Re: Fresh installation 9.1

2013-05-22 Thread Trond Endrestøl
On Wed, 22 May 2013 11:10+0530, hrkesh sahu wrote:

 Hi All,
 IPv4 Routing  -
 
 I disabled the DHCP from rc.conf for both the interface. but still I am not
 able to route trafic from one interface to another.
 
 rc.conf
 ---
 hostname=idc-freebsd
 keymap=hy.armscii-8.kbd
 #ifconfig_re0=DHCP
 #ifconfig_rl0=DHCP
 dumpdev=NO

 ifconfig_rl0=inet 192.168.100.101 netmask 255.255.255.0
 ifconfig_re0=inet 192.168.200.101 netmask 255.255.255.0

Are the two lines above copied straight from your rc.conf file?
If so, both lines are missing a  at the end. Please check to see if 
this is needed.

Next, the outputs of the ifconfig command and the netstat -r command 
should reveal something interesting. Would you please post the 
results from these two commands?

 ipv6_activate_all_interfaces=YES
 gateway_enable=YES
 default_router=192.168.200.1
 
 I am using FreeBSD - 9.1 Release version
 
 I need to communicate between two different subnets.
 
 Am i missing anything to enable freebsd as router?
 Do i need to add a route entry?
 
 If possible could you please share rc.conf file with IPv4 routing?
 
 Regards
 Hrisikesh
 
 On Thu, May 9, 2013 at 2:04 PM, Trond Endrestøl 
 trond.endres...@fagskolen.gjovik.no wrote:
 
  On Thu, 9 May 2013 12:18+0530, hrkesh sahu wrote:
 
HI All,
   
   I have a FreeBSD 9.1 Release installed with TWO NIC cards. I was trying
  to
   make this FreeBSD machine as a router .
   This is my rc.conf
   
   ifconfig_rl0 = inet 192.168.100.101 netmask 255.255.255.0
   ifconfig_re0=inet 192.168.200.101 netmask 255.255.255.0
  
   gateway_enable = YES
   ifconfig_rl0 = DHCP
   ifconfig_re0 = DHCP
  
   defaultrouter = 192.168.100.1
   ipv6_activate_all_interfaces = YES
   sshd_enable = YES
   synchronous_dhclient=YES
  
   Please help me to establish a IPv4 router.
   Both the interfaces are connected to to different laptops with a static
  IP
   address.
 
  You should place a # in front of the two lines:
 
   ifconfig_rl0 = DHCP
   ifconfig_re0 = DHCP
 
  Next, you probably shouldn't place spaces before and after the equal
  signs.
 
   Laptop 1 = 192.168.100.102  ( connected to interface rl0) gateway  -
   192.168.100.1
  
   Laptop 2 = 192.168.200.102 ( connected to interface re0)
   ping from Laptop1 - rl0 is successful
   but ping from Laptop1 - re0 is not successful.
  
   After this I want to know also How to make this as IPv6 router?
 
  See
  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-ipv6.html
  .
 
  You probably should create a ULA prefix or two, and assign these to
  your router interfaces. http://www.sixxs.net/tools/grh/ula/ might help
  you.
 
  Something along these lines might help you achieve what you want:
 
  ifconfig_rl0_ipv6=inet6 fd8f:d6d0:e6e7:100::1 prefixlen 64
  ifconfig_re0_ipv6=inet6 fd44:13de:a366:200::1 prefixlen 64
  ipv6_gateway_enable=YES
 
  Finally you probably should configure and enable Router Advertisement
  and Host Auto Configuration as explained in section 32.11.6 of
  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-ipv6.html
  .

-- 
+---++
| Vennlig hilsen,   | Best regards,  |
| Trond Endrestøl,  | Trond Endrestøl,   |
| IT-ansvarlig, | System administrator,  |
| Fagskolen Innlandet,  | Gjøvik Technical College, Norway,  |
| tlf. mob.   952 62 567,   | Cellular...: +47 952 62 567,   |
| sentralbord 61 14 54 00.  | Switchboard: +47 61 14 54 00.  |
+---++___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Unkillable processes

2013-05-22 Thread David Demelier
2013/5/19 Joshua Isom jri...@gmail.com:
 On 5/19/2013 3:00 PM, David Demelier wrote:

 Hello there,

 I've had a process on state pfault and it was just unkillable, kill
 -9 had no effects and because the script was doing an infinite loop
 the machine was slower and slower so the only way to fix that was a
 reboot.

 Why kill -9 has still no effects on some bad processes?

 Regards,

 --
 Demelier David


 A process can be unkillable if it's holding a lock, like reading from disk.
 Eventually, the lock will release and it should die.  You can use limits to
 change how much CPU and memory a process can use.  My guess is what happened
 is it started using a lot of memory, but you ran out and have a lot of swap.
 It was trying to run while using your hard drive instead of ram.  With
 limits, you should be able to prevent it from using swap which could help,
 and cap the amount of ram and cpu.

Hello, thank you for that precise explanation, I will add limits into
the new rctl.conf, however I don't know how many amount of ram I
should allow, in fact I have absolutely no idea how much of ram an
usual program eats, is 50Mo enough for user applications ?

Regards,

--
Demelier David
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fresh installation 9.1

2013-05-22 Thread hrkesh sahu
Hi ,
Thanks a lot for this quick reply.
Sorry i missed the  in the end while typing. It's a typo.
I provided the ouput of  nestat -r  and ifconfig.

 netstat -r
--
routing tables  -

internet :
---
destination   Gateway
Flags   Refs
Use   Netif Expire
default 192.168.200.1
UGS   0
0  re0
localhost  link#12
UH 0
148   lo0
192.168.100.0  link#10
U   0
0   rl0
192.168.100.101   link#10  UHS
 0
0   lo0
192.168.200.0  link#5
U   0
0   re0
192.168.200.101   link#5  UHS
   0
0   lo0

Internet6:
---
Ipv6 details

 Ifconfig

re0: flags=8843UP,Broadcast,Running,Simplex,Multicast Metric 0 mtu 1500
options=8209bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE
ether 00:1f:d0:40:8b:bd
inet6 fe80::21f:d0ff:fe40:8bbd%re0 prefixlen 64 scopeid 0x5
inet 192.168.200.101 netmask 0xff00 broadcast 192.168.200.255
nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
media:Enthernet autoselect (none)
status: no carrier

rl0: flags=8843UP,Broadcast,Running,Simplex,Multicast Metric 0 mtu 1500
options=2008VLAN_MTU,WOL_MAGIC
ether 00:10:b5:48:9f:73
inet6 fe80::21f:b5ff:fe48:9f73%rl0 prefixlen 64 scopeid 0xa
inet 192.168.100.101 netmask 0xff00 broadcast 192.168.100.255
nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
media:Enthernet autoselect (none)
status: no carrier

there is a plip0 and lo0.

