Re: [OpenIndiana-discuss] Recovering from power loss on USB ZFS pool?
looks like we are running into : https://www.illumos.org/issues/2607 Mike On Fri, 2014-03-28 at 08:33 -0700, Reginald Beardsley wrote: I'm referencing a rather different situation.Dropping power to a drive while you're writing to it is quite different from breaking a mirror and moving the disk to another machine. I've done this a couple of times, once because the wall wart was on the wall rather than on a power strip and got bumped. This time it was on a power strip that was hard to access and even harder to see what I was doing. So I unplugged the wrong one. I've not had a problem dropping power to the system when it wedges, but I have long standing nervousness about forcing systems down in that fashion. So a cleaner solution would be nice. First priority of course is to not pull the USB power until after the pool has been exported ;-) I'd be quite interested in how you handled the device naming problem. I beat myself silly a couple of years ago trying to find a clean way to replicate a zfs pool based system image. In the end I gave up and just did manual installs. On Fri, 3/28/14, Michael Stapleton michael.staple...@techsologic.com wrote: Subject: Re: [OpenIndiana-discuss] Recovering from power loss on USB ZFS pool? To: Discussion list for OpenIndiana openindiana-discuss@openindiana.org Date: Friday, March 28, 2014, 10:04 AM I'm not sure when things changed, but way back in the OpenSolaris days, I had the root drive in my laptop mirrored to an external USB drive. I never had problems back then. I would do a demonstration where I would remove the USB drive while the laptop was up and running, and then plug the USB submirror into another laptop and boot from it. Never had a problem. I could even reattach the USB drive to my laptop and it would resilver automatically. Is the problem ZFS or USB or FMA? no idea. But the was a regression of sorts. I don't think Solaris11 suffers from this. Mike ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Recovering from power loss on USB ZFS pool?
I'm not sure when things changed, but way back in the OpenSolaris days, I had the root drive in my laptop mirrored to an external USB drive. I never had problems back then. I would do a demonstration where I would remove the USB drive while the laptop was up and running, and then plug the USB submirror into another laptop and boot from it. Never had a problem. I could even reattach the USB drive to my laptop and it would resilver automatically. Is the problem ZFS or USB or FMA? no idea. But the was a regression of sorts. I don't think Solaris11 suffers from this. Mike On Thu, 2014-03-27 at 18:39 +, Jonathan Adams wrote: On 27 March 2014 18:28, Reginald Beardsley pulask...@yahoo.com wrote: What's the correct way to recover from loss of power to a USB disk based pool? I cleverly unplugged the wrong wall wart from the power strip behind my monitor and dropped power to a USB disk that was being written to. The system stayed up, but any attempt to restart or kill the write operation failed and attempts to query the status of the pool hung. I tried to restart the system, but that hung also and ultimately I forced the system down w/ the power switch. It rebooted w/o any problems. The SATA drive scrubs showed they were OK. The USB scrub is still running, but the pool seemed OK after the reboot. Surely there is a better way to recover from such things than just killing the power. google didn't seem to have any suggestions so I thought I'd ask here. from my experience with USB zfs systems, there is no better way :( From my experience, when a USB drive goes off on one (doesn't necessarily even need powering off) it kills the whole ZFS until the point that you have to reboot the machine, as long as you don't have too many USB devices plugged in on a reboot it should recover and scrub happily. We have had several machines with USB drives that caused us problems. 1) we have a machine with an irregularly used USB drive ... sometimes the drive fails to talk to ZFS when it is waking up out of sleep mode ... the only reason we can reboot that one is that it's a Solaris 10 with UFS root filesystem 2) we had big Arrays 8 disks plugged in over USB ... if we had plugged a keyboard in during it's uptime, and forgot to unplug it the drives wouldn't import, if we plug the keyboard in the front sockets of the machine the ZFS hangs. strangely enough we don't have any more free floating ZFS usb drives (6 T710's bought to house the USB arrays internally) except to perform sneakernet operations. on a positive note, taking an unreliable old USB ZFS pool off of a misbehaving Solaris 10 box and plugging into an Ubuntu with ZFS allowed the USB drive to work flawlessly for a long time thereafter ... Ubuntu ZFS seems a lot more stable and reliable than the Solaris/Illumos equivalent. If you have future trouble (and you haven't upgraded your ZFS on Illumos to the latest greatest hipster version) you should be able to get your data back. Jon ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Firefox can't save files
I have The same problem in ff 26.0 on OI u7 . Running firefox from the command line gives the following error: WORKER ERROR DURING SETUP Error: couldn't find function symbol in library WORKER ERROR DETAIL @resource://gre/modules/osfile/osfile_unix_allthreads.jsm:72 @resource://gre/modules/osfile/osfile_unix_allthreads.jsm:336 @resource://gre/modules/osfile.jsm:23 @resource://gre/modules/osfile/osfile_async_worker.js:16 @resource://gre/modules/osfile/osfile_async_worker.js:395 From Mozzilla site: What is OS.File? OS.File is a new API designed for efficient, off-main thread, manipulation of files by privileged JavaScript code. This API is intended to replace, in time, most XPCOM-based manipulation of files (nsIFile, subsets of nsIIOService, etc.) by JavaScript code. I'm still digging to find the issue. If I create a new Profile in firefox, the problem is not there... for a while. after some use the problem appears in the new profile as well. The problem is more than just saving files, it looks like Firefox looses the ability to even read files. I see this when looking at the trouble shooting section where most of the data is blank, Mike On Tue, 2014-03-18 at 03:04 -0700, Apostolos Syropoulos wrote: Firefox is downloading on /tmp typically and AFTER completion, moves it to the final location. Meanwhile, the final file exists as a dummy with size zero. So AFTER download, the final file should have the correct size. -- The problem is that it has zero size. That's why I posted my message. A.S. -- Apostolos Syropoulos Xanthi, Greece ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Offtopic question to old SPARC users
My understanding is that the time is read from the NVRAM chip only once when booting, then the time is updated by the kernel clock() function by interrupt 10 while running. High interrupt rates could cause the clock interrupt to be missed, slowing time. A lot of serial activity could cause it. I also do not see how low power could slow down the timer assuming it uses a crystal oscillator. All that to say that I bet it is not related to the NVRAM chip. Mike On Fri, 2013-11-22 at 23:45 +0100, Jim Klimov wrote: Hello all, My attention was requested to an old UltraSPARC E450 machine with Solaris 8, whose clock was going slower and worse for the past few days, maybe weeks. Since about today it has practically stopped - or more precisely, loops over the same 2-3 second interval over and over, even with NTP client enabled. My hunch would be a dead battery on CMOS, or whatever the analog of one would be. Any ideas where it might be located, and what model it is (like CR2032 on Intel-compatibles)? Any more ideas? So far they are doing backups and the machine will go into a diag reboot; normal reboot did not clear the errors at least. The beast is old, but serves as an appliance of an old database which nobody knows how to manage or migrate nowadays, even if into a Solaris8 branded zone on a newer SPARC, and the production payload is needed and important. Nobody knows how it works, but they know too well what for. Bummer... Thanks for any hints, hunches, anecdotes... //Jim Klimov ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Virtualbox 4.3.x (2!) and oi 151a8? working?
Works well for me other than not being able to boot iPXE. 4.3 goes to GURU meditation with iPXE. But it does it on all platforms. Windows and Linux. Mike On Mon, 2013-11-18 at 15:43 +0100, Predrag Zecevic [Unix Systems Administrator] wrote: Hi, well, i didn't measured anything, that is just my 'impression'... And it behaves very stable (didn't had any kind of crash, since 4.2.8). I have moved into '/hipster' repository (so, not production level at all) and since Hipster has often updates, do not take my statement as something serious (beside, I am running VB from my Desktop, so system might be more or less busy). Sorry if my previous post caused confusion... Best regards. On 11/17/13 01:00 AM, Geoff Nordli wrote: On 13-11-16 10:49 AM, Predrag Zecevic wrote: Hi, it works just OK (no worse or no better then 4.2). You have to carefully set RAM usage, otherwise system willswap. Regards. Am 16.11.2013 01:10, schrieb Carl Brewer: G'day, Before I do it myself, has anyone got VB 4.3.2 on OI 151a8 running? All good? No good? Thanks! Carl That is interesting it is about the same, because the developers suggested there was a major rework of the vt-x code in this release. There should have been a pretty decent performance improvement. Regardless, for production it will be a long time before I make the jump to 4.3. I just recently starting upgrading servers to the 4.2 series. Geoff ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] running VirtualBox headless
Hi, I have been working on a little project that might suit your needs. It is in the final testing phase, and not public until now I guess, but should work well for what you are doing. It uses OI, OmniOS of Solaris11 as a storge / VM management server and allows you to run VMs anywhere you like. VMs can be run on the server, or other computers running any OS, even supports PXE. easy to install #pkg set-publisher -g http://repository.techsologic.com techsologic.com #pkg install infinity/server check out www.techsologic.com if you are interested. Thanks, Mike On Mon, 2013-06-24 at 10:44 +0800, Christopher Chan wrote: On Monday, June 24, 2013 10:24 AM, Jan Owoc wrote: Hi, I'm running a home NAS using OI 151a7 server (vs. desktop). I was thinking of running Ubuntu Server in a virtual machine on OI, ideally configured to startup/shutdown when OI starts/shuts down. I can connect a monitor to the machine, but it generally should run headless. I found there is a very helpful entry on the wiki [1] describing most of the steps. Has anyone successfully installed VirtualBox on a headless OI and have any other tips before I dive in? I have. Even running two Windows guests on a headless box. They are accessible by rdp which is provided by vbox. To do that I had to monkey with SMF. If you just have one Ubuntu guest, you should be fine with whatever VirtualBox provides. Too bad you won't be able to use the crossbow driver. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] running VirtualBox headless
Hi, I agree totally. This is a project in development. It has started closed, because it can be opened later, but can not be close later. The business model has not been finalized. It is intended to work, and work well. Therefore a model of payed support is not attractive. You have the right to use it in any way you like for as long as you like. Suggestions are welcome. Mike On Mon, 2013-06-24 at 21:54 +0200, Nikola M. wrote: On 06/24/13 02:41 PM, Michael Stapleton wrote: check out www.techsologic.com if you are interested. I see it is closed source proprietary software with a custom license and usage rights. I suggest to this mailing list members not to just blindly add and repositories form third parties, unless you know what they are doing and why, where is source code of the packages and what are possible outcomes. I personally _welcome_ solutions based on Openindiana/Illumos distributions, just to make sure people know where software is coming from, under what rights/wrongs, what it means and to make sure they understand what their actions produce to their environment. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] running VirtualBox headless
No problem :-) Infinity uses VirtualBox to do the actual virtualization. Infinity simply is a data/ VM management platform. Mike On Mon, 2013-06-24 at 14:24 -0600, Jan Owoc wrote: On Mon, 2013-06-24 at 21:54 +0200, Nikola M. wrote: On 06/24/13 02:41 PM, Michael Stapleton wrote: check out www.techsologic.com if you are interested. I see it is closed source proprietary software with a custom license and usage rights. I suggest to this mailing list members not to just blindly add and repositories form third parties, unless you know what they are doing and why, where is source code of the packages and what are possible outcomes. On Mon, Jun 24, 2013 at 2:14 PM, Michael Stapleton michael.staple...@techsologic.com wrote: This is a project in development. It has started closed, because it can be opened later, but can not be close later. The business model has not been finalized. It is intended to work, and work well. Therefore a model of payed support is not attractive. You have the right to use it in any way you like for as long as you like. Suggestions are welcome. For a server to which I trust my data, I would want a 100% open model with an active community supporting it. I may try out your solution on a different machine out of curiosity, but it's not the solution I'm looking for. I chose VirtualBox based on the large install base and perception of active community support. I'll try installing and running VirtualBox sometime over the next few weeks and post back if I have any problems that aren't addressed in the wiki. Thanks for all the tips, Jan ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] ZFS read speed(iSCSI)
I have no idea what the problem is, but it is worth noting that last time I checked, Oracles storage arrays were running Solaris and Comstar. Mike On Mon, 2013-06-10 at 20:36 -0400, Heinrich van Riel wrote: spoke to soon died again. Give up. Just posting the result in case someone else run into issues with fc target and find this. Solaris is not even the answer. When it slows down I kill the copies and wait until there is no more IO and can see that from VMware side and pool io. When I try to reboot it is not able to the same as OI. clearly a problem with comstar's ability to deal with fc. after a hard reset it will work for again a short bit Last post Cheers On Mon, Jun 10, 2013 at 7:36 PM, Heinrich van Riel heinrich.vanr...@gmail.com wrote: switch to the qlogic adpater using solaris 11.1. Problem resolved well for now. Not as fast as OI with the emulex adapter, perhaps it is the older pool/fs version since I want to keep my options open for now. I am getting around 200MB/s when cloning. At least backups can run for now. Getting a license for 11.1 for one year. I will worry about it again after that. Never had problems with any device connected fc like this, that is usually the beauty of it but expensive. Downside right now is qlt card I have only has a single port. thanks, On Mon, Jun 10, 2013 at 2:46 PM, Heinrich van Riel heinrich.vanr...@gmail.com wrote: Just want to provide an update here. Installed Solaris 11.1 reconfigured everything. Went back to Emulex card since it is a dual port for connect to both switches. Same problem, well the link does not fail, but it is writing at 20k/s. I am really not sure what to do anymore other that to accept fc target is no longer an option, but I will post in the ora solaris forum. Either this has been an issue for some time or it is a hardware combination or perhaps I am doing something seriously wrong. On Sat, Jun 8, 2013 at 6:57 PM, Heinrich van Riel heinrich.vanr...@gmail.com wrote: I took a look at every server that I knew I could power down or that is slated for removal in the future and I found a qlogic adapter not in use. HBA Port WWN: 211b3280b Port Mode: Target Port ID: 12000 OS Device Name: Not Applicable Manufacturer: QLogic Corp. Model: QLE2460 Firmware Version: 5.2.1 FCode/BIOS Version: N/A Serial Number: not available Driver Name: COMSTAR QLT Driver Version: 20100505-1.05 Type: F-port State: online Supported Speeds: 1Gb 2Gb 4Gb Current Speed: 4Gb Node WWN: 201b3280b Link does not go down but useless, right from the start it is as slow as the emulex after I made the xfer change. So it is not a driver issue. alloc free read write read write - - - - - - 681G 53.8T 5 12 29.9K 51.3K 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 88 0 221K 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 163 0 812K 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 198 0 1.13M 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 88 0 221K 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 187 0 1.02M 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 681G 53.8T 0 0 0 0 This is a clean install of a7 with nothing done other than nic config in lacp. I did not attempt a reinstall of a5 yet and prob won't either. I dont know what to do anymore I was going to try OmniOS but there is no way of knowing if it would work. I will see if I can get approved for a solaris license for one year, if not I am switching back to windows storage spaces. Cant backup the current lab on the EMC array to this node in any event since there is no ip connectivity and fc is a dream. Guess I am the only one trying to use it as an fc target and these problems are not noticed. On Sat, Jun 8, 2013 at 4:55 PM, Heinrich van Riel heinrich.vanr...@gmail.com wrote: changing max-xfer-size causes the link to stay up and no problem are reported from stmf. # Memory_model max-xfer-size # # Small 131072 - 339968 # Medium 339969 - 688128 # Large 688129 - 1388544 # # Range: Min:131072 Max:1388544 Default:339968 # max-xfer-size=339968; as soon as I changed it to 339969 the there is no link loss, but I would be so lucky that is solves my problem. after a few min it would grind to a crawl, so much so that in vmware it will take well over a min to just browse a folder, we
Re: [OpenIndiana-discuss] Dhcp woes, (was Re: Anyone using OpenIndiana in production?)
Unless those servers already depend on your storage. Mileage will vary :-) Mike On Thu, 2013-03-28 at 11:45 +, Edward Ned Harvey (openindiana) wrote: From: Michael Stapleton [mailto:michael.staple...@techsologic.com] The Dhcp files can be stored on NFS and used by multiple servers. It defeats the purpose of redundant dhcp servers if you make them both dependent on non-redundant storage. But that's only tangential. The upshot of what you're saying is that the config files are in some directory, and they could be versioned and distributed just like I'm presently doing with svn. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Dhcp woes, (was Re: Anyone using OpenIndiana in production?)
