Re: Python requirements.

2016-04-15 Thread Jay Patel
i managed to get deployment working of Django using pip but its not working
with Gunicorn :

showing me this error : http://pastebin.com/s8g3WSBi

thanks.

On Sat, Apr 16, 2016 at 9:45 AM, Aioi Yuuko  wrote:

> Hi Jay,
>
> The designated way of doing things is to install the package if it fits
> your needs in terms of versioning, whereas if you need something newer than
> what the OpenBSD packages offer, you install them via pip. Also keep in
> mind that since you're on the previous release, you may be missing out on a
> newer version in packages until you upgrade to 5.9.
>
> -yuuko
>
> On 04/15/16 20:29, Jay Patel wrote:
>
>> Hi all,
>>
>> Greetings! is it better to install Django and gunicorn using pip or via
>> Pkg_add only like py-django ?
>>
>> because i am having some trouble with gunicorn installed via pip.
>>
>> I am using 5.8 amd64 bit .
>>
>> Regards,
>>
>> Jay



Re: Several hardware issues on 13" MacBook Pro 2015

2016-04-15 Thread Joe Schillinger
Hi everyone, just wanted to reply back with a fix I discovered for the
graphical errors. I had TearFree enabled in my xorg.conf, and deleting
that line fixed it for me.


Joe



Python requirements.

2016-04-15 Thread Jay Patel
Hi all,

Greetings! is it better to install Django and gunicorn using pip or via
Pkg_add only like py-django ?

because i am having some trouble with gunicorn installed via pip.

I am using 5.8 amd64 bit .

Regards,

Jay



Re: diff for help.1

2016-04-15 Thread Pavan Maddamsetti
Why not ed?



Re: Firefox Crashes; slow xfce

2016-04-15 Thread arrowscript
Try to raise your aperture driver level to give your gpu more privileges:

# sysctl machdep.allowaperture=2

You can read more about the other levels on man pages (type "man xf86").



Re: Upgrade to 5.9 full disk encryption

2016-04-15 Thread Jack J. Woehr

Niels wrote:

As Bryan stated, bioctl will prompt for the (existing) passphrase and then
bring up the (existing) crypto volume.

I took the manual to mean that, but asked to confirm.

Bryan's answer was correct, we're all upgraded to 5.9, thanks all.

--
Jack J. Woehr # Science is more than a body of knowledge. It's a way of
www.well.com/~jax # thinking, a way of skeptically interrogating the universe
www.softwoehr.com # with a fine understanding of human fallibility. - Carl Sagan



Re: Upgrade to 5.9 full disk encryption

2016-04-15 Thread Niels
As Bryan stated, bioctl will prompt for the (existing) passphrase and then
bring up the (existing) crypto volume.

Once mounted, it will be a standard upgrade installation.
To clarify, bioctl should in this case NOT overwrite the existing encrypted
data.

As a beginner, I found bioctl’s -c and -d options (and its terminology of
“create”
and “delete”) a bit confusing and, yes, “a little scary” in this
regard.

FAQ 14.10.3 might be helpful to understand, as it puts it rather explicitly:

> note that the initial creation of the container and attaching the container
are done with the same bioctl(8) command

> The man page for this looks a little scary, as the -d command is described
as "deleting" the volume. In the case of crypto, however, it just deactivates
encrypted volume so it can't be accessed until it is activated again with the
passphrase.

http://www.openbsd.org/faq/faq14.html#softraidCrypto


> On 16 Apr 2016, at 00:36, Tim Hoddy  wrote:
>
> On 15 April 2016 23:04:45 BST, Bryan Everly 
wrote:
>> Boot the installer. Exit to the shell. Then do:
>>
>> bioctl -c C -l /dev/sd0a softraid0
>>
>> (Substitute for your actual device that is the softraid container).
>> You will be promoted for your password.
>>
>> Watch for the console message telling you what it mounted as. Then
>> type exit to return to the installer and upgrade that disk.
>>
>> Thanks,
>> Bryan
>>
>>> On Apr 15, 2016, at 5:56 PM, Jack J. Woehr  wrote:
>>>
>>> How does one upgrade a full-disk encrypted OpenBSD boot disk?
>
>
> The original question is not clear.
>
> Your instruction will involve an overwrite of a previous install and is,
therefore, not a "upgrade".



Re: Help with IPsec multiple transform policy

2016-04-15 Thread Sly Midnight
I got it to work exactly as you suggested using isakmpd.conf.

It took me quite a bit of searching to find the correct sort of syntax
for that file to achieve what I wanted but it now allows me to connect.

But I've run into another issue that I cannot resolve myself.

Once I connect from ANY client, I can only move data on the VPN for a
few seconds then it goes dead.

I thought it might be an MTU issue, but I tried setting the MRU setting
fairly low in npppd and that didn't solve it.

I tried setting skip on enc0 as well as pppx0 in pf rules and that
didn't work either.
What else could I be missing? Why would it work, but only briefly?

Sly

On 04/03/2016 05:38 AM, Stuart Henderson wrote:
>> On 2016-04-01, Sly Midnight  wrote:
>>> I am wondering is there a way to allow either via /etc/ipsec.conf or
>>> /etc/isakmpd/isakmpd.policy to configure a road warrior type of IPsec VPN
>>> access to my router that accomodates multiple types of IPsec clients that
>>> regrettably have limitations in the auth/enc/DH groups they support.
>> auth/enc: yes, but you will need isakmpd.conf, ipsec.conf is not flexible
>> enough.
>>
>> groups will be a problem: see BUGS in isakmpd.conf(5).



Re: diff for help.1

2016-04-15 Thread Rob Pierce
On Fri, Apr 15, 2016 at 04:16:59PM -0400, Rob Pierce wrote:
> Recent FAQ cleanup lost a reference to mg(1) (section 2.2).
> 
> Text editors seem fundamental enough to include in help.1.
> 
> While here, make consistent use of references to command arguments (Ar).
> 
> Rob

Sorry - clean diff with stray comments removed.

Rob

Index: help.1
===
RCS file: /cvs/src/share/man/man1/help.1,v
retrieving revision 1.1
diff -u -p -r1.1 help.1
--- help.1  27 Mar 2015 01:59:26 -  1.1
+++ help.1  15 Apr 2016 23:40:33 -
@@ -88,7 +88,7 @@ in the system password file
 .It Cm man
 Interface to the system manual pages.
 For any of the commands listed below, type
-.Ic man 
+.Ic man Ar command
 for detailed information on what it does and how to use it.
 .It Cm pwd
 Print working directory.
@@ -109,12 +109,18 @@ Type
 for a detailed listing.
 .It Cm cat
 Although it has many more uses,
-.Ic cat filename
+.Ic cat Ar filename
 will print the contents of a plain-text file to the screen.
+.It Cm vi
+Edit text files.
+For example,
+.Ic vi Ar filename .
+See also
+.Xr mg 1 .
 .It Cm mkdir
 Make a directory.
 For example,
-.Ic mkdir foobar .
+.Ic mkdir Ar dirname .
 .It Cm rmdir
 Remove a directory.
 .It Cm rm



Re: Upgrade to 5.9 full disk encryption

2016-04-15 Thread Bryan Everly
Happy to help!  :)

Thanks,
Bryan

> On Apr 15, 2016, at 6:35 PM, Jack J. Woehr  wrote:
>
> Bryan Everly wrote:
>> Boot the installer. Exit to the shell. Then do:
>>
>> bioctl -c C -l /dev/sd0a softraid0
>>
>> (Substitute for your actual device that is the softraid container).
>> You will be promoted for your password.
>>
>> Watch for the console message telling you what it mounted as. Then
>> type exit to return to the installer and upgrade that disk.
>
> Works for me. Thanks, Bryan.
>
> --
> Jack J. Woehr # Science is more than a body of knowledge. It's a way of
> www.well.com/~jax # thinking, a way of skeptically interrogating the universe
> www.softwoehr.com # with a fine understanding of human fallibility. - Carl 
> Sagan



Re: Upgrade to 5.9 full disk encryption

2016-04-15 Thread Tim Hoddy
On 15 April 2016 23:04:45 BST, Bryan Everly  wrote:
>Boot the installer. Exit to the shell. Then do:
>
>bioctl -c C -l /dev/sd0a softraid0
>
>(Substitute for your actual device that is the softraid container).
>You will be promoted for your password.
>
>Watch for the console message telling you what it mounted as. Then
>type exit to return to the installer and upgrade that disk.
>
>Thanks,
>Bryan
>
>> On Apr 15, 2016, at 5:56 PM, Jack J. Woehr  wrote:
>>
>> How does one upgrade a full-disk encrypted OpenBSD boot disk?


The original question is not clear.

Your instruction will involve an overwrite of a previous install and is, 
therefore, not a "upgrade".



Re: Firefox Crashes; slow xfce

2016-04-15 Thread Daniel Boyd
hm.. What about the slow xfce?  Does anyone else have issues dragging
windows around with high-res monitors?  Anyone else using a Radeon HD 7770?

On Fri, Apr 15, 2016 at 5:15 PM, Daniel Jakots  wrote:

> On Fri, 15 Apr 2016 13:11:39 -0500, Daniel Boyd 
> wrote:
>
> > I have noticed a pattern lately.  When I open LibreOffice or Evince,
> > Firefox crashes -- like pretty regularly.
>
> FWIW, more than 90% of times I launch smplayer to play a movie, firefox
> dies and it really looks it's 'disk-usage' related.
>
> *shrug*



Re: Upgrade to 5.9 full disk encryption

2016-04-15 Thread Jack J. Woehr

Bryan Everly wrote:

Boot the installer. Exit to the shell. Then do:

bioctl -c C -l /dev/sd0a softraid0

(Substitute for your actual device that is the softraid container).
You will be promoted for your password.

Watch for the console message telling you what it mounted as. Then
type exit to return to the installer and upgrade that disk.




Works for me. Thanks, Bryan.

