Jailed Apache1.3, processes won't die

2005-11-27 Thread markzero
Hi.

I'm using a standard install of FreeBSD 6.0-RELEASE.

I have a minimal jail, configured in the usual manner (a minimal install
into a directory). I installed Apache 1.3 from ports into the jail and
all seemed to be well until I tried:

  # apachectl restart

The error log said:

[Sun Nov 27 20:51:23 2005] [warn] child process 59809 did not exit, sending 
another SIGHUP
[Sun Nov 27 20:51:23 2005] [warn] child process 59986 did not exit, sending 
another SIGHUP
[Sun Nov 27 20:51:23 2005] [warn] child process 6 did not exit, sending 
another SIGHUP
[Sun Nov 27 20:51:23 2005] [warn] child process 60075 did not exit, sending 
another SIGHUP
[Sun Nov 27 20:51:23 2005] [warn] child process 60140 did not exit, sending 
another SIGHUP
[Sun Nov 27 20:51:23 2005] [warn] child process 60147 did not exit, sending 
another SIGHUP
[Sun Nov 27 20:51:24 2005] [warn] child process 59809 still did not exit, 
sending a SIGTERM
[Sun Nov 27 20:51:24 2005] [warn] child process 59986 still did not exit, 
sending a SIGTERM
[Sun Nov 27 20:51:24 2005] [warn] child process 6 still did not exit, 
sending a SIGTERM
[Sun Nov 27 20:51:24 2005] [warn] child process 60075 still did not exit, 
sending a SIGTERM
[Sun Nov 27 20:51:24 2005] [warn] child process 60140 still did not exit, 
sending a SIGTERM
[Sun Nov 27 20:51:24 2005] [warn] child process 60147 still did not exit, 
sending a SIGTERM
[Sun Nov 27 20:51:28 2005] [error] child process 59809 still did not exit, 
sending a SIGKILL
[Sun Nov 27 20:51:28 2005] [error] child process 59986 still did not exit, 
sending a SIGKILL
[Sun Nov 27 20:51:28 2005] [error] child process 6 still did not exit, 
sending a SIGKILL
[Sun Nov 27 20:51:28 2005] [error] child process 60075 still did not exit, 
sending a SIGKILL
[Sun Nov 27 20:51:28 2005] [error] child process 60140 still did not exit, 
sending a SIGKILL
[Sun Nov 27 20:51:28 2005] [error] child process 60147 still did not exit, 
sending a SIGKILL
[Sun Nov 27 20:51:30 2005] [error] could not make child process 59809 exit, 
attempting to continue anyway
[Sun Nov 27 20:51:30 2005] [error] could not make child process 59986 exit, 
attempting to continue anyway
[Sun Nov 27 20:51:30 2005] [error] could not make child process 6 exit, 
attempting to continue anyway
[Sun Nov 27 20:51:30 2005] [error] could not make child process 60075 exit, 
attempting to continue anyway
[Sun Nov 27 20:51:30 2005] [error] could not make child process 60140 exit, 
attempting to continue anyway
[Sun Nov 27 20:51:30 2005] [error] could not make child process 60147 exit, 
attempting to continue anyway
[Sun Nov 27 20:51:30 2005] [notice] SIGHUP received.  Attempting to restart
[Sun Nov 27 20:51:31 2005] [notice] Apache/1.3.34 (Unix) configured -- resuming 
normal operations
[Sun Nov 27 20:51:31 2005] [notice] suEXEC mechanism enabled (wrapper: 
/usr/local/sbin/suexec)
[Sun Nov 27 20:51:31 2005] [notice] Accept mutex: flock (Default: flock)

For some reason, the processes will not die. The old processes prior to
the restart die by themselves in the usual way (when 'consumed' by an
HTTP request) and the parent process creates new processes to fill the
spots. All is apparently well.

However, if I do this:

  # apachectl stop

I get the same error message as above and the old child processes still
occupy the port and the server cannot be restarted. Effectively, the
http server will not shut down (and believes that it HAS shut down) and
then will not be restarted.

The only way to rectify the situation is to log into the host machine
and kill the httpd processes running in the jail.

What is going on here?

Anybody experiencing this?

M

(please CC as I'm no longer subscribed to this list)

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
0160 A46A 9A48 D3B0 C92F B690 17FB 4B72 0207 ED43


pgpT9ZPP8LRm8.pgp
Description: PGP signature


suicidally ambitious compilation?

2005-07-21 Thread markzero
Hello.

I'm thinking of setting up a jail specifically to try and compile an
OpenBSD release on FreeBSD. No 'cross compiling' will be involved (same
target hardware architecture).

Has anybody here ever tried, or heard of anybody trying this?

I don't expect the journey to be without large potholes...

M

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9dD1


pgpwSJYVMPFnT.pgp
Description: PGP signature


Re: suicidally ambitious compilation?

2005-07-21 Thread markzero
  I'm thinking of setting up a jail specifically to try and compile an
  OpenBSD release on FreeBSD. No 'cross compiling' will be involved (same
  target hardware architecture).
  
  Has anybody here ever tried, or heard of anybody trying this?
  
  I don't expect the journey to be without large potholes...
 
 That won't work. A jail is not something like vmware. It's
 just a FreeBSD inside a FreeBSD.
 I used emulators/qemu to install NetBSD into an
 image file from the installation cd. That worked for me
 as long as I did not try to start X inside qemu.
 So I think that OpenBSD will work too.
 (Interestingly the Knoppix live-cd runs emulated
 even in graphics mode!)

Hi.

I should have explained myself a little better. What I'm actually trying
to do is compile a minimal OpenBSD snapshot so that I can distribute binaries 
to my very slow firewall machine (which also lacks a compiler, for
security reasons). The jail is purely there because the OpenBSD
compilation process seems to make the assumption that it's working in
/usr/src so I thought it would be a good idea to partition the process
off from the rest of the system.

M

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9dD1


pgpvDfESKi3gW.pgp
Description: PGP signature


Re: suicidally ambitious compilation?

2005-07-21 Thread markzero
  I should have explained myself a little better. What I'm actually trying
  to do is compile a minimal OpenBSD snapshot so that I can
  distribute binaries
  to my very slow firewall machine (which also lacks a compiler, for
  security reasons). The jail is purely there because the OpenBSD
  compilation process seems to make the assumption that it's working in
  /usr/src so I thought it would be a good idea to partition the process
  off from the rest of the system.
 
 Although I think it is possible, to build OpenBSD under
 FreeBSD, I wouldn't try it.  The problem is to correctly
 re-create the _complete_ OpenBSD build environment.  That
 means compiler, linker, make, and other tools that may be
 used for building.  For the compiler, that means to build a
 cross compiler. The cpu may be the same, but gcc is always
 configured for a combination of operating system/target
 cpu/binary format.  And you have to find out what gcc
 version OpenBSD is usually been built with.  Other tools
 may differ in behaviour or command line options. For
 example, may be FreeBSD is using a gnu tool while OpenBSD
 is using a non-gnu tool.  What about e.g. make? There is
 make and gmake under FreeBSD.
 
 So again I suggest you try the qemu solution (or buy an 
 additional computer ;-).