Hi, The Dhcp files can be stored on NFS and used by multiple servers. Mike On Wed, 2013-03-27 at 22:17 +, Edward Ned Harvey (openindiana) wrote: From: Jim Klimov [mailto:jimkli...@cos.ru] Well, at the time I documented this page, it worked (at oi_151a5 timeframe, I believe): http://wiki.openindiana.org/oi/Using+host- only+networking+to+get+from+build+zones+and+test+VMs+to+the+Intern et Yikes. Thanks for writing that up. But .. I have two servers, and some reservations, and the config files are stored in subversion. So at present, when I create a reservation for a new machine, I just edit one file (duplicate modify a line) and commit. Svn post-commit hook then verifies integrity, and deploys to the mirror. Very easy. I can't believe there's this new dhcpmgr, dhcpconfig, several config files, some binfiles that I presume I can't read or edit... 3+ packages that need to be installed... I'm sure it's very powerful, and maybe can even do what I'm doing *even* better. But that's very complicated and more than I want to invest. It's no wonder I didn't get it working. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] SMF retries count
There are a number of environmental variables used by asadmin, but I did not find anything that looked promising. As a last resort hack, you could you wrap the asadmin command in a script. I would also try to find out why my app takes over 60 seconds to stop. We might be trying to cure the symptom. Mike On Tue, 2013-03-26 at 14:26 +0100, Jim Klimov wrote: On 2013-03-26 14:09, Michael Stapleton wrote: Hi Jim, Your SMF method is likely running asadmin. Have you tried using the asadmin command directly to stop the domain? It sounds like it could be the default 60 second socket timeout when asadmin attempts to contact glassfish. Network issues? Glassfish already down? Yes, the default SMF integration of glassfish invokes asadmin with such actions as start-domain and stop-domain. I do want to have it managed by SMF since that's catered for, and these actions to seem to include a timeout (60s for stop, 600s for start), both of which are exceeded in this instance; I am looking into GlassFish code now to see if these two timeouts are hard-coded or configurable (aren't according to the docs). From what I gather, when these 60 or 600 seconds elapse, the admin CLI verifies the server state. If it was stopping but still runs, or if it was starting but still doesn't accept connections, the asadmin program (a java class, ultimately) returns a non-zero exit code. Thus the SMF method fails (despite configured lack of SMF's own timeouts), even though the server happily starts or stops a few minutes past the existing asadmin timeout. I am inclined to think this is poor programming on glassfish side, but wonder what I can do to properly host and manage the appserver via SMF. PS: If I use asadmin directly, i.e. to restart the appserver, while SMF is also enabled, the death of a java process causes SMF to start it up again - and my manual invokation of restart also starts it. So the two java processes competing for same ports come into conflict. //Jim ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] SMF retries count
Could these be of use? startd/critical_failure_count startd/critical_failure_period The critical_failure_count and critical_failure_period properties together specify the maximum number of ser- vice failures allowed in a given time interval before svc.startd transitions the service to maintenance. If the number of failures exceeds critical_failure_count in anyperiodof critical_failure_period seconds, svc.startd will transition the service to maintenance. Mike On Tue, 2013-03-26 at 15:52 +0100, Jim Klimov wrote: On 2013-03-26 14:44, Michael Stapleton wrote: There are a number of environmental variables used by asadmin, but I did not find anything that looked promising. As a last resort hack, you could you wrap the asadmin command in a script. I thought of changing the SMF method to something like while ! asadmin ... ; do sleep 1; done (perhaps with my arbitrarily-picked timeout, like running 10 loops max), but this would be prone to any number of other unforeseen errors causing the failure exit code - and that event should be detected/reported rather than ignored in this manner. I would also try to find out why my app takes over 60 seconds to stop. We might be trying to cure the symptom. Well, there are no particular errors in the log, just zillions of closing, unregistering, unhooking stuff. No erroneous stacktrace, no real hiccups like a minute of silence. Simply a lot of work to stop the portal properly. That part we don't really find unusual. Thanks for commiserating with me on this ;) ///Jim ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Xvnc in a zone
On Solaris 10, I used to configure my zones to run xnest as the X server with the display directed back to the global zone. xhosts in the global zone was configured to allow the zones access. It worked like a charm. I even had a linux branded zone I used for google earth. In that case I used zlogin to run google earth, and in the zone the DISPLAY was set to the global zone. I have not tried any of this recently, but you could look in that direction. Mike On Sat, 2013-03-23 at 11:23 +0100, Hans J. Albertsson wrote: Is there some simple way to get Xvnc working from within a non-global zone?? I e I'd like to sit logged in to the global zone as always, and be able to run a vnc session to an ngz in a window. It can be a very small desktop, what I'm after is the visual feedback of You're in a twisty little non-global zone afforded by the x desktop inside a fairly large window. Being able to start a gnome session in the ngz from a laptop might also be neat. First attempt (to just copy the working Xvnc installation from a separate server's GZ) failed with references to dbus. I suppose one could run a ssh -X zone xterm (or other client), but I just wanted to try the full X thing. Things I find on the internet and particularly Oracle blogs are a wee bit unclear, probably leaving out some crucial package that people working at Oracle always install w/o thinking. They do seem to say that it can be done. Things are complicated a bit by the server with the NGZ's I'm running also being a SunRay server for 3-4 clients. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] SYBA SY-PEX40008
Found this in the review section: Cons: New cards seems to have a Winbond W39F010 BIOS chipset which is not supported by Silicon Image or Syba -- which means you can *NOT* upgrade this card. The card will more than likely come with a BIOS from 2006, the latest is from 2010 and even then if you want to remove the RAID functionality (I use these in a ZFS system so pseudo-hardware raid is useless to me and slows down boot time) you cannot. Personally I would steer clear of it. Mike On Tue, 2013-02-12 at 08:37 -0500, Bentley, Dain wrote: Hello all, Has anyone had luck with the SYBA SY-PEX40008? http://www.newegg.com/Product/Product.aspx?Item=N82E16816124027 I read a blog post on backblaze on their storage pods and this was the sata card they used. I've read the reviews on newegg and it seems to work well with ZFS/FreeBSD and was wondering if anyone had used it with OI? ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Anybody using Trusted JDS/Gnome?
The Organizations which use TX do not discuss the fact that they use TX. That being said, those same organizations will not be using OI... I personally really like TX. If you want actual security, it is the way to go, but the problem with real security is that it really gets in the way if you want to do anything, TX is only practical if your computer is part of a larger network which is also running some type of multi-level security scheme. Bottom line, as much as I like TX I would not spend anytime maintaining it on OI. Mike On Sat, 2013-01-05 at 14:48 +0100, Jim Klimov wrote: On 2013-01-05 12:29, lucadepan...@gmail.com wrote: I never used Trusted Extensions in all my desktop OI installations. I think the lack of consumers reflects how much their are low important in a desktop environment. IMHO they could be useful in a server environment, but in a desktop context i think they are very useless and an additional work that could be deleted. I believe the TX may be needed to weigh in on an enterprise market for those possible customers who are required to comply to legal acts and/or who themselves wish to seperate access to different resources and networks while providing a single desktop without means to copy-paste data from windows belonging to different security labels. This is likely more relevant to terminal server environments (SunRays, XDMCP) than to single desktops, although in a corporate setting with centrally-controlled desktops this mileage may vary. That said, I think that the equivalent solution can be more simply be made today with VDI farms dedicated to each ex-label (subnet, etc.) and without allowing copy-paste and/or screenshots within the desktop environment. However, the TX do have a certain marketing baggage as a proven solution that might have once been certified to do the job and provide the paper-protection against audits for act-compliance. For certain customers the paper compliance does matter and cost more than actual (and perhaps better) protection which is not yet certified, and among similar solutions the certified and/or proven ones have a few bonus points. All that said, I don't really know anyone that uses TX today or in the past; I know of similar solutions made with SunRays by a company that ours is friends with. If the support is too hard to bear into the future (and lack of lab and real-life testing does make it harder), I think the code can be either left to wither until someone comes to bring it up to date, or carved out with some documented way to carve it back in should someone desire. My 2c, //Jim Klimov ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Installing Virtual Box for the first time
You need to use the full path. #pkgadd -d ./VirtualBox*.pkg Note the ./ Mike On Fri, 2013-01-04 at 19:42 +, peter jones wrote: I am trying to install virtual box on a new installation 151a7 and have got myself into difficulties. After several attempt to download the new version from VBox follow the instructions and wiki I have drawn a blank.I ran the following script as a last resort but still had no success. Could you give me some pointers with this script? Openindiana@DT:~$ su Password: Openindiana@DT:~# wget http://download.virtualbox.org/virtualbox/3.0.12/VirtualBox-3.0.12-54655-SunOS.tar.gz --2013-01-04 19:19:04-- http://download.virtualbox.org/virtualbox/3.0.12/VirtualBox-3.0.12-54655-SunOS.tar.gz Resolving download.virtualbox.org (download.virtualbox.org)... 137.254.16.69 Connecting to download.virtualbox.org (download.virtualbox.org)|137.254.16.69|:80... connected. HTTP request sent, awaiting response... 302 Moved Temporarily Location: http://dlc.sun.com.edgesuite.net/virtualbox/3.0.12/VirtualBox-3.0.12-54655-SunOS.tar.gz[following] --2013-01-04 19:19:05-- http://dlc.sun.com.edgesuite.net/virtualbox/3.0.12/VirtualBox-3.0.12-54655-SunOS.tar.gz Resolving dlc.sun.com.edgesuite.net (dlc.sun.com.edgesuite.net)... 62.24.131.64, 62.24.131.75 Connecting to dlc.sun.com.edgesuite.net (dlc.sun.com.edgesuite.net)|62.24.131.64|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 79816804 (76M) [application/gzip] Saving to: `VirtualBox-3.0.12-54655-SunOS.tar.gz.3' 100%[==] 79,816,804 140K/s in 9m 17s 2013-01-04 19:28:22 (140 KB/s) - `VirtualBox-3.0.12-54655-SunOS.tar.gz.3' saved [79816804/79816804] Openindiana@DT:~# tar -xzf VirtualBox-3.0.12-54655-SunOS.tar.gz Openindiana@DT:~# pkgadd -d VirtualBoxKern-3.0.12-54655.pkg/pre bash: syntax error near unexpected token `newline' Openindiana@DT:~# pkgadd -d VirtualBox-3.0.12-54655.pkg pkgadd: ERROR: attempt to process datastream failed - open of VirtualBox-3.0.12-54655.pkg failed, errno=2 pkgadd: ERROR: could not process datastream from VirtualBox-3.0.12-54655.pkg Openindiana@DT:~# ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] auto-scrub and its result
Hello,
One little correction, Shutdown is fine because it is a shell script
that calls init.
Mike
On Fri, 2012-12-28 at 22:47 +0100, Jim Klimov wrote:
On 2012-12-28 21:45, Brogyányi József wrote:
Hi Bob
Thanks your answer. I'd like to know what does it mean clean shut down?
I think there is a way what is the perfect.
Could you write down that command?This before I used Ubuntu.
There are a few. The most proper one is init 5 which brings down
the services, quiesces filesystems, syncs the disks and tells the
power source to unpower itself. Likewise, init 0 does all this
except the unpowering, and init 6 finishes by a full or fast
reboot (depending on config elsewhere).
Don't directly use shutdown, halt, reboot and such - as I did after
years with Linux - these commands do as advertized, with minimal
attempts to properly and slowly stop services (at least, was so
up till solaris 9, then I got out of the habit to use these often).
However, if the system is in a pinch - such as HDDs timing out so
a proper shutdown would likely hang, you might exactly want a rude
shutdown, such as reboot -lnq, where:
-l
Suppress sending a message to the system log daemon,
syslogd(1M) about who executed reboot.
-n
Avoid calling sync(2) and do not log the reboot to
syslogd(1M) or to /var/adm/wtmpx. The kernel still
attempts to sync filesystems prior to reboot, except if
the -d option is also present. If -d is used with -n,
the kernel does not attempt to sync filesystems.
-q
Quick. Reboot quickly and ungracefully, without shutting
down running processes first.
For very difficult cases there is a lowlevel uadmin 1 2 which is
basically a hook to the kernel's shoot myself exit point (detailed
in man -s 2 uadmin).
Brogyi
I like your crontab command. :)
I think I've shared mine before, but here goes (part of our in-house
admin-script set COSas, but I don't think this wrapper has any
dependencies). It takes care to not issue a new scrub if another
is already in progress, and mails the results. Config files can
be used:
---
#!/bin/bash
# $Id: zpool-scrub.sh,v 1.6 2010/11/15 14:32:19 jim Exp $
# this script will go through all pools and scrub them one at a time
#
# Use like this in crontab:
# 0 22 * * * [ -x /opt/COSas/bin/zpool-scrub.sh ]
/opt/COSas/bin/zpool-scrub.sh
#
# (C) 2007 nic...@aspiringsysadmin.com and commenters
# (C) 2009 Jim Klimov, cosmetic mods and logging; 2010 - locking
#
http://aspiringsysadmin.com/blog/2007/06/07/scrub-your-zfs-file-systems-regularly/
#
[ x$MAILRECIPIENT = x ] MAILRECIPIENT=ad...@mydomain.com
[ x$ZPOOL = x ] ZPOOL=/usr/sbin/zpool
[ x$TMPFILE = x ] TMPFILE=/tmp/scrub.sh.$$.$RANDOM
[ x$LOCK = x ] LOCK=/tmp/`basename $0`.`dirname $0 | sed
's/\//_/g'`.lock
COSAS_BINDIR=`dirname $0`
if [ x$COSAS_BINDIR = x./ -o x$COSAS_BINDIR = x. ]; then
COSAS_BINDIR=`pwd`
fi
# Source optional config files
[ x$COSAS_CFGDIR = x ] COSAS_CFGDIR=$COSAS_BINDIR/../etc
if [ -d $COSAS_CFGDIR ]; then
[ -f $COSAS_CFGDIR/COSas.conf ] \
. $COSAS_CFGDIR/COSas.conf
[ -f $COSAS_CFGDIR/`basename $0`.conf ] \
. $COSAS_CFGDIR/`basename $0`.conf
fi
[ ! -x $ZPOOL ] exit 1
### Include this after config files, in case of RUNLEVEL_NOKICK mask
override
RUN_CHECKLEVEL=
[ -s $COSAS_BINDIR/runlevel_check.include ]
. $COSAS_BINDIR/runlevel_check.include
block_runlevel
# Check LOCKfile
if [ -f $LOCK ]; then
OLDPID=`head -n 1 $LOCK`
BN=`basename $0`
TRYOLDPID=`ps -ef | grep $BN | grep -v grep | awk '{ print $2 }'
| grep $OLDPID`
if [ x$TRYOLDPID != x ]; then
LF=`cat $LOCK`
echo = ZPoolScrub wrapper aborted because another copy is
running - lockfile found:
$LF
Aborting... | wall
exit 1
fi
fi
echo $$ $LOCK
scrub_in_progress() {
### Check that we're not yet shutting down
if [ x$RUN_CHECKLEVEL != x ]; then
if [ x`check_runlevel` != x ]; then
echo INFO: System is shutting down. Aborting scrub of
pool '$1'! 2
zpool scrub -s $1
return 1
fi
fi
if $ZPOOL status $1 | grep scrub in progress /dev/null; then
return 0
else
return 1
fi
}
RESULT=0
for pool in `$ZPOOL list -H -o name`; do
echo === `TZ=UTC date` @ `hostname`: $ZPOOL scrub $pool
started...
