Re: Test farm news

2016-06-14 Thread Eric S. Raymond
Gary E. Miller : > So, you got your logging on now? Otherwise you have missed my point. It's in the configuration for the test farm runs, which will launch in a few hours. Need to finish the manager script first. -- http://www.catb.org/~esr/";>Eric S. Raymond signature.asc Des

Re: Test farm news

2016-06-14 Thread Gary E. Miller
Yo Eric! On Tue, 14 Jun 2016 17:36:27 -0400 "Eric S. Raymond" wrote: > Gary E. Miller : > > > That's good enough that we can *and should* ignore all the > > > technical complexities of fudging and log interpretation. We are > > > *not addressing time nuts* here. We could do half an order of > >

Re: Test farm news

2016-06-14 Thread Eric S. Raymond
Gary E. Miller : > > That's good enough that we can *and should* ignore all the technical > > complexities of fudging and log interpretation. We are *not addressing > > time nuts* here. We could do half an order of magnitude worse than > > this and still be good enough for a beginner audience - in

Re: Test farm news

2016-06-14 Thread Gary E. Miller
Yo Eric! On Tue, 14 Jun 2016 16:01:34 -0400 "Eric S. Raymond" wrote: > > I'm still waiting for the good reason. You can't ask the user to > > pick good offsets when he does not have the data for it. > I say this because I've watched enough Pi 3 output to know that at > steady state we're goi

Re: Microserver HOWTO, and gearing up for first test farm runs

2016-06-14 Thread Gary E. Miller
Yo Eric! On Tue, 14 Jun 2016 16:06:47 -0400 "Eric S. Raymond" wrote: > Gary E. Miller : > > > What I think I may see is that the drift over short GPS outages is > > > low enough to make the local clock as effective a check server as > > > the pool. If that turns out to be true we can ship a Pi

Re: Design proposal for a better ACL language

2016-06-14 Thread Eric S. Raymond
Mark Atwood : > It is possible to write an iptables kernel loadable module that can do > application level filtering, and the ntp packet format even lends itself to > it. > > However, we will not go down that route. It would be Linux-only, it would > be outside of our remit and outside of our cur

Re: Design proposal for a better ACL language

2016-06-14 Thread Mark Atwood
It is possible to write an iptables kernel loadable module that can do application level filtering, and the ntp packet format even lends itself to it. However, we will not go down that route. It would be Linux-only, it would be outside of our remit and outside of our current hot skill-set, it wou

Re: Microserver HOWTO, and gearing up for first test farm runs

2016-06-14 Thread Eric S. Raymond
Gary E. Miller : > > What I think I may see is that the drift over short GPS outages is > > low enough to make the local clock as effective a check server as the > > pool. If that turns out to be true we can ship a Pi configuration > > that is really autonomous. > > Over three PPS ntpd's I'm seei

Re: Test farm news

2016-06-14 Thread Eric S. Raymond
Gary E. Miller : > Yo Eric! > > On Tue, 14 Jun 2016 14:20:32 -0400 > "Eric S. Raymond" wrote: > > > Gary E. Miller : > > > And none of this will do you any good until you wait another 7 > > > days. If you had turned on logging last week you would have the > > > data to look at now. > > > > T

Re: Microserver HOWTO, and gearing up for first test farm runs

2016-06-14 Thread Gary E. Miller
Yo Eric! On Tue, 14 Jun 2016 15:19:15 -0400 "Eric S. Raymond" wrote: > One will use only the GPS. > > One will add pool check servers. > > One will add the local system clock (driver 1). > > What I think I may see is that the drift over short GPS outages is > low enough to make the local cloc

Microserver HOWTO, and gearing up for first test farm runs

2016-06-14 Thread Eric S. Raymond
My two tasks for today: (1) Only one things is stalling 1.0 release of the HOWTO: figuring out how to set the GPIO pin on the Odroid from clockmaker. I will make another pass at the documentation anf extracting knowledge from the Odroid support people. (2) Write a script to manage multi-machine

