Re: /bin/csh script in GELI partition crashes 6.3-STABLE

2008-02-12 Thread Roland Smith
On Wed, Feb 13, 2008 at 12:59:41AM -0600, Scott Bennett wrote:
  % cat show
  #! /bin/csh
  set delay=3D2
  set pixlist=3D(09 08 07 05 04 03 02 01)
  foreach i ($pixlist)
  (nice xv $i.jpg )
  sleep $delay
  end
 =20
  The delay is simply to ensure the windows get opened in the sequence that
  I want them opened.  The photos are in the same directory, and I run it by
  typing ./show in the directory.  If I type, for example, xv 01.jpg, =
 it
  works fine in either the old location or in the GELI partition.  If I type
  ./show in the copy of the directory that is in the GELI partition, Free=
 BSD
  reboots immediately.=20
 
 I've run your script on a batch of photos on a GELI encrypted partition
 without problems. This is on FreeBSD 7.0-PRERELEASE amd64
 
 I would look at the X server. Since it runs as root and has access to
 /dev/mem and /dev/io an X bug could potentially screw things up quite nicel=
 y.
 I'm running xorg-server-1.4_4,1.
 
  I'm still running xorg-server-6.9.0_5, I believe.  Haven't yet felt like
 wading through the swamp of troubles that seems to await those who upgrade
 to 7.x, but will probably have to suffer through it soon.

The base system upgrade was painless as usual for me. To prevent
problems with ports, I had portmaster make a list of 'leaf' ports. Then
I deleted all ports, installed the new base system and re-installed the
leaf ports, which took care of the dependancies. Other than that it took
a long time I didn't have problems with the upgrade.

 If you have it installed, try display(1) from the ImageMagick suite
 instead of xv. See if it makes any difference.
 
  There's a thought.  However, I think first I'll try setting the GELI
 sector size to 4 KB to see whether that evades the bug.

That makes sense. I've never used anything but the default settings for newfs.

 I presume you've checked for the obvious things such as out of memory or
 filesystem full?
 
  What do you mean out of memory?  

Physical memory completely used and swap almost full. 

 And I only had the file system loaded
 to about 45% after minfree.


   Maybe I should try GBDE instead of GELI.  I chose GELI for the=20
  partition in question mainly because I was already using it for the swap
  partition, but maybe it's still a little too green to be reliable yet.
 =20
 I've used it on my /home for years without trouble.
 
 =46rom what I've read, GELI is supposed to be more secure.
 
  Well, if I can get it to work and not cause instant reboots, I'll stick
 with it.  Otherwise I'll have to play around with what works.

The only trouble I ever had with GELI was to try and use encrypted USB
mass storage devices. But those were apparently caused by a buggy
USB-ATA chip. And there seems to be a workaround in the driver on 7.x
because I haven't seen the problem since the upgrade.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpHgUbhBZYfh.pgp
Description: PGP signature


Re: Dump and restore for Windows partitions

2008-01-30 Thread Roland Smith
On Wed, Jan 30, 2008 at 09:18:53AM -0500, Martin Boulianne wrote:
 Hi,
 Maybe this is a dumb question, but I was wondering if I could use
 dump (and restore) on Windows NTFS partitions.
 
 Say I have a NTFS partition, ad0s1. Could I use:
# dump -b 4 -f /backups/winxp.dump /dev/ad0s1

Dump is only suited for FreeBSD's native UFS filesystem.
 
 Or after a restore, Windows would be able to read the files? What about dd,
 with something like:
# dd if=/dev/ad0s1 of=/backups/winxp.bck bs=4k

This should work, I think. But it will take up a lot of space, because
it will copy the every sector (even unused ones).

Unless there are special features of NTFS that you use, you could mount
the volume, and make a backup with zip(1) or tar(1). Note that with this method
you will probably lose any NTFS attributes. 

The port sysutils/ntfsprogs contains programs like ntfsclone and
ntfscp. Maybe those can be of use? 

Probably the best tool to completely backup an NTFS partition is a
windows-based tool.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpcUE6ka1gui.pgp
Description: PGP signature


Re: XDVI, LaTeX, teTeX dependencies

2008-01-29 Thread Roland Smith
On Tue, Jan 29, 2008 at 03:20:05AM +0100, Holger Jorra wrote:
 Hi,
 
 I know that this is not only a FreeBSD issue, but I don't know where else I 
 should ask. First, this issue has been brought up here in a different way 3 
 years ago, but there seems to be no solution, yet. [1]
 
 I use Latex for documentation and presentations of my work. My problem is 
 that 
 I still haven't found a working DVI-Viewer in FreeBSD without installing the 
 whole KDE-dependencies (KDVI). Latex compiles into dvi files.

(La)TeX can also generate PDF directly with pdf(la)tex. See
/usr/ports/print/teTeX-base/pkg-plist.

 So either I use 
 teTex (as the thread [1] recommends) but which is not supported anymore [2] 
 and cannot use XDVI, or I install the latex-package and will not be able to 
 use other Latex-tools like dvips and cannot print or share it.

It it not in ports (yet) but I think currently the best solution is to
install the TeXLive distribution that you can download from CTAN. It is the
most comprehensive TeX distribution out there. 

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpmyvRj8onTs.pgp
Description: PGP signature


Re: Fixing a USB disk to a specific device name

2008-01-21 Thread Roland Smith
On Mon, Jan 21, 2008 at 08:59:30AM +0400, Rakhesh Sasidharan wrote:
 
 Colin Brace wrote:
 
 I use udev rules to do this. See:
 
 
 http://www.linuxquestions.org/questions/linux-general-1/make-removable-usb-hdd-mount-at-fixed-mount-point-511917/
 
 
 That doesn't work on FreeBSD, does it? Udev's a Linux thing last I heard of 
 ...

You might be able to do that with devd(8). I don't know if you'll get
attach events on disk devices, you'll  have to try.

Keep in mind that you cannot use devd to unmount! You'll have to unmount
_before_ the device is detached/destroyed, or you might get a panic.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp3nKhvXcW1O.pgp
Description: PGP signature


Re: Fixing a USB disk to a specific device name

2008-01-21 Thread Roland Smith
On Mon, Jan 21, 2008 at 08:56:32AM +0400, Rakhesh Sasidharan wrote:
 
 What I'd like to know is whether there's any way for me to ensure that the
 da0 disk always appears as da0. I don't want it that tomm I plug in another
 disk (or change the order of disks, though I'll be more careful with that)
 and suddenly da0 is no longer at da0! That would hamper the boot process
 ... not nice.
 
 It is possible, but not as daX. Use the glabel(8) utility to label your
 disks. They will show up as /dev/label/yourlabel
 
 The daX devices are created as the device is plugged in, so AFAIK it's
 impossible to permanently assign them a certain daX device.
 
 Just mentioning this for archival purposes.
 
 If you are mounting a device as /dev/label/yourlabel at boot time, it 
 will fail unless you add a ''geom_label_load=YES'' to your 
 /boot/loader.conf file. Had me stumped for a while. This loads the geom 
 label module at boot time and so labels are recognized.

On 7.0-PRERELEASE, 'options GEOM_LABEL' is built into of the GENERIC
kernel, so it shouldn't be necessary there.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpLQR4Mu6Xk5.pgp
Description: PGP signature


Re: Fixing a USB disk to a specific device name

2008-01-21 Thread Roland Smith
On Mon, Jan 21, 2008 at 02:16:50PM -0300, Mario Lobo wrote:
 On Monday 21 January 2008 14:05:04 Mike Bristow wrote:
  On Mon, Jan 21, 2008 at 05:55:51PM +0100, Roland Smith wrote:
   On Mon, Jan 21, 2008 at 08:56:32AM +0400, Rakhesh Sasidharan wrote:
It is possible, but not as daX. Use the glabel(8) utility to label
your disks. They will show up as /dev/label/yourlabel
  
   On 7.0-PRERELEASE, 'options GEOM_LABEL' is built into of the GENERIC
   kernel, so it shouldn't be necessary there.
 
  Note that you can use UFS (and other filesystems labeling) too:  for
  example. 'newfs -L bobs_disk' will cause the device containing it to appear
  as /dev/ufs/bobs_disk.
 
  This approach may be better for removable disks; it'll play better with
  other OSs, for example.
 
 I simply put;
 
 /dev/da0s1/PenDrive   msdosfs rw,noauto   0   0
 
 in fstab. After pluging it in, i type 
 
 mount /PenDrive


Keep in mind that this only works for _one_ drive. As soon as you have
two, this won't work correctly.

If you have multiple drives, you should label them (with newfs_msdos or
mtools) e.g. 'diskA' and 'diskB'.

With GEOM_LABEL you'll then get /dev/msdosfs/diskA and /dev/msdosfs/diskB,
which you can then put in your /etc/fstab;

/dev/msdosfs/diskA  /mnt/diskA  msdosfs rw,noauto   0   0
/dev/msdosfs/diskB  /mnt/diskB  msdosfs rw,noauto   0   0

Of course you need to own /mnt/diskX if you want to mount it as a normal user.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpsar1UxP9JI.pgp
Description: PGP signature


Re: Fixing a USB disk to a specific device name

2008-01-20 Thread Roland Smith
On Sun, Jan 20, 2008 at 04:23:58PM +0400, Rakhesh Sasidharan wrote:
 
 Hi,
 
 Is it possible to assign a specific device name to a USB disk? As in, say I 
 have 2 USB disks -- currently they appear as da0 and da1. One of these 
 (da0) contains the key for a GELI encrypted partition, and so I mount it 
 from fstab while booting (to get the key).

Yes, more or less.
 
 What I'd like to know is whether there's any way for me to ensure that the 
 da0 disk always appears as da0. I don't want it that tomm I plug in another 
 disk (or change the order of disks, though I'll be more careful with that) 
 and suddenly da0 is no longer at da0! That would hamper the boot process 
 ... not nice.

It is possible, but not as daX. Use the glabel(8) utility to label your
disks. They will show up as /dev/label/yourlabel

The daX devices are created as the device is plugged in, so AFAIK it's
impossible to permanently assign them a certain daX device.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpb8CFeoUixQ.pgp
Description: PGP signature


Re: GELI key from a USB disk

2008-01-20 Thread Roland Smith
On Sun, Jan 20, 2008 at 09:25:36PM +0400, Rakhesh Sasidharan wrote:
 I thought this should be easy but its not working ... :(
 
 I have a USB disk /dev/da0. That's got a GELI key. I also have an external 
 hard-disk with partitions /dev/da1s1[a-f]. All GELI encrypted.
 
 What I want is that while booting up these encrypted partitions are loaded. 
 And their key taken from the da0 USB disk.
 
 I tried the obvious like mounting the USB disk in /etc/fstab and giving it 
 a lower pass no. than the encrypted partitions. But turns out that doesn't 
 work.

The pass number in /etc/fstab only affects the fsck order.

 FreeBSD tries to attach the GELI partitions before mounting local 
 filesystems! Any way to delay this step till after the USB disk is mounted 
 and the key available? Or any other suggestions?

It _must_ do so in case any local partitions are encrypted (like e.g my
/home).

What you can do is set the noauto flag for those filesystems, and mount
them be hand, or write a script for it.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpTLgS2abLGI.pgp
Description: PGP signature


Re: recovery FreeBSD

2008-01-13 Thread Roland Smith
On Sat, Jan 12, 2008 at 11:07:16PM -0800, mahdieh Saeed wrote:
 Hi,
 I have a question  about recovery.
 I removed one directory with rm -r .Is there any way to restore
 information that removed with rm -r.

In short, everything that is part of the base system or ports can be
restored with some effort.

If it is a subdirectory of /usr/src/, you can restore it with csup(1).
If it is a subdirectory of /usr/ports you can restore it by updating
your ports tree. Other directories under /usr (except /usr/local) can be
restored by rebuilding and reinstalling the base system as described in
the handbook. If you have removed /usr/local or a subdirectory of it you
could reinstall all your ports.

If you removed (part of) your home directory or any other non-system
data directory, you'd better have a backup. 

If you have never made a backup of your own data, start now!

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpWrHMBFuFyl.pgp
Description: PGP signature


Re: Another question based on: Re: HOW-TO get Flash7 working!

2008-01-13 Thread Roland Smith
On Sun, Jan 13, 2008 at 09:53:41AM -0500, Gerard wrote:
snip
 I belong to a state 'Officials Association' that deals with officiating
 High School sports. Their site is written in such a way that Flash with
 either Windows Media Player or QuickTime are required to properly view
 the site.

So their message is, We're not interested in people who don't use
windows. There is not anything that the FreeBSD community can do about
that. 

 Try as I might, I have never gotten either Opera or Firefox
 using FBSD to correctly view that site. I basically just gave up on it.
 The same problem exists with many sites sponsored by Google for
 instance.
 
 If this was 1990, perhaps I could understand it. However, considering
 the present state of computing, the fact that plug-ins like Flash are
 not simple drop-in applets, similar to the way Internet Explorer
 handles them, is simply not acceptable.

Then go and complain to the people who wrote flash. If they want to release
plugins for Firefox on FreeBSD they can do so. 

Since Flash is closed-source, there isn't a lot people in the FreeBSD
community can do about it.

There are several groups working on open-source implementations of
Flash, but these efforts are incomplete due to lack of documentation and
possibly volunteers.


Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpkHs1WfKxHd.pgp
Description: PGP signature


Re: Realtek RTL8139 Family Fast Eithernet Adapter Plugin

2008-01-13 Thread Roland Smith
On Sun, Jan 13, 2008 at 05:10:32PM -0500, Alden Pease wrote:

 Can you release a pack sometime in the future, like in version 8.0,
 with a Realtek RTL8139 Family Fast Eithernet Adapter plugin?

This chip is already supported by the re(4) driver. See

http://www.freebsd.org/cgi/man.cgi?query=reapropos=0sektion=4manpath=FreeBSD+6.2-RELEASEformat=html

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpLSpDJKySzk.pgp
Description: PGP signature


Re: BACKUP: multiple DVDs, burning from pipe

2008-01-11 Thread Roland Smith
On Fri, Jan 11, 2008 at 10:15:32AM +0100, [EMAIL PROTECTED] wrote:
 Hi all
 
 is there any way how to backup filesystem with ACL's and permissions
 directly from stdin to multiple DVDs?

With a little work, yes.

The only way to backup UFS filesystems with ACLs etc is dump. Make sure
that you have a filesystem with 4GB free space. Add a directory on this
fs, and set the nodump flag.

Have a look at the 'dodumps' script on my FreeBSD page;
http://www.xs4all.nl/~rsmith/freebsd/index.html#backups 

If you use dump like I do in dodumps, it splits the output in DVD-sized
chunks. After every chunk, it waits for you to type 'yes' to proceed. 

So what you can do is burn the first dumpfile to a DVD (don't bother
wrapping a cd9660 fs around it), delete it, and then continue with the dump.

