Re: QEMU CPU cores not showing up

2013-11-15 Thread InterNetX - Robert Garrett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Then as Stated you are already vulnerable to much more than interrupt
remapping will fix. So dont worry about it.

On 11/14/2013 06:00 PM, Giancarlo Razzolini wrote:
 Em 14-11-2013 14:18, InterNetX - Robert Garrett escreveu:
 The issue you outlined below is not an openbsd issue, this is a
 kvm issue. and depends greatly on the version of linux/whatever
 you are using. The interrupt remapping you are talking about is
 either a bios issue (likely) or an issue with the hypervisor.
 
 it sounds like to me you are using or attempting to use SRIOV.
 
 all of the issues that you mentioned are still relevent even
 with safe interrupts, as well as several you did not mention.
 Robert,
 
 I do believe it is a specific issue with OpenBSD, because using
 the same hypervisor I can do pci passthrough, using the same
 versions, hardware, etc, to other operating systems using interrupt
 remapping.
 
 I do have indeed SRIOV enabled on my bare metal bios. The thing is 
 that kvm specifically warns me that the guest do not support
 interrupt remapping, when using openbsd only. As I told before, it
 is not a problem for me right now, since I enable the unsafe
 interrupt assignment and the OS works normally.
 
 Also, David, thanks for pointing out the patch, because since I 
 applied it, I did not experienced anymore lockups (so far). I am
 betting it was indeed the problem.
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJShdk4AAoJEMrvovfl62c8DVEIALQmLbVLlnEsayXgpvCNiO2g
gWF0+L4haMA7Rhf7FvRqOpXxCcZVhxk5ocEvSHLnyG1iYfh3tlnq1ts8rk9dfSHT
DP1QA0ReXvVJKW2r8UcLVfI62H6gA93TiFZWLzFioO6NZExKlfe3DCWDg3scBqg3
dZFE7fcQW5iUjOdKJzw79DBTN1FlQUxeZ5EAGXN19XZAezbHP08KmmyAkil7jvqf
DRFVRT7xnh0Vqa5H6Iz4KrQcasIPiLnt6ggxRzCxXL2EKu8K5Htwc9/LD4Jynz6y
YVPKEPrL0lJ03ocb+U47vSynTfFWjDbOdKeIikqhUFDccfwTWUtefSVGmTzzdgQ=
=tyuk
-END PGP SIGNATURE-



Re: interruptions

2013-11-15 Thread Alexandre Ratchov
On Fri, Nov 15, 2013 at 12:35:22AM +0400, Alexander Pakhomov wrote:

 dd unenc sp:
 sys 17% int 9%
 164 MB/s
 
 dd_unenc_mp
 30 sys 50 int
 200 MB/s

this roughly shows that a lot of CPUs time is wasted in interrupts
in the MP case, probably spinning to grab the kernel_lock held by
the other CPU.

 dd_enc_sp
 100 sys 0 inter
 54 MB/s
 
  dd_enc_mp 
 60x4 sys 80 int
 42 MB/s
 

same waste of CPU time, to the point that using two CPUs even
decreases the performace.

[...]

there are use-cases where a single CPU works better than multiple
CPUs. I don't know how these block devices work though.

thank you for your tests.

-- Alexandre



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Marc Espie
On Fri, Nov 15, 2013 at 07:39:41AM +0100, Tomas Bodzar wrote:
 On Fri, Nov 15, 2013 at 6:01 AM, za...@gmx.com wrote:
 
  Hi
 
  I was thinking of dual booting OpenBSd and Windows 8.1. Has anyone managed
  to do that?
  I suppose I would have to install Windows first, and then OpenBSD.
  Does the OpenBSD installation include a boot manager such as GRUB?
  I have experience setting up dual booting with GRUB, when installing
  Linux. Is it ok if I follow the same procedure with OpenBSD? If not, how
  would you advise me to go about it?
 
 
 
 Why don't you follow official guide mentioned zillion of times everywhere
 around here?
 http://www.openbsd.org/faq/faq4.html#Multibooting

Did you actually read that ? notice how it stops with Windows Vista/7 ?

 There's everything you need so best is to start with FAQ, then dive in to
 man pages (like man afterboot will be pointed to you after install anyway).

Nope, not really, not yet.

For instance, good luck if you want to install everything on one
single disk, and that disk is large enough.

We don't have UPT support yet, for instance...



Migrating users from one machine to another

2013-11-15 Thread John Tate
I want to migrate users from one machine to another, I was hoping
someone had a script. I basically want to copy every user with a UID
= 1000 and their password to the new system. I have copied their home
directories with rsync, so it would be good if it could also chmod the
permissions back.

-- 
www.johntate.org



Re: BGP changes to support CARP better

2013-11-15 Thread Andy

On 12/11/13 05:48, Chris Cappuccio wrote:

Adam Thompson [athom...@athompso.net] wrote:

Well, you could - perhaps - flip this on its head.  Instead of changing BGP,
what about forcing one router to be the master (via advbase/advskew),
advertising a lower BGP preference (probably by using both localpref for
iBGP and path prepending for eBGP) from the slave, using pfsync (default,
not defer) to sync the state tables, and simply assuming that if the slave
becomes the master it's because the master is dead, so losing a few packets
isn't the end of the world?

If you're talking about eBGP..or even iBGP for that matter, an interesting
way to go could be:

Two BGP sessions from different IPs (no CARP)
BGP next-hop pointing to CARP-protected IP


Hi Chris,
This sounds good.. Could you clarify further?

Setup eBGP to the Transit router on both OBSD boxes using physical IPs, 
and iBGP between the OBSD routers. Got that working fine without 
'depends on' (don't want the BGP teardown/setup delay.


How are you configuring the BGP next-hop to the CARP IP??

Hi Adam,
The problem is to do with ensuring inbound packets always go to the CARP 
master.
'match to X.X.X.161 set nexthop X.X.X.162' Wouldn't this only mean that 
the outbound packets would egress to the transit via the CARP IP? Its 
the inbound control that's needed.


I was thinking about using ifstatd to dynamically change the MED / path 
prepending based on the CARP status, rather than trying to force which 
router is master. Experience says that fail-overs happen for many 
reasons (probably once every couple of months), but so far never because 
the master is actually dead, which means BGP will pretty much always be 
left running on the old master (unless ifstatd does something to it)..


I just can't seem to figure out a true clean way of doing this without 
configuring multiple BGP attributes in OpenBGPd based on CARP status :(


PS; For inbound path control which would you recommend? MED or padding 
the AS path? I.e. is one potentially more responsive than another..


Cheers, Andy.



Re: QEMU CPU cores not showing up

2013-11-15 Thread Duncan Patton a Campbell
On Thu, 14 Nov 2013 09:51:04 -0700
Theo de Raadt dera...@cvs.openbsd.org wrote:

 Then we'll be not be hearing from you again, I assume.
 
  I am not putting up with this bulling shit.  :)
  
  --
  Bruno Delbono
  | Cognitive Researcher 

Doubtless.

Dhu

  - Human Behavioural Project
  | Real Sociedad Espa__ola De Antropolog__a
  | ___: +1 855 253 5436 ___: +1 424 354 4700
 


-- 
Ne obliviscaris, vix ea nostra voco.



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Dmitrij D. Czarkoff
Marc Espie said:
 On Fri, Nov 15, 2013 at 07:39:41AM +0100, Tomas Bodzar wrote:
  On Fri, Nov 15, 2013 at 6:01 AM, za...@gmx.com wrote:
  
   Hi
  
   I was thinking of dual booting OpenBSd and Windows 8.1. Has anyone managed
   to do that?
   I suppose I would have to install Windows first, and then OpenBSD.
   Does the OpenBSD installation include a boot manager such as GRUB?
   I have experience setting up dual booting with GRUB, when installing
   Linux. Is it ok if I follow the same procedure with OpenBSD? If not, how
   would you advise me to go about it?
  