$ZPOOL scrub $pool
while scrub_in_progress $pool; do sleep 60; done
echo === `TZ=UTC date` @ `hostname`: $ZPOOL scrub $pool completed
if ! $ZPOOL status $pool | grep with 0 errors /dev/null; then
$ZPOOL status $pool | tee -a $TMPFILE
RESULT=$(($RESULT+1))
Re: [OpenIndiana-discuss] Linux software-raid with two Comstar iSCSI volumes
FYI, there is a setting that controls how Solaris balances the frames across the links in the aggregation. IP, MAC or round robbin. Mike On Sat, 2012-11-17 at 01:19 +0100, Jim Klimov wrote: On 2012-11-17 00:46, Roel_D wrote: How about teaming? Is it supported under OI? My memory serves me not worse than google: teaming is one of the umbrella terms to describe what is implemented by LACP - a means of representing several hardware links as one logical NIC with increased reliability and bandwidth. Other vendors call (their proprietary implementations of) this technology as NIC bonding, EtherChannels, etc. In Solaris these are known as aggregations (see dladm create-aggr ...). BEWARE THAT sometimes the boost in bandwidth is not easy to see, because certain implementations switch connections between a couple of MAC addresses using one link, and only if you have lots of different hosts you get more bandwidth on the average - but a single GbE between a couple of nodes. This is likely a problem in the storage scenario, at least with one NAS server. Teaming usually requires support on the switch side and while many managed switches provide LACP or a proprietary analog of this protocol across ports in one device, few allow spanning LACP domains over separate switches (as was touched on earlier in the thread). HTH, //Jim ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Holding port numbers for servers
Hi Jim, TCP/UDP tunable: #ndd /dev/tcp tcp_extra_priv_ports http://www.sean.de/Solaris/soltune.html#portnumbers Mike On Mon, 2012-11-05 at 16:59 +0100, Jim Klimov wrote: Back in the old days when internet authors thought that there was going to be not much server software, they created IANA to track registered ports for some apps, and the general convention was that ports under 1024 are reserved, and ports above that are to be issued freely to any networked app on the system. Lots has happened since then, and ports above are often typically used by servers too, i.e. 8080 for appservers or squid, etc. I've (rarely) had problems starting some appservers because a network client running on the same OS was randomly issued the needed port number for its communications. I haven't seen this behavior for a while, so wanted to ask: are there now any provisions NOT to issue certain ports (i.e. list from /etc/services) when an applications opens a client socket? That is, the listed ports should only be issued if the app binds itself to this port number explicitly. If this is catered for already - cool; if not - I think it is a worthy RFE... Thanks, //Jim Klimov ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Holding port numbers for servers
Should work unless something has been broken. I have not tested it in OI. Maybe the tunable can be set with ipadm? It can be in solaris 11. If not, Script It is a safe bet. Mike On Mon, 2012-11-05 at 17:47 +0100, Jim Klimov wrote: Uh-huh, thanks Mike, just what the doctor ordered ;) No RFE then :) I take it, the tunable should be set early in OS startup, i.e. with some SMF service depending directly on network or in an rc*.d initscript? The ports thus reserved are subject to usual privileged-port routines and checks (be root or have the permissions via the RBAC net_privaddr, SMF and/or zone limit_priv props), right? Thanks again, //Jim On 2012-11-05 17:11, Michael Stapleton wrote: Hi Jim, TCP/UDP tunable: #ndd /dev/tcp tcp_extra_priv_ports http://www.sean.de/Solaris/soltune.html#portnumbers Mike On Mon, 2012-11-05 at 16:59 +0100, Jim Klimov wrote: I've (rarely) had problems starting some appservers because a network client running on the same OS was randomly issued the needed port number for its communications. I haven't seen this behavior for a while, so wanted to ask: are there now any provisions NOT to issue certain ports (i.e. list from /etc/services) when an applications opens a client socket? That is, the listed ports should only be issued if the app binds itself to this port number explicitly. Thanks, //Jim Klimov ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] ZFS remote receive
You could try to set the crypo algorithm to none if you do not need encryption. ssh -c none Might also be worth trying to see if it is ssh that is slowing you down. Mike On Tue, 2012-10-23 at 17:03 -0400, Doug Hughes wrote: On 10/23/2012 4:13 PM, Timothy Coalson wrote: Works pretty well, though I get ~70MB/s on gigabit ethernet instead of the theoretically possible 120MB/s, and I'm not sure why (NFS gets pretty close to 120MB/s on the same network). There's a fair bit of overhead to ssh and to zfs send/recive, so you're doing very well. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Same networking with varied NICs
Hi Jim, Sounds to me like DTrace is the tool for you. http://docs.oracle.com/cd/E19253-01/817-6223/chp-intro/index.html It's not something you learn in 5 minutes, but it really is worth the effort. IPMP does not have to be configured with test addresses. IPMP will uses Link based by default if your NIC drivers support link state notification. The documentation really needs work... I think the documentation shows examples of Probe based because it is much more difficult to configure than Link based. Simply add the interfaces to the same IPMP group. Done.. But, IPMP is really about uptime, not band width. If you want to use multiple interfaces, they all need IP addresses. They just do not have to have Test addresses. To use Aggregations, your switch and device drivers must support it. I think your NIC drivers have to be GLDv3 compliant. Mike On Sat, 2012-10-20 at 15:38 +0400, Jim Klimov wrote: As I wrote earlier, I am trying to match-and-use varied drivers for my computer's NIC, one at a time, transparently to other users of the system (including vnics over this link). FWIW, I tried to solve the problem differently than discussed before: now I tried to make an aggregation from instances of the different drivers. VNICs over the aggregation do seem to work, as well as normal communications from the GZ to internet, though the intermittent hangs do still appear with both stock rge and gani drivers for the builtin Realtek 8168/8111 GbE NIC. The problem is that the aggregation can only be defined over existing interfaces (also if directly hacking into the config file /etc/dladm/datalink.conf), so basically I can't predefine an aggr0 over rge0 + gani0 + e1000g0 and have it work with whatever driver I currently have loaded. If I mention a driver which is not present at the moment (i.e. rge0 while gani is loaded, or e1000g0 while in physical hardware boot) the aggr0 link is not spawned at all. I looked at IPMP, but it seems too unwieldy for the laptop case (each component of an ipmp group needs its own IP and a known external node to test against). Can the aggregations be forced to accept missing devices and work with those currently available? If that's not currently possible, does it seem like a good RFE (i.e. hardware can break so upon a reboot a server's NIC really can go missing - would be bad to lose a whole aggr because of that)? Also, config changes made with dladm program take their place immediately, however hacks into its config file require a reboot. How can I make the system re-read the /etc/dladm/datalink.conf file and apply manually changed settings? I tried to run svcadm restart datalink-management - did not help... 2012-10-01 14:02, Jim Klimov wrote: Hello all, I wondered what is a Crossbow+VanityNaming way of doing some things I've done some time ago with static config files: I have an installed OS image which can be booted on different hardware (say, a pass-through partition with OI that can be booted from hardware BIOS as a dual-boot option, as well as in a VM from another host OS on the box). In these different hardware environments this box sees varied networking gear - an rge0 in one case and an e1000g0 in another. I want the logical networking to be the same in these cases. So, previously for a singular global zone I made two files (/etc/hostname.e1000g0 and /etc/hostname.rge0) with identical contents, and the system plumbed the one present NIC with the needed addressing setup. Now I want to make some VNICs and configure some local zones with attachment to the external NIC (can play with both exclusive and shared IP stacks). I expected that vanity naming can help me in this case by naming the present NIC for example eth0, and my zone and VNIC attachments would go over eth0. Should this work? Alternately, can I create an etherstub with several attached VNICs, including one with IP configuration for the global zone, and bridge it to external LAN via the one present NIC (i.e. by attaching both e1000g0 and rge0 instances to the etherstub)? Disclaimer: I did not yet try either variant, and am in the process of setting up the boot of physical OI from a VM in another OS, but wanted to know in advance what to expect ;) Thanks, //Jim ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Same networking with varied NICs
Solaris 11 zonecfg support a NIC configuration called anet. When such a zone boots, a lower-link (see below) will be automatically determined and a temporary VNIC automati- cally created over that link for the zone. The lower- link and VNIC are deleted when the zone halts. Does anyone know if there are plans to add this feature to OI? Mike On Sat, 2012-10-20 at 15:38 +0400, Jim Klimov wrote: As I wrote earlier, I am trying to match-and-use varied drivers for my computer's NIC, one at a time, transparently to other users of the system (including vnics over this link). FWIW, I tried to solve the problem differently than discussed before: now I tried to make an aggregation from instances of the different drivers. VNICs over the aggregation do seem to work, as well as normal communications from the GZ to internet, though the intermittent hangs do still appear with both stock rge and gani drivers for the builtin Realtek 8168/8111 GbE NIC. The problem is that the aggregation can only be defined over existing interfaces (also if directly hacking into the config file /etc/dladm/datalink.conf), so basically I can't predefine an aggr0 over rge0 + gani0 + e1000g0 and have it work with whatever driver I currently have loaded. If I mention a driver which is not present at the moment (i.e. rge0 while gani is loaded, or e1000g0 while in physical hardware boot) the aggr0 link is not spawned at all. I looked at IPMP, but it seems too unwieldy for the laptop case (each component of an ipmp group needs its own IP and a known external node to test against). Can the aggregations be forced to accept missing devices and work with those currently available? If that's not currently possible, does it seem like a good RFE (i.e. hardware can break so upon a reboot a server's NIC really can go missing - would be bad to lose a whole aggr because of that)? Also, config changes made with dladm program take their place immediately, however hacks into its config file require a reboot. How can I make the system re-read the /etc/dladm/datalink.conf file and apply manually changed settings? I tried to run svcadm restart datalink-management - did not help... 2012-10-01 14:02, Jim Klimov wrote: Hello all, I wondered what is a Crossbow+VanityNaming way of doing some things I've done some time ago with static config files: I have an installed OS image which can be booted on different hardware (say, a pass-through partition with OI that can be booted from hardware BIOS as a dual-boot option, as well as in a VM from another host OS on the box). In these different hardware environments this box sees varied networking gear - an rge0 in one case and an e1000g0 in another. I want the logical networking to be the same in these cases. So, previously for a singular global zone I made two files (/etc/hostname.e1000g0 and /etc/hostname.rge0) with identical contents, and the system plumbed the one present NIC with the needed addressing setup. Now I want to make some VNICs and configure some local zones with attachment to the external NIC (can play with both exclusive and shared IP stacks). I expected that vanity naming can help me in this case by naming the present NIC for example eth0, and my zone and VNIC attachments would go over eth0. Should this work? Alternately, can I create an etherstub with several attached VNICs, including one with IP configuration for the global zone, and bridge it to external LAN via the one present NIC (i.e. by attaching both e1000g0 and rge0 instances to the etherstub)? Disclaimer: I did not yet try either variant, and am in the process of setting up the boot of physical OI from a VM in another OS, but wanted to know in advance what to expect ;) Thanks, //Jim ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Same networking with varied NICs
I can't believe I'm saying this, but maybe this is a job for NWAM profiles? DTrace along with MDB can help you debug your NIC driver problems. I wish I could just say what you need to probe.. :-) You might also try different ACPI modes if it seems to be an interrupt problem. Mike On Sat, 2012-10-20 at 18:22 +0400, Jim Klimov wrote: I really wonder how DTrace can help here - what should I track? ;) 2012-10-20 18:07, Michael Stapleton wrote: IPMP does not have to be configured with test addresses. IPMP will uses Link based by default if your NIC drivers support link state notification. The documentation really needs work... I think the documentation shows examples of Probe based because it is much more difficult to configure than Link based. Simply add the interfaces to the same IPMP group. Done.. Yes, thanks. Today I stumbled upon this nice post about simple IPMP setup without active probing, might help me. I wonder why these are not wrapped in dladm management ;) http://cooperlees.com/blog/?p=328 And these are examples of complicated setup with active probing which I was reluctant to do, from Joerg Moellenkamp's excellent posts: http://www.c0t0d0s0.org/archives/6298-Less-known-Solaris-features-IP-Multipathing-Part-6-New-IPMP.html http://www.c0t0d0s0.org/archives/6300-Less-known-Solaris-features-IP-Multipathing-Part-8-Classic-IPMP.html But, IPMP is really about uptime, not band width. If you want to use multiple interfaces, they all need IP addresses. They just do not have to have Test addresses. To use Aggregations, your switch and device drivers must support it. I think your NIC drivers have to be GLDv3 compliant. In fact, as per my original post, I don't exactly need IPMP nor LACP for my case. My laptop has a single wired NIC which can be represented by different drivers, one at a time. I want to make switching between these simple and transparent to other network configs on the system (vnics, zones and such). I plan to try simple IPMP and/or vanity naming (i.e. try to name all of the possible NIC names net0) and see if that works later this weekend. At the moment I still wonder if any of these work while a device is absent altogether (i.e. when the dual-booted OI is on physical hardware, it has rge or gani but no e1000g; when it's booted as a VM, it has e1000g but no rge/gani). I am now concerned that aggr does not seem to work at all if a component device is missing - this does seem like a bad bug in architecture or implementation. Thanks, //Jim Klimov ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Same networking with varied NICs
Maybe you could have your zones and the global zone on an etherstub through VNICs, Then route from the global zones real NIC to the VNIC connected to the etherstub. Can you use NAT? IP addresses might be the next challenge. Solaris11 also support DHCP with zones, Any one know if that might get ported to OI? Mike On Sat, 2012-10-20 at 18:52 +0400, Jim Klimov wrote: 2012-10-20 18:40, Michael Stapleton wrote: I can't believe I'm saying this, but maybe this is a job for NWAM profiles? Intriguing, at least ;) I wonder if NWAM can provide a single IP interface (over which vnics and zones can be attached) using whatever device is available, like aggr/ipmp do? //Jim ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Same networking with varied NICs
Bridging only supports physical NICs, not VNICs :-( Adding multiple VNICs to a physical NIC addresses this, but you are back to your original problem of changing physical NICs. I see scripting in your future... NWAM might be used to trigger your scripts. Mike On Sat, 2012-10-20 at 19:28 +0400, Jim Klimov wrote: 2012-10-20 19:05, Michael Stapleton wrote: Maybe you could have your zones and the global zone on an etherstub through VNICs, Then route from the global zones real NIC to the VNIC connected to the etherstub. Can you use NAT? IP addresses might be the next challenge. Solaris11 also support DHCP with zones, Any one know if that might get ported to OI? Yeah, DHCP with zones works, as well as exclusive networking with routers and firewalls in zones. The challenge in this setup would be to bring the routing to life. There are setups where the GZ has no public IP address and a local zone has a dedicated public interface and works as a router/firewall/NAT for the whole system (GZ and other LZs) kind of like what you outlined. I wonder if that can work with the multiple interfaces, one of which is present at a time (raw, ipmp or aggr to start with). If my other options don't pan out, I research this more - thanks for the idea ;) I did however want to bind at least my bridged VMs to VNICs on the physical public interface, so they can be addressed from the external net with that net's addresses. I am not sure this would work well over NAT (i.e. serving CIFS from several VMs on one public IP address is tricky), and I did start my questions (unanswered) discussing the possibility of just attaching an etherstub to external net like a switch, bridging over the available one of the physical interfaces. //Jim ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Same networking with varied NICs
I hate bringing up Solaris11 again, but by default NICs are named net0 net1 net2. Maybe, someday... Mike On Sat, 2012-10-20 at 20:16 +0400, Jim Klimov wrote: As a midway point, vanity naming did not solve this. It only applies the name to the first interface in the datalink.conf file with this name, regardless of whether its device exists. In particular, if the eth0 name is mapped onto rge0 first, then gani0, the system boots up with an unavailable eth0 interface and creates a new vanity naming gani0=gani0. If I reverse those two lines, things work. So, vanity names don't really help my case - not without an intermittent reboot, or some (SMF?) script to vanity-name the correct interface and continue with dladm setup of the system. That's something but not enough to satisfy me ;) 2012-10-20 20:08, Michael Stapleton wrote: Bridging only supports physical NICs, not VNICs :-( Adding multiple VNICs to a physical NIC addresses this, but you are back to your original problem of changing physical NICs. I see scripting in your future... Yes, my prophet! That might be possible ;) NWAM might be used to trigger your scripts. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Zfs stability Scrubs
Nice list. You could add: 10. Dedup comes with a price. Mike On Sat, 2012-10-13 at 09:56 +0200, Roel_D wrote: Thank you all for the good answers! So if i put it all together : 1. ZFS is, in mirror and RAID configs, the best currently available option for reliable data 2. Without scrubs data is checked on every read for integrity 3. Unread data will not be checked for integrity 4. Scrubs will solve point 3. 5. Real servers with good hardware (HCL), ECC memory and servergrade harddisks have a very low chance of dataloss/corruption when used with ZFS. 6. Large modern drives with large storage like any 750 GB hd have a higher chance for corruption 7. Real SAS and SCSi drives offer the best option for reliable data 8. So called near-line SAS drives can give problems when combined with ZFS because they haven't been tested very long 9. Checking your logs for hardware messages should be a daily job Kind regards, The out-side Op 13 okt. 2012 om 05:26 heeft Michael Stapleton michael.staple...@techsologic.com het volgende geschreven: I'm not a mathematician, but can anyone calculate the chance of the Same 8K datablock on Both submirrors Going bad on terabyte drives, before the data is ever read and fixed automatically during normal read operations? And if you are not doing mirroring, you have already accepted a much larger margin of error for the sake of $. The VAST majority of data centers are not storing data in storage that does checksums to verify data, that is just the reality. Regular backups and site replication rule. I am Not saying scubs are a bad thing, just that they are being over emphasized and some people who do not really understand are getting the wrong impression that doing scrubs very often will somehow make them a lot safer. Scrubs help. But a lot of people who are worrying about scrubs are not even doing proper backups or regular DR testing. Mike On Fri, 2012-10-12 at 22:36 -0400, Doug Hughes wrote: So?}?\, a lot of people have already answered this in various ways. I'm going to provide a little bit of direct answer and focus to some of those other answers (and emphasis) On 10/12/2012 5:07 PM, Michael Stapleton wrote: It is easy to understand that zfs srubs can be useful, But, How often do we scrub or the equivalent of any other file system? UFS? VXFS? NTFS? ... ZFS has scrubs as a feature, but is it a need? I do not think so. Other file systems accept the risk, mostly because they can not really do anything if there were errors. That's right. They cannot do anything. Why is that a good thing? If you have a corruption on your filesystem because a block or even a single bit went wrong, wouldn't you want to know? Wouldn't you want to fix it? What if a number in an important financial document changed? Seems unlikely, but we've discovered at least 5 instances of spontaneous disk data corruption over the course of a couple of years. zfs corrected them transparently. No data lost, automatic, clean, and transparent. The more data that we make, the more that possibility of spontaneous data corruption becomes reality. It does no harm to do periodic scrubs, but I would not recommend doing them often or even at all if scrubs get in the way of production. What is the real risk of not doing scrubs? data changing without you knowing it. Maybe this doesn't matter on an image file (though a jpeg could end up looking nasty or destroyed, and mpeg4 could be permanently damaged, but in a TIFF or other uncompressed format, you'd probably never know) Risk can not be eliminated, and we have to accept some risk. For example, data deduplication uses digests on data to detect duplication. Most dedup systems assume that if the digest is the same for two pieces of data, then the data must be the same. This assumption is not actually true. Two differing pieces of data can have the same digest, but the chance of this happening is so low that the risk is accepted. but, the risk of data being flipped once you have TBs of data is way above 0%. You can also do your own erasure coding if you like. That would be one way to achieve the same affect outside of ZFS. I'm only writing this because I get the feeling some people think scrubs are a need. Maybe people associate doing scrubs with something like doing NTFS defrags? NTFS defrag would only help with performance. scrub helps with integrity. Totally different things. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Zfs stability Scrubs
