Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-21 Thread Rich Freeman
On Thu, Jan 17, 2013 at 9:51 AM, Ian Stakenvicius a...@gentoo.org wrote:
 On 16/01/13 09:55 PM, Rich Freeman wrote:
 SUBSYSTEM==tty, DRIVERS==pl2303, KERNELS==4-1:1.0,
 KERNEL==ttyUSB*, SYMLINK=mythser/rca1

 I'm not sure if rules are additive - if these symlinks would show
 up in addition to whatever other ones are created by other
 rules...


 I should look this up before making an authoritative response but I
 believe that  SYMLINK= would mean no, it's not additive.  If you
 changed that to SYMLINK+= then it would be additive.

That worked.

Looks like /dev/serial/by-path would accomplish what I ended up doing.
 The by-id directory only lists one of my two serial devices.  I
suspect this is because the devices are completely identical, aside
from being plugged into two different ports.

Rich



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-19 Thread William Hubbs
On Fri, Jan 18, 2013 at 10:07:42AM -0500, Ian Stakenvicius wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA256
 
 On 18/01/13 09:54 AM, William Hubbs wrote:
  On Fri, Jan 18, 2013 at 08:33:13AM -0500, Ian Stakenvicius wrote:
  -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
  
  On 18/01/13 07:24 AM, viv...@gmail.com wrote:
  Since for servers predictable names are useful and for desktop 
  (which usually have only one ethernet that never change) Is it 
  possible to set desktop profiles to still use ethX, and base 
  profile to use new naming scheme?
  
  For wireless situation may be different, many of them are 
  external, could wireless be managed differently?
  
  
  In short, no.  At least, not unless the functionality that is 
  currently a configure-time thing is changed into a 
  build-time/install-time thing controlled via a use flag.
  
  Actually,this is how I set you up by dropping the file in 
  /etc/udev/rules.d/80-net-name-slot.rules.
  
  Nothing changes on your system unless you remove this file and do
  not have 70-persistent-net.rules.
  
  William
  
 
 ..right, but default behaviour can't be changed automatically
 depending on what profile you're on, as vivo requested, since profiles
 don't control configuration (just use flags)

Right, and we have a policy against using use flags to control the
installation of configuration files.

vivo, what is your concern here exactly?

William



pgpnT__EsTSSb.pgp
Description: PGP signature


Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-19 Thread Francesco Riosa
2013/1/19 William Hubbs willi...@gentoo.org

 On Fri, Jan 18, 2013 at 10:07:42AM -0500, Ian Stakenvicius wrote:
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA256
 
  On 18/01/13 09:54 AM, William Hubbs wrote:
   On Fri, Jan 18, 2013 at 08:33:13AM -0500, Ian Stakenvicius wrote:
   -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
  
   On 18/01/13 07:24 AM, viv...@gmail.com wrote:
   Since for servers predictable names are useful and for desktop
   (which usually have only one ethernet that never change) Is it
   possible to set desktop profiles to still use ethX, and base
   profile to use new naming scheme?
  
   For wireless situation may be different, many of them are
   external, could wireless be managed differently?
  
  
   In short, no.  At least, not unless the functionality that is
   currently a configure-time thing is changed into a
   build-time/install-time thing controlled via a use flag.
  
   Actually,this is how I set you up by dropping the file in
   /etc/udev/rules.d/80-net-name-slot.rules.
  
   Nothing changes on your system unless you remove this file and do
   not have 70-persistent-net.rules.
  
   William
  
 
  ..right, but default behaviour can't be changed automatically
  depending on what profile you're on, as vivo requested, since profiles
  don't control configuration (just use flags)

 Right, and we have a policy against using use flags to control the
 installation of configuration files.

 vivo, what is your concern here exactly?

 William

 My concern was to make simple desktop users happy while leaving the
servers safe.
The answers given in the previous emails are satisfying, since they cover
exhaustively what is in place and what could be (or not) done.

Thanks,
Francesco


Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-18 Thread viv...@gmail.com

Il 09/01/2013 23:13, William Hubbs ha scritto:

All,

as you probably know by now, udev-197 has hit the tree.

This new version implements a new feature called predictable network
interface names [1], which I have currently turned off for live systems, 
because it
will require migration on the part of the user.

When you upgrade to this new version of udev, you will find a file
/etc/udev/rules.d/80-net-name-slot.rules on your system. It currently
has comments explaining what is happening.

As long as this file is in place, this feature is not activated. That is
why there is not a news item. If you do nothing, nothing changes.

What I would like to do is find some people who are willing to migrate
and report any issues they find.

I would like this to be the default for everyone at some point, so I
want to document the migration process and find out if there are any
bugs in tools because they expect the eth* names.

Thoughts?

William

[1]
http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames
Since for servers predictable names are useful and for desktop (which 
usually have only one ethernet that never change)
Is it possible to set desktop profiles to still use ethX, and base 
profile to use new naming scheme?


