Re: [gentoo-user] Xen questions

2009-09-08 Thread Heiko Wundram

On Tue, 08 Sep 2009 16:38:16 +0200, Xavier Parizet x...@gentooist.com
wrote:
   - why 2.6.21 stays masked on ~arch (last entry in changelog date of
   31/08/2008) ?

2.6.21 was a forward-port done by some Gentoo-guys based on the
2.6.18-kernel that was part of Xen 3.1.3 (IIRC). It's _old_, really old,
that's why it's hardmasked. The current 2.6.18-based Xen-kernel ebuild is
the kernel (patch) that's included with Xen 3.3 (again, IIRC). There are no
newer _official_ Xen-kernels (at least none newer than 2.6.18), and the
Gentoo-developers decided not to include a forward-port anymore, as it
quickly becomes unmaintainable when the version difference between kernel
trunk and Xen kernel becomes larger.

There are forward-ports done by some other distributions (the 2.6.25 you're
hinting at is the Xen-kernel forward port of the Debian-guys, IIRC).
Someone is rebasing the SuSE-forward-ports of the Xen-kernels to Gentoo,
and is offering ebuilds for download here:

http://code.google.com/p/gentoo-xen-kernel/downloads/list

The kernels offered by the SuSE-developers are at most 1-2 minor revisions
behind the current vanilla kernel (as far as i can tell). I've been using
those rebased SuSE-Xen-kernels productively on a Gentoo machine since quite
some time, and they've always been very stable.

   - is someone still working on Xen in Gentoo ?

Yes. To convince you, Xen 3.4.1 took about a day (post release by the Xen
developers) to be included in ~x86-portage.

   - i know about kvm, so is there any reason to migrate to KVM instead of
   Xen ?

If you're currently using HVM, partially; HVM is in portage (and is also
maintained), so you wouldn't need to rely on outside ebuilds, but the
respective infrastructure for maintaining HVM-based machines from the
command-line is poor (there's no such thing as xm and init-scripts, which
can be a major PITA). If you're using para-virtualized kernels, then
definitely no, as HVM fully virtualizes all I/O (which degrades disk-IO
considerably more than a paravirtualized Xen instance), unless you're
adventurous and willing to play with virtio-drivers, which I could never
get completely stable.

YMMV, and HTH!

-- 
Heiko Wundram
Gehrkens.IT GmbH

FON 0511-59027953 | http://www.gehrkens.it
FAX 0511-59027957 | http://www.xencon.net

Gehrkens.IT GmbH
Strasse der Nationen 5
30539 Hannover

Registergericht: Amtsgericht Hannover, HRB 200551
Geschäftsführer: Harald Gehrkens, Daniel Netzer



Re: [gentoo-user] Re: Still getting calls to gcc-i486

2009-07-15 Thread Heiko Wundram

On Wed, 15 Jul 2009 16:13:01 -0500, Harry Putnam rea...@newsguy.com
wrote:
 snip
 So far I haven't found any instance of i486 files remaining on the
 system... what else might evoke that output?

As I said: some Python makefile retains the reference to the (former) i486
compiler. That Makefile is used when building packages using distutils
(that's what's happening here). If remerging Python itself didn't help, how
about grepping /usr/lib/python2.6 for i486, and replacing the matching
string by hand?

grep -R i486 /usr/lib/python2.6

On my system (i686), it's /usr/lib/python2.6/config/Makefile that matches.
And that should also be what's used by distutils.

-- 
Heiko Wundram
Gehrkens.IT GmbH

FON 0511-59027953 | http://www.gehrkens.it
FAX 0511-59027957 | http://www.xencon.net

Gehrkens.IT GmbH
Strasse der Nationen 5
30539 Hannover

Registergericht: Amtsgericht Hannover, HRB 200551
Geschäftsführer: Harald Gehrkens, Daniel Netzer



Re: [gentoo-user] Still getting calls to gcc-i486

2009-07-14 Thread Heiko Wundram

On Tue, 14 Jul 2009 08:40:51 -0500, Harry Putnam rea...@newsguy.com
wrote:
 I've lost track of where all the guff was located but apparently I
 missed something can anyone tell me where to look?
 
 emerge error:
 [...]
 building 'cairo._cairo' extension
 creating build/temp.linux-i686-2.6
 creating build/temp.linux-i686-2.6/cairo
 i486-pc-linux-gnu-gcc -pthread -DNDEBUG -O2 -march=i686 -pipe -fPIC
 -I/usr/include/cairo -I/usr/include/pixman-1 -I/usr/include/freetype2
 -I/usr/include/libpng12 -I/usr/include/python2.6 -c cairo/cairomodule.c
-o
 build/temp.linux-i686-2.6/cairo/cairomodule.o
 unable to execute i486-pc-linux-gnu-gcc: No such file or directory
 error: command 'i486-pc-linux-gnu-gcc' failed with exit status 1
 [...]

