RELEASE discs ISO images (for future)

2008-03-07 Thread Vadim Goncharov
Hi!

7.0-RELEASE images came out with FIVE disks - disc 1 to 3 and separate LiveFS
and docs. What do they contain? I can guess that 2 and 3 are pure packages so
I don't need to download them if I want to compile out from ports. And in
previous releases I had to download the disc1 ONLY as it had LiveFS also -
a very good improvement since 4.x times where disc2 with only LiveFS, mostly
useless all the time, took separate disk.

But now release announcement says that for LiveFS I need TWO disks - both
disc1 and livefs disk. WHY? Why not to pack they both to a single disc1,
this was very comfortable.

I suspect this separation is due to sizes od docs etc. - but CD drives can now
handle even 700 MBs of data, and disc1 for i386 occupies only 509M, though
disc2 is 694M, yes.

May be it is desirable to compress docs and other base system parts with
bzip2 -9 instead of gzip?

P.S. And may be it is good also to resurrect miniinst disk for
Depenguinator project? :)

-- 
WBR, Vadim Goncharov. ICQ#166852181   mailto:[EMAIL PROTECTED]
[Moderator of RU.ANTI-ECOLOGY][FreeBSD][http://antigreen.org][LJ:/nuclight]

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BTX on USB pen drive

2008-03-07 Thread Miroslav Lachman

Daniel O'Connor wrote:


On Fri, 7 Mar 2008, Vincent Mialon wrote:


I tested various options in boot0cfg with no sucess. I also tested
the howto from
http://typo.submonkey.net/articles/2006/04/13/installing-freebsd-on-u
sb-stick-episode-2 with a 6.3 FreeBSD release which boots on my pc but
doesn't boot on my supermicro server.

Do you have any idea or pointer that may help me find the way to boot
this usb drive ? I may file a bug report if you want.



I wanted to make a USB flash drive based installer for FreeBSD but 
unfortunately BTX seems to have issues that make it difficult to do 
reliably :(


I did it in the past. I have 512MB USB flashdisk with 30MB bootable 
partition from miniboot.iso (FreeBSD 6.2) with GRUB. I used it to 
install system on Sun Fire X2100 servers without CD-ROM.



Here are 2 patches I tried..
http://people.freebsd.org/~kib/realbtx
http://people.freebsd.org/~jhb/patches/btx_crx.patch

They improved things but I still found a number of systems where BTX 
would spin dumping register info so fast I couldn't read it (or take a 
photo..).


Unfortunately I have no idea how you'd debug this sort of thing, it's 
too much like DOS programming for me :)


FWIW when it did work it was great :) I used FreeSBIE as my base - it 
has stuff to build USB images in CVS (v2). http://www.freesbie.org/


I don't know if it's possible to use GRUB or something like that instead 
of BTX.. I have no experience with it, but I would be very interested 
if it did work (although since GRUB is i386 only and I use amd64 
systems that's another hurdle..)


I think you can use GRUB, because it is used in stage where all systems 
works the same way and amd64 kernel will be booted in later stage.


Miroslav Lachman
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BTX on USB pen drive

2008-03-07 Thread Jeremy Chadwick
On Fri, Mar 07, 2008 at 10:49:17AM +0100, Miroslav Lachman wrote:
 Daniel O'Connor wrote:

 On Fri, 7 Mar 2008, Vincent Mialon wrote:
 I tested various options in boot0cfg with no sucess. I also tested
 the howto from
 http://typo.submonkey.net/articles/2006/04/13/installing-freebsd-on-u
 sb-stick-episode-2 with a 6.3 FreeBSD release which boots on my pc but
 doesn't boot on my supermicro server.

 Do you have any idea or pointer that may help me find the way to boot
 this usb drive ? I may file a bug report if you want.
 I wanted to make a USB flash drive based installer for FreeBSD but 
 unfortunately BTX seems to have issues that make it difficult to do 
 reliably :(

 I did it in the past. I have 512MB USB flashdisk with 30MB bootable 
 partition from miniboot.iso (FreeBSD 6.2) with GRUB. I used it to install 
 system on Sun Fire X2100 servers without CD-ROM.

 Here are 2 patches I tried..
 http://people.freebsd.org/~kib/realbtx
 http://people.freebsd.org/~jhb/patches/btx_crx.patch
 They improved things but I still found a number of systems where BTX would 
 spin dumping register info so fast I couldn't read it (or take a photo..).
 Unfortunately I have no idea how you'd debug this sort of thing, it's too 
 much like DOS programming for me :)
 FWIW when it did work it was great :) I used FreeSBIE as my base - it has 
 stuff to build USB images in CVS (v2). http://www.freesbie.org/
 I don't know if it's possible to use GRUB or something like that instead 
 of BTX.. I have no experience with it, but I would be very interested if 
 it did work (although since GRUB is i386 only and I use amd64 systems 
 that's another hurdle..)

 I think you can use GRUB, because it is used in stage where all systems 
 works the same way and amd64 kernel will be booted in later stage.

All of what you've said is correct.  I'm not sure who's having problems
with GRUB on USB sticks, because yes, it does work.  (There are some USB
stick models, however, which do not support booting.  That's a
vendor/manufacturer problem however.)

-- 
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking   http://www.parodius.com/ |
| UNIX Systems Administrator  Mountain View, CA, USA |
| Making life hard for others since 1977.  PGP: 4BD6C0CB |

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BTX on USB pen drive

2008-03-07 Thread Rink Springer
On Fri, Mar 07, 2008 at 10:49:17AM +0100, Miroslav Lachman wrote:
 I think you can use GRUB, because it is used in stage where all systems 
 works the same way and amd64 kernel will be booted in later stage.

Uh, no. amd64 kernels rely on information that only the loader supplies,
such as the memory map... take a look at /sys/amd64/machdep.c, function
getmemsize() for example.

-- 
Rink P.W. Springer- http://rink.nu
Anyway boys, this is America. Just because you get more votes doesn't
 mean you win. - Fox Mulder
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: accf_http and incqlen

2008-03-07 Thread David Malone
On Thu, Mar 06, 2008 at 10:37:03PM +0100, Uwe Doering wrote:
 Last time I looked (in FreeBSD 4.x) these were connections that got 
 stuck in an early stage, that is, before the HTTP request had been 
 received.  The 'accf_http' filter which wants to parse said request 
 waits forever in this situation because there is no timeout implemented, 
 as far as I recall.  So these would-be HTTP connections pile up over time.

The accf_http should flush out the oldest of these connections once
there are more than a certain number of them. I think that the
number permitted depeneds on the backlog parameter passed to listen.
I checked that this worked recently, and it seemed to do the right
thing on 7.X and 4.X.  I'd be suprised if 5.X and 6.X differed in
a substantial way.

David.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RELEASE discs ISO images (for future)

2008-03-07 Thread Julian H. Stacey
   To: freebsd-stable@freebsd.org
This sybject has nothing to do with [EMAIL PROTECTED]
   Cc: [EMAIL PROTECTED]
Posting to 2 FreeBSD lists is deprecated. 
hackers@ is for releases.