Well, that has certainly been an education. Thanks!

I'll try qemu then.

M

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9dD1


pgpBanTsa3rxC.pgp
Description: PGP signature


Re: FW: Adding OpenBSD sudo to the FreeBSD base system?

2005-07-21 Thread markzero
On Thu, Jul 21, 2005 at 08:17:57PM -0700, whistles wrote:
 On 7/21/05, markzero [EMAIL PROTECTED] wrote:
  On Thu, Jul 21, 2005 at 10:23:56PM -0400, ender wrote:
   Stephen Major wrote:
  
   You are correct; I made a mistake on that one.
   Sudo should not be forced upon anyone.
   I do not care if sudo is part of the base system
   I just 100% disagree with you wanting to replace su with sudo
   
   Look the other post that came from the dude before is 100% correct this 
   is
   a
   dumb argument.
   
   If sudo offered the opportunity for more features, but by default
   behaved exactly the same way as su, I would see no disadvantages to
   replacing su with sudo. Am i missing something?
  
  What happens if you maintain systems that don't need sudo?
  
  M
  
 
 You get an _uneeded_  setuid binary 
 
 Do a few extra built in features for some outweigh everyone gettting
 another setuid binary?
 I say no myself 
 my 2cents
 

That was the point that I was not-so-subtly making. :)

M

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9dD1


pgpwHcn2CHkcD.pgp
Description: PGP signature


Re: NVIDIA TNT2 woes

2005-07-04 Thread markzero
 (WW) The NVIDIA RIVA TNT2 Model 64/Model 64 Pro GPU installed in
 (WW)  this system is supported through the NVIDIA Legacy
 (WW)  drivers. Please visit
 (WW)  http://www.nvidia.com/object/unix.html for more
 (WW)  information.  The 1.0-7667 NVIDIA driver will ignore this
 (WW)  GPU.  Continuing probe... (EE) No devices detected.
 
 The NVIDIA Legacy drivers magically fail to exist on the NVIDIA
 site and there appears no be no port for them either.
  
 
 I was exploring the latest nvidia driver and came across this page.  
 http://www.nvidia.com/object/freebsd_archive.html
 Isn't 7174 or 6113 the legacy driver you are after?
 
 --Alex
 

Well, yes they are the older drivers that would work, but the above
message gave me the impression that NVIDIA were going to be maintaining
a seperate set of legacy drivers.

Not that it really matters now, the nv driver seems to be more solid
and allows me to run my monitor at the resolution I'm actually supposed
to be able to run it at (the proprietary drivers had a long unfixed bug
that limited my maximum resolution). I get no apparent performance
decrease on glxgears either (which is about the limit of my GL usage
nowadays!).

Cheers,
M

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9dD1


pgpYT0lP8T8fv.pgp
Description: PGP signature


Re: NVIDIA TNT2 woes

2005-07-03 Thread markzero
On Sun, Jul 03, 2005 at 10:53:43PM -0400, Anthony M. Agelastos wrote:
 
 glxgears works for you with the nv driver? I cannot get it to work  
 for me (I have a RIVA TNT as opposed to your RIVA TNT 2). Could you  
 post your xorg.conf? I have the line Load glx in the Module  
 Section. Perhaps the nv driver works much better than for the TNT 2  
 as opposed to the TNT? Thank you for your help and thank you to the  
 whole list for the support and replies.


$ uname -smr
FreeBSD 5.4-RELEASE-p2 i386

$ X -version
X Window System Version 6.8.2
Release Date: 9 February 2005
X Protocol Version 11, Revision 0, Release 6.8.2
Build Operating System: FreeBSD 5.4 i386 [ELF] 
Current Operating System: FreeBSD xxx.xxx.xxx 5.4-RELEASE-p2
FreeBSD 5.4-RELEASE-p2 #1: Sun Jun 12 16:17:58 BST 2005
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/LOGIK006 i386
Build Date: 30 June 2005
Before reporting problems, check http://wiki.X.Org
to make sure that you have the latest version.
Module Loader present

$ glxgears -info
GL_MAX_VIEWPORT_DIMS=4096/4096
GL_RENDERER   = Mesa GLX Indirect
GL_VERSION= 1.2 (1.5 Mesa 6.1)
GL_VENDOR = Mesa project: www.mesa3d.org
much data snipped
858 frames in 5.0 seconds = 171.600 FPS

Xorg.conf follows...

---
Section ServerLayout
Identifier x1
Screen  0  Screen0 0 0
InputDeviceMouse0 CorePointer
InputDeviceKeyboard0 CoreKeyboard
EndSection

Section Files
RgbPath  /usr/X11R6/lib/X11/rgb
ModulePath   /usr/X11R6/lib/modules
FontPath /usr/X11R6/lib/X11/fonts/misc/
FontPath /usr/X11R6/lib/X11/fonts/TTF/
FontPath /usr/X11R6/lib/X11/fonts/Type1/
FontPath /usr/X11R6/lib/X11/fonts/CID/
FontPath /usr/X11R6/lib/X11/fonts/75dpi/
FontPath /usr/X11R6/lib/X11/fonts/100dpi/
EndSection

Section Module
Load  extmod
Load  glx
Load  dri
Load  dbe
Load  record
Load  xtrap
Load  type1
Load  freetype
EndSection

Section InputDevice
Identifier  Mouse0
Driver  mouse
Option  Protocol Auto
Option  Device /dev/sysmouse
  Option  Buttons 5
  Option  ZAxisMapping 4 5
EndSection

Section InputDevice
Identifier  Keyboard0
Driver  keyboard
Option  XkbRules xorg
Option  XkbModel pc101
Option  XkbLayout gb
EndSection

Section Monitor

#DisplaySize  320   240 # mm
Identifier   Monitor0
VendorName   MAX
ModelNamebe0
Option  DPMS
EndSection

Section Device

### Available Driver options are:-
### Values: i: integer, f: float, bool: True/False,
### string: String, freq: f Hz/kHz/MHz
### [arg]: arg optional
#Option SWcursor  # [bool]
#Option HWcursor  # [bool]
#Option NoAccel   # [bool]
#Option ShadowFB  # [bool]
#Option UseFBDev  # [bool]
#Option Rotate# [str]
#Option VideoKey  # i
#Option FlatPanel # [bool]
#Option FPDither  # [bool]
#Option CrtcNumber# i
#Option FPScale   # [bool]
#Option FPTweak   # i
Identifier  Card0
Driver  nv
VendorName  nVidia Corporation
BoardName   NV5M64 [RIVA TNT2 Model 64/Model 64 Pro]
BusID   PCI:2:0:0
EndSection

Section Screen
Identifier Screen0
Device Card0
MonitorMonitor0
SubSection Display
Viewport   0 0
Depth 1
EndSubSection
SubSection Display
Viewport   0 0
Depth 4
EndSubSection
SubSection Display
Viewport   0 0
Depth 8
EndSubSection
SubSection Display
Viewport   0 0
Depth 15
EndSubSection
SubSection Display
Viewport   0 0
Depth 16
EndSubSection
SubSection Display
Viewport   0 0
Depth 24
EndSubSection
EndSection

---

M

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9dD1


pgpqNb4tTcojp.pgp
Description: PGP signature


Re: NVIDIA TNT2 woes

2005-06-30 Thread markzero
 Can you use the x.org nv driver instead?  I've never really figured 
 out what the binary driver buys you over the standard one, but then all 
 I do is run X with fvwm2, mainly for software development, so I have 
 never needed any fancy features.  (I've never had a TNT2, but I 
 believe it's supported).
 
