Re: geli(8) breaks after a couple hours of uptime

2013-02-11 Thread Ian Lepore
On Sun, 2013-02-10 at 00:35 +0100, Pawel Jakub Dawidek wrote: > On Sat, Feb 09, 2013 at 06:00:53PM +0200, Andriy Gapon wrote: > > on 09/02/2013 17:04 Andrey Zonov said the following: > > > On 2/9/13 5:07 PM, Fabian Keil wrote: > > >> > > >> This would at least prevent the segfault. > > >> > > > >

Re: geli(8) breaks after a couple hours of uptime

2013-02-11 Thread Fabian Keil
Pawel Jakub Dawidek wrote: > On Sun, Feb 10, 2013 at 09:50:58AM +0200, Andriy Gapon wrote: > > I think that PAGE_SIZE (or at most a small multiple of it) should be > > sufficient. I don't think that we currently have (or expect to see in > > the near future) algorithms where keys with more than

Re: geli(8) breaks after a couple hours of uptime

2013-02-10 Thread Andriy Gapon
on 10/02/2013 17:44 Pawel Jakub Dawidek said the following: > On Sun, Feb 10, 2013 at 09:50:58AM +0200, Andriy Gapon wrote: >> on 10/02/2013 01:35 Pawel Jakub Dawidek said the following: >>> geli(8) almost exclusively deals with sensitive data. Even mlocking >>> MAXPHYS would fail with current limi

Re: geli(8) breaks after a couple hours of uptime

2013-02-10 Thread Pawel Jakub Dawidek
On Sun, Feb 10, 2013 at 09:50:58AM +0200, Andriy Gapon wrote: > on 10/02/2013 01:35 Pawel Jakub Dawidek said the following: > > geli(8) almost exclusively deals with sensitive data. Even mlocking > > MAXPHYS would fail with current limits, but this is bad idea. > > > > With mlockall() I am sure I

Re: geli(8) breaks after a couple hours of uptime

2013-02-09 Thread Andriy Gapon
on 10/02/2013 01:35 Pawel Jakub Dawidek said the following: > geli(8) almost exclusively deals with sensitive data. Even mlocking > MAXPHYS would fail with current limits, but this is bad idea. > > With mlockall() I am sure I didn't miss anything - be it forgetting > about mlocking some buffer or

Re: geli(8) breaks after a couple hours of uptime

2013-02-09 Thread Pawel Jakub Dawidek
On Sat, Feb 09, 2013 at 06:00:53PM +0200, Andriy Gapon wrote: > on 09/02/2013 17:04 Andrey Zonov said the following: > > On 2/9/13 5:07 PM, Fabian Keil wrote: > >> > >> This would at least prevent the segfault. > >> > > > > I see two possibilities to get segfault: > > - no checking for result fr

Re: geli(8) breaks after a couple hours of uptime

2013-02-09 Thread Andriy Gapon
on 09/02/2013 17:04 Andrey Zonov said the following: > On 2/9/13 5:07 PM, Fabian Keil wrote: >> >> This would at least prevent the segfault. >> > > I see two possibilities to get segfault: > - no checking for result from memory allocation functions > - too big stack > > I have no found any br

Re: geli(8) breaks after a couple hours of uptime

2013-02-09 Thread Andriy Gapon
on 09/02/2013 15:07 Fabian Keil said the following: > It also wouldn't hurt to document why a 64K per-process limit with an > unlimited number of processes per user is considered a good default in > the first place. I don't think that maxproc=unlimited is a good default regardless of memorylocked.

Re: geli(8) breaks after a couple hours of uptime

2013-02-09 Thread Andrey Zonov
On 2/9/13 5:07 PM, Fabian Keil wrote: > > This would at least prevent the segfault. > I see two possibilities to get segfault: - no checking for result from memory allocation functions - too big stack I have no found any broken memory allocation checking, but I found two big objects on the

Re: geli(8) breaks after a couple hours of uptime

2013-02-09 Thread Fabian Keil
Eitan Adler wrote: > On 8 February 2013 07:46, Andriy Gapon wrote: > > on 08/02/2013 13:48 Ulrich Spörlein said the following: > >> It looks like 128k as a limit is still too low for geli(8) to work, and > >> I've set it to 256k now, so that I can use "sudo geli". Can you maybe > >> revise the

Re: geli(8) breaks after a couple hours of uptime

2013-02-08 Thread Eitan Adler
On 8 February 2013 07:46, Andriy Gapon wrote: > on 08/02/2013 13:48 Ulrich Spörlein said the following: >> The problem here is that I login via my user account, then either use >> sudo or sudo -i for a root shell, this however does not raise the >> memorylocked limit. So when I said this works dur

Re: geli(8) breaks after a couple hours of uptime

2013-02-08 Thread Andriy Gapon
on 08/02/2013 13:48 Ulrich Spörlein said the following: > The problem here is that I login via my user account, then either use > sudo or sudo -i for a root shell, this however does not raise the > memorylocked limit. So when I said this works during boot and shortly > after, it's because I haven't

Re: geli(8) breaks after a couple hours of uptime

2013-02-08 Thread Ulrich Spörlein
On Fri, 2013-02-08 at 09:57:09 +0100, Fabian Keil wrote: > Ulrich Spörlein wrote: > > > On Thu, 2013-02-07 at 15:33:22 +0100, Fabian Keil wrote: > > > Ulrich Spörlein wrote: > > > > > > > Yes, it's pretty much as weird as it sounds. All new machine, forklifted > > > > the image from on old i386

Re: geli(8) breaks after a couple hours of uptime

2013-02-08 Thread Fabian Keil
Ulrich Spörlein wrote: > On Thu, 2013-02-07 at 15:33:22 +0100, Fabian Keil wrote: > > Ulrich Spörlein wrote: > > > > > Yes, it's pretty much as weird as it sounds. All new machine, forklifted > > > the image from on old i386 machine running 8.x to current on amd64. > > > > > > Everything seemi

Re: geli(8) breaks after a couple hours of uptime

2013-02-07 Thread Ulrich Spörlein
On Thu, 2013-02-07 at 15:33:22 +0100, Fabian Keil wrote: > Ulrich Spörlein wrote: > > > Yes, it's pretty much as weird as it sounds. All new machine, forklifted > > the image from on old i386 machine running 8.x to current on amd64. > > > > Everything seemingly works fine, attaching geli volumes

Re: geli(8) breaks after a couple hours of uptime

2013-02-07 Thread Fabian Keil
Ulrich Spörlein wrote: > Yes, it's pretty much as weird as it sounds. All new machine, forklifted > the image from on old i386 machine running 8.x to current on amd64. > > Everything seemingly works fine, attaching geli volumes shortly after > boot is fine, attached devices continue to work fine

geli(8) breaks after a couple hours of uptime

2013-02-07 Thread Ulrich Spörlein
Yes, it's pretty much as weird as it sounds. All new machine, forklifted the image from on old i386 machine running 8.x to current on amd64. Everything seemingly works fine, attaching geli volumes shortly after boot is fine, attached devices continue to work fine. There are no strange crashes with