  
  
  Why don't you follow official guide mentioned zillion of times everywhere
  around here?
  http://www.openbsd.org/faq/faq4.html#Multibooting
 
 Did you actually read that ? notice how it stops with Windows Vista/7 ?

I was planning to send a diff - I dualboot OpenBSD and Windows 8.1, and
all the steps to set it up are the same. The only thing to keep in mind
about Windows 8+ is that it initializes graphics if Windows is chosed as
default OS, which takes quite a lot of time.

I didn't try GPT setup, though I believe it could be done easily
regardless lack of GPT support in OpenBSD. If there is enough interest,
I could make a go for GPT Windows and OpenBSD dualboot and send a diff
for FAQ if my idea works out.

-- 
Dmitrij D. Czarkoff



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Tomas Bodzar
On Fri, Nov 15, 2013 at 10:47 AM, Marc Espie es...@nerim.net wrote:

 On Fri, Nov 15, 2013 at 07:39:41AM +0100, Tomas Bodzar wrote:
  On Fri, Nov 15, 2013 at 6:01 AM, za...@gmx.com wrote:
 
   Hi
  
   I was thinking of dual booting OpenBSd and Windows 8.1. Has anyone
 managed
   to do that?
   I suppose I would have to install Windows first, and then OpenBSD.
   Does the OpenBSD installation include a boot manager such as GRUB?
   I have experience setting up dual booting with GRUB, when installing
   Linux. Is it ok if I follow the same procedure with OpenBSD? If not,
 how
   would you advise me to go about it?
  
 
 
  Why don't you follow official guide mentioned zillion of times everywhere
  around here?
  http://www.openbsd.org/faq/faq4.html#Multibooting

 Did you actually read that ? notice how it stops with Windows Vista/7 ?


It stops there because most probably devs were not in touch with Win 8+ to
try it, but it works exactly as described for Win 7


  There's everything you need so best is to start with FAQ, then dive in to
  man pages (like man afterboot will be pointed to you after install
 anyway).

 Nope, not really, not yet.

 For instance, good luck if you want to install everything on one
 single disk, and that disk is large enough.

 We don't have UPT support yet, for instance...



Yeah, having machine which is able to boot good old BIOS and not UEFI only
is first thing needed and for the disk size, well most of the laptops under
250GB, newer ones like 1TB, but those mostly some cheap machines have
problems to run anything outside of Win/Lin and even those a lot of times
with some issues. Reader was warned on start of that chapter that it's not
easy task to do multiboot :-)



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Dmitrij D. Czarkoff
Dmitrij D. Czarkoff said:
  Did you actually read that ? notice how it stops with Windows Vista/7 ?
 
 I was planning to send a diff - I dualboot OpenBSD and Windows 8.1, and
 all the steps to set it up are the same. The only thing to keep in mind
 about Windows 8+ is that it initializes graphics if Windows is chosed as
 default OS, which takes quite a lot of time.

Here is the patch for FAQ. My English isn't particularly good, so please
fix as needed.

I'm not particularly sure 8.1 is worth mention, as Windows 8.1 relates
to Windows 8 the same way Windows 7 Service Pack 1 relates to Windows 7.
I included it just because of this question here.


Index: faq/faq4.html
===
RCS file: /var/cvs/www/faq/faq4.html,v
retrieving revision 1.331
diff -u -p -r1.331 faq4.html
--- faq4.html   7 Nov 2013 00:08:45 -   1.331
+++ faq4.html   15 Nov 2013 05:00:40 -
@@ -2555,7 +2555,7 @@ For those who find manual configuration 
 a href=http://neosmart.net/dl.php?id=1;EasyBCD/a provides a GUI
 alternative.
 
-h3Windows 7/h3
+h3Windows 7, 8, 8.1/h3
 
 p
 Microsoft has enhanced BCD since releasing Vista to allow multiple
@@ -2597,6 +2597,14 @@ The operation completed successfully.
 
 C:\Windows\system32
 /pre/blockquote
+
+p
+Note: starting with Windows 8 Microsoft changed the boot process so that if
+Windows is selected as default boot option, bootloader loads graphical
+touch-capable boot menu, which takes much more time to start.  Conversely, if
+OpenBSD is selected as default boot option, the classic console
+keyboard-driven menu is presented to the user.  Default option may be set in
+graphical boot menu itself.
 
 h3Other boot loaders/h3
 

-- 
Dmitrij D. Czarkoff



Re: Migrating users from one machine to another

2013-11-15 Thread Nick Holland
On 11/15/13 05:10, John Tate wrote:
 I want to migrate users from one machine to another, I was hoping
 someone had a script. I basically want to copy every user with a UID
= 1000 and their password to the new system. I have copied their home
 directories with rsync, so it would be good if it could also chmod the
 permissions back.
 

not sure why you need a script...
The exact details depends on what is different between the systems
currently and desired to be different ultimately.

Start with the old /etc/master.passwd file, fix things that are missing,
remove things you don't want, copy it over and and run pwd_mkdb.  If the
starting and ending machines are supposed to be identical, no fixing
should be needed.

Nick.



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Marc Espie
On Fri, Nov 15, 2013 at 01:31:49PM +0100, Tomas Bodzar wrote:
 
On Fri, Nov 15, 2013 at 10:47 AM, Marc Espie [1]es...@nerim.net
wrote:
 
On Fri, Nov 15, 2013 at 07:39:41AM +0100, Tomas Bodzar wrote:
 On Fri, Nov 15, 2013 at 6:01 AM, [2]za...@gmx.com wrote:

  Hi
 
  I was thinking of dual booting OpenBSd and Windows 8.1. Has anyone
managed
  to do that?
  I suppose I would have to install Windows first, and then OpenBSD.
  Does the OpenBSD installation include a boot manager such as GRUB?
  I have experience setting up dual booting with GRUB, when
installing
  Linux. Is it ok if I follow the same procedure with OpenBSD? If
not, how
  would you advise me to go about it?
 


 Why don't you follow official guide mentioned zillion of times
everywhere
 around here?
 [3]http://www.openbsd.org/faq/faq4.html#Multibooting
 
  Did you actually read that ? notice how it stops with Windows
  Vista/7 ?
 
It stops there because most probably devs were not in touch with Win 8+
to try it, but it works exactly as described for Win 7

*SO WHAT* ?
Reread the original question:
 I was thinking of dual booting OpenBSd and Windows 8.1. Has anyone
 managed to do that?

It is a very specific question. There is *no answer* to that *specific*
question in the FAQ.

Your answer:
 Why don't you follow official guide mentioned zillion of times
 everywhere  around here?

is not nice at all, and completely unwarranted! the faq doesn't answer
that specific question, right now!

Yes, newcomers get flamed regularly around there. But *not without
justification*. Which is what you just did.

You could point the guy at the FAQ, with caveats since the FAQ *doesn't
cover his specific case*.  But your way of phrasing your answer is not
a polite way to put it, and it's completely unjustified !



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Dmitrij D. Czarkoff
Marc Espie said:
 You could point the guy at the FAQ, with caveats since the FAQ *doesn't
 cover his specific case*.  But your way of phrasing your answer is not
 a polite way to put it, and it's completely unjustified !

FAQ never covers one's specific case - it covers general case and has to
be applied to the situation. Windows 7 instructions work for Windows 8,
and before asking on mailinglist OP should have tried it. If it failed,
his query should have been:

  I tried to set up dualbooting Windows 8.1 with OpenBSD following the
  advice for Windows 7 from FAQ 4.9, but at the step *N* (command *cmd*)
  it failed. Did anyone have success with setting up Windows 8 and
  OpenBSD to play together in dualboot?

