Re: Segmentation fault of X under 6.0

2016-10-25 Thread Aaron Mason
On Sun, Oct 23, 2016 at 8:10 PM, Federico Giannici  wrote:
> Since I upgraded my PC to 6.0 (amd64) the X server has began to crash almost
> once a day, usually after a while of minutes (it's variable, usually around
> 30-60 minutes after the boot).
>
> Video card is an "ATI Radeon HD 4350". No custom X configuration file.
> Before the upgrade to 6.0 (from 5.9) it never crashed in many years of
> usage, so I don't thing it's an hardware issue.

Have you tried a clean install of 5.9 to verify that it still works
fine?  Was the move to 6.0 done via upgrade, and if so, have you tried
a clean install of 6.0?  Probably also try a clean install of -stable
for good measure.

>
> I upgraded the kernel to a standard 6.0-stable comprehensive of the "011:
> SECURITY FIX: October 4, 2016" patches of the X library, but nothing
> changed.
>
> Here you can find the complete Xorg log and the dmesg:
>
> http://www.neomedia.it/tmp/Xorg.0.log
> http://www.neomedia.it/tmp/dmesg
>
> Here are the last lines of the Xorg log:
>
> [   159.840] (II) RADEON(0): Modeline "1440x900"x0.0   88.75  1440 1488 1520
> 1600  900 903 909 926 +hsync -vsync (55.5 kHz e)
> [   159.840] (II) RADEON(0): Modeline "1600x900"x60.0  119.00  1600 1696
> 1864 2128  900 901 904 932 -hsync +vsync (55.9 kHz e)
> [   159.840] (II) RADEON(0): Modeline "1680x1050"x0.0  119.00  1680 1728
> 1760 1840  1050 1053 1059 1080 +hsync -vsync (64.7 kHz e)
> [  2039.854] (EE) Segmentation fault at address 0x1f8cf548b000
> [  2039.854] (EE)
> Fatal server error:
> [  2039.854] (EE) Caught signal 11 (Segmentation fault). Server aborting
> [  2039.854] (EE)
> [  2039.854] (EE)
> Please consult the The X.Org Foundation support
>  at http://wiki.x.org
>  for help.
> [  2039.854] (EE) Please also check the log file at "/var/log/Xorg.0.log"
> for additional information.
> [  2039.854] (EE)
> [  2039.854] (EE) ws: /dev/wsmouse: unknown command 4
> [  2039.854] (II) AIGLX: Suspending AIGLX clients for VT switch
> [  2039.854] (EE) Server terminated with error (1). Closing log file.
>
> Do you think that the "/dev/wsmouse: unknown command 4" is a consequence of
> the crash or it could be the cause?

At first I'd say consequence, but considering the fact that everything
appears to have happened all at once... without knowing more about X,
I couldn't say with any degree of confidence.

>
> Any suggestions?
>
> Thanks.
>



-- 
Aaron Mason - Programmer, open source addict
I've taken my software vows - for beta or for worse



Re: dante socksify authenticate a different user

2016-10-25 Thread Rashad Kanavath
On Tue, Oct 25, 2016 at 6:47 PM, Jeremie Courreges-Anglas 
wrote:

> Rashad Kanavath  writes:
>
> > Hello,
> >
> > I am running an application within a proxy network with authentication.
> To
> > connect via ssh to a server outside corporate network, I need a tool such
> > as proxychains. Current proxychains is not working on openbsd. It need
> some
> > fixes in makefile to have it working properly. So I searched for
> > alternatives and openbsd had dante which provide a tool called socksify
> >
> > Now socksify must be configured to use my socks5_proxy at company.  I
> don't
> > know how to configure it and configuration docs[1] is confusing.
> >
> > So If anybody had experience with socksify could help me how to setup
> this
> > or maybe recommend another tool.
>
> I've never used socksify and a socks5 gateway, but the socksify(1)
> manpage states what you need: see the description of SOCKS_SERVER and
> SOCKS5_SERVER.
>
>   env SOCKS5_SERVER=127.0.0.1:1080 socksify your command
>
> should be a good starting point.  Looks like it's a bit broken when
> using a hostname instead of a raw IP address though.
>
> > [1] https://www.inet.no/dante/doc/1.2.x/config/auth_username.html
>
> This describes how to set up the server side part of dante.
>
Thanks.

yes I read about those env variables in man page and it works.