Re-merge python. Python keeps the compiler that was used to compile it in a
separate Makefile that's used to compile Python packages (with
distutils), and that's what you're hitting here (as you haven't updated
that).

-- 
Heiko Wundram
Gehrkens.IT GmbH

FON 0511-59027953 | http://www.gehrkens.it
FAX 0511-59027957 | http://www.xencon.net

Gehrkens.IT GmbH
Strasse der Nationen 5
30539 Hannover

Registergericht: Amtsgericht Hannover, HRB 200551
Geschäftsführer: Harald Gehrkens, Daniel Netzer



Re: [gentoo-user] Re: Permissions of /etc/sudoers

2009-02-10 Thread Heiko Wundram
Am Montag 09 Februar 2009 14:15:35 schrieb Nikos Chantziaras:
 Heiko Wundram wrote:
  Am Montag 09 Februar 2009 13:37:31 schrieb Nikos Chantziaras:
  Stroller wrote:
  I install sudo, give my user wide sudo rights and then set
  PermitRootLogin no in /etc/ssh/sshd_config.
  (Critique of this measure welcomed).
 
  Since Hung already answered about the other problem, I'll just comment
  on this.
 
  It's a bad idea if the machine is open to the Internet, especially since
  it's easy to simply su - or sudo as a normal user.
 ...
 Er, didn't I actually say the same?  If other people have network access
 to the machine, disable root.  You misunderstood something.

Err, no, you didn't say the same, at least not considering your quote (I 
didn't read the OP):

Reading the above, you said that PermitRootLogin no is a bad idea (i.e., 
disabling root login via SSH is a bad idea), whereas I said the exact opposite 
(and you meant the exact opposite).

But, as you meant the same as me, forget what I said or just take my rant as a 
clarification of your point. ;-)

-- 
Heiko Wundram
Gehrkens.IT GmbH

FON 0511-59027953 | http://www.gehrkens.it
FAX 0511-59027957 | http://www.xencon.net

Gehrkens.IT GmbH
Strasse der Nationen 5
30539 Hannover

Registergericht: Amtsgericht Hannover, HRB 200551
Geschäftsführer: Harald Gehrkens, Daniel Netzer


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] Re: Permissions of /etc/sudoers

2009-02-09 Thread Heiko Wundram
Am Montag 09 Februar 2009 13:37:31 schrieb Nikos Chantziaras:
 Stroller wrote:
  I install sudo, give my user wide sudo rights and then set
  PermitRootLogin no in /etc/ssh/sshd_config.
  (Critique of this measure welcomed).

 Since Hung already answered about the other problem, I'll just comment
 on this.

 It's a bad idea if the machine is open to the Internet, especially since
 it's easy to simply su - or sudo as a normal user.

Sorry, but I consider that to be BS advice (at least concerning that you want 
to leave password-authentication open).

I'd always recommend disabling root login for ssh (as soon as that is 
possible, i.e. you have an unpriviledged account who is in group wheel who you 
can use to access the machine in question), because root is a well-known 
user (and thus lends itself well to a [possibly distributed] ssh brute force).

When someone wants to hack your machine, he's always going to try known 
usernames before going on to guess what additional (unpriviledged) usernames 
might have been set up on your system. And, even when he gets access to one of 
your user accounts (who happen to be in group wheel), he still has to guess 
the root password (when doing su -) to be able to become root, and hopefully 
this buys you the time to see in your logs that someone tried local su with 
invalid passwords, which should always be a high priority alert.

YMMV, but I've felt pretty safe (safer than leaving root open for password-
authentication) like this so far.