Alternatively, you could buy an external USB harddisk which will have
room to spare and save you dumps on that. :-)

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpscheVAwUFn.pgp
Description: PGP signature


Re: healthd

2007-12-30 Thread Roland Smith
On Sun, Dec 30, 2007 at 04:00:12PM +0100, Michael Grant wrote:
 I installed healthd hoping it would show me the cpu temperatures and
 fan speeds for my motherboard but it's reporting some crazy values
 like fan speeds of -48C and fan speeds of 13000 rpms.

:-)
 
[snip]
 SuperMicro provides a windows utility which reads this data, so in
 theory I should be able to read this data somehow.
[snip]
 And if not via smbmsg, is there some way to get this data?

Try sysutils/mbmon. It can access monitoring chips in multiple ways.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpjuczvMTEuC.pgp
Description: PGP signature


Re: gui system information apps

2007-12-30 Thread Roland Smith
On Sun, Dec 30, 2007 at 10:11:10AM -0600, Jonathan Horne wrote:
 what are some good 'desktop-docked' system info apps (that run well in 
 freebsd), that might be similar in function to grkellm?
 
 i saw many screenshots of beautiful apps for superkaramba, but was pretty 
 disappointed that most of them only understand linux devices and fstabs.  was 
 wondering what gui apps my peers might be enjoying.

For me, sysutils/conky works fine. 

Things like temperature measurements depend on kernel support (hw.acpi
sysctls, IIRC).

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpxxJXTtyYT0.pgp
Description: PGP signature


Re: mutt??

2007-12-27 Thread Roland Smith
On Thu, Dec 27, 2007 at 11:02:00AM -0800, Gary Kline wrote:
 
 
 
 
   I've been trtryinng to rebuild everything on tao to get my i810
   graphics working. Somehow, mutt bbroke. It seems to break with 
   something undefined in perl5.8. 

I don't think it is perl; mutt doesn't depend on it.

   Anybody know what this is:
 
  Undefined symbol __sbmaskrune  ?
 
   tia, 

If you google for __sbmaskrune, you'll find this;
http://bsdpants.blogspot.com/2007/11/yuck-undefined-symbol-sbmaskrune.html

Looks like you'll have to update the base system to a state after the
following commit;
http://lists.freebsd.org/pipermail/cvs-src/2007-November/084046.html


Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpEVabOQ4fJU.pgp
Description: PGP signature


Re: No audio whatever....

2007-12-17 Thread Roland Smith
On Mon, Dec 17, 2007 at 01:06:10PM -0800, Gary Kline wrote:
 
   I realize this may have no easy answer, but suddenly,
   after a portupgrade -aP. I have no sound.  catting
   /deev/snstat does tell me that my sound card is there.
   my volme  is set to 100%.   Where else shoulf I be
   looking.

See if the sound server is running. KDE uses aRts, gnome uses esd, IIRC.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpWlPaJ1RxsU.pgp
Description: PGP signature


Re: Memory leak with conky, anyone else?

2007-12-13 Thread Roland Smith
On Thu, Dec 13, 2007 at 09:56:25PM -0700, Modulok wrote:
 I get the feeling Conky 1.4.8 (the sysutil), or one of the libs it
 links against, has a memory leak. I do not have any hard evidence yet
 (like a patch to fix it), but the memory consumption slowly climbs to
 what appears to be excessive. I did read the manual page about:
 
Conky is generally very good on resources. However, certain objects  in
 Conky  are  harder  on resources then othersIf  you  do use them,
 please do not complain about memory or CPU usage, unless you think
 something's seriously wrong...
 
 I am using those features, but I still think something is seriously

How does your .conkyrc look?

 wrong. The following is after running for 6.5 days:
 
 top;
   PID USERNAME   THR PRI NICE   SIZERES STATETIME   WCPU COMMAND
   791 Modulok  1  960   280M   278M select  42:37  0.00% conky

  41631 rsmith   1  440 27532K  5460K select  33:32  0.00% conky
 
 ps -u;
   USER  PID %CPU %MEM   VSZ   RSS  TT  STAT STARTED  TIME COMMAND
   Modulok   791  0.0 13.7 286708 284912  v0  SFri09AM  42:35.18 conky

 rsmith 41631  0.0  0.5 27532  5460  v0  S 3Dec07  33:31.68 conky -d

Fine here (FreeBSD 7.0-BETA3 amd64)

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpS8yGDS6VKd.pgp
Description: PGP signature


Re: FreeBSD Wacom driver

2007-12-12 Thread Roland Smith
On Tue, Dec 11, 2007 at 11:00:11PM +0100, Nikolaj Thygesen wrote:
 Hi,
 
Having just aquired a usb wacom tablet and discovering the linuxwacom 
 project, I was wondering why only serial tablets are supported on FBSD??

Doesn't it work with uhid(4)?

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgprOuCmeozOQ.pgp
Description: PGP signature


Re: Version 5.4

2007-12-11 Thread Roland Smith
On Tue, Dec 11, 2007 at 02:21:50PM -0600, Ham, Jason B. [C] wrote:
 I have a question as to whether there is support for the free bsd
 version 5.4.  Please advise.

Officially, 5.4 isn't supported by the FreeBSD project anymore. See
http://www.freebsd.org/releng/index.html#freeze 

Having said that, if you ask a question on this mailing list you will
probably get an answer. 

But if your problem is solved in a later (and supported) version, the
advice will probably be to upgrade. There will probably be little
interest from the maintainers in applying fixes to the RELENG_5_4 branch.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpMJBFu4GzEQ.pgp
Description: PGP signature


Re: looking for ideas: creating a data partition for a dual boot system

2007-12-11 Thread Roland Smith
On Tue, Dec 11, 2007 at 03:43:14PM -0500, Aryeh Friedman wrote:
 I have both vista and freebsd 8-current installed on the same drive
 and also have allocated the rest of the disk to be a fat32 partition.
  I know I should put any data I want to be passed between the two on
 the fat32 partition.   Now the question is how to lay it out so that:
 
 1. The home dir for my account of FreeBSD = Vista account's root dir

In FreeBSD you can mount the fat32 partition on /home/$USER. How to
handle this in vista you'd have to ask somewhere else, I think.

The FAT filesystem doesn't handle a lot of things (like file and
directory permissions) that UFS2 does. So this doesn't strike me as a
really good idea.

 2. Share the same Desktop folder (I think if #1 is solved this is automatic)

Maybe, but the Desktop folder would be pretty much useless for
FreeBSD. Maybe there is an X window manager that could do something
usefull with it, but I doubt it. And the icons and stuff would point to
windows programs/drives anyway.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpID6Ss3cc2s.pgp
Description: PGP signature


Re: looking for ideas: creating a data partition for a dual boot system

2007-12-11 Thread Roland Smith
On Tue, Dec 11, 2007 at 04:19:14PM -0500, Aryeh M. Friedman wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 
  2. Share the same Desktop folder (I think if #1 is solved this is
  automatic)
 
  Maybe, but the Desktop folder would be pretty much useless for
  FreeBSD. Maybe there is an X window manager that could do something
   usefull with it, but I doubt it. And the icons and stuff would
  point to windows programs/drives anyway.
 
 Every x desktop manager calls it ~/Desktop

What doe you mean by desktop manager? If you mean window manager, it
is definitely not true. For instance, fvwm2 uses ~/.fvwm/config.

If you mean desktop environments, it is also not true. According to
their respective documentations, KDE uses ~/.kde be default, and Gnome
uses ~/.gconf, ~/.gnome2 and ~/.local/share.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp35vZOmxRLO.pgp
Description: PGP signature


Re: copying DVD material :: somewhat OT.

2007-12-09 Thread Roland Smith
On Sun, Dec 09, 2007 at 11:57:18PM +, Chris Whitehouse wrote:
 I tried youtube-dl but every url I tried gave
 youtube-dl: No match.
 
 eg
 
 %youtube-dl http://youtube.com/watch?v=gpIM3nBR2ZA
 youtube-dl: No match.

You have to quote the argument to youtube-dl, otherwise the shell will
mess it up, because '?' is a special character for the shell.

So use: youtube-dl 'http://youtube.com/watch?v=gpIM3nBR2ZA'

Tested and works fine here.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp38Cmlqx9bh.pgp
Description: PGP signature


Re: PF firewall

2007-12-07 Thread Roland Smith
On Fri, Dec 07, 2007 at 06:20:37AM -0600, ajtiM wrote:
 Hi!
 
 I am a new FreeBSD 7.0 beta3 user and I have standalone computer connected to 
 the internet  (cable). I use both, console and KDE desktop. I tried to setup 
 PF firewall for the standalone computer but I have a problem with internal 
 messages (mail) which are blocked if firewall running.
 This is from /var/log/mail:
 sm-msp-queue[15113]: lB493C1i007320: to=root, ctladdr=root (0/0), 
 delay=1+21:37:55, xdelay=00:00:00, mailer=relay, pri
 =2552408, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Operation not 
 permitted
 
 My pf.conf looks like:
 
 pass out  quick inet  from (sk0)  to any keep state  label RULE 0 -- ACCEPT 
 block drop in quick inet all label RULE 1 -- DROP 
 block drop out quick inet all label RULE 1 -- DROP 
 block drop in quick inet all label RULE 1 -- DROP 
 block drop out quick inet all label RULE 1 -- DROP 

You're dropping all incoming traffic, also on the local interface!

Try adding:

set skip on lo

furthermore, your ruleset has duplicates, especially since you use the
quick keyword.

Below is a commented example a pf.conf for a workstation (mine :-)
 /etc/pf.conf -
# /etc/pf.conf

# Macros: define common values, so they can be referenced and changed easily.
ext_if = rl0
int_if = rl1

# Addresses that can't be routed externally. 
# See http://www.rfc-editor.org/rfc/rfc3330.txt
# (10.0.0.138 is my router, so it should be reachable!)
table unroutable const { 0.0.0.0/8, 10.0.0.0/8, !10.0.0.138, 127.0.0.0/8, \
169.254.0.0/16, 172.16.0.0/12, 192.0.2.0/24, 192.168.0.0/16, 240.0.0.0/4 }

# Options: tune the behavior of pf.
set optimization normal
set block-policy drop
set loginterface $ext_if
set skip on lo

# Normalization: reassemble fragments etc.
scrub in all

# Translate outgoing packets' source addresses (any protocol).
# In this case, any address but the gateway's external address is mapped.
# The sysctl net.inet.ip.forwarding should be set for this to work.
# Alternatively, set gateway_enable=YES in /etc/rc.conf.
nat pass on $ext_if inet from $int_if:network to any - $ext_if

# Filtering
antispoof quick for $int_if

# Nobody gets in from the outside!
block in log quick on $ext_if all label inblock
# Block packets to unroutable addresses
block out log quick on $ext_if from any to unroutable label unroutable
# Block by default.
block out log on $ext_if all label outblock

# Internal network is trusted.
pass in on $int_if all 
# Let outgoing traffic through, and keep state
# 'modulate state' only works with TCP!
pass out on $ext_if inet proto tcp all flags S/SA modulate state
pass out on $ext_if inet proto udp all keep state
# Let pings through.
pass out on $ext_if inet proto icmp all icmp-type 8 code 0 keep state

 /etc/pf.conf -

HTH,
Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpNW39Glm2bb.pgp
Description: PGP signature


Re: how to compile and install a new driver

2007-11-27 Thread Roland Smith
On Tue, Nov 27, 2007 at 01:48:28PM -0700, Steve Franks wrote:
 Hi,
 
 I found this thread
 http://lists.freebsd.org/pipermail/freebsd-stable/2006-August/027445.html
 to a driver I need for my system.
 
 (1) The file extension
 (http://www.dons.net.au/~darius/ucp-0.01.diff.gz) is .diff, not .c, so
 what exactly do I do with it to compile it?

First, use gunzip to extract it. This will leave a file ucp-0.01.diff.
Next, su to root and cd to /usr/src/sys.
To apply the patch, do 'patch /location/of/ucp-0.01.diff'

Note that the patch doesn't apply cleanly (/usr/src/sys/dev/usb/usbdevs)
on 7.0-BETA2. If that's also the case on the version you're using,
you'll have to look at /usr/src/sys/dev/usb/usbdevs.orig and
/usr/src/sys/dev/usb/usbdevs.rej to fix it manually.

Next, build and install a kernel according to the handbook. ('make
kernel' in /usr/src)

 (2) Assuming I can get it to compile, which I've never done, what do I
 do with the object/driver file?

The 'make kernel' command will install the module automagically.
On the next boot, you should be able to load the ucp driver module with
kldload(8). 
 
 This driver is long overdue, the part has been in usb devices for
 several years, and support is in OpenBSD and Linux already (so I'm
 told by google).  I'll happily document the process if someone holds
 my hand.

If it works, submit a PR.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpDlIWTrEH8f.pgp
Description: PGP signature


Re: how to compile and install a new driver

2007-11-27 Thread Roland Smith
On Tue, Nov 27, 2007 at 03:28:53PM -0700, Steve Franks wrote:
  The 'make kernel' command will install the module automagically.
  On the next boot, you should be able to load the ucp driver module with
  kldload(8).
 
 
 So is the kernel the collection of all .ko modules then? 

A lot (but not all) of the device drivers and sybsystems are available
as modules. If you look into the example kernel configuration files
(GENERIC, NOTES), everything that starts with 'options' has to be
compiled into the kernel. Lines starting with 'device' in GENERIC are
built into the kernel. All other drivers are by default available as
modules. (but you can disable them from building, if you want)

 I always
 thought it was some monolithic binary somewhere. 

That depends on your definition of monolithic. The FreeBSD kernel is
modular but not a microkernel.

 If not, is it
 possible to build just usbdevs alone?

Yes, it should be possible. But I've never done it. It is not advised
to build stuff in the source tree. The 'make kernel' process builds a
shadow tree for the object files under /usr/obj, but I don't know how to
do that for a single module.

 I'm a little skittish about fubaring the kernel on my family's main
 server. 

Well, if you're using the GENERIC kernel now, and you build a new
GENERIC kernel, it should Just Work. Life can get interesting when you
start building your own kernel config. :-)

But when I switched from 6-STABLE to 7-BETA, I got decent warnings to
adapt my kernel config instead of a broken kernel, so that's ok.

And FYI, the previous kernel is saved in /boot/kernel.old/kernel. So you can
always boot that.

 My name will be mud if I bring it down for a significant
 period, and it's my only BSD box at the moment - our data is backed
 up, but I don't have a tape drive I can just pull / and /usr off in 5
 minutes if I kill it. 

First and foremost: get level 0 dumps of all important partitions before
you start your adventure! I cannot stress this enough! USB external
harddisks are great for that purpose. 

 I know this is not relavant to the discussion,
 but my point is, I don't know enough to know what's relatively safe
 and what isn't.

Read the Handbook and /usr/src/UPDATING. Ask around here if there's
something you don't get.

   This driver is long overdue, the part has been in usb devices for
   several years, and support is in OpenBSD and Linux already (so I'm
   told by google).  I'll happily document the process if someone holds
   my hand.
 
  If it works, submit a PR.
 
 A url/handbook page for that, perhaps?  I understand the concept of a
 PR, but not fbsd's specific system (or where to find it).

man send-pr
 
Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpog2nJG9kR6.pgp
Description: PGP signature


Re: HP Deskjet 9800 with hpijs driver

2007-11-26 Thread Roland Smith
On Mon, Nov 26, 2007 at 08:05:50AM -0800, Erin McNew wrote:
 Ok.  Let's see what other information I can provide.
 