For wireless situation may be different, many of them are external, 
could wireless be managed differently?




Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-18 Thread Ian Stakenvicius
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 18/01/13 07:24 AM, viv...@gmail.com wrote:
 Since for servers predictable names are useful and for desktop
 (which usually have only one ethernet that never change) Is it
 possible to set desktop profiles to still use ethX, and base 
 profile to use new naming scheme?
 
 For wireless situation may be different, many of them are
 external, could wireless be managed differently?
 

In short, no.  At least, not unless the functionality that is
currently a configure-time thing is changed into a
build-time/install-time thing controlled via a use flag.
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.19 (GNU/Linux)

iF4EAREIAAYFAlD5TxkACgkQ2ugaI38ACPCQHAD7BEIoXLuskCfv/TllbCDaW94u
84t/PufZ03LJLjqzWlAA/Azuvil7oLWAzTxSDuHT+oheJsPvf4tBFmQUojSf+WIj
=FOCB
-END PGP SIGNATURE-



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-18 Thread William Hubbs
On Fri, Jan 18, 2013 at 08:33:13AM -0500, Ian Stakenvicius wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA256
 
 On 18/01/13 07:24 AM, viv...@gmail.com wrote:
  Since for servers predictable names are useful and for desktop
  (which usually have only one ethernet that never change) Is it
  possible to set desktop profiles to still use ethX, and base 
  profile to use new naming scheme?
  
  For wireless situation may be different, many of them are
  external, could wireless be managed differently?
  
 
 In short, no.  At least, not unless the functionality that is
 currently a configure-time thing is changed into a
 build-time/install-time thing controlled via a use flag.

Actually,this is how I set you up by dropping the file in
/etc/udev/rules.d/80-net-name-slot.rules.

Nothing changes on your system unless you remove this file and do not
have 70-persistent-net.rules.

William



pgpLqFtcVV6CJ.pgp
Description: PGP signature


Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-18 Thread Ian Stakenvicius
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 18/01/13 09:54 AM, William Hubbs wrote:
 On Fri, Jan 18, 2013 at 08:33:13AM -0500, Ian Stakenvicius wrote:
 -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
 
 On 18/01/13 07:24 AM, viv...@gmail.com wrote:
 Since for servers predictable names are useful and for desktop 
 (which usually have only one ethernet that never change) Is it 
 possible to set desktop profiles to still use ethX, and base 
 profile to use new naming scheme?
 
 For wireless situation may be different, many of them are 
 external, could wireless be managed differently?
 
 
 In short, no.  At least, not unless the functionality that is 
 currently a configure-time thing is changed into a 
 build-time/install-time thing controlled via a use flag.
 
 Actually,this is how I set you up by dropping the file in 
 /etc/udev/rules.d/80-net-name-slot.rules.
 
 Nothing changes on your system unless you remove this file and do
 not have 70-persistent-net.rules.
 
 William
 

..right, but default behaviour can't be changed automatically
depending on what profile you're on, as vivo requested, since profiles
don't control configuration (just use flags)


-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.19 (GNU/Linux)

iF4EAREIAAYFAlD5ZT4ACgkQ2ugaI38ACPCECQD6A78Wgm30Tx0RIfgblZhAu4d2
/2NFMtZng4JQlgmbCc8BAJZgPOgH3fxhSl+pRBpWFkZu/v5kwqxs+h+9ooBJZ5nG
=MhsO
-END PGP SIGNATURE-



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-17 Thread Samuli Suominen

On 17/01/13 04:49, Greg KH wrote:

On Wed, Jan 16, 2013 at 06:36:59AM -0500, Rich Freeman wrote:

On Tue, Jan 15, 2013 at 10:42 PM, Peter Stuge pe...@stuge.se wrote:

Rich Freeman wrote:

Not that anybody is taking requests, but it would be really handy
if serial ports were deterministically labeled.


Does /dev/serial/* solve the problem?


I don't see this directory at all on my system.


Do you have a usb-serial device plugged in?  You need a serial device
for it to show up, and you need to be using udev.

greg k-h



Right, I have 3G Huawei USB modem attached and I see:

$ ls /dev/serial/*
/dev/serial/by-id:
usb-Huawei_Technologies_HUAWEI_Mobile-if00-port0
usb-Huawei_Technologies_HUAWEI_Mobile-if03-port0
usb-Huawei_Technologies_HUAWEI_Mobile-if04-port0

/dev/serial/by-path:
pci-:00:1d.0-usb-0:1.2:1.0-port0  pci-:00:1d.0-usb-0:1.2:1.4-port0
pci-:00:1d.0-usb-0:1.2:1.3-port0




Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-17 Thread Ian Stakenvicius
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 16/01/13 09:55 PM, Rich Freeman wrote:
 SUBSYSTEM==tty, DRIVERS==pl2303, KERNELS==4-1:1.0, 
 KERNEL==ttyUSB*, SYMLINK=mythser/rca1
 
 I'm not sure if rules are additive - if these symlinks would show
 up in addition to whatever other ones are created by other
 rules...
 