-- 
Heiko Wundram
Gehrkens.IT GmbH

FON 0511-59027953 | http://www.gehrkens.it
FAX 0511-59027957 | http://www.xencon.net

Gehrkens.IT GmbH
Strasse der Nationen 5
30539 Hannover

Registergericht: Amtsgericht Hannover, HRB 200551
Geschäftsführer: Harald Gehrkens, Daniel Netzer


signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-user] RAID0 + LVM2 + XFS : raid0_make_request bug

2009-01-15 Thread Heiko Wundram
Am Thursday 15 January 2009 10:43:52 schrieb Xav':
 On Wed, 14 Jan 2009 20:58:53 +0100, Xav' x...@linuxant.fr wrote:
I've setted up a Xen server with kernel 2.6.18-r12 with 2 SATAII disks
  of 750Go and with the following partitions scheme :
  dom0 ~ # sfdisk -l
  ...
  After that bugs, there is many Input/Output errors in the guest, and so
  broke his gentoo installation so make me impossible to read the guest
  system logs. Any help would be greatly appreciated as this server
  actually host my primary DNS server and so i can't reinstall it from
  scratch.
 
  Many thanks in advance.

 No one can help me ? I've already seeked on google for this problem, but
 this bug seemes to exists from 2003 and for kernel 2.4 or earlier 2.6.0 ...
 So any idea please ??

No, not really. We're not seeing specifically what you're seeing, but the 
I/O-error happening in the guest when the guest runs XFS and you do something 
to the guest in the Dom0 (I presume Soft-RAID counts as doing something) is 
just the same (in our case, the I/O errors start happening more or less 
immediately when you snapshot the DomU in the Dom0 using standard LVM2 
snapshots).

The only workaround I've found so far is to not use XFS for 2.6.18-based Xen 
installations (2.6.20 does not seem to have this problem, but those are 
hard-masked because of not being maintained, and are for an older version of 
the hypervisor), and to use Ext3 on those systems.

To get your data back, simply stop the guest (xm destroy), and mount the 
partition externally (mounting it in the Dom0 should work fine). Before you 
mount it, make sure you've run xfs_repair to correct any inconsistencies in 
the filesystem. After that, reformat the guests harddisk/partition with ext3, 
and replay the files.

HTH!

-- 
Heiko Wundram
Gehrkens.IT GmbH

FON 0511-59027953 | http://www.gehrkens.it
FAX 0511-59027957 | http://www.xencon.net

Gehrkens.IT GmbH
Strasse der Nationen 5
30539 Hannover

Registergericht: Amtsgericht Hannover, HRB 200551
Geschäftsführer: Harald Gehrkens, Daniel Netzer



Re: [gentoo-user] OT: Python (was: package.keywords syntax?)

2008-10-31 Thread Heiko Wundram
Am Friday 31 October 2008 10:54:23 schrieb Matthias Bethke:
 Hi Albert,

 on Thu, Oct 30, 2008 at 03:11:04PM -0400, you wrote:
  ... but Jorge is right.  This is easily picked up by a lint tool... and
  good python programmers use them ;-).  Some python-aware editors even
  have this functionality built in.

 Whow...I've been out of Python long enough to totally forget that you
 *needed* to do this. In Perl, the use strict you find at the top of
 every well-written script does it at compile time.

sarcasm
Yeah, let's continue to bash Python, which is such a badly broken language 
nobody wants to use it productively, because other languages offer so much 
better functionality to test for programmer error at compile time. Perl is a 
brilliant example to mention in this context.
/sarcasm

Seriously: dynamic typing is a blessing, (only!) when combined with strict 
typing (where Perl doesn't [really] have the latter, even when use strict is 
in effect). Having to declare variables before use mostly is irrelevant (I'm 
not talking about _defining_ variables before use), because it's no common 
source of bugs.

At least that's my 5 cents.

-- 
Heiko Wundram
hackerkey://v4sw7CHJLSUY$hw5ln5pr7FOP$ck2ma9u7FL$w3DVWXm0l7GL$i65e6t3EMRSXb7ADORen5a26s5MSr2p-6.62/-6.56g5AORZ



Re: [gentoo-user] A question about emerge --info

2008-10-30 Thread Heiko Wundram
Am Thursday 30 October 2008 13:26:27 schrieb Albert Hopkins:
 On Wed, 2008-10-29 at 20:47 -0400, Joshua Murphy wrote:
  Hrm. I know just enough about python to get myself in trouble here...
  but it looks like a python bug in magicking up the libc name and
  version... but the below is WAY outside my level of practice with
  python (it'll take re-reading and digging elsewhere a good few times
  if I'm ever to make sense of it...
 
