[Soekris] Wiki page for running memtest86+ from pxeboot -- duplicate page needs deleting
Hi, FYI, just wrote: http://wiki.soekris.info/Running_the_memtest86_diagnostic In the process another wiki page that, somehow, can't be reached was created. The "duplicate" has a + sign after "memtest86". Some wiki admin or another needs to go in and delete the duplicate page. I can't even seem to get to it. I can tell the duplicate page exists because it shows up in searches. Regards, Karl Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
[Soekris] vpn14x1, net5501-70, OpenBSD, and OpenVPN
Hi, I've a net5501-70 with a vpn1411. I'm running OpenBSD 4.4 stable with openvpn-2.1rc7. I've several questions surrounding this configuration. First: I notice that OpenVPN does not work unless you specify a tls-cipher, e.g. tls-cipher EDH-RSA-DES-CBC3-SHA It does not seem to matter if I use 'engine' or specify one of the available engines. The error message (on the openvpn "server side") is: TLS_ERROR: BIO read tls_read_plaintext error: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac This can be reproduced with: cd /usr/local/share/examples/openvpn openvpn --config sample-config-files/loopback-client (In one window) openvpn --config sample-config-files/loopback-server (Simultaneously in another window) What's going on here? Do I have to pick a cipher that's supported in-hardware? I tried sysctl -w kern.cryptodevallowsoft=1 and it did not seem to make any difference. FYI, # openvpn --show-engines OpenSSL Crypto Engines BSD cryptodev engine [cryptodev] Dynamic engine loading support [dynamic] Second: I notice that I can't specify 'cipher AES-256-CBC'. The server side of the loopback test fails with: Wed Mar 4 23:22:58 2009 EVP cipher init #2 (OpenSSL) Wed Mar 4 23:22:58 2009 Exiting I thought that the vpn14x1 supported 256 bit AES. Again, what's going on? Is OpenBSD confused by the crypto support in the Geode or what? Third: In researching this I found messages from 5 years ago that said that OpenVPN did not make effective use of hardware crypto both because it it worked 'piecemeal' (I forget the exact phrase) and because it worked in userland. I do see a large number of context switches but cpu usage is not entirely out of control. Is hardware crypto with OpenVPN worth while? I do seem to use somewhat less cpu if I omit 'engine', but seemingly more context switches. What's the recommended approach when using OpenVPN? (I can't use IPSec in this case.) Finally: Any recommended best practices or other comment? Thanks. Karl Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
Re: [Soekris] Securing the PCI slot cover for an internal USB connector
On 11/20/2008 12:41:12 PM, dave morgan wrote: > On Thu, 20 Nov 2008 10:17:12 -0600, "Karl O. Pinc" <[EMAIL PROTECTED]> > wrote: > >I thought about that and didn't like the failure mode. > Not if you do what I did and fit the nut on the *outside* The best answer was suggested to me off-list. Use a plastic nut and bolt. I'm hoping that Soekris eventually fixes the case and takes care of the problem for me. Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
Re: [Soekris] Securing the PCI slot cover for an internal USB connector
On 11/20/2008 12:13:50 AM, Wim Vandeputte Mailing list only wrote: > > Sure, how about drilling a small hole in the bracket, alligned with > the > hole in the soekris case, like this: > > just use a bolt + nut, no need to tap a thread into the pci bracket. > In my case, I recycled a spacer nut as it was the first thing > I found on my desk... I thought about that and didn't like the failure mode. If the bolt ever comes off that leaves the nut inside the case, where a loose piece of conductive material is a very bad idea. I figured I could epoxy the nut to the pci bracket but then I may as well just use a blob of epoxy to put a protrusion onto the case in a place that keeps the pci bracket from moving in the first place. You are right though, the bolt and nut probably provides the best mechanical support of all the options. The packing peanut works in practice and I'm too lazy to change now. :-) Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
[Soekris] Securing the PCI slot cover for an internal USB connector