Instead we got a general query *before* any action.

Keep in mind that potential risk boiled down to wasted space on the hard
drive, which could be easily reclaimed for OS the OP would prefer if
dualboot was impossible.

I see no way to defend OP against lack of proper research allegation.

-- 
Dmitrij D. Czarkoff



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Peter Hessler
On 2013 Nov 15 (Fri) at 07:01:35 +0100 (+0100), Dmitrij D. Czarkoff wrote:
:I see no way to defend OP against lack of proper research allegation.

It would be nice though, if people would stop actively being dicks.  


-- 
Anybody who doesn't cut his speed at the sight of a police car is
probably parked.



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Dmitrij D. Czarkoff
Peter Hessler said:
 On 2013 Nov 15 (Fri) at 07:01:35 +0100 (+0100), Dmitrij D. Czarkoff wrote:
 :I see no way to defend OP against lack of proper research allegation.
 
 It would be nice though, if people would stop actively being dicks.  

When I only came to OpenBSD, my dislike for being slapped in public was
a great motivating factor for doing my research before posting. In fact
I owe some of my documentation mining skills to the practice you call
actively being dicks, and thus I'm not so sure this practice should be
regarded as a downside of this list.

That's my personal experience, your mileage may vary.

-- 
Dmitrij D. Czarkoff



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread latincom
On Thu, November 14, 2013 10:01 pm, Dmitrij D. Czarkoff wrote:
 Marc Espie said:
 You could point the guy at the FAQ, with caveats since the FAQ *doesn't
 cover his specific case*.  But your way of phrasing your answer is not
 a polite way to put it, and it's completely unjustified !

 FAQ never covers one's specific case - it covers general case and has to
 be applied to the situation. Windows 7 instructions work for Windows 8,
 and before asking on mailinglist OP should have tried it. If it failed,
 his query should have been:

   I tried to set up dualbooting Windows 8.1 with OpenBSD following the
   advice for Windows 7 from FAQ 4.9, but at the step *N* (command *cmd*)
   it failed. Did anyone have success with setting up Windows 8 and
   OpenBSD to play together in dualboot?

 Instead we got a general query *before* any action.

 Keep in mind that potential risk boiled down to wasted space on the hard
 drive, which could be easily reclaimed for OS the OP would prefer if
 dualboot was impossible.

 I see no way to defend OP against lack of proper research allegation.


I think that none should defend the OP, it is a huge problem with FAQ,
because they are oriented to people who know/understand OpenBSD.

As example, i have used ftp without ftp-proxy; because i am not able to
understand how to configure it; there is not a clear explanation in FAQ,
and the few references, are not enough to make it correctly. The point
probably is that its configuration is so simple that it is not reflected
in the FAQ. But, for new users, it is very important to know this
unimportant information, and it is usually the case with FAQ; that
Unimportant information are omitted.

Thanks.

PS:
If it were possible, i am able to help with it. I can not help in other way!


-- 



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Kirill Bychkov
On Fri, November 15, 2013 10:01, Dmitrij D. Czarkoff wrote:
 Marc Espie said:
 You could point the guy at the FAQ, with caveats since the FAQ *doesn't
 cover his specific case*.  But your way of phrasing your answer is not
 a polite way to put it, and it's completely unjustified !

 FAQ never covers one's specific case - it covers general case and has to
 be applied to the situation. Windows 7 instructions work for Windows 8,
 and before asking on mailinglist OP should have tried it. If it failed,
 his query should have been:

I can't agree with that. You can test something not in FAQ if you are sure it
will make no harm to your system. Dance with bootloaders and partition
managers could lead to catastrophe if you make an error. So I think OP is
quite right for asking questions than blindly using algorithm for multibooting
with Win7.
We all know, than M$ always inventing new traps for alternative OS. And their
boot process organization is one of that traps.
My 0.05RUR


   I tried to set up dualbooting Windows 8.1 with OpenBSD following the
   advice for Windows 7 from FAQ 4.9, but at the step *N* (command *cmd*)
   it failed. Did anyone have success with setting up Windows 8 and
   OpenBSD to play together in dualboot?

 Instead we got a general query *before* any action.

 Keep in mind that potential risk boiled down to wasted space on the hard
 drive, which could be easily reclaimed for OS the OP would prefer if
 dualboot was impossible.

 I see no way to defend OP against lack of proper research allegation.



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Marc Espie
On Fri, Nov 15, 2013 at 07:01:35AM +0100, Dmitrij D. Czarkoff wrote:
 Marc Espie said:
  You could point the guy at the FAQ, with caveats since the FAQ *doesn't
  cover his specific case*.  But your way of phrasing your answer is not
  a polite way to put it, and it's completely unjustified !
 
 FAQ never covers one's specific case - it covers general case and has to
 be applied to the situation. Windows 7 instructions work for Windows 8,
 and before asking on mailinglist OP should have tried it. If it failed,
 his query should have been:
 
   I tried to set up dualbooting Windows 8.1 with OpenBSD following the
   advice for Windows 7 from FAQ 4.9, but at the step *N* (command *cmd*)
   it failed. Did anyone have success with setting up Windows 8 and
   OpenBSD to play together in dualboot?

Give the poster the benefit of the doubt !

His question was not answered by the FAQ. I would never *ever* point somebody
to a document when the answer to his question was *not* in the document.

(I've been known to lurk in misc@ just so I could fix Xr in manpages and
whatnot so that next time, people have no excuse).

 Instead we got a general query *before* any action.
 
 Keep in mind that potential risk boiled down to wasted space on the hard
 drive, which could be easily reclaimed for OS the OP would prefer if
 dualboot was impossible.

Oh really ? you've never managed to put an OS out of commission by trying
to multiboot ? you've never had a so-called install program just reclaim
all of your hard-drive ?

esp. with Windows where it can be *very* tiresome and difficult to track
all the pieces you need to reinstall (especially with recent OEM stuff
which does not even provide you with any boot media!)


I'll put it another way: STOP SCARING NEWCOMERS FROM ASKING LEGITIMATE
QUESTIONS!

If it's in the faq, and easy to find, then *FINE*, flame away.

But if it's not, SHUT THE FUCK UP, or go improve the faq.

I want to be able to keep skimming over misc@ and figure out
difficulties newcomers will have because our 
faq/manpages/cross-reference system is not 100% foolproof.

You guys who say windows 8.1 is easy are *all welcome* to write
the necessary information for the FAQ.

Dealing with:
- UDFI and legacy mode
- UPT
- correct boots
- other gotcha besides the windows by default switches to gfx mode.

I see about ZIP about all that in the current FAQ.



Re: BGP changes to support CARP better

2013-11-15 Thread Adam Thompson

On 13-11-15 04:17 AM, Andy wrote:

On 12/11/13 05:48, Chris Cappuccio wrote:

Two BGP sessions from different IPs (no CARP)
BGP next-hop pointing to CARP-protected IP


Hi Chris,
This sounds good.. Could you clarify further?


I can clarify for him, see below.  (Apologies if he's already done it - 
I'm on the daily digest.)


Setup eBGP to the Transit router on both OBSD boxes using physical 
IPs, and iBGP between the OBSD routers. Got that working fine without 
'depends on' (don't want the BGP teardown/setup delay.


Yup.


How are you configuring the BGP next-hop to the CARP IP??


match to x.x.x.x set nexthop x.x.x.x
allow from any
allow to any


Hi Adam,
The problem is to do with ensuring inbound packets always go to the 
CARP master.


That's what set nexthop does in BGP - it tells the *other* router what 
to use for its nexthop.