  --
  def libc_ver(executable=sys.executable,lib='',version='',
 
   chunksize=2048):

 deleted
 This is a very simple hack which simply doesn't work.  Nice try.  It's
 not so much portage's fault as it is Python.

 Basically what python is doing is opening it's executable
 (/usr/bin/python') and doing a egrep for

 (__libc_init)|(GLIBC_([0-9.]+))|(libc(_\w+)?\.so(?:\.(\d[0-9.]*))?)

 Then it finds the matches and tries to apply some logic to decide the
 best answer.  On my system it's GLIBC_2.0 and so platform.libc_ver()
 returns ('glibc', '2.0') whereas my actual libc is glibc 2.8.

 Obviously the person who wrote the function was trying to be
 cross-platform.  Python runs on many different platforms, POSIX and
 non-POSIX.  But the implementation is a bit lazy and, obviously,
 inaccurate.

That's utter bollocks and shows a fundamental misunderstanding of shared 
libraries.

True, your installed glibc might be _package version_ 2.8, but the base 
_interface_ (as in ABI) defined and supported by your shared glibc is version 
2.0, which is the currently developed interface version (the interface is 
also known as libc6), and that's what's actually of any interest to a 
dynamically linked application.

Guess why applications dynamically linked against a 2.3 glibc can still be run 
(without recompilation!) on a 2.8 glibc, and mostly vice-versa, except when 
the application linked with a 2.8 glibc uses symbols which were introduced 
later than the libc you're trying to run it on, but in that case these 
symbols aren't marked as GLIBC_2.0 in your 2.8 glibc, but as GLIBC_2.4, for 
example (stating that this symbol was first introduced and conforms to the 
ABI that glibc 2.4 upwards have/has).

Do a readelf -a /lib/libc.so.6 to see what I'm talking about (symbol 
versioning, and multiple symbols for one name differing in the symbol 
version).

 ...
 So partial blame goes to both python and portage: python for it's shoddy
 implementation of platform.libc_ver() and portage for relying on it :-)

Again, this is utter bullshit. Python doesn't have a shoddy implementation 
of libc_ver(), it just doesn't give you what you expect it to give you (it's 
not a package manager, for gods sake), but rather what's of actual interest 
to anyone doing application development.

-- 
Heiko Wundram
hackerkey://v4sw7CHJLSUY$hw5ln5pr7FOP$ck2ma9u7FL$w3DVWXm0l7GL$i65e6t3EMRSXb7ADORen5a26s5MSr2p-6.62/-6.56g5AORZ



Re: [gentoo-user] md-device too small: where's my mistake?

2008-10-23 Thread Heiko Wundram
Am Wednesday 22 October 2008 15:58:44 schrieb Stefan G. Weichinger:
 md2 is the one that gives me headaches. AFAI understand it should be
 about 3TB in size, but it is only 774 GB 

 # fdisk -l /dev/md2

 Platte /dev/md2: 774.0 GByte, 774044975104 Byte
 2 Köpfe, 4 Sektoren/Spuren, 188975824 Zylinder
 Einheiten = Zylinder von 8 × 512 = 4096 Bytes
 Disk identifier: 0x


 Why?

You cannot manage disks = ~2TB with fdisk (i.e., DOS partition tables), as 
they (or rather the on-disk-structure of DOS partition tables) have an 
inherent limitation in the maximum number of LBA48-blocks they can address.

I'd presume that because of this inherent limitation, fdisk is reporting the 
wrong total size (2TB+774G+epsilon ~ 3TB; sounds like somewhere someone is 
doing a modulo operation, possibly), and completely off values for 
heads/sectors.

Anyway, md-devices cannot be partitioned anyway (of course you can write a 
partition table on them, but the kernel won't use that to create md2-1,-2, 
etc.), so using fdisk is wrong.

If you want to check the real size of the device, don't use fdisk, but 
rather use

blockdev --getsize64 /dev/md2

which shows you the byte-count of the corresponding volume, and which I think 
will be 3TB, as you want it to be.

If you want to subpartition large devices, use lvm(2), which does not have the 
2TB limitation on size.

Hope this helps!

