[leaf-user] A few notes about the upcoming Bering-uClibc 6.1.0 release

[kp kirchdoerfer via leaf-user]

Hi all;

today 6.1.0-beta1 has been made available in the FRS

https://sourceforge.net/projects/leaf/files/Bering-uClibc/6.1.0-beta1/

LEAF Bering-uClibc  6.1.0 will be based on uClibc-ng 1.0.25, gcc 5.4.0, kernel 
4.9, perl 5.26.0 and busybox 1.27.

The full blown libiconv package (approx 650kb) has been replaced with uClibc-
ng  implementation of libiconv (adding a few kb to initrd).

initrd merged root.lrp and config.lrp into initrd.lrp

In addition to Raspberry1 support for Raspberry3 has been added. The 
Raspberry3 tarball may also work with Raspberry Pi2, though this hasn't been 
tested.

Also it provides numerous  packages updated to latest upstream versions and 
feature improvements (e.g. shorewall, tor, bind, openvpn, added ldap support 
to dhcpd).

Also new packages has been added:

libndp -   a library which provides a wrapper for IPv6 Neighbor Discovery 
Protocol and   a tool named ndptool for sending and receiving NDP messages

libaio -   Library for doing asynchronous I/O

libtirpc - The libtirpc package contains libraries that support programs that 
use the Remote Procedure Call (RPC) API.

rpcbind - The rpcbind program is a replacement for portmap. It is required for 
import or export of Network File System (NFS) shared directories.

sqlite -  SQLite is a self-contained, high-reliability, embedded, full-
featured, public-domain, SQL database engine; required for NFSv4 support.

ca-certificates -  ca-certificates provides a list of Certification 
Authorities. 
It is based on the Debian package, which itself provides the ones from Mozilla 

dehydrated - ACME client implementation for Let's Encrypt 
(https://letsencrypt.org/)

The default http[s] daemon mini_httpd[s] has been replaced with lighttpd. 
Therefor lighttpd has been adjusted to run webconf.
A note here: by default lighttpd/webconf are installed without ssl support.
To add ssl support you need to create your own certificates in 
/etc/ssl/private, change the lighttpd configuration and save the configuration.

A short recipe is given, if you run "help lighttpd" on the commandline.

Using lighttpd with ssl is flexible, so you are not bound to the default name 
"lighttpd.pem", you may create your keys elsewhere, you may even try to use 
letsencrypt with the dehydrated package to create a key supported by your 
browser out-of-the box. (If someone works out how to use that, a documentation 
for the Bering-uClib  User Guide is welcome :))

Speaking about the User Guide, there are still gaps in the 6.1 version 

https://bering-uclibc.zetam.org/wiki/Bering-uClibc_6.x_-_User_Guide

if you are capable to fill those or like  to add a new chapter, let us know, 
any help is welcome.

For more information see about the changes for  LEAF Bering-uClibc 6.1 :

https://bering-uclibc.zetam.org/wiki/Bering-uClibc_6.1.x_-_Changelog

Feedback and suggestions are welcome.

thx for your attention
kp

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] 6.04 Release

[Robert K Coffman Jr. -Info From Data Corp.]

FYI,

I've been running the 6.04 release for several days across 4 machines 
and all seems well.


My primary packages are dnsmasq and openvpn.  The issue I had with ntp 
segfaulting is not occurring with this release.


- Bob


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] sourceforge message

[Trev Peterson]

I also received such.  I'm not sure but I suspect this gives SF a
chance to make those of us on SF for a long time accept their new terms
of service, which allows them to sell my personal information should SF
be bought again, see section C, subsection f.  Still undecided whether
the extra spam/privacy loss is worth it, especially after the malware
dowloading incident a year or two ago.  I like the leaf lists but just
don't trust SF so much these days.

Trev

On Sat, 2017-06-10 at 00:01 -0700, Dave Dillabough wrote:
> See: https://sourceforge.net/blog/sourceforge-project-e-mail-policy-u
> pdate/
> Boris wrote:
> > 
> > Am 10.06.2017 um 08:15 schrieb Boris:
> > > 
> > > Am 10.06.2017 um 03:07 schrieb Victor McAllister:
> > > > 
> > > > got a link from sourceforge to click if want to continue
> > > > getting
> > > > e-mails
> > > > from LEAF. I distrust clicking on links. Is this legitimate?
> > > > 
> > > > Victor
> > > > 
> > > Never experienced sourceforge does so...
> > > 
> > > Boris
> > > 
> > Onve I wrote that, I got the same message - first time ever!
> > Doesn't
> > look malicious
> > 
> > Boris
> > 
> > 
> > -
> > -
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> > -
> > ---
> > leaf-user mailing list: leaf-user@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/leaf-user
> > Support Request -- http://leaf-project.org/
> > 
> ---
> ---
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ---
> -
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
-- 
Trev Peterson
Advanced Reality
Email: t...@advanced-reality.com
Phone: +1 847 406 9018




--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] sourceforge message

[Dave Dillabough]

See: https://sourceforge.net/blog/sourceforge-project-e-mail-policy-update/
Boris wrote:
> Am 10.06.2017 um 08:15 schrieb Boris:
>> Am 10.06.2017 um 03:07 schrieb Victor McAllister:
>>> got a link from sourceforge to click if want to continue getting
>>> e-mails
>>> from LEAF. I distrust clicking on links. Is this legitimate?
>>>
>>> Victor
>>>
>>
>> Never experienced sourceforge does so...
>>
>> Boris
>>
>
> Onve I wrote that, I got the same message - first time ever! Doesn't
> look malicious
>
> Boris
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] sourceforge message

[Boris]

Am 10.06.2017 um 08:15 schrieb Boris:
> Am 10.06.2017 um 03:07 schrieb Victor McAllister:
>> got a link from sourceforge to click if want to continue getting e-mails
>> from LEAF. I distrust clicking on links. Is this legitimate?
>>
>> Victor
>>
> 
> Never experienced sourceforge does so...
> 
> Boris
> 

Onve I wrote that, I got the same message - first time ever! Doesn't
look malicious

Boris


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] sourceforge message

[Boris]

Am 10.06.2017 um 03:07 schrieb Victor McAllister:
> got a link from sourceforge to click if want to continue getting e-mails
> from LEAF. I distrust clicking on links. Is this legitimate?
> 
> Victor
> 

Never experienced sourceforge does so...

Boris


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] sourceforge message

[Victor McAllister]

got a link from sourceforge to click if want to continue getting e-mails 
from LEAF. I distrust clicking on links. Is this legitimate?


Victor

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] Telekom BNG

[Boris]

Am 31.05.2017 um 16:39 schrieb kp kirchdoerfer:
> Hi Boris;
> 
> Am Mittwoch, 31. Mai 2017, 11:12:01 schrieb Boris:
>> Hej Leaflist,
>>
>>
>> does anybody use a leafbox connected to a Telekom BNG - Account?
>>
>> One of my locations lost connection a few days ago - without any notice
>> from Telekom but the account was changed from DSL/ISDN to DSL/VoIP
>> around christmas 2016.
>> I changed almost every component and still have no success starting pppoe.
>> Possibly Telekom switched to BNG !?
> 
> If the account has been switched can be detected on the Telekom KundenCenter
> 
> https://telekomhilft.telekom.de/t5/Telefonie-Internet/BNG-Anschluss-erkennen/m-p/1783045#M567199
> 
>> With BNG the router shall tag the WAN interface with VLAN 7. Is there
>> any knowledge about that??
> 
> This is something T-Entertain users needs anyway.
> 
> Add 
> vlan
> 
> to /etc/modules so it will loaded (don't know if "8021q"  is also needed in 
> this case, but if so, add it /etc/modules as well)
> 
> Change /etc/network/interfaces
> 
> auto eth0.7   
>   
> iface eth0.7 inet manual  
>   
> post-down vconfig rem eth0.7  
>   
> vlan_raw_device eth0  
> 
> auto ppp0 
>   
> iface ppp0 inet ppp   
>   
> pre-up ip link set eth0 up
>   
> pre-up ip link set eth0.7 up  
>   
> pre-up ip link set eth0.8 up  
>   
> provider dsl-provider 
> 
> Change /etc/ppp/peers/dsl-provider to use VLAN 7 on eth0
> 
> plugin /usr/lib/pppd/rp-pppoe.so eth0.7
> 
> 
> hth
> kp
> 

Hej KP,

thanks very much for this hint! Next beer is on my bill!

Boris


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] How to set MAC address

[Jean-Roch Blais]

Hello Sadam, list…

> Le 31 mai 2017 à 06:46, sadam  a écrit :
> 
> Dear Jean-Roch, God bless you for that answer
……..
>  
> Yesterday, when I went to home, I hadn't internet. I was looking for the 
> ifname as Erich said and for mactab as Robert said. I was looking  at my 
> firewall. I haven't that of course. I guessed that it must be in some 
> package. Which I haven't. Which name I don't know.
> Today I was looking for that. In my work. In net. When my boss didn't see 
> that . But there is to many different informations. To many 
> for newbe.

always be careful with the boss :-) ! no-matter where you live...
>  
> I found, thanks to you, the bbnameif.lrp. Quickly. An I found an FAQ for that 
> too. Now I have it. On my pen. Package and FAQ page. In home I must prepare 
> new CD with added bbnameif.lrp package. Yes, CD - my firewall starts 
> traditionaly. From CD. After that I will try to use the busybox nameif. I 
> hope without troubles.
>  
If your motherboard gives you that problem, it probably means it is not too 
old, and it might even be capable of booting from a USB key (pen drive that you 
have…) you should check this, it then becomes much easier to make changes to 
your packages. Follow the instructions in the Wiki to make your bootable USB 
key, this works. Personally, I never used a CD as a boot media, I grant you it 
is very secure, but it is cumbersome. I personnally went from Floppy, to 
Compact Flash card with IDE adapter, and finally to USB key. I guaranty the 
nameif will work. Keep at it, through this leaf firewall you end-up learning 
the best OS ever: open, free and fun Linux !
Have fun then !

jrb.

> -- 
> Sławek


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] How to set MAC address

[Jean-Roch Blais]

Hello Bob, List,


> Le 31 mai 2017 à 08:17, Robert K Coffman Jr. -Info From Data Corp. 
>  a écrit :
> 
>> you have to load the “ bbnameif.lrp “ package, by adding it in your list of 
>> packages to load in leaf.cfg, 
> I hate that I reinvented the wheel on this one!  I was going to suggest my 
> script as a package but nobody else seemed to have run into this.
> 
Well your solution is a good one, don’t feel too bad ! I did somewhat the same 
thing about 4 or 5 years ago, when I switched to using higher end motherboards, 
Pentium 686’s. It was then Eric Spakman who pointed to me the bbnameif.lrp, 
after I complained about this surprising random behavior and showed him my own 
script :-). This is what happen when there is a lack of documentation, but 
fortunately there are the mailing lists… where we meet great guys. I’m using a 
new APU2C2 efficient firewall now, and this problem does not appear. 

Have a good one !

jrb.

> - Bob
> 
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] How to set MAC address

[Robert K Coffman Jr. -Info From Data Corp.]

you have to load the “ bbnameif.lrp “ package, by adding it in your list of packages to load in leaf.cfg, 
I hate that I reinvented the wheel on this one!  I was going to suggest 
my script as a package but nobody else seemed to have run into this.


- Bob


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] How to set MAC address

[sadam]

Dear Jean-Roch, God bless you for that answer
 
W dniu 2017-05-30 20:06:44 użytkownik Jean-Roch Blais  
napisał:
Hello Sadam, List, 
<...> Well as Erich says it is a known issue, my pentium motherboards were 
doing that too, which is very very bad !… but there is an undocumented fix for 
this, that works very well. You asked for a newbe explanation so here is one:
 
you have to load the “ bbnameif.lrp “ package,
 
Yesterday, when I went to home, I hadn't internet. I was looking for the ifname 
as Erich said and for mactab as Robert said. I was looking  at my firewall. I 
haven't that of course. I guessed that it must be in some package. Which I 
haven't. Which name I don't know.
Today I was looking for that. In my work. In net. When my boss didn't see that 
. But there is to many different informations. To many for newbe.
 
I found, thanks to you, the bbnameif.lrp. Quickly. An I found an FAQ for that 
too. Now I have it. On my pen. Package and FAQ page. In home I must prepare new 
CD with added bbnameif.lrp package. Yes, CD - my firewall starts traditionaly. 
From CD. After that I will try to use the busybox nameif. I hope without 
troubles.
 
--
Sławek
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] Telekom BNG

[Bodo Meissner]

Zitat von Boris :

[...]

the account was changed from DSL/ISDN to DSL/VoIP
around christmas 2016.


Did they also switch from Annex-B to Annex-J at this time?
Or maybe they switched this now?


I changed almost every component and still have no success starting pppoe.


What exactly does "no success starting pppoe" mean?
Are there any error messages?

You might get more debug output when you run a separate pppoe binary  
instead of a library in pppd.


Bodo


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] Telekom BNG

[Boris]

Hej Leaflist,


does anybody use a leafbox connected to a Telekom BNG - Account?

One of my locations lost connection a few days ago - without any notice
from Telekom but the account was changed from DSL/ISDN to DSL/VoIP
around christmas 2016.
I changed almost every component and still have no success starting pppoe.
Possibly Telekom switched to BNG !?

With BNG the router shall tag the WAN interface with VLAN 7. Is there
any knowledge about that??

Thanks in advance,


Boris

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] How to set MAC address

[jean-roch blais]

Hello Erich,
Well that is very funny, and I'm happy my meager contribution made you
remember that :-) ! Incidentally KP asked me to document certain subjects
in LEAF, based on the fights I had to convince the system to do what I
want... :-). I will do some of that eventually, this bbnameif.lrp was one
of them fights ...
I have been fairly busy lately setting up my "Home Assistant" home
automation package on a RPI2 and some cheap Sonoff modules. It works great
so far,  so I won't be needing the aging heyu.lrp package anymore.

bye !

On Tue, May 30, 2017 at 6:42 PM, Erich Titl  wrote:

> Hi jrb
>
> Am 30.05.2017 um 14:06 schrieb Jean-Roch Blais:
>
>> Hello Sadam, List,
>>
>> Le 29 mai 2017 à 12:32, sadam  a écrit :
>>>
>>> Hello,
>>>
>>> I have leaf uClibc firewall. At home. With two net interfaces. So I have:
>>>
>>>
>>> iface eth0 inet dhcp
>>> and
>>> iface eth1 inet static.
>>>
>>> And I have two MAC numbers, of course. Let's say MAC1 and MAC2.
>>> After starting my machine i have:
>>>
>>> eth0 with MAC1 and
>>> eth1 with MAC2.
>>>
>>> Sometimes. Because sometimes I have:
>>>
>>> eth0 with MAC2 and
>>> eth1 with MAC1.
>>>
>>> I don't know why.
>>>
>> Well as Erich says it is a known issue, my pentium motherboards were
>> doing that too, which is very very bad !… but there is an undocumented fix
>> for this, that works very well. You asked for a newbe explanation so here
>> is one:
>>
>> you have to load the “ bbnameif.lrp “ package, by adding it in your list
>> of packages to load in leaf.cfg, like ( LRP="root license local bbnameif
>> dhcpcd keyboard shorwall shorwall6 dnsmasq dropbear mhttpd bbntpd heyu
>> wakelan openssl webconf curl”). Once done, edit /etc/mactab.tmp with
>> temporary named nic, like:
>>
>
> Great, I completely forgot that it was a separate package although I am
> the author ;-)
>
> cheers
>
> ET
>
>
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] How to set MAC address

[Erich Titl]

Hi jrb

Am 30.05.2017 um 14:06 schrieb Jean-Roch Blais:

Hello Sadam, List,


Le 29 mai 2017 à 12:32, sadam  a écrit :

Hello,

I have leaf uClibc firewall. At home. With two net interfaces. So I have:


iface eth0 inet dhcp
and
iface eth1 inet static.

And I have two MAC numbers, of course. Let's say MAC1 and MAC2.
After starting my machine i have:

eth0 with MAC1 and
eth1 with MAC2.

Sometimes. Because sometimes I have:

eth0 with MAC2 and
eth1 with MAC1.

I don't know why.

