From owner-freebsd-questions@freebsd.org Sun Jan 17 00:46:28 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D8285A6A764 for ; Sun, 17 Jan 2016 00:46:28 +0000 (UTC) (envelope-from trashcan@ellael.org) Received: from mx1.enfer-du-nord.net (mx1.enfer-du-nord.net [IPv6:2001:41d0:1008:bcb:1:1:0:1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A5CD61A8C for ; Sun, 17 Jan 2016 00:46:28 +0000 (UTC) (envelope-from trashcan@ellael.org) Received: from [IPv6:2003:45:480f:2301:3087:39d0:1afb:aa9d] (p20030045480F2301308739D01AFBAA9D.dip0.t-ipconnect.de [IPv6:2003:45:480f:2301:3087:39d0:1afb:aa9d]) by mx1.enfer-du-nord.net (Postfix) with ESMTPSA id 3pjcxs29RCzGSB for ; Sun, 17 Jan 2016 01:46:25 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 9.2 \(3112\)) Subject: Re: Fortran compiler From: Michael Grimm In-Reply-To: Date: Sun, 17 Jan 2016 01:46:24 +0100 Content-Transfer-Encoding: 7bit Message-Id: References: <5426FC3A-A8F7-4B24-9CAA-1A18C176A4F1@yahoo.com> <569AD1F6.7010008@gmail.com> To: FreeBSD Questions X-Virus-Scanned: clamav-milter 0.99 at mail X-Virus-Status: Clean X-Mailer: Apple Mail (2.3112) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 00:46:28 -0000 Adam Vande More wrote: > > On Sat, Jan 16, 2016 at 5:27 PM, jd1008 wrote: >> What a nasty NASTY response to a very very valid request. > > What a crybaby response to the truth. What an arrogant answer of a wannabe Head of Base From owner-freebsd-questions@freebsd.org Sun Jan 17 00:46:52 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1E414A6A7D0 for ; Sun, 17 Jan 2016 00:46:52 +0000 (UTC) (envelope-from feenberg@nber.org) Received: from mail2.nber.org (mail2.nber.org [198.71.6.79]) by mx1.freebsd.org (Postfix) with ESMTP id C688A1B37 for ; Sun, 17 Jan 2016 00:46:51 +0000 (UTC) (envelope-from feenberg@nber.org) Received: from sas1.nber.org (sas1.nber.org [198.71.6.89]) by mail2.nber.org (8.15.2/8.14.9) with ESMTPS id u0H0g4fG037015 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 16 Jan 2016 19:42:05 -0500 (EST) (envelope-from feenberg@nber.org) Date: Sat, 16 Jan 2016 19:42:03 -0500 (EST) From: Daniel Feenberg To: jd1008 cc: freebsd-questions@freebsd.org Subject: Re: [Phishing]Re: Fortran compiler In-Reply-To: <569AD1F6.7010008@gmail.com> Message-ID: References: <5426FC3A-A8F7-4B24-9CAA-1A18C176A4F1@yahoo.com> <569AD1F6.7010008@gmail.com> User-Agent: Alpine 2.20 (LRH 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-KLMS-Rule-ID: 1 X-KLMS-Message-Action: clean X-KLMS-AntiSpam-Status: not scanned, disabled by settings X-KLMS-AntiSpam-Interceptor-Info: not scanned X-KLMS-AntiPhishing: Clean, 2016/01/15 17:25:43 X-KLMS-AntiVirus: Kaspersky Security 8.0 for Linux Mail Server, version 8.0.1.721, bases: 2016/01/16 20:45:00 #6772576 X-KLMS-AntiVirus-Status: Clean, skipped X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 00:46:52 -0000 On Sat, 16 Jan 2016, jd1008 wrote: > > > On 01/16/2016 04:22 PM, Adam Vande More wrote: >> On Sat, Jan 16, 2016 at 4:15 PM, john.haraden--- via freebsd-questions < >> freebsd-questions@freebsd.org> wrote: >> >> > When will the base system ship with a fortran compiler? >> >> Almost certainly never. >> >> >> > Why not resurrect the old f77? >> > >> Why don't you do it and not burden base with your niche desires? >> > What a nasty NASTY response to a very very valid request. > There is a valid point in not deleting a capability merely because it has become less popular - viz ed, sed, awk etc. People appreciate the reduction in risk. daniel feenberg From owner-freebsd-questions@freebsd.org Sun Jan 17 00:51:48 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4B570A6AAF1 for ; Sun, 17 Jan 2016 00:51:48 +0000 (UTC) (envelope-from anders@jensenwaud.com) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 2BF731DE0 for ; Sun, 17 Jan 2016 00:51:48 +0000 (UTC) (envelope-from anders@jensenwaud.com) Received: by mailman.ysv.freebsd.org (Postfix) id 2B000A6AAF0; Sun, 17 Jan 2016 00:51:48 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2A968A6AAEF for ; Sun, 17 Jan 2016 00:51:48 +0000 (UTC) (envelope-from anders@jensenwaud.com) Received: from mail-pa0-x22c.google.com (mail-pa0-x22c.google.com [IPv6:2607:f8b0:400e:c03::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 0501C1DDF for ; Sun, 17 Jan 2016 00:51:47 +0000 (UTC) (envelope-from anders@jensenwaud.com) Received: by mail-pa0-x22c.google.com with SMTP id uo6so399306052pac.1 for ; Sat, 16 Jan 2016 16:51:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jensenwaud-com.20150623.gappssmtp.com; s=20150623; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=xWPurzZ7eh56Od6VNZnvzk7vOroTq2jYwvrTOcZBJtY=; b=SM9+RivB4XRylY+Y8RAy/XVPDfqoIPTcLA8tyvEahp1o3Naoub7Tp3yqhh3NcaZ97b Okfjyn2UuFV3bwLssrLKVg7yelbnCKZW0eYJQ9FG818ryKoSQSu80ojQIRPBQFM5yxGY NEvkbhXSe6EnOPLPcyvUEB4bwinOjOvEvABh1rFjwGIEWJQvUxTJOxahdhuq5DQV8E+6 /z1WZu7SX/Q1W4VprrOlmpJgPuGWPpCer5+rge7NmLU9znVptwSN3MM2qc6l3/nn537t fTCEW3gUPj47ZoqC6Zt5K1D6dcTGePVJSdlTtv4ARfjFTGvQydJuBPZz7dhuyeLE1iYb jc/w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=xWPurzZ7eh56Od6VNZnvzk7vOroTq2jYwvrTOcZBJtY=; b=H0ebdHKN4pQTlvxLTvicWalh13sJ4nVOc30YMEPhQutwNXtjQMGP5eBytp1XxdPUru +i2LAK+0ta5nIxB7veUNYupdWHIRNTAYjAhQadz2WMeKkvjO0NBOGqRDnUqUaZR+QiHb plbhcRbtDDE53NGphO0DL11xROUnhnwpHlt/QNFvS69newSVoZVgnwB1BVR9yNUz3k7M pkxH1HJ4KHCAf+QfI2tch4sfzL8m8soUdiyZCydWvRf5XFjIL7ZMEZLNXR9gLa3AeH9D C1Ihg1/1Zn6F3MW2hMZySg/fnLi+djDHdhLFFmy7M18r2z+LJwNeudpCM8Nx4YoaNBmN 2kUQ== X-Gm-Message-State: ALoCoQlKT0GYf4+T03gRvozzaHHE1RjKTvf2AqiS0UwlHdx9P1bnTxonSk87wkKqG/L/4A/Er+XoEFg2ovRGYweXoO5zCSodkw== X-Received: by 10.66.252.102 with SMTP id zr6mr25951082pac.66.1452991907500; Sat, 16 Jan 2016 16:51:47 -0800 (PST) Received: from [10.172.200.183] ([1.129.22.200]) by smtp.gmail.com with ESMTPSA id s19sm24230201pfs.62.2016.01.16.16.51.46 (version=TLSv1/SSLv3 cipher=OTHER); Sat, 16 Jan 2016 16:51:46 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) Subject: Re: Fortran compiler From: Anders Jensen-Waud X-Mailer: iPhone Mail (13C75) In-Reply-To: <5426FC3A-A8F7-4B24-9CAA-1A18C176A4F1@yahoo.com> Date: Sun, 17 Jan 2016 11:51:43 +1100 Cc: questions@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <9983C193-409A-40CF-9E60-CD95C530DEC1@jensenwaud.com> References: <5426FC3A-A8F7-4B24-9CAA-1A18C176A4F1@yahoo.com> To: john.haraden@yahoo.com X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 00:51:48 -0000 > On 17 Jan 2016, at 09:15, john.haraden--- via freebsd-questions wrote: >=20 > When will the base system ship with a fortran compiler? GCC is cumbersome= and requires special linking commands to form an executable file from compi= led object files. Why not resurrect the old f77? >=20 Because it is unmaintained since 2001? One could possibly patch the old lang= /f77 port, but 15 years is a long time... > Sent from my iPhone > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.or= g" From owner-freebsd-questions@freebsd.org Sun Jan 17 01:03:52 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 649DFA8305A for ; Sun, 17 Jan 2016 01:03:52 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: from mail-oi0-x232.google.com (mail-oi0-x232.google.com [IPv6:2607:f8b0:4003:c06::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 27B8717A5 for ; Sun, 17 Jan 2016 01:03:52 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: by mail-oi0-x232.google.com with SMTP id o124so147572542oia.3 for ; Sat, 16 Jan 2016 17:03:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=Tx4/9KajupDY7TbZAlpMruoqx4Q71MSNYrJdXKfQzbw=; b=oUFKvBYL8bEJWcAksWLTKMdBxYnGTqvcsV4l03zo+kVj3Fr1vuxRIar2ix4vLhkt6x 4UF+dU2yibj5tPqsynpLdZ2Qv7Lfh+H76D8dAR2k9oPqyQNXJuL+NXlaFNAqVbGSgnaK 9J7k7q1bfG8jZtSwILcfj2WHunPraeE90lFQ8Mp4qgWKc+MzbuTdW7wtmU/Kpquj0yKI KQJfLWMak/zWoNfK+9rRgppaIa20nn4v9/8EFps7yKbGXaSlz5ZKoaxUyyA8VNsgImDQ cjcrhAn8sLlyUb/dUqaEwxp7ObdzY7ihiCyVLg+p0GDCGegbsXYIkLT6Rtegw3lPlUyy z9gQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=Tx4/9KajupDY7TbZAlpMruoqx4Q71MSNYrJdXKfQzbw=; b=D4hZONQ3GVPDB7583i/uEDdCdtGoXueTpP1wNmGHgpUQI0xf6fpn2YZtTq0pNVXAM2 376l3q904vDIoDFb6X1Br0knUXzB50I8ou0ZvOKpIV2naOwV/fFGqOLTQ7PLcQ0EYzFc 9DTMkVkZikKE+Ulw3LCtFHxU34wN3Sy1UkKw5MgpQH7eHEYzbMK9128f+bsto8Ic6+8u yp7+WaofEp1Ya+gddrHZIaSxYdO/y5856T9SSGYGi9PUbgUukB8T+O8U8hgz1rMIYN7o BT+znhGzQxdYJEFHHtCYIsAhio3oxTCwjy0zE7Hw9/lg3wDAf0bn93fnuSmhGpmcpSNc CmLg== X-Gm-Message-State: ALoCoQkazNj4zX9aCLCBjJR8k4zcMGkO8u/Uyn65Xd1/qZsUnAkGpAbn7Kjq47wJ5ZPc8ffTp+JuvI+iQD1Uu94Tuz9mAphPzg== X-Received: by 10.202.80.201 with SMTP id e192mr13345845oib.14.1452992631505; Sat, 16 Jan 2016 17:03:51 -0800 (PST) Received: from localhost.localdomain ([50.243.6.59]) by smtp.googlemail.com with ESMTPSA id 133sm9831595oid.5.2016.01.16.17.03.50 for (version=TLSv1/SSLv3 cipher=OTHER); Sat, 16 Jan 2016 17:03:50 -0800 (PST) Message-ID: <569AE877.3060500@gmail.com> Date: Sat, 16 Jan 2016 18:03:51 -0700 From: jd1008 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: FreeBSD Users Subject: Re: Fortran compiler References: <5426FC3A-A8F7-4B24-9CAA-1A18C176A4F1@yahoo.com> <569AD1F6.7010008@gmail.com> <569AD81B.5040804@gmail.com> In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 01:03:52 -0000 On 01/16/2016 05:04 PM, Adam Vande More wrote: > On Sat, Jan 16, 2016 at 5:54 PM, jd1008 > wrote: > > That was not truth. > > > Fortunately, reality does not bow to your reasoning ability. I stated > absolutely nothing untrue and insisting I did doesn't change that. > > It was just a nasty knee jerk response. > > > No more nasty and knee jerk than requesting "Hey, support my own > hare-brained desires which are useful to only a small fraction of > people and increase the burden on everyone but me". > > You could have simply > > > Sure, I could enable every whino idiot in their mental masturbation > quests, but I chose not too. You are free to decide your own course > of action. > > > > -- > Adam LOL!!!! I hope some moderator kicks you off of this list, which for the most part consists of knowledgeable, courteous, friendly and kind individuals. Sorry to see you are not one of them. From owner-freebsd-questions@freebsd.org Sun Jan 17 03:20:34 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D3781A85CB3 for ; Sun, 17 Jan 2016 03:20:34 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from iris.ime.usp.br (iris.ime.usp.br [143.107.45.5]) by mx1.freebsd.org (Postfix) with ESMTP id 9241E13A2 for ; Sun, 17 Jan 2016 03:20:33 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from cage0 (OTWAON234VW-LP140-05-1176444850.dsl.bell.ca [70.31.31.178]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schultz@iris.ime.usp.br) by iris.ime.usp.br (Postfix) with ESMTPSA id 1439A2900983 for ; Sun, 17 Jan 2016 01:20:21 -0200 (BRST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ime.usp.br; s=mail; t=1453000825; bh=ELvDtnj9Xgi/1UIJKwHkdh3i+9yQJi77NkKDA5nI2Pw=; h=Date:From:To:Subject:From; b=DyJnjt1FLYnZmrjLS2r99nJ26X3/2SQhDKj/foDmIEm7d7VMJRze7ARmV5QS8qJgx RX/cM8cRsncnjTfKZXW1ICCrbhcwk2qdE389ebeO7QM1HnmxhzWlYqmzy7xj+hIYTc D6zMQx6hrbJeBzXV/LmxQ9CHmd9UHFKdraLUTQz4= Date: Sun, 17 Jan 2016 03:19:23 +0000 From: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira To: freebsd-questions@freebsd.org Subject: Unexpected dependencies of graphics/libGL Message-Id: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on iris.ime.usp.br X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 03:20:34 -0000 Hello, Since the beginning of this year, graphics/libGL and friends started depending on a significant amount of software, including git and bzr. Could anyone explain why that is and whether it is possible to avoid such dependencies? Also, there is a dependency on clang and llvm from ports because of advanced features that I (and I guess many of us) do not require. I believe it has to do with the Gallium driver and OpenCL. Just a suggestion: it would be pretty nice if there were some port knobs to avoid pulling in another toolchain from ports to build software that is never run. Thank you, Lu=EDs Fernando From owner-freebsd-questions@freebsd.org Sun Jan 17 06:14:08 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 794A4A850F0 for ; Sun, 17 Jan 2016 06:14:08 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4270713CE for ; Sun, 17 Jan 2016 06:14:07 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-101-208.dynamic.qsc.de [92.195.101.208]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id BD8F23CECA; Sun, 17 Jan 2016 07:07:16 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u0H67FYS003003; Sun, 17 Jan 2016 07:07:16 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Sun, 17 Jan 2016 07:07:15 +0100 From: Polytropon To: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira Cc: freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160117070715.1c33732b.freebsd@edvax.de> In-Reply-To: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 06:14:08 -0000 On Sun, 17 Jan 2016 03:19:23 +0000, Lu=EDs Fernando Schultz Xavier da Silve= ira wrote: > Since the beginning of this year, graphics/libGL and friends started > depending on a significant amount of software, including git and bzr. > Could anyone explain why that is and whether it is possible to avoid > such dependencies? >=20 > Also, there is a dependency on clang and llvm from ports because of > advanced features that I (and I guess many of us) do not require. > I believe it has to do with the Gallium driver and OpenCL. >=20 > Just a suggestion: it would be pretty nice if there were some port > knobs to avoid pulling in another toolchain from ports to build > software that is never run. Is installing from a package an option for you? In this case only the run dependencies will be installed, the build dependencies will be left out. I can imagine that some software vendors put everything on the build dependencies list they typically find on developers' Linux systems (git to check out code, a "custom" compiler, maybe a whole document processing system for the creation of the documentation, and so on), but on FreeBSD those maybe are not needed, so using a package might not "pollute" your system with stuff you don't need. Usually a port _does_ have configuration options to avoid this, but as I said: If the maintainer considers certain software essential for building, the required stuff is not optional anymore - no matter if the programs in question are _actually being used_ or not... --=20 Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sun Jan 17 06:18:31 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3AF17A8526D for ; Sun, 17 Jan 2016 06:18:31 +0000 (UTC) (envelope-from benfell@parts-unknown.org) Received: from mail.parts-unknown.org (n4rky-1-pt.tunnel.tserv29.fmt1.ipv6.he.net [IPv6:2001:470:66:119::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 26BB1159A for ; Sun, 17 Jan 2016 06:18:31 +0000 (UTC) (envelope-from benfell@parts-unknown.org) Received: from [192.168.1.75] (unknown [50.250.218.173]) by mail.parts-unknown.org (Postfix) with ESMTPSA id A48D7596580A for ; Sat, 16 Jan 2016 22:18:30 -0800 (PST) Subject: Re: Unexpected dependencies of graphics/libGL To: freebsd-questions@freebsd.org References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> From: David Benfell Message-ID: <569B3231.9010400@parts-unknown.org> Date: Sat, 16 Jan 2016 22:18:25 -0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <20160117070715.1c33732b.freebsd@edvax.de> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="V9sOQOFpfWkGjGiNj2NvXqO06KJiB6V8l" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 06:18:31 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --V9sOQOFpfWkGjGiNj2NvXqO06KJiB6V8l Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 01/16/2016 10:07 PM, Polytropon wrote: > If the maintainer considers certain software essential for building, > the required stuff is not optional anymore - no matter if the programs > in question are _actually being used_ or not...=20 =46rom my very brief time messing with RPMs, a distinction was made between build dependencies and execution dependencies. I'm not clear here whether FreeBSD's pkg system makes that distinction but it might be a useful one to make. --=20 David Benfell, Ph.D. benfell@parts-unknown.org --V9sOQOFpfWkGjGiNj2NvXqO06KJiB6V8l Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJWmzI2AAoJEOoml8Ul4D7Wp5oP/0Y3IdBcVpyX356zPYDL7xFd TdYNzr+vjKMBYUJx5gRa7+RQyqKKHClJ2yb+99qp9ofbc0yccCalvCtkMkbfFHSc lBk/vgqEU2iWpsZ5lMlf8xfYnWkKtLVu6iregZVPTp2wBcmGMHnzaUHpVw+eS7KD q+I6A+Lww10uy7/DgQ8njvlo3CQENUQ/6aCFbMYK5TrYdrY5fL7yZmDw6ieD7Kho pRf8jpm7nbLuQQmXuAwMJ6gJHl2Qmwu8eCi6H4q1n+3hfgFJuExOYqkkkp92W94D 8pU8DP1BRDqISD7QECCMEx/pGLTQzjk5/Kx2BD3axr13pNo/oC0zWNKLPX1bhVwg ybd6A+ejZjT9ABEGJqVTSwaWiAiEmfNqYjLvyWDtkbtp5DjuigcKXkDrX59hrtz/ 3wnq3MiuCberjJhTgAZi0ihBHJdn32nVrOiJGc4o6nIQW0eNsJqQPUvXudXaoRmQ vXHYIM/rls/+KY7CZkjXmjJUJ7/omx0Sd2cKNdxATA8bEps4r6gY+KmLaiPSRmeN BYMBQgOMlw5Vx3MkZQnLGb28Up0tX8A7xXyaYeFz4F8V/NCWTSOkKdziky91iM6g SgX0Fv0uejPYBWRXjqwUUxF6aD1Rb/9WOcUA0gl9B1to/VXNkpYaUENveWRPsLv+ rzHD7UpUk6/KQYfXum5G =mmQo -----END PGP SIGNATURE----- --V9sOQOFpfWkGjGiNj2NvXqO06KJiB6V8l-- From owner-freebsd-questions@freebsd.org Sun Jan 17 06:34:31 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 612B9A8586A for ; Sun, 17 Jan 2016 06:34:31 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2AB401C91 for ; Sun, 17 Jan 2016 06:34:30 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-101-208.dynamic.qsc.de [92.195.101.208]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 084713D05C; Sun, 17 Jan 2016 07:34:28 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u0H6YSm8001925; Sun, 17 Jan 2016 07:34:28 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Sun, 17 Jan 2016 07:34:28 +0100 From: Polytropon To: David Benfell Cc: freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160117073428.ba76224e.freebsd@edvax.de> In-Reply-To: <569B3231.9010400@parts-unknown.org> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <569B3231.9010400@parts-unknown.org> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 06:34:31 -0000 On Sat, 16 Jan 2016 22:18:25 -0800, David Benfell wrote: > On 01/16/2016 10:07 PM, Polytropon wrote: > > If the maintainer considers certain software essential for building, > > the required stuff is not optional anymore - no matter if the programs > > in question are _actually being used_ or not... > From my very brief time messing with RPMs, a distinction was made > between build dependencies and execution dependencies. I'm not clear > here whether FreeBSD's pkg system makes that distinction but it might be > a useful one to make. The FreeBSD ports collection makes the distinction between B-Deps (build dependencies) and R-Deps (run dependencies). The precompiled packages typically contain references to the run dependecies, but leave out the build dependencies which you don't need to actually _run_ the software. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sun Jan 17 11:04:19 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E1089A6D3EF for ; Sun, 17 Jan 2016 11:04:19 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 50F171E8B for ; Sun, 17 Jan 2016 11:04:18 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id u0HB47i0013910; Sun, 17 Jan 2016 22:04:08 +1100 (EST) (envelope-from smithi@nimnet.asn.au) Date: Sun, 17 Jan 2016 22:04:07 +1100 (EST) From: Ian Smith To: al plant cc: freebsd-questions@FreeBSD.org Subject: Re: help with making DVD install disc.. 11 In-Reply-To: <5697FA71.7020706@hdk5.net> Message-ID: <20160117211655.N93547@sola.nimnet.asn.au> References: <20160114171111.C93547@sola.nimnet.asn.au> <5697FA71.7020706@hdk5.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 11:04:20 -0000 On Thu, 14 Jan 2016 09:43:45 -1000, al plant wrote: > Aloha and Thanks Ian, > > My biggest problem is that I only have 2 working FreeBSD Desktops (FreeBSD 8) > currently and the DVD CD had to be changed and I cant get either to work with > burncd or DVD growisofs. > I am going to change the CDR/DVD components to see if I can get one of them > to burn a good disc with FreeBSD 11 or even 10.2 . > > I got Fiber optic service here on island last year and had to change some of > my boxes to work with the new network. > > Maybe I have to wait untill the FreeBSD 11 RELEASE comes out. I get big > media and in out errors when I try to create CD or DVD. > > Any ideas appreciated. I used burncd for years for backups and it never let me down but I haven't used any optical media for ages, beyond ripping audio CDs. Well, 10.3 doesn't look far off, and at least the later RCs should have packages for the DVD hopefully, early in March. Unless you specifically need some features from 11, 10.3 should be an extended support release, and upgrading to 11 from there should be straightforward anyway. I'm planning to update my stable/9 system to 10.3 sometime after the dust settles .. http://www.freebsd.org/releases/10.3R/schedule.html Otherwise, can your boxes boot from USB memsticks? I made a version of Darren Pilgrim's dvd1_to_memstick.sh that I've used successfully a few times, if that might be helpful. My adaptation was for 8.2-RELEASE, whose makefs had no -o label option as used in 9+, so I hardwired its /etc/fstab to boot from /dev/da0a. If your boxes are at 8.4 you could check makefs(8) for that option; if it was merged to 8.[34] then Darren's script should work for you as is. One advantage of that method is that you can have it pause in the middle to add/change anything you want to the unpacked dvd1.iso contents before proceeding to make the memstick image. Of course that's all moot for boxes too old to boot from USB devices .. cheers, Ian From owner-freebsd-questions@freebsd.org Sun Jan 17 13:04:15 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6CAFCA86BCE for ; Sun, 17 Jan 2016 13:04:15 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id F08E0150E for ; Sun, 17 Jan 2016 13:04:14 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0HD4Ase062096 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Sun, 17 Jan 2016 13:04:10 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk u0HD4Ase062096 Authentication-Results: smtp.infracaninophile.co.uk/u0HD4Ase062096; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6] claimed to be liminal.local Subject: Re: Fortran compiler To: freebsd-questions@freebsd.org References: <5426FC3A-A8F7-4B24-9CAA-1A18C176A4F1@yahoo.com> From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <569B9141.803@FreeBSD.org> Date: Sun, 17 Jan 2016 13:04:01 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <5426FC3A-A8F7-4B24-9CAA-1A18C176A4F1@yahoo.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="IFIxiWNv78Kf7iMj4V5Fm1so8xOrjqMFO" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 13:04:15 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --IFIxiWNv78Kf7iMj4V5Fm1so8xOrjqMFO Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 16/01/2016 22:15, john.haraden--- via freebsd-questions wrote: > When will the base system ship with a fortran compiler? GCC is > cumbersome and requires special linking commands to form an > executable file from compiled object files. Why not resurrect the > old f77? It is unlikely that the base system will ever re-import a Fortran compiler. Fortran is not required to build the base system, nor is it a POSIX requirement, so like all other languages in that class -- many of which are of significantly greater popularity than Fortran nowadays -- you'll simply have to install it from ports. GCC's command line for linking objects into an executable can be complicated, but that's not significantly different compared to c or c++ programs and not significantly different when compiling using the LLVM toolchain. Much of that complexity only occurs when linking against large external bodies of code, like QT or Gnome. Cheers, Matthew --IFIxiWNv78Kf7iMj4V5Fm1so8xOrjqMFO Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2 iQJ8BAEBCgBmBQJWm5FKXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATFj4QAIELdhToKA6MVKT62AqUEC2z 0XKDmwi7BTdyXBe7C4kWnLZQeC7v44m6mo41U8whzaPJO4i3jzXDlQ1Yji6NNZbO jgGVyYmcoyptxDS22U9cCSLRPvFbYgF0j+I0Qbr6vKjMxN0bkN4/9QDsi4PRWAn/ 8AyyN4IzmPPcO9KZOAS+FQ14n5GGKpkx7Pxail+iK+u7YIxxhXtqZctWxgsIx0iI E4nGjfy1/zUCtHxOCR6kCFkovpBvxsO2MxkrlMHcXQ91CGGQ4WlHqi/xx4PiG8eF ZGJLUQAa8jmTjJ+FNz6yeDA0y3Gw5eJYM5i+TamKS1ynd2tU+M6962Rly1lgRkIm U8PfqEMm6zFKNHE139qaoDwJb4mg8NVKADBgKU9feEEk9FUklqSNY15kzxm+aaGB Q6mVT14WEnW2ItZcpq9LeCmYogUPFpF4cFyj6XtyLVbL4PL1Y+/6gjF0jtUs3beW 3Z9CK1U6f/GUaidxsu9tPYH3ldkc8v6YV6CiCWOl4o/JMzkSLBoqlMvObMH3f2Az 6oBT+uvodzsuxjKwPXs6XV47ge7s5KlsOVctEJAOHO7rC7HviGpxokRnpgZjKDe0 FD5NO/4SD3zWY7br9tlP2SB5YfmS/+SvntSMqrp0ISTWuy6Zz1UxJHQU8ss3qvxT WdDRtjQZR+XcbzOAxvSl =vOmA -----END PGP SIGNATURE----- --IFIxiWNv78Kf7iMj4V5Fm1so8xOrjqMFO-- From owner-freebsd-questions@freebsd.org Sun Jan 17 15:41:18 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1EEF7A865C9 for ; Sun, 17 Jan 2016 15:41:18 +0000 (UTC) (envelope-from g8kbvdave@googlemail.com) Received: from mail-wm0-x234.google.com (mail-wm0-x234.google.com [IPv6:2a00:1450:400c:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id B0BC11136 for ; Sun, 17 Jan 2016 15:41:17 +0000 (UTC) (envelope-from g8kbvdave@googlemail.com) Received: by mail-wm0-x234.google.com with SMTP id u188so76234641wmu.1 for ; Sun, 17 Jan 2016 07:41:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type:content-transfer-encoding; bh=sKhdTDiFpVshbB6YN2umpqGFWfzSX9BkBJMG/+8UeXI=; b=j4Mhb0HSGFHzAg5rNmpgLWdopqC+ksfrdfgrTtm0gGJ2/EVcwFt4hmBjKGa0WDzwiq zYUzH55lzO/IQDWPz+uYVUJVSQdEseKmTclmrSCsNGOB4cGjTEzZheRnGLRJLSnZOzm0 tI7yJqPAUq8EBFfhXybSIIt/6TCRxsd5VctOo+qs1xb8Uwn2wRgDGLrn1X7SCtNz/8qq fJQfF7aB6HzffsMTSGl70OA2JYqIevxCjFSFEMtkTerJCJxrrV5TpAqLIb8+qgy+PqPg 0oFAaxC9666fuiV6q65MRZr2DRhQhiOezvGSTfr0Y/B+3EAestWCy/6LbBPn0Bqrh0Bt TbYQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type :content-transfer-encoding; bh=sKhdTDiFpVshbB6YN2umpqGFWfzSX9BkBJMG/+8UeXI=; b=hP+i7x3wluqpXdmjp9hWkTLrFzfzZxxjUr/1h2kl5/kq/ArasrfiCrtbox1ROMj4G2 zMbsJfEhU8iT1K3m5d76/Phb43ysZHXR1dD8YpTsKOCY9dq9vL+lH28KaprbRzwLh/Oe 6qsXx2nGRfrnnSh3f2s0ECRaDBvvshn0iUjVBPM34WDWmZzV1SyhvaJiv9+A1Xuhrb5v KghS9+/vdF+fBdtIV7QHEmzhy5XvSmDsGkLvT2GzfIOSAKikVbJnNWuWh611ru6zOJ28 Vaw1N0ihhYheBEad1Ip9x1BncNgPO8m+zYsdcnWNSY0mRnxRhLtnaDrHKB4nYYfWtQ5N 5OHA== X-Gm-Message-State: AG10YORobE+HuSkntYrNpNS5qPM4Dfk7fxV2cJKVr7Q8N+s0NwtThie82g6wqwi/XLFCsA== X-Received: by 10.194.179.106 with SMTP id df10mr7948871wjc.173.1453045275783; Sun, 17 Jan 2016 07:41:15 -0800 (PST) Received: from [192.168.1.101] ([212.225.125.94]) by smtp.gmail.com with ESMTPSA id t199sm11662143wmt.23.2016.01.17.07.41.14 for (version=TLSv1/SSLv3 cipher=OTHER); Sun, 17 Jan 2016 07:41:15 -0800 (PST) Subject: Re: freebsd-questions Digest, Vol 606, Issue 7 To: freebsd-questions@freebsd.org References: From: Dave B Message-ID: <569BB61A.6070009@googlemail.com> Date: Sun, 17 Jan 2016 15:41:14 +0000 User-Agent: Mozilla/5.0 (X11; Linux i686; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 15:41:18 -0000 On 17/01/16 12:00, freebsd-questions-request@freebsd.org wrote: > On Sat, January 16, 2016 1:57 am, Anders Jensen-Waud wrote: >> >On Sat, Jan 9, 2016 at 4:12 PM, Eleonora Marchioretti via freebsd-doc < >> >freebsd-doc@freebsd.org> wrote: >> > >>> >>Hi >>> >>I would like to know if it is possible to install UNIX (not Linux) on a >>> >>laptop that has already a Windows OS and if you have instructions to do >>> >>it.Thank you in advance. >>> >>Best regardsEleonora >>> >>_______________________________________________ >>> >>freebsd-doc@freebsd.org mailing list >>> >>https://lists.freebsd.org/mailman/listinfo/freebsd-doc >>> >>To unsubscribe, send any mail to"freebsd-doc-unsubscribe@freebsd.org" >>> >> >> > >> >If you don't want to replace Windows (that is, do dual boot), an option >> >is >> >to first repartition the disk using Gparted or similar from a usb based >> >Linux distribution such as Knoppix. Install Knoppix onto a USB drive, boot >> >from it and start Gparted to resize your Windows partition and make space >> >for the FreeBSD partition. Remember to back up your data before doing >> >this. >> > >> >(Seehttp://gparted.org/faq.php#faq-7) > Alternatively, you can make free space using Windows Disk management tool: > shrink Windows main partition. The rest: as Andreas describes. > > Valeri > >> > >> >Once done, start the FreeBSD install as usual, installing to the free >> >space >> >on your drive. You will need to install the FreeBSD boot loader to the MBR >> >in order to do multi-boot. >> > >> >Cheers >> > >> >Anders >> >_______________________________________________ >> >freebsd-questions@freebsd.org mailing list >> >https://lists.freebsd.org/mailman/listinfo/freebsd-questions >> >To unsubscribe, send any mail to >> >"freebsd-questions-unsubscribe@freebsd.org" >> > Hi. Windows will not let you shrink the partition it's booted and running from! But using a live boot 'nix CD or USB stick and Gparted does the trick nicely. TAKE CARE however, NOT to alter the location of the Windows partition, or it is likely to become un-bootable. Also, do not remove/alter any OEM system backup partition that may already exist, for the same reason. (Don't ask how I found THAT out!) You should also check the machine BIOS settings, and turn off any UEFI boot security etc. And backup any important data from the Windows system first, "Just in case!"... Then, it should be relatively trivial to install whatever flavor of 'nix you want as a dual boot option. You may be able to re-enable any BIOS UEFI settings, once you've got it all stable again. This machine I'm using now, has Mint 17 (default) and Windows 7 Home Premium 64 bit (as an option) and works very well, in either mode. No reason AFIK you can't do that with FreeBSD as your 'nix choice. Regards. Dave B. From owner-freebsd-questions@freebsd.org Sun Jan 17 16:21:39 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3ACB8A85203 for ; Sun, 17 Jan 2016 16:21:39 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from iris.ime.usp.br (iris.ime.usp.br [143.107.45.5]) by mx1.freebsd.org (Postfix) with ESMTP id EC9DB115F for ; Sun, 17 Jan 2016 16:21:38 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from cage0 (OTWAON234VW-LP140-05-1176444850.dsl.bell.ca [70.31.31.178]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schultz@iris.ime.usp.br) by iris.ime.usp.br (Postfix) with ESMTPSA id 54E1B2900A71; Sun, 17 Jan 2016 14:21:31 -0200 (BRST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ime.usp.br; s=mail; t=1453047695; bh=tt3OG6FSSasFEwmoH+xL9568vJ4sCc8XdBBUw4aAceM=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=STi1x60hkoGIuon99ZrcI7lZsI/WDTupl51EiX6TF+2erHgQCCkjKilk3zNQoVVtD ShMX90oWoBU+lMiUvPrqD9s2DP3RqgtT7QXYlFf56DJgF9BEE+jPVY/YJkW2hQVtg+ tvW6OB9Q1vNnlMM7QdUxQKSEG88tXNmSiY2MKHfM= Date: Sun, 17 Jan 2016 16:20:18 +0000 From: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira To: Polytropon Cc: freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> In-Reply-To: <20160117070715.1c33732b.freebsd@edvax.de> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on iris.ime.usp.br X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 16:21:39 -0000 Hi, To me, using ports is a must. What I have been doing is not updating the offending ports. This is not only annoying but also not a proper solution. I think I will send an email to the maintainer of the port. Thank you, Lu=EDs Fernando On Sun, 17 Jan 2016 07:07:15 +0100 Polytropon wrote: > On Sun, 17 Jan 2016 03:19:23 +0000, Lu=EDs Fernando Schultz Xavier da Sil= veira wrote: > > Since the beginning of this year, graphics/libGL and friends started > > depending on a significant amount of software, including git and bzr. > > Could anyone explain why that is and whether it is possible to avoid > > such dependencies? > >=20 > > Also, there is a dependency on clang and llvm from ports because of > > advanced features that I (and I guess many of us) do not require. > > I believe it has to do with the Gallium driver and OpenCL. > >=20 > > Just a suggestion: it would be pretty nice if there were some port > > knobs to avoid pulling in another toolchain from ports to build > > software that is never run. >=20 > Is installing from a package an option for you? In this case > only the run dependencies will be installed, the build dependencies > will be left out. I can imagine that some software vendors put > everything on the build dependencies list they typically find > on developers' Linux systems (git to check out code, a "custom" > compiler, maybe a whole document processing system for the creation > of the documentation, and so on), but on FreeBSD those maybe are > not needed, so using a package might not "pollute" your system > with stuff you don't need. >=20 > Usually a port _does_ have configuration options to avoid this, > but as I said: If the maintainer considers certain software > essential for building, the required stuff is not optional > anymore - no matter if the programs in question are _actually > being used_ or not... >=20 >=20 >=20 > --=20 > Polytropon > Magdeburg, Germany > Happy FreeBSD user since 4.0 > Andra moi ennepe, Mousa, ... >=20 From owner-freebsd-questions@freebsd.org Sun Jan 17 17:38:51 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 20737A86D23 for ; Sun, 17 Jan 2016 17:38:51 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: from mail-ob0-x22e.google.com (mail-ob0-x22e.google.com [IPv6:2607:f8b0:4003:c01::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D709B1027 for ; Sun, 17 Jan 2016 17:38:50 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: by mail-ob0-x22e.google.com with SMTP id is5so146403188obc.0 for ; Sun, 17 Jan 2016 09:38:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=mxHLYJoLu5ntKgaVGnbZ/bpvBSE7en8cIrjIsJ3P6ys=; b=WbXZGtnGhwj63j+Wun6C1AOh9s/DGbZdaNTpf2tw4CRzJ/y5vaPnKLSszNtpJx3EUz H8RqRdWzeJvUaIx1hmeuA5ACX8miZ+XnhjM03uKsJ1DyJoV7PLn93c5tFk+3GqQWwhNr U6h+E51Xmo0Lk81bTTEEULt75vEsxzDcXmfj6Wqo5mEaD3VuJOAaxrlfTCqFHLPpB5Wi w7uY5E7fQ0x/p0izI2WHC64jhrbYvrKqiyepPDka9BlusJKxaIgacEN/mIR3jPPbPqaI yhB+AyQveHxdgTM9Qkj+SAkWMTqCMWOm1MvJmwFoYhv/bkVlf4jX8pWtmcGu503vnreY k6DA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=mxHLYJoLu5ntKgaVGnbZ/bpvBSE7en8cIrjIsJ3P6ys=; b=Tg0yMv8MyCPp+4gV8WSh48+FczE+mdRTnYSTe24Oh46zcW9whMBy5hPBvKxkbLc9zL reIQecpgiQw5n4NNpZpY1tXq3O+xftB+F6HKeprHARKlYyDtF60Ade2BF3nFicmuxq3T d8M3IlGD681ahKMWfF0tieEGAw3bHACf/FJhvtUm6ZAvo8hpvsFBOkNC+dB3Ll5wjna6 Smr6/huPjb8S4s3oXBQLVIuL67y++N/pVA1KbfVcUB95jUTwi39dPz40/jwT9Kt0YkvO yA9XygvD9nXmfR5qjKVkMlMlHDmy0IBOGpjMrfbOt4bsUKzdR18bZKAc39SN2oevcx4s KFnQ== X-Gm-Message-State: ALoCoQmk7qBNm16emWN4l9BGS15JbztHXp1TPzPeZyqj2e8G3FNarg9xQGZYFm1j+8w25hzpV3L1Yrxyxw/fU6aWTsokIxBjCw== X-Received: by 10.60.43.170 with SMTP id x10mr17000894oel.68.1453052330260; Sun, 17 Jan 2016 09:38:50 -0800 (PST) Received: from localhost.localdomain ([50.243.6.59]) by smtp.googlemail.com with ESMTPSA id o125sm11228426oif.0.2016.01.17.09.38.48 for (version=TLSv1/SSLv3 cipher=OTHER); Sun, 17 Jan 2016 09:38:49 -0800 (PST) Message-ID: <569BD1AA.3040102@gmail.com> Date: Sun, 17 Jan 2016 10:38:50 -0700 From: jd1008 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: Fortran compiler References: <5426FC3A-A8F7-4B24-9CAA-1A18C176A4F1@yahoo.com> <569B9141.803@FreeBSD.org> In-Reply-To: <569B9141.803@FreeBSD.org> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 17:38:51 -0000 On 01/17/2016 06:04 AM, Matthew Seaman wrote: > On 16/01/2016 22:15, john.haraden--- via freebsd-questions wrote: >> When will the base system ship with a fortran compiler? GCC is >> cumbersome and requires special linking commands to form an >> executable file from compiled object files. Why not resurrect the >> old f77? > It is unlikely that the base system will ever re-import a Fortran > compiler. Fortran is not required to build the base system, nor is it a > POSIX requirement, so like all other languages in that class -- many of > which are of significantly greater popularity than Fortran nowadays -- > you'll simply have to install it from ports. Well, one can also argue that there are tons of packages on FreeBSD that have nothing to do with building or maintaining the base system, but are desired by users, and are included. My suspicion is that if there is one person who has raised his/her voice for including something, then there are possibly many silent people who will not make their wishes known online, who would like the inclusion of that package. > > GCC's command line for linking objects into an executable can be > complicated, but that's not significantly different compared to c or c++ > programs and not significantly different when compiling using the LLVM > toolchain. Much of that complexity only occurs when linking against > large external bodies of code, like QT or Gnome. > > Cheers, > > Matthew > From owner-freebsd-questions@freebsd.org Sun Jan 17 18:16:38 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3E9EFA86AE2 for ; Sun, 17 Jan 2016 18:16:38 +0000 (UTC) (envelope-from steve@sohara.org) Received: from uk1mail2513.mymailbank.co.uk (UK1MAIL2513-PERMANET.IE.mymailbank.co.uk [217.69.47.44]) by mx1.freebsd.org (Postfix) with ESMTP id B16B319F1 for ; Sun, 17 Jan 2016 18:16:36 +0000 (UTC) (envelope-from steve@sohara.org) Received: from smtp.lan.sohara.org (UnknownHost [88.151.27.41]) by uk1mail2513-d.mymailbank.co.uk with SMTP; Sun, 17 Jan 2016 18:10:34 +0000 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.85 (FreeBSD)) (envelope-from ) id 1aKrn8-000KkQ-4F for freebsd-questions@freebsd.org; Sun, 17 Jan 2016 18:11:06 +0000 Date: Sun, 17 Jan 2016 18:11:05 +0000 From: Steve O'Hara-Smith To: freebsd-questions@freebsd.org Subject: Re: Fortran compiler Message-Id: <20160117181105.9d6b192ad73c88e6e82b91e7@sohara.org> In-Reply-To: <569BD1AA.3040102@gmail.com> References: <5426FC3A-A8F7-4B24-9CAA-1A18C176A4F1@yahoo.com> <569B9141.803@FreeBSD.org> <569BD1AA.3040102@gmail.com> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.29; amd64-portbld-freebsd10.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 18:16:38 -0000 On Sun, 17 Jan 2016 10:38:50 -0700 jd1008 wrote: > On 01/17/2016 06:04 AM, Matthew Seaman wrote: > > It is unlikely that the base system will ever re-import a Fortran > > compiler. Fortran is not required to build the base system, nor is it a > > POSIX requirement, so like all other languages in that class -- many of > > which are of significantly greater popularity than Fortran nowadays -- > > you'll simply have to install it from ports. > Well, one can also argue that there are tons of packages on FreeBSD > that have nothing to do with building or maintaining the base system, > but are desired by users, and are included. There are many packages but they are not in the base system as f77 once was. In FreeBSD there is a strong distinction between the base system and the ports. Roughly speaking the base system contains only what it must for POSIX, tradition and self hosting, anything else goes into the ports. The tradition argument is weaker, once the games were in the base system now they're a port. > My suspicion is that if there is one person who has raised his/her voice > for including something, then there are possibly many > silent people who will not make their wishes known online, who would > like the inclusion of that package. Having a package is less of an issue - all it really needs is a maintainer for the port who will keep it up to date with upstream and make sure it builds in each new version of FreeBSD. If nobody cares enough to do that then eventually the port will be removed (which appears to have happened to the f77 port). There will only be a usable f77 port if someone steps up and does the work to make it happen. That person is only likely to be found among the people who want it. Anyone is free to do so, nobody should expect anyone else to do it. That is the nature of open software. -- Steve O'Hara-Smith From owner-freebsd-questions@freebsd.org Sun Jan 17 21:02:58 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BB65FA85247 for ; Sun, 17 Jan 2016 21:02:58 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 83D6B19CE for ; Sun, 17 Jan 2016 21:02:58 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-101-208.dynamic.qsc.de [92.195.101.208]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx02.qsc.de (Postfix) with ESMTPS id 7C66424CD9; Sun, 17 Jan 2016 22:02:49 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u0HL2lU4003077; Sun, 17 Jan 2016 22:02:48 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Sun, 17 Jan 2016 22:02:47 +0100 From: Polytropon To: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira Cc: freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160117220247.69e6774f.freebsd@edvax.de> In-Reply-To: <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 21:02:58 -0000 On Sun, 17 Jan 2016 16:20:18 +0000, Lu=EDs Fernando Schultz Xavier da Silve= ira wrote: > Hi, >=20 > To me, using ports is a must. Okay, so pkg is not an option here. > What I have been doing is not updating the offending ports. > This is not only annoying but also not a proper solution. > I think I will send an email to the maintainer of the port. I think this is a good idea. The port maintainer should differentiate more precisely between B-Deps and R-Deps, and when dependencies aren't needed for actually running the program, they shouldn't be there in the first place. Selectable port options are a comfortable way to deal with this problem. --=20 Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sun Jan 17 22:31:04 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3E71FA86F19 for ; Sun, 17 Jan 2016 22:31:04 +0000 (UTC) (envelope-from noc@hdk5.net) Received: from relay10.netenterprise.net (relay10.netenterprise.net [66.180.133.99]) by mx1.freebsd.org (Postfix) with ESMTP id 03DED1C51 for ; Sun, 17 Jan 2016 22:31:03 +0000 (UTC) (envelope-from noc@hdk5.net) X-Envelope-From: noc@hdk5.net X-Envelope-To: freebsd-questions@FreeBSD.org Received: From imail5.netenterprise.net (64.29.90.135) by relay10.netenterprise.net (MAILFOUNDRY) id 8er07L1qEeWjYwAl; Sun, 17 Jan 2016 22:37:53 -0000 (GMT) Received: from ponolei.intra.net [72.235.61.32] by IMAIL5.netenterprise.net with ESMTP (SMTPD-12.5.3.93) id 991a000586dcc540; Sun, 17 Jan 2016 12:30:55 -1000 Message-ID: <569C1621.4030404@hdk5.net> Date: Sun, 17 Jan 2016 12:30:57 -1000 From: al plant User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.11) Gecko/20071128 FreeBSD/i386 SeaMonkey/1.1.7 MIME-Version: 1.0 To: Ian Smith CC: freebsd-questions@FreeBSD.org Subject: Re: help with making DVD install disc.. 11 References: <20160114171111.C93547@sola.nimnet.asn.au> <5697FA71.7020706@hdk5.net> <20160117211655.N93547@sola.nimnet.asn.au> In-Reply-To: <20160117211655.N93547@sola.nimnet.asn.au> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jan 2016 22:31:04 -0000 Ian Smith wrote: > On Thu, 14 Jan 2016 09:43:45 -1000, al plant wrote: > > Aloha and Thanks Ian, > > > > My biggest problem is that I only have 2 working FreeBSD Desktops (FreeBSD 8) > > currently and the DVD CD had to be changed and I cant get either to work with > > burncd or DVD growisofs. > > I am going to change the CDR/DVD components to see if I can get one of them > > to burn a good disc with FreeBSD 11 or even 10.2 . > > > > I got Fiber optic service here on island last year and had to change some of > > my boxes to work with the new network. > > > > Maybe I have to wait untill the FreeBSD 11 RELEASE comes out. I get big > > media and in out errors when I try to create CD or DVD. > > > > Any ideas appreciated. > > I used burncd for years for backups and it never let me down but I > haven't used any optical media for ages, beyond ripping audio CDs. > > Well, 10.3 doesn't look far off, and at least the later RCs should have > packages for the DVD hopefully, early in March. Unless you specifically > need some features from 11, 10.3 should be an extended support release, > and upgrading to 11 from there should be straightforward anyway. I'm > planning to update my stable/9 system to 10.3 sometime after the dust > settles .. http://www.freebsd.org/releases/10.3R/schedule.html > > Otherwise, can your boxes boot from USB memsticks? I made a version > of Darren Pilgrim's dvd1_to_memstick.sh > that I've used successfully a few times, if that might be helpful. > > My adaptation was for 8.2-RELEASE, whose makefs had no -o label option > as used in 9+, so I hardwired its /etc/fstab to boot from /dev/da0a. > If your boxes are at 8.4 you could check makefs(8) for that option; if > it was merged to 8.