Attempting to shrink to one list, this posted with:
To: [EMAIL PROTECTED]
bcc: freebsd-stable@freebsd.org, 
Reply-To: [EMAIL PROTECTED]

Vadim Goncharov wrote:
 Hi!
 
 7.0-RELEASE images came out with FIVE disks - disc 1 to 3 and separate LiveFS
 and docs. What do they contain? I can guess that 2 and 3 are pure packages so
 I don't need to download them if I want to compile out from ports. And in
 previous releases I had to download the disc1 ONLY as it had LiveFS also -
 a very good improvement since 4.x times where disc2 with only LiveFS, mostly
 useless all the time, took separate disk.
 
 But now release announcement says that for LiveFS I need TWO disks - both
 disc1 and livefs disk. WHY? Why not to pack they both to a single disc1,
 this was very comfortable.
 
 I suspect this separation is due to sizes od docs etc. - but CD drives can now
 handle even 700 MBs of data, and disc1 for i386 occupies only 509M, though
 disc2 is 694M, yes.
 
 May be it is desirable to compress docs and other base system parts with
 bzip2 -9 instead of gzip?
 
 P.S. And may be it is good also to resurrect miniinst disk for
 Depenguinator project? :)


 
 -- 
 WBR, Vadim Goncharov. ICQ#166852181   mailto:[EMAIL PROTECTED]
 [Moderator of RU.ANTI-ECOLOGY][FreeBSD][http://antigreen.org][LJ:/nuclight]
 
 ___
 freebsd-stable@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-stable
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 


Julian
-- 
Julian Stacey: BSDUnixLinux C Prog Admin SysEng Consult Munich www.berklix.com
Mail just Ascii plain text.  HTML  Base64 is spam.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BTX on USB pen drive

2008-03-07 Thread Daniel O'Connor
On Fri, 7 Mar 2008, Jeremy Chadwick wrote:
  I think you can use GRUB, because it is used in stage where all
  systems works the same way and amd64 kernel will be booted in later
  stage.

 All of what you've said is correct.  I'm not sure who's having
 problems with GRUB on USB sticks, because yes, it does work.  (There
 are some USB stick models, however, which do not support booting. 
 That's a vendor/manufacturer problem however.)

My experience with GRUB is limited to trying to get the port to install 
on an amd64 machine (failed)..

And as Rink says - amd64 kernels rely on things the loader does to work, 
although I guess it might be possible to add that to GRUB.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.


[kern/sys_pipe.c] PIPE_NODIRECT and pipe throughput

2008-03-07 Thread Dmitry Antipov

Hello all,

recently I've tried a few benchmarks around pipe throughput on Linux vs. 
FreeBSD.
Everyone interesting can see my stuff at http://213.148.29.37/PipeBench, and
initial post to Linux kernel developer mailing list at
http://www.uwsg.iu.edu/hypermail/linux/kernel/0803.0/1837.html

It was noticed (http://www.uwsg.iu.edu/hypermail/linux/kernel/0803.0/1842.html) 
that
the page flipping may be a reason of FreeBSD advantage. I've looked at 
kern/sys_pipe.c
and found that defining PIPE_NODIRECT should disable it. Is that correct ?

Moreover, when I've tried to run the kernel (7.0-STABLE) with PIPE_NODIRECT 
defined,
my benchmark didn't see 30% slowdown, as promised in kern/sys_pipe.c comments.
So, what should be done with a pipe to see a difference between PIPE_NODIRECT 
enabled
and disabled ?

Dmitry
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: INET6 -- and why I don't use it

2008-03-07 Thread Vadim Goncharov
Hi Michael Gratton! 

On Thu, 06 Mar 2008 13:46:52 +1100; Michael Gratton wrote about 'Re: INET6 -- 
and why I don't use it':

 * I have never liked how IPv6 denotes its addresses by using colon-
 delimited hexadecimal strings.
 The glib answer would be and this is why we have the DNS. Yes it is
 more typing and/or talking, but that's the price to pay for a larger
 address space. Anyway, just do what we do when relating v4 addresses:
 don't pronounce the delimiter.

DNS is for users, but admins deal with plain IP addresses much more
often - imagine a case of DNS failure, for example - and routine failure
will become much more pain in the ass. And dependence on DNS for public
IPSEC keys even if addresses are known - is not good.

-- 
WBR, Vadim Goncharov. ICQ#166852181   mailto:[EMAIL PROTECTED]
[Moderator of RU.ANTI-ECOLOGY][FreeBSD][http://antigreen.org][LJ:/nuclight]

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: INET6 -- and why I don't use it

2008-03-07 Thread Vadim Goncharov
Hi Jeremy Chadwick! 

On Wed, 5 Mar 2008 08:01:43 -0800; Jeremy Chadwick wrote about 'Re: INET6 -- 
and why I don't use it':

 Makes it harder to debug, etc. Don't want to see anything IPv6 related in
 command output, to let programs to bind on IPv6 addresses, etc.
 Changing the Subject (but keeping the thread ID reference), since the
 original topic of discussion has now been skewed.
 I have the same attitude Vadim does.  Actually, most of my IPv6 fear
 isn't so much fear as much as it is annoyance and confusion.  Here's
 my list of things, as trivial as they may sound (and I guarantee they
 will):
 * I'm not familiar with the intricacies of the protocol.  This is
 partially my own fault (lack of interest mainly, combined with lack of
 need), while I am very familiar with IPv4.

This is technically not an argument, but has an economic effect of training
staff.

 * The last I read about IPv6 in mainstream news, there were major
 concerns cited over some of the security aspects of the protocol.  I
 also remember reading somewhere that IPv6 was supposed to address issues
 like packet spoofing and DoS -- what became of this?



 * I have never liked how IPv6 denotes its addresses by using colon-
 delimited hexadecimal strings.  I can expand on this if asked, but it's
 more than just they're MAC-like (which is also true, even though
 they're grouped by 16-bit values and not octets).  Reading off an IPv4
 address over the phone is bad enough, and typos are even worse.  IPv6?
 Good grief.

+100. And this 128 bit length is absolutely unnecessary - 64 bits of it
are wasted for EUI-64. Moreover, it was debated whether IPv6 will 64 bit or 128
bit - and everyone switched to 128 bit after this message:
http://ftp.sayclub.com/pub/ietf/concluded-wg-ietf-mail-archive/sipp/1994-07
- WITHOUT any discussion. And 64 bit addresses could be much better.

But even more, look how easily currently IPb5' /24 and another such big blocks
are assigned. Do they want to waste 128 bits?!!

 * Consumer ISPs here in the States do not pass packets -- you aren't
 given a raw pipe; you're given a physical transport with IPv4 service.
 The reality here is that the vast majority will not embrace IPv6 until
 there's an actual market/need for it.  No consumer ISP I know of
 delegates a customer an IPv6 IP address or netblock.  Backbone providers
 support IPv6 now, yup -- and even some peering providers and
 datacenter/co-location facilities do.  But they're all in the minority.

All this is for money. As currently much of hardware don't support IPv6, there
will be a big upfrade on switching from IPv4. And this would result in a HUGE
money piece flowing to hardware vendors. Of course, they are interested in
IPv6.