Some basic thoughts: The one advantage of using a storage array instead of a JBOD is the write cache when doing random writes. But the cost is that you loose the data integrity features if the ZFS pool is not configured with redundancy. ZFS works best when it has multiple direct paths to multiple physical devices configured with mirrored VDevs. So the bottom line for ZFS is that JBODs are almost always the best choice as long as the quality of the devices and device drivers are similar. SANs provide centralized administration and maintenance, which is their main feature. If you could map actual hard drives from the SAN to ZFS everyone could be happy. Backup done while services are running all too often results in unhappy people. There are few easy answers when it comes for performance. And the actual answer to most questions is It Depends. Mike On Sat, 2012-10-13 at 17:02 +0400, Jim Klimov wrote: 2012-10-13 7:26, Michael Stapleton wrote: The VAST majority of data centers are not storing data in storage that does checksums to verify data, that is just the reality. Regular backups and site replication rule. And this actually concerns me... we help maintain some deployments built by customers including professional arrays like Sun Storagetek 6140 serving a few LUNs to directly attached servers (so it happens). The arrays are black boxes to us - we don't know if they use something block-checksummed similar to ZFS inside, or can only protect against whole-disk failures, when a device just stops responding? We still have little idea - in what config would the data be safer to hold a ZFS pool, and which should give more performance: * if we use the array with its internal RAID6, and the client computer makes a pool over the single LUN * a couple of RAID6 array boxes in a mirror provided by arrays' firmware (independently of client computers, who see a MPxIO target LUN), and the computer makes a pool over the single multi-pathed LUN * a couple of RAID6 array boxes in a mirror provided by ZFS (two independent LUNs mirrored by computer) * serve LUNs from each disk in JBOD manner from the one or two arrays, and have ZFS construct pools over that. Having expensive hardware RAIDs (anyway available on customer's site) serving as JBODs is kind of overkill - any well-built JBOD costing a fraction of this array could suffice. But regarding data integrity known to be provided by ZFS and unknown to be really provided by black-box appliances, downgrading the arrays to JBODs might be better. Who knows?.. (We don't, advice welcome). There are several more things to think about: 1) Redundant configs without knowledge of which side of the mirror is good, or what permutation of RAID blocks yields the correct answer, is basically useless, and it can propagate errors by overwriting an unknownly-good copy of the data with unknownly- corrupted one. For example, take a root mirror. You find that your OS can't boot. You can try to split the mirror into two separate disks, fsck each of them and if one is still correct, recreate the mirror using it as base (first half). Even if both disks give some errors, these might be in different parts of the data, so you have a chance of reconstructing the data using these two halves and/or backups. However, if your simplistic RAID just copies data from disk1 to disk2 in case of any discrepancies and unclean shutdowns, you're roughly 50% likely to corrupt a good disk2 with bad data from disk1. This setup assumed that bit-rot never occurred or was too rare, bus/RAM errors never happened or were ruled out by CRC/ECC, and instead disks died altogether, instantly becoming bricks (which could be quite true in the old days, and can still be probable with expensive enterprise hardware). Basically, this assumed that data written from a process was the same data that hit the disk platters and the same data that was returned upon reads (unless an IO error/deviceMissing were reported) - in that case old RAIDs could indeed propagate assumed-good data onto replacement disk(s) during reconstruction of the array. 2) Backups and replicas without means to verify them (checksums or at least three-way comparisons at some level) are also tainted, because you don't really know if what you read from them ever matches what you wrote to them (perhaps several years ago, counting from the moment the data was written onto RAID originally). My few cents, //Jim ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Zfs stability Scrubs
It is easy to understand that zfs srubs can be useful, But, How often do we scrub or the equivalent of any other file system? UFS? VXFS? NTFS? ... ZFS has scrubs as a feature, but is it a need? I do not think so. Other file systems accept the risk, mostly because they can not really do anything if there were errors. It does no harm to do periodic scrubs, but I would not recommend doing them often or even at all if scrubs get in the way of production. What is the real risk of not doing scrubs? Risk can not be eliminated, and we have to accept some risk. For example, data deduplication uses digests on data to detect duplication. Most dedup systems assume that if the digest is the same for two pieces of data, then the data must be the same. This assumption is not actually true. Two differing pieces of data can have the same digest, but the chance of this happening is so low that the risk is accepted. I'm only writing this because I get the feeling some people think scrubs are a need. Maybe people associate doing scrubs with something like doing NTFS defrags? Just my 2 cents! Mike On Fri, 2012-10-12 at 16:41 -0400, Doug Hughes wrote: yes, you shoud do a scrub and no, there isn't very much risk to this. This will scan your disks for bits that have gone stale or the like. You should do it. We do a scrub once per week. On Fri, Oct 12, 2012 at 3:55 PM, Roel_D openindi...@out-side.nl wrote: Being on the list and reading all ZFS problem and question posts makes me a little scared. I have 4 Sun X4140 servers running in the field for 4 years now and they all have ZFS mirrors (2x HD). They are running Solaris 10 and 1 is running solaris 11. I also have some other servers running OI, also with ZFS. The Solaris servers N E V E R had any ZFS scrub. I didn't even knew such existed ;-) Since it all worked flawless for years now i am a huge Solaris/OI fan. But how stable are things nowaday? Does one need to do a scrub? Or a resilver? How come i see so much ZFS trouble? Kind regards, The out-side ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Zfs stability Scrubs
The problem is when people are overly paranoid because the feature exists and end up causing problems by doing scrubs when they should not because they feel they need to. Skilled admins also understand SLAs. Mike On Fri, 2012-10-12 at 14:38 -0700, Reginald Beardsley wrote: --- On Fri, 10/12/12, Michael Stapleton michael.staple...@techsologic.com wrote: I'm only writing this because I get the feeling some people think scrubs are a need. Maybe people associate doing scrubs with something like doing NTFS defrags? I normally do scrubs when I think about it. Which has been a long time between scrubs in most cases. I got more interested in doing it regularly when I encountered SMART errors for excessive sector remapping after a reboot. I don't know if a scrub would detect that or not. The admin skills in this list vary from very high to very low. High skill admins take any threat to system integrity seriously and try to reduce it. At a job I worked many years ago, the admins were replacing several failed disks every week in the RAID arrays. If you have lots of disks, you will have lots of failures. There are a lot of companies w/ many petabytes of data on disk. Even w/ 4 TB drives, that's still a lot of drives. And you're always stuck running disks which are several years old and failing more often. Have Fun! Reg ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Zfs stability Scrubs
I'm not a mathematician, but can anyone calculate the chance of the Same 8K datablock on Both submirrors Going bad on terabyte drives, before the data is ever read and fixed automatically during normal read operations? And if you are not doing mirroring, you have already accepted a much larger margin of error for the sake of $. The VAST majority of data centers are not storing data in storage that does checksums to verify data, that is just the reality. Regular backups and site replication rule. I am Not saying scubs are a bad thing, just that they are being over emphasized and some people who do not really understand are getting the wrong impression that doing scrubs very often will somehow make them a lot safer. Scrubs help. But a lot of people who are worrying about scrubs are not even doing proper backups or regular DR testing. Mike On Fri, 2012-10-12 at 22:36 -0400, Doug Hughes wrote: So?}?\, a lot of people have already answered this in various ways. I'm going to provide a little bit of direct answer and focus to some of those other answers (and emphasis) On 10/12/2012 5:07 PM, Michael Stapleton wrote: It is easy to understand that zfs srubs can be useful, But, How often do we scrub or the equivalent of any other file system? UFS? VXFS? NTFS? ... ZFS has scrubs as a feature, but is it a need? I do not think so. Other file systems accept the risk, mostly because they can not really do anything if there were errors. That's right. They cannot do anything. Why is that a good thing? If you have a corruption on your filesystem because a block or even a single bit went wrong, wouldn't you want to know? Wouldn't you want to fix it? What if a number in an important financial document changed? Seems unlikely, but we've discovered at least 5 instances of spontaneous disk data corruption over the course of a couple of years. zfs corrected them transparently. No data lost, automatic, clean, and transparent. The more data that we make, the more that possibility of spontaneous data corruption becomes reality. It does no harm to do periodic scrubs, but I would not recommend doing them often or even at all if scrubs get in the way of production. What is the real risk of not doing scrubs? data changing without you knowing it. Maybe this doesn't matter on an image file (though a jpeg could end up looking nasty or destroyed, and mpeg4 could be permanently damaged, but in a TIFF or other uncompressed format, you'd probably never know) Risk can not be eliminated, and we have to accept some risk. For example, data deduplication uses digests on data to detect duplication. Most dedup systems assume that if the digest is the same for two pieces of data, then the data must be the same. This assumption is not actually true. Two differing pieces of data can have the same digest, but the chance of this happening is so low that the risk is accepted. but, the risk of data being flipped once you have TBs of data is way above 0%. You can also do your own erasure coding if you like. That would be one way to achieve the same affect outside of ZFS. I'm only writing this because I get the feeling some people think scrubs are a need. Maybe people associate doing scrubs with something like doing NTFS defrags? NTFS defrag would only help with performance. scrub helps with integrity. Totally different things. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] rebuilding man page catalog
catman -w create the windex database that is used by whatis(1) and the man(1) -f and -k options. No manual reformatting is done. Mike Hello listmates, If may man command does not display some of the pages including those clearly present under /usr/share/man - how do I fix that? I remember there was a command that rebuilt the catalog, I just can't recall what it was. Thanks. Boris. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Swap during install
As a general rule, If you are scanning you need more RAM, If your applications are complaining you need more swap. Having endless swap just lets applications drive the server into the ground. Solaris uses virtual swap. VMstat sr column == 0 Mike On Tue, 2012-09-25 at 19:41 +0100, Peter Tribble wrote: On Tue, Sep 25, 2012 at 1:50 PM, Richard Elling richard.ell...@richardelling.com wrote: Use what you need. Most people don't need or want to use swap. Why? Because... if you have to swap, performance will suck. Period. Case closed. Game, set, match. HDDs are 5 orders of magnitude slower than RAM and all the king's horses and all the king's men can't fix that. The old rule of 2x RAM has not been true since around the time you could put 1GB of RAM into a machine. Interestingly, the place we normally see vehement arguments for 2x RAM is from Oracle DBAs who believe everything ever written in an Oracle manual :-) hint: run swap -l and see if free == blocks. If so, then you've never used swap since the system was booted. That's not true. Anonymous reservations go against swap, if it's available. Not having adequate swap can kill performance, because you end up forcing reservations to be made against real memory rather than swap. And I would much rather have idle garbage sat out in swap rather than have it block valuable RAM. In both cases inadequate swap depletes the availability of real memory, and you want as much of that free as possible. I run general-purpose workloads, and find 2x RAM to be a good starting point. I've got systems with 32G RAM with 32G swap in use (half really in use, half just reserved). They aren't swapping, at all, performance isn't impacted, whereas if I didn't have the swap some applications wouldn't even run. So it varies; with disk relatively cheap I would rather be generous than parsimonious. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Cannot ping localhost (with NoNet configuration)
Have you tried to configure pkg/server to listen on 127.0.0.1 ? # svccfg -s pkg/server setprop pkg/address = net_address: 127.0.0.1 # svcadm refresh pkg/server # svcadm restart pkg/server Mike ?On Sun, 2012-09-09 at 11:25 +0200, Ivan Gualandri wrote: Thank you yuri, unfortunately it doesn't work. I've done the following: svcadm netwokr/ipfilter:default disable svcadm pkg/server:dev enable pkgrepo info -s http://localhost:81 And i receive always the same error. I checked with netstat but there is nothing listening on port 81 for localhost. Any idea? Thanks, Ivan The installation is a clean installation of openindiana. On 9 September 2012 01:41, Yuri Pankov yuri.pan...@gmail.com wrote: On Fri, 7 Sep 2012 21:33:24 +0200, Ivan Gualandri wrote: Hi, in my laptop where actually there isn't any supported network card (i need to compile myk driver), i tried to ping localhost but i receive alway network unreachable. I tried both: ping localhost ping 127.0.0.1 and an ifconfig -a shows that lo0 is up and running. Is that normal? There is a way to ping localhost using NoNet profile? Just a guess.. Don't you have svc:/network/ipfilter:default enabled, by chance? __**_ OpenIndiana-discuss mailing list OpenIndiana-discuss@**openindiana.orgOpenIndiana-discuss@openindiana.org http://openindiana.org/**mailman/listinfo/openindiana-**discusshttp://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Cannot ping localhost (with NoNet configuration)
Are you referring to : http://homepage2.nifty.com/mrym3/taiyodo/eng/ If yes, it includes the binaries. Mike On Sun, 2012-09-09 at 20:30 +0200, Ivan Gualandri wrote: No success. Here my settings for pkg/server:dev pkg/port: 81 pkg/address: 127.0.0.1 pkg/inst_root: /export/pkg/dev Any other idea? My problem is that OpenIndiana supports my network card only using myk driver, but i found only a version that need to be compiled, but the default installation of OI doesn't have gcc, then i must install that package :( Thanks, Ivan On 9 September 2012 17:13, Michael Stapleton michael.staple...@techsologic.com wrote: Have you tried to configure pkg/server to listen on 127.0.0.1 ? # svccfg -s pkg/server setprop pkg/address = net_address: 127.0.0.1 # svcadm refresh pkg/server # svcadm restart pkg/server Mike ?On Sun, 2012-09-09 at 11:25 +0200, Ivan Gualandri wrote: Thank you yuri, unfortunately it doesn't work. I've done the following: svcadm netwokr/ipfilter:default disable svcadm pkg/server:dev enable pkgrepo info -s http://localhost:81 And i receive always the same error. I checked with netstat but there is nothing listening on port 81 for localhost. Any idea? Thanks, Ivan The installation is a clean installation of openindiana. On 9 September 2012 01:41, Yuri Pankov yuri.pan...@gmail.com wrote: On Fri, 7 Sep 2012 21:33:24 +0200, Ivan Gualandri wrote: Hi, in my laptop where actually there isn't any supported network card (i need to compile myk driver), i tried to ping localhost but i receive alway network unreachable. I tried both: ping localhost ping 127.0.0.1 and an ifconfig -a shows that lo0 is up and running. Is that normal? There is a way to ping localhost using NoNet profile? Just a guess.. Don't you have svc:/network/ipfilter:default enabled, by chance? __**_ OpenIndiana-discuss mailing list OpenIndiana-discuss@**openindiana.org OpenIndiana-discuss@openindiana.org http://openindiana.org/**mailman/listinfo/openindiana-**discuss http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] reboot completely
How about reboot -p -p Reboot to prom. This flag can be used to reboot the sys- tem through firmware without changing the default reboot behavior as denoted by the config/fastreboot_default property setting in system/boot-config service. This option is currently available only on x86 systems. The -p and -f options are mutually exclusive. Mike On Fri, 2012-09-07 at 18:37 -0700, Marion Hakanson wrote: openindi...@nedharvey.com said: So, things like init 6 just reboot from the kernel upward. But sometimes you want or need to reset the computer, make it go through BIOS and grub and everything. If you login on the physical console, you can go to System / Shutdown, and there's a checkbox, Skip boot menu on restart which controls this behavior. But if you're connected into gnome via VNC, that menu isn't present. How do you fully reboot the computer, without the physical console? You could turn off fastreboot temporarily: svccfg -s system/boot-config:default setprop config/fastreboot_default=fals e Regards, Marion ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] tip ttydefs questions
Have you looked at your /etc/remote settings? Might be something there? Why do you need DOS new line? Is there something on the controller that can be configured? #man remote . . . pr (str) Character that indicates end-of-line on the remote host. The default value is `\n'. Mike On Mon, 2012-09-03 at 13:23 -0700, Reginald Beardsley wrote: Thanks. I'll give that a go. Kermit simply showed what I already knew. I'm getting a newline but no carriage return. Kermit will map a carriage return to a newline, but not a newline to the pair. Strangely stty will not allow me to change certain things, but the man page gives no indication of when or why. Evi Nemeth et al after remarking that it adds great complexity w/ little increase in functionality conclude the section on setting up terminals under Solaris w/ Have fun. It's ridiculous that something so trivial would be such a hassle. sigh.. --- On Mon, 9/3/12, Joshua M. Clulow j...@sysmgr.org wrote: From: Joshua M. Clulow j...@sysmgr.org Subject: Re: [OpenIndiana-discuss] tip ttydefs questions To: Discussion list for OpenIndiana openindiana-discuss@openindiana.org Date: Monday, September 3, 2012, 3:10 PM On 3 September 2012 10:10, Reginald Beardsley pulask...@yahoo.com wrote: I'm playing w/ a microcontroller (MSP430G2553) which communicates via RS-232 using a Keyspan USB-RS-232 adapter and tip. Suggestions? I'm about to build kermit, which will probably solve things. If you have GNU screen available you might give that a try -- I'm pretty sure there's a binary package in the repository. e.g. http://embeddedfreak.wordpress.com/2008/08/12/using-gnu-screen-to-debug-your-serial-port/ -- Joshua M. Clulow UNIX Admin/Developer http://blog.sysmgr.org ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] OpenIndiana lead Alasdair Lumsden resigns
Would not webmin be a good fit? Develop good modules for webmin to manage OI with. Mike On Sun, 2012-09-02 at 17:02 +0200, Open Indiana wrote: It's not that OI doesn't have to have a GUI, it's only that not all settings have to be set OVER a GUI. Of course it needs a decent GUI, but that doesn't imply that you can change/alter anything without getting deeper and into the commandline. -Original Message- From: Gary Gendel [mailto:g...@genashor.com] Sent: zondag 2 september 2012 16:53 To: Discussion list for OpenIndiana Subject: Re: [OpenIndiana-discuss] OpenIndiana lead Alasdair Lumsden resigns On 9/2/12 7:23 AM, Dave Koelmeyer wrote: On 2/09/12 02:48 AM, Bob Friesenhahn wrote: On Sat, 1 Sep 2012, Robin Axelsson wrote: I'm fully aware of the power of the command line and it is the command line that really makes me like Unix based OSes (including Linux). But making OI look well-polished with a fancy and easy to administer web-admin GUI that would encourage the average-Joe to use it as a home-NAS / virtual server is not a bad thing. That way OI would reach a higher penetration with a larger user-base and most importantly; it will get _free advertising_. To some extent the old adage A good product markets itself has some truth in it. But it must not only be good, it has to /look/ good so that even a less versed person will understand how good it is. Focusing on issues like this would be putting the cart before the horse. It is more important to be able to easily build everything and incorporate updates than to have a fancy configuration GUI. OI popularity should come second to correct functionality and having an organization (of volunteers and corporate entities) to sustain it. If OI is worthy, popularity will follow, even if only from people who already preferred Solaris. +1. Precisely. I totally agree. However, I selfishly want an X-windows server and window manager on my server. I personally would prefer a simple window manager over a the heavyweight Gnome/KDE camps but there are reasons to go with these. I develop GUI based applications and have just about one of every Linux/Unix/Mac/Windows OS and version running to do build and test sitting in the home office on the opposite coast. Our clients still have a large investment with Solaris 9/10 so it is important that this builds and runs on a Solaris variant. Some of the apps can launch external programs, so it determines whether it should use gnome-open, etc. to choose the appropriate application. I telecommute, so when I make code changes I like to first build and test it on a cross section of platforms locally so I don't ship it out to the build farm broken and make everyone unhappy. I run router/firewall/file-share/backup/web/imap,web,smtp mail services on an old V20z. I have over 10 TB of mirrored zfs storage on which stores mail for each user With all of this, I seldomly tax it's resources. I do, however use this to build and test to make sure that it properly compiles and runs my applications. This has saved me countless of re-spins do to compiler or library issues. Without X-windows and some WM, I would no longer be able to use this machine that way and would have to take the hit for breaking Solaris builds. I recently picked up an Enterprise 450 when I heard of the OI Sparc efforts. However, it came with the internal NIC and the DVD drive broken. It also has that funky PXE graphics card. I got around the NIC by putting a fiberchannel card in and a SX to TX converter, and picked up a replacement DVD drive. I was hoping to not only use it for testing, but to use it to help the SPARC OI efforts but it still requires X-windows and WM to be useful for me. I can't believe that I'm the only one that uses OI to do GUI product development. Gary ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] OpenIndiana lead Alasdair Lumsden resigns