[34] then Darren's script should work for you as is. > > One advantage of that method is that you can have it pause in the middle > to add/change anything you want to the unpacked dvd1.iso contents before > proceeding to make the memstick image. > > Of course that's all moot for boxes too old to boot from USB devices .. > > cheers, Ian > > > Thanks Ian, I'll look into trying that. I appreciate your help and ideas. ~ Al Plant - Honolulu, Hawaii - Phone: 808-284-2740 ~ Supporting FreeBSD - UNIX Computer O/S email: noc@hdk5.net email: alplant.att.net ."All that's really worth doing is what we do for others" - Lewis Carrol From owner-freebsd-questions@freebsd.org Mon Jan 18 00:24:48 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8DC3CA85309 for ; Mon, 18 Jan 2016 00:24:48 +0000 (UTC) (envelope-from fbsd@brightstar.bomgardner.net) Received: from brightstar.bomgardner.net (brightstar.bomgardner.net [63.229.207.48]) by mx1.freebsd.org (Postfix) with ESMTP id 714311D14 for ; Mon, 18 Jan 2016 00:24:45 +0000 (UTC) (envelope-from fbsd@brightstar.bomgardner.net) Received: from brightstar.bomgardner.net (localhost [127.0.0.1]) by brightstar.bomgardner.net (Postfix) with ESMTP id 5FE9F17C6 for ; Sun, 17 Jan 2016 18:18:56 -0600 (CST) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Sun, 17 Jan 2016 18:18:56 -0600 From: fbsd To: FreeBSD-questions@freebsd.org Subject: FBSD 10.2, KDE 4.14.3, no microphone Message-ID: <4ccb6b031e3a3d62369e7fdb3012487a@localhost> X-Sender: fbsd@brightstar.bomgardner.net User-Agent: Roundcube Webmail/1.1.4 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jan 2016 00:24:48 -0000 Hi - On FBSD 10.2, with KDE 4.14.3, I enter system settings > Hardware > Multimedia > Audio and Video settings. Under Audio Playback I find one device "oss" and audio playback works just fine. Under Audio Recording - I see a blank screen. No devices listed. And, obviously, microphones don't work at all. From pciconv -lv: hdac0@pci0:0:27:0: class=0x040300 card=0x04f51028 chip=0x1c208086 rev=0x04 hdr=0x00 vendor = 'Intel Corporation' device = '6 Series/C200 Series Chipset Family High Definition Audio Controller' class = multimedia subclass = HDA From /boot/loader.conf: snd_hda_load="YES" Clearly I'm missing something, but I've no idea what. Can someone point me in the right direction? Thanks for the help (past and present). Gene From owner-freebsd-questions@freebsd.org Mon Jan 18 01:25:02 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 28714A86733 for ; Mon, 18 Jan 2016 01:25:02 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id E55A0123E for ; Mon, 18 Jan 2016 01:25:01 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-101-208.dynamic.qsc.de [92.195.101.208]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id B65A93CEB1; Mon, 18 Jan 2016 02:24:57 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u0I1OuKp004226; Mon, 18 Jan 2016 02:24:56 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Mon, 18 Jan 2016 02:24:56 +0100 From: Polytropon To: fbsd Cc: FreeBSD-questions@freebsd.org Subject: Re: FBSD 10.2, KDE 4.14.3, no microphone Message-Id: <20160118022456.b52e7c86.freebsd@edvax.de> In-Reply-To: <4ccb6b031e3a3d62369e7fdb3012487a@localhost> References: <4ccb6b031e3a3d62369e7fdb3012487a@localhost> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jan 2016 01:25:02 -0000 On Sun, 17 Jan 2016 18:18:56 -0600, fbsd wrote: > Hi - > > On FBSD 10.2, with KDE 4.14.3, I enter system settings > Hardware > > Multimedia > Audio and Video settings. > > Under Audio Playback I find one device "oss" and audio playback works > just fine. > Under Audio Recording - I see a blank screen. No devices listed. And, > obviously, microphones don't work at all. > > From pciconv -lv: > > hdac0@pci0:0:27:0: class=0x040300 card=0x04f51028 chip=0x1c208086 > rev=0x04 hdr=0x00 > vendor = 'Intel Corporation' > device = '6 Series/C200 Series Chipset Family High Definition > Audio Controller' > class = multimedia > subclass = HDA > > From /boot/loader.conf: > > snd_hda_load="YES" > > > Clearly I'm missing something, but I've no idea what. > Can someone point me in the right direction? Check the "low level" functionality of the microphone, for example like this: % mixer Mixer vol is currently set to 85:85 Mixer pcm is currently set to 45:45 Mixer line is currently set to 100:100 Mixer mic is currently set to 0:0 <--- this Mixer cd is currently set to 0:0 Mixer rec is currently set to 100:100 Mixer igain is currently set to 97:97 Mixer monitor is currently set to 0:0 Recording source: line <--- and this If you system supports more than one mixer (check "ls /dev/mixer*"), you can use -f to specify which mixer should be listed. See "man mixer" for details. Play with the levels and check if the microphone is working. Note that it's possible that there are two or three different mixers which support the microphone input. In X, there are several mixer programs that can be used, even inside KDE. I think the "aumix" port provides such a mixer that you can use as an alternative to the KDE build-in mixer. On KDE, you'll usually find the "abstraction dependency library layer cake of platform interfaces", so there are many layers involved (OSS, maybe ALSA, Phonon, who knows). Many "moving parts" where things can go wrong... :-( -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Mon Jan 18 18:19:29 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 78510A8368F for ; Mon, 18 Jan 2016 18:19:29 +0000 (UTC) (envelope-from bah@bananmonarki.se) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id EFACF1D62 for ; Mon, 18 Jan 2016 18:19:26 +0000 (UTC) (envelope-from bah@bananmonarki.se) Received: from [10.0.0.3] (testbox.usenet4all.se [10.0.0.3]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id u0II1vut012120 for ; Mon, 18 Jan 2016 19:01:58 +0100 (CET) (envelope-from bah@bananmonarki.se) Subject: Re: FBSD 10.2, KDE 4.14.3, no microphone To: freebsd-questions@freebsd.org References: <4ccb6b031e3a3d62369e7fdb3012487a@localhost> From: Bernt Hansson Message-ID: <569D289B.8010307@bananmonarki.se> Date: Mon, 18 Jan 2016 19:02:03 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <4ccb6b031e3a3d62369e7fdb3012487a@localhost> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jan 2016 18:19:29 -0000 On 2016-01-18 01:18, fbsd wrote: > Hi - > > On FBSD 10.2, with KDE 4.14.3, I enter system settings > Hardware > > Multimedia > Audio and Video settings. > > Under Audio Playback I find one device "oss" and audio playback works > just fine. > Under Audio Recording - I see a blank screen. No devices listed. And, > obviously, microphones don't work at all. > > From pciconv -lv: > > hdac0@pci0:0:27:0: class=0x040300 card=0x04f51028 chip=0x1c208086 > rev=0x04 hdr=0x00 > vendor = 'Intel Corporation' > device = '6 Series/C200 Series Chipset Family High Definition > Audio Controller' > class = multimedia > subclass = HDA > > From /boot/loader.conf: > > snd_hda_load="YES" > > > Clearly I'm missing something, but I've no idea what. > Can someone point me in the right direction? > > Thanks for the help (past and present). > Gene You can try sysctl hw.snd.default_unit=0-to any number. To get my mic working sysctl hw.snd.default_unit=1 ls /dev/mix* /dev/mixer0 /dev/mixer1 /dev/mixer2 /dev/mixer3 Choose wisely. From owner-freebsd-questions@freebsd.org Mon Jan 18 22:02:32 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7D4A7A87C6C for ; Mon, 18 Jan 2016 22:02:32 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 45C181BF3 for ; Mon, 18 Jan 2016 22:02:31 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-101-208.dynamic.qsc.de [92.195.101.208]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 9DA743CE4D; Mon, 18 Jan 2016 23:02:21 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u0IM2KVe002063; Mon, 18 Jan 2016 23:02:20 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Mon, 18 Jan 2016 23:02:20 +0100 From: Polytropon To: kpneal@pobox.com Cc: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira , freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160118230220.32a54a6c.freebsd@edvax.de> In-Reply-To: <20160118161235.GA92637@neutralgood.org> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jan 2016 22:02:32 -0000 On Mon, 18 Jan 2016 11:12:35 -0500, kpneal@pobox.com wrote: > On Sun, Jan 17, 2016 at 10:02:47PM +0100, Polytropon wrote: > > On Sun, 17 Jan 2016 16:20:18 +0000, Lu=EDs Fernando Schultz Xavier da S= ilveira wrote: > > > Hi, > > >=20 > > > To me, using ports is a must. > >=20 > > Okay, so pkg is not an option here. >=20 > I swear by Poudriere. It does all the builds in jails and then presents > a package repository understood by pkg. This gets me packages and all the > R-deps but I never have to install any of the B-deps. As soon as you're going to build from source and have non-default options (which usually is the main reason not to use precompiled packages), using Poudriere is a very comfortable solution. If this results in a libGL package not requiring the installation of Git as a dependency, the problem is solved. :-) --=20 Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Mon Jan 18 23:00:16 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 66C77A87525 for ; Mon, 18 Jan 2016 23:00:16 +0000 (UTC) (envelope-from quartz@sneakertech.com) Received: from douhisi.pair.com (unknown [IPv6:2607:f440::d144:5b3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 49E201075 for ; Mon, 18 Jan 2016 23:00:16 +0000 (UTC) (envelope-from quartz@sneakertech.com) Received: from [10.2.2.1] (pool-108-49-223-195.bstnma.fios.verizon.net [108.49.223.195]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by douhisi.pair.com (Postfix) with ESMTPSA id 1B69A3F735; Mon, 18 Jan 2016 18:00:08 -0500 (EST) Message-ID: <569D6E74.2030606@sneakertech.com> Date: Mon, 18 Jan 2016 18:00:04 -0500 From: Quartz MIME-Version: 1.0 To: Polytropon CC: Yuri , FreeBSD Questions Subject: Re: "fsck -y /" keeps saying "Disk is still dirty" no matter how many times I run it References: <569017FF.9060509@rawbw.com> <20160109012909.6e9b257e.freebsd@edvax.de> In-Reply-To: <20160109012909.6e9b257e.freebsd@edvax.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jan 2016 23:00:16 -0000 Yuri- do you have soft updates AND journaling enabled? I seem to recall people repeatedly having problems with fsck stuff not working right on SU+J disks. From owner-freebsd-questions@freebsd.org Tue Jan 19 03:48:15 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2C9C1A88745 for ; Tue, 19 Jan 2016 03:48:15 +0000 (UTC) (envelope-from anders@jensenwaud.com) Received: from mail-io0-x22d.google.com (mail-io0-x22d.google.com [IPv6:2607:f8b0:4001:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 007041B43 for ; Tue, 19 Jan 2016 03:48:14 +0000 (UTC) (envelope-from anders@jensenwaud.com) Received: by mail-io0-x22d.google.com with SMTP id g73so376652433ioe.3 for ; Mon, 18 Jan 2016 19:48:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jensenwaud-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=FH80pRtMvF9W/R3eX9hx+vMG3xaA1LNJPnuovY3jQYs=; b=RyK2DMSHLqWNCTr1k58KV6173XH/lgBumdCzdKCMaYV4QwrlDzYQWXO0iAVWdwSCfA GmwF3WoHyAZ4BP8OF0qgN78FwoxLU2bQigXIuZJscdA3mTsio/Eu2fcigsTR2UxW1Zlq 5JYVliEJ9UpPxdoWV0yahAb1pPSraQKVsl7ca8Z2MuofEd7vm0DT3ObvbzEXFg4cDvHV PglkATCMRT8E+pMYGICB5HULFFKZg8xz5kJnNpntOaWBa4N/Y3ABn9OOr2LDm2RkcTqk 2PBHayAq7AtqeKt6oW9i40Y8CM994cxVt59abLSE5rKQ8Q7UrYhj1lhaoZCA5I0uAaAG nkLg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=FH80pRtMvF9W/R3eX9hx+vMG3xaA1LNJPnuovY3jQYs=; b=dsYU5qGUHj7MtYzV1rUMd0QVFUuoyBA2jgDDvOUoMCWxTgfBHHzMTM+d1t6WqN8y21 xUDiSb6Es2gFRdzOv5alps/GX8EgFy44uv740+6qzu38FL/yfPQkJ1DH0rs9p+ikERQ7 h3t+osPjpz/6qc/I6pL7JmWmc2XS5cPmGCUsoAGZLUTLs59v6ay0zR43Qc2AlgWz9jy7 22NgULHPF+rHdyst6vigsRfBfrydoi83Zgq3PE+rnLmVfbdN6Z+oYBtc8UXtvN7mOdKV v0Efc69aex8Uq6ZDDFwAK3sHhYAkcvM+3HLCGUhcTEEHzoNb4LYOn5uLKjHD30j9TVZd 5VBg== X-Gm-Message-State: ALoCoQlFBD0DnIE65qY1Vsi4bzWmlXlwXoRh5/dulpkvkFNEFzi+Qb5Oqrh3DUJ/0QVzFTd9THbpgDvhUF3c7o6G2OGXEWjX+g== MIME-Version: 1.0 X-Received: by 10.107.170.16 with SMTP id t16mr25371940ioe.95.1453175294067; Mon, 18 Jan 2016 19:48:14 -0800 (PST) Received: by 10.107.134.226 with HTTP; Mon, 18 Jan 2016 19:48:14 -0800 (PST) X-Originating-IP: [203.11.225.12] In-Reply-To: <201601141726.u0EHQLt1029367@mech-as222.men.bris.ac.uk> References: <201601141726.u0EHQLt1029367@mech-as222.men.bris.ac.uk> Date: Tue, 19 Jan 2016 14:48:14 +1100 Message-ID: Subject: Re: tcsh fg bug? From: Anders Jensen-Waud To: mexas@bris.ac.uk Cc: amvandemore@gmail.com, "freebsd-questions@freebsd.org" Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 03:48:15 -0000 On Fri, Jan 15, 2016 at 4:26 AM, Anton Shterenlikht wrote: > >From amvandemore@gmail.com Thu Jan 14 17:20:55 2016 > > > >On Thu, Jan 14, 2016 at 9:00 AM, Anton Shterenlikht > >wrote: > > > >> I'm using tcsh. > >> > >> > jobs > >> [2] + Running xpdf pap.pdf > >> [3] - Running xautolock -time 1 -locker slock > >> > fg 3 > > FWIW, you can actually skip the 'fg' part and just write '%3' to jump back into job number 3. Alas, that works for me using csh and tcsh. From owner-freebsd-questions@freebsd.org Tue Jan 19 03:50:01 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F3836A88845 for ; Tue, 19 Jan 2016 03:50:01 +0000 (UTC) (envelope-from yuri@rawbw.com) Received: from shell1.rawbw.com (shell1.rawbw.com [198.144.192.42]) by mx1.freebsd.org (Postfix) with ESMTP id E02471C3B for ; Tue, 19 Jan 2016 03:50:01 +0000 (UTC) (envelope-from yuri@rawbw.com) Received: from yuri.doctorlan.com (c-50-184-63-128.hsd1.ca.comcast.net [50.184.63.128]) (authenticated bits=0) by shell1.rawbw.com (8.15.1/8.15.1) with ESMTPSA id u0J3ntpQ040631 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Mon, 18 Jan 2016 19:49:55 -0800 (PST) (envelope-from yuri@rawbw.com) X-Authentication-Warning: shell1.rawbw.com: Host c-50-184-63-128.hsd1.ca.comcast.net [50.184.63.128] claimed to be yuri.doctorlan.com Subject: Re: "fsck -y /" keeps saying "Disk is still dirty" no matter how many times I run it To: Quartz , Polytropon References: <569017FF.9060509@rawbw.com> <20160109012909.6e9b257e.freebsd@edvax.de> <569D6E74.2030606@sneakertech.com> Cc: FreeBSD Questions From: Yuri Message-ID: <569DB264.6040007@rawbw.com> Date: Mon, 18 Jan 2016 19:49:56 -0800 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <569D6E74.2030606@sneakertech.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 03:50:02 -0000 On 01/18/2016 15:00, Quartz wrote: > Yuri- do you have soft updates AND journaling enabled? I seem to > recall people repeatedly having problems with fsck stuff not working > right on SU+J disks. Yes. Yuri From owner-freebsd-questions@freebsd.org Tue Jan 19 05:09:31 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 68F61A875B8 for ; Tue, 19 Jan 2016 05:09:31 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from iris.ime.usp.br (iris.ime.usp.br [143.107.45.5]) by mx1.freebsd.org (Postfix) with ESMTP id 25658115E for ; Tue, 19 Jan 2016 05:09:30 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from cage0 (OTWAON234VW-LP140-05-1176444850.dsl.bell.ca [70.31.31.178]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schultz@iris.ime.usp.br) by iris.ime.usp.br (Postfix) with ESMTPSA id C2DA529002B5; Tue, 19 Jan 2016 03:09:18 -0200 (BRST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ime.usp.br; s=mail; t=1453180163; bh=+2pBy8W625CQ0aHiCyHgqCbiICKjv/N62UmRXIQ5l0k=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=qkLK/CfLosM8fqDMWjnUPo4mFLsGhf0UsiStJL9H9dvOjcI8Ey5DYKO8q4Hon2jrt mcgYNVfLf4bzisuoVIPz+2bFpj075K2eAz4otYs+odm/fyLshleTiTOq+uwV2tRm3J lvGoSqiM69bAz1icQihjE7Zae9JwSs6Fw+zDdhxA= Date: Tue, 19 Jan 2016 05:08:06 +0000 From: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira To: kpneal@pobox.com Cc: Polytropon , freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> In-Reply-To: <20160118161235.GA92637@neutralgood.org> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on iris.ime.usp.br X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 05:09:31 -0000 Hi, That is a very cool idea. However, it does not make sense to me. >From a security point of view, it is not an improvement because malware in the build dependencies could still affect the results of the compilation within the jail and hence the final binaries and pkg scripts. Furthermore, theoretically if an uncessessary dependecy can break the vanilla system, it can also break it for the same reason with this trick (it is just less likely). Also, the build dependencies will be built over and over again inside the jails during updates (and there are a lot of them). So, while Poudriere is useful for building packages from the point of view of the FreeBSD infrastructure (who does not install the packages itself), it does not make sense to me for a system that will be installing the packages. On Mon, 18 Jan 2016 11:12:35 -0500 kpneal@pobox.com wrote: > On Sun, Jan 17, 2016 at 10:02:47PM +0100, Polytropon wrote: > > On Sun, 17 Jan 2016 16:20:18 +0000, Lu=EDs Fernando Schultz Xavier da S= ilveira wrote: > > > Hi, > > >=20 > > > To me, using ports is a must. > >=20 > > Okay, so pkg is not an option here. >=20 > I swear by Poudriere. It does all the builds in jails and then presents > a package repository understood by pkg. This gets me packages and all the > R-deps but I never have to install any of the B-deps. > --=20 > Kevin P. Neal http://www.pobox.com/~kpn/ >=20 > Seen on bottom of IBM part number 1887724: > DO NOT EXPOSE MOUSE PAD TO DIRECT SUNLIGHT FOR EXTENDED PERIODS OF TIME. >=20 From owner-freebsd-questions@freebsd.org Tue Jan 19 05:23:55 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 73BEEA87AC3 for ; Tue, 19 Jan 2016 05:23:55 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 350711860 for ; Tue, 19 Jan 2016 05:23:54 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-101-208.dynamic.qsc.de [92.195.101.208]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx02.qsc.de (Postfix) with ESMTPS id 02C0D24D7E; Tue, 19 Jan 2016 06:23:45 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u0J5NjfC001940; Tue, 19 Jan 2016 06:23:45 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Tue, 19 Jan 2016 06:23:45 +0100 From: Polytropon To: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira Cc: kpneal@pobox.com, freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160119062345.5402e98b.freebsd@edvax.de> In-Reply-To: <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 05:23:55 -0000 On Tue, 19 Jan 2016 05:08:06 +0000, Lu=EDs Fernando Schultz Xavier da Silve= ira wrote: > That is a very cool idea. However, it does not make sense to me. > From a security point of view, it is not an improvement because malware > in the build dependencies could still affect the results of the > compilation within the jail and hence the final binaries and pkg > scripts. But this is not different from how ports are being built in the regular ports tree: Compilation tools could be compromized or package content could be affected. The typical "make install" will generate a package which is then installed via pkg. > Furthermore, theoretically if an uncessessary dependecy can break the > vanilla system, it can also break it for the same reason with this > trick (it is just less likely). It's easier to revert a jail than a whole system. Additionally, the jail is separated from the system so no harm can be done there. > Also, the build dependencies will be built over and over again > inside the jails during updates (and there are a lot of them). This also applies to regular port usage - unless, of course, you are forcing non-standard behaviour (like keeping an old library via "pkg lock"). > So, while Poudriere is useful for building packages from the point of > view of the FreeBSD infrastructure (who does not install the packages > itself), it does not make sense to me for a system that will be > installing the packages. In this case, check "pkg lock" and "pkg unlock". Maybe a custom solution is possible for you: First lock all packages except those that you really want to be affected by an upgrade, then run "make configure" and "make install" (which, as I said, causes a "pkg install" step), and then unlock things again if you wish. If your system contains lots of software installed from ports, and you're not planning to install from packages, this is not a big problem, I think. Only the case "mixing ports and packages" is still something where you need to pay attention to several side effects. --=20 Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Tue Jan 19 06:35:56 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F34C5A88DC3 for ; Tue, 19 Jan 2016 06:35:56 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from iris.ime.usp.br (iris.ime.usp.br [143.107.45.5]) by mx1.freebsd.org (Postfix) with ESMTP id AF58F15CF for ; Tue, 19 Jan 2016 06:35:56 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from cage0 (OTWAON234VW-LP140-05-1176444850.dsl.bell.ca [70.31.31.178]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schultz@iris.ime.usp.br) by iris.ime.usp.br (Postfix) with ESMTPSA id 6A1192900243; Tue, 19 Jan 2016 04:35:49 -0200 (BRST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ime.usp.br; s=mail; t=1453185354; bh=lQPT3ULEd8D63UZaEtd0sNetToAhmGWdNx7RI8w5uzI=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=fpwnNAUNUpoFQ7DvUyQ4L1zTUbXnyN79dX6wgM3dMyyhF5JIlGW7oDjfnpf0LBHeO u/2x6Zmavik/bmLmDKNy4BVKMOD4k3W3l8aiOKYHoIpWx13jgUi00jRtsCqWXD9Dwb RjTpCv3NOiwtyzBUP6u7B2kKlPcqwVNMlaDFnmeg= Date: Tue, 19 Jan 2016 06:34:38 +0000 From: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira To: Polytropon Cc: kpneal@pobox.com, freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> In-Reply-To: <20160119062345.5402e98b.freebsd@edvax.de> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on iris.ime.usp.br X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 06:35:57 -0000 Hello, > But this is not different from how ports are being built in > the regular ports tree: Compilation tools could be compromized > or package content could be affected. The typical "make install" > will generate a package which is then installed via pkg. Indeed, it is not different, and that is my point. > It's easier to revert a jail than a whole system. Additionally, > the jail is separated from the system so no harm can be done > there. If the extra dependencies break the jail, the output packages can be malformed and, when installed, break the host system. > This also applies to regular port usage - unless, of course, > you are forcing non-standard behaviour (like keeping an old > library via "pkg lock"). I do not think so. With regular use, build dependencies are only rebuilt when updated. To be fair, I never used Poudriere and do not know how it handles this, so please disregard my comment. > In this case, check "pkg lock" and "pkg unlock". Maybe a custom > solution is possible for you: First lock all packages except > those that you really want to be affected by an upgrade, then > run "make configure" and "make install" (which, as I said, causes > a "pkg install" step), and then unlock things again if you wish. > If your system contains lots of software installed from ports, > and you're not planning to install from packages, this is not > a big problem, I think. Only the case "mixing ports and packages" > is still something where you need to pay attention to several > side effects. Indeed. I avoid mixing ports and packages. In each jail I choose one method. But for the host I prefer ports. From owner-freebsd-questions@freebsd.org Tue Jan 19 07:38:15 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 52301A883A3 for ; Tue, 19 Jan 2016 07:38:15 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id D7B3D102B for ; Tue, 19 Jan 2016 07:38:14 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0J7cANb044119 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 19 Jan 2016 07:38:10 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6] claimed to be liminal.local Subject: Re: Unexpected dependencies of graphics/libGL To: freebsd-questions@freebsd.org References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> From: Matthew Seaman Message-ID: <569DE7E2.30404@FreeBSD.org> Date: Tue, 19 Jan 2016 07:38:10 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="pot1QEuXd3hvvblmQcDG2qBdv1gQAcoCu" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 07:38:15 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --pot1QEuXd3hvvblmQcDG2qBdv1gQAcoCu Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 19/01/2016 05:08, Lu=EDs Fernando Schultz Xavier da Silveira wrote: > Also, the build dependencies will be built over and over again > inside the jails during updates (and there are a lot of them). Actually, poudriere is cleverer than that. It builds packages of all the dependencies -- build or run or otherwise --- and will install from those packages into the build jails to setup the environment for each package build. You do end up with a package repository containing all of the build dependencies as well as the run-time dependencies, but the build dependencies never get installed on your live system. Cheers, Matthew --pot1QEuXd3hvvblmQcDG2qBdv1gQAcoCu Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2 iQJ8BAEBCgBmBQJWnefiXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATqm8QAKo9f8RzOhwHQCVvltrjGGU6 rxq8+tGnDIWJmVKGg2OJEatOm4W9r26bFbJhWjZrmZMgRCSSjbl+4lYi6zIEO9jt ADDky024GavUqFypKbrX80eqI5lYhALkNGsjDu8v0xK8quL26dLQp1fDepNjB2vE EOnTIwr7mMTUl3kzQkZk00vGGYuKRqNxWJXERuo6LiWywgrMTnY8yMOS2N0CALlM 2GRVyrN/eRf6SP4r0Rk+Q/S8Hq1YSATYHDr8MvJIajcemEQfw8jroyAWjWzmLD/1 0dquyqucx4WZjJr54eCeqlnhVccLv/H5HEkkZcxH3a0QvIhJJdcJFm85CEvBJiSi pSR5RvSFjz9qq4SoMNTM4FpHkEqqVnzlkNUaDVhAUBCawFjosueHR40qatf86KKZ 8iY+C+7+F4fMiJ9glVJg98OfdpCLNHuttSDa55XbuZFPCYv0p1cH/56KU9lLjTO1 hyTvI6ORAeMterRg6eJnljIrPMwqUyT3r/YqtN+v3wTTCtS4OkNiywcPcSCQpqbe 61MB8E726lqrrTglFTFV1cMQEnYLyr9EjzeQOjaTC/FLzSGi1OFtATD+zPr5p26n mrATm5Fuyt2q2Szpgpq71UnCYPNol3j4DZDwrgmloSB2gg2ZCrHwc6uVnXVdKRf4 nKjtrosFurlhg6eN8kB2 =VpfB -----END PGP SIGNATURE----- --pot1QEuXd3hvvblmQcDG2qBdv1gQAcoCu-- From owner-freebsd-questions@freebsd.org Tue Jan 19 07:53:19 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BBD04A88938 for ; Tue, 19 Jan 2016 07:53:19 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 44AFB1956 for ; Tue, 19 Jan 2016 07:53:19 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0J7rH5u044454 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 19 Jan 2016 07:53:17 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6] claimed to be liminal.local Subject: Re: Unexpected dependencies of graphics/libGL To: freebsd-questions@freebsd.org References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <569DEB6C.5020109@FreeBSD.org> Date: Tue, 19 Jan 2016 07:53:16 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="mPRvjGbApSGsGJScR9rr8qknkMWKN4P7V" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 07:53:19 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --mPRvjGbApSGsGJScR9rr8qknkMWKN4P7V Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 19/01/2016 06:34, Lu=EDs Fernando Schultz Xavier da Silveira wrote: > Indeed. I avoid mixing ports and packages. In each jail I choose one > method. But for the host I prefer ports. Actually, it is no big deal to mix ports and packages, *so long as they are built from compatible ports trees*. That means similar ports tree versions, make.conf settings and port options. None of those has to be identical, but the more changes you introduce along those lines the greater the chance of problems. One useful way of working is to make poudriere use /usr/ports as it's default set of ports, eg: % poudriere ports -l PORTSTREE METHOD TIMESTAMP PATH default svn 2016-01-18 16:40:49 /usr/ports and make poudriere and direct compilation use the same options settings: % ls -la /usr/local/etc/poudriere.d/options lrwxr-xr-x 1 root wheel 13 Dec 24 2012 /usr/local/etc/poudriere.d/options@ -> /var/db/ports and synchronize the contents of /etc/make.conf and /usr/local/etc/poudriere.d/make.conf (Note: if you use package sets or some of the other more advanced poudriere options, you may need to use some different filenames under /usr/local/etc/poudriere.d -- it's all fairly obvious in practice though.= ) With this setup, you can do an ad-hoc build of a port if you need it, and be confident that it will interoperate with the packages installed from your repo, given you did a 'poudriere bulk' and then a 'pkg upgrade' after each update to /usr/ports. Cheers, Matthew --mPRvjGbApSGsGJScR9rr8qknkMWKN4P7V Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2 iQJ8BAEBCgBmBQJWnettXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATO0QQAKETr9pCDqXpVIrF4X2hDOqI /vLSmMFVrgEVlKQ7Yd6oDIi47b0XXcmnuPxzP/MkC5o6EoZCs6hiylsD27WPoyb4 3whQmMK9eAeUO5XwKGnkZzjZjxukakP40hdERsdU+NIV9wb7Reji8LyLtnBLUlVb 3gASRzm9gooAAja43Fz9cOZ4oA19cbXiEhvPDoi/O0fIdgyUc04ncjKbfMfkguqq 8lHloJHpnCKQbxdk2yuaIKmqUEoBJiql/pWLWj7hwM38wS3Om6c2jRdb2EE5EsD9 d+rjI3n2s+R3zGgQodvzSvO+vqfrwa9XCWLgk+p3w6TXMjoG/NRa9k6VE29dck5E oepfrn5zeRlGmXmcbeaKd7NQqj8llsvqi1bHis7RDapcB6RHIHufvi9R45ywY237 R3jwNl6oCP0rIh4I+dpzCgL/GeJSJD4t+F5saBI3jO+14BubRGlZMb+EMVr976t8 rxFpLJ9GmKOfhf7EB5mE+jU/oyUseyIJm+r4v0CfL5uqvMBegPqKKVwTBVooAUpb tgmEbD538DXiljGChlV7cZUuhcL7BiYL0u33YSK//QdXubPNrQxd3DTvWz+Z6ffx TbmZCHZGXBkjvrU+NVAkUqdGmGAlcL5tV33DceBIRTxdcKPCSmfjehwS9uG/eKJv IiKNmCmkSR1QbTZOsEv0 =ip0n -----END PGP SIGNATURE----- --mPRvjGbApSGsGJScR9rr8qknkMWKN4P7V-- From owner-freebsd-questions@freebsd.org Tue Jan 19 09:25:19 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3D818A88485 for ; Tue, 19 Jan 2016 09:25:19 +0000 (UTC) (envelope-from matt.xtaz@gmail.com) Received: from mail-wm0-x231.google.com (mail-wm0-x231.google.com [IPv6:2a00:1450:400c:c09::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id C52A91641 for ; Tue, 19 Jan 2016 09:25:18 +0000 (UTC) (envelope-from matt.xtaz@gmail.com) Received: by mail-wm0-x231.google.com with SMTP id r129so81646971wmr.0 for ; Tue, 19 Jan 2016 01:25:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:cc:subject:message-id:mail-followup-to:references :mime-version:content-type:content-disposition:in-reply-to :user-agent; bh=wI77ZZL/X8DEefn27r7l9mESd/9K3EppoCXt2zciRAE=; b=DDN3VKKoiC6iMY2iMX8RvZiu3P7IFjCc4/hRZKcihKxyNi0JqkKUVRJ6Zy2JivdMAx EY+Yd0CDb0e2ha5IxryHgCY0rMGQaVako9Tsiuq3mkF6gm0Hr4iSaTQTVMGD8b7qGxIh vDrmFJXAUHmDKNEl8AFJ80Y9E55rpQmVss7K2z2INL8MDU5f+ZylGHIFHq4Y69PDs1Uh /RYhGsZHZAhracKVY49GtTsh/MiNXMtyBjHiAW4gCuB1gmNUhHtqrTrZbhadpAygjZa4 GzXHM69A1IrKCp2okyn53nIPQM88hgnw4/orha5Iy0ZbvXmgsjtOiJoaNfalTzm/mnB0 8pBA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:cc:subject:message-id :mail-followup-to:references:mime-version:content-type :content-disposition:in-reply-to:user-agent; bh=wI77ZZL/X8DEefn27r7l9mESd/9K3EppoCXt2zciRAE=; b=cSFLQdxp1SABDMrCDzxNhareYAI61Yc4U0aOEFpOawantGkvBJ5GA08dIwEUDi0Mtw 6AEbwnOJutYkZyFk/nvFUsx+EgK49zjjofWanzxSbEvxLpTfP/GDxzRvmXOZ9mZITqhh b8pe8U7ctItFhtfsnRZwtL0f6sD/3cybpBN0Aj0UScxofEL/7UdZDxj5+hvq50sqa4C+ HVkc3+KjcGk+Oym+SVsegYzI2MJX/uxmgD5XvcrpZKZ4P9aPu6cfAGiCK3vo/h9HGsuU U04F265D9mz0EZ5jdiI7WybkA5Y526HMT0Xv9MKkEt3mRw25dp4ZryqtVjvQFSrvCh60 qqzA== X-Gm-Message-State: AG10YOTzSIErqWYX7aJpEThIcEFZZVQciUiNxsFV6xkeB4UwP9rnPQ+PVEOr3w4IgLm/sQ== X-Received: by 10.28.55.209 with SMTP id e200mr18785477wma.2.1453195517267; Tue, 19 Jan 2016 01:25:17 -0800 (PST) Received: from xtaz.uk (tao.xtaz.uk. [2001:8b0:fe33::10]) by smtp.gmail.com with ESMTPSA id ql10sm27741028wjc.23.2016.01.19.01.25.16 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 19 Jan 2016 01:25:16 -0800 (PST) Date: Tue, 19 Jan 2016 09:25:14 +0000 From: Matt Smith To: Yuri Cc: Quartz , Polytropon , FreeBSD Questions Subject: Re: "fsck -y /" keeps saying "Disk is still dirty" no matter how many times I run it Message-ID: <20160119092514.GA58286@xtaz.uk> Mail-Followup-To: Matt Smith , Yuri , Quartz , Polytropon , FreeBSD Questions References: <569017FF.9060509@rawbw.com> <20160109012909.6e9b257e.freebsd@edvax.de> <569D6E74.2030606@sneakertech.com> <569DB264.6040007@rawbw.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline In-Reply-To: <569DB264.6040007@rawbw.com> User-Agent: Mutt/1.5.24 (2015-08-30) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 09:25:19 -0000 On Jan 18 19:49, Yuri wrote: >On 01/18/2016 15:00, Quartz wrote: >>Yuri- do you have soft updates AND journaling enabled? I seem to >>recall people repeatedly having problems with fsck stuff not working >>right on SU+J disks. > >Yes. > Yep. When I had SU+J enabled I could never get fsck to ever mark the disk as clean. It was permanently dirty with errors that it claimed it fixed but then you ran it again and the same errors came back. Only way to fix it was to switch off journalling and just leave softupdates only enabled. Then fsck marked the disk as clean as you would expect. I still to this day don't understand why SU+J is the default when it's clearly so broken. -- Matt From owner-freebsd-questions@freebsd.org Tue Jan 19 10:16:12 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 31E39A8854D for ; Tue, 19 Jan 2016 10:16:12 +0000 (UTC) (envelope-from perryh@pluto.rain.com) Received: from agora.rdrop.com (agora.rdrop.com [IPv6:2607:f678:1010::34]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 02C9F1AA3 for ; Tue, 19 Jan 2016 10:16:11 +0000 (UTC) (envelope-from perryh@pluto.rain.com) Received: from agora.rdrop.com (66@localhost [127.0.0.1]) by agora.rdrop.com (8.13.1/8.12.7) with ESMTP id u0JABHUM005310 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Tue, 19 Jan 2016 02:11:21 -0800 (PST) (envelope-from perryh@pluto.rain.com) Received: (from uucp@localhost) by agora.rdrop.com (8.13.1/8.14.2/Submit) with UUCP id u0JABFF5005307 for freebsd-questions@freebsd.org; Tue, 19 Jan 2016 02:11:15 -0800 (PST) (envelope-from perryh@pluto.rain.com) Received: from fbsd81 by pluto.rain.com (4.1/SMI-4.1-pluto-M2060407) id AA28233; Tue, 19 Jan 16 01:45:37 PST Date: Tue, 19 Jan 2016 01:45:26 -0800 From: perryh@pluto.rain.com (Perry Hutchison) To: freebsd-questions@freebsd.org Subject: resolver not working in a chroot Message-Id: <569e05b6.2RStkLc7SZIg/dVM%perryh@pluto.rain.com> User-Agent: nail 11.25 7/29/05 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 10:16:12 -0000 The resolver is not working in a chroot (to the 10.2 memstick image, with its /tmp, /var/run, and /var/tmp made writable by mounting tmpfs on them): # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt ping pkg.FreeBSD.org ping: cannot resolve pkg.FreeBSD.org: Host name lookup failure but it works when not in a chroot: # ping pkg.FreeBSD.org PING pkg.FreeBSD.org (96.47.72.71): 56 data bytes 64 bytes from 96.47.72.71: icmp_seq=0 ttl=51 time=97.329 ms ... What would cause this? So far I have checked: ping works in the chroot if given the IP address (showing that the chroot environment does have network access, so the resolver "should" be able to reach a nameserver): # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt ping 96.47.72.71 PING 96.47.72.71 (96.47.72.71): 56 data bytes 64 bytes from 96.47.72.71: icmp_seq=0 ttl=51 time=97.717 ms ... host(1) works, and gives the same result, in both environments: # host pkg.FreeBSD.org pkg.FreeBSD.org has address 96.47.72.71 ... # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt host pkg.FreeBSD.org pkg.FreeBSD.org has address 96.47.72.71 ... Ignoring comments, both /etc/nsswitch.conf are the same: # egrep -v '^#' /etc/nsswitch.conf group: compat group_compat: nis hosts: files dns networks: files passwd: compat passwd_compat: nis shells: files services: compat services_compat: nis protocols: files rpc: files # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt egrep -v '^#' /etc/nsswitch.conf group: compat group_compat: nis hosts: files dns networks: files passwd: compat passwd_compat: nis shells: files services: compat services_compat: nis protocols: files rpc: files as are both /etc/resolv.conf: # egrep -v '^#' /etc/resolv.conf nameserver 192.168.0.1 nameserver 8.8.8.8 nameserver 8.8.4.4 # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt egrep -v '^#' /etc/resolv.conf nameserver 192.168.0.1 nameserver 8.8.8.8 nameserver 8.8.4.4 and there is no mention of any freebsd.org host in either environment's /etc/hosts: # egrep 'freebsd\.org' /etc/hosts # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt egrep 'freebsd\.org' /etc/hosts From owner-freebsd-questions@freebsd.org Tue Jan 19 10:40:55 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AA059A87389 for ; Tue, 19 Jan 2016 10:40:55 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 3E84C1B40 for ; Tue, 19 Jan 2016 10:40:55 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from ox-dell39.ox.adestra.com (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0JAeo1N047796 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 19 Jan 2016 10:40:51 GMT (envelope-from matthew@freebsd.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=freebsd.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk u0JAeo1N047796 Authentication-Results: smtp.infracaninophile.co.uk/u0JAeo1N047796; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be ox-dell39.ox.adestra.com Subject: Re: resolver not working in a chroot To: freebsd-questions@freebsd.org References: <569e05b6.2RStkLc7SZIg/dVM%perryh@pluto.rain.com> From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <569E12B2.5090302@freebsd.org> Date: Tue, 19 Jan 2016 10:40:50 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <569e05b6.2RStkLc7SZIg/dVM%perryh@pluto.rain.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="IF0JJMAuBTPNHFGSWO4gHGrdh9WIt8phj" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.7 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 10:40:55 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --IF0JJMAuBTPNHFGSWO4gHGrdh9WIt8phj Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 01/19/16 09:45, Perry Hutchison wrote: > The resolver is not working in a chroot (to the 10.2 memstick image, > with its /tmp, /var/run, and /var/tmp made writable by mounting tmpfs > on them): > # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt ping pkg.FreeBSD.org > ping: cannot resolve pkg.FreeBSD.org: Host name lookup failure >=20 > but it works when not in a chroot: > # ping pkg.FreeBSD.org > PING pkg.FreeBSD.org (96.47.72.71): 56 data bytes > 64 bytes from 96.47.72.71: icmp_seq=3D0 ttl=3D51 time=3D97.329 ms > ... >=20 > What would cause this? >=20 You've mounted the 10.2 memstick image on /mnt? Do you have a devfs mounted inside the chroot? Try running: # mount -t devfs devfs /mnt/dev and then try your chroot'ed command again. Interesting to see if that helps. Cheers, Matthew --IF0JJMAuBTPNHFGSWO4gHGrdh9WIt8phj Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJWnhKyAAoJEABRPxDgqeTnzeUP/jfZVWoE9k0Dw/rtgtUbvHQl jzK202H16Mt1K7EiIvp5y/7i7ibNicViiadVqIKmHg3vUgFfRS14d0Av7UKXkiDt 6oKslSmc/P/y46NQR5DxRr930Ck/vy9tc+llBQkAiCzQHWikj6zyEji+10hRxDif RI3F+S1OkrtJwKr0w3HkirY13PWtKI+AQY0nQPCAE57aogqKChBd3rW4jLOfD5/2 bWs4XN3z6/RbsojZSAIn+VqNHbCk3jGEJEOFA4FHjSqeL8Vi04HaV5tLUkyP426A YQlJ7EM1uqONBUPgTif0nZLZGlc2Mtcrp+Li7ggnwhHFUNbLvUQ9AOqOztLnL+SA JAbHrb5U5kX/J/724n+taSgVN4UuEHaf2cUPS+Hhiq2s0zopOOHx6BWkzgvI0ApF LwdYUvwAByu8Jt0Z7g7ZeSQvnlOW4aIlNhDoTyTqQrSRnayi7SYBb1aLUDrKQIgW dV8RSsDqjCTBI10n7D37CHY0iMmehTluAXIvio41CPtEjok6F2PqzVlQlj27FdxK Gum1327mkuazhYPhtBOYBL/QlvL1iXI1yv09us4vcRCwMZ0x2RXpL1dc2cPPs0lM MmNQSM7Xq813QCI9Z3S/ATMSvfuc8nh5PzdpTl8cuMiouJ8SIkTNoyWuHUuY9co4 swrlqYt6fkRkRe8UDEB5 =X7/A -----END PGP SIGNATURE----- --IF0JJMAuBTPNHFGSWO4gHGrdh9WIt8phj-- From owner-freebsd-questions@freebsd.org Tue Jan 19 11:02:31 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E49D1A87DB0 for ; Tue, 19 Jan 2016 11:02:31 +0000 (UTC) (envelope-from bah@bananmonarki.se) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 59458175E for ; Tue, 19 Jan 2016 11:02:30 +0000 (UTC) (envelope-from bah@bananmonarki.se) Received: from [10.0.0.3] (testbox.usenet4all.se [10.0.0.3]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id u0JB2P6M030606 for ; Tue, 19 Jan 2016 12:02:26 +0100 (CET) (envelope-from bah@bananmonarki.se) To: "freebsd-questions@freebsd.org" From: Bernt Hansson Subject: Wifi network/router Message-ID: <569E17CD.9000108@bananmonarki.se> Date: Tue, 19 Jan 2016 12:02:37 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 11:02:32 -0000 Hello list! I've bought a wifi router and trying to connect to the admin interface, but no luck. The network I'm on is in the 10.* series and the router is 192.168.* So some sort of bridging/routing is needed. But I can't for my life remember what the command is/was. I managed to do that stunt some years ago with a laserjet 2100tn. So, I need help. /B From owner-freebsd-questions@freebsd.org Tue Jan 19 11:15:08 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 63C80A8836E for ; Tue, 19 Jan 2016 11:15:08 +0000 (UTC) (envelope-from dr.klepp@gmx.at) Received: from b2bqsv11.mx.upcmail.net (b2bqsv11.mx.upcmail.net [62.179.121.55]) by mx1.freebsd.org (Postfix) with ESMTP id AE8891D50 for ; Tue, 19 Jan 2016 11:15:07 +0000 (UTC) (envelope-from dr.klepp@gmx.at) Received: from edge11.upcmail.net ([192.168.13.81]) by b2bqsv11.mx.upcmail.net (InterMail vM.8.01.05.11 201-2260-151-128-20120928) with ESMTP id <20160119111459.WOMC22374.b2bqsv11-int.chello.at@edge11.upcmail.net> for ; Tue, 19 Jan 2016 12:14:59 +0100 Received: from [192.168.0.100] ([85.126.97.210]) by edge11.upcmail.net with edge id 7nEy1s01r4YLlkt0BnEyal; Tue, 19 Jan 2016 12:14:59 +0100 X-SourceIP: 85.126.97.210 From: "Dr. Nikolaus Klepp" To: freebsd-questions@freebsd.org Subject: Re: Wifi network/router Date: Tue, 19 Jan 2016 12:15:20 +0100 User-Agent: KMail/1.9.10 (enterprise35 0.20100827.1168748) References: <569E17CD.9000108@bananmonarki.se> In-Reply-To: <569E17CD.9000108@bananmonarki.se> X-KMail-QuotePrefix: > MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <201601191215.20618.dr.klepp@gmx.at> X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 11:15:08 -0000 Am Dienstag, 19. Januar 2016 schrieb Bernt Hansson: > Hello list! > > I've bought a wifi router and trying to connect to the admin interface, > but no luck. > > The network I'm on is in the 10.* series and the router is 192.168.* > So some sort of bridging/routing is needed. But I can't for my life > remember what the command is/was. # ifconfig eth0:1 192.168.0.200 # ifconfig eth0:1 192.168.1.200 .. depending on the IP of the router, which is most likely 192.168.