 * The we're running out of address space argument doesn't hold
 much ground with me.  Yes, it's getting tight, but it's not THAT tight.
 ARIN very regularly returns large amounts of IPv4 space to the world for
 use (I used to be subscribed to NANOG, so I'm aware of this).  Want to
 do something useful?  Start campaigns to get General Electric and MIT to
 give up huge portions of 3/8 and 18/8, respectively.  This is ARIN's
 job, and I sure wouldn't want it.

Agreed.

 * NAT with IPv4 appears to be solving most of the address space issues
 in this day and age.  I use quotes because it adds extra complexities
 at the same time (port forwarding, for example, is an annoying
 requirement, mainly because so many protocols were written during the
 days when NAT didn't exist, or are simply badly-written protocols (I'm
 looking at you, Microsoft)).  Only once in my life have I seen a single
 network so large that it required use of 192.168/16, 172.16/12, and 10/8
 all at once.  Another fact is that NAT is **incredibly** integrated in
 consumer society now.  The attitude given is NAT suffices, use it.
 Until we can teach people no, it doesn't suffice, and here's why and
 get people to believe and accept that, it isn't going to change.

Not only. The NAT is very important in function of hiding internal network
structure, may be even more than address limiting problem. I think it is
SO important that some kind of NAT with this function will be created for
IPv6. Of course, this means additional money for hardware vendors!

 * I don't like incorporating stuff into my kernel, my utilities, or
 my systems in general which I do not use.  I don't want to see an IPv6
 address on my machines or my network.  Why?  It's about minimalism.  I
 would gladly embrace IPv6 if I had reasons to, but I've none,
 therefore I do not.

Sure, me too. Not counting an imapct on the link if it is enabled (I'll least
some below).

 Sufficient?

Not sufficient. So I'll list some more IPv6' evils.

* Too long address. I said about wasted length for EUI-64 - but it means
that MAC address is part of IP address. They could say that it is more handy
to not have ARP e.g. for small devices (IP address for your toaster? huh) -
but that's device memory will be consumpted by too long 

FreeBSD 6.2/6.3/7.0 install CD boot panic

2008-03-07 Thread Balgansuren Batsukh

Hello,

I tried to install FreeBSD-6.2/6.3/7.0 on Dell E520.

When it get boot install CD, ask me language selection then panic. I mean 
keyboard, mouse no response, only can power off.


Dell hasn't any serial port for debug.

Only I use digital camera to capture screen.

I tried to all boot options 1,2,3,4,5. When I try to boot using without ACPI 
and got general proctection fault.


Please find attached screen.

Regards,
Balgaa 
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: BTX on USB pen drive

2008-03-07 Thread John Baldwin
On Thursday 06 March 2008 07:29:40 pm Daniel O'Connor wrote:
 On Fri, 7 Mar 2008, Vincent Mialon wrote:
  I tested various options in boot0cfg with no sucess. I also tested
  the howto from
  http://typo.submonkey.net/articles/2006/04/13/installing-freebsd-on-u
 sb-stick-episode-2 with a 6.3 FreeBSD release which boots on my pc but
  doesn't boot on my supermicro server.
 
  Do you have any idea or pointer that may help me find the way to boot
  this usb drive ? I may file a bug report if you want.

 I wanted to make a USB flash drive based installer for FreeBSD but
 unfortunately BTX seems to have issues that make it difficult to do
 reliably :(

 Here are 2 patches I tried..
 http://people.freebsd.org/~kib/realbtx
 http://people.freebsd.org/~jhb/patches/btx_crx.patch

Try this instead:

http://people.freebsd.org/~jhb/patches/btx_real.patch

(btx_crx has been in the base system for a while FWIW).  This is somewhat 
similar to kib's patch but fixes at least one bug I found in kib's patch (and 
uses some slightly different approaches in a few places).

-- 
John Baldwin
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BTX on USB pen drive

2008-03-07 Thread Ivan Voras
Vincent Mialon wrote:

 The boot selector is shown and I can choose between the two images that 
 nanobsd generated. When it times out BTX crash with very fast scrolling 
 lines. When I shutdown I can see BTX Halted with processor registers 
 written on the screen. I tried different ways to bypass this error using grub 
 but when the kernel is launched, grub (or the kernel) crashes (even with a 
 GENERIC kernel). 

Hi,

It is known that the default boot loader (BTX) can have problems with
various configuration that somewhat deviate from what was the standard
many years ago when it was written. For example, it sometimes fails for
me to boot from hardware RAID arrays (twice so far), etc. In all cases,
using sysutils/extipl helped - it's an alternative boot loader and it
works for me on both i386 and amd64. Install FreeBSD where you want it
as usual, then run extipl on the boot device to install its default
setup (if you're installing from a CD media, run the fixit shell, mount
and chroot into the newly installed system, install extipl from ports,
change sysctl kern.geom.debugflags to 16, run it). I didn't need to
tweak any of its advanced settings.




signature.asc
Description: OpenPGP digital signature


Re: ggated vs iscsi

2008-03-07 Thread Ivan Voras
John Nielsen wrote:
 On Thursday 06 March 2008 04:53:55 pm Pete French wrote:
 I want to take a disc partition on one box and make it available to
 another box to be mounted. Under 7.0 it looks like I have a choice
 of using either ggated to do this, or the new iscsis initiator. Does
 anyone have any opinions on what is most reliable ? Instyinct says
 iscsi as I have used that in the past, but I havent used the new
 initiator yet. Any advice ?
 
 Keep in mind that with ggate you'll need ggated on the exporting machine 
 and ggatec on the other. Likewise with iSCSI you'll need the a _target_ 
 (such as the one in net/iscsi-target) and an initiator, which you get in 
 the base system starting with FreeBSD 7.

According to at least two reports, iSCSI initiator in 7.0-RELEASE is
buggy and has problems that manifest in very low performance. There are
patches for it which should be committed soon.

See this thread:
http://lists.freebsd.org/pipermail/freebsd-scsi/2008-February/003383.html



signature.asc
Description: OpenPGP digital signature


Re: RELEASE discs ISO images (for future)

2008-03-07 Thread Vadim Goncharov

07.03.08 @ 16:10 Julian H. Stacey wrote:


To: freebsd-stable@freebsd.org

This sybject has nothing to do with [EMAIL PROTECTED]


It has because 6.3-RELEASE is also affected with docs issue, and future  
releases 6.4 and 7.1 will be in both branches, as ell as 8.0.



Cc: [EMAIL PROTECTED]

Posting to 2 FreeBSD lists is deprecated.
hackers@ is for releases.


Why? Looks like not the place for official staff.