-- 
Heiko Wundram
hackerkey://v4sw7CHJLSUY$hw5ln5pr7FOP$ck2ma9u7FL$w3DVWXm0l7GL$i65e6t3EMRSXb7ADORen5a26s5MSr2p-6.62/-6.56g5AORZ



Re: [gentoo-user] GCC compilation disk space

2008-10-08 Thread Heiko Wundram
Am Wednesday 08 October 2008 06:50:47 schrieb Willie Wong:
   I don't remember gcc-3 being such a resource hog when building. So I
   wonder: is this the expected behaviour or is something wrong with my
   box?

Expected behaviour. =gcc-4.2 compiles about three times longer than gcc-4.2 
(IIRC 4.1.2 was the last gcc that I could compile in under 30 minutes; the 
current one takes about 1.5 hours), and requires loads of disk.

-- 
Heiko Wundram



Re: [gentoo-user] Is there a way to automate rsync of updated portage tree across multiple boxes without each having to pull it down from a gentoo mirror

2008-09-18 Thread Heiko Wundram
Am Thursday 18 September 2008 12:34:17 schrieb Matthias Bethke:
 Hi Vaeth,

 on Wed, Sep 17, 2008 at 09:49:08AM +0200, you wrote:
   [...] that in any halfway sane router these NAT problems are not an
   issue. And with many routers running Linux today so you can even get a
   shell and check iptables... :)
 
  We are obviously talking about a different price category of routers.
  Most routers people use here in Germany for home systems are from their
  ISP, and they are usually proprietary implementations [...]

 Huh? I don't have a good overview of the market here but the ISP I work
 at uses only FritzBox routers which run a fine Linux, and as far as I
 know so do most of T-Com's Speedport models...

Most of the T-Com Speedports (except for the very old ones, which come from 
Siemens) are just rebranded FritzBoxen (with some functionality 
removed/patched), so they also run a(n ARM-)Linux, and are even more or less 
firm-ware compatible with the FritzBox firmwares (I reflashed a Speedport 500 
[?? IIRC] once with a FritzBox firmware to get proper VoIP support).

Just FYI.

-- 
Heiko Wundram



Re: [gentoo-user] Enforcing passphrase protected ssh keys

2008-09-17 Thread Heiko Wundram
Am Wednesday 17 September 2008 15:04:19 schrieb Alan McKinnon:
 I had thought of that, but I'm shying away from it - the admin load of
 supporting that many user passwords is crippling. The users forget their
 passwords or share them and write them on stciky notes...

What about one-time-passwords? In addition to a user-supplied SSH-key (whether 
encrypted or not)? There's J2ME-software (i.e., installable on pretty much 
any normal mobile phone) to compute OTPs for users, so you don't even need 
additional hardware such as RSA-Tokens, and there's no (noticeable) 
administration-overhead.

Some intro on this which I just found on google which uses opie:

http://www.heise-online.co.uk/security/One-time-passwords-for-home-users--/features/88570

-- 
Heiko Wundram



Re: [gentoo-user] e2fsprogs and blocking

2008-08-17 Thread Heiko Wundram
Am Sonntag, 17. August 2008 09:52:57 schrieb Andrew Gaydenko:
 After last syncing 'emerge -pvDuN world' ends with messages
 shown below. How to resolve this conflict *safely*? I don't
 want to experiment with fs-related packages :-)

What worked fine for me:

emerge --unmerge sys-libs/ss sys-libs/com_err sys-fs/e2fsprogs
emerge --oneshot -v sys-fs/e2fsprogs

You might want to run a revdep-rebuild after emerging the new e2fsprogs, 
although the only thing that happened with libraries AFAICT is that 
sys-libs/ss and sys-libs/com_err now come combined in the 
sys-libs/e2fsprogs-libs package without any versioning change, and so 
revdep-rebuild should find nothing.

HTH!

--- Heiko.



Re: [gentoo-user] e2fsprogs and blocking

2008-08-17 Thread Heiko Wundram
Am Sonntag, 17. August 2008 10:08:46 schrieb Andrew Gaydenko:
 === On Sunday 17 August 2008, Heiko Wundram wrote: ===

  Am Sonntag, 17. August 2008 09:52:57 schrieb Andrew Gaydenko:
   After last syncing 'emerge -pvDuN world' ends with messages
   shown below. How to resolve this conflict *safely*? I don't
   want to experiment with fs-related packages :-)
 
  What worked fine for me:
 
  emerge --unmerge sys-libs/ss sys-libs/com_err sys-fs/e2fsprogs
  emerge --oneshot -v sys-fs/e2fsprogs

 Why 'oneshot' option is used?