I have been developing a virtualization product that runs on OI, It's written in Java but uses ZFS and Comstar so the server side has to be Iluminos/Solaris11 based. For me, development and testing has been much more efficient by running OI on my workstations and laptops. When I'm traveling, I can still build and test because my laptop is running OI. I could use VMs for testing, but rather not if I don't have to. The fact that OI is usable as a workstation has been great and I would not be happy to see it go away. If it does, I will likely have to switch to Solaris 11 to Build and test my software. Microsoft owns the desktop market because it owns the desktop market. Uses run Windows because the programs they need run on Windows. Developers develop for windows because the Users are running Windows. Hardware vendors write drivers for Windows because the computers are running Windows. It does not matter how great of a desktop OI is, it will never break the Windows cycle. The real threat to Windows is cloud services. The Microsoft Lock in might be broken when the applications Users use no longer depend on the desktop OS, But when that happens it also will mean that the great services OI provides will be irrelevant on a desktop. If there is one niche market I can see for OI as a desktop, it is in Trusted Extensions. The future of OI is on the server, and it should have a usable GUI interface. But in my opinion, trying to support every Desktop application is a bit futile. Mike On Sun, 2012-09-02 at 10:52 -0400, Gary Gendel wrote: On 9/2/12 7:23 AM, Dave Koelmeyer wrote: On 2/09/12 02:48 AM, Bob Friesenhahn wrote: On Sat, 1 Sep 2012, Robin Axelsson wrote: I'm fully aware of the power of the command line and it is the command line that really makes me like Unix based OSes (including Linux). But making OI look well-polished with a fancy and easy to administer web-admin GUI that would encourage the average-Joe to use it as a home-NAS / virtual server is not a bad thing. That way OI would reach a higher penetration with a larger user-base and most importantly; it will get _free advertising_. To some extent the old adage A good product markets itself has some truth in it. But it must not only be good, it has to /look/ good so that even a less versed person will understand how good it is. Focusing on issues like this would be putting the cart before the horse. It is more important to be able to easily build everything and incorporate updates than to have a fancy configuration GUI. OI popularity should come second to correct functionality and having an organization (of volunteers and corporate entities) to sustain it. If OI is worthy, popularity will follow, even if only from people who already preferred Solaris. +1. Precisely. I totally agree. However, I selfishly want an X-windows server and window manager on my server. I personally would prefer a simple window manager over a the heavyweight Gnome/KDE camps but there are reasons to go with these. I develop GUI based applications and have just about one of every Linux/Unix/Mac/Windows OS and version running to do build and test sitting in the home office on the opposite coast. Our clients still have a large investment with Solaris 9/10 so it is important that this builds and runs on a Solaris variant. Some of the apps can launch external programs, so it determines whether it should use gnome-open, etc. to choose the appropriate application. I telecommute, so when I make code changes I like to first build and test it on a cross section of platforms locally so I don't ship it out to the build farm broken and make everyone unhappy. I run router/firewall/file-share/backup/web/imap,web,smtp mail services on an old V20z. I have over 10 TB of mirrored zfs storage on which stores mail for each user With all of this, I seldomly tax it's resources. I do, however use this to build and test to make sure that it properly compiles and runs my applications. This has saved me countless of re-spins do to compiler or library issues. Without X-windows and some WM, I would no longer be able to use this machine that way and would have to take the hit for breaking Solaris builds. I recently picked up an Enterprise 450 when I heard of the OI Sparc efforts. However, it came with the internal NIC and the DVD drive broken. It also has that funky PXE graphics card. I got around the NIC by putting a fiberchannel card in and a SX to TX converter, and picked up a replacement DVD drive. I was hoping to not only use it for testing, but to use it to help the SPARC OI efforts but it still requires X-windows and WM to be useful for me. I can't believe that I'm the only one that uses OI to do GUI product development. Gary ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org
Re: [OpenIndiana-discuss] Synchronizing Sun DHCP servers
I have not looked at this in a long time, But multiple SUN DHCP servers used to be able to use a common NFS share of their configuration files. Yes the server can be configured to ping(Test) the addresses. Mike michael.staple...@techsologic.com On Thu, 2012-08-09 at 03:51 +0400, Jim Klimov wrote: Hello all, I wondered if the Sun DHCP server, also provided in OI, supports synchronization of instances - i.e. two boxes providing addresses for the same range, should support interchange of leased address lists, defined macros (dhcptab) and so on. Perhaps a shared LDAP backend can be implemented? From what I currently see, there is multi-instance support, but it seems based on shared FS (i.e. NFS) to store the DHCP tables... are there any other options currently available, or reasonably easy to implement? Secondly, does Sun DHCP support active probing (arp/ping) whether the IP address it is going to lease is actually available and not used by some squatter (or a client of another DHCP server), and logging the result? Thanks, //Jim Klimov ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] NFS fails to automount at boot
Hi, I have been using Solaris only since 2.6 and /home has always been an autofs mount point. What version of Solaris did not have /home as an autofs mount point? Or are you confusing OI with some other OS? Mike . On Mon, 2012-08-06 at 09:51 -0400, Daniel Kjar wrote: I am sure it has great value, why would it be there otherwise?. I just remember installing a fresh version solaris one day and trying to figure out why I couldn't just delete export and use /home like always. Therefore, in my mind I associate it with being frustrated by a I am sorry Dave, I can't allow you to do that message until I figured out what had changed. On 08/ 6/12 09:47 AM, James Carlson wrote: Daniel Kjar wrote: Really? What do you call that crap in etc under auto_master and auto_home? Read the man pages for the automounter. Start with automount(1M). Yes, the system comes by default with that crap, but (a) you certainly are under no obligation to use /export/home if you don't like it and (b) the mechanism that underlies it is far more general than just auto_home. It allows you to trigger configured mounts based on file system access, and handles fail-over, platform-related variable expansion, and directory service integration. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] TCP Reset Packet Problem
Do you have the VBox client utilities installed? I had seen strange clock problems when the Agent is not installed. Mike On Tue, 2012-08-07 at 12:31 +0800, Patrick Yu wrote: I was actually trying to say strange problem of TCP reset packet (or the the lack of). :-) Anyway, after some more hours of digging around, I found some leads: # ndd tcp tcp_rst_sent_rate_enabled 1 # ndd tcp tcp_rst_sent_rate 40 # kstat tcp 1 1 | egrep '[Rr]st' outRsts 874 tcp_rst_unsent 3644 # telnet 127.0.0.1 12345 Trying 127.0.0.1... ^C # kstat tcp 1 1 | egrep '[Rr]st' outRsts 875 tcp_rst_unsent 3648 The rst sent rate of 40 a second seems not being observed, despite there's no reset packets generated in the system except for the test run. I did some more tests: When trying to increase the rst_sent_rate, it takes a value of 800+ to make reset packets work, and the value needs to be further incremented when more reset packets are being sent. It seems like the counter for reset packets per second never get zeroed. Looks like a real bug to me. But I am still not sure how to trigger this - it runs fine in the first day of two before exhibiting this strange behavior. I even did some stress test from https://blogs.oracle.com/clive/entry/tcp_reset_delay to a freshly rebooted system in failed attempts to reproduce the erroneous conditions. But I am sure it will come back when it's left there for another day. I suspect it could be the time accuracy problem due to it being a vbox VM. I looked at tcp_output.c from https://hg.openindiana.org/upstream/illumos/illumos-gate/file/adffc698eaf5/usr/src/uts/common/inet/tcp/tcp_output.c#l3279 and tried to change the clock backwards and forwards, but still could not reproduce it. Now, my temporary workaround is to set 0 to tcp_rst_sent_rate_enabled, but in effect totally disable any tcp reset DOS protection. Hope this could help someone with a similar case. Best regards, Patrick On Mon, Aug 6, 2012 at 3:09 PM, Patrick Yu ipaq3...@gmail.com wrote: Hi, I am experiencing a very strange TCP problem (the lack of) with my new oi_151a5 install. The machine ran fine on the first day or two after a fresh reboot, and after that SSH connections broke down and hanged mysteriously during SSL handshake where no connections could be made from both outside or even from inside using loopback lo0. It took me awhile to track it down to this bug - https://www.illumos.org/issues/1983 where the workaround posted solved my SSH problem. But upon closer examination I found the source of the problem is actually something else in my particular case. It turns out any TCP connections to a closed port that is not being listened to would not generate a TCP reset packet from the networking core. Any clients connecting to these ports would hang there indefinitely for lengthy retries. I initially thought it was due to ipfilter but even after I cleared the table, RST was still not being sent no matter what interface was involved (lo0, e1000g0). The connection and RST packet would come back after a reboot, and the problem recurs after a few days even with low/no load as this is a testing installation running as a VM. Things like X didn't start properly when there's missing TCP RST. I didn't have time to look into it, but I presume it's related to this problem too. Worth nothing is that those ports being listened to exhibited no problems whatsoever - I can even do a iperf across the network with very good results. I could do some silly thing like the below ipf.conf snippet to force RST packet being sent. But then if there's any pass statement at the end like pass in quick on lo0, RST would disappear again! set intercept_loopback true; block return-rst in Anyone has an idea what could be the cause? A misconfiguration or a bug? Any pointer would be greatly appreciated. I still keep a snapshot of the problematic VM and am ready to do some more experiments with it. Below is what the problematic session looks like, and a normal snoop after reboot. # telnet 127.0.0.1 12345 Trying 127.0.0.1... ^C # snoop -I lo0 -tr -r Using device ipnet/lo0 (promiscuous mode) 0.0127.0.0.1 - 127.0.0.1TCP D=12345 S=36692 Syn Seq=1227588634 Len=0 Win=32768 Options=mss 8192,sackOK,tstamp 71716119 0,nop,wscale 2 1.13752127.0.0.1 - 127.0.0.1TCP D=12345 S=36692 Syn Seq=1227588634 Len=0 Win=32768 Options=mss 8192,sackOK,tstamp 71716119 0,nop,wscale 2 3.40631127.0.0.1 - 127.0.0.1TCP D=12345 S=36692 Syn Seq=1227588634 Len=0 Win=32768 Options=mss 8192,sackOK,tstamp 71716119 0,nop,wscale 2 7.92479127.0.0.1 - 127.0.0.1TCP D=12345 S=36692 Syn Seq=1227588634 Len=0 Win=32768 Options=mss 8192,sackOK,tstamp 71716119 0,nop,wscale 2 16.93940
Re: [OpenIndiana-discuss] How to mount ISO image on boot?
I have one more idea that is more fun... I have all my ISO files in /ISO My /etc/auto_master: # Master map for automounter # +auto_master /net-hosts -nosuid,nobrowse /home auto_home -nobrowse /mountedISO auto_iso My /etc/auto_iso * -fstype=hsfs :/ISO/.iso Now when I cd to /mountedISO/xp, the /ISO/xp.iso is mounted. If I cd tp /mountedISO/OI, the /ISO/OI.iso is mounts And so on. Drop a new iso in /ISO and cd to /mountesISO/? to access it. Mike On Wed, 2012-07-18 at 08:09 -0400, Michael Stapleton wrote: I have a bit more time to answer more fully now. Add a line to the /etc/auto_master file for a direct map # cat /etc/auto_master # Master map for automounter # +auto_master /net -hosts -nosuid,nobrowse /home auto_home -nobrowse /-auto_direct Create the direct map /etc/auto_direct with an entry like this: /cdrom -fstype=hsfs :/ISO/xp.iso replace /cdrom with where you want the iso mounted, replace /ISO/xp.iso with the path to your iso file. Run automount: # automount -v Cd to your mountpoint and the iso should be automatically mounted. Mike On Wed, 2012-07-18 at 12:25 +0100, Aneurin Price wrote: On 17 July 2012 17:50, Michael Stapleton michael.staple...@techsologic.com wrote: Or a job for autofs. Check out the man page for automount. Thanks for the suggestion. The automount option does sound cleaner, although the init script option has the advantage of being very, very simple. I'll look into exactly how the automounter works - thank you both for the suggestions. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss --=-Gdhuk2g1yw0R6m5lnMWu-- ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] ipfilter frustrations again
If you add set -x to the beginning of the script, the service log will show what instructions are actually being executed. #!/sbin/sh set -x # # CDDL HEADER START # # The contents of this file are subject to the terms of the Mike On Wed, 2012-07-18 at 10:56 -0400, Daniel Kjar wrote: Not sure what I am looking for in here. It looks like it would have used my ipf.conf if I had 'upgraded' but I don't see anything else in there that helps. If I didn't use a custom file how would a person go about changing ipfilters to suit? Is that what you are supposed to do? On 07/18/12 09:58 AM, Michael Stapleton wrote: more /lib/svc/method/ipfilter ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] How to mount ISO image on boot?
Or a job for autofs. Check out the man page for automount. Mike On Tue, 2012-07-17 at 12:43 -0400, Ray Arachelian wrote: On 07/17/2012 12:34 PM, Ray Arachelian wrote: On 07/17/2012 09:29 AM, Aneurin Price wrote: Hello all, From the command line, I can mount an iso image using mount directly (without having to invoke lofiadm): # mount -F hsfs /path/to/my.iso /mountpath I've tried adding a line to /etc/vfstab to have this done automatically on boot: /path/to/my.iso - /mountpath hsfs - yes - Try it this way: mount -o ro -F hsfs `lofiadm -a /path/to/my.iso` /mountpath When you're done you'll need to run lofiadm -d /path/to/my.iso after you unmount it. Sorry, I don't think you can add this to /etc/vfstab - well, you might be able to if you could get lofiadm to run before your ISO gets mounted, but that's going to be too tricky. The easiest way is just to write the command into /etc/rc3.d/S99mountiso like this: #!/bin/bash mount -o ro -F hsfs `lofiadm -a /path/to/my.iso` /mountpath ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Best way to share files between host and VMs?
Are All the VMs on the same host? How about VBox shared folders? Mike On Fri, 2012-04-27 at 12:01 -0500, Ron Parker wrote: On Fri, Apr 27, 2012 at 11:24 AM, Travis Lawrie tlawri...@gmail.com wrote: oi, napp-it, esxi, vt-d, compatible hba in it mode, passthrough, cifs shares, nfs shares, store vms on vdevs, all in one ftw Alas this is on my laptop. But I am making some progress. Here are some numbers. The first two are approximate (on the low side) I didn't care to re-run them to get exact numbers since they are 2 orders of magnitude slower. Tools and src, dest mounted via NFS: ~30m Tools local, src, dest mounted via NFS: ~18m All local: 14s Tools, dest local, src mounted via SMB/CIFS: 21.5s Notice the seconds as opposed to minutes. Now if I can figure out if it's possible to get symlinks working via SMB/CIFS I can put it all back on the host and try it out. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] proxybase and pkg.depotd
Try using just http://pkg.sonicle.com; Mike On Thu, 2012-03-15 at 10:40 +0100, Gabriele Bulfon wrote: Hi, I'm a bit confused about how to use the proxybase on pkg.depotd. I have a server running on OI mirror on port 8151, not public. I want it to be reversed proxy by my public apache like that: pkg.sonicle.com/oi-mirror So i configured apache as: ProxyPass/oi-mirror http://dev.sonicle.com:8151 ProxyPassReverse/oi-mirror http://dev.sonicle.com:8151 then tried: pfexec svccfg -s svc:/application/pkg/server:oi-mirror setprop pkg/proxy_base = astring: http://pkg.sonicle.com/oi-mirror; and it gives error when accessing a package manifest with the browser. I tried also (that sounds strange...): pfexec svccfg -s svc:/application/pkg/server:oi-mirror setprop pkg/proxy_base = astring: http://dev.sonicle.com:8151/oi-mirror; no way. How should it be done? thanx! Gabriele. ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] oi151 clean install - root role problem
Hello, I have to disagree that having Primary Administrator was a blunder. How it is used is a blunder. Primary administrator should never be assigned to a user account. In reality, no special privileges should be assigned to user accounts. Privileges/Profiles/Authorizations/Rights should only be assigned to Roles, and users account assigned Roles. In a high security environment, no one person is completely trusted. Administration of a server is separated between at least two people, a system administrator and a security administrator. The root account does not allow this separation of access and control. At least two Roles would be created each with the appropriate rights. Then at least two users accounts would be created, one for each person. if a persons job is security, their account would be assigned the security Role, and if they were an administrator, the admin Role. If a person changed roles with in the organization, the Roles assigned to their user account would be changed. The root account would almost never be used, and the password would be highly controlled by a select few. This is the idea behind RBAC. Role Based Access Control. Security and convenience, Pick One. Michael Stapleton On Sun, 2011-11-27 at 20:07 -0300, Ignacio Marambio Catán wrote: On Sun, Nov 27, 2011 at 7:56 PM, Matt Connolly matt.connolly...@gmail.com wrote: On 28/11/2011, at 1:35 AM, Bill Sommerfeld wrote: On 11/27/11 04:36, Matt Connolly wrote: This still didn't help. But again, setting the root user password with `sudo passwd root` enables me to authenticate to the root role using that root password. (not my user password, as I would use with sudo). Any reason why the installer would not give the Primary Administrator profile to the first user on the machine? A user account granted the Primary Administrator profile becomes equivalent to root -- any process running as that uid can pfexec rm -rf /usr or anything more destructive. If the first user can't do it, who can? Primary Administrator is too powerful to grant to a use every day user account. Granted. Although I would think an option during the install process to grant Primary Administrator role to that first user (perhaps with an appropriate warning) would be fine. (As far as risk goes, the first user is given access to root via sudo anyway). I'm happy using sudo because it asks to confirm password (which pfexec doesn't), but I see two caveats with that: 1. no support for role based auditing 2. all the existing system panels use the role/profile approach. I do not know how sudo is compiled in openindiana but sudo has proper support for BSM, patches have been submitted for that in 2008 seriously, the primary administrator thing was an extremely bad idea. Oracle fixed that particular blunder with solaris 11 making su work like sudo for the most part If it wasn't for sudo, you'd have to boot into single mode to change anything! the folks who made the opensolaris installer grant the first regular user the primary administrator role, and then splattered pfexec all over the documentation, made a terrible mistake; the installer has only been corrected recently, after too many opensolaris users have been mistrained to use pfexec the wrong way. And finally, just to clarify one more thing, when you use those system panels (like SMF Services, etc) that ask you to authenticate as root role, should it be the root password or your user password? to login to a role, you need the role password Thanks, Matt ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] oi151 clean install - root role problem
Agreed. We have the choice of either, but often the organizations policy dictates the choice even if it does not seem to make sense. When root account access is forbidden, Primary Administrator allows someone the check the box in their security list. More importantly, Primary Administrator can have its permissions changed ie. reduced, while root can not. Root has and always will have full access, Primary Administrator can be restricted. RBAC mechanisms can be used by a system administrator in enforcing a policy of separation of duties. Separation of duties is considered valuable in deterring fraud since fraud can occur if an opportunity exists for collaboration between various job related capabilities. Separation of duty requires that for particular sets of transactions, no single individual be allowed to execute all transactions within the set. The most commonly used examples are the separate transactions needed to initiate a payment and to authorize a payment. No single individual should be capable of executing both transactions. Separation of duty is an important consideration in real systems. [1] , [12] , [13] , [14] The sets in question will vary depending on the application. In real situations, only certain transactions need to be restricted under separation of duty requirements. For example, we would expect a transaction for ``authorize payment'' to be restricted, but a transaction ``submit suggestion to administrator'' would not be. David Ferraiolo and Rick Kuhn Separation of Duties can be applied to system administration, not just Users. What ever it is you want to do, Openindiana gives you the choice. If you do not like the defaults, change it. Are the defaults correct? That depends on your requirements so there are no correct defaults. Mike On Mon, 2011-11-28 at 01:09 -0300, Ignacio Marambio Catán wrote: by that reasoning, if you wanted a primary administrator, you'd assign the root role and be done with it. On Mon, Nov 28, 2011 at 12:50 AM, Michael Stapleton michael.staple...@techsologic.com wrote: Hello, I have to disagree that having Primary Administrator was a blunder. How it is used is a blunder. Primary administrator should never be assigned to a user account. In reality, no special privileges should be assigned to user accounts. Privileges/Profiles/Authorizations/Rights should only be assigned to Roles, and users account assigned Roles. In a high security environment, no one person is completely trusted. Administration of a server is separated between at least two people, a system administrator and a security administrator. The root account does not allow this separation of access and control. At least two Roles would be created each with the appropriate rights. Then at least two users accounts would be created, one for each person. if a persons job is security, their account would be assigned the security Role, and if they were an administrator, the admin Role. If a person changed roles with in the organization, the Roles assigned to their user account would be changed. The root account would almost never be used, and the password would be highly controlled by a select few. This is the idea behind RBAC. Role Based Access Control. Security and convenience, Pick One. Michael Stapleton On Sun, 2011-11-27 at 20:07 -0300, Ignacio Marambio Catán wrote: On Sun, Nov 27, 2011 at 7:56 PM, Matt Connolly matt.connolly...@gmail.com wrote: On 28/11/2011, at 1:35 AM, Bill Sommerfeld wrote: On 11/27/11 04:36, Matt Connolly wrote: This still didn't help. But again, setting the root user password with `sudo passwd root` enables me to authenticate to the root role using that root password. (not my user password, as I would use with sudo). Any reason why the installer would not give the Primary Administrator profile to the first user on the machine? A user account granted the Primary Administrator profile becomes equivalent to root -- any process running as that uid can pfexec rm -rf /usr or anything more destructive. If the first user can't do it, who can? Primary Administrator is too powerful to grant to a use every day user account. Granted. Although I would think an option during the install process to grant Primary Administrator role to that first user (perhaps with an appropriate warning) would be fine. (As far as risk goes, the first user is given access to root via sudo anyway). I'm happy using sudo because it asks to confirm password (which pfexec doesn't), but I see two caveats with that: 1. no support for role based auditing 2. all the existing system panels use the role/profile approach. I do not know how sudo is compiled in openindiana but sudo has proper support for BSM, patches have been submitted for that in 2008 seriously, the primary administrator thing was an extremely bad idea. Oracle fixed
Re: [OpenIndiana-discuss] Memory drains away....