Re: Design proposal for a better ACL language

2016-06-14 Thread Gary E. Miller
Yo Achim! On Tue, 14 Jun 2016 20:39:35 +0200 Achim Gratz wrote: > Daniel Franke writes: > >> Are there other good ACL languages that we can steal the spec or > >> implementation from > > > > Most of the features we want to match on (basically everything > > except IP/port) are NTP-specific, so

Re: Design proposal for a better ACL language

2016-06-14 Thread Daniel Franke
On 6/14/16, Achim Gratz wrote: > Sorry for the sidetracking, but while you mention iptables: if we can > presume the existence of a packet filter in the OS, would it perhaps > make sense to not implement that part of the filtering in ntpd and leave > it to that filter? No, because most of the tim

Re: Test farm news

2016-06-14 Thread Gary E. Miller
Yo Eric! On Tue, 14 Jun 2016 14:20:32 -0400 "Eric S. Raymond" wrote: > Gary E. Miller : > > And none of this will do you any good until you wait another 7 > > days. If you had turned on logging last week you would have the > > data to look at now. > > There were good reasons I didn't. Verif

Re: Design proposal for a better ACL language

2016-06-14 Thread Achim Gratz
Daniel Franke writes: >> Are there other good ACL languages that we can steal the spec or >> implementation from > > Most of the features we want to match on (basically everything except > IP/port) are NTP-specific, so not directly. But a lot of my design was > inspired by iptables. Sorry for the

Re: Test farm news

2016-06-14 Thread Eric S. Raymond
Gary E. Miller : > And none of this will do you any good until you wait another 7 days. If > you had turned on logging last week you would have the data to look at > now. There were good reasons I didn't. Verifying a configuration that is as simple and readily understandable as possible took pri

Re: Test farm news

2016-06-14 Thread Gary E. Miller
Yo Achim! On Tue, 14 Jun 2016 09:04:40 +0200 Achim Gratz wrote: > Gary E. Miller writes: > > You need to do more than shutdown ntpd to get back to pre-ntp > > initial conditions. For a real good test you need to set the > > system clock off by maybe a minute, or an hour ,or maybe back to > > 19

Re: Test farm news

2016-06-14 Thread Gary E. Miller
Yo Eric! On Tue, 14 Jun 2016 06:32:36 -0400 "Eric S. Raymond" wrote: > Gary E. Miller : > > > I can easily shut down and restart all ntpds - in fact I'll have > > > to in order to get the new configs read. > > > > You need to do more than shutdown ntpd to get back to pre-ntp > > initial condi

Re: Design proposal for a better ACL language

2016-06-14 Thread Daniel Franke
> I'm significantly concerned about part 3. In any transition like > this, there is a *lot* of potential for subtle bugs due to ontological > mismatches between the new and old ways of doing things. It's going > to be a defect attractor, potentially a very nasty one with security > impact (as in,

Re: Design proposal for a better ACL language

2016-06-14 Thread Eric S. Raymond
Daniel Franke : > On 6/13/16, Mark Atwood wrote: > > > Are there other good ACL languages that we can steal the spec or > > implementation from > > Most of the features we want to match on (basically everything except > IP/port) are NTP-specific, so not directly. But a lot of my design was > ins

Re: Design proposal for a better ACL language

2016-06-14 Thread Daniel Franke
On 6/13/16, Mark Atwood wrote: > Are there other good ACL languages that we can steal the spec or > implementation from Most of the features we want to match on (basically everything except IP/port) are NTP-specific, so not directly. But a lot of my design was inspired by iptables. > How hard w

Re: Test farm news

2016-06-14 Thread Eric S. Raymond
Gary E. Miller : > > I can easily shut down and restart all ntpds - in fact I'll have to in > > order to get the new configs read. > > You need to do more than shutdown ntpd to get back to pre-ntp initial > conditions. For a real good test you need to set the system clock off > by maybe a minute,

Re: Test farm news

2016-06-14 Thread Achim Gratz
Gary E. Miller writes: > You need to do more than shutdown ntpd to get back to pre-ntp initial > conditions. For a real good test you need to set the system clock off > by maybe a minute, or an hour ,or maybe back to 1970. Remove the drift > file. Remove the battery from you GPS. And probably r