I should look this up before making an authoritative response but I
believe that  SYMLINK= would mean no, it's not additive.  If you
changed that to SYMLINK+= then it would be additive.



-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.19 (GNU/Linux)

iF4EAREIAAYFAlD4D98ACgkQ2ugaI38ACPBvJQD/dFlhO8q9voNAMedF1TBIyEK8
/IXoXUjuWMxwaBrDlSwA/i8wB6BfkWyVopPDboikcl1K37hFrEhE3npaLbIhrtbX
=HA4k
-END PGP SIGNATURE-



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-17 Thread Peter Stuge
Tobias Klausmann wrote:
 It has been rather nifty that if I walk up to a random machine
 with exactly one NIC (that I've been asked to examine/fix), I
 _know_ that there will be eth0 and only that.

Only as long as that system hasn't seen *another* NIC first, if it
has persistent interface name udev rules.


//Peter



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-17 Thread Tobias Klausmann
Hi! 

On Thu, 17 Jan 2013, Peter Stuge wrote:
 Tobias Klausmann wrote:
  It has been rather nifty that if I walk up to a random machine
  with exactly one NIC (that I've been asked to examine/fix), I
  _know_ that there will be eth0 and only that.
 
 Only as long as that system hasn't seen *another* NIC first, if it
 has persistent interface name udev rules.

I was talking about strictly kernel order vs. predictable-net.
Persistent-net has VM-related downsides as pointed out in the
udev page about the whole thing.

Regards,
Tobias




Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-17 Thread William Hubbs
On Thu, Jan 17, 2013 at 07:44:39PM +0100, Tobias Klausmann wrote:
 Hi! 
 
 On Thu, 17 Jan 2013, Peter Stuge wrote:
  Tobias Klausmann wrote:
   It has been rather nifty that if I walk up to a random machine
   with exactly one NIC (that I've been asked to examine/fix), I
   _know_ that there will be eth0 and only that.
  
  Only as long as that system hasn't seen *another* NIC first, if it
  has persistent interface name udev rules.
 
 I was talking about strictly kernel order vs. predictable-net.
 Persistent-net has VM-related downsides as pointed out in the
 udev page about the whole thing.

The problem is the kernel names are not dependable.

If you have one network card right now, sure, it will be eth0.
But, suppose you buy another network card and plug it into the system.
Now you have no way to know that eth0 will refer to the card you think
it does.

With the predictable names, on my system for example, I know that enp1s5
will always refer to the same nic, even if I put a new one in the box.

William



pgpv8MI42FXdP.pgp
Description: PGP signature


Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-16 Thread Rich Freeman
On Tue, Jan 15, 2013 at 10:42 PM, Peter Stuge pe...@stuge.se wrote:
 Rich Freeman wrote:
 Not that anybody is taking requests, but it would be really handy
 if serial ports were deterministically labeled.

 Does /dev/serial/* solve the problem?

I don't see this directory at all on my system.

Rich



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-16 Thread Tobias Klausmann
Hi! 

On Tue, 15 Jan 2013, Greg KH wrote:
 So anyone who relies on network names right now to be deterministic, and
 you have more than one network device in your system, should seriously
 reconsider how they are naming their devices, as it will not work if you
 only rely on the kernel.
 
 You might have gotten lucky for the past 5 years, but you never know
 what could happen if you reboot today.  Seriously, I've seen it happen
 all the time.

It has been rather nifty that if I walk up to a random machine
with exactly one NIC (that I've been asked to examine/fix), I
_know_ that there will be eth0 and only that.

OTOH, maybe it's a good idea to make admins do ip link sh and
ip addr sh every time they examine a new computer -- it goes a
long way to root out wrong assumptions in that field.

Regards,
Tobias

PS: Do not use ifconfig. Ever. Except if there's no iproute. And
then you should only use ifconfig to enable downloading of
iproute :)



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-16 Thread Mike Gilbert
On Wed, Jan 16, 2013 at 10:19 AM, Tobias Klausmann klaus...@gentoo.org wrote:
 Hi!

 On Tue, 15 Jan 2013, Greg KH wrote:
 So anyone who relies on network names right now to be deterministic, and
 you have more than one network device in your system, should seriously
 reconsider how they are naming their devices, as it will not work if you
 only rely on the kernel.

 You might have gotten lucky for the past 5 years, but you never know
 what could happen if you reboot today.  Seriously, I've seen it happen
 all the time.

 It has been rather nifty that if I walk up to a random machine
 with exactly one NIC (that I've been asked to examine/fix), I
 _know_ that there will be eth0 and only that.