Well as Erich says it is a known issue, my pentium motherboards were doing that 
too, which is very very bad !… but there is an undocumented fix for this, that 
works very well. You asked for a newbe explanation so here is one:

you have to load the “ bbnameif.lrp “ package, by adding it in your list of packages 
to load in leaf.cfg, like ( LRP="root license local bbnameif dhcpcd keyboard 
shorwall shorwall6 dnsmasq dropbear mhttpd bbntpd heyu wakelan openssl webconf 
curl”). Once done, edit /etc/mactab.tmp with temporary named nic, like:


Great, I completely forgot that it was a separate package although I am 
the author ;-)


cheers

ET



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] How to set MAC address

[Jean-Roch Blais]

Hello Sadam, List, 

> Le 29 mai 2017 à 12:32, sadam  a écrit :
> 
> Hello,
>  
> I have leaf uClibc firewall. At home. With two net interfaces. So I have:
>  
>  
> iface eth0 inet dhcp
> and
> iface eth1 inet static.
>  
> And I have two MAC numbers, of course. Let's say MAC1 and MAC2.
> After starting my machine i have:
>  
> eth0 with MAC1 and
> eth1 with MAC2.
>  
> Sometimes. Because sometimes I have:
>  
> eth0 with MAC2 and
> eth1 with MAC1.
>  
> I don't know why.
Well as Erich says it is a known issue, my pentium motherboards were doing that 
too, which is very very bad !… but there is an undocumented fix for this, that 
works very well. You asked for a newbe explanation so here is one: 

you have to load the “ bbnameif.lrp “ package, by adding it in your list of 
packages to load in leaf.cfg, like ( LRP="root license local bbnameif dhcpcd 
keyboard shorwall shorwall6 dnsmasq dropbear mhttpd bbntpd heyu wakelan openssl 
webconf curl”). Once done, edit /etc/mactab.tmp with temporary named nic, like:

eth0a  aa:bb:cc:dd:ee:ff  #(MAC1…)
eth1a  gg:hh:ii:jj:kk:ll   #(MAC2…)

and in /etc/mactab, you put your final choice:

eth0   aa:bb:cc:dd:ee:ff
eth1   gg:hh:ii:jj:kk:ll

and save your config with “ lrcfg s) " or use the web interface “ Backup 
Packages “. This worked for me… 

have fun
jrb.



>  
> I have a problem. My internet provider detect he's clients machines via MAC 
> addres.
> And isn't possible to give him my two MAC's. Only one and I must decide which 
> one.
>  
> I found on forums two solutions
>  
> First:
> iface eth0 inet static
> address 12.34.56.78
> netmask 255.255.255.0
> broadcast 12.34.56.255
> gateway 12.34.56.78.1
> hwaddress ether address 00:00:00:00:00:00
>  
> and second:
> iface eth0 inet dhcp
> pre-up ip link set address  eth0 up
> But no one of them works at my situation. Firewall starts, I can see modified 
> by own
> hands configuration file with "new MAC" and "old MAC" after >ip addr.
>  
> Firewall has shorewall. Mayby I must modify shorewall settings.
>  
> I'm not linux user. Please write me exact solution. As for newbe.
>  
>  
> --
> Sławek
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] How to set MAC address

[Robert K Coffman Jr. -Info From Data Corp.]

I place the following script in /etc/network/if-pre-up.d.  It renames 
the interfaces, and then renames them to what I want.  Make to sure to 
add this script to your /var/lib/lrpkg/local.local file so that it is 
retained!


- Bob


=
#!/bin/sh

#Only run once.  lo comes up first, so this
#guarantees the other interfaces are down.
if [ "$IFACE" == "lo" ]; then
 rm /etc/mactab
 echo change_eth0 00:0c:29:e2:7b:6f  > /etc/mactab
 echo change_eth1 00:0c:29:e2:7b:79 >> /etc/mactab
 echo change_eth2 00:0c:29:e2:7b:83 >> /etc/mactab

 /sbin/nameif

 rm /etc/mactab
 echo eth0 00:0c:29:e2:7b:6f  > /etc/mactab
 echo eth1 00:0c:29:e2:7b:79 >> /etc/mactab
 echo eth2 00:0c:29:e2:7b:83 >> /etc/mactab

 /sbin/nameif

fi
=

- Bob

On 5/29/2017 12:32 PM, sadam wrote:

eth0 with MAC2 and
eth1 with MAC1.
  
I don't know why.



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] How to set MAC address

[Erich Titl]

Hi

Am 29.05.2017 um 12:32 schrieb sadam:

Hello,

I have leaf uClibc firewall. At home. With two net interfaces. So I have:


iface eth0 inet dhcp
and
iface eth1 inet static.

And I have two MAC numbers, of course. Let's say MAC1 and MAC2.
After starting my machine i have:

eth0 with MAC1 and
eth1 with MAC2.

Sometimes. Because sometimes I have:

eth0 with MAC2 and
eth1 with MAC1.

I don't know why.


Because the kernel is built that way :-(

There is a solution though, look for ifname in the archives, I believe 
we compiled it into busybox sometime in the past.


cheers

ET



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] How to set MAC address

[sadam]

Hello,
 
I have leaf uClibc firewall. At home. With two net interfaces. So I have:
 
 
iface eth0 inet dhcp
and
iface eth1 inet static.
 
And I have two MAC numbers, of course. Let's say MAC1 and MAC2.
After starting my machine i have:
 
eth0 with MAC1 and
eth1 with MAC2.
 
Sometimes. Because sometimes I have:
 
eth0 with MAC2 and
eth1 with MAC1.
 
I don't know why.
 
I have a problem. My internet provider detect he's clients machines via MAC 
addres.
And isn't possible to give him my two MAC's. Only one and I must decide which 
one.
 
I found on forums two solutions
 
First:
iface eth0 inet static
    address 12.34.56.78
    netmask 255.255.255.0
    broadcast 12.34.56.255
    gateway 12.34.56.78.1
    hwaddress ether address 00:00:00:00:00:00
 
and second:
iface eth0 inet dhcp
    pre-up ip link set address  eth0 up
But no one of them works at my situation. Firewall starts, I can see modified 
by own
hands configuration file with "new MAC" and "old MAC" after >ip addr.
 
Firewall has shorewall. Mayby I must modify shorewall settings.
 
I'm not linux user. Please write me exact solution. As for newbe.
 
 
--
Sławek
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] install to FAT partition

[Victor McAllister]

on a later LEAF ISO, lrcfg contains an new menu item: "Install to FAT 
partition, experimental"

It lists the available partitions, formats, installs syslinux and the 
MBR code. I have used this to prepare a Compact flash and then answer N 
to copying files.

Thanks to the developers, this works and is an easy way to prepare a 
Compact Flash for later copying the LEAF files.

Victor

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting (copied to leaf-devel)

[kp kirchdoerfer]

Hi Bob, Hi Erich;

thanks for the profound work on this bug.

I've contacted the maintainer of uClibc-ng and received some homework to track 
this issue. The proposed patch by by ddrown needs testing and if successful, 
might be accepted.

kp

Am Mittwoch, 3. Mai 2017, 22:04:53 schrieb Erich Titl:
> Hi Bob
> 
> (copying this to leaf-devel)
> 
> Sorry, I was too fast, I did not look into the i386 code but the one in
> x86_64
> 
> Am 03.05.2017 um 20:03 schrieb Robert K Coffman Jr. -Info From Data Corp.:
> > Eric,
> > 
> > IRC user ddrown confirmed the x64 patch I mentioned earlier seems to fix
> > the issue on i386 as well.  I'm not really sure what to do with that
> > information.  Is it possible to patch Leaf with it?
> > 
> > https://gist.github.com/ddrown/15e943b8fe1da398320b0c0518c95554
> 
> I don't know. It looks like the RESTORE2 macro is extended with a nop
> operator in this patch. This looks like assembly code.
> 
> ...
> 
> This is i386...
> 
> #define RESTORE(name, syscall) RESTORE2(name, syscall)
> 
> #ifdef __NR_rt_sigaction
> /* The return code for realtime-signals.  */
> # define RESTORE2(name, syscall) \
> __asm__ (   \
>  ".text\n"   \
>  "__" #name ":\n"\
>  "   movl$" #syscall ", %eax\n"  \
>  "   int $0x80\n"\
> );
> RESTORE(restore_rt, __NR_rt_sigreturn)
> #endif
> 
> #ifdef __NR_sigreturn
> /* For the boring old signals.  */
> # undef RESTORE2
> # define RESTORE2(name, syscall) \
> __asm__ (   \
>  ".text\n"   \
>  "__" #name ":\n"\
>  "   popl%eax\n" \
>  "   movl$" #syscall ", %eax\n"  \
>  "   int $0x80\n"\
> );
> RESTORE(restore, __NR_sigreturn)
> #endif
> 
> and this is x86_64
> 
> #define RESTORE(name, syscall) RESTORE2(name, syscall)
> #define RESTORE2(name, syscall) \
> __asm__ (   \
>  "nop\n" \
>  ".text\n"   \
>  "__" #name ":\n"\
>  "   movq$" #syscall ", %rax\n"  \
>  "   syscall\n"  \
> );
> 
> #ifdef __NR_rt_sigaction
> /* The return code for realtime-signals.  */
> RESTORE(restore_rt, __NR_rt_sigreturn)
> #endif
> #ifdef __NR_sigreturn
> RESTORE(restore, __NR_sigreturn)
> #endif
> 
> So in i386 the patch appears to be possible, if it is necessary I don't
> know as it looks like the nop operator could be used to make the
> assembly code align to instruction size. The nop operator is already in
> the x86_64 code.
> 
> I have not followed uClibc development. I am wondering what their
> position is on this issue.
> 
> cheers
> 
> ET


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting (copied to leaf-devel)

[Erich Titl]

Hi Bob

(copying this to leaf-devel)

Sorry, I was too fast, I did not look into the i386 code but the one in 
x86_64


Am 03.05.2017 um 20:03 schrieb Robert K Coffman Jr. -Info From Data Corp.:

Eric,

IRC user ddrown confirmed the x64 patch I mentioned earlier seems to fix
the issue on i386 as well.  I'm not really sure what to do with that
information.  Is it possible to patch Leaf with it?

https://gist.github.com/ddrown/15e943b8fe1da398320b0c0518c95554


I don't know. It looks like the RESTORE2 macro is extended with a nop 
operator in this patch. This looks like assembly code.


...

This is i386...

#define RESTORE(name, syscall) RESTORE2(name, syscall)

#ifdef __NR_rt_sigaction
/* The return code for realtime-signals.  */
# define RESTORE2(name, syscall) \
__asm__ (   \
".text\n"   \
"__" #name ":\n"\
"   movl$" #syscall ", %eax\n"  \
"   int $0x80\n"\
);
RESTORE(restore_rt, __NR_rt_sigreturn)
#endif

#ifdef __NR_sigreturn
/* For the boring old signals.  */
# undef RESTORE2
# define RESTORE2(name, syscall) \
__asm__ (   \
".text\n"   \
"__" #name ":\n"\
"   popl%eax\n" \
"   movl$" #syscall ", %eax\n"  \
"   int $0x80\n"\
);
RESTORE(restore, __NR_sigreturn)
#endif

and this is x86_64

#define RESTORE(name, syscall) RESTORE2(name, syscall)
#define RESTORE2(name, syscall) \
__asm__ (   \
"nop\n" \
".text\n"   \
"__" #name ":\n"\
"   movq$" #syscall ", %rax\n"  \
"   syscall\n"  \
);

#ifdef __NR_rt_sigaction
/* The return code for realtime-signals.  */
RESTORE(restore_rt, __NR_rt_sigreturn)
#endif
#ifdef __NR_sigreturn
RESTORE(restore, __NR_sigreturn)
#endif

So in i386 the patch appears to be possible, if it is necessary I don't 
know as it looks like the nop operator could be used to make the 
assembly code align to instruction size. The nop operator is already in 
the x86_64 code.


I have not followed uClibc development. I am wondering what their 
position is on this issue.


cheers

ET






smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting (copied to leaf-devel)

[Erich Titl]

Hi Bob

(copying this to leaf-devel)

Am 03.05.2017 um 20:03 schrieb Robert K Coffman Jr. -Info From Data Corp.:

Eric,

IRC user ddrown confirmed the x64 patch I mentioned earlier seems to fix
the issue on i386 as well.  I'm not really sure what to do with that
information.  Is it possible to patch Leaf with it?

https://gist.github.com/ddrown/15e943b8fe1da398320b0c0518c95554


I don't know. It looks like the RESTORE2 macro is extended with a nop 
operator in this patch. This looks like assembly code.


The thing that puzzles me most is that the current code looks like the 
following.


#define RESTORE(name, syscall) RESTORE2(name, syscall)
#define RESTORE2(name, syscall) \
__asm__ (   \
"nop\n" \
".text\n"   \
"__" #name ":\n"\
"   movq$" #syscall ", %rax\n"  \
"   syscall\n"  \
);

So it looks like the patch has already been applied. Very definitely 
ddrown has not started from the same codebase, so I would be very 
reluctant to follow this path.


cheers

ET





smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting

[Robert K Coffman Jr. -Info From Data Corp.]

Eric,

IRC user ddrown confirmed the x64 patch I mentioned earlier seems to fix 
the issue on i386 as well.  I'm not really sure what to do with that 
information.  Is it possible to patch Leaf with it?

https://gist.github.com/ddrown/15e943b8fe1da398320b0c0518c95554

- Bob


> So it really appears to boil down on uClibc. I believe KP ported that
> part, so the only thing I canrecomment is to file a bug, but it might
> take quite a while if uplink uClibc is involved.



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[Erich Titl]

Hi Jean-Roch

Am 02.05.2017 um 21:47 schrieb Jean-Roch Blais:
> Hello Erich, and List…
>
...

>>
>> So it looks like the check is correct now
>>
>> cheers
>>
>> ET
>>
>>
> This is great, thanks for showing/sharing how you tested this.  This is good 
> teaching :-) ! and it works !!!

You are most welcome

ET



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[Jean-Roch Blais]

Hello Erich, and List…

> Le 1 mai 2017 à 11:13, Erich Titl  a écrit :
> 
> Hi Jean-Roch
> 
> As you observed, upgrade was broken with the check_wget_dependency function. 
> A fix is available in git maint and my tests for wget have shown positive 
> results.
> 
> This is an old LEAF router with double radio which allows me to connect to a 
> shore based WLAN network.
> 
> SALT# cat /etc/motd
> LEAF Bering-uClibc 5.2.2 Rev 1 uClibc 0.9.33.2  at SALT
> Linux 4.1.13-geode #1 Sat Nov 21 21:38:26 CET 2015
> 
> SALT# rm /usr/bin/wget
> SALT# ln -s /bin/busybox /usr/bin/wget
> SALT# upgrade -c
> upgrade: WGET SSL functionality is missing, please install openssl.lrp
> aborting: check_wget_dependencies
> upgrade: abort check_wget_dependencies
> 
> SALT# apkg -i /mnt/openssl
> openssl installed.
> SALT# upgrade -c
> 5.2.8
> upgrade: upgrade terminated successfully
> 
> This is with an old non SSL wget package
> 
> SALT# rm /usr/bin/wget
> SALT# apkg -u /mnt/wget
> Commit changes? (y/n)y
> wget upgraded.
> SALT# upgrade -c
> upgrade: WGET SSL functionality is missing, please install a SSL enabled wget 
> package
> aborting: check_wget_dependencies
> upgrade: abort check_wget_dependencies
> 
> SALT# rm /usr/bin/wget
> SALT# apkg -u /mnt/wget-ssl
> Commit changes? (y/n)y
> wget-ssl upgraded.
> SALT# upgrade -c
> 5.2.8
> upgrade: upgrade terminated successfully
> 
> So it looks like the check is correct now
> 
> cheers
> 
> ET
> 
> 
This is great, thanks for showing/sharing how you tested this.  This is good 
teaching :-) ! and it works !!!

jrb.

> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! 
> http://sdm.link/slashdot
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting

[John Sager]

I'm running 6.0.2-rc1 x86_64 and have been for months. I haven't had any
problems with ntpd (4.2.8p9).