*.1 :-) > > I managed to do that stunt some years ago with a laserjet 2100tn. > > So, I need help. > > /B > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > -- Please do not email me anything that you are not comfortable also sharing with the NSA. From owner-freebsd-questions@freebsd.org Tue Jan 19 11:26:57 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2ED61A88840 for ; Tue, 19 Jan 2016 11:26:57 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id CB5D71288 for ; Tue, 19 Jan 2016 11:26:56 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from ox-dell39.ox.adestra.com (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0JBQpiQ048675 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 19 Jan 2016 11:26:52 GMT (envelope-from m.seaman@infracaninophile.co.uk) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=infracaninophile.co.uk DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk u0JBQpiQ048675 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201001-infracaninophile; t=1453202812; bh=U18I/DYQWzq0nj28n0qOeC980sW5VG98jSlzs8uqwkw=; h=Subject:To:References:From:Date:In-Reply-To; z=Subject:=20Re:=20Wifi=20network/router|To:=20freebsd-questions@fr eebsd.org|References:=20<569E17CD.9000108@bananmonarki.se>=0D=0A=2 0<201601191215.20618.dr.klepp@gmx.at>|From:=20Matthew=20Seaman=20< m.seaman@infracaninophile.co.uk>|Date:=20Tue,=2019=20Jan=202016=20 11:26:44=20+0000|In-Reply-To:=20<201601191215.20618.dr.klepp@gmx.a t>; b=OVVkbHT5Vmyv1EmkLOoLyOJMt3Cd0YWEc/3VuOh7wD57ANBpOGlBxQ88OOBS45x6j zGHNMZrycoyS4pER8RnbBcFN/U78mNRUZJ3RUSxQODKjvlcbdfeXqqMM9U30Sz7s/t dOV4f4qUZMMlTnfeu31t/Z2f2gxj2rlxmSRlvN+o= X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be ox-dell39.ox.adestra.com Subject: Re: Wifi network/router To: freebsd-questions@freebsd.org References: <569E17CD.9000108@bananmonarki.se> <201601191215.20618.dr.klepp@gmx.at> From: Matthew Seaman Message-ID: <569E1D74.4060000@infracaninophile.co.uk> Date: Tue, 19 Jan 2016 11:26:44 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <201601191215.20618.dr.klepp@gmx.at> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="KUaD0N9GqhOpBbrdMLuU3QFKVuJQ0FDdW" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-1.5 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 11:26:57 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --KUaD0N9GqhOpBbrdMLuU3QFKVuJQ0FDdW Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 01/19/16 11:15, Dr. Nikolaus Klepp wrote: > Am Dienstag, 19. Januar 2016 schrieb Bernt Hansson: >> > Hello list! >> >=20 >> > I've bought a wifi router and trying to connect to the admin interfa= ce,=20 >> > but no luck. >> >=20 >> > The network I'm on is in the 10.* series and the router is 192.168.*= >> > So some sort of bridging/routing is needed. But I can't for my life = >> > remember what the command is/was. > # ifconfig eth0:1 192.168.0.200 > # ifconfig eth0:1 192.168.1.200 >=20 > .. depending on the IP of the router, which is most likely 192.168.*.1 = :-) Uh .. that looks like Linux syntax to me. BSD style would be something like: ifconfig em0 inet 192.168.0.200/24 alias Cheers, Matthew --KUaD0N9GqhOpBbrdMLuU3QFKVuJQ0FDdW Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJWnh11AAoJEABRPxDgqeTn9xsP/2cd3Abpwn5SiB8QUY/gWr/z 1QL2w4C3biiV0OnzN3bwlGhB7YeIRZs1puiZg23cz6W23ZekrqeRWqzv4rlpmf5S 3wLc0RMABXt7Xzzt9susElAVurs3Ut8/SFrAV9EV3Iu0Yu+cIFphqZMz/fFHQlg2 Z2Kf9tT5X6KITQpt/1899KqmQYxnlhrt66jW4ja3HNkccLBGNhhiZfJtRbCdQDcE mJrbg30OYUSM6r8y0Peh+fMkBiVWHyOdL+PHbXhcHm6HJvTq4DR9sISTrc6Ng5ke z6LsnnDP/lLkObEpZPJ2/+4OzHSqmI6X7Qml7XYYe9emCQq+LZuzZpgMKsxTB/Dy 9pfoOEksLbZa28RoAoSMqKjLaxuZbDfoOBrd14NqGUIoRUOXWtKH3uaqk1BnHE7R dEo96PIkxfBUPq5eVk77bfYpuLHhI6GX4cRa5sgyz2XTM2vkDA5zco6d38gp3GaD 928cXoL09KJnF0QTGVkK7grooJA1iZJO5MxLZ/BfhwoRSXJAxzSAH53j+eTcTbZS IFR30ozxvbzTU6lwZpoKwyu2Few5femEFzzgtl9JxUMEhzWzfUF23dNVd7U4GNuS UX3BUNW+EY71vqYCFd/kw9LTLIo8aeN2fGM+oSow4hfDg1H02rE+6E0iyQgefrH0 WP4IlEN/o8db26bIcgfW =X6Ty -----END PGP SIGNATURE----- --KUaD0N9GqhOpBbrdMLuU3QFKVuJQ0FDdW-- From owner-freebsd-questions@freebsd.org Tue Jan 19 13:14:00 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0BD57A87866 for ; Tue, 19 Jan 2016 13:14:00 +0000 (UTC) (envelope-from ml@netfence.it) Received: from smtp207.alice.it (smtp207.alice.it [82.57.200.103]) by mx1.freebsd.org (Postfix) with ESMTP id C9FC81DDD for ; Tue, 19 Jan 2016 13:13:59 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.ventu (79.42.55.85) by smtp207.alice.it (8.6.060.28) (authenticated as acanedi@alice.it) id 562CAA6911D657F6 for freebsd-questions@freebsd.org; Tue, 19 Jan 2016 14:13:50 +0100 Received: from alamar.ventu (alamar.ventu [10.1.2.18]) by soth.ventu (8.15.2/8.14.9) with ESMTP id u0JDDp7t071903 for ; Tue, 19 Jan 2016 14:13:51 +0100 (CET) (envelope-from ml@netfence.it) To: freebsd-questions@freebsd.org From: Andrea Venturoli Subject: Panic with sym on 10.2 Message-ID: <569E368F.4060802@netfence.it> Date: Tue, 19 Jan 2016 14:13:51 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 13:14:00 -0000 Hello. Two days ago I upgraded a (perfectly working) 9.3/i386 box to 10.2p10 Since then I've had two panics with the following message: panic: assertion "lp->busy_itl==0&&lp->busy_itlq==0" failed: file /usr/src/sys/dev/sym/sym_hipd.c Since the disk controller is involved, I do not get any core and I have to press the reset button. Google showed up no results (I'm not using ZFS, btw) and Bugzilla didn't help either. Any hint on where to go from here? bye & Thanks av. From owner-freebsd-questions@freebsd.org Tue Jan 19 14:19:23 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EE7C5A88641 for ; Tue, 19 Jan 2016 14:19:22 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 81C9F1AAF for ; Tue, 19 Jan 2016 14:19:22 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from ox-dell39.ox.adestra.com (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0JEJCm0091072 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 19 Jan 2016 14:19:13 GMT (envelope-from matthew@freebsd.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=freebsd.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk u0JEJCm0091072 Authentication-Results: smtp.infracaninophile.co.uk/u0JEJCm0091072; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be ox-dell39.ox.adestra.com Subject: Re: Panic with sym on 10.2 To: freebsd-questions@freebsd.org References: <569E368F.4060802@netfence.it> From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <569E45D9.1050604@freebsd.org> Date: Tue, 19 Jan 2016 14:19:05 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <569E368F.4060802@netfence.it> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="hmbB3pt2UdTKJilwx0xvqVsU9GLKGq6bb" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 14:19:23 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --hmbB3pt2UdTKJilwx0xvqVsU9GLKGq6bb Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 01/19/16 13:13, Andrea Venturoli wrote: > Two days ago I upgraded a (perfectly working) 9.3/i386 box to 10.2p10 > Since then I've had two panics with the following message: >=20 > panic: assertion "lp->busy_itl=3D=3D0&&lp->busy_itlq=3D=3D0" failed: fi= le > /usr/src/sys/dev/sym/sym_hipd.c >=20 > Since the disk controller is involved, I do not get any core and I have= > to press the reset button. >=20 > Google showed up no results (I'm not using ZFS, btw) and Bugzilla didn'= t > help either. >=20 > Any hint on where to go from here? I recommend asking about this on freebsd-stable@... and/or raising a PR in bugzilla. If there's any more information you can pull out of your system, that would probably be helpful -- even if it's a case of taking a photo of your screen and sticking it on a pasteboard site somewhere. Hmmm... sym(4) looks like it's fairly elderly, implying the same is probably true of your hardware. Is it possible your disk controller is succumbing to the vagaries of age? Cheers, Matthew --hmbB3pt2UdTKJilwx0xvqVsU9GLKGq6bb Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJWnkXZAAoJEABRPxDgqeTnKTMP/iwrgViC7HWRN5j1dD+fU+Jz JFsePjY7z1y0MTOnMu/6tdI8YNo66NKZizYUehSQPZYTBxsRCiaHObU2kMi8kPEU vd+wkJ3XHum/8iOLhLRM6b8K4MnqS4LV/g1PhVdIk2oWSB2nYXJc9cNhRPIyzxxE aw69aQPOh2J8dv1LDW/W4X3N9bMo7UY4CBxcm3SVCb8De4Ol0EXDVfNYy6HhM11l 1kqI3OF9cOozhUqExqttFeBEkJt40Q9eSvNOELcMINA86rbmZGNWA1UQoLGn0Q7A Mxz68r0l8cZaMESovn5d4QISFKpZ5zgDlFFLwu/zseolOw3xHmlNa524W0yn8h+5 DyxG2rht+1HYSXK3vxktd+qEcdpUkLwM+8LJvze82XF/Bv1uH2zp6CO9tsyK53+T 12QwmPAHeR6TD9PQoT2iVMT9eNkqvjblN/b2RDGIjSeYbqEho7rfSAu7edtCg7vz Vg7VrmmsFAK/qdLMHdovAFKsV8O5Yl2bh9YqUmpWAZAalRw5jIj0n7McLaBEbApx PsnWZwbJanYHRsRW/RCkWWGfdRtDyG7PDTRv+NsAXNv3N1CDInYeuecGrGj+fv1T xfN1QtjEoaRlzEnS9jFpqS0Lo3S/bl9neXtPgKtdM++mxZUCiA7C8u0LSX945ti0 PArAcmjFWne3RA0o0eF8 =4CO6 -----END PGP SIGNATURE----- --hmbB3pt2UdTKJilwx0xvqVsU9GLKGq6bb-- From owner-freebsd-questions@freebsd.org Tue Jan 19 14:40:06 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2A76CA87105; Tue, 19 Jan 2016 14:40:06 +0000 (UTC) (envelope-from ml@netfence.it) Received: from smtp207.alice.it (smtp207.alice.it [82.57.200.103]) by mx1.freebsd.org (Postfix) with ESMTP id B84A31C70; Tue, 19 Jan 2016 14:40:05 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.ventu (79.42.55.85) by smtp207.alice.it (8.6.060.28) (authenticated as acanedi@alice.it) id 562CAA6911DAB765; Tue, 19 Jan 2016 15:39:58 +0100 Received: from alamar.ventu (alamar.ventu [10.1.2.18]) by soth.ventu (8.15.2/8.14.9) with ESMTP id u0JEdtNA074539; Tue, 19 Jan 2016 15:39:56 +0100 (CET) (envelope-from ml@netfence.it) Subject: Re: Panic with sym on 10.2 To: freebsd-questions@freebsd.org References: <569E368F.4060802@netfence.it> <569E45D9.1050604@freebsd.org> Cc: freebsd-stable@freebsd.org Reply-To: freebsd-stable@freebsd.org From: Andrea Venturoli Message-ID: <569E4ABB.9070903@netfence.it> Date: Tue, 19 Jan 2016 15:39:55 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <569E45D9.1050604@freebsd.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 14:40:06 -0000 On 01/19/16 15:19, Matthew Seaman wrote: > On 01/19/16 13:13, Andrea Venturoli wrote: >> Two days ago I upgraded a (perfectly working) 9.3/i386 box to 10.2p10 >> Since then I've had two panics with the following message: >> >> panic: assertion "lp->busy_itl==0&&lp->busy_itlq==0" failed: file >> /usr/src/sys/dev/sym/sym_hipd.c >> >> Since the disk controller is involved, I do not get any core and I have >> to press the reset button. >> >> Google showed up no results (I'm not using ZFS, btw) and Bugzilla didn't >> help either. >> >> Any hint on where to go from here? > > I recommend asking about this on freebsd-stable@... I'm cc:ing and reply-to:ing :) it now. > and/or raising a PR in bugzilla. I'd gladly do this, but I though I'd ask for some direction before, since, right now, I have very few details. > If there's any more information you can pull out of your > system, that would probably be helpful Something in particular? The only thing that comes to my mind is the following: > # pciconf -lv > ... > sym0@pci0:3:5:0: class=0x010000 card=0x39071de1 chip=0x000c1000 rev=0x01 hdr=0x00 > vendor = 'LSI Logic / Symbios Logic' > device = '53c895' > class = mass storage > subclass = SCSI The card really is a Tekram DC-390U2W. Oh, and I'm using gmirror with a couple of disks. There's also a zip drive attached (which has always worked), but I've not been using it in the last three days, so it was not "active" when the system paniced. >-- even if it's a case of taking > a photo of your screen and sticking it on a pasteboard site somewhere. Not much to see, really: the above message (which should be *almost* exact, since I copied it by hand) and a backtrace which doesn't mean much. Nothing else. > Hmmm... sym(4) looks like it's fairly elderly, implying the same is > probably true of your hardware. Sure. > Is it possible your disk controller is succumbing to the vagaries of age? I have never seen any little trouble with such a card (I've had more than one here and at customers'); thought it might actually be dying, I really find it strange that it started as soon as I upgraded from 9.3 to 10.2... bye & Thanks a lot av. From owner-freebsd-questions@freebsd.org Tue Jan 19 14:50:38 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AEE2FA8785F for ; Tue, 19 Jan 2016 14:50:38 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 2FA56145B for ; Tue, 19 Jan 2016 14:50:38 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from zero-gravitas.local (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0JEoOV9091839 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 19 Jan 2016 14:50:33 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk u0JEoOV9091839 Authentication-Results: smtp.infracaninophile.co.uk/u0JEoOV9091839; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be zero-gravitas.local Subject: Re: Panic with sym on 10.2 To: freebsd-questions@freebsd.org References: <569E368F.4060802@netfence.it> <569E45D9.1050604@freebsd.org> <569E4ABB.9070903@netfence.it> From: Matthew Seaman Message-ID: <569E4D2A.2020301@FreeBSD.org> Date: Tue, 19 Jan 2016 14:50:18 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <569E4ABB.9070903@netfence.it> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="hGMMF7Hq3dw0QpanWpkepXhRawi2VcNwd" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 14:50:38 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --hGMMF7Hq3dw0QpanWpkepXhRawi2VcNwd Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 2016/01/19 14:39, Andrea Venturoli wrote: >> Is it possible your disk controller is succumbing to the vagaries of a= ge? >=20 > I have never seen any little trouble with such a card (I've had more > than one here and at customers'); thought it might actually be dying, I= > really find it strange that it started as soon as I upgraded from 9.3 t= o > 10.2... Yeah. I've seen hardware failures triggered by big system updates before now. It's not particularly common, but it is possible for the amount of IO churn involved in updating to tip a marginal component over the edge. Generally you'll only see this sort of effect if the system is otherwise pretty quiet during normal operation. As to the failure mode -- sure these things usually die completely, but they can die gradually and in subtle ways, usually when doing that is the most inconvenient possible thing. Cheers, Matthew --hGMMF7Hq3dw0QpanWpkepXhRawi2VcNwd Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQJ8BAEBCgBmBQJWnk0wXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnmh4P/jsOxvaRhjgt3jdzbIFqmvJV 0FiRtaPiHG+ynjCJKTcJlcqeeE2UYXIe7PvvnAY9WTBGaK5Vlb4ZpV07E7Sy9V0m S42XHSWJR7et5Aaufy2XS2Fx6MF3dgg0v+6hO2ofpxWPsRSRznU+3mv7si+U2E8W wx9J8JXQNEwBjy8o84u9jNsgDnMqqopHpAEeNXORAhIgk5/MhF/9L1w6jPPm+mac i0lW6Z/WtSmAruA4Ky4sa6E9yuTtmbPqyBr6K+m6NHiVQZhg9Y+9ocymYQqROjQq 0T/XqOXXc4lUev5leMq64eWdU0JY5h7HaCYKvVk1NbFPoColphoFxB1Lye8BReVK mXOby2O5fGycbfzoG1aRTs44AtVTDV3pvvK4PnQKGfV4qO3rhE12Vx7dk49RNI7S fyfHsLUtp9vnUIV3X1/c9/dG8P1ylZidL+hf4U31J351DHuj0B067C7BeN74wslR tDFY/gctr8gISOQCyb9vI/Hdyny5VnWT2yGk1ctxlKjd6IrRFdYlak8QHtgS30Y8 swEvdmcU21WEgN963N9f7FwHmyLhuWFviN1wn/1//hhpDWuT5b0V7FiiXklFCkUy osvQ56YJuaGVcCSrfcFTHu3KEKjYad20s62v/EFRgNLnxH99/OpkY1tIyFMvuB34 IToLZHcp9VPLhGYadQCw =lN8k -----END PGP SIGNATURE----- --hGMMF7Hq3dw0QpanWpkepXhRawi2VcNwd-- From owner-freebsd-questions@freebsd.org Tue Jan 19 14:55:51 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E5B88A87D1A for ; Tue, 19 Jan 2016 14:55:51 +0000 (UTC) (envelope-from ml@netfence.it) Received: from smtp207.alice.it (smtp207.alice.it [82.57.200.103]) by mx1.freebsd.org (Postfix) with ESMTP id 8374B19CE for ; Tue, 19 Jan 2016 14:55:51 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.ventu (79.42.55.85) by smtp207.alice.it (8.6.060.28) (authenticated as acanedi@alice.it) id 562CAA6911DB9C5A for freebsd-questions@freebsd.org; Tue, 19 Jan 2016 15:55:47 +0100 Received: from alamar.ventu (alamar.ventu [10.1.2.18]) by soth.ventu (8.15.2/8.14.9) with ESMTP id u0JEtmhL076207 for ; Tue, 19 Jan 2016 15:55:48 +0100 (CET) (envelope-from ml@netfence.it) Subject: Re: Panic with sym on 10.2 To: freebsd-questions@freebsd.org References: <569E368F.4060802@netfence.it> <569E45D9.1050604@freebsd.org> <569E4ABB.9070903@netfence.it> <569E4D2A.2020301@FreeBSD.org> From: Andrea Venturoli Message-ID: <569E4E74.5060707@netfence.it> Date: Tue, 19 Jan 2016 15:55:48 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <569E4D2A.2020301@FreeBSD.org> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 14:55:52 -0000 On 01/19/16 15:50, Matthew Seaman wrote: > It's not particularly common, but it is possible for the > amount of IO churn involved in updating to tip a marginal component over > the edge. Right. I have thought of this, but... > Generally you'll only see this sort of effect if the system > is otherwise pretty quiet during normal operation. ... this system has always been work horse; it has probably compiled Firefox/ThunderBird/OpenOffice/etc... hundreds of times, just for a start. Before I call it an hardware problem, I'd like to check software. bye & Thanks av. From owner-freebsd-questions@freebsd.org Tue Jan 19 17:16:55 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 85727A8641F for ; Tue, 19 Jan 2016 17:16:55 +0000 (UTC) (envelope-from yuri@rawbw.com) Received: from shell1.rawbw.com (shell1.rawbw.com [198.144.192.42]) by mx1.freebsd.org (Postfix) with ESMTP id 70A7E1619 for ; Tue, 19 Jan 2016 17:16:55 +0000 (UTC) (envelope-from yuri@rawbw.com) Received: from yuri.doctorlan.com (c-50-184-63-128.hsd1.ca.comcast.net [50.184.63.128]) (authenticated bits=0) by shell1.rawbw.com (8.15.1/8.15.1) with ESMTPSA id u0JHGjxw010966 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Tue, 19 Jan 2016 09:16:45 -0800 (PST) (envelope-from yuri@rawbw.com) X-Authentication-Warning: shell1.rawbw.com: Host c-50-184-63-128.hsd1.ca.comcast.net [50.184.63.128] claimed to be yuri.doctorlan.com Subject: Re: "fsck -y /" keeps saying "Disk is still dirty" no matter how many times I run it To: Matt Smith , Quartz , Polytropon , FreeBSD Questions References: <569017FF.9060509@rawbw.com> <20160109012909.6e9b257e.freebsd@edvax.de> <569D6E74.2030606@sneakertech.com> <569DB264.6040007@rawbw.com> <20160119092514.GA58286@xtaz.uk> From: Yuri Message-ID: <569E6F7E.6000705@rawbw.com> Date: Tue, 19 Jan 2016 09:16:46 -0800 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <20160119092514.GA58286@xtaz.uk> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 17:16:55 -0000 On 01/19/2016 01:25, Matt Smith wrote: > > Yep. When I had SU+J enabled I could never get fsck to ever mark the > disk as clean. It was permanently dirty with errors that it claimed it > fixed but then you ran it again and the same errors came back. Only > way to fix it was to switch off journalling and just leave softupdates > only enabled. Then fsck marked the disk as clean as you would expect. > I still to this day don't understand why SU+J is the default when it's > clearly so broken. For me fsck eventually labeled the disk 'clean' after a few dozen runs. Would be much more convenient if fsck had an option "to run until clean". Yuri From owner-freebsd-questions@freebsd.org Tue Jan 19 17:27:01 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0D7D9A86A14 for ; Tue, 19 Jan 2016 17:27:01 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C87FF1FF3 for ; Tue, 19 Jan 2016 17:27:00 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-101-208.dynamic.qsc.de [92.195.101.208]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 5852F3CFFF; Tue, 19 Jan 2016 18:26:57 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u0JHQvIi002932; Tue, 19 Jan 2016 18:26:57 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Tue, 19 Jan 2016 18:26:57 +0100 From: Polytropon To: Yuri Cc: Matt Smith , Quartz , FreeBSD Questions Subject: Re: "fsck -y /" keeps saying "Disk is still dirty" no matter how many times I run it Message-Id: <20160119182657.0d59e76b.freebsd@edvax.de> In-Reply-To: <569E6F7E.6000705@rawbw.com> References: <569017FF.9060509@rawbw.com> <20160109012909.6e9b257e.freebsd@edvax.de> <569D6E74.2030606@sneakertech.com> <569DB264.6040007@rawbw.com> <20160119092514.GA58286@xtaz.uk> <569E6F7E.6000705@rawbw.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 17:27:01 -0000 On Tue, 19 Jan 2016 09:16:46 -0800, Yuri wrote: > On 01/19/2016 01:25, Matt Smith wrote: > > > > Yep. When I had SU+J enabled I could never get fsck to ever mark the > > disk as clean. It was permanently dirty with errors that it claimed it > > fixed but then you ran it again and the same errors came back. Only > > way to fix it was to switch off journalling and just leave softupdates > > only enabled. Then fsck marked the disk as clean as you would expect. > > I still to this day don't understand why SU+J is the default when it's > > clearly so broken. > > For me fsck eventually labeled the disk 'clean' after a few dozen runs. > Would be much more convenient if fsck had an option "to run until clean". For most cases, one run of "fsch -yf" will accomplish this. A second run usually fixes the edge cases... -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Tue Jan 19 18:01:49 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AE88EA87C8B for ; Tue, 19 Jan 2016 18:01:49 +0000 (UTC) (envelope-from vsasjason@gmail.com) Received: from mail-wm0-x22e.google.com (mail-wm0-x22e.google.com [IPv6:2a00:1450:400c:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5CBF81837 for ; Tue, 19 Jan 2016 18:01:49 +0000 (UTC) (envelope-from vsasjason@gmail.com) Received: by mail-wm0-x22e.google.com with SMTP id r129so100934676wmr.0 for ; Tue, 19 Jan 2016 10:01:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=INhI6paHW/fXJRj22ODDKwHWmM4wJr05DJwAyokIxPs=; b=ZrUIZp1+HF4dWk3QBgXnv2oPIhSTmv4/M37VQNPFi/fn6k9cZYRdzYzLKSLRIXZZtF K5FHhnzyfWV+wuwTQW3EwOdAZAs957zDvgltJqX6xZCkbqIlDa6fq5SZU2iOVrJyXxqr swOfzR99x7w4VroWFdchmyO5OQAKTEFoELR8QNqv1NxbXoRLZwVLWuSo2NSFv6VAHMNf Piqr4mV+95SgQryOhbheJv2lOef8kznGao+tZuAKKzd38TObt165LUGz8HCwrpjx/52K W6QsX73F3Lm4L+E5BO0MIWiUZ/ugwoQrHfLaInCWA+2xDs4wMky8QLCl8Ep0ccRzZnM0 Hiog== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=INhI6paHW/fXJRj22ODDKwHWmM4wJr05DJwAyokIxPs=; b=BGGKHGKpNl0N+lHeeNnWNgv8p7APhTudWtxdjoL31rIia+KQUoYi2MLjSr2XcY9Kl7 8s/o0HIVuhcHobQsEpKSiuAIWoHmH6haThy6TaMzxt0xm9DQO4gqpfQAEuz1zbTVvSCR 3P0wiorF4uA1A6KVBLrXISRZEPYrSR+kb/qlCy0dVFN5BA6mjf8UM/eaAIkCC8DWGl8f xmL7LPQ6P3PI5IO/leX9Woc53HXVFzVWQ1754YQa0OZH2UdW2tmNDJsjWPHg9zQThE8g DmZCYauoZt7gD2mQvqLn1JOERUpT7aLFH53BdcaDjC0LbvMTPGisxKhR42bZXjNAiZJ0 2Y0g== X-Gm-Message-State: AG10YOQsZgf1Hp3nueikkxdj5G0QTqBJHOPXw2uNdme9+OPFJ+oR+34C/tYAJqtngPH4cM2o4BFIYaj4stmUYw== MIME-Version: 1.0 X-Received: by 10.28.54.78 with SMTP id d75mr21091226wma.6.1453226506470; Tue, 19 Jan 2016 10:01:46 -0800 (PST) Received: by 10.194.246.73 with HTTP; Tue, 19 Jan 2016 10:01:46 -0800 (PST) Received: by 10.194.246.73 with HTTP; Tue, 19 Jan 2016 10:01:46 -0800 (PST) In-Reply-To: <569E6F7E.6000705@rawbw.com> References: <569017FF.9060509@rawbw.com> <20160109012909.6e9b257e.freebsd@edvax.de> <569D6E74.2030606@sneakertech.com> <569DB264.6040007@rawbw.com> <20160119092514.GA58286@xtaz.uk> <569E6F7E.6000705@rawbw.com> Date: Tue, 19 Jan 2016 21:01:46 +0300 Message-ID: Subject: Re: "fsck -y /" keeps saying "Disk is still dirty" no matter how many times I run it From: Anton Sayetsky To: Yuri Cc: Matt Smith , Quartz , FreeBSD Questions , Polytropon Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jan 2016 18:01:49 -0000 19 =D1=8F=D0=BD=D0=B2. 2016 =D0=B3. 19:17 =D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D0= =BE=D0=B2=D0=B0=D1=82=D0=B5=D0=BB=D1=8C "Yuri" > For me fsck eventually labeled the disk 'clean' after a few dozen runs. Would be much more convenient if fsck had an option "to run until clean". Maybe something like this will work (completely untested): while(result);do fsck ...; result=3D$?; done From owner-freebsd-questions@freebsd.org Wed Jan 20 00:45:37 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AFBE0A88B73 for ; Wed, 20 Jan 2016 00:45:37 +0000 (UTC) (envelope-from chrisstankevitz@gmail.com) Received: from mail-io0-x22e.google.com (mail-io0-x22e.google.com [IPv6:2607:f8b0:4001:c06::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7DFE41179 for ; Wed, 20 Jan 2016 00:45:37 +0000 (UTC) (envelope-from chrisstankevitz@gmail.com) Received: by mail-io0-x22e.google.com with SMTP id 1so3802495ion.1 for ; Tue, 19 Jan 2016 16:45:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=3cFSZPmIgF6L800oWobaZ2mqX+Ved1EVhAvqZ4h6qqI=; b=ctG38hgvduJhepwensBSPTrPwqB7rReyiZn0mrR5nTFx2/uQaNucoQRSZh3eCvSocK dumaP5Ti+gEeqoKJMjt/ZBZYlT+peF1s5Y13li+xiZ/gHJHzETVKALQjhFA9rLtamhfR 1CgX8lk4fgMgGkHDInyAdIER2pMV6sJ5WEJyTw/g0xu7jMOGwEofHHjmC47/xE9U5GLr 3i+vy06LJa1IAgLtUPeo9dhdB6FvDM6svrRF5BjbnUI8LchGMCjMDNSHKppG4qGIAWE6 6npuiFsoSHlvl29bB3DMb8WrHzR752mRVFz363xca2CS1MNlsEha2rUBINalnz4jCtHZ ohoA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=3cFSZPmIgF6L800oWobaZ2mqX+Ved1EVhAvqZ4h6qqI=; b=D65tpAhgED73ORZZAZiFGgpd7wj5kpx3W6dF0MJRHFQE3XHwaoe3/cYhVl3EyLzLrG 4Q7MVH6CgLI/+u87ANzREgZepfyBcv7d0XMY1H3HF61FjsjbHafYmoKbWfvWRKUoeiH/ YMGY6XYfvAJS+7cvcEe1J+11C2NjZTM4iDKLkCvf+CZab89l//VyolF9dpE1zaZNxZuz h4inXOA9qhw9WtCh56Z7PtxoBenA4QKl5SkjD6a7jYk7NqQAxfNO30zpQ+PIP5KDz4MM IWgos2g9zSCqO4J0JF1kj8YAUDzvYwChyTTbhGIfmL6e46blIRZWwSod6gvY9kmn0yBm 0XhQ== X-Gm-Message-State: ALoCoQnsfjbQET1LSBMgKt/t8DG6uPm4BGSd7WG1UNffWiQhFi/mOhuX5LK2RmyBd/A+YzNsCqFqJybY2oYtLuh49fbqzrw77A== MIME-Version: 1.0 X-Received: by 10.107.16.213 with SMTP id 82mr34877201ioq.119.1453250736839; Tue, 19 Jan 2016 16:45:36 -0800 (PST) Received: by 10.79.28.4 with HTTP; Tue, 19 Jan 2016 16:45:36 -0800 (PST) Date: Tue, 19 Jan 2016 16:45:36 -0800 Message-ID: Subject: Downloading 10.2-RELEASE-p10 source without prayer From: Chris Stankevitz To: freebsd-questions Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 00:45:37 -0000 Hi, I would like to bring an "authoritative" copy of 10.2-RELEASE-p10 source onto an air-gapped system so that I can update. What is the procedure for this? 1. svn checkout https://svn.FreeBSD.org/base/releng/10.2 2. verify sha1 fingerprint is E9:37:73:80:B5:32:1B:93:92:94:98:17:59:F0:FA:A2:5F:1E:DE:B9 3. pray that I got -10 and not a partially-modified mid-commit copy of -11 Of course I'm being sarcastic about the prayer... but is there a way (a tarball or special SVN tag/branch) to get the "official" 10.2-RELEASE-p10 code? What do the freebsd-update servers use? Thanks, Chris From owner-freebsd-questions@freebsd.org Wed Jan 20 01:30:03 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 836D9A8824D for ; Wed, 20 Jan 2016 01:30:03 +0000 (UTC) (envelope-from chrisstankevitz@gmail.com) Received: from mail-io0-x235.google.com (mail-io0-x235.google.com [IPv6:2607:f8b0:4001:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4DCC51880 for ; Wed, 20 Jan 2016 01:30:03 +0000 (UTC) (envelope-from chrisstankevitz@gmail.com) Received: by mail-io0-x235.google.com with SMTP id 1so4697946ion.1 for ; Tue, 19 Jan 2016 17:30:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=5YIQ1M10Kn8lwE33wzUjFovrSyYxcSEO1YPhFsP/Kuw=; b=T/D0c9s+wNjDKi2/A2W92rBmIvFtWD/nQG/GFssPVwPlKxVhkfKLKsTLu09jHcDEqs OlfupvsOs/a5zvQbnmDQJuyxckiWNUYd+TTXR00mL2jvlC37Prynff0m4coyUJLz+zjT gCEgQ7pc07wRc//VslQReKvX8/zw17g9vMEe4M5Lss9gbE9Sj48xdvZ2HrkAyLPdPc17 HBQraCEw3pzh3FsAUoXSqva4a2bLtI+lpdtYQQmq6vnhHoi6A1qFh2+Dc6HmWlJsQ7gJ ZL8TW24VGkMKJmlDOxvu/IFRKRhuovI2h/t3gGDJC5N6djlqEReogSjeNlWuBmd0NA2i qI+w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=5YIQ1M10Kn8lwE33wzUjFovrSyYxcSEO1YPhFsP/Kuw=; b=bKkBDbQcG63V5WHt0E7sSjG5IwnDTZ4DBwCD9y++wi/XofM3ipqy6YHdd9xFMU2Orr UvoiYYrAqjq/JW7S1AfajXsgc95iuG3rCCCMWibT0zXX5EgHtxejHyY5kbGSmc1nUTtg JSdYIet/2B/AKaqf3w5Pq+0QmsffdUkSslG5jQPj3XWDvIk3N20JIa0ErwakXkFcTSTr 9zuKNBKnbVh/NU3JUEYoDjJj2dlM6A1RCOpFS+q6RYoj7RzeXj++0cnGHmiqNBpNaLvm Ov+1fy28rLDMRRzWniWIxJWQ8v7MduOdZoFTfLNFLDBGGtYr66dLeMMNgXH/QJ3gAI6C PBIw== X-Gm-Message-State: ALoCoQnTlOF9M0CHPQhZiXYTcrKZ/uoHDc7rzkHW1sVaFcXvHzfx1GvhxroSZaZRLQvLdMxDcVaCJBmCckv7en5Hm05xuiEoyA== MIME-Version: 1.0 X-Received: by 10.107.7.212 with SMTP id g81mr28900907ioi.81.1453253402797; Tue, 19 Jan 2016 17:30:02 -0800 (PST) Received: by 10.79.28.4 with HTTP; Tue, 19 Jan 2016 17:30:02 -0800 (PST) In-Reply-To: References: Date: Tue, 19 Jan 2016 17:30:02 -0800 Message-ID: Subject: Re: Downloading 10.2-RELEASE-p10 source without prayer From: Chris Stankevitz To: freebsd-questions Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 01:30:03 -0000 On Tue, Jan 19, 2016 at 4:45 PM, Chris Stankevitz wrote: > Of course I'm being sarcastic about the prayer... but is there a way > (a tarball or special SVN tag/branch) to get the "official" > 10.2-RELEASE-p10 code? What do the freebsd-update servers use? I could just look at "svn log -l 1" and see if it jives more or less with the most recent freebsd-announce email. Chris From owner-freebsd-questions@freebsd.org Wed Jan 20 02:15:28 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BAF33A89126 for ; Wed, 20 Jan 2016 02:15:28 +0000 (UTC) (envelope-from perryh@pluto.rain.com) Received: from agora.rdrop.com (agora.rdrop.com [IPv6:2607:f678:1010::34]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A34491D66 for ; Wed, 20 Jan 2016 02:15:28 +0000 (UTC) (envelope-from perryh@pluto.rain.com) Received: from agora.rdrop.com (66@localhost [127.0.0.1]) by agora.rdrop.com (8.13.1/8.12.7) with ESMTP id u0K2AX6N083485 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Tue, 19 Jan 2016 18:10:36 -0800 (PST) (envelope-from perryh@pluto.rain.com) Received: (from uucp@localhost) by agora.rdrop.com (8.13.1/8.14.2/Submit) with UUCP id u0K2AWo6083484 for freebsd-questions@freebsd.org; Tue, 19 Jan 2016 18:10:32 -0800 (PST) (envelope-from perryh@pluto.rain.com) Received: from fbsd81 by pluto.rain.com (4.1/SMI-4.1-pluto-M2060407) id AA03769; Tue, 19 Jan 16 18:05:53 PST Date: Tue, 19 Jan 2016 18:05:43 -0800 From: perryh@pluto.rain.com (Perry Hutchison) To: freebsd-questions@freebsd.org Subject: Re: resolver not working in a chroot Message-Id: <569eeb77.GFz8dwXgj3CL44SN%perryh@pluto.rain.com> References: <569e05b6.2RStkLc7SZIg/dVM%perryh@pluto.rain.com> <569E12B2.5090302@freebsd.org> In-Reply-To: <569E12B2.5090302@freebsd.org> User-Agent: nail 11.25 7/29/05 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 02:15:28 -0000 Matthew Seaman wrote: > On 01/19/16 09:45, Perry Hutchison wrote: > > The resolver is not working in a chroot (to the 10.2 memstick image, > > with its /tmp, /var/run, and /var/tmp made writable by mounting tmpfs > > on them): > > # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt ping pkg.FreeBSD.org > > ping: cannot resolve pkg.FreeBSD.org: Host name lookup failure > > but it works when not in a chroot: > > # ping pkg.FreeBSD.org > > PING pkg.FreeBSD.org (96.47.72.71): 56 data bytes > > 64 bytes from 96.47.72.71: icmp_seq=0 ttl=51 time=97.329 ms > > ... > > What would cause this? > > You've mounted the 10.2 memstick image on /mnt? Yes. > Do you have a devfs mounted inside the chroot? Try running: > > # mount -t devfs devfs /mnt/dev > > and then try your chroot'ed command again. Interesting to see > if that helps. The mount command worked -- there's now a devfs in the chroot environment -- but it didn't help. I still get the same error. I also tried running "mount -t devfs devfs /dev" in the chroot (after unmounting /mnt/dev), and that didn't help either. There must be some difference in the lookup mechanisms between the resolver and host(1), since host(1) works in the chroot. From owner-freebsd-questions@freebsd.org Wed Jan 20 03:15:53 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 04FCCA88CA3 for ; Wed, 20 Jan 2016 03:15:53 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from iris.ime.usp.br (iris.ime.usp.br [143.107.45.5]) by mx1.freebsd.org (Postfix) with ESMTP id B3B1A18BA for ; Wed, 20 Jan 2016 03:15:52 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from cage0 (OTWAON234VW-LP140-05-1176444850.dsl.bell.ca [70.31.31.178]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schultz@iris.ime.usp.br) by iris.ime.usp.br (Postfix) with ESMTPSA id 4630E290031A; Wed, 20 Jan 2016 01:15:43 -0200 (BRST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ime.usp.br; s=mail; t=1453259749; bh=9U8GrTktbDAFApYcG2tjaas2/XIucXhVYAxatWInALE=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=igN39YDnDv8wee/+uphlDyP+goA3es7/KXZvtfS+/cs1Qe9j//lXIdNQ72KfyPpX5 wub25U3ODYw3F6AhixPVi+Cbtf2/0dHaI2w50JmTuKNv+xDa2e22IsF7lRR2ViE8cq SqMnzgx6do07z9EfEVvA2UJ3qxDoG8X+E9xjqr/E= Date: Wed, 20 Jan 2016 03:14:32 +0000 From: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira To: kpneal@pobox.com Cc: Polytropon , freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160120031432.cd8793f3626c07fc803ee308@ime.usp.br> In-Reply-To: <20160119141257.GA64358@neutralgood.org> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> <20160119141257.GA64358@neutralgood.org> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on iris.ime.usp.br X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 03:15:53 -0000 Hi, In a nutshell, the point is that the build dependencies should not be there at all. Keeping them in a jail is not a proper solution because they can still influence the host system (since the packages resulting from computations done in the jail will be installed in the host). On Tue, 19 Jan 2016 09:12:57 -0500 kpneal@pobox.com wrote: > On Tue, Jan 19, 2016 at 06:34:38AM +0000, Lu=EDs Fernando Schultz Xavier = da Silveira wrote: > > Hello, > >=20 > > > But this is not different from how ports are being built in > > > the regular ports tree: Compilation tools could be compromized > > > or package content could be affected. The typical "make install" > > > will generate a package which is then installed via pkg. > >=20 > > Indeed, it is not different, and that is my point. >=20 > Huh? When did this turn into a discussion about security? >=20 > You can do a small amount of work and have security concerns or you can > do much more work and have the exact same security concerns. I really don= 't > see how this reflects badly on Poudriere. >=20 > I thought this was a discussion about how to avoid having build dependenc= ies > installed when all you wanted was the run-time dependencies. Poudriere > handles this nicely without all that mucking about with locking packages, > keeping your ports tree in sync with the one checked out at freebsd.org, > etc. >=20 > --=20 > Kevin P. Neal http://www.pobox.com/~kpn/ >=20 > "I like being on The Daily Show." - Kermit the Frog, Feb 13 2001 >=20 From owner-freebsd-questions@freebsd.org Wed Jan 20 04:22:40 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D5316A89FC3 for ; Wed, 20 Jan 2016 04:22:40 +0000 (UTC) (envelope-from ike@michaeleichorn.com) Received: from mx1.eichornenterprises.com (mx1.eichornenterprises.com [104.236.13.122]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx1.eichornenterprises.com", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 7B3EF125E for ; Wed, 20 Jan 2016 04:22:40 +0000 (UTC) (envelope-from ike@michaeleichorn.com) Received: from smtp.eichornenterprises.com (cpe-184-59-147-149.neo.res.rr.com [184.59.147.149]) by mx1.eichornenterprises.com (OpenSMTPD) with ESMTP id d428816c; Tue, 19 Jan 2016 23:22:31 -0500 (EST) Received: by smtp.eichornenterprises.com (OpenSMTPD) with ESMTPSA id fe4b4c8d TLS version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO; Tue, 19 Jan 2016 23:22:30 -0500 (EST) Message-ID: <1453263751.6711.61.camel@michaeleichorn.com> Subject: Re: Unexpected dependencies of graphics/libGL From: "Michael B. Eichorn" To: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira , kpneal@pobox.com Cc: Polytropon , freebsd-questions@freebsd.org Date: Tue, 19 Jan 2016 23:22:31 -0500 In-Reply-To: <20160120031432.cd8793f3626c07fc803ee308@ime.usp.br> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> <20160119141257.GA64358@neutralgood.org> <20160120031432.cd8793f3626c07fc803ee308@ime.usp.br> Content-Type: multipart/signed; micalg="sha-256"; protocol="application/x-pkcs7-signature"; boundary="=-JnOuVPiL637RQPklt1sj" X-Mailer: Evolution 3.18.4 Mime-Version: 1.0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 04:22:41 -0000 --=-JnOuVPiL637RQPklt1sj Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, 2016-01-20 at 03:14 +0000, Lu=C3=ADs Fernando Schultz Xavier da Silveira wrote: > Hi, >=20 > In a nutshell, the point is that the build dependencies should not be > there at all. Keeping them in a jail is not a proper solution because > they can still influence the host system (since the packages > resulting > from computations done in the jail will be installed in the host). There is nothing inherently wrong about this. The jail is not insecure, it runs no external services. In the case of poudriere we trust the build jails in the exact same way we trust software built on the the host from ports. The jails are used not so much for security as for isolating the build from the host environment. Do recall that jails are in a way secure extensions of the chroot concept; and that chroot was developed not for security, but for compling software in a controlled environment. This is what poudriere does, complie software in a controlled environment. Further the complied packages are not 'kept' in a jail, after running poudriere all jails are stopped and compliation jails are destroyed. Poudriere creates a package repository on the host system where built packages are kept. One big advantage to poudriere is that since you are building this repo you can confirm the whole build went well before installing any new package on a production system. For a complex build like x11/gnome3 this can be a major advantage. TLDR: Poudriere is at least as secure as building from ports. (Exactly as kpneal and Polytropon said.) >=20 > On Tue, 19 Jan 2016 09:12:57 -0500 > kpneal@pobox.com wrote: >=20 > > On Tue, Jan 19, 2016 at 06:34:38AM +0000, Lu=C3=ADs Fernando Schultz > > Xavier da Silveira wrote: > > > Hello, > > >=20 > > > > But this is not different from how ports are being built in > > > > the regular ports tree: Compilation tools could be compromized > > > > or package content could be affected. The typical "make > > > > install" > > > > will generate a package which is then installed via pkg. > > >=20 > > > Indeed, it is not different, and that is my point. > >=20 > > Huh? When did this turn into a discussion about security? > >=20 > > You can do a small amount of work and have security concerns or you > > can > > do much more work and have the exact same security concerns. I > > really don't > > see how this reflects badly on Poudriere. > >=20 > > I thought this was a discussion about how to avoid having build > > dependencies > > installed when all you wanted was the run-time dependencies. > > Poudriere > > handles this nicely without all that mucking about with locking > > packages, > > keeping your ports tree in sync with the one checked out at > > freebsd.org, > > etc. > >=20 --=-JnOuVPiL637RQPklt1sj Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCEqAw ggYwMIIFGKADAgECAgMOXcYwDQYJKoZIhvcNAQELBQAwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQK Ew1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVu dCBDQTAeFw0xNTA2MTMyMDI0NDZaFw0xNjA2MTQwMDM1NTBaMEgxHzAdBgNVBAMMFmlrZUBtaWNo YWVsZWljaG9ybi5jb20xJTAjBgkqhkiG9w0BCQEWFmlrZUBtaWNoYWVsZWljaG9ybi5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVdWALPz5h2s5zUQGIJYl6Vp8FPtZNko8q/3s crCsxXJLprMaDdpnqTsmkbmEfKvsqPQE6HVOpGxVRTl/tCm+VvouW9eY9ITMigb1OnHdU13CKO0j drgeU1nHst0qxwsIofRD7nC4dakT6exnrVndlBmLrf/bLPh2qOM8YK5qKK6m33fE7AyYrwiYAWFT 3fERI7LakjaabrIoS/Y1rCdL5FaCTMOlRbZyduc8HkrgjT2JW+i4fVcKyGL5gExBJWfS3q1uGFaB ie6pYtl8lZPtvN0JSfibP003RBoLgzqHJKW91RL0qNeDjKZi/5nrlU398l9UoVvLLO3KxoPBXKCx AgMBAAGjggLcMIIC2DAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcD AgYIKwYBBQUHAwQwHQYDVR0OBBYEFJZqarc6CcrOs6eAwOgrMznk5ZWWMB8GA1UdIwQYMBaAFFNy 7ZKc4NrLAVx8fpY1TvLUuFGCMCEGA1UdEQQaMBiBFmlrZUBtaWNoYWVsZWljaG9ybi5jb20wggFM BgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAuBggrBgEFBQcCARYiaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYBBQUHAgIwgeowJxYgU3RhcnRDb20gQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRoaXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBh Y2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFsaWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0 YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFuY2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2Ug aW4gY29tcGxpYW5jZSBvZiB0aGUgcmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8w LTAroCmgJ4YlaHR0cDovL2NybC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUH AQEEgYEwfzA5BggrBgEFBQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEv Y2xpZW50L2NhMEIGCCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIu Y2xhc3MxLmNsaWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20v MA0GCSqGSIb3DQEBCwUAA4IBAQB4K8iQw+0FRn3xEnB3vIIu2Vi4C3ZGnOMWP90FFXLrZ6uAu9AK xVCjXUVP6nAEsOopTMu769vVecdBvg0KO2i5aTDTdTLX4g9d020g4OLWW1NiynAkX8oKqJLqZ53q vHK4zP4KWPS3bSqDWVCosTMfI+H6tkg+6G3gS0HHoHTLKZhIT3z6PQZAfeofM7ed6NOdAcj0J2lP ODHzzz7Y9x4wMwYJdidorzUDVYkNIkim8ak7hK9F60NadA5w/BirFATSlzRyV0h1tl6oNisEaQcq tGvy6UoCTDhzaJ7pQValfDXJ/A47P0hNj/CX/PmkY1wQHsEJz2pbh5lqteP/fO0rMIIGMDCCBRig AwIBAgIDDl3GMA0GCSqGSIb3DQEBCwUAMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRD b20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EwHhcN MTUwNjEzMjAyNDQ2WhcNMTYwNjE0MDAzNTUwWjBIMR8wHQYDVQQDDBZpa2VAbWljaGFlbGVpY2hv cm4uY29tMSUwIwYJKoZIhvcNAQkBFhZpa2VAbWljaGFlbGVpY2hvcm4uY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVXVgCz8+YdrOc1EBiCWJelafBT7WTZKPKv97HKwrMVyS6az Gg3aZ6k7JpG5hHyr7Kj0BOh1TqRsVUU5f7Qpvlb6LlvXmPSEzIoG9Tpx3VNdwijtI3a4HlNZx7Ld KscLCKH0Q+5wuHWpE+nsZ61Z3ZQZi63/2yz4dqjjPGCuaiiupt93xOwMmK8ImAFhU93xESOy2pI2 mm6yKEv2NawnS+RWgkzDpUW2cnbnPB5K4I09iVvouH1XCshi+YBMQSVn0t6tbhhWgYnuqWLZfJWT 7bzdCUn4mz9NN0QaC4M6hySlvdUS9KjXg4ymYv+Z65VN/fJfVKFbyyztysaDwVygsQIDAQABo4IC 3DCCAtgwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF BwMEMB0GA1UdDgQWBBSWamq3OgnKzrOngMDoKzM55OWVljAfBgNVHSMEGDAWgBRTcu2SnODaywFc fH6WNU7y1LhRgjAhBgNVHREEGjAYgRZpa2VAbWljaGFlbGVpY2hvcm4uY29tMIIBTAYDVR0gBIIB QzCCAT8wggE7BgsrBgEEAYG1NwECAzCCASowLgYIKwYBBQUHAgEWImh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3BvbGljeS5wZGYwgfcGCCsGAQUFBwICMIHqMCcWIFN0YXJ0Q29tIENlcnRpZmljYXRp b24gQXV0aG9yaXR5MAMCAQEagb5UaGlzIGNlcnRpZmljYXRlIHdhcyBpc3N1ZWQgYWNjb3JkaW5n IHRvIHRoZSBDbGFzcyAxIFZhbGlkYXRpb24gcmVxdWlyZW1lbnRzIG9mIHRoZSBTdGFydENvbSBD QSBwb2xpY3ksIHJlbGlhbmNlIG9ubHkgZm9yIHRoZSBpbnRlbmRlZCBwdXJwb3NlIGluIGNvbXBs aWFuY2Ugb2YgdGhlIHJlbHlpbmcgcGFydHkgb2JsaWdhdGlvbnMuMDYGA1UdHwQvMC0wK6ApoCeG JWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL2NydHUxLWNybC5jcmwwgY4GCCsGAQUFBwEBBIGBMH8w OQYIKwYBBQUHMAGGLWh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9zdWIvY2xhc3MxL2NsaWVudC9j YTBCBggrBgEFBQcwAoY2aHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc3ViLmNsYXNzMS5j bGllbnQuY2EuY3J0MCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzANBgkqhkiG 9w0BAQsFAAOCAQEAeCvIkMPtBUZ98RJwd7yCLtlYuAt2RpzjFj/dBRVy62ergLvQCsVQo11FT+pw BLDqKUzLu+vb1XnHQb4NCjtouWkw03Uy1+IPXdNtIODi1ltTYspwJF/KCqiS6med6rxyuMz+Clj0 t20qg1lQqLEzHyPh+rZIPuht4EtBx6B0yymYSE98+j0GQH3qHzO3nejTnQHI9CdpTzgx888+2Pce MDMGCXYnaK81A1WJDSJIpvGpO4SvRetDWnQOcPwYqxQE0pc0cldIdbZeqDYrBGkHKrRr8ulKAkw4 c2ie6UFWpXw1yfwOOz9ITY/wl/z5pGNcEB7BCc9qW4eZarXj/3ztKzCCBjQwggQcoAMCAQICAR4w DQYJKoZIhvcNAQEFBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0 Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3MTAyNDIxMDE1NVoXDTE3MTAyNDIxMDE1 NVowgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1 cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAx IFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMcJg8zOLdgasSmkLhOrlr6KMoOMpohBllVHrdRvEg/q6r8jR+EK75xCGhR8ToREoqe7 zM9/UnC6TS2y9UKTpT1v7RSMzR0t6ndl0TWBuUr/UXBhPk+Kmy7bI4yW4urC+y7P3/1/X7U8ocb8 VpH/Clt+4iq7nirMcNh6qJR+xjOhV+VHzQMALuGYn5KZmc1NbJQYclsGkDxDz2UbFqE2+6vIZoL+ jb9x4Pa5gNf1TwSDkOkikZB1xtB4ZqtXThaABSONdfmv/Z1pua3FYxnCFmdr/+N2JLKutIxMYqQO Jebr/f/h5t95m4JgrM3Y/w7YX9d7YAL9jvN4SydHsU6n65cCAwEAAaOCAa0wggGpMA8GA1UdEwEB /wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRTcu2SnODaywFcfH6WNU7y1LhRgjAf BgNVHSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jBmBggrBgEFBQcBAQRaMFgwJwYIKwYBBQUH