--
WBR, Vadim Goncharov
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


RELENG_7_0 buildworld failure on read only source tree

2008-03-07 Thread Tom Judge

Hi,

We have been building RELENG_6_x source trees from read only NFS file 
systems for well over a year now with out any problems.  However I have 
just tried to do make buildworld on a RELENG_7_0 source tree from 
yesterday and it failed to build with the following error:



=== gnu/usr.bin/cvs/cvs (cleandir)
rm -f cvs add.o admin.o annotate.o buffer.o checkin.o checkout.o 
classify.o client.o commit.o create_adm.o cvsrc.o diff.o edit.o 
entries.o error.o expand_path.o fileattr.o filesubr.o find_names.o 
hardlink.o hash.o history.o ignore.o import.o lock.o log.o login.o 
logmsg.o main.o mkmodules.o modules.o myndbm.o no_diff.o parseinfo.o 
patch.o prepend_args.o rcs.o rcscmds.o recurse.o release.o remove.o 
repos.o root.o run.o scramble.o server.o stack.o status.o subr.o tag.o 
update.o vers_ts.o version.o watch.o wrapper.o zlib.o cvs.1.gz cvs.5.gz 
cvs.1.cat.gz cvs.5.cat.gz

rm -rf cvs-sanity
rm -f .depend GPATH GRTAGS GSYMS GTAGS
=== gnu/usr.bin/cvs/contrib (cleandir)
sed -e 's,@CSH@,/bin/csh,' -e 's,@PERL@,/usr/bin/perl,' 
/usr/src/gnu/usr.bin/cvs/contrib/../../../../contrib/cvs/contrib/Makefile.in 
 Makefile

cannot create Makefile: Read-only file system
*** Error code 2

Stop in /usr/src/gnu/usr.bin/cvs/contrib.
*** Error code 1

Stop in /usr/src/gnu/usr.bin/cvs.
*** Error code 1

Stop in /usr/src/gnu/usr.bin.
*** Error code 1

Stop in /usr/src/gnu.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.


Should it be possible to build RELENG_7_0 with a read only source tree?

Thanks

Tom
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ggated vs iscsi

2008-03-07 Thread Pete French
 Last time I used it the iscsi-target port had some significant bugs, but 
 looking through cvs it looks like those may have been addressed. I can't 
 really speak to performance. Reliability should be all right as long as 
 you don't have frequent network issues.

Thanks for the warning - do you have any refernces for these bugs ? I
have been using the iscsi-target for a while and never come across
anything problematic, but I havent really hammered it hard as yet.

Am currently playing around with using gmirror on a pair of iscsi
drives mounted using iscsi_initiator/iscsi-target and it seems to
work rather nicely actually. Reconnest if I disconnect a drive,
performance is O.K., and it appears to behave itself. I would rather
use ZFS on top, but I am not sure I *quite* trust it yet after some of
the comments on here and my own expeineces, so gmirror it is for now.

-pete.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ggated vs iscsi

2008-03-07 Thread Pete French
 According to at least two reports, iSCSI initiator in 7.0-RELEASE is
 buggy and has problems that manifest in very low performance. There are
 patches for it which should be committed soon.

 See this thread:
 http://lists.freebsd.org/pipermail/freebsd-scsi/2008-February/003383.html

Thanks - low performance I can live with, as long as it doesnt lose any
data then I am happy.

-pete.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 7 buildworld error

2008-03-07 Thread Joshua Coombs

Derek Taylor wrote:

On Fri, Feb 29, 2008 09:50 PM Sean [EMAIL PROTECTED] wrote:

Check /etc/make.conf for CFLAGS, and if present remove it.


This fixed the problem.

Thank you.

-Derek.


I can confirm a failure in the same spot.  What concerns me is in both 
my failure, and Derek's, the malloc is failing well below what limit 
says should be allowed.


bin/cc/cc_int/../cc_tools 
-I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcc 
-I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcc/config 
-I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcclibs/include 
-I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcclibs/libcpp/include 
-I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcclibs/libdecnumber 
 -I/usr/obj/usr/src/tmp/legacy/usr/include -c ../cc_tools/insn-attrtab.c


cc1: out of memory allocating 136475392 bytes
*** Error code 1

Stop in /usr/src/gnu/usr.bin/cc/cc_int.
*** Error code 1

cyrix-dlc# limit
cputime  unlimited
filesize unlimited
datasize 524288 kbytes
stacksize65536 kbytes
coredumpsize unlimited
memoryuseunlimited
vmemoryuse   unlimited
descriptors  957
memorylocked unlimited
maxproc  478
sbsize   unlimited

cc1 was only trying to request 130MB, my datasize is 512MB, why did it fail?

Not to mention the additional question of why is cc1 ballooning up so 
badly on that file, when leading up to it it's using on average 12MB per 
instance?  Prior versions of FreeBSD never took anywhere NEAR this much 
RAM to build.


(I also don't like the 'remove all CFLAGS' fix suggestion, something 
is broken if a buildworld can't complete on a stock kernel with sane 
CFLAGS.  In my case, I run -Os -pipe, am I now to understand that any 
CFLAGS setting is inappropriate?)


Joshua Coombs

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: accf_http and incqlen

2008-03-07 Thread Scott Oertel
David Malone wrote:
 On Thu, Mar 06, 2008 at 10:37:03PM +0100, Uwe Doering wrote:
   
 Last time I looked (in FreeBSD 4.x) these were connections that got 
 stuck in an early stage, that is, before the HTTP request had been 
 received.  The 'accf_http' filter which wants to parse said request 
 waits forever in this situation because there is no timeout implemented, 
 as far as I recall.  So these would-be HTTP connections pile up over time.
 

 The accf_http should flush out the oldest of these connections once
 there are more than a certain number of them. I think that the
 number permitted depeneds on the backlog parameter passed to listen.
 I checked that this worked recently, and it seemed to do the right
 thing on 7.X and 4.X.  I'd be suprised if 5.X and 6.X differed in
 a substantial way.

   David.

   
So having the queue showing full in the netstat should be normal, and
not have any side effects? btw, i tested this on 4.x, 5.x, 6.x and 7.x,
they all appear to behave in the same fashion.


-Scott
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: accf_http and incqlen

2008-03-07 Thread David Malone
 So having the queue showing full in the netstat should be normal, and
 not have any side effects? btw, i tested this on 4.x, 5.x, 6.x and 7.x,
 they all appear to behave in the same fashion.

I must admit that I did not check netstat, but I believe you would
always see a full queue in netstat once the machine had been running
for a while. My test was to open a large number of connections, and
check that once I exceded the backlog that previous connections
were closed.

David.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: accf_http and incqlen

2008-03-07 Thread Scott Oertel
David Malone wrote:
 I must admit that I did not check netstat, but I believe you would
 always see a full queue in netstat once the machine had been running
 for a while. My test was to open a large number of connections, and
 check that once I exceded the backlog that previous connections
 were closed.

   David.

   
Ah, yeah, that makes sense. I've been running it this way for a few days
and it seems fine. Ill let it ride and hopefully I won't run into any
issues. Thanks for the help.


-Scott
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ggated vs iscsi

2008-03-07 Thread John Nielsen
On Friday 07 March 2008 11:25:39 am Pete French wrote:
  Last time I used it the iscsi-target port had some significant bugs,
  but looking through cvs it looks like those may have been addressed.
  I can't really speak to performance. Reliability should be all right
  as long as you don't have frequent network issues.

 Thanks for the warning - do you have any refernces for these bugs ? I
 have been using the iscsi-target for a while and never come across
 anything problematic, but I havent really hammered it hard as yet.