John

On 02/05/17 16:56, Erich Titl wrote:
> Hi Bob
> 
> Am 02.05.2017 um 17:52 schrieb Robert K Coffman Jr. -Info From Data Corp.:
>>> So now there have been a few releases between 5.1.3 and 6.0.2. It might
>>> be interesting to know if 5.2.8 still runs fine.
>>
>> It appears to be fine, with uClibc 0.9.33.2 and ntpd 4.2.8p7.
>>
>> I also loaded the current ntpd (4.2.8p10) on 5.2.8 and it works fine.
> 
> So it really appears to boil down on uClibc. I believe KP ported that part,
> so the only thing I canrecomment is to file a bug, but it might take quite a
> while if uplink uClibc is involved.
> 
> cheers
> 
> ET
> 
> 
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> 
> 
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
> 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting

[Erich Titl]

Hi Bob

Am 02.05.2017 um 17:52 schrieb Robert K Coffman Jr. -Info From Data Corp.:

So now there have been a few releases between 5.1.3 and 6.0.2. It might
be interesting to know if 5.2.8 still runs fine.


It appears to be fine, with uClibc 0.9.33.2 and ntpd 4.2.8p7.

I also loaded the current ntpd (4.2.8p10) on 5.2.8 and it works fine.


So it really appears to boil down on uClibc. I believe KP ported that 
part, so the only thing I canrecomment is to file a bug, but it might 
take quite a while if uplink uClibc is involved.


cheers

ET



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting

[Robert K Coffman Jr. -Info From Data Corp.]

> So now there have been a few releases between 5.1.3 and 6.0.2. It might
> be interesting to know if 5.2.8 still runs fine.

It appears to be fine, with uClibc 0.9.33.2 and ntpd 4.2.8p7.

I also loaded the current ntpd (4.2.8p10) on 5.2.8 and it works fine.

- Bob


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting

[Erich Titl]

Am 02.05.2017 um 16:31 schrieb Robert K Coffman Jr. -Info From Data Corp.:

Did you verify that uclibc and/or ntpd had any changes between the two
releases affected?


I'm using the i686 release.

If I run it under VMWare ESXi with two cores, it crashes.  If I reduce
the cores to one, it works fine.  It seems to affect any machine I run
it on that has more than one core or hyperthreading.

It is happening on Leaf 6.02 / ntpd 4.2.8p9 / uClibc 1.0.17
It is happening on Leaf 6.03 / ntpd 4.2.8p10 / uClibc 1.0.17

The previous Leaf release I was using was 5.1.3, which was ntpd 4.2.8p1
and uClibc 0.9.33.2.  It did not exhibit this problem.


So now there have been a few releases between 5.1.3 and 6.0.2. It might 
be interesting to know if 5.2.8 still runs fine.


cheers

ET



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting

[Robert K Coffman Jr. -Info From Data Corp.]

> Did you verify that uclibc and/or ntpd had any changes between the two
> releases affected?

I'm using the i686 release.

If I run it under VMWare ESXi with two cores, it crashes.  If I reduce 
the cores to one, it works fine.  It seems to affect any machine I run 
it on that has more than one core or hyperthreading.

It is happening on Leaf 6.02 / ntpd 4.2.8p9 / uClibc 1.0.17
It is happening on Leaf 6.03 / ntpd 4.2.8p10 / uClibc 1.0.17

The previous Leaf release I was using was 5.1.3, which was ntpd 4.2.8p1 
and uClibc 0.9.33.2.  It did not exhibit this problem.

- Bob


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting

[Erich Titl]

Hi Bob

Am 02.05.2017 um 14:30 schrieb Robert K Coffman Jr. -Info From Data Corp.:


ddrown  https://gist.github.com/ddrown/15e943b8fe1da398320b0c0518c95554
- I isolated this code out of ntpd and verified it has a race condition
under uclibc pthreads
ddrown  this looks like a bug in uclibc

Where can I go from here?


Did you verify that uclibc and/or ntpd had any changes between the two 
releases affected?


cheers

ET




smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting

[Robert K Coffman Jr. -Info From Data Corp.]

User ddrown on IRC looked into this, and confirmed he also experienced 
this issue.

ddrown  ok, ntpd works for me on leaf with one processor, trying it with two
ddrown  yup, two processors = ntpd crash on leaf
ddrown  ok, that's very odd
ddrown  cd /usr/sbin ; ./ntpd -- works
ddrown   /usr/sbin/ntpd -- segfault
ddrown  or hm, maybe it's random chance
ddrown  yup, roughly 75% chance of segfault
ddrown  must be a race condition in there somewhere
ddrown  https://gist.github.com/ddrown/15e943b8fe1da398320b0c0518c95554 
- I isolated this code out of ntpd and verified it has a race condition 
under uclibc pthreads
ddrown  this looks like a bug in uclibc

Where can I go from here?

- Bob


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting

[Robert K Coffman Jr. -Info From Data Corp.]

>> On HP DC7600 and  using Bering-uClibc_6.0.2_i686_syslinux_vga, ntpd
>> segfaults at startup (even something like ntpd --version).

This appears to affect machines with multiple cores and/or machines with 
a single core and hyperthreading.  I am still looking into it, but I'd 
like to hear from anyone who can confirm they are seeing this issue.

- Bob


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] upgrade experience

[Erich Titl]

OK folks, here is the latest on upgrade

The current version is broken due to a new function which was supposed 
to prevent a misleading error message. There is a fix for that on the 
git maint repository.


So I jumped into the cold water and upgraded my sturdy old 5.2.2 alix to 
--latest, no surprise there were a few surprises.


The content of quite a number of packages has changed and the format of 
a few configuration files have changed too which made it difficult for 
upgrade to patch them all. Using the files saved during the patch it was 
easy to port my modifications to the new formats.


On top of that, the new modules.sqfs file was not copied as 5.2.2 did 
not have any of that. This made the boot process cough at first try, but 
once I copied modules.sqfs to storage, bingo, my old alix is running 
6.0.3 and even the two radios work without a hitch, actually I am using 
this little beast to talk to the world.


YMMV

ET



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[Erich Titl]

Hi Jean-Roch

As you observed, upgrade was broken with the check_wget_dependency 
function. A fix is available in git maint and my tests for wget have 
shown positive results.


This is an old LEAF router with double radio which allows me to connect 
to a shore based WLAN network.


SALT# cat /etc/motd
LEAF Bering-uClibc 5.2.2 Rev 1 uClibc 0.9.33.2  at SALT
Linux 4.1.13-geode #1 Sat Nov 21 21:38:26 CET 2015

SALT# rm /usr/bin/wget
SALT# ln -s /bin/busybox /usr/bin/wget
SALT# upgrade -c
upgrade: WGET SSL functionality is missing, please install openssl.lrp
aborting: check_wget_dependencies
upgrade: abort check_wget_dependencies

SALT# apkg -i /mnt/openssl
openssl installed.
SALT# upgrade -c
5.2.8
upgrade: upgrade terminated successfully

This is with an old non SSL wget package

SALT# rm /usr/bin/wget
SALT# apkg -u /mnt/wget
Commit changes? (y/n)y
wget upgraded.
SALT# upgrade -c
upgrade: WGET SSL functionality is missing, please install a SSL enabled 
wget package

aborting: check_wget_dependencies
upgrade: abort check_wget_dependencies

SALT# rm /usr/bin/wget
SALT# apkg -u /mnt/wget-ssl
Commit changes? (y/n)y
wget-ssl upgraded.
SALT# upgrade -c
5.2.8
upgrade: upgrade terminated successfully

So it looks like the check is correct now

cheers

ET




smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] ntpd segfaulting

[Robert K Coffman Jr. -Info From Data Corp.]

 > On 4/27/2017 7:52 PM, Robert K Coffman Jr. -Info From Data Corp. wrote:
> On HP DC7600 and  using Bering-uClibc_6.0.2_i686_syslinux_vga, ntpd
> segfaults at startup (even something like ntpd --version).

I'm working this with NTP people, however I have found this occurring 
with the NTPD that ships with 6.03,  and on other hardware than the HP I 
originally discovered it on.  If you are running NTP, please confirm 
that it is working, and also please run ntpd --version and confirm that 
it does not segfault, even if your service is running correctly.

Thanks -

Bob


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[Erich Titl]

Hi Jean-Roch

Am 30.04.2017 um 02:00 schrieb Jean-Roch Blais:

Hello Erich,


Le 29 avr. 2017 à 17:49, Erich Titl  a écrit :

Hi Jean-Roch





So it is either or...

this is just to check if openssl (on a new system) or wget-ssl (on older 
systems) is installed.

Unfortunately you can blow this check by installing wget, which will hide the 
busybox wget and on new systems there is no wget-ssl.

The check is broken, but to tell you the truth, I would not know right now how 
to fix this corner case. Need to think


I just hope I didn’t mess up you cruise :-) !!! No rush really, manual update 
is still possible after all !



No trouble, got my crew to Pointe à Pitre and internet access :-)

So this is the puzzle

Basically we need first a consistent check if the currently installed 
wget handles ssl. So we need a target which can consistantly be checked 
using https. If this does not work, then we need to determine the reason.


If wget is installed, how do we check that it handles ssl
else if wget-ssl is installed, everything is fine
else we need openssl and then everything ist fine

unless some crazehead installs his own bloody version of wget :-)

cheers

ET



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[Jean-Roch Blais]

Hello Erich,

> Le 29 avr. 2017 à 17:49, Erich Titl  a écrit :
> 
> Hi Jean-Roch
> 
> Am 29.04.2017 um 19:03 schrieb Jean-Roch Blais:
>> Hello kp,
>> 
>>> Le 29 avr. 2017 à 11:00, kp kirchdoerfer  a 
>>> écrit :
>>> 
>>> Am Freitag, 28. April 2017, 23:09:10 schrieb Jean-Roch Blais:
 Hello list,
 
 is there a reason why wget-ssl.lrp is missing from Buc 6.0.2 rev 1 and 
 maybe
 others distributions. It is required to perform a webconf firmware upgrade…
 https://sourceforge.net/p/leaf/bering-uclibc/ci/143fcc117549efc0d6bd42de141
 cdfb7de8fca6c/tree/repo/config/upgrade
  ’s function "check
 wget_dependencies" checks for this.
> 
> this is the error message
> 
>log "$PROGRAM is missing WGET SSL functionality"
>log "please install either openssl.lrp or a SSL enabled wget package"
>echo "$PROGRAM is missing WGET SSL functionality"
>echo "please install either openssl.lrp or a SSL enabled wget package"
>abort "check wget dependencies"
> 
> So it is either or...
> 
> this is just to check if openssl (on a new system) or wget-ssl (on older 
> systems) is installed.
> 
> Unfortunately you can blow this check by installing wget, which will hide the 
> busybox wget and on new systems there is no wget-ssl.
> 
> The check is broken, but to tell you the truth, I would not know right now 
> how to fix this corner case. Need to think
> 
I just hope I didn’t mess up you cruise :-) !!! No rush really, manual update 
is still possible after all ! 

thank’s a lot,

jrb.

> cheers
> 
> ET
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! 
> http://sdm.link/slashdot
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[Erich Titl]

Hi Jean-Roch

Am 29.04.2017 um 19:03 schrieb Jean-Roch Blais:

Hello kp,


Le 29 avr. 2017 à 11:00, kp kirchdoerfer  a écrit 
:

Am Freitag, 28. April 2017, 23:09:10 schrieb Jean-Roch Blais:

Hello list,

is there a reason why wget-ssl.lrp is missing from Buc 6.0.2 rev 1 and maybe
others distributions. It is required to perform a webconf firmware upgrade…
https://sourceforge.net/p/leaf/bering-uclibc/ci/143fcc117549efc0d6bd42de141
cdfb7de8fca6c/tree/repo/config/upgrade
 ’s function "check
wget_dependencies" checks for this.


this is the error message

log "$PROGRAM is missing WGET SSL functionality"
log "please install either openssl.lrp or a SSL enabled wget 
package"

echo "$PROGRAM is missing WGET SSL functionality"
echo "please install either openssl.lrp or a SSL enabled wget 
package"

abort "check wget dependencies"

So it is either or...

this is just to check if openssl (on a new system) or wget-ssl (on older 
systems) is installed.


Unfortunately you can blow this check by installing wget, which will 
hide the busybox wget and on new systems there is no wget-ssl.


The check is broken, but to tell you the truth, I would not know right 
now how to fix this corner case. Need to think


cheers

ET



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[Erich Titl]

Hi Jean-Roch

Am 29.04.2017 um 19:03 schrieb Jean-Roch Blais:

Hello kp,


Le 29 avr. 2017 à 11:00, kp kirchdoerfer  a écrit 
:

Am Freitag, 28. April 2017, 23:09:10 schrieb Jean-Roch Blais:

Hello list,

is there a reason why wget-ssl.lrp is missing from Buc 6.0.2 rev 1 and maybe
others distributions. It is required to perform a webconf firmware upgrade…
https://sourceforge.net/p/leaf/bering-uclibc/ci/143fcc117549efc0d6bd42de141
cdfb7de8fca6c/tree/repo/config/upgrade
 ’s function "check
wget_dependencies" checks for this.


Hi Jean-Roch;

I believe sometnig went wrong here;

wget and wget-ssl has been merged  AFAIR since 5.2.5.

The check seems wrong, it smells like a bug - we'll look into it.

Do you have openssl installed? In that case it should work with either wget or
busybox wget.


Ok, to set the clock right, I have to say I didn’t try to run upgrade yet, I was looking at the code to 
make sure I wouldn’t bust my firewall :-) ! … there is no doc. But looking at the code we see that it 
checks if openssl or wget-ssl is there, but then only uses "wget --no-check-certificate … etc 
etc…" to download the remote firmware… BusyBox's “wget" does not understand 
"—no-check-certificate" … hence my first questions !

In any case, my main concern/question is: is it safe to run upgrade ? Did you 
or do you use it ?

I guess backing-up my SD card is a good idea … I would like, of course, to keep 
the whole process as simple as possible, and it seems this was the whole 
upgrade purpose to start with.


Yes and a lot of time has passed since. LEAF being as flexible as it is 
is difficult to upgrade automatically.


In any case unless you boot your box, nothing is lost, you still have a 
working system. If you copied your entire storage then, at least on a 
grub based system, everything will be as before when you copy it back. 
Syslinux is a little different but not to the extent of making it 
impossible.


cheers

ET



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[Erich Titl]

Hi
for
Am 29.04.2017 um 05:09 schrieb Jean-Roch Blais:

Hello list,

is there a reason why wget-ssl.lrp is missing from Buc 6.0.2 rev 1 and maybe 
others distributions. It is required to perform a webconf firmware upgrade…
 
https://sourceforge.net/p/leaf/bering-uclibc/ci/143fcc117549efc0d6bd42de141cdfb7de8fca6c/tree/repo/config/upgrade
 

 ’s function "check wget_dependencies" checks for this.


AFAIK wget-ssl has been suppressed for wget, which includes the ssl 
libraries now. The dependency for wget-ssl is for older systems, you 
should be fine by just using openssl.lrp, which is used by the busybox 
wget implementation.


cheers

ET



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[Jean-Roch Blais]

Hello kp,

> Le 29 avr. 2017 à 11:00, kp kirchdoerfer  a 
> écrit :
> 
> Am Freitag, 28. April 2017, 23:09:10 schrieb Jean-Roch Blais:
>> Hello list,
>> 
>> is there a reason why wget-ssl.lrp is missing from Buc 6.0.2 rev 1 and maybe
>> others distributions. It is required to perform a webconf firmware upgrade…
>> https://sourceforge.net/p/leaf/bering-uclibc/ci/143fcc117549efc0d6bd42de141
>> cdfb7de8fca6c/tree/repo/config/upgrade
>> > 1cdfb7de8fca6c/tree/repo/config/upgrade> ’s function "check
>> wget_dependencies" checks for this.
> 
> Hi Jean-Roch;
> 
> I believe sometnig went wrong here;
> 
> wget and wget-ssl has been merged  AFAIR since 5.2.5.
> 
> The check seems wrong, it smells like a bug - we'll look into it.
> 
> Do you have openssl installed? In that case it should work with either wget 
> or 
> busybox wget.
> 
Ok, to set the clock right, I have to say I didn’t try to run upgrade yet, I 
was looking at the code to make sure I wouldn’t bust my firewall :-) ! … there 
is no doc. But looking at the code we see that it checks if openssl or wget-ssl 
is there, but then only uses "wget --no-check-certificate … etc etc…" to 
download the remote firmware… BusyBox's “wget" does not understand 
"—no-check-certificate" … hence my first questions !