 Man nv says under supported cards:
 
  RIVA TNT2 NV5
 
 Alternatively, can you just spring for a newer video card?  (I know, 
 that feels like giving in, but if you don't need the latest, fanciest 
 thing then there should be something cheapish out there.  Ge4 cards seem 
 to be about ?20, assuming *they* are supported by nvidia of course).
 
 Final alternative, downgrade your driver back to what you had.  I 
 believe there is a portdowngrade but have never used it.  You can tell 
 portugrade never to upgrade that port (see HOLD_PKGS or similar in 
 /etc/pkgtools.conf) and probably keep a copy of the port directory and 
 driver around just in case.

Thanks for the suggestions, Alex. I decided to go with the nv driver as
I don't use the glx extensions any more.

I decided to reinstall xorg-libraries as the nvidia drivers fiddle
with them and after tweaking xorg.conf, I seem to be up and running
again.

Cheers,
Mark

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9dD1


pgpZIPeoZNNYk.pgp
Description: PGP signature


NVIDIA TNT2 woes

2005-06-29 Thread markzero
Oh the joys of binary drivers.

I awake from a peaceful slumber after a portupgrade to find that
I suddenly no longer have X. The playful and exciting words
dance across my colourless and tormented screen:

(WW) The NVIDIA RIVA TNT2 Model 64/Model 64 Pro GPU installed in
(WW)  this system is supported through the NVIDIA Legacy
(WW)  drivers. Please visit
(WW)  http://www.nvidia.com/object/unix.html for more
(WW)  information.  The 1.0-7667 NVIDIA driver will ignore this
(WW)  GPU.  Continuing probe... 
(EE) No devices detected.

The NVIDIA Legacy drivers magically fail to exist on the NVIDIA
site and there appears no be no port for them either.

Please advise, good sirs, of what this dweller of CrappyOldGPULand
should do.

Mark

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9dD1


pgpvG7YLmXtnP.pgp
Description: PGP signature


Re: epoch-calendar date(1) wizardry

2005-05-30 Thread markzero
On Mon, May 30, 2005 at 01:32:37PM +0300, Giorgos Keramidas wrote:
 On 2005-05-30 03:35, markzero [EMAIL PROTECTED] wrote:
  Hello,
  How may one pretty print an epoch timestamp using date(1)? The date
  manual page gives me a headache.
 
  Essentially, I have the timestamp in a file:
 
  $ cat t
  1117417465
 
   $ date -j -f '%s' 1117417465 '+%Y/%m/%d %T %z'
   2005/05/30 04:44:25 +0300
 
 The -j and -f options, when combined together, can help you convert
 practically any format that strptime(3) can read and parse to any time
 strftime(3) can print.

Sounds good.

I think the main problem was the fact that I had everything upside
down and back to front.

Cheers!
Mark

-- 
pgp: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9dD1


pgpHkApMQIvWX.pgp
Description: PGP signature


epoch-calendar date(1) wizardry

2005-05-29 Thread markzero
Hello,

How may one pretty print an epoch timestamp using date(1)? The date
manual page gives me a headache.

Essentially, I have the timestamp in a file:

$ cat t
1117417465

..and I want to print it in a standard UK format, such as:

  +%H:%M:%S %d/%m/%y

Anybody?

(before anybody screams Perl or C, I would rather stick to plain
 old sh for this).

Thanks,
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpeydrM35tIz.pgp
Description: PGP signature


Re: epoch-calendar date(1) wizardry

2005-05-29 Thread markzero
  How may one pretty print an epoch timestamp using date(1)? The date
  manual page gives me a headache.
  
  Essentially, I have the timestamp in a file:
  
  $ cat t
  1117417465
  
  ..and I want to print it in a standard UK format, such as:
  
+%H:%M:%S %d/%m/%y
 
 date -r $(cat t) +%H:%M:%S %d/%m/%y

Oh my, it's really that simple? I think I must have tried just about
everything ELSE as my twenty minutes of

  Failed conversion of ``1117417465'' using format ``%H:%M:%S %d/%m/%y''
  date: illegal time format

...suggest.

02:44:25 30/05/05

Thank you!

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpMG56Kx6uhV.pgp
Description: PGP signature


Re: set http port 80 to a no root user

2005-05-06 Thread markzero
 On Thu, 05 May 2005 16:23:38 +0200, in sentex.lists.freebsd.questions
 
 hello , i would like to know how can i set a permission to a non root user 
 to use the http public port 80 .

portacl is excellent for this purpose. I have been using it for some
time and it has never let me down.

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac-portacl.html

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpmoRDUe4UHv.pgp
Description: PGP signature


Re: discarded oversize frames

2005-04-19 Thread markzero
 Have you found a solution to this? I am having the same problems on a 
 machine very recently updated (cvsupped + buildworld on 4/14/2005):
 kernel.log:Feb 25 13:46:40 trinity kernel: rl0: discard oversize frame 
 (ether type 3db4 flags 3 len 8381  max 1514)
 kernel.log:Apr 10 14:27:37 trinity kernel: rl0: discard oversize frame 
 (ether type 5a84 flags 3 len 2614  max 1514)
 kernel.log:Apr 18 16:17:53 trinity kernel: rl0: discard oversize frame 
 (ether type 1867 flags 3 len 16941  max 1514)
 
 After the message, the machine becomes completely unresponsive and I 
 have to do a power-off, power-on reset.
 
 -Kyle

I recieved these messages a day before my unbranded rl0 died. It
didn't freeze my system but it did refuse to send/recieve packets...

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpogvycHtlIX.pgp
Description: PGP signature


Re: FreeBSD 5.3 and forcible unmounts

2005-04-19 Thread markzero
 Plug a USB mass-storage-type still camera, mount it, unplug it, and
 try to forcibly unmount it using 'umount -f'. The whole system hangs
 right away.
 
 Is it a known bug ?

I can confirm this. FreeBSD-5.3-RELEASE-p9.

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgp1AMPSiYpvp.pgp
Description: PGP signature


Lowest common denominator for buildworld/kernel

2005-04-12 Thread markzero
Hello,
I would like to set up a machine with which to build world and kernels
for an assortment of slightly different machines. The machines are
an assortment of Pentium IIs', IIIs' and AMD K6s'. What CPU type should
I build for in order to safely accomodate the slight differences? i386?

Also, as a side note, is there any better way to distribute the compiled
binaries and kernel than NFS mounts? I *really* don't get along with NFS...

Thanks,
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpqLnd1qs6DK.pgp
Description: PGP signature


Re: Lowest common denominator for buildworld/kernel

2005-04-12 Thread markzero
 Hello,
 I would like to set up a machine with which to build world and kernels
 for an assortment of slightly different machines. The machines are
 an assortment of Pentium IIs', IIIs' and AMD K6s'. What CPU type should
 I build for in order to safely accomodate the slight differences? i386?
 
