From owner-freebsd-questions@freebsd.org Sun Aug 5 02:42:36 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2DBE6105F2DC for ; Sun, 5 Aug 2018 02:42:36 +0000 (UTC) (envelope-from info@createandlisting.tech) Received: from mail.createandlisting.tech (mail.createandlisting.tech [205.147.101.13]) by mx1.freebsd.org (Postfix) with ESMTP id 63C55750A6 for ; Sun, 5 Aug 2018 02:42:35 +0000 (UTC) (envelope-from info@createandlisting.tech) Received: from [100.85.145.92] (unknown [27.97.8.58]) by mail.createandlisting.tech (Postfix) with ESMTPA id 80AFE4312B for ; Sun, 5 Aug 2018 08:12:26 +0530 (IST) Message-Id: Mime-Version: 1.0 From: Admin To: freebsd-questions@freebsd.org Subject: Re:Getting Hundreds of Clients Every Month from Your Website? Date: Sun, 5 Aug 2018 08:12:11 +0530 X-Bounce-Tracking-Info: Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.27 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 02:42:36 -0000 Hello, Gentle Reminder! Awaiting Response Thanks, Regards, Melissa Bell, Online Business Advisor, ---------------------------------------------------------------------------= ----- From: info@createandlisting=2Etech [mailto:info@createandlisting=2Etech] Sent: Thursday, Aug 02, 2018 05:06 AM Subject: Getting Hundreds of Clients Every Month from Your Website? Hi I hope you are doing well=2E Do you want to see your Business website first page of the Google? Are you = looking for SEO service to rank your Website organically in Top 5 positions= of Google page 1? We provide guarantee to have more than 50% of the keywor= ds on Google page 1 within the projected Google page 1 time line, so let us= provide you the Google page 1 ranking=2E There will be no set up fee or any other hidden charge=2E So you just have = to pay your monthly SEO fee and no need to sign any contract=2E Please revert back to us if interested to know more information related to = price, past results & our proposal=2E I will look forward to your reply=2E Warm Regards, Melissa Bell SEO Consultant DISCLAIMER: This is an advertisement and a promotional email strictly on th= e guidelines of CAN-SPAM act of 2007=2E We have clearly mentioned the sourc= e mail-id of this` mail, also clearly mentioned the subject lines and they = are in no way misleading in any form=2E We have found your mail address thr= ough our own efforts on the web search and not through any illegal way= =2E If you find this mail unsolicited, please reply with" Unsubscribe" in t= he subject line and we will take care that you do not receive any further p= romotional mail From owner-freebsd-questions@freebsd.org Sun Aug 5 10:02:10 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C6142107153C for ; Sun, 5 Aug 2018 10:02:09 +0000 (UTC) (envelope-from idefix@fechner.net) Received: from anny.lostinspace.de (anny.lostinspace.de [IPv6:2001:608:a02::33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2F7AD89C36 for ; Sun, 5 Aug 2018 10:02:09 +0000 (UTC) (envelope-from idefix@fechner.net) Received: from server.idefix.lan (156-102-000-128.ip-addr.inexio.net [128.0.102.156]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: idefix@fechner.net) by anny.lostinspace.de (Postfix) with ESMTPSA id 79DE8E546 for ; Sun, 5 Aug 2018 12:02:07 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=fechner.net; s=default; t=1533463327; bh=i6G9rj+4x2LqoNOpEKHCUsbEq9y94MBhqiJAw864crI=; h=Subject:To:References:From:Date:In-Reply-To; b=kw5HZU7uOqNb2hiPbHBIGuF21MmNl/CbEgG+PickY7mqjgFGaUfuz+xsEUpxmoh79 CuclYzF0Ltj96i7pWt3WkjJpia8W+6Qts8DxpdUPRsuT9AJQfafvx78jijm+eOFEv9 4ya5+eo/sIzTDw5VgJa4ejs+yQXCUBBf9MM0Mryk= Received: from [192.168.0.151] (156-102-000-128.ip-addr.inexio.net [128.0.102.156]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by server.idefix.lan (Postfix) with ESMTPSA id 87A587636D for ; Sun, 5 Aug 2018 12:02:05 +0200 (CEST) Subject: Re: 11.2 cannot boot with root on ZFS To: freebsd-questions@freebsd.org References: From: Matthias Fechner Openpgp: preference=signencrypt Autocrypt: addr=idefix@fechner.net; prefer-encrypt=mutual; keydata= xsFNBFqca1YBEADM9mF2+ifk8HILTlf5wtAzV6SYVR4RvNOo/8Kucw4sCZT76zS1fjZe4Zy1 3C0IZ07Wi+3PnoGIgOCsXp3PrTc2nuHQWkwVBYXy8UaR9DHBWA/mIvRGG1ZscKQYA6oUdCvd K8Mu26zO60yTt+ONzFtK6G1myH4EHXZ8dpmdCFf+W3rzTU+aCQ5S3OfwCLGgYgOaVREGkdOc 5SVCpFb4n+2B8+CqeWsRHhnT+4h7/YhgDMGp4GiI3yrB2nBVSUUvcosD2nRtJQgGQHcAFtMq 3hJaKPOR/mHc6KVrp0xmGNmdtazvXloHmGIl9O1UpmMmrYu9Kugl0JkGi2fAcno02XgVlkyX 7xDLTteP5cNqRxor4yVDaRWUQnOfK9XgcrKGrAzb65BkCSkjT+Aw3S/A8Qd6NvjL9qy1d+Ct dzatOVF/Y7jaW28CMr3jvwPS13OxV7PnJzIZzdik20eVxfOXuYfxZD+PwBaGgFF0qj6zKACC aKLalE0ZpY0zNn/iPyQX/Cf9KoDyFpOHSsEswiJ5rCWwppVcsFyogHOemVmeaXlvyDPEipnV ZUkpGP/CCqPu3eD0uDzP7UJ0pt/l/JfW0Xw/4p9mjB024xiRlxLa6vSRfGl//EdtAIbKKa8x 5wsKTQEbYJDmXE3tH/A54DCqRXhcopTlu2iJlTdnIMltn9afVwARAQABzSVNYXR0aGlhcyBG ZWNobmVyIDxpZGVmaXhAZmVjaG5lci5uZXQ+wsGXBBMBCgBBAhsDBQkJZgGABQsJCAcDBRUK CQgLBRYDAgEAAh4BAheAFiEEaWB64mCp804YOtqutot13J/XR+EFAlqcc9gCGQEACgkQtot1 3J/XR+GQyhAAwDxUSg7X2aS1d6rrYUZdDk8rT5TCjayDAyOATdAUhJRZk8qXRNF27Mu6xiOT mIvEMKLagNsitffZs1g/mulRQiDVLloGav7xozSfYlaOYWpPb55wpsugQPLZz0OkU9tzw7j7 7sPPvnAxeqSofUJzQdZzp43aVwXVqsJ3rY0jGzYA5RLS6CBI1RRR8/hHLMxspDPl79IW3GhI HAXaVX1HVJA2oJEo9Y95DnJwX8NV+hvLlUVA2KDdNKFiVJKeV3ccqw+/5zW3Y8J6Rd8blW9n p68Z7lyxt6mvsDEdSxOyGSkPagzIDfHqmDfkaeum7gHMwweH2e2pZuhzMZkrKNoSkKiJ5uim 638ZhnzzmEWh2qtYPgHlZG1jO6n2DSzCqJkQYjYUtLj7ylIgZakG8M3idQRugHImMBq+HSMu WR8FI52gh1+4LbIArHB4YWTTr933ElwhS1jtomK9SeWezPfjunpxqXQl4QR0qXAuglsOMJ6y Togb6lc0qyEdOa5VCXQTLSD9yZpolSQOjOe1XEyM4g5v7FrPBGVni9AxlARvUDVbYQDv1+4A gchtgpLmAF8mDPq/tGeXuAO3m+ExQDXpJ4CneI9YHc+joU2cXQi5MP1NzgMOV43XEZCiTW0O BWM1+857gmDqGbybE7F3UFpvBs9/NRWnuxoKaYxYbqCOc3nOwU0EWpxrVgEQAN3uCLHZF+1V gcrzYjwL1wAJwjYb7UnHKvNYdaBKgW0n0NTfaTCLHxHYPO8NlV1+lNctSeXLeiWpmE1lCDHq /++53EJ34OsRd/n246PdtfIfltML73tsmq6S9zTye2zv7LsmE7jgUBaasbv0qSLSybOUvkRx j3xBuK9Ymg/ZXaENOhxwIQ6oQoNLg3ers9t5Xl4NVK6gzzZ2OdTGnuUVhQmi4rbP04R0GJFh AtGLAYUCxlXVZhdPAs4qZaoAEP5nW/u2MyzSaIouwcEIdttAiPZdrJr+a4OGKz88Sn6zqKSa uyUADgX+G8tKUONgZbfz4SSRvlinOgyU2RyyfNS977r/YfaHH+oAxg31yUWPtD/ryfVw69bG vK8RQrZ9+c1vyWBABoQOh5+JHW/AE9Xj5dQatEfWmGO3+/FRo2TIhqZQXXl8PW+jtEjkhgOH OUX5ERzSm6nCcPIw+LUkEINcLc9bw4fv1eOWIdBuCckGM4rWXkLYbqhdSzdWeCsC0tiQk8x7 O1zXRJOKF4rITJd/qX322EH29BR+T9V1Hw7LDSRe+3YxtoXhROZRXjF8QniEHeKVNRUComr6 rWGmuHjsNTQ7twtwnG8xSOfCkYAp9GrbzBkIYX+VFvFQLqVM+It3RAlge/bwpZPvkr3bFsJk 4JS+EAugBIrP0xd9BMOh6Ej5ABEBAAHCwXwEGAEKACYWIQRpYHriYKnzThg62q62i3Xcn9dH 4QUCWpxrVgIbDAUJCWYBgAAKCRC2i3Xcn9dH4ZZsEACoQI109htphVe2AQhJ7wuPo8pIrSFA 0Mb0pfibX/sYw8ZZz/x3ctTI3Ajq2baSaoebIuUyd6oPI7cAzgL4s2zHiZ3ChH2dDxJlOPfk OaiK124DJMPqWiWuxe39tgq23tsPhwcvF+DC+SkJoLWKCYNC06fS3bLktZ0s4lVE5tqfL5ww MvxgxB+6+sWHwZWSv1IwB/geov6zkEhVdkXqrGPE52LyLfU0ACMmihcl0/npsCMZSls0urge CsPMuHPQnmcM2ERbere8i9OdKQDzGBrTbWl9DxNRf4o+cAYirEJM3Kc+ZD2SE34bTSvg3kdQ QZQbj+o+BRcsR0LaGbORkNaMZlp5OuXteL6nG7sbAPn0bjUUlup8CJEXDXENG6LJG1/oVWFq m3OtPyr5UoMQAuhuGx0/Om6AXKr/mk+veuoKWMXkqll045/bYE7bX2A0gkyGE5DdjaiHPmS9 NsWuKDeExLlXZOL1GX+PKjWLADwlv07XHB8Hf6U0/lpf3/mggRtqHyKbHt0iRqYaMC95gVdM rbugxh61U/zxIaweU7VolD5cRrltxqPp5szOwDzw42JYwbpYsXFJXNkuCGCmK1LHcShfEggt fV3g/JKzvNRQn6p1f0frppl/eZ5UvWVKrNERJzcZgkOecxwiK/L/JoGpGfWOqWGsTxe/AnQc Xxj8Dw== Message-ID: <7415d752-21ab-a397-f90b-afe9945b2585@fechner.net> Date: Sun, 5 Aug 2018 12:01:50 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 10:02:10 -0000 Hi Kyle, sry that it took longer, but I had a harddisk failure and it took some time to resilver the pool to a new disc. Am 16.07.2018 um 19:45 schrieb Kyle Evans: > To be clear- the kernel can't find the zfs pool, or one of the earlier > stages? Giving the pool manually meaning at a mountroot prompt, or > somewhere else? I'm not sure what the problem is. If I update the kernel from 11.1 to 11.2 with freebsd-update and reboot, it could be a kernel panic with an immediate reboot. It is that fast, that it is impossible to see anything on the screen, so I cannot give you a clear error message for this. If I try then to boot the old kernel in the bootloader with: unload load /boot/kernel.working/kernel it is not able to mount the zroot pool. To fix this, I need to boot mfsbsd from an USB stick and do: zpool import -o altroot=3D/mnt zroot cd /mnt tar xjvf boot_111_working.tar.bz2 cd / zpool export zroot reboot > This is for specifically for aarch64, but you've not specifically > mentioned it- you're on aarch64, right? you are right, I'm on a normal amd64 platform. > I think we'll need a little more information about where and > specifically how it's failing for you to determine that. Others have > reported successful upgrades from 11.1 to 11.2 with root-on-ZFS > setups. is it maybe the way the disc are partitioned? I have an empty EFI partition on the harddisk (to have later space for EF= I): gpart show ada0 =3D>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 40=C2=A0 5860533088=C2=A0 = ada0=C2=A0 GPT=C2=A0 (2.7T) =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 40=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 262144=C2=A0=C2=A0=C2=A0=C2=A0 1=C2=A0 efi=C2=A0 (128M) =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 262184=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 512=C2=A0=C2=A0=C2=A0=C2=A0 2=C2=A0 freebsd-boot=C2=A0 (256K= ) =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 262696=C2=A0 5860270424=C2=A0=C2=A0=C2=A0=C2= =A0 3=C2=A0 freebsd-zfs=C2=A0 (2.7T) =C2=A0 5860533120=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 8=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 - free -=C2=A0 (4.0K) The bootloader is correctly installed using: gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 2 ada0 Gru=C3=9F Matthias --=20 "Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the universe trying to produce bigger and better idiots. So far, the universe is winning." -- Rich Cook From owner-freebsd-questions@freebsd.org Sun Aug 5 14:25:31 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 850AD10543B5 for ; Sun, 5 Aug 2018 14:25:31 +0000 (UTC) (envelope-from thor@irk.ru) Received: from mail.irk.ru (mail.irk.ru [195.206.40.175]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 015059140B for ; Sun, 5 Aug 2018 14:25:30 +0000 (UTC) (envelope-from thor@irk.ru) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=irk.ru; s=dkim; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Date:Message-ID :Subject:From:To:Sender:Reply-To:Cc:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=ZddebmDSN42SQPIGQIelOeMfICXp+Tc79fauLkJVtDM=; b=XjMS5/4dwCrfk1zLY1FiSiIRtV hBQPmtZq5Yb/Jp/rHZduwbRzuGHQXd+Y162kXbtpGxSfzaWKWy7ign7COPOUa+wheSkjDcoS7waVx kLkmw+iQokUBMqfHSFSt7SJPVx6LVgbdqP5c+3MjS1iKfqqd8cbrRAivyz00wnE+5cZo=; Received: from [194.176.114.54] (helo=[192.168.1.130]) by mail.irk.ru with esmtpa (Exim 4.89 (FreeBSD)) (envelope-from ) id 1fmJp5-000Odn-Bz for freebsd-questions@freebsd.org; Sun, 05 Aug 2018 22:15:55 +0800 To: freebsd-questions@freebsd.org From: thor Subject: Erase memory on shutdown Message-ID: Date: Sun, 5 Aug 2018 22:24:16 +0800 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 14:25:31 -0000 Hello! Just one paranoid question: How to cause FreeBSD to zero all RAM during shutdown? Thor From owner-freebsd-questions@freebsd.org Sun Aug 5 15:02:43 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2A3781055288 for ; Sun, 5 Aug 2018 15:02:43 +0000 (UTC) (envelope-from johnl@iecc.com) Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "gal.iecc.com", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id CE136925CB for ; Sun, 5 Aug 2018 15:02:42 +0000 (UTC) (envelope-from johnl@iecc.com) Received: (qmail 36771 invoked from network); 5 Aug 2018 15:02:41 -0000 Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTP via TCP6; 05 Aug 2018 15:02:41 -0000 Received: by ary.qy (Postfix, from userid 501) id 1E186200349F8E; Sun, 5 Aug 2018 11:02:40 -0400 (EDT) Date: 5 Aug 2018 11:02:40 -0400 Message-Id: <20180805150241.1E186200349F8E@ary.qy> From: "John Levine" To: freebsd-questions@freebsd.org Cc: thor@irk.ru Subject: Re: Erase memory on shutdown In-Reply-To: Organization: Taughannock Networks X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 15:02:43 -0000 In article you write: >Hello! > >Just one paranoid question: How to cause FreeBSD to zero all RAM during >shutdown? On modern computers, turning the power off should do the trick. From owner-freebsd-questions@freebsd.org Sun Aug 5 15:25:07 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E0DB31055858 for ; Sun, 5 Aug 2018 15:25:06 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4D9F392E46 for ; Sun, 5 Aug 2018 15:25:06 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([92.195.64.203]) by mrelayeu.kundenserver.de (mreue004 [212.227.15.167]) with ESMTPA (Nemesis) id 0Lmyqm-1gR9pc0sma-00h6Vh; Sun, 05 Aug 2018 17:25:04 +0200 Date: Sun, 5 Aug 2018 17:25:03 +0200 From: Polytropon To: thor Cc: freebsd-questions@freebsd.org Subject: Re: Erase memory on shutdown Message-Id: <20180805172503.e2479108.freebsd@edvax.de> In-Reply-To: References: Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:s4Pw1XwWiLog7Hr4CIBu6Nz4z9EfaeGUK9NUFxq9fAez0MEqBI+ 7kyEFESpvzRyeB5hU9B0nNOHZUCCScoOOXYReB4PxTyIqNV352knKP1hSZi9C6Cg2ZTQ1yA wd2WEMTn2Ct+4PFdmy1KEDWlepVMNg1cM6mJFCcHgsC+AqN1d0vBqH8lc2NGGZKFthYJM1o o3xuzqdgZDkkLfq/YMmMg== X-UI-Out-Filterresults: notjunk:1;V01:K0:ty9yPiRORn4=:q5E2zMWZAgb24gPltwYn2V 1S9X6U5r6jNP8u/1caO4HwTpcbWIFAu8kKnKj2pxOltkn0p53UNSdBpkJyXpm1G2K4bJcbG0Z DBYVKrSWEOSajVq2NOP8l+lxknLrwA9YzbYlXQDewREW10X6nZcPtPSrRb4ZHAAJBaPOy1y4w Dzc1vvV/N6bciW+SLAeA8/Z4WespUIxf8TkkDAM2i24Lkgz/h55jGkBjal5mlpCe5q7WjdrlG UddDcxuXXtsTGf6j3Gpbm7Z2cDICkgGJABNUiFfkZRNBHqOQnoap3OVf4ga6wmjqtD+PZKk6S JGK0e8AcKDSfru0ZMKkL/ATn/YRX/uVkj7Bok5RCwF1I+azYG+pNnwPrVNXFeqMjyb+f4pU/n 8Wan03MYBsMH44eSwcTy0TDOIWn0QXpQAL5TRXPsELWGQe0DN0sMR7FVrskzPiwRjxZtyGtw2 axfrJ86IoK5mKelA2AIrIJP2yc/qAkL6DGt9CvennkF7o4c41W1SvSu8WkDxpRc5ufSlZ2HVb hHxmpxb8jWQ2g2sgy1tZpZ5iPAcQFenT9PJ5AKfTCx4HYd5mjOg7ZLsq0LLFQqm6EFV3JDJHj 6bu6r9YzqRDVHtK72PgrEP/fdL1wsYC/mao6mNyu13fjpV6Xl6bpFYhocgy2P8vmMxWsoPYtl wXPgqODCtFHEzR9Qf27cQv/43L+3N9az7vU49LQuVXl2in0QehWQ4dienIzLxgOsx69sQKlgM V5cBe/UoPs8FJoQd X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 15:25:07 -0000 On Sun, 5 Aug 2018 22:24:16 +0800, thor wrote: > Just one paranoid question: How to cause FreeBSD to zero all RAM during > shutdown? This would imply that the kernel would finally have to overwrite itself. How can control over zeroing memory be maintained when the control program itself has been overwritten? That would be the result of the "all" in your requirement. Sure, you could add some code to the final shutdown routines to zero the RAM, which is possible, but not trivial: You need a non-optimized call to memset() using a custom function pointer. static void *(* const volatile memset_ptr)(void *, int, size_t) = memset; static void secure_memzero(void *p, size_t len) { (memset_ptr)(p, 0, len); } void *ram = 0x0; /* RAM start address */ size_t amount = 17179869184UL; /* 16 GB RAM */ secure_menzero(ram, amount); /* ouch */ If you add something like this to the kernel, and make sure your compiler isn't too clever (as to optimize it into a NOP), you're going to crash the whole system without actually being sure that at least a part of the RAM has been zeroed. And even then it might not work as intended. See: http://www.daemonology.net/blog/2014-09-04-how-to-zero-a-buffer.html http://www.daemonology.net/blog/2014-09-05-erratum.html Keep in mind: You're declaring war on intended security mechanisms if you try to do this. :-) However, this is not guaranteed (!) to work, so you cannot be safe. And you must do it from the kernel. You cannot use (a privileged) program like dd to flush /dev/mem and /dev/kmem with /dev/zero output. Your best bet is to assume that RAM will be zeroed as soon as the power-off routine as been completed - no refresh, no content. Not perfectly secure, though... :-) RAM usually isn't zeroed, but marked as "not in use" so it can be overwritten. Address randomization makes it hard to protect where something will appear in RAM, and access to RAM requires certain privileges on a system. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sun Aug 5 15:27:18 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2505B1055934 for ; Sun, 5 Aug 2018 15:27:18 +0000 (UTC) (envelope-from thor@irk.ru) Received: from mail.irk.ru (mail.irk.ru [195.206.40.175]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 9EAC092F31 for ; Sun, 5 Aug 2018 15:27:17 +0000 (UTC) (envelope-from thor@irk.ru) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=irk.ru; s=dkim; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:MIME-Version: Date:Message-ID:From:References:To:Subject:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=+cQzU51QtYvAJrifBstSa1TLyATCeerqD0WAH0LBK0s=; b=eaDoqnqplPaEBx0e29lM5Le1SW P9otPtMC2zoEgAZpFktIL1jbKf8ZXOR/pwDTz9c4IJgIJFlr/hMZyHzjPP/Xc+fZ8rC+/LA3Ogw6X 2/HDqd4nfvz1kagC+BEayS1pqBjhM2lajpYmFB16FoHQKTHLZu16+bj534giFfEMgciw=; Received: from [194.176.114.54] (helo=[192.168.1.130]) by mail.irk.ru with esmtpa (Exim 4.89 (FreeBSD)) (envelope-from ) id 1fmKn0-00052q-JE; Sun, 05 Aug 2018 23:17:50 +0800 Subject: Re: Erase memory on shutdown To: John Levine , freebsd-questions@freebsd.org References: <20180805150241.1E186200349F8E@ary.qy> From: thor Message-ID: <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> Date: Sun, 5 Aug 2018 23:26:11 +0800 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: <20180805150241.1E186200349F8E@ary.qy> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 15:27:18 -0000 https://en.wikipedia.org/wiki/Cold_boot_attack On 08/05/18 23:02, John Levine wrote: > In article you write: >> Hello! >> >> Just one paranoid question: How to cause FreeBSD to zero all RAM during >> shutdown? > On modern computers, turning the power off should do the trick. > > From owner-freebsd-questions@freebsd.org Sun Aug 5 15:42:25 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 628A010560F7 for ; Sun, 5 Aug 2018 15:42:25 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: from mail-it0-x243.google.com (mail-it0-x243.google.com [IPv6:2607:f8b0:4001:c0b::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id EB53C9399C for ; Sun, 5 Aug 2018 15:42:24 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: by mail-it0-x243.google.com with SMTP id v71-v6so14868761itb.3 for ; Sun, 05 Aug 2018 08:42:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-transfer-encoding; bh=K16jKAlxcN9FOoeTZj/FSa1ImFdP++lENMQqiUyuWdA=; b=p2d1nTFrsxl9+z9GePpviWFNLi8/PjxKEivwSmLIz/mIdv86UHRrNx2c8C24VcG7DJ IvkKm/Clr1wnWWXdILCnn+i2ZH4gIEZiMg4R+dIdMkWNp7UJAyv4UhbeyuTNbee0wfiX Qff0NkJKfZ4xqPCmRENhLh6+CZXlNIA6cQ8EuJxy0it8hdjZBviCgLoaqFwmNDur6h9N jatRO99Q4954tuswsi5BLf/J304EE1WNR3vjLd5jmziOYRIeZt8bBX4lKLADZWmVuwbN xlJfzJ5WUxTSkES16XSDv/ZiBeRZG15unnDKz0uy/CGRSelNjYHcpNr6sIuBDtuBPA3P huJw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-transfer-encoding; bh=K16jKAlxcN9FOoeTZj/FSa1ImFdP++lENMQqiUyuWdA=; b=Pabv6VaQskw6HBo4aBbwnmVeqSMWSChQWxHc22tSEeBQhN8cUdjtjhOAm9APwaP7Jp nMMcI7Ms9+5XlzwfBP2p0SbMRP5EGbWMKrlS9BuW6ZwWCuEulMCRE2tPidjYTIL190pK aztV6eJjLPlV1shye7dFxLrUggQ8PGF6qpuRX6a4V3/K494pSUFdaTHmK1Bl2zVxM+mw Y5CRyy7LHQl0XgSiyi7AM7a5LdAO3dGHn7aKwAj8CJVaaKUAF8xUk66N2LRH0uQjIwTv g7LtkV5Kj7Uo4YVRXA1azw+18aH472ks9+0rNX4xk/2XxfuIja4hzPfv3/Wx2QFNoB8z t1tQ== X-Gm-Message-State: AOUpUlEuYIjURQyIoa6QYENiRCr3ttVfpxO8L8skrtpfsmwS2oi/1P1N tp3LgT+8cAvrMRCnJkWVhSdJKOLV X-Google-Smtp-Source: AAOMgpey0KVCjrHvXMUs009auIW7BG2yvhcJBgm/0sHDkaKfNGBkHjPG9G38tikUY0QVpeVe8drYLw== X-Received: by 2002:a24:eb0e:: with SMTP id h14-v6mr13568477itj.69.1533483744113; Sun, 05 Aug 2018 08:42:24 -0700 (PDT) Received: from localhost.localdomain (50-243-4-3-static.hfc.comcastbusiness.net. [50.243.4.3]) by smtp.googlemail.com with ESMTPSA id j78-v6sm2692967itj.44.2018.08.05.08.42.23 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 05 Aug 2018 08:42:23 -0700 (PDT) Message-ID: <5B671AF5.7080701@gmail.com> Date: Sun, 05 Aug 2018 09:42:45 -0600 From: JD User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: Erase memory on shutdown References: <20180805172503.e2479108.freebsd@edvax.de> In-Reply-To: <20180805172503.e2479108.freebsd@edvax.de> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 15:42:25 -0000 On 08/05/2018 09:25 AM, Polytropon wrote: > On Sun, 5 Aug 2018 22:24:16 +0800, thor wrote: >> Just one paranoid question: How to cause FreeBSD to zero all RAM during >> shutdown? > This would imply that the kernel would finally have to > overwrite itself. How can control over zeroing memory > be maintained when the control program itself has been > overwritten? That would be the result of the "all" in > your requirement. > > Sure, you could add some code to the final shutdown > routines to zero the RAM, which is possible, but not > trivial: You need a non-optimized call to memset() > using a custom function pointer. > > static void *(* const volatile memset_ptr)(void *, int, size_t) = memset; > static void secure_memzero(void *p, size_t len) > { > (memset_ptr)(p, 0, len); > } > > void *ram = 0x0; /* RAM start address */ > size_t amount = 17179869184UL; /* 16 GB RAM */ > > secure_menzero(ram, amount); /* ouch */ > > If you add something like this to the kernel, and make > sure your compiler isn't too clever (as to optimize it > into a NOP), you're going to crash the whole system > without actually being sure that at least a part of > the RAM has been zeroed. And even then it might not > work as intended. > > See: > > http://www.daemonology.net/blog/2014-09-04-how-to-zero-a-buffer.html > > http://www.daemonology.net/blog/2014-09-05-erratum.html > > Keep in mind: You're declaring war on intended security > mechanisms if you try to do this. :-) > > However, this is not guaranteed (!) to work, so you > cannot be safe. And you must do it from the kernel. > You cannot use (a privileged) program like dd to > flush /dev/mem and /dev/kmem with /dev/zero output. > > Your best bet is to assume that RAM will be zeroed as soon > as the power-off routine as been completed - no refresh, > no content. Not perfectly secure, though... :-) > > RAM usually isn't zeroed, but marked as "not in use" so > it can be overwritten. Address randomization makes it > hard to protect where something will appear in RAM, and > access to RAM requires certain privileges on a system. > > Just for the heck of it: allocate from contiguous freemem for the program in question, load the program, transfer control to the program which should passed it starting addy, and size, and total mem size. Such a program would work, assuming it is written to watch out for it's addy space, and not overwrite itself. I do not mean to piss off anyone, just wondering about this myself. My question is: currently, if the machine is shut down, (i.e. powered off), does ram keep it's content? If yes, how? for how long? Is it static ram, or does the battery provide the power for the ram to remain refreshed? Cheers, JD From owner-freebsd-questions@freebsd.org Sun Aug 5 15:55:29 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B7F0B10564A4 for ; Sun, 5 Aug 2018 15:55:29 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.20.71]) by mx1.freebsd.org (Postfix) with ESMTP id 60C5793E35 for ; Sun, 5 Aug 2018 15:55:28 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id 2B4C4CB8D4A; Sun, 5 Aug 2018 10:55:22 -0500 (CDT) Received: from 108.68.162.197 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Sun, 5 Aug 2018 10:55:22 -0500 (CDT) Message-ID: <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> In-Reply-To: <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> Date: Sun, 5 Aug 2018 10:55:22 -0500 (CDT) Subject: Re: Erase memory on shutdown From: "Valeri Galtsev" To: "thor" Cc: "John Levine" , freebsd-questions@freebsd.org Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 15:55:29 -0000 On Sun, August 5, 2018 10:26 am, thor wrote: > https://en.wikipedia.org/wiki/Cold_boot_attack > The trouble is that erasing RAM on clean shutdown does not prevent the attacker in the attack as above from still successfully perform the attack. Erasing memory can [only] be designed as a part of clean shutdown. The attack above easily bypasses it just by yanking the power cord, and then cold booting off removable medium. As it was repeated forever: the security begins with physical security of the machine. The last prevents attacker from physical access to the machine. As someone was saying "nothing can stop the guy with the screwdriver" (not quite true, but pretty close). Another route could be encryption of RAM on-the-fly while system runs, yet it is questionable where the encryption key itself is kept to be unaccessible for the attacker in the attack above, and boot of such system may require warm body present. Valeri > > On 08/05/18 23:02, John Levine wrote: >> In article you write: >>> Hello! >>> >>> Just one paranoid question: How to cause FreeBSD to zero all RAM during >>> shutdown? >> On modern computers, turning the power off should do the trick. >> >> > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Sun Aug 5 16:02:16 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E59EF105676A for ; Sun, 5 Aug 2018 16:02:15 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.17.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 61AFA94213 for ; Sun, 5 Aug 2018 16:02:15 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([92.195.64.203]) by mrelayeu.kundenserver.de (mreue102 [212.227.15.183]) with ESMTPA (Nemesis) id 0LfznH-1gIf2l1oGR-00pe6B; Sun, 05 Aug 2018 18:02:12 +0200 Date: Sun, 5 Aug 2018 18:02:12 +0200 From: Polytropon To: JD Cc: freebsd-questions@freebsd.org Subject: Re: Erase memory on shutdown Message-Id: <20180805180212.1cbfd1dc.freebsd@edvax.de> In-Reply-To: <5B671AF5.7080701@gmail.com> References: <20180805172503.e2479108.freebsd@edvax.de> <5B671AF5.7080701@gmail.