So that you don't record sys-fs/e2fsprogs in the world set.

It's pulled in as a dependency from the system set anyway (that's why 
the --unmerge will tell you that you're unmerging a system package, and that 
you'll potentially break your system), and I personally don't like 
unnecessary packages cluttering up my world set, so I always use --oneshot in 
cases like this.

But, if you leave it out, it does no harm, either.

--- Heiko.



Re: [gentoo-user] e2fsprogs and blocking

2008-08-17 Thread Heiko Wundram
Am Sonntag, 17. August 2008 10:40:38 schrieb Graham Murray:
 Heiko Wundram [EMAIL PROTECTED] writes:
  What worked fine for me:
 
  emerge --unmerge sys-libs/ss sys-libs/com_err sys-fs/e2fsprogs
  emerge --oneshot -v sys-fs/e2fsprogs

 Be *very* careful about doing that. wget (amongst other packages) uses
 libcom_err, so you will not be able to fetch any packages (including
 e2fsprogs-lib) if you follow the above instructions.  See bug
 https://bugs.gentoo.org/show_bug.cgi?id=234907 for details and for a
 safer workaround.

I cannot reproduce this here:

[EMAIL PROTECTED] ~ % ldd /usr/bin/wget
linux-gate.so.1 =  (0xb8088000)
libssl.so.0.9.8 = /usr/lib/libssl.so.0.9.8 (0xb8025000)
libcrypto.so.0.9.8 = /usr/lib/libcrypto.so.0.9.8 (0xb7ee6000)
libdl.so.2 = /lib/libdl.so.2 (0xb7ee2000)
librt.so.1 = /lib/librt.so.1 (0xb7ed9000)
libc.so.6 = /lib/libc.so.6 (0xb7d99000)
/lib/ld-linux.so.2 (0xb8089000)
libpthread.so.0 = /lib/libpthread.so.0 (0xb7d81000)
[EMAIL PROTECTED] ~ %

None of the specified libraries indirectly references libcom_err, either, and 
running wget with libcom_err temporarily not present also works, and I did 
not download the packages before using the commands I noted. Possibly, 
there's a difference between the x86 wget and the ~x86 wget (I run the 
latter).

--- Heiko.



Re: [gentoo-user] why firefox is so slow?

2006-04-30 Thread Heiko Wundram
Am Sonntag 30 April 2006 14:24 schrieb wu chuanwen:
 I think most of us are using firefox now .Do you think it's too slow?In my
 machine,if i open 6 or more tabs in firefox,my firefox will be stuck and
 even can not scroll up and down.Many peple have the same situation.Do you
 think so? And how can you solve this problem?

Most certainly, this is a memory issue. For every tab you have open, Firefox 
keeps a 30-something pages history cache in memory, including pictures, for 
quicker back-browsing. If you are under tight memory (512MB, I'd say), you 
quickly notice that the memory requirements of Firefox make the computer 
start to swap, and that the system slows down considerably.

You can turn off this history-caching somewhere, someplace on about:config, 
but I wouldn't know where. Search the net. You're not the first one to 
complain about this.

--- Heiko.
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: how to setup sun-jdk

2006-04-16 Thread Heiko Wundram
Am Sonntag 16 April 2006 08:51 schrieb wu chuanwen:
 I have download two of
 the same package.And the result is all the same as above. I don't think the
 packages are  corrupted.

Yes, they are? Because it's no Gentoo program that tries to unpack the files, 
but the self-extractable itself (and no wonder Gentoo gets a digest error on 
the file). Or, your machine is broken somehow, and corrupts the file while 
it's being written/read from disk. But I'd much rather guess the source you 
download the self-extractable from is corrupt. Use another source, luke. ;-)

--- Heiko.
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] ntp/php wont build mysql configure failed

2006-04-09 Thread Heiko Wundram
Am Sonntag 09 April 2006 21:45 schrieb Michael W. Holdeman:
 snip

The problem isn't that mysql can't be found (is broken), but that autoconf 
thinks you have msql installed (which is also some form of SQL database, but 
more in the style of SQLite, IIRC, but anyway, probably not what you want).