Hello, There is an issue running VirtualBox with ZFS. ZFS will cause fragmentation of memory which is usually not a problem, but due to the nature of how VirtualBox attempt to lock down continuous chunks of RAM, it is a problem for VBox. If you are running VBox and ZFS, cap the ARC cache... Mike, On Fri, 2011-11-04 at 10:39 -0400, Daniel Kjar wrote: I have seen that in plenty of places and I 'know' it to be true but as I watch zfs swallow all of my ram and my server ends up stuttering (when it shouldn't) then I have to do something. Although everything everywhere says that ZFS gives it up whenever asked many comments from oracle and the zfs tuning guide hint that it isn't really that good at giving it up. Some processes don't know the right way to ask (exert pressure) etc. Also, when ZFS was young Sun kept saying that it using all of the available ram was harmless but... later they figured out there was a bug in how it was handling the process of detecting memory constraints on the system and now there are known scenarios when limiting ZFS hunger is called for. I was just hoping there was something else going on here with 151a but I see now that is not the case. On 11/ 4/11 10:28 AM, Rob McMahon wrote: On 04/11/2011 13:13, Daniel Kjar wrote: pmap seems to give me exactly what top tells me. Remember top will almost always show low free memory. Free memory is wasted memory, it gets filled by filesystem cache, zfs or otherwise, and re-used when needed. Look at e.g. `vmstat 5' to look for memory issues. Rob ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] ZFS stalls with oi_151?
Hi, I had similar hard lockups when I accidentally tried to delete a ZFS Volume while doing a ZFS send at the same time. There seems to be a missing lock. In the end I had to ensure that I did not run concurrent zfs commands. Are there any other ZFS commands hung at the same time? Mike On Fri, 2011-10-21 at 10:16 +0200, Tommy Eriksen wrote: Hi guys, I've got a bit of a ZFS problem: All of a sudden, and it doesn't seem related to load or anything, the system will stop writing to the disks in my storage pool. No error messages are logged (that I can find anyway), nothing in dmesg, messages or the likes. ZFS stalls, a simple snapshot command (or the likes) just hangs indefinitely and can't be stopped with ctrl+c or kill -9. Today, the stall happened after I had been running 2 VMs on each (running on vsphere5 connecting via iscsi) running iozone -s 200G (just to generate a bunch of load). Happily, this morning, I saw that they were still running without problem and stopped them. Then, when asking vSphere to delete the VMs, all write I/O stalled. A bit too much irony for me :) However, and this puzzled me, everything else seems to run perfectly, even up to zfs writing new data on the l2arc devices while data is read. Boxes (2 of the same) are: Supermicro based, 24 bay chassis 2*X5645 Xeon 48gigs of RAM 3*LSI2008 controllers coupled to 20 Seagate Constellation ES 3TB SATA 2 Intel 600GB SSD 2 Intel 311 20GB SSD 18 of the 3TB drives are set up in mirrored vdevs, the last 2 are spares. Running oi_151a (trying a downgrade to 148 today, I think, since I have 5 or so boxes running without problems on 148, but both my 151a are playing up). /etc/system variables: set zfs:zfs_vdev_max_pending = 4 set zfs:l2arc_noprefetch = 0 set zfs:zfs_vdev_cache_size = 0 I can write to a (spare) disk on the same controller without errors, so I take it its not a general I/O stall on the controller: root@zfsnas3:/var/adm# dd if=/dev/zero of=/dev/rdsk/c8t5000C50035DE14FAd0s0 bs=1M ^C1640+0 records in 1640+0 records out 1719664640 bytes (1.7 GB) copied, 11.131 s, 154 MB/s iostat reported - note no writes to any of the other drives. All writes just stall. extended device statistics errors --- r/sw/s kr/s kw/s wait actv wsvc_t asvc_t %w %b s/w h/w trn tot device 3631.6 167.2 14505.5 152337.1 0.0 2.20.00.6 0 157 0 0 0 0 c8 109.00.8 472.90.0 0.0 0.00.00.5 0 3 0 0 0 0 c8t5000C50035B922CCd0 143.00.8 567.10.0 0.0 0.10.00.5 0 3 0 0 0 0 c8t5000C50035CA8A5Cd0 89.60.8 414.10.0 0.0 0.10.00.6 0 2 0 0 0 0 c8t5000C50035CAB258d0 95.80.8 443.30.0 0.0 0.00.00.5 0 2 0 0 0 0 c8t5000C50035DE3DEBd0 144.80.8 626.40.0 0.0 0.10.00.6 0 4 0 0 0 0 c8t5000C50035BE1945d0 134.00.8 505.70.0 0.0 0.00.00.4 0 3 0 0 0 0 c8t5000C50035DDB02Ed0 1.00.43.40.0 0.0 0.00.00.0 0 0 0 0 0 0 c8t5000C50035DE0414d0 107.80.8 461.60.0 0.0 0.00.00.3 0 2 0 0 0 0 c8t5000C50035D40D15d0 117.20.8 516.50.0 0.0 0.10.00.5 0 3 0 0 0 0 c8t5000C50035DE0C86d0 64.20.8 261.20.0 0.0 0.00.00.6 0 2 0 0 0 0 c8t5000C50035DD6044d0 2.00.86.80.0 0.0 0.00.00.0 0 0 0 0 0 0 c8t5001517959582943d0 2.00.86.80.0 0.0 0.00.00.0 0 0 0 0 0 0 c8t5001517959582691d0 109.80.8 423.50.0 0.0 0.00.00.3 0 2 0 0 0 0 c8t5000C50035C13A6Bd0 765.00.8 3070.90.0 0.0 0.20.00.2 0 7 0 0 0 0 c8t5001517959699FE0d0 1.0 149.23.4 152337.1 0.0 1.00.06.5 0 97 0 0 0 0 c8t5000C50035DE14FAd0 210.40.8 775.40.0 0.0 0.10.00.4 0 3 0 0 0 0 c8t5000C50035CA1E58d0 689.40.8 2776.60.0 0.0 0.10.00.2 0 7 0 0 0 0 c8t50015179596A8717d0 108.60.8 430.50.0 0.0 0.00.00.4 0 2 0 0 0 0 c8t5000C50035CBD12Ad0 165.60.8 561.50.0 0.0 0.10.00.4 0 3 0 0 0 0 c8t5000C50035CA90DDd0 164.40.8 578.50.0 0.0 0.10.00.4 0 4 0 0 0 0 c8t5000C50035DDFC34d0 125.60.8 477.70.0 0.0 0.00.00.4 0 2 0 0 0 0 c8t5000C50035DE2AD3d0 93.20.8 371.30.0 0.0 0.00.00.4 0 2 0 0 0 0 c8t5000C50035B94C40d0 113.20.8 445.30.0 0.0 0.10.00.5 0 3 0 0 0 0 c8t5000C50035BA02AEd0 75.40.8 304.80.0 0.0 0.00.00.4 0 2 0 0 0 0 c8t5000C50035DDA579d0 …Is anyone else seeing similar? Thanks a lot, Tommy
Re: [OpenIndiana-discuss] Problem with high cpu load (oi_151a)
fsflush 10
ntpd 14
updatemanagernot 16
mixer_applet221
isapython2.6 22
dtrace 24
gnome-terminal 24
smbd 39
nwam-manager 58
zpool-rpool 65
svc.configd 79
Xorg 82
sched369939
So, quite obviously there is one executable standing out here, sched,
now what's the meaning of this figures?
Regards,
Gernot Wolf
Am 20.10.11 19:22, schrieb Michael Stapleton:
Hi Gernot,
You have a high context switch rate.
try
#dtrace -n 'sched:::off-cpu { @[execname]=count()}'
For a few seconds to see if you can get the name of and executable.
Mike
On Thu, 2011-10-20 at 18:44 +0200, Gernot Wolf wrote:
Hello all,
I have a machine here at my home running OpenIndiana oi_151a, which
serves as a NAS on my home network. The original install was OpenSolaris
2009.6 which was later upgraded to snv_134b, and recently to oi_151a.
So far this OSOL (now OI) box has performed excellently, with one major
exception: Sometimes, after a reboot, the cpu load was about 50-60%,
although the system was doing nothing. Until recently, another reboot
solved the issue.
This does not work any longer. The system has always a cpu load of
50-60% when idle (and higher of course when there is actually some work
to do).
I've already googled the symptoms. This didn't turn up very much useful
info, and the few things I found didn't apply to my problem. Most
noticably was this problem which could be solved by disabling cpupm in
/etc/power.conf, but trying that didn't show any effect on my system.
So I'm finally out of my depth. I have to admit that my knowledge of
Unix is superficial at best, so I decided to try looking for help here.
I've run several diagnostic commands like top, powertop, lockstat etc.
and attached the results to this email (I've zipped the results of kstat
because they were1MB).
One important thing is that when I boot into the oi_151a live dvd
instead of booting into the installed system, I also get the high cpu
load. I mention this because I have installed several things on my OI
box like vsftpd, svn, netstat etc. I first thought that this problem
might be caused by some of this extra stuff, but getting the same system
when booting the live dvd ruled that out (I think).
The machine is a custom build medium tower:
S-775 Intel DG965WHMKR ATX mainbord
Intel Core 2 Duo E4300 CPU 1.8GHz
1x IDE DVD recorder
1x IDE HD 200GB (serves as system drive)
6x SATA II 1.5TB HD (configured as zfs raidz2 array)
I have to solve this problem. Although the system runs fine and
absolutely serves it's purpose, having the cpu at 50-60% load constantly
is a waste of energy and surely a rather unhealthy stress on the hardware.
Anyone any ideas...?
Regards,
Gernot Wolf
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Problem with high cpu load (oi_151a)
11
updatemanagernot 13
isapython2.6 14
devfsadm 20
gnome-terminal 20
dtrace 23
mixer_applet225
smbd 39
nwam-manager 60
svc.configd 79
Xorg100
sched394078
gernot@tintenfass:~# dtrace -n 'sched:::off-cpu { @[execname]=count()}'
dtrace: description 'sched:::off-cpu ' matched 3 probes
^C
automountd1
ipmgmtd 1
idmapd2
in.routed 2
init 2
miniserv.pl 2
netcfgd 2
ssh-agent 2
sshd 2
svc.startd2
fmd 3
hald 3
inetd 3
intrd 3
hald-addon-acpi 4
nscd 4
gnome-power-mana 5
sendmail 5
mdnsd 6
devfsadm 8
xscreensaver 9
fsflush 10
ntpd 14
updatemanagernot 16
mixer_applet221
isapython2.6 22
dtrace 24
gnome-terminal 24
smbd 39
nwam-manager 58
zpool-rpool 65
svc.configd 79
Xorg 82
sched369939
So, quite obviously there is one executable standing out here, sched,
now what's the meaning of this figures?
Regards,
Gernot Wolf
Am 20.10.11 19:22, schrieb Michael Stapleton:
Hi Gernot,
You have a high context switch rate.
try
#dtrace -n 'sched:::off-cpu { @[execname]=count()}'
For a few seconds to see if you can get the name of and executable.
Mike
On Thu, 2011-10-20 at 18:44 +0200, Gernot Wolf wrote:
Hello all,
I have a machine here at my home running OpenIndiana oi_151a, which
serves as a NAS on my home network. The original install was
OpenSolaris
2009.6 which was later upgraded to snv_134b, and recently to oi_151a.
So far this OSOL (now OI) box has performed excellently, with one major
exception: Sometimes, after a reboot, the cpu load was about 50-60%,
although the system was doing nothing. Until recently, another reboot
solved the issue.
This does not work any longer. The system has always a cpu load of
50-60% when idle (and higher of course when there is actually some work
to do).
I've already googled the symptoms. This didn't turn up very much useful
info, and the few things I found didn't apply to my problem. Most
noticably was this problem which could be solved by disabling cpupm in
/etc/power.conf, but trying that didn't show any effect on my system.
So I'm finally out of my depth. I have to admit that my knowledge of
Unix is superficial at best, so I decided to try looking for help here.
I've run several diagnostic commands like top, powertop, lockstat etc.
and attached
Re: [OpenIndiana-discuss] Problem with high cpu load (oi_151a)
Don't know. I don't like to trouble shoot by guess if possible. I rather
follow the evidence to capture the culprit. Use what we know to discover
what we do not know.
We know CS rate in vmstat is high, we know Sys time is high, we know
syscall rate is low, we know it is not a user process therefor it is
kernel. Likely a driver.
So what kernel code is running the most?
What's causing that code to run?
Does that code belong to a driver?
Mike
On Thu, 2011-10-20 at 20:25 +0200, Michael Schuster wrote:
Hi,
just found this:
http://download.oracle.com/docs/cd/E19253-01/820-5245/ghgoc/index.html
does it help?
On Thu, Oct 20, 2011 at 20:23, Michael Stapleton
michael.staple...@techsologic.com wrote:
My understanding is that it is not supposed to be a loaded system. We
want to know what the load is.
gernot@tintenfass:~# intrstat 30
device | cpu0 %tim cpu1 %tim
-+--
e1000g#0 | 1 0,0 0 0,0
ehci#0 | 0 0,0 4 0,0
ehci#1 | 3 0,0 0 0,0
hci1394#0 | 0 0,0 2 0,0
i8042#1 | 0 0,0 4 0,0
i915#1 | 0 0,0 2 0,0
pci-ide#0 |15 0,1 0 0,0
uhci#0 | 0 0,0 2 0,0
uhci#1 | 0 0,0 0 0,0
uhci#2 | 3 0,0 0 0,0
uhci#3 | 0 0,0 2 0,0
uhci#4 | 0 0,0 4 0,0
device | cpu0 %tim cpu1 %tim
-+--
e1000g#0 | 1 0,0 0 0,0
ehci#0 | 0 0,0 3 0,0
ehci#1 | 3 0,0 0 0,0
hci1394#0 | 0 0,0 1 0,0
i8042#1 | 0 0,0 6 0,0
i915#1 | 0 0,0 1 0,0
pci-ide#0 | 3 0,0 0 0,0
uhci#0 | 0 0,0 1 0,0
uhci#1 | 0 0,0 0 0,0
uhci#2 | 3 0,0 0 0,0
uhci#3 | 0 0,0 1 0,0
uhci#4 | 0 0,0 3 0,0
gernot@tintenfass:~# vmstat 5 10
kthr memorypagedisk faults
cpu
r b w swap free re mf pi po fr de sr cd s0 s1 s2 in sy cs us
sy id
0 0 0 4243840 1145720 1 6 0 0 0 0 2 0 1 1 1 9767 121 37073 0
54 46
0 0 0 4157824 1059796 4 11 0 0 0 0 0 0 0 0 0 9752 119 37132 0
54 46
0 0 0 4157736 1059752 0 0 0 0 0 0 0 0 0 0 0 9769 113 37194 0
54 46
0 0 0 4157744 1059788 0 0 0 0 0 0 0 0 0 0 0 9682 104 36941 0
54 46
0 0 0 4157744 1059788 0 0 0 0 0 0 0 0 0 0 0 9769 105 37208 0
54 46
0 0 0 4157728 1059772 0 1 0 0 0 0 0 0 0 0 0 9741 159 37104 0
54 46
0 0 0 4157728 1059772 0 0 0 0 0 0 0 0 0 0 0 9695 127 36931 0
54 46
0 0 0 4157744 1059788 0 0 0 0 0 0 0 0 0 0 0 9762 105 37188 0
54 46
0 0 0 4157744 1059788 0 0 0 0 0 0 0 0 0 0 0 9723 102 37058 0
54 46
0 0 0 4157744 1059788 0 0 0 0 0 0 0 0 0 0 0 9774 105 37263 0
54 46
Mike
On Thu, 2011-10-20 at 11:02 -0700, Rennie Allen wrote:
Sched is the scheduler itself. How long did you let this run? If only
for a couple of seconds, then that number is high, but not ridiculous for
a loaded system, so I think that this output rules out a high context
switch rate.