In any case, my main concern/question is: is it safe to run upgrade ? Did you 
or do you use it ?

I guess backing-up my SD card is a good idea … I would like, of course, to keep 
the whole process as simple as possible, and it seems this was the whole 
upgrade purpose to start with. 

thanks

jrb.

> kp 
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[kp kirchdoerfer]

Am Freitag, 28. April 2017, 23:09:10 schrieb Jean-Roch Blais:
> Hello list,
> 
> is there a reason why wget-ssl.lrp is missing from Buc 6.0.2 rev 1 and maybe
> others distributions. It is required to perform a webconf firmware upgrade…
> https://sourceforge.net/p/leaf/bering-uclibc/ci/143fcc117549efc0d6bd42de141
> cdfb7de8fca6c/tree/repo/config/upgrade
>  1cdfb7de8fca6c/tree/repo/config/upgrade> ’s function "check
> wget_dependencies" checks for this.

Hi Jean-Roch;

I believe sometnig went wrong here;

wget and wget-ssl has been merged  AFAIR since 5.2.5.

The check seems wrong, it smells like a bug - we'll look into it.

Do you have openssl installed? In that case it should work with either wget or 
busybox wget.

kp 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] wget-ssl.lrp missing in Buc 6.0.2 rev 1

[Jean-Roch Blais]

Hello list,

is there a reason why wget-ssl.lrp is missing from Buc 6.0.2 rev 1 and maybe 
others distributions. It is required to perform a webconf firmware upgrade…
 
https://sourceforge.net/p/leaf/bering-uclibc/ci/143fcc117549efc0d6bd42de141cdfb7de8fca6c/tree/repo/config/upgrade
 

 ’s function "check wget_dependencies" checks for this. 

Thanks !

jrb.


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] ntpd segfaulting

[Robert K Coffman Jr. -Info From Data Corp.]

On HP DC7600 and  using Bering-uClibc_6.0.2_i686_syslinux_vga, ntpd 
segfaults at startup (even something like ntpd --version).

Seems to be something with that particular hardware, as I have other 
machines with the same release loaded that are working fine.

I've examined the executables, packages, and libraries with SHA1SUM and 
all looks fine.

- Bob






--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] software upgrade /tmp size ...

[Erich Titl]

Hi Jean-Roch

Am 24.04.2017 um 17:07 schrieb Jean-Roch Blais:
> Hello Erich,
>
...

>>
>
> Ok, do you have any suggestion for a valid size, or we simply keep guessing 
> until it works…. :-) !  I don’t see any documentation on how to use “Backup 
> software image” in Webconf… I just don’t want to ruin my setup !

OK, the (mis)calculation shows a value which is 1024 times bigger than 
the estikmated size. You should be fine with 60 MB temporary storage.

True there is no documentation on how to run a dual boot system, 
basically because I am running LEAF using the GRUB loader whereas the 
standard is syslinux. My perception is that with GRUB this is easier.

What I am doing is to have multiple partitions on my box, sda0 is just 
the boot files, sda1 holds the primary installation and sda2 is my 
backup. The bootloader gives me the ability to choose between the two 
systems. To back them up, I just copy all the files except leaf.cfg from 
sda1 to sda2 and be done. If the system fails to boot I can typically 
just choose the backup system, whic is identical then.

Iimplemented a backup script (I believe it is still there) in config. 
LEAF being so flexible makes it difficult to decide what and how to 
backup, so this needs to be improved. Unfortunately I don't have much 
connectivity these days and very little hardware to play with ( I am 
currently cruising the caribbean ), so this may take a while. I invite 
everyone to come up with a comprehensive schema to back up the system to 
an alternative partition.

cheers

ET



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] software upgrade /tmp size ...

[Jean-Roch Blais]

Hello Erich,

> Le 22 avr. 2017 à 11:40, Erich Titl  a écrit :
> 
> Hi Jean Roch
> 
> Am 22.04.2017 um 06:33 schrieb Jean-Roch Blais:
>> Hello Erich,
>> 
>>> Le 21 avr. 2017 à 14:36, Erich Titl  a écrit :
>>> 
>>> Hi
>>> 
>>> Am 20.04.2017 um 14:16 schrieb Jean-Roch Blais:
 Hello list,
 
 trying to upgrade my firmware on my brand new APU2C2 (2 Gigs of memory) I 
 get this strange message in syslog … :
 
 Apr 20 13:37:37 firewall upgrade: Your system has insufficient temporary 
 storage available for
 Apr 20 13:37:37 firewall upgrade: upgrade to run successfully. Please 
 check the size of your
 Apr 20 13:37:37 firewall upgrade: /tmp file system and increase it to at 
 least 6 MB
 <>this calls for 6 MB, there must be a typo error here, any ideas ?
>>> 
>>> Must be a typo in the message, I believe. I will check the respective
>>> calculation to verify.
>>> 
>>> You could still try to increase the size, trying to find the correct
>>> value. Unfortunately the calculation is based on the size needed to add
>>> all the respective packages, which is probably a wrong assumption. But
>>> the 6 is definitely a typo.
>>> 
>> I think the command “top” should give us a fairly accurate memory usage size 
>> for any number of packages one might have. In my case I have:
>> LRP="root license local bbnameif dhcpcd keyboard shorwall shorwall6 dnsmasq 
>> dropbear mhttpd bbntpd heyu wakelan openssl webconf curl”
>> and the command “top” gives me:
> 
> It is not a question on how much memory the system uses, but how much 
> temporary storage is available. Unfortunately because we need to replace 
> complete packages I need to decide if the configuration files for such a 
> package needs to / can be adjusted, so when upgrading the package needs to be 
> somehow unpacked to check this. This requires some temporary storage which on 
> a traditional LEAF box is set to a pretty low value, hence the complicated 
> (and probably inaccurate) check.
> 
> The 6 MB is caused by using the wrong variable to display a guessed 
> minimal size.
> 
> cheers
> 
> ET
> 

Ok, do you have any suggestion for a valid size, or we simply keep guessing 
until it works…. :-) !  I don’t see any documentation on how to use “Backup 
software image” in Webconf… I just don’t want to ruin my setup ! 

bye ! jrb.
This page allows to save and download the currently running software

Insufficient space in /tmp for the software image 

 
<>--
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! 
> http://sdm.link/slashdot
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] software upgrade /tmp size ...

[Erich Titl]

Hi Jean Roch

Am 22.04.2017 um 06:33 schrieb Jean-Roch Blais:

Hello Erich,


Le 21 avr. 2017 à 14:36, Erich Titl  a écrit :

Hi

Am 20.04.2017 um 14:16 schrieb Jean-Roch Blais:

Hello list,

trying to upgrade my firmware on my brand new APU2C2 (2 Gigs of memory) I get 
this strange message in syslog … :

Apr 20 13:37:37 firewall upgrade: Your system has insufficient temporary 
storage available for
Apr 20 13:37:37 firewall upgrade: upgrade to run successfully. Please check the 
size of your
Apr 20 13:37:37 firewall upgrade: /tmp file system and increase it to at least 
6 MB
<>this calls for 6 MB, there must be a typo error here, any ideas ?


Must be a typo in the message, I believe. I will check the respective
calculation to verify.

You could still try to increase the size, trying to find the correct
value. Unfortunately the calculation is based on the size needed to add
all the respective packages, which is probably a wrong assumption. But
the 6 is definitely a typo.


I think the command “top” should give us a fairly accurate memory usage size 
for any number of packages one might have. In my case I have:
LRP="root license local bbnameif dhcpcd keyboard shorwall shorwall6 dnsmasq 
dropbear mhttpd bbntpd heyu wakelan openssl webconf curl”
and the command “top” gives me:


It is not a question on how much memory the system uses, but how much 
temporary storage is available. Unfortunately because we need to replace 
complete packages I need to decide if the configuration files for such a 
package needs to / can be adjusted, so when upgrading the package needs 
to be somehow unpacked to check this. This requires some temporary 
storage which on a traditional LEAF box is set to a pretty low value, 
hence the complicated (and probably inaccurate) check.


The 6 MB is caused by using the wrong variable to display a guessed 
minimal size.


cheers

ET



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] software upgrade /tmp size ...

[Jean-Roch Blais]

Hello Erich, 

> Le 21 avr. 2017 à 14:36, Erich Titl  a écrit :
> 
> Hi
> 
> Am 20.04.2017 um 14:16 schrieb Jean-Roch Blais:
>> Hello list,
>> 
>> trying to upgrade my firmware on my brand new APU2C2 (2 Gigs of memory) I 
>> get this strange message in syslog … :
>> 
>> Apr 20 13:37:37 firewall upgrade: Your system has insufficient temporary 
>> storage available for
>> Apr 20 13:37:37 firewall upgrade: upgrade to run successfully. Please check 
>> the size of your
>> Apr 20 13:37:37 firewall upgrade: /tmp file system and increase it to at 
>> least 6 MB
>> <>this calls for 6 MB, there must be a typo error here, any ideas ?
> 
> Must be a typo in the message, I believe. I will check the respective 
> calculation to verify.
> 
> You could still try to increase the size, trying to find the correct 
> value. Unfortunately the calculation is based on the size needed to add 
> all the respective packages, which is probably a wrong assumption. But 
> the 6 is definitely a typo.
> 
I think the command “top” should give us a fairly accurate memory usage size 
for any number of packages one might have. In my case I have: 
LRP="root license local bbnameif dhcpcd keyboard shorwall shorwall6 dnsmasq 
dropbear mhttpd bbntpd heyu wakelan openssl webconf curl” 
and the command “top” gives me:
Mem: 62708K used, 1858568K free, 18496K shrd, 4K buff, 18496K cached. 
I would guess 62708K is close enough to the 6K not M in the message, and 
might be what the author really meant. 

thank’s !
 
> cheers
> 
> ET
> 
>> 
>> Thanks, jrb.
>> 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> 
>> leaf-user mailing list: leaf-user@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>> Support Request -- http://leaf-project.org/
>> 
>> 
>> ---
>> Diese E-Mail wurde von AVG auf Viren geprüft.
>> http://www.avg.com
>> 
> 
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] software upgrade /tmp size ...

[Erich Titl]

Hi

Am 20.04.2017 um 14:16 schrieb Jean-Roch Blais:
> Hello list,
>
> trying to upgrade my firmware on my brand new APU2C2 (2 Gigs of memory) I get 
> this strange message in syslog … :
>
> Apr 20 13:37:37 firewall upgrade: Your system has insufficient temporary 
> storage available for
> Apr 20 13:37:37 firewall upgrade: upgrade to run successfully. Please check 
> the size of your
> Apr 20 13:37:37 firewall upgrade: /tmp file system and increase it to at 
> least 6 MB
>  <>this calls for 6 MB, there must be a typo error here, any ideas ?

Must be a typo in the message, I believe. I will check the respective 
calculation to verify.

You could still try to increase the size, trying to find the correct 
value. Unfortunately the calculation is based on the size needed to add 
all the respective packages, which is probably a wrong assumption. But 
the 6 is definitely a typo.

cheers

ET

>
> Thanks, jrb.
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>
>
> ---
> Diese E-Mail wurde von AVG auf Viren geprüft.
> http://www.avg.com
>


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] software upgrade /tmp size ...

[John Sager]

Sorry, should have read it more carefully!

John

On 21/04/17 00:44, Jean-Roch Blais wrote:
> Hello John,
> 
> yes …  I was trying to point out that 6 MB (or 60 GB) is a bit excessive 
> :-) don’t you agree !  In fact, I was looking for the correct size value that 
> could be used, the 6 is apparently a typo.
> 
> jrb.
> 
>> Le 20 avr. 2017 à 15:28, John Sager  a écrit :
>>
>> /tmp is a tmpfs in memory, and the size is set in leaf.cfg (tmp_size,
>> default 8M). with 2Gig in the APU2 you can make that very much bigger.
>>
>> John
>>
>> On 20/04/17 19:16, Jean-Roch Blais wrote:
>>> Hello list,
>>>
>>> trying to upgrade my firmware on my brand new APU2C2 (2 Gigs of memory) I 
>>> get this strange message in syslog … :
>>>
>>> Apr 20 13:37:37 firewall upgrade: Your system has insufficient temporary 
>>> storage available for
>>> Apr 20 13:37:37 firewall upgrade: upgrade to run successfully. Please check 
>>> the size of your
>>> Apr 20 13:37:37 firewall upgrade: /tmp file system and increase it to at 
>>> least 6 MB
>>> <>this calls for 6 MB, there must be a typo error here, any ideas ?
>>>
>>> Thanks, jrb.
>>>
>>> --
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>> 
>>> leaf-user mailing list: leaf-user@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>>> Support Request -- http://leaf-project.org/
>>>
>>
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> 
>> leaf-user mailing list: leaf-user@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>> Support Request -- http://leaf-project.org/
> 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] software upgrade /tmp size ...

[Jean-Roch Blais]

Hello John,

yes …  I was trying to point out that 6 MB (or 60 GB) is a bit excessive 
:-) don’t you agree !  In fact, I was looking for the correct size value that 
could be used, the 6 is apparently a typo.

jrb.

> Le 20 avr. 2017 à 15:28, John Sager  a écrit :
> 
> /tmp is a tmpfs in memory, and the size is set in leaf.cfg (tmp_size,
> default 8M). with 2Gig in the APU2 you can make that very much bigger.
> 
> John
> 
> On 20/04/17 19:16, Jean-Roch Blais wrote:
>> Hello list,
>> 
>> trying to upgrade my firmware on my brand new APU2C2 (2 Gigs of memory) I 
>> get this strange message in syslog … :
>> 
>> Apr 20 13:37:37 firewall upgrade: Your system has insufficient temporary 
>> storage available for
>> Apr 20 13:37:37 firewall upgrade: upgrade to run successfully. Please check 
>> the size of your
>> Apr 20 13:37:37 firewall upgrade: /tmp file system and increase it to at 
>> least 6 MB
>> <>this calls for 6 MB, there must be a typo error here, any ideas ?
>> 
>> Thanks, jrb.
>> 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> 
>> leaf-user mailing list: leaf-user@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>> Support Request -- http://leaf-project.org/
>> 
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] software upgrade /tmp size ...

[Jean-Roch Blais]

Hello list,

trying to upgrade my firmware on my brand new APU2C2 (2 Gigs of memory) I get 
this strange message in syslog … :

Apr 20 13:37:37 firewall upgrade: Your system has insufficient temporary 
storage available for
Apr 20 13:37:37 firewall upgrade: upgrade to run successfully. Please check the 
size of your
Apr 20 13:37:37 firewall upgrade: /tmp file system and increase it to at least 
6 MB
 <>this calls for 6 MB, there must be a typo error here, any ideas ?

Thanks, jrb.

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] logrotate

[Otto Halák - TeleLarm]

Hi kp and ET,
Yes, thanks a lot.
I found a solution for my version 5.0.5.
Put to multicron-p the small modification for my case:

just after "savelog..."
if [[ $LOG == "smsd.log" ]]; then
svi sms reload > /dev/null
fi

But when I wanted to save the modification of multicron-p, it was not 
saved even if it was mentioned in /var/lib/lrpkg/local.local

Otto


Dne 5. 4. 2017 v 16:44 kp kirchdoerfer napsal(a):
> Am Mittwoch, 5. April 2017, 09:26:42 schrieb Otto Halák - TeleLarm:
>> Hi,
>> is there some kind of "postrotate" option in lrp.conf?
>> SMSTools3 needs to be reloaded after log file rotation since it still
>> writes to previous old logfile (smsd.log.1).
>> Thanks in advance
>> Otto
> 
> None in the old spacecheck that I'm aware off; 6.x has a more advanced
> logrotation which restarts a given daemon.
> 
> kp
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
> 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] logrotate

[kp kirchdoerfer]

Am Mittwoch, 5. April 2017, 09:26:42 schrieb Otto Halák - TeleLarm:
> Hi,
> is there some kind of "postrotate" option in lrp.conf?
> SMSTools3 needs to be reloaded after log file rotation since it still
> writes to previous old logfile (smsd.log.1).
> Thanks in advance
> Otto

None in the old spacecheck that I'm aware off; 6.x has a more advanced 
logrotation which restarts a given daemon.

kp

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] logrotate

[Erich Titl]

Hi


Am 05.04.2017 um 07:26 schrieb Otto Halák - TeleLarm:
> Hi,
> is there some kind of "postrotate" option in lrp.conf?
> SMSTools3 needs to be reloaded after log file rotation since it still
> writes to previous old logfile (smsd.log.1).