I want to know if it is possible to put those settings in a config file
rather than env variables


--
> jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF  DDCC 0DFA 74AE 1524 E7EE
>



-- 
Regards,
   Rashad



Re: dante socksify authenticate a different user

2016-10-25 Thread Jeremie Courreges-Anglas
Rashad Kanavath  writes:

> Hello,
>
> I am running an application within a proxy network with authentication. To
> connect via ssh to a server outside corporate network, I need a tool such
> as proxychains. Current proxychains is not working on openbsd. It need some
> fixes in makefile to have it working properly. So I searched for
> alternatives and openbsd had dante which provide a tool called socksify
>
> Now socksify must be configured to use my socks5_proxy at company.  I don't
> know how to configure it and configuration docs[1] is confusing.
>
> So If anybody had experience with socksify could help me how to setup this
> or maybe recommend another tool.

I've never used socksify and a socks5 gateway, but the socksify(1)
manpage states what you need: see the description of SOCKS_SERVER and
SOCKS5_SERVER.

  env SOCKS5_SERVER=127.0.0.1:1080 socksify your command

should be a good starting point.  Looks like it's a bit broken when
using a hostname instead of a raw IP address though.

> [1] https://www.inet.no/dante/doc/1.2.x/config/auth_username.html

This describes how to set up the server side part of dante.

-- 
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF  DDCC 0DFA 74AE 1524 E7EE



Difference between ping mnaual page and behaviour

2016-10-25 Thread Horváth Tamás
Dear List!

I've found in the man page of ping the following: "If less than eight bytes of 
pad are specified, no round trip times are given." However I experienced that 
round trip times are shown *only* when I give packetsize >= 24 to the ping. 
This is the case whether I did the ping as root or as another user.

I've found on Web CVS Repository of OpenBSD that the latest version of ping.c 
(1.217) contains the following lines:"
struct tv64 {
u_int64_t   tv64_sec;
u_int64_t   tv64_nsec;
};

struct payload {
struct tv64tv64;
u_int8_tmac[SIPHASH_DIGEST_LENGTH];
};

if (datalen >= sizeof(struct payload))  /* can we time transfer */
timing = 1;
"
I think that this is the explanation of my experience and maybe the man page 
should be corrected.

This is my first e-mail to this list and I am not a programmer just a network 
engineer. So I am sorry, but I can not send a diff.

I'v just installed OpenBSD6.0 in a VirtualBox and I did not updated the fresh 
install (so my source of ping maybe not version 1.217). But I copy the dmesg 
below
$ dmesg

OpenBSD 6.0 (GENERIC) #2148: Tue Jul 26 12:55:20 MDT 2016
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 4278124544 (4079MB)
avail mem = 4144046080 (3952MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xe1000 (10 entries)
bios0: vendor innotek GmbH version "VirtualBox" date 12/01/2006
bios0: innotek GmbH VirtualBox
acpi0 at bios0: rev 2
acpi0: sleep states S0 S5
acpi0: tables DSDT FACP APIC SSDT
acpi0: wakeup devices
acpitimer0 at acpi0: 3579545 Hz, 32 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz, 2195.04 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,PCLMUL,MWAIT,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,RDRAND,NXE,LONG,LAHF,ABM,3DNOWP,ITSC,RDSEED
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: CPU supports MTRRs but not enabled by BIOS
cpu0: apic clock running at 1019MHz
cpu0: mwait min=64, max=64
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 11, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpicpu0 at acpi0: C1(@1 halt!)
"PNP0303" at acpi0 not configured
"PNP0F03" at acpi0 not configured
acpibat0 at acpi0: BAT0 model "1" serial 0 type VBOX oem "innotek"
acpiac0 at acpi0: AC unit online
acpivideo0 at acpi0: GFX0
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel 82441FX" rev 0x02
pcib0 at pci0 dev 1 function 0 "Intel 82371SB ISA" rev 0x00
pciide0 at pci0 dev 1 function 1 "Intel 82371AB IDE" rev 0x01: DMA, channel 0 
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 128-sector PIO, LBA, 2048MB, 4194304 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
vga1 at pci0 dev 2 function 0 "InnoTek VirtualBox Graphics Adapter" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
em0 at pci0 dev 3 function 0 "Intel 82540EM" rev 0x02: apic 1 int 19, address 
08:00:27:43:02:53
"InnoTek VirtualBox Guest Service" rev 0x00 at pci0 dev 4 function 0 not 
configured
auich0 at pci0 dev 5 function 0 "Intel 82801AA AC97" rev 0x01: apic 1 int 21, 
ICH AC97
ac97: codec id 0x83847600 (SigmaTel STAC9700)
audio0 at auich0
ohci0 at pci0 dev 6 function 0 "Apple Intrepid USB" rev 0x00: apic 1 int 22, 
version 1.0
piixpm0 at pci0 dev 7 function 0 "Intel 82371AB Power" rev 0x08: SMBus disabled
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5 irq 1 irq 12
pckbd0 at pckbc0 (kbd slot)
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
usb0 at ohci0: USB revision 1.0
uhub0 at usb0 "Apple OHCI root hub" rev 1.00/1.00 addr 1
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
scsibus2 at softraid0: 256 targets
root on wd0a (35819a56b501e167.a) swap on wd0b dump on wd0b
WARNING: / was not properly unmounted
$ 

