Segfault in Apache after upgrade to v4.6

2009-11-01 Thread Jeremy Bowen
Hi I've just upgraded a couple of (old-ish) servers to 4.6 and now Apache has started throwing intermittent segfaults on both. (dmesgs appended below) I previously upgraded from 4.4 to 4.5 without incident. Both of these machines have been running faultlessly for months without issue so

Re: Problems with 4.5 as a KVM guest

2009-11-01 Thread Tomáš Bodžár
4.6 or -current is working fine in VirtualBox too but still some weird things : 1) X use vesa driver 2) If you switch from one console to another then your console will be with somewhat red/brown background 3) If you reboot then during boot your OpenBSD will stop on mtrr(4) driver. if you just

Re: What VM does OpenBSD run well under

2009-11-01 Thread Tomáš Bodžár
After reading this http://www.openbsd.org/cgi-bin/man.cgi?query=mpbiosapropos=0sektion=0manpa th=OpenBSD+Currentarch=i386format=html I must say that for me it means that if you have crappy HW (in this case KVM) then you can encounter problems. On Sun, Nov 1, 2009 at 4:29 AM, Chris Dukes

Re: Segfault in Apache after upgrade to v4.6

2009-11-01 Thread Richard Toohey
On 1/11/2009, at 5:27 PM, Jeremy Bowen wrote: Hi I've just upgraded a couple of (old-ish) servers to 4.6 and now Apache has started throwing intermittent segfaults on both. (dmesgs appended below) I previously upgraded from 4.4 to 4.5 without incident. Both of these machines have been

Re: Problems with 4.5 as a KVM guest

2009-11-01 Thread Garry Dolley
On Sat, Oct 31, 2009 at 09:42:58AM +0100, Michiel van Baak wrote: On 19:20, Fri 30 Oct 09, Toni Mueller wrote: Thanks, John and Michiel, On Thu, 29.10.2009 at 14:02:27 +0100, Michiel van Baak mich...@vanbaak.info wrote: On 12:18, Thu 29 Oct 09, Toni Mueller wrote: I'm running kvm

Re: Encrypting /home on OpenBSD Laptops

2009-11-01 Thread Joachim Schipper
On Sat, Oct 31, 2009 at 09:52:06AM -0400, Brad Tilley wrote: On Sat, Oct 31, 2009 at 9:30 AM, Joachim Schipper joac...@joachimschipper.nl wrote: [My (Joachim's) message, snipped by Brat: Encrypting just /home is dangerous. Do you know where vi(1) keeps its backup files? Are you *sure* that's the

Re: Encrypting /home on OpenBSD Laptops

2009-11-01 Thread Joachim Schipper
On Sun, Nov 01, 2009 at 09:36:40AM +0100, Joachim Schipper wrote: On Sat, Oct 31, 2009 at 09:52:06AM -0400, Brad Tilley wrote: On Sat, Oct 31, 2009 at 9:30 AM, Joachim Schipper joac...@joachimschipper.nl wrote: [My (Joachim's) message, snipped by Brat:

Re: pf n00b

2009-11-01 Thread ghe
On Nov 1, 2009, at 1:12 AM, Toma Bodar wrote: I don't know if you find one document about PF, but here it is http://home.nuug.no/~peter/pf/en/ same author wrote book about PF. Yup. That's one of the books I read -- but pf seems to have moved since then. Thanks for the link to this major

Re: pf n00b

2009-11-01 Thread ghe
On Oct 31, 2009, at 5:13 PM, Stuart Henderson wrote: no need for that, we have automatic skip steps, and a ruleset optimizer that re-orders where it makes sense. see the 3 articles on undeadly about pf for some fundamentals, starting here;

Re: pf n00b

2009-11-01 Thread ghe
On Oct 31, 2009, at 9:26 PM, Ryan McBride wrote: I can't speak for the books, and I KNOW google is full of lies, but can you point out specifically what parts of the website docs and man page talks about this? It should be removed. After going through the replies I've received, I'm thinking

Re: pf n00b

2009-11-01 Thread ghe
On Oct 31, 2009, at 3:33 PM, Vadim Zhukov wrote: Bad idea. pf is not iptables. Read FAQ for examples, and start from scratch using tricks from those examples, not from iptables. My biggest problem seems to have been total ignorance of the depth of the optimizer. I didn't see much in the way

mount --bind -o ro

2009-11-01 Thread sda
hi folks, i need to mount in chroot some read-only data and looking for analogue of: mount --bind -o ro for OpenBSD. could you please advise? thanks, sda [demime 1.01d removed an attachment of type application/pgp-signature]