You will need the logrotate.lrp package for such things, I don't recall 
if it was published though :-(

cheers

ET



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] logrotate

[Otto Halák - TeleLarm]

Hi,
is there some kind of "postrotate" option in lrp.conf?
SMSTools3 needs to be reloaded after log file rotation since it still 
writes to previous old logfile (smsd.log.1).
Thanks in advance
Otto

---
Tato zpráva byla zkontrolována na viry programem Avast Antivirus.
https://www.avast.com/antivirus


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] Installing Openvpn

[kp kirchdoerfer]

HI Mansoor;

Am Montag, 20. März 2017, 09:16:45 schrieb Mansoor Ahmad:
> Hello Everyone.
> 
> In brief I have had a few years now working with leaf and its many
> packages. In our camp, we typically used the old floppy, cd disk setup
> with the Bering-uClibc distribution. We are now trying to boot from the
> hdd. After having some initial problems with the network cards swapping
> drivers, and a few other minor issues, we are now trying to get our vpn
> setup on this new box with the latest Bering-uClibc distribution. My
> questions are as follows and thank you guys in advanced for aiding me
> indeed:
> 
> 1. How do we get openvpnz on this box? Once I get the box online, is
> there a certain command similar to 'apt-get install' I can use that'll
> automatically grab the package from is repository?

No, there is no such command. You should have openvpnz.lrp on the (iso) image, 
tarball whatever you've downloaded from leaf.sourceforge.net. Add it to your 
hdd, if it' not already there, add "openvpnz" to the LRP line  in leaf.cfg and 
reboot. Pls be aware you also need to add "tun" module to /etc/modules and 
save the configuration via lrcfg to load the module during boot.

There has been a discussion on this list how to create keys recently, it may 
help. You may also find some help here

https://bering-uclibc.zetam.org/wiki/Main_Page

Look for the appropriate User Guide (note: the 6.0 USer Guide still has some 
empty chapters).

> 2. I copied the keys over to a windows laptop. Traditionally opening a
> notepad file in windows, then placing it on a floppy within leaf has
> caused many problems with the placement of periods through out the file.
> Is that the same case with the new distributions.

AFAIK yes; though the main problem is the handling of linefeed (CR/LF).

> 3. Is there a place I can demo the mconf-httpd/ui of a leaf distribution
> anywhere? We've always used the cli.

I'm not aware of any- and I stick with the CLI, esp for more advanced tasks.

hth
kp

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] Installing Openvpn

[Mansoor Ahmad]

Hello Everyone.

In brief I have had a few years now working with leaf and its many 
packages. In our camp, we typically used the old floppy, cd disk setup 
with the Bering-uClibc distribution. We are now trying to boot from the 
hdd. After having some initial problems with the network cards swapping 
drivers, and a few other minor issues, we are now trying to get our vpn 
setup on this new box with the latest Bering-uClibc distribution. My 
questions are as follows and thank you guys in advanced for aiding me 
indeed:

1. How do we get openvpnz on this box? Once I get the box online, is 
there a certain command similar to 'apt-get install' I can use that'll 
automatically grab the package from is repository?

2. I copied the keys over to a windows laptop. Traditionally opening a 
notepad file in windows, then placing it on a floppy within leaf has 
caused many problems with the placement of periods through out the file. 
Is that the same case with the new distributions.

3. Is there a place I can demo the mconf-httpd/ui of a leaf distribution 
anywhere? We've always used the cli.


On 3/1/2017 6:07 AM, leaf-user-requ...@lists.sourceforge.net wrote:
> Send leaf-user mailing list submissions to
>   leaf-user@lists.sourceforge.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
>   https://lists.sourceforge.net/lists/listinfo/leaf-user
> or, via email, send a message with subject or body 'help' to
>   leaf-user-requ...@lists.sourceforge.net
>
> You can reach the person managing the list at
>   leaf-user-ow...@lists.sourceforge.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of leaf-user digest..."
>
>
> Today's Topics:
>
> 1. Attempting to run
>Bering-uClibc_6.0.2_i486_syslinux_serial19200 on Soekris Net6501
>(Andrew Gray)
>
>
> --
>
> Message: 1
> Date: Wed, 1 Mar 2017 20:41:09 +0930
> From: "Andrew Gray" 
> Subject: [leaf-user] Attempting to run
>   Bering-uClibc_6.0.2_i486_syslinux_serial19200 on Soekris Net6501
> To: 
> Message-ID: <01d2927c$88908ba0$99b1a2e0$@willowcrest.com.au>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi all;
>
>   
>
> I have been using Leaf Firewall distributions now for many years and have a
> need to upgrade the hardware to something faster as the firewall is starting
> to be the slow point in the network.  After some research and many attempts,
> the machine seems to be booting with some errors and even outputting to the
> serial port now.  I am at the end of my ability as my current system
> normally just works and I don?t touch it except for the occasional reboot.
>
>   
>
> Below is what I am getting from the serial port as the device boots. Any
> help/suggestions will be appreciated.
>
>   
>
> 1
>
>   
>
> SYSLINUX 4.07 EDD 2013-07-25 Copyright (C) 1994-2013 H. Peter Anvin et al
>
> [6n
>
> ?
>
> ?
>
> 01H[K[14;01H[K[15;01H[K[16;01H[K[17;01H[K[18;01H[K[19;01H[K[20;01H[K[21;01H[
> K[22;01H[K[23;01H[K[24;01H[K[25;01H[K[25;01H[25;01H[25;01H[25;01H[25;01H[25;
> 01H[25;01H[25;01H[25;01H[25;01H[25;01H[25;01H[25;01H[25;01H[25;01H[25;01H[25
> ;01H[25;01H[6n[2J[6n[02;02H[6n[0.201886] dmi: Firmware registration
> failed.
>
> ?[0.496551] serial :02:0a.4: Couldn't register serial port 1058, irq
> 19, type 0, error -28
>
> LINUXRC: Bering - Initrd - 6.0.2 Rev 1 uClibc 1.0.17
>
> LINUXRC: Parsing kernel command line...
>
> LINUXRC: Looking for leaf.cfg...
>
> LINUXRC: Mounting /dev/sda1 on /var/lib/lrpkg/mnt as vfat
>
> LINUXRC: Sourcing leaf.cfg from /dev/sda1
>
> LINUXRC: Generating default dirs...
>
> LINUXRC: Creating /tmp & /var/log partitions ...
>
> LINUXRC: Setting up ZRAM swap ...
>
> Setting up swapspace version 1, size = 73396224 bytes
>
> UUID=1fe1131a-1b1a-4b3f-b656-7a51becfc419
>
> LINUXRC: Mounting /dev/sda1 on /mnt1 as vfat
>
> LINUXRC: Mounted /dev/sda1 as vfat
>
> LINUXRC: Mounting /dev/sr0 on /mnt2 as iso9660
>
> LINUXRC: Mounting /dev/sr0 on /mnt2 as ext3
>
> LINUXRC: Mounting /dev/sr0 on /mnt2 as ext2
>
> LINUXRC: Mounting /dev/sr0 on /mnt2 as ext4
>
> LINUXRC: Mounting /dev/sr0 on /mnt2 as squashfs
>
> LINUXRC: Mounting /dev/sr0 on /mnt2 as vfat
>
> LINUXRC: Mounting /dev/sr0 on /mnt2 as msdos
>
> LINUXRC: Mounting /dev/sr0 on /mnt2 as iso9660
>
> LINUXRC: Mounting /dev/sr0 on /mnt2 as f2fs
>
> LINUXRC: Installing -  root: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
> /mnt1/root.lrp /dev/sda1  config: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
> /mnt1/config.lrp /dev/sda1  etc: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
> /mnt1/etc.lrp /dev/sda1  modules: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
> /mnt1/modules.lrp /dev/sda1  license: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
> /mnt1/license.lrp /dev/sda1  local: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
> /mnt1/local.lrp /dev/sda1  dhcpcd: dev: /dev/sda1 mnt: /mnt1 t: vfat 

[leaf-user] Attempting to run Bering-uClibc_6.0.2_i486_syslinux_serial19200 on Soekris Net6501

[Andrew Gray]

Hi all;

 

I have been using Leaf Firewall distributions now for many years and have a
need to upgrade the hardware to something faster as the firewall is starting
to be the slow point in the network.  After some research and many attempts,
the machine seems to be booting with some errors and even outputting to the
serial port now.  I am at the end of my ability as my current system
normally just works and I don’t touch it except for the occasional reboot.

 

Below is what I am getting from the serial port as the device boots. Any
help/suggestions will be appreciated.

 

1

 

SYSLINUX 4.07 EDD 2013-07-25 Copyright (C) 1994-2013 H. Peter Anvin et al

[6n

…

…

01H[K[14;01H[K[15;01H[K[16;01H[K[17;01H[K[18;01H[K[19;01H[K[20;01H[K[21;01H[
K[22;01H[K[23;01H[K[24;01H[K[25;01H[K[25;01H[25;01H[25;01H[25;01H[25;01H[25;
01H[25;01H[25;01H[25;01H[25;01H[25;01H[25;01H[25;01H[25;01H[25;01H[25;01H[25
;01H[25;01H[6n[2J[6n[02;02H[6n[0.201886] dmi: Firmware registration
failed.

ÿ[0.496551] serial :02:0a.4: Couldn't register serial port 1058, irq
19, type 0, error -28

LINUXRC: Bering - Initrd - 6.0.2 Rev 1 uClibc 1.0.17 

LINUXRC: Parsing kernel command line...

LINUXRC: Looking for leaf.cfg...

LINUXRC: Mounting /dev/sda1 on /var/lib/lrpkg/mnt as vfat

LINUXRC: Sourcing leaf.cfg from /dev/sda1

LINUXRC: Generating default dirs...

LINUXRC: Creating /tmp & /var/log partitions ...

LINUXRC: Setting up ZRAM swap ...

Setting up swapspace version 1, size = 73396224 bytes

UUID=1fe1131a-1b1a-4b3f-b656-7a51becfc419

LINUXRC: Mounting /dev/sda1 on /mnt1 as vfat

LINUXRC: Mounted /dev/sda1 as vfat

LINUXRC: Mounting /dev/sr0 on /mnt2 as iso9660

LINUXRC: Mounting /dev/sr0 on /mnt2 as ext3

LINUXRC: Mounting /dev/sr0 on /mnt2 as ext2

LINUXRC: Mounting /dev/sr0 on /mnt2 as ext4

LINUXRC: Mounting /dev/sr0 on /mnt2 as squashfs

LINUXRC: Mounting /dev/sr0 on /mnt2 as vfat

LINUXRC: Mounting /dev/sr0 on /mnt2 as msdos

LINUXRC: Mounting /dev/sr0 on /mnt2 as iso9660

LINUXRC: Mounting /dev/sr0 on /mnt2 as f2fs

LINUXRC: Installing -  root: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/root.lrp /dev/sda1  config: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/config.lrp /dev/sda1  etc: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/etc.lrp /dev/sda1  modules: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/modules.lrp /dev/sda1  license: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/license.lrp /dev/sda1  local: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/local.lrp /dev/sda1  dhcpcd: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/dhcpcd.lrp /dev/sda1  keyboard: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/keyboard.lrp /dev/sda1  shorwall: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/shorwall.lrp /dev/sda1  iptables: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/iptables.lrp /dev/sda1  perl: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/perl.lrp /dev/sda1  libdigest-sha1-perl: dev: /dev/sda1 mnt: /mnt1 t:
vfat f: /mnt1/libdigest-sha1-perl.lrp /dev/sda1  ulogd: dev: /dev/sda1 mnt:
/mnt1 t: vfat f: /mnt1/ulogd.lrp /dev/sda1  libnfnetlink: dev: /dev/sda1
mnt: /mnt1 t: vfat f: /mnt1/libnfnetlink.lrp /dev/sda1  libmnl: dev:
/dev/sda1 mnt: /mnt1 t: vfat f: /mnt1/libmnl.lrp /dev/sda1
libnetfilter_log: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/libnetfilter_log.lrp /dev/sda1  libnetfilter_conntrack: dev: /dev/sda1
mnt: /mnt1 t: vfat f: /mnt1/libnetfilter_conntrack.lrp /dev/sda1
libnetfilter_acct: dev: /dev/sda1 mnt: /mnt1 t: vfat f:
/mnt1/libnetfilter_acct.lrp /dev/sda1  shorwall6: dev: /dev/sda1 mnt: /mnt1
t: vfat f: /mnt1/shorwall6.lrp /dev/sda1  dnsmasq: dev: /dev/sda1 mnt: /mnt1
t: vfat f: /mnt1/dnsmasq.lrp /dev/sda1  dropbear: dev: /dev/sda1 mnt: /mnt1
t: vfat f: /mnt1/dropbear.lrp /dev/sda1  mhttpd: dev: /dev/sda1 mnt: /mnt1
t: vfat f: /mnt1/mhttpd.lrp /dev/sda1  webconf: dev: /dev/sda1 mnt: /mnt1 t:
vfat f: /mnt1/webconf.lrp /dev/sda1  hdsupp: dev: /dev/sda1 mnt: /mnt1 t:
vfat f: /mnt1/hdsupp.lrp /dev/sda1  mtools: dev: /dev/sda1 mnt: /mnt1 t:
vfat f: /mnt1/mtools.lrp /dev/sda1  libiconv: dev: /dev/sda1 mnt: /mnt1 t:
vfat f: /mnt1/libiconv.lrp /dev/sda1  libuuid: dev: /dev/sda1 mnt: /mnt1 t:
vfat f: /mnt1/libuuid.lrp /dev/sda1  libfdisk: dev: /dev/sda1 mnt: /mnt1 t:
vfat f: /mnt1/libfdisk.lrp /dev/sda1  libsmartcols: dev: /dev/sda1 mnt:
/mnt1 t: vfat f: /mnt1/libsmartcols.lrp /dev/sda1  configdb: dev: /dev/sda1
mnt: /mnt1 t: vfat f: /mnt1/configdb.lrp /dev/sda1 - Finished.

LINUXRC: Mounting squashfs with modules...

[   19.322932] pch_gbe: Error: busy bit is not cleared

[   19.330121] pch_gbe: Error: busy bit is not cleared

[   19.337276] pch_gbe: Error: busy bit is not cleared

[   19.343168] pch_gbe :02:00.1 (unnamed net_device) (uninitialized):
pch-gbe.miim won't go Ready

[   19.354440] pch_gbe :02:00.1 (unnamed net_device) (uninitialized):
pch-gbe.miim won't go Ready

[   19.365695] pch_gbe :02:00.1 (unnamed net_device) (uninitialized):
pch-gbe.miim won't go Ready

[   19.376952] pch_gbe :02:00.1 (unnamed 

Re: [leaf-user] P9100.lrp

[Jim Munro]

Thanks Andrew,

I loaded an old release and discovered I failed to include lp in modules.lrp.  
My mistake and I should have read the documentation more closely.  Its working 
fine now.

Thanks
Jim
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] openvpn server in v6

[Trev Peterson]

Shouldn't the paths be relative to /etc/openvpn?  Did you try copying
the keys there and adjusting the relative paths?  Might not be a bug at
all.

On Thu, 2017-02-16 at 09:01 +1100, Mark Berndt wrote:
> Hello all,
> 
> I just upgraded to v6.02 and had some time to play with the openvpn
> server, 
> which did not work out of the box when I migrated from 5 to 6.
> 
> the problem was the paths are no longer relative to a base so in the 
> server.conf:
> 
> ca keys/ca.crt
> cert keys/Server.crt
> key keys/Server.key  # This file should be kept secret
> Additionally set the path to the key with the Diffie-Hellman
> parameters: 
> dh keys/dh1024.pem
> 
> works when converted to:
> 
> ca /etc/easyrsa/keys/ca.crt
> cert /etc/easyrsa/keys/Server.crt
> key /etc/easyrsa/keys/Server.key  # This file should be kept secret
> Additionally set the path to the key with the Diffie-Hellman
> parameters: 
> dh /etc/easyrsa/keys/dh1024.pem
> 
> I still have problem with hostapd with a usb wifi, otherwise
> everything else I 
> use work
> 
> cheers
> 
> Marko
> 
> 
> ---
> ---
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> ---
> -
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
-- 
Trev Peterson
Advanced Reality
Email: t...@advanced-reality.com
Phone: +1 847 406 9018




--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] p9100.lrp troubles

[Andrew]

Hi.