 I was printing from the gimp.  I looked at the printer setup, and it said
 that it was using lpr.
 As for the PCL, the first line was pretty short, and the second line did
 start indented.  I don't recall if it started where the first ended, but if
 not, it was close to that.  I couldn't see any further lines, but apparently
 there were more, as the printer kept spitting out pages...

The standard printer spooler (lpr) only recognizes a couple of ancient file
types (dvi, ditroff etc). It dumps the input that it gets to a printer,
without formatting it for a certain printer. That is the job of a spooler.

I would suggest that you install the cups printer spooler in
combination with the gutenprint printer driver. If you have those
installed correctly, you should be able to select your printer from the
gimp, and it should Just Work. 

You might also need the 'ppd' file for your printer from
http://openprinting.org/show_printer.cgi?recnum=HP-DeskJet_9800. This
file tells gutenprint what the capabilities of the printer are.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpO0tS08N06S.pgp
Description: PGP signature


Re: Personalised patches in ports

2007-11-26 Thread Roland Smith
On Mon, Nov 26, 2007 at 09:06:45AM +, Matthew Seaman wrote:
  Not if you 'chflags schg,sunlnk' it. 
 
 If you add another file into a ports' files directory that cvsup knows
 nothing about, then cvsup will refuse to touch it.  No need for chflags
 in that case.  If you need to make local modifications to a file already
 in that directory, then yes, cvsup will replace it with the canonical
 version next time you update.
 
 'portsnap extract' or 'portsnap update' will however blow away local
 additions in the part of the ports tree it is operating on -- there are
 clear warnings to that effect in the man page.  chflags will preserve
 your changes in this case, but my guess is that portsnap might well 
 abort in the middle of what it's doing if it runs into an immutable file.

It hasn't aborted on me yet. But these days I tend to keep my own
patches separately, and re-apply them if necessary after a
portsnap. Just to make sure I don't screw things up. :-/

Having said that, I usually try to get changes accepted into the
official ports tree if possible. Saves a lot of hassle.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpKoMN65TzDp.pgp
Description: PGP signature


Re: Am I back? Re: kernel fault trying to add atapicam...

2007-11-26 Thread Roland Smith
On Mon, Nov 26, 2007 at 05:35:46PM -0800, Gary Kline wrote:
 
   Folks (to the whole list, but esp'ly Messes Smith [NL  AU],
 
   I'll believe that my ISDN link is working when/if I see this
   echoed from the -questions list.  I was busy rebuilding my 6.2
   GENERIC kernel after having added 
 
   ^device atapicam

   Lest I stray *too* far OT, I'll share the results of my 3rd 
   kernel rebuild on this Dell.   It crapped out; it hung after
   printing out the sio0 line.  I had to powercycle and went in by
   typing 8 (??) and by hand booting /boot/kernel.old.  I tried
   twice more by removing part of the additions to GENERIC.  Same;
   the new kernel still hung.

   Here are the sizes of the new kernel (with atapicam) and 
   the old.
 
 -r-xr-xr-x  1 root  wheel  7206901 Nov 23 21:00 kernel
 -r-xr-xr-x  1 root  wheel  4001279 Apr  9  2007 kernel
 
   I realize that drivers can require a lot of space, but not
   over 1.2 megs.   Att any rate, the newer kernel hangs.
 
   I will upgrade to the newest 6.2 and try to get the audio
   toys functioning.   But does anybody know where I fouled up?

Can you post or mail your kernel config?
I can sed you mine if that helps.

   Could it be as simple as Not having done a make clean
   before doing a make buildkernel? 

It is recommended to clean out /usr/obj before starting a new build.

   I don't burn // copy audio
   discs that often and haven't ever copied a DVD; I just want these
   new utilities to work.

You could try burncd, which doesn't require the speudo-SCSI stuff. But
I've heard a lot of grumbling about it on the list over the years.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpNHWuOL0r6B.pgp
Description: PGP signature


Re: Help with a new port?

2007-11-25 Thread Roland Smith
On Sat, Nov 24, 2007 at 05:01:36PM -0800, Zachary Kline wrote:

 I must confess I haven't.  I'll look into it and see what comes up. 
 Currently trying to figure out how to get ports upgraded in a sane fashion 
 as well, as I've noticed some of the packages are quite behind in comparison 
 to the ports they're based on.

First of all, if you look into the ports directories on the FreeBSD FTP
servers, you'll see different versions of the packages, e.g.
packages-5-stable, packages-6-stable, packages-6.2-release,
packages-7-current, etc. Depending on which version you installed,
'pkg_add -r' picks the packages from one of those directories. So if you
installed 6.2-RELEASE, you'll probably get packages from
packages-6.2-release. That packages tree is based on the ports tree at
the moment that 6.2 was released.

So the best way to keep your ports current is to build them
yourself. First, update your ports tree with portsnap (from the base
system). Then install one of the ports management tools like portmaster
or portupgrade, and use that to upgrade the ports. Do read
/usr/ports/UPDATING so that you are aware of any issues.

If you have questions, don't hesitate to ask on the list, but have a
look through the list archives as well, if you can access them. 

If you have trouble navigating the FreeBSD website, you should contact
the website maintainers mailing list: [EMAIL PROTECTED]

Good luck!

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp2azUCvG5I2.pgp
Description: PGP signature


Re: Having problems burning a DVD

2007-11-25 Thread Roland Smith
On Sun, Nov 25, 2007 at 09:42:59AM +0100, Harry Matthiesen Jensen wrote:
 On Sat, Nov 24, 2007 at 12:45:33PM -0700, Predrag Punosevac wrote:

  I think you are probably missing
  
  permxpt00666
  permpass0   0666
 
 Which file are these to be set in?
 
  # Misc other devices
  
  permcdrom   0666
  permdvd 0666
  permrdvd0666
  permcd0 0666
  permacd0   0666
  permxpt00666
  permpass0   0666
 
 ..and where to set these?
 
 Are all to be set in devfs.conf?

Looking at the format, I'd say yes.

On my own system, I put the pass devices in devfs.rules, because they
can be generated at runtime;

add path 'pass*' mode 0666 group wheel

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpHaDQ1miQPW.pgp
Description: PGP signature


Re: Personalised patches in ports

2007-11-25 Thread Roland Smith
On Mon, Nov 26, 2007 at 11:52:31AM +0700, Olivier Nicole wrote:
 Hi,
 
   How can I incorporate my patch into the portupgrade system, so that an
   upgrade of Xpdf will apply my patch? If I download the bzip file,
   apply the patch, re-bzip the sources, and then try to force an
   upgrade, the checksum fails (as expected).
   
   How does one do thes properly?
  
  It's actually much easier than in Linux, since the ports system already
  has to do this. Each port has a files directory into which you can put
  patches, which will get applied automatically each time you build. See
  the porter's handbook for details:
 
 But wouldn't that personnal patch file be erased by next cvsup of the
 ports?

Not if you 'chflags schg,sunlnk' it. 

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpXZaicgH11p.pgp
Description: PGP signature


Re: Fwd: Upgrading X11 port

2007-11-24 Thread Roland Smith
On Sat, Nov 24, 2007 at 12:22:36PM +, Siraj Shaikh wrote:
 Hi
 
 With regards to the following post, I just wanted to clarify this.
 
 I am going to do this now. Get the ports tree, using
 
 portsnap fetch
 
 and
 
 portsnap extract
 
 and then
 
 portsnap update
 
 Then, when I install xorg, would that be the 7.3 version? or would it
 still be 6.9, and I would have to update it using the guideliness
 given in UPDATING?

If you install xorg from a fresh ports tree now, you'll get 7.3.

As the name implies, the UPDATING file is about updating already
installed ports.


Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpL9QSPqrJMt.pgp
Description: PGP signature


Re: is this IT or not/

2007-11-23 Thread Roland Smith
On Thu, Nov 22, 2007 at 03:49:52PM -0800, Gary Kline wrote:
 
   I did have a vfs. entry in the wong file; that has seemed to
   make a big difference.  On my Ubuntu server most of these 
   utilities Just-Work.  I would like to burn CD's and maybe a
   DvD or two.   But k3b seems way too far.  Do you--or anyone 
   else on-List--know if the gnome burner (*Baker) works out of
   the box?   ---I realize that our speciality is as-servers.
   With stability.  But since I'm building a new main machine 
   that is not my DNS/web/server, I'd rather stick with FBSD.

All those graphical programs are just front-ends for 
- cdrecord (CDs)
- growisofs (fro DVDs, from the dvd+rw-tools package)

So try and get those to work from the command-line first. Then install
k3b or baker or whatever.

My usual invocation for cdrecord for data disks is:
  cdrecord -v -eject -dao speed=8 driveropts=burnfree dev=1,1,0 -pad \
  -data file.iso

You'll have to adjust the dev part by looking at the output of 
'cdrecord -scanbus'. Cdrecord requires atapicam or a SCSI burner, btw.

For burning music, use -audio instead of -data, and feed it a bunch of
WAV files. See cdrecord(1).

The growisofs(1m) manual has examples on how to use it.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp6PiNoWzaVs.pgp
Description: PGP signature


Re: is this IT or not/

2007-11-23 Thread Roland Smith
On Fri, Nov 23, 2007 at 01:17:36PM -0800, Gary Kline wrote:
  My usual invocation for cdrecord for data disks is:
cdrecord -v -eject -dao speed=8 driveropts=burnfree dev=1,1,0 -pad \
-data file.iso
  
  You'll have to adjust the dev part by looking at the output of 
  'cdrecord -scanbus'. Cdrecord requires atapicam or a SCSI burner, btw.
 
 
   (And to think that for years I was SCSI-*only*.  Darn!)
   What is aptapicam exactly?   If I add it to my kernel GENERIC
   will other things blow up, [:-)]?  

It is a driver that allows ATAPI devices like CD-RW and DVD drives to be
accessed through the SCSI subsystem.

My kernel is configured as follows;
device  atapicam# Emulate ATAPI devices as SCSI via CAM
# No atapicd driver!

# SCSI peripherals
device  scbus   # SCSI bus (required for SCSI)
device  cd  # Compact Disc
device  da  # Direct Access (disks) [for umass devices]
device  pass# Passthrough device (direct SCSI access)

This will give you cdX devices, instead of acdX.

Next you'll have to configure devfs to grant access to the relevant
devices; /etc/devfs.conf:

# Give members of group cdrom access to the CD/DVD-ROM and DVD+RW via the
# SCSI interface
own xpt0root:cdrom
permxpt00660
own cd0 root:cdrom
permcd0 0660
own cd1 root:cdrom
permcd1 0660
# cdparanoia uses the cdrom link.
linkcd0 cdrom 
linkcd0 dvd

/etc/devfs.rules:
[slackbox_usb=10]
add path 'da*' mode 0660 group usb
add path 'pass*' mode 0660 group cdrom

/etc/rc.conf:
# Set the default devfs ruleset.
devfs_system_ruleset=slackbox_usb

My freebsd webpage covers this in some more detail: 
http://www.xs4all.nl/~rsmith/freebsd/index.html

   The handbook has examples of how-to copy audio CD's doing the
   reads with dd.  I posted something yesteerday to see if that
   part could be done with a script.

Don't use dd for copying audio discs, because it doesn't do any error
correction whatsoever. Use cdparanoia instead; 'cdparanoia -B 1-' to
rip the whole disk.

Then burn the resulting wav files with cdrecord.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpjHbsQbMkpN.pgp
Description: PGP signature


Re: About Freebsd 7.0 versus 6.3

2007-11-21 Thread Roland Smith
On Wed, Nov 21, 2007 at 06:07:32PM +, Chris wrote:
 Interesting so I learnt 2 things here csup exists so no need to
 install cvsup and I should run 'make delete-old-libs' .  Basically I
 have done the following.

Well, you don't _have_ to (nobody is forcing you to do it). But if you
don't, old stuff piles up in your system.
 
 1 - upgraded world and kernel, mergemaster etc.
 2 - reinstalled all ports portupgrade -af
 3 - installed compat6x
 
 I have not ran 'make delete-old-libs'

It doesn't run automatically, AFAIK. But maybe installing the compat6x
package had some effect? (I never bother to use compat packages).

 I thought the old libs were removed because after I booted up into the
 7.0 world alot of ports didnt work as libs they linked to were missing
 so had to be recompiled anyway to even run.

My experience is that port upgrade tools cannot do everything. A major
upgrade is a good time to scrub your ports as well, again to get rid of
old stuff.

 Do I run 'make delete-old-libs'  in /usr/src ?

Yes.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpqQiXSXrWuF.pgp
Description: PGP signature


Re: snd_ich skipping playback

2007-11-20 Thread Roland Smith
On Tue, Nov 20, 2007 at 06:50:05PM +0100, Frank Staals wrote:
 I updated to RELENG_7 yesterday, but I'm noticing that the snd_ich driver 
 quite often skips playback for a short period of time at some points. 
 Especially when doing mysql queries. Anyone else having problems with 
 snd_ich ?
 
 [EMAIL PROTECTED] uname -a
 FreeBSD FStaals.net 7.0-BETA3 FreeBSD 7.0-BETA3 #2: Mon Nov 19 19:50:46 CET 
 2007 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/PFSERVERKERNEL  amd64
 
 [EMAIL PROTECTED] pciconf -lv
 [EMAIL PROTECTED]:0:4:0:class=0x040100 card=0x71851462 
 chip=0x005910de 
 rev=0xa2 hdr=0x00
vendor = 'Nvidia Corp'
device = 'Realtek ALC850 Realtek AC'97 Audio'
class  = multimedia
subclass   = audio
 
 [EMAIL PROTECTED] dmesg | grep pcm
 pcm0: nVidia nForce4 port 0xea00-0xeaff,0xee00-0xeeff mem 
 0xfe02d000-0xfe02dfff irq 23 at device 4.0 on pci0
 pcm0: [ITHREAD]
 pcm0: Avance Logic ALC850 AC97 Codec

I've had trouble with skipping sound some time ago on machines with
another chipset;
$ cat /dev/sndstat 
FreeBSD Audio Driver (newpcm: 64bit 2007061600/amd64)
Installed devices:
pcm0: VIA VT8237 at io 0xd800 irq 22  [MPSAFE] (5p:4v/1r:1v channels 
duplex default)

I put the following in /boot/device.hints

# Larger DMA buffer for the soundcard, for better sound quality.
hint.pcm.0.buffersize=16384

This fixed the problem for me.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpfb0AF32HNn.pgp
Description: PGP signature


Re: Basically: why such troubles with KDE audio?

2007-11-20 Thread Roland Smith
On Tue, Nov 20, 2007 at 10:55:48AM -0800, Gary Kline wrote:
 
   Folks,

   Long-short-short, at least two Gnome-type players work:
   sound-juicer and gnome-cd.  But KsCD gives no audio.
 
   I am logged in as root while doing this initial testing,
   after Roland Smith [EMAIL PROTECTED], noted that my
   mountpoints had to be chown'd to [username].  