 Also, as a side note, is there any better way to distribute the compiled
 binaries and kernel than NFS mounts? I *really* don't get along with NFS...
 
 Thanks,
 Mark
 
 
 I don't know what sort of accomodation you mean.  The binaries can all 
 be perfectly portable, or, at your option, you can put in various extra 
 options to optimize for your processor.  To tell you the trush, if you 
 don't play with the flags, then I see no problem with slight differences.

Ok, thanks for the affirmation. I was pretty sure that this would be the
case but as I'm not familiar with the build process under the hood, I
wasn't sure if the makefiles tweaked themselves implicitly depending on
the build platform. I'm glad this isn't the case, that would be quite a
pickle.

 ssh works great for a lot of applications that need to send products to 
 foreign lands ... it's the scp command, in particular, I mean.

ssh was the first thing that sprang to mind but it also raised some
further questions, like what exactly to copy. /usr/obj would obviously
have to go over but what about all the makefiles required for a 'make
installworld' etc? I wondered if I would end up just copying over
/usr/src entirely, which seems very innefficient.

Hmm, it's certainly something to think about.

Thanks,
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpurY6kCqWae.pgp
Description: PGP signature


Re: Lowest common denominator for buildworld/kernel

2005-04-12 Thread markzero
  ssh was the first thing that sprang to mind but it also raised some
  further questions, like what exactly to copy. /usr/obj would
  obviously have to go over but what about all the makefiles required
  for a 'make installworld' etc? I wondered if I would end up just
  copying over /usr/src entirely, which seems very innefficient.
 
  Hmm, it's certainly something to think about.
 
 
 What I have done to cover that situation is place /usr/obj and /usr/src 
 in their own 1.5GB partitions. Then, when you nfs_mount them on the 
 other system, they have the same path as when you did the build. 
 
 You don't need 3GB to cover the build but HDs are cheap and rebuilding a 
 slice is not. I have the kernel config file for each of the other 
 systems on the build machine. When you do a buildkernel, you can have 
 the build machine build the kernel for all of them at one time.

Veering slightly off topic now but how reliable/secure is NFS these
days? I stopped using it years ago as I got tired of the problems I used
to have with it (probably my own fault). Is there a decent, lightweight
distributed filesystem that's stable on FreeBSD? My main criteria are:

  1. Lightweight - small and simple is best.
  2. Cryptographically secure - we are very strict about cleartext
 protocols over the network here.

I have seen Coda in ports but it labels itself as 'experimental' and I'm
not really up for debugging my filesystem...

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgprvBTwyM7lF.pgp
Description: PGP signature


Re: Lowest common denominator for buildworld/kernel

2005-04-12 Thread markzero
On Wed, Apr 13, 2005 at 01:01:23AM +0100, markzero wrote:
 ssh was the first thing that sprang to mind but it also raised some
 further questions, like what exactly to copy. /usr/obj would
 obviously have to go over but what about all the makefiles required
 for a 'make installworld' etc? I wondered if I would end up just
 copying over /usr/src entirely, which seems very innefficient.

 Hmm, it's certainly something to think about.

A small filing cabinet at the back of the brain creaks open, rust falling from
its hinges. A piece of paper catches upon a passing breeze. It is pulled
gracefully upwards and as it arcs into the field of vision, it can be
seen to read:

  rsync-over-ssh

With the right permissions on /usr/src and /usr/obj, a pair of SSHv2
keys and Kens idea about disk slices, we could be onto a winning
solution!

Cheers,
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpyT2TbUB2kP.pgp
Description: PGP signature


Re: Any way to log all process launches?

2005-04-08 Thread markzero
 If you need more detailed information some patches at garage.freebsd.pl
 might be interesting - especially lrexec. It may be a bit outdated but
 it provides you with the information standard utilities don't.
 
 Michal

Thanks for the interesting link. How much of this is committed to the
tree (perhaps -CURRENT)? Quite a few of those patches seem to provide
zero-cost security (like the setgid crontab) and I for one would
certainly like to see them in FreeBSD in the future...

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpiJvySUzAWW.pgp
Description: PGP signature


Re: quick uname question

2005-03-30 Thread markzero
(accidentally didn't CC the list...)

 That's the counter of how many times you have recompiled the kernel.
 In this example you are running the default kernel that is installed
 from cd.

Actually, this is a fresh recompilation but it's the first (and
hopefully only) one of 5.3p6. Thanks for the info anyway, I've been
wondering what that actually meant for quite some time...

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpXO43T7G6MY.pgp
Description: PGP signature


quick uname question

2005-03-30 Thread markzero
$ uname -v
FreeBSD 5.3-RELEASE-p6 #0: Thu Mar 31 01:41:53 BST 2005
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/L05

What exactly does the #0 signify?

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpoQ3y827fBB.pgp
Description: PGP signature


openntpd UTC problem

2005-03-28 Thread markzero
Has anybody had any luck with getting OpenNTPD (net/openntpd) to work
with anything other than UTC? I'm on GMT and recently we moved into
daylight savings. As OpenNTPD has decided that I'm on UTC, I'm now
an hour out (which is causing a few problems, as you can probably
guess).

Any help would be appreciated,
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpQMFRWD6P3z.pgp
Description: PGP signature


Re: openntpd UTC problem

2005-03-28 Thread markzero
 On 2005-03-29, markzero scribbled these
 curious markings:
  Has anybody had any luck with getting OpenNTPD (net/openntpd) to work
  with anything other than UTC? I'm on GMT and recently we moved into
  daylight savings. As OpenNTPD has decided that I'm on UTC, I'm now
  an hour out (which is causing a few problems, as you can probably
  guess).
 
 It's Just Worked[tm] for me, on all three of my systems (OpenBSD
 3.6/3.7-current, FreeBSD 4.10-stable (yes, I know, but after tonight
 that installation will be history), and FreeBSD 5-STABLE). I'm in EST.
 Isn't there a setting for your timezone that configures whether your
 system clock is set to UTC?

Hmm, the closest I can get is to symlink /usr/share/zoneinfo/GMT with
/etc/localtime. I'm still an hour off though, as the ntpd isn't taking
daylight savings into consideration.

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpqX4n3AvWI3.pgp
Description: PGP signature


Re: Why not?

2005-03-15 Thread markzero
  I was under the impression that kernel.org was the authoritative source  
  for the Linux kernel.  What people are doing on the side was their own  
  project.  *shrug*  I could be wrong :-)
 
 kernel.org is the official source of straight vanilla linux, but no
 distros use vanilla linux, they all have tons of patchs applied to it,
 some more than others.  Even source code device drivers sometimes have
 trouble compiling with these heavily patch kernels.  Each distro has too
 worry about what security patches their version of the kernel needs.
 It's not nearly as clean as the way the BSDs do it.

Slackware Linux uses a vanilla kernel, it's famed for it. Interestingly
enough, you can use NetBSD pkgsrc on Slackware. It's probably the only
distro that's clean and plain enough for it to work on...

