Re: Windows Server on Qemu
> Le 13 août 2015 à 08:41, Mike Larkin a écrit : > > On Wed, Aug 12, 2015 at 06:40:33PM -0700, Mike Larkin wrote: >> On Wed, Aug 12, 2015 at 10:00:49PM +0200, Joel Carnat wrote: >>> Hi, >>> >>> Anyone here succeeded in having Windows Server 2008/2008R2/2012/2012R2 run >>> in qemu-2.2.0 (OpenBSD 5.7/amd64) ? >>> >>> Mine keeps going BSOD on installation. Most of documentation I found was >>> Linux-centric so I may miss some OpenBSD trick. >>> >>> TIA, >>> Jo >>> >> >> I just installed Server 2008 datacenter without any issues. >> >> I'll try some other versions later. >> >> -ml >> > > Server 2008 datacenter 32 bit installed fine. Ah. I only tried 64 bit versions. > > Any later version requires 64 bit and doesn't work on TCG (unaccelerated) > qemu. This is a qemu bug, not an OpenBSD bug. > > Apparently with a couple of diffs floating around on the qemu mailing > list, you can at least get past the 5D BSOD, but you just end up > getting whacked by PatchGuard after a few minutes due to other bugs > in qemu. And then someone fixed^Whacked around that issue and got > further, but then broke app compatibility in some cases. > Yep, that’s what I read too. I was hoping there were good news I didn’t found. > See: > > http://lists.gnu.org/archive/html/qemu-devel/2014-08/msg02161.html > > and > > http://lists.gnu.org/archive/html/qemu-devel/2012-09/msg01412.html > > and > > http://lists.gnu.org/archive/html/qemu-devel/2015-07/msg03729.html > > I'm not sure what you were after, but if you just need "any Windows > server", 32 bit server 2008 runs fine (albeit very slowly, like 25% > native speed). Well, I’m just thinking of replacing my ESXi with an OpenBSD server with Qemu instances. It’s not for production purpose ; just trying/checking a few things on recent MS software. Speed wouldn’t be an issue. I just need to have them work ; from time to time. Regards, Jo
Re: can't wake from zzz
> > > On Thu, May 21, 2015 at 12:23:01AM +0200, Marko Cupa? wrote: > > > > Hi, > > > > > > > > I'm on 2015-May-20 snapshot, running xfce on a laptop which > > > > does not wake from zzz. > > > > > > Catching up on old emails - > > > > > > Please try a new snapshot since things have changed a bit since > > > May. > > > > Thank you for reminding me it's time to check if there has been some > > progress with my favourite OS' support for my ThinkPad T440. > > > > > If this is still a problem, you'll need to give more information > > > than just "does not wake from zzz". Does it power on but not get > > > back to where you suspended? Does the fan start, backlight come > > > on? Does it reboot? etc ... > > > > It does not power on. This laptop is very quiet when running > > OpenBSD, most of the time I don't know if fan rotates or not, but I > > guess it does not start after pressing power button in suspended > > state. No backlight either. Power button on T440 has green led > > light, and after going into suspended state led has slow on/off > > pattern. It doesn't change by pressing the button. All I can do is > > holding it for more than 4 seconds to turn it off. > > A couple notes: > > 1. Try what kettenis@ suggested with the tpm (on -current), let us > know what happens. I disabled TPM and waking from zzz works now as well. Thanks for the tip, Mark! > 2. It looks like the lid is only going to wake your machine from S4 > 'ZZZ', which is a bit odd. Opening the lid should not (and apparently > does not) wake from 'zzz'. Opening the lid does wake from both zzz and ZZZ in XFCE. Should I test it without graphical environment started? > 3. try pressing the blue "Fn" button on the keyboard when it's asleep > in 'zzz'. That sometimes is wired on thinkpads to the SLPB device. Or > try whatever the combination for "sleep" is (something like Fn+F4 > usually, but look on your keyboard). Pressing "Fn" button (white, not blue on T440 though :) wakes up from zzz, and so does pressing power button. Fn+F4 is mic mute, I don't think there is Fn+FX sleep button on this model. > If #3 above works, we probably aren't setting up the masks right for > wake from the fixed function power button. Can you send an acpidump > (apologies if you did, but it got nuked somewhere) in the meantime? I never sent acpidump. Here's the link (as attachments are not allowed here if I remember well): https://www.mimar.rs/oblak/index.php/s/FUBVrwA2N656yZV It will be there until the end of August. Regards, -- Marko Cupać https://www.mimar.rs/