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:Z4g452ldpWJ07QwEYdQPrEnqe45HWpz8QUzqmgzD3QM55f34Rtz ekjfvWJ7vS4qOK31j/aguyH5ydGrrPdHnylwssb0KC5/dTQkIeTpPvaC84KzOfomLT9Glws lBYqQURumcMuFYO9Uqm3sh2HfkwZc8HFM3bhP8ZX2b9cJVPnamZY/sDP4/i5kRIzvjVS/6h 4oU21YfIyjHJILbUX2MTA== X-UI-Out-Filterresults: notjunk:1;V01:K0:Yfn+rAkxtEw=:nXEmNCLQ0Nxzcs4RGEHfe4 0V+CFXHC4hMuDloUyEy+pbSPAVNay94WeVICOc7VVFkHoOHCJgM1Y01OUNqzhNUc3enzy6irh Bl3eLXwaV7TAlSxN/EwwMxeVbI7J0il4zHrJidClCgSlVdAyfQtLOwuVkIM0jCm/0m9bthtOb n5kAk1OqZlmbWlmjHX5M38ZkxyH3gkXT9BRY1N+i1kviDRfkS/Vp6fscFSAcIzijydiFAqGr9 IAbqp0EODwS98/oBcE82wTl7KubaTKNPQkiyYXLgWDO/Eyky5uoWW7dpmFyUPti+6r2ONFsrU 1NK4GwYcjLmh0dIUgkdTAOPMDyEkA/uvxLxGcyX5dqIyg00IFLQRPk9IBBTJdHlUdU+HEzEXB QP9jPmwOu7X/U0WslDq7OZDIdohKhMBVrA58Pz8tXyDPqs13b62Y0xqdu8tK+uvh/6wDBob8J 6WNo4U3k58cZqccZ8OQ5U//BLPSi1JnO0PEGk0i/F0C9wVViDldE/JqUIVl4vCjxAKSwhfI1Y jyKTUxn5MwpbhqcwzbIC1/WnqKuMFBsmT2W0cU/33zIvdysk5Vg8d2pPXfFtCsYefTE4OR5M4 RqqmjPScrcGQVjfzWU1ARoMbNGgclfh3GbH+5yuludYQzsI+6BfDFEz0JYEtu7uvsC5X8kPlT PGiZ+LDRtkoy9/qtKbp1odYvx0miNH29K/cZBj0UNx09PfhW2fA34nJE8l4hOTegxBzjTOVaf RDtkfZn/29y5E4lM X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 16:02:16 -0000 On Sun, 05 Aug 2018 09:42:45 -0600, JD wrote: > > > On 08/05/2018 09:25 AM, Polytropon wrote: > > On Sun, 5 Aug 2018 22:24:16 +0800, thor wrote: > >> Just one paranoid question: How to cause FreeBSD to zero all RAM during > >> shutdown? > > This would imply that the kernel would finally have to > > overwrite itself. How can control over zeroing memory > > be maintained when the control program itself has been > > overwritten? That would be the result of the "all" in > > your requirement. > > > > Sure, you could add some code to the final shutdown > > routines to zero the RAM, which is possible, but not > > trivial: You need a non-optimized call to memset() > > using a custom function pointer. > > > > static void *(* const volatile memset_ptr)(void *, int, size_t) = memset; > > static void secure_memzero(void *p, size_t len) > > { > > (memset_ptr)(p, 0, len); > > } > > > > void *ram = 0x0; /* RAM start address */ > > size_t amount = 17179869184UL; /* 16 GB RAM */ > > > > secure_menzero(ram, amount); /* ouch */ > > > > If you add something like this to the kernel, and make > > sure your compiler isn't too clever (as to optimize it > > into a NOP), you're going to crash the whole system > > without actually being sure that at least a part of > > the RAM has been zeroed. And even then it might not > > work as intended. > > > > See: > > > > http://www.daemonology.net/blog/2014-09-04-how-to-zero-a-buffer.html > > > > http://www.daemonology.net/blog/2014-09-05-erratum.html > > > > Keep in mind: You're declaring war on intended security > > mechanisms if you try to do this. :-) > > > > However, this is not guaranteed (!) to work, so you > > cannot be safe. And you must do it from the kernel. > > You cannot use (a privileged) program like dd to > > flush /dev/mem and /dev/kmem with /dev/zero output. > > > > Your best bet is to assume that RAM will be zeroed as soon > > as the power-off routine as been completed - no refresh, > > no content. Not perfectly secure, though... :-) > > > > RAM usually isn't zeroed, but marked as "not in use" so > > it can be overwritten. Address randomization makes it > > hard to protect where something will appear in RAM, and > > access to RAM requires certain privileges on a system. > > > > > Just for the heck of it: > allocate from contiguous freemem for the program in question, > load the program, > transfer control to the program which should passed > it starting addy, and size, and total mem size. > Such a program would work, assuming it is written to watch > out for it's addy space, and not overwrite itself. It's not about the program itself. Assume it is run as a user process (by root, for example). It should not overwrite itself, it also should not overwrite the kernel and other system facilities in memory whose removal could cause a kernel crash before the zeroing is complete. That's why I suggested it _could_ be introduced as new code into the kernel, to be performed at the latest stage of system shutdown. > My question is: currently, if the machine is shut down, > (i.e. powered off), does ram keep it's content? Theory: No. Practice: Yes. > If yes, > > how? Capacitive effects? > for how long? Until capacity is drained out. > Is it static ram, or does the battery provide the power > for the ram to remain refreshed? Usually not. During normal operations, RAM is refreshed periodically. This is the 'D' in DRAM - dynamic. The most prominent case of static RAM is core memory. It keeps it content (after magnetization) until the memory is read again. So if you found a core memory matrix with a program in it from 1970, the content could still be in there... :-) So you see, even static RAM needs a refresh (after a read), usually with the values read. There are "suspend to RAM" mechanisms where the RAM is buffered from the PSU (or in case of laptops: from battery) until the power runs out. This means that the computer technically isn't off - it's just that the CPU isn't running, only the controllers for the memory control are performing their normal work. There are also buffer batteries for "critical RAM" that can keep the RAM intact during power outages. But I don't know if they also buffer CPU registers which would be neccessary to resume operations when the power comes back. Also see: https://en.wikipedia.org/wiki/Cold_boot_attack -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sun Aug 5 16:10:58 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 558E81056AC8 for ; Sun, 5 Aug 2018 16:10:58 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0442094455 for ; Sun, 5 Aug 2018 16:10:57 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1533485458; x=1536077458; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:cc:to:from:date:x-thread-info; bh=D6hkpTXbg3M6Byv+/bLNUSkRn7PNfm67ZIvJNWt5kbc=; b=cyr9NEYYT8VTlO66To1S/eDj2zwMEH4L4+8VRQqftRZR6mhvuYfgK1GjjmKgr1NhplVSyOhPfnBn6nZOaj+OVOVBM7YXDmpunXtIBu9ZABG6e7TSGuz95P9DhK3HJoW2L7vcnjCkAtWF8+X/IOd9xlQVnY/O0nEuSAz13rCd/jk= X-Thread-Info: NDI1MC4xMi4xOTUwMDAwMDEzMTU0YTEuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r1.sg.in.socketlabs.com (r1.sg.in.socketlabs.com [142.0.179.11]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Sun, 5 Aug 2018 12:10:50 -0400 Received: from smtp.lan.sohara.org (EMTPY [89.127.62.20]) by r1.sg.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Sun, 5 Aug 2018 12:10:50 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.91 (FreeBSD)) (envelope-from ) id 1fmLcG-000NWe-IX; Sun, 05 Aug 2018 16:10:48 +0000 Date: Sun, 5 Aug 2018 17:10:49 +0100 From: Steve O'Hara-Smith To: freebsd-questions@freebsd.org Cc: Polytropon Subject: Re: Erase memory on shutdown Message-Id: <20180805171049.caf517319d391b429b087852@sohara.org> In-Reply-To: <20180805172503.e2479108.freebsd@edvax.de> References: <20180805172503.e2479108.freebsd@edvax.de> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd11.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 16:10:58 -0000 On Sun, 5 Aug 2018 17:25:03 +0200 Polytropon wrote: > This would imply that the kernel would finally have to > overwrite itself. How can control over zeroing memory > be maintained when the control program itself has been > overwritten? That was a classic exercise from 8080/Z80 days, it may be possible to adapt the technique to more modern processors provided there is still a mode in which 00 is a NOP. The essence of the technique involved setting the stack pointer to top of memory, zeroing a register and then jumping to a loop at the bottom of memory that pushed the register and jumped to zero. The ante-penulitmate step overwrites the jump destination with zero, which it was anyway. The penultimate push overwrites the jump instruction which causes the processor to execute NOPs all the way to top of memory and cycle round to the bottom of memory for the final push which overwrites the push instruction leaving the processor cycling through NOPs forever. -- Steve O'Hara-Smith From owner-freebsd-questions@freebsd.org Sun Aug 5 17:06:00 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 73CDE1057B3B for ; Sun, 5 Aug 2018 17:06:00 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.20.71]) by mx1.freebsd.org (Postfix) with ESMTP id 2746D95E3C for ; Sun, 5 Aug 2018 17:06:00 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id 5712ACB8D4A; Sun, 5 Aug 2018 12:05:59 -0500 (CDT) Received: from 108.68.162.197 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Sun, 5 Aug 2018 12:05:59 -0500 (CDT) Message-ID: <64112.108.68.162.197.1533488759.squirrel@cosmo.uchicago.edu> In-Reply-To: <20180805180212.1cbfd1dc.freebsd@edvax.de> References: <20180805172503.e2479108.freebsd@edvax.de> <5B671AF5.7080701@gmail.com> <20180805180212.1cbfd1dc.freebsd@edvax.de> Date: Sun, 5 Aug 2018 12:05:59 -0500 (CDT) Subject: Re: Erase memory on shutdown From: "Valeri Galtsev" To: "Polytropon" Cc: "JD" , freebsd-questions@freebsd.org Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 17:06:00 -0000 On Sun, August 5, 2018 11:02 am, Polytropon wrote: > On Sun, 05 Aug 2018 09:42:45 -0600, JD wrote: >> >> >> On 08/05/2018 09:25 AM, Polytropon wrote: >> > On Sun, 5 Aug 2018 22:24:16 +0800, thor wrote: >> >> Just one paranoid question: How to cause FreeBSD to zero all RAM >> during >> >> shutdown? >> > This would imply that the kernel would finally have to >> > overwrite itself. How can control over zeroing memory >> > be maintained when the control program itself has been >> > overwritten? That would be the result of the "all" in >> > your requirement. >> > >> > Sure, you could add some code to the final shutdown >> > routines to zero the RAM, which is possible, but not >> > trivial: You need a non-optimized call to memset() >> > using a custom function pointer. >> > >> > static void *(* const volatile memset_ptr)(void *, int, size_t) = >> memset; >> > static void secure_memzero(void *p, size_t len) >> > { >> > (memset_ptr)(p, 0, len); >> > } >> > >> > void *ram = 0x0; /* RAM start address */ >> > size_t amount = 17179869184UL; /* 16 GB RAM */ >> > >> > secure_menzero(ram, amount); /* ouch */ >> > >> > If you add something like this to the kernel, and make >> > sure your compiler isn't too clever (as to optimize it >> > into a NOP), you're going to crash the whole system >> > without actually being sure that at least a part of >> > the RAM has been zeroed. And even then it might not >> > work as intended. >> > >> > See: >> > >> > http://www.daemonology.net/blog/2014-09-04-how-to-zero-a-buffer.html >> > >> > http://www.daemonology.net/blog/2014-09-05-erratum.html >> > >> > Keep in mind: You're declaring war on intended security >> > mechanisms if you try to do this. :-) >> > >> > However, this is not guaranteed (!) to work, so you >> > cannot be safe. And you must do it from the kernel. >> > You cannot use (a privileged) program like dd to >> > flush /dev/mem and /dev/kmem with /dev/zero output. >> > >> > Your best bet is to assume that RAM will be zeroed as soon >> > as the power-off routine as been completed - no refresh, >> > no content. Not perfectly secure, though... :-) >> > >> > RAM usually isn't zeroed, but marked as "not in use" so >> > it can be overwritten. Address randomization makes it >> > hard to protect where something will appear in RAM, and >> > access to RAM requires certain privileges on a system. >> > >> > >> Just for the heck of it: >> allocate from contiguous freemem for the program in question, >> load the program, >> transfer control to the program which should passed >> it starting addy, and size, and total mem size. >> Such a program would work, assuming it is written to watch >> out for it's addy space, and not overwrite itself. > > It's not about the program itself. Assume it is run as > a user process (by root, for example). It should not > overwrite itself, it also should not overwrite the > kernel and other system facilities in memory whose > removal could cause a kernel crash before the zeroing > is complete. > > That's why I suggested it _could_ be introduced as > new code into the kernel, to be performed at the > latest stage of system shutdown. > > > >> My question is: currently, if the machine is shut down, >> (i.e. powered off), does ram keep it's content? > > Theory: No. > > Practice: Yes. > > > >> If yes, >> >> how? > > Capacitive effects? > > > >> for how long? > > Until capacity is drained out. > > > >> Is it static ram, or does the battery provide the power >> for the ram to remain refreshed? > > Usually not. > > During normal operations, RAM is refreshed periodically. > This is the 'D' in DRAM - dynamic. > > The most prominent case of static RAM is core memory. > It keeps it content (after magnetization) until the > memory is read again. So if you found a core memory matrix > with a program in it from 1970, the content could still > be in there... :-) > > So you see, even static RAM needs a refresh (after a > read), usually with the values read. There is one more incarnation of static RAM that has emerged after ferrite core (magnetic) RAM your have described. That static RAM is based on CMOS flip-flops, one flip-flop per one bit of information. Much cheaper dynamic RAM is based on a single (usually PN-junction based N-channel) FET, and the charge of capacitance on its gate is what needs to be refreshed in case of dynamic RAM as it is discharged gradually. Static (CMOS based) RAM keeps its state forever while the power is present, and it almost does not consume power, except when you change the bit/information. Static RAM is [much] more expensive, less dense, that is why in regular computers and servers it is dynamic RAM that is usually used. To the contrary to magnetic RAM mentioned above static (CMOS flip-flop based) RAM is still volatile, however, as it almost doesn't consume power, one would expect (depending on circuit board design), that after the power shuts off, the charge on power lead capacitors is drained really slow, and hence the information in static RAM is preserved for much longer time than that for dynamic RAM. One only needs to power static RAM on before voltage dropped below some low value (could be around 1 volt or less depending on chips). Just my $0.02 Valeri > > There are "suspend to RAM" mechanisms where the RAM > is buffered from the PSU (or in case of laptops: from > battery) until the power runs out. This means that the > computer technically isn't off - it's just that the CPU > isn't running, only the controllers for the memory > control are performing their normal work. > > There are also buffer batteries for "critical RAM" > that can keep the RAM intact during power outages. > But I don't know if they also buffer CPU registers > which would be neccessary to resume operations when > the power comes back. > > > > Also see: > > https://en.wikipedia.org/wiki/Cold_boot_attack > > > > -- > Polytropon > Magdeburg, Germany > Happy FreeBSD user since 4.0 > Andra moi ennepe, Mousa, ... > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Mon Aug 6 00:01:44 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 240FE1062CD0 for ; Mon, 6 Aug 2018 00:01:44 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from mx18-out11.antispamcloud.com (mx18-out11.antispamcloud.com [207.244.64.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7F3A37DDD3 for ; Mon, 6 Aug 2018 00:01:40 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from [153.92.8.106] (helo=srv31.niagahoster.com) by mx15.antispamcloud.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1fmSbg-0007Hv-EA; Mon, 06 Aug 2018 01:38:42 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sumeritec.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:References:In-Reply-To:Message-ID:Subject:Cc:To:From:Date:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=vZEZ09A/vDb10RZH4/j+BJuRYsXN0xHMYgOImPQMrTs=; b=bUeEffMwU88z71StqNCByvCkN3 PKKjKmWeQ374p1QFhbeQ8CF36GfbUM97UyzYf9PKQ2xXghwe3HrOWou0XBYfe00JG78Hn0FogwkZr dLQrtDCRaW9IE5bDD4RH8G/3K+dFMbebcgRPLUm2oEi2sJgsBM+DBh/cwfpqVYbUoZaNo1e+MY+3M x2sP6JhwfMGXA6x5uLzDZuMgArjxs30x/fN3MixfgtZFG9XPPQAs1BDKLGiHE/YrnsI2QM/WNSw5F rY8CLTudi0cLRN19SXoHhvWzo4OnJ5dasoqlpcJdO7VjnPUuwLtqZ6jfyeN+okbp6jV/CR0JBcB6Q IUkustuA==; Received: from [114.125.101.37] (port=62888 helo=X220.sumeritec.com) by srv31.niagahoster.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.91) (envelope-from ) id 1fmSal-0004M1-L1; Mon, 06 Aug 2018 06:37:49 +0700 Date: Mon, 6 Aug 2018 07:37:38 +0800 From: Erich Dollansky To: "Valeri Galtsev" Cc: "thor" , John Levine , freebsd-questions@freebsd.org Subject: Re: Erase memory on shutdown Message-ID: <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> In-Reply-To: <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-OutGoing-Spam-Status: No, score=-1.0 X-AuthUser: freebsd.ed.lists@sumeritec.com X-Originating-IP: 153.92.8.106 X-AntiSpamCloud-Domain: out.niagahoster.com X-AntiSpamCloud-Username: niaga Authentication-Results: antispamcloud.com; auth=pass (login) smtp.auth=niaga@out.niagahoster.com X-AntiSpamCloud-Outgoing-Class: unsure X-AntiSpamCloud-Outgoing-Evidence: Combined (0.18) X-Recommended-Action: accept X-Filter-ID: EX5BVjFpneJeBchSMxfU5k18NKsG0bJTCL6LQKbVBzR602E9L7XzfQH6nu9C/Fh9KJzpNe6xgvOx q3u0UDjvO4tahSjmvbpC6SffUwszkaQoekHjgdN0MN/R//OL2klI6QfZqUsLgaNU4fx2d2P+zoAO KI1ohvD3kl+HA2eBxziLgKiJBYOdvwgXXOy76+xU6wfg8vT+XAnJl/ojPOy5amqklkdwrUfTBCKW oHQemSw6SjyPDLFObViUDdwIjZscPvAIAMvPzDIKitdp0Mier18I6FsEm9Qm8gzENkQDVyjp6iWL 0YXvV/td8dqrVBZRfup71SJSX9zQUdHLM9BT4x4lKI+w0u4tRdvwMI3/1UZhXvWmHmSFwby0zKpf dCnuNFR+qm8qpsZIXWJsDNfzuDVcbwW2vZRbwlTsaou4YdmAy4ttVo5hfg1RuA36kfDFTDPE+/o6 V5hyODMBsh5sWG4kgtLz+aqG1Sh64ItoIsiFoLZMmkWsaurVZfvqROaDnDtHb8z5dpPkEuJ8Snwq lUrBK2R/GBg9vCpMGFHw53Fr4cNy1JnJbwJHzU/ilAIU0bm2vWdo8usP65i82q1CdZgGrpL44wdx 9eXqjQjbvUopOMQJvQ/Ck3iiU+4DQAj3GNzuDYShTgJXRSnxjodGfg8pcALCO6t79EHseB4MPsfT 5z1aUDmARVoXNcQpQ3gQ8L19+xsR5GnyndnCG481YPoZ7DiMfbbrbhteoOPScTpuxByiWUpvbkf1 geplb5dFElW4He62UK36cJgZsodAVWlOy+ZEjcSikqflWGK4H7sZ45M2CZNXCLi0s8OXu4ziZp+O yVb6/hXcl/gtvrzbLmbjO41FyBEqIaDudcVplPHk4V0BuG2Fe3G6qvOdkPYIiZG7a8YemdKrbDJV Q8g9ALl7ifFHkyaAMXn44Jcv0MTQphP3lFBPIlXFywfcSXgU3jR5NeVaJQBh0uawl0Cg8kc29B8C MgOm1ds1Ktp2dLRmqbSY50+XUt5RM2aRi0FOhMAP+Vqo0mDOjOjMahxwmpVeOGYnG/Abl3llRaIJ yDF7Om4j0ggKwIoD+nrq/t+H X-Report-Abuse-To: spam@quarantine1.antispamcloud.com X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 00:01:44 -0000 Hi, On Sun, 5 Aug 2018 10:55:22 -0500 (CDT) "Valeri Galtsev" wrote: > On Sun, August 5, 2018 10:26 am, thor wrote: > > https://en.wikipedia.org/wiki/Cold_boot_attack > > > > The trouble is that erasing RAM on clean shutdown does not prevent the > attacker in the attack as above from still successfully perform the so, ECC is also here the only possible answer, at least for parts of it. Still, erasing memory when shutting down helps in some cases. I do this on my machines for small parts when a shutdown is detected. It makes at least the most obvious attacks from that side difficult. Erich From owner-freebsd-questions@freebsd.org Mon Aug 6 00:10:08 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D10D31063485 for ; Mon, 6 Aug 2018 00:10:08 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.20.71]) by mx1.freebsd.org (Postfix) with ESMTP id 75F207E2DB for ; Mon, 6 Aug 2018 00:10:08 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id 6353ACB8D4A; Sun, 5 Aug 2018 19:10:07 -0500 (CDT) Received: from 108.68.162.197 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Sun, 5 Aug 2018 19:10:07 -0500 (CDT) Message-ID: <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> In-Reply-To: <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> Date: Sun, 5 Aug 2018 19:10:07 -0500 (CDT) Subject: Re: Erase memory on shutdown From: "Valeri Galtsev" To: "Erich Dollansky" Cc: "Valeri Galtsev" , "John Levine" , freebsd-questions@freebsd.org, "thor" Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 00:10:09 -0000 On Sun, August 5, 2018 6:37 pm, Erich Dollansky wrote: > Hi, > > On Sun, 5 Aug 2018 10:55:22 -0500 (CDT) > "Valeri Galtsev" wrote: > >> On Sun, August 5, 2018 10:26 am, thor wrote: >> > https://en.wikipedia.org/wiki/Cold_boot_attack >> > >> >> The trouble is that erasing RAM on clean shutdown does not prevent the >> attacker in the attack as above from still successfully perform the > > so, ECC is also here the only possible answer, at least for parts of it. > > Still, erasing memory when shutting down helps in some cases. I do this > on my machines for small parts when a shutdown is detected. It makes at > least the most obvious attacks from that side difficult. Please, correct me if I am wrong in the following: If the attacker yanks off the power cord, then cold boots off his media, your defense/erasure of memory does not protect you against this attack. Right? Your defense only helps if the attacker does clean shutdown. Right? Thanks. Valeri > > Erich ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Mon Aug 6 01:53:09 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9969F1065EFC for ; Mon, 6 Aug 2018 01:53:09 +0000 (UTC) (envelope-from thor@irk.ru) Received: from mail.irk.ru (mail.irk.ru [195.206.40.175]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1F5F181816 for ; Mon, 6 Aug 2018 01:53:09 +0000 (UTC) (envelope-from thor@irk.ru) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=irk.ru; s=dkim; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:MIME-Version: Date:Message-ID:From:References:To:Subject:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=o/Tv5bzff5vK/oLosXd0F8LsnU6sEOs1BZctq7Qn65E=; b=WY5AwJfHOomxOojZEo7mtPi1DX W/TcqpnPzf9+dLAul9jfaRMqSZx8fJp5EY1momnk2jjNzSkjQ6ErGmT7WYLiv8AY/Hn/su+pr5YR0 4+fR08DyF01ebiJMvalCZef3iGzVBD2hrzXtR2BrTL/hpLwX9FykeMs1jJjlucx10MT4=; Received: from [194.176.114.54] (helo=[192.168.1.130]) by mail.irk.ru with esmtpa (Exim 4.89 (FreeBSD)) (envelope-from ) id 1fmUYf-000L31-2W for freebsd-questions@freebsd.org; Mon, 06 Aug 2018 09:43:41 +0800 Subject: Re: Erase memory on shutdown To: freebsd-questions@freebsd.org References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> From: thor Message-ID: <5f673fdc-4dd8-663a-605a-6b7cdce5206d@irk.ru> Date: Mon, 6 Aug 2018 09:52:01 +0800 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 01:53:09 -0000 For any level of physical protection there is an adversary that could breach it. So the first stage of protection is physical one, the second is the breach detection that initiates clean shutdown. Problem is to erase everything on this shutdown. Or maybe I should start a reboot that hangs on "Enter passphrase for /dev/ada0p3.eli" and erases the memory in the process? On 08/06/18 08:10, Valeri Galtsev wrote: > > Please, correct me if I am wrong in the following: > > If the attacker yanks off the power cord, then cold boots off his media, > your defense/erasure of memory does not protect you against this attack. > Right? Your defense only helps if the attacker does clean shutdown. Right? > From owner-freebsd-questions@freebsd.org Mon Aug 6 02:31:05 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0F4271066A9D for ; Mon, 6 Aug 2018 02:31:05 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.20.71]) by mx1.freebsd.org (Postfix) with ESMTP id B52AA8281D for ; Mon, 6 Aug 2018 02:31:04 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id 09E40CB8D4A; Sun, 5 Aug 2018 21:31:03 -0500 (CDT) Received: from 108.68.162.197 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Sun, 5 Aug 2018 21:31:03 -0500 (CDT) Message-ID: <59554.108.68.162.197.1533522663.squirrel@cosmo.uchicago.edu> In-Reply-To: <5f673fdc-4dd8-663a-605a-6b7cdce5206d@irk.ru> References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> <5f673fdc-4dd8-663a-605a-6b7cdce5206d@irk.ru> Date: Sun, 5 Aug 2018 21:31:03 -0500 (CDT) Subject: Re: Erase memory on shutdown From: "Valeri Galtsev" To: "thor" Cc: freebsd-questions@freebsd.org Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 02:31:05 -0000 On Sun, August 5, 2018 8:52 pm, thor wrote: > For any level of physical protection there is an adversary that could > breach it. So the first stage of protection is physical one, Exactly. That is what I said in my first reply in this thread. However that part was creatively edited away by someone, that is why I personally dislike editing away portions of other people posts. Creative editing, BTW, can totally change what the person actually said. Yes, it was repeated forever that security begins with physical security. And repeating again what my friend likes to say: nothing can stop the guy wit the screwdriver. Not quite true, but pretty close. Valeri > the second > is the breach detection that initiates clean shutdown. Problem is to > erase everything on this shutdown. > > Or maybe I should start a reboot that hangs on "Enter passphrase for > /dev/ada0p3.eli" and erases the memory in the process? > > > > On 08/06/18 08:10, Valeri Galtsev wrote: >> >> Please, correct me if I am wrong in the following: >> >> If the attacker yanks off the power cord, then cold boots off his media, >> your defense/erasure of memory does not protect you against this attack. >> Right? Your defense only helps if the attacker does clean shutdown. >> Right? >> > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Mon Aug 6 02:38:13 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 392B81066BF9 for ; Mon, 6 Aug 2018 02:38:13 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from out2-4.antispamcloud.com (out2-4.antispamcloud.com [185.201.17.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A3C3D82A4D for ; Mon, 6 Aug 2018 02:38:12 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from [153.92.8.106] (helo=srv31.niagahoster.com) by mx18.antispamcloud.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1fmVOX-0007WT-2w; Mon, 06 Aug 2018 04:37:39 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sumeritec.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:References:In-Reply-To:Message-ID:Subject:Cc:To:From:Date:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=oGblWFM0Brin6nN/Nj1Uz6oSIqw9ohGLLRDDd0s+9qc=; b=OorkDyeEBHLcwXMLJfq5bnjfnc KBztv075cuX04/T0Yr+VfWYZw6cRa2oGRDZdnVPTnTiNryvGGhLenDIWQZ8wWmQMPbxlxCF1DmNEM /fPGiQrToiLeBkk/T8rwYrOOq+QuUQbc/M+T7rMaxj416PYRJ4j2ZZWrLR9IpnexEwZuhF5WvZuSS /eq5gimCF9Gy4nPWtCdegKWvIzNKeMB6dlo03DW6nMCC1V1s/0c2ULUFNbvWY6idipBhu7IaCT4TS o+2n+hUPl6uXuykPAudX2jlk7EKlCpav/4VvigKg2UVamgVh7m82wnAEu4L9WoiRAnRxwYk4WsrKW VYrwE95Q==; Received: from [114.125.100.174] (port=19122 helo=X220.sumeritec.com) by srv31.niagahoster.