'match to X.X.X.161 set nexthop X.X.X.162' Wouldn't this only mean 
that the outbound packets would egress to the transit via the CARP IP? 
Its the inbound control that's needed.


Nope.  It's actually much more difficult to control the egress IP, AFAIK.

I was thinking about using ifstatd to dynamically change the MED / 
path prepending based on the CARP status, rather than trying to force 
which router is master. Experience says that fail-overs happen for 
many reasons (probably once every couple of months), but so far never 
because the master is actually dead, which means BGP will pretty much 
always be left running on the old master (unless ifstatd does 
something to it)..


With 'set nexthop', it's OK if the old BGP session stays up - packets 
will always come inbound to the CARP master.  You don't need to do 
anything to bgpd or routing tables on the old box.


What you *might* have to do is use ifstated(8) to ensure that the LAN 
carp(4) interface always stays in sync with the WAN carp(4) 
interface.  (i.e. router #1 being master for inside-facing while #2 is 
master for outside-facing will break pf(4).)


I just can't seem to figure out a true clean way of doing this without 
configuring multiple BGP attributes in OpenBGPd based on CARP status :(


I think that's only because you had the wrong end of the stick for the 
nexthop attribute.


PS; For inbound path control which would you recommend? MED or padding 
the AS path? I.e. is one potentially more responsive than another..


Neither!  Just set nexthop appropriately.

--
-Adam Thompson
 athom...@athompso.net
 Cell: +1 204 291-7950
 Fax: +1 204 489-6515



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Paul Irofti
 Oh really ? you've never managed to put an OS out of commission by trying
 to multiboot ? you've never had a so-called install program just reclaim
 all of your hard-drive ?
 
 esp. with Windows where it can be *very* tiresome and difficult to track
 all the pieces you need to reinstall (especially with recent OEM stuff
 which does not even provide you with any boot media!)
 
 
 I'll put it another way: STOP SCARING NEWCOMERS FROM ASKING LEGITIMATE
 QUESTIONS!
 
 If it's in the faq, and easy to find, then *FINE*, flame away.
 
 But if it's not, SHUT THE FUCK UP, or go improve the faq.
 
 I want to be able to keep skimming over misc@ and figure out
 difficulties newcomers will have because our 
 faq/manpages/cross-reference system is not 100% foolproof.
 
 You guys who say windows 8.1 is easy are *all welcome* to write
 the necessary information for the FAQ.
 
 Dealing with:
 - UDFI and legacy mode
 - UPT
 - correct boots
 - other gotcha besides the windows by default switches to gfx mode.
 
 I see about ZIP about all that in the current FAQ.

Marc has a really good point here.

Please stop this pointless debate and instead spend your time
contributing to our documentation or helping in other ways.



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Dmitrij D. Czarkoff
Kirill Bychkov said:
 I can't agree with that. You can test something not in FAQ if you are sure it
 will make no harm to your system. Dance with bootloaders and partition
 managers could lead to catastrophe if you make an error.

 [snip]

 Keep in mind that potential risk boiled down to wasted space on the hard
 drive, which could be easily reclaimed for OS the OP would prefer if
 dualboot was impossible.

Well, I don't really understand the meaning you put behind the word
catastrophe, given that the action in subject is the installation of
two operating systems. You can't reinstall OS without loosing data, so I
assume that all data from hard disks is backed up, and the only resource
to waste is the time. Even then, again, given due precausion you don't
really risk any data loss for any of the OSs.

 We all know, than M$ always inventing new traps for alternative OS.

Care to elaborate? I'm not aware of any traps regarding disk management.

 And their boot process organization is one of that traps.

Again, care to elaborate? Where's the actual trap?

-- 
Dmitrij D. Czarkoff



Re: BGP changes to support CARP better

2013-11-15 Thread Andy

You sir have just made my weekend! :)

I thought that nexthop directive was a PF rule.. D'oh.. Clearly a long 
week ;)



What you *might* have to do is use ifstated(8) to ensure that the LAN carp(4) interface 
always stays in sync with the WAN carp(4) interface.  (i.e. router #1 being master for 
inside-facing while #2 is master for outside-facing will break pf(4).)


Absolutely.. I always put my carp interfaces into the same carp group 
to ensure this.


Thank you very much, I will test this ASAP :)
Thanks again, Andy.


On Fri 15 Nov 2013 16:50:24 GMT, Adam Thompson wrote:

On 13-11-15 04:17 AM, Andy wrote:

On 12/11/13 05:48, Chris Cappuccio wrote:

Two BGP sessions from different IPs (no CARP)
BGP next-hop pointing to CARP-protected IP


Hi Chris,
This sounds good.. Could you clarify further?


I can clarify for him, see below.  (Apologies if he's already done it
- I'm on the daily digest.)


Setup eBGP to the Transit router on both OBSD boxes using physical
IPs, and iBGP between the OBSD routers. Got that working fine without
'depends on' (don't want the BGP teardown/setup delay.


Yup.


How are you configuring the BGP next-hop to the CARP IP??


match to x.x.x.x set nexthop x.x.x.x
allow from any
allow to any


Hi Adam,
The problem is to do with ensuring inbound packets always go to the
CARP master.


That's what set nexthop does in BGP - it tells the *other* router
what to use for its nexthop.


'match to X.X.X.161 set nexthop X.X.X.162' Wouldn't this only mean
that the outbound packets would egress to the transit via the CARP
IP? Its the inbound control that's needed.


Nope.  It's actually much more difficult to control the egress IP, AFAIK.


I was thinking about using ifstatd to dynamically change the MED /
path prepending based on the CARP status, rather than trying to force
which router is master. Experience says that fail-overs happen for
many reasons (probably once every couple of months), but so far never
because the master is actually dead, which means BGP will pretty much
always be left running on the old master (unless ifstatd does
something to it)..


With 'set nexthop', it's OK if the old BGP session stays up - packets
will always come inbound to the CARP master.  You don't need to do
anything to bgpd or routing tables on the old box.

What you *might* have to do is use ifstated(8) to ensure that the
LAN carp(4) interface always stays in sync with the WAN carp(4)
interface.  (i.e. router #1 being master for inside-facing while #2 is
master for outside-facing will break pf(4).)


I just can't seem to figure out a true clean way of doing this
without configuring multiple BGP attributes in OpenBGPd based on CARP
status :(


I think that's only because you had the wrong end of the stick for the
nexthop attribute.


PS; For inbound path control which would you recommend? MED or
padding the AS path? I.e. is one potentially more responsive than
another..


Neither!  Just set nexthop appropriately.




Re: BGP changes to support CARP better

2013-11-15 Thread Adam Thompson

On 13-11-15 11:26 AM, Andy wrote:

You sir have just made my weekend! :)

I thought that nexthop directive was a PF rule.. D'oh.. Clearly a long 
week ;)


What you *might* have to do is use ifstated(8) to ensure that the 
LAN carp(4) interface always stays in sync with the WAN carp(4) 
interface.  (i.e. router #1 being master for inside-facing while #2 
is master for outside-facing will break pf(4).)


Absolutely.. I always put my carp interfaces into the same carp group 
to ensure this.


Now it's my turn:  into the same carp group to ensure this - what the 
heck?
There's nothing in carp(4) that enlightens me, and ifconfig(8) only 
talks about groups in terms of grouping pf(4) rules.
How does that ensure that two carp(4) interfaces transition to master 
together when they're based on different physical interfaces?
What have I missed?  (Or is this yet another breakdown in OpenBSD's 
documentation?)


--
-Adam Thompson
 athom...@athompso.net



Re: Dual booting OpenBSD and Windows 8.1

2013-11-15 Thread Dmitrij D. Czarkoff
Marc Espie said:
  Keep in mind that potential risk boiled down to wasted space on the hard
  drive, which could be easily reclaimed for OS the OP would prefer if
  dualboot was impossible.
 