Re: can't wake from zzz
On Thu, Aug 13, 2015 at 11:53:29AM +0200, Marko Cupa?? wrote: > > > > On Thu, May 21, 2015 at 12:23:01AM +0200, Marko Cupa? wrote: > > > > > Hi, > > > > > > > > > > I'm on 2015-May-20 snapshot, running xfce on a laptop which > > > > > does not wake from zzz. > > > > > > > > Catching up on old emails - > > > > > > > > Please try a new snapshot since things have changed a bit since > > > > May. > > > > > > Thank you for reminding me it's time to check if there has been some > > > progress with my favourite OS' support for my ThinkPad T440. > > > > > > > If this is still a problem, you'll need to give more information > > > > than just "does not wake from zzz". Does it power on but not get > > > > back to where you suspended? Does the fan start, backlight come > > > > on? Does it reboot? etc ... > > > > > > It does not power on. This laptop is very quiet when running > > > OpenBSD, most of the time I don't know if fan rotates or not, but I > > > guess it does not start after pressing power button in suspended > > > state. No backlight either. Power button on T440 has green led > > > light, and after going into suspended state led has slow on/off > > > pattern. It doesn't change by pressing the button. All I can do is > > > holding it for more than 4 seconds to turn it off. > > > > A couple notes: > > > > 1. Try what kettenis@ suggested with the tpm (on -current), let us > > know what happens. > I disabled TPM and waking from zzz works now as well. Thanks for > the tip, Mark! > > > 2. It looks like the lid is only going to wake your machine from S4 > > 'ZZZ', which is a bit odd. Opening the lid should not (and apparently > > does not) wake from 'zzz'. > Opening the lid does wake from both zzz and ZZZ in XFCE. Should I test > it without graphical environment started? > This was a misread on my part, it should wake from S4 *and higher* which obviously includes S3 (zzz). Glad to see things are working. -ml > > 3. try pressing the blue "Fn" button on the keyboard when it's asleep > > in 'zzz'. That sometimes is wired on thinkpads to the SLPB device. Or > > try whatever the combination for "sleep" is (something like Fn+F4 > > usually, but look on your keyboard). > Pressing "Fn" button (white, not blue on T440 though :) wakes up from > zzz, and so does pressing power button. Fn+F4 is mic mute, I don't > think there is Fn+FX sleep button on this model. Sounds good. > > > If #3 above works, we probably aren't setting up the masks right for > > wake from the fixed function power button. Can you send an acpidump > > (apologies if you did, but it got nuked somewhere) in the meantime? > I never sent acpidump. Here's the link (as attachments are not allowed > here if I remember well): > https://www.mimar.rs/oblak/index.php/s/FUBVrwA2N656yZV > > It will be there until the end of August. As per the TPM fix, I think this is not needed anymore but thanks anyway. > > Regards, > -- > Marko Cupa?? > https://www.mimar.rs/
Re: host(1) prints errors to STDOUT
On 2014-10-15 Wed 16:25 PM |, Craig R. Skinner wrote: > On 2014-10-14 Tue 10:41 AM |, Theo de Raadt wrote: > > Unfortunately host is maintained upstream, in the bind codebase, > > by ISC. > > > > You should file your bug report there, because that is the right way > > to get change into the ecosystem. > > > > Submitted, with their GITWEB line number refs. > > "ISC's bug database is not publicly readable, in order to protect the > privacy of users who have included identifying information or attached > logs or crash dumps to their bug reports." > > http://www.isc.org/community/report-bug/ > Update: On Fri Jul 03 12:29:43 2015, skin...@britvault.co.uk wrote: > Has this bug been fixed? Hi again Craig, and sorry for the delay in response. Here's the thing: a DNS utility either gets a response, or not. NXDOMAIN is a response. Therefore it's not going to stderr: a successful query was made. That said, we're aware that people want easy ways to make distinctions between YXDOMAIN and other successful query responses. But at this time it's not a very high priority. We'll let you know if that changes, and what, if anything, we decide to do about it. Thanks (This thread: http://marc.info/?t=14133048275)