Re: mount --bind -o ro

2009-11-01 Thread Rod Whitworth
On Sun, 1 Nov 2009 14:03:46 +0300, sda wrote: hi folks, i need to mount in chroot some read-only data and looking for analogue of: mount --bind -o ro for OpenBSD. could you please advise? thanks, sda http://archives.neohapsis.com/archives/openbsd/2005-09/0198.html *** NOTE *** Please DO

Re: mount --bind -o ro

2009-11-01 Thread Joachim Schipper
On Sun, Nov 01, 2009 at 02:03:46PM +0300, sda wrote: hi folks, i need to mount in chroot some read-only data and looking for analogue of: mount --bind -o ro for OpenBSD. could you please advise? The closest equivalent I'm aware of involves mounting an NFS share from localhost.

Re: Segfault in Apache after upgrade to v4.6

2009-11-01 Thread Jeremy Bowen
Richard Toohey wrote: [cut] Can't help you directly, but there are a few questions that might help ... 1. Upgraded as per instructions - http://www.openbsd.org/faq/upgrade46.html? Yes, followed the instructions to the letter. Everything else upgraded successfully and is working as

Re: mount --bind -o ro

2009-11-01 Thread Michiel van Baak
On 12:22, Sun 01 Nov 09, Joachim Schipper wrote: On Sun, Nov 01, 2009 at 02:03:46PM +0300, sda wrote: hi folks, i need to mount in chroot some read-only data and looking for analogue of: mount --bind -o ro for OpenBSD. could you please advise? The closest equivalent

Re: Segfault in Apache after upgrade to v4.6

2009-11-01 Thread Gonzalo Lionel Rodriguez
Maybe a Suhosin issue... CVSROOT: /cvs Module name: ports Changes by: rob...@cvs.openbsd.org 2009/07/20 10:30:14 Modified files: www/php5 : Makefile.inc www/php5/core : Makefile www/php5/extensions: Makefile Added files: www/php5/core/patches: patch-ext_suhosin_suhosin_c Log message: Make

Re: Encrypting /home on OpenBSD Laptops

2009-11-01 Thread Brad Tilley
On Sun, Nov 1, 2009 at 3:36 AM, Joachim Schipper joac...@joachimschipper.nl wrote: I can't tell whether you miss the point or are arguing that a 90% solution is good enough. I understand that when I do this *only* /home is encrypted. The title says it all, right? In the first case: try it.

‰★文∞件1 k

2009-11-01 Thread q5yl6o0qcgw57
#x8ED2;#x8F45;#x7406; #x4E8B;#xFF1A;#x2605;#x60A8; #x597D;#xFF01;#x2605;#x56E1;#x6211;#x53F8;#x73FE;#x6709;#x591A;#x7A2E;#x3010;#x767C;*#x2169; *#x7968;#x3011;#x53EF;#x5411;#x5916;#x512A;#x60E0;#x4EE3;#x958B;#xFF0C;#x4EE3; #x958B; #x7BC4;

Re: What VM does OpenBSD run well under

2009-11-01 Thread Ross Cameron
OpenBSD 4.6 i386 seems quite happy in VirtualBox 3.0.10 r54097 (Fedora 11 i686 as a host). No funnies at all, just boot the cd46.iso image and ftp install and no issues whatsoever (SMP and non-SMP VMs). 2009/11/1 TomC!E! BodEC!r tomas.bod...@gmail.com: After reading this

Re: Segfault in Apache after upgrade to v4.6

2009-11-01 Thread Stuart Henderson
On 2009-11-01, Gonzalo Lionel Rodriguez gonz...@sepp0.com.ar wrote: Maybe a Suhosin issue... This is almost certainly the problem. Just, put suhosin.session.encrypt=off in you php.ini and check out. That will get you going for now, but -stable ports has a newer version of PHP and the Suhosin

Re: pf n00b

2009-11-01 Thread ghe
On Oct 31, 2009, at 5:13 PM, Stuart Henderson wrote: no need for that, we have automatic skip steps, and a ruleset optimizer that re-orders where it makes sense. Well, I'll be damned. The pf optimizer actually works! If I order the rules properly and put in enough info into them that pf can

Re: Segfault in Apache after upgrade to v4.6

2009-11-01 Thread Henning Brauer
* Jeremy Bowen jer...@smartpoint.co.nz [2009-11-01 07:23]: I've just upgraded a couple of (old-ish) servers to 4.6 and now Apache has started throwing intermittent segfaults on both. (dmesgs appended below) I have the following PHP5 modules loaded in /var/www/conf/php5/*.ini yyou need to