Can you pls paste somewhere (for ex., pastebin.com) dmesg output?

Also try to add to /etc/modules parport_pc and ppdev

On 16.02.2017 05:40, Jim Munro wrote:
> Hi,
>
> I'm using the p9100.lrp module on leaf bering 5.2.6.  Nothing will print
> to the parallel port on the leaf box.  Getting this error in syslog when
> I print from the network:
>
> Feb 16 03:19:57 firewall p9100d[10300]: /dev/lp0: No such file or directory, 
> will try opening late
>
> lp0 does not appear in the /dev directory.  I do not have anything
> configured in modules.lrp specific to the parallel port.  I thought
> find and load modules for hardware would take care of it.  The parallel
> port is enabled in bios and seems to be detected by the OS.   It does
> not look like there is anything in /lib/modules that might pertain to it.
>
> Help anyone?
> Thanks in advance
> Jim
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] p9100.lrp troubles

[Jim Munro]

Hi,

I'm using the p9100.lrp module on leaf bering 5.2.6.  Nothing will print 
to the parallel port on the leaf box.  Getting this error in syslog when 
I print from the network:

Feb 16 03:19:57 firewall p9100d[10300]: /dev/lp0: No such file or directory, 
will try opening late

lp0 does not appear in the /dev directory.  I do not have anything 
configured in modules.lrp specific to the parallel port.  I thought
find and load modules for hardware would take care of it.  The parallel 
port is enabled in bios and seems to be detected by the OS.   It does 
not look like there is anything in /lib/modules that might pertain to it.

Help anyone?
Thanks in advance
Jim


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] openvpn server in v6

[Mark Berndt]

Hello all,

I just upgraded to v6.02 and had some time to play with the openvpn server, 
which did not work out of the box when I migrated from 5 to 6.

the problem was the paths are no longer relative to a base so in the 
server.conf:

ca keys/ca.crt
cert keys/Server.crt
key keys/Server.key  # This file should be kept secret
Additionally set the path to the key with the Diffie-Hellman parameters: 
dh keys/dh1024.pem

works when converted to:

ca /etc/easyrsa/keys/ca.crt
cert /etc/easyrsa/keys/Server.crt
key /etc/easyrsa/keys/Server.key  # This file should be kept secret
Additionally set the path to the key with the Diffie-Hellman parameters: 
dh /etc/easyrsa/keys/dh1024.pem

I still have problem with hostapd with a usb wifi, otherwise everything else I 
use work

cheers

Marko


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] Cached Memory and Shared Memory max

[David M Brooke]

Hi Rob,

> On 9 Feb 2017, at 20:34, Rob Ogle  wrote:
> 
> I have started monitoring my uclibc box with snmp. 
> It shows that my cached memory and shared memory are at 100%. 
> The box has 8GB of ram. (table breakdown below)
> 
> 
> I'm curious if there is a tweak I can do so those stats are lower, or will
> those always be at 100% due to the nature of how these machines work?
> 

My understanding is that Linux will always show this behaviour.

See http://www.tldp.org/LDP/sag/html/buffer-cache.html and in particular:

To make the most efficient use of real memory, Linux automatically
uses all free RAM for buffer cache, but also automatically makes the
cache smaller when programs need more memory.

> 
> VOLUMESIZESPACE USED  Percent Used
> / 400.0 MB17.4 MB 4 % 
>   /tmp800.0 MB108.0 kB0 % 
> /var/log  800.0 MB37.2 MB 5 % 
> Cached memory 54.7 MB 54.7 MB 100 %   
> Memory buffers7.8 GB  4.0 kB  0 %
> 
> Physical memory   7.8 GB  129.6 MB2 % 
> Shared memory 54.7 MB 54.7 MB 100 %   
> Swap space  - -   -
> Virtual memory9.7 GB  129.6 MB1 % 
> 

davidMbrooke

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] Cached Memory and Shared Memory max

[Rob Ogle]

I have started monitoring my uclibc box with snmp. 
It shows that my cached memory and shared memory are at 100%. 
The box has 8GB of ram. (table breakdown below)


I'm curious if there is a tweak I can do so those stats are lower, or will
those always be at 100% due to the nature of how these machines work?


VOLUME  SIZESPACE USED  Percent Used
 /  400.0 MB17.4 MB 4 % 
   /tmp 800.0 MB108.0 kB0 % 
 /var/log   800.0 MB37.2 MB 5 % 
 Cached memory  54.7 MB 54.7 MB 100 %   
 Memory buffers 7.8 GB  4.0 kB  0 %

 Physical memory7.8 GB  129.6 MB2 % 
 Shared memory  54.7 MB 54.7 MB 100 %   
 Swap space   - -   -
Virtual memory  9.7 GB  129.6 MB1 % 




--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] [leaf-devel] 6.0.1 Issue with dropbear

[Jean-Roch Blais]

Oops, wrong mailing list, sorry for that !

jrb.

> Le 27 janv. 2017 à 20:45, Jean-Roch Blais  a écrit :
> 
> Hello list, 
> 
> for what it’s worth now, I have the same issue with Linux 4.1.30-x86_64 #1 
> SMP Sat Aug 20 18:38:48 CEST 2016
> LEAF Bering-uClibc 5.2.7 Rev 1 uClibc 0.9.33.2… 
> 
> jrb.


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] rép: [leaf-devel] 6.0.1 Issue with dropbear

[Jean-Roch Blais]

Hello list, 

for what it’s worth now, I have the same issue with Linux 4.1.30-x86_64 #1 SMP 
Sat Aug 20 18:38:48 CEST 2016
LEAF Bering-uClibc 5.2.7 Rev 1 uClibc 0.9.33.2… 

jrb.
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] leaf-user Digest, Vol 117, Issue 14

[Andrew]

You already did it :)

Switch off digests in maillist settings, use usual mailing instead 
(digests aren't useful IMHO, esp. on this list with 30-50 messages per 
month)

On 26.01.2017 18:48, Mansoor Ahmad wrote:
> How do I ask a question or two via this email so I can begin a dialouge?
>
>
> On 1/26/2017 9:40 AM, leaf-user-requ...@lists.sourceforge.net wrote:
>> Send leaf-user mailing list submissions to
>>  leaf-user@lists.sourceforge.net
>>
>> To subscribe or unsubscribe via the World Wide Web, visit
>>  https://lists.sourceforge.net/lists/listinfo/leaf-user
>> or, via email, send a message with subject or body 'help' to
>>  leaf-user-requ...@lists.sourceforge.net
>>
>> You can reach the person managing the list at
>>  leaf-user-ow...@lists.sourceforge.net
>>
>> When replying, please edit your Subject line so it is more specific
>> than "Re: Contents of leaf-user digest..."
>>
>>
>> Today's Topics:
>>
>>  1. Re: saving dnsmasq.leases on reboot (David M Brooke)
>>  2. Re: saving dnsmasq.leases on reboot (Andrew)
>>  3. Re: saving dnsmasq.leases on reboot (Erich Titl)
>>  4. Re: saving dnsmasq.leases on reboot (Bob von Knobloch)
>>  5. Re: saving dnsmasq.leases on reboot (Erich Titl)
>>  6. Re: saving dnsmasq.leases on reboot (Bob von Knobloch)
>>
>>
>> --
>>
>> Message: 1
>> Date: Thu, 26 Jan 2017 13:18:47 +
>> From: David M Brooke 
>> Subject: Re: [leaf-user] saving dnsmasq.leases on reboot
>> To: Bering List 
>> Message-ID: 
>> Content-Type: text/plain; charset=utf-8
>>
>>
>>> On 26 Jan 2017, at 09:22, Mark Berndt  wrote:
>>>
>>> On Tue, 24 Jan 2017 03:35:17 PM John Sager wrote:
 I think he wants to save it before every reboot rather than manually.
>>> yes, that is correct - I want to be able to save the ephemeral data that is
>>> not permanent configuration.
>>>
 That would need a crafted script to save it (probably from local.stop), and
 then reload it on boot up & make sure dnsmasq picked it up. You could put
 the script in /root as everything there is saved to configdb.lrp. However 
 if
 the router just died on a power failure then you would end up with an old
 leases file when it rebooted. Would that be a problem?
>>> I don't really see a problem with an old file, because the dhcp is fairly
>>> stable here.
>> An old file will probably contain expired leases, so it probably won?t work 
>> the way you want.
>> However, an old file is no worse than no file at all, so not a particular 
>> concern.
>>
>>> The problem I get now is that I have no leases after a router reboot which
>>> seriously effects my semi-permanent devices such as IP cameras, phone etc.  
>>> I
>>> can't set them to a really short lease, because if the router is down I lose
>>> access to them.
>> To Eric?s point from before, using Static Leases (via dhcp-host= in 
>> /etc/dnsmasq.conf)
>> ensures a device is given the same IP address consistently, but dnsmasq 
>> doesn?t seem
>> to add the host to DNS unless there?s an *active* DHCP lease in effect.
>> So you need to *also* add an entry in /etc/hosts, for the address you know 
>> will get allocated.
>>
>> Or we add some facility to save a defined list of ?emphemeral data? files on 
>> a reboot...
>>
>>> many thanks
>>>
>>> Marko
>>>
>>>
 John

 On 24/01/17 14:48, Erich Titl wrote:
> Hi
>
> Am 23.01.2017 um 22:46 schrieb Mark Berndt:
>> On Thu, 19 Jan 2017 04:52:57 PM Erich Titl wrote:
>>> Am 19.01.2017 um 02:24 schrieb Mark Berndt:
 When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.

 I added it to my local config so it is saved, but of course this only
 happens when save the config.

 What is the best way to preserve this information between reboots?
>>> The easiest way is to add it to /vart/lib/lrpkg/local.local
>>>
>>> cheers
>>>
>>> ET
>> Thanks John & ET.
>> How do I save the config from the command line, I want to put it in the
>> stop script.  Is it possible to just save the local data, not the whole
>> config?>
> What is local data if not the config.
>
> To save from the command line have a look at the apkg parameters.
>
> cheers
>
> ET
>
>>
>>
>> --
>>
>> Message: 2
>> Date: Thu, 26 Jan 2017 15:28:35 +0200
>> From: Andrew 
>> Subject: Re: [leaf-user] saving dnsmasq.leases on reboot
>> To: leaf-user@lists.sourceforge.net
>> Message-ID: <4aa08ed9-ffe7-aea7-fb91-03c46990f...@seti.kr.ua>
>> Content-Type: text/plain; charset=windows-1252; format=flowed
>>
>> Hi.
>>
>> The best solution will be set shall renew time and big lease time - but
>> it seems like dnsmasq doesn't support renew time 

Re: [leaf-user] leaf-user Digest, Vol 117, Issue 14

[Mansoor Ahmad]

How do I ask a question or two via this email so I can begin a dialouge?


On 1/26/2017 9:40 AM, leaf-user-requ...@lists.sourceforge.net wrote:
> Send leaf-user mailing list submissions to
>   leaf-user@lists.sourceforge.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
>   https://lists.sourceforge.net/lists/listinfo/leaf-user
> or, via email, send a message with subject or body 'help' to
>   leaf-user-requ...@lists.sourceforge.net
>
> You can reach the person managing the list at
>   leaf-user-ow...@lists.sourceforge.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of leaf-user digest..."
>
>
> Today's Topics:
>
> 1. Re: saving dnsmasq.leases on reboot (David M Brooke)
> 2. Re: saving dnsmasq.leases on reboot (Andrew)
> 3. Re: saving dnsmasq.leases on reboot (Erich Titl)
> 4. Re: saving dnsmasq.leases on reboot (Bob von Knobloch)
> 5. Re: saving dnsmasq.leases on reboot (Erich Titl)
> 6. Re: saving dnsmasq.leases on reboot (Bob von Knobloch)
>
>
> --
>
> Message: 1
> Date: Thu, 26 Jan 2017 13:18:47 +
> From: David M Brooke 
> Subject: Re: [leaf-user] saving dnsmasq.leases on reboot
> To: Bering List 
> Message-ID: 
> Content-Type: text/plain; charset=utf-8
>
>
>> On 26 Jan 2017, at 09:22, Mark Berndt  wrote:
>>
>> On Tue, 24 Jan 2017 03:35:17 PM John Sager wrote:
>>> I think he wants to save it before every reboot rather than manually.
>> yes, that is correct - I want to be able to save the ephemeral data that is
>> not permanent configuration.
>>
>>> That would need a crafted script to save it (probably from local.stop), and
>>> then reload it on boot up & make sure dnsmasq picked it up. You could put
>>> the script in /root as everything there is saved to configdb.lrp. However if
>>> the router just died on a power failure then you would end up with an old
>>> leases file when it rebooted. Would that be a problem?
>> I don't really see a problem with an old file, because the dhcp is fairly
>> stable here.
> An old file will probably contain expired leases, so it probably won?t work 
> the way you want.
> However, an old file is no worse than no file at all, so not a particular 
> concern.
>
>> The problem I get now is that I have no leases after a router reboot which
>> seriously effects my semi-permanent devices such as IP cameras, phone etc.  I
>> can't set them to a really short lease, because if the router is down I lose
>> access to them.
> To Eric?s point from before, using Static Leases (via dhcp-host= in 
> /etc/dnsmasq.conf)
> ensures a device is given the same IP address consistently, but dnsmasq 
> doesn?t seem
> to add the host to DNS unless there?s an *active* DHCP lease in effect.
> So you need to *also* add an entry in /etc/hosts, for the address you know 
> will get allocated.
>
> Or we add some facility to save a defined list of ?emphemeral data? files on 
> a reboot...
>
>> many thanks
>>
>> Marko
>>
>>
>>> John
>>>
>>> On 24/01/17 14:48, Erich Titl wrote:
 Hi

 Am 23.01.2017 um 22:46 schrieb Mark Berndt:
> On Thu, 19 Jan 2017 04:52:57 PM Erich Titl wrote:
>> Am 19.01.2017 um 02:24 schrieb Mark Berndt:
>>> When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.
>>>
>>> I added it to my local config so it is saved, but of course this only
>>> happens when save the config.
>>>
>>> What is the best way to preserve this information between reboots?
>> The easiest way is to add it to /vart/lib/lrpkg/local.local
>>
>> cheers
>>
>> ET
> Thanks John & ET.
> How do I save the config from the command line, I want to put it in the
> stop script.  Is it possible to just save the local data, not the whole
> config?>
 What is local data if not the config.

 To save from the command line have a look at the apkg parameters.

 cheers

 ET

>
>
>
> --
>
> Message: 2
> Date: Thu, 26 Jan 2017 15:28:35 +0200
> From: Andrew 
> Subject: Re: [leaf-user] saving dnsmasq.leases on reboot
> To: leaf-user@lists.sourceforge.net
> Message-ID: <4aa08ed9-ffe7-aea7-fb91-03c46990f...@seti.kr.ua>
> Content-Type: text/plain; charset=windows-1252; format=flowed
>
> Hi.
>
> The best solution will be set shall renew time and big lease time - but
> it seems like dnsmasq doesn't support renew time specifying...
>
> You may try to use some persistent-mounted partition that will store
> your leases (not a perfect solution, but it's suitable if this isn't a
> boot partition).
>
> Or you can try to add persistent IP records to dnsmasq config.
>
> On 26.01.2017 11:22, Mark Berndt wrote:
>> On Tue, 24 Jan 2017 03:35:17 PM John Sager wrote:
>>> I think he 

Re: [leaf-user] saving dnsmasq.leases on reboot

[Bob von Knobloch]

On 26/01/17 16:33, Erich Titl wrote:
> For such an environment I would use (semi-)static addresses and put the
> names to /etc/hosts.
>
> cheers
>
> Erich
Yes, that would be my choice too.