 OTOH, maybe it's a good idea to make admins do ip link sh and
 ip addr sh every time they examine a new computer -- it goes a
 long way to root out wrong assumptions in that field.

 Regards,
 Tobias

 PS: Do not use ifconfig. Ever. Except if there's no iproute. And
 then you should only use ifconfig to enable downloading of
 iproute :)


I would actually like to see iproute2 added to the system set.



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-16 Thread viv...@gmail.com

Il 16/01/2013 17:25, Mike Gilbert ha scritto:

On Wed, Jan 16, 2013 at 10:19 AM, Tobias Klausmann klaus...@gentoo.org wrote:

Hi!

On Tue, 15 Jan 2013, Greg KH wrote:

So anyone who relies on network names right now to be deterministic, and
you have more than one network device in your system, should seriously
reconsider how they are naming their devices, as it will not work if you
only rely on the kernel.

You might have gotten lucky for the past 5 years, but you never know
what could happen if you reboot today.  Seriously, I've seen it happen
all the time.

It has been rather nifty that if I walk up to a random machine
with exactly one NIC (that I've been asked to examine/fix), I
_know_ that there will be eth0 and only that.

OTOH, maybe it's a good idea to make admins do ip link sh and
ip addr sh every time they examine a new computer -- it goes a
long way to root out wrong assumptions in that field.

Regards,
Tobias

PS: Do not use ifconfig. Ever. Except if there's no iproute. And
then you should only use ifconfig to enable downloading of
iproute :)


I would actually like to see iproute2 added to the system set.

additionally (or indipendently) I would like to see it in bin instead of 
sbin





Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-16 Thread Michael Weber
On 01/16/2013 05:25 PM, Mike Gilbert wrote:
 It has been rather nifty that if I walk up to a random machine
 with exactly one NIC (that I've been asked to examine/fix), I
 _know_ that there will be eth0 and only that.
++

 I would actually like to see iproute2 added to the system set.
++

-- 
Michael Weber
Gentoo Developer
web: https://xmw.de/
mailto: Michael Weber x...@gentoo.org



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-16 Thread Greg KH
On Wed, Jan 16, 2013 at 06:36:59AM -0500, Rich Freeman wrote:
 On Tue, Jan 15, 2013 at 10:42 PM, Peter Stuge pe...@stuge.se wrote:
  Rich Freeman wrote:
  Not that anybody is taking requests, but it would be really handy
  if serial ports were deterministically labeled.
 
  Does /dev/serial/* solve the problem?
 
 I don't see this directory at all on my system.

Do you have a usb-serial device plugged in?  You need a serial device
for it to show up, and you need to be using udev.

greg k-h



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-16 Thread Rich Freeman
On Wed, Jan 16, 2013 at 9:49 PM, Greg KH gre...@gentoo.org wrote:
 On Wed, Jan 16, 2013 at 06:36:59AM -0500, Rich Freeman wrote:
 On Tue, Jan 15, 2013 at 10:42 PM, Peter Stuge pe...@stuge.se wrote:
  Rich Freeman wrote:
  Not that anybody is taking requests, but it would be really handy
  if serial ports were deterministically labeled.
 
  Does /dev/serial/* solve the problem?

 I don't see this directory at all on my system.

 Do you have a usb-serial device plugged in?  You need a serial device
 for it to show up, and you need to be using udev.

Yes, I have two plugged in and they're working fine.  However, perhaps
my custom rules are preventing them from showing up:
SUBSYSTEM==tty, DRIVERS==pl2303, KERNELS==4-1:1.0,
KERNEL==ttyUSB*, SYMLINK=mythser/rca1
SUBSYSTEM==tty, DRIVERS==pl2303, KERNELS==3-3:1.0,
KERNEL==ttyUSB*, SYMLINK=mythser/rca2

I'm not sure if rules are additive - if these symlinks would show up
in addition to whatever other ones are created by other rules, or if
these would be exclusive.  I hard-coded them to specific physical USB
ports so that they would be persistent.  If I plug them in elsewhere
they still get ttyUSBn devices, but no symlinks.

Rich



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-15 Thread Michael Weber
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi all,

I respect both sides of the discussion, because:

a) I once set up an old P3-700 with 5+1 eth cards in 6 different
networks as (bridging)router and truly benefited from the ability to
change a broken NIC - which happened quite often due scrap-metal
hardware - without ending up with martian packages, dhcp service on
the wrong places. But that was 1 incident in 10 years.

b) I use multi-nic servers, some with onboard and extention NICs

c) I tend to move my setups (esp. my laptop) around between different
hardware (nearly identical thinkpad R61/X61), and I _share_ my
installation with other/new users by cloning my disc (well rsync),
lets call this stageN installation.

d) I abuse an old multiport GBit card as GBit switch in my desktop,
besides an onboard one.

e) Some distro/driver constellations (archlinux?) tend to name their
wireless lan eth*.