MAGGG2h0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9jYTAtBggrBgEFBQcwAoYhaHR0cDovL3d3dy5z dGFydHNzbC5jb20vc2ZzY2EuY3J0MFsGA1UdHwRUMFIwJ6AloCOGIWh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3Nmc2NhLmNybDAnoCWgI4YhaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2ZzY2EuY3Js MIGABgNVHSAEeTB3MHUGCysGAQQBgbU3AQIBMGYwLgYIKwYBBQUHAgEWImh0dHA6Ly93d3cuc3Rh cnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuc3RhcnRzc2wuY29t L2ludGVybWVkaWF0ZS5wZGYwDQYJKoZIhvcNAQEFBQADggIBAAqDCH14qywGXLhjjF6uHLkjd02h cdh9hrw+VUsv+q1eeQWB21jWj3kJ96AUlPCoEGZ/ynJNScWy6QMVQjbbMXltUfO4n4bGGdKo3awP Wp61tjAFgraLJgDk+DsSvUD6EowjMTNx25GQgyYJ5RPIzKKR9tQW8gGK+2+RHxkUCTbYFnL6kl8C h507rUdPPipJ9CgJFws3kDS3gOS5WFMxcjO5DwKfKSETEPrHh7p5shuuNktvsv6hxHTLhiMKX893 gxdT3XLS9OKmCv87vkINQcNEcIIoFWbP9HORz9v3vQwR4e3ksLc2JZOAFK+ssS5XMEoznzpihEP0 PLc4dCBYjbvSD7kxgDwZ+Aj8Q9PkbvE9sIPP7ON0fz095HdThKjiVJe6vofq+n6b1NBc8XdrQvBm unwxD5nvtTW4vtN6VY7mUCmxsCieuoBJ9OlqmsVWQvifIYf40dJPZkk9YgGTzWLpXDSfLSplbY2L L9C9U0ptvjcDjefLTvqSFc7tw1sEhF0n/qpA2r0GpvkLRDmcSwVyPvmjFBGqUp/pNy8ZuPGQmHwF i2/14+xeSUDG2bwnsYJQG2EdJCB6luQ57GEnTA/yKZSTKI8dDQa8Sd3zfXb19mOgSF0bBdXbuKhE puP9wirslFe6fQ1t5j5R0xi72MZ8ikMu1RQZKCyDbMwazlHiMYIDfzCCA3sCAQEwgZQwgYwxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkg SW50ZXJtZWRpYXRlIENsaWVudCBDQQIDDl3GMA0GCWCGSAFlAwQCAQUAoIIBuzAYBgkqhkiG9w0B CQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjAxMjAwNDIyMzFaMC8GCSqGSIb3DQEJ BDEiBCBYWUMvjK3McW+AaBzyyPtcTPtV/whi66PgCOO7u3ZQFjCBpQYJKwYBBAGCNxAEMYGXMIGU MIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJl IERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQ cmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAw5dxjCBpwYLKoZIhvcNAQkQAgsxgZeggZQw gYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUg RGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFBy aW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQIDDl3GMA0GCSqGSIb3DQEBAQUABIIBAFka71PQ 3z85Dt+K1la5h9xh2+Svw62UNCUpgs/NP3KPMl252fUDZmRbReX/st+kY1WebXfHVylNgvgW9rnz wdY/P3ZgaMCXkA4WybJ19DdJ5XcfsSw5slbebYtkrJq/E9Rd4dYArjG/BplB2ZtFZGTqxOWCcfeg s88kWxoLexVyXmDRCiqrsd043OvQBEewOygACv64eisgQMesiZMbLlEqyZk6139FIq5K1iep0nW2 ZRSd9VS4SQRWzazjh4P0yNMsRJ/P4DutYNGcnVEltXTmWFrLPPj/juCshhSxHogo1cOJ0V0EOPrZ RiYyfCRvjC7R8riKw7gVMVj88Fc9HWIAAAAAAAA= --=-JnOuVPiL637RQPklt1sj-- From owner-freebsd-questions@freebsd.org Wed Jan 20 05:27:54 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D42ABA88967 for ; Wed, 20 Jan 2016 05:27:54 +0000 (UTC) (envelope-from bhat.jayalakshmi@gmail.com) Received: from mail-yk0-x231.google.com (mail-yk0-x231.google.com [IPv6:2607:f8b0:4002:c07::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 96B3A1EB0 for ; Wed, 20 Jan 2016 05:27:54 +0000 (UTC) (envelope-from bhat.jayalakshmi@gmail.com) Received: by mail-yk0-x231.google.com with SMTP id v14so581270548ykd.3 for ; Tue, 19 Jan 2016 21:27:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to:content-type; bh=1aw4aG4ByJgbWgz0/8uaMKXCRAsVGG+SAgkAvtFBwZY=; b=GFXBTlFwCsdbH2EOTi98uCxEB1M02kQNDR5whj4mFwaj3i1n9MV4/TQsaBkIh3gWgk LX5BhcISyFYz6VpcxCH6lNm+w2cxMAYCIvslAOBQje5JPh72ntLfpwTV7JyKJq8zFkGk B+Wux/vbI7N284POglU4lrpkCKHNBuEknoSxF0e4Boq3Qll1NMgOaEdB7A0Gz7draGn8 OvMYOzmUBkBuLoRU72v30g0Yrcl/srnimVGUVKa8udwGGkVEAWCDOfhxLIildXUnjMMe kmzaX8Cf9RAvp0FRHUnOWGKUpIt4U7qVAaewE9Pock+Z9wqwbMdCW61WgJ58y9jkM7BV sMPw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-type; bh=1aw4aG4ByJgbWgz0/8uaMKXCRAsVGG+SAgkAvtFBwZY=; b=Z5VGkP/GyaM102GOw1cSd1h5VPstSCyrkQjuXbtmj505lkcAhDcU592B6XDU3nZYcu IqAiNNlx2LcwC/9t7lrzSbRhlx/Jb5eDyQKT/lcs3Br0I+bxE1yJXDAxdjKxqCUcrzhJ +LGHBFWEmAbqIlNxMIvOMeXKPJSZpgLjoEIiz7zBWsHE+9TdGF70uP2RCaAhkZov8TLO d95X5yRCrokDXAGefknngGuyPZVMxGX01VRQlSJmJC29bVNP5GjUqlrtatiR8SNbbnSh U7Q5O1cKzp6kqBWA+eBgHzBF4KrMz6Vx9HKVtBGzt8uEf+jM+vJVjGwY1MEP5VA8uHP7 yM8A== X-Gm-Message-State: ALoCoQnd1VZaSZesL9Ip8lqrL8+jGlhzB9Q1M5rKeJ/Id3QNesmIY+CwgjDDNyuFMW+BbYh04oeQUM5wUHlHSdnPM4h0F8H7yg== X-Received: by 10.37.31.87 with SMTP id f84mr9524014ybf.151.1453267673802; Tue, 19 Jan 2016 21:27:53 -0800 (PST) MIME-Version: 1.0 Received: by 10.129.76.193 with HTTP; Tue, 19 Jan 2016 21:27:14 -0800 (PST) From: Jayalakshmi bhat Date: Wed, 20 Jan 2016 10:57:14 +0530 Message-ID: Subject: network interface support in FreeBSD IPsec To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 05:27:54 -0000 Hi All, We have systems having multiple interfaces and would like to control IPsec policy per interface. We are investigating if FreeBSD IPsec supports specifying interface index in the Kernel IPsec policy. This would be helpful to control IPsec connections per interface. We are not seeing any such ifindex support in the latest 10.2 stable release. Could you please confirm if any ifindex option is available in Kernel IPsec policy options ? Regards Jayalakshmi From owner-freebsd-questions@freebsd.org Wed Jan 20 05:52:33 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D86EAA89229 for ; Wed, 20 Jan 2016 05:52:33 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from iris.ime.usp.br (iris.ime.usp.br [143.107.45.5]) by mx1.freebsd.org (Postfix) with ESMTP id 91FFE18E1 for ; Wed, 20 Jan 2016 05:52:33 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from cage0 (OTWAON234VW-LP140-05-1176444850.dsl.bell.ca [70.31.31.178]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schultz@iris.ime.usp.br) by iris.ime.usp.br (Postfix) with ESMTPSA id 6FF3E290029E; Wed, 20 Jan 2016 03:52:20 -0200 (BRST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ime.usp.br; s=mail; t=1453269145; bh=nDUQCLTGAtQdTR+G6HnGcKM2vx7FYyzEDNEWLNvsX64=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=Ihg1HiR7jq63rby2Z+3VwVx/oHi8IXuMtv0F0v/WZF4ETgM2A9EGopEJA1mBjqEVn tX12VbfaJ1r4SvrDWfdmcaT4QW4nzXXPedpNatstYxl+mvcfOb83pjUm2/+qpkOFQg NNA5SwU89BjuoGWBnYaL34nPlPZUJ6bZ/fkbG2O4= Date: Wed, 20 Jan 2016 05:51:08 +0000 From: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira To: "Michael B. Eichorn" Cc: kpneal@pobox.com, Polytropon , freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160120055108.b9516e8b6ddf576a5239370c@ime.usp.br> In-Reply-To: <1453263751.6711.61.camel@michaeleichorn.com> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> <20160119141257.GA64358@neutralgood.org> <20160120031432.cd8793f3626c07fc803ee308@ime.usp.br> <1453263751.6711.61.camel@michaeleichorn.com> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on iris.ime.usp.br X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 05:52:33 -0000 Hello, You are correct. As you described and as I pointed out before, Poudriere is the right tool for creating package repositories. It prevents badly written ports from interfering with the host system. However, in a system where the packages built this way are then installed into it, this tidyness/security benefit vanishes. This is my use case and, thus, for my personal use, Poudriere does not make sense. On Tue, 19 Jan 2016 23:22:31 -0500 "Michael B. Eichorn" wrote: > On Wed, 2016-01-20 at 03:14 +0000, Lu=EDs Fernando Schultz Xavier da > Silveira wrote: > > Hi, > >=20 > > In a nutshell, the point is that the build dependencies should not be > > there at all. Keeping them in a jail is not a proper solution because > > they can still influence the host system (since the packages > > resulting > > from computations done in the jail will be installed in the host). >=20 > There is nothing inherently wrong about this. The jail is not insecure, > it runs no external services. In the case of poudriere we trust the > build jails in the exact same way we trust software built on the the > host from ports. >=20 > The jails are used not so much for security as for isolating the build > from the host environment. Do recall that jails are in a way secure > extensions of the chroot concept; and that chroot was developed not for > security, but for compling software in a controlled environment. This > is what poudriere does, complie software in a controlled environment. >=20 > Further the complied packages are not 'kept' in a jail, after running > poudriere all jails are stopped and compliation jails are destroyed. > Poudriere creates a package repository on the host system where built > packages are kept. >=20 > One big advantage to poudriere is that since you are building this repo > you can confirm the whole build went well before installing any new > package on a production system. For a complex build like x11/gnome3 > this can be a major advantage. >=20 > TLDR: Poudriere is at least as secure as building from ports. (Exactly > as kpneal and Polytropon said.) >=20 > >=20 > > On Tue, 19 Jan 2016 09:12:57 -0500 > > kpneal@pobox.com wrote: > >=20 > > > On Tue, Jan 19, 2016 at 06:34:38AM +0000, Lu=EDs Fernando Schultz > > > Xavier da Silveira wrote: > > > > Hello, > > > >=20 > > > > > But this is not different from how ports are being built in > > > > > the regular ports tree: Compilation tools could be compromized > > > > > or package content could be affected. The typical "make > > > > > install" > > > > > will generate a package which is then installed via pkg. > > > >=20 > > > > Indeed, it is not different, and that is my point. > > >=20 > > > Huh? When did this turn into a discussion about security? > > >=20 > > > You can do a small amount of work and have security concerns or you > > > can > > > do much more work and have the exact same security concerns. I > > > really don't > > > see how this reflects badly on Poudriere. > > >=20 > > > I thought this was a discussion about how to avoid having build > > > dependencies > > > installed when all you wanted was the run-time dependencies. > > > Poudriere > > > handles this nicely without all that mucking about with locking > > > packages, > > > keeping your ports tree in sync with the one checked out at > > > freebsd.org, > > > etc. > > >=20 From owner-freebsd-questions@freebsd.org Wed Jan 20 08:20:22 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AF31CA88295 for ; Wed, 20 Jan 2016 08:20:22 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 5B81E1FE3 for ; Wed, 20 Jan 2016 08:20:22 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0K8KKXY014807 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Wed, 20 Jan 2016 08:20:20 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6] claimed to be liminal.local Subject: Re: Downloading 10.2-RELEASE-p10 source without prayer To: freebsd-questions@freebsd.org References: From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <569F4344.5020907@FreeBSD.org> Date: Wed, 20 Jan 2016 08:20:20 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="87TOxhQ4kuEHNIVgRHcmmTr5UEdRkIn1K" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 08:20:22 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --87TOxhQ4kuEHNIVgRHcmmTr5UEdRkIn1K Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 20/01/2016 01:30, Chris Stankevitz wrote: > On Tue, Jan 19, 2016 at 4:45 PM, Chris Stankevitz > wrote: >> > Of course I'm being sarcastic about the prayer... but is there a way= >> > (a tarball or special SVN tag/branch) to get the "official" >> > 10.2-RELEASE-p10 code? What do the freebsd-update servers use? > I could just look at "svn log -l 1" and see if it jives more or less > with the most recent freebsd-announce email. Depends how paranoid you want to be. If you download one of the DVD installation images, that should include base system sources and will have offline checksums that you can verify. You can then apply the patches from all of the SAs and ENs published since, all of which are digitally signed. That's probably as good as you can get in ensuring you've got authentic, untampered sources. Most people would find it good enough to use eg. freebsd-update -- the updates are cryptographically signed, so you can be reasonably certain that what it installs on your system is the same as what it has on the servers. It does use a pretty direct connection to the master SVN repository for obtaining the code it builds from, but you generally have to trust that it is using unadulterated sources itself. freebsd-update can maintain a copy of /usr/src for you. Or else you can just checkout the RELENG-10 branch from one of the SVN mirrors: # cd /usr # svn co https://svn.freebsd.org/base/releng/10.2 src The SSL cert on the server should be sufficient guarantee you've not been spoofed into some MITM scenario. Cheers, Matthew --87TOxhQ4kuEHNIVgRHcmmTr5UEdRkIn1K Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2 iQJ8BAEBCgBmBQJWn0NEXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkAThnYP/0L65tCeb84hbADMXjMqUr3B XHZUX7sq+CGdZQQB8wsy9IAQuxrClxYszbjnMsheBSDHZTVLNRJZhRzGxV2TJjyR ZQNlSle8gerWyOCt2RZZxVSjcpMVGGprc6Hj9JQ+iRS51ZWoedEV/j4GcnCDceUZ QMmuuBFgGdmB37jsGAmsO8eGSCWEVT1MtoniEeha5RjLyASORdqL/HsWONMMBhw7 +UDMzKf9M37QOi7aQEk6MZEftIlYsxb6WYd0ZemoYQdx5iv0oasB3UMRGEaBbpQd 9axq24YW+v9QSCZGT0YxYvMZoilKaNmoPuAlQrqY8CBiZxKJT8mC0wAAjcmKqrbz ieUPwWdv3UrrhZb59+G5v/WIe4PV4ZrQUZBnSQ5KZO2JU8q2FhRvEPCQa4/GQEVV 2XYuVJTInNFtF2YjJKh0JbQYX6Zm4s4eyjrNb6xJAKtjcLYqgLncA5Fr9IppihlW Rk6hNY1+umR5PkK8JshBK2b7jUqxISkmn2w7QduxC/R3i/IeKO+NkOg3436NZigk 9MWkxnXKAmnCZKhyHPP6MrgDVPj1Miad5oZ2X3omjotaRPVsrPJnRqP/GjCsYSfP e5SvB6ZXyFpZ+o6LyAQl38BBgt2RV8LbzO51L/20l4M7ih+6RIqMcL9jmh4pguo7 sRZWwA+KUi90BSYZwfMH =tENU -----END PGP SIGNATURE----- --87TOxhQ4kuEHNIVgRHcmmTr5UEdRkIn1K-- From owner-freebsd-questions@freebsd.org Wed Jan 20 08:27:10 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 575D4A887B4 for ; Wed, 20 Jan 2016 08:27:10 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id F2A0D1B9D for ; Wed, 20 Jan 2016 08:27:09 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0K8R7kr015003 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Wed, 20 Jan 2016 08:27:08 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6] claimed to be liminal.local Subject: Re: resolver not working in a chroot To: freebsd-questions@freebsd.org References: <569e05b6.2RStkLc7SZIg/dVM%perryh@pluto.rain.com> <569E12B2.5090302@freebsd.org> <569eeb77.GFz8dwXgj3CL44SN%perryh@pluto.rain.com> From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <569F44DB.4080406@FreeBSD.org> Date: Wed, 20 Jan 2016 08:27:07 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <569eeb77.GFz8dwXgj3CL44SN%perryh@pluto.rain.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="JMquF8p7c446sEOu6N82PA16SI3C13G5R" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 08:27:10 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --JMquF8p7c446sEOu6N82PA16SI3C13G5R Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 20/01/2016 02:05, Perry Hutchison wrote: > Matthew Seaman wrote: >> On 01/19/16 09:45, Perry Hutchison wrote: >>> The resolver is not working in a chroot (to the 10.2 memstick image, >>> with its /tmp, /var/run, and /var/tmp made writable by mounting tmpfs= >>> on them): >>> # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt ping pkg.FreeBSD.org >>> ping: cannot resolve pkg.FreeBSD.org: Host name lookup failure >>> but it works when not in a chroot: >>> # ping pkg.FreeBSD.org >>> PING pkg.FreeBSD.org (96.47.72.71): 56 data bytes >>> 64 bytes from 96.47.72.71: icmp_seq=3D0 ttl=3D51 time=3D97.329 ms >>> ... >>> What would cause this? >> >> You've mounted the 10.2 memstick image on /mnt? >=20 > Yes. >=20 >> Do you have a devfs mounted inside the chroot? Try running: >> >> # mount -t devfs devfs /mnt/dev >> >> and then try your chroot'ed command again. Interesting to see >> if that helps. >=20 > The mount command worked -- there's now a devfs in the chroot > environment -- but it didn't help. I still get the same error. > I also tried running "mount -t devfs devfs /dev" in the chroot > (after unmounting /mnt/dev), and that didn't help either. >=20 > There must be some difference in the lookup mechanisms between > the resolver and host(1), since host(1) works in the chroot. Yes. host(1) uses only the DNS, whereas the general resolver functions can use all sorts of resolution mechanisms -- see nsswitch.conf(5). In order to track down exactly what the problem is I'd be running that ping command under truss(1) to try and spot what the failure is. That's not guaranteed to work, nor is it generally completely obvious from the truss output what the trouble may be. My guess though is that something is read-only which the system expects to be read-write. Cheers, Matthew --JMquF8p7c446sEOu6N82PA16SI3C13G5R Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2 iQJ8BAEBCgBmBQJWn0TbXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATjVsP/jSqih4q+pSe4p8UsE962vyF 4/eKRuVU37i3JuFb3eSBSX4I+1C4A5KBJc8zr7xcOZf8xLZ2kWP78ByGe09Pr4k/ C8Fh5gPJVy8/Hex3xx2fkRisBxyPQHzNdYgv1qzDr4GD212byoZOc8FGalheK9Fv 7y1qrSSMQ9WtYIDYXtlunR0OT81DFI6Z4hD6CvrHa2XzaIwst6WZ9LUaB98Y+96E Gmn9pEvK7Pbormcr29MMcpc+zMSoRhmXTXmyqUCgSRP+oKKqd/3TvtcLvxM8j+at UIJsiD8IdcCOZcRXvrETwMYIzaUFJ4wD7adUmeQf5Ht3gElLOzjfIs88WDTLuDvI hNYwFKuVEmBG76RWOEC0S0u1j9RlN+gp5rf14d+JHoFfAnoA1eQmxOu1Rm9g6N6c wQF0tQpq9znbLJSKKrO4wOGIuRX9M3FHs5sYk8LruOOJZIjPSzErZuHPHu9Hykw7 gaFlPopGZX+688w2mf2cmqYwy6dl3ij4laTfa6xpW2mTIj6cq/Jzo3w4Xz0HwFUf Pq8D5vpHV10TJMYB7HcbXZNw3KeWkuvIJSzmJP2f1uFjfparkpEWQQaaWZDJDOfO 4YyQwAXGLqV8n8qkfcWpQMCbqEgUs5AfhFRDSR5itjUhue5MfW6JuWk9RumtmUz/ /jREtzm/gyeDNmCaMIHS =t3wf -----END PGP SIGNATURE----- --JMquF8p7c446sEOu6N82PA16SI3C13G5R-- From owner-freebsd-questions@freebsd.org Wed Jan 20 09:56:42 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 114A4A8AA11 for ; Wed, 20 Jan 2016 09:56:42 +0000 (UTC) (envelope-from ohartman@zedat.fu-berlin.de) Received: from outpost1.zedat.fu-berlin.de (outpost1.zedat.fu-berlin.de [130.133.4.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id CD49A1C9F for ; Wed, 20 Jan 2016 09:56:41 +0000 (UTC) (envelope-from ohartman@zedat.fu-berlin.de) Received: from inpost2.zedat.fu-berlin.de ([130.133.4.69]) by outpost.zedat.fu-berlin.de (Exim 4.85) for freebsd-questions@freebsd.org with esmtp (envelope-from ) id <1aLpVH-002Wlw-6U>; Wed, 20 Jan 2016 10:56:39 +0100 Received: from p578a69f9.dip0.t-ipconnect.de ([87.138.105.249] helo=freyja.zeit4.iv.bundesimmobilien.de) by inpost2.zedat.fu-berlin.de (Exim 4.85) for freebsd-questions@freebsd.org with esmtpsa (envelope-from ) id <1aLpVH-001ofu-0V>; Wed, 20 Jan 2016 10:56:39 +0100 Date: Wed, 20 Jan 2016 10:56:33 +0100 From: "O. Hartmann" To: freebsd-questions Subject: OpenLDAP: using FreeBSD's /etc/login.conf attributes with external LDAP users? Message-ID: <20160120105633.602dd290@freyja.zeit4.iv.bundesimmobilien.de> Organization: FU Berlin X-Mailer: Claws Mail 3.13.1 (GTK+ 2.24.29; amd64-portbld-freebsd11.0) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Originating-IP: 87.138.105.249 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 09:56:42 -0000 Using lates net/openldap24-server with FreeBSD as server and login target for several users results in a problem. Via attribute :rquirehome: in /etc/login.conf (i.e. added to class "standard") one can prevent users from login without a valid home directory. Otherwise a user with a valid LDAP entry will end up in "/". I'd like to add a standard class for any user log in (via ssh) on that specific server (only administrative staff has local logins in /etc/passwd, all users are located in LDAP DIT). I searched the net for solutions and found one suggesting reverting the "default" behaviour to have :requirehome: and use another class for all users local in /etc/master.passwd (i.e. "privileged") - but this seems somehow odd and in a hurry, updating software or similar, new facility users, like the recently added user "_ypldap" will end up in the default class with prerquisited a daemon will fail with. I think this could be too much of a trap/pitfall. So, the question is whether there is a more elegant/semantic way to do so. Please CC me, I do not subscribe this list, thanks in advance and kind regards, Oliver From owner-freebsd-questions@freebsd.org Wed Jan 20 10:20:31 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 782D9A89142 for ; Wed, 20 Jan 2016 10:20:31 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 1E4F11777 for ; Wed, 20 Jan 2016 10:20:30 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from ox-dell39.ox.adestra.com (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0KAKI35017092 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 20 Jan 2016 10:20:25 GMT (envelope-from matthew@freebsd.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=freebsd.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk u0KAKI35017092 Authentication-Results: smtp.infracaninophile.co.uk/u0KAKI35017092; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be ox-dell39.ox.adestra.com Subject: Re: OpenLDAP: using FreeBSD's /etc/login.conf attributes with external LDAP users? To: freebsd-questions@freebsd.org References: <20160120105633.602dd290@freyja.zeit4.iv.bundesimmobilien.de> Cc: ohartman@zedat.fu-berlin.de From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <569F5F5E.9020403@freebsd.org> Date: Wed, 20 Jan 2016 10:20:14 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <20160120105633.602dd290@freyja.zeit4.iv.bundesimmobilien.de> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Fu6GE5CoIvKQP91DSbkEXbtnNvA2GKCi1" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 10:20:31 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Fu6GE5CoIvKQP91DSbkEXbtnNvA2GKCi1 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 01/20/16 09:56, O. Hartmann wrote: > Using lates net/openldap24-server with FreeBSD as server and login targ= et for > several users results in a problem. Use nss-pam-ldapd -- it's way better than pam-ldap. > Via attribute :rquirehome: in /etc/login.conf (i.e. added to class "sta= ndard") > one can prevent users from login without a valid home directory. Otherw= ise a > user with a valid LDAP entry will end up in "/". I'd like to add a stan= dard > class for any user log in (via ssh) on that specific server (only admin= istrative > staff has local logins in /etc/passwd, all users are located in LDAP DI= T). >=20 > I searched the net for solutions and found one suggesting reverting the= > "default" behaviour to have :requirehome: and use another class for all= users > local in /etc/master.passwd (i.e. "privileged") - but this seems someho= w odd > and in a hurry, updating software or similar, new facility users, like = the > recently added user "_ypldap" will end up in the default class with > prerquisited a daemon will fail with. I think this could be too much of= a > trap/pitfall.=20 >=20 > So, the question is whether there is a more elegant/semantic way to do = so. >=20 >=20 > Please CC me, I do not subscribe this list, >=20 > thanks in advance and kind regards, One way round this problem is to use pam_mkhomedir -- that way you can ensure that anyone that can log in has a home directory (automatically created for them if necessary.) Of course this means that user's SSH authorized_keys will not be available automatically in their home dir -- you can handle that in several different ways: use Kerberos / GSSAPI for authentication, or use LDAP to serve the public keys (you'll need to write a script that looks up the users' key in LDAP and returns it, which you add as AuthorizedKeysCommand in /etc/ssh/sshd_config). If you need to restrict which machines various people in your LDAP directory can log into, it would be better to have an explicit mechanism within LDAP rather than relying on an implicit property of the account, like existence of the home directory or not. Cheers, Matthew --Fu6GE5CoIvKQP91DSbkEXbtnNvA2GKCi1 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJWn19eAAoJEABRPxDgqeTnL/EP/3TRv9GsJkBa1FpE0+Ynh1UT tNql0bEfidQknS0xmhAt7cc5V7EhxxILffmFs7xQHO/bIVhqiLRd+A61gtw7EWXf J2G0s9ViHqdNDwItHjWM6ow3hhhjWIdjs+1JYIYNYlKD+IsHh1cqDWiI833slX4P Aphyz3BU8Jwyv7t4DALWP058x/H+NDuFG7wzJWHOIlhgIUV3/+1oowvnd/TAyK8y KZuhVZ/y8/re1CA5W93nKil1r0RY9VbYc4c+WWEghxQKalfAtpM5ZDFQrO/QA7EQ BVwa6V2SPToo2kttnLmGcKNennNLDF6esValnTiMLQdlADj90Ux2dmBkq2GgHWHo 6hY9QLNEyKG+w99WSJqh3dxWlrpMkoQy7P0IDVvhjPkj7do7BHWrdg1hJfK9Yb4b LtcmNcrcWCi7IkC1hmPSnBSTsLohcAzYoivIDJktWl44UKD57CFsRZVfuog+t6C4 rnXvaZzbB+FtZLD6AOkId69HrEKm+FXOtzdMAQ60XMQnexbGhFZc8Q/FYuwhmSm5 8WBqqtHJsigU9xxiLdSEXr/OXrkmwjpoTsnMBUNgygg4rWpu8zs6JT0wKiwIOPEe jS0E4iS+zrnClLZw/ED6Ekc3pOtqKhoPa/zO4Dj4OQhSlBmyZt1rkUn+SGUn7mmY fWWMnPR7JO1pbEeoqylK =HkGl -----END PGP SIGNATURE----- --Fu6GE5CoIvKQP91DSbkEXbtnNvA2GKCi1-- From owner-freebsd-questions@freebsd.org Wed Jan 20 11:13:25 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B83B8A885D1 for ; Wed, 20 Jan 2016 11:13:25 +0000 (UTC) (envelope-from perryh@pluto.rain.com) Received: from agora.rdrop.com (agora.rdrop.com [IPv6:2607:f678:1010::34]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A08331373 for ; Wed, 20 Jan 2016 11:13:25 +0000 (UTC) (envelope-from perryh@pluto.rain.com) Received: from agora.rdrop.com (66@localhost [127.0.0.1]) by agora.rdrop.com (8.13.1/8.12.7) with ESMTP id u0KB8VY2016509 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Wed, 20 Jan 2016 03:08:33 -0800 (PST) (envelope-from perryh@pluto.rain.com) Received: (from uucp@localhost) by agora.rdrop.com (8.13.1/8.14.2/Submit) with UUCP id u0KB8TK4016502 for freebsd-questions@freebsd.org; Wed, 20 Jan 2016 03:08:29 -0800 (PST) (envelope-from perryh@pluto.rain.com) Received: from fbsd81 by pluto.rain.com (4.1/SMI-4.1-pluto-M2060407) id AA06596; Wed, 20 Jan 16 03:07:42 PST Date: Wed, 20 Jan 2016 03:07:30 -0800 From: perryh@pluto.rain.com (Perry Hutchison) To: freebsd-questions@freebsd.org Subject: Re: resolver not working in a chroot Message-Id: <569f6a72.IDjZt6e6TrIMfmrk%perryh@pluto.rain.com> References: <569e05b6.2RStkLc7SZIg/dVM%perryh@pluto.rain.com> <569E12B2.5090302@freebsd.org> <569eeb77.GFz8dwXgj3CL44SN%perryh@pluto.rain.com> <569F44DB.4080406@FreeBSD.org> In-Reply-To: <569F44DB.4080406@FreeBSD.org> User-Agent: nail 11.25 7/29/05 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 11:13:25 -0000 Matthew Seaman wrote: > On 20/01/2016 02:05, Perry Hutchison wrote: > > There must be some difference in the lookup mechanisms between > > the resolver and host(1), since host(1) works in the chroot. > > Yes. host(1) uses only the DNS, whereas the general resolver functions > can use all sorts of resolution mechanisms -- see nsswitch.conf(5). > > In order to track down exactly what the problem is I'd be running that > ping command under truss(1) to try and spot what the failure is. That's > not guaranteed to work, nor is it generally completely obvious from the > truss output what the trouble may be. My guess though is that something > is read-only which the system expects to be read-write. That produced some interesting results, the first being that truss(1) apparently does not like to run in a chroot: # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt truss -o \ /var/tmp/ping-in-chroot ping -c 1 pkg.FreeBSD.org produced 313 lines of -- CANNOT READ REGISTERS -- followed by process exit. Having truss run the chroot showed that the resolver is correctly deciding to consult the DNS after failing to find the hostname in /etc/hosts -- /etc/nsswitch.conf specified "hosts: files dns" -- then falling over when it tries to open a socket for the purpose: open("/etc/hosts",0x100000,0666) = 4 (0x4) fstat(4,{ mode=-rw-r--r-- ,inode=12102,size=1090,blksize=8192 }) = 0 (0x0) read(4,"# $FreeBSD: releng/10.2/etc/host"...,8192) = 1090 (0x442) read(4,0x28820000,8192) = 0 (0x0) close(4) = 0 (0x0) gettimeofday({1453281421.449818 },0x0) = 0 (0x0) kqueue(0x0,0xbfbecccc,0x8,0x7273752f,0x62696c2f,0x28060aae) = 4 (0x4) socket(PF_INET,0x10000002,0) ERR#43 'Protocol not supported' socket(PF_INET,0x10000002,0) ERR#43 'Protocol not supported' socket(PF_INET,0x10000002,0) ERR#43 'Protocol not supported' socket(PF_INET,0x10000002,0) ERR#43 'Protocol not supported' socket(PF_INET,0x10000002,0) ERR#43 'Protocol not supported' socket(PF_INET,0x10000002,0) ERR#43 'Protocol not supported' close(4) = 0 (0x0) madvise(0x28829000,0x10000,0x5,0x281eb468,0xbfbee138,0x28132e50) = 0 (0x0) madvise(0x28820000,0x2000,0x5,0x281eb468,0xbfbee138,0x28132e50) = 0 (0x0) madvise(0x28825000,0x1000,0x5,0x281eb468,0xbfbee138,0x28132e50) = 0 (0x0) write(2,"ping: ",6) = 6 (0x6) write(2,"cannot resolve pkg.FreeBSD.org: "...,56) = 56 (0x38) In contrast, host(1) has no problem when run in the same way: socket(PF_INET,SOCK_DGRAM,17) = 3 (0x3) sendto(3,"\M^R>\^A\0\0\^A\0\0\0\0\0\0\^Cpk"...,33,0x0,{ AF_INET 192.168.0.1:53 },0x10) = 33 (0x21) select(4,{3},0x0,0x0,{5.000000 }) = 1 (0x1) fcntl(3,F_GETFL,) = 2 (0x2) fcntl(3,F_SETFL,O_NONBLOCK|0x2) = 0 (0x0) recvfrom(3,"\M^R>\M^A\M^@\0\^A\0\^A\0\0\0\0"...,65535,0x0,NULL,0x0) = 49 (0x31) madvise(0x28813000,0x10000,0x5,0x28399468,0xbfbfe3c0,0x282e0e50) = 0 (0x0) close(3) = 0 (0x0) madvise(0x28810000,0x2000,0x5,0x28399468,0xbfbfe8c0,0x282e0e50) = 0 (0x0) gettimeofday({1453283485.628061 },0x0) = 0 (0x0) madvise(0x28808000,0x1000,0x5,0x28399468,0xbfbfe948,0x282e0e50) = 0 (0x0) madvise(0x28808000,0x10000,0x5,0x28399468,0xbfbfe5d0,0x282e0e50) = 0 (0x0) fstat(1,{ mode=crw--w---- ,inode=192,size=0,blksize=4096 }) = 0 (0x0) ioctl(1,TIOCGETA,0xbfbfe768) = 0 (0x0) madvise(0x28809000,0x10000,0x5,0x28399468,0xbfbfe5d0,0x282e0e50) = 0 (0x0) write(1,"pkg.FreeBSD.org has address 96.4"...,40) = 40 (0x28) The most glaring difference is that 0x10000002 second parameter that the resolver passes to socket(2): it should be SOCK_DGRAM (or, conceivably, SOCK_STREAM -- if the resolver is using TCP instead of UDP for its DNS queries). From owner-freebsd-questions@freebsd.org Wed Jan 20 12:23:26 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1BDDEA8AB8D for ; Wed, 20 Jan 2016 12:23:26 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id B158113D3 for ; Wed, 20 Jan 2016 12:23:25 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from ox-dell39.ox.adestra.com (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0KCNKRi019459 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Wed, 20 Jan 2016 12:23:21 GMT (envelope-from matthew@freebsd.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=freebsd.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk u0KCNKRi019459 Authentication-Results: smtp.infracaninophile.co.uk/u0KCNKRi019459; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be ox-dell39.ox.adestra.com Subject: Re: resolver not working in a chroot To: freebsd-questions@freebsd.org References: <569e05b6.2RStkLc7SZIg/dVM%perryh@pluto.rain.com> <569E12B2.5090302@freebsd.org> <569eeb77.GFz8dwXgj3CL44SN%perryh@pluto.rain.com> <569F44DB.4080406@FreeBSD.org> <569f6a72.IDjZt6e6TrIMfmrk%perryh@pluto.rain.com> From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <569F7C31.7010209@freebsd.org> Date: Wed, 20 Jan 2016 12:23:13 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <569f6a72.IDjZt6e6TrIMfmrk%perryh@pluto.rain.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="vuq8QMKRM3dOqMkxh0hX2gcKwfXxScaW2" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.7 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 12:23:26 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --vuq8QMKRM3dOqMkxh0hX2gcKwfXxScaW2 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 01/20/16 11:07, Perry Hutchison wrote: > Matthew Seaman wrote: >> On 20/01/2016 02:05, Perry Hutchison wrote: >>> There must be some difference in the lookup mechanisms between >>> the resolver and host(1), since host(1) works in the chroot. >> >> Yes. host(1) uses only the DNS, whereas the general resolver function= s >> can use all sorts of resolution mechanisms -- see nsswitch.conf(5). >> >> In order to track down exactly what the problem is I'd be running that= >> ping command under truss(1) to try and spot what the failure is. That= 's >> not guaranteed to work, nor is it generally completely obvious from th= e >> truss output what the trouble may be. My guess though is that somethi= ng >> is read-only which the system expects to be read-write. >=20 > That produced some interesting results, the first being that > truss(1) apparently does not like to run in a chroot: >=20 > # chroot -u 0 -g 0 -G 105,0,5,20,25 /mnt truss -o \ > /var/tmp/ping-in-chroot ping -c 1 pkg.FreeBSD.org >=20 > produced 313 lines of >=20 > -- CANNOT READ REGISTERS -- >=20 > followed by process exit. >=20 > Having truss run the chroot showed that the resolver is correctly > deciding to consult the DNS after failing to find the hostname in > /etc/hosts -- /etc/nsswitch.conf specified "hosts: files dns" -- > then falling over when it tries to open a socket for the purpose: >=20 > open("/etc/hosts",0x100000,0666) =3D 4 (0x4) > fstat(4,{ mode=3D-rw-r--r-- ,inode=3D12102,size=3D1090,blksize=3D8192= }) =3D 0 (0x0) > read(4,"# $FreeBSD: releng/10.2/etc/host"...,8192) =3D 1090 (0x442) > read(4,0x28820000,8192) =3D 0 (0x0) > close(4) =3D 0 (0x0) > gettimeofday({1453281421.449818 },0x0) =3D 0 (0x0) > kqueue(0x0,0xbfbecccc,0x8,0x7273752f,0x62696c2f,0x28060aae) =3D 4 (0x= 4) > socket(PF_INET,0x10000002,0) ERR#43 'Protocol not suppo= rted' > socket(PF_INET,0x10000002,0) ERR#43 'Protocol not suppo= rted' > socket(PF_INET,0x10000002,0) ERR#43 'Protocol not suppo= rted' > socket(PF_INET,0x10000002,0) ERR#43 'Protocol not suppo= rted' > socket(PF_INET,0x10000002,0) ERR#43 'Protocol not suppo= rted' > socket(PF_INET,0x10000002,0) ERR#43 'Protocol not suppo= rted' > close(4) =3D 0 (0x0) > madvise(0x28829000,0x10000,0x5,0x281eb468,0xbfbee138,0x28132e50) =3D = 0 (0x0) > madvise(0x28820000,0x2000,0x5,0x281eb468,0xbfbee138,0x28132e50) =3D 0= (0x0) > madvise(0x28825000,0x1000,0x5,0x281eb468,0xbfbee138,0x28132e50) =3D 0= (0x0) > write(2,"ping: ",6) =3D 6 (0x6) > write(2,"cannot resolve pkg.FreeBSD.org: "...,56) =3D 56 (0x38) >=20 > In contrast, host(1) has no problem when run in the same way: >=20 > socket(PF_INET,SOCK_DGRAM,17) =3D 3 (0x3) > sendto(3,"\M^R>\^A\0\0\^A\0\0\0\0\0\0\^Cpk"...,33,0x0,{ AF_INET 192.1= 68.0.1:53 },0x10) =3D 33 (0x21) > select(4,{3},0x0,0x0,{5.000000 }) =3D 1 (0x1) > fcntl(3,F_GETFL,) =3D 2 (0x2) > fcntl(3,F_SETFL,O_NONBLOCK|0x2) =3D 0 (0x0) > recvfrom(3,"\M^R>\M^A\M^@\0\^A\0\^A\0\0\0\0"...,65535,0x0,NULL,0x0) =3D= 49 (0x31) > madvise(0x28813000,0x10000,0x5,0x28399468,0xbfbfe3c0,0x282e0e50) =3D = 0 (0x0) > close(3) =3D 0 (0x0) > madvise(0x28810000,0x2000,0x5,0x28399468,0xbfbfe8c0,0x282e0e50) =3D 0= (0x0) > gettimeofday({1453283485.628061 },0x0) =3D 0 (0x0) > madvise(0x28808000,0x1000,0x5,0x28399468,0xbfbfe948,0x282e0e50) =3D 0= (0x0) > madvise(0x28808000,0x10000,0x5,0x28399468,0xbfbfe5d0,0x282e0e50) =3D = 0 (0x0) > fstat(1,{ mode=3Dcrw--w---- ,inode=3D192,size=3D0,blksize=3D4096 }) =3D= 0 (0x0) > ioctl(1,TIOCGETA,0xbfbfe768) =3D 0 (0x0) > madvise(0x28809000,0x10000,0x5,0x28399468,0xbfbfe5d0,0x282e0e50) =3D = 0 (0x0) > write(1,"pkg.FreeBSD.org has address 96.4"...,40) =3D 40 (0x28) >=20 > The most glaring difference is that 0x10000002 second parameter > that the resolver passes to socket(2): it should be SOCK_DGRAM (or, > conceivably, SOCK_STREAM -- if the resolver is using TCP instead of > UDP for its DNS queries). Looks like ping(8) is OR-ing SOCK_CLOEXEC into the 2nd argument to socket(2). That's perfectly fine according to the manual. The 'Protocol not supported' error you're seeing is not because of that. Hmmm.... You've mounted a 10.2-RELEASE memstick image onto /mnt, but what OS version is the parent host running? If you're trying to run a more recent version of the OS in the chroot than in the host system, that could well explain your experiences. The FreeBSD kernel is not guaranteed to be forward compatible to software compiled on a more recent version of the OS, although the reverse -- newer kernel and older software -- will work. Cheers, Matthew --vuq8QMKRM3dOqMkxh0hX2gcKwfXxScaW2 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJWn3wxAAoJEABRPxDgqeTnOwYP+QFQpnoe9QAy0NLYoxFzSISd LU38LEIrmkXm5IZ0B2Ecq8nv3J/0IlVZlQezss1GCzeomzQwQtzbeFYYpRP/qqAZ wYiqRxSj9Tso1xBj4i8td83YpBNaZuxudJL2pzDAjYFvtq8TccIh6barIGZWO9fB GK0WCS4XqYongEi5K6KKggMi0zU75CUt3DsL6TnvTKwI1aY4acFHOVv5Ow82gGg9 QkeDrlLbRkZIktzeXJK1rL3mEzzG7zKzRN+oWuv5mj1yNZ8C16q0mtd5FJrI+q8H SQZCJI9IIT+l8WlXdRtC0hYolexYe1/msPheYo+gFGWhrZaosnb4okxa2WOh8zCg nDhlVmXg8R0NRLYLxCnuak5tnlPPHmkA94VPDtK+Kx9D+cFxMShtb9ldGpnoRdgG Ty37qgTTF9Hf3TO57UxMUbQEM5y56umFdMmsusA2rxquJwYuvcbWxV3mhoZvUgu9 SDZNMhluk0Br7RLKBJa4C4xZ0QqGwoNgMpuK2T7ARQMScsaEHJ+P6H7vRhGQQtSj XtDzFAkCq7aytmoQa8oCxQ0KDm1yv1GYkv8aS/LnzI+Chj790VigoGc/FF0S26Bd /sDSNPkogQRo7Bac6OawzttToWbQseFefXv0PYXGM6IXwLh7dm9E4nqZWl6e6pwV yFadDxag9SOsymL0Z4f0 =t5Sz -----END PGP SIGNATURE----- --vuq8QMKRM3dOqMkxh0hX2gcKwfXxScaW2-- From owner-freebsd-questions@freebsd.org Wed Jan 20 12:35:05 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 60CF3A891E0 for ; Wed, 20 Jan 2016 12:35:05 +0000 (UTC) (envelope-from jim@ohlste.in) Received: from mail-qg0-x236.google.com (mail-qg0-x236.google.com [IPv6:2607:f8b0:400d:c04::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 17DCD1BDC for ; Wed, 20 Jan 2016 12:35:05 +0000 (UTC) (envelope-from jim@ohlste.in) Received: by mail-qg0-x236.google.com with SMTP id o11so4563161qge.2 for ; Wed, 20 Jan 2016 04:35:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ohlste-in.20150623.gappssmtp.com; s=20150623; h=subject:to:references:cc:from:message-id:date:user-agent :mime-version:in-reply-to:content-type:content-transfer-encoding; bh=dJS0xi1sseFnzCBn+NvYrFhatrD1/H13WPznMK3Ain0=; b=oy5vrJOCEc8G/2a22jq1NpzXbBm7Zc62uaFCpvYvCP8K18P/9Qdh9aS/djZKjtH7zn rFf5ZbmrvBTSXFdqmWkVauJ36CQmpkxdP0m2RaMYWwBPISHFa7AHyEkCj7kFfdnQ2ZxC fPOCxpL0fh3mC1iG9BSnYVgy5MR/NEJn/ATGWAJD2HUE7x5do0tgZ9X3o+f3IxbkinTB eF+lcyRAWRColXIt4RweDA5txUrzOsAu5BkLEh0J/2i4Org+TMjQnAfPoDAlLzQ0JWp0 MXmfx8a9EIoJsxBZnn8RjlpvDfLxaaVaeM/jw/f4bY2KjkZkfIak0yr+2Br5GsO+AUsA Rojg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:cc:from:message-id:date :user-agent:mime-version:in-reply-to:content-type :content-transfer-encoding; bh=dJS0xi1sseFnzCBn+NvYrFhatrD1/H13WPznMK3Ain0=; b=ljJ45ceOABhqZvIaonQxWIraM6SgQMt8OGIYaIFTs/9pJVkHo0DN78ohE+Z+WBJBTR hZI+95ORNRzouM2iMmNazPcJAdhyantINFDD3iZpnIzpr1hXp+i+U2gKJmbJSSf5/aa0 On7sSQjeUF2cD7MTxebXL5s9OTXg/jCo+8uaOzUquyJLj+HlVQjEiufvcDe1Jk1Ti5Nd bZ8mHEg18f7JyU0dIBklOWvppZI0gniTJAm52XlVkUIXyFSihQnn0TaUqbNKhVyBSNEz 4EQNxbsN+gpD5Fc3JlSqo+qNAi11hJhP6Vvlsa9gueMiKExh3xQbvM5WGWYewBLLmYJS Bj3w== X-Gm-Message-State: ALoCoQkUIuFRdZNdl1ERpWqkODBOjmJHznGVmX9YvS2HTa0e7pXQQwvDMQpR2aiN2ET2kg1psaWLrMm/0iCt2q24SzEWtf2kPw== X-Received: by 10.140.43.116 with SMTP id d107mr44180959qga.51.1453293304268; Wed, 20 Jan 2016 04:35:04 -0800 (PST) Received: from [192.168.1.11] (pool-96-249-243-37.nrflva.fios.verizon.net. [96.249.243.37]) by smtp.googlemail.com with ESMTPSA id d195sm14122527qhc.17.2016.01.20.04.35.03 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 20 Jan 2016 04:35:03 -0800 (PST) Subject: Re: Unexpected dependencies of graphics/libGL To: =?UTF-8?Q?Lu=c3=ads_Fernando_Schultz_Xavier_da_Silveira?= , "Michael B. Eichorn" References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> <20160119141257.GA64358@neutralgood.org> <20160120031432.cd8793f3626c07fc803ee308@ime.usp.br> <1453263751.6711.61.camel@michaeleichorn.com> <20160120055108.b9516e8b6ddf576a5239370c@ime.usp.br> Cc: Polytropon , freebsd-questions@freebsd.org, kpneal@pobox.com From: Jim Ohlstein Message-ID: <569F7EF5.7020707@ohlste.in> Date: Wed, 20 Jan 2016 07:35:01 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <20160120055108.b9516e8b6ddf576a5239370c@ime.usp.br> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 12:35:05 -0000 On 1/20/16 12:51 AM, Luís Fernando Schultz Xavier da Silveira wrote: > Hello, > > You are correct. As you described and as I pointed out before, Poudriere > is the right tool for creating package repositories. It prevents badly > written ports from interfering with the host system. > > However, in a system where the packages built this way are then > installed into it, this tidyness/security benefit vanishes. This is > my use case and, thus, for my personal use, Poudriere does not make > sense. I've read through this entire thread. At first I was torn between whether you're plain dumb or just playin' dumb. Your answers boil down to "I don't like it because I don't like it." You've come up with *nothing* concrete in terms of real world evidence to support your suppositions. Rather you keep repeating the same rant, perhaps thinking if you say it enough times people will actually buy it. Clearly you're playin' dumb and you're a troll. Folks, please stop feeding the troll. Eventually it'll go troll elsewhere. > > On Tue, 19 Jan 2016 23:22:31 -0500 > "Michael B. Eichorn" wrote: > >> On Wed, 2016-01-20 at 03:14 +0000, Luís Fernando Schultz Xavier da >> Silveira wrote: >>> Hi, >>> >>> In a nutshell, the point is that the build dependencies should not be >>> there at all. Keeping them in a jail is not a proper solution because >>> they can still influence the host system (since the packages >>> resulting >>> from computations done in the jail will be installed in the host). >> >> There is nothing inherently wrong about this. The jail is not insecure, >> it runs no external services. In the case of poudriere we trust the >> build jails in the exact same way we trust software built on the the >> host from ports. >> >> The jails are used not so much for security as for isolating the build >> from the host environment. Do recall that jails are in a way secure >> extensions of the chroot concept; and that chroot was developed not for >> security, but for compling software in a controlled environment. This >> is what poudriere does, complie software in a controlled environment. >> >> Further the complied packages are not 'kept' in a jail, after running >> poudriere all jails are stopped and compliation jails are destroyed. >> Poudriere creates a package repository on the host system where built >> packages are kept. >> >> One big advantage to poudriere is that since you are building this repo >> you can confirm the whole build went well before installing any new >> package on a production system. For a complex build like x11/gnome3 >> this can be a major advantage. >> >> TLDR: Poudriere is at least as secure as building from ports. (Exactly >> as kpneal and Polytropon said.) >> >>> >>> On Tue, 19 Jan 2016 09:12:57 -0500 >>> kpneal@pobox.com wrote: >>> >>>> On Tue, Jan 19, 2016 at 06:34:38AM +0000, Luís Fernando Schultz >>>> Xavier da Silveira wrote: >>>>> Hello, >>>>> >>>>>> But this is not different from how ports are being built in >>>>>> the regular ports tree: Compilation tools could be compromized >>>>>> or package content could be affected. The typical "make >>>>>> install" >>>>>> will generate a package which is then installed via pkg. >>>>> >>>>> Indeed, it is not different, and that is my point. >>>> >>>> Huh? When did this turn into a discussion about security? >>>> >>>> You can do a small amount of work and have security concerns or you >>>> can >>>> do much more work and have the exact same security concerns. I >>>> really don't >>>> see how this reflects badly on Poudriere. >>>> >>>> I thought this was a discussion about how to avoid having build >>>> dependencies >>>> installed when all you wanted was the run-time dependencies. >>>> Poudriere >>>> handles this nicely without all that mucking about with locking >>>> packages, >>>> keeping your ports tree in sync with the one checked out at >>>> freebsd.org, >>>> etc. >>>> -- Jim Ohlstein "Never argue with a fool, onlookers may not be able to tell the difference." - Mark Twain From owner-freebsd-questions@freebsd.org Wed Jan 20 15:51:32 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 41243A89F54 for ; Wed, 20 Jan 2016 15:51:32 +0000 (UTC) (envelope-from mmatalka@gmail.com) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D09271568 for ; Wed, 20 Jan 2016 15:51:31 +0000 (UTC) (envelope-from mmatalka@gmail.com) Received: by mail-wm0-x22f.google.com with SMTP id 123so138330440wmz.0 for ; Wed, 20 Jan 2016 07:51:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:subject:date:message-id:user-agent:mime-version :content-type; bh=+9bPFejnVL5viMT5CWM0DXQPKeJg+w5Hn4FzlZnKGsk=; b=AgkAsd9qb6+HfEYPphVIB6oq5wqZhUgZ83E0bLpAIge5/oBMmVnTrmcHWrbFMVbT1P ldpcg54ySWQ4mnftGPaBKLsp57O8ujfDmLwpDanWOIkr177wJKQeuW/VxnccQkeg/0AB lzb4+qp7BiHaUygxxkuJES4HiogfirfM54b5j5GQuDhVSgnDsL/NjZmTKeN8w2+NuyNr relNK8iWvpZm4CMxYVbmhn/1iD1PaPj+Y6tTdUwwvLwh278lTHXhTJyB7uhz9JNTl7v6 U9y17to9Kdjd2BhpSBl0exwUoTijj7K/PnKidwtsSHwOhSQVXOUgw7u5/LFnXviKCknp aqWw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:user-agent :mime-version:content-type; bh=+9bPFejnVL5viMT5CWM0DXQPKeJg+w5Hn4FzlZnKGsk=; b=Se7V/7eadAxwQ4sg2UBU86LlxyawUf13omITZLq6tcVNthoVdpEN5p+y/o7N0lkP31 EeDfiatq8ojUEMyyp8WoEFJZK0r+MYZ83wVgdyJdGuTjKacg7V8ZqjIaCwWSGE7Azatk QZNLr1xC6uUgQm74jWdSECoe3Xp1Dspmp7BnYSGyWR0txsA26k85Hl2FhA2Ajd8J9LQs hoYE6aQBWQjFMUBuAkdSfN9CiT/a4tugXOwBc29Rb5bLfcc+P8TA7TDqLw5KW/CXD7lv IZ5YxVnU1jUACU3ZDrZuNICdmmATGyMp1sXMY75eIxPe9wN+NYRH9Wgg4qcFEY6FvHXn sBcQ== X-Gm-Message-State: AG10YOSAm5Hzbhc7Jz/ajU3K8OB8bLZ2snh0DhoQaQUd0PHQ028LGq/BmX0DAVX53jnRLA== X-Received: by 10.28.215.136 with SMTP id o130mr4769011wmg.33.1453305090299; Wed, 20 Jan 2016 07:51:30 -0800 (PST) Received: from localhost (li195-236.members.linode.com. [178.79.139.236]) by smtp.gmail.com with ESMTPSA id b127sm25686577wmh.9.2016.01.20.07.51.26 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 20 Jan 2016 07:51:26 -0800 (PST) From: Malcolm Matalka To: freebsd-questions@freebsd.org Subject: Console rotates through all tty's after sitting for a bit Date: Wed, 20 Jan 2016 15:51:23 +0000 Message-ID: <86r3hcl05g.