Re: perl fctnl woes
Hi Tilo, On Tue, 11 Aug 2015 17:11:13 +0200 Tilo Stritzky wrote: > Am I doing something silly here? Or is there a bug? > I see the same result on i386 and amd64. Same for /dev/sound. > This works on a 5.5 release, but not on later releases or current. I've been able to reproduce this with a simple C program on amd64 -current. I've tracked it down to the recent audio(4) subsystem rewrite, which removed support for the FIOASYNC ioctl(2) (used internally by fcntl(2)). However, this implies it should work on 5.6 and 5.7. I don't have any such systems with audio devices available to test; are you sure you're seeing the same behaviour on those releases? Below is a diff that fixes the problem for me. I'm not sure if the EINVAL on set is needed, as other drivers which don't support FIOASYNC (drm(4), hotplug(4), random(4) and systrace(4)) appear to just ignore that ioctl completely. I'm sure someone more experienced than I will know the answer to that. > Incidentally, are there perl bindings for the native sound interface > sio_open(3)? I wrote some low-level Perl bindings a few weeks ago: https://github.com/stevenjm/perl-Audio-Sndio They're not on CPAN yet because they're not finished, mainly because I'm not yet sure if writing a higher-level interface in pure Perl or extending the XS code is a better approach. The low-level bindings are usable as is, and probably a better option than talking to /dev/audio directly. Index: audio.c === RCS file: /cvs/src/sys/dev/audio.c,v retrieving revision 1.138 diff -u -p -r1.138 audio.c --- audio.c 29 Jul 2015 21:13:32 - 1.138 +++ audio.c 13 Aug 2015 10:35:08 - @@ -1542,6 +1542,11 @@ audio_ioctl(struct audio_softc *sc, unsi case FIONBIO: /* All handled in the upper FS layer. */ break; + case FIOASYNC: + /* No async mode, so set is an error, unset is a noop. */ + if (*(int *)addr) + error = EINVAL; + break; case AUDIO_PERROR: mtx_enter(&audio_lock); *(int *)addr = sc->play.xrun / (sc->pchan * sc->bps);
cert.pem 400 after updating stable 5.7
Every time I update my 5.7 systems by following stable the permissions of /etc/ssl/cert.pem are set to 400. Noticed this because OpenSMTPD stopped sending mail since it can not verify ssl connections: TempFail, "stat=Network error on destination MXs". Cheers, -Tim
Re: cert.pem 400 after updating stable 5.7
Op 13-08-15 om 14:59 schreef Tim Kuijsten: Every time I update my 5.7 systems by following stable the permissions of /etc/ssl/cert.pem are set to 400. Noticed this because OpenSMTPD stopped sending mail since it can not verify ssl connections: TempFail, "stat=Network error on destination MXs". Cheers, -Tim Found it :/ # umask 077
Re: Repartitioning
And... here's an about 25 minute long video tutorial on how to do what I think you want. Yes I probably had better things to do, but nothing came to mind that seemed more fun... :-) Thank you so much! A full walkthrough always helps. There are some comments inline on what happens and why. Btw, you worry too much about your typing. Going slow is totally fine, anyone watching can just speed it up and/or skip around. Unfortunately I don't know much about video formats and editing, so this is straight from VirtualBox in webm format, whatever that is. webm is a new(ish) format Google whipped up to try to skirt around some patents and avoid all the copyright crap revolving around other formats. It's been around for a few years now, so any half-assed player can handle it. Feel free to ask me on or off list if you have any questions or run into any problems! 1) Thank you for (accidentally) reminding me that unmounting /usr may stop some programs from working. I sometimes forget that "core" utilities like vim et al live in /usr/* on most systems. 2) I notice you use 'halt -p' directly, even in multi-user mode. Isn't it safer to use 'shutdown'?