Cheers,
Bob

-- 
The Sun is out, the sky is blue, it's time to drive the MR2.

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[Erich Titl]

Hi Bob

Am 26.01.2017 um 16:09 schrieb Bob von Knobloch:

On 26/01/17 14:48, Erich Titl wrote:

Hi


...



cheers

Erich

Look at the dnsmasq option (from the manpage):

-K, --dhcp-authoritative
 Should be set when dnsmasq is definitely the only DHCP server on a
network. For DHCPv4, it changes the behaviour from strict RFC compliance
so that DHCP requests on unknown leases from unknown hosts are not
ignored. This allows new hosts to get a lease without a tedious timeout
under all circumstances. It also allows dnsmasq to rebuild its lease
database without each client needing to reacquire a lease, if the
database is lost. For DHCPv6 it sets the priority in replies to 255 (the
maximum) instead of 0 (the minimum).

Maybe this could help?


It could, still it appears that leases should not be shorter than one 
hour and if the leases file gets lost during a reboot then the DNS 
resolution for the the host might not work automatically although the 
system may still be reachable.


So the important point seems to be to preserve the DNS resolution for 
such a system and give dnsmasq a way to use it.


For such an environment I would use (semi-)static addresses and put the 
names to /etc/hosts.


cheers

Erich



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[Bob von Knobloch]

On 26/01/17 14:48, Erich Titl wrote:
> Hi
>
> Am 26.01.2017 um 14:18 schrieb David M Brooke:
>>
> ...
>> To Eric’s point from before, using Static Leases (via dhcp-host= in
>> /etc/dnsmasq.conf)
>> ensures a device is given the same IP address consistently, but
>> dnsmasq doesn’t seem
>> to add the host to DNS unless there’s an *active* DHCP lease in effect.
>
> Set a very short lease time for these important devices. If dnsmasq does
> not support this then think about another dhcp daemon and add the leases
> to /etc/hosts automagically. This here makes me feel like dnsmasq's dhcp
> capabilities show some shortcomings, but then.
>
> cheers
>
> Erich
Look at the dnsmasq option (from the manpage):

-K, --dhcp-authoritative
 Should be set when dnsmasq is definitely the only DHCP server on a 
network. For DHCPv4, it changes the behaviour from strict RFC compliance 
so that DHCP requests on unknown leases from unknown hosts are not 
ignored. This allows new hosts to get a lease without a tedious timeout 
under all circumstances. It also allows dnsmasq to rebuild its lease 
database without each client needing to reacquire a lease, if the 
database is lost. For DHCPv6 it sets the priority in replies to 255 (the 
maximum) instead of 0 (the minimum).

Maybe this could help?

Cheers,

Bob
-- 
The Sun is out, the sky is blue, it's time to drive the MR2.

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[Erich Titl]

Hi

Am 26.01.2017 um 14:18 schrieb David M Brooke:



...

To Eric’s point from before, using Static Leases (via dhcp-host= in 
/etc/dnsmasq.conf)
ensures a device is given the same IP address consistently, but dnsmasq doesn’t 
seem
to add the host to DNS unless there’s an *active* DHCP lease in effect.


Set a very short lease time for these important devices. If dnsmasq does 
not support this then think about another dhcp daemon and add the leases 
to /etc/hosts automagically. This here makes me feel like dnsmasq's dhcp 
capabilities show some shortcomings, but then.


cheers

Erich



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[Andrew]

Hi.

The best solution will be set shall renew time and big lease time - but 
it seems like dnsmasq doesn't support renew time specifying...

You may try to use some persistent-mounted partition that will store 
your leases (not a perfect solution, but it's suitable if this isn't a 
boot partition).

Or you can try to add persistent IP records to dnsmasq config.

On 26.01.2017 11:22, Mark Berndt wrote:
> On Tue, 24 Jan 2017 03:35:17 PM John Sager wrote:
>> I think he wants to save it before every reboot rather than manually.
> yes, that is correct - I want to be able to save the ephemeral data that is
> not permanent configuration.
>
>> That would need a crafted script to save it (probably from local.stop), and
>> then reload it on boot up & make sure dnsmasq picked it up. You could put
>> the script in /root as everything there is saved to configdb.lrp. However if
>> the router just died on a power failure then you would end up with an old
>> leases file when it rebooted. Would that be a problem?
> I don't really see a problem with an old file, because the dhcp is fairly
> stable here.
>
>   The problem I get now is that I have no leases after a router reboot which
> seriously effects my semi-permanent devices such as IP cameras, phone etc.  I
> can't set them to a really short lease, because if the router is down I lose
> access to them.
>
> many thanks
>
> Marko
>
>
>> John
>>
>> On 24/01/17 14:48, Erich Titl wrote:
>>> Hi
>>>
>>> Am 23.01.2017 um 22:46 schrieb Mark Berndt:
 On Thu, 19 Jan 2017 04:52:57 PM Erich Titl wrote:
> Am 19.01.2017 um 02:24 schrieb Mark Berndt:
>> When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.
>>
>> I added it to my local config so it is saved, but of course this only
>> happens when save the config.
>>
>> What is the best way to preserve this information between reboots?
> The easiest way is to add it to /vart/lib/lrpkg/local.local
>
> cheers
>
> ET
 Thanks John & ET.
 How do I save the config from the command line, I want to put it in the
 stop script.  Is it possible to just save the local data, not the whole
 config?>
>>> What is local data if not the config.
>>>
>>> To save from the command line have a look at the apkg parameters.
>>>
>>> cheers
>>>
>>> ET
>>>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[David M Brooke]

> On 26 Jan 2017, at 09:22, Mark Berndt  wrote:
> 
> On Tue, 24 Jan 2017 03:35:17 PM John Sager wrote:
>> I think he wants to save it before every reboot rather than manually.
> 
> yes, that is correct - I want to be able to save the ephemeral data that is 
> not permanent configuration.  
> 
>> 
>> That would need a crafted script to save it (probably from local.stop), and
>> then reload it on boot up & make sure dnsmasq picked it up. You could put
>> the script in /root as everything there is saved to configdb.lrp. However if
>> the router just died on a power failure then you would end up with an old
>> leases file when it rebooted. Would that be a problem?
> 
> I don't really see a problem with an old file, because the dhcp is fairly 
> stable here. 

An old file will probably contain expired leases, so it probably won’t work the 
way you want.
However, an old file is no worse than no file at all, so not a particular 
concern.

> 
> The problem I get now is that I have no leases after a router reboot which 
> seriously effects my semi-permanent devices such as IP cameras, phone etc.  I 
> can't set them to a really short lease, because if the router is down I lose 
> access to them.

To Eric’s point from before, using Static Leases (via dhcp-host= in 
/etc/dnsmasq.conf)
ensures a device is given the same IP address consistently, but dnsmasq doesn’t 
seem
to add the host to DNS unless there’s an *active* DHCP lease in effect.
So you need to *also* add an entry in /etc/hosts, for the address you know will 
get allocated.

Or we add some facility to save a defined list of “emphemeral data” files on a 
reboot...

> 
> many thanks
> 
> Marko
> 
> 
>> 
>> John
>> 
>> On 24/01/17 14:48, Erich Titl wrote:
>>> Hi
>>> 
>>> Am 23.01.2017 um 22:46 schrieb Mark Berndt:
 On Thu, 19 Jan 2017 04:52:57 PM Erich Titl wrote:
> Am 19.01.2017 um 02:24 schrieb Mark Berndt:
>> When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.
>> 
>> I added it to my local config so it is saved, but of course this only
>> happens when save the config.
>> 
>> What is the best way to preserve this information between reboots?
> 
> The easiest way is to add it to /vart/lib/lrpkg/local.local
> 
> cheers
> 
> ET
 
 Thanks John & ET.
 How do I save the config from the command line, I want to put it in the
 stop script.  Is it possible to just save the local data, not the whole
 config?> 
>>> What is local data if not the config.
>>> 
>>> To save from the command line have a look at the apkg parameters.
>>> 
>>> cheers
>>> 
>>> ET
>>> 
> 


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[Mark Berndt]

On Tue, 24 Jan 2017 03:35:17 PM John Sager wrote:
> I think he wants to save it before every reboot rather than manually.

yes, that is correct - I want to be able to save the ephemeral data that is 
not permanent configuration.  

> 
> That would need a crafted script to save it (probably from local.stop), and
> then reload it on boot up & make sure dnsmasq picked it up. You could put
> the script in /root as everything there is saved to configdb.lrp. However if
> the router just died on a power failure then you would end up with an old
> leases file when it rebooted. Would that be a problem?

I don't really see a problem with an old file, because the dhcp is fairly 
stable here. 

 The problem I get now is that I have no leases after a router reboot which 
seriously effects my semi-permanent devices such as IP cameras, phone etc.  I 
can't set them to a really short lease, because if the router is down I lose 
access to them.

many thanks

Marko


> 
> John
> 
> On 24/01/17 14:48, Erich Titl wrote:
> > Hi
> > 
> > Am 23.01.2017 um 22:46 schrieb Mark Berndt:
> >> On Thu, 19 Jan 2017 04:52:57 PM Erich Titl wrote:
> >>> Am 19.01.2017 um 02:24 schrieb Mark Berndt:
>  When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.
>  
>  I added it to my local config so it is saved, but of course this only
>  happens when save the config.
>  
>  What is the best way to preserve this information between reboots?
> >>> 
> >>> The easiest way is to add it to /vart/lib/lrpkg/local.local
> >>> 
> >>> cheers
> >>> 
> >>> ET
> >> 
> >> Thanks John & ET.
> >> How do I save the config from the command line, I want to put it in the
> >> stop script.  Is it possible to just save the local data, not the whole
> >> config?> 
> > What is local data if not the config.
> > 
> > To save from the command line have a look at the apkg parameters.
> > 
> > cheers
> > 
> > ET
> > 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[John Sager]

ntp.drift doesn't need to be saved often. A reasonably aged computer crystal
will probably have quite a frequency error in the tens of parts per million
range. That may change by a few ppm over daily temperature cycling but it
won't have much of a change of the average over a period of months. So for a
new installation of ntpd, let it settle for a couple of days, then save
ntp.drift in the config, and then it will just get saved as config changes
are made from time to time.

John

On 24/01/17 21:23, David M Brooke wrote:
> I’ve also thought about preserving the contents of dnsmasq,leases. Sometimes 
> I scp that file to another machine before a BuC reboot then scp it back again 
> (and “svi dnsmasq restart”) afterwards.
> 
> It’s not a huge issue to lose the DHCP leases themselves; mostly the pain 
> comes from DNS not knowing about DHCP-allocated addresses (which dnsmasq 
> takes care of automagically) after a router reboot, until the leases are 
> renewed.
> 
> Would adding a script to /etc/rc0.d/ work as a trigger to save the file - at 
> least for a planned reboot? If the power dies then there’s not much you can 
> do.
> I agree it would be overkill to re-save the file for every lease renewal.
> 
> John’s comment about ntp.drift is a good one and there is other ‘runtime 
> state’ that might benefit from being saved - e.g. vnstat traffic statistics.
> Arguably those settings are different from ‘static config’.
> 
> davidMbrooke
> 
>> On 24 Jan 2017, at 20:11, Erich Titl  wrote:
>>
>> Hi
>>
>> Am 24.01.2017 um 15:35 schrieb John Sager:
>>> I think he wants to save it before every reboot rather than manually.
>>
>> In the end that is the same, you need to know how to save the config.
>>
>> You could do that every time a new lease is granted but I think that 
>> this would be a pretty heavy operation. If you need this for statistical 
>> stuff then it would be easier to log the leases somewhere else. Actually 
>> I would not know what else you need the file for.
>>
>> cheers
>>
>> ET
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
> 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[Erich Titl]

Hi

Am 24.01.2017 um 22:23 schrieb David M Brooke:

I’ve also thought about preserving the contents of dnsmasq,leases. Sometimes I 
scp that file to another machine before a BuC reboot then scp it back again 
(and “svi dnsmasq restart”) afterwards.

It’s not a huge issue to lose the DHCP leases themselves; mostly the pain comes 
from DNS not knowing about DHCP-allocated addresses (which dnsmasq takes care 
of automagically) after a router reboot, until the leases are renewed.

Would adding a script to /etc/rc0.d/ work as a trigger to save the file - at 
least for a planned reboot?


Why not put it to the stop command? The planned reboot should go through 
these unless the scripts are broken.


 If the power dies then there’s not much you can do.

I agree it would be overkill to re-save the file for every lease renewal.

John’s comment about ntp.drift is a good one and there is other ‘runtime state’ 
that might benefit from being saved - e.g. vnstat traffic statistics.
Arguably those settings are different from ‘static config’.


And should therefore not go into config. I believe it all depends n the 
media. If you have a modern board which supports mSATA then why not 
write it do your mSATA disk on a different partition. Then you might 
also save each and every lease.


For the DNS issue, well if you need to preserve addresses or DNS 
resolution, then make those leases static. That is what they are for. 
The rest is really dynamic.


cheers

ET



smime.p7s
Description: S/MIME Cryptographic Signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[David M Brooke]

I’ve also thought about preserving the contents of dnsmasq,leases. Sometimes I 
scp that file to another machine before a BuC reboot then scp it back again 
(and “svi dnsmasq restart”) afterwards.

It’s not a huge issue to lose the DHCP leases themselves; mostly the pain comes 
from DNS not knowing about DHCP-allocated addresses (which dnsmasq takes care 
of automagically) after a router reboot, until the leases are renewed.

Would adding a script to /etc/rc0.d/ work as a trigger to save the file - at 
least for a planned reboot? If the power dies then there’s not much you can do.
I agree it would be overkill to re-save the file for every lease renewal.

John’s comment about ntp.drift is a good one and there is other ‘runtime state’ 
that might benefit from being saved - e.g. vnstat traffic statistics.
Arguably those settings are different from ‘static config’.

davidMbrooke

> On 24 Jan 2017, at 20:11, Erich Titl  wrote:
> 
> Hi
> 
> Am 24.01.2017 um 15:35 schrieb John Sager:
>> I think he wants to save it before every reboot rather than manually.
> 
> In the end that is the same, you need to know how to save the config.
> 
> You could do that every time a new lease is granted but I think that 
> this would be a pretty heavy operation. If you need this for statistical 
> stuff then it would be easier to log the leases somewhere else. Actually 
> I would not know what else you need the file for.
> 
> cheers
> 
> ET

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[Erich Titl]

Hi

Am 24.01.2017 um 15:35 schrieb John Sager:
> I think he wants to save it before every reboot rather than manually.

In the end that is the same, you need to know how to save the config.

You could do that every time a new lease is granted but I think that 
this would be a pretty heavy operation. If you need this for statistical 
stuff then it would be easier to log the leases somewhere else. Actually 
I would not know what else you need the file for.

cheers

ET





--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[John Sager]

I think he wants to save it before every reboot rather than manually.

That would need a crafted script to save it (probably from local.stop), and
then reload it on boot up & make sure dnsmasq picked it up. You could put
the script in /root as everything there is saved to configdb.lrp. However if
the router just died on a power failure then you would end up with an old
leases file when it rebooted. Would that be a problem?

John

On 24/01/17 14:48, Erich Titl wrote:
> Hi
> 
> Am 23.01.2017 um 22:46 schrieb Mark Berndt:
>> On Thu, 19 Jan 2017 04:52:57 PM Erich Titl wrote:
>>> Am 19.01.2017 um 02:24 schrieb Mark Berndt:
 When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.

 I added it to my local config so it is saved, but of course this only
 happens when save the config.

 What is the best way to preserve this information between reboots?
>>>
>>> The easiest way is to add it to /vart/lib/lrpkg/local.local
>>>
>>> cheers
>>
>>> ET
>>
>> Thanks John & ET.
>> How do I save the config from the command line, I want to put it in the stop
>> script.  Is it possible to just save the local data, not the whole config?
> 
> What is local data if not the config.
> 
> To save from the command line have a look at the apkg parameters.
> 
> cheers
> 
> ET
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
> 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[Erich Titl]

Hi

Am 23.01.2017 um 22:46 schrieb Mark Berndt:
> On Thu, 19 Jan 2017 04:52:57 PM Erich Titl wrote:
>> Am 19.01.2017 um 02:24 schrieb Mark Berndt:
>>> When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.
>>>
>>> I added it to my local config so it is saved, but of course this only
>>> happens when save the config.
>>>
>>> What is the best way to preserve this information between reboots?
>>
>> The easiest way is to add it to /vart/lib/lrpkg/local.local
>>
>> cheers
>
>> ET
>
> Thanks John & ET.
> How do I save the config from the command line, I want to put it in the stop
> script.  Is it possible to just save the local data, not the whole config?