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.91) (envelope-from ) id 1fmVNd-0006qd-DZ; Mon, 06 Aug 2018 09:36:26 +0700 Date: Mon, 6 Aug 2018 10:36:19 +0800 From: Erich Dollansky To: "Valeri Galtsev" Cc: "John Levine" , freebsd-questions@freebsd.org, "thor" Subject: Re: Erase memory on shutdown Message-ID: <20180806103619.3c8b4cf0.freebsd.ed.lists@sumeritec.com> In-Reply-To: <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-OutGoing-Spam-Status: No, score=-1.0 X-AuthUser: freebsd.ed.lists@sumeritec.com X-Originating-IP: 153.92.8.106 X-AntiSpamCloud-Domain: out.niagahoster.com X-AntiSpamCloud-Username: niaga Authentication-Results: antispamcloud.com; auth=pass (login) smtp.auth=niaga@out.niagahoster.com X-AntiSpamCloud-Outgoing-Class: unsure X-AntiSpamCloud-Outgoing-Evidence: Combined (0.22) X-Recommended-Action: accept X-Filter-ID: EX5BVjFpneJeBchSMxfU5imNZHrEgM2wzS7FIShyFAB602E9L7XzfQH6nu9C/Fh9KJzpNe6xgvOx q3u0UDjvO4tahSjmvbpC6SffUwszkaQoekHjgdN0MN/R//OL2klIQpapxQyr3aXZBxAYcsHeymPv RVMsPDWj/eiDHU9bUGer48C+/LzRqVzELXf1NLUsVj1GwrTRQhZ/qKns5WOSezdTaJafGI+CYWuC M7xZNUAr5pMCM9L7hCJeKtIuVw6OPvAIAMvPzDIKitdp0Mier18I6FsEm9Qm8gzENkQDVyhQj98O h/1UnJiZW4Ej0Leyfup71SJSX9zQUdHLM9BT4x4lKI+w0u4tRdvwMI3/1UZhXvWmHmSFwby0zKpf dCnuNFR+qm8qpsZIXWJsDNfzuDVcbwW2vZRbwlTsaou4YdmAy4ttVo5hfg1RuA36kfDFTDPE+/o6 V5hyODMBsh5sWG4kgtLz+aqG1Sh64ItoIsiFoLZMmkWsaurVZfvqROaDnDtHb8z5dpPkEuJ8Snwq lUrBK2R/GBg9vCpMGFHw53Fr4cNy1JnJbwJHzU/ilAIU0bm2vWdo8usP65i82q1CdZgGrpL44wdx 9eXqjQjbvUopOMQJvQ/Ck3iiU+4DQAj3GNzuDYShTgJXRSnxjodGfg8pcALCO6t79EHseB4MPscw OD05KKuwnw+ScZFuiYcmsdaeC1BLLNyTzok8P7rc9foZ7DiMfbbrbhteoOPScTpuxByiWUpvbkf1 geplb5dFElW4He62UK36cJgZsodAVWlOy+ZEjcSikqflWGK4H7uwZE8mMEcTU/tUBAzDlPmrof1M W/fmJUtVdrkCcLC2SWbjO41FyBEqIaDudcVplPHk4V0BuG2Fe3G6qvOdkPYIiZG7a8YemdKrbDJV Q8g9ALl7ifFHkyaAMXn44Jcv0MTQphP3lFBPIlXFywfcSXgU3jR5NeVaJQBh0uawl0Cg8kc29B8C MgOm1ds1Ktp2dLRmqbSY50+XUt5RM2aRi0FOhMAP+Vqo0mDOjOjMahxwmpVeOGYnG/Abl3llRaIJ yDF7Om4j0ggKwIoD+nrq/t+H X-Report-Abuse-To: spam@quarantine1.antispamcloud.com X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 02:38:13 -0000 Hi, On Sun, 5 Aug 2018 19:10:07 -0500 (CDT) "Valeri Galtsev" wrote: > On Sun, August 5, 2018 6:37 pm, Erich Dollansky wrote: > > Hi, > > > > On Sun, 5 Aug 2018 10:55:22 -0500 (CDT) > > "Valeri Galtsev" wrote: > > > >> On Sun, August 5, 2018 10:26 am, thor wrote: > >> > https://en.wikipedia.org/wiki/Cold_boot_attack > >> > > >> > >> The trouble is that erasing RAM on clean shutdown does not prevent > >> the attacker in the attack as above from still successfully > >> perform the > > > > so, ECC is also here the only possible answer, at least for parts > > of it. > > > > Still, erasing memory when shutting down helps in some cases. I do > > this on my machines for small parts when a shutdown is detected. It > > makes at least the most obvious attacks from that side difficult. > > Please, correct me if I am wrong in the following: > > If the attacker yanks off the power cord, then cold boots off his > media, your defense/erasure of memory does not protect you against > this attack. Right? Your defense only helps if the attacker does > clean shutdown. Right? > what is the difference between 'some cases' and 'all cases'? If the owner of a machine is not able to stop physical access to a machine, there will be other ways to attack it. Shutting down a machine allows a normal owner of the machine to wait at the location as most owners are not on the run. Erich From owner-freebsd-questions@freebsd.org Mon Aug 6 03:58:52 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1A2FF10683E8 for ; Mon, 6 Aug 2018 03:58:52 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.20.71]) by mx1.freebsd.org (Postfix) with ESMTP id BAE7885737 for ; Mon, 6 Aug 2018 03:58:51 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id 2C64ECB8D4A; Sun, 5 Aug 2018 22:58:51 -0500 (CDT) Received: from 108.68.162.197 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Sun, 5 Aug 2018 22:58:50 -0500 (CDT) Message-ID: <62311.108.68.162.197.1533527930.squirrel@cosmo.uchicago.edu> In-Reply-To: <20180806103619.3c8b4cf0.freebsd.ed.lists@sumeritec.com> References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> <20180806103619.3c8b4cf0.freebsd.ed.lists@sumeritec.com> Date: Sun, 5 Aug 2018 22:58:50 -0500 (CDT) Subject: Re: Erase memory on shutdown From: "Valeri Galtsev" To: "Erich Dollansky" Cc: "Valeri Galtsev" , "John Levine" , freebsd-questions@freebsd.org, "thor" Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 03:58:52 -0000 On Sun, August 5, 2018 9:36 pm, Erich Dollansky wrote: > Hi, > > On Sun, 5 Aug 2018 19:10:07 -0500 (CDT) > "Valeri Galtsev" wrote: > >> On Sun, August 5, 2018 6:37 pm, Erich Dollansky wrote: >> > Hi, >> > >> > On Sun, 5 Aug 2018 10:55:22 -0500 (CDT) >> > "Valeri Galtsev" wrote: >> > >> >> On Sun, August 5, 2018 10:26 am, thor wrote: >> >> > https://en.wikipedia.org/wiki/Cold_boot_attack >> >> > >> >> >> >> The trouble is that erasing RAM on clean shutdown does not prevent >> >> the attacker in the attack as above from still successfully >> >> perform the >> > >> > so, ECC is also here the only possible answer, at least for parts >> > of it. >> > >> > Still, erasing memory when shutting down helps in some cases. I do >> > this on my machines for small parts when a shutdown is detected. It >> > makes at least the most obvious attacks from that side difficult. >> >> Please, correct me if I am wrong in the following: >> >> If the attacker yanks off the power cord, then cold boots off his >> media, your defense/erasure of memory does not protect you against >> this attack. Right? Your defense only helps if the attacker does >> clean shutdown. Right? >> > what is the difference between 'some cases' and 'all cases'? > > If the owner of a machine is not able to stop physical access to a > machine, there will be other ways to attack it. Shutting down a machine > allows a normal owner of the machine to wait at the location as most > owners are not on the run. I do understand every word, but I'm not certain I quite follow what you are saying. On the other hand, I have a feeling that we all are on the same page about physical security. Other nuances of what we do on our machines may be different, and probably will stay without change for each of us. This might be the case when participants of the discussion don't learn any wisdom from each other, and there is nothing wrong about it. Thanks. Valeri > > Erich ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Mon Aug 6 04:03:57 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4C7CF10686E9 for ; Mon, 6 Aug 2018 04:03:57 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.20.71]) by mx1.freebsd.org (Postfix) with ESMTP id E22F885C3C for ; Mon, 6 Aug 2018 04:03:56 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id 5AD4BCB8D4A; Sun, 5 Aug 2018 23:03:56 -0500 (CDT) Received: from 108.68.162.197 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Sun, 5 Aug 2018 23:03:56 -0500 (CDT) Message-ID: <62318.108.68.162.197.1533528236.squirrel@cosmo.uchicago.edu> In-Reply-To: <20180806103619.3c8b4cf0.freebsd.ed.lists@sumeritec.com> References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> <20180806103619.3c8b4cf0.freebsd.ed.lists@sumeritec.com> Date: Sun, 5 Aug 2018 23:03:56 -0500 (CDT) Subject: Re: Erase memory on shutdown From: "Valeri Galtsev" To: "Erich Dollansky" Cc: "Valeri Galtsev" , "John Levine" , freebsd-questions@freebsd.org, "thor" Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 04:03:57 -0000 On Sun, August 5, 2018 9:36 pm, Erich Dollansky wrote: > Hi, > > On Sun, 5 Aug 2018 19:10:07 -0500 (CDT) > "Valeri Galtsev" wrote: > >> On Sun, August 5, 2018 6:37 pm, Erich Dollansky wrote: >> > Hi, >> > >> > On Sun, 5 Aug 2018 10:55:22 -0500 (CDT) >> > "Valeri Galtsev" wrote: >> > >> >> On Sun, August 5, 2018 10:26 am, thor wrote: >> >> > https://en.wikipedia.org/wiki/Cold_boot_attack >> >> > >> >> >> >> The trouble is that erasing RAM on clean shutdown does not prevent >> >> the attacker in the attack as above from still successfully >> >> perform the >> > >> > so, ECC is also here the only possible answer, at least for parts >> > of it. >> > >> > Still, erasing memory when shutting down helps in some cases. I do >> > this on my machines for small parts when a shutdown is detected. It >> > makes at least the most obvious attacks from that side difficult. >> >> Please, correct me if I am wrong in the following: >> >> If the attacker yanks off the power cord, then cold boots off his >> media, your defense/erasure of memory does not protect you against >> this attack. Right? Your defense only helps if the attacker does >> clean shutdown. Right? >> > what is the difference between 'some cases' and 'all cases'? > > If the owner of a machine is not able to stop physical access to a > machine, there will be other ways to attack it. Shutting down a machine > allows a normal owner of the machine to wait at the location as most > owners are not on the run. I do understand every word, but I'm not certain I quite follow what you are saying. On the other hand, I have a feeling that we all are on the same page about physical security. Other nuances of what we do on our machines may be different, and probably will stay without change for each of us. This might be the case when participants of the discussion don't learn any wisdom from each other, and there is nothing wrong about it. Thanks. Valeri > > Erich ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Mon Aug 6 13:44:57 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 86A99105941C for ; Mon, 6 Aug 2018 13:44:57 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [217.72.192.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E5AB878FFD for ; Mon, 6 Aug 2018 13:44:56 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([92.195.64.203]) by mrelayeu.kundenserver.de (mreue103 [212.227.15.183]) with ESMTPA (Nemesis) id 0MPIxM-1fr3Vm3J7g-004VRv; Mon, 06 Aug 2018 15:43:50 +0200 Date: Mon, 6 Aug 2018 15:43:45 +0200 From: Polytropon To: galtsev@kicp.uchicago.edu Cc: "Erich Dollansky" , John Levine , thor , freebsd-questions@freebsd.org Subject: Re: Erase memory on shutdown Message-Id: <20180806154345.3243e993.freebsd@edvax.de> In-Reply-To: <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:Wva1nP9mK9sZ5MXfoJQzoyh3sheMLa0npP+Wg8VuctNLEtoqC3T 9uI69ZhwIxrelTskNc2lhHzaUrBO6CpGJYQ1I5lE+mcAATnCVy/iiKoxHoEzTZ4wU13e1uk 9kzkQGBW7tDtFZSglDjODlWSGO51yjrSdlHWox2QInHCebPn+x2BKh277lWR6VuwNy8NfWz CHZ1znCTb26X6MGtl60+Q== X-UI-Out-Filterresults: notjunk:1;V01:K0:WRhxyQ8SbHw=:IQFGWsYmPkz9McaBR8aJMR aFf+3Kk02uocki3WPaEZ/WlrrCa7EMcMe5HwsWtC9Xrb9XEA7vGre6PnyU76xpS3wIxh7MmRP DgAVbHL6jPfDUC5oTR8gFhPeMja5qpsoY4ZozdAwd5gZsEjPGnwpOEcvQSkVgyCBR40rTHL+V lGuTbADF9mSOtEVgOpob+ZvxmKjmV0jnSxYCVVJs5GymKeUe4hin0uhOxSR9Ez6TdYI7+/LbC vgxCWUkG4IIjtgKUAUn6I4ZjcGI/KPMelfqAPaRhJxKRdMGgdwwGonEaZ0IEtrcLlAJv00NS2 9lxk/KNP9kWNGCUAYuz1sOVSFViDmWDc7NOvByud2ScbFSPUtUdV/Z/MgVdqB6PCCyRDk22Pj Twrax5zZ0oCK927Fp+dpqnQGAE4N53awAad5bjHB57oUQLE9nBhgHOaCvim1yFYykZ6bUwytP f9R3O7Guvd6K4G1Q4IS9t+80m4iHBIe2/z7HF2mS/j8MJp1LW26/v5yRNs142tYneSl2zDqeS g+sfOFvNqUHO+MfcRhVvYYk0SFhD/RC7695Pc9nHCC4QbYNp92nYCdapK9sDgZLxwrLjXVfG5 0f/sUWQkjKIUcQJepIRJSGcwSJhCSqJ3xxkE9xs+VrwlVRYytGtQ/ZEYLJywujclTicds4TsG jqJcm5Vu5aiFJal3hwJfVG6GyLGMY40nZGAvKVmtCH2yK5HXNFoFDcHxHJ/DZUzmUIiHkGw2h XlWUw2lQGpCLGmvb X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 13:44:57 -0000 On Sun, 5 Aug 2018 19:10:07 -0500 (CDT), Valeri Galtsev wrote: > > On Sun, August 5, 2018 6:37 pm, Erich Dollansky wrote: > > Hi, > > > > On Sun, 5 Aug 2018 10:55:22 -0500 (CDT) > > "Valeri Galtsev" wrote: > > > >> On Sun, August 5, 2018 10:26 am, thor wrote: > >> > https://en.wikipedia.org/wiki/Cold_boot_attack > >> > > >> > >> The trouble is that erasing RAM on clean shutdown does not prevent the > >> attacker in the attack as above from still successfully perform the > > > > so, ECC is also here the only possible answer, at least for parts of it. > > > > Still, erasing memory when shutting down helps in some cases. I do this > > on my machines for small parts when a shutdown is detected. It makes at > > least the most obvious attacks from that side difficult. > > Please, correct me if I am wrong in the following: > > If the attacker yanks off the power cord, then cold boots off his media, > your defense/erasure of memory does not protect you against this attack. > Right? Your defense only helps if the attacker does clean shutdown. Right? Clearing memory at shutdown time won't happen when shutdown time doesn't take place. Many cold boot attacks rely on surprisingly (!) interrupting the power, which implies physical access, and then booting from a custom media, so even clearing memory at startup time doesn't happen. All those precautions only work when physical access is taken out of consideration. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Mon Aug 6 13:50:31 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AFEC810595F8 for ; Mon, 6 Aug 2018 13:50:31 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.17.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 11ACC79163 for ; Mon, 6 Aug 2018 13:50:30 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([92.195.64.203]) by mrelayeu.kundenserver.de (mreue105 [212.227.15.183]) with ESMTPA (Nemesis) id 0MGi3N-1fiZIm3XFZ-00DUgl; Mon, 06 Aug 2018 15:50:17 +0200 Date: Mon, 6 Aug 2018 15:50:16 +0200 From: Polytropon To: galtsev@kicp.uchicago.edu Cc: "thor" , freebsd-questions@freebsd.org Subject: Re: Erase memory on shutdown Message-Id: <20180806155016.8214e603.freebsd@edvax.de> In-Reply-To: <59554.108.68.162.197.1533522663.squirrel@cosmo.uchicago.edu> References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> <5f673fdc-4dd8-663a-605a-6b7cdce5206d@irk.ru> <59554.108.68.162.197.1533522663.squirrel@cosmo.uchicago.edu> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:YaqP9Le4ilrP0vSB22UhIEIzaEhf4wqdvzzT/CzpLJm+aWcA7/f a0JAGpQeV5iCZWLrLclis4KQK75Dj8C0BlRGK0cqp761ej51PWMSFoKYYOWq5NOzUIYb06n xQCZ89oEi0ulfQgmqbqZ6nhD3gA0s+PdesyouIjMgWNoi9wi2U8/D63Ph6uhvdkntNawUds 98iHi2MvHEAxWvqV/2m8A== X-UI-Out-Filterresults: notjunk:1;V01:K0:OaIxjRML3AM=:wRy2DLmdvxZVzxwxMmqi9v tnxUoNC44A4bu6yrnKoRc8wciy4FeAJkHVmQ3McE0TB2Z5dh8yoMFgOHkW+5FH5BdD6eop9MZ Hu1NGWUtsnpeHxzu6NzIx2Of9rZYlJi6noow5aO51Fmz7/ydzqpnOaug5Atltao7AhdzgpnlJ YBHpsy2zH8aukPIhDEaL76zUqE5r4K21N9W2/bTco/SvF3dfu7we8QpmhvfIa9C/rxLyFRSyj RUnxS3vNPucQECne37oXfL5JJ+Xhu8F1Blp9thP4cqMYkrjJ2y3G4ykltuih7L/3FPSpJrdyQ mCBw40A0487ERP/IJBFVkVptAStwdXnO+zOyBhX2IANjsj2wDzhX3YaPuFm+Ckd6hGXveUOyA 18a8qpKahDp65FU34qykXuvHRoKk/6Sixv6hVqzW+PXCOfPRoX+EDqQynMreVZlw3A6c1GQ5R Wyipx+1p3fHtap6f9lrHMPtNf9aSIWoLwHxMH7uYqSHCrWsLI61n8tR0rq6l4E28RB/BTF4Wo pcjiJiIlyeDOxtIUlgRi5NFWLTT0gzXbAZ18DVch4i/kZ9LBf4rSkKh4UNcg11lhkgB0o8Gkl ijrp6tr1meRA7Xsum5BelLM898FcJGDDhHMGkWVukhSznxNik2Rd5Cc5RtkfK7krP+HFkGelE gukCYZgKYTTIGC6UkyoVwo4tHrqnyWKfeN19ezNV4cZY9mEqz72JFWhVLWNmBGhjwizhuzus+ zE3dDCWxQg8Ky1D0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 13:50:31 -0000 On Sun, 5 Aug 2018 21:31:03 -0500 (CDT), Valeri Galtsev wrote: > Yes, it was repeated forever that security begins with physical security. > And repeating again what my friend likes to say: nothing can stop the guy > wit the screwdriver. Not quite true, but pretty close. In this context, even encrypted partitions sometimes don't help. Things that actually have happened: 1. A thief stole the server of a small business. They had encryption in place, and because their HPC told them that keys should be used, they stored keys on a USB stick that was put in the font USB connector of the server, because their HPC said it was very convenient to do so, as the server found the keys when booting and could then enable access to the encrypted disk. GAME OVER. 2. A group of theves stole the whole server rack, including the UPS units, attached them to a power generator in their van, drove it to the "extraction site" which had regular power, re-attached regular power, and copied everything from the still running system without being hit by any "please enter the password" dialogs. GAME OVER. The guy with the screwdriver usually wins. ;-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Mon Aug 6 14:43:16 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7A3D6105AB5B for ; Mon, 6 Aug 2018 14:43:16 +0000 (UTC) (envelope-from carmel_ny@outlook.com) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-oln040092001056.outbound.protection.outlook.com [40.92.1.56]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "Microsoft IT TLS CA 4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 798AA7ACD2 for ; Mon, 6 Aug 2018 14:43:15 +0000 (UTC) (envelope-from carmel_ny@outlook.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5YxFApIz5Sbxb6ziMTSp6SDSu9pMiF6CFlQm+QfLUeM=; b=O39DQy1hMjlA4lJLt84jJk1sgJi4tZoVjivrkzMQjHrR06PR7uYd4v1U1ZFOv6Qu4IOkKRu02gQ3I3WDhIF5F1KpoZUfrycZ4SwwdwNC7nn++y0uh/Na5QC7Og9s8soGqkx4DfGmYUyvLRrWHSoZHlbcN2tbWKAXc0N4d37qwN6EtQTfhN6xN0yrI/nRB6QO21F+kpUq2f83mWvL8HILCQ1g6P9HMItHPuEDtiDu+wb7v0S1xDaxfTlRZ4g2pkr4Xz3uYgGuloGTGazvXVy8oBB6hMlkifwhPcLhlOGZ+NLp5/x236kfe/0v38AirZ0BlNjSdF7zASXJNC0A5K1nzQ== Received: from SN1NAM01FT056.eop-nam01.prod.protection.outlook.com (10.152.64.55) by SN1NAM01HT245.eop-nam01.prod.protection.outlook.com (10.152.65.64) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1038.13; Mon, 6 Aug 2018 14:43:14 +0000 Received: from SN1PR20MB2109.namprd20.prod.outlook.com (10.152.64.52) by SN1NAM01FT056.mail.protection.outlook.com (10.152.65.230) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1038.3 via Frontend Transport; Mon, 6 Aug 2018 14:43:13 +0000 Received: from SN1PR20MB2109.namprd20.prod.outlook.com ([fe80::c423:daf8:af8:3e74]) by SN1PR20MB2109.namprd20.prod.outlook.com ([fe80::c423:daf8:af8:3e74%5]) with mapi id 15.20.1017.019; Mon, 6 Aug 2018 14:43:13 +0000 From: Carmel NY To: FreeBSD Subject: Re: Erase memory on shutdown Thread-Topic: Erase memory on shutdown Thread-Index: AQHULZPNBTtIuvGiEU6QWp1yMGJk1A== Date: Mon, 6 Aug 2018 14:43:13 +0000 Message-ID: References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> <5f673fdc-4dd8-663a-605a-6b7cdce5206d@irk.ru> <59554.108.68.162.197.1533522663.squirrel@cosmo.uchicago.edu> <20180806155016.8214e603.freebsd@edvax.de> In-Reply-To: <20180806155016.8214e603.freebsd@edvax.de> Reply-To: FreeBSD Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: BN6PR19CA0066.namprd19.prod.outlook.com (2603:10b6:404:e3::28) To SN1PR20MB2109.namprd20.prod.outlook.com (2603:10b6:802:28::14) x-mailer: Claws Mail 3.16.0 (GTK+ 2.24.32; i686-w64-mingw32) x-incomingtopheadermarker: OriginalChecksum:6087A3FF0C7B17AD449199019436B3AD2E17BC95406B0D3BF25E1A1987D562DC; UpperCasedChecksum:A290FCFBE3CF482C30F415F33A2E369A7D13EA5D2A9E27350242F25BB663B52D; SizeAsReceived:7818; Count:51 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [37u2jDfP57k3k80bnakxK7cAgZVOQu8A] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN1NAM01HT245; 6:iDQReENW7CG/i82JIteKUDeqglRRIh4nIXStlIH30vUQM/Pl70bwKwlebNG6Z740uK+p2/UgSo7/gewGvzozXZ3VEz1ujae0q1DhIgVZbsxjHKLa37zpy4pcVa5k9Ay9gAgITNAYzfPeMEdWOHZkVZKT7Ne7XKdEcEk/bZ1QiqOx7533AmxRAn+1zIXp0pKBmATL+FWHRloHOTd7edq1GN84OYkASb6sdtaAamxKuc/HuNSLyr1z4c7Z9HXIlBnAz4g0IPtPNU8d1YAI5xxnUDhkJxaO+kcLuTyc2rvywd379q7skVcTk5dDaIRuyMLw6zqD54uw25EEW8NdBH0l4kvYOI9o/iw0j/84UzAKD75gEWaH79lnu9f6oroUZ0oWwRb7wlR2My963+iCuwT+11P3rjqtZFfhkJpnZ5G8s4ZC/bRLKWVMWkAx2MQ53fSsNC1VrY2NNgIchV3hw+iEow==; 5:XQPTb5bES2rO0aASGS+jCeX3EFEjN6CaPJ8VnKtKRr3uSkxuC5EnVOgUqt1VJqXJpLos3/fFEMunp2tEehGynD5Ig9WqerHgJLeSbZOefNlhzXwMaDiGTDdlSvIciLC1/Ymh3O1H8u6AKkVJN71BaHwY4L/kTRv+kSJvxwES+9M=; 7:o6T74zgvgZaMnic7hxKwJR9c4/oyNJI0C5VjZesgtBUEP7cLZ8eFKpJbQbWNGrljCGPLK0JLhiDlI2LK1HCf3cM/vUwx9Ipd0Fjv5HsugNl40L2xXy8Nv1p0+AlpeP4OuBBTefPDjlZdIKCMFRyvjW3snCHhZ/TxyUWGundPMAGVIwTTKkMzakiw9EzaWALFEKX3htTbsi9BK0PnJjKYsXvlHIO5U4Vqzj109yJw0t+AJQXENIYJMr3r3ZXMkJQx x-incomingheadercount: 51 x-eopattributedmessage: 0 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322404)(1603101475)(1601125500)(1701031045); SRVR:SN1NAM01HT245; x-ms-traffictypediagnostic: SN1NAM01HT245: x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(4566005)(82015058); SRVR:SN1NAM01HT245; BCL:0; PCL:0; RULEID:; SRVR:SN1NAM01HT245; x-forefront-prvs: 07562C22DA x-forefront-antispam-report: SFV:NSPM; SFS:(7070007)(189003)(199004)(93886005)(26005)(33656002)(102836004)(386003)(104016004)(6346003)(6916009)(5660300001)(7696005)(256004)(76176011)(14444005)(99286004)(2900100001)(14454004)(6436002)(55016002)(43066004)(68736007)(229853002)(20460500001)(82202002)(74316002)(5250100002)(6246003)(3480700004)(486006)(25786009)(8676002)(81156014)(50226002)(476003)(8936002)(305945005)(56003)(97736004)(106356001)(105586002)(87572001)(446003)(426003)(11346002)(86362001)(77550200003); DIR:OUT; SFP:1901; SCL:1; SRVR:SN1NAM01HT245; H:SN1PR20MB2109.namprd20.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: outlook.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=carmel_ny@outlook.com; x-microsoft-antispam-message-info: LZGsr74tJYeejSj33i+jNAUMAFAxHqZwMofL1v3KqbS1iqfIqYssifTx6wdKxdxly+F6coOihsNBS+sWur9pMk6Do0ejZdad94Ih4jC/g9CfIXDmtCnVcYqeQxII9/EJ4M7Ef72SzGzwDm4w++Anmv9RPPYOy7YMX7MiVULvKz8MqdmwxGWZdLZXgz+S1bE5/To5Hke1eKKsIEjBMFiWwISQjXCcf8abEc48EynS29o= Content-Type: text/plain; charset="utf-8" Content-ID: <0517B615CADD2B4DB83BEBBCD5DE46E6@namprd20.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 9a4e3081-9524-43cf-bfc3-dcaef82d5da1 X-MS-Exchange-CrossTenant-Network-Message-Id: 881025f7-86da-42f8-b7b3-08d5fbaaef4b X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 9a4e3081-9524-43cf-bfc3-dcaef82d5da1 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Aug 2018 14:43:13.8014 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1NAM01HT245 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 14:43:16 -0000 T24gTW9uLCA2IEF1ZyAyMDE4IDE1OjUwOjE2ICswMjAwLCBQb2x5dHJvcG9uIHN0YXRlZDoNCg0K PlRoZSBndXkgd2l0aCB0aGUgc2NyZXdkcml2ZXIgdXN1YWxseSB3aW5zLiA7LSkNCg0KTWFueSBk ZWNhZGVzIGFnbywgd2hpbGUgaW4gdGhlIE1hcmluZSBDb3JwcywgSSB3b3JrZWQgaW4gdGhlIGNy eXB0b2dyYXBoeQ0Kc2VjdGlvbi4gV2UgaGFkIGEgc2F5aW5nIHRoZXJlIHRoYXQgZWNob2VkIHdo YXQgU3RlcGhlbiBIYXdraW5zIG9uY2UNCnJlbWFya2VkLCAiTm90aGluZyBpcyBmb29sIHByb29m IHRvIGEgc3VmZmljaWVudGx5IHRhbGVudGVkIGZvb2wuIiBPciBhcyBJDQpsaWtlIHRvIHNheSwg IllvdSBidWlsZCBhIGJldHRlciBtb3VzZSB0cmFwLCBhbmQgdGhleSB3aWxsIGJ1aWxkIGEgYmV0 dGVyDQptb3VzZS4iDQoNClRoZXJlIGlzIG5vIHN1Y2ggdGhpbmcgYXMgYSBmb29sLXByb29mIFNP UC4gVGhlIHNjcmV3ZHJpdmVyIHdpbnMgZXZlcnkgdGltZS4NCkhvd2V2ZXIsIGluIHRoZSBleGFt cGxlcyBnaXZlbiwgSSBmaW5kIHRoZSBsYWNrIG9mIHNpdGUgc2VjdXJpdHkgdG8gYmUNCmRpc3R1 cmJpbmcuDQoNCi0tIA0KQ2FybWVsDQoNCuKAnExhIHBsdXMgYmVsbGUgZGVzIHJ1c2VzIGR1IGRp YWJsZSBlc3QgZGUgdm91cyBwZXJzdWFkZXIgcXUnaWwgbidleGlzdGUgcGFzLiINCg== From owner-freebsd-questions@freebsd.org Mon Aug 6 14:59:04 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D4AE2105B75C for ; Mon, 6 Aug 2018 14:59:04 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from kicp.uchicago.edu (kicp.uchicago.edu [128.135.20.70]) by mx1.freebsd.org (Postfix) with ESMTP id 878597B49D for ; Mon, 6 Aug 2018 14:59:04 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from point.uchicago.edu (point.uchicago.edu [128.135.52.6]) by kicp.uchicago.edu (Postfix) with ESMTP id 310917180CE; Mon, 6 Aug 2018 09:58:58 -0500 (CDT) Subject: Re: Erase memory on shutdown To: Polytropon Cc: Erich Dollansky , John Levine , thor , freebsd-questions@freebsd.org References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> <20180806154345.3243e993.freebsd@edvax.de> From: Valeri Galtsev Message-ID: <449f6907-9bdf-5459-b9bd-759e62025b02@kicp.uchicago.edu> Date: Mon, 6 Aug 2018 09:58:57 -0500 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20180806154345.3243e993.freebsd@edvax.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 14:59:05 -0000 On 08/06/18 08:43, Polytropon wrote: > On Sun, 5 Aug 2018 19:10:07 -0500 (CDT), Valeri Galtsev wrote: >> >> On Sun, August 5, 2018 6:37 pm, Erich Dollansky wrote: >>> Hi, >>> >>> On Sun, 5 Aug 2018 10:55:22 -0500 (CDT) >>> "Valeri Galtsev" wrote: >>> >>>> On Sun, August 5, 2018 10:26 am, thor wrote: >>>>> https://en.wikipedia.org/wiki/Cold_boot_attack >>>>> >>>> >>>> The trouble is that erasing RAM on clean shutdown does not prevent the >>>> attacker in the attack as above from still successfully perform the >>> >>> so, ECC is also here the only possible answer, at least for parts of it. >>> >>> Still, erasing memory when shutting down helps in some cases. I do this >>> on my machines for small parts when a shutdown is detected. It makes at >>> least the most obvious attacks from that side difficult. >> >> Please, correct me if I am wrong in the following: >> >> If the attacker yanks off the power cord, then cold boots off his media, >> your defense/erasure of memory does not protect you against this attack. >> Right? Your defense only helps if the attacker does clean shutdown. Right? > > Clearing memory at shutdown time won't happen when > shutdown time doesn't take place. Many cold boot > attacks rely on surprisingly (!) interrupting the > power, which implies physical access, and then > booting from a custom media, so even clearing > memory at startup time doesn't happen. > > All those precautions only work when physical access > is taken out of consideration. Yes, my point exactly. Thanks! Valeri > > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Mon Aug 6 15:07:14 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E2725105BBA5 for ; Mon, 6 Aug 2018 15:07:14 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from kicp.uchicago.edu (kicp.uchicago.edu [128.135.20.70]) by mx1.freebsd.org (Postfix) with ESMTP id 92C277BA04 for ; Mon, 6 Aug 2018 15:07:14 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from point.uchicago.edu (point.uchicago.edu [128.135.52.6]) by kicp.uchicago.edu (Postfix) with ESMTP id 46B107180CE; Mon, 6 Aug 2018 10:07:14 -0500 (CDT) Subject: Re: Erase memory on shutdown To: Polytropon Cc: thor , freebsd-questions@freebsd.org References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <20180806073738.6f459398.freebsd.ed.lists@sumeritec.com> <57043.108.68.162.197.1533514207.squirrel@cosmo.uchicago.edu> <5f673fdc-4dd8-663a-605a-6b7cdce5206d@irk.ru> <59554.108.68.162.197.1533522663.squirrel@cosmo.uchicago.edu> <20180806155016.8214e603.freebsd@edvax.de> From: Valeri Galtsev Message-ID: <72676f59-bb8f-757b-d882-89080508a3b7@kicp.uchicago.edu> Date: Mon, 6 Aug 2018 10:07:14 -0500 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20180806155016.8214e603.freebsd@edvax.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 15:07:15 -0000 On 08/06/18 08:50, Polytropon wrote: > On Sun, 5 Aug 2018 21:31:03 -0500 (CDT), Valeri Galtsev wrote: >> Yes, it was repeated forever that security begins with physical security. >> And repeating again what my friend likes to say: nothing can stop the guy >> wit the screwdriver. Not quite true, but pretty close. > > In this context, even encrypted partitions sometimes don't help. > > Things that actually have happened: > > 1. > > A thief stole the server of a small business. They had encryption > in place, and because their HPC told them that keys should be used, > they stored keys on a USB stick that was put in the font USB > connector of the server, because their HPC said it was very > convenient to do so, as the server found the keys when booting > and could then enable access to the encrypted disk. > > GAME OVER. > > > > 2. > > A group of theves stole the whole server rack, including the > UPS units, attached them to a power generator in their van, > drove it to the "extraction site" which had regular power, > re-attached regular power, and copied everything from the > still running system without being hit by any "please enter > the password" dialogs. > > GAME OVER. > I like this one. I once had to relocate server into another server room in the building next door, and I didn't want to interrupt user processes. I put UPS on the cart, had UPS running on its battery, reconnected power cords of redundant power supply of the server one at a time to UPS, put server on top of UPS, rolled it into another server room, and reconnected it back to regular power. Nothing interrupted. Active ssh connections hang for few minutes, but none timed out. And users didn't know the server was physically moved. Valeri > > > The guy with the screwdriver usually wins. ;-) > > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Mon Aug 6 17:49:12 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2C66C105FDA0 for ; Mon, 6 Aug 2018 17:49:12 +0000 (UTC) (envelope-from freebsd-en@lists.vlassakakis.de) Received: from dd14614.kasserver.com (dd14614.kasserver.com [85.13.136.14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B82A381801 for ; Mon, 6 Aug 2018 17:49:11 +0000 (UTC) (envelope-from freebsd-en@lists.vlassakakis.de) Received: from [192.168.3.57] (p5496E1D0.dip0.t-ipconnect.de [84.150.225.208]) by dd14614.kasserver.com (Postfix) with ESMTPSA id 5F41843C0216 for ; Mon, 6 Aug 2018 19:49:04 +0200 (CEST) From: Philipp Vlassakakis Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Subject: Jails - IPv4 and IPv6 Message-Id: Date: Mon, 6 Aug 2018 19:49:03 +0200 To: FreeBSD Mailing List X-Mailer: Apple Mail (2.3445.9.1) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 17:49:12 -0000 Hello, everybody, does anyone use IPv4 and IPv6 in production jails and can provide = feedback about the configuration and stability of VIMAGE/VNET in FreeBSD = 11.2? Currently I only use IPv4 in my jails (via NAT) and would like to switch = to VIMAGE and roll out IPv6. How do you use IPv4 and IPv6 with jails? Thanks and greetings Philipp From owner-freebsd-questions@freebsd.org Mon Aug 6 18:39:10 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 01AE210616C8 for ; Mon, 6 Aug 2018 18:39:09 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mail-it0-x22e.google.com (mail-it0-x22e.google.com [IPv6:2607:f8b0:4001:c0b::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7D887838C1 for ; Mon, 6 Aug 2018 18:39:09 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mail-it0-x22e.google.com with SMTP id h23-v6so19539754ita.5 for ; Mon, 06 Aug 2018 11:39:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-transfer-encoding; bh=dK52xAEdx+dB5GRxswR5qgNStFxRqXWsVFYX1PJkPoY=; b=CFxX4Ced1qgsZq8sPJdrOrYA39b+gjnrU2rxBSfKAVwke9TN83+zDeETXSAEf4ajD9 rLT+YUzVHn/Ev40wBCNgLK/ujWNykf4/HhHq/Ef2WhEHhXz9wTLKsMBsvRf700/kqUrH FlMGO0vOSF5nYjOIy77gtD0sq1jWY9iDlVm9yQoWQPXRL/zjbDsTwLkTo5f5XD9t9kIm jGAb1qXG5ACfnRYon1vUd/vCRaMGFGrVwisWaUf/AsZQ1PIgoXwWjjyY7KTJ4CMNGKTX toCff5iVOwbZ1ROWuag8vu8yyE9LY08Nd+qC/tx5W+JlQI1hyk9UJhv77uogP5hyzLCM 6vYw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:content-transfer-encoding; bh=dK52xAEdx+dB5GRxswR5qgNStFxRqXWsVFYX1PJkPoY=; b=b4+l755MPE/LN19+SmvW+lRIGTO2FRIWQSukGSWPD9QPK98GHtqkN2zwo8vaZ51bOZ +Kb96LHsYCI6E/r8KAInZojdNap55Beux5bOE3wLu/NcKVx8R2fTb2IuS5CHOs3nIb7D ZoZEa62TC3rWCBuqMHPAb7Cb/KiL/j2VwAqDx05vle8dnRHF6lr/kpf+unBuk09YuMRi nosFoYhbll/cEZs94vr+jgn/lo00Lw62D2wTptZIi4hCjf8/aZV6w603Uq1pMaEHrlHE R5VUoWinITTLiTNVYqkIh6DLfybj/xh+ZxKn9rwdbrZKJMvo9KsYruPZbmbtxdB8V5yJ oIRw== X-Gm-Message-State: AOUpUlFj5oBgzgSzRIM9Y4CUFOSOa0oYB0k46XeV58zhYx9lhVozHJCb kBUlQQcd6HgkAD0Eay0QwuLwEaR6 