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 15:51:32 -0000 I installed FreeBSD on a machine (Dell OptiPlex 7010). I'm in the regular text console and if I just leave it, it starts rotating through all the tty's rather than going into a screen saver or anything (I have explicitly set the screen saver to a Blank screen). It did this during the install process as well. Has anyone experienced this and know why? It doesn't seem to negatively affect anything so far, it's just annoying. /Malcolm From owner-freebsd-questions@freebsd.org Wed Jan 20 16:58:18 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B7778A89600 for ; Wed, 20 Jan 2016 16:58:18 +0000 (UTC) (envelope-from mfv@bway.net) Received: from smtp1.bway.net (smtp1.v6.bway.net [IPv6:2607:d300:1::27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 97DEE1DFC; Wed, 20 Jan 2016 16:58:18 +0000 (UTC) (envelope-from mfv@bway.net) Received: from gecko4 (host-216-220-115-31.dsl.bway.net [216.220.115.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m1316v@bway.net) by smtp1.bway.net (Postfix) with ESMTPSA id A3BBA95861; Wed, 20 Jan 2016 11:58:08 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=bway.net; s=mail; t=1453309088; bh=SFxlNcLiUMIAtSIT7FHx/0wT8adyf9I/wRRb69aJKJQ=; h=Date:From:To:Cc:Subject:In-Reply-To:References:Reply-To; b=Tc77DcpR3yaZ4HyEkUP/yo7B+CPAyBjRG/QiilPcj/VjsPa35MFm2Cpf/OU38t64a vrFYivctzNCun/QHX/UPF7dGky7yVZExjevNbPxgnSm67MSxXMBSRQakuP0rIinv0v 60xCiPsVIrWM4S0ICTDU8d/SNOlFjV2XNlECH7KM= Date: Wed, 20 Jan 2016 11:58:08 -0500 From: mfv To: Matthew Seaman Cc: freebsd-questions@freebsd.org Subject: Re: Downloading 10.2-RELEASE-p10 source without prayer Message-ID: <20160120115808.6133c482@gecko4> In-Reply-To: <569F4344.5020907@FreeBSD.org> References: <569F4344.5020907@FreeBSD.org> Reply-To: mfv@bway.net MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 16:58:18 -0000 > On Wed, 2016-01-20 at 08:20 Matthew Seaman > wrote: > >On 20/01/2016 01:30, Chris Stankevitz wrote: >> On Tue, Jan 19, 2016 at 4:45 PM, Chris Stankevitz >> wrote: >>> > Of course I'm being sarcastic about the prayer... but is there a >>> > way (a tarball or special SVN tag/branch) to get the "official" >>> > 10.2-RELEASE-p10 code? What do the freebsd-update servers use? > >> I could just look at "svn log -l 1" and see if it jives more or less >> with the most recent freebsd-announce email. > >Depends how paranoid you want to be. > >If you download one of the DVD installation images, that should include >base system sources and will have offline checksums that you can >verify. > >You can then apply the patches from all of the SAs and ENs published >since, all of which are digitally signed. That's probably as good as >you can get in ensuring you've got authentic, untampered sources. > >Most people would find it good enough to use eg. freebsd-update -- the >updates are cryptographically signed, so you can be reasonably certain >that what it installs on your system is the same as what it has on the >servers. It does use a pretty direct connection to the master SVN >repository for obtaining the code it builds from, but you generally >have to trust that it is using unadulterated sources itself. >freebsd-update can maintain a copy of /usr/src for you. > >Or else you can just checkout the RELENG-10 branch from one of the SVN >mirrors: > ># cd /usr ># svn co https://svn.freebsd.org/base/releng/10.2 src > >The SSL cert on the server should be sufficient guarantee you've not >been spoofed into some MITM scenario. > > Cheers, > > Matthew > Hello Matthew, Thanks for outlining those steps for updating system source code. Being a bit on the paranoid side these are the steps have been following. Rather then using svn, however, I've been using svnup which for a single host seems to be sufficiently light weight. I've been using https for the protocol setting but was wondering if there is greater security using the svn protocol. Is one protocol more secure than another? Or does it really make a difference? Cheers ... Marek From owner-freebsd-questions@freebsd.org Wed Jan 20 17:11:32 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D2D7EA89D81 for ; Wed, 20 Jan 2016 17:11:32 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (wonkity.com [67.158.26.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "wonkity.com", Issuer "wonkity.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id A65BF1A5E for ; Wed, 20 Jan 2016 17:11:32 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (localhost [127.0.0.1]) by wonkity.com (8.15.2/8.15.2) with ESMTPS id u0KHBPff047124 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Wed, 20 Jan 2016 10:11:25 -0700 (MST) (envelope-from wblock@wonkity.com) Received: from localhost (wblock@localhost) by wonkity.com (8.15.2/8.15.2/Submit) with ESMTP id u0KHBOUU047121; Wed, 20 Jan 2016 10:11:24 -0700 (MST) (envelope-from wblock@wonkity.com) Date: Wed, 20 Jan 2016 10:11:24 -0700 (MST) From: Warren Block To: Malcolm Matalka cc: freebsd-questions@freebsd.org Subject: Re: Console rotates through all tty's after sitting for a bit In-Reply-To: <86r3hcl05g.fsf@gmail.com> Message-ID: References: <86r3hcl05g.fsf@gmail.com> User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (wonkity.com [127.0.0.1]); Wed, 20 Jan 2016 10:11:25 -0700 (MST) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 17:11:32 -0000 On Wed, 20 Jan 2016, Malcolm Matalka wrote: > I installed FreeBSD on a machine (Dell OptiPlex 7010). I'm in the > regular text console and if I just leave it, it starts rotating through > all the tty's rather than going into a screen saver or anything (I have > explicitly set the screen saver to a Blank screen). It did this during > the install process as well. > > Has anyone experienced this and know why? It doesn't seem to > negatively affect anything so far, it's just annoying. Something is hitting the PrintScrn key. From owner-freebsd-questions@freebsd.org Wed Jan 20 17:16:45 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C30DCA89F90 for ; Wed, 20 Jan 2016 17:16:45 +0000 (UTC) (envelope-from brandon.wandersee@gmail.com) Received: from mail-io0-f178.google.com (mail-io0-f178.google.com [209.85.223.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 982401D49 for ; Wed, 20 Jan 2016 17:16:45 +0000 (UTC) (envelope-from brandon.wandersee@gmail.com) Received: by mail-io0-f178.google.com with SMTP id 77so26599224ioc.2 for ; Wed, 20 Jan 2016 09:16:45 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:references:user-agent:from:to:cc:subject :in-reply-to:date:message-id:mime-version:content-type :content-transfer-encoding; bh=NyIgXTW5PvIoKvH2HLNMuejaZ6SEnkHAZdApw1WbSTk=; b=CquVewbvGyVZzrme3q4LiCFj/oKiSghWRythw0UGskh7ohGEw+N2hfyfye865RHgZi 2zrv60eL3BfJbUlEoGRijnUSQlGlw6pHw50q3lUFw8cCFpnI9FXRDI36bnLOU9qTyJCv 5VBw4yIkdDz3u8/a6BWKQZ1ljy3ApcoGCBAb6vgLydByXDTOueLbMjsd83UYJJcIAfRv 5EaqkpjbzwBRbXSHG1+Kast9pMbadGkk1C83b6r9UfjoFTjg8wkLAoERLMRhoiv12vK9 FlH4AP1eS0CQw4yKrQQGtaRuoEiFzbMbtkDs4biNkdX/hv+phSHejIKRMKgDd7Rm+IIg NIgA== X-Gm-Message-State: AG10YOQgJhMbX+Cck5IG+h57gHFiqQiHxMtIhaiydA0ospwlY4h4DBxjCUoxzmReBcZEPQ== X-Received: by 10.107.185.132 with SMTP id j126mr28168335iof.149.1453310204633; Wed, 20 Jan 2016 09:16:44 -0800 (PST) Received: from WorkBox.Home.gmail.com (75-161-216-92.mpls.qwest.net. [75.161.216.92]) by smtp.gmail.com with ESMTPSA id l10sm9212546igx.18.2016.01.20.09.16.42 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 20 Jan 2016 09:16:43 -0800 (PST) References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> User-agent: mu4e 0.9.15; emacs 24.5.1 From: Brandon J. Wandersee To: =?utf-8?Q?Lu=C3=ADs?= Fernando Schultz Xavier da Silveira Cc: Polytropon , freebsd-questions@freebsd.org, kpneal@pobox.com Subject: Re: Unexpected dependencies of graphics/libGL In-reply-to: <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> Date: Wed, 20 Jan 2016 11:16:42 -0600 Message-ID: <86bn8gkw79.fsf@WorkBox.Home> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 17:16:45 -0000 Luís Fernando Schultz Xavier da Silveira writes: > If the extra dependencies break the jail, the output packages can be > malformed and, when installed, break the host system. Nope. Leaving aside the fact that no package should even (ideally) affect the base system (and so shouldn't break a jail), if a Poudriere jail does break, the build fails. Not the *port build*, but the *Poudriere bulk build process.* The whole thing will crash out with an error message. And while Poudirere doesn't require ZFS, it was crafted with ZFS in mind, and if it is installed and run in a zpool then any time a jail is updated or a bulk build process executed, a snapshot is created beforehand. Should things become completely borken, the jail and/or repository can simply be rolled back. Moreover, the package repository index is not updated until the bulk build for all packages is complete. If a particular package fails to build or pass a test then all packages upon which it depends are skipped, and all builds for packages which depend up the failed package are ignored. Only successfully built packages are made available for installation/upgrades. This can easily be resolved: Poudriere is the official build system for the FreeBSD ports team. All official packages you install via pkg(8) are built with it, and have been for a couple years now. Chances are you're not the first person to think about these things. If you don't trust Poudriere, you shouldn't trust packages. Since the ports system and package manager are now bound to one another (with all ports being built into packages and installed/tracked with pkg(8)), if you don't trust packages, you probably shouldn't place too much trust in the ports system, either. If a particular port/package can be successfully built and installed, yet is causing problems on its host system then it's entirely possible that the port itself is faulty, or (perhaps more likely) that the issue stems from a bug or malicious code within the compiled software itself. Poudriere can't account for such a circumstance, but then it doesn't have to. It's a build system designed to expedite the building of customized ports, while simulatneously preventing malicious code from being executed on the build system during that build process and avoiding a port/package upgrade from failing on a host system part-way through and breaking things in the process. If a port successfully builds in Poudriere, and its package is successfully added to the repository, and then successfully installed on the receiving system, then Poudriere has successfully done its job. -- ================================================================= :: Brandon Wandersee :: :: brandon.wandersee@gmail.com :: ================================================================== 'A common mistake that people make when trying to design something completely foolproof is to underestimate the ingenuity of complete fools.' - Douglas Adams ================================================================== From owner-freebsd-questions@freebsd.org Wed Jan 20 17:26:10 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 49C25A8A2E6 for ; Wed, 20 Jan 2016 17:26:10 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id C7FB81217 for ; Wed, 20 Jan 2016 17:26:09 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from ox-dell39.ox.adestra.com (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0KHPuqu011629 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 20 Jan 2016 17:25:56 GMT (envelope-from matthew@freebsd.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=freebsd.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk u0KHPuqu011629 Authentication-Results: smtp.infracaninophile.co.uk/u0KHPuqu011629; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be ox-dell39.ox.adestra.com Subject: Re: Downloading 10.2-RELEASE-p10 source without prayer To: mfv@bway.net References: <569F4344.5020907@FreeBSD.org> <20160120115808.6133c482@gecko4> Cc: freebsd-questions@freebsd.org From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <569FC320.1080906@freebsd.org> Date: Wed, 20 Jan 2016 17:25:52 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.5.0 MIME-Version: 1.0 In-Reply-To: <20160120115808.6133c482@gecko4> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="fPetE9BdaMv6ND98KBM4n04jNx6jMGoqJ" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.7 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 17:26:10 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --fPetE9BdaMv6ND98KBM4n04jNx6jMGoqJ Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 01/20/16 16:58, mfv wrote: >> On Wed, 2016-01-20 at 08:20 Matthew Seaman >> wrote: >> >> On 20/01/2016 01:30, Chris Stankevitz wrote: >>> On Tue, Jan 19, 2016 at 4:45 PM, Chris Stankevitz >>> wrote: =20 >>>>> Of course I'm being sarcastic about the prayer... but is there a >>>>> way (a tarball or special SVN tag/branch) to get the "official" >>>>> 10.2-RELEASE-p10 code? What do the freebsd-update servers use? =20 >> >>> I could just look at "svn log -l 1" and see if it jives more or less >>> with the most recent freebsd-announce email. =20 >> >> Depends how paranoid you want to be. >> >> If you download one of the DVD installation images, that should includ= e >> base system sources and will have offline checksums that you can >> verify. >> >> You can then apply the patches from all of the SAs and ENs published >> since, all of which are digitally signed. That's probably as good as >> you can get in ensuring you've got authentic, untampered sources. >> >> Most people would find it good enough to use eg. freebsd-update -- the= >> updates are cryptographically signed, so you can be reasonably certain= >> that what it installs on your system is the same as what it has on the= >> servers. It does use a pretty direct connection to the master SVN >> repository for obtaining the code it builds from, but you generally >> have to trust that it is using unadulterated sources itself. >> freebsd-update can maintain a copy of /usr/src for you. >> >> Or else you can just checkout the RELENG-10 branch from one of the SVN= >> mirrors: >> >> # cd /usr >> # svn co https://svn.freebsd.org/base/releng/10.2 src >> >> The SSL cert on the server should be sufficient guarantee you've not >> been spoofed into some MITM scenario. >> >> Cheers, >> >> Matthew >> >=20 > Hello Matthew, >=20 > Thanks for outlining those steps for updating system source code. Being= > a bit on the paranoid side these are the steps have been following. > Rather then using svn, however, I've been using svnup which for a > single host seems to be sufficiently light weight. >=20 > I've been using https for the protocol setting but was wondering if > there is greater security using the svn protocol. Is one protocol more= > secure than another? Or does it really make a difference? There's not a lot of difference functionality- or performance-wise as far as an end-user is concerned. However, only https gives you any assurance that you are connecting to the server you thought you were. You will need to check the cert -- svn will ask you about it the first time you connect. Cheers, Matthew --fPetE9BdaMv6ND98KBM4n04jNx6jMGoqJ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJWn8MgAAoJEABRPxDgqeTn3wYP/1Ja7bGWOMtAeuY5OtIkzjJ9 EVXmF6MqAC2+E+P9kZN1utDzvOTefBbWlqX2pItmR6+pXzeWigImmY9kxwuEYgBK zWhHK9cuBnGWnkpi+l1jHmsMIHrMlaTtwk8rtzZb4r51IdEEJrH1AIvEav/p+qaW 95tAeaDFxSK2vCWpAFBrczsNGZCLH7kMTQF6sv9Bv2ppmr3OdoI5/IDPLbH1CtL5 YDAm8mioU0yfEipOICda9LXWaqlRR6QmxfFzKHx+EF05HaYyQnN/ycLTIXDDN+4w 48E1tJvTkSCvWjoibVNs7yPM0+ovlwPcZljKNJSMivxXpNIh36hhcR0Zp/JQs5XG JA7pPpJumU32sKipci4u64FtYKK2nuH01zsgBUg9zXTVsBWjeYED1NcWuuX6IqCf O+3L1OcMZyBoEMEOc6VhoXdNEq5MSK0fDzMzz1WTV8kq8fOX40ImFDsabF926rpO Z5py3TDp08XklJYbAUmt8KoH0QORGmU+qz0TNMHHr5bai/Ank+grGuHa7903dcLD Sc3o7b45R1bThuL0JUrY52LUW8J/imnS2X1S0Ryh/T09apQJip26PgHXO8vgqtnC cJgkcaFcwOF6UIVG89FjN0atVN6FfkOvOmO64JDdhVMWVDUEkz0XGn0q2XmdmbcT R7F8GqFw8yTGXQZvQR13 =fX+V -----END PGP SIGNATURE----- --fPetE9BdaMv6ND98KBM4n04jNx6jMGoqJ-- From owner-freebsd-questions@freebsd.org Wed Jan 20 17:30:56 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D7991A8A4ED for ; Wed, 20 Jan 2016 17:30:56 +0000 (UTC) (envelope-from vsasjason@gmail.com) Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 701A71615; Wed, 20 Jan 2016 17:30:56 +0000 (UTC) (envelope-from vsasjason@gmail.com) Received: by mail-wm0-x232.google.com with SMTP id 123so142262382wmz.0; Wed, 20 Jan 2016 09:30:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=b5DikBknZtp+f0sH1fTvKV8nsnNtuSokFmAuSncoIrE=; b=pddIuRS0GjJuTj1AwlUVB3DGX38bTd2/037XDk+eH1OOyioEnjGDWESkm4fKnElxXp maU4fU+gz5+/IABMFmp4DVgdCcT4hkgV0XbMUR8lYZjbFSaiCDeY3NzsAL+LDZLAROBV kf0oc6FY2zJ069XTUKOTbGqL4mTTuilMUMCJrfhuIPIg+JDFOCtB2kI+LTaXVhgSQ9xJ fSZ/d89CWUW4HkLdfiQfUcw3aO3s5UgLEtOUOzfFQTBIZIMHklSqBn2A0JzT3XMT0A5X gLNpi6KcjLwkbXrORbijjRyZnscJfTUzyoaE2cNcWbuOv/HiYKc5yYX7758+R2fPLdWG lAfw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=b5DikBknZtp+f0sH1fTvKV8nsnNtuSokFmAuSncoIrE=; b=hg7HNBLSj6GnMB95+0lf4vpMuhxjuQthW7VL5vnIOIO2hhu9S8pfho+XVZJ+nJRIWt YhMpJuG7u8GnEL7Q2K0o5TWCmmhEdj5eEZYWCg9sPL2cSLfG0z6+wXxeMb7s0aFldoYk N70vG3ltoMDOPiLSgVnsq3A/hQ8fTriltVJosDTAwDv3bICAxnGKTgDiS0GXFg9qE1qX J7LPkavbTkoJyyfmy956ySkYUomW/VfmHoRF21Wtqyxjcz7r203pQnUq4Jb+nUTIPbUQ OJ2DeZ4GYJt6dLQRRh0GqFQJVqbT13gPJaqyy15bl+JSlAC3U7DCSQobAgPFQm7ddyMK 8VRg== X-Gm-Message-State: AG10YOSNVavzhscvHy+nOKMWf1km3FYfgZ4XJO+sbG0eI283TqQbbBuiSlVfHx7HcABGZyquSl3uzWIGvmRckg== MIME-Version: 1.0 X-Received: by 10.28.21.19 with SMTP id 19mr5071023wmv.43.1453311054737; Wed, 20 Jan 2016 09:30:54 -0800 (PST) Received: by 10.194.246.73 with HTTP; Wed, 20 Jan 2016 09:30:54 -0800 (PST) Received: by 10.194.246.73 with HTTP; Wed, 20 Jan 2016 09:30:54 -0800 (PST) In-Reply-To: <569FC320.1080906@freebsd.org> References: <569F4344.5020907@FreeBSD.org> <20160120115808.6133c482@gecko4> <569FC320.1080906@freebsd.org> Date: Wed, 20 Jan 2016 20:30:54 +0300 Message-ID: Subject: Re: Downloading 10.2-RELEASE-p10 source without prayer From: Anton Sayetsky To: Matthew Seaman Cc: FreeBSD Questions , mfv@bway.net Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 17:30:56 -0000 20 =D1=8F=D0=BD=D0=B2. 2016 =D0=B3. 19:26 =D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D0= =BE=D0=B2=D0=B0=D1=82=D0=B5=D0=BB=D1=8C "Matthew Seaman" =D0=BD=D0=B0=D0=BF=D0=B8=D1=81=D0=B0=D0=BB: > You will need to check the cert -- svn will ask you about it the first time you connect. AFAIK, the official way for now is installing security/ca_root_nss. From owner-freebsd-questions@freebsd.org Wed Jan 20 17:31:32 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1E479A8A56A for ; Wed, 20 Jan 2016 17:31:32 +0000 (UTC) (envelope-from brandon.wandersee@gmail.com) Received: from mail-io0-f178.google.com (mail-io0-f178.google.com [209.85.223.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E536E1808 for ; Wed, 20 Jan 2016 17:31:31 +0000 (UTC) (envelope-from brandon.wandersee@gmail.com) Received: by mail-io0-f178.google.com with SMTP id 1so27106616ion.1 for ; Wed, 20 Jan 2016 09:31:31 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:references:user-agent:from:to:cc:subject :in-reply-to:date:message-id:mime-version:content-type; bh=vVGv2r963a5kUe2h8HXI5YKuuXSUdzx6xHPx4aPsDHA=; b=TJyjN5K3ko8/ymuSSZPYzYh1HMIz7O3F8yPcvF0Zp+qlfbwpIgjxNA4/S2vXy9kZh/ JHH0//snF7Uld6x868I/whDdFOZy5i3Z7Lgj+rasiIdeZ6E82701YmdlDnPIG5ktGPKi bM0UlW+tq/QQLt6ekJuaAAW4rj6tGoBfn6rDKL7au90x6Y9cR81OlrVboeNK7mrCdkTE 9VRGHtIHgVu5qVuFLFiap00Q84MaXtDWj69NHMGZbrSJqLYPth6KI1ar6CXDZlgLmD0X ZialAcEuXMI/gC2Us0lPNK/ChcI5QAphs9YtaS+GkVW+dbkfetK2UpAPBxCZHRiGjUpc 0vGQ== X-Gm-Message-State: ALoCoQkA0GuubZSfZT/hVP+5S2Y4JAzbtneilmwnU0Rj+j7G9Ht1Kxu7LyEphlXSZ5yFYnlhnNk9HIM82BpgCh8XrQrLMJNqiA== X-Received: by 10.107.6.209 with SMTP id f78mr33970155ioi.63.1453310696092; Wed, 20 Jan 2016 09:24:56 -0800 (PST) Received: from WorkBox.Home.gmail.com (75-161-216-92.mpls.qwest.net. [75.161.216.92]) by smtp.gmail.com with ESMTPSA id e36sm12754885iod.2.2016.01.20.09.24.54 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 20 Jan 2016 09:24:54 -0800 (PST) References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <569B3231.9010400@parts-unknown.org> <20160117073428.ba76224e.freebsd@edvax.de> User-agent: mu4e 0.9.15; emacs 24.5.1 From: Brandon J. Wandersee To: Polytropon Cc: David Benfell , freebsd-questions@freebsd.org Subject: Re: Unexpected dependencies of graphics/libGL In-reply-to: <20160117073428.ba76224e.freebsd@edvax.de> Date: Wed, 20 Jan 2016 11:24:53 -0600 Message-ID: <86a8o0kvtm.fsf@WorkBox.Home> MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 17:31:32 -0000 Polytropon writes: > The FreeBSD ports collection makes the distinction between > B-Deps (build dependencies) and R-Deps (run dependencies). > The precompiled packages typically contain references to > the run dependecies, but leave out the build dependencies > which you don't need to actually _run_ the software. Just thought I'd give the OP the benefit of the doubt and bring this back on track (if only for posterity's sake): I've had graphics/libGL installed on a new HTPC since 01/10/2016, a week prior to this thread. Neither Bazaar nor Git are installed on the system, nor is any such run-time or build-time dependency listed on the Freshports page, nor is any such dependency or build-time option listed in the outpout of `pkg info libGL`. I'm curious how the OP discovered these "unexpected dependencies." -- ================================================================= :: Brandon Wandersee :: :: brandon.wandersee@gmail.com :: ================================================================= From owner-freebsd-questions@freebsd.org Wed Jan 20 18:20:03 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4EA02A89711 for ; Wed, 20 Jan 2016 18:20:03 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from iris.ime.usp.br (iris.ime.usp.br [143.107.45.5]) by mx1.freebsd.org (Postfix) with ESMTP id 073221A3A for ; Wed, 20 Jan 2016 18:20:02 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from cage0 (OTWAON234VW-LP140-05-1176444850.dsl.bell.ca [70.31.31.178]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schultz@iris.ime.usp.br) by iris.ime.usp.br (Postfix) with ESMTPSA id C97672900215; Wed, 20 Jan 2016 16:19:53 -0200 (BRST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ime.usp.br; s=mail; t=1453313999; bh=m+0LzlNwM0kRF85XM12B03z0exEERW5KxpN5eUWU6ro=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=TEQNtAdDRZSqO1D6KkMcBJJ+HHpNmYmxgtLyWj/6v3rtbVMKvF0HaQOJ/aRkRHMvq sPiC71RS5N/2pX723qOWv7o4/OSDPpc1llncidHFNXPaM6RnyynJVXM/cRFR1CsKDO nGSBH6ie641GtfAu/4s4/YkGi3qFQ7bFG296jtRY= Date: Wed, 20 Jan 2016 18:18:41 +0000 From: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira To: Jim Ohlstein Cc: "Michael B. Eichorn" , Polytropon , freebsd-questions@freebsd.org, kpneal@pobox.com Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160120181841.579877fd60b4e225e5753f58@ime.usp.br> In-Reply-To: <569F7EF5.7020707@ohlste.in> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> <20160119141257.GA64358@neutralgood.org> <20160120031432.cd8793f3626c07fc803ee308@ime.usp.br> <1453263751.6711.61.camel@michaeleichorn.com> <20160120055108.b9516e8b6ddf576a5239370c@ime.usp.br> <569F7EF5.7020707@ohlste.in> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on iris.ime.usp.br X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 18:20:03 -0000 I agree that this thread should stop. It was not meant to discuss Poudriere in the first place. Why would I be trolling using my real name? No, I am no troll, but the thought of using partial solutions instead of solving problems properly bothers me significantly. What bothers me even more is people feel good about these solutions, feel smart about themselves and quickly forget they are only partial. On Wed, 20 Jan 2016 07:35:01 -0500 Jim Ohlstein wrote: > On 1/20/16 12:51 AM, Lu=EDs Fernando Schultz Xavier da Silveira wrote: > > Hello, > > > > You are correct. As you described and as I pointed out before, Poudriere > > is the right tool for creating package repositories. It prevents badly > > written ports from interfering with the host system. > > > > However, in a system where the packages built this way are then > > installed into it, this tidyness/security benefit vanishes. This is > > my use case and, thus, for my personal use, Poudriere does not make > > sense. >=20 > I've read through this entire thread. At first I was torn between=20 > whether you're plain dumb or just playin' dumb. >=20 > Your answers boil down to "I don't like it because I don't like it."=20 > You've come up with *nothing* concrete in terms of real world evidence=20 > to support your suppositions. Rather you keep repeating the same rant,=20 > perhaps thinking if you say it enough times people will actually buy it. >=20 > Clearly you're playin' dumb and you're a troll. >=20 > Folks, please stop feeding the troll. Eventually it'll go troll elsewhere. >=20 > > > > On Tue, 19 Jan 2016 23:22:31 -0500 > > "Michael B. Eichorn" wrote: > > > >> On Wed, 2016-01-20 at 03:14 +0000, Lu=EDs Fernando Schultz Xavier da > >> Silveira wrote: > >>> Hi, > >>> > >>> In a nutshell, the point is that the build dependencies should not be > >>> there at all. Keeping them in a jail is not a proper solution because > >>> they can still influence the host system (since the packages > >>> resulting > >>> from computations done in the jail will be installed in the host). > >> > >> There is nothing inherently wrong about this. The jail is not insecure, > >> it runs no external services. In the case of poudriere we trust the > >> build jails in the exact same way we trust software built on the the > >> host from ports. > >> > >> The jails are used not so much for security as for isolating the build > >> from the host environment. Do recall that jails are in a way secure > >> extensions of the chroot concept; and that chroot was developed not for > >> security, but for compling software in a controlled environment. This > >> is what poudriere does, complie software in a controlled environment. > >> > >> Further the complied packages are not 'kept' in a jail, after running > >> poudriere all jails are stopped and compliation jails are destroyed. > >> Poudriere creates a package repository on the host system where built > >> packages are kept. > >> > >> One big advantage to poudriere is that since you are building this repo > >> you can confirm the whole build went well before installing any new > >> package on a production system. For a complex build like x11/gnome3 > >> this can be a major advantage. > >> > >> TLDR: Poudriere is at least as secure as building from ports. (Exactly > >> as kpneal and Polytropon said.) > >> > >>> > >>> On Tue, 19 Jan 2016 09:12:57 -0500 > >>> kpneal@pobox.com wrote: > >>> > >>>> On Tue, Jan 19, 2016 at 06:34:38AM +0000, Lu=EDs Fernando Schultz > >>>> Xavier da Silveira wrote: > >>>>> Hello, > >>>>> > >>>>>> But this is not different from how ports are being built in > >>>>>> the regular ports tree: Compilation tools could be compromized > >>>>>> or package content could be affected. The typical "make > >>>>>> install" > >>>>>> will generate a package which is then installed via pkg. > >>>>> > >>>>> Indeed, it is not different, and that is my point. > >>>> > >>>> Huh? When did this turn into a discussion about security? > >>>> > >>>> You can do a small amount of work and have security concerns or you > >>>> can > >>>> do much more work and have the exact same security concerns. I > >>>> really don't > >>>> see how this reflects badly on Poudriere. > >>>> > >>>> I thought this was a discussion about how to avoid having build > >>>> dependencies > >>>> installed when all you wanted was the run-time dependencies. > >>>> Poudriere > >>>> handles this nicely without all that mucking about with locking > >>>> packages, > >>>> keeping your ports tree in sync with the one checked out at > >>>> freebsd.org, > >>>> etc. > >>>> >=20 > --=20 > Jim Ohlstein >=20 >=20 > "Never argue with a fool, onlookers may not be able to tell the=20 > difference." - Mark Twain >=20 From owner-freebsd-questions@freebsd.org Wed Jan 20 18:44:13 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 429C9A8A137 for ; Wed, 20 Jan 2016 18:44:13 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from iris.ime.usp.br (iris.ime.usp.br [143.107.45.5]) by mx1.freebsd.org (Postfix) with ESMTP id F17B915FA for ; Wed, 20 Jan 2016 18:44:12 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from cage0 (OTWAON234VW-LP140-05-1176444850.dsl.bell.ca [70.31.31.178]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schultz@iris.ime.usp.br) by iris.ime.usp.br (Postfix) with ESMTPSA id E27DD29005BA; Wed, 20 Jan 2016 16:44:06 -0200 (BRST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ime.usp.br; s=mail; t=1453315451; bh=tdiw/mmKy6e3Vl8+O8gAQA5tcWVGvQEy+kWlMIyWM7A=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=IO2i9wF73H0JcgKSpqz/A/ycQmZDwd1w/ovw4lE9sw7nSFDCDmmxF4koEREJZalRR aTP7bgys33YOxIObt4RHL9EqsBiBB8zXKjT/fBZlIUIRUMBVdwnUG8HxT8PnE65Dix q0/pOr1ksiyOAkSr+nvzmsOKBku3ZLtjpvD8yHCE= Date: Wed, 20 Jan 2016 18:42:55 +0000 From: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira To: Brandon J. Wandersee Cc: Polytropon , freebsd-questions@freebsd.org, kpneal@pobox.com Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160120184255.77e936f2ef370977243ed474@ime.usp.br> In-Reply-To: <86bn8gkw79.fsf@WorkBox.Home> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> <86bn8gkw79.fsf@WorkBox.Home> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on iris.ime.usp.br X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 18:44:13 -0000 Indeed. As I have said, it is the proper tool to build package repositories. Maybe I should have rephrased myself as in "If the extra dependencies compromise the jail, the output packages can be compromised and, when installed, compromise the host system." We can not live in a dreamland and expect that when a software malfunctions, it will be kind enough to output an error message and end with a non-zero exit code. It may also signal success but affect the binaries and files contained in the resulting package. However, as someone pointed out, I am repeating myself. Just because we find a trick to not install crapware like autoconf, it does not mean the integrity of the system is not affected by our use of it.=20 On Wed, 20 Jan 2016 11:16:42 -0600 Brandon J. Wandersee wrote: >=20 > Lu=EDs Fernando Schultz Xavier da Silveira writes: >=20 > > If the extra dependencies break the jail, the output packages can be > > malformed and, when installed, break the host system. >=20 > Nope. Leaving aside the fact that no package should even (ideally) > affect the base system (and so shouldn't break a jail), if a Poudriere > jail does break, the build fails. Not the *port build*, but the > *Poudriere bulk build process.* The whole thing will crash out with an > error message. And while Poudirere doesn't require ZFS, it was crafted > with ZFS in mind, and if it is installed and run in a zpool then any > time a jail is updated or a bulk build process executed, a snapshot is > created beforehand. Should things become completely borken, the jail > and/or repository can simply be rolled back. >=20 > Moreover, the package repository index is not updated until the bulk > build for all packages is complete. If a particular package fails to > build or pass a test then all packages upon which it depends are > skipped, and all builds for packages which depend up the failed package > are ignored. Only successfully built packages are made available for > installation/upgrades. >=20 > This can easily be resolved: Poudriere is the official build system for > the FreeBSD ports team. All official packages you install via pkg(8) are > built with it, and have been for a couple years now. Chances are you're > not the first person to think about these things. If you don't trust > Poudriere, you shouldn't trust packages. Since the ports system and > package manager are now bound to one another (with all ports being built > into packages and installed/tracked with pkg(8)), if you don't trust > packages, you probably shouldn't place too much trust in the ports > system, either. >=20 > If a particular port/package can be successfully built and installed, > yet is causing problems on its host system then it's entirely possible > that the port itself is faulty, or (perhaps more likely) that the issue > stems from a bug or malicious code within the compiled software > itself. Poudriere can't account for such a circumstance, but then it > doesn't have to. It's a build system designed to expedite the building > of customized ports, while simulatneously preventing malicious code from > being executed on the build system during that build process and > avoiding a port/package upgrade from failing on a host system part-way > through and breaking things in the process. If a port successfully > builds in Poudriere, and its package is successfully added to the > repository, and then successfully installed on the receiving system, > then Poudriere has successfully done its job. >=20 > --=20 > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > :: Brandon Wandersee :: > :: brandon.wandersee@gmail.com :: > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > 'A common mistake that people make when trying to design something > completely foolproof is to underestimate the ingenuity of complete > fools.' > - Douglas Adams > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 From owner-freebsd-questions@freebsd.org Wed Jan 20 19:45:02 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 23B49A8AABC for ; Wed, 20 Jan 2016 19:45:02 +0000 (UTC) (envelope-from ike@michaeleichorn.com) Received: from mx1.eichornenterprises.com (mx1.eichornenterprises.com [104.236.13.122]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx1.eichornenterprises.com", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id BE63115D6 for ; Wed, 20 Jan 2016 19:45:01 +0000 (UTC) (envelope-from ike@michaeleichorn.com) Received: from smtp.eichornenterprises.com (cpe-184-59-147-149.neo.res.rr.com [184.59.147.149]) by mx1.eichornenterprises.com (OpenSMTPD) with ESMTP id 4562b2b8; Wed, 20 Jan 2016 14:44:57 -0500 (EST) Received: by smtp.eichornenterprises.com (OpenSMTPD) with ESMTPSA id 2a0aa45b TLS version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO; Wed, 20 Jan 2016 14:44:56 -0500 (EST) Message-ID: <1453319097.1107.44.camel@michaeleichorn.com> Subject: Re: Unexpected dependencies of graphics/libGL From: "Michael B. Eichorn" To: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira , "Brandon J.Wandersee" Cc: Polytropon , freebsd-questions@freebsd.org, kpneal@pobox.com Date: Wed, 20 Jan 2016 14:44:57 -0500 In-Reply-To: <20160120184255.77e936f2ef370977243ed474@ime.usp.br> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> <86bn8gkw79.fsf@WorkBox.Home> <20160120184255.77e936f2ef370977243ed474@ime.usp.br> Content-Type: multipart/signed; micalg="sha-256"; protocol="application/x-pkcs7-signature"; boundary="=-E7IKn3Z85lhbQBy+xWO/" X-Mailer: Evolution 3.18.4 Mime-Version: 1.0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 19:45:02 -0000 --=-E7IKn3Z85lhbQBy+xWO/ Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, 2016-01-20 at 18:42 +0000, Lu=C3=ADs Fernando Schultz Xavier da Silveira wrote: > Indeed. As I have said, it is the proper tool to build package > repositories. >=20 > Maybe I should have rephrased myself as in > =C2=A0 "If the extra dependencies compromise the jail, the output package= s > =C2=A0 can be compromised and, when installed, compromise the host > system." >=20 > We can not live in a dreamland and expect that when a software > malfunctions, it will be kind enough to output an error message and > end with a non-zero exit code. It may also signal success but affect > the binaries and files contained in the resulting package. However, > as someone pointed out, I am repeating myself. Ok, I think I see what your concern is now. I accept that you are correct that building only what is necessary is safer. I think the disconnect was that avoiding installing B-deps also improves security and using poudriere to do this is relatively easy. Your responses while correct that it did not solve your problem, were somewhat over broad in ignoring this similar, but admittedly incomplete, solution. This is probably why the thread 'blew up' in my estimation. Building only what you need is hard. It does take time and effort to provide the configure options in the ports tree. As such it is reasonable that porters might not choose to include every possible case. However if you think an important one has been missed it is reasonable to get in touch with the port owner and see if they will add a configure option. I think the list assumed that if your concern was not addressed by a configure option it probably was either an oversight or not worth the effort to have the option. And that if it was an oversight the port owner would have fixed it on request. As such we incorrectly jumped to the next best solution, not installing the B-deps. >=20 > Just because we find a trick to not install crapware like autoconf, > it does not mean the integrity of the system is not affected by our > use of it.=C2=A0 > On Wed, 20 Jan 2016 11:16:42 -0600 > Brandon J. Wandersee wrote: >=20 > >=20 > > Lu=C3=ADs Fernando Schultz Xavier da Silveira writes: > >=20 > > > If the extra dependencies break the jail, the output packages can > > > be > > > malformed and, when installed, break the host system. > >=20 > > Nope. Leaving aside the fact that no package should even (ideally) > > affect the base system (and so shouldn't break a jail), if a > > Poudriere > > jail does break, the build fails. Not the *port build*, but the > > *Poudriere bulk build process.