Playing music usually* has nothing to do with mountpoints. Mountpoints are only
needed when you want to use a data CD with a filesystem on it.

   I do want to use
   tools like K3B so the cc to the kde-freebsd list.But still
   wondering, even tho I can get the KDE CD play  to display, and to
   act as tho it is working---the digits count, the slider moves:
   nothing from the speakers.  When I bring up gnome-cd, I have
   audio.
 
   Suggestions from KDE-land, please?

I'm not a KDE user, but check which audio device or output plugin the
KDE player is trying to use. If the display works (displays artist and
track info etc.) it is usually a sign that the data is being read OK. So
I would ssupect the output in this case.

Roland

* I seem to recall at least one pseudo filesystem driver for Linux that
represented an audio CD as a bunch of WAV files.
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpDiIMiArAVd.pgp
Description: PGP signature


Re: Basically: why such troubles with KDE audio?

2007-11-20 Thread Roland Smith
On Tue, Nov 20, 2007 at 02:00:11PM -0800, Gary Kline wrote:

  Playing music usually* has nothing to do with
  mountpoints. Mountpoints are only needed when you want to use a data
  CD with a filesystem on it.
 
   Ah, thanks for the clarification.  I might not want to get sloppy
   with data/filesystems on a CDROM... .
  
 I do want to use
 tools like K3B so the cc to the kde-freebsd list.But still
 wondering, even tho I can get the KDE CD play  to display, and to
 act as tho it is working---the digits count, the slider moves:
 nothing from the speakers.  When I bring up gnome-cd, I have
 audio.
   
 Suggestions from KDE-land, please?
  
  I'm not a KDE user, but check which audio device or output plugin the
  KDE player is trying to use. If the display works (displays artist and
  track info etc.) it is usually a sign that the data is being read OK. So
  I would ssupect the output in this case.
 
   it --kscd--displays the numerals, counts--up,etc.  just no audio.
   how can i  determine what output this program m is trying to use?
   AND do so without messing up  my kttsd and other such kde toys?
 
   I've used the configure option, but see nothing.

Look here:

http://docs.kde.org/development/en/kdemultimedia/kscd/kscd-options-tab.html

What you're looking for should be 'Select audio backend' of 'Select
audio device'.

If you are using the 'arts' backend (KDE's default audio system, I
think?), it may have a configuration dialog of its own somewhere? (Not a
KDE user, so I can't really help you there.)

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpMy6DOzwldx.pgp
Description: PGP signature


Re: arbitrary build can't find libs - right way to do this?

2007-11-20 Thread Roland Smith
On Tue, Nov 20, 2007 at 03:34:29PM -0700, Steve Franks wrote:
 I'm trying to compile a non-port application for the first time ever.
 The associated library built and installed just fine - I can see them
 right in /usr/local/lib and usr/local/include/libnamefoo.h  However,
 when I run ./configure for the application, it clearly can't find the
 libs.  So my question is, should I be changing my path, is there a
 standard variable I need to export, or what?  Obviously for ports this
 just works, so I've never had to do it.  I'm sure there's a standard
 way, so I thought I'd get in the habit of doing that right from the
 start...

The best way would be to write a port makefile and submit it. That way
you only have to figure it out once. Especially if the app needs patches
to work correctly on FreeBSD. And in case of a free software app, others
can use it as well, _and_ help you with bugfixing. :-) For closed source
stuff submitting a port would probably be useless.

Usually configure scripts have options that allow you to tell it where
to look for header files and libraries. You can also use the environment
variables CPATH (for include files) and LIBRARY_PATH that tell gcc where
to look.

After installing a shared library, you need to run ldconfig so the
system can find it at runtime. Usually this is done by make install, but
it can't hurt to make sure.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp1tOzAZTHQX.pgp
Description: PGP signature


Re: Unexpected shutdown

2007-11-19 Thread Roland Smith
On Mon, Nov 19, 2007 at 03:55:42AM +0100, n j wrote:
 Hello Randy, Roland, Gary,
 
  UPS drivers can shut the system down, but you seemed to have ruled
  that out?
 
 The UPS is present, but I never set up and configured anything (no
 snmp or any other agents) that would give the UPS the permission to
 shutdown the machine and besides there are more machines on the same
 UPS that continued to work just fine, so I guess that UPS is ruled
 out, yes.
 
  It could be triggered by the acpi_thermal driver. Check system
  temperatures with sysctl or mbmon.
 
 This is actually what I was looking for, even if it turns out it is
 not the solution: a pointer to a useful port plus pointer to reading
 the temperatures with sysctl. That kind of things makes the -questions
 an invaluable resource.

:-)

 That remark led me to discover the following:
 
 - kldstat shows acpi.ko loaded
 - sysctl has no acpi thermal variables whatsoever!

It depends on the mobo and the acpi tables if it works. It works on my
laptop but not on my destop for instance.

 which further led me to check for acpi thermal variables on another
 FreeBSD 6.2 (non-Dell) server and sure they were there. So it seems
 that acpi thermal is not working (is perhaps blacklisted, a term I
 noticed in the man page) on Dell Poweredge (in this case PE 1750 as
 well as PE 750) servers. Anyone can verify this?

Well, if it's not the ups nor a thermal overload, I guess the obvious
solution is that some joker gave a shutdown command with a 3am time. :-)

According to shutdown(8) there should be a message in the log stating
when the system went down, who did it and why.

Or maybe there is a script that calls shutdown under some circumstances?

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp6k4JhetSVW.pgp
Description: PGP signature


Re: can any sound wzards help me set this right?

2007-11-19 Thread Roland Smith
On Mon, Nov 19, 2007 at 11:04:20AM -0800, Gary Kline wrote:
   Saturday,, following the adviice of this group  plus things I
   found of the web, I put together this list of mods to make to
   /boot/loader.con,  /etc/rc.conf, and /etc/devfs.conf  Still,
   after rebooting/doing-hard-resets 5 or 6times, things hung if or
   if I did NOT have an audio CD in my top burner.
 
   Anybody see what's wrong with the following 37 lines of
   notes?
 
  ++ boot/loader.conf
snip
  atapicam_load=YES 

Atapicam is needed if you want to use cdrecord and growisofs
(dvd+rw-tools).


  hw.ata.atapi_dma=1

Mine says (note the quotes);
hw.ata.atapi_dma=1

  vfs.usermount=1

This should be in /etc/sysctl.conf

Don't forget that this is not sufficient you mount stuff as a normal
user;
- you need read/write permissions to the device
- and you need to _own_ the mount point.

  ==
 
  ++ /etc/rc.conf
  devd_enable=YES

By default, devd doesn't do anything usefull with CD/DVD devices, AFAICT.
I'm not sure what you need this for.

  ++ /etc/devfs.conf
 
  link acd0 cdrom
  perm /dev/acd0 0666

Looks OK.

I've got the following in devfs.conf, to use the CD/DVD burner as a
pseudo SCSI device (atapicam in kernel, but not atapicd);

# Give members of group cdrom access to the CD/DVD-ROM and DVD+RW via the
# SCSI interface
own xpt0root:cdrom
permxpt00660
own cd0 root:cdrom
permcd0 0660
own cd1 root:cdrom
permcd1 0660
linkcd0 cdrom
linkcd0 dvd

The following is in /etc/devfs.rules;
add path 'pass*' mode 0660 group cdrom

IIRC I did this because pass devices are created as needed.

My kernel config has the following devices (among others);
device  ata
device  atadisk # ATA disk srives
device  ataraid # RAID drives
device  atapicam# Emulate ATAPI devices as SCSI via CAM
options ATA_STATIC_ID   # Static device numbering
# SCSI peripherals
device  scbus   # SCSI bus (required for SCSI)
device  cd  # Compact Disc
device  da  # Direct Access (disks)
device  pass# Passthrough device (direct SCSI access)

HTH,

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgprta5ZnLcDv.pgp
Description: PGP signature


Re: Unexpected shutdown

2007-11-18 Thread Roland Smith
On Sun, Nov 18, 2007 at 10:12:34PM +0100, n j wrote:
 I know there are many possibilities out there, but I am pondering this
 for the whole day and ruled out everything that came to mind. So, any
 other ideas - even humorous - are welcome.

Since it was a regular shutdown as opposed to a panic, something must
have triggered that shutdown.

UPS drivers can shut the system down, but you seemed to have ruled
that out?

It could be triggered by the acpi_thermal driver. Check system
temperatures with sysctl or mbmon.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpJlRpgjnpZG.pgp
Description: PGP signature


Re: Making mergemaster skip certain files

2007-11-17 Thread Roland Smith
On Fri, Nov 16, 2007 at 10:34:26PM -0600, J. Porter Clark wrote:
 Is there any way to keep certain files out of the reach of
 mergemaster?  I understand the need for carefully merging the
 old and the new, but I really shouldn't ever have to for files
 like these:
 
   /etc/aliases
   /etc/hosts
   /etc/hosts.allow
   /etc/manpath.config
   ... and many others.

Set the system immutable and undeletable flags (as root);

chflags schg,sunlnk /etc/aliases /etc/hosts /etc/hosts.allow \
/etc/manpath.config 

 Mergemaster has so many options that I'm fairly certain that
 there must be some way to do this.

There is an option you can set in /etc/mergemaster.rc to ignore
/etc/motd, and the -P option to preserve replaced files.

Of course you can always hack it to ignore some files.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpqOhnPK3OpK.pgp
Description: PGP signature


Re: What do I put in fstab to get my DVD/CDROM burner to work?

2007-11-17 Thread Roland Smith
On Sat, Nov 17, 2007 at 02:13:19PM -0800, Gary Kline wrote:
   Okay, I've set vfs.usermount=1, but both totem and kmplayer
   refuse to play my audio-CD. 

You don't mount audio CDs. They don't carry a cd9660 filesystem.

Try something like this with a CD in the drive;

mplayer -cdrom-device /dev/acd0 cdda://1

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp4MQ3EwQHzG.pgp
Description: PGP signature


Re: 7.0 install

2007-11-12 Thread Roland Smith
On Mon, Nov 12, 2007 at 11:04:52AM -0600, Chad Albert wrote:
 I have downloaded the 7.0 beta 2 ISO file for i386.  I am trying to install 
 it on an ASUS G1S laptop.  6.2 works very nicely all except support for the 
 WIFI card (Intel 4965AGN).  When I insert the Install CD and start going 
 through the steps, it seems as if every key I press sends a ctrl key with 
 it. 

If you have trouble with the installer, and you already have 6.2 on it,
why don't you do a source upgrade as covered in the handbook?

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp7Cq6qv2nJR.pgp
Description: PGP signature


Re: cups-base problem

2007-11-10 Thread Roland Smith
On Sat, Nov 10, 2007 at 10:18:19AM +0100, zbigniew szalbot wrote:
 Hello,
 
 Aryeh M. Friedman pisze:
  I am not sure I understand the message about remote execution of
  arbitrary code.
 That is just saying that if the security issue is a problem for you
 don't upgrade (i.e. go ahead if you don't care).
   
 Thanks but I think I now understand even less :)
 If a security issue is a problem, don't upgrade???

Apparently there is a bug in this port that would allow an attacker from
outside to make cupsd execute his malicious code. Therefore installation
of this port is forbidden as a precaution until a fix is available.

But if you have a firewall that rejects incomming connections or if you
have cupsd set up to deny all connections but local ones this bug
presumably cannot affect you.

 Not sure also how one could go ahead? There is no option to continue. The 
 message appears and that's all. I am not given any option.

Upgrade the port once it is fixed. In the meantime block incoming
connections either in cupsd.conf or with your firewall.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp0xktlq0rfD.pgp
Description: PGP signature


Re: nanobsd, picobsd, tinybsd

2007-11-10 Thread Roland Smith
On Sat, Nov 10, 2007 at 03:45:30PM -0600, John Smith wrote:
 I'd expected a more level headed reply from this FreeBSD list. How is
 a newbie supposed to know the differenced 

Both nanobsd and picobsd have manual pages. Try 'man nanobsd' and 'man
picobsd'. 

Picobsd has been superseded by nanobsd, whose primary is building system
images for embadded systems. This is definitely not a newbie subject.

 and how can I test this if I don't have a spare machine?

Use a virtual machine, like Qemu or vmware.
 
 My question was more out of interest. This mailing list is called
 FreeBSD-Questions, so why can't I asked a reasonable question and
 expect a reasonable reply...?

You're supposed to look for answers yourself first. A quick googling of
tinybsd, nanobsd and picobsd would have given you these links:

http://www.tinybsd.org/tinybsd
http://www.freebsd.org/doc/en_US.ISO8859-1/articles/nanobsd/index.html
http://www.freebsd.org/doc/en_US.ISO8859-1/articles/nanobsd/howto.html
http://en.wikipedia.org/wiki/PicoBSD

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpDcGV52NrWX.pgp
Description: PGP signature


Re: PPD files vs printer drivers also LPD vs LPRng vs CUPS

2007-11-10 Thread Roland Smith
On Sat, Nov 10, 2007 at 04:39:29PM -0700, Predrag Punosevac wrote:
 I am trying to understand little bit better Unix printing. I am terribly 
 confused about
 the real meaning of PPD files and printer drivers.
 
 According to this 
 http://en.wikipedia.org/wiki/PostScript_Printer_Description
 
 PPD files are post script description files that act as a drivers for post 
 script printers. This seems clear to me but I have never had a post
 script printer in my life.

They are not really drivers but more files that describe the
capabilities of the printer.
 
 According to same page CUPS-PPD are used by CUPS to do post-script printing 
 on non-postscript printers by directing files through
 CUPS-filter. Could somebody explain this things better to me. Every time I 
 used CUPS the PPD files where enough to enable me printing.
 Did I really use some other drivers beside these PPD files or did CUPS 
 communicate with my printers with some generic driver and just
 uses PPD files to do filtering.

The latter. Cups uses the ghostscript program to translate postscript
into something that the non-postscript printer can understand.
 
 What is the simplest way to send ps file to the printer that doesn't speak 
 ps? If I could do that everything else is peace of cake. I read very 
 carefully printing form the handbook but I want to learn more.

Use ghostscript. This is what both apsfilter and cups do. They've just
made it a lot easier than doing it yourself. And as you can see from the
size of both cups and apsfilter 'everything else' is a substantial piece
of cake.

 Could anybody explain me if there are some strong reasons for choosing LPD 
 over CUPS or LPRng system (seems just GUI added on the top of LPD)
 It would logical to me that LPD is safer (CUPS port has some security 
 warnings) and maybe more reliable. In any case it is included in the base 
 system and I prefer to use something included in the base system

In the past, lpd had a lot of security issues as well. I'm not sure if
they're all solved.