 Oh really ? you've never managed to put an OS out of commission by trying
 to multiboot ? you've never had a so-called install program just reclaim
 all of your hard-drive ?

Not a single time. I'm not actually sure whether any version of Windows
ever came with installer that would silently reclaim space - they lean
toward failing to occupy free space once they reach something they don't
understand.
 
 esp. with Windows where it can be *very* tiresome and difficult to track
 all the pieces you need to reinstall (especially with recent OEM stuff
 which does not even provide you with any boot media!)

When I set the dualboot environment up, I first install the OSs, then
set up dualboot, and once it is working I set up the systems. I deny a
claim that anyone doing it another way may possibly be right.

-- 
Dmitrij D. Czarkoff



Re: BGP changes to support CARP better

2013-11-15 Thread Chris Cappuccio
Adam Thompson [athom...@athompso.net] wrote:
 What have I missed?  (Or is this yet another breakdown in OpenBSD's
 documentation?)
 

If you find a deficiency in the documentation, please submit a patch.



Re: QEMU CPU cores not showing up

2013-11-15 Thread Giancarlo Razzolini
Em 15-11-2013 06:20, InterNetX - Robert Garrett escreveu:
 Then as Stated you are already vulnerable to much more than interrupt
 remapping will fix. So dont worry about it.

Well, I said I have it enabled on my BIOS. Me having a sriov enabled
kernel and a sriov capable NIC is another history. I'm justing making
simple pci passthrough. Anyway, I'm not worrying much because it's
OpenBSD. But it's kind of a bummer not being able to have more cores on
it. Perhaps when I finish migrating the servers I can look into it.

Cheers,
-- 
Giancarlo Razzolini
GPG: 4096R/77B981BC



xlock, turning off the monitor with -dpmsoff

2013-11-15 Thread bsdclubhouse
hi there, 
i tried to use 'xlock -dpmsoff 1' to turn off the monitor almost
immediately. However, it doesn't work as expected. The manual page says
that -dpmsoff expects 'seconds' as parameter, but the monitor will be
turned off after about 30 seconds later. 
When I try 'xlock -dpmsoff 0', the monitor wont turn off. 

I also put the Option 'Option dpms' into my xorg.conf, but it doesn't
seem to work. 
'xset dpms force standby' does work, but I want to lock the screen. I
also tried 'xset dpms force standby  xlock' but the monitor won't be
turned off. 

I am running OpenBSD 5.4, freeshly installed, dmesg follows. 

I assume, I am doing something wrong here but I can't figure out how to
do it properly. I've read the manual page up and down, some help would
be great. Thanks.


OpenBSD 5.4 (GENERIC.MP) #44: Tue Jul 30 12:13:32 MDT 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz (GenuineIntel 686-class) 798 
MHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE,AVX,LAHF,PERF,ITSC
real mem  = 3662856192 (3493MB)
avail mem = 3591561216 (3425MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 11/01/11, BIOS32 rev. 0 @ 0xfc200, SMBIOS 
rev. 2.6 @ 0xdae9c000 (67 entries)
bios0: vendor LENOVO version 8DET55WW (1.25 ) date 11/01/2011
bios0: LENOVO 4290G53
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SSDT SSDT SSDT HPET APIC MCFG ECDT ASF! TCPA SSDT SSDT 
UEFI UEFI UEFI
acpi0: wakeup devices LID_(S3) SLPB(S3) IGBE(S4) EXP4(S4) EXP7(S4) EHC1(S3) 
EHC2(S3) HDEF(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 99MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz (GenuineIntel 686-class) 2.30 
GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE,AVX,LAHF,PERF,ITSC
cpu2 at mainbus0: apid 2 (application processor)
cpu2: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz (GenuineIntel 686-class) 2.30 
GHz
cpu2: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE,AVX,LAHF,PERF,ITSC
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz (GenuineIntel 686-class) 2.30 
GHz
cpu3: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE,AVX,LAHF,PERF,ITSC
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xf800, bus 0-63
acpiec0 at acpi0
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG_)
acpiprt2 at acpi0: bus 2 (EXP1)
acpiprt3 at acpi0: bus 3 (EXP2)
acpiprt4 at acpi0: bus 5 (EXP4)
acpiprt5 at acpi0: bus 13 (EXP5)
acpiprt6 at acpi0: bus -1 (EXP7)
acpicpu0 at acpi0: C3, C1, PSS
acpicpu1 at acpi0: C3, C1, PSS
acpicpu2 at acpi0: C3, C1, PSS
acpicpu3 at acpi0: C3, C1, PSS
acpipwrres0 at acpi0: PUBS
acpitz0 at acpi0: critical temperature is 99 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model 42T4861 serial 25401 type LION oem SANYO
acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
acpidock0 at acpi0: GDCK not docked (0)
bios0: ROM list: 0xc/0x1!
cpu0: Enhanced SpeedStep 2293 MHz: speeds: 2300, 2000, 1800, 1600, 1400, 1200, 
1000, 800 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel Core 2G Host rev 0x09
vga1 at pci0 dev 2 function 0 Intel HD Graphics 3000 rev 0x09
intagp0 at vga1
agp0 at intagp0: aperture at 0xe000, size 0x1000
inteldrm0 at vga1
drm0 at inteldrm0
inteldrm0: 1366x768
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
Intel 6 Series MEI rev 0x04 at pci0 dev 22 function 0 not configured
em0 at pci0 dev 25 function 0 Intel 82579LM rev 0x04: msi, address 
f0:de:f1:b9:8f:59
ehci0 at pci0 dev 26 function 0 Intel 6 Series USB rev 0x04: apic 2 int 16
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
azalia0 at pci0 dev 27 function 0 Intel 6 Series HD Audio rev 0x04: msi
azalia0: codecs: Conexant/0x506e, Intel/0x2805, using Conexant/0x506e
audio0 at azalia0
ppb0 at pci0 

Re: xlock, turning off the monitor with -dpmsoff

2013-11-15 Thread alexey.kurin...@gmail.com
15.11.2013 23:09, bsdclubho...@gmail.com пишет:
Hi. I cant help with xlock, cos not use it, but I always run 
xscreensaver and command xscreensaver-command -lock for locking and 
monitor turn off.
xscreensaver-command -prefs show gui for configuration.
Sorry, but can't help with monitor turning off, cos with my radeon video 
I got white screen when monitor turning off
  hi there,
  i tried to use 'xlock -dpmsoff 1' to turn off the monitor almost
  immediately. However, it doesn't work as expected. The manual page says
  that -dpmsoff expects 'seconds' as parameter, but the monitor will be
  turned off after about 30 seconds later.
  When I try 'xlock -dpmsoff 0', the monitor wont turn off.
 
  I also put the Option 'Option dpms' into my xorg.conf, but it doesn't
  seem to work.
  'xset dpms force standby' does work, but I want to lock the screen. I
  also tried 'xset dpms force standby  xlock' but the monitor won't be
  turned off.
 
  I am running OpenBSD 5.4, freeshly installed, dmesg follows.
 
  I assume, I am doing something wrong here but I can't figure out how to
  do it properly. I've read the manual page up and down, some help would
  be great. Thanks.
 