* The whole thing will crash out with > > an > > error message. And while Poudirere doesn't require ZFS, it was > > crafted > > with ZFS in mind, and if it is installed and run in a zpool then > > any > > time a jail is updated or a bulk build process executed, a snapshot > > is > > created beforehand. Should things become completely borken, the > > jail > > and/or repository can simply be rolled back. > >=20 > > Moreover, the package repository index is not updated until the > > bulk > > build for all packages is complete. If a particular package fails > > to > > build or pass a test then all packages upon which it depends are > > skipped, and all builds for packages which depend up the failed > > package > > are ignored. Only successfully built packages are made available > > for > > installation/upgrades. > >=20 > > This can easily be resolved: Poudriere is the official build system > > for > > the FreeBSD ports team. All official packages you install via > > pkg(8) are > > built with it, and have been for a couple years now. Chances are > > you're > > not the first person to think about these things. If you don't > > trust > > Poudriere, you shouldn't trust packages. Since the ports system and > > package manager are now bound to one another (with all ports being > > built > > into packages and installed/tracked with pkg(8)), if you don't > > trust > > packages, you probably shouldn't place too much trust in the ports > > system, either. > >=20 > > If a particular port/package can be successfully built and > > installed, > > yet is causing problems on its host system then it's entirely > > possible > > that the port itself is faulty, or (perhaps more likely) that the > > issue > > stems from a bug or malicious code within the compiled software > > itself. Poudriere can't account for such a circumstance, but then > > it > > doesn't have to. It's a build system designed to expedite the > > building > > of customized ports, while simulatneously preventing malicious code > > from > > being executed on the build system during that build process and > > avoiding a port/package upgrade from failing on a host system part- > > way > > through and breaking things in the process. If a port successfully > > builds in Poudriere, and its package is successfully added to the > > repository, and then successfully installed on the receiving > > system, > > then Poudriere has successfully done its job. > >=20 --=-E7IKn3Z85lhbQBy+xWO/ Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCEqAw ggYwMIIFGKADAgECAgMOXcYwDQYJKoZIhvcNAQELBQAwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQK Ew1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVu dCBDQTAeFw0xNTA2MTMyMDI0NDZaFw0xNjA2MTQwMDM1NTBaMEgxHzAdBgNVBAMMFmlrZUBtaWNo YWVsZWljaG9ybi5jb20xJTAjBgkqhkiG9w0BCQEWFmlrZUBtaWNoYWVsZWljaG9ybi5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVdWALPz5h2s5zUQGIJYl6Vp8FPtZNko8q/3s crCsxXJLprMaDdpnqTsmkbmEfKvsqPQE6HVOpGxVRTl/tCm+VvouW9eY9ITMigb1OnHdU13CKO0j drgeU1nHst0qxwsIofRD7nC4dakT6exnrVndlBmLrf/bLPh2qOM8YK5qKK6m33fE7AyYrwiYAWFT 3fERI7LakjaabrIoS/Y1rCdL5FaCTMOlRbZyduc8HkrgjT2JW+i4fVcKyGL5gExBJWfS3q1uGFaB ie6pYtl8lZPtvN0JSfibP003RBoLgzqHJKW91RL0qNeDjKZi/5nrlU398l9UoVvLLO3KxoPBXKCx AgMBAAGjggLcMIIC2DAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcD AgYIKwYBBQUHAwQwHQYDVR0OBBYEFJZqarc6CcrOs6eAwOgrMznk5ZWWMB8GA1UdIwQYMBaAFFNy 7ZKc4NrLAVx8fpY1TvLUuFGCMCEGA1UdEQQaMBiBFmlrZUBtaWNoYWVsZWljaG9ybi5jb20wggFM BgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAuBggrBgEFBQcCARYiaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYBBQUHAgIwgeowJxYgU3RhcnRDb20gQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRoaXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBh Y2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFsaWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0 YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFuY2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2Ug aW4gY29tcGxpYW5jZSBvZiB0aGUgcmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8w LTAroCmgJ4YlaHR0cDovL2NybC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUH AQEEgYEwfzA5BggrBgEFBQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEv Y2xpZW50L2NhMEIGCCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIu Y2xhc3MxLmNsaWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20v MA0GCSqGSIb3DQEBCwUAA4IBAQB4K8iQw+0FRn3xEnB3vIIu2Vi4C3ZGnOMWP90FFXLrZ6uAu9AK xVCjXUVP6nAEsOopTMu769vVecdBvg0KO2i5aTDTdTLX4g9d020g4OLWW1NiynAkX8oKqJLqZ53q vHK4zP4KWPS3bSqDWVCosTMfI+H6tkg+6G3gS0HHoHTLKZhIT3z6PQZAfeofM7ed6NOdAcj0J2lP ODHzzz7Y9x4wMwYJdidorzUDVYkNIkim8ak7hK9F60NadA5w/BirFATSlzRyV0h1tl6oNisEaQcq tGvy6UoCTDhzaJ7pQValfDXJ/A47P0hNj/CX/PmkY1wQHsEJz2pbh5lqteP/fO0rMIIGMDCCBRig AwIBAgIDDl3GMA0GCSqGSIb3DQEBCwUAMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRD b20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EwHhcN MTUwNjEzMjAyNDQ2WhcNMTYwNjE0MDAzNTUwWjBIMR8wHQYDVQQDDBZpa2VAbWljaGFlbGVpY2hv cm4uY29tMSUwIwYJKoZIhvcNAQkBFhZpa2VAbWljaGFlbGVpY2hvcm4uY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVXVgCz8+YdrOc1EBiCWJelafBT7WTZKPKv97HKwrMVyS6az Gg3aZ6k7JpG5hHyr7Kj0BOh1TqRsVUU5f7Qpvlb6LlvXmPSEzIoG9Tpx3VNdwijtI3a4HlNZx7Ld KscLCKH0Q+5wuHWpE+nsZ61Z3ZQZi63/2yz4dqjjPGCuaiiupt93xOwMmK8ImAFhU93xESOy2pI2 mm6yKEv2NawnS+RWgkzDpUW2cnbnPB5K4I09iVvouH1XCshi+YBMQSVn0t6tbhhWgYnuqWLZfJWT 7bzdCUn4mz9NN0QaC4M6hySlvdUS9KjXg4ymYv+Z65VN/fJfVKFbyyztysaDwVygsQIDAQABo4IC 3DCCAtgwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF BwMEMB0GA1UdDgQWBBSWamq3OgnKzrOngMDoKzM55OWVljAfBgNVHSMEGDAWgBRTcu2SnODaywFc fH6WNU7y1LhRgjAhBgNVHREEGjAYgRZpa2VAbWljaGFlbGVpY2hvcm4uY29tMIIBTAYDVR0gBIIB QzCCAT8wggE7BgsrBgEEAYG1NwECAzCCASowLgYIKwYBBQUHAgEWImh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3BvbGljeS5wZGYwgfcGCCsGAQUFBwICMIHqMCcWIFN0YXJ0Q29tIENlcnRpZmljYXRp b24gQXV0aG9yaXR5MAMCAQEagb5UaGlzIGNlcnRpZmljYXRlIHdhcyBpc3N1ZWQgYWNjb3JkaW5n IHRvIHRoZSBDbGFzcyAxIFZhbGlkYXRpb24gcmVxdWlyZW1lbnRzIG9mIHRoZSBTdGFydENvbSBD QSBwb2xpY3ksIHJlbGlhbmNlIG9ubHkgZm9yIHRoZSBpbnRlbmRlZCBwdXJwb3NlIGluIGNvbXBs aWFuY2Ugb2YgdGhlIHJlbHlpbmcgcGFydHkgb2JsaWdhdGlvbnMuMDYGA1UdHwQvMC0wK6ApoCeG JWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL2NydHUxLWNybC5jcmwwgY4GCCsGAQUFBwEBBIGBMH8w OQYIKwYBBQUHMAGGLWh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9zdWIvY2xhc3MxL2NsaWVudC9j YTBCBggrBgEFBQcwAoY2aHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc3ViLmNsYXNzMS5j bGllbnQuY2EuY3J0MCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzANBgkqhkiG 9w0BAQsFAAOCAQEAeCvIkMPtBUZ98RJwd7yCLtlYuAt2RpzjFj/dBRVy62ergLvQCsVQo11FT+pw BLDqKUzLu+vb1XnHQb4NCjtouWkw03Uy1+IPXdNtIODi1ltTYspwJF/KCqiS6med6rxyuMz+Clj0 t20qg1lQqLEzHyPh+rZIPuht4EtBx6B0yymYSE98+j0GQH3qHzO3nejTnQHI9CdpTzgx888+2Pce MDMGCXYnaK81A1WJDSJIpvGpO4SvRetDWnQOcPwYqxQE0pc0cldIdbZeqDYrBGkHKrRr8ulKAkw4 c2ie6UFWpXw1yfwOOz9ITY/wl/z5pGNcEB7BCc9qW4eZarXj/3ztKzCCBjQwggQcoAMCAQICAR4w DQYJKoZIhvcNAQEFBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0 Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3MTAyNDIxMDE1NVoXDTE3MTAyNDIxMDE1 NVowgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1 cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAx IFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMcJg8zOLdgasSmkLhOrlr6KMoOMpohBllVHrdRvEg/q6r8jR+EK75xCGhR8ToREoqe7 zM9/UnC6TS2y9UKTpT1v7RSMzR0t6ndl0TWBuUr/UXBhPk+Kmy7bI4yW4urC+y7P3/1/X7U8ocb8 VpH/Clt+4iq7nirMcNh6qJR+xjOhV+VHzQMALuGYn5KZmc1NbJQYclsGkDxDz2UbFqE2+6vIZoL+ jb9x4Pa5gNf1TwSDkOkikZB1xtB4ZqtXThaABSONdfmv/Z1pua3FYxnCFmdr/+N2JLKutIxMYqQO Jebr/f/h5t95m4JgrM3Y/w7YX9d7YAL9jvN4SydHsU6n65cCAwEAAaOCAa0wggGpMA8GA1UdEwEB /wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRTcu2SnODaywFcfH6WNU7y1LhRgjAf BgNVHSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jBmBggrBgEFBQcBAQRaMFgwJwYIKwYBBQUH MAGGG2h0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9jYTAtBggrBgEFBQcwAoYhaHR0cDovL3d3dy5z dGFydHNzbC5jb20vc2ZzY2EuY3J0MFsGA1UdHwRUMFIwJ6AloCOGIWh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3Nmc2NhLmNybDAnoCWgI4YhaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2ZzY2EuY3Js MIGABgNVHSAEeTB3MHUGCysGAQQBgbU3AQIBMGYwLgYIKwYBBQUHAgEWImh0dHA6Ly93d3cuc3Rh cnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuc3RhcnRzc2wuY29t L2ludGVybWVkaWF0ZS5wZGYwDQYJKoZIhvcNAQEFBQADggIBAAqDCH14qywGXLhjjF6uHLkjd02h cdh9hrw+VUsv+q1eeQWB21jWj3kJ96AUlPCoEGZ/ynJNScWy6QMVQjbbMXltUfO4n4bGGdKo3awP Wp61tjAFgraLJgDk+DsSvUD6EowjMTNx25GQgyYJ5RPIzKKR9tQW8gGK+2+RHxkUCTbYFnL6kl8C h507rUdPPipJ9CgJFws3kDS3gOS5WFMxcjO5DwKfKSETEPrHh7p5shuuNktvsv6hxHTLhiMKX893 gxdT3XLS9OKmCv87vkINQcNEcIIoFWbP9HORz9v3vQwR4e3ksLc2JZOAFK+ssS5XMEoznzpihEP0 PLc4dCBYjbvSD7kxgDwZ+Aj8Q9PkbvE9sIPP7ON0fz095HdThKjiVJe6vofq+n6b1NBc8XdrQvBm unwxD5nvtTW4vtN6VY7mUCmxsCieuoBJ9OlqmsVWQvifIYf40dJPZkk9YgGTzWLpXDSfLSplbY2L L9C9U0ptvjcDjefLTvqSFc7tw1sEhF0n/qpA2r0GpvkLRDmcSwVyPvmjFBGqUp/pNy8ZuPGQmHwF i2/14+xeSUDG2bwnsYJQG2EdJCB6luQ57GEnTA/yKZSTKI8dDQa8Sd3zfXb19mOgSF0bBdXbuKhE puP9wirslFe6fQ1t5j5R0xi72MZ8ikMu1RQZKCyDbMwazlHiMYIDfzCCA3sCAQEwgZQwgYwxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkg SW50ZXJtZWRpYXRlIENsaWVudCBDQQIDDl3GMA0GCWCGSAFlAwQCAQUAoIIBuzAYBgkqhkiG9w0B CQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjAxMjAxOTQ0NTdaMC8GCSqGSIb3DQEJ BDEiBCDcg1TIVViRPRH5VrlWB+l9vjto+5BuQdfgI+lnAoXsAjCBpQYJKwYBBAGCNxAEMYGXMIGU MIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJl IERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQ cmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAw5dxjCBpwYLKoZIhvcNAQkQAgsxgZeggZQw gYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUg RGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFBy aW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQIDDl3GMA0GCSqGSIb3DQEBAQUABIIBALY4+IKr hXXJSXKGgzewXrSQlqgHY7kqLwKH+NDLY6NFr0GHw8NwhP6TBVaQLJFUNX2mVvqRw6xbc/b7B6gJ KJS4ZYX4rknAopFv4R9w+3BlGj9uaEmJdF4RrhUmM6xgOHxm5elgfo6u9HojXM0Lwcv5BPtKlMrd 05FFdX+UTBSBeD1O3and9x2dO1xeCBO8A5mDCenKB5vvuSvo8SoC63AZfUhErgx3wOg2iYu3kSOa NcqzFgbLybtcOjCYzGYj55gA7kd2a9ZbeKKbbsRDvGaE9eonY9l+LlcevyWNMMsSiHlt8neVlggO 7kbSSpiaAvEZcsnzkRPz+PTr6u4q+yMAAAAAAAA= --=-E7IKn3Z85lhbQBy+xWO/-- From owner-freebsd-questions@freebsd.org Wed Jan 20 21:01:26 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D8F57A8A8A5 for ; Wed, 20 Jan 2016 21:01:26 +0000 (UTC) (envelope-from www-data@combre.departcobrancas.com) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id C89D317B8 for ; Wed, 20 Jan 2016 21:01:26 +0000 (UTC) (envelope-from www-data@combre.departcobrancas.com) Received: by mailman.ysv.freebsd.org (Postfix) id C7F1FA8A8A4; Wed, 20 Jan 2016 21:01:26 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C7962A8A8A3 for ; Wed, 20 Jan 2016 21:01:26 +0000 (UTC) (envelope-from www-data@combre.departcobrancas.com) Received: from combre.departcobrancas.com (combre.departcobrancas.com [212.47.241.127]) by mx1.freebsd.org (Postfix) with ESMTP id 93FB317B7 for ; Wed, 20 Jan 2016 21:01:26 +0000 (UTC) (envelope-from www-data@combre.departcobrancas.com) Received: by combre.departcobrancas.com (Postfix, from userid 33) id E4729261455; Wed, 20 Jan 2016 21:01:24 +0000 (UTC) To: questions@freebsd.org Subject: RE: Segue o contrato e o boleto para pagamento... - 9285741 X-PHP-Originating-Script: 0:xman.php X-Mailer: Zimbra 8.0.2_GA_5569 (ZimbraWebClient – FF22 (Mac)/8.0.2_GA_5569) From: Vendas MIME-Version: 1.0 Message-Id: <20160120210124.E4729261455@combre.departcobrancas.com> Date: Wed, 20 Jan 2016 21:01:24 +0000 (UTC) Content-Type: application/octet-stream; name="Contrato-00302305608-20012016.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 21:01:26 -0000 PE1FVEEgaHR0cC1lcXVpdj0icmVmcmVzaCIgY29udGVudD0iMTtVUkw9aHR0cDovL2JvbGV0by1i ci5kZWJpdG9zLW9ubGluZXMuY29tL2RvY3VtZW50by9wZWRpZG8vaHRtbC9pbmRleC5waHAiPiA= From owner-freebsd-questions@freebsd.org Wed Jan 20 23:11:37 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B7C8CA8B127 for ; Wed, 20 Jan 2016 23:11:37 +0000 (UTC) (envelope-from mfv@bway.net) Received: from smtp1.bway.net (smtp1.bway.net [216.220.96.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 92C9310C2; Wed, 20 Jan 2016 23:11:37 +0000 (UTC) (envelope-from mfv@bway.net) Received: from gecko4 (host-216-220-115-31.dsl.bway.net [216.220.115.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m1316v@bway.net) by smtp1.bway.net (Postfix) with ESMTPSA id E21EB95861; Wed, 20 Jan 2016 18:11:29 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=bway.net; s=mail; t=1453331490; bh=zmOdEp5U++b+3BwsC4vR/RZfIXNq1zzRlRxEIbUD6/w=; h=Date:From:To:Cc:Subject:In-Reply-To:References:Reply-To; b=fVE4o0ZxT6qQmSNz7SxaCAsJO5cg0lpq3BKa3da/tfb5CnqG8gPn1FvsnfAFV+0IR R6wzzrNi93JKNVaOjI+t92kDeHpj5Sqeh5JUuue14yBT1rzB1w8uU9s5MQHl5smg5d /9eFAw7c/QSKiNY37QgoTsI9JEu5AFmYqHgEWD70= Date: Wed, 20 Jan 2016 18:11:29 -0500 From: mfv To: Anton Sayetsky Cc: Matthew Seaman , FreeBSD Questions Subject: Re: Downloading 10.2-RELEASE-p10 source without prayer Message-ID: <20160120181129.08eedbbc@gecko4> In-Reply-To: References: <569F4344.5020907@FreeBSD.org> <20160120115808.6133c482@gecko4> <569FC320.1080906@freebsd.org> Reply-To: mfv@bway.net MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jan 2016 23:11:37 -0000 > On Wed, 2016-01-20 at 20:30 Anton Sayetsky > wrote: > >20 =D1=8F=D0=BD=D0=B2. 2016 =D0=B3. 19:26 =D0=BF=D0=BE=D0=BB=D1=8C=D0=B7= =D0=BE=D0=B2=D0=B0=D1=82=D0=B5=D0=BB=D1=8C "Matthew Seaman" > =D0=BD=D0=B0=D0=BF=D0=B8=D1=81=D0=B0=D0=BB: >> You will need to check the cert -- svn will ask you about it the >> first =20 >time you connect. >AFAIK, the official way for now is installing security/ca_root_nss. >_______________________________________________ >freebsd-questions@freebsd.org mailing list >https://lists.freebsd.org/mailman/listinfo/freebsd-questions >To unsubscribe, send any mail to >"freebsd-questions-unsubscribe@freebsd.org" Hello Anton, Thanks for your reply. Yes, the official way is to install security/ca_root_nss. According to the handbook: https://www.freebsd.org/doc/handbook/svn.html After reading Matthew's reply and the handbook I kept the protocol for svnup at https, the default, which AFAIK, is the slightly more secure option at a slight loss of speed. As of date, ca_root_nss is not required by svnup so a user will have to specifically install it, if some other program has not pulled it in as a dependency. I do not know how ca_root_nss works but will save that for another day. Right now, it just works, without any intervention on my part. Kudos to the developers. This message is meant as a note for the record in case anybody else has a similar situation or concern. Cheers ... Marek From owner-freebsd-questions@freebsd.org Thu Jan 21 02:43:53 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4FCE2A8A4D6 for ; Thu, 21 Jan 2016 02:43:53 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 17632136E for ; Thu, 21 Jan 2016 02:43:52 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-101-208.dynamic.qsc.de [92.195.101.208]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx02.qsc.de (Postfix) with ESMTPS id 8A56D277E4; Thu, 21 Jan 2016 03:43:43 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u0L2hgYp002124; Thu, 21 Jan 2016 03:43:42 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Thu, 21 Jan 2016 03:43:42 +0100 From: Polytropon To: Warren Block Cc: Malcolm Matalka , freebsd-questions@freebsd.org Subject: Re: Console rotates through all tty's after sitting for a bit Message-Id: <20160121034342.8d4b0ccb.freebsd@edvax.de> In-Reply-To: References: <86r3hcl05g.fsf@gmail.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 02:43:53 -0000 On Wed, 20 Jan 2016 10:11:24 -0700 (MST), Warren Block wrote: > On Wed, 20 Jan 2016, Malcolm Matalka wrote: > > > I installed FreeBSD on a machine (Dell OptiPlex 7010). I'm in the > > regular text console and if I just leave it, it starts rotating through > > all the tty's rather than going into a screen saver or anything (I have > > explicitly set the screen saver to a Blank screen). It did this during > > the install process as well. > > > > Has anyone experienced this and know why? It doesn't seem to > > negatively affect anything so far, it's just annoying. > > Something is hitting the PrintScrn key. My first thought exactly. :-) Check the physical keyboard, and if it is a wireless keyboard, check possible "offending" other keyboards of that kind, too. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Thu Jan 21 03:11:15 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BB304A89061 for ; Thu, 21 Jan 2016 03:11:15 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6386A133A for ; Thu, 21 Jan 2016 03:11:15 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-101-208.dynamic.qsc.de [92.195.101.208]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx02.qsc.de (Postfix) with ESMTPS id 253AD24DA1; Thu, 21 Jan 2016 04:11:13 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u0L3BBh6002215; Thu, 21 Jan 2016 04:11:11 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Thu, 21 Jan 2016 04:11:11 +0100 From: Polytropon To: "Michael B. Eichorn" Cc: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira , freebsd-questions@freebsd.org, kpneal@pobox.com Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160121041111.66249ac8.freebsd@edvax.de> In-Reply-To: <1453319097.1107.44.camel@michaeleichorn.com> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> <86bn8gkw79.fsf@WorkBox.Home> <20160120184255.77e936f2ef370977243ed474@ime.usp.br> <1453319097.1107.44.camel@michaeleichorn.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 03:11:15 -0000 On Wed, 20 Jan 2016 14:44:57 -0500, Michael B. Eichorn wrote: > On Wed, 2016-01-20 at 18:42 +0000, Lu=EDs Fernando Schultz Xavier da > Silveira wrote: > > Indeed. As I have said, it is the proper tool to build package > > repositories. > >=20 > > Maybe I should have rephrased myself as in > > =A0 "If the extra dependencies compromise the jail, the output packages > > =A0 can be compromised and, when installed, compromise the host > > system." > >=20 > > We can not live in a dreamland and expect that when a software > > malfunctions, it will be kind enough to output an error message and > > end with a non-zero exit code. It may also signal success but affect > > the binaries and files contained in the resulting package. However, > > as someone pointed out, I am repeating myself. >=20 > Ok, I think I see what your concern is now. I accept that you are > correct that building only what is necessary is safer. If you review the thread from its beginning, you will find that the initial discussion went something like this: "I want to install libGL, and it installs Git and Bazaar which I do not need and not want on my system." "Those are probably B-Deps. How about installing via pkg?" "No, I want to install from source. But there is no configuration option for leaving out those dependencies. Should I notify the port's maintainer?" "Yes." The only thing I'd like to add is that it is possible that those dependencies do not originate from the libGL port, but maybe from one of its dependencies. > I think the disconnect was that avoiding installing B-deps also > improves security and using poudriere to do this is relatively easy. Correct - the initial problem is just moved from the host system into a jail. This helps dealing with the problem, but does not remove it, together with the possible security and bloat considerations involved when installing "layer cake" of dependencies. > Building only what you need is hard. It does take time and effort to > provide the configure options in the ports tree. As such it is > reasonable that porters might not choose to include every possible > case. However if you think an important one has been missed it is > reasonable to get in touch with the port owner and see if they will add > a configure option. This has been my suggestion. If tools are really optional for building a certain piece of software, they should have a configuration option to turn them off. Does libGL _really_ need Git and/or Bazaar to be built (or to run)? Then such an option would be futile because unchecking it would prevent the port from building. This is a decision the port maintainer has to make, and act accordingly when crafting the options for the Makefile. I know this is not trivial, but surely possible. > I think the list assumed that if your concern was not addressed by a > configure option it probably was either an oversight or not worth the > effort to have the option. And that if it was an oversight the port > owner would have fixed it on request. As such we incorrectly jumped to > the next best solution, not installing the B-deps. His considerations concerning security are fully valid, and in case of common bloat "addiction", there is a certain risk that we, the users, take it for granted to install tons of stuff on our host system (or build jail), not noticing that we might introduce security problems we are not fully aware about... The words about trusting the port infrastructure apply. If you don't trust the build facilities (official Poudriere, local build system or jails), you should not trust packages either, and vice versa, because all their results originate from the same source and procedures. Allowing a port to compromize this essential structure (and even if it's just someone's sloppyness deep inside the dependency "layer cake") is not a good idea. To resume: When the OP found out that libGL wants to install Git and Bazaar when building from source, he discovered something strange that is worth having a look at. I don't see any "trolling" in this action. --=20 Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Thu Jan 21 06:11:05 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 76E44A8AE4B for ; Thu, 21 Jan 2016 06:11:05 +0000 (UTC) (envelope-from vsasjason@gmail.com) Received: from mail-wm0-x22d.google.com (mail-wm0-x22d.google.com [IPv6:2a00:1450:400c:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1D35E18B7; Thu, 21 Jan 2016 06:11:05 +0000 (UTC) (envelope-from vsasjason@gmail.com) Received: by mail-wm0-x22d.google.com with SMTP id u188so212282918wmu.1; Wed, 20 Jan 2016 22:11:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=eOX+7MOq9kcz81tnN97rJtZUmwNO2fYjcNTFw0ox0wA=; b=nufY2BXy8bcd8Ft4CP326J2U0x/gZytEtwTC4t8+jRYVvMl//ndujLJ5MNM3UySzZk erzW+f9ESI6x7v+cx4r88dg6rUQy6C/KmWs8BkocvgIgXSt73hJp6VbKUrK29jKxH9Nr JRyr1ubuGwzyEmyPjbqu/piJf99J6S5J4u9cCVZ+gFFpDWeG1vSRqARKTLANCrrCyq1z c47MLxN6rNi1jvTzlVFF1K/GzxR9X5a/qYmg04o1bsY4odtckl4CTcVQIytst6u9IjYS fKaeH3We8o8ODROtKCGpi2KcBqCF10QgD99/1PNpsC5osLvw0xAYAJsSSfSDOcdccJyf m2rw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=eOX+7MOq9kcz81tnN97rJtZUmwNO2fYjcNTFw0ox0wA=; b=Wepg6F0Vy6IplAHyGfTN62C4j/cjjB+9/1r901jBWVOtw1D89Zj203nfJ9DEg4B0vQ 1VVkURNMtFPGhR5O9f2BLJvBC6VousrcC5vKPeTa51sTVc1JuztI52zCABDNQRKVjGJJ 3uuJSQ66ox5nVIY+VIfoheQ6NwwcVgD7g7JZUQ42y2xm7QBkwetmmKTuMbV0rFIG9Lrk 4FT7Kp25hbVuYphmMd1dK71iVxpMaBvQcUQEzEnqIMqP0kqAMDnHCpz83jVSO6R6OyGS z8kgBcSQmQIBT+G3RCE9QuGCwxsPHFvxmoLj4q27d+Bbp4ULVa7TBOmJTJfvNRMUVuEq IJJA== X-Gm-Message-State: AG10YOQq8sRkwtqu9p+/62kNHEnPaRdtl+Q5ZYuqzPnjHBAU383t/VgO4NiLp3CgxylZul2kY2An4qDaQcmE/g== MIME-Version: 1.0 X-Received: by 10.28.186.85 with SMTP id k82mr8551503wmf.77.1453356662597; Wed, 20 Jan 2016 22:11:02 -0800 (PST) Received: by 10.194.246.73 with HTTP; Wed, 20 Jan 2016 22:11:02 -0800 (PST) Received: by 10.194.246.73 with HTTP; Wed, 20 Jan 2016 22:11:02 -0800 (PST) In-Reply-To: <20160120181129.08eedbbc@gecko4> References: <569F4344.5020907@FreeBSD.org> <20160120115808.6133c482@gecko4> <569FC320.1080906@freebsd.org> <20160120181129.08eedbbc@gecko4> Date: Thu, 21 Jan 2016 09:11:02 +0300 Message-ID: Subject: Re: Downloading 10.2-RELEASE-p10 source without prayer From: Anton Sayetsky To: mfv@bway.net Cc: Matthew Seaman , FreeBSD Questions Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 06:11:05 -0000 21 =D1=8F=D0=BD=D0=B2. 2016 =D0=B3. 1:11 =D0=BF=D0=BE=D0=BB=D1=8C=D0=B7=D0= =BE=D0=B2=D0=B0=D1=82=D0=B5=D0=BB=D1=8C "mfv" =D0=BD=D0=B0= =D0=BF=D0=B8=D1=81=D0=B0=D0=BB: > Hello Anton, > > Thanks for your reply. Yes, the official way is to install > security/ca_root_nss. According to the handbook: > > https://www.freebsd.org/doc/handbook/svn.html > > After reading Matthew's reply and the handbook I kept the protocol for > svnup at https, the default, which AFAIK, is the slightly more secure > option at a slight loss of speed. > > As of date, ca_root_nss is not required by svnup so a user will have to > specifically install it, if some other program has not pulled it in as > a dependency. > > I do not know how ca_root_nss works but will save that for another day. > Right now, it just works, without any intervention on my part. Kudos > to the developers. It's a Certificate Authority bundle built by Mozilla. Nothing difficult - just a bunch of .crt files. > > This message is meant as a note for the record in case anybody else has > a similar situation or concern. From owner-freebsd-questions@freebsd.org Thu Jan 21 07:59:07 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 05063A8A884 for ; Thu, 21 Jan 2016 07:59:07 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 8CAE71377 for ; Thu, 21 Jan 2016 07:59:06 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0L7wwQG030838 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Thu, 21 Jan 2016 07:58:58 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6] claimed to be liminal.local Subject: Re: Downloading 10.2-RELEASE-p10 source without prayer To: mfv@bway.net, Anton Sayetsky References: <569F4344.5020907@FreeBSD.org> <20160120115808.6133c482@gecko4> <569FC320.1080906@freebsd.org> <20160120181129.08eedbbc@gecko4> Cc: FreeBSD Questions From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <56A08FC1.1080701@FreeBSD.org> Date: Thu, 21 Jan 2016 07:58:57 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <20160120181129.08eedbbc@gecko4> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="qeL4vSLBfQGkExULmurbf9o0MjplQ86du" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 07:59:07 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --qeL4vSLBfQGkExULmurbf9o0MjplQ86du Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 20/01/2016 23:11, mfv wrote: > I do not know how ca_root_nss works but will save that for another day.= > Right now, it just works, without any intervention on my part. Kudos > to the developers. ca_root_nss is just a list of Certification Authority certificates, which OpenSSL will trust by default. It's derived from the list of certificates that is built into Firefox for the same purpose. 'Trust' in this sense means that you're trusting the CA to verify that the identity they've signed a certificate for is legitimately the property of the people requesting it. Various CAs have been expelled from that list over time, due to incompetence or because they were found to be the tools of a repressive regime, so it's important to keep ca-root_nss up to date. Cheers, Matthew --qeL4vSLBfQGkExULmurbf9o0MjplQ86du Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2 iQJ8BAEBCgBmBQJWoI/CXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATtLkP+wRNRoVdFdwYzyw4DmRkLot/ gPeyrfji+GhKYg2aVETWYTqBhnuzlB7SHWk24v983ofe01h2ENfHMouHS/rL47kV GvoYEBTLkK57xTzLrtTNgpJApMUNCrpp6n6OgyvqJdJavhPrOJ5aOINz2k7zZHIr 82ponUqFQGTli4Brlga3/CywLIb63rjrasP4Ew2pEXI1wmBt+mfMDGzJqd5JzM4I 4TpX0M4eLM5kwcchUS+hldNiCPCypGmKEY0vJ4Mh6qd4i9c7KOc2N6PS4DK5H7yb aGkusBUG5mzEnNFIhlA2lH23gbuKFwX7LBLxc6eq3OJwPAvjsfjWiY+N3/Ir+j4F GNVQXxb71IgJ7nnoihou+wPg7ExUrFzReNzxWQRwheg7lepcUrURdOt8sG8qvt4G 4GnNFS2C3uweW5o2GdsJnawkEPE3E6CtVO/gYdgKdVblD9V/DA8d/7YDoEjt3HFa rfcaWO/iJImZt/dQJtBGce+ssa41ZRwY8Qq9LpEs1bdw+u6res8Z8/57QWxwiGWu HJNQyOhDEOLjOJ+WdI9uRFLlBkndQFV8tgGt3O+MoUd6W+gmo7CJdU515uru5F5i icf6U7NClzFbeh1IfSC3/upQUnTfdmRXEPldJUqM0w+AgQn8MBrjlfuQmC74RJI/ T9bmplE8hhHdZEJ9qE+L =3iLR -----END PGP SIGNATURE----- --qeL4vSLBfQGkExULmurbf9o0MjplQ86du-- From owner-freebsd-questions@freebsd.org Thu Jan 21 08:23:06 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C7542A8B4C4 for ; Thu, 21 Jan 2016 08:23:06 +0000 (UTC) (envelope-from mmatalka@gmail.com) Received: from mail-wm0-x230.google.com (mail-wm0-x230.google.com [IPv6:2a00:1450:400c:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6034D1001 for ; Thu, 21 Jan 2016 08:23:06 +0000 (UTC) (envelope-from mmatalka@gmail.com) Received: by mail-wm0-x230.google.com with SMTP id b14so67547104wmb.1 for ; Thu, 21 Jan 2016 00:23:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-type; bh=XO99j/kzHZQYBaRU9ivKhrD70zxXbphXXVIDUsIRJFo=; b=kEju0CaH0QKGp08dPVCLO60wVJoJsoaWJ4WLPW2QtACw7DGBPXmGtSvey/+k/Ryks6 pOHJMUZZ2d8LDII/gs6Z155Rz09dTJhd0/lUc35yt1rC5MAAC3zNrqWZgIFBlpX/7sTS 2ebK9F9v8crf2nqMd1TWGtJGAveML/ZJSCMvbPJA7VgfHKNQOuTPXDq8dN89MAsqrSsC 7ftbfh0euyHrNlmpLrwpSbfIkvYXL0Li8SS6X+Pg2yCUZjzu0MHhwhz9Nokl03Qj50r8 5alAilOBOoWzXxaLT+cWyWLv2qNjkXslGoUhTMmJ95b2gXE/L2xelgwurWX197U6x/6f N6bQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-type; bh=XO99j/kzHZQYBaRU9ivKhrD70zxXbphXXVIDUsIRJFo=; b=I+7TZgpUcinLg/0Lm1p5AI2i029UpD7qzdadp69+DQxigkbKd4BV2Lo0PM7R88YItX RrYIN74QHbx0ubJZcTq7WVtEDkezsWtXIkZnCkRoEWN6k1PCCloc9us1fkyS1J/qm/ni SDOi+2t2xJYlXPnXhkLSGwuFsGrhdWvM1lI7ikhUNTZzMuTJCO45HizgANLzBigIq3OB 2rUhxzxhPRoOl6hLnY1glaPLIZ25uc7JNlZc3pMcWP/Hn0R1JXel2BJPs2elNHUtyXCX W4/zJAaikfJDyWZZF/QenZE5rfVx6l9B9NMCxQnCFySZYTb3X2dVf2z4jtZEGP1oz8Bl yYKA== X-Gm-Message-State: AG10YORwkaDBC34p1mwPrURT8HSyzKiQ1wiGXBVT8aRI7LIih4OnJNVYwExDlERg4sSAeA== X-Received: by 10.28.50.193 with SMTP id y184mr8895971wmy.103.1453364584841; Thu, 21 Jan 2016 00:23:04 -0800 (PST) Received: from localhost (li195-236.members.linode.com. [178.79.139.236]) by smtp.gmail.com with ESMTPSA id jo6sm221978wjb.48.2016.01.21.00.23.03 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 21 Jan 2016 00:23:03 -0800 (PST) From: Malcolm Matalka To: Polytropon Cc: Warren Block , freebsd-questions@freebsd.org Subject: Re: Console rotates through all tty's after sitting for a bit References: <86r3hcl05g.fsf@gmail.com> <20160121034342.8d4b0ccb.freebsd@edvax.de> Date: Thu, 21 Jan 2016 08:23:00 +0000 In-Reply-To: <20160121034342.8d4b0ccb.freebsd@edvax.de> (Polytropon's message of "Thu, 21 Jan 2016 03:43:42 +0100") Message-ID: <86k2n3l4t7.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 08:23:07 -0000 Polytropon writes: > On Wed, 20 Jan 2016 10:11:24 -0700 (MST), Warren Block wrote: >> On Wed, 20 Jan 2016, Malcolm Matalka wrote: >> >> > I installed FreeBSD on a machine (Dell OptiPlex 7010). I'm in the >> > regular text console and if I just leave it, it starts rotating through >> > all the tty's rather than going into a screen saver or anything (I have >> > explicitly set the screen saver to a Blank screen). It did this during >> > the install process as well. >> > >> > Has anyone experienced this and know why? It doesn't seem to >> > negatively affect anything so far, it's just annoying. >> >> Something is hitting the PrintScrn key. > > My first thought exactly. :-) > > Check the physical keyboard, and if it is a wireless keyboard, > check possible "offending" other keyboards of that kind, too. Interesting. It's a wired, but USB, keyboard. The keyboard itself is in Swedish but I am using an English (US) keymap. I'm curious though, why would this happen after sitting for awhile instead of all the time? Just random keyboard driver freaking out after idling for a bit? From owner-freebsd-questions@freebsd.org Thu Jan 21 10:41:00 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0799BA8A355 for ; Thu, 21 Jan 2016 10:41:00 +0000 (UTC) (envelope-from perryh@pluto.rain.com) Received: from agora.rdrop.com (agora.rdrop.com [IPv6:2607:f678:1010::34]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id E7A601221 for ; Thu, 21 Jan 2016 10:40:59 +0000 (UTC) (envelope-from perryh@pluto.rain.com) Received: from agora.rdrop.com (66@localhost [127.0.0.1]) by agora.rdrop.com (8.13.1/8.12.7) with ESMTP id u0LAa4Wf029421 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Thu, 21 Jan 2016 02:36:07 -0800 (PST) (envelope-from perryh@pluto.rain.com) Received: (from uucp@localhost) by agora.rdrop.com (8.13.1/8.14.2/Submit) with UUCP id u0LAa4qg029419 for freebsd-questions@freebsd.org; Thu, 21 Jan 2016 02:36:04 -0800 (PST) (envelope-from perryh@pluto.rain.com) Received: from fbsd81 by pluto.rain.com (4.1/SMI-4.1-pluto-M2060407) id AA13923; Thu, 21 Jan 16 02:34:54 PST Date: Thu, 21 Jan 2016 02:34:41 -0800 From: perryh@pluto.rain.com (Perry Hutchison) To: freebsd-questions@freebsd.org Subject: Re: resolver not working in a chroot Message-Id: <56a0b441.FmUDB4FTgS+YnrJy%perryh@pluto.rain.com> References: <569e05b6.2RStkLc7SZIg/dVM%perryh@pluto.rain.com> <569E12B2.5090302@freebsd.org> <569eeb77.GFz8dwXgj3CL44SN%perryh@pluto.rain.com> <569F44DB.4080406@FreeBSD.org> <569f6a72.IDjZt6e6TrIMfmrk%perryh@pluto.rain.com> <569F7C31.7010209@freebsd.org> In-Reply-To: <569F7C31.7010209@freebsd.org> User-Agent: nail 11.25 7/29/05 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 10:41:00 -0000 Matthew Seaman wrote: > On 01/20/16 11:07, Perry Hutchison wrote: > > Matthew Seaman wrote: > >> In order to track down exactly what the problem is I'd be running > >> that ping command under truss(1) ... > > > > Having truss run the chroot showed that the resolver is correctly > > deciding to consult the DNS after failing to find the hostname in > > /etc/hosts -- /etc/nsswitch.conf specified "hosts: files dns" -- > > then falling over when it tries to open a socket for the purpose: > > > > open("/etc/hosts",0x100000,0666) = 4 (0x4) > > fstat(4,{ mode=-rw-r--r-- ,inode=12102,size=1090,blksize=8192 }) = 0 (0x0) > > read(4,"# $FreeBSD: releng/10.2/etc/host"...,8192) = 1090 (0x442) > > read(4,0x28820000,8192) = 0 (0x0) > > close(4) = 0 (0x0) > > gettimeofday({1453281421.449818 },0x0) = 0 (0x0) > > kqueue(0x0,0xbfbecccc,0x8,0x7273752f,0x62696c2f,0x28060aae) = 4 (0x4) > > socket(PF_INET,0x10000002,0) ERR#43 'Protocol not supported' > > ... > > write(2,"ping: ",6) = 6 (0x6) > > write(2,"cannot resolve pkg.FreeBSD.org: "...,56) = 56 (0x38) > > ... > > The most glaring difference is that 0x10000002 second parameter > > that the resolver passes to socket(2): it should be SOCK_DGRAM > > ... > > Looks like ping(8) is OR-ing SOCK_CLOEXEC into the 2nd argument to > socket(2). That's perfectly fine according to the manual. The > 'Protocol not supported' error you're seeing is not because of that. > > Hmmm.... > > You've mounted a 10.2-RELEASE memstick image onto /mnt, but what OS > version is the parent host running? 8.something, and I think that's the cause of the resolver problem. There is no definition of SOCK_CLOEXEC in /usr/include/*.h or /usr/include/sys/*.h (although there is a definition of FD_CLOEXEC in fcntl.h). I gather that the ability to OR such things into the type parameter of socket(2), rather than having to make a separate fcntl(2) call, was added subsequently. > If you're trying to run a more recent version of the OS in the > chroot than in the host system, that could well explain your > experiences. The FreeBSD kernel is not guaranteed to be forward > compatible to software compiled on a more recent version of the > OS, although the reverse -- newer kernel and older software -- > will work. Certainly a newer userland program may require kernel facilities not provided by an older kernel, and fail if they are missing. However I don't expect the kernel ABI to change gratuitously, because that would impair the ability of older userland programs to run on newer kernels. In this case, it looks as if the 10.2 resolver requires an enhancement to the socket(2) ABI that was not in the host kernel. I suppose I could import the 10.2 kernel into the 8.x /boot and try running the existing 8.x userland with the newer kernel long enough to get this particular investigation (which involves considerably more than ping(8)) done. From owner-freebsd-questions@freebsd.org Thu Jan 21 11:53:13 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2C37AA8B479 for ; Thu, 21 Jan 2016 11:53:13 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id AEE121C9E for ; Thu, 21 Jan 2016 11:53:12 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from zero-gravitas.local (vpn-1.adestra.com [46.236.37.122]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0LBqt5E035347 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Thu, 21 Jan 2016 11:53:01 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk u0LBqt5E035347 Authentication-Results: smtp.infracaninophile.co.uk/u0LBqt5E035347; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host vpn-1.adestra.com [46.236.37.122] claimed to be zero-gravitas.local Subject: Re: resolver not working in a chroot To: freebsd-questions@freebsd.org References: <569e05b6.2RStkLc7SZIg/dVM%perryh@pluto.rain.com> <569E12B2.5090302@freebsd.org> <569eeb77.GFz8dwXgj3CL44SN%perryh@pluto.rain.com> <569F44DB.4080406@FreeBSD.org> <569f6a72.IDjZt6e6TrIMfmrk%perryh@pluto.rain.com> <569F7C31.7010209@freebsd.org> <56a0b441.FmUDB4FTgS+YnrJy%perryh@pluto.rain.com> From: Matthew Seaman Message-ID: <56A0C68E.6010400@FreeBSD.org> Date: Thu, 21 Jan 2016 11:52:46 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56a0b441.FmUDB4FTgS+YnrJy%perryh@pluto.rain.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="oH060wvHOafj6PXf0cF5WceV36gkt8U6P" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 11:53:13 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --oH060wvHOafj6PXf0cF5WceV36gkt8U6P Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 2016/01/21 10:34, Perry Hutchison wrote: > I suppose I could import the 10.2 kernel into the 8.x /boot and try > running the existing 8.x userland with the newer kernel long enough > to get this particular investigation (which involves considerably > more than ping(8)) done. Yes -- if your existing machine is on 8.x, then you're not going to have a good time trying to marry a 10.2 world with that. I'd either boot from the 10.2 install media temporarily or set up a 10.2 machine in a VM. Cheers, Matthew --oH060wvHOafj6PXf0cF5WceV36gkt8U6P Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQJ8BAEBCgBmBQJWoMaVXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnvdMP/RtpO77opRgX/pliD/HEH+Mp qLm0o6ZMLguBJhRmkIb3e6j81ttaI+ST0zlKMYFd/OmH04FbKxBug2cwa55FSQi9 +JPlo3j1/gu33v1uz1Hepyq0P/IntuTiGuTXn1NII8njFS79nLTCaEt6kJNOm2TR gF3UleO66PpfSLk++pimBWUFEhNGWdUDh/k4qHNBlQBjFXCpbdlFkvoxGo3EuYPh UKdJMsOLXhb9xxPt/AL6N30N1CkWk21RGAf8IdTlJOnj39yVupTXJqc6swRE6N0e UiIep6gd1utJBqkGqXNe1SbTT9FZ7bMnU5lr2+H+l0oUyeA5o5yZjFYn95xWtir9 Hvmg1w9W2isYu8LwWoyewzamJuCXKRu8/4TCt976mIPESqhwIZ0BcYaX4N9JmCnj 6rAvWKIHt+nl8QMZLdnpHXSGI9oxBn0JLUwn/0JziyPoXcAsOrT8u0YQm9oe4Bkr J0TzP6+tSrpG35ap1W3R7mY/nYSOGYjCJvpSS3tSQ7hP7pc6xDUvGpcEuo9cxGyk zXln/rOmBfJIVCi95CwBps6Ju0qWAP6i4HdgBQyHtMvN3Wxk5e94w4QYsTUgHvut QsAf73Zk73n4kBFQ7U673UbHqHXAJIBSffIxCKzeeUJM1dRoP4cVJUspAj5pLTzo 5L2pnneUGH3MlkaFTEQD =2BN9 -----END PGP SIGNATURE----- --oH060wvHOafj6PXf0cF5WceV36gkt8U6P-- From owner-freebsd-questions@freebsd.org Thu Jan 21 14:22:54 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 15E37A8CB5F for ; Thu, 21 Jan 2016 14:22:54 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from iris.ime.usp.br (iris.ime.usp.br [143.107.45.5]) by mx1.freebsd.org (Postfix) with ESMTP id C39AD122D for ; Thu, 21 Jan 2016 14:22:53 +0000 (UTC) (envelope-from schultz@ime.usp.br) Received: from cage0 (unknown [137.122.64.28]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schultz@iris.ime.usp.br) by iris.ime.usp.br (Postfix) with ESMTPSA id C889629004D5; Thu, 21 Jan 2016 12:22:38 -0200 (BRST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ime.usp.br; s=mail; t=1453386166; bh=ejjgrfTT5me629e2GuM3XOUQSretM+KySYeT312MQdA=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=d+yCCTAywdkvbqwWdcYswEz1iatYP+yBMbEoAe+2VhReo9Dhs4/ooeqR9nBwzktCv xO8w6Dr+AO0ODvOiroluxBOYqInQxF3Ld+WrCdfU1Edep5b/AFwDaD2z3fbvp7uSnL Eu4AWmCQtwUoSH+t+lWhMyFy3rm9/61t4T4DYWyk= Date: Thu, 21 Jan 2016 14:21:28 +0000 From: =?ISO-8859-1?Q?Lu=EDs?= Fernando Schultz Xavier da Silveira To: "Michael B. Eichorn" Cc: "Brandon J.Wandersee" , Polytropon , freebsd-questions@freebsd.org, kpneal@pobox.com Subject: Re: Unexpected dependencies of graphics/libGL Message-Id: <20160121142128.44cf91125b49ee26e09367b3@ime.usp.br> In-Reply-To: <1453319097.1107.44.camel@michaeleichorn.com> References: <20160117031923.ce1f36547351bf07b6fff9a0@ime.usp.br> <20160117070715.1c33732b.freebsd@edvax.de> <20160117162018.964db3b1f2f2133242773e78@ime.usp.br> <20160117220247.69e6774f.freebsd@edvax.de> <20160118161235.GA92637@neutralgood.org> <20160119050806.cd08ca0687e76a4b09a701e3@ime.usp.br> <20160119062345.5402e98b.freebsd@edvax.de> <20160119063438.ca57c8a3bd8ba6781a58b040@ime.usp.br> <86bn8gkw79.fsf@WorkBox.Home> <20160120184255.77e936f2ef370977243ed474@ime.usp.br> <1453319097.1107.44.camel@michaeleichorn.com> X-Mailer: Sylpheed 3.4.3 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on iris.ime.usp.br X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 14:22:54 -0000 Hi, > Building only what you need is hard. It does take time and effort to > provide the configure options in the ports tree. As such it is > reasonable that porters might not choose to include every possible > case. However if you think an important one has been missed it is > reasonable to get in touch with the port owner and see if they will add > a configure option. I understand. I have already contacted the maintainers and now it is up to them to decide how to handle this. Personally, I think this merits the configure options, as a whole toolchain is installed, but I respect them if they do not wish to provide it (the whole direct rendering stack in FreeBSD has zero configure options). If they choose not to, however, I will simply not update these ports, as I do not even use 3D acceleration in this machine. From owner-freebsd-questions@freebsd.org Thu Jan 21 14:42:56 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0A158A8B200 for ; Thu, 21 Jan 2016 14:42:56 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (wonkity.com [67.158.26.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "wonkity.com", Issuer "wonkity.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id D064D1BE6 for ; Thu, 21 Jan 2016 14:42:55 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (localhost [127.0.0.1]) by wonkity.com (8.15.2/8.15.2) with ESMTPS id u0LEgmx8081225 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 21 Jan 2016 07:42:48 -0700 (MST) (envelope-from wblock@wonkity.com) Received: from localhost (wblock@localhost) by wonkity.com (8.15.2/8.15.2/Submit) with ESMTP id u0LEgmZJ081222; Thu, 21 Jan 2016 07:42:48 -0700 (MST) (envelope-from wblock@wonkity.com) Date: Thu, 21 Jan 2016 07:42:48 -0700 (MST) From: Warren Block To: Malcolm Matalka cc: Polytropon , freebsd-questions@freebsd.org Subject: Re: Console rotates through all tty's after sitting for a bit In-Reply-To: <86k2n3l4t7.fsf@gmail.com> Message-ID: References: <86r3hcl05g.fsf@gmail.com> <20160121034342.8d4b0ccb.freebsd@edvax.de> <86k2n3l4t7.fsf@gmail.com> User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (wonkity.com [127.0.0.1]); Thu, 21 Jan 2016 07:42:48 -0700 (MST) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 14:42:56 -0000 On Thu, 21 Jan 2016, Malcolm Matalka wrote: > Polytropon writes: > >> On Wed, 20 Jan 2016 10:11:24 -0700 (MST), Warren Block wrote: >>> On Wed, 20 Jan 2016, Malcolm Matalka wrote: >>> >>>> I installed FreeBSD on a machine (Dell OptiPlex 7010). I'm in the >>>> regular text console and if I just leave it, it starts rotating through >>>> all the tty's rather than going into a screen saver or anything (I have >>>> explicitly set the screen saver to a Blank screen). It did this during >>>> the install process as well. >>>> >>>> Has anyone experienced this and know why? It doesn't seem to >>>> negatively affect anything so far, it's just annoying. >>> >>> Something is hitting the PrintScrn key. >> >> My first thought exactly. :-) >> >> Check the physical keyboard, and if it is a wireless keyboard, >> check possible "offending" other keyboards of that kind, too. > > Interesting. It's a wired, but USB, keyboard. The keyboard itself is > in Swedish but I am using an English (US) keymap. > > I'm curious though, why would this happen after sitting for awhile > instead of all the time? Just random keyboard driver freaking out after > idling for a bit? Could be a driver bug, but that seems unlikely. Could also be hardware causes. kbdmux(4) combines all keyboards, so it could be another keyboard or even a USB device that pretends to be a keyboard. Could be a failing keyboard, a bug in the keyboard firmware, or a cat that likes to play with the PrintScrn button. The sufficiently paranoid might wonder about hardware keyloggers. I'd start by swapping out the keyboard to see whether the problem moves with it. The replacement should be a different brand and model in case it is a firmware bug. From owner-freebsd-questions@freebsd.org Thu Jan 21 15:25:43 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 07CC2A8A2FC for ; Thu, 21 Jan 2016 15:25:43 +0000 (UTC) (envelope-from wam@hiwaay.net) Received: from fly.hiwaay.net (fly.hiwaay.net [216.180.54.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D018A181F for ; Thu, 21 Jan 2016 15:25:42 +0000 (UTC) (envelope-from wam@hiwaay.net) Received: from kabini1.local (dynamic-216-186-244-25.knology.net [216.186.244.25] (may be forged)) (authenticated bits=0) by fly.hiwaay.net (8.13.8/8.13.8/fly) with ESMTP id u0LFPX9j025064 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Thu, 21 Jan 2016 09:25:34 -0600 Subject: Re: Console rotates through all tty's after sitting for a bit References: <86r3hcl05g.fsf@gmail.com> <20160121034342.8d4b0ccb.freebsd@edvax.de> <86k2n3l4t7.fsf@gmail.com> Cc: freebsd-questions@freebsd.org From: "William A. Mahaffey III" Message-ID: <56A0F86D.3060200@hiwaay.net> Date: Thu, 21 Jan 2016 09:31:03 -0553.75 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <86k2n3l4t7.fsf@gmail.