This resulted in one decision per setup, whether or not to set
/etc/conf.d/udev's

 persistent_net_disable=yes persistent_cd_disable=yes

Either to avoid random names due hardware replacement (a) or changed
module loading order (b, inside debian initrd)
or to just use kernel names (eth0, wlan0) because no other cards
present (c) or the NIC drivers compiled into the kernel (d).
e) never happened to me.

It always bugged me to fix/reboot systems which needlessly end up with
eth1/wlan1 because some stupid pre-persistent_net_disable did not
recognize beeing run on an entirely different hardware.

So can we just watch out for the disable=yes setting and migrate it
during udev's pkg_install phases __and__ post an big fat warning
(elog, news item) on the wall?

I assume most linux users do not operate
servers/multi-nic/multi-networking setups, do not clone their setups
to other hardware.
Given that, these user will almost only see the 'my nics changed names
and i cannot connect to the internet' errors due some moronic or
unavoidable change in initrd/module loading.
That might be the driving force behind udev persistence in the first
place.

I'd be glad if I we respect setups w/ custom-built kernels, w/o
initrds, roots capable of choosing network-name-persistence iff
needed, users adoring the possibility of just dd(1)'ing installations
to new hardware without reinstalling or entering an new product code.

rant=1; And I'd like to avoid dozends of conversations like Yeah,
your setup/firewall/rouing/... command no longer works, eth0 is no
enp0xx2_at_home_lid_open or was it _bluetooth_turned_off. Didn't you
read the post on some derps mailing list. with haunted people not
knowing better than asking me about their problems.
Not to mention all online documentation/forum posts referring to eth0.
rant=0;

Keep up the good work!

   Michael

- -- 
Michael Weber
Gentoo Developer
web: https://xmw.de/
mailto: Michael Weber x...@gentoo.org
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iF4EAREIAAYFAlD1FmAACgkQknrdDGLu8JA68wD/Vuw8mL7O0T398QR7OetqDoLN
pQ7kJz9nveemDxw7o9MBAJSsyQ/DWIKLsqudXjlXhTPQEd0Od6vDBEL6IeFtXCjc
=AfSI
-END PGP SIGNATURE-



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-15 Thread Michael Weber
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi,

This can have serious security implications [1]

For whom?
The often cited end user not running any network service, not even sshd?
Without firewalls, routing or dhcp_d_?
Some avahi-discovery woodoo stuff unaware of network topology at all?

Maybe the M$/Windows mechanism asking the user to classify an newly
discovered network as (and shutting down network communication until
done so) isn't the worst solution at all.
(Well, that would need an dbus like service to pop up this box *hihi*)

[Generally speaking]

Linux developed from an highly specialized group of users to an broad
spectrum from I have control, leave my unique setup alone to I have
no idea what I'm doing/I'm unwilling to read/Lets sudo random search
results kinda users. Not all are enlightened.

Good part is the media coverage, money invested/wasted/...
Hard part is to find an compromise for all users.

So lets provide something that works w/o interaction or master
knowledge and not annoys the crap out of users - for all users.

[about NIC names]

Changing the netdev names way from eth*/wlan*/wwan*/ results in a hell
of obsolete documentation.
Opt-out urges users into either adapt their setups or disable the rules.
This LAN/WLAN eth0/eth1 mess could be fixed by assuring Wi-Fi NICs
being called wlan*, and running WPA stuff just there.

The upcoming UMTS/broadband interfaces are called wwan*? *duck*

Last point - as long as identification of LAN networks isn't handled
properly, the consistency of NIC names it the lesser security concern
for users carring around their laptops.

Enough!

   Michael

[1]
http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames

On 01/09/2013 11:13 PM, William Hubbs wrote:
 All,
 
 as you probably know by now, udev-197 has hit the tree.
 
 This new version implements a new feature called predictable
 network interface names [1], which I have currently turned off for
 live systems, because it will require migration on the part of the
 user.
 
 When you upgrade to this new version of udev, you will find a file 
 /etc/udev/rules.d/80-net-name-slot.rules on your system. It
 currently has comments explaining what is happening.
 
 As long as this file is in place, this feature is not activated.
 That is why there is not a news item. If you do nothing, nothing
 changes.
 
 What I would like to do is find some people who are willing to
 migrate and report any issues they find.
 
 I would like this to be the default for everyone at some point, so
 I want to document the migration process and find out if there are
 any bugs in tools because they expect the eth* names.
 
 Thoughts?
 