 
  OpenBSD 5.4 (GENERIC.MP) #44: Tue Jul 30 12:13:32 MDT 2013
  dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
  cpu0: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz (GenuineIntel 
686-class) 798 MHz
  cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE,AVX,LAHF,PERF,ITSC
  real mem  = 3662856192 (3493MB)
  avail mem = 3591561216 (3425MB)
  mainbus0 at root
  bios0 at mainbus0: AT/286+ BIOS, date 11/01/11, BIOS32 rev. 0 @ 
0xfc200, SMBIOS rev. 2.6 @ 0xdae9c000 (67 entries)
  bios0: vendor LENOVO version 8DET55WW (1.25 ) date 11/01/2011
  bios0: LENOVO 4290G53
  acpi0 at bios0: rev 2
  acpi0: sleep states S0 S3 S4 S5
  acpi0: tables DSDT FACP SSDT SSDT SSDT HPET APIC MCFG ECDT ASF! TCPA 
SSDT SSDT UEFI UEFI UEFI
  acpi0: wakeup devices LID_(S3) SLPB(S3) IGBE(S4) EXP4(S4) EXP7(S4) 
EHC1(S3) EHC2(S3) HDEF(S4)
  acpitimer0 at acpi0: 3579545 Hz, 24 bits
  acpihpet0 at acpi0: 14318179 Hz
  acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
  cpu0 at mainbus0: apid 0 (boot processor)
  cpu0: apic clock running at 99MHz
  cpu1 at mainbus0: apid 1 (application processor)
  cpu1: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz (GenuineIntel 
686-class) 2.30 GHz
  cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE,AVX,LAHF,PERF,ITSC
  cpu2 at mainbus0: apid 2 (application processor)
  cpu2: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz (GenuineIntel 
686-class) 2.30 GHz
  cpu2: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE,AVX,LAHF,PERF,ITSC
  cpu3 at mainbus0: apid 3 (application processor)
  cpu3: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz (GenuineIntel 
686-class) 2.30 GHz
  cpu3: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE,AVX,LAHF,PERF,ITSC
  ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
  acpimcfg0 at acpi0 addr 0xf800, bus 0-63
  acpiec0 at acpi0
  acpiprt0 at acpi0: bus 0 (PCI0)
  acpiprt1 at acpi0: bus -1 (PEG_)
  acpiprt2 at acpi0: bus 2 (EXP1)
  acpiprt3 at acpi0: bus 3 (EXP2)
  acpiprt4 at acpi0: bus 5 (EXP4)
  acpiprt5 at acpi0: bus 13 (EXP5)
  acpiprt6 at acpi0: bus -1 (EXP7)
  acpicpu0 at acpi0: C3, C1, PSS
  acpicpu1 at acpi0: C3, C1, PSS
  acpicpu2 at acpi0: C3, C1, PSS
  acpicpu3 at acpi0: C3, C1, PSS
  acpipwrres0 at acpi0: PUBS
  acpitz0 at acpi0: critical temperature is 99 degC
  acpibtn0 at acpi0: LID_
  acpibtn1 at acpi0: SLPB
  acpibat0 at acpi0: BAT0 model 42T4861 serial 25401 type LION oem 
SANYO
  acpibat1 at acpi0: BAT1 not present
  acpiac0 at acpi0: AC unit online
  acpithinkpad0 at acpi0
  acpidock0 at acpi0: GDCK not docked (0)
  bios0: ROM list: 0xc/0x1!
  cpu0: Enhanced SpeedStep 2293 MHz: speeds: 2300, 2000, 1800, 1600, 
1400, 1200, 1000, 800 MHz
  pci0 at mainbus0 bus 0: configuration mode 1 (bios)
  pchb0 at pci0 dev 0 function 0 Intel Core 2G Host rev 0x09
  vga1 at pci0 dev 2 function 0 Intel HD Graphics 3000 rev 0x09
  intagp0 at vga1
  agp0 at intagp0: aperture at 0xe000, size 0x1000
  inteldrm0 at vga1
  drm0 at inteldrm0
  inteldrm0: 1366x768
  wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
  wsdisplay0: 

Re: Migrating users from one machine to another

2013-11-15 Thread Jan Stary
On Nov 15 21:11:19, j...@johntate.org wrote:
 I want to migrate users from one machine to another, I was hoping
 someone had a script. I basically want to copy every user with a UID
 = 1000 and their password to the new system. I have copied their home
 directories with rsync, so it would be good if it could also chmod the
 permissions back.

copy the old master.passwd, then vipw(8)



Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-15 Thread Paul B. Henson
I'm looking at a supermicro SuperServer 5017A-EF for openbsd purposes,
it's got an Intel atom S1260 SoC, Marvell 88SE9230 SATA, and i350AM2 dual
gig interfaces.

It looks like i350 support shipped in 5.2, and I'm pretty sure the
Marvell chip is AHCI compliant, so I'd think that would be ok, but I'm
leery about the SoC, I can't find any references to openbsd running on
this specific chip or any atom based SoC for that matter and I'd hate to
buy a box that didn't run openbsd well :(.

Any feedback on this particular server, this atom SoC in specific, or
even a general opinion on how well this might work out much appreciated :).

Thanks much...



Re: Migrating users from one machine to another

2013-11-15 Thread John Tate
That worked, easier than I thought.

On Fri, Nov 15, 2013 at 11:42 PM, Nick Holland
n...@holland-consulting.net wrote:
 On 11/15/13 05:10, John Tate wrote:
 I want to migrate users from one machine to another, I was hoping
 someone had a script. I basically want to copy every user with a UID
= 1000 and their password to the new system. I have copied their home
 directories with rsync, so it would be good if it could also chmod the
 permissions back.


 not sure why you need a script...
 The exact details depends on what is different between the systems
 currently and desired to be different ultimately.

 Start with the old /etc/master.passwd file, fix things that are missing,
 remove things you don't want, copy it over and and run pwd_mkdb.  If the
 starting and ending machines are supposed to be identical, no fixing
 should be needed.

 Nick.




-- 
www.johntate.org



Re: Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-15 Thread Sebastian Benoit
Paul B. Henson(hen...@acm.org) on 2013.11.15 13:59:19 -0800:
 I'm looking at a supermicro SuperServer 5017A-EF for openbsd purposes,
 it's got an Intel atom S1260 SoC, Marvell 88SE9230 SATA, and i350AM2 dual
 gig interfaces.
 
 It looks like i350 support shipped in 5.2, and I'm pretty sure the
 Marvell chip is AHCI compliant, so I'd think that would be ok, but I'm
 leery about the SoC, I can't find any references to openbsd running on
 this specific chip or any atom based SoC for that matter and I'd hate to
 buy a box that didn't run openbsd well :(.

Don't buy this one (yet). The Marvell 88SE9230 SATA does not work.
i know cause i have one ;-)

The earlier 5017A-* machines are ok.

/B.
 
 Any feedback on this particular server, this atom SoC in specific, or
 even a general opinion on how well this might work out much appreciated :).
 
 Thanks much...
 

-- 



Re: Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-15 Thread Paul B. Henson
On Fri, Nov 15, 2013 at 11:25:50PM +0100, Sebastian Benoit wrote:

 Don't buy this one (yet). The Marvell 88SE9230 SATA does not work.
 i know cause i have one ;-)

Arg, disappointing, but I'm glad I thought to check before buying :). Do
you know if anybody's working on it? So much for standard AHCI sigh,
does it not find it, or find it but crap out? Do all the other
components work ok? I could temporarily stick a PCI SATA card in it to
get by until the onboard SATA is supported if all the other pieces are
happy. Does anybody have any suggestions for a good/cheap 2 port SATA
PCI card that supports openbsd?

 The earlier 5017A-* machines are ok.

Hmm, the only other 5017A model I see doesn't have IPMI.

Thanks for the help...



Is Soekris OpenBSD friendly?

2013-11-15 Thread SmithS
Greetings misc@.  After coming across a link[1] to make an OpenBSD
router using a Soekris device, I think I will make one.  Does anyone
else have this hardware and can verify all the components work?
I think Intel NICs are good, but everything else?  I have never heard
of this brand before so I want to be safe before buying.  The model
number[2] is 6501-30

[1] http://www.bsdnow.tv/tutorials/openbsd-router
[2] https://soekris.com/products/net6501/net6501-30-board-case.html

greetz,
SmithS



Re: Is Soekris OpenBSD friendly?