Both apsfilter and cups do more than standard lpd, which is only a
printer spooler. Both cups and apsfilter look at what you're trying to
print and try to convert it to a form suitable for printing. Standard
lpr only understands a couple of ancient formats (ditroff, dvi, cif,
plot) next to plain text.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpCHd5TdzjCt.pgp
Description: PGP signature


Re: cups-base problem

2007-11-10 Thread Roland Smith
On Sat, Nov 10, 2007 at 09:41:43PM -0500, Chuck Robey wrote:
 Reko Turja wrote:
 Dear all,
 
 Today I saw a security notice:
 ..snip...
 cat distinfo
 MD5 (cups-1.3.3-source.tar.bz2) = d4911e68b6979d16bc7a55f68d16cc53
 SHA256 (cups-1.3.3-source.tar.bz2) = 
 5e9e5670777055293e309cb0cbb2758df9c1275bf648df70478b7389c2d804de
 SIZE (cups-1.3.3-source.tar.bz2) = 4077262
 Update your ports and INDEX file as it seems that you are installing a 
 vulnerable version of cups-base. The VuXML report says:
 Affects:
 cups-base 1.3.4
 so the cups-1.3.3 still has the vulnerability mentioned in the report.
 
 Actually, I think the worst security problem I've seen is one I don't 
 personally care to fix right now, but I guess I will soon.  It's the fact 
 that postscript is actually a language, one that's more general purpose in 
 limitations than many people realize.  Isn't that true?  I think this means 
 that my postscript interpreter (which is, for me, and I think for most, is 
 ghostscript) should have some security controls on it, to limit 
 postscript's direct access to local machine capabilities.

When using ghostscript you should always call it with the -dSAFER
option, so it can only open files read-only.

Or you could buy a postscript capable printer.

 I think that the options in gs for security are too little.  It'd be pretty 
 easy to write a really nasty worm.  I remember laughing at my Windows 
 friends, back when that Philappines worm hit, but we could get pretty 
 easily hit on gs, or am I all wet?

It's not as easy as it seems.

It would be possible to write a postscript program that mails itself to
other addresses. But no UNIX mail client that I know of automatically
opens and renders postscript code, let alone with root privileges, which
you need to do _real_ damage instead of just annoy people. So you'd need
user intervention to spread the virus.

And gathering addresses isn't straightforward either. Every mail
program has it's own file for storing those. And there are usually
multiple places where mail can be stored, and that can be in at least
two formats (mbox and maildir).

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgprpEWz35YP8.pgp
Description: PGP signature


Re: Botched X.org upgrade, need help

2007-11-08 Thread Roland Smith
On Thu, Nov 08, 2007 at 07:58:39AM -0700, Andrew Falanga wrote:
 I then proceeded to the mergebase.sh script, ran that and when I was
 satisfied that all was done as expected, I rebooted my machine.  Well,
 that's when X failed to start.  So, how would I go about correcting this
 problem?

Look at /var/log/Xorg.0.log to see what exactly is the problem.

While you're busy solving the problem, it is best to log into a shell
instead of xdm.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpbX0Ni1sAUy.pgp
Description: PGP signature


Re: About Freebsd 7.0 versus 6.3

2007-11-08 Thread Roland Smith
On Thu, Nov 08, 2007 at 02:48:47PM -0300, Mario Lobo wrote:

 Concerning this, I've cvsuping to 6-CURRENT on a dual-core desktop. The 
 system is running well, but I'd really like to move up to 7. Can it be done 
 through cvsup from 6.2-STABLE to 7-CURRENT or is it wiser to install from 
 scratch? any upgrade gotchas/procedure ?

It _can_ be done. (I've done it).

First, make a list of all your ports (portmaster -L works fine for
that). Then csup to RELENG_7. Then follow the instructions from
/usr/src/Makefile (the bit about 'upgrade their source'). I've outlined
the process below, with my own additions marked with lowercase letters


 a.  Make backups
 b.  Read /usr/src/UPDATING
 1.  `cd /usr/src'   (or to the directory containing your source tree).
 2.  `make buildworld'
 3.  `make buildkernel KERNCONF=YOUR_KERNEL_HERE' (default is GENERIC).
 4.  `make installkernel KERNCONF=YOUR_KERNEL_HERE'   (default is GENERIC).
  [steps 3.  4. can be combined by using the kernel target]
 5.  `reboot'(in single user mode: boot -s from the loader prompt).
 6.  `mergemaster -p'
 7.  `make installworld'
 8.  `make delete-old'
 9.  `mergemaster'
10.  `reboot'
 c. `pkg_delete -a' (delete all your ports)
11.  `make delete-old-libs' (in case no 3rd party program uses them anymore)
 d.  Reinstall all root and leaf ports. Dependencies will then be
 installed automatically.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpxV3veaiHhN.pgp
Description: PGP signature


Re: About Freebsd 7.0 versus 6.3

2007-11-08 Thread Roland Smith
On Thu, Nov 08, 2007 at 07:27:58PM +, Matthew Seaman wrote:
   a.  Make backups
   b.  Read /usr/src/UPDATING
   1.  `cd /usr/src'   (or to the directory containing your source tree).
   2.  `make buildworld'
   3.  `make buildkernel KERNCONF=YOUR_KERNEL_HERE' (default is GENERIC).
   4.  `make installkernel KERNCONF=YOUR_KERNEL_HERE'   (default is GENERIC).
[steps 3.  4. can be combined by using the kernel target]
   5.  `reboot'(in single user mode: boot -s from the loader prompt).
   6.  `mergemaster -p'
   7.  `make installworld'
   8.  `make delete-old'
   9.  `mergemaster'
  10.  `reboot'
   c. `pkg_delete -a' (delete all your ports)
  11.  `make delete-old-libs' (in case no 3rd party program uses them anymore)
   d.  Reinstall all root and leaf ports. Dependencies will then be
   installed automatically.
 
 I went through this process myself in pretty much the order you
 describe.  Due to bitter experience, I'd say that reinstalling
 all ports should be done before 'make delete-old-libs' -- by
 killing all the old 6.x shlibs you make it hard to run most
 software previously installed under 6.x including such things as
 'portupgrade'...
 
 You don't need to delete all the ports in one go and then reinstall
 them in another: running 'portupgrade -fa' will do the job.

Port upgrade tools are not guaranteed to work perfectly in this
situation. I tried doing an update with portmanager and ended up with
some binaries linked against both libc.so.6 and libc.so.7! Some ports
didn't even compile.

That's why I would recommend doing a clean sweep when updating to
another major version.

 That can take several days to complete if you've got a machine with
 OpenOffice, Firefox, Thunderbird, Java, KDE, Gnome, X Windows
 etc. installed.  If you're careful you can still keep various services
 running during that time, restarting them one by one as the various
 applications get upgraded.

It took me about a day and a night to reinstall everything (415 ports),
mostly un-attended. But then I don't use OpenOffice nor java and fvwm2
instead of Gnome/KDE.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpWQ7N1MwQz4.pgp
Description: PGP signature


Re: About Freebsd 7.0 versus 6.3

2007-11-08 Thread Roland Smith
On Thu, Nov 08, 2007 at 09:32:22PM +0100, Kris Kennaway wrote:

 You don't need to delete all the ports in one go and then reinstall
 them in another: running 'portupgrade -fa' will do the job.
 Port upgrade tools are not guaranteed to work perfectly in this
 situation. I tried doing an update with portmanager and ended up with
 some binaries linked against both libc.so.6 and libc.so.7! Some ports
 didn't even compile.
 
 portmanager isn't recommended for use since it became abandonware a long 
 time ago and never reached maturity.  If you (correctly ;) use portupgrade 
 (e.g. -fa or -faP) then you will not have this problem.

Dang, I meant portmaster, not portmanager. My bad.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpBmmmvL2GnO.pgp
Description: PGP signature


Re: Determine FreeBSD version of binary

2007-11-08 Thread Roland Smith
On Thu, Nov 08, 2007 at 10:16:38PM +0100, John Smith wrote:
 On Nov 8, 2007 6:59 PM, Yuri Pankov [EMAIL PROTECTED] wrote:
 
  May be not entirely correct, but close:
 
  ldd binary | grep libc.so
 
 
 Yes, that helps somewhat. At least I now know that it's FreeBSD 4.x.
 And before I again forget something I forgot to mention earlier on: I
 also have a file called 'kernel'. Could that somehow give somewhat
 more detailed information about exactly which 4.x kernel it is, and if
 so, how would I go about doing that ?

The command 'strings kernel | grep ^@(#)FreeBSD' should do the trick.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpv32tvv1jVK.pgp
Description: PGP signature


Re: About Freebsd 7.0 versus 6.3

2007-11-08 Thread Roland Smith
On Thu, Nov 08, 2007 at 11:14:13PM +0100, Albert Shih wrote:
 Be careful if you not using standard shell becauseif you using a shell
 come from ports

Root should _never_ use a shell from ports. You can use the 'toor'
account for that.

  11.  `make delete-old-libs' (in case no 3rd party program uses them anymore)
   d.  Reinstall all root and leaf ports. Dependencies will then be
   installed automatically.
 
 Wellwhat's the difference between what you say and make a new
 installation ? 

If you re-install, you're stuck with a GENERIC kernel, unless you
recompile that afterwards which is extra work. 

 I've do this sometime ago because I don't have 7.0-Beta CD-rom, and I've
 install a 6.2 and make what you say...but for me rebuild all ports it's
 same thing to make a new-installation.

After a major version update you'll have to rebuild all ports
anyway. But it seems that portupgrade is up to the task as well.

I would go for a new install if I wanted to change the relative sizes of
my partitions. Otherwise I'd stick with the source upgrade, because it
is not as much work IMHO.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpBfyooXO3MM.pgp
Description: PGP signature


Re: make buildworld ....gcc bug

2007-11-07 Thread Roland Smith
On Wed, Nov 07, 2007 at 11:01:21PM +0200, tethys ocean wrote:
 When I am rebuilding world  FreeBSD 6.2 I have take error that is
 shown below. What can I do!?
 
 [EMAIL PROTECTED] /usr/src]#  make buildworld

 In function `yylex':
 /usr/src/gnu/usr.bin/binutils/ld/../../../../contrib/binutils/ld/ldlex.l:579:
 internal compiler error: Segmentation fault: 11

Check your hardware, especially your memory. See http://www.bitwizard.nl/sig11/

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpyz076I8bDV.pgp
Description: PGP signature


Re: Help Failing Disk Problem

2007-11-05 Thread Roland Smith
On Mon, Nov 05, 2007 at 03:16:46PM +, James wrote:
  rsync is too high-level, and may not do exactly the right thing with 
  links or sparse files or who knows what. 
 
 rsync -cav takes cares of symlinks and all that just right. It's a
 beautiful thing.
 
 Checksumming, too. Ah, bliss.

It doesn't necessarily do the right thing with flags, acls and other
extended attributes,

   dd is too low-level--you get 
  the same partition table/bsdlabel and the exact same slice/partition 
  sizes.  That's okay on an identical hard drive, but a pain on one that's 
  larger.
  dump, on the other hand, is just right.

 If the file names on the drive change during the dump, corruption can
 occur. At least on linux. I remember Torvalds ranting about it on a
 mailing list. I imagine FreeBSD suffers the same issue, though, as it's
 a pretty generic problem.

For starters, you should _never_ dump a live filesystem. What you can do is
dump a snapshot of a live filesystem, using dumps '-L' option, because a
snapshot is like a frozen image of the filesystem; it doesn't change.

Dump  restore is the best way to move data and all attributes to a
larger disk. See §9.2 of the FAQ.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpQI3Oof6eue.pgp
Description: PGP signature


Re: Help Failing Disk Problem

2007-11-05 Thread Roland Smith
On Mon, Nov 05, 2007 at 02:40:36PM -0800, FX Charpentier wrote:
 Roland,
 
 The mention of dump '-L' in your email below has caught my attention.
 Pardon my ignorance, but what is the '-L' option?
 
 I looked it up in the man pages but wasn't able to find any mention of it.
 Can you point me in the right direction?

It's in dump(8);

 -L  This option is to notify dump that it is dumping a live file sys-
 tem.  To obtain a consistent dump image, dump takes a snapshot of
 the file system in the .snap directory in the root of the file
 system being dumped and then does a dump of the snapshot.  The
 snapshot is unlinked as soon as the dump starts, and is thus
 removed when the dump is complete.  This option is ignored for
 unmounted or read-only file systems.  If the .snap directory does
 not exist in the root of the file system being dumped, a warning
 will be issued and the dump will revert to the standard behavior.
 This problem can be corrected by creating a .snap directory in
 the root of the file system to be dumped; its owner should be
 ``root'', its group should be ``operator'', and its mode should
 be ``0770''.

I use dump with the following options (e.g. for /usr);

dump -0 -B 4589560 -C 8 -h 0 -L -u -P \
'cat - usr-0-20071106-vol${DUMP_VOLUME}.dump' /usr

This splits dump output in DVD-R sized chunks.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpvj8pXniSED.pgp
Description: PGP signature


Re: Which version with a Xeon X3210

2007-11-04 Thread Roland Smith
On Sun, Nov 04, 2007 at 10:31:33AM +, Chris Hastie wrote:
 I've just ordered a new server based on the Intel Xeon X3210. This is a
 quad core processor supporting the Intel 64 (formerly known as Intel®
 EM64T, according to the flyer) instruction set.
 
 I plan to install FreeBSD 6.2 on it, but I'm not clear whether I should
 be using the AMD64 version or the x86 version.

If you routinely run out of address space on i386 with your workload,
you should use amd64.

It is possible for amd64 to be faster than i386 (more registers, among
other things), but it depends on the workload (an IO-bound workload will
see little difference, I suspect). You'll have to test that.

If you depend on binary and/or i386-only ports (e.g. nv driver, wine,
flash plugin) you should probably go with i386.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpARDxzq14QS.pgp
Description: PGP signature


Re: fsck gave up on me!

2007-11-03 Thread Roland Smith
On Sat, Nov 03, 2007 at 07:42:59AM -0600, Warren Block wrote:
 On Fri, 2 Nov 2007, [EMAIL PROTECTED] wrote:
 
  I have been using FreeBSD 6.2 for a couple of months now with no major
  snags.  Until now.  I did a portupgrade this morning and afterwards,
  when I logged in as a user into Gnome, my desktop was missing most of
  the programs (Accessories, System Tools, etc.).
  I rebooted the machine and that other terminal screen came up
  (Single User?) and I was prompted to run fsck manually so I did so.
  Well, fsck gave up on me.  I have no idea what happened or why.  Can
  anyone help me understand what is going on with my machine and any
  possible actions I can take to resolve this?
 
 
  Script started on Fri Nov  2 17:13:22 2007
  You have mail.
  root# fscd[Kk
  ** /dev/ad1s1a (NO WRITE)
  ** Last Mounted on /
  ** Root file system
  ** Phase 1 - Check Blocks and Sizes
  CANNOT READ BLK: 524544
  CONTINUE? [yn] y
  THE FOLLOWING DISK SECTORS COULD NOT BE READ: 524544,
 
 That looks like a hard drive going bad.

Best make a backup if you still can.