 William
 
 [1] 
 http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames

 
- -- 
Michael Weber
Gentoo Developer
web: https://xmw.de/
mailto: Michael Weber x...@gentoo.org
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iF4EAREIAAYFAlD1HmkACgkQknrdDGLu8JDLRQD+P0pO8z0WHnELVYOgQrEQi0wm
Xp1kG1pQhYTCN271T6EBAJvRSacaBE7hdIaTCRH7VUoeugWdktQaXE935kqhFCNV
=BWkO
-END PGP SIGNATURE-



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-15 Thread Ian Stakenvicius
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 15/01/13 04:16 AM, Michael Weber wrote:
 Hi,
 
 This can have serious security implications [1]
 
 For whom?

I think the idea there is that a user expects eth0 and eth1 to stay
the same, writes iptables rules on a per-interface basis to control
what they want, then update the kernel or make some other change
(upgraded udev, maybe? :D) which swaps them around and poof, the rules
they thought were correct don't end up protecting them they way they
assumed it would...

Not saying this is necessarily valid, just saying how I interpreted
their meaning of serious security implications.



 [about NIC names] ... Opt-out urges users into either adapt their
 setups or disable the rules.

Unless i'm mistaken (and i haven't done any sort of comprehensive
search so I could be), I believe the majority of package rollouts for
systemd-udev is going to provide an opt-in rather than an opt-out.  I
understand the general point here, that systemd-udev upstream perhaps
should also be defaulting to an opt-in, but there isn't a whole lot of
benefit in making that point on the gentoo ML.. :)
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.19 (GNU/Linux)

iF4EAREIAAYFAlD1YKMACgkQ2ugaI38ACPA8OgEAtK1Y3vHB3oBQyAdmZHYFZcBW
4g9ry2YFts41Zu1wuXcA/REe9lunWnLQ9w4uZNxvFnZ0LqEK9lMrOP0pJEr3UHAq
=06X2
-END PGP SIGNATURE-



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-15 Thread Ian Stakenvicius
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 15/01/13 03:42 AM, Michael Weber wrote:
 
 e) Some distro/driver constellations (archlinux?) tend to name
 their wireless lan eth*. [...] e) never happened to me.

It has for me, but not for a *LONG* time -- iirc it was prior to
2.6.16 and I think it was with an (externally compiled) ipw2100
driver.  Neither of which are supported now in general, and certainly
not with a current udev.

I think (e) has been sorted out long ago in the kernel.
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.19 (GNU/Linux)

iF4EAREIAAYFAlD1YbYACgkQ2ugaI38ACPC1vQEArVONIEOlLPrvd4PV7NnXszOg
AOTxveWpT5drCAV681sA/1WuQwKaqnvfoZReEedNk6Uthedp8dSSIVyvsYaEj0Ud
=0Hnr
-END PGP SIGNATURE-



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-15 Thread Greg KH
On Tue, Jan 15, 2013 at 08:58:59AM -0500, Ian Stakenvicius wrote:
 On 15/01/13 04:16 AM, Michael Weber wrote:
  Hi,
  
  This can have serious security implications [1]
  
  For whom?
 
 I think the idea there is that a user expects eth0 and eth1 to stay
 the same, writes iptables rules on a per-interface basis to control
 what they want, then update the kernel or make some other change
 (upgraded udev, maybe? :D) which swaps them around and poof, the rules
 they thought were correct don't end up protecting them they way they
 assumed it would...
 
 Not saying this is necessarily valid, just saying how I interpreted
 their meaning of serious security implications.

Yes, that is true.

And it's not udev that could rename the interface (hint, it wouldn't),
it's the kernel, it _never_ guarantees the same interface name every
time you boot.  You might just be getting lucky, but really, PCI busses
can be enumerated in different ways, USB devices can come and go and
initialize sometimes slower one boot from another, and lots of other
things can happen.

So anyone who relies on network names right now to be deterministic, and
you have more than one network device in your system, should seriously
reconsider how they are naming their devices, as it will not work if you
only rely on the kernel.

You might have gotten lucky for the past 5 years, but you never know
what could happen if you reboot today.  Seriously, I've seen it happen
all the time.

Hope this helps explain things a bit better.

greg k-h



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-15 Thread Rich Freeman
On Tue, Jan 15, 2013 at 1:58 PM, Greg KH gre...@gentoo.org wrote:
 And it's not udev that could rename the interface (hint, it wouldn't),
 it's the kernel, it _never_ guarantees the same interface name every
 time you boot.  You might just be getting lucky, but really, PCI busses
 can be enumerated in different ways, USB devices can come and go and
 initialize sometimes slower one boot from another, and lots of other
 things can happen.

Not that anybody is taking requests, but it would be really handy if
serial ports were deterministically labeled.

I ended up having to hack my udev rules to hard-code a symlink a USB
serial device to a specific hardware USB port.  It has broken once or
twice over the years, but has otherwise been reliable.  Otherwise, if
you have more than one USB serial interface there is no way to know
which one will end up with what minor number, which is a bummer if
they aren't hooked up to the same thing.