Hello, FYI I've a net5501 and have gotten a pci slot case cover with USB plug and cable for exposing the internal USB connector to the exterior of the case. The problem is that because there's nothing plugged into the pci slot, the right hand side of the pci case slot cover is free to move; enough so that it can be lifted and freed of the restraint placed on it by the circuit board. This frees the right hand side of the case slot cover to wiggle around, making plugging and unplugging a USB device more difficult and possibly endangering the electronics should the case slot cover contact the electronics on the board. I believe the right solution is to build a protrusion onto the inside of the case to prevent the right hand side of the case slot cover from moving upward. This modification might be accomplished in the field with a judiciously placed drop of epoxy. I rejected a screw assembly similar to that which comes with the cover supplied with the case because of the difficulties involved in tapping threads into the case slot cover. The kludge I'm actually using is to place a styrofoam packing peanut inside the case on top of the USB plug. It prevents the case slot cover from moving far enough upward to be free from the board, is compressed enough that it's not likely to move, is non-conductive should it dislodge, and I find that it makes it much easier to properly align the case for closure. (!) Anyone else have any experience or comments regarding exposing the internal USB or serial port? Regards, Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
Re: [Soekris] Question about UPS
On 08/21/2008 04:16:01 PM, Dorian Büttner wrote: > On Wednesday 20 August 2008 04:50:24 Karl O. Pinc wrote: > > On 08/03/2008 03:56:24 PM, Phusion wrote: > > > I have a few Soekris 4801's running OpenBSD 4.3 and am wondering > about > > > how to use them with a UPS. > > > > See also: NUT > > http://eu1.networkupstools.org/ > Yes, sysutils/apc-upsd. Need a special serial cable (or something > null-modem > likeish), pin chart likely to be found on the net. However, it will > only > deliver connection to one box, low batt warning will then need to be > spread by > some other means, propably snmp. Haven't done that before, either. I _think_ nut works with snmp, but it also runs as a client-server model where one box connects to the ups and the battery status etc is distributed over the network to nut processes on other boxes. Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
Re: [Soekris] Question about UPS
On 08/03/2008 03:56:24 PM, Phusion wrote: > I have a few Soekris 4801's running OpenBSD 4.3 and am wondering about > how to use them with a UPS. If I have both of the power cables hooked > up to a APC Smart-UPS is there a way I can monitor power so that the > Soekris's will shutdown gracefully when the power on the UPS hits a > designated limit? I assume SNMP is involved in this somehow, but need > advice. Thanks. See also: NUT http://eu1.networkupstools.org/ The primary goal of the Network UPS Tools (NUT) project is to provide reliable monitoring of UPS hardware and ensure safe shutdowns of the systems which are connected. I believe there's an OpenBSD port. Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
Re: [Soekris] Bringing the 2nd USB port out of the case
On 06/03/2008 03:54:10 AM, Wim Vandeputte - Mailinglists only wrote: > > On Mon, Jun 02, 2008 at 07:16:30PM -0500, Karl O. Pinc wrote: > > I've a net5501. What's the best way to make the > > internal usb connector external? A quick google > > got me a couple of 2 port case panel mounted to 4-pin > > adapters. But the cable length seems to be 7 inch, > > which is not nearly enough as far as I can see. > > The generic USB PC cables are just fine, the ones I got are 30 cm > long, including the connectors. (That is 11 inches) Thanks. From the beginning I've had a hard time finding more than a very limited number of such cables. (And almost all are too short.) What's the right keywords to google with? Maybe that's the question I should have asked to begin with. Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
Re: [Soekris] Bringing the 2nd USB port out of the case
On 06/02/2008 07:22:28 PM, Paul Bartell wrote: > umm run the cable through an antenna cutout. Just my $.02 The problem there would be strain relief. > > On Mon, Jun 2, 2008 at 5:16 PM, Karl O. Pinc <[EMAIL PROTECTED]> wrote: > > I've a net5501. What's the best way to make the > > internal usb connector external? A quick google > > got me a couple of 2 port case panel mounted to 4-pin > > adapters. But the cable length seems to be 7 inch, > > which is not nearly enough as far as I can see. Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
[Soekris] Bringing the 2nd USB port out of the case
Hi, I've a net5501. What's the best way to make the internal usb connector external? A quick google got me a couple of 2 port case panel mounted to 4-pin adapters. But the cable length seems to be 7 inch, which is not nearly enough as far as I can see. Is there a particular product everybody's using? I'd like something off-the-shelf and available in tiny quantities. Getting out the soldering iron is not a good use of my time. Thanks. Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
[Soekris] What does "boot FF" do?