Install the sysutils/smartmontools port. Then use smartctl(8) with the
-a option on /dev/ad1.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpF3rYhpoqzZ.pgp
Description: PGP signature


Re: can you help script about rename directory

2007-11-01 Thread Roland Smith
On Fri, Nov 02, 2007 at 02:20:13AM +0800, adrian kok wrote:
 Hi all 
 
 how can I have script to rename the following
 directory pattern from
 
  
 
 from 
 
 dir-192.168.30.0   
 dir-192.168.30.144 
 dir-192.168.30.184
 
 
 To:
 
 dir-10.0.30.0   
 dir-10.0.30.144 
 dir-10.0.30.184
 
 thank you

for f in dir-192*; do mv $f `echo $f|sed s/192\.168/10\.0/`; done

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpFyruwWUsjV.pgp
Description: PGP signature


Re: Set perms on attach of USB umass disk

2007-11-01 Thread Roland Smith
On Thu, Nov 01, 2007 at 10:53:00AM -0700, Darren Spruell wrote:
 I've been trying (and failing) to figure out how to adjust ownership
 or permissions of a USB memory stick on device attach.

[snip]
 I've tried altering devfs.conf but this appears to only work for
 devices that are attached at startup of devfs.
[snip]

As a matter of fact, this is documented in the devfs.conf manual page.
This will also tell you where to look;

 What's the right way to handle this?

You'll have to use devfs.rules. See 'man devfs.rules'

The fact that there are two configuration files is a bit confusing. But
that is because of the way removable devices are handled.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpVKJDhKsvLT.pgp
Description: PGP signature


Re: ABI for i386 binaries under FreeBSD-amd64

2007-10-31 Thread Roland Smith
On Wed, Oct 31, 2007 at 10:27:32AM +, Stephen Allen wrote:
 Roland Smith wrote:
 Than they should run i386. You only _need_ (as opposed to nice to play
 with :-) amd64 if you run out of address space on a typical workload.
 
 What if you have more than 3Gb of RAM to play with... would you have to use 
 amd64 then?

You could use PAE (Physical Address Extensions) on i386. That gives the CPU
access to 64 GB. But that does not mean all that address space is
available for programs.

It does not influence the standard limits on process sizes though. See
/sys/arch/include/vmparam.h and /sys/conf/NOTES.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp7JqDPsxdAW.pgp
Description: PGP signature


Re: Core dump

2007-10-31 Thread Roland Smith
On Wed, Oct 31, 2007 at 03:32:10PM -0700, Rem P Roberti wrote:
 A program that I use has started giving me this error message when I try
 to load it:
 
 Segmentation fault: 11 (core dumped)

This means that the program has either tried to read from a part of the
memory that it isn't allowed to access, or it has tried to write to a
memory page that is marked read-only.
 
 Can someone give me a heads up on what's going on here.  I've done a
 reinstall to no avail.

It is a bug in the program.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpgQTPsLfEjo.pgp
Description: PGP signature


Re: LaTeX oder teTeX

2007-10-30 Thread Roland Smith
On Mon, Oct 29, 2007 at 09:46:20AM +0100, Predrag Punosevac wrote:
 Roland Smith [EMAIL PROTECTED] writes:
 
  I've installed TeXLive 2007 to use /usr/local/texlive/2007 as its prefix
  and data directory, and that works fine. Everything is contained
  within that tree. It does not put things in /etc or /usr/local/etc if
  you do this. What you do need to do after building the binaries is add
  /usr/local/texlive/2007/bin/arch-unknown-freebsdversion to the path
  in /etc/login.conf.
 
 I am considering giving a try to TeXlive these days. I take the
 opportunity of this thread to ask you about your strategy to make the
 TeXlive system cohabit with ports that wants teTeX.

For the moment I just remove the teTeX dependencies from those ports
before I build them.

I've thought about whipping up a fake teTeX port, but I was not sure if
I could pull that off.

 The second question is about ports that install TeX related stuff
 (such as macro packages, like NOWEB do). I guess you edited texmf.cnf
 to let /usr/local/share/texmf-local appear in TEXMF trees. Am I right,
 and was this enough to let things run well?

TeXLive is so complete that I didn't really have to install any stuff
from ports. I have a $HOME/texmf tree where I can stick the odd style
file. The standard texmf.cnf uses $HOME/texmf be default.

 To consider more FreeBSD specific issues, I have read elsethread that
 some people are working on porting TeXlive to FreeBSD. When this
 (awesome) work will be done, FreeBSD users will have two options to
 install a TeX system from the ports: teTeX and TeXlive. These two
 systems provide similar service. In such a situation, how are managed
 the dependencies? How would a porter say ``This port run-depends on a
 TeX system, no matter which one it is''?

No idea. Maybe there will be a generic TeX dependency that can be
fullfilled by either TeXLive or teTeX. But in the long run I expect
that TeXLive will replace teTeX.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpC1kPGeoLi3.pgp
Description: PGP signature


Re: Dangers of using a non-base shell

2007-10-30 Thread Roland Smith
On Mon, Oct 29, 2007 at 08:50:40PM +, Stephen Allen wrote:
 It's been drawn to my attention not to use bash from the ports collection, 
 because if one of it's dependencies (gettext or libiconv) fails or is 
 updated significantly, it could break, and prevent login. The suggested 
 solution was to use a base shell (such as sh) and append 'bash -l' to .shrc 
 to automatically enter bash.

This is only a problem for root. If you want to use bash as root you
should compile it statically. See below.

 Would it be a better idea to use the pre-compiled binary for bash?  And if 
 I did so, could I be alerted to updates as easy as using 'pkg_version -v' 
 when checking if any ports need updating?

You can define WITH_STATIC_BASH when you're building bash, so the binary
is self-contained.

But if you're starting in single user mode, only / will be mounted. So
if you have /usr or /usr/local on a separate partition, you'd be screwed.

That is why root should only use a shell that's in the / partition.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpsNmMLeqBVg.pgp
Description: PGP signature


Re: ABI for i386 binaries under FreeBSD-amd64

2007-10-30 Thread Roland Smith
On Tue, Oct 30, 2007 at 09:39:24AM +0200, David Naylor wrote:
 Hi,
 
 I have seen that recently on the mailing list there has been a discussion on
 running i386 FreeBSD binaries under an amd64 system.  As far as I have been
 able to read there does not appear to be anyway of achieving this except
 though either a chroot/jail or vitalization.  I think this is a short fall
 of FreeBSD currently as there are still proprietary i386 programs for
 FreeBSD that people may want to use under FreeBSD.  

Than they should run i386. You only _need_ (as opposed to nice to play
with :-) amd64 if you run out of address space on a typical workload.

And it's not a given that amd64 will be faster than i386. It depends on
the workload. If your workload is IO-bound (i.e. constantly waiting for
the disk to finish reading/writing) the CPU doesn't really matter.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpBrNf9QlGRi.pgp
Description: PGP signature


Re: Newby Question: What to do when one port can't recognize another port?

2007-10-30 Thread Roland Smith
On Mon, Oct 29, 2007 at 02:22:24PM -0700, Jeff D wrote:
 I've decided to try to build up my 1st FreeBSD server.
 
 Reading the Handbook is mostly helpful, but I' getting hit with a couple of
 problems I can't figure out.
 
 I was looking for a beginner's list.  I think this is the closest to it.
 
 The main reason I'm trying out FreeBSD is because I want to set up my own
 web server, and the Ports seemed liked a way to do it that manages conflicts
  dependencies better even that Linux systems.  Not being much of a program
 guy, that sounds good to me!
 
 When I try to install the Apache port in /usr/ports/www/apache22, it errors
 out with
 
 IGNORED
 Unknown Berkeley DB version

It builds fine on my machine (7.0-BETA1, amd64).

Which version of FreeBSD are you running? 
Did you update your ports tree before building apache? (run 'portsnap
fetch extract' once. Later use 'portsnap fetch update' to keep the tree
up-to-date.)
Did you set or unset any options?

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpqxQe8srwJR.pgp
Description: PGP signature


Re: LaTeX oder teTeX

2007-10-28 Thread Roland Smith
On Sun, Oct 28, 2007 at 12:21:49PM -0700, Predrag Punosevac wrote:

 I gave up after encountering problems with older fonts in ported version of 
 teTeX and decided that it is better to wait for guys to port TeXLive than 
 to waist the time trying to resolve dependency issues  teTeX vs powerdot.  
 In the mean time I use live DVD with TeX Live  which is perfectly OK 
 solution with me as I do not want 3.7Gb of all TeXLive junk (font for 
 languages I have never heard or some exotic features) on my hard-drive 
 anyway. It is also really made for Linux and hard-disk installation will do 
 quite a few thinks that we do not allow in FreeBSD (like using /etc file 
 for non system applications)

The TeXLive installer allows you to choose what stuff you want to
install or not. You don't have to install the whole lot.

I've installed TeXLive 2007 to use /usr/local/texlive/2007 as its prefix
and data directory, and that works fine. Everything is contained
within that tree. It does not put things in /etc or /usr/local/etc if
you do this. What you do need to do after building the binaries is add
/usr/local/texlive/2007/bin/arch-unknown-freebsdversion to the path
in /etc/login.conf.

Compiling the binaries isn't difficult. I've configured them to use
system libraries as much as possible, but if you don't do that the
binaries will have few dependancies beyond the base system libraries.

I've noticed that Omega wouldn't compile on my amd64 system, so I hacked
the makefile a little to fix that. If anybody wants to know how, drop me
a line. Omega will be supplanted by LuaTeX anyway.

This is how I configured the binaries on my amd64 system;

./configure --prefix=/usr/local/texlive/2007 \
--datadir=/usr/local/texlive/2007 --without-dvi2tty \
--without-musixflx --without-omega --enable-ipc --with-system-ncurses \
--with-ncurses-libdir=/usr/lib --with-ncurses-include=/usr/include \
--with-system-pnglib --with-pnglib-libdir=/usr/local/lib \
--with-pnglib-include=/usr/local/include/libpng \
--with-system-t1lib --with-t1lib-libdir=/usr/local/lib \
--with-t1lib-include=/usr/local/include \
--with-system-zlib --with-zlib-libdir=/usr/lib \
--with-zlib-include=/usr/include \
--with-system-gd --with-gd-libdir= /usr/local/lib \
--with-gd-include=/usr/local/include \
--with-system-freetype2 --with-freetype2-libdir=/usr/local/lib \
--with-freetype2-include=/usr/local/include --without-cjkutils \
--without-dvidvi --with-x11 --with-system-icu \
--with-icu-libdir=/usr/local/lib --with-icu-include=/usr/local/include

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpW3dcRl44ov.pgp
Description: PGP signature


Re: slight emergency here...

2007-10-28 Thread Roland Smith
On Sun, Oct 28, 2007 at 01:54:54PM -0800, Gary Kline wrote:
   Guys,
 
 
   I think I've found the reason for the intermittent rashes.
   Part of /var is bad, and fsck cannot allocate inoinfo to repair
   the damage.

Oops. If fsck can't fix it, that's not good. Have you tried running fsck
by hand, i.e. without -p? If you run it from the console it can fix a
bit more than when running in preen mode, but this may result in data loss.
 
   At any rate, how do i as root, single user, cp -rp all of /var to
   elsewhere (/storage) and rmdir /var, them mkdir /var and copy
   everything back?? I've forgotten the cpio magic command. 

Make sure that the hardware isn't broken. If you have (S)ATA disks, use
'smartctl -a /dev/yourdevice'.

The canonical way to make backups is to use dump(8). Unmount /var and
use 'dump -0 -a -f dumpfile'. 

But if the filesystem is really hosed, it might not be possible to copy
everything. In that case make a copy with dd of the partition that /var
is on so you can try to save any data that has not been backed up.

Probably the safest way to go is to newfs the filesystem that /var is on and
restore your latest backup.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpsymmTSMPlK.pgp
Description: PGP signature


Re: LaTeX oder teTeX

2007-10-27 Thread Roland Smith
On Sat, Oct 27, 2007 at 11:51:25PM +, Christian Walther wrote:
 
 a few years ago I got a good introduction to TeX, but for some reason
 stopped using it. Now I want to pick up where I left. I found LaTeX and
 teTeX in ports, so I wonder what the best tex distribution is.
 According to the teTeX website there will be no further development (at
 least not from its original author Thomas Esser). Is LaTeX a better
 candidate?

It looks like the LaTeX in ports is even older than teTeX.

The best TeX distribution for UNIX these days is TeXLive. It is a very
complete TeX/LaTeX/ConTeXt distribution. You can
download an iso image here: http://www.tug.org/texlive/acquire.html
You'll have to build the binaries yourself, because the pre-built
FreeBSD binaries are for 4.x, i.e. out of date. But it's not that difficult.

 There should be some support for (or by) LyX, because I would like to
 use LyX to get start. I know that TeX has a steep learning curve and I
 hope to reduce it with LyX so that I can dive into TeX while working on
 my projects.

If you're relatively new to the TeX world, start with the ConTeXt macro
package for TeX, because it is very actively developed. And it's easier
than plain TeX.

If you want something easier, and you don't care if it doesn't look quite
as nice as (La)TeX try OpenOffice or Koffice. 

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpfsnOMn5aq4.pgp
Description: PGP signature


Re: Portupgrade used to be fun!!!

2007-10-27 Thread Roland Smith
On Sat, Oct 27, 2007 at 05:34:03PM -0600, Chad Perrin wrote:
  I have used (and still do) both flavors of the above and I have to tell
  y, updating the installed apps is as easy as apt-get update ot yum
  update/upgrade.
 
 . . . except when they break something.  It's a lot easier to fix broken
 software on FreeBSD than with a binary packaged based Linux distribution,
 in my (recent) experience.

I rarely see port breakage. If I do it's usually a case of PEBKAC, :-)

Having said that, switching between major versions of FreeBSD can be a
hassle with ports.

  I used to love spending my Friday nights updating my FreeBSD ports -
  then, as you are finding out - it's just getting tedious.
 
 I've never found updating the software on a system fun.  That's part of
 the reason I find I prefer FreeBSD: it doesn't break shit as often, and
 thus doesn't make it even *more* un-fun.

In my experience it is much easier to keep ports updated every other
week or so than to to it after a couple of months.

Only when switching between major versions of FreeBSD it is time for
drastic measures. I usually delete and reinstall all ports after making
such a switch. It is the best way to keep the amount of old cruft on the
system to a minimum.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpK2OTBKccag.pgp
Description: PGP signature


Re: USB-Serial adapter, how to make /dev/cuad* appear?

2007-10-24 Thread Roland Smith
On Wed, Oct 24, 2007 at 09:26:20AM +0200, Benjamin Lutz wrote:
  Does the onboard serial port work via USB? How odd! On my standard PC,
  the serial ports are driven by the sio driver, and have /dev/cuad* and
  /dev/ttyd* devices, noc cuaU. 
 
 No, that one's a standard serial port, driven by sio as well, and
 creates /dev/cuad0, /dev/cuaU0, maybe some /dev/tty* as well, I don't know.

How do you know that cuaU0 belongs to the sio driver? It should belong
to ucom.

According to the manual, sio(4) devices only create ttyd and cuad devices.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgphtsum9H1Mv.pgp
Description: PGP signature


Re: USB-Serial adapter, how to make /dev/cuad* appear?