I apologize if I send my message to a wrong list.
My intention was to help a little.

Regards,
Tamas Horvath



Re: dante socksify authenticate a different user

2016-10-25 Thread Rashad Kanavath
Hello,

I am running an application within a proxy network with authentication. To
connect via ssh to a server outside corporate network, I need a tool such
as proxychains. Current proxychains is not working on openbsd. It need some
fixes in makefile to have it working properly. So I searched for
alternatives and openbsd had dante which provide a tool called socksify

Now socksify must be configured to use my socks5_proxy at company.  I don't
know how to configure it and configuration docs[1] is confusing.

So If anybody had experience with socksify could help me how to setup this
or maybe recommend another tool.

[1] https://www.inet.no/dante/doc/1.2.x/config/auth_username.html


On Mon, Oct 24, 2016 at 6:33 PM, Flipchan  wrote:

> Do you want a socks5 that listens on port x and has auth? Cant u just
> download some thirdparty software?
>
> Rashad Kanavath  skrev: (24 oktober 2016
> 18:28:08 CEST)
>>
>> Hello,
>>
>> Can someone provide a sample configuration for socks.conf to use socsk5
>> protocol with authentication.
>>
>> after basic configuration it uses  a system user but I have a different
>> username for proxy server
>>
>> here is /etc/socks.conf
>>
>> route {
>> from: 0.0.0.0/0   to: 0.0.0.0/0   via: x.x.x.x port = 1080
>> proxyprotocol: socks_v5 # server supports socks v5.
>> }
>>
>> this is only modified afer pkg_add dante
>>
>> OpenBSD rkm.my.domain 6.0 GENERIC.MP#2319 amd64
>>
>>
> --
> Sincerly flipchan
>



-- 
Regards,
   Rashad



Re: permanent ARP being overwritten by ISP

2016-10-25 Thread Doug Moss
On Wednesday, January 20, 2016 1:37 PM, Martin Pieuchot  
wrote:
>If you're referring to my reply, I was interested in the behavior in a
>-current kernel, what will be 5.9 soon.  A lot of changes happened
>since 5.8.
>
>It would be nice if you could also post the output of "route -n show -inet"

>with such kernel.

I have brought up this issue before, but I think I have narrowed down the 
possible causes/scenario,
and I have my machine up to date with the current release.

I think my question is:
on my openbsd 6.0 amd64 machine, where I already have an accurate ARP entry 
that has been manually
set as permanent, when the sshd daemon receives a connection, why does that 
machine broadcast
an ARP 'who-has' for the IP address of the SSH client machine?

This was sparked by seeing entries in my /var/log/messages like:
Oct 22 23:50:00 www /bsd: arp: attempt to overwrite permanent entry for 
70.20.25.26 by fa:c0:01:75:98:cd on em0


The details are, as best I can summarize:

network diagram:

   

-- |  
|192.168.1.x

--ISP 70.20.25.1|switch  | |  |
|SG200-18| router  |  | home LAN
||70.20.25.26 / 192.168.1.1|switch|
|| 
||70.20.25.28
||
||70.20.25.29
||
||70.20.25.30
--  OBSD 6.0 amd64 release



ethernet IDs:
fa:c0:01:75:98:cd   70.20.25.1  FIOS gateway
00:25:90:0A:69:B6   70.20.25.26 my router - external
00:25:90:0A:69:B7   192.168.1.1 my router - internal
00:25:90:EA:52:9C   70.20.25.30
00:30:48:DC:1E:35   70.20.25.28
00:30:48:DC:75:DF   70.20.25.29