--
Jack J. Woehr # Science is more than a body of knowledge. It's a way of
www.well.com/~jax # thinking, a way of skeptically interrogating the universe
www.softwoehr.com # with a fine understanding of human fallibility. - Carl Sagan



Re: NVM Express (NVMe) support status

2016-04-15 Thread David Gwynne
> On 12 Feb 2016, at 7:01 PM, Evgeniy Sudyr  wrote:
>
> Hi all,
>
> I'm looking status of NVM Express support in -current (got Intel 750
> consumer device
>
https://www-ssl.intel.com/content/www/us/en/solid-state-drives/solid-state-dr
ives-750-series.html
> for home desktop, but it looks like all devices are using the same
> Specification).
>
> I found 2 commits of nvme_pci.c from @dlg there:
>
> http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/nvme_pci.c
>
> But commit message sounds work is abandoned, because of problems faced.
>
> I found specification exists there
http://www.nvmexpress.org/specifications/
>
> It also works for me under Linux and NVMe driver is maintained by
> Intel developer Matthew Wilcox.
> https://github.com/torvalds/linux/tree/master/drivers/nvme
>
> Looks already implemented in FreeBSD (didn't tested yet):
>
>
http://svnweb.freebsd.org/base/head/sys/dev/nvme/nvme.h?view=log&pathrev=2406
16
> https://svnweb.freebsd.org/base/head/sys/dev/nvme/
>
> It will be great to get this "awesome fast" storage support in next
> OpenBSD release(s).
>
> Anybody aware of any plans on this?

it might work if you give it a go now.



Re: Firefox Crashes; slow xfce

2016-04-15 Thread Daniel Boyd
yeah -- my effective data limit is (and has been ) 3500M

this this might be indicative of bad memory (like physically?)

On Fri, Apr 15, 2016 at 3:28 PM, Donald Allen 
wrote:

> On Fri, Apr 15, 2016 at 4:24 PM, Daniel Boyd  wrote:
> > I had my datasize up under 'staff' which I believe should cover my user
> > account.  How do I find out what my effective datasize limit is?  Is it
> > possible that some processes would be bound by 'default' and others by
> > 'staff?'
>
> ulimit -a
>
> >
> > On Fri, Apr 15, 2016 at 1:34 PM, Donald Allen 
> > wrote:
> >>
> >> On Fri, Apr 15, 2016 at 2:11 PM, Daniel Boyd 
> wrote:
> >> > I have noticed a pattern lately.  When I open LibreOffice or Evince,
> >> > Firefox crashes -- like pretty regularly.  I switched from using Calc
> to
> >> > Gnumeric and that has helped some, but having my browser crash 10-15
> >> > times
> >> > a day is not good for productivity.
> >>
> >> My guess is that Firefox is running out of memory. I had similar
> >> problems and this change to /etc/login.conf made firefox reliable:
> >>
> >> # Sample login.conf file.  See login.conf(5) for details.
> >> @@ -41,14 +41,13 @@ auth-ftp-defaults:auth-ftp=passwd:
> >>  default:\
> >> :path=/usr/bin /bin /usr/sbin /sbin /usr/X11R6/bin
> >> /usr/local/bin /usr/local/sbin:\
> >> :umask=022:\
> >> -   :datasize-max=512M:\
> >> -   :datasize-cur=512M:\
> >> +   :datasize-max=2048M:\
> >> +   :datasize-cur=2048M:\
> >>
> >> >
> >> > I've been using OpenBSD (first 5.8 and now 5.9) on my primary work
> >> > machine
> >> > for a couple months now.  I am largely very happy with things, but I'm
> >> > hopeful I can figure out a solution to this.
> >> >
> >> > In addition, the LibreOffice 5 build in 5.9 crashed so much on me last
> >> > week
> >> > as to not be usable.  I don't use LibreOffice super often, but I don't
> >> > recall having any issues like that with the 4.x build that ran on 5.8.
> >> >
> >> > And, lastly dragging windows in xfce is *slow*.  This isn't a new
> >> > computer,
> >> > but it's got a Radeon HD 7770.  I am running dual 2560x1440 monitors
> >> > which
> >> > is a lot of pixels, but I think that card should be capable of
> handling
> >> > it.
> >> >
> >> > I'm not sure what all log/configuration files etc to post, so I'll
> just
> >> > do
> >> > dmesg, Xorg.0.log, and login.conf
> >> >
> >> > dmesg:
> >> > OpenBSD 5.9 (GENERIC.MP) #1: Thu Mar 31 12:53:41 CEST 2016
> >> > jas...@stable-59-amd64.mtier.org:
> >> > /binpatchng/work-binpatch59-amd64/src/sys/arch/amd64/compile/
> GENERIC.MP
> >> > real mem = 8564244480 (8167MB)
> >> > avail mem = 8300490752 (7915MB)
> >> > mpath0 at root
> >> > scsibus0 at mpath0: 256 targets
> >> > mainbus0 at root
> >> > bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xf0720 (77 entries)
> >> > bios0: vendor American Megatrends Inc. version "0711" date 05/18/2009
> >> > bios0: ASUSTeK Computer INC. P6T WS PRO
> >> > acpi0 at bios0: rev 0
> >> > acpi0: sleep states S0 S1 S3 S4 S5
> >> > acpi0: tables DSDT FACP APIC MCFG OEMB HPET OSFR SSDT
> >> > acpi0: wakeup devices NPE2(S4) NPE4(S4) NPE5(S4) NPE6(S4) NPE8(S4)
> >> > NPE9(S4)
> >> > NPEA(S4) P0P1(S4) PS2K(S4) PS2M(S4) USB0(S4) USB1(S4) USB2(S4)
> USB5(S4)
> >> > EUSB(S4) USB3(S4) [...]
> >> > acpitimer0 at acpi0: 3579545 Hz, 24 bits
> >> > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> >> > cpu0 at mainbus0: apid 0 (boot processor)
> >> > cpu0: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2138.51 MHz
> >> > cpu0:
> >> >
> >> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> >> > cpu0: 256KB 64b/line 8-way L2 cache
> >> > cpu0: smt 0, core 0, package 0
> >> > mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
> >> > cpu0: apic clock running at 136MHz
> >> > cpu0: mwait min=64, max=64, C-substates=0.2.1.1, IBE
> >> > cpu1 at mainbus0: apid 2 (application processor)
> >> > cpu1: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
> >> > cpu1:
> >> >
> >> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> >> > cpu1: 256KB 64b/line 8-way L2 cache
> >> > cpu1: smt 0, core 1, package 0
> >> > cpu2 at mainbus0: apid 4 (application processor)
> >> > cpu2: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
> >> > cpu2:
> >> >
> >> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> >> > cpu2: 256KB 64b/line 8-way L2 cache
> >> > cpu2: smt 0, core 2, package 0
> >> > cpu3 at mainbus0: apid 6 (application processor)
> >> > cpu3: Intel(R) X

Re: Upgrade to 5.9 full disk encryption

2016-04-15 Thread Bryan Everly
Boot the installer. Exit to the shell. Then do:

bioctl -c C -l /dev/sd0a softraid0

(Substitute for your actual device that is the softraid container).
You will be promoted for your password.

Watch for the console message telling you what it mounted as. Then
type exit to return to the installer and upgrade that disk.

Thanks,
Bryan

> On Apr 15, 2016, at 5:56 PM, Jack J. Woehr  wrote:
>
> How does one upgrade a full-disk encrypted OpenBSD boot disk?
>
> --
> Jack J. Woehr # Science is more than a body of knowledge. It's a way of
> www.well.com/~jax # thinking, a way of skeptically interrogating the universe
> www.softwoehr.com # with a fine understanding of human fallibility. - Carl 
> Sagan



Re: Firefox Crashes; slow xfce

2016-04-15 Thread Daniel Jakots
On Fri, 15 Apr 2016 13:11:39 -0500, Daniel Boyd 
wrote:

> I have noticed a pattern lately.  When I open LibreOffice or Evince,
> Firefox crashes -- like pretty regularly.

FWIW, more than 90% of times I launch smplayer to play a movie, firefox
dies and it really looks it's 'disk-usage' related.

*shrug*



Upgrade to 5.9 full disk encryption

2016-04-15 Thread Jack J. Woehr

How does one upgrade a full-disk encrypted OpenBSD boot disk?

--
Jack J. Woehr # Science is more than a body of knowledge. It's a way of
www.well.com/~jax # thinking, a way of skeptically interrogating the universe
www.softwoehr.com # with a fine understanding of human fallibility. - Carl Sagan



Re: Help with IPsec multiple transform policy

2016-04-15 Thread Sly Midnight
I got it to work exactly as you suggested using isakmpd.conf

It took me quite a bit of searching to find the correct sort of syntax
for that file to achieve what I wanted but it now allows me to connect.

But I've run into another issue that I cannot resolve myself.

Once I connect from ANY client, I can only move data on the VPN for a
few seconds then it goes dead.

I thought it might be an MTU issue, but I tried setting the MRU setting
fairly low in npppd and that didn't solve it.  I tried setting skip on
enc0 as well as pppx0 in pf rules and that didn't work either.

What else could I be missing?  Why would it work, but only briefly?

Sly


On 04/03/2016 05:38 AM, Stuart Henderson wrote:
> On 2016-04-01, Sly Midnight  wrote:
>> I am wondering is there a way to allow either via /etc/ipsec.conf or
>> /etc/isakmpd/isakmpd.policy to configure a road warrior type of IPsec VPN
>> access to my router that accomodates multiple types of IPsec clients that
>> regrettably have limitations in the auth/enc/DH groups they support.
> auth/enc: yes, but you will need isakmpd.conf, ipsec.conf is not flexible
> enough.
>
> groups will be a problem: see BUGS in isakmpd.conf(5).



Re: Standard way to create a generic queue in ksh

2016-04-15 Thread Jiri B
On Fri, Apr 15, 2016 at 10:29:24PM +0200, Jon S wrote:
> Hello all!
> 
> As a port of a backup solution, i needa a queue. Having looked around the
> net, i haven found any standard way (besides named pipes) that I can use.
> 
> Requirements are:
> * There will be few elements in the queue (<20)
> * No critical section  is needed (this is already adressed using mkdir)
> * The queue must be possible to examine without altering it
> * It would be nice if the queue only can contain unique elements (no point
> in queing the same job twice)
> 
> My own two ideas are:
> * Files in a dir. Gives uniqueness if names are well selected, but I dont
> know how to handle element order neatly
> * Rows in a file: No guarantee for unique jobs. Easy to define order and to
> add a new job at end (or beginning) of a file or pop a job
> 
> Any ideas or proposal of standard way to do this?