What is local data if not the config.

To save from the command line have a look at the apkg parameters.

cheers

ET

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[Mark Berndt]

On Thu, 19 Jan 2017 04:52:57 PM Erich Titl wrote:
> Am 19.01.2017 um 02:24 schrieb Mark Berndt:
> > When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.
> > 
> > I added it to my local config so it is saved, but of course this only
> > happens when save the config.
> > 
> > What is the best way to preserve this information between reboots?
> 
> The easiest way is to add it to /vart/lib/lrpkg/local.local
> 
> cheers
> 
> ET

Thanks John & ET.  
How do I save the config from the command line, I want to put it in the stop 
script.  Is it possible to just save the local data, not the whole config?

thanks

Marko

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] 5.2.8-i486 not booting on soekris net5501

[Ecran Total]

Thank you Tim 

Using Notepad++ and displaying special characters, I have UNIX format (LF as
linefeed and not CRLF)
About booting the 5.2.8-i486, I tried the original archive without any
modification in *.cfg, without success (nothing after Loading
/initmod.lrpok).

Yes, the 6.0.2-rc1 i486 is booting successfully on the soekris net5501

Sam

-Message d'origine-
De : Timothy Wegner [mailto:t...@tswegner.net] 
Envoyé : samedi 21 janvier 2017 19:20
À : leaf-user
Objet : Re: [leaf-user] 5.2.8-i486 not booting on soekris net5501

I am successfully using 6.0.2-rc1 on both Soekris net 4801 and 6501 boxen.
The 486 version on the 4801 seems very sensitive to non-Unix EOF in
leaf.cfg.  Needs to be LF not Windows style CR LF. I have had boot problems
until I converted to LF. This may not be your problem but it's worth a try
to fix. For good measure I suggest cleaning up syslinux.cfg also, although
supposedly this file works with either kind of EOL so probably OK.

Tim

On Sat, Jan 21, 2017 at 10:43 AM, Ecran Total  wrote:

> Hi all,
>
> Bering-uClibc_5.2.8_i486_syslinux_serial19200  is not booting on 
> Soekris
> net5501
> Nothing happen after the message:   Loading  /initmod.lrpok
> Cursor blinking !
>
> With 6.0.2-rc1, after waiting 30-60s, the login is displayed.
>
> Another problem I encountered with the 6.0 geode version, it hangs 
> after many days (or hours).
>
> Thanks for any help.
>
> Sam
>
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most 
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> --
> -- leaf-user mailing list: leaf-user@lists.sourceforge.net 
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>

--
Check out the vibrant tech community on one of the world's most engaging
tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] Module loading issues in 6.0.2-rc1 (copy to the list)

[John Sager]

I already replied direct to Erich but here is the patch for
/etc/init.d/[iptables|ip6tables] to do the mount/unmount modules.sqfs properly.

regards,

John

On 18/01/17 21:53, Erich Titl wrote:
> Hi John
> 
> Am 18.01.2017 um 10:15 schrieb John Sager:
>> I'm trying to get 6.0.2-rc1 working on a PC Engines apu2c2 but there are
>> problems with loading modules in some cases. I note that the moddb stuff has
>> been removed and all module loading is now done from modules.sqfs mounted to
>> /lib/modules/$KVER. Although this works at early boot time to load modules
>> in /etc/modules it fails later on for iptables-restore and
>> ip6tables-restore. iptables and ip6tables autoload modules as needed for the
>> specific rules required. Although the scripts in /etc/init.d for iptables &
>> ip6tables mount modules.sqfs to load the helper modules in IPTABLES_MODULES
>> they don't for the -restore operation. iptables-restore is effectively just
>> a wrapper round iptables so it autoloads modules in the same way.
> 
> Yes, LEAF Bering is geared towards shorewall and there the module 
> loading process has been implemented. Not so for native iptables support.
> 
> You can either add the necessary modules to /etc/modules or better, 
> extend iptables to include the module mounting/unmounting functions. 
> Please provide apatch if you do so.
> 
> cheers
> 
> Erich
> 
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
> 
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] 5.2.8-i486 not booting on soekris net5501

[Timothy Wegner]

I am successfully using 6.0.2-rc1 on both Soekris net 4801 and 6501 boxen.
The 486 version on the 4801 seems very sensitive to non-Unix EOF in
leaf.cfg.  Needs to be LF not Windows style CR LF. I have had boot problems
until I converted to LF. This may not be your problem but it's worth a try
to fix. For good measure I suggest cleaning up syslinux.cfg also, although
supposedly this file works with either kind of EOL so probably OK.

Tim

On Sat, Jan 21, 2017 at 10:43 AM, Ecran Total  wrote:

> Hi all,
>
> Bering-uClibc_5.2.8_i486_syslinux_serial19200  is not booting on Soekris
> net5501
> Nothing happen after the message:   Loading  /initmod.lrpok
> Cursor blinking !
>
> With 6.0.2-rc1, after waiting 30-60s, the login is displayed.
>
> Another problem I encountered with the 6.0 geode version, it hangs after
> many days (or hours).
>
> Thanks for any help.
>
> Sam
>
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] 5.2.8-i486 not booting on soekris net5501

[Ecran Total]

Hi all,

Bering-uClibc_5.2.8_i486_syslinux_serial19200  is not booting on Soekris
net5501
Nothing happen after the message:   Loading  /initmod.lrpok
Cursor blinking !

With 6.0.2-rc1, after waiting 30-60s, the login is displayed.

Another problem I encountered with the 6.0 geode version, it hangs after
many days (or hours). 

Thanks for any help.

Sam



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] SD card solved (was FYI: 6.0.2-rc1 works on a PC Engines apu2c2 but with issues)

[Jean-Roch Blais]

Excellent news, thank’s for the info, I might order one now, ~ 175US$ here in 
Canada !

jrb.

> Le 20 janv. 2017 à 04:23, John Sager  a écrit :
> 
> I finally managed to get the apu2c2 to boot off a SD card. As I only use
> syslinux once in a blue moon I forgot about mbr.bin. Neither fdisk nor
> syslinux sets up the Master Boot Record so mbr.bin needs to be copied to the
> first disk sector using dd.
> 
> The other thing to change is /dev/sda1. Linux doesn't render SD cards as
> virtual scsi devices (/dev/sd*). Instead they are mapped as mmc devices -
> /dev/mmcblk0 with the partitions as /dev/mmcblk0p1 etc. So occurrences of
> /dev/sda1 in leaf.cfg and syslinux/syslinux.cfg need to be changed to
> /dev/mmcblk0p1. With those changes Leaf boots fine from a SD card on the 
> apu2c2.
> 
> John
> 
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] SD card solved (was FYI: 6.0.2-rc1 works on a PC Engines apu2c2 but with issues)

[John Sager]

I finally managed to get the apu2c2 to boot off a SD card. As I only use
syslinux once in a blue moon I forgot about mbr.bin. Neither fdisk nor
syslinux sets up the Master Boot Record so mbr.bin needs to be copied to the
first disk sector using dd.

The other thing to change is /dev/sda1. Linux doesn't render SD cards as
virtual scsi devices (/dev/sd*). Instead they are mapped as mmc devices -
/dev/mmcblk0 with the partitions as /dev/mmcblk0p1 etc. So occurrences of
/dev/sda1 in leaf.cfg and syslinux/syslinux.cfg need to be changed to
/dev/mmcblk0p1. With those changes Leaf boots fine from a SD card on the apu2c2.

John


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[Erich Titl]

Am 19.01.2017 um 02:24 schrieb Mark Berndt:
> When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.
>
> I added it to my local config so it is saved, but of course this only happens
> when save the config.
>
> What is the best way to preserve this information between reboots?

The easiest way is to add it to /vart/lib/lrpkg/local.local

cheers

ET

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] saving dnsmasq.leases on reboot

[John Sager]

the line 'var/lib/misc/dnsmasq.leases' needs to be added to the file
var/lib/lrpkg/dnsmasq.local in the dnsmasq.lrp package. You can do that
locally - untar dnsmasq.lrp into a temporary directory, edit the file & then
re-tar the directory contents to dnsmasq.lrp. When the configuration is
saved the script reads all the *.local files in /var/lib/lrpkg to tell it
what to save.

I have the same problem with ntpd.lrp. The distro version fails to save
/var/lib/ntp/ntp.drift. That is important so that the ntpd time offset error
converges quickly on reboot.

John

On 19/01/17 02:24, Mark Berndt wrote:
> When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.  
> 
> I added it to my local config so it is saved, but of course this only happens 
> when save the config.  
> 
> What is the best way to preserve this information between reboots?
> 
> I know I've got /etc/default/local.stop scripts, but how would I update the 
> local config only?
> 
> cheers
> 
> Marko 
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
> 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

[leaf-user] saving dnsmasq.leases on reboot

[Mark Berndt]

When I reboot my leaf system, /var/lib/misc/dnsmasq.leases is lost.  

I added it to my local config so it is saved, but of course this only happens 
when save the config.  

What is the best way to preserve this information between reboots?

I know I've got /etc/default/local.stop scripts, but how would I update the 
local config only?

cheers

Marko 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] Module loading issues in 6.0.2-rc1

[Erich Titl]

Hi John

Am 18.01.2017 um 20:05 schrieb John Sager:
> No, I am using the vanilla iptables package and the iptables script there
> does a iptables-restore as part of its 'start' functionality. So it needs
> the modules to be available at that point. I'll look at a patch to fix it. I
> don't want to use shorewall as I've got a lot of QoS stuff going on in the
> 'mangle' table, and it's just easier to configure it all manually.

Very well, all you will have to do to make the modules visible is to call

mount_modules

before they need to be loaded

then

umount_modules

when you are done

cheers

ET



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] Module loading issues in 6.0.2-rc1 (copy to the list)

[Erich Titl]

Hi John

Am 18.01.2017 um 10:15 schrieb John Sager:
> I'm trying to get 6.0.2-rc1 working on a PC Engines apu2c2 but there are
> problems with loading modules in some cases. I note that the moddb stuff has
> been removed and all module loading is now done from modules.sqfs mounted to
> /lib/modules/$KVER. Although this works at early boot time to load modules
> in /etc/modules it fails later on for iptables-restore and
> ip6tables-restore. iptables and ip6tables autoload modules as needed for the
> specific rules required. Although the scripts in /etc/init.d for iptables &
> ip6tables mount modules.sqfs to load the helper modules in IPTABLES_MODULES
> they don't for the -restore operation. iptables-restore is effectively just
> a wrapper round iptables so it autoloads modules in the same way.

Yes, LEAF Bering is geared towards shorewall and there the module 
loading process has been implemented. Not so for native iptables support.

You can either add the necessary modules to /etc/modules or better, 
extend iptables to include the module mounting/unmounting functions. 
Please provide apatch if you do so.

cheers

Erich


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Re: [leaf-user] FYI: 6.0.2-rc1 works on a PC Engines apu2c2 but with issues

[John Sager]

I've given up on SD boot for the moment & ordered a mSATA card. It looks
like it will be easy to copy over the software & config on the USB stick.

John

On 18/01/17 17:05, kp kirchdoerfer wrote:
> Am Mittwoch, 18. Januar 2017, 16:42:43 schrieb John Sager:
>> I've got coreboot version 20160307. According to the PC Engines website this
>> introduces SD boot support. There is a 20160311 version so I may try that.
> 
> I don't believe that will help a lot, according to the sparse notes it just 
> adds pxe boot, and the thread you've linked to was related to the latest BIOS.
> 
> As I said, it still seems to be an issue and the advice from support tells 
> the 
> same story in other words :(
> 
> kp
> 
>> John
>>
>> On 18/01/17 15:40, kp kirchdoerfer wrote:
>>> Hi John;
>>>
>>> Am Mittwoch, 18. Januar 2017, 09:41:26 schrieb John Sager:
 For some years I've run leaf-bering on a PC Engines Alix 2D13 board as my
 main router, but now I need to upgrade to a board that supports gigabit
 ethernet, vlans, baby jumbo frames, etc.

 The apu2c2 board has 3 gigabit LAN ports, 2 USB3 ports, SD card reader
 plus
 mSATA & PCI express sockets.

 Using Bering-uClibc_6.0.2-rc1_x86_64_syslinux_serial115200.tar.gz on a
 USB
 stick the board boots fine. However I can't get it to boot from a SD
 card.
 The bios boot (coreboot) recognises the SD card in the boot list but then
 hangs at the point where it should transfer to syslinux. This is
 obviously a PC Engines issue and not one for Leaf. There is a thread
 about this on PC Engines' forum:

 http://pcengines.info/forums/?page=post=1532182F-D982-4735-A4BF-7E786E
 C42 179
>>>
>>> Do you even have installed a BIOS with SD support?
>>> I've got one of the earlier borads with an older BIOS and had to update to
>>> 160211 to get the wlee200nx to work, works fine with mSATA. I've updated
>>> later the kernel because a user had a SD card with support for the SD
>>> card, but AFAIR got no feedback since.
>>>
>>> But it seems, following the  thredad above SD issus might not be solved
>>> finally ...?
>>>
>>> kp
>>>
 However the recommendation seems to be to use a mSATA card instead:(

 If I go down that route though that brings up another problem - the
 apu2c2
 is the only mSATA interface I have available, and the tools required to
 transfer the working config from the USB stick to mSATA (fdisk,
 mkfs.vfat,
 syslinux) don't seem to be available in any of the Leaf packages. I would
 probably have to boot up TinyCore Linux temporarily to do the transfer.

 Having transferred the appropriate (5.2.4) configs from the old router, I
 have run into module loading problems - see my next e-mail for a
 discussion
 of this.

 regards,

 John Sager

 -
 --- -- Check out the vibrant tech community on one of the world's most
 engaging tech sites, SlashDot.org! http://sdm.link/slashdot
 
 leaf-user mailing list: leaf-user@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 Support Request -- http://leaf-project.org/
>>>
>>> --
>>>  Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>>> 
>>> leaf-user mailing list: leaf-user@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>>> Support Request -- http://leaf-project.org/
>>
>> 
>> -- Check out the vibrant tech community on one of the world's most
>> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>> 
>> leaf-user mailing list: leaf-user@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>> Support Request -- http://leaf-project.org/
> 
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
> 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: 

Re: [leaf-user] Module loading issues in 6.0.2-rc1

[kp kirchdoerfer]

Hi;

I understand you are talking neither about about shorewall nor 
/etc/init.d/iptables (start/stop/restart), which seesm to work, but plain 
iptables(-restore) binary?

kp

Am Mittwoch, 18. Januar 2017, 10:15:03 schrieb John Sager:
> I'm trying to get 6.0.2-rc1 working on a PC Engines apu2c2 but there are
> problems with loading modules in some cases. I note that the moddb stuff has
> been removed and all module loading is now done from modules.sqfs mounted
> to /lib/modules/$KVER. Although this works at early boot time to load
> modules in /etc/modules it fails later on for iptables-restore and
> ip6tables-restore. iptables and ip6tables autoload modules as needed for the
> specific rules required. Although the scripts in /etc/init.d for iptables &
> ip6tables mount modules.sqfs to load the helper modules in IPTABLES_MODULES
> they don't for the -restore operation. iptables-restore is effectively just
> a wrapper round iptables so it autoloads modules in the same way.
> 
> There are other configuration applications that operate closely with the
> kernel - e.g tc - and perhaps some of them also autoload modules as
> necessary. They will also fail in the absence of a mounted modules.sqfs, as
> will ad-hoc use of iptables during testing of new configurations in a
> working environment.
> 
> For the moment I will solve it by creating a version of /etc/modules from a
> lsmod listing once everything is running properly but a better solution than
> that is needed. Are there issues with mounting modules.sqfs permanently?
> Would mounting /dev/sda1 permanently & readonly interfere with mounting it
> readwrite temporarily somewhere else to update configdb.lrp?
> 
> regards,
> 
> John Sager
> 
> 
> -- Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> 
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/