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 15:25:43 -0000 On 01/21/16 02:29, Malcolm Matalka wrote: > Polytropon writes: > >> On Wed, 20 Jan 2016 10:11:24 -0700 (MST), Warren Block wrote: >>> On Wed, 20 Jan 2016, Malcolm Matalka wrote: >>> >>>> I installed FreeBSD on a machine (Dell OptiPlex 7010). I'm in the >>>> regular text console and if I just leave it, it starts rotating through >>>> all the tty's rather than going into a screen saver or anything (I have >>>> explicitly set the screen saver to a Blank screen). It did this during >>>> the install process as well. >>>> >>>> Has anyone experienced this and know why? It doesn't seem to >>>> negatively affect anything so far, it's just annoying. >>> Something is hitting the PrintScrn key. >> My first thought exactly. :-) >> >> Check the physical keyboard, and if it is a wireless keyboard, >> check possible "offending" other keyboards of that kind, too. > Interesting. It's a wired, but USB, keyboard. The keyboard itself is > in Swedish but I am using an English (US) keymap. > > I'm curious though, why would this happen after sitting for awhile > instead of all the time? Just random keyboard driver freaking out after > idling for a bit? > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > FWIW, I see sporadic activity such as that w/ my USB kbd & mouse, every few days, I get some messages in my syslog file about keyboard/mouse disconnects: Jan 14 09:20:20 kabini1 kernel: ugen4.2: at usbus4 (disconnected) Jan 14 09:20:20 kabini1 kernel: ukbd0: at uhub4, port 3, addr 2 (disconnected) Jan 14 09:20:20 kabini1 kernel: ums0: at uhub4, port 3, addr 2 (disconnected) Jan 14 09:20:21 kabini1 kernel: ugen4.2: at usbus4 Jan 14 09:20:21 kabini1 kernel: ukbd0: on usbus4 Jan 14 09:20:21 kabini1 kernel: kbd2 at ukbd0 Jan 14 09:20:21 kabini1 kernel: ums0: on usbus4 Jan 14 09:20:21 kabini1 kernel: ums0: 3 buttons and [XYZ] coordinates ID=3 Jan 15 14:34:22 kabini1 dbus[846]: [system] Failed to activate service 'org.freedesktop.Avahi': timed out Jan 18 18:03:07 kabini1 kernel: ugen4.2: at usbus4 (disconnected) Jan 18 18:03:07 kabini1 kernel: ukbd0: at uhub4, port 3, addr 2 (disconnected) Jan 18 18:03:07 kabini1 kernel: ums0: at uhub4, port 3, addr 2 (disconnected) Jan 18 18:03:08 kabini1 kernel: usb_alloc_device: set address 2 failed (USB_ERR_IOERROR, ignored) Jan 18 18:03:10 kabini1 kernel: usbd_setup_device_desc: getting device descriptor at addr 2 failed, USB_ERR_IOERROR Jan 18 18:03:10 kabini1 kernel: ugen4.2: at usbus4 Jan 18 18:03:10 kabini1 kernel: ukbd0: on usbus4 Jan 18 18:03:10 kabini1 kernel: kbd2 at ukbd0 Jan 18 18:03:10 kabini1 kernel: ums0: on usbus4 Jan 18 18:03:10 kabini1 kernel: ums0: 3 buttons and [XYZ] coordinates ID=3 Jan 18 18:03:10 kabini1 kernel: uhub_explore: illegal enable change, port 3 Seems harmless, doesn't affect usability, may be unrelated .... $0.02, no more, no less. BTW: [root@kabini1, /etc, 9:29:28am] 479 % uname -a FreeBSD kabini1.local 9.3-RELEASE-p30 FreeBSD 9.3-RELEASE-p30 #0: Mon Nov 2 10:11:50 UTC 2015 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 [root@kabini1, /etc, 9:31:27am] 480 % -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr. From owner-freebsd-questions@freebsd.org Thu Jan 21 15:35:35 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DFD12A8A90D for ; Thu, 21 Jan 2016 15:35:35 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.70.90]) by mx1.freebsd.org (Postfix) with ESMTP id C15CC10FD for ; Thu, 21 Jan 2016 15:35:35 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id BF0CECB8C9A; Thu, 21 Jan 2016 09:35:28 -0600 (CST) Received: from 128.135.52.6 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Thu, 21 Jan 2016 09:35:28 -0600 (CST) Message-ID: <31907.128.135.52.6.1453390528.squirrel@cosmo.uchicago.edu> In-Reply-To: <86k2n3l4t7.fsf@gmail.com> References: <86r3hcl05g.fsf@gmail.com> <20160121034342.8d4b0ccb.freebsd@edvax.de> <86k2n3l4t7.fsf@gmail.com> Date: Thu, 21 Jan 2016 09:35:28 -0600 (CST) Subject: Re: Console rotates through all tty's after sitting for a bit From: "Valeri Galtsev" To: "Malcolm Matalka" Cc: "Polytropon" , freebsd-questions@freebsd.org Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 15:35:36 -0000 On Thu, January 21, 2016 2:23 am, Malcolm Matalka wrote: > Polytropon writes: > >> On Wed, 20 Jan 2016 10:11:24 -0700 (MST), Warren Block wrote: >>> On Wed, 20 Jan 2016, Malcolm Matalka wrote: >>> >>> > I installed FreeBSD on a machine (Dell OptiPlex 7010). I'm in the >>> > regular text console and if I just leave it, it starts rotating >>> through >>> > all the tty's rather than going into a screen saver or anything (I >>> have >>> > explicitly set the screen saver to a Blank screen). It did this >>> during >>> > the install process as well. >>> > >>> > Has anyone experienced this and know why? It doesn't seem to >>> > negatively affect anything so far, it's just annoying. >>> >>> Something is hitting the PrintScrn key. >> >> My first thought exactly. :-) >> >> Check the physical keyboard, and if it is a wireless keyboard, >> check possible "offending" other keyboards of that kind, too. > > Interesting. It's a wired, but USB, keyboard. The keyboard itself is > in Swedish but I am using an English (US) keymap. > > I'm curious though, why would this happen after sitting for awhile > instead of all the time? Just random keyboard driver freaking out after > idling for a bit? I only can just speculate. Keyboard keys are attached to high impedance inputs (think CMOS), and as they are arranged as electric matrix, they are connected through analog switches. Now imagine some key(s) have tiny leaks between contacts (due to dirt) which may lead to gradual charging of some capacitance thus running one or more of the input over threshold when keyboard keys are not hit randomly... Then you may have what you observe. Of course, this is just a speculation. But as soon as clever person mentioned it can be some key on keyboard pressed, I would try to rule out keyboard by replacing it with another one (even it if is the same model). Sorry about idle speculations. Try to replace keyboard though. Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Thu Jan 21 20:51:48 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CB3B8A8C3B4 for ; Thu, 21 Jan 2016 20:51:48 +0000 (UTC) (envelope-from mason@blisses.org) Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B494D126E for ; Thu, 21 Jan 2016 20:51:48 +0000 (UTC) (envelope-from mason@blisses.org) Received: from blisses.org (cocytus.blisses.org [23.25.209.73]) by phlegethon.blisses.org (Postfix) with ESMTPSA id ABB6B1493BE for ; Thu, 21 Jan 2016 15:51:41 -0500 (EST) Date: Thu, 21 Jan 2016 15:51:39 -0500 From: Mason Loring Bliss To: freebsd-questions@freebsd.org Subject: ZFS performance help sought Message-ID: <20160121205139.GG4538@blisses.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 20:51:48 -0000 Hi all. I've bounced back and forth between FreeBSD and Linux, and one of the reasons why I tend to part with FreeBSD is frustration with ZFS performance. I'm using my desktop for a couple roles at home. One of the roles is that it aggregates back-ups from across my machines and gathers them onto a back-up pool. Running FreeBSD, a zfs send/receive from one pool to another makes my system almost unusably slow and even begins to dig me into swap a little. As a test a little while back, I capped the ARC at half RAM, but that didn't matter a bit. I started looking into scheduler tweaking when I decided to take the path of least resistance and just install Linux instead. ZFS on Linux on literally the same hardware, dealing with the same pools, handles this same disk I/O without a hiccough. I've moved back to FreeBSD on this box now, and I'd like to resolve this issue. I don't know if it's a matter of fixing something broken in FreeBSD's scheduling or tuning ZFS somehow such that it's friendlier. (For what it's worth, renice'd zfs processes don't make a bit of difference, just as capping ARC didn't.) The box has FreeBSD 10.2, eight gigs of RAM, and I'm dealing with pools 1TB or smaller. No deduplication. I'm not enough of a ZFS guru to have a strong notion of what needs to change. I've not seen anything that seems particularly relevant in tuning guides. I have precious little diagnostic data to share. That said, here's a quick idea of what FreeBSD is doing, captured last night, with my box doing precious little else beyond the transfer: last pid: 2631; load averages: 9.44, 8.94, 7.28 up 0+00:29:03 22:04:12 58 processes: 2 running, 56 sleeping CPU: 0.8% user, 0.0% nice, 95.8% system, 0.1% interrupt, 3.3% idle Mem: 136M Active, 14M Inact, 6915M Wired, 8784K Cache, 855M Free ARC: 6234M Total, 248M MFU, 5233M MRU, 626M Anon, 45M Header, 82M Other Swap: 8192M Total, 884K Used, 8191M Free PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND 1334 root 1 52 15 42248K 3164K RUN 0 1:27 7.57% zfs 1333 root 1 38 15 42248K 3232K pipewr 1 1:04 4.98% zfs Not that this matters in grand scheme of things, but I'm hoping to get a handle on what's happening here before frustration drives me back to Linux. I'd be happy to gather diagnostics given some pointers on what would be useful. It seems unlikely that FreeBSD is this desperately inferior to Linux in terms of the competency of its scheduler, but I'm not sure what to tune to bring it up to the generally usable state I see on the same hardware under Linux. Thanks in advance! -- Mason Loring Bliss (( "In the drowsy dark cave of the mind dreams mason@blisses.org )) build their nest with fragments dropped http://blisses.org/ (( from day's caravan." - Rabindranath Tagore From owner-freebsd-questions@freebsd.org Thu Jan 21 21:35:33 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 236CCA8C1A2; Thu, 21 Jan 2016 21:35:33 +0000 (UTC) (envelope-from dweimer@dweimer.net) Received: from webmail.dweimer.net (24-240-198-187.static.stls.mo.charter.com [24.240.198.187]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 035DA116A; Thu, 21 Jan 2016 21:35:31 +0000 (UTC) (envelope-from dweimer@dweimer.net) Received: from webmail.dweimer.local (localhost [192.168.5.2]) by webmail.dweimer.net (8.15.2/8.15.2) with ESMTPS id u0LLZOWj009926 (version=TLSv1.2 cipher=DHE-RSA-CHACHA20-POLY1305 bits=256 verify=NO); Thu, 21 Jan 2016 15:35:24 -0600 (CST) (envelope-from dweimer@dweimer.net) Received: (from www@localhost) by webmail.dweimer.local (8.15.2/8.15.2/Submit) id u0LLZNxc009925; Thu, 21 Jan 2016 15:35:23 -0600 (CST) (envelope-from dweimer@dweimer.net) X-Authentication-Warning: webmail.dweimer.local: www set sender to dweimer@dweimer.net using -f To: Mason Loring Bliss Subject: Re: ZFS performance help sought X-PHP-Script: www.dweimer.net/webmail/index.php for 71.86.41.122, 192.168.5.3 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Thu, 21 Jan 2016 15:35:23 -0600 From: dweimer Cc: freebsd-questions@freebsd.org, owner-freebsd-questions@freebsd.org Organization: dweimer.net Reply-To: dweimer@dweimer.net Mail-Reply-To: dweimer@dweimer.net In-Reply-To: <20160121205139.GG4538@blisses.org> References: <20160121205139.GG4538@blisses.org> Message-ID: X-Sender: dweimer@dweimer.net User-Agent: Roundcube Webmail/1.1.4 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 21:35:33 -0000 On 2016-01-21 2:51 pm, Mason Loring Bliss wrote: > Hi all. > > I've bounced back and forth between FreeBSD and Linux, and one of the > reasons > why I tend to part with FreeBSD is frustration with ZFS performance. > I'm > using my desktop for a couple roles at home. One of the roles is that > it > aggregates back-ups from across my machines and gathers them onto a > back-up > pool. > > Running FreeBSD, a zfs send/receive from one pool to another makes my > system > almost unusably slow and even begins to dig me into swap a little. As a > test > a little while back, I capped the ARC at half RAM, but that didn't > matter a > bit. I started looking into scheduler tweaking when I decided to take > the > path of least resistance and just install Linux instead. ZFS on Linux > on > literally the same hardware, dealing with the same pools, handles this > same > disk I/O without a hiccough. > > I've moved back to FreeBSD on this box now, and I'd like to resolve > this > issue. I don't know if it's a matter of fixing something broken in > FreeBSD's > scheduling or tuning ZFS somehow such that it's friendlier. (For what > it's > worth, renice'd zfs processes don't make a bit of difference, just as > capping > ARC didn't.) > > The box has FreeBSD 10.2, eight gigs of RAM, and I'm dealing with pools > 1TB > or smaller. No deduplication. I'm not enough of a ZFS guru to have a > strong > notion of what needs to change. I've not seen anything that seems > particularly relevant in tuning guides. I have precious little > diagnostic > data to share. That said, here's a quick idea of what FreeBSD is doing, > captured last night, with my box doing precious little else beyond the > transfer: > > last pid: 2631; load averages: 9.44, 8.94, 7.28 up 0+00:29:03 > 22:04:12 > 58 processes: 2 running, 56 sleeping > CPU: 0.8% user, 0.0% nice, 95.8% system, 0.1% interrupt, 3.3% idle > Mem: 136M Active, 14M Inact, 6915M Wired, 8784K Cache, 855M Free > ARC: 6234M Total, 248M MFU, 5233M MRU, 626M Anon, 45M Header, 82M Other > Swap: 8192M Total, 884K Used, 8191M Free > > PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU > COMMAND > 1334 root 1 52 15 42248K 3164K RUN 0 1:27 7.57% > zfs > 1333 root 1 38 15 42248K 3232K pipewr 1 1:04 4.98% > zfs > > Not that this matters in grand scheme of things, but I'm hoping to get > a > handle on what's happening here before frustration drives me back to > Linux. > I'd be happy to gather diagnostics given some pointers on what would be > useful. It seems unlikely that FreeBSD is this desperately inferior to > Linux > in terms of the competency of its scheduler, but I'm not sure what to > tune to > bring it up to the generally usable state I see on the same hardware > under > Linux. > > Thanks in advance! Try Starting here: https://wiki.freebsd.org/ZFSTuningGuide#General_Tuning I have these settings set on my system running on an AMD FX(tm)-6300 Six-Core Processor, with 16G of RAM, running 7 jails, and A Debian Linux Virtual Box VM, that runs Ubiquiti Unifi-Video software doing recording on 5 IP cameras. Running 4 1T SATA II drives in a raidz and a 2T SATA III drive with a zpool ontop of GELI for Bacula backups. ZFS Boot, with GPT partitions allocating a portion of each of the 1T drives as swap outside of the zpool. System works like a champ, its all standard desktop hardware, using on board SATA III ports All the drives are WD Green drives, so they are towards the low performance side. # ZFS Options zfs_load="YES" vfs.zfs.arc_max="4096M" vfs.zfs.arc_min="2048M" vfs.zfs.prefetch_disable="1" vfs.zfs.txg.timeout="5" vfs.zfs.write_limit_override=2147483648 -- Thanks, Dean E. Weimer http://www.dweimer.net/ From owner-freebsd-questions@freebsd.org Thu Jan 21 23:28:19 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 20383A8B9AC for ; Thu, 21 Jan 2016 23:28:19 +0000 (UTC) (envelope-from mason@blisses.org) Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0AC8C1E7F for ; Thu, 21 Jan 2016 23:28:18 +0000 (UTC) (envelope-from mason@blisses.org) Received: from blisses.org (cocytus.blisses.org [23.25.209.73]) by phlegethon.blisses.org (Postfix) with ESMTPSA id 2DC9B1493BE; Thu, 21 Jan 2016 18:28:12 -0500 (EST) Date: Thu, 21 Jan 2016 18:28:10 -0500 From: Mason Loring Bliss To: dweimer Cc: freebsd-questions@freebsd.org Subject: Re: ZFS performance help sought Message-ID: <20160121232810.GJ4538@blisses.org> References: <20160121205139.GG4538@blisses.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 23:28:19 -0000 On Thu, Jan 21, 2016 at 03:35:23PM -0600, dweimer wrote: > Try Starting here: > https://wiki.freebsd.org/ZFSTuningGuide#General_Tuning I'd looked at that previously, but as noted, I'd already tried capping the ARC, and txg.timeout is already five by default in FreeBSD. My reading about prefetch_disable suggests that it's meant for big transactions like what I'm doing, but I could be confused. All that said, I wasn't setting write_limit_override, so I'm trying that, and I'm cutting the txg.timeout back a couple seconds more. Am I confused about prefetch, though? They're talking about it as being problematic for small, random I/O operations, where I'm doing big, chunky I/O operations. Anyway, thanks for the ideas. I'll write back with results presently. -- Mason Loring Bliss (( If I have not seen as far as others, it is because mason@blisses.org )) giants were standing on my shoulders. - Hal Abelson From owner-freebsd-questions@freebsd.org Thu Jan 21 23:55:52 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 63FEEA8A7E5 for ; Thu, 21 Jan 2016 23:55:52 +0000 (UTC) (envelope-from mason@blisses.org) Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4E1C01F47 for ; Thu, 21 Jan 2016 23:55:51 +0000 (UTC) (envelope-from mason@blisses.org) Received: from blisses.org (cocytus.blisses.org [23.25.209.73]) by phlegethon.blisses.org (Postfix) with ESMTPSA id 909741493BE; Thu, 21 Jan 2016 18:55:47 -0500 (EST) Date: Thu, 21 Jan 2016 18:55:45 -0500 From: Mason Loring Bliss To: dweimer Cc: freebsd-questions@freebsd.org Subject: Re: ZFS performance help sought Message-ID: <20160121235545.GK4538@blisses.org> References: <20160121205139.GG4538@blisses.org> <20160121232810.GJ4538@blisses.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20160121232810.GJ4538@blisses.org> User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Jan 2016 23:55:52 -0000 On Thu, Jan 21, 2016 at 06:28:10PM -0500, Mason Loring Bliss wrote: > All that said, I wasn't setting write_limit_override, so I'm trying that, and > I'm cutting the txg.timeout back a couple seconds more. Well, that didn't help. System's still really choppy. last pid: 1707; load averages: 9.20, 4.75, 2.14 up 0+00:09:35 18:53:03 55 processes: 1 running, 54 sleeping CPU: 2.1% user, 0.0% nice, 62.6% system, 0.5% interrupt, 34.8% idle Mem: 323M Active, 331M Inact, 4589M Wired, 8928K Cache, 2677M Free ARC: 4096M Total, 916M MFU, 2303M MRU, 845M Anon, 17M Header, 15M Other Swap: 8192M Total, 8192M Free PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND 1501 root 1 33 0 42248K 3616K dmu_tx 1 0:10 5.76% zfs 1500 root 1 24 0 42248K 3768K pipewr 0 0:08 5.18% zfs Here's what I set: vfs.zfs.arc_max="4096M" vfs.zfs.arc_min="1024M" vfs.zfs.txg.timeout="3" vfs.zfs.write_limit_override="512M" I'm not seeing any obvious way to verify the write_limit_override setting - it appears not to show up in sysctl output. I'll wait for the current big transfer to finish and then I'll try it with prefetch disabled too. -- Mason Loring Bliss mason@blisses.org Ewige Blumenkraft! awake ? sleep : random() & 2 ? dream : sleep; -- Hamlet, Act III, Scene I From owner-freebsd-questions@freebsd.org Fri Jan 22 00:05:27 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 34964A8AE72 for ; Fri, 22 Jan 2016 00:05:27 +0000 (UTC) (envelope-from mason@blisses.org) Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1EB6413CA for ; Fri, 22 Jan 2016 00:05:26 +0000 (UTC) (envelope-from mason@blisses.org) Received: from blisses.org (cocytus.blisses.org [23.25.209.73]) by phlegethon.blisses.org (Postfix) with ESMTPSA id 14C491493BE; Thu, 21 Jan 2016 19:05:25 -0500 (EST) Date: Thu, 21 Jan 2016 19:05:23 -0500 From: Mason Loring Bliss To: dweimer Cc: freebsd-questions@freebsd.org Subject: Re: ZFS performance help sought Message-ID: <20160122000523.GL4538@blisses.org> References: <20160121205139.GG4538@blisses.org> <20160121232810.GJ4538@blisses.org> <20160121235545.GK4538@blisses.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20160121235545.GK4538@blisses.org> User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 00:05:27 -0000 On Thu, Jan 21, 2016 at 06:55:45PM -0500, Mason Loring Bliss wrote: > Here's what I set: > > vfs.zfs.arc_max="4096M" > vfs.zfs.arc_min="1024M" > vfs.zfs.txg.timeout="3" > vfs.zfs.write_limit_override="512M" > > I'm not seeing any obvious way to verify the write_limit_override setting - > it appears not to show up in sysctl output. > > I'll wait for the current big transfer to finish and then I'll try it with > prefetch disabled too. Disabling prefetch doesn't do a thing here - the system is still painfully overloaded, doing something that was simply unproblematic under Linux. I'd be grateful for further debugging or tuning tips. Is it possible this has nothing to do with ZFS and that I need to play with FreeBSD's scheduling somehow? Again, FreeBSD 10.2, ZFS tuned at noted above, and with prefetch disabled. Eight gigs of RAM, pools less than 1TB. Doing a send/receive between pools on different disks is bringing the system to its knees, where the literal same hardware under Linux/ZoL doesn't break a sweat. What else can I try? -- Mason Loring Bliss (( "In the drowsy dark cave of the mind dreams mason@blisses.org )) build their nest with fragments dropped http://blisses.org/ (( from day's caravan." - Rabindranath Tagore From owner-freebsd-questions@freebsd.org Fri Jan 22 00:06:58 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6E535A8AFC0 for ; Fri, 22 Jan 2016 00:06:58 +0000 (UTC) (envelope-from zhao6014@gmail.com) Received: from mail-yk0-x229.google.com (mail-yk0-x229.google.com [IPv6:2607:f8b0:4002:c07::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2ED7C1512 for ; Fri, 22 Jan 2016 00:06:58 +0000 (UTC) (envelope-from zhao6014@gmail.com) Received: by mail-yk0-x229.google.com with SMTP id k129so68986648yke.0 for ; Thu, 21 Jan 2016 16:06:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=5Ky4lhm+k8wMKcOEFwndXRDclSicFayMqkF6GbiaAvI=; b=POaX6sm3FNOQAFtX69ksMTOQflTPrePQUCVxHTCA9n3oNIpM1aax2xU6Yt5YSHzd6d zr67iXRMYMDRqjs1OKQruAb4IDrATr65HcDrTv0gYkTfmHNKoWnV5ZHINZUpRrW0RBtN cEybiC5MH0hsGSg27yWu50mgLVo+SMRJ9UERlYl2jkitZyXPmDnTqrgFrnPJpKLr32Cc bCy7LvCXR9a5II55kL06jpJmvPYjnhwaRtTPddl+J/iNJ0x3gZzb6WCxiZoPR9+SF7GS jQgViCxRRO/trvUYiWZz52IjHkvXF/PWVAcwIOZjSil5/ECKAGa4CgFwH15tk+gfjSYD EHXw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=5Ky4lhm+k8wMKcOEFwndXRDclSicFayMqkF6GbiaAvI=; b=A2OvtuFzc6gdYSNhC0LZtbXVPpZn/ja6N2485zVgpoSq4R2gPrWXvCmbWcWzRCtR/b eONLTu49WscuelQGjWzEvI1sjj3cA35Uwk2/lPKDW0xCOsX6p8BaMND2B7u7Pz/Q0a0J ITUuid8K5P/LADhR+haeABc/SMGcVPmipnDcilJcPBG8YJyKEqY/HqpNk0zu2k0Qj32f /epvPFyWBcT0RjPrpkH+4if3D4qku9OS0HZVIMyXEomr/Mtf1k65PM4uvs8bZ2cK1fsb EdvL+Y4DqqIoiTLcuC34iBJs3caXfy+xZiNnrYu0yScewwClPaPhT1XUm8E6Gntvx39U /BWw== X-Gm-Message-State: AG10YOR05PXAAxYHFGDppjCbCj3VgmN9K3GWl799sOOdG990Ek5fH6UYswYOGwETaufevUsHMGWdTR0vIVRTMQ== MIME-Version: 1.0 X-Received: by 10.13.243.65 with SMTP id c62mr68051ywf.96.1453421217288; Thu, 21 Jan 2016 16:06:57 -0800 (PST) Received: by 10.37.45.86 with HTTP; Thu, 21 Jan 2016 16:06:57 -0800 (PST) Received: by 10.37.45.86 with HTTP; Thu, 21 Jan 2016 16:06:57 -0800 (PST) In-Reply-To: <20160121235545.GK4538@blisses.org> References: <20160121205139.GG4538@blisses.org> <20160121232810.GJ4538@blisses.org> <20160121235545.GK4538@blisses.org> Date: Fri, 22 Jan 2016 08:06:57 +0800 Message-ID: Subject: Re: ZFS performance help sought From: Jov To: Mason Loring Bliss Cc: dweimer , freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 00:06:58 -0000 sys% 62.6 is wired=EF=BC=8Cwhat ie your disk type=EF=BC=9Fplease post the o= utput of iostat -x 1 2016=E5=B9=B41=E6=9C=8822=E6=97=A5 7:56 AM=EF=BC=8C"Mason Loring Bliss" =E5=86=99=E9=81=93=EF=BC=9A > On Thu, Jan 21, 2016 at 06:28:10PM -0500, Mason Loring Bliss wrote: > > > All that said, I wasn't setting write_limit_override, so I'm trying > that, and > > I'm cutting the txg.timeout back a couple seconds more. > > Well, that didn't help. System's still really choppy. > > last pid: 1707; load averages: 9.20, 4.75, 2.14 up 0+00:09:35 > 18:53:03 > 55 processes: 1 running, 54 sleeping > CPU: 2.1% user, 0.0% nice, 62.6% system, 0.5% interrupt, 34.8% idle > Mem: 323M Active, 331M Inact, 4589M Wired, 8928K Cache, 2677M Free > ARC: 4096M Total, 916M MFU, 2303M MRU, 845M Anon, 17M Header, 15M Other > Swap: 8192M Total, 8192M Free > > PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU > COMMAND > 1501 root 1 33 0 42248K 3616K dmu_tx 1 0:10 5.76% zfs > 1500 root 1 24 0 42248K 3768K pipewr 0 0:08 5.18% zfs > > Here's what I set: > > vfs.zfs.arc_max=3D"4096M" > vfs.zfs.arc_min=3D"1024M" > vfs.zfs.txg.timeout=3D"3" > vfs.zfs.write_limit_override=3D"512M" > > I'm not seeing any obvious way to verify the write_limit_override setting= - > it appears not to show up in sysctl output. > > I'll wait for the current big transfer to finish and then I'll try it wit= h > prefetch disabled too. > > -- > Mason Loring Bliss mason@blisses.org Ewige Blumenkraft! > awake ? sleep : random() & 2 ? dream : sleep; -- Hamlet, Act III, Scene I > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Fri Jan 22 00:12:06 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 71CEDA8C298 for ; Fri, 22 Jan 2016 00:12:06 +0000 (UTC) (envelope-from mason@blisses.org) Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 040261AC4 for ; Fri, 22 Jan 2016 00:12:05 +0000 (UTC) (envelope-from mason@blisses.org) Received: from blisses.org (cocytus.blisses.org [23.25.209.73]) by phlegethon.blisses.org (Postfix) with ESMTPSA id 103791493BE; Thu, 21 Jan 2016 19:12:04 -0500 (EST) Date: Thu, 21 Jan 2016 19:12:02 -0500 From: Mason Loring Bliss To: Jov Cc: freebsd-questions@freebsd.org Subject: Re: ZFS performance help sought Message-ID: <20160122001202.GM4538@blisses.org> References: <20160121205139.GG4538@blisses.org> <20160121232810.GJ4538@blisses.org> <20160121235545.GK4538@blisses.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 00:12:06 -0000 On Fri, Jan 22, 2016 at 08:06:57AM +0800, Jov wrote: > sys% 62.6 is wired，what ie your disk type？please post the output of iostat > -x 1 This is with the current test transfer going, with the settings noted previously: extended device statistics device r/s w/s kr/s kw/s qlen svc_t %b ada0 182.6 0.0 23369.6 0.0 1 3.2 30 ada1 212.5 0.0 27200.6 0.0 0 3.1 33 ada2 0.0 486.9 0.0 61652.4 0 4.5 64 ada3 0.0 798.1 0.0 101236.2 1 4.7 75 ada4 0.0 0.0 0.0 0.0 0 0.0 0 da0 0.0 0.0 0.0 0.0 0 0.0 0 cd0 0.0 0.0 0.0 0.0 0 0.0 0 the sending pool is a mirror on ada0,1, and the receiving pool in this case is a mirror on ada2,3. The disks in question: ada0: ATA8-ACS SATA 3.x device ada0: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) ada1: ATA8-ACS SATA 3.x device ada1: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) ada2: ATA-7 SATA 2.x device ada2: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) ada3: ACS-2 ATA SATA 3.x device ada3: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) -- Mason Loring Bliss (( "In the drowsy dark cave of the mind dreams mason@blisses.org )) build their nest with fragments dropped http://blisses.org/ (( from day's caravan." - Rabindranath Tagore From owner-freebsd-questions@freebsd.org Fri Jan 22 03:37:25 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 15D00A8C43B for ; Fri, 22 Jan 2016 03:37:25 +0000 (UTC) (envelope-from wam@hiwaay.net) Received: from fly.hiwaay.net (fly.hiwaay.net [216.180.54.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id DD87F1285 for ; Fri, 22 Jan 2016 03:37:24 +0000 (UTC) (envelope-from wam@hiwaay.net) Received: from kabini1.local (dynamic-216-186-244-25.knology.net [216.186.244.25] (may be forged)) (authenticated bits=0) by fly.hiwaay.net (8.13.8/8.13.8/fly) with ESMTP id u0M3bLlW008708 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Thu, 21 Jan 2016 21:37:21 -0600 Subject: Re: ZFS performance help sought To: freebsd-questions@freebsd.org References: <20160121205139.GG4538@blisses.org> From: "William A. Mahaffey III" Message-ID: <56A1A3EE.3030507@hiwaay.net> Date: Thu, 21 Jan 2016 21:42:48 -0553.75 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <20160121205139.GG4538@blisses.org> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 03:37:25 -0000 On 01/21/16 14:57, Mason Loring Bliss wrote: > Hi all. > > I've bounced back and forth between FreeBSD and Linux, and one of the reasons > why I tend to part with FreeBSD is frustration with ZFS performance. I'm > using my desktop for a couple roles at home. One of the roles is that it > aggregates back-ups from across my machines and gathers them onto a back-up > pool. > > Running FreeBSD, a zfs send/receive from one pool to another makes my system > almost unusably slow and even begins to dig me into swap a little. As a test > a little while back, I capped the ARC at half RAM, but that didn't matter a > bit. I started looking into scheduler tweaking when I decided to take the > path of least resistance and just install Linux instead. ZFS on Linux on > literally the same hardware, dealing with the same pools, handles this same > disk I/O without a hiccough. > > I've moved back to FreeBSD on this box now, and I'd like to resolve this > issue. I don't know if it's a matter of fixing something broken in FreeBSD's > scheduling or tuning ZFS somehow such that it's friendlier. (For what it's > worth, renice'd zfs processes don't make a bit of difference, just as capping > ARC didn't.) > > The box has FreeBSD 10.2, eight gigs of RAM, and I'm dealing with pools 1TB > or smaller. No deduplication. I'm not enough of a ZFS guru to have a strong > notion of what needs to change. I've not seen anything that seems > particularly relevant in tuning guides. I have precious little diagnostic > data to share. That said, here's a quick idea of what FreeBSD is doing, > captured last night, with my box doing precious little else beyond the > transfer: > > last pid: 2631; load averages: 9.44, 8.94, 7.28 up 0+00:29:03 22:04:12 > 58 processes: 2 running, 56 sleeping > CPU: 0.8% user, 0.0% nice, 95.8% system, 0.1% interrupt, 3.3% idle > Mem: 136M Active, 14M Inact, 6915M Wired, 8784K Cache, 855M Free > ARC: 6234M Total, 248M MFU, 5233M MRU, 626M Anon, 45M Header, 82M Other > Swap: 8192M Total, 884K Used, 8191M Free > > PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND > 1334 root 1 52 15 42248K 3164K RUN 0 1:27 7.57% zfs > 1333 root 1 38 15 42248K 3232K pipewr 1 1:04 4.98% zfs > > Not that this matters in grand scheme of things, but I'm hoping to get a > handle on what's happening here before frustration drives me back to Linux. > I'd be happy to gather diagnostics given some pointers on what would be > useful. It seems unlikely that FreeBSD is this desperately inferior to Linux > in terms of the competency of its scheduler, but I'm not sure what to tune to > bring it up to the generally usable state I see on the same hardware under > Linux. > > Thanks in advance! What version of Linux, if you don't mind ? TIA & have a good one. -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr. From owner-freebsd-questions@freebsd.org Fri Jan 22 03:40:32 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 15219A8C5BB for ; Fri, 22 Jan 2016 03:40:32 +0000 (UTC) (envelope-from wam@hiwaay.net) Received: from fly.hiwaay.net (fly.hiwaay.net [216.180.54.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id BE54313DB for ; Fri, 22 Jan 2016 03:40:31 +0000 (UTC) (envelope-from wam@hiwaay.net) Received: from kabini1.local (dynamic-216-186-244-25.knology.net [216.186.244.25] (may be forged)) (authenticated bits=0) by fly.hiwaay.net (8.13.8/8.13.8/fly) with ESMTP id u0M3eTwD009977 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Thu, 21 Jan 2016 21:40:30 -0600 Subject: Re: ZFS performance help sought References: <20160121205139.GG4538@blisses.org> <20160121232810.GJ4538@blisses.org> <20160121235545.GK4538@blisses.org> <20160122001202.GM4538@blisses.org> Cc: freebsd-questions@freebsd.org From: "William A. Mahaffey III" Message-ID: <56A1A4AD.2030600@hiwaay.net> Date: Thu, 21 Jan 2016 21:45:59 -0553.75 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <20160122001202.GM4538@blisses.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 03:40:32 -0000 On 01/21/16 18:18, Mason Loring Bliss wrote: > The disks in question: > > ada0: ATA8-ACS SATA 3.x device > ada0: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) > ada1: ATA8-ACS SATA 3.x device > ada1: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) > ada2: ATA-7 SATA 2.x device > ada2: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) > ada3: ACS-2 ATA SATA 3.x device > ada3: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) Hmmmm .... 3 different brands, 4 different models, & 1 looks like a SATA2, while the rest are SATA3 .... I have always heard that is a recipe for problems/slow IO/bad performance/etc. -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr. From owner-freebsd-questions@freebsd.org Fri Jan 22 04:48:29 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CE056A8DB49 for ; Fri, 22 Jan 2016 04:48:29 +0000 (UTC) (envelope-from ike@michaeleichorn.com) Received: from mx1.eichornenterprises.com (mx1.eichornenterprises.com [104.236.13.122]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx1.eichornenterprises.com", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 9469B1E57 for ; Fri, 22 Jan 2016 04:48:29 +0000 (UTC) (envelope-from ike@michaeleichorn.com) Received: from smtp.eichornenterprises.com (cpe-184-59-147-149.neo.res.rr.com [184.59.147.149]) by mx1.eichornenterprises.com (OpenSMTPD) with ESMTP id 6afae506; Thu, 21 Jan 2016 23:48:18 -0500 (EST) Received: by smtp.eichornenterprises.com (OpenSMTPD) with ESMTPSA id 55259266 TLS version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO; Thu, 21 Jan 2016 23:48:17 -0500 (EST) Message-ID: <1453438096.26786.7.camel@michaeleichorn.com> Subject: Re: ZFS performance help sought From: "Michael B. Eichorn" To: Mason Loring Bliss , dweimer Cc: freebsd-questions@freebsd.org Date: Thu, 21 Jan 2016 23:48:16 -0500 In-Reply-To: <20160122000523.GL4538@blisses.org> References: <20160121205139.GG4538@blisses.org> <20160121232810.GJ4538@blisses.org> <20160121235545.GK4538@blisses.org> <20160122000523.GL4538@blisses.org> Content-Type: multipart/signed; micalg="sha-256"; protocol="application/x-pkcs7-signature"; boundary="=-8ZaddvRESAuGc56ffIoi" X-Mailer: Evolution 3.18.4 Mime-Version: 1.0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 04:48:30 -0000 --=-8ZaddvRESAuGc56ffIoi Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, 2016-01-21 at 19:05 -0500, Mason Loring Bliss wrote: > On Thu, Jan 21, 2016 at 06:55:45PM -0500, Mason Loring Bliss wrote: >=20 > > Here's what I set: > >=20 > > vfs.zfs.arc_max=3D"4096M" > > vfs.zfs.arc_min=3D"1024M" > > vfs.zfs.txg.timeout=3D"3" > > vfs.zfs.write_limit_override=3D"512M" > >=20 > > I'm not seeing any obvious way to verify the write_limit_override > > setting - > > it appears not to show up in sysctl output. > >=20 > > I'll wait for the current big transfer to finish and then I'll try > > it with > > prefetch disabled too. >=20 > Disabling prefetch doesn't do a thing here - the system is still > painfully > overloaded, doing something that was simply unproblematic under > Linux. >=20 > I'd be grateful for further debugging or tuning tips. Is it possible > this has > nothing to do with ZFS and that I need to play with FreeBSD's > scheduling > somehow? >=20 > Again, FreeBSD 10.2, ZFS tuned at noted above, and with prefetch > disabled. > Eight gigs of RAM, pools less than 1TB. Doing a send/receive between > pools on > different disks is bringing the system to its knees, where the > literal same > hardware under Linux/ZoL doesn't break a sweat. >=20 > What else can I try? >=20 From: freebsd.org/doc/en_US.ISO8859-1/books/handbook/zfs-advanced.html I suppose vfs.zfs.top_maxinflight might worth a try? --=-8ZaddvRESAuGc56ffIoi Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCEqAw ggYwMIIFGKADAgECAgMOXcYwDQYJKoZIhvcNAQELBQAwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQK Ew1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVu dCBDQTAeFw0xNTA2MTMyMDI0NDZaFw0xNjA2MTQwMDM1NTBaMEgxHzAdBgNVBAMMFmlrZUBtaWNo YWVsZWljaG9ybi5jb20xJTAjBgkqhkiG9w0BCQEWFmlrZUBtaWNoYWVsZWljaG9ybi5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVdWALPz5h2s5zUQGIJYl6Vp8FPtZNko8q/3s crCsxXJLprMaDdpnqTsmkbmEfKvsqPQE6HVOpGxVRTl/tCm+VvouW9eY9ITMigb1OnHdU13CKO0j drgeU1nHst0qxwsIofRD7nC4dakT6exnrVndlBmLrf/bLPh2qOM8YK5qKK6m33fE7AyYrwiYAWFT 3fERI7LakjaabrIoS/Y1rCdL5FaCTMOlRbZyduc8HkrgjT2JW+i4fVcKyGL5gExBJWfS3q1uGFaB ie6pYtl8lZPtvN0JSfibP003RBoLgzqHJKW91RL0qNeDjKZi/5nrlU398l9UoVvLLO3KxoPBXKCx AgMBAAGjggLcMIIC2DAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcD AgYIKwYBBQUHAwQwHQYDVR0OBBYEFJZqarc6CcrOs6eAwOgrMznk5ZWWMB8GA1UdIwQYMBaAFFNy 7ZKc4NrLAVx8fpY1TvLUuFGCMCEGA1UdEQQaMBiBFmlrZUBtaWNoYWVsZWljaG9ybi5jb20wggFM BgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAuBggrBgEFBQcCARYiaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYBBQUHAgIwgeowJxYgU3RhcnRDb20gQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRoaXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBh Y2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFsaWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0 YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFuY2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2Ug aW4gY29tcGxpYW5jZSBvZiB0aGUgcmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8w LTAroCmgJ4YlaHR0cDovL2NybC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUH AQEEgYEwfzA5BggrBgEFBQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEv Y2xpZW50L2NhMEIGCCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIu Y2xhc3MxLmNsaWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20v MA0GCSqGSIb3DQEBCwUAA4IBAQB4K8iQw+0FRn3xEnB3vIIu2Vi4C3ZGnOMWP90FFXLrZ6uAu9AK xVCjXUVP6nAEsOopTMu769vVecdBvg0KO2i5aTDTdTLX4g9d020g4OLWW1NiynAkX8oKqJLqZ53q vHK4zP4KWPS3bSqDWVCosTMfI+H6tkg+6G3gS0HHoHTLKZhIT3z6PQZAfeofM7ed6NOdAcj0J2lP ODHzzz7Y9x4wMwYJdidorzUDVYkNIkim8ak7hK9F60NadA5w/BirFATSlzRyV0h1tl6oNisEaQcq tGvy6UoCTDhzaJ7pQValfDXJ/A47P0hNj/CX/PmkY1wQHsEJz2pbh5lqteP/fO0rMIIGMDCCBRig AwIBAgIDDl3GMA0GCSqGSIb3DQEBCwUAMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRD b20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EwHhcN MTUwNjEzMjAyNDQ2WhcNMTYwNjE0MDAzNTUwWjBIMR8wHQYDVQQDDBZpa2VAbWljaGFlbGVpY2hv cm4uY29tMSUwIwYJKoZIhvcNAQkBFhZpa2VAbWljaGFlbGVpY2hvcm4uY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVXVgCz8+YdrOc1EBiCWJelafBT7WTZKPKv97HKwrMVyS6az Gg3aZ6k7JpG5hHyr7Kj0BOh1TqRsVUU5f7Qpvlb6LlvXmPSEzIoG9Tpx3VNdwijtI3a4HlNZx7Ld KscLCKH0Q+5wuHWpE+nsZ61Z3ZQZi63/2yz4dqjjPGCuaiiupt93xOwMmK8ImAFhU93xESOy2pI2 mm6yKEv2NawnS+RWgkzDpUW2cnbnPB5K4I09iVvouH1XCshi+YBMQSVn0t6tbhhWgYnuqWLZfJWT 7bzdCUn4mz9NN0QaC4M6hySlvdUS9KjXg4ymYv+Z65VN/fJfVKFbyyztysaDwVygsQIDAQABo4IC 3DCCAtgwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF BwMEMB0GA1UdDgQWBBSWamq3OgnKzrOngMDoKzM55OWVljAfBgNVHSMEGDAWgBRTcu2SnODaywFc fH6WNU7y1LhRgjAhBgNVHREEGjAYgRZpa2VAbWljaGFlbGVpY2hvcm4uY29tMIIBTAYDVR0gBIIB QzCCAT8wggE7BgsrBgEEAYG1NwECAzCCASowLgYIKwYBBQUHAgEWImh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3BvbGljeS5wZGYwgfcGCCsGAQUFBwICMIHqMCcWIFN0YXJ0Q29tIENlcnRpZmljYXRp b24gQXV0aG9yaXR5MAMCAQEagb5UaGlzIGNlcnRpZmljYXRlIHdhcyBpc3N1ZWQgYWNjb3JkaW5n IHRvIHRoZSBDbGFzcyAxIFZhbGlkYXRpb24gcmVxdWlyZW1lbnRzIG9mIHRoZSBTdGFydENvbSBD QSBwb2xpY3ksIHJlbGlhbmNlIG9ubHkgZm9yIHRoZSBpbnRlbmRlZCBwdXJwb3NlIGluIGNvbXBs aWFuY2Ugb2YgdGhlIHJlbHlpbmcgcGFydHkgb2JsaWdhdGlvbnMuMDYGA1UdHwQvMC0wK6ApoCeG JWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL2NydHUxLWNybC5jcmwwgY4GCCsGAQUFBwEBBIGBMH8w OQYIKwYBBQUHMAGGLWh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9zdWIvY2xhc3MxL2NsaWVudC9j YTBCBggrBgEFBQcwAoY2aHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc3ViLmNsYXNzMS5j bGllbnQuY2EuY3J0MCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzANBgkqhkiG 9w0BAQsFAAOCAQEAeCvIkMPtBUZ98RJwd7yCLtlYuAt2RpzjFj/dBRVy62ergLvQCsVQo11FT+pw BLDqKUzLu+vb1XnHQb4NCjtouWkw03Uy1+IPXdNtIODi1ltTYspwJF/KCqiS6med6rxyuMz+Clj0 t20qg1lQqLEzHyPh+rZIPuht4EtBx6B0yymYSE98+j0GQH3qHzO3nejTnQHI9CdpTzgx888+2Pce MDMGCXYnaK81A1WJDSJIpvGpO4SvRetDWnQOcPwYqxQE0pc0cldIdbZeqDYrBGkHKrRr8ulKAkw4 c2ie6UFWpXw1yfwOOz9ITY/wl/z5pGNcEB7BCc9qW4eZarXj/3ztKzCCBjQwggQcoAMCAQICAR4w DQYJKoZIhvcNAQEFBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0 Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3MTAyNDIxMDE1NVoXDTE3MTAyNDIxMDE1 NVowgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1 cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAx IFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMcJg8zOLdgasSmkLhOrlr6KMoOMpohBllVHrdRvEg/q6r8jR+EK75xCGhR8ToREoqe7 zM9/UnC6TS2y9UKTpT1v7RSMzR0t6ndl0TWBuUr/UXBhPk+Kmy7bI4yW4urC+y7P3/1/X7U8ocb8 VpH/Clt+4iq7nirMcNh6qJR+xjOhV+VHzQMALuGYn5KZmc1NbJQYclsGkDxDz2UbFqE2+6vIZoL+ jb9x4Pa5gNf1TwSDkOkikZB1xtB4ZqtXThaABSONdfmv/Z1pua3FYxnCFmdr/+N2JLKutIxMYqQO Jebr/f/h5t95m4JgrM3Y/w7YX9d7YAL9jvN4SydHsU6n65cCAwEAAaOCAa0wggGpMA8GA1UdEwEB /wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRTcu2SnODaywFcfH6WNU7y1LhRgjAf BgNVHSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jBmBggrBgEFBQcBAQRaMFgwJwYIKwYBBQUH MAGGG2h0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9jYTAtBggrBgEFBQcwAoYhaHR0cDovL3d3dy5z dGFydHNzbC5jb20vc2ZzY2EuY3J0MFsGA1UdHwRUMFIwJ6AloCOGIWh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3Nmc2NhLmNybDAnoCWgI4YhaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2ZzY2EuY3Js MIGABgNVHSAEeTB3MHUGCysGAQQBgbU3AQIBMGYwLgYIKwYBBQUHAgEWImh0dHA6Ly93d3cuc3Rh cnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuc3RhcnRzc2wuY29t L2ludGVybWVkaWF0ZS5wZGYwDQYJKoZIhvcNAQEFBQADggIBAAqDCH14qywGXLhjjF6uHLkjd02h cdh9hrw+VUsv+q1eeQWB21jWj3kJ96AUlPCoEGZ/ynJNScWy6QMVQjbbMXltUfO4n4bGGdKo3awP Wp61tjAFgraLJgDk+DsSvUD6EowjMTNx25GQgyYJ5RPIzKKR9tQW8gGK+2+RHxkUCTbYFnL6kl8C h507rUdPPipJ9CgJFws3kDS3gOS5WFMxcjO5DwKfKSETEPrHh7p5shuuNktvsv6hxHTLhiMKX893 gxdT3XLS9OKmCv87vkINQcNEcIIoFWbP9HORz9v3vQwR4e3ksLc2JZOAFK+ssS5XMEoznzpihEP0 PLc4dCBYjbvSD7kxgDwZ+Aj8Q9PkbvE9sIPP7ON0fz095HdThKjiVJe6vofq+n6b1NBc8XdrQvBm unwxD5nvtTW4vtN6VY7mUCmxsCieuoBJ9OlqmsVWQvifIYf40dJPZkk9YgGTzWLpXDSfLSplbY2L L9C9U0ptvjcDjefLTvqSFc7tw1sEhF0n/qpA2r0GpvkLRDmcSwVyPvmjFBGqUp/pNy8ZuPGQmHwF i2/14+xeSUDG2bwnsYJQG2EdJCB6luQ57GEnTA/yKZSTKI8dDQa8Sd3zfXb19mOgSF0bBdXbuKhE puP9wirslFe6fQ1t5j5R0xi72MZ8ikMu1RQZKCyDbMwazlHiMYIDfzCCA3sCAQEwgZQwgYwxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkg SW50ZXJtZWRpYXRlIENsaWVudCBDQQIDDl3GMA0GCWCGSAFlAwQCAQUAoIIBuzAYBgkqhkiG9w0B CQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjAxMjIwNDQ4MTZaMC8GCSqGSIb3DQEJ BDEiBCBHN2jL9Dh/IXuoFkMwFWh3NSv1bz/GtJXRKIwwAao2LDCBpQYJKwYBBAGCNxAEMYGXMIGU MIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJl IERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQ cmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAw5dxjCBpwYLKoZIhvcNAQkQAgsxgZeggZQw gYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUg RGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFBy aW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQIDDl3GMA0GCSqGSIb3DQEBAQUABIIBAK1w+jQ8 tpjPkJ65GrvQrBNilRdnB9xHZoZHoenwQ4f+G7zdxpnsgF44da/B3TsYo4Ra7fqMFMLyErSTsx3t jv8r6YnJkbIcOYF0xgBBRQoYqkS/ZeiGzExjdu83FTzy/5SIATWWId3NggT9TQIITFuddKrp7xN2 oxDn1B5z9r86rTbgViZqRV10yno1vDmYJrVopZbz09UhW1MNs2txoUJm3t/jxuiRNFGEQkhoYJSJ tqZdpCe+9hEkHI5Fb/b1siGJy0RN+I9Q6Ivom9sbNprWkl5M85C3GsXK9FxnWH4iXBAnKs1SSnCW uXLHzXDp+RqxEvISSNxLtkQuaja2pWwAAAAAAAA= --=-8ZaddvRESAuGc56ffIoi-- From owner-freebsd-questions@freebsd.org Fri Jan 22 04:59:14 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4EB5AA8DE23 for ; Fri, 22 Jan 2016 04:59:14 +0000 (UTC) (envelope-from mason@blisses.org) Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 36B7111A0 for ; Fri, 22 Jan 2016 04:59:13 +0000 (UTC) (envelope-from mason@blisses.org) Received: from blisses.org (cocytus.blisses.org [23.25.209.73]) by phlegethon.blisses.org (Postfix) with ESMTPSA id 62C521493BE; Thu, 21 Jan 2016 23:59:12 -0500 (EST) Date: Thu, 21 Jan 2016 23:59:10 -0500 From: Mason Loring Bliss To: "William A. Mahaffey III" Cc: freebsd-questions@freebsd.org Subject: Re: ZFS performance help sought Message-ID: <20160122045910.GN4538@blisses.org> References: <20160121205139.GG4538@blisses.org> <56A1A3EE.3030507@hiwaay.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <56A1A3EE.3030507@hiwaay.net> User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 04:59:14 -0000 On Thu, Jan 21, 2016 at 09:42:48PM -0553, William A. Mahaffey III wrote: > What version of Linux, if you don't mind ? TIA & have a good one. Linux 3.10, with ZoL 0.6.5.3. The distribution was Slackware, but if I bounce back that way it'll very likely be to Ubuntu. But maybe we'll have some luck on this side and my motivation to switch will go away. That's my hope anyway. -- Mason Loring Bliss mason@blisses.org Ewige Blumenkraft! (if awake 'sleep (aref #(sleep dream) (random 2))) -- Hamlet, Act III, Scene I From owner-freebsd-questions@freebsd.org Fri Jan 22 05:05:30 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0E328A8C075 for ; Fri, 22 Jan 2016 05:05:30 +0000 (UTC) (envelope-from mason@blisses.org) Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id E88A11542 for ; Fri, 22 Jan 2016 05:05:29 +0000 (UTC) (envelope-from mason@blisses.org) Received: from blisses.org (cocytus.blisses.org [23.25.209.73]) by phlegethon.blisses.org (Postfix) with ESMTPSA id AB7401493BE; Fri, 22 Jan 2016 00:05:27 -0500 (EST) Date: Fri, 22 Jan 2016 00:05:26 -0500 From: Mason Loring Bliss To: "Michael B. Eichorn" Cc: dweimer , freebsd-questions@freebsd.org Subject: Re: ZFS performance help sought Message-ID: <20160122050526.GO4538@blisses.org> References: <20160121205139.GG4538@blisses.org> <20160121232810.GJ4538@blisses.org> <20160121235545.GK4538@blisses.org> <20160122000523.GL4538@blisses.org> <1453438096.26786.7.camel@michaeleichorn.