Not sure lpd could be configured to be spooler for non printing jobs like
it is on AIX but you can try.

There's OpenLava but there's no OpenBSD port for that
http://www.openlava.org/documentation/guide/features.html#parallel-job-scheduling

j.



Re: Firefox Crashes; slow xfce

2016-04-15 Thread Daniel Boyd
I had my datasize up under 'staff' which I believe should cover my user
account.  How do I find out what my effective datasize limit is?  Is it
possible that some processes would be bound by 'default' and others by
'staff?'

On Fri, Apr 15, 2016 at 1:34 PM, Donald Allen 
wrote:

> On Fri, Apr 15, 2016 at 2:11 PM, Daniel Boyd  wrote:
> > I have noticed a pattern lately.  When I open LibreOffice or Evince,
> > Firefox crashes -- like pretty regularly.  I switched from using Calc to
> > Gnumeric and that has helped some, but having my browser crash 10-15
> times
> > a day is not good for productivity.
>
> My guess is that Firefox is running out of memory. I had similar
> problems and this change to /etc/login.conf made firefox reliable:
>
> # Sample login.conf file.  See login.conf(5) for details.
> @@ -41,14 +41,13 @@ auth-ftp-defaults:auth-ftp=passwd:
>  default:\
> :path=/usr/bin /bin /usr/sbin /sbin /usr/X11R6/bin
> /usr/local/bin /usr/local/sbin:\
> :umask=022:\
> -   :datasize-max=512M:\
> -   :datasize-cur=512M:\
> +   :datasize-max=2048M:\
> +   :datasize-cur=2048M:\
>
> >
> > I've been using OpenBSD (first 5.8 and now 5.9) on my primary work
> machine
> > for a couple months now.  I am largely very happy with things, but I'm
> > hopeful I can figure out a solution to this.
> >
> > In addition, the LibreOffice 5 build in 5.9 crashed so much on me last
> week
> > as to not be usable.  I don't use LibreOffice super often, but I don't
> > recall having any issues like that with the 4.x build that ran on 5.8.
> >
> > And, lastly dragging windows in xfce is *slow*.  This isn't a new
> computer,
> > but it's got a Radeon HD 7770.  I am running dual 2560x1440 monitors
> which
> > is a lot of pixels, but I think that card should be capable of handling
> > it.
> >
> > I'm not sure what all log/configuration files etc to post, so I'll just
> do
> > dmesg, Xorg.0.log, and login.conf
> >
> > dmesg:
> > OpenBSD 5.9 (GENERIC.MP) #1: Thu Mar 31 12:53:41 CEST 2016
> > jas...@stable-59-amd64.mtier.org:
> > /binpatchng/work-binpatch59-amd64/src/sys/arch/amd64/compile/GENERIC.MP
> > real mem = 8564244480 (8167MB)
> > avail mem = 8300490752 (7915MB)
> > mpath0 at root
> > scsibus0 at mpath0: 256 targets
> > mainbus0 at root
> > bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xf0720 (77 entries)
> > bios0: vendor American Megatrends Inc. version "0711" date 05/18/2009
> > bios0: ASUSTeK Computer INC. P6T WS PRO
> > acpi0 at bios0: rev 0
> > acpi0: sleep states S0 S1 S3 S4 S5
> > acpi0: tables DSDT FACP APIC MCFG OEMB HPET OSFR SSDT
> > acpi0: wakeup devices NPE2(S4) NPE4(S4) NPE5(S4) NPE6(S4) NPE8(S4)
> NPE9(S4)
> > NPEA(S4) P0P1(S4) PS2K(S4) PS2M(S4) USB0(S4) USB1(S4) USB2(S4) USB5(S4)
> > EUSB(S4) USB3(S4) [...]
> > acpitimer0 at acpi0: 3579545 Hz, 24 bits
> > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> > cpu0 at mainbus0: apid 0 (boot processor)
> > cpu0: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2138.51 MHz
> > cpu0:
> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> > cpu0: 256KB 64b/line 8-way L2 cache
> > cpu0: smt 0, core 0, package 0
> > mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
> > cpu0: apic clock running at 136MHz
> > cpu0: mwait min=64, max=64, C-substates=0.2.1.1, IBE
> > cpu1 at mainbus0: apid 2 (application processor)
> > cpu1: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
> > cpu1:
> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> > cpu1: 256KB 64b/line 8-way L2 cache
> > cpu1: smt 0, core 1, package 0
> > cpu2 at mainbus0: apid 4 (application processor)
> > cpu2: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
> > cpu2:
> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> > cpu2: 256KB 64b/line 8-way L2 cache
> > cpu2: smt 0, core 2, package 0
> > cpu3 at mainbus0: apid 6 (application processor)
> > cpu3: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
> > cpu3:
> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> > cpu3: 256KB 64b/line 8-way L2 cache
> > cpu3: smt 0, core 3, package 0
> > ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
> > ioapic0: misconfigured as apic 8, remapped to apid 1
> > ioapic1 at mainbus0: apid 3 pa 0xfec8a000, version 20, 24 pins
> > ioapic1: misconfigured as api

Re: Firefox Crashes; slow xfce

2016-04-15 Thread Donald Allen
On Fri, Apr 15, 2016 at 4:24 PM, Daniel Boyd  wrote:
> I had my datasize up under 'staff' which I believe should cover my user
> account.  How do I find out what my effective datasize limit is?  Is it
> possible that some processes would be bound by 'default' and others by
> 'staff?'

ulimit -a

>
> On Fri, Apr 15, 2016 at 1:34 PM, Donald Allen 
> wrote:
>>
>> On Fri, Apr 15, 2016 at 2:11 PM, Daniel Boyd  wrote:
>> > I have noticed a pattern lately.  When I open LibreOffice or Evince,
>> > Firefox crashes -- like pretty regularly.  I switched from using Calc to
>> > Gnumeric and that has helped some, but having my browser crash 10-15
>> > times
>> > a day is not good for productivity.
>>
>> My guess is that Firefox is running out of memory. I had similar
>> problems and this change to /etc/login.conf made firefox reliable:
>>
>> # Sample login.conf file.  See login.conf(5) for details.
>> @@ -41,14 +41,13 @@ auth-ftp-defaults:auth-ftp=passwd:
>>  default:\
>> :path=/usr/bin /bin /usr/sbin /sbin /usr/X11R6/bin
>> /usr/local/bin /usr/local/sbin:\
>> :umask=022:\
>> -   :datasize-max=512M:\
>> -   :datasize-cur=512M:\
>> +   :datasize-max=2048M:\
>> +   :datasize-cur=2048M:\
>>
>> >
>> > I've been using OpenBSD (first 5.8 and now 5.9) on my primary work
>> > machine
>> > for a couple months now.  I am largely very happy with things, but I'm
>> > hopeful I can figure out a solution to this.
>> >
>> > In addition, the LibreOffice 5 build in 5.9 crashed so much on me last
>> > week
>> > as to not be usable.  I don't use LibreOffice super often, but I don't
>> > recall having any issues like that with the 4.x build that ran on 5.8.
>> >
>> > And, lastly dragging windows in xfce is *slow*.  This isn't a new
>> > computer,
>> > but it's got a Radeon HD 7770.  I am running dual 2560x1440 monitors
>> > which
>> > is a lot of pixels, but I think that card should be capable of handling
>> > it.
>> >
>> > I'm not sure what all log/configuration files etc to post, so I'll just
>> > do
>> > dmesg, Xorg.0.log, and login.conf
>> >
>> > dmesg:
>> > OpenBSD 5.9 (GENERIC.MP) #1: Thu Mar 31 12:53:41 CEST 2016
>> > jas...@stable-59-amd64.mtier.org:
>> > /binpatchng/work-binpatch59-amd64/src/sys/arch/amd64/compile/GENERIC.MP
>> > real mem = 8564244480 (8167MB)
>> > avail mem = 8300490752 (7915MB)
>> > mpath0 at root
>> > scsibus0 at mpath0: 256 targets
>> > mainbus0 at root
>> > bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xf0720 (77 entries)
>> > bios0: vendor American Megatrends Inc. version "0711" date 05/18/2009
>> > bios0: ASUSTeK Computer INC. P6T WS PRO
>> > acpi0 at bios0: rev 0
>> > acpi0: sleep states S0 S1 S3 S4 S5
>> > acpi0: tables DSDT FACP APIC MCFG OEMB HPET OSFR SSDT
>> > acpi0: wakeup devices NPE2(S4) NPE4(S4) NPE5(S4) NPE6(S4) NPE8(S4)
>> > NPE9(S4)
>> > NPEA(S4) P0P1(S4) PS2K(S4) PS2M(S4) USB0(S4) USB1(S4) USB2(S4) USB5(S4)
>> > EUSB(S4) USB3(S4) [...]
>> > acpitimer0 at acpi0: 3579545 Hz, 24 bits
>> > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
>> > cpu0 at mainbus0: apid 0 (boot processor)
>> > cpu0: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2138.51 MHz
>> > cpu0:
>> >
>> > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
>> > cpu0: 256KB 64b/line 8-way L2 cache
>> > cpu0: smt 0, core 0, package 0
>> > mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
>> > cpu0: apic clock running at 136MHz
>> > cpu0: mwait min=64, max=64, C-substates=0.2.1.1, IBE
>> > cpu1 at mainbus0: apid 2 (application processor)
>> > cpu1: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
>> > cpu1:
>> >
>> > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
>> > cpu1: 256KB 64b/line 8-way L2 cache
>> > cpu1: smt 0, core 1, package 0
>> > cpu2 at mainbus0: apid 4 (application processor)
>> > cpu2: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
>> > cpu2:
>> >
>> > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
>> > cpu2: 256KB 64b/line 8-way L2 cache
>> > cpu2: smt 0, core 2, package 0
>> > cpu3 at mainbus0: apid 6 (application processor)
>> > cpu3: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
>> > cpu3:
>> >
>> > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
>> > cpu3: 256KB 64b/line 8-way L2 cache
>> > cpu3: smt 0, core 3, package 0
>> > ioapic0 at mainbus0: a

Standard way to create a generic queue in ksh

2016-04-15 Thread Jon S
Hello all!