I have wanted to leave nothing to chance regarding IP to ethernet ID mapping so,
on 70.20.25.30
rc.local has:
arp -F -s 70.20.25.26 00:25:90:0a:69:b6 permanent
arp -F -s 70.20.25.28 00:30:48:dc:1e:35 permanent
arp -F -s 70.20.25.29 00:30:48:dc:75:df permanent

on 70.20.25.30
# route -n show -inet
Routing tables
Internet:
Destination Gateway FlagsRefs   UseMtu   Prio 
Iface
default 70.20.25.1  UGS 4 16498  -  8 
em0 
224/4   127.0.0.1   URS 0 0  32768  8 
lo0 
70.20.25/24 70.20.25.30 UC  1 47033  -  4 
em0 
70.20.25.1  fa:c0:01:75:98:cd   UHLc1 24835  -  4 
em0 
70.20.25.26 00:25:90:0a:69:b6   UHLS3   1   657  - L8 
em0 
70.20.25.28 00:30:48:dc:1e:35   UHLS3   0   590  -  8 
em0 
70.20.25.29 00:30:48:dc:75:df   UHLS3   0   592  -  8 
em0 
70.20.25.30 00:25:90:ea:52:9c   UHLl0  7904  -  1 
em0 
70.20.25.25570.20.25.30 UHb 0 0  -  1 
em0 
127/8   127.0.0.1   UGRS0 0  32768  8 
lo0 
127.0.0.1   127.0.0.1   UHl 1   393  32768  1 
lo0 


When I initiate an SSH client connection from 70.20.25.26 to 70.20.25.30:

at 22 Oct 23:50, ssh from 70.20.25.26 to www..org (70.20.25.30)
#ssh user1@www..org


Then, having logged into 70.20.25.30
/var/log/authlog shows:
Oct 22 23:50:04 www sshd[5107]: Accepted password for user1 from 70.20.25.26 
port 8477 ssh2

/var/log/messages shows:
Oct 22 23:50:00 www /bsd: arp: attempt to overwrite permanent entry for 
70.20.25.26 by fa:c0:01:75:98:cd on em0


tcpdump log of arp traffic shows:
Oct 22 23:50:00.885770 00:25:90:ea:52:9c ff:ff:ff:ff:ff:ff 0806 42: arp who-has 
70.20.25.26 tell 70.20.25.30
Oct 22 23:50:00.885893 00:25:90:0a:69:b6 00:25:90:ea:52:9c 0806 60: arp reply 
70.20.25.26 is-at 00:25:90:0a:69:b6
Oct 22 23:50:00.886738 fa:c0:01:75:98:cd 00:25:90:ea:52:9c 0806 60: arp reply 
70.20.25.26 is-at fa:c0:01:75:98:cd


This looks to me like 00:25:90:ea:52:9c (which is 70.20.25.30) is broadcasting 
an arp 'who-has' requesting the
ethernet ID for 70.20.25.26 (SSH client)
Apropriately, 00:25:90:0a:69:b6 replies, but the FIOS gateway fa:c0:01:75:98:cd 
also replies,
and tries to pretend it is 70.20.25.26

My question is, why?
I have put the ethernet/IP address in as permanent in the arp table, the 
routing table shows it is there.
So why, when I open an SSH connection, is the 70.20.25.30 machine asking for 
the ethernet address of
the client machine?

If I didn't have the rc.local arp commands, there might have been the situation 
where the FIOS gateway
interposes itself.

I should point out that this is not exactly reproducible - this is after 
several weeks of running the machine,
and I looked for this problem in the

Re: pf rule for openvpn

2016-10-25 Thread Thuban
* Thuban  le [25-10-2016 10:41:27 +0200]:
> > # tcpdump -e -ttt -ni pflog0 action block
> >
> > You will be able to see what exactly is being blocked :)
> >

Okay, I'm just too stupid. I can access the wwweb through my VPN. I just
can't ping, which is not a problem and seems logic according to my
pf.conf.

Sorry for the noise.

Regards.
--
/Thuban/

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: pf rule for openvpn

2016-10-25 Thread Thuban
> # tcpdump -e -ttt -ni pflog0 action block
>
> You will be able to see what exactly is being blocked :)
>
That's my problem, nothing seems blocked , tcpdump returns nothing about
my requests to reach the outside web.
I'm stuck.