Re: pf n00b

2009-11-01 Thread Jason Dixon
On Sun, Nov 01, 2009 at 01:16:10PM -0700, ghe wrote: On Oct 31, 2009, at 5:13 PM, Stuart Henderson wrote: no need for that, we have automatic skip steps, and a ruleset optimizer that re-orders where it makes sense. Well, I'll be damned. The pf optimizer actually works! If I order the

Re: 4.6 hang

2009-11-01 Thread Nicholas Marriott
Hi On Fri, Oct 30, 2009 at 05:09:21PM -0500, Matthew Young wrote: Iam very curious about your problem, we all fear encountering something similar in the future... Why wasnt anybody able to help out based on your DDB trace ? If I ever get such event what is the best information then that

[SOLVED] Re: Segfault in Apache after upgrade to v4.6

2009-11-01 Thread Jeremy Bowen
On 11/1/2009, Gonzalo Lionel Rodriguez gonz...@sepp0.com.ar wrote: Maybe a Suhosin issue... CVSROOT: /cvs Module name: ports Changes by: rob...@cvs.openbsd.org 2009/07/20 10:30:14 Modified files: www/php5 : Makefile.inc www/php5/core : Makefile www/php5/extensions: Makefile Added files:

Re: pf n00b

2009-11-01 Thread Ted Unangst
On Sun, Nov 1, 2009 at 4:16 PM, ghe g...@slsware.com wrote: This does bring a question to my mind, though. Why is this ruleset optimization kept a secret? It's a *very* major piece of pf, IMHO. I did a significant amount of reading and looking around, and I never saw it discussed in any detail

Re: pf n00b

2009-11-01 Thread ghe
On Nov 1, 2009, at 3:08 PM, Ted Unangst wrote: The optimizer is documented in both the pfctl and pf.conf man pages, and the one for pf.conf tells you exactly what it does. In pfctl's man page (4.6), there is a statement that the kernel sometimes skips rules -- no mention of the optimizer

Re: pf n00b

2009-11-01 Thread Theo de Raadt
The earlier poster (Jason) is right: this *is* the way a firewall should work -- spend your time on implementing the security policy and let the 'compiler' worry about efficiency. But since the others don't, it might be a good idea to go into this at some length. Since it just does what

Re: pf n00b

2009-11-01 Thread ghe
On Nov 1, 2009, at 4:11 PM, Theo de Raadt wrote: Since it just does what a good system should do, what is there to go into at length about? What it does. How it does it. If that were documented, it'd sure be easier to use the tools more effectively. Yes, other systems taught you to

Re: pf n00b

2009-11-01 Thread Theo de Raadt
Since it just does what a good system should do, what is there to go into at length about? What it does. How it does it. If that were documented, it'd sure be easier to use the tools more effectively. It does what it does, how it does it, in the source code. Manual pages do not serve

Re: What VM does OpenBSD run well under

2009-11-01 Thread Gabriel Guzman
On Sun, 1 Nov 2009 18:24:21 +0200 Ross Cameron abal...@gmail.com wrote: OpenBSD 4.6 i386 seems quite happy in VirtualBox 3.0.10 r54097 (Fedora 11 i686 as a host). No funnies at all, just boot the cd46.iso image and ftp install and no issues whatsoever (SMP and non-SMP VMs). Same with

Where are ports changes for -stable?

2009-11-01 Thread Scott McEachern
Henning Brauer wrote: yyou need to upgrade php to 5.2.11, from -stable. Sorry if I have missed something, but where would I find the ports changes for -stable? (Other than manually looking in each port's Makefile details.) Until Henning mentioned the new version, I had no idea php had

MySQL causing unreferenced files during fsck

2009-11-01 Thread Mark Yieh
Hi everyone, I'm not sure if this is any cause for concern, but I recently had to run an fsck due to a power failure on my base 4.6 i386 box, and I noticed some unreferenced files from MySQL. I installed MySQL from packages and followed the instructions for a secure install. I'm pretty new to

Re: MySQL causing unreferenced files during fsck

2009-11-01 Thread Otto Moerbeek
Unreferenced files are totally normal when a sudden power down occurs. Especially on /tmp. So stop worrying, and trust fsck to do the right thing. -Otto On Sun, Nov 01, 2009 at 10:56:50PM -0800, Mark Yieh wrote: Hi everyone, I'm not sure if this is any cause for concern, but I

Re: MySQL causing unreferenced files during fsck

2009-11-01 Thread Denise H. G.
Mark Yieh m...@ozoneonline.com writes: Hi everyone, I'm not sure if this is any cause for concern, but I recently had to run an fsck due to a power failure on my base 4.6 i386 box, and I noticed some unreferenced files from MySQL. I installed MySQL from packages and followed the