Hi, I've a soekris net5501 with comBIOS ver. 1.33. "show" says BootDrive = 80 81 F0 FF What does "boot FF" do? I tried searching the list archives but FF seems to get cut out by the search engines. Thanks. Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
Re: [Soekris] Net5501 and SATA disk on FreeBSD
On 05/01/2008 04:42:56 AM, Patrick Lamaizière wrote: > The wiring on the board seems ok. I removed the check of the cable in > the FreeBSD ata driver and i'm able to use UDMA100 without any problem > (the box survived to a 'make buildworld' and some copies of large > files). > > A quick test with dd shows me some improvements, around 26 MB/s in > UDMA33, 33 MB/s in UDMA66/UDMA100. This debian bug may or may not be relevant. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=479217 Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
Re: [Soekris] openbsd install problem
On 04/28/2008 11:06:44 AM, Stuart Henderson wrote: > On 2008-04-28, Chantal Rosmuller <[EMAIL PROTECTED]> wrote: > > booting tftp:/bsd: open tftp:/bsd: Unknown error: code 60 > > failed(60). will try /obsd > > > > any pointers would be welcome :) > > Any better if you add "next-server ;" and > restart dhcpd? If that does not work then use a tftp client to debug your tftp setup. Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
Re: [Soekris] net4801 + openbsd + serial device
On 04/27/2008 03:05:38 PM, William Estrada wrote: Now I want to > > > use the unit with the soekris, but Whatever I try, somehow I can't > get > > the software (shell script) to talk to the serial device I'm jumping into the middle of this without looking at details, but I did just setup a soekris box with OpenBSD. In my case the soekris serial port (com0) is /dev/console. You want to look at /etc/ttys to setup the serial device, and probably use a "terminal class" defined in /etc/gettytab. I came up with a /etc/ttys line like: console "/usr/libexec/getty std.9600" vt220 on secure I've got /etc/boot.conf with: stty com0 9600 set tty com0 You may not want the console on the serial port (or maybe you're using the second serial port, uh, jp4?). In that case /etc/ttys should have the "console" line "off". Anyhow, you'll either be using /dev/tty00 (or /dev/tty01), if the serial device is doing the initiation and the talking, or, more likely, your script is doing the talking and you want to use /dev/cua00 (or /dev/cua01). See "man 4 tty". The other trick is to begin by using minicom (in ports) to talk to your device manually. Start by turning all flow control off and then add back what you need. You can also do something like "ttys -a < /dev/cua00" to see what the settings are on a particular serial port. Something like "cat - < /dev/tty00 &" can also be handy, as can tip. RS232 gets grody quick. I suspect I can use "rtscts" at the end of the /etc/ttys line along with a null modem cable that swaps rts and cts when connecting to my PC to use the RTS line for hardware flow control, hardware flow control almost always being the best choice. I've not fully tested this yet, but I do notice the the OpenBSD boot program does not like this. Only one char gets echoed and the rest buffer on the soekris until I turn off hardware flow control in minicom. (Or maybe it's a DTR/DCD issue. *sigh*.) This looks exactly like the error you're getting, so there's probably a hardware flow control issue. Seems to me you want hardware flow control off. (/etc/ttys line has softcar?) Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ Soekris-tech mailing list Soekris-tech@lists.soekris.com http://lists.soekris.com/mailman/listinfo/soekris-tech