Regards
Hrisikesh




On Wed, May 22, 2013 at 12:02 PM, Trond Endrestøl 
trond.endres...@fagskolen.gjovik.no wrote:

 On Wed, 22 May 2013 11:10+0530, hrkesh sahu wrote:

  Hi All,
  IPv4 Routing  -
  
  I disabled the DHCP from rc.conf for both the interface. but still I am
 not
  able to route trafic from one interface to another.
 
  rc.conf
  ---
  hostname=idc-freebsd
  keymap=hy.armscii-8.kbd
  #ifconfig_re0=DHCP
  #ifconfig_rl0=DHCP
  dumpdev=NO

  ifconfig_rl0=inet 192.168.100.101 netmask 255.255.255.0
  ifconfig_re0=inet 192.168.200.101 netmask 255.255.255.0

 Are the two lines above copied straight from your rc.conf file?
 If so, both lines are missing a  at the end. Please check to see if
 this is needed.

 Next, the outputs of the ifconfig command and the netstat -r command
 should reveal something interesting. Would you please post the
 results from these two commands?

  ipv6_activate_all_interfaces=YES
  gateway_enable=YES
  default_router=192.168.200.1
 
  I am using FreeBSD - 9.1 Release version
 
  I need to communicate between two different subnets.
 
  Am i missing anything to enable freebsd as router?
  Do i need to add a route entry?
 
  If possible could you please share rc.conf file with IPv4 routing?
 
  Regards
  Hrisikesh
 
  On Thu, May 9, 2013 at 2:04 PM, Trond Endrestøl 
  trond.endres...@fagskolen.gjovik.no wrote:
 
   On Thu, 9 May 2013 12:18+0530, hrkesh sahu wrote:
  
 HI All,

I have a FreeBSD 9.1 Release installed with TWO NIC cards. I was
 trying
   to
make this FreeBSD machine as a router .
This is my rc.conf

ifconfig_rl0 = inet 192.168.100.101 netmask 255.255.255.0
ifconfig_re0=inet 192.168.200.101 netmask 255.255.255.0
   
gateway_enable = YES
ifconfig_rl0 = DHCP
ifconfig_re0 = DHCP
   
defaultrouter = 192.168.100.1
ipv6_activate_all_interfaces = YES
sshd_enable = YES
synchronous_dhclient=YES
   
Please help me to establish a IPv4 router.
Both the interfaces are connected to to different laptops with a
 static
   IP
address.
  
   You should place a # in front of the two lines:
  
ifconfig_rl0 = DHCP
ifconfig_re0 = DHCP
  
   Next, you probably shouldn't place spaces before and after the equal
   signs.
  
Laptop 1 = 192.168.100.102  ( connected to interface rl0) gateway  -
192.168.100.1
   
Laptop 2 = 192.168.200.102 ( connected to interface re0)
ping from Laptop1 - rl0 is successful
but ping from Laptop1 - re0 is not successful.
   
After this I want to know also How to make this as IPv6 router?
  
   See
  
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-ipv6.html
   .
  
   You probably should create a ULA prefix or two, and assign these to
   your router interfaces. http://www.sixxs.net/tools/grh/ula/ might help
   you.
  
   Something along these lines might help you achieve what you want:
  
   ifconfig_rl0_ipv6=inet6 fd8f:d6d0:e6e7:100::1 prefixlen 64
   ifconfig_re0_ipv6=inet6 fd44:13de:a366:200::1 prefixlen 64
   

Re: Fresh installation 9.1

2013-05-22 Thread Trond Endrestøl
On Wed, 22 May 2013 12:38+0530, hrkesh sahu wrote:

 Hi ,
 Thanks a lot for this quick reply.
 Sorry i missed the  in the end while typing. It's a typo.
 I provided the ouput of  nestat -r  and ifconfig.
 
  netstat -r
 --
 routing tables  -
 
 internet :
 ---
 destination   Gateway
 Flags   Refs
 Use   Netif Expire
 default 192.168.200.1
 UGS   0
 0  re0
 localhost  link#12
 UH 0
 148   lo0
 192.168.100.0  link#10
 U   0
 0   rl0
 192.168.100.101   link#10  UHS
  0
 0   lo0
 192.168.200.0  link#5
 U   0
 0   re0
 192.168.200.101   link#5  UHS
0
 0   lo0
 
 Internet6:
 ---
 Ipv6 details
 
  Ifconfig
 
 re0: flags=8843UP,Broadcast,Running,Simplex,Multicast Metric 0 mtu 1500
 options=8209bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE
 ether 00:1f:d0:40:8b:bd
 inet6 fe80::21f:d0ff:fe40:8bbd%re0 prefixlen 64 scopeid 0x5
 inet 192.168.200.101 netmask 0xff00 broadcast 192.168.200.255
 nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
 media:Enthernet autoselect (none)
 status: no carrier
 
 rl0: flags=8843UP,Broadcast,Running,Simplex,Multicast Metric 0 mtu 1500
 options=2008VLAN_MTU,WOL_MAGIC
 ether 00:10:b5:48:9f:73
 inet6 fe80::21f:b5ff:fe48:9f73%rl0 prefixlen 64 scopeid 0xa
 inet 192.168.100.101 netmask 0xff00 broadcast 192.168.100.255
 nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
 media:Enthernet autoselect (none)
 status: no carrier
 
 there is a plip0 and lo0.

Neither NIC is connected to any equipment, e.g. switch, hub, or 
computer (status: no carrier). Make sure you can use a straight 
network cable, else you'll need to get a couple of cross wired network 
cables and use those instead.

Next, confirm the sysctl net.inet.ip.forwarding is set to 1 by
running the sysctl net.inet.ip.forwarding command.

If not, you can set the sysctl to 1 by running the sysctl 
net.inet.ip.forwarding=1 command, and you probably should inspect the 
/etc/rc.conf file one more time.

Once you connect the computer to the two networks, the IPv4 routing 
should work. If not, come back.

 Regards
 Hrisikesh
 
 On Wed, May 22, 2013 at 12:02 PM, Trond Endrestøl 
 trond.endres...@fagskolen.gjovik.no wrote:
 
  On Wed, 22 May 2013 11:10+0530, hrkesh sahu wrote:
 
   Hi All,
   IPv4 Routing  -
   
   I disabled the DHCP from rc.conf for both the interface. but still I am
  not
   able to route trafic from one interface to another.
  
   rc.conf
   ---
   hostname=idc-freebsd
   keymap=hy.armscii-8.kbd
   #ifconfig_re0=DHCP
   #ifconfig_rl0=DHCP
   dumpdev=NO
 
   ifconfig_rl0=inet 192.168.100.101 netmask 255.255.255.0
   ifconfig_re0=inet 192.168.200.101 netmask 255.255.255.0
 
  Are the two lines above copied straight from your rc.conf file?
  If so, both lines are missing a  at the end. Please check to see if
  this is needed.
 
  Next, the outputs of the ifconfig command and the netstat -r command
  should reveal something interesting. Would you please post the
  results from these two commands?
 
   ipv6_activate_all_interfaces=YES
   gateway_enable=YES
   default_router=192.168.200.1
  
   I am using FreeBSD - 9.1 Release version
  
   I need to communicate between two different subnets.
  
   Am i missing anything to enable freebsd as router?
   Do i need to add a route entry?
  
   If possible could you please share rc.conf file with IPv4 routing?
  