X-Google-Smtp-Source: AAOMgpeR2KKTLxh60YWfPSK/YnxNGzEH9rScRJ3htr2LebYL1kMn1R+bPeIm7KWRpV0m4hhOPssC9Q== X-Received: by 2002:a24:9686:: with SMTP id z128-v6mr15141545itd.58.1533580748994; Mon, 06 Aug 2018 11:39:08 -0700 (PDT) Received: from [10.0.10.7] (cpe-65-25-48-31.neo.res.rr.com. [65.25.48.31]) by smtp.googlemail.com with ESMTPSA id z22-v6sm4021236iog.63.2018.08.06.11.39.07 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 06 Aug 2018 11:39:08 -0700 (PDT) Message-ID: <5B6895CB.1070004@gmail.com> Date: Mon, 06 Aug 2018 14:39:07 -0400 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Philipp Vlassakakis CC: FreeBSD Mailing List Subject: Re: Jails - IPv4 and IPv6 References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 18:39:10 -0000 Philipp Vlassakakis wrote: > Hello, everybody, > > does anyone use IPv4 and IPv6 in production jails and can provide feedback about the configuration and stability of VIMAGE/VNET in FreeBSD 11.2? > > Currently I only use IPv4 in my jails (via NAT) and would like to switch to VIMAGE and roll out IPv6. > How do you use IPv4 and IPv6 with jails? > > Thanks and greetings > Philipp > > I use VIMAGE/VNET jails with IPv4 & IPv6 addresses for public access. VIMAGE/VNET has been stable but only supports ipfw firewall which includes a bug where all the VNET jails IPFW firewalls log files write to the hosts IPFW firewall log intermingling the log records. I use qjail to create and manage my VIMAGE/VNET jails. From owner-freebsd-questions@freebsd.org Mon Aug 6 19:10:53 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6326D10624C0 for ; Mon, 6 Aug 2018 19:10:53 +0000 (UTC) (envelope-from doug@fledge.watson.org) Received: from cyrus.watson.org (cyrus.watson.org [204.107.128.30]) by mx1.freebsd.org (Postfix) with ESMTP id 085DC85065 for ; Mon, 6 Aug 2018 19:10:53 +0000 (UTC) (envelope-from doug@fledge.watson.org) Received: from fledge.watson.org (fledge.watson.org [198.74.231.63]) by cyrus.watson.org (Postfix) with ESMTPS id 37D3CA81CD; Mon, 6 Aug 2018 19:10:52 +0000 (UTC) Received: from fledge.watson.org (doug@localhost.watson.org [127.0.0.1]) by fledge.watson.org (8.15.2/8.15.2) with ESMTP id w76JApYU072234; Mon, 6 Aug 2018 15:10:51 -0400 (EDT) (envelope-from doug@fledge.watson.org) Received: from localhost (doug@localhost) by fledge.watson.org (8.15.2/8.15.2/Submit) with ESMTP id w76JAp3O072231; Mon, 6 Aug 2018 15:10:51 -0400 (EDT) (envelope-from doug@fledge.watson.org) Date: Mon, 6 Aug 2018 15:10:51 -0400 (EDT) From: doug Reply-To: doug@safeport.com To: Matthias Fechner cc: freebsd-questions@freebsd.org Subject: Re: 11.2 cannot boot with root on ZFS In-Reply-To: <7415d752-21ab-a397-f90b-afe9945b2585@fechner.net> Message-ID: References: <7415d752-21ab-a397-f90b-afe9945b2585@fechner.net> User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (fledge.watson.org [127.0.0.1]); Mon, 06 Aug 2018 15:10:51 -0400 (EDT) Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8BIT X-Content-Filtered-By: Mailman/MimeDel 2.1.27 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 19:10:53 -0000 On Sun, 5 Aug 2018, Matthias Fechner wrote: > Hi Kyle, > > sry that it took longer, but I had a harddisk failure and it took some > time to resilver the pool to a new disc. > > Am 16.07.2018 um 19:45 schrieb Kyle Evans: >> To be clear- the kernel can't find the zfs pool, or one of the earlier >> stages? Giving the pool manually meaning at a mountroot prompt, or >> somewhere else? > > I'm not sure what the problem is. > If I update the kernel from 11.1 to 11.2 with freebsd-update and reboot, > it could be a kernel panic with an immediate reboot. > It is that fast, that it is impossible to see anything on the screen, so > I cannot give you a clear error message for this. > > If I try then to boot the old kernel in the bootloader with: > unload > load /boot/kernel.working/kernel > > it is not able to mount the zroot pool. > > To fix this, I need to boot mfsbsd from an USB stick and do: > zpool import -o altroot=/mnt zroot > cd /mnt > tar xjvf boot_111_working.tar.bz2 > cd / > zpool export zroot > reboot > >> This is for specifically for aarch64, but you've not specifically >> mentioned it- you're on aarch64, right? > you are right, I'm on a normal amd64 platform. > >> I think we'll need a little more information about where and >> specifically how it's failing for you to determine that. Others have >> reported successful upgrades from 11.1 to 11.2 with root-on-ZFS >> setups. > > is it maybe the way the disc are partitioned? > > I have an empty EFI partition on the harddisk (to have later space for EFI): > gpart show ada0 > =>        40  5860533088  ada0  GPT  (2.7T) >           40      262144     1  efi  (128M) >       262184         512     2  freebsd-boot  (256K) >       262696  5860270424     3  freebsd-zfs  (2.7T) >   5860533120           8        - free -  (4.0K) > > The bootloader is correctly installed using: > > gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 2 ada0 > I have an amd64 ZFS install from the USB file taking all the defaults. Here's what my disk looks like: => 40 1953525088 ada1 GPT (932G) 40 409600 1 efi (200M) 409640 1024 2 freebsd-boot (512K) 410664 984 - free - (492K) 411648 4194304 3 freebsd-swap (2.0G) 4605952 1948917760 4 freebsd-zfs (929G) 1953523712 1416 - free - (708K) mount_msdosfs /dev/ada1p1 /mnt cd /mnt/efi/boot/ ls -l total 385 -rwxr-xr-x 1 root wheel 393216 Apr 16 10:12 BOOTx64.efi -rwxr-xr-x 1 root wheel 12 Apr 16 10:12 startup.nsh cat startup.nsh BOOTx64.efi From owner-freebsd-questions@freebsd.org Mon Aug 6 22:50:16 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CDE641068488 for ; Mon, 6 Aug 2018 22:50:16 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: from mail-yw1-f53.google.com (mail-yw1-f53.google.com [209.85.161.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 71EFF8F236 for ; Mon, 6 Aug 2018 22:50:16 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: by mail-yw1-f53.google.com with SMTP id s68-v6so1218973ywg.2 for ; Mon, 06 Aug 2018 15:50:16 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=SgoWWYRZzpV1ZtdIYCsmckgoIdEYiYoR8H8A8o0LMWQ=; b=ZBcQvg8DObHGGgywB7avZZQ04LHKCOAGijja9OXmky8NGjUa+uPyOWFJ13IfmQ1yzy jYeW4FaYdDl/01kBaYlWT0YagDiYFdOCt+YoVZ/CjSiZtiaNtyPJNnzBDv0NpdVu+a3k k9Mvc3A4SouKPWO07FW7QliNosMWyUXeOaAKsFX9s0MHXhz55XB4oWrGrhKwrHAc9MB1 ZWfhOIQlfpqjP0g0LklP1o5zeac2LjY6C+fQlrk8m/eTpYWZiHt944IewEgEpY3bG5jh rgGazg25fHQriZ9+qm7rAa7hJkXZ6xVvRkFEntU1ZdrHbck2hzSD7/td28u9iVCr7Twr KCLg== X-Gm-Message-State: AOUpUlGl6wHmAvt2A3hIpKXg+/MLbDPl/k0mBwmuAxtpNweL46sllbIH elimQ3SQ3FmuSMUYYx5V5p5owH5w X-Google-Smtp-Source: AAOMgpfPlbtXBpajAqPOKP5hZaMTJheDDfLFffrp/dF9WqPZfpkr3kV4Tn5+WK6Dlus0nqSveBzL2Q== X-Received: by 2002:a81:25d6:: with SMTP id l205-v6mr8599039ywl.242.1533591825842; Mon, 06 Aug 2018 14:43:45 -0700 (PDT) Received: from mail-yw1-f43.google.com (mail-yw1-f43.google.com. [209.85.161.43]) by smtp.gmail.com with ESMTPSA id 203-v6sm7360368ywv.34.2018.08.06.14.43.45 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 06 Aug 2018 14:43:45 -0700 (PDT) Received: by mail-yw1-f43.google.com with SMTP id z143-v6so4177682ywa.7 for ; Mon, 06 Aug 2018 14:43:45 -0700 (PDT) X-Received: by 2002:a81:1d87:: with SMTP id d129-v6mr8507091ywd.374.1533591825330; Mon, 06 Aug 2018 14:43:45 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a81:3213:0:0:0:0:0 with HTTP; Mon, 6 Aug 2018 14:43:44 -0700 (PDT) In-Reply-To: <5B6895CB.1070004@gmail.com> References: <5B6895CB.1070004@gmail.com> From: Ultima Date: Mon, 6 Aug 2018 14:43:44 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: Jails - IPv4 and IPv6 To: Ernie Luzar Cc: Philipp Vlassakakis , FreeBSD Mailing List Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.27 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 22:50:17 -0000 Hey there, VIMAGE is one way to go about it. Another is setting a static address via "ip6.addr" if it is using a real interface or a bridge. When using lo1 interfaces, I will just use the private ipv6 subnet space, fd00::/8 and forward the traffic required from the host to the jail. Really it all depends on what you need or want to achieve. Best regards, Richard Gallamore On Mon, Aug 6, 2018 at 11:39 AM, Ernie Luzar wrote: > Philipp Vlassakakis wrote: > >> Hello, everybody, >> >> does anyone use IPv4 and IPv6 in production jails and can provide >> feedback about the configuration and stability of VIMAGE/VNET in FreeBSD >> 11.2? >> >> Currently I only use IPv4 in my jails (via NAT) and would like to switch >> to VIMAGE and roll out IPv6. >> How do you use IPv4 and IPv6 with jails? >> >> Thanks and greetings >> Philipp >> >> >> > I use VIMAGE/VNET jails with IPv4 & IPv6 addresses for public access. > VIMAGE/VNET has been stable but only supports ipfw firewall which includes > a bug where all the VNET jails IPFW firewalls log files write to the hosts > IPFW firewall log intermingling the log records. I use qjail to create and > manage my VIMAGE/VNET jails. > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe > @freebsd.org" > From owner-freebsd-questions@freebsd.org Mon Aug 6 22:50:46 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 42DB010684A6 for ; Mon, 6 Aug 2018 22:50:46 +0000 (UTC) (envelope-from luvandachalo@gmail.com) Received: from smtp.jtl.co.ke (smtp.jtl.co.ke [41.222.9.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B17878F284 for ; Mon, 6 Aug 2018 22:50:45 +0000 (UTC) (envelope-from luvandachalo@gmail.com) Received: from [197.232.61.211] (helo=USER-PC) by smtp.jtl.co.ke with smtp (Exim 4.90_1) (envelope-from ) id 1fmoKl-000HQC-GZ for freebsd-questions@freebsd.org; Tue, 07 Aug 2018 01:50:39 +0300 From: Compuline Technologies To: Message-Id: <20180807015036.21273497@gmail.com> Subject: Don`t Miss Payroll 2018 & Quickbooks Pro/ Premier Offe !!!. Date: Tue, 7 Aug 2018 01:50:36 +0300 Reply-To: compulinetech@gmail.com Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 22:50:46 -0000 Dear Client Enjoy Our New 2018 Payroll Software Offer Kenyan Payroll 2018 Release with new KRA PAYE 2018 Rates, ITAX and many more Only @ ksh 24,000 Quickbooks Pro @ Ksh 22,000 Quickbooks Premier @ Ksh 28000, ( We also do Data Migrations from Older Versions to New ) The 2018 BestPay Human Resource and Payroll Processing System is a Kenyan human resource and payroll software that is used by many different organizations. The software incorporates all the features needed to run a payroll that fulfills the requirements of the Kenya Revenue Authority (K.R.A.) as per the Employers Guide to Pay As You Earn document which is issued by K.R.A every year. BestPay is a Windows based system which uses graphical features such as icons for ease of use. It is a user-friendly payroll program that runs on PCs with Windows XP,Linux and Windows 7,8 and 10 Platforms. Its main objective is to computerize the payroll and the human resource functions of your organization, providing the management with clear, concise, up-to- date reports that would give an accurate picture of the activities carried out within the organization. This would result in greater efficiency and accuracy in the information processed. The software also conforms with the new PAYE submission guidelines from the K.R.A. with regards to monthly and quarterly PAYE returns by employers on behalf of the employees. The system automatically generates the P10D report conforming with the KRA format. The employer can also generate the monthly return that can be uploaded to the KRA website on a monthly basis. SYSTEM FEATURES . Multi companies . Company details, company address, registration details . Allows user definable employee categories, departments, grades etc. . Permits the user to input the employee details in the main employee details screen. . Terminated employees - date of leaving, reasons for leaving (dismissal,resignation, termination, retirement) . User definable medical schemes . Employer training reports . Pension details showing employer and employee contributions. . Terminated employees reports . Multi access Other Features include: . User definable payroll, earning/deduction codes . Flexibility in handling of tax tables. . Batch posting of transactions; by employee, by class of employees. . Exempting of staff from selected statutory deductions (e.g. in case of an expatriate or casual employees) . Loan processing- tracking down loan details, editing loan transactions, producing and printing loan repayment schedule. . Instant viewing of an employee pay slip. . Statutory deductions PAYE, NSSF, NHIF . Year end income tax reports - KRA approved P9 forms, P10A, P10, P10D,Previous years P9 etc . Supports direct bank salary remittance (SFI) and compatible with QuickBooks Accounting Software . Audit trail Reports Include: . Pay slips . Payment lists ie. payment by cash, payment by cheque, payment by bank transfer . Payroll analysis payments, deductions, negative pay, by department,by cost center, by pay point . Benefits details . Statutory deduction reports e.g NSSF, NHIF,PAYE,HELB,Pension schemes . Printable Labels and Coinage Analysis Our expertise in Computers and Software Design provide us with the knowledge to Develop Solutions and Implement Customised and Offshelf Softwares that answer the needs of today's clients. . looking forward to doing business with you. James kanyi IT Consultant Compuline Technologies 0721339494 This email, any attachment and response string are confidential and may be legally privileged. Any opinions expressed in this mail do not necessarily reflect the opinions of Compuline Technologies. If you are not the intended recipient, please email the sender and delete this message and any attachments immediately. Please do not copy or forward this message or attachment. Internet communications are not secure and therefore Compuline Technologies does not accept legal responsibility for the contents of this message as it has been transmitted over a public network From owner-freebsd-questions@freebsd.org Mon Aug 6 23:28:42 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 33357106983E for ; Mon, 6 Aug 2018 23:28:42 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: from mail-wr1-x431.google.com (mail-wr1-x431.google.com [IPv6:2a00:1450:4864:20::431]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8529470948 for ; Mon, 6 Aug 2018 23:28:41 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: by mail-wr1-x431.google.com with SMTP id r16-v6so13886743wrt.11 for ; Mon, 06 Aug 2018 16:28:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=q28Rr3ukEoejegN5p0dORC3jKLHew0eiLhoA4SPDlyU=; b=rudbKDF00TbKjSie6iuv/SnQTtfQ9Yp8KN2BTzZE3Rhnqg2FgfL4MBGmUMLepSN8Py oILGSe6fXw92XzH+p50zAfGXadSjTvw8Ic/35wCg9XF/yOyu89Xa1SoS776p7NGw7cN3 iIyDzB5Nye71/K5JKFEQBKcYlN6GXkCv2nS8xOYU9k7JjGF/uofdST2WqUcXdePpzjxe j8yc7HftqGCOKdpqL9Tp1umBxOsav63JuIwp65sfVhV6QzF5NnX3i2QxqKRFeW2Yy4wS /+xEocKoyy3X4ecIidKPDZ3K2uZLlo5pWoKPrdYCaoVIv541XTeHyg1SOpv1I9yDGoAG QVsg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=q28Rr3ukEoejegN5p0dORC3jKLHew0eiLhoA4SPDlyU=; b=fnLzs92gpLP9vKuEqIRNdzFM0RXjsqJctvM02S4yvftzqFbyv8RQZZM3z92qQX6/wZ I6Yz+qIXbeJ2Ne8VyQKsAUjuOGkQr1VPo2vt6XwSMZPbUvh1DCAApyf0EolTIcdRo4R+ BorUxpwCfpOcJ3lwH3gMotPbwKhxhqWLKugwK0Mk5jeyzbIjNOHTqWAKg5tjLDhj5aCv SJKOkDJsepxYPOqzbgnhMzTgqVtqPa5QB1Q/6bgQjdWwwJqqYuOW62Q5HVjr8K8v5GsS cvwLpX2ZTwny28B+6sYvPccRenHn/usiTRtI4mmGisUOTqSFTWZFzFcZ/L+FMTLyE0Jc Ki0w== X-Gm-Message-State: AOUpUlGXYTsERxvyggvTZFFVWou7tNyB1/WvqEV9kmMS9ifxyIYnnaam 1cf7bQ6CwSm0qvx3Uaom91b9ZhA= X-Google-Smtp-Source: AAOMgpcrbcctDaYRt5xIvw3ROAsw6b80PMApT2uL8MIYbm6NA44gHBMrX6s+hD/Pr5mz6SyTUpjmtA== X-Received: by 2002:adf:f74d:: with SMTP id z13-v6mr11634577wrp.85.1533598120003; Mon, 06 Aug 2018 16:28:40 -0700 (PDT) Received: from osk.homenet (cpc91746-watf12-2-0-cust328.15-2.cable.virginm.net. [81.109.177.73]) by smtp.googlemail.com with ESMTPSA id l5-v6sm10623835wrq.86.2018.08.06.16.28.39 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 06 Aug 2018 16:28:39 -0700 (PDT) Subject: Re: Jails - IPv4 and IPv6 To: freebsd-questions@freebsd.org References: <5B6895CB.1070004@gmail.com> From: Shamim Shahriar Message-ID: Date: Tue, 7 Aug 2018 00:28:38 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: <5B6895CB.1070004@gmail.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Aug 2018 23:28:42 -0000 On 06/08/2018 19:39, Ernie Luzar wrote: > Philipp Vlassakakis wrote: >> Hello, everybody, >> >> does anyone use IPv4 and IPv6 in production jails and can provide >> feedback about the configuration and stability of VIMAGE/VNET in >> FreeBSD 11.2? >> >> Currently I only use IPv4 in my jails (via NAT) and would like to >> switch to VIMAGE and roll out IPv6. >> How do you use IPv4 and IPv6 with jails? >> >> Thanks and greetings >> Philipp >> >> > > I use VIMAGE/VNET jails with IPv4 & IPv6 addresses for public access. > VIMAGE/VNET has been stable but only supports ipfw firewall which > includes a bug where all the VNET jails IPFW firewalls log files write > to the hosts IPFW firewall log intermingling the log records. I use > qjail to create and manage my VIMAGE/VNET jails. > Hi Ernie Not sure how is your setup like, but I manage firewall for all my jails from the host itself -- i.e., the main host I have all the epair devices created from the main host, along with the a bridge device, and initially add only the main interface to the bridge0 cloned_interfaces="bridge0 epair0 epair1 epair2 epair3 " # List of cloned network interfaces to create. ifconfig_bridge0="addm bge0 up" Then comes the jails, where each jail is attached to one of the epair device via the /etc/jail.conf, and each epair gets an IPv4 address from there as well. when the jail starts up, the jails add the IPv6 address via its own rc.conf ifconfig_epair3b_ipv6="inet6 aaaa:bbbb:cccc:def0::4:2 prefixlen 64" ipv6_defaultrouter="aaaa:bbbb:cccc:def0::1" so the IPv6 gets set on the epair device when the jail starts and all the firewalling is done from the main host itself -- NOT the individual jails. In my mind, having the firewall at the main host made sense to start with -- so I do not need to manage N number of firewalls on individual jails and using up all the resources for all the large tables (bogons, for example). So I used the pf from the main host, and so far it seems to have held things together pretty well. I do not use any additional layer to create the jails -- they are created on the base without qjail, iocage or any other layer in-between. Hope this helps. Best regards From owner-freebsd-questions@freebsd.org Tue Aug 7 00:43:48 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5FE73106B6DA for ; Tue, 7 Aug 2018 00:43:48 +0000 (UTC) (envelope-from a.b.trans@transbus14us.nazwa.pl) Received: from ang87.rev.netart.pl (ang87.rev.netart.pl [85.128.215.87]) by mx1.freebsd.org (Postfix) with ESMTP id DB9C6733DF for ; Tue, 7 Aug 2018 00:43:47 +0000 (UTC) (envelope-from a.b.trans@transbus14us.nazwa.pl) X-Virus-Scanned: by amavisd-new using ClamAV (7) X-Spam-Flag: NO X-Spam-Score: 1.768 X-Spam-Level: * X-Spam-Status: No, score=1.768 tagged_above=-10 tests=[FSL_HELO_NON_FQDN_1=0.001, MISSING_SUBJECT=1.767] autolearn=disabled Received: from ffffdddse (unknown [37.252.9.164]) by transbus14us.nazwa.pl (Postfix) with ESMTP id DF8B51B336F for ; Tue, 7 Aug 2018 02:43:46 +0200 (CEST) From: "Potempa Dominika" To: freebsd-questions@freebsd.org Content-Type: multipart/mixed; boundary="YbuqV0bnyMZy=_dgeAkDJIaMatlrC5Qnup" MIME-Version: 1.0 Reply-To: "Potempa Dominika" Organization: =?utf-8?B?IkFCIFRyYW5zIiBQcnplcHJvd2FkemtpIEtyYWpvd2UgaSBNacSZZHp5bmFyb2Rvd2U=?= Date: Tue, 7 Aug 2018 03:43:45 +0300 Message-Id: <20180807004346.DF8B51B336F@transbus14us.nazwa.pl> X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Aug 2018 00:43:48 -0000 This is a multi-part message in MIME format --YbuqV0bnyMZy=_dgeAkDJIaMatlrC5Qnup Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Witam, w za=C5=82=C4=85czniku przesy=C5=82am duplikat faktury. Informu= j=C4=99 o zmianie numeru konta bankowego.=20 Potempa Dominika "AB Trans" Przeprowadzki Krajowe i Mi=C4=99dzynarodowe --YbuqV0bnyMZy=_dgeAkDJIaMatlrC5Qnup Content-Type: application/octet-stream; name="Fa-081808.rar" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Fa-081808.rar" UmFyIRoHAQDz4YLrCwEFBwAGAQGAgIAArW92hikCAwuuBQSHDCB+NxuogAMADUZhLTA4MTgwOC52 YnMKAwJ4AHQI1C3UAck7qgI3dkMyQ/RQVe6nhTU6LYLdUIcW7akKoW6FtS001UiVqvXAjAlsg5Y3 KEPfKF+xyE2QNpviLBRt5w/ZnzxvyDMecLz7OH/+7P/i/u0O7TWbVu5dvdnb72zQIderVnn4TKlk jfxy4I43Zes0SIj7CapI4EjbGdUaDp1KVEl4bnni+JGA8b418zFltiaHoP0/wo1E7xZ53/vCEBDL MiedUcBVbFJrzqfRrMbYFSS0Jyk8MqQF8q29XrBTkC3CJPiFG+oFpITm8T7VEmGO52CA0qJMp9bw YYwtS7pPUesITmoA6oXuEMiFPOpDZ0wJdEQiFFCwwmQUbCq/iDdCNXeQQ4GYQjxRsFR/zN4COaV7 65pm6kEUPPRlXGR6pHAqfUlbmNBHuXBvwsWLN601au2WhneaH+wTeai1RfHgfev9l1u43dtWu32o iWPk32JolTH/NEdGbXCOjyz4uEPnTnLvBjLsmhljkgOtFPp/zlrQ321PknUFszOMRugdRC/u47pr ZO7KGJlerqNZrzqCecucQkUu1lD8eIJ7LYx52S1LW+Yveo08LYsMF9GS7Q2J5OFqP/ke5rev2Mcb tvUtXzIRuREJC0aJrWRCFVEZVMKNOUAjN+TgMZYxv598lGgVF98fh83HPKeXqjo1kiElifPlhcY6 zcZJGjEK+SfnYLnfiXPol7dbqrafgcUomzZt3OseHQAy+XLc2VG6jPeqCopJMQ4FO4CPifPYMfhG LBtewM8ts3mcdJj6JpkXdTyXKyVZe5P7i5cY9AxKrioYzEyMdWNgw1pFA0wHX1AXpS1oGbqS/WHd YCU2AFpUG2GBimenJEUHt9NBmeVUoQSQud7TbdczmopELFaZswlDF7OPBmHaKUkAaJcXSVPhDN6u urzE7AjUAf5DQvobV7YAHXdWUQMFBAA= --YbuqV0bnyMZy=_dgeAkDJIaMatlrC5Qnup-- From owner-freebsd-questions@freebsd.org Tue Aug 7 14:48:34 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EF8571060E7E for ; Tue, 7 Aug 2018 14:48:33 +0000 (UTC) (envelope-from bsd@lordcow.org) Received: from mail.lordcow.org (lordcow.org [197.155.6.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "devaux.za.net", Issuer "Cow Certificate Authority" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4055D7288C for ; Tue, 7 Aug 2018 14:48:32 +0000 (UTC) (envelope-from bsd@lordcow.org) Received: from lordcow.org (localhost [127.0.0.1]) by mail.lordcow.org (8.15.2/8.15.2) with ESMTPS id w77EPffN065484 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 7 Aug 2018 16:25:41 +0200 (SAST) (envelope-from lordcow@lordcow.org) X-Authentication-Warning: lordcow.org: Host localhost [127.0.0.1] claimed to be lordcow.org Received: (from lordcow@localhost) by lordcow.org (8.15.2/8.15.2/Submit) id w77EPZhn064984 for freebsd-questions@freebsd.org; Tue, 7 Aug 2018 16:25:35 +0200 (SAST) (envelope-from lordcow) Date: Tue, 7 Aug 2018 16:25:35 +0200 From: Gareth de Vaux To: freebsd-questions@freebsd.org Subject: Replacing failed drives on a raidz2 with geli Message-ID: <20180807142535.GA20017@lordcow.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.10.1 (2018-07-13) X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lordcow.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Aug 2018 14:48:34 -0000 Hi all, I've installed a Root on ZFS raidz2 with geli encryption on FreeBSD 11.2 from the installer. I'm new to geli so trying to simulate a disk failure to make sure I can recover. Once I've replaced 3 drives the zpool seems fine but fails to reboot: http://lordcow.org/boot.jpg , specifically: ZFS: i/o error - all block copies unavailable I'm also asked to enter the passphrase for the new disks separately on boot up prior to the 3rd one failing. I'm guessing the bootcode isn't getting copied correctly but not sure where I'm going wrong, this's what I do after failing and zero'ing a drive: gpart create -s gpt ada0 gpart add -b 40 -s 512K -t freebsd-boot -l gptboot0 ada0 gpart add -b 2048 -s 2G -t freebsd-swap -l swap0 ada0 gpart add -s 15623856128 -t freebsd-zfs -l zfs0 ada0 (to match the tables of the other disks) gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 1 ada0 geli init -e AES-XTS -l 256 -s 4096 -b /dev/ada0p3 (Assuming these are the right parameters given what the installer does? Not using a key, just a passphrase. Should master keys on the existing array be backed up? how?) geli attach /dev/ada0p3 zpool replace zroot ada0p3.eli This succesfully resilvers the drive, but again on the 3rd drive it fails to boot. Any help appreciated. From owner-freebsd-questions@freebsd.org Tue Aug 7 16:22:42 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E5EE910632E9 for ; Tue, 7 Aug 2018 16:22:41 +0000 (UTC) (envelope-from ixbug@riseup.net) Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.riseup.net", Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 88E3B7622F for ; Tue, 7 Aug 2018 16:22:41 +0000 (UTC) (envelope-from ixbug@riseup.net) Received: from cotinga.riseup.net (cotinga-pn.riseup.net [10.0.1.164]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.riseup.net", Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK)) by mx1.riseup.net (Postfix) with ESMTPS id 2928E1A0A6D for ; Tue, 7 Aug 2018 09:22:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1533658953; bh=IWwbIsiqt318AeeCReBSfCz8/4KdPLTMMXK1LcUhx6c=; h=To:From:Subject:Date:From; b=aM77YTw4MGSAy4Je4S11rYF+sOhmAIqGAY17edz82TSXE8Ry4dY4uHh4sLNRcIckt m+mOCHaoUzWbwcxMZmyQqrSYhI5AmTyycsrvTv1JNECgZGCIVsikH3zE/ROIvc/Wwg gHdvL6FqZ6gpZExfMBMTg9hRaMky6JrBw41PDuHc= X-Riseup-User-ID: 2BEBB333E47B70000FF171370B76FA666E7E39864C9C67A9A2D316AA885344FD Received: from [127.0.0.1] (localhost [127.0.0.1]) by cotinga.riseup.net with ESMTPSA id 4B09962D3C for ; Tue, 7 Aug 2018 09:22:31 -0700 (PDT) To: freebsd-questions@freebsd.org From: ixbug@riseup.net Subject: ixl(4) hangs when starting iovctl(8) Message-ID: Date: Tue, 07 Aug 2018 16:22:00 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Aug 2018 16:22:42 -0000 Hello! I was wondering if anyone else is using ixl(4) version 1.9.13 successfully with SR-IOV enabled (VF in passthrough mode)? I only get hangs when starting iovctl(8) and have to reboot to recover. A week ago I filed it on bugzilla, but there has been no comment so far. https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=230235 From owner-freebsd-questions@freebsd.org Tue Aug 7 17:24:04 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CECF7106524B for ; Tue, 7 Aug 2018 17:24:04 +0000 (UTC) (envelope-from freebsd-en@lists.vlassakakis.de) Received: from dd14614.kasserver.com (dd14614.kasserver.com [85.13.136.14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 593A4786BF for ; Tue, 7 Aug 2018 17:24:03 +0000 (UTC) (envelope-from freebsd-en@lists.vlassakakis.de) Received: from [192.168.3.57] (p5496E1D0.dip0.t-ipconnect.de [84.150.225.208]) by dd14614.kasserver.com (Postfix) with ESMTPSA id DF58343C1FB4; Tue, 7 Aug 2018 19:24:01 +0200 (CEST) From: Philipp Vlassakakis Message-Id: <8ACAABE6-5054-4AFC-81F1-2909F9D69EF8@lists.vlassakakis.de> Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Subject: Re: Jails - IPv4 and IPv6 Date: Tue, 7 Aug 2018 19:24:01 +0200 In-Reply-To: <5B6895CB.1070004@gmail.com> Cc: FreeBSD Mailing List To: shamim.shahriar@gmail.com References: <5B6895CB.1070004@gmail.com> X-Mailer: Apple Mail (2.3445.9.1) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.27 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Aug 2018 17:24:05 -0000 > Am 06.08.2018 um 20:21 schrieb Shamim Shahriar = : > Hi Philipp >=20 > I'm using both IPv4 and IPv6 in my vNet jails. The IPv4 gets = configured via the jail.conf, while v6 is via rc.conf from inside the = jail, two lines to define v6 on epair and the gw as well. If you need, u = can send you the configurations later. >=20 > They are quite stable, the pf on the hosts controls the access, works = as expected. >=20 > Regards >=20 I would like to configure the IP addresses outside the jails, because = customers may access these jails and I don't want customers to be able = to simply change the IP addresses which might lead to the Jail being = unreachable from the =E2=80=9Eoutside=E2=80=9C.