The linking of a program with the mysql libraries fails because autoconf wants 
to link against libmsql (the msql libraries, not the mysql libraries!). Just 
turn off the msql USE-Flag, and you should be set to go.

This awfully sounds like a bug in autoconf, because just before the mysql 
stuff it checks for msql, and finds out that the support is broken (and 
doesn't barf on that!), but still tries to link against libmsql later on in 
the autoconf run.

--- Heiko.
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] ntp/php wont build mysql configure failed

2006-04-09 Thread Heiko Wundram
Am Montag 10 April 2006 00:21 schrieb Richard Fish:
 Not a bug in the autoconf package, but in the autoconf scripts for php.

That's what I meant... Anyway, I didn't know that msql wasn't available in 
portage, and I personally have yet to see the warning you referenced. Good to 
know such a beast exists, anyway.

--- Heiko.
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] DNS Expert Required

2006-03-26 Thread Heiko Wundram
Am Sonntag 26 März 2006 10:01 schrieb Hiren Dave:
 WHAT IS WRONG IN SETUP? PLEASE HELP ME.

Your zone files are borked. Check them for consistency (for example, don't 
define the zone to be server1.guru.com, but guru.com...

--- Heiko.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Is there a DEP (Data Execution Protection) option for Gentoo?

2006-03-26 Thread Heiko Wundram
Am Montag 27 März 2006 06:29 schrieb Walter Dnes:
   The subject says it all.  I've done some spelunking through
 /usr/src/linux/.config, and I don't see anything relavant.

It's a kernel patch called PAX, and Gentoo offers hardened-sources which 
incorporate this kernel patch. Google for Gentoo PAX, and you'll find a Howto 
which explains how to set it up.

--- Heiko.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Problem burning Gentoo 700 MB LiveCD

2006-03-20 Thread Heiko Wundram
Am Montag 20 März 2006 14:35 schrieb Daniel da Veiga:
 snip perfectly good advice

You might also want to check whether you have some form of 
Sony-Rootkit^D^D^D^D^D^D^D err... DRM installed. These are known to cause 
problems burning CDs.

--- Heiko.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Port Tracer Program Needed

2006-03-14 Thread Heiko Wundram
Am Dienstag, 14. März 2006 18:08 schrieb Timothy A. Holmes:
 Hans -- Thank you,  I realize that I can make it blink with network
 traffic, the problem is that basically all the ports on the switches
 have traffic running constantly on them, so I need to find a way to make
 it distinctive enough so it can be picked out from the rest of the
 noise.

Save the following script as floodping.sh, and try it, you should be able to 
notice the traffic from your regular traffic:

#!/bin/sh
ifconfig $1 10.0.0.1 netmask 255.255.255.0 broadcast 10.0.0.255
while true
do
ping -f -w $2 -b 10.0.0.255
sleep $2
done

./floodping.sh eth0 5

would mean that it does five seconds of intensive traffic (which has packets 
going to the switch in the order of 20ms or so, depending on your laptop, 
and the lamp should blink very frequently), then does five seconds of data 
sleep, which should be almost completely quiet on the switch (except for that 
occasional broadcast packet from another computer directed at yours).

Be sure to use a network that isn't on your local net for testing, as my 
network is 192.*, I've used 10.* in the example. If you use a network that's 
regularily used on your network, you might get problems discerning the sleep 
phase, as the arp address of your laptop propagates to all other endpoints on 
your net due to the use of a regular network, and this might mean a lot of 
ARP queries, depending on your network size.

I've used a technique like this to check the cabling in a building, and it 
worked just fine.

HTH!

-- 
--- Heiko.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Port Tracer Program Needed

2006-03-14 Thread Heiko Wundram
Am Dienstag, 14. März 2006 19:24 schrieben Sie:
 I created the script as you suggested, and when I executed it ALL the
 lights on the ports that have connections go nuts

Okay, your switches are layer 2 switches, not layer 3 switches then... (they 
don't understand IP traffic, only ethernet traffic; a broadcast ping is a 
broadcast ethernet packet which gets forwarded to every port by a layer 2 
switch). I didn't think of that when I sent out the snippet; our switches are 
layer 3 switches, and they won't forward packets between different network 
segments, even when they are in the same ethernet segment.

But, you can still make this work if you have two computers connected to the 
network, one which you know the switch port and IP of.

