Re: Secure Boot

2017-01-14 Thread Jan Dušátko

Dne 15.1.2017 v 3:38 Simon J. Gerraty napsal(a):
> Johannes Lundberg  wrote:
>> https://wiki.freebsd.org/SecureBoot
>>
> Interested in this too - though for proprietary systems where we have
> control over BIOS.  The design should hopefully accommodate both.
>
> In particular any plan for how the loader would verify kernel and any
> pre-loaded modules, and kernel verify init.
> Hopefully allowing for regular update of sining keys.
>
To work correctly, there are requirements to use TPM 1.2, hard disk
drive support Opal 2.1 standard and the Intel TXT. Shim is only part of
secure boot, because can be easily defeated without the rest.

https://www.kernel.org/doc/Documentation/intel_txt.txt
https://software.intel.com/en-us/blogs/2012/09/25/how-to-enable-an-intel-trusted-execution-technology-capable-server
http://www.intel.com/content/dam/www/public/us/en/documents/guides/intel-txt-software-development-guide.pdf
http://www.intel.com/content/dam/www/public/us/en/documents/white-papers/trusted-execution-technology-security-paper.pdf
http://www.intel.com/technology/security/downloads/TrustedExec_Overview.pdf
http://www.intel.com/technology/security/downloads/arch-overview.pdf


signature.asc
Description: OpenPGP digital signature


Re: TSC as timecounter makes system lag [-> jhb]

2017-01-14 Thread Julian Elischer

On 15/01/2017 10:11 AM, Jia-Shiun Li wrote:

On Fri, Jan 13, 2017 at 8:26 AM, Jia-Shiun Li  wrote:


Hi all,

since 2 or 3 weeks ago, I noticed that my old Penryn-based Intel Pentium
T4200 notebook lagged a lot. System time was running a lot slower,
sometimes even looked like it freezed. Keystroke repeat rate was slow too.

Since system time is slow, I tried to change timecounter from default TSC
to HPET. And it resumed normal immediately.



Did a binary search. Turns out it was caused by r310177 "Enable
EARLY_AP_STARTUP on amd64 and i386 kernels by default." r310175 does not
have this issue. Removing this option from kernel config also solves it.


making sure jhb notices this.

-Jia-Shiun.
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"



___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: vt(4) chops off the leftmost three columns

2017-01-14 Thread Adrian Chadd
heh.

As always, patches gratefully accepted. :)



-adrian


On 14 January 2017 at 21:07, Ernie Luzar  wrote:
>
> You can add these things to the vt to-do list
>
> Change the default font to look like sc.
> Add copy/paste function like sc has.
> Add splash screen support like sc has.
>
>
>
> Adrian Chadd wrote:
>>
>> hi,
>>
>> no, the vt_vga backend doesn't yet do VESA.
>>
>> I keep meaning to sit down and fix this, but life and wifi gets in the
>> way.
>>
>>
>> -adrian
>>
>>
>> On 14 January 2017 at 16:27, Kevin Oberman  wrote:
>>>
>>> On Sat, Jan 14, 2017 at 2:11 PM, Adrian Chadd 
>>> wrote:

 It depends(tm). I think the VT code just does "640x480x4bpp" and lets
 the BIOS sort it out. A lot of things don't cope well with 640x480
 these days - they try autodetecting picture edges, but a black border
 makes that very difficult.