These two (related) PR's are one starting point. Both are closed/fixed. :)

http://www.freebsd.org/cgi/query-pr.cgi?pr=117015
http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/117690

There was an e-mail thread about some (possibly the same) issues as well 
but I can't find it now. In any case it looks like my experience is out 
of date and the latest version of the port has seen some beneficial 
updates.

 Am currently playing around with using gmirror on a pair of iscsi
 drives mounted using iscsi_initiator/iscsi-target and it seems to
 work rather nicely actually. Reconnest if I disconnect a drive,
 performance is O.K., and it appears to behave itself. I would rather
 use ZFS on top, but I am not sure I *quite* trust it yet after some of
 the comments on here and my own expeineces, so gmirror it is for now.

As long as the rebuild time is okay for you then this is a likely a good 
way to go. Between iscsi, zfs, and all the geom tools there are a LOT of 
options for storage in FreeBSD these days. With more people adopting 7 
the remaining kinks will hopefully get worked out of the former two in 
short order.

JN

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ggated vs iscsi

2008-03-07 Thread John Nielsen
On Friday 07 March 2008 10:08:59 am Ivan Voras wrote:
 John Nielsen wrote:
  On Thursday 06 March 2008 04:53:55 pm Pete French wrote:
  I want to take a disc partition on one box and make it available to
  another box to be mounted. Under 7.0 it looks like I have a choice
  of using either ggated to do this, or the new iscsis initiator. Does
  anyone have any opinions on what is most reliable ? Instyinct says
  iscsi as I have used that in the past, but I havent used the new
  initiator yet. Any advice ?
 
  Keep in mind that with ggate you'll need ggated on the exporting
  machine and ggatec on the other. Likewise with iSCSI you'll need the
  a _target_ (such as the one in net/iscsi-target) and an initiator,
  which you get in the base system starting with FreeBSD 7.

 According to at least two reports, iSCSI initiator in 7.0-RELEASE is
 buggy and has problems that manifest in very low performance. There are
 patches for it which should be committed soon.

 See this thread:
 http://lists.freebsd.org/pipermail/freebsd-scsi/2008-February/003383.ht
ml

I remember the thread (and the patch). Is there a PR for this or did you 
or someone else just pick it up directly?

JN

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD and Apache, is it safe out of the box ?

2008-03-07 Thread Darran
Hello all,

I want to run a (FreeBSD 7) server facing the internet and running Apache and
wondered if its safe out of the box .. so to speak ?

Do i have to do a degree in configuration to allow it to face the wild west
(internet) ?

I also want to use it for storage of media and serving of media .. using windows
and freebsd clients .. is it possible .. again .. out of the box ?

thanks for your time.

Darran
http://www.deejc.net




___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 7 buildworld error

2008-03-07 Thread Jason Evans

Joshua Coombs wrote:

Derek Taylor wrote:

On Fri, Feb 29, 2008 09:50 PM Sean [EMAIL PROTECTED] wrote:

Check /etc/make.conf for CFLAGS, and if present remove it.


This fixed the problem.

Thank you.

-Derek.


I can confirm a failure in the same spot.  What concerns me is in both 
my failure, and Derek's, the malloc is failing well below what limit 
says should be allowed.


bin/cc/cc_int/../cc_tools 
-I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcc 
-I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcc/config 
-I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcclibs/include 
-I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcclibs/libcpp/include 
-I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcclibs/libdecnumber 
 -I/usr/obj/usr/src/tmp/legacy/usr/include -c ../cc_tools/insn-attrtab.c


cc1: out of memory allocating 136475392 bytes
*** Error code 1

Stop in /usr/src/gnu/usr.bin/cc/cc_int.
*** Error code 1

cyrix-dlc# limit
cputime  unlimited
filesize unlimited
datasize 524288 kbytes
stacksize65536 kbytes
coredumpsize unlimited
memoryuseunlimited
vmemoryuse   unlimited
descriptors  957
memorylocked unlimited
maxproc  478
sbsize   unlimited

cc1 was only trying to request 130MB, my datasize is 512MB, why did it 
fail?


It looks to me like gcc is trying to allocate a single 130MiB object, 
but you don't say anything about how much memory is already in use.  It 
may well be that there are no remaining places in the memory map to 
place such a large object.


Jason
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and Apache, is it safe out of the box ?

2008-03-07 Thread Mike Tancsa

At 12:02 PM 3/7/2008, Darran wrote:

Hello all,

I want to run a (FreeBSD 7) server facing the internet and running Apache and
wondered if its safe out of the box .. so to speak ?
Yes, today it is.  But that does not necessarily mean you will not 
need to do updates, apply patches, perhaps change your configuration 
to deal with new threats.  In my experience, FreeBSD makes the later 
part easier than Windows or Linux (IMHO and experience)




Do i have to do a degree in configuration to allow it to face the wild west
(internet) ?
I also want to use it for storage of media and serving of media .. 
using windows

and freebsd clients .. is it possible .. again .. out of the box ?



If you mean turn it on, click a few buttons and it works ? no.  You 
will need to install and configure samba and apache.

e.g.
cd /usr/ports/net/samba3;make install

will get the application installed, but you still need to configure 
it and later maintain it.  With Windows, I find you can initially get 
things working without understanding how it works.  But when you run 
into problems, you wont understand how to fix them. In general I find 
with FreeBSD, you are expected to understand some basics, but you are 
then better prepared to understand the problems you will face in 
running a server


That being said, the defaults FreeBSD 7.0 it comes with are pretty 
sane and you should be able to get going quickly to the point where 
you are doing stuff


---Mike

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 7 buildworld error

2008-03-07 Thread Joshua Coombs

Jason Evans wrote:
cc1 was only trying to request 130MB, my datasize is 512MB, why did it 
fail?


It looks to me like gcc is trying to allocate a single 130MiB object, 
but you don't say anything about how much memory is already in use.  It 
may well be that there are no remaining places in the memory map to 
place such a large object.


Jason


The machine is a pretty lightly loaded, but low physical mem box.  64mb 
ram, 384mb of swap normally, with an additional 2gb of swap to a file 
added for my buildworld attempt.


Mem: 20M Active, 5604K Inact, 27M Wired, 2876K Cache, 14M Buf, 3064K Free
Swap: 2432M Total, 21M Used, 2411M Free

15901 root1 1150 12640K 11628K RUN  2:22 86.96% cc1

Thats while building tree-ssa-ccp.c.  How do I test out your theory? 
(Short of watching top while doing the build.)


Josh C

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


[PATCH] Update pkg_add -r

2008-03-07 Thread walt

Looks like pkg_add -r is failing on RELENG_7:

--- main.c.orig 2008-03-07 10:20:00.0 -0800
+++ main.c  2008-03-07 09:58:56.0 -0800
@@ -81,7 +81,7 @@
{ 502100, 502128, /packages-5-current },
{ 503100, 599000, /packages-5-stable },
{ 600100, 699000, /packages-6-stable },
-   { 70, 799000, /packages-7-current },
+   { 70, 799000, /packages-7-stable },
{ 0, 999, /packages-current },
{ 0, 0, NULL }
 };

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 7 buildworld error

2008-03-07 Thread Erik Trulsson
On Fri, Mar 07, 2008 at 08:54:53AM -0800, Jason Evans wrote:
 Joshua Coombs wrote:
 Derek Taylor wrote:
 On Fri, Feb 29, 2008 09:50 PM Sean [EMAIL PROTECTED] wrote:
 Check /etc/make.conf for CFLAGS, and if present remove it.
 