As a port of a backup solution, i needa a queue. Having looked around the
net, i haven found any standard way (besides named pipes) that I can use.

Requirements are:
* There will be few elements in the queue (<20)
* No critical section  is needed (this is already adressed using mkdir)
* The queue must be possible to examine without altering it
* It would be nice if the queue only can contain unique elements (no point
in queing the same job twice)

My own two ideas are:
* Files in a dir. Gives uniqueness if names are well selected, but I dont
know how to handle element order neatly
* Rows in a file: No guarantee for unique jobs. Easy to define order and to
add a new job at end (or beginning) of a file or pop a job

Any ideas or proposal of standard way to do this?

--
<>
Jon Sjöstedt



Re: Quick APU2 review

2016-04-15 Thread Niels
APU2 is quite a different product than APU1.
Different processor(s), different network interfaces (using different
drivers).


> On 15 Apr 2016, at 21:49, Daniel Ouellet  wrote:
>
>> That's nice.  I don't have a ferrari, I have a rather basic truck.
>>
>> You are off topic.
>
> Sorry Theo,
>
> He asked for
>
> "real world through put?"
>
> I provided some to be helpful.



diff for help.1

2016-04-15 Thread Rob Pierce
Recent FAQ cleanup lost a reference to mg(1) (section 2.2).

Text editors seem fundamental enough to include in help.1.

While here, make consistent use of references to command arguments (Ar).

Rob

Index: help.1
===
RCS file: /cvs/src/share/man/man1/help.1,v
retrieving revision 1.1
diff -u -p -r1.1 help.1
--- help.1  27 Mar 2015 01:59:26 -  1.1
+++ help.1  15 Apr 2016 20:14:16 -
@@ -88,7 +88,7 @@ in the system password file
 .It Cm man
 Interface to the system manual pages.
 For any of the commands listed below, type
-.Ic man 
+.Ic man Ar command
 for detailed information on what it does and how to use it.
 .It Cm pwd
 Print working directory.
@@ -109,12 +109,20 @@ Type
 for a detailed listing.
 .It Cm cat
 Although it has many more uses,
-.Ic cat filename
+.Ic cat Ar filename
 will print the contents of a plain-text file to the screen.
+.It Cm vi
+Edit text files.
+.\" For example,
+.\" .Ic vi Ar filename .
+For example,
+.Ic vi Ar filename .
+See also
+.Xr mg 1 .
 .It Cm mkdir
 Make a directory.
 For example,
-.Ic mkdir foobar .
+.Ic mkdir Ar dirname .
 .It Cm rmdir
 Remove a directory.
 .It Cm rm



Re: Quick APU2 review

2016-04-15 Thread Theo de Raadt
>> That's nice.  I don't have a ferrari, I have a rather basic truck.
>> 
>> You are off topic.
>
>Sorry Theo,
>
>He asked for
>
>"real world through put?"
>
>I provided some to be helpful.

You provided data from an ENTIRELY DIFFERENT MACHINE.

That is unhelpful.



Re: Quick APU2 review

2016-04-15 Thread Daniel Ouellet
> That's nice.  I don't have a ferrari, I have a rather basic truck.
> 
> You are off topic.

Sorry Theo,

He asked for

"real world through put?"

I provided some to be helpful.



Re: Quick APU2 review

2016-04-15 Thread Theo de Raadt
>From owner-misc+M157084=deraadt=cvs.openbsd@openbsd.org Fri Apr 15 
>13:39:59 2016
>Delivered-To: dera...@cvs.openbsd.org
>DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=realconnect.com; h=subject 
>:to:references:from:message-id:date:mime-version:in-reply-to 
>:content-type:content-transfer-encoding; s=mail-key; bh=v6TAoSDi 
>qhR+xU4jzmiPMESBlnY=; b=YHdaKebjNunl691j7NzsWzplrmJmJYbGkqeGrslP 
>S6XoMsgDnVCEAE6Uj7/f3K7QPtUBMhtRliAGzg4RuY3gPJcAsBgJlaA3XiCOn17H 
>8Wg1h6JlguPdF/K/ov/7BFHEv/9vdWhCIOItGYs/vUaZ3vip3fHtyEUThpUq/scL Xvo=
>Subject: Re: Quick APU2 review
>To: misc@openbsd.org
>References: <20160415161241.ga80...@lorvorc.mips.inka.de> 
><57113bb9.858e1c0a.c6973.9...@mx.google.com>
>From: Daniel Ouellet 
>Date: Fri, 15 Apr 2016 15:38:16 -0400
>User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) 
>Gecko/20100101 Thunderbird/38.7.2
>MIME-Version: 1.0
>In-Reply-To: <57113bb9.858e1c0a.c6973.9...@mx.google.com>
>Content-Type: text/plain; charset=utf-8
>Content-Transfer-Encoding: 8bit
>List-Help: 
>List-ID: 
>List-Owner: 
>List-Post: 
>List-Subscribe: 
>List-Unsubscribe: 
>X-Loop: misc@openbsd.org
>Precedence: list
>Sender: owner-m...@openbsd.org
>
>I don't have the APU2C4, I have the APU1C4
>
>and I can push 80Mb/sec of IPSec on it, way more obviously when I don't
>do the IPSec.
>
>My setup use ikedv2 from Rek@
>
>When I reach the 80Mb/sec, well it reach the full CPU utilization.
>
>When I do NAT only the CPU cores ( I have only 2 on that APU1) are use
>only at 45% each for 150Mb/sec real traffic.
>
>I wish I could test faster, but my line for now is 150Mb upgrading to
>300Mb/sec soon.
>
>If I do not do nat but use only fix IP's. it's even lower.
>
>And my PF rules have 37 active lines. Well my config is bigger
>obviously, but see the rules output for exact feedback.
>
>It run routing, pf, IKEDv2, NAT, unbound, dhcpd, ntpd, smtpd just for
>the local feedback, NOT for all my emails. I have a different server for
>that.
>
># pfctl -sr | wc -l
>  37
>
>I am upgrading it for the APU2c4 because if the AES-NI instruction set
>on the CPU to improve my traffic under IKED, NOT because it is not
>capable. I just want more traffic under encryption and the new CPU will
>improve that.
>
>But this one already can saturate the line I have already without IKED
>traffic, so I can't imagine that it woudln't do what you want assuming
>you are not running a fortune 500 company obviously.
>
>here is without IKED:
>
>http://www.speedtest.net/my-result/5253974103
>
>And if I push it via tcpbench OVER IKED, instead of normal traffic (
>from a server behind that APU1c4 that is not that box obviously and that
>need routing and all), it gets a bit lower, but here is the output
>anyway on average with the rest of the traffic running now. I stream
>Spottily and have a video running and about 9 ssh connection at the
>moment doing my work, and a few more stuff as well as my kid playing
>games League of Legends, etc.
>
>Conn:   1 Mbps:   55.166 Peak Mbps:   58.288 Avg Mbps:   55.166
>
>As you can see, plenty of capacity and the APU2C4 I am sure beat this
>hands down!
>
>It has 4 cores oppose to two and the encryption set on the CPU.
>
>Hope this help you.
>
>Daniel
>
>
>On 4/15/16 3:06 PM, Heine Lysemose wrote:
>> Hi
>> 
>> Can you give some real world through put? How much can you push through it
>> from a NAT’et device? And what is the device stats when doing so?
>> 
>> Best,
>> Lysemise
>> 
>> 
>> 
>> From: Christian Weisgerber
>> Sent: 15. april 2016 18:19
>> To: misc@openbsd.org
>> Subject: Quick APU2 review
>> 
>> I bought a PC Engines APU2 this week and thought I'd write up my
>> impressions.
>> 
>> TL;DR: Recommended.
>> 
>> The obvious point of reference is the Soekris net6501.  Now, that
>> comparison isn't really fair since the net6501 is several years old
>> and the APU2 is a new design.  Then again, Soekris canceled their
>> successor model (after stringing along potential customers for a
>> year), so they're without a competitive product now.  Tough for them.
>> 
>> http://pcengines.ch/apu2c4.htm
>> https://soekris.com/products/net6501-1.html
>> 
>> Here's what the APU2 lacks: It has only three Ethernet ports instead
>> of four, no front-side Ethernet LEDs, no PCI-Express expansion slot,
>> no LOM.  On the plus side, it has two USB 3.0 ports instead of a
>> single USB 2.0 one.
>> 
>> Performance: Single-core speed of the APU2 seems to be comparable
>> to the net6501-70 (the fast model), but the APU2 has four cores
>> instead of two and it has AES-NI, which provides a big boost for
>> many crypto applications.  A "make -j4 build" took exactly 120
>> minutes.
>> 
>> Heat: The APUs have an innovative design where the CPU heat sink
>> is coupled to the case.  Since this is typically assembled by

Re: rebound suffers a segfault if sent packets by rdr-to or divert-to

2016-04-15 Thread Kevin Chadwick
> Kevin Chadwick wrote:
> > It seemed to work for one or a few requests but crash with "child died
> > without HUP" and under debug mode I got a segfault line. I tried with a
> > recent snapshot too in case it may have been the pledge bug and it
> > crashed then too though I didn't try it in debug mode.  
> 
> there is a (probably quite dumb) bug somewhere, but i have had trouble finding
> it.

Can you trigger the bug? I can probably find time to build with symbols
or run it under systrace this weekend, if it would help?

-- 

KISSIS - Keep It Simple So It's Securable



Re: Quick APU2 review

2016-04-15 Thread Daniel Ouellet
I don't have the APU2C4, I have the APU1C4

and I can push 80Mb/sec of IPSec on it, way more obviously when I don't
do the IPSec.