 -adrian
>>>
>>>
>>> Can you use vidcontrol(1) to change to something better? 1600x900, maybe?
>>> (Note, I have not tried this and I know that vt does not support a lot of
>>> vidcontrol functionality, but starting X sets the display to 200x56
>>> characters on my laptop.)
>>> --
>>> Kevin Oberman, Part time kid herder and retired Network Engineer
>>> E-mail: rkober...@gmail.com
>>> PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683
>>>
>>>
 On 14 January 2017 at 08:57, Matthias Andree 
 wrote:
>
> Am 14.01.2017 um 00:11 schrieb Alan Somers:
>>
>> I take it back.  The first three columns _are_ rendered, but they
>> don't show up on some monitiors.  It's as if those monitors require a
>> minimum amount of overscan on the left side of the screen, and vt(4)
>> doesn't provide enough.  Can that be tuned?
>
> Once upon a time, I've seen similar things on Linux, but with fewer
> pixels offset, when switching framebuffer drivers - back then, the
> scanning-VGA-timing was an issue. Is there any way to tweak the row and
> column timings, with blank periods, viewport offsets and thereabouts?
>
>
>
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: vt(4) chops off the leftmost three columns

2017-01-14 Thread Ernie Luzar


You can add these things to the vt to-do list

Change the default font to look like sc.
Add copy/paste function like sc has.
Add splash screen support like sc has.


Adrian Chadd wrote:

hi,

no, the vt_vga backend doesn't yet do VESA.

I keep meaning to sit down and fix this, but life and wifi gets in the way.


-adrian


On 14 January 2017 at 16:27, Kevin Oberman  wrote:

On Sat, Jan 14, 2017 at 2:11 PM, Adrian Chadd 
wrote:

It depends(tm). I think the VT code just does "640x480x4bpp" and lets
the BIOS sort it out. A lot of things don't cope well with 640x480
these days - they try autodetecting picture edges, but a black border
makes that very difficult.


-adrian


Can you use vidcontrol(1) to change to something better? 1600x900, maybe?
(Note, I have not tried this and I know that vt does not support a lot of
vidcontrol functionality, but starting X sets the display to 200x56
characters on my laptop.)
--
Kevin Oberman, Part time kid herder and retired Network Engineer
E-mail: rkober...@gmail.com
PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683



On 14 January 2017 at 08:57, Matthias Andree 
wrote:

Am 14.01.2017 um 00:11 schrieb Alan Somers:

I take it back.  The first three columns _are_ rendered, but they
don't show up on some monitiors.  It's as if those monitors require a
minimum amount of overscan on the left side of the screen, and vt(4)
doesn't provide enough.  Can that be tuned?

Once upon a time, I've seen similar things on Linux, but with fewer
pixels offset, when switching framebuffer drivers - back then, the
scanning-VGA-timing was an issue. Is there any way to tweak the row and
column timings, with blank periods, viewport offsets and thereabouts?



___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: vt(4) chops off the leftmost three columns

2017-01-14 Thread Adrian Chadd
hi,

no, the vt_vga backend doesn't yet do VESA.

I keep meaning to sit down and fix this, but life and wifi gets in the way.


-adrian


On 14 January 2017 at 16:27, Kevin Oberman  wrote:
> On Sat, Jan 14, 2017 at 2:11 PM, Adrian Chadd 
> wrote:
>>
>> It depends(tm). I think the VT code just does "640x480x4bpp" and lets
>> the BIOS sort it out. A lot of things don't cope well with 640x480
>> these days - they try autodetecting picture edges, but a black border
>> makes that very difficult.
>>
>>
>> -adrian
>
>
> Can you use vidcontrol(1) to change to something better? 1600x900, maybe?
> (Note, I have not tried this and I know that vt does not support a lot of
> vidcontrol functionality, but starting X sets the display to 200x56
> characters on my laptop.)
> --
> Kevin Oberman, Part time kid herder and retired Network Engineer
> E-mail: rkober...@gmail.com
> PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683
>
>
>>
>> On 14 January 2017 at 08:57, Matthias Andree 
>> wrote:
>> > Am 14.01.2017 um 00:11 schrieb Alan Somers:
>> >> I take it back.  The first three columns _are_ rendered, but they
>> >> don't show up on some monitiors.  It's as if those monitors require a
>> >> minimum amount of overscan on the left side of the screen, and vt(4)
>> >> doesn't provide enough.  Can that be tuned?
>> >
>> > Once upon a time, I've seen similar things on Linux, but with fewer
>> > pixels offset, when switching framebuffer drivers - back then, the
>> > scanning-VGA-timing was an issue. Is there any way to tweak the row and
>> > column timings, with blank periods, viewport offsets and thereabouts?
>> > ___
>> > freebsd-current@freebsd.org mailing list
>> > https://lists.freebsd.org/mailman/listinfo/freebsd-current
>> > To unsubscribe, send any mail to
>> > "freebsd-current-unsubscr...@freebsd.org"
>> ___
>> freebsd-current@freebsd.org mailing list
>> https://lists.freebsd.org/mailman/listinfo/freebsd-current
>> To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
>
>
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: Secure Boot