2013-11-15 Thread Bryan Irvine
OpenBSD is listed under Software on the page you linked.  As I understand
it the people who developed CARP did it on Soekris hardware, and this demo
was done using soekris 4801's. (but don't quote me on that, my memory is
hazy).

https://web.archive.org/web/20060323025207/http://os.newsforge.com/os/06/01/02/1643229.shtml?tid=8tid=18



On Fri, Nov 15, 2013 at 4:03 PM, SmithS smit...@hush.ai wrote:

 Greetings misc@.  After coming across a link[1] to make an OpenBSD
 router using a Soekris device, I think I will make one.  Does anyone
 else have this hardware and can verify all the components work?
 I think Intel NICs are good, but everything else?  I have never heard
 of this brand before so I want to be safe before buying.  The model
 number[2] is 6501-30

 [1] http://www.bsdnow.tv/tutorials/openbsd-router
 [2] https://soekris.com/products/net6501/net6501-30-board-case.html

 greetz,
 SmithS



Re: Is Soekris OpenBSD friendly?

2013-11-15 Thread Richard Toohey

On 11/16/13 13:03, SmithS wrote:

Greetings misc@.  After coming across a link[1] to make an OpenBSD
router using a Soekris device, I think I will make one.  Does anyone
else have this hardware and can verify all the components work?
I think Intel NICs are good, but everything else?  I have never heard
of this brand before so I want to be safe before buying.  The model
number[2] is 6501-30

[1] http://www.bsdnow.tv/tutorials/openbsd-router
[2] https://soekris.com/products/net6501/net6501-30-board-case.html

greetz,
SmithS



I've got a rack-mounted net6501-50 working well at the moment,
but I've only been using it for a few weeks so far.

Not sure all the components work, but it was easy to install
OpenBSD 5.3 to a USB stick, boot off that, then install to an SSD.

You have to connect with a serial cable, I've found a cheap USB-serial 
adapter

connected to a null modem cable to work well.

Any issues I've had - Google has given the answers.  8-)

Also got a 5501 in use and that's been working well, too.

dmesg from the 6501:

$ dmesg
OpenBSD 5.3 (GENERIC) #0: Wed Aug 28 19:46:41 NZST 2013
r...@abc.def.co.nz:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Genuine Intel(R) CPU @ 1.00GHz (GenuineIntel 686-class) 1.01 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF,PERF

real mem  = 1073131520 (1023MB)
avail mem = 1044611072 (996MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 20/21/15, BIOS32 rev. 0 @ 0xfac40
mpbios0 at bios0: Intel MP Specification 1.4
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 100MHz
cpu at mainbus0: not configured
mpbios0: bus 0 is type PCI
mpbios0: bus 64 is type ISA
ioapic0 at mainbus0: apid 0 pa 0xfec0, version 20, 24 pins
pcibios0 at bios0: rev 2.0 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf3880/96 (4 entries)
pcibios0: no compatible PCI ICU found: ICU vendor 0x8086 product 0x8186
pcibios0: Warning, unable to fix up PCI interrupt routing
pcibios0: PCI bus #13 is the last bus
bios0: ROM list: 0xc8000/0x2400 0xca800/0x4c00 0xcf800/0xee00
cpu0: unknown Enhanced SpeedStep CPU, msr 0x06090a0a06000a0d
cpu0: using only highest, current and lowest power states
cpu0: Enhanced SpeedStep 1001 MHz: speeds: 1000, 1000, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel E600 Host rev 0x05
pchb1 at pci0 dev 1 function 0 Intel E600 Config rev 0x00
ppb0 at pci0 dev 23 function 0 Intel E600 PCIE rev 0x00
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel EG20T PCIE rev 0x01
pci2 at ppb1 bus 2
Intel EG20T Packet Hub rev 0x01 at pci2 dev 0 function 0 not configured
Intel EG20T Ethernet rev 0x02 at pci2 dev 0 function 1 not configured
Intel EG20T GPIO rev 0x01 at pci2 dev 0 function 2 not configured
ohci0 at pci2 dev 2 function 0 Intel EG20T USB rev 0x02: apic 0 int 
19, version 1.0
ohci1 at pci2 dev 2 function 1 Intel EG20T USB rev 0x02: apic 0 int 
19, version 1.0
ohci2 at pci2 dev 2 function 2 Intel EG20T USB rev 0x02: apic 0 int 
19, version 1.0

ehci0 at pci2 dev 2 function 3 Intel EG20T USB rev 0x02: apic 0 int 19
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
Intel EG20T USB Client rev 0x02 at pci2 dev 2 function 4 not configured
sdhc0 at pci2 dev 4 function 0 Intel EG20T SDIO rev 0x01: apic 0 int 18
sdmmc0 at sdhc0
sdhc1 at pci2 dev 4 function 1 Intel EG20T SDIO rev 0x01: apic 0 int 18
sdmmc1 at sdhc1
ahci0 at pci2 dev 6 function 0 Intel EG20T AHCI rev 0x02: msi, AHCI 1.1
scsibus0 at ahci0: 32 targets
sd0 at scsibus0 targ 1 lun 0: ATA, INTEL SSDMAEXC02, 9CV1 SCSI3 
0/direct fixed naa.5001517803d66c24

sd0: 19087MB, 512 bytes/sector, 39091248 sectors, thin
ohci3 at pci2 dev 8 function 0 Intel EG20T USB rev 0x02: apic 0 int 
16, version 1.0
ohci4 at pci2 dev 8 function 1 Intel EG20T USB rev 0x02: apic 0 int 
16, version 1.0
ohci5 at pci2 dev 8 function 2 Intel EG20T USB rev 0x02: apic 0 int 
16, version 1.0

ehci1 at pci2 dev 8 function 3 Intel EG20T USB rev 0x02: apic 0 int 16
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 Intel EHCI root hub rev 2.00/1.00 addr 1
Intel EG20T DMA rev 0x00 at pci2 dev 10 function 0 not configured
puc0 at pci2 dev 10 function 1 Intel EG20T Serial rev 0x01: ports: 1 com
com3 at puc0 port 0 apic 0 int 19: ti16750, 64 byte fifo
puc1 at pci2 dev 10 function 2 Intel EG20T Serial rev 0x00: ports: 1 com
com4 at puc1 port 0 apic 0 int 19: ti16750, 64 byte fifo
puc2 at pci2 dev 10 function 3 Intel EG20T Serial rev 0x00: ports: 1 com
com5 at puc2 port 0 apic 0 int 19: ti16750, 64 byte fifo
puc3 at pci2 dev 10 function 4 Intel EG20T Serial rev 0x00: ports: 1 com
com6 at puc3 port 0 apic 0 int 19: ti16750, 64 byte fifo
Intel EG20T DMA rev 0x00 at pci2 dev 12 function 0 not configured
Intel EG20T SPI rev 0x00 at pci2 dev 12 function 1 not configured
Intel EG20T I2C rev 0x00 at 

Re: Is Soekris OpenBSD friendly?

2013-11-15 Thread jordon
I have an old net4511 running 5.4.  It’s too old/slow to route but it’s too fun 
to not have running because how many other OS’es can run on a 486 100MHz with 
32MB RAM?




On Nov 15, 2013, at 6:03 PM, SmithS smit...@hush.ai wrote:

 Greetings misc@.  After coming across a link[1] to make an OpenBSD
 router using a Soekris device, I think I will make one.  Does anyone
 else have this hardware and can verify all the components work?
 I think Intel NICs are good, but everything else?  I have never heard
 of this brand before so I want to be safe before buying.  The model
 number[2] is 6501-30
 
 [1] http://www.bsdnow.tv/tutorials/openbsd-router
 [2] https://soekris.com/products/net6501/net6501-30-board-case.html
 
 greetz,
 SmithS



Re: Is Soekris OpenBSD friendly?