My setup use ikedv2 from Rek@

When I reach the 80Mb/sec, well it reach the full CPU utilization.

When I do NAT only the CPU cores ( I have only 2 on that APU1) are use
only at 45% each for 150Mb/sec real traffic.

I wish I could test faster, but my line for now is 150Mb upgrading to
300Mb/sec soon.

If I do not do nat but use only fix IP's. it's even lower.

And my PF rules have 37 active lines. Well my config is bigger
obviously, but see the rules output for exact feedback.

It run routing, pf, IKEDv2, NAT, unbound, dhcpd, ntpd, smtpd just for
the local feedback, NOT for all my emails. I have a different server for
that.

# pfctl -sr | wc -l
  37

I am upgrading it for the APU2c4 because if the AES-NI instruction set
on the CPU to improve my traffic under IKED, NOT because it is not
capable. I just want more traffic under encryption and the new CPU will
improve that.

But this one already can saturate the line I have already without IKED
traffic, so I can't imagine that it woudln't do what you want assuming
you are not running a fortune 500 company obviously.

here is without IKED:

http://www.speedtest.net/my-result/5253974103

And if I push it via tcpbench OVER IKED, instead of normal traffic (
from a server behind that APU1c4 that is not that box obviously and that
need routing and all), it gets a bit lower, but here is the output
anyway on average with the rest of the traffic running now. I stream
Spottily and have a video running and about 9 ssh connection at the
moment doing my work, and a few more stuff as well as my kid playing
games League of Legends, etc.

Conn:   1 Mbps:   55.166 Peak Mbps:   58.288 Avg Mbps:   55.166

As you can see, plenty of capacity and the APU2C4 I am sure beat this
hands down!

It has 4 cores oppose to two and the encryption set on the CPU.

Hope this help you.

Daniel


On 4/15/16 3:06 PM, Heine Lysemose wrote:
> Hi
> 
> Can you give some real world through put? How much can you push through it
> from a NAT’et device? And what is the device stats when doing so?
> 
> Best,
> Lysemise
> 
> 
> 
> From: Christian Weisgerber
> Sent: 15. april 2016 18:19
> To: misc@openbsd.org
> Subject: Quick APU2 review
> 
> I bought a PC Engines APU2 this week and thought I'd write up my
> impressions.
> 
> TL;DR: Recommended.
> 
> The obvious point of reference is the Soekris net6501.  Now, that
> comparison isn't really fair since the net6501 is several years old
> and the APU2 is a new design.  Then again, Soekris canceled their
> successor model (after stringing along potential customers for a
> year), so they're without a competitive product now.  Tough for them.
> 
> http://pcengines.ch/apu2c4.htm
> https://soekris.com/products/net6501-1.html
> 
> Here's what the APU2 lacks: It has only three Ethernet ports instead
> of four, no front-side Ethernet LEDs, no PCI-Express expansion slot,
> no LOM.  On the plus side, it has two USB 3.0 ports instead of a
> single USB 2.0 one.
> 
> Performance: Single-core speed of the APU2 seems to be comparable
> to the net6501-70 (the fast model), but the APU2 has four cores
> instead of two and it has AES-NI, which provides a big boost for
> many crypto applications.  A "make -j4 build" took exactly 120
> minutes.
> 
> Heat: The APUs have an innovative design where the CPU heat sink
> is coupled to the case.  Since this is typically assembled by the
> customer, a lot of attention is drawn to it and people obsess over
> the CPU temperature.  It's a nonissue.  Case temperature is about
> the same as for the net6501, where people are far less concerned,
> even a "make -j4 build" didn't raise the CPU temperature much (57C
> to 64.5C), and the design ensures good heat flow.  Ask me again in
> six months how it did in a 33C summer environment, but I expect no
> problems whatsoever.
> 
> The firmware is still being worked on; it's cobbled together from
> coreboot, a MemTest86 module (takes about 1h45 for one pass on the
> apu2c4), and iPXE.  It works.  I've booted via PXE, from an external
> USB key, and from mSATA.
> 
> Miscellaneous: The case is really compact.  The order of the Ethernet
> ports is reversed when compared to the Soekris and not marked on
> the case.
> 
> And yes, the APU2 is fully supported by OpenBSD 5.9.
> 
> Overall, I like it a lot.  Compared to the net6501, the APU2 is
> much cheaper and more powerful.  Compared to Intel Rangeley devices,
> it is readily available in small quantities (like, one) and, to
> pick the one that you can easily buy, again much cheaper than the
> RCC-VE 2440.
> 
> My APU2 is serving as my home gateway now, replacing a net6501.
> It feels good to be running an AMD CPU again. :-)
> 
> 
> PS: I bought mine from NRG Systems GmbH, Augsburg, Germany, who
> sell convenient board/case/PSU/SSD kits.  Board and case were
> already assembled.
> --
> Christian "naddy

Re: Firefox Crashes; slow xfce

2016-04-15 Thread Donald Allen
On Fri, Apr 15, 2016 at 2:11 PM, Daniel Boyd  wrote:
> I have noticed a pattern lately.  When I open LibreOffice or Evince,
> Firefox crashes -- like pretty regularly.  I switched from using Calc to
> Gnumeric and that has helped some, but having my browser crash 10-15 times
> a day is not good for productivity.

My guess is that Firefox is running out of memory. I had similar
problems and this change to /etc/login.conf made firefox reliable:

# Sample login.conf file.  See login.conf(5) for details.
@@ -41,14 +41,13 @@ auth-ftp-defaults:auth-ftp=passwd:
 default:\
:path=/usr/bin /bin /usr/sbin /sbin /usr/X11R6/bin
/usr/local/bin /usr/local/sbin:\
:umask=022:\
-   :datasize-max=512M:\
-   :datasize-cur=512M:\
+   :datasize-max=2048M:\
+   :datasize-cur=2048M:\

>
> I've been using OpenBSD (first 5.8 and now 5.9) on my primary work machine
> for a couple months now.  I am largely very happy with things, but I'm
> hopeful I can figure out a solution to this.
>
> In addition, the LibreOffice 5 build in 5.9 crashed so much on me last week
> as to not be usable.  I don't use LibreOffice super often, but I don't
> recall having any issues like that with the 4.x build that ran on 5.8.
>
> And, lastly dragging windows in xfce is *slow*.  This isn't a new computer,
> but it's got a Radeon HD 7770.  I am running dual 2560x1440 monitors which
> is a lot of pixels, but I think that card should be capable of handling
> it.
>
> I'm not sure what all log/configuration files etc to post, so I'll just do
> dmesg, Xorg.0.log, and login.conf
>
> dmesg:
> OpenBSD 5.9 (GENERIC.MP) #1: Thu Mar 31 12:53:41 CEST 2016
> jas...@stable-59-amd64.mtier.org:
> /binpatchng/work-binpatch59-amd64/src/sys/arch/amd64/compile/GENERIC.MP
> real mem = 8564244480 (8167MB)
> avail mem = 8300490752 (7915MB)
> mpath0 at root
> scsibus0 at mpath0: 256 targets
> mainbus0 at root
> bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xf0720 (77 entries)
> bios0: vendor American Megatrends Inc. version "0711" date 05/18/2009
> bios0: ASUSTeK Computer INC. P6T WS PRO
> acpi0 at bios0: rev 0
> acpi0: sleep states S0 S1 S3 S4 S5
> acpi0: tables DSDT FACP APIC MCFG OEMB HPET OSFR SSDT
> acpi0: wakeup devices NPE2(S4) NPE4(S4) NPE5(S4) NPE6(S4) NPE8(S4) NPE9(S4)
> NPEA(S4) P0P1(S4) PS2K(S4) PS2M(S4) USB0(S4) USB1(S4) USB2(S4) USB5(S4)
> EUSB(S4) USB3(S4) [...]
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2138.51 MHz
> cpu0:
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> cpu0: 256KB 64b/line 8-way L2 cache
> cpu0: smt 0, core 0, package 0
> mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
> cpu0: apic clock running at 136MHz
> cpu0: mwait min=64, max=64, C-substates=0.2.1.1, IBE
> cpu1 at mainbus0: apid 2 (application processor)
> cpu1: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
> cpu1:
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> cpu1: 256KB 64b/line 8-way L2 cache
> cpu1: smt 0, core 1, package 0
> cpu2 at mainbus0: apid 4 (application processor)
> cpu2: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
> cpu2:
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> cpu2: 256KB 64b/line 8-way L2 cache
> cpu2: smt 0, core 2, package 0
> cpu3 at mainbus0: apid 6 (application processor)
> cpu3: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
> cpu3:
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> cpu3: 256KB 64b/line 8-way L2 cache
> cpu3: smt 0, core 3, package 0
> ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
> ioapic0: misconfigured as apic 8, remapped to apid 1
> ioapic1 at mainbus0: apid 3 pa 0xfec8a000, version 20, 24 pins
> ioapic1: misconfigured as apic 9, remapped to apid 3
> acpimcfg0 at acpi0 addr 0xe000, bus 0-255
> acpihpet0 at acpi0: 14318179 Hz
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus -1 (NPE2)
> acpiprt2 at acpi0: bus -1 (NPE4)
> acpiprt3 at acpi0: bus -1 (NPE5)
> acpiprt4 at acpi0: bus -1 (NPE6)
> acpiprt5 at acpi0: bus -1 (NPE8)
> acpiprt6 at acpi0: bus -1 (NPE9)
> acpiprt7 at acpi0: bus -1 (NPEA)
> acpiprt8 at acpi0: bus 10 (P0P1)
> acpiprt9 at acpi0: bus 9 (P0P4)
> acpiprt10 at acpi0:

Re: Quick APU2 review

2016-04-15 Thread Heine Lysemose
Hi

Can you give some real world through put? How much can you push through it
from a NAT’et device? And what is the device stats when doing so?

Best,
Lysemise



From: Christian Weisgerber
Sent: 15. april 2016 18:19
To: misc@openbsd.org
Subject: Quick APU2 review

I bought a PC Engines APU2 this week and thought I'd write up my
impressions.