   Regards
   Hrisikesh
  
   On Thu, May 9, 2013 at 2:04 PM, Trond Endrestøl 
   trond.endres...@fagskolen.gjovik.no wrote:
  
On Thu, 9 May 2013 12:18+0530, hrkesh sahu wrote:
   
  HI All,
 
 I have a FreeBSD 9.1 Release installed with TWO NIC cards. I was
  trying
to
 make this FreeBSD machine as a router .
 This is my rc.conf
 
 ifconfig_rl0 = inet 192.168.100.101 netmask 255.255.255.0
 ifconfig_re0=inet 192.168.200.101 netmask 255.255.255.0

 gateway_enable = YES
 ifconfig_rl0 = DHCP
 ifconfig_re0 = DHCP

 defaultrouter = 192.168.100.1
 ipv6_activate_all_interfaces = YES
 sshd_enable = YES
 synchronous_dhclient=YES

 Please help me to establish a IPv4 router.
 Both the interfaces are connected to to different laptops with a
  static
IP
 address.
   
You should place a # in front of the two lines:
   
 ifconfig_rl0 = DHCP
 ifconfig_re0 = DHCP
   
Next, you probably shouldn't place spaces before and after the 

Re: Fresh installation 9.1

2013-05-22 Thread hrkesh sahu
Hi Trond ,
Thanks a lot.
Now i am able to ping to other network with IPv4 address.

For IPv6 I added these lines in rc.conf -
first I included -
ipv6_gateway_enable=YES

++ Laptop1( Ipv6 address fe80::224:7eff:fee0:6b51) is connected to
interface rl0 ( ipv6 address - fe80::21f:b5ff:fe48:9f73)
While doing ping6 from fe80::224:7eff:fee0:6b51 to
fe80::21f:b5ff:fe48:9f73 - it is working. Neighbor advertisement from
fe80::21f:b5ff:fe48:9f73 is happening.
while doing from ping6 from fe80::224:7eff:fee0:6b51 to other interface
fe80::21f:d0ff:fe40:8bbd , then there is no Neighbor advertisement.

After this I included these two lines to rc.conf -

rtadvd_enable=YES
rtadvd_interfaces=rl0

I have not created any file like /etc/rtadvd.conf . Do i need to create
this configuration file?
if yes, what should be the input to rtadvd.conf for  link local address?

please find Ipv6 interface details.


Ifconfig

re0: flags=8843UP,Broadcast,
Running,Simplex,Multicast Metric 0 mtu 1500
options=8209bRXCSUM,TXCSUM,
VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE
ether 00:1f:d0:40:8b:bd
inet6 fe80::21f:d0ff:fe40:8bbd%re0 prefixlen 64 scopeid 0x5
inet 192.168.200.101 netmask 0xff00 broadcast 192.168.200.255
nd6 options=21PERFORMNUD,AUTO_
LINKLOCAL
media:Enthernet autoselect (none)
status:active

rl0: flags=8843UP,Broadcast,
Running,Simplex,Multicast Metric 0 mtu 1500
options=2008VLAN_MTU,WOL_MAGIC
ether 00:10:b5:48:9f:73
inet6 fe80::21f:b5ff:fe48:9f73%rl0 prefixlen 64 scopeid 0xa
inet 192.168.100.101 netmask 0xff00 broadcast 192.168.100.255
nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
media:Enthernet autoselect (none)
status: active


Regards
Hrisikesh





On Wed, May 22, 2013 at 1:03 PM, Trond Endrestøl 
trond.endres...@fagskolen.gjovik.no wrote:

 On Wed, 22 May 2013 12:38+0530, hrkesh sahu wrote:

  Hi ,
  Thanks a lot for this quick reply.
  Sorry i missed the  in the end while typing. It's a typo.
  I provided the ouput of  nestat -r  and ifconfig.
 
   netstat -r
  --
  routing tables  -
 
  internet :
  ---
  destination   Gateway
  Flags   Refs
  Use   Netif Expire
  default 192.168.200.1
  UGS   0
  0  re0
  localhost  link#12
  UH 0
  148   lo0
  192.168.100.0  link#10
  U   0
  0   rl0
  192.168.100.101   link#10  UHS
   0
  0   lo0
  192.168.200.0  link#5
  U   0
  0   re0
  192.168.200.101   link#5  UHS
 0
  0   lo0
 
  Internet6:
  ---
  Ipv6 details
 
   Ifconfig
  
  re0: flags=8843UP,Broadcast,Running,Simplex,Multicast Metric 0 mtu 1500
 
 options=8209bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE
  ether 00:1f:d0:40:8b:bd
  inet6 fe80::21f:d0ff:fe40:8bbd%re0 prefixlen 64 scopeid 0x5
  inet 192.168.200.101 netmask 0xff00 broadcast 192.168.200.255
  nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
  media:Enthernet autoselect (none)
  status: no carrier
 
  rl0: flags=8843UP,Broadcast,Running,Simplex,Multicast Metric 0 mtu 1500
  options=2008VLAN_MTU,WOL_MAGIC
  ether 00:10:b5:48:9f:73
  inet6 fe80::21f:b5ff:fe48:9f73%rl0 prefixlen 64 scopeid 0xa
  inet 192.168.100.101 netmask 0xff00 broadcast 192.168.100.255
  nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
  media:Enthernet autoselect (none)
  status: no carrier
 
  there is a plip0 and lo0.

 Neither NIC is connected to any equipment, e.g. switch, hub, or
 computer (status: no carrier). Make sure you can use a straight
 network cable, else you'll need to get a couple of cross wired network
 cables and use those instead.

 Next, confirm the sysctl net.inet.ip.forwarding is set to 1 by
 running the sysctl net.inet.ip.forwarding command.

 If not, you can set the sysctl to 1 by running the sysctl
 net.inet.ip.forwarding=1 command, and you probably should inspect the
 /etc/rc.conf file one more time.

 Once you connect the computer to the two networks, the IPv4 routing
 should work. If not, come back.

  Regards
  Hrisikesh
 
  On Wed, May 22, 2013 at 12:02 PM, Trond Endrestøl 
  trond.endres...@fagskolen.gjovik.no wrote:
 
   On Wed, 22 May 2013 11:10+0530, hrkesh sahu wrote:
  
Hi All,
IPv4 Routing  -

I disabled the DHCP from rc.conf for both the interface. but still I
 am
   not
able to route trafic from one interface to another.
   
rc.conf
---
hostname=idc-freebsd
keymap=hy.armscii-8.kbd
#ifconfig_re0=DHCP
#ifconfig_rl0=DHCP
dumpdev=NO
  

Upgrading from 8.3 to 9.1 zfs pool can't attach

2013-05-22 Thread Leslie Jensen


I've upgraded a machine with freebsd-update from 8.3 to 9.1.

After the first restart I edited /etc/fstab in single user mode because 
the names on the disks had changed. But the zpool I have seem to have a 
problem and I'm not sure on how to recover it.