Please find below my full pf.conf in case I missed something :

ext_if = "re0"  # interface
tun_if = "tun0"  # vpn
ssh_port = ""   # port ssh
http_ports = "{ www https }"# ports http(s)
mail_ports = "{ submission imaps }" # ports mails
tcp_pass = "{ gopher ipp 8000 }"  # ports tcp
ouverts
udp_pass = "{ 1194 }" # ports udp ouverts
set block-policy drop   # bloque 
silencieusement
set skip on lo  # Pas de filtre 
en local
set limit table-entries 40

## tables pour les vilains bruteforceurs
table  persist
table  persist
table  persist

# antispam avec greylisting
table  persist
table  persist file "/etc/mail/nospamd"
table  persist

## Traitement des paquets ##
match in all scrub (no-df)  # Paquets partiels
block in quick from urpf-failed

## Les règles du parefeu ##
# on bloque tout par défaut
block log all

# on bloque les ip blacklistées
block in log quick proto tcp from  to any port $http_ports
block in log quick proto tcp from  to any port $ssh_port

# antispam
pass in on $ext_if proto tcp from any to any port smtp \
divert-to 127.0.0.1 port spamd
pass in on $ext_if proto tcp from  to any port smtp
pass in on $ext_if proto tcp from  to any port smtp
pass in quick on $ext_if proto tcp from  to any port
smtp

# Si + de 3 connections toutes les 60 secondes sur le port ssh
# on rajoute l'ip pour la bloquer.
pass in on $ext_if proto tcp to any port $ssh_port flags S/SA keep state
\
(max-src-conn-rate 5/60, overload  flush global)

# Si + de 50 connections toutes les 5 secondes sur les ports http(s)
# ou si elle essaie de se connecter + de 100 fois
# on rajoute l'ip pour la bloquer.
pass in on $ext_if proto tcp to any port $http_ports flags S/SA keep state
\
(max-src-conn-rate 50/5, overload  flush)

# Protection bruteforce pour les mails
pass in on $ext_if proto tcp to any port $mail_ports flags S/SA keep state
\
(max-src-conn-rate 10/60, overload  flush global)

# on autorise le ping
pass quick inet6 proto ipv6-icmpall icmp6-type { echoreq, unreach
}
pass quick inet proto icmp  all icmp-type { echoreq, unreach
}

# on ouvre les autres ports
pass in quick on $ext_if proto tcp to any port $tcp_pass keep state
pass in quick on $ext_if proto udp to any port $udp_pass keep state

# vpn
pass in quick on $tun_if keep state
pass out on $ext_if from 10.8.0.0/24 to any nat-to ($ext_if)

# tout ouvert en sortie
pass out on $ext_if proto { tcp udp icmp } all modulate state


Regards


--
/Thuban/

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: OpenBSD 6-stable vmd

2016-10-25 Thread Mike Larkin
On Mon, Oct 24, 2016 at 11:07:32PM -0500, Ax0n wrote:
> Thanks for the update, ml.
> 
> The VM Just did it again in the middle of backspacing over uname -a...
> 
> $ uname -a
> OpenBSD vmmbsd.labs.h-i-r.net 6.0 GENERIC.MP#0 amd64
> $ un   <-- frozen
> 
> Spinning like mad.
> 

Bizarre. If it were I, I'd next try killing all vmd processes and
running vmd -dvvv from a root console window and look for what it dumps
out when it hangs like this (if anything).

You'll see a fair number of "vmd: unknown exit code 1" (and 48), those
are harmless and can be ignored, as can anything that vmd dumps out
before the vm gets stuck like this.

If you capture this and post somewhere I can take a look. You may need to
extract the content out of /var/log/messages if a bunch gets printed.

If this fails to diagnose what happens, I can work with you off-list on
how to debug further.