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgp1EVlQ24LvZ.pgp
Description: PGP signature


standard math lib question

2005-03-15 Thread markzero
Where on earth is double log(double) actually defined? I'm talking
about the one in /usr/include/math.h.

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpcsW14XlGLf.pgp
Description: PGP signature


Re: standard math lib question

2005-03-15 Thread markzero
 markzero wrote:
 Where on earth is double log(double) actually defined? I'm talking
 about the one in /usr/include/math.h.
 
 See /usr/src/lib/msun/src/w_log.c.  Or are you asking which library defines 
 that symbol?  It'd be in libm.a:
 
 6-sec# nm -g /usr/lib/libm.a | grep log
 i387_s_logb.o:
  D __arch_logb
  U __generic_logb
 0074 T __i387_logb
 006c T logb
 w_logf.o:
  U __ieee754_logf
  T logf
 w_log10f.o:
  U __ieee754_log10f
  T log10f
 w_log10.o:
  U __ieee754_log10
  T log10
 w_log.o:
  U __ieee754_log
  T log
  U ilogbf
  U ilogb
 [ ... ]

I was talking about the source, which you correctly pointed to.

Thank you!
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgphPYFylm8NA.pgp
Description: PGP signature


Re: feedback on a good DNS server

2005-03-10 Thread markzero
 Oh, and c) djbdns isn't Free or Open Source by any definition of 
 either phrase.  That's not important to some people, but others consider it 
 kind of important.

Dan has given explicit permission to read, compile, modify and use
the source code of djbdns. The only restriction is that you may not
distribute any modified code (enterprising people could modify and
distribute the source with deliberately placed bugs in order to try
to claim the djb 'Security Guarantee' - at least that's the theory).

http://cr.yp.to/distributors.html

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgppLEHvBV8dN.pgp
Description: PGP signature


Re: feedback on a good DNS server

2005-03-10 Thread markzero
  Dan has given explicit permission to read, compile, modify and use
  the source code of djbdns.
 
 From http://www.qmail.org/not-open-source.html:
 
 For a program to be open source, you must be able to, among other
  things, change the source and redistribute it. DJB prohibits
  distribution of modified code and so programs which are so-licensed are
  not open source.
 
 In other words, people who aren't the Free Software Foundation or OSI also 
 agree that Dan's license isn't an Open Source license.  As I said, though, 
 whether that's good, bad, or irrelevant is up to the administrator.  It's 
 just something that many people aren't aware of but would be interested in.

Good point.

I suppose it's also a matter of the definition of 'Open Source'. For me,
open source equates to 'I can read the code to see if it's trustworthy
and can compile it so I know that I got what I read' but you're right,
it doesn't pass the 'official' definition.

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpdK93RGWXnK.pgp
Description: PGP signature


Re: Installation instructions for Firefox somewhere?

2005-02-26 Thread markzero
 I'm currently struggling with the Xfce environment and I'd like to
 install Firefox, but neither the Firefox site nor anywhere else I've
 looked thus far has comprehensive installation instructions for the
 product on FreeBSD (or any flavor of UNIX, apparently). Is there a page
 somewhere that describes how it is done? The installer is complaining
 about a library that I don't have (libgtk-x11-2.0.so.0), even though I
 thought I had everything I needed.
 
 -- 
 Anthony

# pkg-add -r firefox

or

# cd /usr/ports/www/firefox  make install clean distclean

That's what ports and packages are there for, after all.

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpVl7gjpXtrJ.pgp
Description: PGP signature


Re: DSL modem recommendation

2005-02-23 Thread markzero
 What is your DSL provider, what telephone company are they using?
 Are you running bridged or ppp mode DSL?
 
 DSL modems all use proprietary implementations of the DMT protocol,
 while many will interoperate with different DSL providers and
 DSLAMS, not all will.
 
 Ted

Hi Ted, the relevant info:

ISP: Pipex UK - www.pipex.net
TelCo: British Telecom

I am currently connecting to them via PPPoA (I assume this is what
you're referring to, I'm not as knowledgeable as I'd like to be about
DSL).

Cheers,
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpels71s8CqU.pgp
Description: PGP signature


Re: DSL modem recommendation

2005-02-23 Thread markzero
 This is a really good universal combination.  Many DSL modems will
 work fine.  But there's 1 modem that I would strongly recommend
 in this instance over any other modem:
 
 Westell C90-36R516-01
 
 Why?  Here's why:
 
 1) These are dumb bridged modems so they aren't interfereing with
 your BSD box.
 
 2) Westell has updated firmware and a diagnostic utility that
 talks to the modem, and has a secret command key sequence that
 will tell all of the good line stats (signal to noise ratio,
 received and transmitted power, etc.) which are vital to
 troubleshooting.
 
 3) Since these modems were obsoleted and were used by Bell Atlantic,
 there are tons of them on the used market for very cheap.
 
 4) Other ISP's I've talked to have said these things are rock
 solid reliable.  I have never had one of them fail in service
 for any of our customers either.
 
 5) It has an honest-to-god Alcatel DSL chipset in it, not the
 globespan which is becoming more popular (primariarly because
 it's cheaper)
 
 Now, note the following: if you have a very spotty DSL line, then
 get the following:
 
 Westell B90-36R515
 
 NOT the B90-36R515-01!!!
 
 Why?  Because the 36R515 has a design flaw in it- it massively
 overexceeds the transmitted power allowable for DSL - this is
 why Bell Atlantic quickly switched over to the -01 model - that
 will sometimes allow you to punch though a crummy line and
 get a stable connection.  But the downside is it's DSP microcode
 is non-upgradable.  You don't want to use it unless you have to.
 
 Now because this is NOT a PPPoA modem, you must run PPP on your
 FreeBSD box.  The big advantage is that since your FreeBSD box
 is the PPP terminator - not the DSL modem/router - you get a
 legal public number on the ppp interface in the BSD box, which
 means if you want to set it up as a server your in business.
 
 The only possible problem is that these Westells were sold
 only in the US, they take 24 volt AC (NOT DC!) and come with a 24 volt
 AC adapter.  But, you can just go to any junk store and buy
 a 24 volt UK style AC adapter and cut off the useless US-style
 adapter from it's cord and solder the cord onto your adapter.
 (or use a voltage converter from 220-to-110)  The adapter is
 NOT AUTOSENSING so don't attempt to just plug into UK power
 or you will blow the modem up.
 
 The modem isn't particular about 50-60 hertz so no worries
 there.  I also don't think you would have a problem with 
 the UK/US phone line voltage difference either.
 
 You also will need to change the VPI/VCI setting to 0/38 it
 is normally 0/35, westell has a utility for that.
 
 If you are a bit sqeamish about this, then looking at the PIPEX
 recommendation page, go for a ZyXEL Prestige 630
 
 STAY AWAY from ANY dsl modem that does NOT have an ethernet
 jack on it!!!  Such as the USB speedtouches that Pipex
 was handing out for free!!  There's a reason they are free!!
 You can't pay people (who know anything) to take them!!!
 