May 22 12:00:39  kernel: ZFS WARNING: Unable to attach to ada0.
May 22 12:00:39  kernel: ZFS WARNING: Unable to attach to ada1.
May 22 12:00:39  kernel: ZFS WARNING: Unable to attach to ada4.
May 22 12:00:40  kernel: ZFS WARNING: Unable to attach to ada5.


camcontrol devlist
ST3320620AS 3.AAEat scbus0 target 0 lun 0 (ada0,pass0)
ST3320620AS 3.AAEat scbus1 target 0 lun 0 (ada1,pass1)
WDC WD360GD-00FNA0 35.06K35  at scbus2 target 0 lun 0 (ada2,pass2)
WDC WD360GD-00FNA0 35.06K35  at scbus2 target 1 lun 0 (ada3,pass3)
ST3320620AS 3.AAEat scbus3 target 0 lun 0 (ada4,pass4)
ST3320620AS 3.AAEat scbus3 target 1 lun 0 (ada5,pass5)

ada2 and ada3 are configured as raid/r0 holding the system.

ada0, ada1, ada4 and ada5 should be a zpool with /storage


cat /etc/fstab

# DeviceMountpoint  FStype  Options   Dump Pass#
/dev/raid/r0s1b noneswapsw 0   0
/dev/raid/r0s1a /   ufs rw 1   1
/dev/raid/r0s1e /tmpufs rw 2   2
/dev/raid/r0s1f /usrufs rw 2   2
/dev/raid/r0s1d /varufs rw 2   2



Can I recover it?

Thanks

/Leslie
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fresh installation 9.1

2013-05-22 Thread Trond Endrestøl
On Wed, 22 May 2013 18:21+0530, hrkesh sahu wrote:

 Hi Trond ,
 Thanks a lot.
 Now i am able to ping to other network with IPv4 address.
 
 For IPv6 I added these lines in rc.conf -
 first I included -
 ipv6_gateway_enable=YES
 
 ++ Laptop1( Ipv6 address fe80::224:7eff:fee0:6b51) is connected to
 interface rl0 ( ipv6 address - fe80::21f:b5ff:fe48:9f73)
 While doing ping6 from fe80::224:7eff:fee0:6b51 to
 fe80::21f:b5ff:fe48:9f73 - it is working. Neighbor advertisement from
 fe80::21f:b5ff:fe48:9f73 is happening.
 while doing from ping6 from fe80::224:7eff:fee0:6b51 to other interface
 fe80::21f:d0ff:fe40:8bbd , then there is no Neighbor advertisement.
 
 After this I included these two lines to rc.conf -
 
 rtadvd_enable=YES
 rtadvd_interfaces=rl0
 
 I have not created any file like /etc/rtadvd.conf . Do i need to create
 this configuration file?
 if yes, what should be the input to rtadvd.conf for  link local address?
 
 please find Ipv6 interface details.
 
 
 Ifconfig
 
 re0: flags=8843UP,Broadcast,
 Running,Simplex,Multicast Metric 0 mtu 1500
 options=8209bRXCSUM,TXCSUM,
 VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE
 ether 00:1f:d0:40:8b:bd
 inet6 fe80::21f:d0ff:fe40:8bbd%re0 prefixlen 64 scopeid 0x5
 inet 192.168.200.101 netmask 0xff00 broadcast 192.168.200.255
 nd6 options=21PERFORMNUD,AUTO_
 LINKLOCAL
 media:Enthernet autoselect (none)
 status:active
 
 rl0: flags=8843UP,Broadcast,
 Running,Simplex,Multicast Metric 0 mtu 1500
 options=2008VLAN_MTU,WOL_MAGIC
 ether 00:10:b5:48:9f:73
 inet6 fe80::21f:b5ff:fe48:9f73%rl0 prefixlen 64 scopeid 0xa
 inet 192.168.100.101 netmask 0xff00 broadcast 192.168.100.255
 nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
 media:Enthernet autoselect (none)
 status: active

Congratz on achieving active carrier wave on your NICs.

Right now your system is running with link-local IPv6 addresses. You 
may view LL addresses as VLAN local. Packets to such addresses will 
never ever be forwarded by a router.

Instead set up either official IPv6 addresses/subnets or create your 
own Unique Local Addresses (ULA) as I wrote previously about.

Augment your /etc/rc.conf file with, say:

ifconfig_rl0_ipv6=inet6 fd8f:d6d0:e6e7:100::101 prefixlen 64

You may assign the IPv6 address manually to avoid restarting the 
networking subsystem or the whole machine:

ifconfig rl0 inet6 fd8f:d6d0:e6e7:100::101 prefixlen 64

Next, create /etc/rtadvd.conf with the following contents:

rl0:\
:addr=fd8f:d6d0:e6e7:100:::prefixlen#64:

If you want IPv6 routing on the re0 interface, you need, say this, in 
/etc/rc.conf:

ifconfig_re0_ipv6=inet6 fd44:13de:a366:200::1 prefixlen 64

Assign the IPv6 address manually using:

ifconfig re0 inet6 fd44:13de:a366:200::1 prefixlen 64

And add this to /etc/rtadvd.conf:

re0:\
:addr=fd44:13de:a366:200:::prefixlen#64:

You'll need to restart rtadvd by issuing /etc/rc.d/rtadvd restart.

Happy hacking.

 Regards
 Hrisikesh
 
 On Wed, May 22, 2013 at 1:03 PM, Trond Endrestøl 
 trond.endres...@fagskolen.gjovik.no wrote:
 
  On Wed, 22 May 2013 12:38+0530, hrkesh sahu wrote:
 
   Hi ,
   Thanks a lot for this quick reply.
   Sorry i missed the  in the end while typing. It's a typo.
   I provided the ouput of  nestat -r  and ifconfig.
  
netstat -r
   --
   routing tables  -
  
   internet :
   ---
   destination   Gateway
   Flags   Refs
   Use   Netif Expire
   default 192.168.200.1
   UGS   0
   0  re0
   localhost  link#12
   UH 0
   148   lo0
   192.168.100.0  link#10
   U   0
   0   rl0
   192.168.100.101   link#10  UHS
0
   0   lo0
   192.168.200.0  link#5
   U   0
   0   re0
   192.168.200.101   link#5  UHS
  0
   0   lo0
  
   Internet6:
   ---
   Ipv6 details
  
Ifconfig
   
   re0: flags=8843UP,Broadcast,Running,Simplex,Multicast Metric 0 mtu 1500
  
  options=8209bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE
   ether 00:1f:d0:40:8b:bd
   inet6 fe80::21f:d0ff:fe40:8bbd%re0 prefixlen 64 scopeid 0x5
   inet 192.168.200.101 netmask 0xff00 broadcast 192.168.200.255
   nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
   media:Enthernet autoselect (none)
   status: no carrier
  
   rl0: flags=8843UP,Broadcast,Running,Simplex,Multicast Metric 0 mtu 1500
   options=2008VLAN_MTU,WOL_MAGIC
   ether 00:10:b5:48:9f:73
   inet6 fe80::21f:b5ff:fe48:9f73%rl0 prefixlen 64 scopeid 0xa
   inet 192.168.100.101 netmask 

MySQL hangs server completely

2013-05-22 Thread Alejandro Imass
Hi,

We've been having this problem with a customer for a while and it
seems that some funky query makes MySQL use 100% of CPU. Nevertheless,
even though you can see in top that it's only 1 CPU in 100% (out of 8)
the server eventually becomes useless and stops responding completely.