 This fixed the problem.
 
 Thank you.
 
 -Derek.
 
 I can confirm a failure in the same spot.  What concerns me is in both my 
 failure, and Derek's, the malloc is failing well below what limit says 
 should be allowed.
 
 bin/cc/cc_int/../cc_tools 
 -I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcc 
 -I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcc/config 
 -I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcclibs/include 
 -I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcclibs/libcpp/include 
 -I/usr/src/gnu/usr.bin/cc/cc_int/../../../../contrib/gcclibs/libdecnumber  
 -I/usr/obj/usr/src/tmp/legacy/usr/include -c ../cc_tools/insn-attrtab.c
 
 cc1: out of memory allocating 136475392 bytes
 *** Error code 1
 
 Stop in /usr/src/gnu/usr.bin/cc/cc_int.
 *** Error code 1
 
 cyrix-dlc# limit
 cputime  unlimited
 filesize unlimited
 datasize 524288 kbytes
 stacksize65536 kbytes
 coredumpsize unlimited
 memoryuseunlimited
 vmemoryuse   unlimited
 descriptors  957
 memorylocked unlimited
 maxproc  478
 sbsize   unlimited
 
 cc1 was only trying to request 130MB, my datasize is 512MB, why did it 
 fail?
 
 It looks to me like gcc is trying to allocate a single 130MiB object, but 
 you don't say anything about how much memory is already in use.  It may 
 well be that there are no remaining places in the memory map to place such 
 a large object.

And that particular file (insn-attrtab.c, which is a machine-generated part
of gcc itself,) is known to require much more memory to compile than most
other source files.
If gcc runs out of memory anywhere during a buildworld it is most likely
when compiling that particular file.



-- 
Insert your favourite quote here.
Erik Trulsson
[EMAIL PROTECTED]
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and Apache, is it safe out of the box ?

2008-03-07 Thread Darran
Mike Tancsa [EMAIL PROTECTED] wrote:

 At 12:02 PM 3/7/2008, Darran wrote:
 Hello all,
 
 I want to run a (FreeBSD 7) server facing the internet and running Apache and
 wondered if its safe out of the box .. so to speak ?
 Yes, today it is.  But that does not necessarily mean you will not 
 need to do updates, apply patches, perhaps change your configuration 
 to deal with new threats.  In my experience, FreeBSD makes the later 
 part easier than Windows or Linux (IMHO and experience)
 
 
 Do i have to do a degree in configuration to allow it to face the wild west
 (internet) ?
 I also want to use it for storage of media and serving of media .. 
 using windows
 and freebsd clients .. is it possible .. again .. out of the box ?
 
 
 If you mean turn it on, click a few buttons and it works ? no.  You 
 will need to install and configure samba and apache.
 e.g.
 cd /usr/ports/net/samba3;make install
 
 will get the application installed, but you still need to configure 
 it and later maintain it.  With Windows, I find you can initially get 
 things working without understanding how it works.  But when you run 
 into problems, you wont understand how to fix them. In general I find 
 with FreeBSD, you are expected to understand some basics, but you are 
 then better prepared to understand the problems you will face in 
 running a server
 
 That being said, the defaults FreeBSD 7.0 it comes with are pretty 
 sane and you should be able to get going quickly to the point where 
 you are doing stuff
 
  ---Mike
 
 ___
 freebsd-stable@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-stable
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 
Thanks for the reply Mike,

I currently use FreeBSD on my laptop so i have some experience of running it and
building the world etc etc, i think the question really boiled down to is it
safe to run it after an install and minor configuration and i believe that at
this point it is ..
Thanks

Darran
http://www.deejc.net




___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and Apache, is it safe out of the box ?

2008-03-07 Thread Mike Tancsa

At 01:43 PM 3/7/2008, Darran wrote:

building the world etc etc, i think the question really boiled down to is it
safe to run it after an install and minor configuration and i believe that at
this point it is ..


We have a number of busy production boxes running 7.0 (spam/virus 
scanning of email and a very busy AMD64 postgresql box, 8 gig RAM 
serving up about 30Mb/s of db results to 3 webservers on an Areca 
controller in RAID10).  Hardware choices matter.  But if it runs well 
under 6.x most things should run equally well under 7.x


---Mike

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BTX on USB pen drive

2008-03-07 Thread John Nielsen
On Friday 07 March 2008 09:13:12 am John Baldwin wrote:
 On Thursday 06 March 2008 07:29:40 pm Daniel O'Connor wrote:
  On Fri, 7 Mar 2008, Vincent Mialon wrote:
   I tested various options in boot0cfg with no sucess. I also tested
   the howto from
   http://typo.submonkey.net/articles/2006/04/13/installing-freebsd-on
  -u sb-stick-episode-2 with a 6.3 FreeBSD release which boots on my
   pc but doesn't boot on my supermicro server.
  
   Do you have any idea or pointer that may help me find the way to
   boot this usb drive ? I may file a bug report if you want.
 
  I wanted to make a USB flash drive based installer for FreeBSD but
  unfortunately BTX seems to have issues that make it difficult to do
  reliably :(
 
  Here are 2 patches I tried..
  http://people.freebsd.org/~kib/realbtx
  http://people.freebsd.org/~jhb/patches/btx_crx.patch

 Try this instead:

 http://people.freebsd.org/~jhb/patches/btx_real.patch

 (btx_crx has been in the base system for a while FWIW).  This is
 somewhat similar to kib's patch but fixes at least one bug I found in
 kib's patch (and uses some slightly different approaches in a few
 places).

I have a laptop that does the BTX register-spin thing when booting from 
USB even if I use Grub, so I'll give your patch a try. The first hunk 
doesn't apply cleanly on today's 7-STABLE sources--the new page tables 
entry at line 29 throws it off. I applied that hunk manually and am 
rebuilding now.

FWIW the laptop is an Intel-based Gateway M465-E, and it boots from 
(internal) CD just fine. I don't currently have space or a partition on 
the internal hard drive for a FreeBSD install, hence the USB stick.

JN

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ggated vs iscsi

2008-03-07 Thread Ivan Voras
On 07/03/2008, John Nielsen [EMAIL PROTECTED] wrote:
 On Friday 07 March 2008 10:08:59 am Ivan Voras wrote:
   According to at least two reports, iSCSI initiator in 7.0-RELEASE is
   buggy and has problems that manifest in very low performance. There are
   patches for it which should be committed soon.
  
   See this thread:
   http://lists.freebsd.org/pipermail/freebsd-scsi/2008-February/003383.ht
  ml

 I remember the thread (and the patch). Is there a PR for this or did you
  or someone else just pick it up directly?

It doesn't have a PR, I cannot pick it up.

I guess the best option would be to bug the author :)
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and Apache, is it safe out of the box ?