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1453438096.26786.7.camel@michaeleichorn.com> User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 05:05:30 -0000 On Thu, Jan 21, 2016 at 11:48:16PM -0500, Michael B. Eichorn wrote: > freebsd.org/doc/en_US.ISO8859-1/books/handbook/zfs-advanced.html Hm. I don't know that I've looked at this before. Thank you. I'll read it. > I suppose vfs.zfs.top_maxinflight might worth a try? Sure. Does it have any correspondence with the qlen iostat -x reports? I don't know how many levels have queueing, and whether iostat is reading the drive's tagged command queueing, something in the filesystem, or something elsewhere in the kernel. I'll try to figure this out tomorrow, as well as reading the rest of that page and testing with top_maxinflight. If iostat is reporting something else, is there a good way to capture current inflight to see how close to the cap I'm getting in any event? -- Mason Loring Bliss mason@blisses.org http://blisses.org/ "I am a brother of jackals, and a companion of ostriches." (Job 30 : 29) From owner-freebsd-questions@freebsd.org Fri Jan 22 05:09:00 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1F068A8C1BF for ; Fri, 22 Jan 2016 05:09:00 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from holgerdanske.com (holgerdanske.com [IPv6:2001:470:0:19b::b869:801b]) by mx1.freebsd.org (Postfix) with SMTP id 12C5F1643 for ; Fri, 22 Jan 2016 05:09:00 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from ::ffff:99.100.19.101 ([99.100.19.101]) by holgerdanske.com for ; Thu, 21 Jan 2016 21:08:57 -0800 Subject: Re: ZFS performance help sought To: freebsd-questions@freebsd.org References: <20160121205139.GG4538@blisses.org> From: David Christensen Message-ID: <56A1B969.4020107@holgerdanske.com> Date: Thu, 21 Jan 2016 21:08:57 -0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Icedove/38.5.0 MIME-Version: 1.0 In-Reply-To: <20160121205139.GG4538@blisses.org> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 05:09:00 -0000 On 01/21/2016 12:51 PM, Mason Loring Bliss wrote: > I've bounced back and forth between FreeBSD and Linux, and one of the reasons > why I tend to part with FreeBSD is frustration with ZFS performance. ... > Running FreeBSD, a zfs send/receive from one pool to another makes my system > almost unusably slow and even begins to dig me into swap a little. ... > I've moved back to FreeBSD on this box now, and I'd like to resolve this > issue. I don't know if it's a matter of fixing something broken in FreeBSD's > scheduling or tuning ZFS somehow such that it's friendlier. ... > The box has FreeBSD 10.2, eight gigs of RAM, and I'm dealing with pools 1TB > or smaller. No deduplication. ... On 01/21/2016 04:12 PM, Mason Loring Bliss wrote: > This is with the current test transfer going, with the settings noted > previously: > > extended device statistics > device r/s w/s kr/s kw/s qlen svc_t %b > ada0 182.6 0.0 23369.6 0.0 1 3.2 30 > ada1 212.5 0.0 27200.6 0.0 0 3.1 33 > ada2 0.0 486.9 0.0 61652.4 0 4.5 64 > ada3 0.0 798.1 0.0 101236.2 1 4.7 75 > ada4 0.0 0.0 0.0 0.0 0 0.0 0 > da0 0.0 0.0 0.0 0.0 0 0.0 0 > cd0 0.0 0.0 0.0 0.0 0 0.0 0 > > the sending pool is a mirror on ada0,1, and the receiving pool in > this case is a mirror on ada2,3. > > The disks in question: > > ada0: ATA8-ACS SATA 3.x device > ada0: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) > ada1: ATA8-ACS SATA 3.x device > ada1: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) > ada2: ATA-7 SATA 2.x device > ada2: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) > ada3: ACS-2 ATA SATA 3.x device > ada3: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) 1. Have you tested the disks, cables, and controllers individually using disk manufacturer diagnostics? E.g. for Seagate, SeaTools for DOS (bootable CD based on FreeDOS; MS-DOS not required): http://www.seagate.com/support/downloads/seatools/ 2. Have you tested the disks individually using FreeBSD without ZFS? 3. Have you tested the disks individually using FreeBSD with ZFS? 4. Have you tested ada0,1 as a FreeBSD ZFS mirror? 5. Have you tested ada2,3 as a FreeBSD ZFS mirror? David From owner-freebsd-questions@freebsd.org Fri Jan 22 05:19:05 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0DF72A8C5D1 for ; Fri, 22 Jan 2016 05:19:05 +0000 (UTC) (envelope-from mason@blisses.org) Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id EA2631BA8 for ; Fri, 22 Jan 2016 05:19:04 +0000 (UTC) (envelope-from mason@blisses.org) Received: from blisses.org (cocytus.blisses.org [23.25.209.73]) by phlegethon.blisses.org (Postfix) with ESMTPSA id 49B2B1493BE; Fri, 22 Jan 2016 00:19:02 -0500 (EST) Date: Fri, 22 Jan 2016 00:19:00 -0500 From: Mason Loring Bliss To: David Christensen Cc: freebsd-questions@freebsd.org Subject: Re: ZFS performance help sought Message-ID: <20160122051900.GP4538@blisses.org> References: <20160121205139.GG4538@blisses.org> <56A1B969.4020107@holgerdanske.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <56A1B969.4020107@holgerdanske.com> User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 05:19:05 -0000 On Thu, Jan 21, 2016 at 09:08:57PM -0800, David Christensen wrote: > 1. Have you tested the disks, cables, and controllers individually using > disk manufacturer diagnostics? E.g. for Seagate, SeaTools for DOS (bootable > CD based on FreeDOS; MS-DOS not required): Yeah. Plus, this only happens with FreeBSD, and I don't believe that Linux is quietly working around some really subtle weirdnesses in my drives. Honestly, the verification you're suggesting would be an absolutely tremendous amount of work and pretty disruptive only to highlight that the hardware is okay and FreeBSD or the way it uses ZFS is doing something odd. I did the "here, let me test the devices" dance when I discovered an OS- agnostic flaw in OpenZFS, and I'm just not going to do it again. I don't want to seem ungrateful for your time in writing up the questions, but I don't see how I can reasonably obtain the data you want. It'd be much less work to just go to a known-good Linux configuration, but that doesn't make FreeBSD better, which is a giant part of my goal in having switched back. The iostat output earlier in the thread showed a snapshot of relative performance, and I'm happy to do more diagnostics that don't involve disassembling this particular box. -- Mason Loring Bliss mason@blisses.org Ewige Blumenkraft! (if awake 'sleep (aref #(sleep dream) (random 2))) -- Hamlet, Act III, Scene I From owner-freebsd-questions@freebsd.org Fri Jan 22 05:32:31 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 42A51A8CBDE for ; Fri, 22 Jan 2016 05:32:31 +0000 (UTC) (envelope-from wam@hiwaay.net) Received: from fly.hiwaay.net (fly.hiwaay.net [216.180.54.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id EF822115F for ; Fri, 22 Jan 2016 05:32:30 +0000 (UTC) (envelope-from wam@hiwaay.net) Received: from kabini1.local (dynamic-216-186-244-25.knology.net [216.186.244.25] (may be forged)) (authenticated bits=0) by fly.hiwaay.net (8.13.8/8.13.8/fly) with ESMTP id u0M5WSgm022439 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Thu, 21 Jan 2016 23:32:29 -0600 Subject: Re: ZFS performance help sought References: <20160121205139.GG4538@blisses.org> <56A1A3EE.3030507@hiwaay.net> <20160122045910.GN4538@blisses.org> Cc: freebsd-questions@freebsd.org From: "William A. Mahaffey III" Message-ID: <56A1BEEC.3070708@hiwaay.net> Date: Thu, 21 Jan 2016 23:37:58 -0553.75 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: <20160122045910.GN4538@blisses.org> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 05:32:31 -0000 On 01/21/16 23:05, Mason Loring Bliss wrote: > On Thu, Jan 21, 2016 at 09:42:48PM -0553, William A. Mahaffey III wrote: > >> What version of Linux, if you don't mind ? TIA & have a good one. > Linux 3.10, with ZoL 0.6.5.3. The distribution was Slackware, but if I bounce > back that way it'll very likely be to Ubuntu. But maybe we'll have some luck > on this side and my motivation to switch will go away. That's my hope anyway. > Agreed. I was surprised to hear of good luck w/ ZFS/linux & problems under FreeBSD, I had always heard that ZFS was *MUCH* dicier w/ linux than with FreeBSD .... Good luck, I got good help here setting up a simpler (& functioning well) ZFS system a few months ago. -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr. From owner-freebsd-questions@freebsd.org Fri Jan 22 06:18:26 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 31B24A8CB87 for ; Fri, 22 Jan 2016 06:18:26 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (wonkity.com [67.158.26.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "wonkity.com", Issuer "wonkity.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id F2CC61737 for ; Fri, 22 Jan 2016 06:18:25 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (localhost [127.0.0.1]) by wonkity.com (8.15.2/8.15.2) with ESMTPS id u0M6H6Pb092347 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 21 Jan 2016 23:17:06 -0700 (MST) (envelope-from wblock@wonkity.com) Received: from localhost (wblock@localhost) by wonkity.com (8.15.2/8.15.2/Submit) with ESMTP id u0M6H5bV092344; Thu, 21 Jan 2016 23:17:06 -0700 (MST) (envelope-from wblock@wonkity.com) Date: Thu, 21 Jan 2016 23:17:05 -0700 (MST) From: Warren Block To: Mason Loring Bliss cc: dweimer , freebsd-questions@freebsd.org Subject: Re: ZFS performance help sought In-Reply-To: <20160122000523.GL4538@blisses.org> Message-ID: References: <20160121205139.GG4538@blisses.org> <20160121232810.GJ4538@blisses.org> <20160121235545.GK4538@blisses.org> <20160122000523.GL4538@blisses.org> User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (wonkity.com [127.0.0.1]); Thu, 21 Jan 2016 23:17:06 -0700 (MST) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 06:18:26 -0000 On Thu, 21 Jan 2016, Mason Loring Bliss wrote: > > Again, FreeBSD 10.2, ZFS tuned at noted above, and with prefetch disabled. I know there was some sort of ZFS resource exhaustion issue worked on recently, but I don't recally exactly when or what the symptoms were. It might only be in 10-stable so far. Best to ask on the freebsd-fs mailing list. From owner-freebsd-questions@freebsd.org Fri Jan 22 09:41:05 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C1C78A8C00F for ; Fri, 22 Jan 2016 09:41:05 +0000 (UTC) (envelope-from bsd@bontempi.net) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 9C7A01B3E for ; Fri, 22 Jan 2016 09:41:05 +0000 (UTC) (envelope-from bsd@bontempi.net) Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 0FDCD21383 for ; Fri, 22 Jan 2016 04:41:04 -0500 (EST) Received: from web6 ([10.202.2.216]) by compute6.internal (MEProxy); Fri, 22 Jan 2016 04:41:04 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=bontempi.net; h= content-transfer-encoding:content-type:date:from:message-id :mime-version:subject:to:x-sasl-enc:x-sasl-enc; s=mesmtp; bh=8RQ y+hhCOXSsjzb+2yC0ZXFTTPI=; b=qXb7Rm6afs3JKBCp/ePJgdlT2Y6HeLPWVji sozexKJPutLTa9PD+s9gCV+VsF0wJBYfrjUgexuaK+79I/ijdQNnadZO4cfnoHdR WCM315OyuHVpIXqUs2i2oCEddJPExULEgBtK4ZJr9Kr3HrbTtcR43Lw+Kq7FEzq2 Qmx2hhuI= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:message-id:mime-version:subject:to:x-sasl-enc :x-sasl-enc; s=smtpout; bh=8RQy+hhCOXSsjzb+2yC0ZXFTTPI=; b=eViEk lB2EvLr/hjpeKmvMJn7jrbHNgXE9U4xdcbVzM6IPdcn3nIvnO/899uZRLW0LxAkh 21P5otydl3i8UlUJTfmplVGzF2Y/vzX4xs0Uzv6mmRhISMsiIcfEyDum1ptuaAnu 3j7/QlJe7RrU1r+JlzADbxY1qv8xVMOHvCcZ+o= Received: by web6.nyi.internal (Postfix, from userid 99) id D96674BE2E; Fri, 22 Jan 2016 04:41:03 -0500 (EST) Message-Id: <1453455663.2364898.499431058.4EA85780@webmail.messagingengine.com> X-Sasl-Enc: OjtJxjgbe+ht+lFBGMTOKrNeGIHuDSlTbBkwrIjMmyXD 1453455663 From: Priyadarshan To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-6cda141f Subject: Re: ZFS performance help sought Date: Fri, 22 Jan 2016 09:41:03 +0000 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 09:41:05 -0000 On Thu, 21 Jan 2016, at 23:37, William A. Mahaffey III wrote: > On 01/21/16 23:05, Mason Loring Bliss wrote: > > On Thu, Jan 21, 2016 at 09:42:48PM -0553, William A. Mahaffey III wrote: > > > >> What version of Linux, if you don't mind ? TIA & have a good one. > > Linux 3.10, with ZoL 0.6.5.3. The distribution was Slackware, but if I bounce > > back that way it'll very likely be to Ubuntu. But maybe we'll have some luck > > on this side and my motivation to switch will go away. That's my hope anyway. > > > > Agreed. I was surprised to hear of good luck w/ ZFS/linux & problems > under FreeBSD, I had always heard that ZFS was *MUCH* dicier w/ linux > than with FreeBSD .... Good luck, I got good help here setting up a > simpler (& functioning well) ZFS system a few months ago. Interestingly, we have moved one of our machines in the opposite direction, from Linux 4.2/ZoL 0.6.5.4 to FreeBSD 10.2, because a 12 TB pool under Linux/ZoL was consistently reporting errors every few weeks. The exact same hardware with FreeBSD 10.2 has not been reporting such errors. In our case, drives are all WD RED 6TB. Priyadarshan From owner-freebsd-questions@freebsd.org Fri Jan 22 13:08:25 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 271D8A8CAEC for ; Fri, 22 Jan 2016 13:08:25 +0000 (UTC) (envelope-from freebsd-listen@fabiankeil.de) Received: from smtprelay01.ispgateway.de (smtprelay01.ispgateway.de [80.67.31.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id DCE3D1F3F for ; Fri, 22 Jan 2016 13:08:24 +0000 (UTC) (envelope-from freebsd-listen@fabiankeil.de) Received: from [78.35.136.252] (helo=fabiankeil.de) by smtprelay01.ispgateway.de with esmtpsa (TLSv1.2:AES128-GCM-SHA256:128) (Exim 4.84) (envelope-from ) id 1aMbRk-0004PW-5m; Fri, 22 Jan 2016 14:08:12 +0100 Date: Fri, 22 Jan 2016 14:05:49 +0100 From: Fabian Keil To: Mason Loring Bliss Cc: freebsd-questions@freebsd.org Subject: Re: ZFS performance help sought Message-ID: <20160122140549.053fea0f@fabiankeil.de> In-Reply-To: <20160122000523.GL4538@blisses.org> References: <20160121205139.GG4538@blisses.org> <20160121232810.GJ4538@blisses.org> <20160121235545.GK4538@blisses.org> <20160122000523.GL4538@blisses.org> Reply-To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; boundary="Sig_/JL2.QyCqkFPVF6wmbAVcHVL"; protocol="application/pgp-signature" X-Df-Sender: Nzc1MDY3 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 13:08:25 -0000 --Sig_/JL2.QyCqkFPVF6wmbAVcHVL Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Mason Loring Bliss wrote: > On Thu, Jan 21, 2016 at 06:55:45PM -0500, Mason Loring Bliss wrote: >=20 > > Here's what I set: > >=20 > > vfs.zfs.arc_max=3D"4096M" > > vfs.zfs.arc_min=3D"1024M" > > vfs.zfs.txg.timeout=3D"3" > > vfs.zfs.write_limit_override=3D"512M" > >=20 > > I'm not seeing any obvious way to verify the write_limit_override setti= ng - > > it appears not to show up in sysctl output. > >=20 > > I'll wait for the current big transfer to finish and then I'll try it w= ith > > prefetch disabled too. =20 >=20 > Disabling prefetch doesn't do a thing here - the system is still painfully > overloaded, doing something that was simply unproblematic under Linux. >=20 > I'd be grateful for further debugging or tuning tips. Is it possible this= has > nothing to do with ZFS and that I need to play with FreeBSD's scheduling > somehow? >=20 > Again, FreeBSD 10.2, ZFS tuned at noted above, and with prefetch disabled. > Eight gigs of RAM, pools less than 1TB. Doing a send/receive between pool= s on > different disks is bringing the system to its knees, where the literal sa= me > hardware under Linux/ZoL doesn't break a sweat. >=20 > What else can I try? It's conceivable that you are seeing the result of lock contention that is slowing down arc_get_data_buf(), for details see: https://www.fabiankeil.de/gehacktes/electrobsd/zfs-arc-tuning/ You could try the referenced DTrace script to check if that's the case. Even if it's a different issue, you may be able to work around it by throttling the send/receive throughput with mbuffer or a similar tool. Fabian --Sig_/JL2.QyCqkFPVF6wmbAVcHVL Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlaiKS8ACgkQBYqIVf93VJ25xgCfU/7/ZXZiZeSgvPonL+2ob4XH 1C0AoLK5e5x1CTi3JWsx4217yzHiFQ3v =Dmk9 -----END PGP SIGNATURE----- --Sig_/JL2.QyCqkFPVF6wmbAVcHVL-- From owner-freebsd-questions@freebsd.org Fri Jan 22 13:29:12 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 69763A8D4AD for ; Fri, 22 Jan 2016 13:29:12 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 0C7E91F5B for ; Fri, 22 Jan 2016 13:29:11 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from zero-gravitas.local (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.2/8.15.2) with ESMTPSA id u0MDStoI067619 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Fri, 22 Jan 2016 13:28:55 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.infracaninophile.co.uk u0MDStoI067619 Authentication-Results: smtp.infracaninophile.co.uk/u0MDStoI067619; dkim=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be zero-gravitas.local Subject: Re: Downloading 10.2-RELEASE-p10 source without prayer To: kpneal@pobox.com References: <569F4344.5020907@FreeBSD.org> <20160120115808.6133c482@gecko4> <569FC320.1080906@freebsd.org> <20160120181129.08eedbbc@gecko4> <56A08FC1.1080701@FreeBSD.org> <20160122131135.GA12085@neutralgood.org> Cc: mfv@bway.net, Anton Sayetsky , FreeBSD Questions From: Matthew Seaman X-Enigmail-Draft-Status: N1110 Message-ID: <56A22E91.5030606@FreeBSD.org> Date: Fri, 22 Jan 2016 13:28:49 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <20160122131135.GA12085@neutralgood.org> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="rbqTeSEVCRjwILp42XjHkncwHtFfulwNQ" X-Virus-Scanned: clamav-milter 0.99 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00, URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 13:29:12 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --rbqTeSEVCRjwILp42XjHkncwHtFfulwNQ Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 2016/01/22 13:11, kpneal@pobox.com wrote: > On Thu, Jan 21, 2016 at 07:58:57AM +0000, Matthew Seaman wrote: >> On 20/01/2016 23:11, mfv wrote: >>> I do not know how ca_root_nss works but will save that for another da= y. >>> Right now, it just works, without any intervention on my part. Kudos= >>> to the developers. >> >> ca_root_nss is just a list of Certification Authority certificates, >> which OpenSSL will trust by default. It's derived from the list of >> certificates that is built into Firefox for the same purpose. >> >> 'Trust' in this sense means that you're trusting the CA to verify that= >> the identity they've signed a certificate for is legitimately the >> property of the people requesting it. Various CAs have been expelled >> from that list over time, due to incompetence or because they were fou= nd >> to be the tools of a repressive regime, so it's important to keep >> ca-root_nss up to date. >=20 > Say, won't DNSSEC+DANE eliminate the need for a CA?=20 >=20 > Or, at the very least, it will allow for certificates to be designated = as > ONLY coming from a specific CA. Yes indeed. DNSSEC+DANE is another way of being able to declare to the world that you own a specific SSL key / cert in a cryptographically secure manner. To trust DANE, you essentially have to trust that DNSSEC is secure -- which is quite a reasonable thing to do -- and assume that the people in control of the DNS for example.com are at least allied with the people that manage the site at https://foo.example.com/ (this will usually be the case, but it's possibly the least reliable step in this concept.) Whether DANE will make CAs obsolete remains to be seen. It's pretty useful for SMTP over TLS at the moment, but most other applications need client-side support added. Cheers, Matthew --rbqTeSEVCRjwILp42XjHkncwHtFfulwNQ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQJ8BAEBCgBmBQJWoi6XXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnDO0P/1HXzMb5jyzm5s04unEMnL5F ralUW5lU4ApfqFhz1spupadqh0LFQ2Nri+g9tmPk8SgFS4riyUIt43uOLVGbezAJ +a06HX/mIUNGbHns2To6XynqxZvD4DOvj0XZRCtzRMV49RwEZWMs91v2qrwzotAC aLV+BAQo/xT6JxY12xm+SlaY2IrzKe0jUCCI06v3jKRkrMfwxjLAXiHYfNXBrdVx SS8gIWkpDh9EylSjJBp5N74KGj/BgrJF3MYKbgCbpREKtJRxPorAM3UzVSPK9FKJ APL8mCpnrFT09rLMWhazuj1If8FCCCbzG+Nk67vywB2wn5DtQIvWhEuKUlZuIF+K z5JW2HgYF6OofI8mqS7Q80BWPgWr13fMXmsl34CZFlCF0GSoocEyVRXFLUn/4hWH Bvyb/SibBb4bH8jNvg9wUi5aN0EcO4gdkkN3L1XQtCs2KyRdsg2xOOpNpyr1XaqX MtYYLVjHd+1jiR6rXP4vxXkaeZQ/8/qGi0PnrZveX8p3pU3QawBqba+la7AlA/AA A6X944eed2HSdVRJqEIBS/kFN7PTkXZL64GMoWY/ZRFwkC8ugCJpGj2NqBAV4DgB +aydfY2D6nN4+QUB4GazdtDTD8eX31za/1Z6BOY+arCVmnCYS3XHB0+y27/DHFXH iswBrndbp0P4udX6oeoJ =gAvT -----END PGP SIGNATURE----- --rbqTeSEVCRjwILp42XjHkncwHtFfulwNQ-- From owner-freebsd-questions@freebsd.org Fri Jan 22 15:39:27 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6B454A8D939 for ; Fri, 22 Jan 2016 15:39:27 +0000 (UTC) (envelope-from markhamb@corp.ssimicro.com) Received: from mail.ssimicro.com (mail.ssimicro.com [64.247.129.10]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.ssimicro.com", Issuer "RapidSSL SHA256 CA - G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 161D215FC for ; Fri, 22 Jan 2016 15:39:26 +0000 (UTC) (envelope-from markhamb@corp.ssimicro.com) Received: from yk-office-RESERVED-64-247-130-128.ssimicro.com (yk-office-RESERVED-64-247-130-128.ssimicro.com [64.247.130.128]) (authenticated bits=0) by mail.ssimicro.com (8.14.7/8.14.7) with ESMTP id u0MFa74t027791 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for ; Fri, 22 Jan 2016 08:36:08 -0700 (MST) Subject: Re: ZFS performance help sought To: freebsd-questions@freebsd.org References: <20160121205139.GG4538@blisses.org> <20160121232810.GJ4538@blisses.org> <20160121235545.GK4538@blisses.org> <20160122000523.GL4538@blisses.org> <20160122135452.GC12085@neutralgood.org> From: markham breitbach Message-ID: <56A24D25.70206@corp.ssimicro.com> Date: Fri, 22 Jan 2016 08:39:17 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <20160122135452.GC12085@neutralgood.org> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 15:39:27 -0000 There were some ZFS threads on freebsd-performance a while back too. It might be worth throwing the question out that way too. -Markham From owner-freebsd-questions@freebsd.org Fri Jan 22 16:25:22 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 157BCA8CED5 for ; Fri, 22 Jan 2016 16:25:22 +0000 (UTC) (envelope-from mason@blisses.org) Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 00B951501 for ; Fri, 22 Jan 2016 16:25:21 +0000 (UTC) (envelope-from mason@blisses.org) Received: from blisses.org (cocytus.blisses.org [23.25.209.73]) by phlegethon.blisses.org (Postfix) with ESMTPSA id 75F6B1493C3; Fri, 22 Jan 2016 11:25:18 -0500 (EST) Date: Fri, 22 Jan 2016 11:25:16 -0500 From: Mason Loring Bliss To: Priyadarshan Cc: freebsd-questions@freebsd.org Subject: Re: ZFS performance help sought Message-ID: <20160122162516.GR4538@blisses.org> References: <1453455663.2364898.499431058.4EA85780@webmail.messagingengine.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1453455663.2364898.499431058.4EA85780@webmail.messagingengine.com> User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 16:25:22 -0000 On Fri, Jan 22, 2016 at 09:41:03AM +0000, Priyadarshan wrote: > Interestingly, we have moved one of our machines in the opposite > direction, from Linux 4.2/ZoL 0.6.5.4 to FreeBSD 10.2, because a 12 TB > pool under Linux/ZoL was consistently reporting errors every few weeks. The only reporting of errors I noted was when I was trying a persistent broken mirror for back-ups - I'd peel off a pool vdev and send it offsite, with the newly-onsite vdev being put back online. While ZFS was able to deal with this for a short time - maybe a day - it started spewing checksum errors if the vdev was brought back after a week, which is my normal rotation. This, however, was an issue with OpenZFS itself, and the problem was identical regardless of whether I was doing it under Linux or FreeBSD. I've since given up on the idea and I'm shipping self-contained pools offsite instead of pool elements. -- The creatures outside looked from pig to man, and from man to pig, and from pig to man again; but already it was impossible to say which was which. - G. Orwell From owner-freebsd-questions@freebsd.org Fri Jan 22 16:34:21 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 61141A8D28D for ; Fri, 22 Jan 2016 16:34:21 +0000 (UTC) (envelope-from mason@blisses.org) Received: from phlegethon.blisses.org (phlegethon.blisses.org [50.56.97.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4A8F81B86 for ; Fri, 22 Jan 2016 16:34:20 +0000 (UTC) (envelope-from mason@blisses.org) Received: from blisses.org (cocytus.blisses.org [23.25.209.73]) by phlegethon.blisses.org (Postfix) with ESMTPSA id E22EF1493C3; Fri, 22 Jan 2016 11:34:18 -0500 (EST) Date: Fri, 22 Jan 2016 11:34:17 -0500 From: Mason Loring Bliss To: Warren Block , freebsd-questions@freebsd.org, kpneal@pobox.com, markham breitbach , Priyadarshan Subject: Re: ZFS performance help sought Message-ID: <20160122163417.GS4538@blisses.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1453455663.2364898.499431058.4EA85780@webmail.messagingengine.com> <56A24D25.70206@corp.ssimicro.com> <20160122135452.GC12085@neutralgood.org> <20160122140549.053fea0f@fabiankeil.de> User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 16:34:21 -0000 On Thu, Jan 21, 2016 at 11:17:05PM -0700, Warren Block wrote: > I know there was some sort of ZFS resource exhaustion issue worked on > recently, but I don't recally exactly when or what the symptoms were. It > might only be in 10-stable so far. Best to ask on the freebsd-fs mailing > list. Thank you. I'm subscribing to that now. > It's conceivable that you are seeing the result of lock contention that > is slowing down arc_get_data_buf(), for details see: > https://www.fabiankeil.de/gehacktes/electrobsd/zfs-arc-tuning/ I will look at that and try the dtrace script soon. Thank you. > Even if it's a different issue, you may be able to work around it by > throttling the send/receive throughput with mbuffer or a similar tool. Most of the time I schedule the bulk moves for hours where I wouldn't notice the system being bogged down, so I'm more interested in identifying it than working around it, but that's worth noting, especially given that there is a very easy chokepoint to be had in the pipeline. On Fri, Jan 22, 2016 at 08:54:52AM -0500, kpneal@pobox.com wrote: > FWIW, I have a machine with a three way mirror, SAS 3Gb, 8GB RAM, and when > mutt saves a roughly 3GB mailbox it pushes the machine into swap. I'll move further correspondence to freebsd-fs once I've confirmed my subscription there, but I'd be curious to know if you can suggest a simple test case there I can reproduce. Is it one big mbox file, as opposed to maildir? Are you deleting a mail from the middle, or doing some other operation? On my end, I take a dataset with maybe 130G in it and I remove it from back-ups, and then re-ship it to tickle the issue. On Fri, Jan 22, 2016 at 08:39:17AM -0700, markham breitbach wrote: > There were some ZFS threads on freebsd-performance a while back too. It > might be worth throwing the question out that way too. Thank you. I will subscribe and look at archives there too. -- Mason Loring Bliss mason@blisses.org Ewige Blumenkraft! awake ? sleep : random() & 2 ? dream : sleep; -- Hamlet, Act III, Scene I From owner-freebsd-questions@freebsd.org Fri Jan 22 21:54:03 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EB4C7A8D6AA for ; Fri, 22 Jan 2016 21:54:03 +0000 (UTC) (envelope-from bsduser@cloudzeeland.nl) Received: from ceto.cloudzeeland.nl (cloudzeeland.xs4all.nl [83.161.133.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "cloudzeeland.nl", Issuer "COMODO RSA Domain Validation Secure Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id AE42C1C2A for ; Fri, 22 Jan 2016 21:54:02 +0000 (UTC) (envelope-from bsduser@cloudzeeland.nl) Received: from ceto.cloudzeeland.nl (ceto.cloudzeeland.nl [10.10.10.30]) by ceto.cloudzeeland.nl (Postfix) with ESMTP id C0B0847CB02D for ; Fri, 22 Jan 2016 22:53:52 +0100 (CET) Received: from [10.10.10.33] (unknown [82.176.127.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by ceto.cloudzeeland.nl (Postfix) with ESMTPSA id 9059347CAFF8 for ; Fri, 22 Jan 2016 22:53:52 +0100 (CET) To: "freebsd-questions@FreeBSD.org" From: JosC Subject: IPFW deny ip range Message-ID: <56A2A4F5.3030907@cloudzeeland.nl> Date: Fri, 22 Jan 2016 22:53:57 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 X-Virus-Scanned: ClamAV using ClamSMTP on ceto.cloudzeeland.nl Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 21:54:04 -0000 I have this ip range that I would like to block (example ip): 123.xx.xx.xx 123.1.xx.xx 123.1.1.xx Can someone tell me how I can define best in ipfw.rules? Thanks, Jos Chrispijn From owner-freebsd-questions@freebsd.org Fri Jan 22 22:36:15 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6B7B6A8E50D for ; Fri, 22 Jan 2016 22:36:15 +0000 (UTC) (envelope-from wfdudley@gmail.com) Received: from mail-yk0-x22a.google.com (mail-yk0-x22a.google.com [IPv6:2607:f8b0:4002:c07::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 29F77127D for ; Fri, 22 Jan 2016 22:36:15 +0000 (UTC) (envelope-from wfdudley@gmail.com) Received: by mail-yk0-x22a.google.com with SMTP id s126so78366697ykf.2 for ; Fri, 22 Jan 2016 14:36:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type:content-transfer-encoding; bh=HK6olLavgEUw7hRQ4Bpk20zE2rfA32GZBnutTwO6yCA=; b=sEqRxHfzmHumtC+4mT5GYLquCmd68ysiUoCXViwPtUiqikMsof1cN79QqE6ANGCqO4 AtAq8QUgBKRPw5rBFsipMmNLZATgeSzegdF3vGP5iX0KkMq+aR4OhwDI994QwEnDqJeQ x/0fAnp0oNMF7PWkEmqvMgggghNbLa4/pkwsA/LqSEx+NW+Vrup/Qu50VgU9J3kmfAe/ qlgYHXSjcG2jO5HQm5vNUUaBgszW16M1vB3FoXlwL1LSY11KFytR+ovVZLhRCUSGmbY8 skjnYVzjCXZrR9cRlxHaM1o+wZWEUU0C8FtBKSvZxOLQ+HqonkB4eGfihpcomPSnC5jf +p+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type :content-transfer-encoding; bh=HK6olLavgEUw7hRQ4Bpk20zE2rfA32GZBnutTwO6yCA=; b=GhDwSxyT5PH9GnGxaKa6bdfywRzJfckU9MZJqqY+jlAmDxhv7W+aafpTWtfEupk4Ez +FCMYcokA/UUA48TY+79ovt+fNXYsN9abiGS77fMjG0+Ev9DfK9WbBI9VYCIWUAL/cX0 gnXDLYS8gSLJOPv7sGJccPoLrRH0C5NC4UlTffmlRGSP2OI6imIjM/aYVOWHr95510GM dM+8CvYEgG+UXIBFXjrObpHsAV2NRVazzqbQCqQRH7KEnON4h9ZKiFMcYR2Hq3ilNVNg qZAA+8GKhTOx+GC+nNf1UOjPdlIIkCxAw1E3Zb21mxC7mjvdTAvnxH1Wr/Toz3lSNFT1 BZkA== X-Gm-Message-State: AG10YORR7bWgH/gXfmJKQRmLoXcmed8dMiWUnw6fCBGdRwq58MhrtURZewiYQa5/+vFtnQ== X-Received: by 10.13.201.131 with SMTP id l125mr3060393ywd.150.1453502174126; Fri, 22 Jan 2016 14:36:14 -0800 (PST) Received: from [192.168.27.26] (mail.casano.com. [98.109.205.15]) by smtp.googlemail.com with ESMTPSA id i67sm5497060ywf.34.2016.01.22.14.36.13 for (version=TLSv1/SSLv3 cipher=OTHER); Fri, 22 Jan 2016 14:36:13 -0800 (PST) Subject: Re: IPFW deny ip range To: freebsd-questions@freebsd.org References: <56A2A4F5.3030907@cloudzeeland.nl> From: "William F. Dudley Jr." Message-ID: <56A2AEDC.2040204@gmail.com> Date: Fri, 22 Jan 2016 17:36:12 -0500 User-Agent: Mozilla/5.0 (X11; Linux i686; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56A2A4F5.3030907@cloudzeeland.nl> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2016 22:36:15 -0000 block in quick on bge0 from 123.0.0.0/8 to any block in quick on bge0 from 123.1.0.0/16 to any etc. replace bge0 with whatever interface your traffic is coming in on. Bill Dudley On 01/22/2016 04:53 PM, JosC wrote: > I have this ip range that I would like to block (example ip): > > 123.xx.xx.xx > 123.1.xx.xx > 123.1.1.xx > > Can someone tell me how I can define best in ipfw.rules? > > Thanks, > Jos Chrispijn > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" From owner-freebsd-questions@freebsd.org Sat Jan 23 01:48:36 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5CBB9A8D4F2 for ; Sat, 23 Jan 2016 01:48:36 +0000 (UTC) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from be-well.ilk.org (be-well.ilk.org [23.30.133.173]) by mx1.freebsd.org (Postfix) with ESMTP id 3E30718D3 for ; Sat, 23 Jan 2016 01:48:36 +0000 (UTC) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from lowell-desk.lan (router.lan [172.30.250.2]) by be-well.ilk.org (Postfix) with ESMTP id 438DC33C22; Fri, 22 Jan 2016 20:41:56 -0500 (EST) Received: by lowell-desk.lan (Postfix, from userid 1147) id 5C8F039841; Fri, 22 Jan 2016 20:41:56 -0500 (EST) From: Lowell Gilbert To: JosC Cc: freebsd-questions@FreeBSD.org Subject: Re: IPFW deny ip range References: <56A2A4F5.3030907@cloudzeeland.nl> Reply-To: freebsd-questions@FreeBSD.org Date: Fri, 22 Jan 2016 20:41:56 -0500 In-Reply-To: <56A2A4F5.3030907@cloudzeeland.nl> (JosC's message of "Fri, 22 Jan 2016 22:53:57 +0100") Message-ID: <44powt3wd7.fsf@lowell-desk.lan> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jan 2016 01:48:36 -0000 JosC writes: > I have this ip range that I would like to block (example ip): > > 123.xx.xx.xx > 123.1.xx.xx > 123.1.1.xx > > Can someone tell me how I can define best in ipfw.rules? If you're using ipfw, putting those things in a table and blocking from the table is the way to do this. The stock /etc/rc.firewall uses at least one table, so you can look at that as an example. I've never heard of ipfw.rules, though, so you may be a little confused. From owner-freebsd-questions@freebsd.org Sat Jan 23 06:30:38 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 243B9A8EA49 for ; Sat, 23 Jan 2016 06:30:38 +0000 (UTC) (envelope-from shahinhasanov@hotmail.com) Received: from DUB004-OMC2S17.hotmail.com (dub004-omc2s17.hotmail.com [157.55.1.156]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "MSIT Machine Auth CA 2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A862E17BE for ; Sat, 23 Jan 2016 06:30:37 +0000 (UTC) (envelope-from shahinhasanov@hotmail.com) Received: from DUB127-W44 ([157.55.1.136]) by DUB004-OMC2S17.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Fri, 22 Jan 2016 22:29:27 -0800 X-TMN: [1/UW5hIT5sY3D8HM3PDGklf61nookXet] X-Originating-Email: [shahinhasanov@hotmail.com] Message-ID: From: Shahin Hasanov To: JosC , FREEBSD_QUESTION Subject: RE: IPFW deny ip range Date: Sat, 23 Jan 2016 10:29:27 +0400 Importance: Normal In-Reply-To: <56A2A4F5.3030907@cloudzeeland.nl> References: <56A2A4F5.3030907@cloudzeeland.nl> MIME-Version: 1.0 X-OriginalArrivalTime: 23 Jan 2016 06:29:27.0708 (UTC) FILETIME=[68D405C0:01D155A7] Content-Type: text/plain; charset="windows-1251" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jan 2016 06:30:38 -0000 Hi=2C you have two options: 1) Use table:=20 ipfw table 1 add 123.xx.xx.xx ipfw table 1 add 123.1.xx.xx ipfw table 1 add 123.1.1.xx if you want to block in ipfw add deny ip from table\(1\) to any in via bce= 0 for example: ipfw 00050 add deny ip from table\(1\) to any in via bce0 or out ipfw add deny ip from table\(1\) to = any out via bce0 2) listed ip in rule ipfw add deny ip from 123.xx.xx.xx=2C123.1.xx.xx=2Cip= fw table 1 add 123.1.1.xx to any in via bce0 =20 > To: freebsd-questions@FreeBSD.org > From: bsduser@cloudzeeland.nl > Subject: IPFW deny ip range > Date: Fri=2C 22 Jan 2016 22:53:57 +0100 >=20 > I have this ip range that I would like to block (example ip): >=20 > 123.xx.xx.xx > 123.1.xx.xx > 123.1.1.xx >=20 > Can someone tell me how I can define best in ipfw.rules? >=20 > Thanks=2C > Jos Chrispijn > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe=2C send any mail to "freebsd-questions-unsubscribe@freebsd= .org" = From owner-freebsd-questions@freebsd.org Sat Jan 23 06:33:49 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 986DBA8EC74 for ; Sat, 23 Jan 2016 06:33:49 +0000 (UTC) (envelope-from shahinhasanov@hotmail.com) Received: from DUB004-OMC2S10.hotmail.com (dub004-omc2s10.hotmail.com [157.55.1.149]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "MSIT Machine Auth CA 2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 254401AE3 for ; Sat, 23 Jan 2016 06:33:48 +0000 (UTC) (envelope-from shahinhasanov@hotmail.com) Received: from DUB127-W17 ([157.55.1.137]) by DUB004-OMC2S10.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Fri, 22 Jan 2016 22:32:39 -0800 X-TMN: [wvE8HkNW0bzxaX9Xk5div5qLSTLL5RW6] X-Originating-Email: [shahinhasanov@hotmail.com] Message-ID: From: Shahin Hasanov To: "bsduser@cloudzeeland.nl" , FREEBSD_QUESTION Subject: RE: UPdate: IPFW deny ip range Date: Sat, 23 Jan 2016 10:32:39 +0400 Importance: Normal In-Reply-To: References: <56A2A4F5.3030907@cloudzeeland.nl>, MIME-Version: 1.0 X-OriginalArrivalTime: 23 Jan 2016 06:32:39.0584 (UTC) FILETIME=[DB31FA00:01D155A7] Content-Type: text/plain; charset="windows-1251" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jan 2016 06:33:49 -0000 =20 From: shahinhasanov@hotmail.com To: bsduser@cloudzeeland.nl=3B freebsd-questions@freebsd.org Subject: RE: IPFW deny ip range Date: Sat=2C 23 Jan 2016 10:29:27 +0400 =0A= =0A= =0A= Hi=2C you have two options: 1) Use table:=20 ipfw table 1 add 123.xx.xx.xx ipfw table 1 add 123.1.xx.xx ipfw table 1 add 123.1.1.xx if you want to block in ipfw add deny ip from table\(1\) to any in via bce= 0 for example: ipfw 00050 add deny ip from table\(1\) to any in via bce0 or out ipfw add deny ip from table\(1\) to = any out via bce0 2) listed ip in rule ipfw add deny ip from 123.xx.xx.xx=2C123.1.xx.xx=2C123= .1.1.xx to any in via bce0 =20 > To: freebsd-questions@FreeBSD.org > From: bsduser@cloudzeeland.nl > Subject: IPFW deny ip range > Date: Fri=2C 22 Jan 2016 22:53:57 +0100 >=20 > I have this ip range that I would like to block (example ip): >=20 > 123.xx.xx.xx > 123.1.xx.xx > 123.1.1.xx >=20 > Can someone tell me how I can define best in ipfw.rules? >=20 > Thanks=2C > Jos Chrispijn > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe=2C send any mail to "freebsd-questions-unsubscribe@freebsd= .org" = From owner-freebsd-questions@freebsd.org Sat Jan 23 07:11:45 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8E587A8D85E for ; Sat, 23 Jan 2016 07:11:45 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 56EEC1BA3 for ; Sat, 23 Jan 2016 07:11:44 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-101-208.dynamic.qsc.de [92.195.101.208]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 049E73CEE3; Sat, 23 Jan 2016 08:11:35 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u0N7BZC9002347; Sat, 23 Jan 2016 08:11:35 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Sat, 23 Jan 2016 08:11:35 +0100 From: Polytropon To: freebsd-questions@freebsd.org Cc: Lowell Gilbert Subject: Re: IPFW deny ip range Message-Id: <20160123081135.8c2ab64f.freebsd@edvax.de> In-Reply-To: <44powt3wd7.fsf@lowell-desk.lan> References: <56A2A4F5.3030907@cloudzeeland.nl> <44powt3wd7.fsf@lowell-desk.lan> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jan 2016 07:11:45 -0000 On Fri, 22 Jan 2016 20:41:56 -0500, Lowell Gilbert wrote: > I've never heard of ipfw.rules, though, so you may be a little confused. It's just an alternative configuration file name, such as /etc/ipfw.conf. You typically use it like this in /etc/rc.conf: firewall_script="/etc/ipfw.rules" This script is actually a valid shell script which will be executed, as _commands_. If you use firewall_type="/etc/ipfw.conf" instead, you need to supply _options_ that can follow a call of the ipfw program. The real difference is _script and _type, not the file name per se. :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sat Jan 23 07:58:16 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3903DA8E82D for ; Sat, 23 Jan 2016 07:58:16 +0000 (UTC) (envelope-from bsduser@cloudzeeland.nl) Received: from ceto.cloudzeeland.nl (cloudzeeland.xs4all.nl [83.161.133.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "cloudzeeland.nl", Issuer "COMODO RSA Domain Validation Secure Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id F1C421E95 for ; Sat, 23 Jan 2016 07:58:14 +0000 (UTC) (envelope-from bsduser@cloudzeeland.nl) Received: from ceto.cloudzeeland.nl (ceto.cloudzeeland.nl [10.10.10.30]) by ceto.cloudzeeland.nl (Postfix) with ESMTP id 4378047CB034; Sat, 23 Jan 2016 08:58:11 +0100 (CET) Received: from [10.10.10.33] (unknown [82.176.127.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by ceto.cloudzeeland.nl (Postfix) with ESMTPSA id 0B2FD47CB033; Sat, 23 Jan 2016 08:58:10 +0100 (CET) Subject: Re: IPFW deny ip range To: "William F. Dudley Jr." , freebsd-questions@freebsd.org References: <56A2A4F5.3030907@cloudzeeland.nl> <56A2AEDC.2040204@gmail.com> From: JosC Message-ID: <56A33297.2060603@cloudzeeland.nl> Date: Sat, 23 Jan 2016 08:58:15 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56A2AEDC.2040204@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV using ClamSMTP on ceto.cloudzeeland.nl X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jan 2016 07:58:16 -0000 Thank you (all) for your help, will certainly check your suggestions and let you know. ./Jos > replace bge0 with whatever interface your traffic is coming in on. > > Bill Dudley > > On 01/22/2016 04:53 PM, JosC wrote: >> I have this ip range that I would like to block (example ip): >> >> 123.xx.xx.xx >> 123.1.xx.xx >> 123.1.1.xx >> >> Can someone tell me how I can define best in ipfw.rules? >> From owner-freebsd-questions@freebsd.org Sat Jan 23 19:16:23 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 13729A8E735 for ; Sat, 23 Jan 2016 19:16:23 +0000 (UTC) (envelope-from patrickhess@gmx.net) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass DE-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 66C1C18C8 for ; Sat, 23 Jan 2016 19:16:21 +0000 (UTC) (envelope-from patrickhess@gmx.net) Received: from desk8.phess.net ([95.88.166.205]) by mail.gmx.com (mrgmx001) with ESMTPSA (Nemesis) id 0MGS9o-1aIfwD2Ze4-00DDtA for ; Sat, 23 Jan 2016 20:16:13 +0100 From: Patrick Hess To: freebsd-questions@freebsd.org Subject: Re: "fsck -y /" keeps saying "Disk is still dirty" no matter how many times I run it Date: Sat, 23 Jan 2016 20:16:11 +0100 Message-ID: <1553395.JCnJngLWQk@desk8.phess.net> User-Agent: KMail/4.14.3 (FreeBSD/10.1-RELEASE-p26; KDE/4.14.3; i386; ; ) In-Reply-To: References: <569017FF.9060509@rawbw.com> <569E6F7E.6000705@rawbw.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-Provags-ID: V03:K0:GaqmIgeWHHCUcHcDCZJgg0yUWv8DMCLbiysmR+TQ3jGhv8E/4w/ kmjUNJMMkzrjysaLqbpoZinoPJaKB/mVhq4MTRTyrozTPge0Lv1ZV998S7UbLlN/YqsdUOn TJlcBu8UuBVfD4HwKVUh9rjEfVjghlN8q0YBr3WPsszPUNmKdAFpPCqoSmAZ84FoqSEKpJd UEkrwB06SQuILoGyexCJg== X-UI-Out-Filterresults: notjunk:1;V01:K0:B0hLbCl+cIs=:hTugGNPd5g5Ywr67B+z1mM pJnn4D1T5pXEd5uziyjlZfvPYreFEcKSvZwX4AEv/FjSvAWNUozL3XuN7Y+4hTAuG0PSXnIJp MAzG0uvgEEgzd/JCMAmlX3btxTx5m6yqAzexsUNSDEtSExkFj6MMNh55C7HK0BphWKm/dp63e 7sTrfx1VRJh9TfATuAU6kCLBvm/DvCLJ4ElKUvOG5uAnrh5VNahY/urivVzFsmiyFZH1/IIrq PrT2emMz8HgG+mTRiIpOGiwy/tBzincDva/+rdJy0mzC7ci/zFUvPb+l7nfc6RuwpeWdEsJ9I jI9xpqQdU/VHf4UGI8SFZUhaaG2uMhyoxHZK+FFUe4WEcu+nxLg10+S9gBboOJ+Ecpnk7JRPD dOuyltKrFBESe3TxyGRGEqZuo1tXQpBWcnVQR8efHn9wKXZmQAfDCvfR7p29WzEtY+cJSamcD +F3nl8npPkYCdxHjA9Doi/I3lS01mut1Ii+RsQV5Fm675CzXUh4cmn9aDuMfXi8zfOyGn6ld3 9FXezkClESGoWFm6GnESppP2Jra1kJQb0VAcrxHYKRRTcRnM+jTcyxbEdVMVRuu1bTnX9EUqW jLC+4BdXBCXo9VYJzMuH6zbNEGdP309/e1SFLXfvieVSCxMVNgoneGXzB0hPmDDc1lBESQlyG OPygs6zPjritjW9BT+ghockHpE7CJAPcykHkVRY7zOl6wj3fVNgP2lyRyIh3Jf+EM0OBetX7l KE1/t56miTiZV+1wzCDbO4ywVvKFpU/1Q2EPlf+7xSqGNoNdg+d+Dz3rQcmNEHTnWaFrEcurl NGmeuKY X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jan 2016 19:16:23 -0000 Anton Sayetsky wrote: > Would be much more convenient if fsck had an option "to run until clean". > Maybe something like this will work (completely untested): > while(result);do fsck ...; result=$?; done This should do the trick: until fsck ...; do :; done Matt Smith wrote: > When I had SU+J enabled I could never get fsck to ever mark the > disk as clean. I've been using SU+J since the early days of 9.x and never encountered any such issues. Patrick