TL;DR: Recommended.

The obvious point of reference is the Soekris net6501.  Now, that
comparison isn't really fair since the net6501 is several years old
and the APU2 is a new design.  Then again, Soekris canceled their
successor model (after stringing along potential customers for a
year), so they're without a competitive product now.  Tough for them.

http://pcengines.ch/apu2c4.htm
https://soekris.com/products/net6501-1.html

Here's what the APU2 lacks: It has only three Ethernet ports instead
of four, no front-side Ethernet LEDs, no PCI-Express expansion slot,
no LOM.  On the plus side, it has two USB 3.0 ports instead of a
single USB 2.0 one.

Performance: Single-core speed of the APU2 seems to be comparable
to the net6501-70 (the fast model), but the APU2 has four cores
instead of two and it has AES-NI, which provides a big boost for
many crypto applications.  A "make -j4 build" took exactly 120
minutes.

Heat: The APUs have an innovative design where the CPU heat sink
is coupled to the case.  Since this is typically assembled by the
customer, a lot of attention is drawn to it and people obsess over
the CPU temperature.  It's a nonissue.  Case temperature is about
the same as for the net6501, where people are far less concerned,
even a "make -j4 build" didn't raise the CPU temperature much (57C
to 64.5C), and the design ensures good heat flow.  Ask me again in
six months how it did in a 33C summer environment, but I expect no
problems whatsoever.

The firmware is still being worked on; it's cobbled together from
coreboot, a MemTest86 module (takes about 1h45 for one pass on the
apu2c4), and iPXE.  It works.  I've booted via PXE, from an external
USB key, and from mSATA.

Miscellaneous: The case is really compact.  The order of the Ethernet
ports is reversed when compared to the Soekris and not marked on
the case.

And yes, the APU2 is fully supported by OpenBSD 5.9.

Overall, I like it a lot.  Compared to the net6501, the APU2 is
much cheaper and more powerful.  Compared to Intel Rangeley devices,
it is readily available in small quantities (like, one) and, to
pick the one that you can easily buy, again much cheaper than the
RCC-VE 2440.

My APU2 is serving as my home gateway now, replacing a net6501.
It feels good to be running an AMD CPU again. :-)


PS: I bought mine from NRG Systems GmbH, Augsburg, Germany, who
sell convenient board/case/PSU/SSD kits.  Board and case were
already assembled.
--
Christian "naddy" Weisgerber  na...@mips.inka.de



Re: rebound suffers a segfault if sent packets by rdr-to or divert-to

2016-04-15 Thread Ted Unangst
Kevin Chadwick wrote:
> It seemed to work for one or a few requests but crash with "child died
> without HUP" and under debug mode I got a segfault line. I tried with a
> recent snapshot too in case it may have been the pledge bug and it
> crashed then too though I didn't try it in debug mode.

there is a (probably quite dumb) bug somewhere, but i have had trouble finding
it.



Firefox Crashes; slow xfce

2016-04-15 Thread Daniel Boyd
I have noticed a pattern lately.  When I open LibreOffice or Evince,
Firefox crashes -- like pretty regularly.  I switched from using Calc to
Gnumeric and that has helped some, but having my browser crash 10-15 times
a day is not good for productivity.

I've been using OpenBSD (first 5.8 and now 5.9) on my primary work machine
for a couple months now.  I am largely very happy with things, but I'm
hopeful I can figure out a solution to this.

In addition, the LibreOffice 5 build in 5.9 crashed so much on me last week
as to not be usable.  I don't use LibreOffice super often, but I don't
recall having any issues like that with the 4.x build that ran on 5.8.

And, lastly dragging windows in xfce is *slow*.  This isn't a new computer,
but it's got a Radeon HD 7770.  I am running dual 2560x1440 monitors which
is a lot of pixels, but I think that card should be capable of handling
it.

I'm not sure what all log/configuration files etc to post, so I'll just do
dmesg, Xorg.0.log, and login.conf

dmesg:
OpenBSD 5.9 (GENERIC.MP) #1: Thu Mar 31 12:53:41 CEST 2016
jas...@stable-59-amd64.mtier.org:
/binpatchng/work-binpatch59-amd64/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8564244480 (8167MB)
avail mem = 8300490752 (7915MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xf0720 (77 entries)
bios0: vendor American Megatrends Inc. version "0711" date 05/18/2009
bios0: ASUSTeK Computer INC. P6T WS PRO
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S3 S4 S5
acpi0: tables DSDT FACP APIC MCFG OEMB HPET OSFR SSDT
acpi0: wakeup devices NPE2(S4) NPE4(S4) NPE5(S4) NPE6(S4) NPE8(S4) NPE9(S4)
NPEA(S4) P0P1(S4) PS2K(S4) PS2M(S4) USB0(S4) USB1(S4) USB2(S4) USB5(S4)
EUSB(S4) USB3(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2138.51 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 136MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz, 2180.95 MHz
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 3, package 0
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 8, remapped to apid 1
ioapic1 at mainbus0: apid 3 pa 0xfec8a000, version 20, 24 pins
ioapic1: misconfigured as apic 9, remapped to apid 3
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (NPE2)
acpiprt2 at acpi0: bus -1 (NPE4)
acpiprt3 at acpi0: bus -1 (NPE5)
acpiprt4 at acpi0: bus -1 (NPE6)
acpiprt5 at acpi0: bus -1 (NPE8)
acpiprt6 at acpi0: bus -1 (NPE9)
acpiprt7 at acpi0: bus -1 (NPEA)
acpiprt8 at acpi0: bus 10 (P0P1)
acpiprt9 at acpi0: bus 9 (P0P4)
acpiprt10 at acpi0: bus 8 (P0P5)
acpiprt11 at acpi0: bus 7 (P0P6)
acpiprt12 at acpi0: bus 6 (P0P7)
acpiprt13 at acpi0: bus -1 (P0P8)
acpiprt14 at acpi0: bus -1 (P0P9)
acpiprt15 at acpi0: bus 1 (NPE1)
acpiprt16 at acpi0: bus 3 (PXHA)
acpiprt17 at acpi0: bus 4 (NPE3)
acpiprt18 at acpi0: bus 5 (NPE7)
acpicpu0 at acpi0: C1(@1 halt!), PSS
acpicpu1 at acpi0: C1(@1 halt!), PSS
acpicpu2 at acpi0: C1(@1 halt!), PSS
acpicpu3 at acpi0: C1(@1 halt!), PSS
aibs0 at acpi0 RTMP RVLT RFAN GGRP GITM SITM
acpibtn0 at acpi0: PWRB
cpu0: Enhanced SpeedStep 2138 MHz: speeds: 2133, 2000, 1867, 1733, 1600 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel X58 Host" rev 0x13
ppb0 at pci0 dev 1 function 0 "Intel X58 PCIE" rev 0x13

Re: Quick APU2 review

2016-04-15 Thread Timo Myyrä
Otto Moerbeek  writes:

> On Fri, Apr 15, 2016 at 06:12:41PM +0200, Christian Weisgerber wrote:
>
>> I bought a PC Engines APU2 this week and thought I'd write up my
>> impressions.
>> 
>> TL;DR: Recommended.
>> 
>> The obvious point of reference is the Soekris net6501.  Now, that
>> comparison isn't really fair since the net6501 is several years old
>> and the APU2 is a new design.  Then again, Soekris canceled their
>> successor model (after stringing along potential customers for a
>> year), so they're without a competitive product now.  Tough for them.
>> 
>> http://pcengines.ch/apu2c4.htm
>> https://soekris.com/products/net6501-1.html
>> 
>> Here's what the APU2 lacks: It has only three Ethernet ports instead
>> of four, no front-side Ethernet LEDs, no PCI-Express expansion slot,
>> no LOM.  On the plus side, it has two USB 3.0 ports instead of a
>> single USB 2.0 one.
>> 
>> Performance: Single-core speed of the APU2 seems to be comparable
>> to the net6501-70 (the fast model), but the APU2 has four cores
>> instead of two and it has AES-NI, which provides a big boost for
>> many crypto applications.  A "make -j4 build" took exactly 120
>> minutes.
>> 
>> Heat: The APUs have an innovative design where the CPU heat sink
>> is coupled to the case.  Since this is typically assembled by the
>> customer, a lot of attention is drawn to it and people obsess over
>> the CPU temperature.  It's a nonissue.  Case temperature is about
>> the same as for the net6501, where people are far less concerned,
>> even a "make -j4 build" didn't raise the CPU temperature much (57C
>> to 64.5C), and the design ensures good heat flow.  Ask me again in
>> six months how it did in a 33C summer environment, but I expect no
>> problems whatsoever.
>> 
>> The firmware is still being worked on; it's cobbled together from
>> coreboot, a MemTest86 module (takes about 1h45 for one pass on the
>> apu2c4), and iPXE.  It works.  I've booted via PXE, from an external
>> USB key, and from mSATA.
>> 
>> Miscellaneous: The case is really compact.  The order of the Ethernet
>> ports is reversed when compared to the Soekris and not marked on
>> the case.
>> 
>> And yes, the APU2 is fully supported by OpenBSD 5.9.
>> 
>> Overall, I like it a lot.  Compared to the net6501, the APU2 is
>> much cheaper and more powerful.  Compared to Intel Rangeley devices,
>> it is readily available in small quantities (like, one) and, to
>> pick the one that you can easily buy, again much cheaper than the
>> RCC-VE 2440.
>> 
>> My APU2 is serving as my home gateway now, replacing a net6501.
>> It feels good to be running an AMD CPU again. :-)
>> 
>> 
>> PS: I bought mine from NRG Systems GmbH, Augsburg, Germany, who
>> sell convenient board/case/PSU/SSD kits.  Board and case were
>> already assembled.
>> -- 
>> Christian "naddy" Weisgerber  na...@mips.inka.de
>
> A dmesg! My kingdom for a dmesg!
>  ;-)
>
>   -otto

Here's one from my apu.