2017-01-14 Thread Simon J. Gerraty
Johannes Lundberg  wrote:
> https://wiki.freebsd.org/SecureBoot
> 

Interested in this too - though for proprietary systems where we have
control over BIOS.  The design should hopefully accommodate both.

In particular any plan for how the loader would verify kernel and any
pre-loaded modules, and kernel verify init.
Hopefully allowing for regular update of sining keys.


___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: TSC as timecounter makes system lag

2017-01-14 Thread Jia-Shiun Li
On Fri, Jan 13, 2017 at 8:26 AM, Jia-Shiun Li  wrote:

> Hi all,
>
> since 2 or 3 weeks ago, I noticed that my old Penryn-based Intel Pentium
> T4200 notebook lagged a lot. System time was running a lot slower,
> sometimes even looked like it freezed. Keystroke repeat rate was slow too.
>
> Since system time is slow, I tried to change timecounter from default TSC
> to HPET. And it resumed normal immediately.
>
>
Did a binary search. Turns out it was caused by r310177 "Enable
EARLY_AP_STARTUP on amd64 and i386 kernels by default." r310175 does not
have this issue. Removing this option from kernel config also solves it.

-Jia-Shiun.
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: vt(4) chops off the leftmost three columns

2017-01-14 Thread Kevin Oberman
On Sat, Jan 14, 2017 at 2:11 PM, Adrian Chadd 
wrote:

> It depends(tm). I think the VT code just does "640x480x4bpp" and lets
> the BIOS sort it out. A lot of things don't cope well with 640x480
> these days - they try autodetecting picture edges, but a black border
> makes that very difficult.
>
>
> -adrian
>

Can you use vidcontrol(1) to change to something better? 1600x900, maybe?
(Note, I have not tried this and I know that vt does not support a lot of
vidcontrol functionality, but starting X sets the display to 200x56
characters on my laptop.)
--
Kevin Oberman, Part time kid herder and retired Network Engineer
E-mail: rkober...@gmail.com
PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683



> On 14 January 2017 at 08:57, Matthias Andree 
> wrote:
> > Am 14.01.2017 um 00:11 schrieb Alan Somers:
> >> I take it back.  The first three columns _are_ rendered, but they
> >> don't show up on some monitiors.  It's as if those monitors require a
> >> minimum amount of overscan on the left side of the screen, and vt(4)
> >> doesn't provide enough.  Can that be tuned?
> >
> > Once upon a time, I've seen similar things on Linux, but with fewer
> > pixels offset, when switching framebuffer drivers - back then, the
> > scanning-VGA-timing was an issue. Is there any way to tweak the row and
> > column timings, with blank periods, viewport offsets and thereabouts?
> > ___
> > freebsd-current@freebsd.org mailing list
> > https://lists.freebsd.org/mailman/listinfo/freebsd-current
> > To unsubscribe, send any mail to "freebsd-current-unsubscribe@
> freebsd.org"
> ___
> freebsd-current@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
>
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: vt(4) chops off the leftmost three columns

2017-01-14 Thread Adrian Chadd
It depends(tm). I think the VT code just does "640x480x4bpp" and lets
the BIOS sort it out. A lot of things don't cope well with 640x480
these days - they try autodetecting picture edges, but a black border
makes that very difficult.


