igor port ( http://www.wonkity.com/~wblock/igor/ ) to
check the syntax of the man page.
It's a great new utility written by wblock@ and I encourage anyone creating
or modifying man pages should
run it.

--
Craig
___
freebsd-virtualization@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization
To unsubscribe, send any mail to 
"freebsd-virtualization-unsubscr...@freebsd.org"