Timo

OpenBSD 5.9-current (GENERIC.MP) #1973: Tue Mar 29 19:42:47 MDT 2016
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 4261076992 (4063MB)
avail mem = 4127580160 (3936MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xdffb7020 (7 entries)
bios0: vendor coreboot version "APU2A_20150928-19-gbc96368-dirty" date 
02/11/2016
bios0: PC Engines apu2
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S2 S3 S4 S5
acpi0: tables DSDT FACP SSDT APIC HEST SSDT SSDT HPET
acpi0: wakeup devices PWRB(S4) PBR4(S4) PBR5(S4) PBR6(S4) PBR7(S4) PBR8(S4) 
UOH1(S3) UOH3(S3) UOH5(S3) XHC0(S4)
acpitimer0 at acpi0: 3579545 Hz, 32 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: AMD GX-412TC SOC, 998.37 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,NXE,MMXX,FFXSR,PAGE1GB,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,IBS,SKINIT,TOPEXT,ITSC,BMI1
cpu0: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 2MB 64b/line 
16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 40 4KB entries fully associative, 8 4MB entries fully associative
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: AMD GX-412TC SOC, 998.11 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,NXE,MMXX,FFXSR,PAGE1GB,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,IBS,SKINIT,TOPEXT,ITSC,BMI1
cpu1: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 2MB 64b/line 
16-way L2 cache
cpu1: ITLB

Re: Quick APU2 review

2016-04-15 Thread Otto Moerbeek
On Fri, Apr 15, 2016 at 06:12:41PM +0200, Christian Weisgerber wrote:

> I bought a PC Engines APU2 this week and thought I'd write up my
> impressions.
> 
> TL;DR: Recommended.
> 
> The obvious point of reference is the Soekris net6501.  Now, that
> comparison isn't really fair since the net6501 is several years old
> and the APU2 is a new design.  Then again, Soekris canceled their
> successor model (after stringing along potential customers for a
> year), so they're without a competitive product now.  Tough for them.
> 
> http://pcengines.ch/apu2c4.htm
> https://soekris.com/products/net6501-1.html
> 
> Here's what the APU2 lacks: It has only three Ethernet ports instead
> of four, no front-side Ethernet LEDs, no PCI-Express expansion slot,
> no LOM.  On the plus side, it has two USB 3.0 ports instead of a
> single USB 2.0 one.
> 
> Performance: Single-core speed of the APU2 seems to be comparable
> to the net6501-70 (the fast model), but the APU2 has four cores
> instead of two and it has AES-NI, which provides a big boost for
> many crypto applications.  A "make -j4 build" took exactly 120
> minutes.
> 
> Heat: The APUs have an innovative design where the CPU heat sink
> is coupled to the case.  Since this is typically assembled by the
> customer, a lot of attention is drawn to it and people obsess over
> the CPU temperature.  It's a nonissue.  Case temperature is about
> the same as for the net6501, where people are far less concerned,
> even a "make -j4 build" didn't raise the CPU temperature much (57C
> to 64.5C), and the design ensures good heat flow.  Ask me again in
> six months how it did in a 33C summer environment, but I expect no
> problems whatsoever.
> 
> The firmware is still being worked on; it's cobbled together from
> coreboot, a MemTest86 module (takes about 1h45 for one pass on the
> apu2c4), and iPXE.  It works.  I've booted via PXE, from an external
> USB key, and from mSATA.
> 
> Miscellaneous: The case is really compact.  The order of the Ethernet
> ports is reversed when compared to the Soekris and not marked on
> the case.
> 
> And yes, the APU2 is fully supported by OpenBSD 5.9.
> 
> Overall, I like it a lot.  Compared to the net6501, the APU2 is
> much cheaper and more powerful.  Compared to Intel Rangeley devices,
> it is readily available in small quantities (like, one) and, to
> pick the one that you can easily buy, again much cheaper than the
> RCC-VE 2440.
> 
> My APU2 is serving as my home gateway now, replacing a net6501.
> It feels good to be running an AMD CPU again. :-)
> 
> 
> PS: I bought mine from NRG Systems GmbH, Augsburg, Germany, who
> sell convenient board/case/PSU/SSD kits.  Board and case were
> already assembled.
> -- 
> Christian "naddy" Weisgerber  na...@mips.inka.de

A dmesg! My kingdom for a dmesg!
 ;-)

-otto



Quick APU2 review

2016-04-15 Thread Christian Weisgerber
I bought a PC Engines APU2 this week and thought I'd write up my
impressions.

TL;DR: Recommended.

The obvious point of reference is the Soekris net6501.  Now, that
comparison isn't really fair since the net6501 is several years old
and the APU2 is a new design.  Then again, Soekris canceled their
successor model (after stringing along potential customers for a
year), so they're without a competitive product now.  Tough for them.

http://pcengines.ch/apu2c4.htm
https://soekris.com/products/net6501-1.html

Here's what the APU2 lacks: It has only three Ethernet ports instead
of four, no front-side Ethernet LEDs, no PCI-Express expansion slot,
no LOM.  On the plus side, it has two USB 3.0 ports instead of a
single USB 2.0 one.

Performance: Single-core speed of the APU2 seems to be comparable
to the net6501-70 (the fast model), but the APU2 has four cores
instead of two and it has AES-NI, which provides a big boost for
many crypto applications.  A "make -j4 build" took exactly 120
minutes.

Heat: The APUs have an innovative design where the CPU heat sink
is coupled to the case.  Since this is typically assembled by the
customer, a lot of attention is drawn to it and people obsess over
the CPU temperature.  It's a nonissue.  Case temperature is about
the same as for the net6501, where people are far less concerned,
even a "make -j4 build" didn't raise the CPU temperature much (57C
to 64.5C), and the design ensures good heat flow.  Ask me again in
six months how it did in a 33C summer environment, but I expect no
problems whatsoever.

The firmware is still being worked on; it's cobbled together from
coreboot, a MemTest86 module (takes about 1h45 for one pass on the
apu2c4), and iPXE.  It works.  I've booted via PXE, from an external
USB key, and from mSATA.

Miscellaneous: The case is really compact.  The order of the Ethernet
ports is reversed when compared to the Soekris and not marked on
the case.

And yes, the APU2 is fully supported by OpenBSD 5.9.

Overall, I like it a lot.  Compared to the net6501, the APU2 is
much cheaper and more powerful.  Compared to Intel Rangeley devices,
it is readily available in small quantities (like, one) and, to
pick the one that you can easily buy, again much cheaper than the
RCC-VE 2440.

My APU2 is serving as my home gateway now, replacing a net6501.
It feels good to be running an AMD CPU again. :-)


PS: I bought mine from NRG Systems GmbH, Augsburg, Germany, who
sell convenient board/case/PSU/SSD kits.  Board and case were
already assembled.
-- 
Christian "naddy" Weisgerber  na...@mips.inka.de



Re: Getting started with an OpenBSD Desktop...

2016-04-15 Thread lists
Wed, 13 Apr 2016 18:34:43 +0200 Mike Burns 
> On 2016-04-13 15.31.36 +0200, Erling Westenvik wrote:
> > On Wed, Apr 13, 2016 at 09:37:53AM +, Mike Burns wrote:  
> > > I hooked some shell scripts up with zenity to make a wifi GUI.
> > >   
> > Interesting. Care to share the code somewhere? Maybe it could evolve
> > into a port/package?  
> 
> I'll share the code, but it has some caveats:

It's a starting point for all programs, feedback helps a lot.

> - I made this for my laptop and my use cases.

You're very interested in it, which is what it takes indeed.

> - I hate automation.

Just design correct to be susceptible to automation is enough.
Programs evolve into filters and interfaces to other programs.

> - It's not very good.

The future is open, if you keep your interest in it, buckle up.

> - The GUI gives no feedback after you select the access point.

Minor convenience details, you'll have more iterations with it.

> Feel free to turn it into anything you'd like.

Thanks a bunch, please keep it up (don't listen to crappy talk).

> Attached is a man page for wifi(1), the wifi script itself, and wifi-gtk
> which makes use of the wifi script. Run it as 'doas wifi-gtk -C $HOME/.wifi',
> where $HOME/.wifi is your wifi config (see the attached man page).
> 
> ===
> wifi.1:
> ===
> 
> .Dd $Mdocdate$
> .Dt WIFI 1
> .Os
> .Sh WIFI
> .Nm wifi
> .Nd connect to OpenBSD wifi
> .Sh SYNOPSIS
> .Nm progname
> .Fl C Ar config
> .Fl i Ar iface
> .Ar nickname
> .Sh DESCRIPTION
> The
> .Nm
> utility connects to the wifi on the interface
> .Ar iface
> according to the
> .Ar nickname
> as read from
> .Ar config .
> .\" .Sh ENVIRONMENT
> .\" For sections 1, 6, 7, and 8 only.
> .Sh FILES
> The configuration file follows a simple format:
> .Pp
> .Dl nickname: ifconfig-options autoconfiguration
> .Pp
> These three values are as follow:
> .Bl -tag -width Ds
> .It Va nickname
> The name of the wifi network, to be passed to the
> .Nm
> program.
> .It Va ifconfig-options
> Options for
> .Xr ifconfig 1 ,
> such as
> .Li nwid
> and
> .Li wpakey .
> .It Va autoconfiguration
> Either
> .Li dhcp
> for DHCP or
> .Li rtsol
> for IPv6 autoconf.
> .El
> .Sh EXIT STATUS
> The exit status of
> .Nm
> is the same as the exit status of the
> .Pa /etc/netstart
> program.
> .Sh EXAMPLES
> .Pp
> .Dl sudo wifi -C ~/.wifi -i iwn0 home
> .Pp
> .\" .Sh DIAGNOSTICS
> .\" For sections 1, 4, 6, 7, 8, and 9 printf/stderr messages only.
> .Sh SEE ALSO
> .Xr ifconfig 1 ,
> .Xr hostname.if 5
> .\" .Sh STANDARDS
> .\" .Sh HISTORY
> .Sh AUTHORS
> .An "Mike Burns" Aq mike+open...@mike-burns.com
> .\" .Sh CAVEATS
> .\" .Sh BUGS
> 
> ===
> wifi:
> ===
> 
> #!/bin/sh
> 
> usage() {
>   echo usage: wifi -C config -i iface nickname
>   exit 64
> }
> 
> args=`getopt "C:i:" $*`
> 
> if [ $? -ne 0 ]; then
>   usage
> fi
> 
> set -- $args
> 
> while [ $# -ne 0 ]; do
>   case "$1" in
> -C)
>   config="$2"
>   shift; shift
>   ;;
> -i)
>   iface="$2"
>   shift; shift
>   ;;
> --)
>   shift
>   to_connect="$@"
>   break
>   ;;
>   esac
> done
> 
> if [ -z "$config" -o -z "$iface" -o -z "$to_connect" ]; then
>   usage
> fi
> 
> file="/etc/hostname.$iface"
> dhcp_cfg=$(sed -ne "/^${to_connect}:.*dhcp/s/.*: *\(.*\) *dhcp/\1/p" 
> "$config")
> rtsol_cfg=$(sed -ne "/^${to_connect}:.*rtsol/s/.*: *\(.*\) *rtsol/\1/p" 
> "$config")
> 
> if [ -z "$dhcp_cfg" -a -z "$rtsol_cfg" ]; then
>   echo "Could not find '$to_connect' in $config" >&2
>   exit 1
> fi
> 
> echo "# Autogenerated by wifi(1)" > "$file"
> echo "# Connection name: '${to_connect}'" >> "$file"
> 
> if [ -n "$dhcp_cfg" ]; then
>   echo "$dhcp_cfg" >> "$file"
>   echo dhcp >> "$file"
> fi
> 
> if [ -n "$rtsol_cfg" ]; then
>   echo "$rtsol_cfg" >> "$file"
>   echo rtsol >> "$file"
> fi
> 
> exec sh /etc/netstart
> 
> ===
> wifi-gtk
> ===
> 
> #!/bin/sh
> 
> if [ $# -ne 2 ]; then
>   echo usage: wifi-gtk -C config
>   exit 64
> fi
> 
> config="$2"
> 
> nwid=$(sed -ne 's/\(.*\):.*/\1/p' "$config" | zenity --list --title Wifi 
> --column nwids)
> 
> if [ -n "$nwid" ]; then
>   exec /home/mike/.bin/wifi -C "$config" -i iwn0 "$nwid"
> fi