So my question is, how does a user process hang the whole server? What
system resources could MySQL be draining to make the server stop
responding completely?

The MySQL database is running inside a Jail and perhaps that could
help limit the damage it can cause. Has anyone else run into this
problem?

Thanks,

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fresh installation 9.1

2013-05-22 Thread hrkesh sahu
Hi Trond,
Thanks a lot for a clear reply.
Could you please tell me Laptop1 ipv6 configuration details?
as laptop auto configuration will generate the LL address for a auto ipv6
configuration.
For Interface rl0 ipv6 address
ifconfig_rl0_ipv6=inet6 fd8f:d6d0:e6e7:100::101 prefixlen 64 ,

what will be laptop ipv6 address?

Regards




On Wed, May 22, 2013 at 6:54 PM, Trond Endrestøl 
trond.endres...@fagskolen.gjovik.no wrote:

 On Wed, 22 May 2013 18:21+0530, hrkesh sahu wrote:

  Hi Trond ,
  Thanks a lot.
  Now i am able to ping to other network with IPv4 address.
 
  For IPv6 I added these lines in rc.conf -
  first I included -
  ipv6_gateway_enable=YES
 
  ++ Laptop1( Ipv6 address fe80::224:7eff:fee0:6b51) is connected to
  interface rl0 ( ipv6 address - fe80::21f:b5ff:fe48:9f73)
  While doing ping6 from fe80::224:7eff:fee0:6b51 to
  fe80::21f:b5ff:fe48:9f73 - it is working. Neighbor advertisement from
  fe80::21f:b5ff:fe48:9f73 is happening.
  while doing from ping6 from fe80::224:7eff:fee0:6b51 to other interface
  fe80::21f:d0ff:fe40:8bbd , then there is no Neighbor advertisement.
 
  After this I included these two lines to rc.conf -
 
  rtadvd_enable=YES
  rtadvd_interfaces=rl0
 
  I have not created any file like /etc/rtadvd.conf . Do i need to create
  this configuration file?
  if yes, what should be the input to rtadvd.conf for  link local address?
 
  please find Ipv6 interface details.
 
 
  Ifconfig
  
  re0: flags=8843UP,Broadcast,
  Running,Simplex,Multicast Metric 0 mtu 1500
  options=8209bRXCSUM,TXCSUM,
  VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE
  ether 00:1f:d0:40:8b:bd
  inet6 fe80::21f:d0ff:fe40:8bbd%re0 prefixlen 64 scopeid 0x5
  inet 192.168.200.101 netmask 0xff00 broadcast 192.168.200.255
  nd6 options=21PERFORMNUD,AUTO_
  LINKLOCAL
  media:Enthernet autoselect (none)
  status:active
 
  rl0: flags=8843UP,Broadcast,
  Running,Simplex,Multicast Metric 0 mtu 1500
  options=2008VLAN_MTU,WOL_MAGIC
  ether 00:10:b5:48:9f:73
  inet6 fe80::21f:b5ff:fe48:9f73%rl0 prefixlen 64 scopeid 0xa
  inet 192.168.100.101 netmask 0xff00 broadcast 192.168.100.255
  nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
  media:Enthernet autoselect (none)
  status: active

 Congratz on achieving active carrier wave on your NICs.

 Right now your system is running with link-local IPv6 addresses. You
 may view LL addresses as VLAN local. Packets to such addresses will
 never ever be forwarded by a router.

 Instead set up either official IPv6 addresses/subnets or create your
 own Unique Local Addresses (ULA) as I wrote previously about.

 Augment your /etc/rc.conf file with, say:

 ifconfig_rl0_ipv6=inet6 fd8f:d6d0:e6e7:100::101 prefixlen 64

 You may assign the IPv6 address manually to avoid restarting the
 networking subsystem or the whole machine:

 ifconfig rl0 inet6 fd8f:d6d0:e6e7:100::101 prefixlen 64

 Next, create /etc/rtadvd.conf with the following contents:

 rl0:\
 :addr=fd8f:d6d0:e6e7:100:::prefixlen#64:

 If you want IPv6 routing on the re0 interface, you need, say this, in
 /etc/rc.conf:

 ifconfig_re0_ipv6=inet6 fd44:13de:a366:200::1 prefixlen 64

 Assign the IPv6 address manually using:

 ifconfig re0 inet6 fd44:13de:a366:200::1 prefixlen 64

 And add this to /etc/rtadvd.conf:

 re0:\
 :addr=fd44:13de:a366:200:::prefixlen#64:

 You'll need to restart rtadvd by issuing /etc/rc.d/rtadvd restart.

 Happy hacking.

  Regards
  Hrisikesh
 
  On Wed, May 22, 2013 at 1:03 PM, Trond Endrestøl 
  trond.endres...@fagskolen.gjovik.no wrote:
 
   On Wed, 22 May 2013 12:38+0530, hrkesh sahu wrote:
  
Hi ,
Thanks a lot for this quick reply.
Sorry i missed the  in the end while typing. It's a typo.
I provided the ouput of  nestat -r  and ifconfig.
   
 netstat -r
--
routing tables  -
   
internet :
---
destination   Gateway
Flags   Refs
Use   Netif Expire
default 192.168.200.1
UGS   0
0  re0
localhost  link#12
UH 0
148   lo0
192.168.100.0  link#10
U   0
0   rl0
192.168.100.101   link#10  UHS
 0
0   lo0
192.168.200.0  link#5
U   0
0   re0
192.168.200.101   link#5  UHS
   0
0   lo0
   
Internet6:
---
Ipv6 details
   
 Ifconfig

re0: flags=8843UP,Broadcast,Running,Simplex,Multicast Metric 0 mtu
 1500
   
  
 

Re: Fresh installation 9.1

2013-05-22 Thread Trond Endrestøl
On Wed, 22 May 2013 19:34+0530, hrkesh sahu wrote:

 Hi Trond,
 Thanks a lot for a clear reply.
 Could you please tell me Laptop1 ipv6 configuration details?
 as laptop auto configuration will generate the LL address for a auto ipv6
 configuration.
 For Interface rl0 ipv6 address
 ifconfig_rl0_ipv6=inet6 fd8f:d6d0:e6e7:100::101 prefixlen 64 ,
 
 what will be laptop ipv6 address?

It depends solely on the operating system and whether IPv6 privacy is 
in effect.

Normally, the client will perform stateless automatic address 
configuration (SLAAC). It goes pretty much like this:

The router announces the 64 bit prefix, usually every 200 seconds, but 
the client may request a new announcement at any time. The client 
generates a 64 bit interface identifier based on its 48 bit MAC 
address. The client then concatenates the supplied prefix with the 
generated interface identifier. The client then performs duplicate 
address detection (DAD), and if everythings checks out, the client got 
its IPv6 address.

Given this prefix fd8f:d6d0:e6e7:100::/64, and this MAC address 
50:e5:49:41:4d:70.

The client would then generated this interface id: 
52e5:49ff:fe41:4d70.

The Universal/Local bit of the MAC address is inverted, and FF:FE is 
placed at center. (It really ought to be FF:FF, but way back in time 
someone misread the IEEE standards regarding conversion from 48 bit 
MAC addresses to EUI64 format. This oversight doesn't really matter.)