2008-03-07 Thread security

Mike Tancsa wrote:

At 12:02 PM 3/7/2008, Darran wrote:

Hello all,

I want to run a (FreeBSD 7) server facing the internet and running 
Apache and

wondered if its safe out of the box .. so to speak ?
Yes, today it is.  But that does not necessarily mean you will not 
need to do updates, apply patches, perhaps change your configuration 
to deal with new threats.  In my experience, FreeBSD makes the later 
part easier than Windows or Linux (IMHO and experience)



Do i have to do a degree in configuration to allow it to face the 
wild west

(internet) ?
I also want to use it for storage of media and serving of media .. 
using windows

and freebsd clients .. is it possible .. again .. out of the box ?



If you mean turn it on, click a few buttons and it works ? no.  You 
will need to install and configure samba and apache.

e.g.
cd /usr/ports/net/samba3;make install

will get the application installed, but you still need to configure it 
and later maintain it.  With Windows, I find you can initially get 
things working without understanding how it works.  But when you run 
into problems, you wont understand how to fix them. In general I find 
with FreeBSD, you are expected to understand some basics, but you are 
then better prepared to understand the problems you will face in 
running a server


That being said, the defaults FreeBSD 7.0 it comes with are pretty 
sane and you should be able to get going quickly to the point where 
you are doing stuff


---Mike

_

I would agree with the following caveats:
ONLY allow ssh logins, ONLY using public key auth., and never directly 
to root.

Careful with guest access under SAMBA
While Apache at this point is reasonably secure, there are a ton of apps 
that you can run under it that aren't.  I'm thinking of many PHP based 
in general, and most of the forum apps in particular.  Be sure to 
research the security history of web apps (or anything that opens up a 
port listener).  Sign up for the mailing list of what you install, so 
you'll be alerted to security updates.
Consider running a file modification detector like aide or tripwire.  
They won't keep you from getting owned, but they'll tell you if it happens


A little light reading

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security-intro.html
http://www.onlamp.com/pub/a/bsd/2002/08/08/FreeBSD_Basics.html
http://httpd.apache.org/docs/2.2/misc/security_tips.html

jim

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: INET6 -- and why I don't use it

2008-03-07 Thread Bob Johnson
On 3/6/08, Torfinn Ingolfsen [EMAIL PROTECTED] wrote:
 In other words; if I have machines with ipv6 adresses that I can reach
 globally, but don't have a dns name for them, the usefulness is very
 limited.

 Is that challenge solved somehow with ipv6?
 It doesn't look like dyndns.org supports ipv6 in their free service.


They do in the free service I get from them, but I was grandfathered
in from their older free service and I'm not sure how it compares to
what they offer now:

$ dig ipv6.wb4jcm.org 

[...]

;; ANSWER SECTION:
ipv6.wb4jcm.org.1440IN  2001:5c0:987c::1

;; AUTHORITY SECTION:
wb4jcm.org. 69432   IN  NS  ns3.mydyndns.org.
wb4jcm.org. 69432   IN  NS  ns4.mydyndns.org.
wb4jcm.org. 69432   IN  NS  ns1.mydyndns.org.
wb4jcm.org. 69432   IN  NS  ns2.mydyndns.org.
wb4jcm.org. 69432   IN  NS  ns5.mydyndns.org.

- Bob
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BTX on USB pen drive

2008-03-07 Thread Dimitry Andric
On 2008-03-07 15:13, John Baldwin wrote:
 Try this instead:
 
 http://people.freebsd.org/~jhb/patches/btx_real.patch

Hi John,

I've encounted way too many machines already with BIOSes that clash with
the regular btx loader... :(

Might it not be a nice idea to put out a RELENG_7 or RELENG_7_0 bootonly
CD image with this patch applied?  I'm sure many people won't be able to
build this themselves, but they could just download a prebuilt image to
test booting. :)
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


[Panic] Removing of the Palm during select syscall causes panic

2008-03-07 Thread Oleg Sidorkin
Hello,

I'm running 7.0-Stable on the ASUS P5K-VM + Intel Q6600 box.
If Palm device is disconnected after synchronization, system crashes with 
following stacktrace:

#0  doadump () at pcpu.h:194
#1  0x0004 in ?? ()
#2  0x802bea49 in boot (howto=260) 
at /usr/src/sys/kern/kern_shutdown.c:409
#3  0x802bee4d in panic (fmt=0x104 Address 0x104 out of bounds) 
at /usr/src/sys/kern/kern_shutdown.c:563
#4  0x804ccc84 in trap_fatal (frame=0xff0041595350, 
eva=18446742974491038824) at /usr/src/sys/amd64/amd64/trap.c:724
#5  0x804cd055 in trap_pfault (frame=0xaf7607d0, usermode=0) 
at /usr/src/sys/amd64/amd64/trap.c:641
#6  0x804cd998 in trap (frame=0xaf7607d0) 
at /usr/src/sys/amd64/amd64/trap.c:410
#7  0x804b35fe in calltrap () 
at /usr/src/sys/amd64/amd64/exception.S:169
#8  0x8028d842 in giant_poll (dev=0xff000ddf6600, events=64, 
td=0xff0041595350) at /usr/src/sys/kern/kern_conf.c:385
#9  0x8025474e in devfs_poll_f (fp=Variable fp is not available.
) at /usr/src/sys/fs/devfs/devfs_vnops.c:845
#10 0x802f61f6 in kern_select (td=0xff0041595350, nd=11, 
fd_in=0x7fbfea90, fd_ou=0x0, fd_ex=0x0, tvp=Variable tvp is not 
available.
) at file.h:277
#11 0x802f6611 in select (td=0xff0041595350, 
uap=0xaf760be0) at /usr/src/sys/kern/sys_generic.c:663
#12 0x804cd2d7 in syscall (frame=0xaf760c70) 
at /usr/src/sys/amd64/amd64/trap.c:852
#13 0x804b380b in Xfast_syscall () 
at /usr/src/sys/amd64/amd64/exception.S:290
#14 0x000804579d6c in ?? ()
Previous frame inner to this frame (corrupt stack?)

Does anyone have any ideas?
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BTX on USB pen drive

2008-03-07 Thread Jeremy Chadwick
On Fri, Mar 07, 2008 at 11:51:49PM +0100, Dimitry Andric wrote:
 On 2008-03-07 15:13, John Baldwin wrote:
  Try this instead:
  
  http://people.freebsd.org/~jhb/patches/btx_real.patch
 
 Hi John,
 
 I've encounted way too many machines already with BIOSes that clash with
 the regular btx loader... :(

Have we considered sgetting rid of BTX and using a different bootloader
altogether on FreeBSD?  There's got to be some open-source, non-GPL
bootloaders which work better than our current.

The reason I mention this is because the number of problem reports with
BTX continue to rise, and debugging them is very painful since due to
the way the crash is reported, no one can easily report a full register
dump.  I suppose if the latter was addressed, the former could be solved
quicker.

-- 
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking   http://www.parodius.com/ |
| UNIX Systems Administrator  Mountain View, CA, USA |
| Making life hard for others since 1977.  PGP: 4BD6C0CB |

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RELENG_7_0 buildworld failure on read only source tree

2008-03-07 Thread Xin LI

Tom Judge wrote:

Hi,

We have been building RELENG_6_x source trees from read only NFS file 
systems for well over a year now with out any problems.  However I have 
just tried to do make buildworld on a RELENG_7_0 source tree from 
yesterday and it failed to build with the following error:



[error snipped]


Should it be possible to build RELENG_7_0 with a read only source tree?