= From owner-freebsd-questions@freebsd.org Tue Aug 7 18:47:23 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 43BAD1067873 for ; Tue, 7 Aug 2018 18:47:23 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: from mail-yb0-x230.google.com (mail-yb0-x230.google.com [IPv6:2607:f8b0:4002:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id CFDFA7BE79 for ; Tue, 7 Aug 2018 18:47:22 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: by mail-yb0-x230.google.com with SMTP id x14-v6so1215501ybi.13 for ; Tue, 07 Aug 2018 11:47:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=CsrwqIcQkpJMJV3KUfnNmN1R8WL0zC/HIjp5D02+tb4=; b=sGO42xaUfgaY0PpfjgespCLWVvfHRuHFE7MVa10/ZxUYH1Puezgmj4OH/9dgmCstYL KA8EBFkDjFXVfu92+kOHUjlI3hoW5cr9m3D09jfMiWlTf4DOk2H6D8gQVAfdW80XEqGx ry1G7IEOlpwIlNYYp43senWvJq8PhrE2IvrkEm2TDwpLf15t4Wb6mDkpIY0LUYMZQZbP ckBbMAmNeg+mIcuvLd+6ze+8qAWnrAPFAWkWXofpC5cUsTkS2bTYHmENUl7F8nOeMgpY U5k2hOUJhohlXgbBUxVVweid6sR9Z6ZX8PyW8uNzwav41p0dA649vCtIUd69f8sRJNF+ C8oA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=CsrwqIcQkpJMJV3KUfnNmN1R8WL0zC/HIjp5D02+tb4=; b=Z8evqJLAEsCpz9do6Dy6Pcf3mbCoTsLDVW9u/tZ7dfe3f2nUjkNNO0/Z8X8+NGdV1a Z3la+cAZ6+/8RE6rnqBci4052DQfSCd1oo9aNmUINa2jSVb4ognFHZG2TovN6t/irzSV TUHh4B33vOx44dABTnkc9Q7o1d0Nq0UjGeueFqrqceFINRFqWXXPzif6UgcQYX10krRQ trIYlujuYFZXCzr8Z1i/pIw6y2gNAsg04tGd8y5OvTMmd4U4YdxJ3fdYydouVO9l6TJZ BaI+Zr5pswxH3m3ErYTcujc90CJvjk/J6+L3S4QEBoeoVtMe5H/k81WQzHvHWKeJxn/Y jZ1Q== X-Gm-Message-State: AOUpUlGeELtkjYb9EUMeL7o6KTY/ZtgkZuiW5p3JGcBtfwnV6TdADBgN 04WLJugA7z7aGOwkAyf3elaFCxVxvVzKJTWF1Sbv X-Google-Smtp-Source: AAOMgpdk5TB8UH5XIZFDdsAJdSqaLRnGIngg0tFgoccZPGEfb48gjvfn8zSWVAJUJF6z+OJB1wn4rdd/LX1JOiGngXw= X-Received: by 2002:a25:b5cb:: with SMTP id d11-v6mr10546609ybg.1.1533667642276; Tue, 07 Aug 2018 11:47:22 -0700 (PDT) MIME-Version: 1.0 References: <5B6895CB.1070004@gmail.com> <8ACAABE6-5054-4AFC-81F1-2909F9D69EF8@lists.vlassakakis.de> In-Reply-To: <8ACAABE6-5054-4AFC-81F1-2909F9D69EF8@lists.vlassakakis.de> From: Shamim Shahriar Date: Tue, 7 Aug 2018 19:38:55 +0100 Message-ID: Subject: Re: Jails - IPv4 and IPv6 To: Philipp Vlassakakis Cc: "freebsd-questions@FreeBSD.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.27 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Aug 2018 18:47:23 -0000 On Tue, 7 Aug 2018, 18:24 Philipp Vlassakakis, < freebsd-en@lists.vlassakakis.de> wrote: > > Am 06.08.2018 um 20:21 schrieb Shamim Shahriar >: > > > Hi Philipp > > I'm using both IPv4 and IPv6 in my vNet jails. The IPv4 gets configured > via the jail.conf, while v6 is via rc.conf from inside the jail, two line= s > to define v6 on epair and the gw as well. If you need, u can send you the > configurations later. > > They are quite stable, the pf on the hosts controls the access, works as > expected. > > Regards > > > I would like to configure the IP addresses outside the jails, because > customers may access these jails and I don't want customers to be able to > simply change the IP addresses which might lead to the Jail being > unreachable from the =E2=80=9Eoutside=E2=80=9C. > Hi Philipp Not sure about the validity of that premise. From within the jail I can always do ifconfig abc0 down or even add more IP in my jail, not to mention all other stupid things I can do and loose connectivity to it. In my limited understanding, I think jails are NOT designed to be a replacement for well known VPS or similar (like esxi or xen). Rather, they are your own personal VPS that share the resources of a physical server to minimize wasted resources within that physical realm. Maybe someone with a better understanding and knowledge can correct my misconceptions and provide a few links so I can correct myself. Best regards From owner-freebsd-questions@freebsd.org Tue Aug 7 20:13:19 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 61D981069F0C for ; Tue, 7 Aug 2018 20:13:19 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mail-io0-x235.google.com (mail-io0-x235.google.com [IPv6:2607:f8b0:4001:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E9B7780021 for ; Tue, 7 Aug 2018 20:13:18 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mail-io0-x235.google.com with SMTP id v26-v6so15092937iog.5 for ; Tue, 07 Aug 2018 13:13:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-transfer-encoding; bh=GsyDLERpdCeprlMl0/M/BUiLoGf97AEwZg3W+XvpfX8=; b=jVuaOdlmjfHlDI9Ze01p5qRTkhwO9xVZyWyq+FXmgG6O9YDxcYrU+jcEObiMLiTRYs JQULXcwbxJTyPoDmq0ZhF3M3gzRnMzKEMyZOGfFx55OFnBjTKzTrVYFJuiGp/yCgktUl bolv5yBMnidBfASTZ2ZExZtvXFYDjt9r4uHAexbjfEIErgR6xZ3UEJcXJL/Jdey1zc4x jS90FOXKVPujd49FQ+cqT9f3J4oARmZlPdiFQ0Y90zmU8peJzhPJ0Iltgzoq+sh14w8S qjUq0UHeNmVzou0k5ObnEsZbxQ8P/hij4jwvmBaGGSAsiP/xmz35oVW4jiqSsi3iF91i rt+g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:content-transfer-encoding; bh=GsyDLERpdCeprlMl0/M/BUiLoGf97AEwZg3W+XvpfX8=; b=B8ttsgbYstbBYGRNb36vSdF9QRDCmqJBjN1fhMZRPGgkpub+yThXLdoorjkLosO+xa LBnnhCn5ATjPt9OebgIUl9YcgVXP4U3Lb4xXk53wLPtwudchQjgRIhMsIUWffyT76Hgl l0PY/klTGt701vnDu2r4NZOvPjInG+YtoEdfKULt5y+00z31Ocy9n8oFgJ4CtZZ1Y82S brPYp8Ydpfj9hWkBLUen253nLpSl8tAGkuDdoG+tA0gra13mZ4MneByYjDUTmPLuwJit BK5otAAD8fjm5ADZSeg/g7Hd5VkSPei/zJXd3TiDr/BFnjRlVoPJq6bxIqd4Reyu9W99 Jw/A== X-Gm-Message-State: AOUpUlEJ4ftBEtJu4Ec5BQq9kzm/nhsUp14OX9Co+oOs/9zjK2nt2hxx 7aFfDLlrRYa2dPDvyjl3czU= X-Google-Smtp-Source: AA+uWPyFNCi9PQqd2jftg4h8Pq8zIClZU+CI5bS90t9tO4zP/k6GIJvakxS+gyGUahGGD8TQd1sy4g== X-Received: by 2002:a5e:860e:: with SMTP id z14-v6mr1975176ioj.67.1533672798402; Tue, 07 Aug 2018 13:13:18 -0700 (PDT) Received: from [10.0.10.7] (cpe-65-25-48-31.neo.res.rr.com. [65.25.48.31]) by smtp.googlemail.com with ESMTPSA id g198-v6sm6463845itg.4.2018.08.07.13.13.17 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Tue, 07 Aug 2018 13:13:17 -0700 (PDT) Message-ID: <5B69FD5D.5090500@gmail.com> Date: Tue, 07 Aug 2018 16:13:17 -0400 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Philipp Vlassakakis CC: shamim.shahriar@gmail.com, FreeBSD Mailing List Subject: Re: Jails - IPv4 and IPv6 References: <5B6895CB.1070004@gmail.com> <8ACAABE6-5054-4AFC-81F1-2909F9D69EF8@lists.vlassakakis.de> In-Reply-To: <8ACAABE6-5054-4AFC-81F1-2909F9D69EF8@lists.vlassakakis.de> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Aug 2018 20:13:19 -0000 Philipp Vlassakakis wrote: >> Am 06.08.2018 um 20:21 schrieb Shamim Shahriar : > >> Hi Philipp >> >> I'm using both IPv4 and IPv6 in my vNet jails. The IPv4 gets configured via the jail.conf, while v6 is via rc.conf from inside the jail, two lines to define v6 on epair and the gw as well. If you need, u can send you the configurations later. >> >> They are quite stable, the pf on the hosts controls the access, works as expected. >> >> Regards >> > > > I would like to configure the IP addresses outside the jails, because customers may access these jails and I don't want customers to be able to simply change the IP addresses which might lead to the Jail being unreachable from the „outside“. There are many different ways to configure non-vnet jails to use IPV6 addresses. The whole purposes of jails is to contain any user of that jail to the jail. Defining ip address in the rc.conf of the jail is not the way to do it. For jail security jail.conf is where IPV6 & IPV4 addresses are assigned to the jail. As long as you don't give jail users access to the host where the jail is run on, jail users will not be able to change the jail's IP addresses and have it work. From owner-freebsd-questions@freebsd.org Tue Aug 7 23:29:27 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 580F2106E0D8 for ; Tue, 7 Aug 2018 23:29:27 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (mail8.networktest.com [IPv6:2607:f740:c::a13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D4BA285E1D for ; Tue, 7 Aug 2018 23:29:26 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (localhost [127.0.0.1]) by mail8.networktest.com (Postfix) with ESMTP id D9F2C61803B for ; Tue, 7 Aug 2018 16:29:21 -0700 (PDT) Authentication-Results: mail8.networktest.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=networktest.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=networktest.com; h=content-transfer-encoding:content-language:content-type :content-type:mime-version:user-agent:date:date:message-id :subject:subject:organization:from:from:to; s=dkim; t= 1533684561; x=1534289362; bh=r3R1d0RMwJwiMenpUd5e8slcsoxlRCuxOmF N7GM3TTU=; b=Ud9/6xZN3yr8Nhix44uWTr0dGOZtHLcUnV+IdALTvr3CLUsHSlV Fs0UlmRM88OvP74QO9uwrKaHnUtweE+eS8Q5DJjnA5cIguCQ5UnylwuRX+QhJUk3 JxiBP82prrazCthYBzsHStCM2bukOIs8kHU2hBF6FeZYG/MO9wbaaexk= X-Virus-Scanned: amavisd-new at mail8.networktest.com Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id lStTsk-m0Oyk for ; Tue, 7 Aug 2018 16:29:21 -0700 (PDT) Received: from dhcp129.eng.networktest.com (ns.networktest.com [69.75.159.98]) by mail8.networktest.com (Postfix) with ESMTPSA id 1E97661803A for ; Tue, 7 Aug 2018 16:29:20 -0700 (PDT) To: freebsd-questions@freebsd.org From: David Newman Openpgp: preference=signencrypt Autocrypt: addr=dnewman@networktest.com; prefer-encrypt=mutual; keydata= xsFNBFnmfMEBEACt5x64cZy4FPct3SaH44BMAYkghlJDxI11XpHUJNFAuJ8MD8WgF5F6Nc9C PCl7WzIHAwgWkM2ntAgcOeKvBiFTtzMfiIczfgIAkhiyANYAm3MIH4Li9X0NltYtROQ7FUn+ H4IWZ0SF/BZH1jfoLRNVvuLHdXVYrol/9sGlSI1KTpzpt3GIgeTxdOgTy0nO0HO7c0EBTnRv L3fyYs2E9XgmqsHlFqHBvF1OV0HjVJsqohQxb9iReZEL2UseTZYIYOhKizI3oJOnwPmf7zYg E4jzL422tHbbj4Qwh8l4kZDvy3J+S+KmqFD+IvOUbFBmHZKKB8oFZvLrjd7PLRs0ORSaseqA di0TEUAC3RpmybB1iuukvYhayeLV9afwXWFGNTqrAGCrGPR9umP7OeKGIm6SHrmGnqMlAAz6 qfVITcbhdne2JiqLaZ23B1ezTmJwPPbDGi7G6Yk3Z5pzuZBgq/L1ZyenUBmIcx95C1kVmUtl POJJ3RUNXqJLkjfZhGcmQczR2U0WoOuHVWCmztxa3yhkQETjKhmlIkBV6pj2Bc/mtynVBZg8 XclC6f4Q9bADDOiwO6uDbqI8Bpa1X8YY7iL8QJy2JHACT/j/+mji6Er8c+xU9qkxNmjc3E2a KpCg7gIqnWFj/Ag76AHkPkIo2SO2QINyRMgnFMQeS6j7ij7BOwARAQABzUtEYXZpZCBOZXdt YW4gKERhdmlkIE5ld21hbiBOZXR3b3JrIFRlc3Qgd29yayBrZXkpIDxkbmV3bWFuQG5ldHdv cmt0ZXN0LmNvbT7CwX8EEwEIACkFAlnmfMECGwMFCQeGH4AHCwkIBwMCAQYVCAIJCgsEFgID AQIeAQIXgAAKCRB8vD6mldfDUqfvD/4zARgEeKZqNrJWOK9YMkIah6C6dMohRH0Pz9AkMz9+ 9i9VhdZf2Pv0hq+IEGw+6ISQZL/xiNmq4l6rBioU+AAq98CZq8sh0VLSSeEqYDbo9anvSu2W j1MzhC0BKhlaFPgy08EYZlN2z4pbSvG/ARc0xfTiGlU2jA+iEiMNDbHveGEH1iwAXV3JGA9T bIpe/D5pVO2aemTsePf6+OiATE7M3crqKYZX7WMejqMbOuXzWbeCh/HoDnBBSFDIHR3lQfqR 6jwvb/NogoBioMx6I9vtXvwkqVgp4/jxgkK+I1X4BCdXvC1s3qnJQ9lQT3kFPCJBhQ3qcORv Lvx5svBtp9undPvvp+7SEOBIZDyAfAtSRvBHSv86Y8XnTSrseqk/XtcQbsHs7eVAYcg7F0dR gXFNFUMg67VgacXfyi2GrmkIvA3Zh8h39pZBiTiKfizMhn10gFPhHI6zndR5mYVO5sGUVMVt Mw4f0MDiKHmgFZcs/zcO89OSx3vRwAn5YfBdCagrX1VPYAgGxsfPhnUT8BjmqAFLbHHpb23n HUtfepMIeNaN76/PcxQJUInx/9MfceKL/XGJ8uThM3Ujdv8x6IS7mzEqSbMQTqVVi7loIfP3 qqP87k4Z6G7IMNXKk/Mg84kLTq7YD48pm9S1ME+ghd7wraX2tcbMycuZsrE4XfI8ic7BTQRZ 5nzBARAA9fYZMETrO0l7alXxUVxYxLYVWulKh3GBz9yAeSXSEIJ+q8f0WsDK5zPd6ndBzY2k pT2DJ/ND1NfZJlEo5o27eETQJkpIMV38ZINZz/gVThMIIpCHZeSMW3JveZYEB1xYLFLxeILI ECBAO/h0ASdRz0KYLJldWmuWBUd3tsxhOpK/lZ/s5wbFpstAzsAiw0sm2de4UpNpmGHc1x1j eJH4WBKIAUkZLDXUWEkN1aSVMGWH/2yH87x/J/Mjrj49T+6RwwUohSgOQV3q1XjGjqDq/tpN BPODp32z9GchIvmCU4cRF0uQKpUXtu0fpwnmc1W5M/1aVPQ33vgEFcS/brpWMf7xLIL9EGDp 4/4BukImG4wOx1L3GuKIw5XXNLA9uCriWXr7NSvI00AhXR7m/NbE9ZLIHKfTWssFf9hYnh3p x2n1E+Hy/okqDppfGynHUJjcl5UwP2v6lKO4VO8Gz6wdhl2sYU9pNT6/8Hfp9lnY0BTbFv5Y zZfD77NdCJoDwEd2FUgRzb4vqjwoswci8U73pcOCylbQbAEC5scy/Bd5BOoSIy0kGaQYqumA 3rGXzDn4B02xiYiraNIH28jZPmWzYGM/jncajRFYARZFh/K1OW8Wl3JILAlwZP4VO6ECDj3r qv9EwUv6gxsikXtCT0xjnHL/N5+UQBIQOrx7/TKb80MAEQEAAcLBZQQYAQgADwUCWeZ8wQIb DAUJB4YfgAAKCRB8vD6mldfDUvPlD/4rpb17nhmvSnAy+ShanY2p40M4kgo46Mwmvm3Dmug8 5P+ECRtmhTZ+kEU8Ici/u7FFvE1WHydeNCdE/tOaJ3qXMLBOd4SiB+sa21E0veqR28qUmymI Ti/gFhMpL2Cfa5oPQj5sq/fdEPJzpAoaHfxUMPIUZ7ebM96syazndEFJAFS9MO00/SJ/HcUx 8VMypzqoG+EyBs4c+PThNRyuUH5x8gh4uABILTYIwqUE4HESpRef9ETdJpBkWhsQqxo3Nvoa TLjZH0LNnMyZXOb/aUeQBm0TSGda+on+0BdI70QgI42mu6ovKup32eUhHh7C9scKv8NJYo1Z 4PqRQVIEPznCizZ90aBP1Ia0rJfcADzFNrOQru1WXmm+zXu/TYdESyoL5MRAlitEIs34oeJF X8wMgkHZBFVhvEm60ynH2HZQRLWGIVBnW7oJ2apTx10L2AZWZvLQ6P8pn4eZMPX3+f854d4Q D4yEhE9Ec7CTiqmo6A5+bHGi/yf8VzxMNorlyHCIFZZdfm5vctcg78iUfqsKyvAULpmjLKyA YkX0qv2EnCMUb9urwITWbQTySOVazfjOjRPUO1z5RbfGwCMwNdW8ahf94jtLaVbvVp+7F8dD Y81Qhcbc2MAOWzP1ghr+wsyAyvzVJuDS0kDh6XjpuZddSBEYAh+aI8Kcwqsr75INMg== Organization: Network Test Inc. Subject: xrdp configuration and xfce4 Message-ID: Date: Tue, 7 Aug 2018 16:29:19 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Aug 2018 23:29:27 -0000 In search of a working xrdp configuration to get connected from a Mac running the Microsoft RDP client to a FreeBSD 11.2 machine running xfce4. This worked fine until May, when a package upgrade from 0.6.x to 0.9.x broke a working config. Since then, startxfce4 doesn't run automatically, and copy-paste stopped working even though it's enabled in xrdp.ini. Worse, I didn't make backups of the old configs before running the pkg upgrade. I've examined the xrdp.ini and startwm.sh scripts but don't know what to change for FreeBSD. In particular, startwm.sh script is oriented toward Linux distros, and I don't know what changes to make for FreeBSD. The freebsd-questions archive and searches for xrdp-on-Freebsd configuration information didn't help, and I don't know enough about X to get this working from the man pages. Thanks in advance for configuration clues and/or working configs. dn From owner-freebsd-questions@freebsd.org Wed Aug 8 01:19:33 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 91E46107058E for ; Wed, 8 Aug 2018 01:19:33 +0000 (UTC) (envelope-from meta@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3F2CA89085; Wed, 8 Aug 2018 01:19:33 +0000 (UTC) (envelope-from meta@freebsd.org) Received: from ssl.vmeta.jp (unknown [IPv6:2405:6586:2280:1200:e49d:2438:afd1:6c53]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) (Authenticated sender: meta/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 174BD1817E; Wed, 8 Aug 2018 01:19:31 +0000 (UTC) (envelope-from meta@freebsd.org) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Wed, 08 Aug 2018 10:19:29 +0900 From: Koichiro Iwao To: David Newman Cc: freebsd-questions@freebsd.org Subject: Re: xrdp configuration and xfce4 In-Reply-To: References: Message-ID: X-Sender: meta@freebsd.org User-Agent: Roundcube Webmail/1.3.6 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 01:19:33 -0000 Hi, > I've examined the xrdp.ini and startwm.sh scripts but don't know what > to > change for FreeBSD. In particular, startwm.sh script is oriented toward > Linux distros, and I don't know what changes to make for FreeBSD. Just start Xfce. -- meta From owner-freebsd-questions@freebsd.org Wed Aug 8 01:24:22 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 02D3510709F0 for ; Wed, 8 Aug 2018 01:24:22 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (mail8.networktest.com [IPv6:2607:f740:c::a13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7FE15895C9 for ; Wed, 8 Aug 2018 01:24:21 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (localhost [127.0.0.1]) by mail8.networktest.com (Postfix) with ESMTP id AC77461803B for ; Tue, 7 Aug 2018 18:24:18 -0700 (PDT) Authentication-Results: mail8.networktest.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=networktest.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=networktest.com; h=content-transfer-encoding:content-language:content-type :content-type:in-reply-to:mime-version:user-agent:date:date :message-id:organization:from:from:references:to:subject :subject; s=dkim; t=1533691458; x=1534296259; bh=XqVzmzRST6Ml4f+ vF9D1xlOCWXO+VhUtmfP81TXylY8=; b=kCJEwtNDZnh50rg57Tb9YQ+0/9tozoc NqfxvGa3jJWWP3ngs4qvoSGpSLqt9G9GkYVLzp4pr3AFNOAqvojrOZ6Hz2Kd27DD LUIr/a5OebOVDTmlSfnHgyuDsrlXGMbOWadJg0xJxnIiMhfQ1i1QvfwdyA7K8Bt8 jBsBH9A3plec= X-Virus-Scanned: amavisd-new at mail8.networktest.com Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id UEe_YlAojXNz for ; Tue, 7 Aug 2018 18:24:18 -0700 (PDT) Received: from dhcp129.eng.networktest.com (ns.networktest.com [69.75.159.98]) by mail8.networktest.com (Postfix) with ESMTPSA id 8371C61803A; Tue, 7 Aug 2018 18:24:16 -0700 (PDT) Subject: Re: xrdp configuration and xfce4 To: Koichiro Iwao Cc: freebsd-questions@freebsd.org References: From: David Newman Openpgp: preference=signencrypt Autocrypt: addr=dnewman@networktest.com; prefer-encrypt=mutual; keydata= xsFNBFnmfMEBEACt5x64cZy4FPct3SaH44BMAYkghlJDxI11XpHUJNFAuJ8MD8WgF5F6Nc9C PCl7WzIHAwgWkM2ntAgcOeKvBiFTtzMfiIczfgIAkhiyANYAm3MIH4Li9X0NltYtROQ7FUn+ H4IWZ0SF/BZH1jfoLRNVvuLHdXVYrol/9sGlSI1KTpzpt3GIgeTxdOgTy0nO0HO7c0EBTnRv L3fyYs2E9XgmqsHlFqHBvF1OV0HjVJsqohQxb9iReZEL2UseTZYIYOhKizI3oJOnwPmf7zYg E4jzL422tHbbj4Qwh8l4kZDvy3J+S+KmqFD+IvOUbFBmHZKKB8oFZvLrjd7PLRs0ORSaseqA di0TEUAC3RpmybB1iuukvYhayeLV9afwXWFGNTqrAGCrGPR9umP7OeKGIm6SHrmGnqMlAAz6 qfVITcbhdne2JiqLaZ23B1ezTmJwPPbDGi7G6Yk3Z5pzuZBgq/L1ZyenUBmIcx95C1kVmUtl POJJ3RUNXqJLkjfZhGcmQczR2U0WoOuHVWCmztxa3yhkQETjKhmlIkBV6pj2Bc/mtynVBZg8 XclC6f4Q9bADDOiwO6uDbqI8Bpa1X8YY7iL8QJy2JHACT/j/+mji6Er8c+xU9qkxNmjc3E2a KpCg7gIqnWFj/Ag76AHkPkIo2SO2QINyRMgnFMQeS6j7ij7BOwARAQABzUtEYXZpZCBOZXdt YW4gKERhdmlkIE5ld21hbiBOZXR3b3JrIFRlc3Qgd29yayBrZXkpIDxkbmV3bWFuQG5ldHdv cmt0ZXN0LmNvbT7CwX8EEwEIACkFAlnmfMECGwMFCQeGH4AHCwkIBwMCAQYVCAIJCgsEFgID AQIeAQIXgAAKCRB8vD6mldfDUqfvD/4zARgEeKZqNrJWOK9YMkIah6C6dMohRH0Pz9AkMz9+ 9i9VhdZf2Pv0hq+IEGw+6ISQZL/xiNmq4l6rBioU+AAq98CZq8sh0VLSSeEqYDbo9anvSu2W j1MzhC0BKhlaFPgy08EYZlN2z4pbSvG/ARc0xfTiGlU2jA+iEiMNDbHveGEH1iwAXV3JGA9T bIpe/D5pVO2aemTsePf6+OiATE7M3crqKYZX7WMejqMbOuXzWbeCh/HoDnBBSFDIHR3lQfqR 6jwvb/NogoBioMx6I9vtXvwkqVgp4/jxgkK+I1X4BCdXvC1s3qnJQ9lQT3kFPCJBhQ3qcORv Lvx5svBtp9undPvvp+7SEOBIZDyAfAtSRvBHSv86Y8XnTSrseqk/XtcQbsHs7eVAYcg7F0dR gXFNFUMg67VgacXfyi2GrmkIvA3Zh8h39pZBiTiKfizMhn10gFPhHI6zndR5mYVO5sGUVMVt Mw4f0MDiKHmgFZcs/zcO89OSx3vRwAn5YfBdCagrX1VPYAgGxsfPhnUT8BjmqAFLbHHpb23n HUtfepMIeNaN76/PcxQJUInx/9MfceKL/XGJ8uThM3Ujdv8x6IS7mzEqSbMQTqVVi7loIfP3 qqP87k4Z6G7IMNXKk/Mg84kLTq7YD48pm9S1ME+ghd7wraX2tcbMycuZsrE4XfI8ic7BTQRZ 5nzBARAA9fYZMETrO0l7alXxUVxYxLYVWulKh3GBz9yAeSXSEIJ+q8f0WsDK5zPd6ndBzY2k pT2DJ/ND1NfZJlEo5o27eETQJkpIMV38ZINZz/gVThMIIpCHZeSMW3JveZYEB1xYLFLxeILI ECBAO/h0ASdRz0KYLJldWmuWBUd3tsxhOpK/lZ/s5wbFpstAzsAiw0sm2de4UpNpmGHc1x1j eJH4WBKIAUkZLDXUWEkN1aSVMGWH/2yH87x/J/Mjrj49T+6RwwUohSgOQV3q1XjGjqDq/tpN BPODp32z9GchIvmCU4cRF0uQKpUXtu0fpwnmc1W5M/1aVPQ33vgEFcS/brpWMf7xLIL9EGDp 4/4BukImG4wOx1L3GuKIw5XXNLA9uCriWXr7NSvI00AhXR7m/NbE9ZLIHKfTWssFf9hYnh3p x2n1E+Hy/okqDppfGynHUJjcl5UwP2v6lKO4VO8Gz6wdhl2sYU9pNT6/8Hfp9lnY0BTbFv5Y zZfD77NdCJoDwEd2FUgRzb4vqjwoswci8U73pcOCylbQbAEC5scy/Bd5BOoSIy0kGaQYqumA 3rGXzDn4B02xiYiraNIH28jZPmWzYGM/jncajRFYARZFh/K1OW8Wl3JILAlwZP4VO6ECDj3r qv9EwUv6gxsikXtCT0xjnHL/N5+UQBIQOrx7/TKb80MAEQEAAcLBZQQYAQgADwUCWeZ8wQIb DAUJB4YfgAAKCRB8vD6mldfDUvPlD/4rpb17nhmvSnAy+ShanY2p40M4kgo46Mwmvm3Dmug8 5P+ECRtmhTZ+kEU8Ici/u7FFvE1WHydeNCdE/tOaJ3qXMLBOd4SiB+sa21E0veqR28qUmymI Ti/gFhMpL2Cfa5oPQj5sq/fdEPJzpAoaHfxUMPIUZ7ebM96syazndEFJAFS9MO00/SJ/HcUx 8VMypzqoG+EyBs4c+PThNRyuUH5x8gh4uABILTYIwqUE4HESpRef9ETdJpBkWhsQqxo3Nvoa TLjZH0LNnMyZXOb/aUeQBm0TSGda+on+0BdI70QgI42mu6ovKup32eUhHh7C9scKv8NJYo1Z 4PqRQVIEPznCizZ90aBP1Ia0rJfcADzFNrOQru1WXmm+zXu/TYdESyoL5MRAlitEIs34oeJF X8wMgkHZBFVhvEm60ynH2HZQRLWGIVBnW7oJ2apTx10L2AZWZvLQ6P8pn4eZMPX3+f854d4Q D4yEhE9Ec7CTiqmo6A5+bHGi/yf8VzxMNorlyHCIFZZdfm5vctcg78iUfqsKyvAULpmjLKyA YkX0qv2EnCMUb9urwITWbQTySOVazfjOjRPUO1z5RbfGwCMwNdW8ahf94jtLaVbvVp+7F8dD Y81Qhcbc2MAOWzP1ghr+wsyAyvzVJuDS0kDh6XjpuZddSBEYAh+aI8Kcwqsr75INMg== Organization: Network Test Inc. Message-ID: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> Date: Tue, 7 Aug 2018 18:24:15 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 01:24:22 -0000 On 8/7/18 6:19 PM, Koichiro Iwao wrote: > Hi, > >> I've examined the xrdp.ini and startwm.sh scripts but don't know what to >> change for FreeBSD. In particular, startwm.sh script is oriented toward >> Linux distros, and I don't know what changes to make for FreeBSD. > > Just start Xfce. Not sure what changes I would make in startxm.sh to automate this. The existing script has file locations for X on Linux distros. After the upgrade, a connection takes around 30-60 seconds, much longer than before. Eventually a black background and xterm appear, and I can manually run 'startxfce4 &' from there. Even then, copy/paste is still broken. Thanks in advance for any clues on automating xfce startup and enabling copy/paste (which, again, both worked before the upgrade). dn From owner-freebsd-questions@freebsd.org Wed Aug 8 01:31:55 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 81B8A1070D67 for ; Wed, 8 Aug 2018 01:31:55 +0000 (UTC) (envelope-from meta@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3A84F899A0; Wed, 8 Aug 2018 01:31:55 +0000 (UTC) (envelope-from meta@FreeBSD.org) Received: from icepick.vmeta.jp (unknown [IPv6:2405:6586:2280:1200:2504:c84a:fac3:3f2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: meta/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 3F2D21827B; Wed, 8 Aug 2018 01:31:54 +0000 (UTC) (envelope-from meta@FreeBSD.org) Date: Wed, 8 Aug 2018 10:31:51 +0900 From: Koichiro Iwao To: David Newman Cc: freebsd-questions@freebsd.org Subject: Re: xrdp configuration and xfce4 Message-ID: <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> X-Operating-System: FreeBSD 11.2-STABLE amd64 User-Agent: NeoMutt/20180716 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 01:31:55 -0000 On Tue, Aug 07, 2018 at 06:24:15PM -0700, David Newman wrote: > Not sure what changes I would make in startxm.sh to automate this. The > existing script has file locations for X on Linux distros. Really? ``` #!/bin/sh startxfce4 ``` That's all. -- meta From owner-freebsd-questions@freebsd.org Wed Aug 8 02:10:57 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DDE05107199A for ; Wed, 8 Aug 2018 02:10:56 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (mail8.networktest.com [IPv6:2607:f740:c::a13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 69BB88A8F9 for ; Wed, 8 Aug 2018 02:10:56 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (localhost [127.0.0.1]) by mail8.networktest.com (Postfix) with ESMTP id A437061803B for ; Tue, 7 Aug 2018 19:10:54 -0700 (PDT) Authentication-Results: mail8.networktest.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=networktest.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=networktest.com; h=content-transfer-encoding:content-language:content-type :content-type:in-reply-to:mime-version:user-agent:date:date :message-id:subject:subject:organization:from:from:references; s=dkim; t=1533694254; x=1534299055; bh=p/oQhp6LCtyHtrwYPEQnq8qS T0qdeJ9yzbDQiFd60C0=; b=qmMA7nhCsU+VPl3h4F1m4CA0djJcoiGHMuIrcArd Lz2C/L8QJGnUIxpyPhZHjO3OMDh8S8WuLBD9S2MRRMSwVZ1oq0EYhxOQNWZuD++z cjsdHlCkWSjQhOmlByXmFFrNoX1smI3S8eSi32TI/uFqL+50u6sKxZG8666HIGvF JT8= X-Virus-Scanned: amavisd-new at mail8.networktest.com Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 7Fi6naZFZAZD for ; Tue, 7 Aug 2018 19:10:54 -0700 (PDT) Received: from dhcp129.eng.networktest.com (ns.networktest.com [69.75.159.98]) by mail8.networktest.com (Postfix) with ESMTPSA id 716A161803A for ; Tue, 7 Aug 2018 19:10:52 -0700 (PDT) Cc: freebsd-questions@freebsd.org References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> From: David Newman Openpgp: preference=signencrypt Autocrypt: addr=dnewman@networktest.com; prefer-encrypt=mutual; keydata= xsFNBFnmfMEBEACt5x64cZy4FPct3SaH44BMAYkghlJDxI11XpHUJNFAuJ8MD8WgF5F6Nc9C PCl7WzIHAwgWkM2ntAgcOeKvBiFTtzMfiIczfgIAkhiyANYAm3MIH4Li9X0NltYtROQ7FUn+ H4IWZ0SF/BZH1jfoLRNVvuLHdXVYrol/9sGlSI1KTpzpt3GIgeTxdOgTy0nO0HO7c0EBTnRv L3fyYs2E9XgmqsHlFqHBvF1OV0HjVJsqohQxb9iReZEL2UseTZYIYOhKizI3oJOnwPmf7zYg E4jzL422tHbbj4Qwh8l4kZDvy3J+S+KmqFD+IvOUbFBmHZKKB8oFZvLrjd7PLRs0ORSaseqA di0TEUAC3RpmybB1iuukvYhayeLV9afwXWFGNTqrAGCrGPR9umP7OeKGIm6SHrmGnqMlAAz6 qfVITcbhdne2JiqLaZ23B1ezTmJwPPbDGi7G6Yk3Z5pzuZBgq/L1ZyenUBmIcx95C1kVmUtl POJJ3RUNXqJLkjfZhGcmQczR2U0WoOuHVWCmztxa3yhkQETjKhmlIkBV6pj2Bc/mtynVBZg8 XclC6f4Q9bADDOiwO6uDbqI8Bpa1X8YY7iL8QJy2JHACT/j/+mji6Er8c+xU9qkxNmjc3E2a KpCg7gIqnWFj/Ag76AHkPkIo2SO2QINyRMgnFMQeS6j7ij7BOwARAQABzUtEYXZpZCBOZXdt YW4gKERhdmlkIE5ld21hbiBOZXR3b3JrIFRlc3Qgd29yayBrZXkpIDxkbmV3bWFuQG5ldHdv cmt0ZXN0LmNvbT7CwX8EEwEIACkFAlnmfMECGwMFCQeGH4AHCwkIBwMCAQYVCAIJCgsEFgID AQIeAQIXgAAKCRB8vD6mldfDUqfvD/4zARgEeKZqNrJWOK9YMkIah6C6dMohRH0Pz9AkMz9+ 9i9VhdZf2Pv0hq+IEGw+6ISQZL/xiNmq4l6rBioU+AAq98CZq8sh0VLSSeEqYDbo9anvSu2W j1MzhC0BKhlaFPgy08EYZlN2z4pbSvG/ARc0xfTiGlU2jA+iEiMNDbHveGEH1iwAXV3JGA9T bIpe/D5pVO2aemTsePf6+OiATE7M3crqKYZX7WMejqMbOuXzWbeCh/HoDnBBSFDIHR3lQfqR 6jwvb/NogoBioMx6I9vtXvwkqVgp4/jxgkK+I1X4BCdXvC1s3qnJQ9lQT3kFPCJBhQ3qcORv Lvx5svBtp9undPvvp+7SEOBIZDyAfAtSRvBHSv86Y8XnTSrseqk/XtcQbsHs7eVAYcg7F0dR gXFNFUMg67VgacXfyi2GrmkIvA3Zh8h39pZBiTiKfizMhn10gFPhHI6zndR5mYVO5sGUVMVt Mw4f0MDiKHmgFZcs/zcO89OSx3vRwAn5YfBdCagrX1VPYAgGxsfPhnUT8BjmqAFLbHHpb23n HUtfepMIeNaN76/PcxQJUInx/9MfceKL/XGJ8uThM3Ujdv8x6IS7mzEqSbMQTqVVi7loIfP3 qqP87k4Z6G7IMNXKk/Mg84kLTq7YD48pm9S1ME+ghd7wraX2tcbMycuZsrE4XfI8ic7BTQRZ 5nzBARAA9fYZMETrO0l7alXxUVxYxLYVWulKh3GBz9yAeSXSEIJ+q8f0WsDK5zPd6ndBzY2k pT2DJ/ND1NfZJlEo5o27eETQJkpIMV38ZINZz/gVThMIIpCHZeSMW3JveZYEB1xYLFLxeILI ECBAO/h0ASdRz0KYLJldWmuWBUd3tsxhOpK/lZ/s5wbFpstAzsAiw0sm2de4UpNpmGHc1x1j eJH4WBKIAUkZLDXUWEkN1aSVMGWH/2yH87x/J/Mjrj49T+6RwwUohSgOQV3q1XjGjqDq/tpN BPODp32z9GchIvmCU4cRF0uQKpUXtu0fpwnmc1W5M/1aVPQ33vgEFcS/brpWMf7xLIL9EGDp 4/4BukImG4wOx1L3GuKIw5XXNLA9uCriWXr7NSvI00AhXR7m/NbE9ZLIHKfTWssFf9hYnh3p x2n1E+Hy/okqDppfGynHUJjcl5UwP2v6lKO4VO8Gz6wdhl2sYU9pNT6/8Hfp9lnY0BTbFv5Y zZfD77NdCJoDwEd2FUgRzb4vqjwoswci8U73pcOCylbQbAEC5scy/Bd5BOoSIy0kGaQYqumA 3rGXzDn4B02xiYiraNIH28jZPmWzYGM/jncajRFYARZFh/K1OW8Wl3JILAlwZP4VO6ECDj3r qv9EwUv6gxsikXtCT0xjnHL/N5+UQBIQOrx7/TKb80MAEQEAAcLBZQQYAQgADwUCWeZ8wQIb DAUJB4YfgAAKCRB8vD6mldfDUvPlD/4rpb17nhmvSnAy+ShanY2p40M4kgo46Mwmvm3Dmug8 5P+ECRtmhTZ+kEU8Ici/u7FFvE1WHydeNCdE/tOaJ3qXMLBOd4SiB+sa21E0veqR28qUmymI Ti/gFhMpL2Cfa5oPQj5sq/fdEPJzpAoaHfxUMPIUZ7ebM96syazndEFJAFS9MO00/SJ/HcUx 8VMypzqoG+EyBs4c+PThNRyuUH5x8gh4uABILTYIwqUE4HESpRef9ETdJpBkWhsQqxo3Nvoa TLjZH0LNnMyZXOb/aUeQBm0TSGda+on+0BdI70QgI42mu6ovKup32eUhHh7C9scKv8NJYo1Z 4PqRQVIEPznCizZ90aBP1Ia0rJfcADzFNrOQru1WXmm+zXu/TYdESyoL5MRAlitEIs34oeJF X8wMgkHZBFVhvEm60ynH2HZQRLWGIVBnW7oJ2apTx10L2AZWZvLQ6P8pn4eZMPX3+f854d4Q D4yEhE9Ec7CTiqmo6A5+bHGi/yf8VzxMNorlyHCIFZZdfm5vctcg78iUfqsKyvAULpmjLKyA YkX0qv2EnCMUb9urwITWbQTySOVazfjOjRPUO1z5RbfGwCMwNdW8ahf94jtLaVbvVp+7F8dD Y81Qhcbc2MAOWzP1ghr+wsyAyvzVJuDS0kDh6XjpuZddSBEYAh+aI8Kcwqsr75INMg== Organization: Network Test Inc. Subject: Re: xrdp configuration and xfce4 Message-ID: <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> Date: Tue, 7 Aug 2018 19:10:51 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 02:10:57 -0000 On 8/7/18 6:31 PM, Koichiro Iwao wrote: > On Tue, Aug 07, 2018 at 06:24:15PM -0700, David Newman wrote: >> Not sure what changes I would make in startxm.sh to automate this. The >> existing script has file locations for X on Linux distros. >=20 > Really?=20 >=20 > ``` > #!/bin/sh > startxfce4 > ``` >=20 > That's all. Sorry, no go. A startwm.sh script with just these two lines produces a black screen with one xterm and doesn't start xfce, let alone deal with the copy/paste problem. Also tried with '/usr/local/bin/xfce4-session' but got the same results. Either of these is exactly the same outcome as using the default startxm.sh script supplied with xrdp from the pkg repo. I am restarting the xrdp service and exiting the xterm after each attempt= . If you have this working successfully with a similar environment -- Microsoft RDP client on a Mac connecting to xrdp 0.9.x on FreeBSD 11.2 -- are you able to share your xrdp.ini and startwm.sh files? Thanks! dn From owner-freebsd-questions@freebsd.org Wed Aug 8 09:21:13 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C577A1054675 for ; Wed, 8 Aug 2018 09:21:12 +0000 (UTC) (envelope-from return-to@edm.icartizan.email) Received: from dmd232.mail78.dmdelivery.com (dmd232.mail78.dmdelivery.com [61.147.78.