2013-11-15 Thread James Hartley
Learning to search the archives is a very useful skill:

http://marc.info/?l=openbsd-miscw=2r=1s=soekrisq=b


On Fri, Nov 15, 2013 at 6:03 PM, SmithS smit...@hush.ai wrote:

 Greetings misc@.  After coming across a link[1] to make an OpenBSD
 router using a Soekris device, I think I will make one.  Does anyone
 else have this hardware and can verify all the components work?
 I think Intel NICs are good, but everything else?  I have never heard
 of this brand before so I want to be safe before buying.  The model
 number[2] is 6501-30

 [1] http://www.bsdnow.tv/tutorials/openbsd-router
 [2] https://soekris.com/products/net6501/net6501-30-board-case.html

 greetz,
 SmithS



Re: Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-15 Thread Paul B. Henson
On Fri, Nov 15, 2013 at 11:25:50PM +0100, Sebastian Benoit wrote:

 Don't buy this one (yet). The Marvell 88SE9230 SATA does not work.
 i know cause i have one ;-)

Hmm, looks like support was added in FreeBSD back in June 2012:

http://lists.freebsd.org/pipermail/svn-src-stable-9/2012-June/002131.html

so hopefully it wouldn't be to hard for somebody with the right skill
set (unfortunately not me when it comes to low level drivers sigh) to
tune it up for openbsd. Looking at the backstory behind that commit:

http://forums.freebsd.org/showthread.php?t=32563

evidentally marvell doesn't follow the AHCI spec very well and the
freebsd driver has workarounds for various quirks. Stupid marvell :(,
too bad supermicro didn't use a better sata chip.

Poking through the freebsd code, it looks like it has a workaround for
Marvell controllers do not wait for readyness which appears to be
adding in an extra delay when the controller is reset, and Some weird
controllers do not return signature in FIS receive area. Read it from
PxSIG register., which copies some results from a different location
overwriting what was copied in from the standard location. Other than
that, I don't see any other kludges, the rest is just the standard ahci
stuff. I see the openbsd ahci driver is completely different than the
freebsd one, so dunno how easily such workarounds could be implemented.



Re: Intel Atom S1260 (SuperServer 5017A-EF)

2013-11-15 Thread Chris Cappuccio
Paul B. Henson [hen...@acm.org] wrote:
 On Fri, Nov 15, 2013 at 11:25:50PM +0100, Sebastian Benoit wrote:
 
  Don't buy this one (yet). The Marvell 88SE9230 SATA does not work.
  i know cause i have one ;-)
 
 Hmm, looks like support was added in FreeBSD back in June 2012:
 
 http://lists.freebsd.org/pipermail/svn-src-stable-9/2012-June/002131.html
 
 so hopefully it wouldn't be to hard for somebody with the right skill
 set (unfortunately not me when it comes to low level drivers sigh) to
 tune it up for openbsd. Looking at the backstory behind that commit:
 
 http://forums.freebsd.org/showthread.php?t=32563
 
 evidentally marvell doesn't follow the AHCI spec very well and the
 freebsd driver has workarounds for various quirks. Stupid marvell :(,
 too bad supermicro didn't use a better sata chip.
 

Not directly related to these new chips, but, check this out:

http://archives.neohapsis.com/archives/openbsd/2007-10/2418.html

It's very old. This patch did not make it into the driver and I have
no idea if those chips work through some other change, or not. Likely
not. These older chips must be really buggy pieces of shit if you have
to disable NCQ.



Re: Is Soekris OpenBSD friendly?

2013-11-15 Thread Johan Beisser
I'm not sure what you mean by too slow to route.

I've a net4501 with 64mb of RAM that's handling all of my IP traffic
at home. Biggest problem is swapping taking out available interrupts.

Modern networks are actually just too fast for the hardware these
days. It works fine for home stuff.

On Fri, Nov 15, 2013 at 5:39 PM, jordon open...@sirjorj.com wrote:
 I have an old net4511 running 5.4.  It’s too old/slow to route but it’s too 
 fun to not have running because how many other OS’es can run on a 486 100MHz 
 with 32MB RAM?




 On Nov 15, 2013, at 6:03 PM, SmithS smit...@hush.ai wrote:

 Greetings misc@.  After coming across a link[1] to make an OpenBSD
 router using a Soekris device, I think I will make one.  Does anyone
 else have this hardware and can verify all the components work?
 I think Intel NICs are good, but everything else?  I have never heard
 of this brand before so I want to be safe before buying.  The model
 number[2] is 6501-30

 [1] http://www.bsdnow.tv/tutorials/openbsd-router
 [2] https://soekris.com/products/net6501/net6501-30-board-case.html

 greetz,
 SmithS



Re: Is Soekris OpenBSD friendly?

2013-11-15 Thread jordon
A few years back I put m0n0wall (FreeBSD-based) on it, hooked it up to 2 
machines (1 WAN, 1 LAN) and pushed a file through it.  Its max bandwidth was 
well under my Internet connection speed.

It was replaced with a net5501.




On Nov 15, 2013, at 10:55 PM, Johan Beisser j...@caustic.org wrote:

 I'm not sure what you mean by too slow to route.
 
 I've a net4501 with 64mb of RAM that's handling all of my IP traffic
 at home. Biggest problem is swapping taking out available interrupts.
 
 Modern networks are actually just too fast for the hardware these
 days. It works fine for home stuff.
 
 On Fri, Nov 15, 2013 at 5:39 PM, jordon open...@sirjorj.com wrote:
 I have an old net4511 running 5.4.  It’s too old/slow to route but it’s too 
 fun to not have running because how many other OS’es can run on a 486 100MHz 
 with 32MB RAM?
 
 
 
 
 On Nov 15, 2013, at 6:03 PM, SmithS smit...@hush.ai wrote:
 
 Greetings misc@.  After coming across a link[1] to make an OpenBSD
 router using a Soekris device, I think I will make one.  Does anyone
 else have this hardware and can verify all the components work?
 I think Intel NICs are good, but everything else?  I have never heard
 of this brand before so I want to be safe before buying.  The model
 number[2] is 6501-30
 
 [1] http://www.bsdnow.tv/tutorials/openbsd-router
 [2] https://soekris.com/products/net6501/net6501-30-board-case.html
 
 greetz,
 SmithS



Re: Is Soekris OpenBSD friendly?

2013-11-15 Thread Shawn K. Quinn
On Fri, Nov 15, 2013, at 10:55 PM, Johan Beisser wrote:
 I'm not sure what you mean by too slow to route.
 
 I've a net4501 with 64mb of RAM that's handling all of my IP traffic
 at home. Biggest problem is swapping taking out available interrupts.

Back in the day I used full-size PCs with processor and memory specs
similar to a net4501 with no issues. Some of them even had enough disk
space left over to run Squid.

-- 
  Shawn K. Quinn
  skqu...@rushpost.com



Re: Is Soekris OpenBSD friendly?

2013-11-15 Thread Johan Beisser
On Fri, Nov 15, 2013 at 9:00 PM, jordon open...@sirjorj.com wrote:
 A few years back I put m0n0wall (FreeBSD-based) on it, hooked it up to 2 
 machines (1 WAN, 1 LAN) and pushed a file through it.  Its max bandwidth was 
 well under my Internet connection speed.

 It was replaced with a net5501.


It's not below mine. I can saturate it, but my inbound is still well
below what the hardware can handle. I'll upgrade eventually.