This can be worked around, I think touching the Makefile would do the 
trick.  IIRC David (cc'ed) has fixed the Makefile at some point this 
January while he is updating the base cvs(1) for this exact issue, maybe 
we should MFC the changeset to RELENG_7?


Cheers,
--
Xin LI [EMAIL PROTECTED]http://www.delphij.net/
FreeBSD - The Power to Serve!
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


musicpd segfaults on run - was advised that it's an issue with the system

2008-03-07 Thread Ross Penner
Hi,

I've recently run the upgrade gamut and moved from 6.3 to 7.0. I've
had a few hick ups but this one I can't resolve. I used musicpd
(http://www.freshports.org/audio/musicpd/) on 6.3 to stream to a
shoutcast server. When I start mpd on 7.0, it immediately has a
segmentation fault and dumps its core.

I discussed the issue in the musicpd irc channel and I was advised
that it seemed like it was an issue with the system, not with musicpd.
Since upgrading to 7.0, I've reinstalled all my ports and since
discovering the problem, I've reinstalled musicpd specifically. The
backtrace from gdb is as follows:

#0  0x28140b15 in pthread_setcancelstate () from /lib/libthr.so.3
#1  0x281388ac in open () from /lib/libthr.so.3
#2  0x286ac269 in __stack_chk_fail () from /lib/libssp.so.0
#3  0x in ?? ()
#4  0xbfbfe6a8 in ?? ()
#5  0x28084ead in _rtld_thread_init () from /libexec/ld-elf.so.1
Previous frame inner to this frame (corrupt stack?)


Any help or direction I can get to finding the solution to this
problem would be greatly appreciated.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


[releng_7 tinderbox] failure on powerpc/powerpc

2008-03-07 Thread FreeBSD Tinderbox
TB --- 2008-03-08 04:45:14 - tinderbox 2.3 running on freebsd-stable.sentex.ca
TB --- 2008-03-08 04:45:14 - starting RELENG_7 tinderbox run for powerpc/powerpc
TB --- 2008-03-08 04:45:14 - cleaning the object tree
TB --- 2008-03-08 04:45:32 - cvsupping the source tree
TB --- 2008-03-08 04:45:32 - /usr/bin/csup -r 3 -g -L 1 -h localhost -s 
/tinderbox/RELENG_7/powerpc/powerpc/supfile
TB --- 2008-03-08 04:45:40 - building world (CFLAGS=-O2 -pipe)
TB --- 2008-03-08 04:45:40 - cd /src
TB --- 2008-03-08 04:45:40 - /usr/bin/make -B buildworld
 World build started on Sat Mar  8 04:45:41 UTC 2008
 Rebuilding the temporary build tree
 stage 1.1: legacy release compatibility shims
 stage 1.2: bootstrap tools
 stage 2.1: cleaning up the object tree
 stage 2.2: rebuilding the object tree
 stage 2.3: build tools
 stage 3: cross tools
 stage 4.1: building includes
 stage 4.2: building libraries
 stage 4.3: make dependencies
 stage 4.4: building everything
 World build completed on Sat Mar  8 05:50:59 UTC 2008
TB --- 2008-03-08 05:50:59 - generating LINT kernel config
TB --- 2008-03-08 05:50:59 - cd /src/sys/powerpc/conf
TB --- 2008-03-08 05:50:59 - /usr/bin/make -B LINT
TB --- 2008-03-08 05:50:59 - building LINT kernel (COPTFLAGS=-O2 -pipe)
TB --- 2008-03-08 05:50:59 - cd /src
TB --- 2008-03-08 05:50:59 - /usr/bin/make -B buildkernel KERNCONF=LINT
 Kernel build for LINT started on Sat Mar  8 05:51:00 UTC 2008
 stage 1: configuring the kernel
 stage 2.1: cleaning up the object tree
 stage 2.2: rebuilding the object tree
 stage 2.3: build tools
 stage 3.1: making dependencies
 stage 3.2: building everything
 Kernel build for LINT completed on Sat Mar  8 06:08:52 UTC 2008
TB --- 2008-03-08 06:08:52 - building GENERIC kernel (COPTFLAGS=-O2 -pipe)
TB --- 2008-03-08 06:08:52 - cd /src
TB --- 2008-03-08 06:08:52 - /usr/bin/make -B buildkernel KERNCONF=GENERIC
 Kernel build for GENERIC started on Sat Mar  8 06:08:52 UTC 2008
 stage 1: configuring the kernel
 stage 2.1: cleaning up the object tree
 stage 2.2: rebuilding the object tree
 stage 2.3: build tools
 stage 3.1: making dependencies
[...]
awk -f /src/sys/tools/makeobjops.awk /src/sys/kern/serdev_if.m -h
awk -f /src/sys/tools/makeobjops.awk /src/sys/powerpc/powerpc/mmu_if.m -h
awk -f /src/sys/tools/makeobjops.awk /src/sys/powerpc/powerpc/pic_if.m -h
awk -f /src/sys/tools/makeobjops.awk /src/sys/dev/ofw/ofw_bus_if.m -h
rm -f .newdep
/usr/bin/make -V CFILES -V SYSTEM_CFILES -V GEN_CFILES |  MKDEP_CPP=cc -E 
CC=cc xargs mkdep -a -f .newdep -O2 -pipe -fno-strict-aliasing  -std=c99 -g 
-Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes  
-Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual  -Wundef 
-Wno-pointer-sign -fformat-extensions -nostdinc  -I. -I/src/sys 
-I/src/sys/contrib/altq -I/src/sys/contrib/ipfilter -I/src/sys/contrib/pf 
-I/src/sys/dev/ath -I/src/sys/contrib/ngatm -I/src/sys/dev/twa 
-I/src/sys/gnu/fs/xfs/FreeBSD -I/src/sys/gnu/fs/xfs/FreeBSD/support 
-I/src/sys/gnu/fs/xfs -D_KERNEL -DHAVE_KERNEL_OPTION_HEADERS -include 
opt_global.h -fno-common -finline-limit=15000 --param inline-unit-growth=100 
--param large-function-growth=1000  -msoft-float -msoft-float -ffreestanding
/src/sys/kern/sched_ule.c:75:2: error: #error This architecture is not 
currently compatible with ULE
mkdep: compile failed
*** Error code 1

Stop in /obj/powerpc/src/sys/GENERIC.
*** Error code 1

Stop in /src.
*** Error code 1

Stop in /src.
TB --- 2008-03-08 06:09:23 - WARNING: /usr/bin/make returned exit code  1 
TB --- 2008-03-08 06:09:23 - ERROR: failed to build GENERIC kernel
TB --- 2008-03-08 06:09:23 - tinderbox aborted
TB --- 4294.60 user 394.32 system 5049.46 real


http://tinderbox.des.no/tinderbox-releng_7-RELENG_7-powerpc-powerpc.full
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]