Your setup should look something like this:


| Switch   |
--|--|--
  Port 1 (192.168.0.1)   Port x (your Laptop, fixed at 192.168.123.45,
 some address not on your network)

Port 1 mustn't necessarily be port 1, may also be any other port, just as you 
may use any other IP you know.

Then, try the following:

#!/bin/sh
# Set up networking, adjust to fit your network.
ifconfig $1 192.168.123.45 netmask 255.255.0.0 broadcast 192.168.255.255

# Standard loop.
while true
do
ping -f -w $2 192.168.0.1 # Your known host IP
sleep $2
done

When you call this script (just as before), only those two ports which are 
present in the diagram above should start to fire (and sleep), and as you 
know one of them, the other can't be hard to actually discern from the rest 
of the ports on the switch.

If the above doesn't work, there are other ways which involve creating 
ethernet packets with invalid recipient address at high speeds which 
shouldn't get forwarded by a layer 2 switch, but these involve a little more 
trickery than a small shell script. I'd be happy to write a little 
Python-Program which does just this, but before I do, test the above. ;-)

-- 
--- Heiko.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Fairwell for now

2006-03-10 Thread Heiko Wundram
Am Freitag, 10. März 2006 19:44 schrieb A.R.S. KA9QLQ Alvin Koffman:
 Bill Gates can sleep good...they even have voice software [8=)

Stop trolling and grow up.

-- 
--- Heiko.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Good Game??

2006-03-08 Thread Heiko Wundram
Am Mittwoch, 8. März 2006 23:26 schrieb wieseltux23:
 www.wolfspakt.de/spiel.php?id=7358

For all people who haven't looked there yet, this is a crappy german 
advertising game, in which the player gets points for the number of people 
visiting his site.

So: don't go look there, this has absolutely nothing to do with this thread.

-- 
--- Heiko.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] how to implement net bandwidth quota

2006-03-07 Thread Heiko Wundram
Am Mittwoch, 8. März 2006 06:52 schrieb Bobber Cheng:
 Any suggestion?

Yes. Go and google for tc and the mark table of iptables, and most probably 
the user-match too. (Linux Advanced Routing  Traffic Control HOWTO ring a 
bell?) 

Oh, and by the way, the HOWTO is nothing you couldn't have found by investing 
a little time on Google. Next time, google before you ask, please...

-- 
--- Heiko.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] USE=mysql

2006-03-01 Thread Heiko Wundram
Am Dienstag, 28. Februar 2006 18:55 schrieb Arnau Bria Ramírez:
 But, why if I set mysql to my make.conf and try to emerge with --newuse,
 php is not a candidate of rebuild?

You probably did not emerge php directly, but had it pulled in by some other 
ebuild. This means it won't get picked up in an update. Try:

emerge -DuNpv world

and it should rebuild PHP too.

-- 
--- Heiko.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] virtual cdroms in linux

2006-03-01 Thread Heiko Wundram
Am Mittwoch, 1. März 2006 17:27 schrieb Nick Smith:
 wouldnt that be the same as just telling vmware in the software itself
 to use the that iso image? i cant use vmware's virtual cdrom for this
 project, it gives me errors on boot, i need to find a way to have it
 mounted some other way like daemontools for windows.  i have tried
 just mounting the iso as a cdrom in folder /media/cdrom and other
 places, but vmware complains that you cant use a folder like that. so
 im kinda out of ideas.  can it even be done?

Yes. Basically that's what mount -o loop does internally before mounting it to 
a filesystem; you just have to set up the loop device separately.

For info on that, do a man losetup, basically what you need is:

losetup /dev/loop0 myimage.iso

and tell VMWare to use that loop device as a CD-ROM block device.

YMMV though, as a true CD-ROM block device supports IOCTLs which the loop 
device can't/doesn't.

-- 
--- Heiko.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] virtual cdroms in linux

2006-03-01 Thread Heiko Wundram
Am Mittwoch, 1. März 2006 18:02 schrieb Nick Smith:
 vmware tells me that /dev/loop1 exsists but does not appear to be a
 cdrom device, is there something else i have to do?

As I said, YMMV. The loop device doesn't support CD-ROM-device IOCTLs, which 
are required by VMware as it seems. There's nothing you can do about that, 
except to use the internal CD-ROM emulation that VMware offers. As it seems 
that this doesn't work for you, you're out of luck.

-- 
--- Heiko.

-- 
gentoo-user@gentoo.org mailing list