Re: Windows Server on Qemu
On Wed, 12 Aug 2015 18:40:33 -0700 Mike Larkin wrote: > On Wed, Aug 12, 2015 at 10:00:49PM +0200, Joel Carnat wrote: > > Hi, > > > > Anyone here succeeded in having Windows Server > > 2008/2008R2/2012/2012R2 run in qemu-2.2.0 (OpenBSD 5.7/amd64) ? > > > > Mine keeps going BSOD on installation. Most of documentation I > > found was Linux-centric so I may miss some OpenBSD trick. > > > > TIA, > > Jo > > > > I just installed Server 2008 datacenter without any issues. > > I'll try some other versions later. > > -ml > The last I heard was that OpenBSD didn's support hardware accelerated Qemu and probably never would. Has this changed? SteveT Steve Litt August 2015 featured book: Troubleshooting: Just the Facts http://www.troubleshooters.com/tjust
64 Queue Sizes in OpenBSD 5.8
Hi, Is their any news whether we'll have 64bit PF queue sizes soon? Our link between our Primary and DR DCs needs more than 4.2Gbps, but we cannot shape traffic above this due to the 32bit queues. Simply we need to impose shaping to ensure the CDR is not breached. We really need to upgrade the CDR to 6Gbps, but the penalties for taking our 95% percentile above the CDR are very expensive. Cheers, Andy.
Re: pf_rules
Am 12.08.2015 um 22:07 schrieb Stuart Henderson: On 2015-08-12, Holger Glaess wrote: hi i miss the option pf_rules= for rc.conf.local in current ( build today ) is this correct ? holger Yes, it was totally removed revision 1.449 date: 2015/05/02 09:35:44; author: ajacoutot; state: Exp; lines: +5 -5; comm itid: KEtyXRbrWc1uCPli; Drop pf_rules and ipsec_rules from rc.conf(5); it shouldn't have been made tweakable: there's no real point and these files support the 'include' option so one can always get its config from whatever path... especially useful when testing a new ruleset. man page inputs from schwarze@ ok halex@ schwarze@ rpe@ deraadt@ hi thanks for answer . this change make no sense for me but the devs decid. holger
Re: Windows Server on Qemu
You might be interest in using a cheap VPS from Vultr. You can run it on demand, if you need only X hours of use you only pay X hours.
Re: Windows Server on Qemu
On Wed, Aug 12, 2015 at 07:30:35PM -0600, Jorge Castillo wrote: > You might be interest in using a cheap VPS from Vultr. You can run it on > demand, if you need only X hours of use you only pay X hours. > Or a free micro instance from AWS.
redirect nor vpn (as I know it) solves this problem
Problem is a device that, due to its limitations, must have a default gateway that is not the default gateway of the OpenBSD router (unlike the rest of the network) so I'm having difficulty connecting to it from the outside world. Two networks, both routers are OpenBSD, the internal networks are RFC1918 (and different), the external IP addresses are public. The problem device is on one of the networks and I need to communicate with it from the other network. I can get packets to it via a redirect but return packets go to the wrong place. I thought maybe a site-to-site VPN (ipsec between the two routers) would work, but no, same problem as the incoming packets appear to come from the other internal network (unlike the redirect which appears to come from the other public IP address). What I need to have happen is for the incoming packets to the problematic device to have a source address in that private subnet (the internal address of the router) so that the device sends return packets to the right place instead of its configured default gateway (which is not the router). So I'm looking for a transparent solution (as far as the users are concerned). Can this be done? Thanks, Chris
Re: redirect nor vpn (as I know it) solves this problem
Am Donnerstag, den 13.08.2015, 22:10 -0400 schrieb Sonic: > Problem is a device that, due to its limitations, must have a default > gateway that is not the default gateway of the OpenBSD router (unlike > the rest of the network) so I'm having difficulty connecting to it > from the outside world. Have you though about placing a router at that hard configured default gateway address, which forwards the packets to your BSD router (or sends ICMP redirects)? Alternatively, just configure that address on the internal interface of the router as an -alias. > What I need to have happen is for the incoming packets to the > problematic device to have a source address in that private subnet > (the internal address of the router) so that the device sends return > packets to the right place instead of its configured default gateway > (which is not the router). Sounds like an typical use case for NAT to me (inbound nat-to). Alternatively, beam yourself into that network using some kind of L2 VPN. Possibilities would be EtherIP (gif(4)) or vxlan(4) over IPsec(4) or OpenVPN respectively. -- David Dahlberg Fraunhofer FKIE, Dept. Communication Systems (KOM) | Tel: +49-228-9435-845 Fraunhoferstr. 20, 53343 Wachtberg, Germany| Fax: +49-228-856277