Try this command to see if some process is making an excessive number of
syscalls:
dtrace -n 'syscall:::entry { @[execname]=count()}'
If not, then I'd try looking at interrupts...
On 10/20/11 10:52 AM, Gernot Wolf gw.i...@chello.at wrote:
Yeah, I've been able to run this diagnostics on another OI box (at my
office, so much for OI not being used in production ;)), and noticed
that there were several values that were quite different. I just don't
have any idea on the meaning of this figures...
Anyway, here are the results of the dtrace command (I executed the
command twice, hence two result sets):
gernot@tintenfass:~# dtrace -n 'sched:::off-cpu { @[execname]=count()}'
dtrace: description 'sched:::off-cpu ' matched 3 probes
^C
ipmgmtd 1
gconfd-2 2
gnome-settings-d 2
idmapd2
inetd 2
miniserv.pl 2
netcfgd 2
nscd 2
ospm-applet 2
ssh-agent
Re: [OpenIndiana-discuss] Problem with high cpu load (oi_151a)
You might be right. But 45% of what? Profiling interrupt: 5844 events in 30.123 seconds (194 events/sec) Count indv cuml rcnt nsec Hottest CPU+PIL Caller --- 2649 45% 45% 0.00 1070 cpu[1] i86_mwait 358 6% 51% 0.00 963 cpu[0] AcpiDebugPrint 333 6% 57% 0.00 960 cpu[0] AcpiUtTrackStackPtr 2649 times in 30 seconds totaling 1070 ns does not seem like much to me. My idle laptop shows: Count indv cuml rcnt nsec Hottest CPU+PIL Caller --- 5441 93% 93% 0.00 3132 cpu[0] i86_mwait Mike On Thu, 2011-10-20 at 20:37 +0200, Michael Schuster wrote: On Thu, Oct 20, 2011 at 20:33, Michael Stapleton michael.staple...@techsologic.com wrote: Don't know. I don't like to trouble shoot by guess if possible. I rather follow the evidence to capture the culprit. Use what we know to discover what we do not know. if you're answering my question: I'm not guessing that much: I looked at lockstat output, and right there at the top we see i86_mwait consuming 45%(!) ... so, popped that into google, the link I quote is the first to appear, and the description matches well enough that I'd give it a try. Since Gernot is seeing the issue, maybe he wants to pitch in here? regards Michael On Thu, 2011-10-20 at 20:25 +0200, Michael Schuster wrote: Hi, just found this: http://download.oracle.com/docs/cd/E19253-01/820-5245/ghgoc/index.html does it help? ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Problem with high cpu load (oi_151a)
+1
Mike
On Thu, 2011-10-20 at 11:47 -0700, Rennie Allen wrote:
I'd like to see a run of the script I sent earlier. I don't trust
intrstat (not for any particular reason, other than that I have never used
it)...
On 10/20/11 11:33 AM, Michael Stapleton
michael.staple...@techsologic.com wrote:
Don't know. I don't like to trouble shoot by guess if possible. I rather
follow the evidence to capture the culprit. Use what we know to discover
what we do not know.
We know CS rate in vmstat is high, we know Sys time is high, we know
syscall rate is low, we know it is not a user process therefor it is
kernel. Likely a driver.
So what kernel code is running the most?
What's causing that code to run?
Does that code belong to a driver?
Mike
On Thu, 2011-10-20 at 20:25 +0200, Michael Schuster wrote:
Hi,
just found this:
http://download.oracle.com/docs/cd/E19253-01/820-5245/ghgoc/index.html
does it help?
On Thu, Oct 20, 2011 at 20:23, Michael Stapleton
michael.staple...@techsologic.com wrote:
My understanding is that it is not supposed to be a loaded system. We
want to know what the load is.
gernot@tintenfass:~# intrstat 30
device | cpu0 %tim cpu1 %tim
-+--
e1000g#0 | 1 0,0 0 0,0
ehci#0 | 0 0,0 4 0,0
ehci#1 | 3 0,0 0 0,0
hci1394#0 | 0 0,0 2 0,0
i8042#1 | 0 0,0 4 0,0
i915#1 | 0 0,0 2 0,0
pci-ide#0 |15 0,1 0 0,0
uhci#0 | 0 0,0 2 0,0
uhci#1 | 0 0,0 0 0,0
uhci#2 | 3 0,0 0 0,0
uhci#3 | 0 0,0 2 0,0
uhci#4 | 0 0,0 4 0,0
device | cpu0 %tim cpu1 %tim
-+--
e1000g#0 | 1 0,0 0 0,0
ehci#0 | 0 0,0 3 0,0
ehci#1 | 3 0,0 0 0,0
hci1394#0 | 0 0,0 1 0,0
i8042#1 | 0 0,0 6 0,0
i915#1 | 0 0,0 1 0,0
pci-ide#0 | 3 0,0 0 0,0
uhci#0 | 0 0,0 1 0,0
uhci#1 | 0 0,0 0 0,0
uhci#2 | 3 0,0 0 0,0
uhci#3 | 0 0,0 1 0,0
uhci#4 | 0 0,0 3 0,0
gernot@tintenfass:~# vmstat 5 10
kthr memorypagedisk faults
cpu
r b w swap free re mf pi po fr de sr cd s0 s1 s2 in sy cs
us
sy id
0 0 0 4243840 1145720 1 6 0 0 0 0 2 0 1 1 1 9767 121
37073 0
54 46
0 0 0 4157824 1059796 4 11 0 0 0 0 0 0 0 0 0 9752 119
37132 0
54 46
0 0 0 4157736 1059752 0 0 0 0 0 0 0 0 0 0 0 9769 113
37194 0
54 46
0 0 0 4157744 1059788 0 0 0 0 0 0 0 0 0 0 0 9682 104
36941 0
54 46
0 0 0 4157744 1059788 0 0 0 0 0 0 0 0 0 0 0 9769 105
37208 0
54 46
0 0 0 4157728 1059772 0 1 0 0 0 0 0 0 0 0 0 9741 159
37104 0
54 46
0 0 0 4157728 1059772 0 0 0 0 0 0 0 0 0 0 0 9695 127
36931 0
54 46
0 0 0 4157744 1059788 0 0 0 0 0 0 0 0 0 0 0 9762 105
37188 0
54 46
0 0 0 4157744 1059788 0 0 0 0 0 0 0 0 0 0 0 9723 102
37058 0
54 46
0 0 0 4157744 1059788 0 0 0 0 0 0 0 0 0 0 0 9774 105
37263 0
54 46
Mike
On Thu, 2011-10-20 at 11:02 -0700, Rennie Allen wrote:
Sched is the scheduler itself. How long did you let this run? If
only
for a couple of seconds, then that number is high, but not
ridiculous for
a loaded system, so I think that this output rules out a high context
switch rate.
Try this command to see if some process is making an excessive
number of
syscalls:
dtrace -n 'syscall:::entry { @[execname]=count()}'
If not, then I'd try looking at interrupts...
On 10/20/11 10:52 AM, Gernot Wolf gw.i...@chello.at wrote:
Yeah, I've been able to run this diagnostics on another OI box (at
my
office, so much for OI not being used in production ;)), and noticed
that there were several values that were quite different. I just
don't
have any idea on the meaning of this figures...
Anyway, here are the results of the dtrace command (I executed the
command twice, hence two result sets):
gernot@tintenfass:~# dtrace -n 'sched:::off-cpu {
@[execname]=count()}'
dtrace: description 'sched:::off-cpu ' matched 3 probes
^C
ipmgmtd
1
gconfd-2
2
gnome-settings-d
2
idmapd
2
inetd
2
miniserv.pl
2
netcfgd
2
nscd
2
ospm-applet
2
ssh-agent
2
sshd
2
svc.startd
2
intrd
3
Re: [OpenIndiana-discuss] Problem with high cpu load (oi_151a)
Probably just too big.
Are there any ACPI settings in the BIOS?
or we can try to change ACPI in OI.
#man eeprom
.
.
.
OPERANDS
x86 Only
acpi-user-options
A configuration variable that controls the use of
Advanced Configuration and Power Interface (ACPI), a
power management specification. The acceptable values
for this variable depend on the release of the Solaris
operating system you are using.
For all releases of Solaris 10 and Solaris 11, a value
of of 0x0 means that there will be an attempt to use
ACPI if it is available on the system. A value of 0x2
disables the use of ACPI.
For the Solaris 10 1/06 release, a value of 0x8 means
that there will be an attempt to use ACPI in a mode com-
patible with previous releases of Solaris 10 if it is
available on the system. The default for Solaris 10 1/06
is 0x8.
For releases of Solaris 10 after the 1/06 release and
for Solaris 11, the default is 0x0.
Most users can safely accept the default value, which
enables ACPI if available. If issues related to the use
of ACPI are suspected on releases of Solaris after
Solaris 1/06, it is suggested to first try a value of
0x8 and then, if you do not obtain satisfactory results,
0x02.
Want to try:
#eeprom acpi-user-options=0x8
# init 6
?
If you have booting problems after changes, the following link will
help:
Boot Arguments You Can Specify When Editing the GRUB Menu at Boot Time
-B acpi-user-options=0x2
Disables ACPI entirely.
http://dlc.sun.com/osol/docs/content/SYSADV1/getov.html
Mike
On Thu, 2011-10-20 at 21:37 +0200, Gernot Wolf wrote:
Ok, for some reason this attachement refuses to go out :( Have to figure
that out...
Regards,
Gernot Wolf
Am 20.10.11 21:20, schrieb Gernot Wolf:
Ooops, something went wrong with my attachement. I'll try again...
Regards,
Gernot Wolf
Am 20.10.11 21:09, schrieb Gernot Wolf:
You mean, besides being quite huge? I took a quick look at it, but other
than getting a headache by doing that, my limited unix skills
unfortunately fail me.
I've zipped it an attached it to this mail, maybe someone can get
anything out of it...
Regards,
Gernot
Am 20.10.11 20:17, schrieb Michael Schuster:
Gernot,
is there anything suspicious in /var/adm/messages?
Michael
On Thu, Oct 20, 2011 at 20:07, Michael Stapleton
michael.staple...@techsologic.com wrote:
That rules out userland.
Sched tells me that it is not a user process. If kernel code is
executing on a cpu, tools will report the sched process. The count was
how many times the process was taken off the CPU while dtrace was
running.
Lets see what kernel code is running the most:
#dtrace -n 'sched:::off-cpu { @[stack()]=count()}'
#dtrace -n 'profile-1001 { @[stack()] = count() }'
On Thu, 2011-10-20 at 19:52 +0200, Gernot Wolf wrote:
Yeah, I've been able to run this diagnostics on another OI box (at my
office, so much for OI not being used in production ;)), and noticed
that there were several values that were quite different. I just don't
have any idea on the meaning of this figures...
Anyway, here are the results of the dtrace command (I executed the
command twice, hence two result sets):
gernot@tintenfass:~# dtrace -n 'sched:::off-cpu {
@[execname]=count()}'
dtrace: description 'sched:::off-cpu ' matched 3 probes
^C
ipmgmtd 1
gconfd-2 2
gnome-settings-d 2
idmapd 2
inetd 2
miniserv.pl 2
netcfgd 2
nscd 2
ospm-applet 2
ssh-agent 2
sshd 2
svc.startd 2
intrd 3
afpd 4
mdnsd 4
gnome-power-mana 5
clock-applet 7
sendmail 7
xscreensaver 7
fmd 9
fsflush 11
ntpd 11
updatemanagernot 13
isapython2.6 14
devfsadm 20
gnome-terminal 20
dtrace 23
mixer_applet2 25
smbd 39
nwam-manager 60
svc.configd 79
Xorg 100
sched 394078
gernot@tintenfass:~# dtrace -n 'sched:::off-cpu {
@[execname]=count()}'
dtrace: description 'sched:::off-cpu ' matched 3 probes
^C
automountd 1
ipmgmtd 1
idmapd 2
in.routed 2
init 2
miniserv.pl 2
netcfgd 2
ssh-agent 2
sshd 2
svc.startd 2
fmd 3
hald 3
inetd 3
intrd 3
hald-addon-acpi 4
nscd 4
gnome-power-mana 5
sendmail 5
mdnsd 6
devfsadm 8
xscreensaver 9
fsflush 10
ntpd 14
updatemanagernot 16
mixer_applet2 21
isapython2.6 22
dtrace 24
gnome-terminal 24
smbd 39
nwam-manager 58
zpool-rpool 65
svc.configd 79
Xorg 82
sched 369939
So, quite obviously there is one executable standing out here,
sched,
now what's the meaning of this figures?
Regards,
Gernot Wolf
Am 20.10.11 19:22, schrieb Michael Stapleton:
Hi Gernot,
You have a high context switch rate.
try
#dtrace -n
Re: [OpenIndiana-discuss] Problem with high cpu load (oi_151a)
I would not worry about it. The messages are being caused by some problem. Lets focus on getting the messages. Debug will increase your load, but not like you are seeing. Mike On Thu, 2011-10-20 at 22:10 +0200, Gernot Wolf wrote: Ok, here we go: gernot@tintenfass:~# mdb -k Loading modules: [ unix genunix specfs dtrace mac cpu.generic uppc pcplusmp scsi_vhci zfs ip hook neti sockfs arp usba uhci s1394 fctl stmf_sbd stmf idm fcip cpc random sata crypto sd lofs logindmux ptm ufs sppp smbsrv nfs ipc ] AcpiDbgLevel AcpiDbgLevel/x AcpiDbgLevel: AcpiDbgLevel: 0 q mdb: failed to dereference symbol: unknown symbol name $q So, ApciDbgLevel seems to be 0??? Now I'm getting confused... shouldn't that mean no Apci debug function calls at all? Regards, Gernot Wolf Am 20.10.11 21:21, schrieb Steve Gonczi: Here is something to check: Pop into the debugger ( mdb -k) and see what AcpiDbgLevel's current setting is. E.g: AcpiDbgLevel/x The default setting is 3. If its something higher, that would explain the high incidence of Acpi trace/debug calls. To exit the debugger type $q or ::quit Steve - Original Message - You mean, besides being quite huge? I took a quick look at it, but other than getting a headache by doing that, my limited unix skills unfortunately fail me. I've zipped it an attached it to this mail, maybe someone can get anything out of it... Regards, Gernot ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Problem with high cpu load (oi_151a)
Is this running in a VM?
Mike
On Thu, 2011-10-20 at 22:20 +0200, Gernot Wolf wrote:
Grep output attached. Hopefully this attachement will go through ;)
Regards,
Gernot Wolf
Am 20.10.11 21:25, schrieb Michael Stapleton:
Attachment is missing...
I'd like to see the whole things, but in the mean while
#grep -i acpi /var/adm/messages
Anything?
Mike
On Thu, 2011-10-20 at 21:09 +0200, Gernot Wolf wrote:
You mean, besides being quite huge? I took a quick look at it, but other
than getting a headache by doing that, my limited unix skills
unfortunately fail me.
I've zipped it an attached it to this mail, maybe someone can get
anything out of it...
Regards,
Gernot
Am 20.10.11 20:17, schrieb Michael Schuster:
Gernot,
is there anything suspicious in /var/adm/messages?
Michael
On Thu, Oct 20, 2011 at 20:07, Michael Stapleton
michael.staple...@techsologic.com wrote:
That rules out userland.
Sched tells me that it is not a user process. If kernel code is
executing on a cpu, tools will report the sched process. The count was
how many times the process was taken off the CPU while dtrace was
running.
Lets see what kernel code is running the most:
#dtrace -n 'sched:::off-cpu { @[stack()]=count()}'
#dtrace -n 'profile-1001 { @[stack()] = count() }'
On Thu, 2011-10-20 at 19:52 +0200, Gernot Wolf wrote:
Yeah, I've been able to run this diagnostics on another OI box (at my
office, so much for OI not being used in production ;)), and noticed
that there were several values that were quite different. I just don't
have any idea on the meaning of this figures...
Anyway, here are the results of the dtrace command (I executed the
command twice, hence two result sets):
gernot@tintenfass:~# dtrace -n 'sched:::off-cpu { @[execname]=count()}'
dtrace: description 'sched:::off-cpu ' matched 3 probes
^C
ipmgmtd 1
gconfd-2 2
gnome-settings-d 2
idmapd2
inetd 2
miniserv.pl 2
netcfgd 2
nscd 2
ospm-applet 2
ssh-agent 2
sshd 2
svc.startd2
intrd 3
afpd 4
mdnsd 4
gnome-power-mana 5
clock-applet 7
sendmail 7
xscreensaver 7
fmd 9
fsflush 11
ntpd 11
updatemanagernot 13
isapython2.6 14
devfsadm 20
gnome-terminal 20
dtrace 23
mixer_applet225
smbd 39
nwam-manager 60
svc.configd 79
Xorg100
sched394078
gernot@tintenfass:~# dtrace -n 'sched:::off-cpu { @[execname]=count()}'
dtrace: description 'sched:::off-cpu ' matched 3 probes
^C
automountd1
ipmgmtd 1
idmapd2
in.routed 2
init 2
miniserv.pl
Re: [OpenIndiana-discuss] oracle removes 32bit x86 cpu support for solaris 11 will OI do same?