-ml

> [axon@transient ~]$ vmctl status
>ID   PID VCPUSMAXMEMCURMEM  TTY NAME
> 2  2769 1 512MB 149MB   /dev/ttyp3 -c
> 1 48245 1 512MB 211MB   /dev/ttyp0 obsdvmm.vm
> [axon@transient ~]$ ps aux | grep 48245
> _vmd 48245 98.5  2.3 526880 136956 ??  Rp 1:54PM   47:08.30 vmd:
> obsdvmm.vm (vmd)
> 
> load averages:  2.43,  2.36,
> 2.26
> transient.my.domain 18:29:10
> 56 processes: 53 idle, 3 on
> processor
> up  4:35
> CPU0 states:  3.8% user,  0.0% nice, 15.4% system,  0.6% interrupt, 80.2%
> idle
> CPU1 states: 15.3% user,  0.0% nice, 49.3% system,  0.0% interrupt, 35.4%
> idle
> CPU2 states:  6.6% user,  0.0% nice, 24.3% system,  0.0% interrupt, 69.1%
> idle
> CPU3 states:  4.7% user,  0.0% nice, 18.1% system,  0.0% interrupt, 77.2%
> idle
> Memory: Real: 1401M/2183M act/tot Free: 3443M Cache: 536M Swap: 0K/4007M
> 
>   PID USERNAME PRI NICE  SIZE   RES STATE WAIT  TIMECPU COMMAND
> 48245 _vmd  430  515M  134M onprocthrslee  47:37 98.00% vmd
>  7234 axon   20  737M  715M sleep poll 33:18 19.14% firefox
> 42481 _x11  550   16M   42M onproc- 2:53  9.96% Xorg
>  2769 _vmd  290  514M   62M idle  thrslee   2:29  9.62% vmd
> 13503 axon  100  512K 2496K sleep nanosle   0:52  1.12% wmapm
> 76008 axon  100  524K 2588K sleep nanosle   0:10  0.73% wmmon
> 57059 axon  100  248M  258M sleep nanosle   0:08  0.34% wmnet
> 23088 axon   20  580K 2532K sleep select0:10  0.00%
> wmclockmon
> 64041 axon   20 3752K   10M sleep poll  0:05  0.00% wmaker
> 16919 axon   20 7484K   20M sleep poll  0:04  0.00%
> xfce4-terminal
> 1 root  100  408K  460K idle  wait  0:01  0.00% init
> 80619 _ntp   2  -20  880K 2480K sleep poll  0:01  0.00% ntpd
>  9014 _pflogd40  672K  408K sleep bpf   0:01  0.00% pflogd
> 58764 root  100 2052K 7524K idle  wait  0:01  0.00% slim
> 
> 
> 
> On Mon, Oct 24, 2016 at 10:47 PM, Mike Larkin  wrote:
> 
> > On Mon, Oct 24, 2016 at 07:36:48PM -0500, Ax0n wrote:
> > > I suppose I'll ask here since it seems on-topic for this thread. Let me
> > > know if I shouldn't do this in the future. I've been testing vmm for
> > > exactly a week on two different snapshots. I have two VMs: One running
> > the
> > > same snapshot (amd64, Oct 22) I'm running on the host vm, the other
> > running
> > > amd64 6.0-RELEASE with no patches of any kind.
> > >
> > > For some reason, the vm running a recent snapshot locks up occasionally
> > > while I'm interacting with it via cu or occasionally ssh. Should I
> > expect a
> > > ddb prompt and/or kernel panic messages via the virtualized serial
> > console?
> > > Is there some kind of "break" command on the console to get into ddb when
> > > it appears to hang? A "No" or "Not yet" on those two questions would
> > > suffice if not possible. I know this isn't supported, and appreciate the
> > > hard work.
> > >
> > > Host dmesg:
> > > http://stuff.h-i-r.net/2016-10-22.Aspire5733Z.dmesg.txt
> > >
> > > VM (Oct 22 Snapshot) dmesg:
> > > http://stuff.h-i-r.net/2016-10-22.vmm.dmesg.txt
> > >
> >
> > These look fine. Not sure why it would have locked up. Is the associated
> > vmd
> > process idle, or spinning like mad?
> >
> > -ml
> >
> > > Second:
> > > I'm using vm.conf (contents below) to start the aforementioned snapshot
> > vm
> > > at boot.
> > > There's a "disable" line inside vm.conf to keep one VM from spinning up
> > > with vmd.  Is there a way to start this one with vmctl aside from passing
> > > all the options to vmctl as below?
> > >
> > > doas vmctl start -c -d OBSD-RELa -i 1 -k /home/axon/obsd/amd64/bsd -m
> > 512M
> > >
> > > I've tried stuff along the lines of:
> > > doas vmctl start OBSD-RELa.vm
> > >
> > > vm "obsdvmm.vm" {
> > > memory 512M
> > > kernel "bsd"
> > > disk "/home/axon/vmm/OBSD6"
> > > interface tap
> > > }
> > > vm "OBSD-RELa.vm" {
> > > memory 512M
> > > kernel "/