2007-10-24 Thread Roland Smith
On Wed, Oct 24, 2007 at 05:23:48PM +0200, Benjamin Lutz wrote:
 On 2007-10-24 17:15, Roland Smith wrote:
  On Wed, Oct 24, 2007 at 09:26:20AM +0200, Benjamin Lutz wrote:
Does the onboard serial port work via USB? How odd! On my standard PC,
the serial ports are driven by the sio driver, and have /dev/cuad* and
/dev/ttyd* devices, noc cuaU. 
   
   No, that one's a standard serial port, driven by sio as well, and
   creates /dev/cuad0, /dev/cuaU0, maybe some /dev/tty* as well, I don't 
   know.
  
  How do you know that cuaU0 belongs to the sio driver? It should belong
  to ucom.
  
  According to the manual, sio(4) devices only create ttyd and cuad devices.
 
 I'm guessing based on its timestamp pointing to the last system boot,
 when the USB adapter wasn't connected, based on the device persisting
 when I unplug the USB adapter.

Is ucom loaded as a module? If so, try unloading and re-loading it and uplcom.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp9tLW0SulGe.pgp
Description: PGP signature


Re: Via C7 Processor (CPU) - cpufreq and make.conf support

2007-10-24 Thread Roland Smith
On Wed, Oct 24, 2007 at 01:25:51PM -0600, Ross Penner wrote:
  sounds reasonable. unfortunetly, 'sysctl dev.cpu.0.freq' doesn't seem to
  work on my system. heh, it'd probably work if I upgrade to 7.0
 
 Apparently I'm an idiot. the sysctl command does work. when the system
 is mostly idle, It outputs '198' and when I put a high cpu load on it,
 it outputs '397'. I'm not exactly sure what this means as I'm hoping
 it doesn't refer to the MHz. 

I'm afraid it does;

$ sysctl -d dev.cpu.0.freq
dev.cpu.0.freq: Current CPU frequency

When I see a CPU speed of 1 GHz in conky, I get:

$ sysctl dev.cpu.0.freq
dev.cpu.0.freq: 1000

(on my athlon64)

What does 'sysctl dev.cpu.0.freq_levels' report? It should list the
available CPU frequencies.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpKR4KFp3cyJ.pgp
Description: PGP signature


Re: Via C7 Processor (CPU) - cpufreq and make.conf support

2007-10-24 Thread Roland Smith
On Wed, Oct 24, 2007 at 02:25:11PM -0600, Ross Penner wrote:
  What does 'sysctl dev.cpu.0.freq_levels' report? It should list the
  available CPU frequencies.
 
 I get:
 dev.cpu.0.freq_levels: 397/-1 198/-1
 
 Is this something I should be reporting to stable? It's not explicitly
 mentioned in the hardware notes so I'm not sure if my processor is
 actually supported in 6.2. Is it possible that I've been shipped the
 wrong processor? If so, how would I be able to tell short of ripping
 off the giant heatsink and looking?

Have a look at the dmesg output with 'dmesg |head -n 24'. There should
be some info about the CPU in there. Post those lines here.

And have a look at the bios. It could have some settings to regulate the
CPU speed.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpPdjsPyuFMi.pgp
Description: PGP signature


Re: Per-port options in make.conf?

2007-10-23 Thread Roland Smith
On Mon, Oct 22, 2007 at 11:32:39PM +0100, Benjamin M. A'Lee wrote:
 Is there any way to specify options in make.conf on a per-port basis?
 
 For example, if I want Vim built without X11, I can specify the WITHOUT_X11
 flag, but putting that in make.conf will affect every port.

Use .if and .CURDIR;

.if ${.CURDIR:M*/editors/vim}
WITHOUT_X11=yes
.endif

Note that this only works for the vim port. If you want to use it for
say vim5 and vim6, you have to add an extra star at the end:

.if ${.CURDIR:M*/editors/vim*}
WITHOUT_X11=yes
.endif

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpmxiBzao2dp.pgp
Description: PGP signature


Re: Is it difficult to move from Linux?

2007-10-23 Thread Roland Smith
Donovan R. Palmer wrote:
 I have been using Linux for over 10 years, but have for a number of
 reasons become very interested in learning to use FreeBSD. Are there
 any ex or current Linux users here and could you tell me how hard it
 is to make the shift from Linux?  Is there anything in particular
 which has been written which would be useful to read?

I have used Linux for almost 10 years before switching to FreeBSD. A lot
of the things that I leared while making the switch are documented on my
FreeBSD webpage; http://www.xs4all.nl/~rsmith/freebsd/

Some highlights;
- services must be enabled in /etc/rc.conf (foo_enable=YES)
- devices permissions are set in /etc/devfs.conf and /etc/devfs.rules
- build third party applications from ports, it'll save you a lot of
  trouble
- mounting filesystems as a non-root user has certain requirements;
  * the sysctl(8) vfs.usermount must be set to 1.
  * the user or a group that he belongs to must have read/write
permission on the device
  * the user must _own_ the mount point

HTH,
Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpt3ggPoGl7m.pgp
Description: PGP signature


Re: Q: general LaTeX mailing list

2007-10-23 Thread Roland Smith
On Tue, Oct 23, 2007 at 12:43:28PM +0900, Byung-Hee HWANG wrote:
 Hi there,
 
 Who knows a good general LaTeX mailing list? Ah yes, here is also good
 mailing list for the question. However, I want to give specific and
 professional advice about LaTeX. Unfortunately, Google disappointed my
 desire ;;

Most local TeX User Groups have mailing-lists populated with knowledgeable
people. See e.g. http://www.ktug.or.kr/

There is also a good TeX related group on Usenet; comp.text.tex.

There are also people who do consulting for (La)TeX;
http://www.tug.org/consultants.html

Hope this helps.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpQmDyLS20fK.pgp
Description: PGP signature


Re: Live video streaming on FreeBSD?

2007-10-23 Thread Roland Smith
On Tue, Oct 23, 2007 at 11:01:02AM +0200, Andreas Widerøe Andersen wrote:
 Hi all,
 I'm looking for a way to stream live video on FreeBSD (streamingserver and
 encoder or either).
 
 I have previously used Windows Media Server and Encoder quite a lot, but I
 try to run as much as possible on FreeBSD. My question would be, is there a
 streaming server and possibly an encoder available for FreeBSD that will
 stream live video that is compatible with most mediaplayers (for Windows,
 Mac and Linux desktops)?

/usr/ports/multimedia/mencoder can encode/recode videos to many
different formats, including wmv9 and H.264.

/usr/ports/multimedia/vlc contains a streaming server, IIRC.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpSQGqUgXtB7.pgp
Description: PGP signature


Re: USB-Serial adapter, how to make /dev/cuad* appear?

2007-10-23 Thread Roland Smith
On Tue, Oct 23, 2007 at 06:06:08PM +0200, Benjamin Lutz wrote:
 I'd expect some device to show up in /dev, cuad1, ucom0, something like 
 that, but I get nothing. (cuad0 is taken by the onboard serial port, 
 which, alas, isn't wired to the outside of the case).

Looking at ucom(4):

FILES
 /dev/cuaU?

See if that exists.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpGwot6d1Idk.pgp
Description: PGP signature


Re: Buying new sound card

2007-10-23 Thread Roland Smith
On Tue, Oct 23, 2007 at 04:29:34PM +0200, Dick Hoogendijk wrote:
 Pieter de Goeje [EMAIL PROTECTED] writes:
 
  On Sunday 21 October 2007, Roberth Sjonøy wrote:
  Anyone who can confirm that a Creative SB Audigy SE PCI works with FreeBSD?
  It doesn't work, unless you install the oss driver from
  http://www.4front-tech.com
 
 That is not too hard ;-)
 
  Note that in my opinion the native FreeBSD drivers are a lot better.
 
 What drivers? The ones that don't exist for the card?
 
 In my opinion the SB Audigy is a very common card that should have
 been supported long ago. On the other hand, the OSS drivers are very good.

The command 'apropos Audigy' gives: snd_emu10k1(4)

I quote:

  The snd_emu10k1 driver supports the following sound cards:

 o   Creative SoundBlaster Live! (EMU10K1 Chipset)
 o   Creative SoundBlaster Audigy (EMU10K2 Chipset)
 o   Creative SoundBlaster Audigy 2 (EMU10K2 Chipset)
 o   Creative SoundBlaster Audigy 2 (EMU10K3 Chipset)

I'm not sure if this is the right one, because I can't find the type of
chip used in the SE on the Creative site.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp3Ak1zQmIuG.pgp
Description: PGP signature


Re: USB-Serial adapter, how to make /dev/cuad* appear?

2007-10-23 Thread Roland Smith
On Tue, Oct 23, 2007 at 08:17:01PM +0200, Benjamin Lutz wrote:
 On Tuesday 23 October 2007 19:54:44 Roland Smith wrote:
  On Tue, Oct 23, 2007 at 06:06:08PM +0200, Benjamin Lutz wrote:
   I'd expect some device to show up in /dev, cuad1, ucom0, something
   like that, but I get nothing. (cuad0 is taken by the onboard serial
   port, which, alas, isn't wired to the outside of the case).
 
  Looking at ucom(4):
 
  FILES
   /dev/cuaU?
 
  See if that exists.
 
 No such luck I'm afraid. There's only cuaU0, which belongs to the 
 onboard serial port too.

Does the onboard serial port work via USB? How odd! On my standard PC,
the serial ports are driven by the sio driver, and have /dev/cuad* and
/dev/ttyd* devices, noc cuaU. 

Do you have the correct driver for the converter loaded next to ucom?
The ucom manual page gives a list of them.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpxD3nYXTpZk.pgp
Description: PGP signature


Re: Hello.. about motherboard MSI P4M900M2-L with chip VT8237A

2007-10-23 Thread Roland Smith
On Wed, Oct 24, 2007 at 02:39:16AM +0200, Johan Andersson wrote:
 Hello..
 Anyone know if motherboard MSI P4M900M2-L with the chip VT8237A  works
 with FreeBSD 6.2 amd64?
 Do all the stuff works like p-ata/s-ata controller and network card work?
 
 im going to build a small server with that motherboard.
 Need to know if it works with FreeBSD before i buy it :)

I've got this on my mobo;

[EMAIL PROTECTED]:15:0:  class=0x010400 card=0x80ed1043 chip=0x31491106
rev=0x80 hdr=0x00
vendor = 'VIA Technologies Inc'
device = 'VT8237  VT6410 SATA RAID Controller'
class  = mass storage
subclass   = RAID

It works perfectly. I'm running it in RAID1 on amd64.

[EMAIL PROTECTED]:17:5: class=0x040100 card=0x812a1043 chip=0x30591106 rev=0x60 
hdr=0x00
vendor = 'VIA Technologies Inc'
device = 'VT8233/33A/8235/8237 AC97 Enhanced Audio Controller'
class  = multimedia
subclass   = audio

Sound works fine as well.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpnAuAvc4Iwa.pgp
Description: PGP signature


Re: Can login using root password, but not remotely with SSH

2007-10-22 Thread Roland Smith
On Mon, Oct 22, 2007 at 02:21:04AM -0500, W. D. wrote:
 Brand new install of FreeBSD 6.2.  Can't log in with PuTTY.
 
 Remote PuTTY:
 Access denied Using keyboard-interactive authentication. 
 
 At computer terminal:
 PAM authentication error for root from 192.168.XXX.XXX 

Remote root access is denied by default because of safety concerns.

Log in as a normal user and then go root with su.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgprAW05s9l3U.pgp
Description: PGP signature


Re: best way to run vista inside freebsd

2007-10-19 Thread Roland Smith
On Thu, Oct 18, 2007 at 06:02:29PM +, Aryeh M. Friedman wrote:
 I want to run vista (windows) on my freebsd (amd64) machine without
 rebooting what is better wine or an vm emulator (if so which one... I
 know how to use vmware but never done so on a *nix machine)

Have you tried qemu? You might need to replace its bios file by a newer
one that supports EFI. (google for 'qemu vista').

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpMWqBxRaq7g.pgp
Description: PGP signature


Re: GELI and shutdown

2007-10-18 Thread Roland Smith
On Thu, Oct 18, 2007 at 02:45:06PM -0400, Steve Bertrand wrote:
 A quick question:
 
 Is it necessary or even advisable to unmount and/or detach GELI
 partitions prior to performing a halt or shutdown?

This will be done automatically.
 
Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpnKGQDbOgxr.pgp
Description: PGP signature


Re: what's happening with xorg?

2007-10-17 Thread Roland Smith
On Tue, Oct 16, 2007 at 11:46:27PM -0700, Gary Kline wrote:
  You could try playing with the gamma value of the monitor. When X is
  running you can use xgamma to adjust the gamma setting. You can also set
  this with the Gamma entry in the Monitor section of xorg.conf.
 
 
   Or should I ask somebbody to put back in the Radeon  card?  (i
   think that was the card i thought was going bad... ) Otherwise,
   I'll try the Gamma  entry in my Monitor section with my G450.
   What value should I use?  Or if it is boolen, do I try settting
   it to on??

The default setting for gamma is 1. Try e.g. 2. See also xorg.conf(5).

Alternatively you can try to change it while X is running by typing
'xgamma -gamma 2' in a terminal. This does require that the
VidModeExtension is active, i.e. the ServerFlags option
DisableVidModeExtension should _not_ be set.

   PS: to you, or to any other driver wizards::: is this mga driver
   still being hacked-on?  The screen is only dingy grey not
   black.  (*mumble*)

It looks like it is still in development; 
http://cgit.freedesktop.org/xorg/driver/xf86-video-mga/

BTW, I was assuming you have tried adjusting the brightness and contrast
settings of the monitor?

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpcJZmwqdKYc.pgp
Description: PGP signature


Re: FreeBSD support for Jetway J7F4

2007-10-17 Thread Roland Smith
On Wed, Oct 17, 2007 at 08:14:29PM +0200, Erik Norgaard wrote:
 Hi:
 
 I have searched around to verify that everything works fine for this 
 motherboard with integrated CPU: Jetway J7F4. I understand it has a CN700 
 north bridge and a VT8237R or VT8237RP south bridge, and Realtek RLT8110SC 
 dual LAN.
 
 I have found reports that FreeBSD hangs when doing ifconfig re1 up, has 
 this been solved? Does it work if only one NIC is used?

No experience with the RLT8110S, but the two Realtek RT8139 in my
machine work OK.

 I understand from wikipedia that autonegotiate of SATA speed with VT8237R 
 fails, but what about VT8237RP? Not a huge problem though, I plan to get a 
 disk that accepts speed setting by a jumper.
 
 Does RAID work with this south bridge?

I've got RAID1 working with this chip:

[EMAIL PROTECTED]:15:0:  class=0x010400 card=0x80ed1043 chip=0x31491106 
rev=0x80 hdr=0x00
vendor = 'VIA Technologies Inc'
device = 'VT8237  VT6410 SATA RAID Controller'
class  = mass storage
subclass   = RAID

HTH,
Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp0p6AVLz9fe.pgp
Description: PGP signature


Re: what's happening with xorg?

2007-10-17 Thread Roland Smith
On Wed, Oct 17, 2007 at 11:36:09AM -0700, Gary Kline wrote:
  The default setting for gamma is 1. Try e.g. 2. See also xorg.conf(5).
 