While we are talking about 32 | 64 bit processes; Which one is better? Faster? More efficient? Mike On Thu, 2011-06-23 at 13:59 +0100, Deano wrote: Windows made the shift last server release (2008r2 is x64 only). So it's only the OSS server families which support 32bit, likely because both BSD and Linux support lots of platforms outside of x86. Deano -Original Message- From: Gary Driggs [mailto:gdri...@gmail.com] Sent: 23 June 2011 02:10 To: Discussion list for OpenIndiana Subject: Re: [OpenIndiana-discuss] oracle removes 32bit x86 cpu support for solaris 11 will OI do same? FWIW, Mac OS X Lion will only support x64 as well. IMHO, this is a good move for modern operating systems since there are always going to be alternatives for those still using i386 architecture. How long has Solaris/SPARC been 64-bit? At least ten years if not more... -Gary ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] oracle removes 32bit x86 cpu support for solaris 11 will OI do same?
So I guess it would be fair to say that the best OS is the one that support both at the same time, and leaves the option to the developer for each individual application. My understanding is that Solaris is more like 4G per process/kernel, rather than 4GB total. Multiple 32 bit processes could use more than 4GB total; just not individually. Mike On Fri, 2011-06-24 at 15:58 +, Steve Gonczi wrote: For Intel CPUs, 32 bit code is certainly more compact , and in some cases arguably faster than 64 bit code. (say, comparing the same code on the same machine compiled 32 and 64 bit) But, newer cpu silicon tends to make performance improvements in many ways (e.g locating more supporting circuity on the cpu's silicon, increasing L1 /L2 cache sizes, etc) Newer CPUs also tend to be more energy efficient. Intel made great strides towards energy efficiency. E.g.: idling the cpu when not in use ( deep C states etc. of gating off any circuitry that is not in use, modulating the cpu clock rate ( SpeedStep). So performance and energy efficiency is more dependent on which generation of cpu core design we have, rather than on just the the bitness . The primary advantage of 64 bit per se ( ie running a given cpu in 64 bit mode) is the increased addressable memory space. The current hardware limit set by the manufacturers is at 48 address bits (256 terabytes theoretical limit) Actual OS support cuts this in half, or less. Motherboard limitations further curtail this, but 48G motherboards are now commonplace. On 32 bit Intel (Amd) you are typically limited to 4G, which is split between kernel and userland depending on the OS and configuration. (E.g.: 1G kernel and 3G userland) Steve - Michael Stapleton michael.staple...@techsologic.com wrote: While we are talking about 32 | 64 bit processes; Which one is better? Faster? More efficient? Mike ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Openindiana in VMWare and usb devices
Hi , From the man page for the usbsacm driver: ENXIOThe unit being opened does not exist. You could try a cleanup of /dev. Remove the modem. # devfsadm -C Attach the modem # init 6 #devfsadm -v Mike On Tue, 2011-06-21 at 17:58 +0200, Gabriele Bulfon wrote: More. I tried the same truss on the native machine, here the difference: sonicle@nativeoi:/etc# truss -t stat,open tip /dev/cua/0 stat64(/usr/bin/tip, 0x0804794C) = 0 open(/var/ld/ld.config, O_RDONLY) Err#2 ENOENT stat64(/lib/libc.so.1, 0x080470FC)= 0 open(/lib/libc.so.1, O_RDONLY)= 3 stat64(/usr/lib/locale/en_US.UTF-8/en_US.UTF-8.so.3, 0x08046BE0) = 0 open(/usr/lib/locale/en_US.UTF-8/en_US.UTF-8.so.3, O_RDONLY) = 3 stat64(/usr/lib/locale/en_US.UTF-8/libc.so.1, 0x08046AC0) Err#2 ENOENT stat64(/usr/lib/locale/en_US.UTF-8/methods_unicode.so.3, 0x08046AC0) = 0 open(/usr/lib/locale/en_US.UTF-8/methods_unicode.so.3, O_RDONLY) = 3 open(/etc/remote, O_RDONLY) = 3 stat(/dev/cua/0, 0x08047B60) = 0 open(/var/spool/locks/LTMP.4182, O_WRONLY|O_CREAT|O_TRUNC, 0444) = 3 open(/dev/cua/0, O_RDWR) = 3 (...continues up to connected...) Main differences are: - stat of cua/0 returns 0 but the hex in stat is different (ending with 60 instead of 90). - open of cua/0 retuns 3, instead of ENXIO -- Da: Gabriele Bulfon A: Discussion list for OpenIndiana Data: 21 giugno 2011 17.42.48 CEST Oggetto: Re: [OpenIndiana-discuss] Openindiana in VMWare and usb devices Wow...this is a very deep analysis ;) Well, on the physical machine (where it works great), the device is very similar: crw-rw-rw- 1 root sys 99, 131072 Jun 21 17:33 modem@0,2:0,cu still 99 On both my systems (physical and virtual) grep 99 name_to major gives: usbsacm 99 then, on both systems: sonicle@oi:/etc# modinfo |grep usbsacm 152 f7eaa680 4850 99 1 usbsacm (USB Serial CDC ACM driver) and, on both systems, fmadm faulty returns nothing... Please consider that the same USB CDC modem, is correctly seen by a Linux on the same VMWare, using the same ESXi 4.1 procedure. And...consider that plugging an USB key on the same machine, and making it available to OI from ESXi 4.1, I can see and work on files with no problem Thanx for your precious analysis ;) -- Da: Michael Stapleton A: Discussion list for OpenIndiana Data: 21 giugno 2011 17.18.41 CEST Oggetto: Re: [OpenIndiana-discuss] Openindiana in VMWare and usb devices Hi Gabriele, Some more steps to see what's going on. Are we talking to the right driver? Is the driver loaded properly, is the driver configured properly? Following the path from tip to the driver: So your tip error is: open(/dev/cua/0, O_RDWR)Err#6 ENXIO # man -s 2 open : ENXIO The O_NONBLOCK flag is set, the named file is a FIFO, the O_WRONLY flag is set, and no process has the file open for reading; or the named file is a character special or block special file and the device associated with this special file does not exist or has been retired by the fault management frame- work . lrwxrwxrwx 1 root root 83 Jun 20 19:02 0 -../../devices/pci@0,0/pci15ad,790@11/pci15ad,1976@2/communications@1/modem@0,2:0,cu crw-rw-rw- 1 root sys 99, 131072 Jun 21 18:47 /devices/pci@0,0/pci15ad,790@11/pci15ad,1976@2/communications@1/modem@0,2:0,cu Major number 99, minor number 131072? That's quite the minor number.. I'm not sure what your driver is supposed to be, but on my system it would be wrong. # grep 99 /etc/name_to_major On my system its: vgatext 99 vgatext driver does not seem right but that is on my system, what driver is it on your system? Substitute your driver in the following. Then, is the driver loaded? # modinfo | grep vgatext Nope: Why not? # grep vgatext /var/adm/messages Nothing... Try loading the driver. # find /kernel -name vgatext /kernel/drv/amd64/vgatext /kernel/drv/vgatext 64bit? # modload /kernel/drv/amd64/vgatext any errors? # grep vgatext /var/adm/messages # fmadm faulty # modinfo | grep vgatext 291 f846f340 5070 99 1 vgatext (VGA text driver) My driver loaded, did yours? Find anything interesting? Mike On Tue, 2011-06-21 at 10:54 +0200, Gabriele Bulfon wrote: Here is the output of truss: sonicle@openindiana:/var/adm# truss -t stat,open tip /dev/cua/0 stat64(/usr/bin/tip, 0x08047984) = 0 open(/var/ld/ld.config, O_RDONLY) Err#2 ENOENT stat64(/lib/libc.so.1, 0x08047134)= 0 open(/lib/libc.so.1, O_RDONLY)= 3 stat64(/usr/lib/locale/en_US.UTF-8/en_US.UTF-8.so.3, 0x08046C10) = 0 open(/usr/lib/locale/en_US.UTF-8/en_US.UTF-8.so.3, O_RDONLY) = 3 stat64(/usr/lib/locale/en_US.UTF-8/libc.so.1
Re: [OpenIndiana-discuss] Openindiana in VMWare and usb devices
Maybe the output of: truss -t stat,open tip /dev/cua/0 will give us something to work with. Mike On Mon, 2011-06-20 at 12:54 +0200, Gabriele Bulfon wrote: Hi, I had no trouble with usb devices on native openindiana installations. Now I installed openindiana inside VMWare4.1 that supports USB devices, and infact they work correctly with Linux guests. On a virtualized Openindiana, I can attach usb keys, and see them correctly. I then attached an USB CDC modem, that usually works instantly on native setup, just by running tip /dev/cua/0 I can see it works. On VMWare4.1, the modem is attached, I can see the device at /dev/cua/0 exactly linked as it was in the native setup. Running tip, I receive errors though. Here is what appears in /var/adm/messages when the modem is attached: Jun 20 20:45:00 openindiana usba: [ID 912658 kern.info] USB 1.10 interface (usbif6e0,f11a.config2.0) operating at full speed (USB 1.x) on USB 1.10 root hub: modem@0,2, usbsacm0 at bus address 2 Jun 20 20:45:00 openindiana usba: [ID 349649 kern.info] MultiTech Systems T9234ZBA-USB-CDC Jun 20 20:45:00 openindiana genunix: [ID 936769 kern.info] usbsacm0 is /pci@0,0/pci15ad,790@11/pci15ad,1976@2/communications@1/modem@0,2 The pci device then is linked to /dev/cua/0 automatically. Here is what tip says: tip: /dev/cua/0: No such device or address all ports busy Any idea? ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] User roles and acting as root
When I need a root terminal, I tend to simply: $sudo sh In a Solaris only environment I advise RBAC , but in a mixed Unix/Linux world, sudo makes more sense. With RBAC and root being a Role, we should su - to assume the root role. Mike On Tue, 2011-06-14 at 14:24 -0700, Gregory Youngblood wrote: On Jun 14, 2011, at 1:35 PM, Gabriele Bulfon wrote: Up until OpenSolaris, my first and only command was some enters on a #. Just root, and just commands, for a life. Now I had times with opensolaris wanting me to pfexec everything. On OpenIndiana pfexec behave differently and does not run privileged as it did on OSol. And, afterall, sudo just asks for your password once, and it's done forever At least for the first user you configure on OI. Where is security here?? sudo remembers that you entered your password, and as long as you repeat additional sudo command within the allowable time period, you do not have to enter the password again. However, if you wait until that allowable time period expires then sudo will prompt you for a password again (unless you changed sudoers to not prompt for passwords again). I don't know why (I remember reading about it, but have since forgotten) why pfexec in OI behaves differently than it did for OS. It didn't matter to me since sudo worked, but I preferred pfexec since I had become accustomed to using it in OS, so I usually make my user primary administrator so pfexec works again. It's a bit of a 2x4 approach, but it makes me happy. I'm sure there are better/more elegant ways to accomplish the same thing. As for why I prefer pfexec to sudo, I don't really have a clear, rational answer. It's my understanding pfexec works within the solaris/oi roles system while sudo is just a pure password privilege escalation. I probably have that wrong, so welcome correction. As for security from sudo - it all depends on how you use it. In the default form as installed the password has to be used to escalate privileges initially and for a limited window of time. Assuming any compromise is not the result of password compromise, it slows down the attacker's effectiveness. Where sudo really shines, imo, is the ability to designate safe commands that others can run. Consider a group of developers given access to a test or staging server. The developers are not given carte blanche to do anything they want on the server, but they do need the ability to restart some app or service, such as apache. Using sudo you can allow them to do apachectl start, apachectl restart, apachectl graceful, and apachectl configtest as the super user, without permitting them to run any other command or apachectl with any other options than the ones listed. It's a powerful tool for being able to fine tune exactly what commands and options users are allowed to do with escalated privileges. Greg ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] Backups and snapshots
Am I reading it wrong or do you mean it drops off at 16MB, not 16 KB? Mike On Sat, 2011-06-11 at 09:44 -0400, Dan Swartzendruber wrote: What was serving the nfs and iscsi? -Original Message- From: Gary [mailto:gdri...@gmail.com] Sent: Saturday, June 11, 2011 2:29 AM To: openindiana-discuss@openindiana.org Subject: Re: [OpenIndiana-discuss] Backups and snapshots iSCSI NFS are roughly comparable until you get to 16KB file sizes and above. This is when NFS starts to drop off drastically for read performance without any caching. Here's an NFS I/O test on a 1Gb ethernet link and file sizes from 64k to 16Gb: http://preview.tinyurl.com/44upb5f Here's an iSCSI I/O test on the same hardware, same network, same back end file server but using the different protocol: http://preview.tinyurl.com/5r69m6j -Gary ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] [oi-dev] [illumos-Developer] OpenIndiana and illumos, part 2
Very nice Gabriel. I for one would be happy to share a beer with you or anyone else who is on this list for that matter. I think it's safe to say that anyone one who is on this list is a little special. I think it's also safe to say that we all share a common desire to see this great OS continue to be so. Considering what has happed to OpenSolaris and SUN, It's understandable and forgivable for one to become frustrated and defensive. I certainly feel that way at times. Mike P.S. Yes, the word special can be interpreted in many ways, and they probably all somewhat apply. ;-) On Sun, 2010-11-21 at 16:19 +0200, Gabriel de la Cruz wrote: Dear Mr Christopher Chan Different points of view, remarks, or complains of any short from person to person shouldn't be understood as serious faults to the honor of anyone, as long as we do not involve insults. In my opinion all wounds from the previous fire should be now cured, and I honestly don't think the current thread even points out to the past. For whatever that might have cause disturbance for you, I should apologize. After analyzing the situation for some time I would like to highlight the possibility of cultural or interdisciplinary misunderstandings in the back-end of the current conflict. Probably we are misunderstanding certain responses as more insulting than what they really are for the one expressing them. It is obvious that we talk the same language, but probably we are missing the real meaning of things. In Europe the use of irony is very frequent, for example French are specially difficult in that sense, they could spend the whole day throwing subliminal irony over you and still be your best friends. And yes they complain, all the time, for everything. If a french guy mocks at you by twisting the nicest poetry, you are not supposed to get angry but probably you are expected to pay back, but always between the lines, not really fighting back. Another example all the way around could be expressions like; chéng zhǎng, if translated as grow up could be pretty humiliating at some places in Europe, while is not as harsh if you read it in Chinese. I meet daily with designers and we appreciate non sense commentaries as it is efficient while brainstorming, as well we like the conversations to be free from any form of censorship or even moderation as may things could otherwise just vanish. The relationship with respect and figures of authority are not the same all around the world, I never had the pleasure to visit Hong Kong, but I can share some curiosities from the time I was living in Beijing; I remember I was hanging around Renmin University during a whole summer, I was meeting daily one of the persons who were coordinating the foreign students, as I was joining some interesting lectures and excursions just because of my own interest. That person asumed I was student because of the fact I was meeting regularly with the group of Finnish students, and kept all the way treating me with a very official attitude, he was sweating under the sun with me but kept all the time a perfectly correct manners, not even showing he needed water. But one of those extremely hot days, he realized I was a faculty member, not a student, so he suddenly relaxed completely down and was finally able to enjoy the time together. He didn't need to show his position anymore... We had quite much better time after this moment. This might seem very normal for a chinese, but to me it was all a discovery!. Probably I have been mistreating my Chinese student for years, treating him as if he was just my self.. What I came to say is, we are very different, I do not think there is bad intention anywhere in this list, people complains when they have to, but within some limits. Respect does not take the same form everywhere, we should just apply a *presumption of innocence* concept, no one is guilty unless we can prove something else. If you were around the corner, I would invite you for a beer, what is in my terms certain form of honor. All the best Gabriel On Sun, Nov 21, 2010 at 11:38 AM, Christopher Chan christopher.c...@bradbury.edu.hk wrote: On Saturday, November 20, 2010 05:40 PM, Jose-Marcio Martins da Cruz wrote: Christopher Chan wrote: On Saturday, November 20, 2010 07:56 AM, Gary wrote: I'm replying to this thread here instead of on the developer lest someone issue me a netiquette citation for being off topic. How do you quantify something like that? Even if you have some industry confirmed sales numbers comparable to IDC tracking desktop PC and notebook sales, how do you figure out just how many users a server has regardless of its operating system? Does a web server have a half dozen users because there are two sysadmins, two content providers, and two developers? Or does it have 10 million unique visitors every day and therefore have ten million and six
Re: [OpenIndiana-discuss] stablity
I have been using OI for development and as a production server and have had NO problems stability wise. On my laptop I found that the SMB service is preventing sleeping. If I disable SMB service, power saving works well. But, something is reenabling the service, OI is not unstable, we should stop saying so. It is just not proven to be stable, or unstable for that matter. Mike to be so. which in my opinion should not be happening. I have not had a chance to dig into it further. On Sat, 2010-11-06 at 10:51 -0400, Vasten Tech wrote: Power saving does not work. The machine will not go to sleep. On Sat, 2010-11-06 at 12:08 +0100, Dick Hoogendijk wrote: On 6-11-2010 10:43, Paul Johnston wrote: On 11/ 6/10 09:33 AM, Dick Hoogendijk wrote: I used to run OpenSolaris-b134 for my home server and it worked very well. What is the status for OpenIndiana in this respect? Could it be used to run a home server or is it still to unstable for this? In other words: is it worse, better or the same as OpenSolaris-b134 was? In my limited experience, I swopped over as soon as Indiana came out and have seen no difference in reliablilty/stability. Thanks. Other experiences? ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