Radeon Kabini SoC

2016-04-15 Thread lime_
I am trying to install OpenBSD on my AMD-A6 APU based laptop. The EFI
based frame buffer loads but aside that I can get an X window to load.
A dmesg is here http://sprunge.us/ieXU

Thanks



Re: NFS daemon is very slow in server-to-client direction in TCP mode

2016-04-15 Thread Максим
Thanks, Brian!You are right. The default value of 65536 for wsize and
rsize seems bad for debian client. Lower values gave me very good results
(it seems the lower the value the better the responsiveness).I finally
stopped at value 4096. Seems working.š--Best regardsRodin Maximššš14.04.2016,
15:25, "Brian Conway" :

  I ran into that same behavior with a Debian client before lowering
  the readsize and writesize in the NFS mount options (they defaulted
  to 64K I believe). Try starting at 8096 and working your way up until
  you find the failure point.

  Brian Conway
  Software Engineer, Owner
  RCE Software, LLC
  ššš

  I was using nfs service on OpenBSD (amd64) since version 5.6.

  The whole setup process repeats the steps in official FAQ on the
  OpenBSD's homepage.
  The problem was and remains (now in version 5.9 amd64):
  in TCP mode the upload speed is about 20-30MB/s
  which is quite acceptable for my needs, but the download speed is
  about 32Kb/s.

  As a workaround I had set up the debain client to connect to my
  NFS-server in UDP mode.
  In that mode the speed was good in both directions.

  In recent versions of debian OS the UDP option for NFS-client
  disappeared.
  The question is: is it possible to fix TCP mode in NFS server or is
  it still the problem of the NFS client?

  Best Regards
  Rodin Maxim



Carp interface sitting on vlan can not be pinged

2016-04-15 Thread Kim Zeitler

Hello

maybe a stupid question, but is it possible to run a carp(4) interface 
on vlan(4) interfaces?


In the following setup we have the problem that both boxes can be pinged 
on their address associated with their respective vlan(4) interface, but 
not on the carp(4) interface IP. Both boxes are recent installs and are 
running -current


em2 (no ip) ---> vlan100 (192.168.150.200) ---> carp2 (192.168.150.1)
\
 --> vlan101 (192.168.151.200) ---> carp3 (192.168.151.1)

respectively the corresponding node using .202 instead of .200 for the 
vlan(4) interfaces


== The configuration ==

# uname -a
OpenBSD router12 5.9 GENERIC.MP#1983 amd64

# cat /etc/hostname.em2
up

# cat /etc/hostname.vlan100
inet 192.168.150.200 255.255.255.0 192.168.150.255 vlan 100 vlandev em2

# cat /etc/hostname.carp2
inet 192.168.150.1 255.255.255.0 192.168.150.255 vhid 201 carpdev 
vlan100 pass 1234 group wlan


# cat /etc/pf.conf
...
pass quick on {em2,vlan100,vlan101} proto carp
...
pass inet proto icmp icmp-type $icmp_types
pass vlan100:network
...

# netstat -rn
...
192.168.150/24 192.168.150.200UCP0 4401 - 4 
vlan100
192.168.150/24 192.168.150.1  CP 00 - 4 
carp2
192.168.150.1  00:00:5e:00:01:c9  UHLl   0 9981 - 1 
carp2
192.168.150.20090:e2:ba:c1:11:11  UHLl   0   30 - 1 
vlan100
192.168.150.255192.168.150.200UHPb   0   80 - 1 
vlan100
192.168.150.255192.168.150.1  HPb00 - 1 
carp2
192.168.151/24 192.168.151.200UCP1 3040 - 4 
vlan101
192.168.151/24 192.168.151.1  CP 00 - 4 
carp3
192.168.151.1  00:00:5e:00:01:ca  UHLl   0  182 - 1 
carp3
192.168.151.20090:e2:ba:c1:11:11  UHLl   0   36 - 1 
vlan101
192.168.151.255192.168.151.200UHPb   00 - 1 
vlan101
192.168.151.255192.168.151.1  HPb00 - 1 
carp3



Cheers
Kim



Re: Subpixel / RGB antialiasing

2016-04-15 Thread Matej Nanut
On 15 April 2016 at 03:08, Paolo Aglialoro  wrote:
> I know nothing about Canadian law, but here in EU software patents, after
> multiple fierce battles in European parliament, have never been recognised.
>
> This said, afaik, SW patents are just a US hassle. Does it make sense
> considering them problematic if the OS is "made in Canada"?

I took this patch from Arch Linux's freetype package[0], but I didn't
feel the need to include all of them.

If Arch can include it by default, OpenBSD probably can too?

I for sure could not migrate to OpenBSD full time without enabling the
feature, but I don't mind patching it manually. :)

Note though, that enabling the feature does some weird things to font
rendering in urxvt, where things show graphical glitches without the
"URxvt.letterSpace: -1" X resource. I don't know how other terminal
emulators handle it.

[0] 
https://projects.archlinux.org/svntogit/packages.git/tree/trunk?h=packages/freetype2



Re: Redirect SMTP traffic

2016-04-15 Thread Stuart Henderson
On 2016-04-14, b.gr...@sdnet.info  wrote:
> Hello the list,
>
>
> I trying to put SPAMD in front of an Exchange Server but i think doing 
> it in the wrong way.
>
> My Lab is like this :
>
>FW
> |
>  SPAMD--Exchange
>
> SPAMD and Exchange are in separate LAN. Routing is done via the FW
>
> Step 1 : Is to test if my spamdserver can just forward connexions to the 
> Exchange Server

No, at least not without losing the sender's source IP address. (you can
do that with http://www.openbsd.org/faq/pf/rdr.html#rdrnat but it's a
terrible idea in this case).

> My first idea was using rdr-to in a pass rule like this
> pass in log on $int_if proto tcp from any to 'spamd_ip' port smtp keep 
> state rdr-to 'exchange_ip' port smtp
>
> But i'm don't seeing the packet go out from spamd server

I suspect you don't have IP forwarding enabled; with this rule you should
see a packet though it won't successfully connect.

The real fix:

Either move spamd to the firewall, or run an MTA on the spamd machine
(e.g. smtpd, sendmail, postfix) and relay mail to Exchange at the
SMTP level.



Re: X crashes since ~1 week on -current/amd64 with radeon

2016-04-15 Thread Jonathan Gray
On Tue, Apr 12, 2016 at 10:49:57PM +0200, Mattieu Baptiste wrote:
> Hi,
> 
> Since about ~1 week I encounter X crashes on my main desktop running
> -current/amd64 with a radeon hd 4670.
> It's not very frequent (one or two times a day).
> 
> Nothing particular appears on the console.
> 
> How can I help debug this ?
> 
> Here are the dmesg and Xorg.0.log.old:
> 
> OpenBSD 5.9-current (GENERIC.MP) #1982: Sat Apr  2 11:43:48 MDT 2016
> dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

..

> [16.177] Build Date: 02 April 2016  12:24:35PM

...

> [16.199] (II) LoadModule: "ati"
> [16.199] (II) Loading /usr/X11R6/lib/modules/drivers/ati_drv.so
> [16.199] (II) Module ati: vendor="X.Org Foundation"
> [16.199] compiled for 1.17.4, module version = 7.5.0
> [16.199] Module class: X.Org Video Driver
> [16.199] ABI class: X.Org Video Driver, version 19.0
> [16.199] (II) LoadModule: "radeon"
> [16.200] (II) Loading /usr/X11R6/lib/modules/drivers/radeon_drv.so
> [16.202] (II) Module radeon: vendor="X.Org Foundation"
> [16.202] compiled for 1.17.4, module version = 7.5.0
> [16.202] Module class: X.Org Video Driver

The snapshot you are using was just before the xf86-video-ati 7.6.1
update, can you try a newer snapshot or build xenocara to get 7.6.1?
7.7.0 was recently released upstream but that isn't in tree yet.