The same client would then aqcuire this IPv6 address: 
fd8f:d6d0:e6e7:100:52e5:49ff:fe41:4d70, and perform DAD.

The client gets its IPv6 default route/gateway from the router 
announcement.

Of course, you may configure the IPv6 address and gateway manually on 
the client, say fd8f:d6d0:e6e7:100::1337/64 (client's address) and 
fd8f:d6d0:e6e7:100::101 (gateway's address).

 On Wed, May 22, 2013 at 6:54 PM, Trond Endrestøl 
 trond.endres...@fagskolen.gjovik.no wrote:
 
  On Wed, 22 May 2013 18:21+0530, hrkesh sahu wrote:
 
   Hi Trond ,
   Thanks a lot.
   Now i am able to ping to other network with IPv4 address.
  
   For IPv6 I added these lines in rc.conf -
   first I included -
   ipv6_gateway_enable=YES
  
   ++ Laptop1( Ipv6 address fe80::224:7eff:fee0:6b51) is connected to
   interface rl0 ( ipv6 address - fe80::21f:b5ff:fe48:9f73)
   While doing ping6 from fe80::224:7eff:fee0:6b51 to
   fe80::21f:b5ff:fe48:9f73 - it is working. Neighbor advertisement from
   fe80::21f:b5ff:fe48:9f73 is happening.
   while doing from ping6 from fe80::224:7eff:fee0:6b51 to other interface
   fe80::21f:d0ff:fe40:8bbd , then there is no Neighbor advertisement.
  
   After this I included these two lines to rc.conf -
  
   rtadvd_enable=YES
   rtadvd_interfaces=rl0
  
   I have not created any file like /etc/rtadvd.conf . Do i need to create
   this configuration file?
   if yes, what should be the input to rtadvd.conf for  link local address?
  
   please find Ipv6 interface details.
  
  
   Ifconfig
   
   re0: flags=8843UP,Broadcast,
   Running,Simplex,Multicast Metric 0 mtu 1500
   options=8209bRXCSUM,TXCSUM,
   VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE
   ether 00:1f:d0:40:8b:bd
   inet6 fe80::21f:d0ff:fe40:8bbd%re0 prefixlen 64 scopeid 0x5
   inet 192.168.200.101 netmask 0xff00 broadcast 192.168.200.255
   nd6 options=21PERFORMNUD,AUTO_
   LINKLOCAL
   media:Enthernet autoselect (none)
   status:active
  
   rl0: flags=8843UP,Broadcast,
   Running,Simplex,Multicast Metric 0 mtu 1500
   options=2008VLAN_MTU,WOL_MAGIC
   ether 00:10:b5:48:9f:73
   inet6 fe80::21f:b5ff:fe48:9f73%rl0 prefixlen 64 scopeid 0xa
   inet 192.168.100.101 netmask 0xff00 broadcast 192.168.100.255
   nd6 options=21PERFORMNUD,AUTO_LINKLOCAL
   media:Enthernet autoselect (none)
   status: active
 
  Congratz on achieving active carrier wave on your NICs.
 
  Right now your system is running with link-local IPv6 addresses. You
  may view LL addresses as VLAN local. Packets to such addresses will
  never ever be forwarded by a router.
 
  Instead set up either official IPv6 addresses/subnets or create your
  own Unique Local Addresses (ULA) as I wrote previously about.
 
  Augment your /etc/rc.conf file with, say:
 
  ifconfig_rl0_ipv6=inet6 fd8f:d6d0:e6e7:100::101 prefixlen 64
 
  You may assign the IPv6 address manually to avoid restarting the
  networking subsystem or the whole machine:
 
  ifconfig rl0 inet6 fd8f:d6d0:e6e7:100::101 prefixlen 64
 
  Next, create /etc/rtadvd.conf with the following contents:
 
  rl0:\
  :addr=fd8f:d6d0:e6e7:100:::prefixlen#64:
 
  If you want IPv6 routing on the re0 interface, you need, say this, in
  /etc/rc.conf:
 
  ifconfig_re0_ipv6=inet6 fd44:13de:a366:200::1 prefixlen 64
 
  Assign the IPv6 address manually using:
 
  ifconfig re0 inet6 fd44:13de:a366:200::1 prefixlen 64
 
  And add this to /etc/rtadvd.conf:
 
  re0:\
  :addr=fd44:13de:a366:200:::prefixlen#64:
 
  You'll need to restart rtadvd by issuing 

Re: MySQL hangs server completely

2013-05-22 Thread Alejandro Imass
On Wed, May 22, 2013 at 2:04 PM, Michael Ross g...@ross.cx wrote:
 On Wed, 22 May 2013 15:52:45 +0200, Alejandro Imass aim...@yabarana.com
 wrote:

 Hi,

 We've been having this problem with a customer for a while and it
 seems that some funky query makes MySQL use 100% of CPU. Nevertheless,
 even though you can see in top that it's only 1 CPU in 100% (out of 8)
 the server eventually becomes useless and stops responding completely.

 So my question is, how does a user process hang the whole server? What
 system resources could MySQL be draining to make the server stop
 responding completely?


 In laymans terms - can't do better - MySQL racing itself to obtain a ( table
 | memory | file ) lock?

 I know I can death-stall the MySQL server at a customer's site if I give it
 a big enough query ( like, DROPping a table, recreating it and pushing
 backup data inside ) while cron's hourly backup-dump is running on the
 database. Just the MySQL server, the machine itself hasn't stalled yet - but
 I'm sitting at the console while doing this, so I don't know what would
 eventually happen if I'd let it sit for a while.


Right on the money. It doesn't immediately hang the server but in time
it drains it to the point the shell stops responding and no more ssh
access and even snmp stops responding! It doesn't happen immediately,
but only after a while that MySQL has one of the CPUs at 100%.

What I don't understand is how it manages to crash the whole server.

Thanks,

-- 
Alejandro Imass


 Regards,

 Michael
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Keeping my system up to date with CTM or subversion?

2013-05-22 Thread Ed Flecko
I'm confused about an effective way to keep my system patched and
up-to-date, and I'm hoping someone can clarify what seems like a lot of
options.

I'll be running a production server (so security and stability are most
important) with a custom kernel and I want it to have all of the latest
security patches applied. I'll install from DVD and I'll chose the option
to install both the ports and the source.

After this, it sure seems like the best way, in terms of speed to download
any updated files, is to use CTM as a cron job, but I think the FBSD
handbook recommends subversion? Also, I think I read that CTM won't update
documentation? Is that right?

I also see some people say they use portsnap, portaudit and portupgrade.
For example, I came across this command:

portsnap fetch  /usr/sbin/portsnap update  /usr/local/sbin/portaudit -F
 /usr/local/sbin/portupgrade –aR

however these utilities are used more for keeping your ports collection
up-to-date (if you install software from ports), and not so much for
keeping your system patched from a security perspective - isn't that right?

Hopefully, someone can clarify my confusion.

Thank you!