 Ted

Thanks for the recommendations and the detailed info! I will
probably give both a try and I definitely not be touching those
sorry USB things (I've recently been trying to get one up and
running on my friends BSD box and have pretty much given up
in disgust).

I'll be trawling eBay within the hour. :)

Thanks again,
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpKm0G7MdFcn.pgp
Description: PGP signature


Re: Different OS's? Marketshare

2005-02-23 Thread markzero
 Is it possible to install multiple X servers on the same machine so that
 one can fire up whichever one strikes one's fancy at a given time?
 
 I don't see why not, although it'd probably be more common to simply
 kill one wm session and start another to save resources.  Maybe it's
 possible.  I don't know if, since you've just one DISPLAY (in theory, 
 anyhow)
 you would configure it.
 
 Hmm, just tested.  No can do, because just one DISPLAY.  Maybe some
 X guru has a solution.  GNOME on ttyv1, fluxbox on ttyv2, term on ttyv3
 etc., etc Would be pretty cool.
 

This is certainly possible. You need to start X via something other than
startx as you must manually set DISPLAY vars. I have run two X servers on
my machine many times - one running a local desktop environment and the
other running a WM from a remote box over SSH (for no particular reason
other than that it's fun).

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgp8ro58RVHFP.pgp
Description: PGP signature


Re: Different OS's? Marketshare

2005-02-23 Thread markzero
 This is certainly possible. You need to start X via something other than
 startx as you must manually set DISPLAY vars. I have run two X servers on
 my machine many times - one running a local desktop environment and the
 other running a WM from a remote box over SSH (for no particular reason
 other than that it's fun).
  
 
 I figured there was a way.  Most times there is.  I was thinking
 two Xservers, one monitor.  CTL-ALT-F2 is Desktop B, CTL-ALT-F3
 is desktop C, etc.  How 'bout that?
 
 Of course, I really have no idea *why*, either; but it does at
 least sound fun.
 
 Kevin Kinsey

Yes, that's it, except they were on F7 and F8... :)

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpNvl8fBuDBx.pgp
Description: PGP signature


DSL modem recommendation

2005-02-22 Thread markzero
Hello,

Could anybody recommend a good, solid DSL modem that is supported nicely
by FreeBSD? An internal modem would be preferred but I would consider
otherwise. My main requirements are stability and a lack of any kind of
external management (I want my box to be solely in control, not a
proprietary web or telnet interface).

I have suffered for far too long with an awful DSL router/firewall that
goes down at the slightest provocation and offers no real
authentication!

Cheers,
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpR0QTiHukTq.pgp
Description: PGP signature


Re: ssh key authentication

2005-02-18 Thread markzero
On Sat, Feb 19, 2005 at 11:27:03AM +1000, Timothy Smith wrote:
 i've followed the howto exactly and it still doesn't work. i don't know 
 wtf i'm doing wrong. here is the output i get in verbose mode
 
 the files i have in the remote host
 ls -l
 total 4
 -rw-r--r--  1 timothy  wheel  241 Feb 18 22:44 authorised_keys
 -rw-r--r--  1 timothy  wheel  621 Feb 19 11:12 authorised_keys2
 

You're going to kick yourself. It should be authorized keys, with a 'z'.

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpFh4u2cejY6.pgp
Description: PGP signature


Re: Electricity bill [was: Re: Leaving a Computer Running ?]

2005-02-07 Thread markzero
 * Erik Trulsson [2005-02-05 23:55 +0100]
   Also keep in mind that if you leave the computer running all the time
   it will show up on your electricity bill, so if you wish to save power
   you should shut down your computer over night.
 
 Given that your house needs to be warmed up (a presumption I think is 
 correct for Sweden as you appears to be sending from; it sure does for 
 Norway, I don't know about the OP), it does not matter where that heat 
 comes from. If your other heating is termostatically controlled, then 
 running your computer all night long uses no less electricity than leaving 
 your heating on. Eventually, all those kWhs ends up as heat. You might 
 just as well use it for something usefull in the way from electric to 
 thermic energy, and not just send your electrons through an electric 
 resistance for nothing (except heat-generation)!
 

Actually, I've found that five machines, each with two disks, onboard
graphics and sound, an average 700mhz P3 with a 250w power supply
haven't really made a dent on my electricity bill. In the summer of
last year, however, I bought an air conditioner and this added £40
(roughly $75) to my bill. I see I'm not the only one that thought of
using the servers AS the heating! 

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpG6wXSp08xX.pgp
Description: PGP signature


Re: Electricity bill [was: Re: Leaving a Computer Running ?]

2005-02-07 Thread markzero
  Since the computers are necessary for both work and play, I consider
  running them to be electricity wisely used.  I do turn the monitors off
  when I'm not home, but since they are all flat panels now, that
  represents only a trivial amount of electricity.
 
 That reminds me:
 Please also consider fire hazards!
 I have had a CRT-monitor catching on fire.

Of course, I forgot to mention that all the machines are connected to a
KVM switch arrangement - one monitor which is constantly off (emergency
console access only). The KVM switch arrangement is an exciting exercise
in spaghetti cable contortion, being two four port switches attached to
a two port switch. These switches should technically not be able to work
without a power supply but evidently they work just fine. I don't
question the arrangement, I just observe it from across the room. We get
along fine.

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpFu0k8tYCq1.pgp
Description: PGP signature


Re: favor

2005-02-04 Thread markzero
 In that case, this email is absolutely copyrighted by me (along 
 with ...  my recipie for coffee)

Hah! Bad move kiddo!

*slurp* *twitch*

I'll make a fortune! Hahaha...

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpnnQq0NmTBB.pgp
Description: PGP signature


Re: favor

2005-02-04 Thread markzero
 Actually, I have a question.  I'm in the middle of upgrading my 
 dataserver, and I'm building ports on ttyv2,35.  I have xdm 
 running on ttyv8.  I just finished installing wdm (on ttyv4) and 
 I edited /etc/ttys to run wdm on ttyv8 instead of xdm.  Is there 
 a way to reset ttyv8 so that it loads wdm without rebooting (or 
 otherwise mess up what I'm doing on the other v consoles)?
 
 Thanks,
 
 Mike
 

Have you tried just killing xdm? 


Otherwise, the handbook says that

# kill -HUP 1

will cause init to re-read /etc/ttys but as I've never needed to do this
I'm not sure if it will disrupt anything.

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpiRaAsJucI7.pgp
Description: PGP signature


Re: LAN chat server?

2005-01-31 Thread markzero
 Timothy Luoma wrote:
 If not Jabber, what else?
 
 You could give 'silc' a try. It's in the ports tree:
 http://www.freebsd.org/cgi/url.cgi?ports/net/silc-server/pkg-descr
 
 There are clients for most operating systems, both graphical and not.
 
 --Tim Erlin
 

I once used an IRC server for this purpose. It was hidden from the
outside world and could only be accessed via an SSH server:

   [ irc ]--[ ssh ]---[ fw ]-
 |
   [ lan ]  

I would recommend UnrealIRCd and Anope services (both are in ports).

Jabber is a good choice, the only downside being that there seems to be
a distinct lack of text-only clients.