-adrian


On 14 January 2017 at 08:57, Matthias Andree  wrote:
> Am 14.01.2017 um 00:11 schrieb Alan Somers:
>> I take it back.  The first three columns _are_ rendered, but they
>> don't show up on some monitiors.  It's as if those monitors require a
>> minimum amount of overscan on the left side of the screen, and vt(4)
>> doesn't provide enough.  Can that be tuned?
>
> Once upon a time, I've seen similar things on Linux, but with fewer
> pixels offset, when switching framebuffer drivers - back then, the
> scanning-VGA-timing was an issue. Is there any way to tweak the row and
> column timings, with blank periods, viewport offsets and thereabouts?
> ___
> freebsd-current@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Secure Boot

2017-01-14 Thread Johannes Lundberg
Hi

It's been almost a year since the Secure Boot wiki has been updated.

https://wiki.freebsd.org/SecureBoot

What is the current status and roadmap?

Thanks!
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Multiple FreeBSD on same drive

2017-01-14 Thread Johannes Lundberg
Hi

The most recent info I have is that the (UEFI) boot loader can only boot
from the first UFS partition it finds. Has support for multiple
installations been implemented? If so, how can I choose to boot from the
first or second UFS partition?

Thanks!
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: vt(4) chops off the leftmost three columns

2017-01-14 Thread Alan Somers
On Sat, Jan 14, 2017 at 4:43 AM, David Chisnall  wrote:
> On 13 Jan 2017, at 01:00, Ernie Luzar  wrote:
>>
>> VT should have had better testing before becoming the default in 11.0.
>
> The choice was VT or no acceleration in X11, because all of the new DRI 
> drivers depend on KMS, which requires VT.  We only got VT in a useable state 
> (and therefore useable accelerated X11 for most of the 10.x series) because 
> the Foundation funded the work.  More contributions to VT are always welcome, 
> but the choice was not between VT or something better tested, it was between 
> VT and black screens.
>
> David

I should add, BTW, that on my Haswell desktop, the only place where I
care about graphics, vt(4) works great.  It works better than Linux
did on the same hardware.  It also uses a DVI monitor, so there are no
issues with the borders.

-Alan
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: vt(4) chops off the leftmost three columns

2017-01-14 Thread Matthias Andree
Am 14.01.2017 um 00:11 schrieb Alan Somers:
> I take it back.  The first three columns _are_ rendered, but they
> don't show up on some monitiors.  It's as if those monitors require a
> minimum amount of overscan on the left side of the screen, and vt(4)
> doesn't provide enough.  Can that be tuned?

Once upon a time, I've seen similar things on Linux, but with fewer
pixels offset, when switching framebuffer drivers - back then, the
scanning-VGA-timing was an issue. Is there any way to tweak the row and
column timings, with blank periods, viewport offsets and thereabouts?
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: xpt related hang on sparc64

2017-01-14 Thread Mark Linimon
On Fri, Jan 13, 2017 at 11:23:13PM -0700, Alan Somers wrote:
> That error message can mean many different things.  You need to boot
> in verbose mode to get a better idea.

As a test I created a netbootable image from -current the other day.
All I had available to test was an X1 which booted fine.  (It was
just lying around anyway.)

I can try one of the v210s or v215s if you continue to have trouble.

mcl
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"


Re: vt(4) chops off the leftmost three columns

2017-01-14 Thread David Chisnall
On 13 Jan 2017, at 01:00, Ernie Luzar  wrote:
> 
> VT should have had better testing before becoming the default in 11.0.

The choice was VT or no acceleration in X11, because all of the new DRI drivers 
depend on KMS, which requires VT.  We only got VT in a useable state (and 
therefore useable accelerated X11 for most of the 10.x series) because the 
Foundation funded the work.  More contributions to VT are always welcome, but 
the choice was not between VT or something better tested, it was between VT and 
black screens.

David



smime.p7s
Description: S/MIME cryptographic signature