Ed
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: MySQL hangs server completely

2013-05-22 Thread Michael Ross
On Wed, 22 May 2013 15:52:45 +0200, Alejandro Imass aim...@yabarana.com  
wrote:



Hi,

We've been having this problem with a customer for a while and it
seems that some funky query makes MySQL use 100% of CPU. Nevertheless,
even though you can see in top that it's only 1 CPU in 100% (out of 8)
the server eventually becomes useless and stops responding completely.

So my question is, how does a user process hang the whole server? What
system resources could MySQL be draining to make the server stop
responding completely?



In laymans terms - can't do better - MySQL racing itself to obtain a (  
table | memory | file ) lock?


I know I can death-stall the MySQL server at a customer's site if I give  
it a big enough query ( like, DROPping a table, recreating it and pushing  
backup data inside ) while cron's hourly backup-dump is running on the  
database. Just the MySQL server, the machine itself hasn't stalled yet -  
but I'm sitting at the console while doing this, so I don't know what  
would eventually happen if I'd let it sit for a while.



Regards,

Michael
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Keeping my system up to date with CTM or subversion?

2013-05-22 Thread Alexandre
On Wed, May 22, 2013 at 8:26 PM, Ed Flecko edfle...@gmail.com wrote:

 I'm confused about an effective way to keep my system patched and
 up-to-date, and I'm hoping someone can clarify what seems like a lot of
 options.

 I'll be running a production server (so security and stability are most
 important) with a custom kernel and I want it to have all of the latest
 security patches applied. I'll install from DVD and I'll chose the option
 to install both the ports and the source.

 After this, it sure seems like the best way, in terms of speed to download
 any updated files, is to use CTM as a cron job, but I think the FBSD
 handbook recommends subversion? Also, I think I read that CTM won't update
 documentation? Is that right?

 I also see some people say they use portsnap, portaudit and portupgrade.
 For example, I came across this command:

 portsnap fetch  /usr/sbin/portsnap update  /usr/local/sbin/portaudit -F
  /usr/local/sbin/portupgrade –aR

 however these utilities are used more for keeping your ports collection
 up-to-date (if you install software from ports), and not so much for
 keeping your system patched from a security perspective - isn't that right?

 Hopefully, someone can clarify my confusion.

 Thank you!

 Ed


Hi Ed,

To update my ports tree, I use portsnap tool. To install ports (or
upgrade them) I use portmaster. More information here:
http://www.freebsd.org/doc/en/books/handbook/ports-using.html
To update my sources tree, I use subversion tool. Then I rebuild world.
More information here: http://www.freebsd.org/doc/en/books/handbook/svn.html
  http://www.freebsd.org/doc/en/books/handbook/makeworld.html
I use subversion to update my sources tree because I am running 9-STABLE.
If you are running 9.x-RELEASE (or 8.x-RELEASE) you can use
freebsd-update to sync sources and install binary patchs. As you are
using custom kernel, you will have to recompile it. More information here:
http://www.freebsd.org/doc/en/books/handbook/updating-upgrading-freebsdupdate.html

I hope this help you.

Kind regards,
Alexandre
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Unkillable processes

2013-05-22 Thread Joshua Isom

On 5/22/2013 1:47 AM, David Demelier wrote:

2013/5/19 Joshua Isom jri...@gmail.com:


A process can be unkillable if it's holding a lock, like reading from disk.
Eventually, the lock will release and it should die.  You can use limits to
change how much CPU and memory a process can use.  My guess is what happened
is it started using a lot of memory, but you ran out and have a lot of swap.
It was trying to run while using your hard drive instead of ram.  With
limits, you should be able to prevent it from using swap which could help,
and cap the amount of ram and cpu.


Hello, thank you for that precise explanation, I will add limits into
the new rctl.conf, however I don't know how many amount of ram I
should allow, in fact I have absolutely no idea how much of ram an
usual program eats, is 50Mo enough for user applications ?

Regards,

--
Demelier David



A usual program on FreeBSD could be anything.  Right now my cron's 
using about 1.5 megs, while my ZFS ARC is about 20 gigabytes.  Firefox 
can use a gigabyte somewhat easily.  What I'd recommend is using limits 
to disable swap for it, and temporarily set the maximum memory to around 
2/3's your currently free memory.  If it's behaving properly that should 
be safe.  While it's running properly, get an idea of how much it wants 
and set the ram to 1.5 times that number.  If it's misbehaving, your 
system should still run properly and maybe you can diagnose the problem.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Keeping my system up to date with CTM or subversion?

2013-05-22 Thread Ed Flecko
Alexandre,
Yes, that helps - thank you.

So once you have a system up and running, how do you monitor if and when
you need to upgrade your ports tree?

By the way, your ports tree is different than installed software packages,
right? In other words, the only reason people even bother to upgrade their
ports tree is so that IF you install a package from source - the source is
current? Is that correct?

When security vulnerabilities are discovered and patches released by FBSD,
the patch will tell you what steps you need to take to apply the patch and
stay up to date, won't it?

Ed


On Wed, May 22, 2013 at 1:00 PM, Alexandre axel...@ymail.com wrote:

 On Wed, May 22, 2013 at 8:26 PM, Ed Flecko edfle...@gmail.com wrote:

 I'm confused about an effective way to keep my system patched and
 up-to-date, and I'm hoping someone can clarify what seems like a lot of
 options.

 I'll be running a production server (so security and stability are most
 important) with a custom kernel and I want it to have all of the latest
 security patches applied. I'll install from DVD and I'll chose the option
 to install both the ports and the source.

 After this, it sure seems like the best way, in terms of speed to download
 any updated files, is to use CTM as a cron job, but I think the FBSD
 handbook recommends subversion? Also, I think I read that CTM won't update
 documentation? Is that right?

 I also see some people say they use portsnap, portaudit and portupgrade.
 For example, I came across this command:

 portsnap fetch  /usr/sbin/portsnap update  /usr/local/sbin/portaudit
 -F
  /usr/local/sbin/portupgrade –aR

 however these utilities are used more for keeping your ports collection
 up-to-date (if you install software from ports), and not so much for
 keeping your system patched from a security perspective - isn't that
 right?

 Hopefully, someone can clarify my confusion.

 Thank you!

 Ed


 Hi Ed,

 To update my ports tree, I use portsnap tool. To install ports (or
 upgrade them) I use portmaster. More information here:
 http://www.freebsd.org/doc/en/books/handbook/ports-using.html
 To update my sources tree, I use subversion tool. Then I rebuild world.
 More information here:
 http://www.freebsd.org/doc/en/books/handbook/svn.html 
 http://www.freebsd.org/doc/en/books/handbook/makeworld.html
 I use subversion to update my sources tree because I am running 9-STABLE.
 If you are running 9.x-RELEASE (or 8.x-RELEASE) you can use
 freebsd-update to sync sources and install binary patchs. As you are
 using custom kernel, you will have to recompile it. More information here:
 http://www.freebsd.org/doc/en/books/handbook/updating-upgrading-freebsdupdate.html

 I hope this help you.

 Kind regards,
 Alexandre



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Keeping my system up to date with CTM or subversion?

2013-05-22 Thread Polytropon
On Wed, 22 May 2013 13:23:39 -0700, Ed Flecko wrote:
 So once you have a system up and running, how do you monitor if and when
 you need to upgrade your ports tree?