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 568C0761F8 for ; Wed, 8 Aug 2018 09:21:10 +0000 (UTC) (envelope-from return-to@edm.icartizan.email) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=edm.icartizan.email; s=dmddkim; t=1533718854; bh=vxS6AxXuICYxCMY+xmQKtolSgleAw/YoS86OZmvLU78=; h=Date:Message-Id:To:From:Subject:Content-Type; b=xIfO65CM178qZ/k3qYBai8GPSYXoKER2j4hpMJMqS5qJhqNwPQxQMTO+9ag7dUAxG mmbBXIp05i/dHJc9RaOOO0WuMQGtDCCrG/uifUfPjJiZf2DxNyWfb9HdVFzCOzOFEi m0rJgCwtEZr+4Gro6hlCdQeu2XaMzhwnBGI9ZZ0c= Date: Wed, 08 Aug 2018 17:00:54 +0800 MIME-Version: 1.0 Message-Id: To: freebsd-questions@freebsd.org From: "Cam-Plus" Reply-To: "Cam-Plus" Subject: WiFi Backup Camera Transmitter for Your Car X-Mailer: DMD-MTA X-Hash: S7Y1.J9ra2hq_L.I1sTC1MLif46t5f8M29SUXL3M5MSiksyqxDy91NzEzJz.mSm2EKHixDwAA91 Feedback-ID: edm.icartizan.email:1:151:webpower List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Owner: Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.27 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 09:21:13 -0000 Logo=0AIf you are unable to see the message below, click here (http://edm.i= cartizan.email/x/?S7Y1.J9ra2hq_D.H1vJ.ka2JhamFBQAA31)=0A=0AVideo-WiFi Trans= mitter=0A=0AWiFi backup camera transmitter with competitive price is in sto= ck now.=0AIt's easy to install a camera in your car.=0AIf you are looki= ng for some unique and stable products for your business, this should be a = good choice.=0AAny interest, please feel free to contact us by replying to = this E-mail directly or the other contact information at the bottom.=0A=0AC= onnection Diagram=0A=0AShenzhen Cartizan Technology Co., Ltd.=0AAddress: 6F= , Boshen Building, Changxing Road, Longgang District, Shenzhen, China=0ATel= : 0086 755 27888592=C2=A0 =C2=A0 =C2=A0 =C2=A0E-mail: salesa@icartizan.com= =C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0Web: www.icartizan.com=0AWhatsApp&Wechat: = +86 15813713072=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Skype: happysophia8= 686=0A=0AUnsubscribe (http://edm.icartizan.email/x/plugin/?pName=3Dunsubscr= ibe&MIDRID=3DS7Y1.J9ra2hq_D.H1vJ.ka2JhamFBQAA31&Z=3D-191059375) if = you no longer wish to receive these emails.=0A From owner-freebsd-questions@freebsd.org Wed Aug 8 16:12:02 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 43E141060A5D for ; Wed, 8 Aug 2018 16:12:02 +0000 (UTC) (envelope-from vas@mpeks.tomsk.su) Received: from relay2.tomsk.ru (mail.sibptus.tomsk.ru [212.73.124.5]) by mx1.freebsd.org (Postfix) with ESMTP id 96AC584042 for ; Wed, 8 Aug 2018 16:12:00 +0000 (UTC) (envelope-from vas@mpeks.tomsk.su) X-Virus-Scanned: by clamd daemon 0.100.1 for FreeBSD at relay.sibptus.ru Received: from [212.73.125.240] (HELO admin.sibptus.transneft.ru) by relay2.tomsk.ru (CommuniGate Pro SMTP 5.1.16) with ESMTPS id 40073104; Wed, 08 Aug 2018 23:11:58 +0700 Received: from admin.sibptus.transneft.ru (sudakov@localhost [127.0.0.1]) by admin.sibptus.transneft.ru (8.15.2/8.15.2) with ESMTP id w78GBwvm066824; Wed, 8 Aug 2018 23:11:58 +0700 (+07) (envelope-from vas@mpeks.tomsk.su) Received: (from sudakov@localhost) by admin.sibptus.transneft.ru (8.15.2/8.15.2/Submit) id w78GBujG066823; Wed, 8 Aug 2018 23:11:56 +0700 (+07) (envelope-from vas@mpeks.tomsk.su) X-Authentication-Warning: admin.sibptus.transneft.ru: sudakov set sender to vas@mpeks.tomsk.su using -f Date: Wed, 8 Aug 2018 23:11:56 +0700 From: Victor Sudakov To: "Steve O'Hara-Smith" Cc: freebsd-questions@freebsd.org Subject: Re: Alternative to x11/gnome3 ? Message-ID: <20180808161156.GA66626@admin.sibptus.transneft.ru> References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> Organization: AO "Svyaztransneft", SibPTUS X-PGP-Key: http://www.dreamwidth.org/pubkey?user=victor_sudakov X-PGP-Fingerprint: 10E3 1171 1273 E007 C2E9 3532 0DA4 F259 9B5E C634 User-Agent: Mutt/1.9.5 (2018-04-13) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 16:12:02 -0000 Steve O'Hara-Smith wrote: > > > No, this is not the way it works, at least on Linux. I've researched > > how it works on my son's Ubuntu. All programs of logged-in users > > remain running, it's not done via storing program state, killing and > > restoring them. In fact, every logged-in user has her own Xserver. > > Only one Xserver at a time is "the current graphical console" and has > > access to the video card, but they all are in the ps output. > > Running multiple X servers is easy enough - I used to do it quite a > lot using startx, you just have to give each one a different display > number, as long as there's a spare virtual console X will pick one and use > it. You switch between them with Ctrl-Alt-Fn as normal. No, this is not the way it works on Linux. Linux users don't run startx from a text session, nor do they switch between GUI sessions with Ctrl-Alt-Fn. They click "Switch user" and the graphical login screen appears where you can get authenticated. Moreove, x11/gnome3 works the same way on FreeBSD. My question is if there is another desktop environment (not as bloated as gnome3) which can switch users the same way. > That doesn't secure the sessions though. Indeed. > For that the user switcher > has to lock the current session and switch to the selected locked session > or create a new one - and of course something has to disable normal virtual > console switching to prevent leaving unlocked sessions lying around. Some black magic in x11/gnome3 does it. I would like it in Mate or some other more lightweight DE. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 From owner-freebsd-questions@freebsd.org Wed Aug 8 16:23:42 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 42F3F106109D for ; Wed, 8 Aug 2018 16:23:42 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id AD03784944 for ; Wed, 8 Aug 2018 16:23:41 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([92.195.64.203]) by mrelayeu.kundenserver.de (mreue003 [212.227.15.167]) with ESMTPA (Nemesis) id 0Lj7Ag-1gL7db31qA-00dE9J; Wed, 08 Aug 2018 18:23:33 +0200 Date: Wed, 8 Aug 2018 18:23:33 +0200 From: Polytropon To: Victor Sudakov Cc: "Steve O'Hara-Smith" , freebsd-questions@freebsd.org Subject: Re: Alternative to x11/gnome3 ? Message-Id: <20180808182333.5d5b2a68.freebsd@edvax.de> In-Reply-To: <20180808161156.GA66626@admin.sibptus.transneft.ru> References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> <20180808161156.GA66626@admin.sibptus.transneft.ru> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:tDF9QcO9ojNypmBsk8aV0mP76AeO6Bg022KxjuNQ7f6+l+6X7H2 U1asjBO4k47Lo4EacnLzn3s4RlemB6y8dI1B54so1V+x6HLPiO8g2ov484P20saRz8dObUx cCbs6j1uD3BpPQJfjV1ux3UjhFVCqeLh9l/K8+BgJV9jh2HtkRNGB6ShU0GEflg4HzRZvgs JEK0cbI0n1CZXhOB+838g== X-UI-Out-Filterresults: notjunk:1;V01:K0:n2bRzW7/Vwc=:BNqzLI6tHKAWy9om8yIeBT A2blN/w+eXNycoa0ch3KTTfPYSSUx8h/WkA9jq9X5zva9hdlYR1CXzo1OGbqy7F4fAg0E4AXP wPPesgnlKJao2bVzO5t1URdRloDmA4ysbTzN2hYuOzrKZeOakDwNVVVgkA0n/s4HWUowiyBd6 40XobCyvyU3IgdGJu/V9/K6cSVEdR1rOPkVkRavxRWnzWql3b4cGpvGon30plBjNzrEyzF0ta ybZkOtd1Fx9ENo03WHZBmDtma4kR0hTts7U83AKYfdC1ij42nbOFFoAGOFxQmS7yYICxxAzpz BGayHNRVSA5vjTvhFDE1ef8Df3YAQzVprgq8uvvtEp+xh7T0F5ljZslZ0XxMrAAv6t8imhys6 Ut4GwH8A082n+1tQUk8vHZ3bfK1pQXJmWa2/sv0zVwZR5tRe0TOrNxUAaiIFpPSV/W6IZaoBu u5myX9umLO3YML6jm7cBvQwM9ynFEwK6mrvWSSTpi7BPV8S+qPaVS9MKLoSCFOoG+liMm9DnR KZtcEP6H7f0ze3J+fVIIL6VZ3Dz2u4bkcCo2h3XgtRV62/POvKaBhAQ2xcyUS3Uqw4D6+vsr2 k+u3nWtFfPNsqFXH0Ln8dToaJ5YoDzUC2YWShxg7LHNbLF4DAs+Z4Hd/m42j4o7oNNAIMj28r potB/5t1TXlu5lg3/FlqZJq/xd9HMDaJJXCUGrmu7g0qIQaw9Ik7gQy5F+klf7zQcMYvbWzcH T/sXeIPPGNPmjwZK X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 16:23:42 -0000 On Wed, 8 Aug 2018 23:11:56 +0700, Victor Sudakov wrote: > Steve O'Hara-Smith wrote: > > > > > No, this is not the way it works, at least on Linux. I've researched > > > how it works on my son's Ubuntu. All programs of logged-in users > > > remain running, it's not done via storing program state, killing and > > > restoring them. In fact, every logged-in user has her own Xserver. > > > Only one Xserver at a time is "the current graphical console" and has > > > access to the video card, but they all are in the ps output. > > > > Running multiple X servers is easy enough - I used to do it quite a > > lot using startx, you just have to give each one a different display > > number, as long as there's a spare virtual console X will pick one and use > > it. You switch between them with Ctrl-Alt-Fn as normal. > > No, this is not the way it works on Linux. Linux users don't run > startx from a text session, nor do they switch between GUI sessions > with Ctrl-Alt-Fn. They click "Switch user" and the graphical login > screen appears where you can get authenticated. > > Moreove, x11/gnome3 works the same way on FreeBSD. My question is if > there is another desktop environment (not as bloated as gnome3) which > can switch users the same way. This is what Gnome 2 on FreeBSD could definitely do. Is there a chance to use Gnome 2 instead of Cinnamon or Mate (because even they are Gnome 2 forks, they do _not_ seem to include this specific functionality). > > For that the user switcher > > has to lock the current session and switch to the selected locked session > > or create a new one - and of course something has to disable normal virtual > > console switching to prevent leaving unlocked sessions lying around. > > Some black magic in x11/gnome3 does it. I would like it in Mate or > some other more lightweight DE. Have you checked Cinnamon, the other Gnome 2 fork? I haven't tried it. Mate works sufficiently well (as a Gnome 2 replacement that isn't the abomination of Gnome 3), but it doesn't include the user switching functionality, at least I've been unable to find it... -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Wed Aug 8 16:24:26 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 74F5710610DD for ; Wed, 8 Aug 2018 16:24:26 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1FF9F8498B for ; Wed, 8 Aug 2018 16:24:26 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1533745466; x=1536337466; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:cc:to:from:date:x-thread-info; bh=Un2cbBWw+mJLOn/X8nSVDI+v+ObrUhnVFEYs3Dp/VK4=; b=s6FXidy5LkRX4ZgRpE/MhqqXRjTSaEHRJTNNgVsSbHXik7pEsdrgbcPYItMn9JD8haVxJAIe5cdFYH337BLxtuLFW6oKybYbgIixhZ8vzXsDu/xzF3YMXQ4LSqodHIMy0ztgOY/jqi9qGqLOMUeadsRAhsVyOSgo7z9TB1VNusQ= X-Thread-Info: NDI1MC4xMi4xOTUwMDAwMDE3MTU3OWUuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r4.us-east.aws.in.socketlabs.com (r4.us-east.aws.in.socketlabs.com [52.5.202.82]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Wed, 8 Aug 2018 12:24:14 -0400 Received: from smtp.lan.sohara.org (EMTPY [89.127.62.20]) by r4.us-east.aws.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Wed, 8 Aug 2018 12:24:13 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.91 (FreeBSD)) (envelope-from ) id 1fnRFs-0001ai-OH; Wed, 08 Aug 2018 16:24:12 +0000 Date: Wed, 8 Aug 2018 17:24:13 +0100 From: Steve O'Hara-Smith To: Victor Sudakov Cc: freebsd-questions@freebsd.org Subject: Re: Alternative to x11/gnome3 ? Message-Id: <20180808172413.9759288eaa75f6a8024417c8@sohara.org> In-Reply-To: <20180808161156.GA66626@admin.sibptus.transneft.ru> References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> <20180808161156.GA66626@admin.sibptus.transneft.ru> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd11.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 16:24:26 -0000 On Wed, 8 Aug 2018 23:11:56 +0700 Victor Sudakov wrote: > No, this is not the way it works on Linux. Linux users don't run > startx from a text session, nor do they switch between GUI sessions > with Ctrl-Alt-Fn. They click "Switch user" and the graphical login > screen appears where you can get authenticated. You can use startx and Ctrl-Alt-Fn in Linux to do this, at least you could last time I used Linux and X. -- Steve O'Hara-Smith | Directable Mirror Arrays C:\>WIN | A better way to focus the sun The computer obeys and wins. | licences available see You lose and Bill collects. | http://www.sohara.org/ From owner-freebsd-questions@freebsd.org Wed Aug 8 16:32:43 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0D4B61061577 for ; Wed, 8 Aug 2018 16:32:43 +0000 (UTC) (envelope-from o1e9.cherkasov@yandex.com) Received: from forward103o.mail.yandex.net (forward103o.mail.yandex.net [IPv6:2a02:6b8:0:1a2d::606]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Yandex CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8DAE584EB9 for ; Wed, 8 Aug 2018 16:32:42 +0000 (UTC) (envelope-from o1e9.cherkasov@yandex.com) Received: from mxback17j.mail.yandex.net (mxback17j.mail.yandex.net [IPv6:2a02:6b8:0:1619::93]) by forward103o.mail.yandex.net (Yandex) with ESMTP id C1A36588190E for ; Wed, 8 Aug 2018 19:32:39 +0300 (MSK) Received: from smtp4j.mail.yandex.net (smtp4j.mail.yandex.net [2a02:6b8:0:1619::15:6]) by mxback17j.mail.yandex.net (nwsmtp/Yandex) with ESMTP id Apclaeev0z-WdYOZW8E; Wed, 08 Aug 2018 19:32:39 +0300 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1533745959; bh=uh4PwJAWgqRq8xuykzzaADo7EGZf/SMygmtRQ7/lXXc=; h=Reply-To:Subject:To:References:From:Message-ID:Date:In-Reply-To; b=wigS+uJqPk1f0mzyDw2aNMV60QJW5R4uz+MITluWTKw2QS87ngbJtlDFPmFHJgS7t hot/p6939x+E97karrwRa8vS38YDMbpoCdgUnknQuZPDBtU5sjQmRAtoNbXcFY0Aor XAt4bFdQ+6GMURK9Z/2czKUk8sQ0jkCe+RU7MsZo= Received: by smtp4j.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id Yafz4ox6Cr-WcmiiJtW; Wed, 08 Aug 2018 19:32:38 +0300 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1533745959; bh=uh4PwJAWgqRq8xuykzzaADo7EGZf/SMygmtRQ7/lXXc=; h=Reply-To:Subject:To:References:From:Message-ID:Date:In-Reply-To; b=wigS+uJqPk1f0mzyDw2aNMV60QJW5R4uz+MITluWTKw2QS87ngbJtlDFPmFHJgS7t hot/p6939x+E97karrwRa8vS38YDMbpoCdgUnknQuZPDBtU5sjQmRAtoNbXcFY0Aor XAt4bFdQ+6GMURK9Z/2czKUk8sQ0jkCe+RU7MsZo= Authentication-Results: smtp4j.mail.yandex.net; dkim=pass header.i=@yandex.com Reply-To: o1e9@member.fsf.org Subject: Re: xrdp configuration and xfce4 To: freebsd-questions@freebsd.org References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> From: Oleg Cherkasov Message-ID: Date: Wed, 8 Aug 2018 18:32:38 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 16:32:43 -0000 On 08. aug. 2018 04:10, David Newman wrote: > On 8/7/18 6:31 PM, Koichiro Iwao wrote: >> On Tue, Aug 07, 2018 at 06:24:15PM -0700, David Newman wrote: >>> Not sure what changes I would make in startxm.sh to automate this. The >>> existing script has file locations for X on Linux distros. >> >> Really? >> >> ``` >> #!/bin/sh >> startxfce4 >> ``` >> >> That's all. > > Sorry, no go. > > A startwm.sh script with just these two lines produces a black screen > with one xterm and doesn't start xfce, let alone deal with the > copy/paste problem. > > Also tried with '/usr/local/bin/xfce4-session' but got the same results. > > Either of these is exactly the same outcome as using the default > startxm.sh script supplied with xrdp from the pkg repo. > > I am restarting the xrdp service and exiting the xterm after each attempt. > > If you have this working successfully with a similar environment -- > Microsoft RDP client on a Mac connecting to xrdp 0.9.x on FreeBSD 11.2 > -- are you able to share your xrdp.ini and startwm.sh files? Have you tried to make ~/.xsession file with: #! /bin/sh startxfce4 From owner-freebsd-questions@freebsd.org Wed Aug 8 16:33:24 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0C9B210615B7 for ; Wed, 8 Aug 2018 16:33:24 +0000 (UTC) (envelope-from vas@mpeks.tomsk.su) Received: from relay2.tomsk.ru (mail.sibptus.tomsk.ru [212.73.124.5]) by mx1.freebsd.org (Postfix) with ESMTP id 2087384F03 for ; Wed, 8 Aug 2018 16:33:22 +0000 (UTC) (envelope-from vas@mpeks.tomsk.su) X-Virus-Scanned: by clamd daemon 0.100.1 for FreeBSD at relay.sibptus.ru Received: from [212.73.125.240] (HELO admin.sibptus.transneft.ru) by relay2.tomsk.ru (CommuniGate Pro SMTP 5.1.16) with ESMTPS id 40073124; Wed, 08 Aug 2018 23:33:21 +0700 Received: from admin.sibptus.transneft.ru (sudakov@localhost [127.0.0.1]) by admin.sibptus.transneft.ru (8.15.2/8.15.2) with ESMTP id w78GXKRI067345; Wed, 8 Aug 2018 23:33:21 +0700 (+07) (envelope-from vas@mpeks.tomsk.su) Received: (from sudakov@localhost) by admin.sibptus.transneft.ru (8.15.2/8.15.2/Submit) id w78GXGn0067341; Wed, 8 Aug 2018 23:33:16 +0700 (+07) (envelope-from vas@mpeks.tomsk.su) X-Authentication-Warning: admin.sibptus.transneft.ru: sudakov set sender to vas@mpeks.tomsk.su using -f Date: Wed, 8 Aug 2018 23:33:15 +0700 From: Victor Sudakov To: Polytropon Cc: sergio lenzi , freebsd-questions@freebsd.org Subject: Re: Alternative to x11/gnome3 ? Message-ID: <20180808163315.GB66626@admin.sibptus.transneft.ru> References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801162045.f3653b7d.freebsd@edvax.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20180801162045.f3653b7d.freebsd@edvax.de> Organization: AO "Svyaztransneft", SibPTUS X-PGP-Key: http://www.dreamwidth.org/pubkey?user=victor_sudakov X-PGP-Fingerprint: 10E3 1171 1273 E007 C2E9 3532 0DA4 F259 9B5E C634 User-Agent: Mutt/1.9.5 (2018-04-13) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 16:33:24 -0000 Polytropon wrote: [dd] > > > > 2. The sound control app in Mate is completely unrelated to the real > > > > sound system of FreeBSD (as of 11.2 and mate-1.18.0). The volume and > > > > input/output controls do nothing. I have to use the good old > > > > /usr/sbin/mixer and "sysctl hw.snd.default_unit" to manipulate with > > > > sound. Is this my misconfiguration or Mate's fault? > > > > > > Is it using the wrong mixer? Can you select a different mixer > > > device for the Gnome / Mate mixer control? > > > > What's "Mate mixer control" ? The Mate sound app lists all my > > soundcards correctly (maybe it just takes them from /dev/sndstat) but > > selecting any of the devices and trying to set parameters (set volume > > or test speakers) does exactly nothing. > > Okay, so you've already checked that more than one mixer > can be present in the system (/dev/mixer*), and none can > be manipulated. Yes, I have 5 mixers: /dev/mixer{0,1,2,3,4} /dev/mixer0 is manipulated by the volume control at the top bar. I actually had to write a script to figure it out: #!/bin/sh mv ~/tmp/mix1 ~/tmp/mix0 for i in 0 1 2 3 4 do echo mixer$i >> ~/tmp/mix1 mixer -f /dev/mixer$i >> ~/tmp/mix1 done diff -u ~/tmp/mix0 ~/tmp/mix1 > > > > > I fully understand that most GUI software is ported from Linux, > > > it's not a native BSD development result, so maybe it expects > > > some ALSA instead of the standard OSS... > > > > A question to you as you said you are a Mate user. Does this sound app > > work personally for you? Can you at least set the volume and run the > > speaker test from it? > > I can only talk about the normal volume control accessed > from the top bar: It works. The one slider present changes > the master volume. The result can be checked from a terminal > with the system's "mixer" command afterwards. I have 5 mixers: /dev/mixer{0,1,2,3,4} How do you select which mixer would be connected to the volume slider in the top bar? In my configuration, moving this slider changes the volume on /dev/mixer0 (Rear Analog), and I'd prefer to associate it with /dev/mixer1 (Front Analog). > > Sidenote: I'm not a Mate user, but I have a few Mate users. > I'm primarily a WindowMaker user myself. :-) Oh, but WindowMaker is not a DE, it's just a WM. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 From owner-freebsd-questions@freebsd.org Wed Aug 8 16:37:26 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A245E1061A7F for ; Wed, 8 Aug 2018 16:37:26 +0000 (UTC) (envelope-from vas@mpeks.tomsk.su) Received: from relay2.tomsk.ru (mail.sibptus.tomsk.ru [212.73.124.5]) by mx1.freebsd.org (Postfix) with ESMTP id 02F0B85219 for ; Wed, 8 Aug 2018 16:37:25 +0000 (UTC) (envelope-from vas@mpeks.tomsk.su) X-Virus-Scanned: by clamd daemon 0.100.1 for FreeBSD at relay.sibptus.ru Received: from [212.73.125.240] (HELO admin.sibptus.transneft.ru) by relay2.tomsk.ru (CommuniGate Pro SMTP 5.1.16) with ESMTPS id 40073127; Wed, 08 Aug 2018 23:37:24 +0700 Received: from admin.sibptus.transneft.ru (sudakov@localhost [127.0.0.1]) by admin.sibptus.transneft.ru (8.15.2/8.15.2) with ESMTP id w78GbOOw067464; Wed, 8 Aug 2018 23:37:24 +0700 (+07) (envelope-from vas@mpeks.tomsk.su) Received: (from sudakov@localhost) by admin.sibptus.transneft.ru (8.15.2/8.15.2/Submit) id w78GbN0b067463; Wed, 8 Aug 2018 23:37:23 +0700 (+07) (envelope-from vas@mpeks.tomsk.su) X-Authentication-Warning: admin.sibptus.transneft.ru: sudakov set sender to vas@mpeks.tomsk.su using -f Date: Wed, 8 Aug 2018 23:37:22 +0700 From: Victor Sudakov To: "Steve O'Hara-Smith" Cc: freebsd-questions@freebsd.org Subject: Re: Alternative to x11/gnome3 ? Message-ID: <20180808163722.GA67368@admin.sibptus.transneft.ru> References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> <20180808161156.GA66626@admin.sibptus.transneft.ru> <20180808172413.9759288eaa75f6a8024417c8@sohara.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20180808172413.9759288eaa75f6a8024417c8@sohara.org> Organization: AO "Svyaztransneft", SibPTUS X-PGP-Key: http://www.dreamwidth.org/pubkey?user=victor_sudakov X-PGP-Fingerprint: 10E3 1171 1273 E007 C2E9 3532 0DA4 F259 9B5E C634 User-Agent: Mutt/1.9.5 (2018-04-13) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 16:37:26 -0000 Steve O'Hara-Smith wrote: > > > No, this is not the way it works on Linux. Linux users don't run > > startx from a text session, nor do they switch between GUI sessions > > with Ctrl-Alt-Fn. They click "Switch user" and the graphical login > > screen appears where you can get authenticated. > > You can use startx and Ctrl-Alt-Fn in Linux to do this, at least > you could last time I used Linux and X. You can but nobody does because it's inconvenient and contraintuitive for the majority of users. Besides it's insecure unless you enable some X screen locking mechanism and start your X session with something like "startx & && exit" -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 From owner-freebsd-questions@freebsd.org Wed Aug 8 16:47:03 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9131E1061F82 for ; Wed, 8 Aug 2018 16:47:03 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3C2E68599F for ; Wed, 8 Aug 2018 16:47:03 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1533746823; x=1536338823; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:cc:to:from:date:x-thread-info; bh=M/xwuBcHagogSuRuvQJte4cE/mTVE7i3JRG/rQQs1lE=; b=VfxpT1nnGywxchrZZGlkJClIbdSrj/SwTIUhti7vcIUK4RaqdfmME3sv0bHQdRPoiRvJ39bcnKz1B9ElG+WIoB6lgvkdOkpuJRYmodmoGmbCP3o6S2y+RAyRouomqHcYBoLbMkNTfGpeWEyqT+mRcPr9BjwPE+OroBPKlCR4dyY= X-Thread-Info: NDI1MC4xMi4xOTUwMDAwMDE3MWJlMWIuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r2.h.in.socketlabs.com (r2.h.in.socketlabs.com [142.0.180.12]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Wed, 8 Aug 2018 12:46:52 -0400 Received: from smtp.lan.sohara.org (EMTPY [89.127.62.20]) by r2.h.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Wed, 8 Aug 2018 12:46:52 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.91 (FreeBSD)) (envelope-from ) id 1fnRbn-0001ew-05; Wed, 08 Aug 2018 16:46:51 +0000 Date: Wed, 8 Aug 2018 17:46:51 +0100 From: Steve O'Hara-Smith To: Victor Sudakov Cc: freebsd-questions@freebsd.org Subject: Re: Alternative to x11/gnome3 ? Message-Id: <20180808174651.5712b734d2bf158d8442a14c@sohara.org> In-Reply-To: <20180808163722.GA67368@admin.sibptus.transneft.ru> References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> <20180808161156.GA66626@admin.sibptus.transneft.ru> <20180808172413.9759288eaa75f6a8024417c8@sohara.org> <20180808163722.GA67368@admin.sibptus.transneft.ru> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd11.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 16:47:03 -0000 On Wed, 8 Aug 2018 23:37:22 +0700 Victor Sudakov wrote: > Steve O'Hara-Smith wrote: > > > > > No, this is not the way it works on Linux. Linux users don't run > > > startx from a text session, nor do they switch between GUI sessions > > > with Ctrl-Alt-Fn. They click "Switch user" and the graphical login > > > screen appears where you can get authenticated. > > > > You can use startx and Ctrl-Alt-Fn in Linux to do this, at least > > you could last time I used Linux and X. > > You can but nobody does because it's inconvenient and contraintuitive > for the majority of users. I suspect I'm in a minority on FreeBSD too, but I find it handier. > Besides it's insecure unless you enable some X screen locking > mechanism and start your X session with something like "startx & && exit" I use startx & logout. -- Steve O'Hara-Smith | Directable Mirror Arrays C:\>WIN | A better way to focus the sun The computer obeys and wins. | licences available see You lose and Bill collects. | http://www.sohara.org/ From owner-freebsd-questions@freebsd.org Wed Aug 8 17:11:00 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A890C1062B24 for ; Wed, 8 Aug 2018 17:11:00 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from kicp.uchicago.edu (kicp.uchicago.edu [128.135.20.70]) by mx1.freebsd.org (Postfix) with ESMTP id 5AD79868DF for ; Wed, 8 Aug 2018 17:11:00 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from point.uchicago.edu (point.uchicago.edu [128.135.52.6]) by kicp.uchicago.edu (Postfix) with ESMTP id 03CBC71811A for ; Wed, 8 Aug 2018 12:10:53 -0500 (CDT) Subject: Re: Alternative to x11/gnome3 ? To: freebsd-questions@freebsd.org References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> <20180808161156.GA66626@admin.sibptus.transneft.ru> <20180808172413.9759288eaa75f6a8024417c8@sohara.org> From: Valeri Galtsev Message-ID: <4e3fa20a-cd80-39a2-7629-a55dd8fa0f6e@kicp.uchicago.edu> Date: Wed, 8 Aug 2018 12:10:53 -0500 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20180808172413.9759288eaa75f6a8024417c8@sohara.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 17:11:00 -0000 On 08/08/18 11:24, Steve O'Hara-Smith wrote: > On Wed, 8 Aug 2018 23:11:56 +0700 > Victor Sudakov wrote: > >> No, this is not the way it works on Linux. Linux users don't run >> startx from a text session, nor do they switch between GUI sessions >> with Ctrl-Alt-Fn. They click "Switch user" and the graphical login >> screen appears where you can get authenticated. > > You can use startx and Ctrl-Alt-Fn in Linux to do this, at least > you could last time I used Linux and X. I would second that, and I also would say that in Linux people do sometimes boot the machine in "runlevel 3" as opposed to GUI login "runlevel 5", log in on virtual console, and then do startx. Or rather exec startx (then if your X session is killed, your console session ends, so whoever is in front of machine at the moment does not get your shell). I do it sometimes - very rarely though - on multi-user Linux machines in the server room. Valeri > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Wed Aug 8 17:15:50 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A8AB5106305A for ; Wed, 8 Aug 2018 17:15:50 +0000 (UTC) (envelope-from vas@mpeks.tomsk.su) Received: from relay2.tomsk.ru (mail.sibptus.tomsk.ru [212.73.124.5]) by mx1.freebsd.org (Postfix) with ESMTP id 077CE870BC for ; Wed, 8 Aug 2018 17:15:49 +0000 (UTC) (envelope-from vas@mpeks.tomsk.su) X-Virus-Scanned: by clamd daemon 0.100.1 for FreeBSD at relay.sibptus.ru Received: from [212.73.125.240] (HELO admin.sibptus.transneft.ru) by relay2.tomsk.ru (CommuniGate Pro SMTP 5.1.16) with ESMTPS id 40073158; Thu, 09 Aug 2018 00:15:48 +0700 Received: from admin.sibptus.transneft.ru (sudakov@localhost [127.0.0.1]) by admin.sibptus.transneft.ru (8.15.2/8.15.2) with ESMTP id w78HFmot068523; Thu, 9 Aug 2018 00:15:48 +0700 (+07) (envelope-from vas@mpeks.tomsk.su) Received: (from sudakov@localhost) by admin.sibptus.transneft.ru (8.15.2/8.15.2/Submit) id w78HFhMp068517; Thu, 9 Aug 2018 00:15:43 +0700 (+07) (envelope-from vas@mpeks.tomsk.su) X-Authentication-Warning: admin.sibptus.transneft.ru: sudakov set sender to vas@mpeks.tomsk.su using -f Date: Thu, 9 Aug 2018 00:15:43 +0700 From: Victor Sudakov To: "Steve O'Hara-Smith" Cc: freebsd-questions@freebsd.org Subject: Re: Alternative to x11/gnome3 ? Message-ID: <20180808171542.GA68317@admin.sibptus.transneft.ru> References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> <20180808161156.GA66626@admin.sibptus.transneft.ru> <20180808172413.9759288eaa75f6a8024417c8@sohara.org> <20180808163722.GA67368@admin.sibptus.transneft.ru> <20180808174651.5712b734d2bf158d8442a14c@sohara.