   I'll try your xgamma -gamma 2 suggestion, below.  Thanks for the
   data-point.  I read [[ skimmed-thru ]] xorg.conf.  This is another
   man page that you've got to prrint out, go into a corner, and read
   ... very slowly  :-|

The good news is that the autodetection of Xorg has improved a lot. In a
lot of cases you can run 7.3 without xorg.conf.

   Ja.  In fact, only when everything is maxed out (brightness 
   contrast) does the screen approach dingy grey. Otherwise, it's
   something like light mud ... and I'm not trying to be funny.

You should make sure that this is not a hardware problem. Try using
another monitor or another VGA cable. If you can get your hands on
another graphics card (maybe built-in graphics on the mobo?) try that as
well.


Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpq1u2GDs7di.pgp
Description: PGP signature


Re: cdrao broken on amd64?

2007-10-16 Thread Roland Smith
On Tue, Oct 16, 2007 at 01:03:32PM +, Aryeh M. Friedman wrote:
 c++ -DDRIVER_TABLE_FILE=\/usr/local/share/cdrdao/drivers\ -O2
 -fno-strict-aliasing -pipe -march=nocona   -o cdrdao  main.o ./libdao.a
 ../paranoia/libcdda_paranoia.a ../trackdb/libtrackdb.a
 -L../scsilib/export -lscg -lschily -L/usr/local/lib -lmad -lm  
 -L/usr/local/lib -lvorbisfile -lvorbis -lm -logg   -pthread
 -L/usr/local/lib -lao

Hmm, looks like '-lcam' is missing here.

 ../scsilib/export/libscg.a(scsihack.o)(.text+0x274): In function
 `scgo_close':
 : undefined reference to `cam_close_device'
 ../scsilib/export/libscg.a(scsihack.o)(.text+0x32b): In function
 `scgo_open':
 : undefined reference to `cam_open_btl'
 ../scsilib/export/libscg.a(scsihack.o)(.text+0x5e2): In function
 `scgo_open':
 : undefined reference to `cam_open_pass'
 ../scsilib/export/libscg.a(scsihack.o)(.text+0x60d): In function
 `scgo_open':
 : undefined reference to `cam_errbuf'
 ../scsilib/export/libscg.a(scsihack.o)(.text+0x899): In function
 `scgo_send':
 : undefined reference to `cam_send_ccb'

It should link to libcam, but it doesn't.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpkhcI5hibzq.pgp
Description: PGP signature


Re: how to make a patch

2007-10-16 Thread Roland Smith
On Tue, Oct 16, 2007 at 03:10:57PM +, Aryeh M. Friedman wrote:
 I found and fixed a bug in one of the ports how do I make a patch file
 (I only changed one line in one file) and who do I send it to?

First, you must have saved a copy of the original file before you
changed it;

  cp file file.orig

Then you edit the file. Next you crate the patch;

  diff -u file.orig file youredits.diff

Then you start the send-pr script, and import the contents of the diff
file in the 'Fix' section. See the send-pr manual. 

Be sure to use the 'ports' category, and add the word '[PATCH]' to the
begin of the desription line. Check if your e-mail address if correct,
otherwise you won't receive replies and follow-ups.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpWSy9I9kFB5.pgp
Description: PGP signature


Re: what's happening with xorg?

2007-10-16 Thread Roland Smith
On Tue, Oct 16, 2007 at 03:47:22PM -0700, Gary Kline wrote:
   I'm in the middle of a portupgrade -aP, and saw that the newest
   mga driver is installed.
   So I did another X -configure, moved the file to
   /etc/X11/xorg.conf and carefully tried out the new
   xf86-video-mga-1.9.100..  The screen is much brighter at the
   resolution is good, but the brightness is still very dingy
   compared to the vesa driver.  There is nothing wrong with my
   CRT; on the other KVM connections (and/or) with the vesa driver 
   at 800x600, the screen is completely bright.  Is there some other
   ati driver yet to finish?  

The ati driver is for ATI chips like the Radeon.

You could try playing with the gamma value of the monitor. When X is
running you can use xgamma to adjust the gamma setting. You can also set
this with the Gamma entry in the Monitor section of xorg.conf.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpLwGXJn2dGM.pgp
Description: PGP signature


Re: Logitech G15

2007-10-14 Thread Roland Smith
On Sun, Oct 14, 2007 at 11:16:31AM +0200, Bruce Alcock wrote:
 Hi
 
 I own a Logitech G15 keyboard and although the standard keys work, none of
 the multimedia or 'G' keys do. I've googled a lot on the matter and although
 there is a linux kernel driver, nothing exists for FreeBSD. I'm using
 6.2STABLE RC2 and Xorg
 7.3. Has anyone got any ideas? Even ways to go about writing a driver myself
 would be helpful.

When in X, launch xev(1) and give it the input focus. Now press the
special keys and see which keysyms they generate.

Once you know what the keysyms are, you could use them to tell the
window manager to e.g. launch a program when they are pressed. How that
is done depends on the window manager, of course.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpirfqXh8PoG.pgp
Description: PGP signature


Re: Logitech G15

2007-10-14 Thread Roland Smith
On Sun, Oct 14, 2007 at 08:11:30PM +0200, Bruce Alcock wrote:
 
 It doesn't generate keysyms...hence the problem. Thanks, should've mentioned
 that. Anyone got any ideas how to map keys that don't generate keysyms? Or
 how to make them make keysyms rather?

Does they generate KeyPress and KeyRelease events, with a keycode?  If
the buttons don't generate events, I think there isn't anything you can
do with those keys. :-) But if they do, you can assign them a keysym in
~/.Xmodmap. See xmodmap(1).

A list of keysyms is available in /usr/local/include/X11/keysymdef.h. 
You should remove the 'XK_' prefix from each keysym, though. I suggest
you pick a couple of unused ones instead of defining your own.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpoUrsge3iFh.pgp
Description: PGP signature


Re: Logitech G15

2007-10-14 Thread Roland Smith
On Sun, Oct 14, 2007 at 09:56:11PM +0200, Bruce Alcock wrote:

 No, it does absolutely nothing. I've mapped keysyms for a multimedia
 keyboard with xmodmap before, so I know what I'm doing there. There's a
 linux driver program ( http://g15tools.sourceforge.net/) which allows you to
 use everything, including the LCD screen on the keyboard. Unfortunately it
 requires linux kernel support to work, which obviously I can't give it in
 FreeBSD...any ideas? Really keen to just be able to use the extra keys, dont
 care about the LCD :-P
snip
 Let me just add to that: I've compiled g15tools and g15daemon and installed
 them in FreeBSD...when I run the g15daemon program i get:
 An Error Occured - 2 : ( Unable to initialize keyboard ) received
 Which I think is because it tries to load itself into the linux kernel at
 that point...

AFAICT, g15daemon isn't a linux kernel module, so it can't  load itself
into the kernel.

From a cursory inspection of the g15daemon source code, it does try to
access Linux specific devices, which is where I assume it fails.

If you plug the keyboard in, does it show up as a uhid device, or as ugen?

There are two things you could do, I think.
- Port the libg15 and g15daemon to FreeBSD
- Add support for the g15 to the existing uhid(4) driver.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpi3D6Y6BCFe.pgp
Description: PGP signature


Re: batch conversion of TeX

2007-10-12 Thread Roland Smith
On Fri, Oct 12, 2007 at 09:44:44AM +, Aryeh M. Friedman wrote:
 Those who have followed my openoffice to TeX conversion know I am brand
 new to TeX and want to know how to do the following conversions
 (hopefully via some non-interactive process [eg. Make files]):
 
 TeX--plain text

detex

 TeX--HTML

tex4ht

 TeX--PDF

pdftex

 TeX--PS

tex + dvips

All these programs come with a modern TeX distribution (I use texlive).

How to use these in a makefile depends on what you have. For a simple
document, processing with the command in question suffices.

But if you use footnotes and references, you need multiple passes to
sort everything out. If your document has an index and a bibliography,
you'll need to use makeindex and bibtex.

Here's an example of a Makefile for a long document of mine;

DOCSRC = logboek_RFS_II.tex
DOCPDF = $(DOCSRC:.tex=.pdf)

SUBDIR = grafieken figuren raytrace lam calc


$(DOCPDF): ${SUBDIR} $(DOCSRC) lbref.bib
@echo -n Regenerating the logbook... 
@! pdflatex --interaction nonstopmode -file-line-error $*.tex | grep -A 
1 '^l\.'
@makeindex -c -s myindex.ist $*.idx 2/dev/null
@bibtex $* /dev/null
@pdflatex --interaction batchmode -file-line-error $*.tex /dev/null
@makeindex -c -s myindex.ist $*.idx 2/dev/null
@pdflatex  --interaction nonstopmode -file-line-error $*.tex /dev/null
@! pdflatex  --interaction nonstopmode -file-line-error $*.tex |grep 
Warning
@rm -f $*.lo* $*.aux $*.ilg $*.ind $*.toc $*.bbl $*.blg
@echo Done.

${SUBDIR}::
@cd ${.TARGET}; make ${.TARGETS}

clean: ${SUBDIR}
@rm -f *.lo* *.aux *.ilg *.ind *.toc *.bbl *.blg
@rm -f $(DOCPDF)

This Makefile also runs make in several subdirectories.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp7tF7g5a2UO.pgp
Description: PGP signature


Re: Bind configuration in FreeBSD

2007-10-10 Thread Roland Smith
On Fri, Oct 05, 2007 at 05:29:39PM +0500, Narek Gharibyan wrote:
 Hi,

Please don't top-post.
 
 I as know default version (without port upgrading) is Bind 9.3.3 in Freebsd
 6.2. You can see the version, executing named -v command. Do a 
 ps -ax | grep named 
snip
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of dhaneshk k
 Sent: Friday, October 05, 2007 5:09 PM
 To: freebsd-questions@freebsd.org
 Subject: Bind configuration in FreeBSD
 
 Hi friends ,
 
 I have a FreeBSD fresh installation in a new  server machine.
 
Here I wants to run my DNS server , by default I found the   in
 /etc/namedb  dir, named.conf  file  master  dir etc in the m/c after
 OS installation  , so I configured my DNS entries(I mean named.conf and
 zone file  for my domain I configured ) , and after that I tried to start
 /etc/rc.d/named start 
 but no message that it is starting or not .

I think that you made a small mistake. If you want to start a daemon,
you have to enable it in /etc/rc.conf, otherwise it won't start (every
rc script sources /etc/rc.conf with the line 'load_rc_config').

Try adding 

named_enable=YES

to /etc/rc.conf, and try again. If you look in /etc/defaults/rc.conf,
and search for 'named', you can see that it is disabled by default. You
can also see there the rest of the options you can set for named.

Hope this helps,

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgphjyH0ZdKS9.pgp
Description: PGP signature


Re: Booting a GELI encrypted hard disk

2007-10-10 Thread Roland Smith
On Wed, Oct 10, 2007 at 09:04:34AM -0400, Steve Bertrand wrote:
 Hi all,
 
 I am voraciously attempting to get a FreeBSD system to boot from a GELI
 encrypted hard disk, but am having problems.

You don't need to encrypt the whole harddisk. You can encrypt separate
slices. There is no need to encrypt stuff like / or /usr; what is there
that needs to be kept secret?
 
 All of my searches lead to the same problem...GELI passphrase can not be
 entered correctly upon boot. I have tried everything I have found on the
 web (including disabling 'kbdmux' in the kernel) to no avail.

With a normal AT keyboard I can enter the passphrase without problems,
for a non-root partition.

 Does anyone have a suggestion for a workaround?

Put all the data that really needs to be encrypted on a separate slice,
and encrypt that. Leave the rest unencrypted, especially /boot. As a
rule of thumb; don't bother encrypting anything that you can just
download from the internet. :-)

Here's how it looks on my machine;

Filesystem SizeUsed   Avail Capacity  Mounted on
/dev/ar0s1a496M126M330M28%/
devfs  1.0K1.0K  0B   100%/dev
/dev/ar0s1g.eli120G 82G 28G75%/home
/dev/ar0s1e496M 16K456M 0%/tmp
/dev/ar0s1f 19G4.7G 13G26%/usr
/dev/ar0s1d1.9G152M1.6G 8%/var

As you can see only /home is encrypted because the rest doesn't hold
data worth encrypting.

If you encrypted / and /usr, you might actually make the system more
vulnerable to a known-plaintext attack, because there are a lot of files
with well-known contents there.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp8756KQUjO9.pgp
Description: PGP signature


Re: Booting a GELI encrypted hard disk

2007-10-10 Thread Roland Smith
On Wed, Oct 10, 2007 at 02:34:16PM -0400, Steve Bertrand wrote:
  Put all the data that really needs to be encrypted on a separate slice,
  and encrypt that. Leave the rest unencrypted, especially /boot. As a
  rule of thumb; don't bother encrypting anything that you can just
  download from the internet. :-)
 
 Fair enough, this makes sense. Thank you.
 
  As you can see only /home is encrypted because the rest doesn't hold
  data worth encrypting.
 
 Well, on mine it will.

I was talking about my system. Yours will of course be different. :-)
 
  If you encrypted / and /usr, you might actually make the system more
  vulnerable to a known-plaintext attack, because there are a lot of files
  with well-known contents there.
 
 I can get away with not having / encrypted, but I need /var encrypted
 for databases and logs etc, /tmp so any temporary files are secured and
 the swap file (swap very rarely gets used).

You can even encrypt /tmp with a one-time key (see 'geli onetime').
 
Also have a look at the geli_* variables in /etc/defaults/rc.conf.

 So, I will test it as you suggested, however, would it be possible to
 still house my key on a removable USB stick, and after the slices are
 mounted into the file system successfully to then unmount and remove the
 USB drive and have the box remain in operation, or does the key need to
 be accessed throughout all disk reads/writes?

It only needs to be present during creation of the GELI devices (geli
attach). The rc scripts know they have to load GELI and attach the
devices if they see an .eli device in /etc/fstab. Geli will ask for the
passphrase(s) during boot-up if you're using them. You can specify which
key-file to use in the geli_[devicename]_flags variable in /etc/rc.conf

However using a USB device presents it's own problems. If you plug-in a
USB stick there's no telling which device node it ends up with,
depending on how many other USB devices are on the bus. To make device
recognition easier, you should use a GEOM label on the USB stick, so
you'll know which /dev/label/* device node it gets. And you'd probably
have to hack an rc script to mount the USB stick _before_ the system
tries to attach the GELI device(s).

 Essentially, I'd like it so that if the box reboots while I am gone, or
 if I want to reboot it remotely there is theoretically no way for
 someone at the console to re-mount the encrypted slices?

Well, if you don't know the passphrase during boot-up (you get 3 tries),
the geli devices will not be created and mounting the slices depending
on them will fail. so you don't _need_ a keyfile for that.

And remember that this USB stick is another thing you have to back-up
and store in a safe place. It would be bad if you lost your data because
your USB stick died or got lost.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpzTSDTZjJCa.pgp
Description: PGP signature


<    4   5   6   7   8   9   10   11   12   13   >