This highly depends on your updating policy. There are three
mainstream opinions:

a) always update, regularly (e. g. once a week)

b) only update if security requires it (e. g. when portaudit alerts)

c) update as soon as an additional functionality is desired

Of course, combined opinions are also valid. :-)

For updating the ports tree, portsnap is the eaiest tool. However,
if you follow opinion a) and update _very_ regularly (e. g. daily),
you could use SVN to obtain the (smaller) deltas to your local tree.
This also helps because you can directly access the tree and don't
have to wait until a snapshot is made available. For higher update
frequencies, this is often the better approach.

There is another valid opinion: Install once, make sure everything
works, never touch a running system. I'm a big fan of this attitude,
at least on my home systems. ;-)



 By the way, your ports tree is different than installed software packages,
 right?

That is possible when you update your ports tree (by whatever
method) _after_ you have installed something. A typical conclusion
is that you might need to rebuild stuff as soon as you install
something with that (newer) tree.

Example: Tree is at version 12345, you install foo-1.0 which
depends on bar-1.5. Two weeks later, you update your ports tree
and get version 23456. You don't want to touch foo and bar, but
you now need to install baz which requires bar-1.6 (which has
now arrived in the tree). So now you need to update bar from
1.5 to 1.6, and _maybe_ also foo to a newer version (whatever
that might be).



 In other words, the only reason people even bother to upgrade their
 ports tree is so that IF you install a package from source - the source is
 current? Is that correct?

Maybe the wording is a bit strange, but yes, updating the ports
tree means to have the lastest and _consistent_ versions of all
the programs in the tree (so their interconnections will work
properly). This is also helpful when you install from different
sources, e. g. some stuff from source, some stuff as binary
packages from Latest/.



 When security vulnerabilities are discovered and patches released by FBSD,
 the patch will tell you what steps you need to take to apply the patch and
 stay up to date, won't it?

The OS patches are announced that way. You should always read the
UPDATING files in /usr/src (for the OS) and /usr/ports (for installed
applications) to make sure you're not missing a simple (but important)
step during upgrades.

Patches for the OS are of course handled independently from those
applying to applications from the ports collection.




-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Keeping my system up to date with CTM or subversion?

2013-05-22 Thread Walter Hurry
On Wed, 22 May 2013 13:23:39 -0700, Ed Flecko wrote:

 Alexandre,
 Yes, that helps - thank you.
 
 So once you have a system up and running, how do you monitor if and when
 you need to upgrade your ports tree?
 
 By the way, your ports tree is different than installed software
 packages, right? In other words, the only reason people even bother to
 upgrade their ports tree is so that IF you install a package from source
 - the source is current? Is that correct?
 
 When security vulnerabilities are discovered and patches released by
 FBSD, the patch will tell you what steps you need to take to apply the
 patch and stay up to date, won't it?
 
Why are you asking these questions about a *production* server?
Run for a while with a test server until you have ironed out any issues.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: setup journaling for root partition

2013-05-22 Thread s m
thanks Michael, but in all documentation about journaling, tunefs is used
as below: tunefs -J enable ad3s1X.journal. ad3s1X.journal is created by
gjournal command: gjournal label ad3s1a ad3s1g that assign ad3s1g as
journal provider for ad3s1a and create ad3s1a.journal which contains ad3s1a
as data provider and ad3s1g as journal provider.

my problem is, i can not run gjournal command for root partition in fixit
mode nor single user mode. you mean, i should just use tunefs command on
ad3s1X (root partition)? if yes, then where journal provider for root
partition is located? in root partition?


On Wed, May 22, 2013 at 10:23 AM, Michael Sierchio ku...@tenebras.comwrote:



 On Tue, May 21, 2013 at 10:14 PM, s m sam.gh1...@gmail.com wrote:

 thanks guys for your attentions.

 i want to setup journaling in FreeBSD 8.2. i compare soft-update and
 journaling and choose journaling (it is more suitable for my goals).

 i want to enable journaling for all my partitions. i can do it for all
 partitions except root in single user mode. i can not do it for root
 because i can not unmount root in single user mode.


 No, but you don't need to.  In single user mode, root is mounted
 read-only.  You can run tunefs on the root fs device.

 - M

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: setup journaling for root partition

2013-05-22 Thread Michael Sierchio
On Wed, May 22, 2013 at 10:27 PM, s m sam.gh1...@gmail.com wrote:

 thanks Michael, but in all documentation about journaling, tunefs is used
 as below: tunefs -J enable ad3s1X.journal. ad3s1X.journal is created by
 gjournal command: gjournal label ad3s1a ad3s1g that assign ad3s1g as
 journal provider for ad3s1a and create ad3s1a.journal which contains ad3s1a
 as data provider and ad3s1g as journal provider.

 my problem is, i can not run gjournal command for root partition in fixit
 mode nor single user mode. you mean, i should just use tunefs command on
 ad3s1X (root partition)? if yes, then where journal provider for root
 partition is located? in root partition?


Ah, sorry -  lack of careful reading on my part.  Can you boot from
installation media and use the fixit mode?  This still won't work if the
last sector of the partition is in use by the filesystem  You'll need a
spare partition of some size to be the journal provider, as in the example.

The very best approach is to create a gjournal and then newfs.  How is your
disk organized?  One big root partition with everything on it?

- M
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: setup journaling for root partition

2013-05-22 Thread s m
thanks Michael for your quick reply:)
yes, i can boot from usb freebsd flash and use fixit mode.
i have root, var, tmp, usr and swap on my system. i create an extra swap
partition to use it as journal provider for root partition.

in fixit mode, first i run two below command in order to abel load gjournal:

ln -s /dist/lib /lib
ls -s /dist/boot/kernel /boot/modules

then
gjournal load

and after that: gjournal label -f ad3s1a ad3s1g (ad3s1a is root partition
and ad3s1g is swap partition for journal provider)

but this error is shown:
gjournal cannot clear metadata on ad3s1a: operation not permitted
what is wrong here??? i really don't know how to fix it:



On Thu, May 23, 2013 at 10:12 AM, Michael Sierchio ku...@tenebras.comwrote:


 On Wed, May 22, 2013 at 10:27 PM, s m sam.gh1...@gmail.com wrote:

 thanks Michael, but in all documentation about journaling, tunefs is used
 as below: tunefs -J enable ad3s1X.journal. ad3s1X.journal is created by
 gjournal command: gjournal label ad3s1a ad3s1g that assign ad3s1g as
 journal provider for ad3s1a and create ad3s1a.journal which contains ad3s1a
 as data provider and ad3s1g as journal provider.

 my problem is, i can not run gjournal command for root partition in fixit
 mode nor single user mode. you mean, i should just use tunefs command on
 ad3s1X (root partition)? if yes, then where journal provider for root
 partition is located? in root partition?


 Ah, sorry -  lack of careful reading on my part.  Can you boot from
 installation media and use the fixit mode?  This still won't work if the
 last sector of the partition is in use by the filesystem  You'll need a
 spare partition of some size to be the journal provider, as in the example.

 The very best approach is to create a gjournal and then newfs.  How is
 your disk organized?  One big root partition with everything on it?

 - M

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org