Rich



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-15 Thread Peter Stuge
Rich Freeman wrote:
 Not that anybody is taking requests, but it would be really handy
 if serial ports were deterministically labeled.

Does /dev/serial/* solve the problem?


//Peter



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-10 Thread William Hubbs
On Wed, Jan 09, 2013 at 11:33:42PM -0500, Rich Freeman wrote:
 On Wed, Jan 9, 2013 at 11:21 PM, Daniel Campbell dlcampb...@gmx.com wrote:
  So long as users retain the choice of keeping eth* or wlan*, no
  complaints from me. I (and others) came to Gentoo to get away from
  systemd, and this smells of a systemd-ism. Will eudev be pursuing this
  as well?
 
 Keep in mind that this is a udev announcement, not a eudev
 announcement.  Udev is generally going to follow upstream, so if
 avoiding systemd is your main goal in life you probably will want to
 stick with eudev, which might or might not adopt this feature.
 
For the record, I have no plans of forcing systemd on anyone. I still
maintain OpenRC and plan to continue doing so.

As described on the wiki, it is very simple to turn this feature off
either by adding your own persistent rules in /etc/udev/rules.d or by
overriding the 80-net-slot-name.rules file by putting a file in
/etc/udev/rules.d with that name. So, how is this a systemd-ism? a lot
of software has defaults that you can reconfigure.

William


pgpNpURpjZgz8.pgp
Description: PGP signature


Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-10 Thread Ian Stakenvicius
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 09/01/13 11:21 PM, Daniel Campbell wrote:
 [1] 
 http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames

 
 
 So long as users retain the choice of keeping eth* or wlan*, no 
 complaints from me. I (and others) came to Gentoo to get away from 
 systemd, and this smells of a systemd-ism. Will eudev be pursuing
 this as well?
 

The eudev team hasn't discussed it yet, but it's on the agenda for our
next meeting.  I believe that we will be implementing the
functionality (probably by default) in the eudev software package, but
we will not be enabling this by default in the eudev ebuilds (at
least, not any time soon).

Also of note, though, is that the eudev package (and ebuild) will
still have available (although not by default) the old legacy
persistent-net functionality.  I am planning to update the rules
generator for this to use the same attributes as the new method
though, which should be theoretically more reliable than the old
attributes.

- ---

Finally, something that wasn't mentioned yet -- if a user has / still
uses a 75-persistent-net.rules from old udev's, or any custom
iface-naming rules, then the new 80-net-name-slot.rules will also not
take effect on any of the interfaces that were named in these other rules.

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.19 (GNU/Linux)

iF4EAREIAAYFAlDuydMACgkQ2ugaI38ACPDaLwD+JCn43am7AkSkz4/7d/IisXAp
U9wm1hD2hqjAe2RjAQUBAKGwBTRAcDDx5od26ip99svgnWu6TQw2DKSICWq8BGQd
=T9fH
-END PGP SIGNATURE-



[gentoo-dev] call for testers: udev predictable network interface names

2013-01-09 Thread William Hubbs
All,

as you probably know by now, udev-197 has hit the tree.

This new version implements a new feature called predictable network
interface names [1], which I have currently turned off for live systems, 
because it
will require migration on the part of the user.

When you upgrade to this new version of udev, you will find a file
/etc/udev/rules.d/80-net-name-slot.rules on your system. It currently
has comments explaining what is happening.

As long as this file is in place, this feature is not activated. That is
why there is not a news item. If you do nothing, nothing changes.

What I would like to do is find some people who are willing to migrate
and report any issues they find.

I would like this to be the default for everyone at some point, so I
want to document the migration process and find out if there are any
bugs in tools because they expect the eth* names.

Thoughts?

William

[1]
http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames


pgpulsp4FiePK.pgp
Description: PGP signature


Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-09 Thread Christopher Head
On Wed, 9 Jan 2013 16:13:10 -0600
William Hubbs willi...@gentoo.org wrote:

 http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames

This seems like a good thing for some systems. Will there be a news
item when 197 (or greater) goes stable informing people that the option
is available and if they want to use it they can do so? In my (ordinary
user) opinion, there should be.

Chris



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-09 Thread William Hubbs
On Wed, Jan 09, 2013 at 02:59:10PM -0800, Christopher Head wrote:
 On Wed, 9 Jan 2013 16:13:10 -0600
 William Hubbs willi...@gentoo.org wrote:
 
  http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames
 
 This seems like a good thing for some systems. Will there be a news
 item when 197 (or greater) goes stable informing people that the option
 is available and if they want to use it they can do so? In my (ordinary
 user) opinion, there should be.

There will definitely be a newsitem before this hits stable.

Once we figure out what the migration will involve and if there are any
bugs we need to worry about, I want to discuss making this the default
setup before we go stable.