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20180808174651.5712b734d2bf158d8442a14c@sohara.org> Organization: AO "Svyaztransneft", SibPTUS X-PGP-Key: http://www.dreamwidth.org/pubkey?user=victor_sudakov X-PGP-Fingerprint: 10E3 1171 1273 E007 C2E9 3532 0DA4 F259 9B5E C634 User-Agent: Mutt/1.9.5 (2018-04-13) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 17:15:50 -0000 Steve O'Hara-Smith wrote: > On Wed, 8 Aug 2018 23:37:22 +0700 > Victor Sudakov wrote: > > > Steve O'Hara-Smith wrote: > > > > > > > No, this is not the way it works on Linux. Linux users don't run > > > > startx from a text session, nor do they switch between GUI sessions > > > > with Ctrl-Alt-Fn. They click "Switch user" and the graphical login > > > > screen appears where you can get authenticated. > > > > > > You can use startx and Ctrl-Alt-Fn in Linux to do this, at least > > > you could last time I used Linux and X. > > > > You can but nobody does because it's inconvenient and contraintuitive > > for the majority of users. > > I suspect I'm in a minority on FreeBSD too, but I find it handier. My wife always gets confused whether her X session is already running (and she should look for it by pressing Ctrl-Alt-F9, Ctrl-Alt-F10 until she eventually finds it) or she has to start a new one. Several times she has run startx from a text session, then got confused where her vt was and tried to run another startx... As I said, contraintuitive. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 From owner-freebsd-questions@freebsd.org Wed Aug 8 17:28:24 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D8D0A1063A36 for ; Wed, 8 Aug 2018 17:28:24 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from kicp.uchicago.edu (kicp.uchicago.edu [128.135.20.70]) by mx1.freebsd.org (Postfix) with ESMTP id 8BB2C887B3 for ; Wed, 8 Aug 2018 17:28:24 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from point.uchicago.edu (point.uchicago.edu [128.135.52.6]) by kicp.uchicago.edu (Postfix) with ESMTP id B663D7180FC for ; Wed, 8 Aug 2018 12:28:23 -0500 (CDT) Subject: Re: Alternative to x11/gnome3 ? To: freebsd-questions@freebsd.org References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> <20180808161156.GA66626@admin.sibptus.transneft.ru> <20180808172413.9759288eaa75f6a8024417c8@sohara.org> <20180808163722.GA67368@admin.sibptus.transneft.ru> From: Valeri Galtsev Message-ID: <2b5cf789-e846-aac0-d33a-39dd71d55f65@kicp.uchicago.edu> Date: Wed, 8 Aug 2018 12:28:23 -0500 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20180808163722.GA67368@admin.sibptus.transneft.ru> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 17:28:25 -0000 On 08/08/18 11:37, Victor Sudakov wrote: > Steve O'Hara-Smith wrote: >> >>> No, this is not the way it works on Linux. Linux users don't run >>> startx from a text session, nor do they switch between GUI sessions >>> with Ctrl-Alt-Fn. They click "Switch user" and the graphical login >>> screen appears where you can get authenticated. >> >> You can use startx and Ctrl-Alt-Fn in Linux to do this, at least >> you could last time I used Linux and X. > > You can but nobody does because it's inconvenient and contraintuitive > for the majority of users. I for one do it occasionally. On multi-user number crunchers in the server room which normally run in "runlevel 5". > > Besides it's insecure unless you enable some X screen locking > mechanism and start your X session with something like "startx & && exit" Yes, or simpler thing does the same . Log in to virtual console then execute the command exec startx If somebody is at the keyboard in your absence and kills your X using Ctrl+C, then you will be logged off your virtual console session as well. That, BTW this is what I always do on my FreeBSD workstation (virtyally single user machine): same convenient, and one less process belonging to user root (display manager process). Incidentally one may need to create ~/.xinitrc for that, what someone else had mentioned. My ~/.xinitrc on workstation has one line: exec mate-session Thanks. Valeri > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Wed Aug 8 17:40:17 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BAC5510642C1 for ; Wed, 8 Aug 2018 17:40:17 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from kicp.uchicago.edu (kicp.uchicago.edu [128.135.20.70]) by mx1.freebsd.org (Postfix) with ESMTP id 6DAAF89264 for ; Wed, 8 Aug 2018 17:40:17 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from point.uchicago.edu (point.uchicago.edu [128.135.52.6]) by kicp.uchicago.edu (Postfix) with ESMTP id 1BFF271810B for ; Wed, 8 Aug 2018 12:40:16 -0500 (CDT) Subject: Re: Alternative to x11/gnome3 ? To: freebsd-questions@freebsd.org References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> <20180808161156.GA66626@admin.sibptus.transneft.ru> <20180808172413.9759288eaa75f6a8024417c8@sohara.org> <20180808163722.GA67368@admin.sibptus.transneft.ru> <20180808174651.5712b734d2bf158d8442a14c@sohara.org> <20180808171542.GA68317@admin.sibptus.transneft.ru> From: Valeri Galtsev Message-ID: Date: Wed, 8 Aug 2018 12:40:16 -0500 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20180808171542.GA68317@admin.sibptus.transneft.ru> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 17:40:17 -0000 On 08/08/18 12:15, Victor Sudakov wrote: > Steve O'Hara-Smith wrote: >> On Wed, 8 Aug 2018 23:37:22 +0700 >> Victor Sudakov wrote: >> >>> Steve O'Hara-Smith wrote: >>>> >>>>> No, this is not the way it works on Linux. Linux users don't run >>>>> startx from a text session, nor do they switch between GUI sessions >>>>> with Ctrl-Alt-Fn. They click "Switch user" and the graphical login >>>>> screen appears where you can get authenticated. >>>> >>>> You can use startx and Ctrl-Alt-Fn in Linux to do this, at least >>>> you could last time I used Linux and X. >>> >>> You can but nobody does because it's inconvenient and contraintuitive >>> for the majority of users. >> >> I suspect I'm in a minority on FreeBSD too, but I find it handier. > > My wife always gets confused whether her X session is already running > (and she should look for it by pressing Ctrl-Alt-F9, Ctrl-Alt-F10 > until she eventually finds it) or she has to start a new one. > > Several times she has run startx from a text session, then got > confused where her vt was and tried to run another startx... As I said, > contraintuitive. Agree. The user needs to have some UNIX proficiency to go through routine starting X from console. Long ago people just starting to use UNIX (who, say, know only about 5 shell command), still were OK starting X from console, and then just keeping use X. These days we usually give them machine with display manager running ("graphic login"). So, Steve may be right: we are just a minority (sysadmins mostly) who more likely will use startx than running display manager process. Valeri > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Wed Aug 8 17:48:58 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0D6591064B46 for ; Wed, 8 Aug 2018 17:48:58 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.17.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 65F8D89C4E for ; Wed, 8 Aug 2018 17:48:57 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([92.195.64.203]) by mrelayeu.kundenserver.de (mreue104 [212.227.15.183]) with ESMTPA (Nemesis) id 0LoqDL-1gOBIS1Sg7-00gm38; Wed, 08 Aug 2018 19:48:47 +0200 Date: Wed, 8 Aug 2018 19:48:46 +0200 From: Polytropon To: Valeri Galtsev Cc: freebsd-questions@freebsd.org Subject: Re: Alternative to x11/gnome3 ? Message-Id: <20180808194846.61e5e0de.freebsd@edvax.de> In-Reply-To: <2b5cf789-e846-aac0-d33a-39dd71d55f65@kicp.uchicago.edu> References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> <20180808161156.GA66626@admin.sibptus.transneft.ru> <20180808172413.9759288eaa75f6a8024417c8@sohara.org> <20180808163722.GA67368@admin.sibptus.transneft.ru> <2b5cf789-e846-aac0-d33a-39dd71d55f65@kicp.uchicago.edu> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:TE4u3xkf0w1lc7IkgNSZ5mvWeQtp/lg+Z8F8yQNoxgphLTNtPCl FQGlC6Bo9GiopU0SxWvSxl8AXZaVqdvfbdTl1nfJrufr0LtC1kOVbt+Sp2UD/VyUCLtOPtn 3C20UZ28b3CRC8wZUPIH2zCXxzKq8NEWiYvYe5oSGUKOUaMOowtkOsM+1hqCR7vQFbwa0S6 D77H1dfrT3+sqHJQaC3NQ== X-UI-Out-Filterresults: notjunk:1;V01:K0:KlAgNLg2EYQ=:SoaNB1nXYYBZuJ/6VdG7nQ Opm30QHjgKk7nRnRA1P85UhsVCXnZVrcVdCGgfCilAlmgX8f+GllKNOTBLiaZfFyKkzykfwoV r8xIny7bVjKtsf0sdEzbyiS+YG2MNGN6rMUZsIlh3EmvcJ5L3i+DxkwBDAMukU9ER5/vn3C/R bUiD9LsgRLjwnkayb8isSHfp4Q5YWYYlBEt958IhMpdUQ33m4V9d3dWUlNDi7/1qwJxZZXTTx IBxR+v9E+uiNqyULJeSGJdNuO5RGvUZf6OFG/5uhCHUVcrb/vLSWIS0JNjBNB8nTox74Mr0vr dQfykDCtoawzte8uYmPhJkTzEmxaa/mayjSX5XG3mPPSpdZFavL6XXG4FP5E6mskz3uwB71ix NFw5SurSvgrvhowkHE+7EhTpOy2Pdw1tIYQz3I3ggjpGKHUsvplhcoorXqiAVZE0Cgcqq7zX7 h6/LBbN910hGwFuTK5Ux5ETtGQMqV14zFsL2HEeowGEwmdyzy4XVaOl+u7IU+7opNoQuegOJB v1WQzJiu/Oa9eXzSkjEiJtJIKTOMtX8wdx00JIgXutsZwIgn1lItsd41B0IXSJ4z9ccbKp3+C cWlkbrKwgUm1jZpHqm3wz0xTBgm1EgHlp/ukup3dtbBVDmGMtLKvB4GFLh3aW/EerCMQfBwPZ Qs+DWc1om0IVoplQaR7r1MPla9vm8hWusFvoFYa0ZI7XTmi0kZPsGZzwzP21J++TUGWVOp09n rL6pFq1GgdAUvHEN X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 17:48:58 -0000 On Wed, 8 Aug 2018 12:28:23 -0500, Valeri Galtsev wrote: > Incidentally one may need to create ~/.xinitrc for that, what someone > else had mentioned. My ~/.xinitrc on workstation has one line: > > exec mate-session There is a convenient way I'm using to deal with settings that can be either "login with xdm" or "login at console, then startx", or both: Create ~/.xsession with the following content: #!/bin/csh source ~/.cshrc exec ~/.xinitrc This example assumes that the C shell is your dialog shell. For zsh or bash, a slightly different incorporation of the interactive shell settings is needed. And then you can use ~/.xinitrc as you wish, for example: #!/bin/sh [ -f ~/.xmodmaprc ] && xmodmap ~/.xmodmaprc numlockx # # ... more crazy stuff ... # xsetroot -solid rgb:3b/4c/7a xset b 100 1000 15 & xset r rate 250 30 & xset s off & xset -dpms & exec wmaker Note that the #!/bin/sh on top of this script is fully optional (as sh will be the shell that executes it, no matter what you write in there), but it makes sure you know that sh syntax is to be used here. This allows you to centralize your user's X startup into one file, and it will work, no matter if you prefer xdm or startx. However, if you use gdm from Gnome 2, it won't work, simply because gdm says "FSCK YOU!" and continues doing its own startup, tied to the Gnome 2 desktop. ;-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Wed Aug 8 17:57:58 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 30B741065129 for ; Wed, 8 Aug 2018 17:57:58 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (mail8.networktest.com [IPv6:2607:f740:c::a13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 89CA48A5E3 for ; Wed, 8 Aug 2018 17:57:57 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (localhost [127.0.0.1]) by mail8.networktest.com (Postfix) with ESMTP id 7A28861803B for ; Wed, 8 Aug 2018 10:57:45 -0700 (PDT) Authentication-Results: mail8.networktest.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=networktest.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=networktest.com; h=content-transfer-encoding:content-language:content-type :content-type:in-reply-to:mime-version:user-agent:date:date :message-id:subject:subject:organization:from:from:references :to; s=dkim; t=1533751065; x=1534355866; bh=kh5PjqCejMwhhnBiorMW noW8De428rsT1x8nWhK/Pbw=; b=mcOcM+9aTScnDKQohcLufLrd64saDFTVozty wbUqPv2kLIjl+LCTT9Dl07dKsuLKNJv4nY2k5PWvhQawgv7cRvMUyOdXFlI684uv CiEyNEUMaKEHzEFXNfemTqdPqCf+M+UET/UkSodaLoGME+v2ot1J7SddRYr1c2Mj ESAkcWY= X-Virus-Scanned: amavisd-new at mail8.networktest.com Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id fEjIH7FgHzHI for ; Wed, 8 Aug 2018 10:57:45 -0700 (PDT) Received: from dhcp129.eng.networktest.com (ns.networktest.com [69.75.159.98]) by mail8.networktest.com (Postfix) with ESMTPSA id AD40361803A for ; Wed, 8 Aug 2018 10:57:44 -0700 (PDT) To: freebsd-questions@freebsd.org References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> From: David Newman Openpgp: preference=signencrypt Autocrypt: addr=dnewman@networktest.com; prefer-encrypt=mutual; keydata= xsFNBFnmfMEBEACt5x64cZy4FPct3SaH44BMAYkghlJDxI11XpHUJNFAuJ8MD8WgF5F6Nc9C PCl7WzIHAwgWkM2ntAgcOeKvBiFTtzMfiIczfgIAkhiyANYAm3MIH4Li9X0NltYtROQ7FUn+ H4IWZ0SF/BZH1jfoLRNVvuLHdXVYrol/9sGlSI1KTpzpt3GIgeTxdOgTy0nO0HO7c0EBTnRv L3fyYs2E9XgmqsHlFqHBvF1OV0HjVJsqohQxb9iReZEL2UseTZYIYOhKizI3oJOnwPmf7zYg E4jzL422tHbbj4Qwh8l4kZDvy3J+S+KmqFD+IvOUbFBmHZKKB8oFZvLrjd7PLRs0ORSaseqA di0TEUAC3RpmybB1iuukvYhayeLV9afwXWFGNTqrAGCrGPR9umP7OeKGIm6SHrmGnqMlAAz6 qfVITcbhdne2JiqLaZ23B1ezTmJwPPbDGi7G6Yk3Z5pzuZBgq/L1ZyenUBmIcx95C1kVmUtl POJJ3RUNXqJLkjfZhGcmQczR2U0WoOuHVWCmztxa3yhkQETjKhmlIkBV6pj2Bc/mtynVBZg8 XclC6f4Q9bADDOiwO6uDbqI8Bpa1X8YY7iL8QJy2JHACT/j/+mji6Er8c+xU9qkxNmjc3E2a KpCg7gIqnWFj/Ag76AHkPkIo2SO2QINyRMgnFMQeS6j7ij7BOwARAQABzUtEYXZpZCBOZXdt YW4gKERhdmlkIE5ld21hbiBOZXR3b3JrIFRlc3Qgd29yayBrZXkpIDxkbmV3bWFuQG5ldHdv cmt0ZXN0LmNvbT7CwX8EEwEIACkFAlnmfMECGwMFCQeGH4AHCwkIBwMCAQYVCAIJCgsEFgID AQIeAQIXgAAKCRB8vD6mldfDUqfvD/4zARgEeKZqNrJWOK9YMkIah6C6dMohRH0Pz9AkMz9+ 9i9VhdZf2Pv0hq+IEGw+6ISQZL/xiNmq4l6rBioU+AAq98CZq8sh0VLSSeEqYDbo9anvSu2W j1MzhC0BKhlaFPgy08EYZlN2z4pbSvG/ARc0xfTiGlU2jA+iEiMNDbHveGEH1iwAXV3JGA9T bIpe/D5pVO2aemTsePf6+OiATE7M3crqKYZX7WMejqMbOuXzWbeCh/HoDnBBSFDIHR3lQfqR 6jwvb/NogoBioMx6I9vtXvwkqVgp4/jxgkK+I1X4BCdXvC1s3qnJQ9lQT3kFPCJBhQ3qcORv Lvx5svBtp9undPvvp+7SEOBIZDyAfAtSRvBHSv86Y8XnTSrseqk/XtcQbsHs7eVAYcg7F0dR gXFNFUMg67VgacXfyi2GrmkIvA3Zh8h39pZBiTiKfizMhn10gFPhHI6zndR5mYVO5sGUVMVt Mw4f0MDiKHmgFZcs/zcO89OSx3vRwAn5YfBdCagrX1VPYAgGxsfPhnUT8BjmqAFLbHHpb23n HUtfepMIeNaN76/PcxQJUInx/9MfceKL/XGJ8uThM3Ujdv8x6IS7mzEqSbMQTqVVi7loIfP3 qqP87k4Z6G7IMNXKk/Mg84kLTq7YD48pm9S1ME+ghd7wraX2tcbMycuZsrE4XfI8ic7BTQRZ 5nzBARAA9fYZMETrO0l7alXxUVxYxLYVWulKh3GBz9yAeSXSEIJ+q8f0WsDK5zPd6ndBzY2k pT2DJ/ND1NfZJlEo5o27eETQJkpIMV38ZINZz/gVThMIIpCHZeSMW3JveZYEB1xYLFLxeILI ECBAO/h0ASdRz0KYLJldWmuWBUd3tsxhOpK/lZ/s5wbFpstAzsAiw0sm2de4UpNpmGHc1x1j eJH4WBKIAUkZLDXUWEkN1aSVMGWH/2yH87x/J/Mjrj49T+6RwwUohSgOQV3q1XjGjqDq/tpN BPODp32z9GchIvmCU4cRF0uQKpUXtu0fpwnmc1W5M/1aVPQ33vgEFcS/brpWMf7xLIL9EGDp 4/4BukImG4wOx1L3GuKIw5XXNLA9uCriWXr7NSvI00AhXR7m/NbE9ZLIHKfTWssFf9hYnh3p x2n1E+Hy/okqDppfGynHUJjcl5UwP2v6lKO4VO8Gz6wdhl2sYU9pNT6/8Hfp9lnY0BTbFv5Y zZfD77NdCJoDwEd2FUgRzb4vqjwoswci8U73pcOCylbQbAEC5scy/Bd5BOoSIy0kGaQYqumA 3rGXzDn4B02xiYiraNIH28jZPmWzYGM/jncajRFYARZFh/K1OW8Wl3JILAlwZP4VO6ECDj3r qv9EwUv6gxsikXtCT0xjnHL/N5+UQBIQOrx7/TKb80MAEQEAAcLBZQQYAQgADwUCWeZ8wQIb DAUJB4YfgAAKCRB8vD6mldfDUvPlD/4rpb17nhmvSnAy+ShanY2p40M4kgo46Mwmvm3Dmug8 5P+ECRtmhTZ+kEU8Ici/u7FFvE1WHydeNCdE/tOaJ3qXMLBOd4SiB+sa21E0veqR28qUmymI Ti/gFhMpL2Cfa5oPQj5sq/fdEPJzpAoaHfxUMPIUZ7ebM96syazndEFJAFS9MO00/SJ/HcUx 8VMypzqoG+EyBs4c+PThNRyuUH5x8gh4uABILTYIwqUE4HESpRef9ETdJpBkWhsQqxo3Nvoa TLjZH0LNnMyZXOb/aUeQBm0TSGda+on+0BdI70QgI42mu6ovKup32eUhHh7C9scKv8NJYo1Z 4PqRQVIEPznCizZ90aBP1Ia0rJfcADzFNrOQru1WXmm+zXu/TYdESyoL5MRAlitEIs34oeJF X8wMgkHZBFVhvEm60ynH2HZQRLWGIVBnW7oJ2apTx10L2AZWZvLQ6P8pn4eZMPX3+f854d4Q D4yEhE9Ec7CTiqmo6A5+bHGi/yf8VzxMNorlyHCIFZZdfm5vctcg78iUfqsKyvAULpmjLKyA YkX0qv2EnCMUb9urwITWbQTySOVazfjOjRPUO1z5RbfGwCMwNdW8ahf94jtLaVbvVp+7F8dD Y81Qhcbc2MAOWzP1ghr+wsyAyvzVJuDS0kDh6XjpuZddSBEYAh+aI8Kcwqsr75INMg== Organization: Network Test Inc. Subject: Re: xrdp configuration and xfce4 Message-ID: <2a4a6b24-b0ec-a1e8-2e52-00cf1703e193@networktest.com> Date: Wed, 8 Aug 2018 10:57:42 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 17:57:58 -0000 On 8/8/18 9:32 AM, Oleg Cherkasov wrote: > On 08. aug. 2018 04:10, David Newman wrote: >> On 8/7/18 6:31 PM, Koichiro Iwao wrote: >>> On Tue, Aug 07, 2018 at 06:24:15PM -0700, David Newman wrote: >>>> Not sure what changes I would make in startxm.sh to automate this. T= he >>>> existing script has file locations for X on Linux distros. >>> >>> Really? >>> >>> ``` >>> #!/bin/sh >>> startxfce4 >>> ``` >>> >>> That's all. >> >> Sorry, no go. >> >> A startwm.sh script with just these two lines produces a black screen >> with one xterm and doesn't start xfce, let alone deal with the >> copy/paste problem. >> >> Also tried with '/usr/local/bin/xfce4-session' but got the same result= s. >> >> Either of these is exactly the same outcome as using the default >> startxm.sh script supplied with xrdp from the pkg repo. >> >> I am restarting the xrdp service and exiting the xterm after each >> attempt. >> >> If you have this working successfully with a similar environment -- >> Microsoft RDP client on a Mac connecting to xrdp 0.9.x on FreeBSD 11.2 >> -- are you able to share your xrdp.ini and startwm.sh files? >=20 > Have you tried to make ~/.xsession file with: >=20 > #! /bin/sh > startxfce4 Previously the .xsession file was just 'startxfce4'. But adding the '#! /bin/sh' line and restarting xrdp did not change the behavior: It's still a black screen with one xterm, and no xfce4 desktop or copy/paste support. Of course startxfce4 will run manually from the xterm but along with copy/paste, those are the problems I'm looking to solve. Thanks. dn From owner-freebsd-questions@freebsd.org Wed Aug 8 17:59:52 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C6AEA10652BD for ; Wed, 8 Aug 2018 17:59:52 +0000 (UTC) (envelope-from kayasaman@gmail.com) Received: from mail-wm0-x22a.google.com (mail-wm0-x22a.google.com [IPv6:2a00:1450:400c:c09::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 44CAF8A925 for ; Wed, 8 Aug 2018 17:59:52 +0000 (UTC) (envelope-from kayasaman@gmail.com) Received: by mail-wm0-x22a.google.com with SMTP id l2-v6so178827wme.1 for ; Wed, 08 Aug 2018 10:59:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding:content-language; bh=SBTq2zwsKGvks0V/vGzV3uXfl9l79hzTUMi88LtIPNs=; b=ZPZny8RR+ncJGxn/f6CWi9pmfakQjrHaqB2m5np9HKBlvEa29YUB8JUpoiCUlH65Z7 Dc1ATbRc3rxKoJ2nVoyfTO2fXjUVKNCCbDVawSCWTsRPxMVRA51C9LolK8BvQheQX8wU 6s0YtEJFqhehlL0kuyelxCKjZEVLjhUH1wHeqKstXk43ij5MmqgSsTdwV/8A4OYp1sT4 JtBJRDHvBmHpI+TauLlXR20CkfuxVMYWdMAM1pEqQhN927coXeouh4RX8igL7asmbkFv ud/BE3DG87GH06w2W4y4lBzHd6iePG5p/Tk7/nKep9hiOm8FVbvRv+VDfEiLhojLvz92 mlQw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=SBTq2zwsKGvks0V/vGzV3uXfl9l79hzTUMi88LtIPNs=; b=AunAQEl+ir5uRGSTp+5hbih/rQ5IV3KDA6Ar/35vCoSgHLXqNZcf97BctomZmK8tCE uWg3OQR1TE1yVCQPIh3Qu+5HSxKyLhZfOeppwIYhHfmg2ceOtqb3Q9HTswMcLFxIoERf Vcnea3DM2ve7k0PeKCn/zaRuP9w/RKZicoz5NFahXVJO5jWQQlPH/VwllkMED3wz/jmP GbYSrME3SG42GLIN00sb1uGZlg0RARf4MYK3zf9X5knqTU/flvhcFg19gPI92mEPSKM4 s/uzl6SqGvXuiqcMCSp/x0Og3FlvDicty++Ocm16j8KCFwYHDuvsCQNchtgKBQ7GP16Q ICdg== X-Gm-Message-State: AOUpUlGNzSfvEHXgm7mFVRmijaP4Z1pgOesPr7sY33BIR41VvVm0TUiu adVZc9ELdOtDSbNPMuDyIMNRV+Sa X-Google-Smtp-Source: AA+uWPyD0IWZkJSP/5Ssby466RlNUM+YMhjH6AJ0viNiXN1bQm5t++yM0076KsFUzgB1hd0uqeuUng== X-Received: by 2002:a1c:ee5d:: with SMTP id m90-v6mr2564272wmh.107.1533751190746; Wed, 08 Aug 2018 10:59:50 -0700 (PDT) Received: from Sting-Ray.optiplex-networks.com (optiplexnetworks.plus.com. [212.159.80.17]) by smtp.gmail.com with ESMTPSA id b2-v6sm5116422wmh.3.2018.08.08.10.59.49 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 08 Aug 2018 10:59:49 -0700 (PDT) To: freebsd-questions@freebsd.org From: Kaya Saman Subject: Fresh install of 11.2 hung at boot - no login prompt reached Message-ID: <6afd9eb9-982a-66e1-4641-2fe846592d92@gmail.com> Date: Wed, 8 Aug 2018 18:59:49 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US-large X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 17:59:53 -0000 Hi, I've just performed a fresh install of 11.2: 11.2-RELEASE FreeBSD 11.2-RELEASE #0 r335510: Fri Jun 22 04:32:14 UTC 2018 Basically as I have a custom partition layout I decided to install ZFS on Root manually. # gpart show ada0 =>       40  468862048  ada0  GPT  (224G)          40       1024     1  freebsd-boot  (512K)        1064    2097152     2  freebsd-swap  (1.0G)     2098216   14679256        - free -  (7.0G)    16777472  233292168     3  freebsd-zfs  (111G)   250069640  218792448     4  freebsd-zfs  (104G) This is mirrored with ada1 in the zroot: # gpart show ada1 =>       40  468862048  ada1  GPT  (224G)          40       1024     1  freebsd-boot  (512K)        1064    2097152     2  freebsd-swap  (1.0G)     2098216   14679256        - free -  (7.0G)    16777472  233292168     3  freebsd-zfs  (111G)   250069640  218792448     4  freebsd-zfs  (104G) The zpool has been constructed as such: # zpool status zroot   pool: zroot  state: ONLINE   scan: none requested config:     NAME        STATE     READ WRITE CKSUM     zroot       ONLINE       0     0     0       mirror-0  ONLINE       0     0     0         ada0p3  ONLINE       0     0     0         ada1p3  ONLINE       0     0     0 errors: No known data errors As there seems to be little documentation on customized or manual install of ZFS on root as the installation medium partitioner utilizes the whole disk, I am a little lost! The information on the Fbsd wiki: https://wiki.freebsd.org/RootOnZFS/ZFSBootPartition is outdated and later steps are not relevant any more as there is no more 'sysinstall'. The steps I followed are off a thread in the forum: https://forums.freebsd.org/threads/installing-freebsd-manually-no-installer.63201/ This works so long as I boot the kernel from my installation USB drive using the steps: ok unload ok load /boot/kernel/kernel ok load /boot/kernel/opensolaris.ko ok load /boot/kernel/zfs.ko <-- for me iscsi.ko, if_lagg.ko, iscsi_initiator.ko, ctl.ko, cfiscsi.ko ok set vfs.root.mountfrom="zfs:zroot" ok boot Now if I try to boot directly from the system (I have already installed the kernel and issued: gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 1 ada(x) for both drives ada0 & ada1) the system I think at Boot Stage 2? following: https://www.freebsd.org/doc/handbook/boot-introduction.html comes up with: BIOS drive [...] read 264 from 384 to 0x7c0f5f80 .... until final message: error: 0x10 Then finally shows the Beastie pic with menu which I think is Stage 3? then boots the kernel. I get messages complaining about some /dev devices not being accessible or writable then it complains about not being able to read the /etc/defaults/devfs rules file. Afterwards I see the standard kernel messages until the date/time is shown after which the boot process hangs and no login prompt appears. Is there anyone who is familiar with the boot process who can help me out here....?? I'm not sure if I missed configuring something in the boot loader or if I need to map /dev to the system or something..... Anyway, it is a fresh install so nothing I think is corrupted, as the pool is fine. Just something to do with booting and loading things I think?? Many thanks in advance. Kaya From owner-freebsd-questions@freebsd.org Wed Aug 8 18:00:16 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2ADC91065331 for ; Wed, 8 Aug 2018 18:00:16 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from kicp.uchicago.edu (kicp.uchicago.edu [128.135.20.70]) by mx1.freebsd.org (Postfix) with ESMTP id D1DEC8A99C for ; Wed, 8 Aug 2018 18:00:15 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from point.uchicago.edu (point.uchicago.edu [128.135.52.6]) by kicp.uchicago.edu (Postfix) with ESMTP id 7058E718121; Wed, 8 Aug 2018 13:00:15 -0500 (CDT) Subject: Re: Alternative to x11/gnome3 ? To: Polytropon Cc: freebsd-questions@freebsd.org References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801165950.6bb77eabf97c862866d13ecf@sohara.org> <20180808161156.GA66626@admin.sibptus.transneft.ru> <20180808172413.9759288eaa75f6a8024417c8@sohara.org> <20180808163722.GA67368@admin.sibptus.transneft.ru> <2b5cf789-e846-aac0-d33a-39dd71d55f65@kicp.uchicago.edu> <20180808194846.61e5e0de.freebsd@edvax.de> From: Valeri Galtsev Message-ID: <1d0a7981-e564-5726-1d20-bdade411c184@kicp.uchicago.edu> Date: Wed, 8 Aug 2018 13:00:15 -0500 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20180808194846.61e5e0de.freebsd@edvax.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 18:00:16 -0000 On 08/08/18 12:48, Polytropon wrote: > On Wed, 8 Aug 2018 12:28:23 -0500, Valeri Galtsev wrote: >> Incidentally one may need to create ~/.xinitrc for that, what someone >> else had mentioned. My ~/.xinitrc on workstation has one line: >> >> exec mate-session > > There is a convenient way I'm using to deal with settings > that can be either "login with xdm" or "login at console, > then startx", or both: Create ~/.xsession with the > following content: > > #!/bin/csh > source ~/.cshrc > exec ~/.xinitrc > > This example assumes that the C shell is your dialog shell. > For zsh or bash, a slightly different incorporation of the > interactive shell settings is needed. > > And then you can use ~/.xinitrc as you wish, for example: > > #!/bin/sh > [ -f ~/.xmodmaprc ] && xmodmap ~/.xmodmaprc > numlockx > # > # ... more crazy stuff ... > # > xsetroot -solid rgb:3b/4c/7a > xset b 100 1000 15 & > xset r rate 250 30 & > xset s off & > xset -dpms & > exec wmaker > > Note that the #!/bin/sh on top of this script is fully > optional (as sh will be the shell that executes it, no > matter what you write in there), but it makes sure you > know that sh syntax is to be used here. > > This allows you to centralize your user's X startup into > one file, and it will work, no matter if you prefer xdm > or startx. However, if you use gdm from Gnome 2, it won't > work, simply because gdm says "FSCK YOU!" and continues > doing its own startup, tied to the Gnome 2 desktop. ;-) > Wow, Herr Polytropon, you made my day by using filesystem check command in very unusual way. Made me laugh for several minutes ;-) Valeri > > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Wed Aug 8 19:16:30 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 115491068169 for ; Wed, 8 Aug 2018 19:16:30 +0000 (UTC) (envelope-from o1e9.cherkasov@yandex.com) Received: from forward100j.mail.yandex.net (forward100j.mail.yandex.net [IPv6:2a02:6b8:0:801:2::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Yandex CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8EBBE8F3BF for ; Wed, 8 Aug 2018 19:16:29 +0000 (UTC) (envelope-from o1e9.cherkasov@yandex.com) Received: from mxback5j.mail.yandex.net (mxback5j.mail.yandex.net [IPv6:2a02:6b8:0:1619::10e]) by forward100j.mail.yandex.net (Yandex) with ESMTP id D08DD5D87452 for ; Wed, 8 Aug 2018 22:16:25 +0300 (MSK) Received: from smtp3o.mail.yandex.net (smtp3o.mail.yandex.net [2a02:6b8:0:1a2d::27]) by mxback5j.mail.yandex.net (nwsmtp/Yandex) with ESMTP id b0eexNbJGO-GP1CmTjf; Wed, 08 Aug 2018 22:16:25 +0300 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1533755785; bh=tsgjCDXOxR1Ae7UyWv8pAyOZeEJLn8wmkKPiqCNyeeg=; h=Reply-To:Subject:To:References:From:Message-ID:Date:In-Reply-To; b=jIKNioOoBJK4OnAeymAt6c//Ze252CCOXzPHIL4Qkhmmp/Z8TO8GuS2ROFWzoPqEV FNJ82kIPGgsMf4K21t8C9/EXdq7lriWvpeT0N81HRPJ2EDL0Im8OO/QNSO1pVLT9aG rE4gXgt75060UOvke44M/yK+DzU+Bb8YjMjxsNj8= Received: by smtp3o.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id wNyGOejD5n-GOP0whHC; Wed, 08 Aug 2018 22:16:24 +0300 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1533755784; bh=tsgjCDXOxR1Ae7UyWv8pAyOZeEJLn8wmkKPiqCNyeeg=; h=Reply-To:Subject:To:References:From:Message-ID:Date:In-Reply-To; b=vJ+LlJbEjnGzVKZmD/GdJANTZJBAAcErviId2zxCLpwzWHYlp1b4Nwkr6hEa2Iyj+ tH/DCslnQ2FdO4GUctDDKx1Xicr3vs7vl5eSs95GYXrq473Jag7M43rsgCZsZS7VCg FMUxbO2CZ4dzKgLdEDLpqNZ0ry/5SOqGlp89XOCY= Authentication-Results: smtp3o.mail.yandex.net; dkim=pass header.i=@yandex.com Reply-To: o1e9@member.fsf.org Subject: Re: xrdp configuration and xfce4 To: freebsd-questions@freebsd.org References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> <2a4a6b24-b0ec-a1e8-2e52-00cf1703e193@networktest.com> From: Oleg Cherkasov Message-ID: Date: Wed, 8 Aug 2018 21:16:23 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <2a4a6b24-b0ec-a1e8-2e52-00cf1703e193@networktest.