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpbjjeg6ZWnH.pgp
Description: PGP signature


Re: having 1.5GB RAM I cannot allocate more than 512MB RAM in 4.10

2005-01-29 Thread markzero
  what's the output of ulimit -d?
 
 What's the trick to running ulimit?
 
 command not found yet whereis sez it is a shell builtin command.
 
 Jack
 

What about limits?

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpXZZaTvjCl5.pgp
Description: PGP signature


Re: having 1.5GB RAM I cannot allocate more than 512MB RAM in 4.10

2005-01-29 Thread markzero
 This is the output of my ulimit:
 
 #ulimit -a | grep data
 data seg size (kbytes, -d) 524288
 #
 
 So what is next?
 Is it possible to embed that information in the kernel? 
 Or, how is this information set by default? Is there any specific
 .conf file I should edit?
 
 Thank you all!

You'll want to change your default segment size in /etc/login.conf.
You'll need to re-generate the database after editing with cap_mkdb too. 

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgp7xUO3xDToy.pgp
Description: PGP signature


Re: BSD

2005-01-28 Thread markzero
 but what about:
 
 **BSD is a registered trademark of Berkeley Software Design, Inc. ?
 
 taken from www.bsd.org
 

I have also heard 'Berkeley Systems Derivative' but that doesn't make it
correct... :)

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpTFs5n4cGdb.pgp
Description: PGP signature


Xdm Securelevels revisited

2005-01-27 Thread markzero
Some time ago, I mused upon the possibility of running Xorg in a
securelevel  0 environment (and I forgot to thank Lowell Gilbert
for his advice, sorry!).

http://lists.freebsd.org/pipermail/freebsd-questions/2004-December/069141.html

I actually tried it on a test machine about five minutes ago and
hit a problem. If I specify securelevel 0 (raised to 1 automatically
in /etc/rc.conf, the securelevel is raised before xdm can start
which causes fireworks.

(getty repeating too quickly on port %s, sleeping)

Where would be the best place to raise the securelevel after xdm
has started? 

Thanks,
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpLV6U7HzSW4.pgp
Description: PGP signature


Re: Xdm Securelevels revisited

2005-01-27 Thread markzero
  securelevel is raised before xdm can start which causes fireworks.
 just a thought: if you raise the securelevel after xdm has started and it 
 dies, would you get fireworks again?
 

I'm leaving the text consoles open for that very reason. If xdm dies,
tries to restart (it will try every 30 seconds as init will sleep) I 
can drop to single user and disable xdm. The only problem with this is
that I won't then be able to get X back without rebooting to securelevel
-1.

Correct me if I am wrong but all the documentation seems to suggest that
the securelevel cannot be lowered even in single user mode?

I am relying on xdm to be stable, which it does seem to be (I have used
it at the default securelevel on other machines). 

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgph5xJLQOWE8.pgp
Description: PGP signature


Re: OpenGL + TNT2 + NVIDIA binary drivers

2005-01-27 Thread markzero
This is more of a followup for completeness than anything.

I reinstalled the driver but this time from ports. This fixed the GLX
problem but brought up the new error:

agp.ko detected, aborting setup of nvagp

Luckily, this was documented and it was a simple matter of recompiling
the kernel without agp.

I'm now sitting here with an up-to-date box, xscreensaver and a lot of
smoothly bouncing cows.

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpnef7WPpDzE.pgp
Description: PGP signature


Re: One-line global string replace in all files with sed (or awk?)

2005-01-27 Thread markzero
 My thanks to all who replied.  I ended up using this form (I don't
 recall who suggested it):
 
 find . -type f | xargs sed -i '' -e 's/foo/bar/g'
 
 One problem, though:  It appears that sed touches every file, resetting
 the last modification time, even if it didn't actually change anything.
 This reset the last modification dates for every file on my site, which
 wasn't much fun.  Is there another command I could put between find and
 xargs that would filter only the names of files containing the string?
 (grep would do it, but grep outputs the lines found to stdout, so that
 won't do.)
 

Completely off the top of my head:

#!/bin/sh
 
 for i in `find $PWD -type f`;   
 do
grep foo $i 1/dev/null;

if [ $? -ne 0 ] then
   #do something with sed here
fi
done;

Not *exactly* a one liner but it *could* be if you want to make it less
readable...

:)

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpJbOKCUbxmN.pgp
Description: PGP signature


Re: One-line global string replace in all files with sed (or awk?)

2005-01-27 Thread markzero
 Hmm ... maybe I found it:
 
 grep -R -l xxx /www/htdocs | xargs sed -i '' -e 's/xxx/yyy/g'
 
 Does that look okay?  Seems to work in my test.
 
 -- 
 Anthony
 

Looks good!

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgp3P5CmbgLH3.pgp
Description: PGP signature


Re: One-line global string replace in all files with sed (or awk?)

2005-01-27 Thread markzero
   find . -type f | xargs grep -l 'foo' | \
   xargs sed -i '' -e 's/foo/bar/g'
 
 When passed the -l option (this is a lowercase 'EL'), it will not print
 the matched lines.  Only the name of the files that *do* match.  Then,
 once you have a list of files that really do match with 'foo' as a
 pattern, you can xargs sed on the list to substitute whatever you want :-)
 

Egh, I forgot about -l. There's me piping things into the bit bucket.

*shuffles off into the shadows*

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgppIFjAziZMx.pgp
Description: PGP signature


OpenGL + TNT2 + NVIDIA binary drivers

2005-01-26 Thread markzero
Hi, I've scoured the mailing lists and Google and can't seem to find a
solution to this little problem. I'm using the binary nvidia drivers on
my old 32mb TNT Riva 64 and from the framerates I'm getting from
xscreensaver, I think it's safe to assume that I'm not getting any
acceleration!

I installed the drivers as per the included documentation and set things
up as they suggested.

X.org gives this error on startup:

(EE) NVIDIA(0): Failed to load GLX

The relevant sysctls say:

hw.nvidia.agp.card.rates: 4x 2x 1x 
hw.nvidia.agp.card.fw: not supported
hw.nvidia.agp.card.sba: not supported
hw.nvidia.agp.card.registers: 0x1f07:0x
hw.nvidia.agp.status.status: disabled
hw.nvidia.agp.status.driver: n/a (unused)
hw.nvidia.agp.status.rate: n/a (disabled)
hw.nvidia.agp.status.fw: n/a (disabled)
hw.nvidia.agp.status.sba: n/a (disabled)
hw.nvidia.version: NVIDIA FreeBSD x86 NVIDIA Kernel Module  1.0-6113  Mon Aug  
2 16:08:32 PDT 2004
hw.nvidia.registry.EnableVia4x: 0
hw.nvidia.registry.EnableALiAGP: 0
hw.nvidia.registry.NvAGP: 1
hw.nvidia.registry.EnableAGPSBA: 0
hw.nvidia.registry.EnableAGPFW: 0
hw.nvidia.registry.SoftEDIDs: 1
hw.nvidia.registry.Mobile: 4294967295
hw.nvidia.registry.ResmanDebugLevel: 4294967295
hw.nvidia.registry.FlatPanelMode: 0
hw.nvidia.cards.0.model: RIVA TNT2 Model 64/Model 64 Pro
hw.nvidia.cards.0.irq: 16
hw.nvidia.cards.0.vbios: ??.??.??.??.??
hw.nvidia.cards.0.type: AGP