There is a way for users to opt out if we default this to on, but I
think the new naming scheme has advantages over the traditional eth*
wlan* etc names.

I did the migration myself on my box this afternoon in just a minute or
two; it wasn't painful at all.

William



pgphcw4Aq3cCV.pgp
Description: PGP signature


Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-09 Thread Christopher Head
On Wed, 9 Jan 2013 18:13:21 -0600
William Hubbs willi...@gentoo.org wrote:

 There is a way for users to opt out if we default this to on, but I
 think the new naming scheme has advantages over the traditional eth*
 wlan* etc names.

I think it should be taken with a grain of salt. The page mentions how
it lets you replace a failed NIC without losing its name. But given a
simple computer with just one NIC, if the NIC fails and is replaced
(perhaps by a different type of NIC in a different slot, or perhaps an
onboard NIC disabled in the BIOS and replaced by an add-in), the name
could change, while the kernel’s automatically assigned name will not:
eth0 (this also applies to a computer with one Ethernet NIC and one
wifi NIC: eth0 and wlan0). That fact was never mentioned on the wiki
page, even though it applies to a heck of a lot of systems. Perhaps
something to include when the Gentoo docs are put together, as part of
the balance of reasons to choose one way or the other?

Chris



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-09 Thread Daniel Campbell
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/09/2013 04:13 PM, William Hubbs wrote:
 All,
 
 as you probably know by now, udev-197 has hit the tree.
 
 This new version implements a new feature called predictable
 network interface names [1], which I have currently turned off for
 live systems, because it will require migration on the part of the
 user.
 
 When you upgrade to this new version of udev, you will find a file 
 /etc/udev/rules.d/80-net-name-slot.rules on your system. It
 currently has comments explaining what is happening.
 
 As long as this file is in place, this feature is not activated.
 That is why there is not a news item. If you do nothing, nothing
 changes.
 
 What I would like to do is find some people who are willing to
 migrate and report any issues they find.
 
 I would like this to be the default for everyone at some point, so
 I want to document the migration process and find out if there are
 any bugs in tools because they expect the eth* names.
 
 Thoughts?
 
 William
 
 [1] 
 http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames

 
So long as users retain the choice of keeping eth* or wlan*, no
complaints from me. I (and others) came to Gentoo to get away from
systemd, and this smells of a systemd-ism. Will eudev be pursuing this
as well?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJQ7kHbAAoJEJUrb08JgYgHJ20H/20G6Pkq+hIB1546UKR/Kti+
VmxaFdi5msWjtor6xzzBaVsaWjdp1ovCHqL1EeuIDg6JUIpeQ2HiAlj9OqaP
9Kg1xATiTw8TKOiGF4r6J1ysfDgFI/K/5CCsMr1Eea6+8m6EUI+yOR5K5xSXZbkR
9Pti3JIrE6t3EkY1EdWguPOGRiiSshjbessNbIzWe/SM/92aDbylQp0ut4DjXn7F
XZyPQ+mCzU2tNWVq8HYuqg6xoO1izk6huYWc9jjxwGXfdewxPN6ebng7uDRhIQSK
QR5dSLpoLEkrC5aZqmtuz2v5zqxgJWz30uNZl6JG8dCrdAntB9JmYwFTVkpekHY=
=6v04
-END PGP SIGNATURE-



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-09 Thread Rich Freeman
On Wed, Jan 9, 2013 at 11:21 PM, Daniel Campbell dlcampb...@gmx.com wrote:
 So long as users retain the choice of keeping eth* or wlan*, no
 complaints from me. I (and others) came to Gentoo to get away from
 systemd, and this smells of a systemd-ism. Will eudev be pursuing this
 as well?

Keep in mind that this is a udev announcement, not a eudev
announcement.  Udev is generally going to follow upstream, so if
avoiding systemd is your main goal in life you probably will want to
stick with eudev, which might or might not adopt this feature.

You might want to take discussion of eudev planned features to its
dedicated list.

Rich



Re: [gentoo-dev] call for testers: udev predictable network interface names

2013-01-09 Thread Daniel Campbell
On 01/09/2013 10:33 PM, Rich Freeman wrote:
 On Wed, Jan 9, 2013 at 11:21 PM, Daniel Campbell dlcampb...@gmx.com wrote:
 So long as users retain the choice of keeping eth* or wlan*, no
 complaints from me. I (and others) came to Gentoo to get away from
 systemd, and this smells of a systemd-ism. Will eudev be pursuing this
 as well?
 
 Keep in mind that this is a udev announcement, not a eudev
 announcement.  Udev is generally going to follow upstream, so if
 avoiding systemd is your main goal in life you probably will want to
 stick with eudev, which might or might not adopt this feature.
 
 You might want to take discussion of eudev planned features to its
 dedicated list.
 
 Rich
 

My apologies. It wasn't my intent to derail the discussion with my
simple yes/no question.