My X.org config says:

Section Device
   Option  NvAGP 2   #try OS agp, fall back to nvagp
   Identifier  Card0
   Driver  nvidia
   VendorName  nVidia Corporation
   BoardName   NV5M64 [RIVA TNT2 Model 64/Model 64 Pro]
   BusID   PCI:2:0:0
EndSection

I have tried setting NvAGP to both 1 and 2 but neither makes any
difference. kldstat says:

d Refs AddressSize Name
1   11 0xc040 6b524c   kernel
22 0xc0ab6000 1fb38linux.ko
31 0xc0ad6000 2890 mac_seeotheruids.ko
41 0xc0ad9000 4ad9c8   nvidia.ko
5   14 0xc0f87000 5d7f0acpi.ko
61 0xc1bb6000 2c000pf.ko

So it hasn't loaded agp.ko (the documentation says that this is correct)
and nvidia.ko is obviously loaded.

I keep finding references to this problem but no definite resolution.
Does anybody have any ideas about what to try next?

Thanks,
Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgp642Q2spCfQ.pgp
Description: PGP signature


Re: OpenGL + TNT2 + NVIDIA binary drivers

2005-01-26 Thread markzero
 What about in Section Module - Load  glx like:
 
 Section Module
 Load  dbe
 Load  dri
 Load  extmod
 Load  glx
 Load  record
 Load  xtrap
 Load  freetype
 Load  type1
 EndSection
 

Yes, I already have that...

Section Module
Load  dbe
Load  dri
Load  extmod
Load  glx
Load  record
Load  xtrap
Load  freetype
#Load speedo
Load  type1
EndSection

Unfortunately, the log files aren't really much help:

# grep -B 5 -A 5 Failed /var/log/Xorg.0.log
(II) NVIDIA(0): NVIDIA 3D Acceleration Architecture Initialized
(II) NVIDIA(0): Using the NVIDIA 2D acceleration architecture
(==) NVIDIA(0): Backing store disabled
(==) NVIDIA(0): Silken mouse enabled
(II) Loading extension NV-CONTROL
(EE) NVIDIA(0): Failed to load GLX
(==) RandR enabled
(II) Initializing built-in extension MIT-SHM
(II) Initializing built-in extension XInputExtension
(II) Initializing built-in extension XTEST
(II) Initializing built-in extension XKEYBOARD

There appears to be no earlier indication as to why it would fail to
load GLX.

--
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpzHSLCbDHjL.pgp
Description: PGP signature


Re: Any way to get an audio representation of packet flow?

2005-01-25 Thread markzero
 D'oh...should be:
 
 tcpdump -nl icmp |perl -e '$|=1;while(){print \a;}'
 
 -Stephen


Great stuff. I can see some exciting things emerging upon piping this
into pure data!

http://www-crca.ucsd.edu/~msp/software.html

Perhaps it's time to dig out my soundcard and put it in my desktop
machine.

Cheers,
Mark


pgp3QvpIAu9On.pgp
Description: PGP signature


Re: Cheap, reliable mass storage

2005-01-24 Thread markzero
  To clarify, I'm looking for long-term reliability, low cost and large
  space rather than high performance. I have a budget of around $600-900
  to spend but I would not have to buy a PC as I have plenty of old
  machines (average spec: Intel P3 700mhz) laying around that would=20
  probably be up to the job.
 
 You can buy lots of storage for $900...  How much storage do you need?
 
 One way to do it.  Take one machine, get 2 large drives for the data, one
 smaller drive for the OS and a CD-ROM drive.  Send all the data to the
 first data drive and configure OS to sync second drive every 24 hours.
 
 If you have a pranoia about safety of the data on one machine, buy
 external drive enclosure.  Attach external drive only when it is time
 to run a backup.

Oops, that's quite an important bit of information to miss isn't it. I
was hoping to grab around 1TB of storage, but I'm not sure how likely
this is with the current budget. I was thinking of buying 4 x 300gb
drives and a RAID card from Promise. I would then do as you'd advised
and put a small 4gb drive in the machine with a mini-install of FreeBSD.

Do you think there would be any problem with this? I'd like to get all
issues ironed out before I go off spending... :)

Mark


pgpX8E4ZCfrvq.pgp
Description: PGP signature


Cheap, reliable mass storage

2005-01-23 Thread markzero
Hi, this is possibly the most open question posted here to date. :)

I'm looking to build/buy a large, low-access, long term storage
solution for my home. I'm a musician primarily so my files mostly
consist of lumps of audio. Ideally, I would like to be able to rsync
files to it, so I think I'd probably be looking at a cheap old box
with a stack of large hard disks and some kind of RAID controller, but
can anybody suggest anything better?

To clarify, I'm looking for long-term reliability, low cost and large
space rather than high performance. I have a budget of around $600-900
to spend but I would not have to buy a PC as I have plenty of old
machines (average spec: Intel P3 700mhz) laying around that would 
probably be up to the job.

Obviously, I'd like it to be running FreeBSD...

All suggestions welcome!

Mark


pgp7LH2qY8Uca.pgp
Description: PGP signature


Re: 300GIG SATA drives

2005-01-22 Thread markzero
 These Maxtor drives may well be flaky, but they are very widely
 available and frequently installed in commodity machines. 

Maxtor drives are flaky?

Oh dear.

How flaky?
Mine is starting to get a bit noisy.

Mark


pgpvnwXSK9tOO.pgp
Description: PGP signature


Re: Formal question.

2005-01-18 Thread markzero
 Hello!

Good evening!

  My name is Tadeusz Polak and I from Poland. I'm studying the Informatics at 
 www.pjwstk.edu.pl and I'm interested in publishing of the informations and 
 advices about FreeBSD Operational System as a website. I'd like to ask about 
 the publishing rights of the logo of the FreeBSD.
 1. May I make some visual modifications of appearance of this logo on my own 
 and used only on this website ?
 2. What your requirements to be approved by you to have your official support 
 and permission to do it ?

The BSD daemon logo copyright is held by Marshall Kirk McKusick, details
can be found here:

http://www.freebsd.org/copyright/daemon.html

As far as I know, he will not have any objection to you using the logo
for your purposes, but obviously you should ask him.

Mark

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpPchlbtZcqy.pgp
Description: PGP signature


Re: Mac/FreeBSD shared drive, which filesystem to choose

2005-01-12 Thread markzero
 I have an external firewire drive that I would like to use both with my 
 Powerbook (Mac OS X 10.3.7) and FreeBSD 5.3.
 
 Ideally I would like read/write access from both machines.

Both OSs support UFS. Mac OS X gives you the option to format your drive
as UFS on installation but recommends HFS+.

-- 
PGP: http://www.darklogik.org/pub/pgp/pgp.txt
B776 43DC 8A5D EAF9 2126 9A67 A7DA 390F DEFF 9DD1


pgpHvHlFYSJhS.pgp
Description: PGP signature