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 19:16:30 -0000 On 08. aug. 2018 19:57, David Newman wrote: > On 8/8/18 9:32 AM, Oleg Cherkasov wrote: >> On 08. aug. 2018 04:10, David Newman wrote: > > Previously the .xsession file was just 'startxfce4'. > > But adding the '#! /bin/sh' line and restarting xrdp did not change the > behavior: It's still a black screen with one xterm, and no xfce4 desktop > or copy/paste support. > > Of course startxfce4 will run manually from the xterm but along with > copy/paste, those are the problems I'm looking to solve. I think it was another in X called ~/.xinitrc, just give it a try. From owner-freebsd-questions@freebsd.org Wed Aug 8 20:50:42 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CAF9F106A7D0 for ; Wed, 8 Aug 2018 20:50:42 +0000 (UTC) (envelope-from sgk@troutmask.apl.washington.edu) Received: from troutmask.apl.washington.edu (troutmask.apl.washington.edu [128.95.76.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "troutmask", Issuer "troutmask" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 6233C9344E for ; Wed, 8 Aug 2018 20:50:42 +0000 (UTC) (envelope-from sgk@troutmask.apl.washington.edu) Received: from troutmask.apl.washington.edu (localhost [127.0.0.1]) by troutmask.apl.washington.edu (8.15.2/8.15.2) with ESMTPS id w78KoqfZ089245 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Wed, 8 Aug 2018 13:50:52 -0700 (PDT) (envelope-from sgk@troutmask.apl.washington.edu) Received: (from sgk@localhost) by troutmask.apl.washington.edu (8.15.2/8.15.2/Submit) id w78Koqls089244 for freebsd-questions@freebsd.org; Wed, 8 Aug 2018 13:50:52 -0700 (PDT) (envelope-from sgk) Date: Wed, 8 Aug 2018 13:50:52 -0700 From: Steve Kargl To: freebsd-questions@freebsd.org Subject: tun device in devfs.conf? Message-ID: <20180808205052.GA89195@troutmask.apl.washington.edu> Reply-To: sgk@troutmask.apl.washington.edu MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.10.1 (2018-07-13) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 20:50:43 -0000 Hi, I've been told that I must use a VPN from my home system to connect to work. I've installed openvpn. As a normal user, who is a member of wheel and operator groups, I execute % openvpn config.txt openvpn ends with Wed Aug 8 13:46:29 2018 Cannot allocate TUN/TAP dev dynamically Wed Aug 8 13:46:29 2018 Exiting due to fatal error Is there a devfs rule that I can add to /etc/devfs.conf to allow the normal user to create a tun device? -- Steve From owner-freebsd-questions@freebsd.org Wed Aug 8 20:52:15 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0DC2C106A969 for ; Wed, 8 Aug 2018 20:52:15 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (mail8.networktest.com [192.73.244.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B028D936D0 for ; Wed, 8 Aug 2018 20:52:14 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (localhost [127.0.0.1]) by mail8.networktest.com (Postfix) with ESMTP id 64B6461803B for ; Wed, 8 Aug 2018 13:52:09 -0700 (PDT) Authentication-Results: mail8.networktest.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=networktest.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=networktest.com; h=content-transfer-encoding:content-language:content-type :content-type:in-reply-to:mime-version:user-agent:date:date :message-id:organization:from:from:references:to:subject :subject; s=dkim; t=1533761529; x=1534366330; bh=EoOFoRvTusxNZe3 VDKtxa5PWNAU7iQNsGdloyITS43E=; b=T016+iR+shz4LBvAfy1jnBgS6v5HVXL emUg8pFYIP2EdwugFT5wVPE+kP1OP4AOdF0tToH6cVP1+EgNUAfjOspGwvfSdlXq i5276qBV2enFc8JcszYR83aIrPP2R46nuO+KZbu7svS0ZtA0TXbInq/eVfEiA3B/ iMO7bvd15GIE= X-Virus-Scanned: amavisd-new at mail8.networktest.com Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id gWe-m3I6D1dK for ; Wed, 8 Aug 2018 13:52:09 -0700 (PDT) Received: from dhcp129.eng.networktest.com (ns.networktest.com [69.75.159.98]) by mail8.networktest.com (Postfix) with ESMTPSA id 9E07B61803A for ; Wed, 8 Aug 2018 13:52:07 -0700 (PDT) Subject: Re: xrdp configuration and xfce4 To: freebsd-questions@freebsd.org References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> <2a4a6b24-b0ec-a1e8-2e52-00cf1703e193@networktest.com> From: David Newman Openpgp: preference=signencrypt Autocrypt: addr=dnewman@networktest.com; prefer-encrypt=mutual; keydata= xsFNBFnmfMEBEACt5x64cZy4FPct3SaH44BMAYkghlJDxI11XpHUJNFAuJ8MD8WgF5F6Nc9C PCl7WzIHAwgWkM2ntAgcOeKvBiFTtzMfiIczfgIAkhiyANYAm3MIH4Li9X0NltYtROQ7FUn+ H4IWZ0SF/BZH1jfoLRNVvuLHdXVYrol/9sGlSI1KTpzpt3GIgeTxdOgTy0nO0HO7c0EBTnRv L3fyYs2E9XgmqsHlFqHBvF1OV0HjVJsqohQxb9iReZEL2UseTZYIYOhKizI3oJOnwPmf7zYg E4jzL422tHbbj4Qwh8l4kZDvy3J+S+KmqFD+IvOUbFBmHZKKB8oFZvLrjd7PLRs0ORSaseqA di0TEUAC3RpmybB1iuukvYhayeLV9afwXWFGNTqrAGCrGPR9umP7OeKGIm6SHrmGnqMlAAz6 qfVITcbhdne2JiqLaZ23B1ezTmJwPPbDGi7G6Yk3Z5pzuZBgq/L1ZyenUBmIcx95C1kVmUtl POJJ3RUNXqJLkjfZhGcmQczR2U0WoOuHVWCmztxa3yhkQETjKhmlIkBV6pj2Bc/mtynVBZg8 XclC6f4Q9bADDOiwO6uDbqI8Bpa1X8YY7iL8QJy2JHACT/j/+mji6Er8c+xU9qkxNmjc3E2a KpCg7gIqnWFj/Ag76AHkPkIo2SO2QINyRMgnFMQeS6j7ij7BOwARAQABzUtEYXZpZCBOZXdt YW4gKERhdmlkIE5ld21hbiBOZXR3b3JrIFRlc3Qgd29yayBrZXkpIDxkbmV3bWFuQG5ldHdv cmt0ZXN0LmNvbT7CwX8EEwEIACkFAlnmfMECGwMFCQeGH4AHCwkIBwMCAQYVCAIJCgsEFgID AQIeAQIXgAAKCRB8vD6mldfDUqfvD/4zARgEeKZqNrJWOK9YMkIah6C6dMohRH0Pz9AkMz9+ 9i9VhdZf2Pv0hq+IEGw+6ISQZL/xiNmq4l6rBioU+AAq98CZq8sh0VLSSeEqYDbo9anvSu2W j1MzhC0BKhlaFPgy08EYZlN2z4pbSvG/ARc0xfTiGlU2jA+iEiMNDbHveGEH1iwAXV3JGA9T bIpe/D5pVO2aemTsePf6+OiATE7M3crqKYZX7WMejqMbOuXzWbeCh/HoDnBBSFDIHR3lQfqR 6jwvb/NogoBioMx6I9vtXvwkqVgp4/jxgkK+I1X4BCdXvC1s3qnJQ9lQT3kFPCJBhQ3qcORv Lvx5svBtp9undPvvp+7SEOBIZDyAfAtSRvBHSv86Y8XnTSrseqk/XtcQbsHs7eVAYcg7F0dR gXFNFUMg67VgacXfyi2GrmkIvA3Zh8h39pZBiTiKfizMhn10gFPhHI6zndR5mYVO5sGUVMVt Mw4f0MDiKHmgFZcs/zcO89OSx3vRwAn5YfBdCagrX1VPYAgGxsfPhnUT8BjmqAFLbHHpb23n HUtfepMIeNaN76/PcxQJUInx/9MfceKL/XGJ8uThM3Ujdv8x6IS7mzEqSbMQTqVVi7loIfP3 qqP87k4Z6G7IMNXKk/Mg84kLTq7YD48pm9S1ME+ghd7wraX2tcbMycuZsrE4XfI8ic7BTQRZ 5nzBARAA9fYZMETrO0l7alXxUVxYxLYVWulKh3GBz9yAeSXSEIJ+q8f0WsDK5zPd6ndBzY2k pT2DJ/ND1NfZJlEo5o27eETQJkpIMV38ZINZz/gVThMIIpCHZeSMW3JveZYEB1xYLFLxeILI ECBAO/h0ASdRz0KYLJldWmuWBUd3tsxhOpK/lZ/s5wbFpstAzsAiw0sm2de4UpNpmGHc1x1j eJH4WBKIAUkZLDXUWEkN1aSVMGWH/2yH87x/J/Mjrj49T+6RwwUohSgOQV3q1XjGjqDq/tpN BPODp32z9GchIvmCU4cRF0uQKpUXtu0fpwnmc1W5M/1aVPQ33vgEFcS/brpWMf7xLIL9EGDp 4/4BukImG4wOx1L3GuKIw5XXNLA9uCriWXr7NSvI00AhXR7m/NbE9ZLIHKfTWssFf9hYnh3p x2n1E+Hy/okqDppfGynHUJjcl5UwP2v6lKO4VO8Gz6wdhl2sYU9pNT6/8Hfp9lnY0BTbFv5Y zZfD77NdCJoDwEd2FUgRzb4vqjwoswci8U73pcOCylbQbAEC5scy/Bd5BOoSIy0kGaQYqumA 3rGXzDn4B02xiYiraNIH28jZPmWzYGM/jncajRFYARZFh/K1OW8Wl3JILAlwZP4VO6ECDj3r qv9EwUv6gxsikXtCT0xjnHL/N5+UQBIQOrx7/TKb80MAEQEAAcLBZQQYAQgADwUCWeZ8wQIb DAUJB4YfgAAKCRB8vD6mldfDUvPlD/4rpb17nhmvSnAy+ShanY2p40M4kgo46Mwmvm3Dmug8 5P+ECRtmhTZ+kEU8Ici/u7FFvE1WHydeNCdE/tOaJ3qXMLBOd4SiB+sa21E0veqR28qUmymI Ti/gFhMpL2Cfa5oPQj5sq/fdEPJzpAoaHfxUMPIUZ7ebM96syazndEFJAFS9MO00/SJ/HcUx 8VMypzqoG+EyBs4c+PThNRyuUH5x8gh4uABILTYIwqUE4HESpRef9ETdJpBkWhsQqxo3Nvoa TLjZH0LNnMyZXOb/aUeQBm0TSGda+on+0BdI70QgI42mu6ovKup32eUhHh7C9scKv8NJYo1Z 4PqRQVIEPznCizZ90aBP1Ia0rJfcADzFNrOQru1WXmm+zXu/TYdESyoL5MRAlitEIs34oeJF X8wMgkHZBFVhvEm60ynH2HZQRLWGIVBnW7oJ2apTx10L2AZWZvLQ6P8pn4eZMPX3+f854d4Q D4yEhE9Ec7CTiqmo6A5+bHGi/yf8VzxMNorlyHCIFZZdfm5vctcg78iUfqsKyvAULpmjLKyA YkX0qv2EnCMUb9urwITWbQTySOVazfjOjRPUO1z5RbfGwCMwNdW8ahf94jtLaVbvVp+7F8dD Y81Qhcbc2MAOWzP1ghr+wsyAyvzVJuDS0kDh6XjpuZddSBEYAh+aI8Kcwqsr75INMg== Organization: Network Test Inc. Message-ID: <52e2c421-e766-859e-3331-92aeb0c9921e@networktest.com> Date: Wed, 8 Aug 2018 13:52:06 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 20:52:15 -0000 On 8/8/18 12:16 PM, Oleg Cherkasov wrote: > On 08. aug. 2018 19:57, David Newman wrote: >> On 8/8/18 9:32 AM, Oleg Cherkasov wrote: >>> On 08. aug. 2018 04:10, David Newman wrote: >> >> Previously the .xsession file was just 'startxfce4'. >> >> But adding the '#! /bin/sh' line and restarting xrdp did not change the >> behavior: It's still a black screen with one xterm, and no xfce4 desktop >> or copy/paste support. >> >> Of course startxfce4 will run manually from the xterm but along with >> copy/paste, those are the problems I'm looking to solve. > > I think it was another in X called ~/.xinitrc, just give it a try. That file previously had these contents: exec /usr/local/bin/startxfce4 --with-ck-launch Changing this to just: startxfce4 and restarting the xrdp service did not result in xfce4 starting by itself or copy/paste being enabled. It's possible FreeBSD-specific changes are needed to xrdp.ini, startwm.sh, and maybe other config files, but I don't know what those changes are. Thanks. dn From owner-freebsd-questions@freebsd.org Wed Aug 8 21:16:57 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0236A106B709 for ; Wed, 8 Aug 2018 21:16:56 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [217.72.192.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 66F85948A9 for ; Wed, 8 Aug 2018 21:16:56 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([92.195.64.203]) by mrelayeu.kundenserver.de (mreue105 [212.227.15.183]) with ESMTPA (Nemesis) id 0MKZOx-1fnmfQ1ubv-001y08; Wed, 08 Aug 2018 23:16:39 +0200 Date: Wed, 8 Aug 2018 23:16:37 +0200 From: Polytropon To: Victor Sudakov Cc: sergio lenzi , freebsd-questions@freebsd.org Subject: Re: Alternative to x11/gnome3 ? Message-Id: <20180808231637.1be9d4e6.freebsd@edvax.de> In-Reply-To: <20180808163315.GB66626@admin.sibptus.transneft.ru> References: <20180511090813.GA21919@admin.sibptus.transneft.ru> <1526039986.18202.5.camel@k1.com.br> <20180731014358.GA925@admin.sibptus.transneft.ru> <20180731195608.40cee639.freebsd@edvax.de> <20180801024324.GA20419@admin.sibptus.transneft.ru> <20180801162045.f3653b7d.freebsd@edvax.de> <20180808163315.GB66626@admin.sibptus.transneft.ru> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:++Fz6uoN8gt3fCy+sTq9w7uMkkImXC7gfp1bGBiUZke1INf1gni O9qO/tIbLePPvWGgQe5GRpw5PzDPEq5RgQuFr30UsqtGEXw6sEDmQ2Hkz1eg8zQ+6gudf/M hpd2xCquKfxbO6/cGp4qSHS/hzgfp6AytTW04VecwjyMya18PEsU5WF0qyaqAJmBf7fS+05 oCvVJ7ZFZTqdK6hlDB2Zg== X-UI-Out-Filterresults: notjunk:1;V01:K0:v93F8qMBoEA=:3OkmDNLOpBK4o+LnNLsKzK atmazY1lR2+66vUuPhilsBKcV+j802W63DYC6KJRnfRtUEvU6EBe3kiPZXWzXPpbwWyZWQ6mr vx4oT+skTBDBv8FtaJITstSsSJX42aEQWZ8BrSePQkmgV6CBov6UnlsWTCFVSI1ebSn78KoKq 09qPMbjZv3fkU8hrYH6B+gFqj5qL5PVIV1rJtUICl4ifrEsaN24ZYrH/aK8l81wPCFTo83T3W koOchMFONZM2oq05gtXnMkz5gHeFfTRgXZad4wVlr5/f443AlTlt0FyFSXb4M2PmZ/T6ZMu9x UAXH4m31DZpwYRBS3A9cRB6jN+tOsCuUn0KgjnG4nwIXt8T2inJNMdhp9B9uCNDfirz/bitYw VJWxQardz/eYKDoeOi9bHxJLKPoB/oXCSuD/WR7zEbQ2FaxtTmYDRkEywSdxfTP7qtmmdu3sx BqcErq6ZTDyZuqL1rH8/vB42Jnkwq2CKzei1MQSYXhJxZdsrYxJZCXBrLjql9DeqeBnGWlHht o4wqsp3znUxttx9pIWOUuzMaBP7dn5n+IQHNuLRezHQ3vCY2TzPU8teANIsBc0UpqImv633Wu UNM/WnQY/t8UJnAm8+VWfiGHeWaTLt6KLJmgtNzoDsawol89vL2LYkdprqPBsOA5ts9giq5J4 6Yb9ei2sePHLrQXbOBUwhHt/GlYgTnhTLJSfomuJr4Leggoq4dbRPZMyxvgKRFOZJTgla/dB+ /NgvAiA9JUi+MAHm X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 21:16:57 -0000 On Wed, 8 Aug 2018 23:33:15 +0700, Victor Sudakov wrote: > Polytropon wrote: > > [dd] > > > > > > 2. The sound control app in Mate is completely unrelated to the real > > > > > sound system of FreeBSD (as of 11.2 and mate-1.18.0). The volume and > > > > > input/output controls do nothing. I have to use the good old > > > > > /usr/sbin/mixer and "sysctl hw.snd.default_unit" to manipulate with > > > > > sound. Is this my misconfiguration or Mate's fault? > > > > > > > > Is it using the wrong mixer? Can you select a different mixer > > > > device for the Gnome / Mate mixer control? > > > > > > What's "Mate mixer control" ? The Mate sound app lists all my > > > soundcards correctly (maybe it just takes them from /dev/sndstat) but > > > selecting any of the devices and trying to set parameters (set volume > > > or test speakers) does exactly nothing. > > > > Okay, so you've already checked that more than one mixer > > can be present in the system (/dev/mixer*), and none can > > be manipulated. > > Yes, I have 5 mixers: /dev/mixer{0,1,2,3,4} > > /dev/mixer0 is manipulated by the volume control at the top bar. > I actually had to write a script to figure it out: > > #!/bin/sh > mv ~/tmp/mix1 ~/tmp/mix0 > for i in 0 1 2 3 4 > do > echo mixer$i >> ~/tmp/mix1 > mixer -f /dev/mixer$i >> ~/tmp/mix1 > done > diff -u ~/tmp/mix0 ~/tmp/mix1 My assumption is: The first mixer device it finds (usually /dev/mixer0) will be used. But how to change this? a) Check if there is a command line switch (like -f to the mixer program) to select the mixer which should be manipulated. But how to check? With "man ", the question arises how the mixer control is actually called. From a bit of googling I found "mate-mixer" and "mate-volume-control-applet" as possible names. There probably won't be a manpage for them, because documentation is often considered "not needed" over there in GUI Linux land... :-( Maybe this is a possible starting point: https://www.linuxquestions.org/questions/slackware-14/mate-1-10-sound-mixer-4175545660/ b) Use FreeBSD's sysctl facility to change the mixer order. With the device.hints file, this could be possible (so /dev/mixer1 assigned to the front connectors becomes /dev/mixer0 which is then controlled by the Mate volume control slider). It's all nice and fine if the defaults work for you. But if you have a slightly different requirement, it seems you're doomed. A little sidenote for the script: For "for i in 0 1 2 3 4", you could use "for i in `seq 0 4`". :-) > > > > I fully understand that most GUI software is ported from Linux, > > > > it's not a native BSD development result, so maybe it expects > > > > some ALSA instead of the standard OSS... > > > > > > A question to you as you said you are a Mate user. Does this sound app > > > work personally for you? Can you at least set the volume and run the > > > speaker test from it? > > > > I can only talk about the normal volume control accessed > > from the top bar: It works. The one slider present changes > > the master volume. The result can be checked from a terminal > > with the system's "mixer" command afterwards. > > I have 5 mixers: /dev/mixer{0,1,2,3,4} > > How do you select which mixer would be connected to the volume slider > in the top bar? In my configuration, moving this slider changes the > volume on /dev/mixer0 (Rear Analog), and I'd prefer to associate it > with /dev/mixer1 (Front Analog). Hve you considered using a different mixer program? I've just tried ye olden xmixer: it has both "man xmixer" and a way to select the mixer via "xmixer -m ". There's still something that I just thought of: What if inside Mate, ALSA is being used? L stands for Linux. Could that be a reason why there is the narrowminded assumption that "only one mixer in the system" seems the way the mixer works? > > Sidenote: I'm not a Mate user, but I have a few Mate users. > > I'm primarily a WindowMaker user myself. :-) > > Oh, but WindowMaker is not a DE, it's just a WM. Exactly! :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Wed Aug 8 22:22:45 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EC6C0106D948 for ; Wed, 8 Aug 2018 22:22:44 +0000 (UTC) (envelope-from doug@fledge.watson.org) Received: from cyrus.watson.org (cyrus.watson.org [204.107.128.30]) by mx1.freebsd.org (Postfix) with ESMTP id 9F5609792C for ; Wed, 8 Aug 2018 22:22:44 +0000 (UTC) (envelope-from doug@fledge.watson.org) Received: from fledge.watson.org (fledge.watson.org [198.74.231.63]) by cyrus.watson.org (Postfix) with ESMTPS id 24220A34D9; Wed, 8 Aug 2018 22:22:38 +0000 (UTC) Received: from fledge.watson.org (doug@localhost.watson.org [127.0.0.1]) by fledge.watson.org (8.15.2/8.15.2) with ESMTP id w78MMbEd057325; Wed, 8 Aug 2018 18:22:37 -0400 (EDT) (envelope-from doug@fledge.watson.org) Received: from localhost (doug@localhost) by fledge.watson.org (8.15.2/8.15.2/Submit) with ESMTP id w78MMaeW057321; Wed, 8 Aug 2018 18:22:37 -0400 (EDT) (envelope-from doug@fledge.watson.org) Date: Wed, 8 Aug 2018 18:22:36 -0400 (EDT) From: doug Reply-To: doug@safeport.com To: David Newman cc: freebsd-questions@freebsd.org Subject: Re: xrdp configuration and xfce4 In-Reply-To: <52e2c421-e766-859e-3331-92aeb0c9921e@networktest.com> Message-ID: References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> <2a4a6b24-b0ec-a1e8-2e52-00cf1703e193@networktest.com> <52e2c421-e766-859e-3331-92aeb0c9921e@networktest.com> User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (fledge.watson.org [127.0.0.1]); Wed, 08 Aug 2018 18:22:37 -0400 (EDT) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2018 22:22:45 -0000 On Wed, 8 Aug 2018, David Newman wrote: > On 8/8/18 12:16 PM, Oleg Cherkasov wrote: >> On 08. aug. 2018 19:57, David Newman wrote: >>> On 8/8/18 9:32 AM, Oleg Cherkasov wrote: >>>> On 08. aug. 2018 04:10, David Newman wrote: >>> >>> Previously the .xsession file was just 'startxfce4'. >>> >>> But adding the '#! /bin/sh' line and restarting xrdp did not change the >>> behavior: It's still a black screen with one xterm, and no xfce4 desktop >>> or copy/paste support. >>> >>> Of course startxfce4 will run manually from the xterm but along with >>> copy/paste, those are the problems I'm looking to solve. >> >> I think it was another in X called ~/.xinitrc, just give it a try. > > That file previously had these contents: > > exec /usr/local/bin/startxfce4 --with-ck-launch > > Changing this to just: > > startxfce4 > > and restarting the xrdp service did not result in xfce4 starting by > itself or copy/paste being enabled. > > It's possible FreeBSD-specific changes are needed to xrdp.ini, > startwm.sh, and maybe other config files, but I don't know what those > changes are. Do you have physical access to the FreeBSD system? If so look at .xsession-errors in your home dir. In /var/log you will have Xorg.0.log and some other simiarly name files. It seemed like getting xfce started was at least part of the problem. If not, sorry for the noise. I use xdm with my .xsession as follows: artemis:~> cat .xsession #!/bin/sh /usr/bin/ssh-agent /usr/local/bin/startxfce4 startxfce4 from the console login also works. I do not have any other user defined files. From owner-freebsd-questions@freebsd.org Thu Aug 9 03:37:28 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id ACC571050A65 for ; Thu, 9 Aug 2018 03:37:28 +0000 (UTC) (envelope-from 010101651cbe3885-377b4b1d-b633-4b00-8e27-b2b2e1ba49a7-000000@us-west-2.amazonses.com) Received: from a27-116.smtp-out.us-west-2.amazonses.com (a27-116.smtp-out.us-west-2.amazonses.com [54.240.27.116]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 33C2F7CEB8 for ; Thu, 9 Aug 2018 03:37:28 +0000 (UTC) (envelope-from 010101651cbe3885-377b4b1d-b633-4b00-8e27-b2b2e1ba49a7-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=4nphvxivhgsntfxkzsopqsdbvjscuhxm; d=vmeta.jp; t=1533785553; h=MIME-Version:Content-Type:Content-Transfer-Encoding:Date:From:To:Cc:Subject:In-Reply-To:References:Message-ID; bh=M6HhHoZAacspSyTYKplIw2dWlaz8HUUpBPAWQGbbu4o=; b=VTYtzmrhsHSHusVxdfSs7txZEMSsjf7/ttP4LFiwZNEmGXXaIpd6y5Lgy+OyW2DY Hu3z7+VxfK2TeF8p+0oBCo6q4vr3GjzCIoc6XZS+z21jqnL3JD8WRNmy6ixw2c2I7cV CSXzDi+yu1hVVwVMeayvTL6RVtKcmlxCKklSPtlY= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1533785553; h=MIME-Version:Content-Type:Content-Transfer-Encoding:Date:From:To:Cc:Subject:In-Reply-To:References:Message-ID:Feedback-ID; bh=M6HhHoZAacspSyTYKplIw2dWlaz8HUUpBPAWQGbbu4o=; b=Ylx2lTCDbGsGHajm33E82q16u+sJOldTvJmRgA/FKZh1Rx6lNlQ1mJgFvxfKUCao 0a0AVK6kQrs6BgmWBlh0oDZZfxdJL4gdC35Hs6i/N0JoXh8svUs05LN75MhuyAloPOb YK+79XdQEmUZ/3+2fXxAEeq7Uz0ySBlaMkbZMzLk= X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on glory.vmeta.jp X-Spam-Level: X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Thu, 9 Aug 2018 03:32:33 +0000 From: Koichiro IWAO To: o1e9@member.fsf.org Cc: freebsd-questions@freebsd.org Subject: Re: xrdp configuration and xfce4 In-Reply-To: References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> Message-ID: <010101651cbe3885-377b4b1d-b633-4b00-8e27-b2b2e1ba49a7-000000@us-west-2.amazonses.com> X-Sender: meta@vmeta.jp User-Agent: Roundcube Webmail/1.3.6 X-SES-Outgoing: 2018.08.09-54.240.27.116 Feedback-ID: 1.us-west-2.ngRt4x2U/cWqug8pbfjwMxB6pcDw1fmN73bGmMLYyRI=:AmazonSES X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 03:37:28 -0000 >>> ``` >>> #!/bin/sh >>> startxfce4 >>> ``` >>> >>> That's all. >> >> Sorry, no go. >> >> A startwm.sh script with just these two lines produces a black screen >> with one xterm and doesn't start xfce, let alone deal with the >> copy/paste problem. Did you see /var/log/xrdp-seman.log? In this context, ~/.xsession or ~/.xinitrc doesn't affect. Forget it. -- `whois vmeta.jp | nkf -w` meta From owner-freebsd-questions@freebsd.org Thu Aug 9 03:37:41 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CE3311050A8A for ; Thu, 9 Aug 2018 03:37:41 +0000 (UTC) (envelope-from 010101651cc2eaf1-3b1f8145-18bd-4665-bdf9-767470f85a3d-000000@us-west-2.amazonses.com) Received: from a27-116.smtp-out.us-west-2.amazonses.com (a27-116.smtp-out.us-west-2.amazonses.com [54.240.27.116]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 582157CEC4 for ; Thu, 9 Aug 2018 03:37:41 +0000 (UTC) (envelope-from 010101651cc2eaf1-3b1f8145-18bd-4665-bdf9-767470f85a3d-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=4nphvxivhgsntfxkzsopqsdbvjscuhxm; d=vmeta.jp; t=1533785861; h=MIME-Version:Content-Type:Content-Transfer-Encoding:Date:From:To:Cc:Subject:In-Reply-To:References:Message-ID; bh=QBOrhmzu+RFR5Toh+t23eI61Ua2t5Fs+NI8X1kVWagg=; b=bAid7IOyvMHpEtdMgcvOTDv8+s7gM3Yq+7cTltpSPLMDNW1KTAsYleUjwogiTpnJ fE2onLsF5MJzuVoNgDMxFEqACig9qMUr4RbGoUAgqveqnJQc3sUlBvaj82zgtxBh04W pUfFMbdIaX0jCDhdnIrHNPDBpI8lvivFUSfxex9s= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1533785861; h=MIME-Version:Content-Type:Content-Transfer-Encoding:Date:From:To:Cc:Subject:In-Reply-To:References:Message-ID:Feedback-ID; bh=QBOrhmzu+RFR5Toh+t23eI61Ua2t5Fs+NI8X1kVWagg=; b=C2T46mZ5+wP3lIcQ8rqtNPat1GbTKZQpxuDMlPqbvOsCPYoEk9Ns3Cop6DRDIMqE 0JhFQPk2FknMtG8I2ratOISNUXwn7J+9YnlmIesQyciNMo+sIgd2vOzmV9wMFMIa/2W ZkqnzaBswPcAR8DS4ob7tr3xWMcb2o+b9rl2HskI= X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on glory.vmeta.jp X-Spam-Level: X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=unavailable autolearn_force=no version=3.4.1 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Thu, 9 Aug 2018 03:37:40 +0000 From: Koichiro IWAO To: David Newman Cc: freebsd-questions@freebsd.org Subject: Re: xrdp configuration and xfce4 In-Reply-To: <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> Message-ID: <010101651cc2eaf1-3b1f8145-18bd-4665-bdf9-767470f85a3d-000000@us-west-2.amazonses.com> X-Sender: meta@vmeta.jp User-Agent: Roundcube Webmail/1.3.6 X-SES-Outgoing: 2018.08.09-54.240.27.116 Feedback-ID: 1.us-west-2.ngRt4x2U/cWqug8pbfjwMxB6pcDw1fmN73bGmMLYyRI=:AmazonSES X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 03:37:42 -0000 > Sorry, no go. > > A startwm.sh script with just these two lines produces a black screen > with one xterm and doesn't start xfce, let alone deal with the > copy/paste problem. Also try creating ~/startwm.sh instead with following two lines. Don't forget to add execute permission to the script. If it doesn't work and you see xterm, see and show me /var/log/xrdp-sesman.log. >> ``` >> #!/bin/sh >> startxfce4 >> ``` Again, in xrdp context, ~/.xinitrc or ~/.xsession doesn't affect. Forget it and see /usr/local/etc/xrdp/startwm.sh or ~/startwm.sh. -- `whois vmeta.jp | nkf -w` meta From owner-freebsd-questions@freebsd.org Thu Aug 9 05:30:49 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9955A1055BE8 for ; Thu, 9 Aug 2018 05:30:49 +0000 (UTC) (envelope-from estartu@ze.tum.de) Received: from mail.ze.tum.de (mail.ze.tum.de [IPv6:2001:4ca0:2e03::1:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.ze.tum.de", Issuer "Zertifizierungsstelle der TUM" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 14B578117A for ; Thu, 9 Aug 2018 05:30:48 +0000 (UTC) (envelope-from estartu@ze.tum.de) Received: from etustar.ze.tum.de (etustar.ze.tum.de [129.187.39.200]) by mail.ze.tum.de (8.15.2/8.15.2) with ESMTPS id w795UiW5024423 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Thu, 9 Aug 2018 07:30:45 +0200 (CEST) (envelope-from estartu@ze.tum.de) To: freebsd-questions@freebsd.org From: Gerhard Schmidt Subject: No Extended Support Version right now? Openpgp: preference=signencrypt Autocrypt: addr=schmidt@ze.tum.de; prefer-encrypt=mutual; keydata= xsFNBFTtbnsBEACvr5ttOqLgbNfYsyObXlg3/FMYKxujqRgYx3EDJ6bkb1bl3KSkMSQDyvb/ P/T1hHNt/K6e2RxN6IgtCcLt4y8b6PW3i9XIK6/JBf1DCw3P+r7hKsW+R54d30hTHbIglQLc Q20EXX806LvXgZU/P6ny2jMikvd5B9IgrpxLUMrWB9jO2yJCvEYrKSFjGgRnl5kjz93Cp8+E 61Un9YdNDCoDA+M8bpOAy6H8rWHap+qIR+eHb0Tl5KwgFiEMty1uRvQrVtJHWM2EaaavlebC I/JZshy0CNOC8CXdYxbH4IhKCY6/bCWH2+hGaLpzULu9Zwh4SnTqOe4P773Mk5oUVFhLEhnK mQb/3VPGi5eA8FcRaSenNMjUa4nrD0nBUUSu9FZZEW0Pru1OVbvR00vhHKmwu0Q8XAJvhlxK JKcRlyq46Xkf5eBDS/I2Z/BY7XBmenLULSXOcAS1ChjAGocuuMEnNUx3xcVO5FIyhI241aOD ePGZcJddhIlnlFtMYF7vBgdHU0tnyjrbLjCMblnA+sXhXDYNCzI/rI1z7wKgUW2fuw1SmWTT TyeTCaXkLVqtTesIGMKgrD1kJ3zEysRpy3k4piOw7mJpyPjmBOgbZck4ck5pR2G49V2FDaa3 tpd6r3Xv9+pUX86M58PGJqnUyF5DuRaPPYf50T7Zfgy0+rsRzwARAQABzSNHZXJoYXJkIFNj aG1pZHQgPHNjaG1pZHRAemUudHVtLmRlPsLBegQTAQgAJAIbIwULCQgHAgYVCAkKCwIEFgID AQIeAQIXgAUCVO16iwIZAQAKCRB00kPMRXANo6/ID/9yu6YrkBib996NK6fRvu7PcnjINxi8 BSGknDoHsxxygWTetPTsH1ePDN5aIkSYWNcrUFyi1+Wx3phdEOgUSTaJc/59dhbixzArmZ+p B67M0y3LxO7tkBsbOAYglO5DgpCcol/wFat2bILlPCUfzYYqUmEog3gpRUss/bMCwhRQpk+J 7Bm/kyGZHhWg74p1WW5GUqRTbRqSBumXg/wnV81f8L38v2MyWO9eqz/L8PFGHvs+t50S0Z0Q 3mVu6ko+czzFNAPWcKduVeuoeKK6HXFuPRH8VUGwEZYBAjTLMjbEaNF/vmqsIF7dIFWHa79P ETpvYVY5Rreb4Jkx0Rrn8ddus/m7tTReHLFYLNRjSTL8BTWaG6DhEUzC2oFfXCDFw9HCeF/6 v9xH7YzvKtz2U8oYqHyE5UD7UBJ851b+LZF+nXnESuqW/OjVbf+0mGpKe5Xvs6PBTVPjttoR nkmEroaChj0eWIYsNq6JyKXM78JxZCRpPqmCzxXDUPBS9U3WqLJi5L798ZKNQIT2210tETIM pWHaF8rsYtYSB2QKTsrVAh9Hy18tMB4EhVH2G5sRVUlQ15gOBd87ues2qZdg5Wte3dFJzeTl s5cEdNf8t/yEnDWOO+grZJW1SrcbXHUNhadQq2qHOIY188g/emMRtrCXjU8AcQ8pQir1LIJq J8L+3s7BTQRU7W57ARAA3N2qMrRqGkq6Qhp/N8jcbQwmPTlcfd0s/BjsSsz2V4Ix5FGB5Xgz 3nAprPczKvEpJBkDCtdoNA+lUvxNRIurtottpdcPgjDk5zYjafMr65YgPMQAiuMHh0jGQsw4 n70v2zrNU/E8Thb7lxpKPAsHFYs98kP5cxX1V4+g71uo7lYEH3NXWVYFg65n3+qYsIAi2cAW eKRjD4ftZUOU55eG6VnJtQNtchjzJEPCwIDcPtz3toiPsz2zGNSbiPmp8TnGI94sdVhKUF4f 6S51s4N7BGLP2CYSdL0WoLSiXTenNpBVmlT3NZfv8qxcbXmNhqYw9E6F/Uvwn3i2ILHRCs2g Avf1fFICfCOf56dkQEhk1k1/05g9oZeDaMGrKBL/mEOzkJDOMB1/N2Yng0HJwfHuTqMxHfZ1 sinUbnRQ9KoR+RWTKLxq/X7uAi38fLum/FAZgyyOsXK7eoUuEIdf8X2eJWxZE99v0i5PfcDb xKEwzwqECybIT/3HK0eRF0qFx1Wq46jNUju8/lcSiLauCptWbZYdv9lpbZDTU+GvmxILuyv3 MwbF5FsEQunEooyq/grX+3etAO8cuCor4wPasrZXCfwNqjENPNnRuckzI94PEN3AQTZvFPUm Q7RVue0ejf5lc+Y20HrWpvCv2vxIjkMARxd8s2dNyfrdyNUs3xp+JiEAEQEAAcLBXwQYAQgA CQUCVO1uewIbDAAKCRB00kPMRXANo3nwD/98G+MfI3hNN3A8SGL/1VqZeVRNTSK/zzZ9NeoS 6Afq8fz7eq9e1E1XUYVU8hS6i+PEDM7XiI3rtt9V1T8H2cBa6O1tq9DwQODFa3l9d57o/X+V DOKM3Ug3u46DflBX06zkBBX1Ug9axDy8MlEEC2IbeBChBEnWjkM+jwdX8dg1t3cDwrWYVfwE FRtpMOQOERTqqtWd9xe/diiIpjqKmpkO9EOzMFVODH2uRaDSZ4dae5uhblMciP/RH9KqlJAJ I2yQ/KUrfp69QvRRB2S9cfL4ib3iaDAyhTSB00Ke7Wsm578L/sa5pmNKu+gB9qNWQeRAknPp /UeVzJzvcg09XmS7gIwtPB+axJbge4XtZddavrMwHpUGSQUBJLLBGO1Lt3/MkZmv9xvlmwbs iBnGnkNHgQYgSWPrkTqN/D00RWkmOWs4MuQ3XAF1+eKNT7Q/lWlCRwRSurb8m4ykafq3odU0 0TwbilyqzzlgS2DEldqrcTG0gM6mmClEqS6ba2L9VVQrRs8Bcbj9z3wHagBijY59ZvsPiVPv iGtRX1p2RPBmBQ+JzwHWzdjM2IVMGy/D2KMnpXwdOJGmE3Voj1UlGzpOjZYA83Tyzuz0eq4s 2jq9e/6dzT//btjh3Qd1arAgnwA/oXR4tmjTSvxivP4kiJtR20ky1KVqEGPVkgfJAGcOoQ== Organization: =?UTF-8?Q?Technische_Universit=c3=a4t_M=c3=bcnchen_-_WWW_und_O?= =?UTF-8?Q?nline_Services?= Message-ID: Date: Thu, 9 Aug 2018 07:30:44 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 05:30:49 -0000 Hi, is there realy no version of FreeBSD with support longer than 3 Month right now. I'm running FreeBSD on quite a lot servers. I don't want to go through updating every x Month. So in the past I stick with the Extended Support Releases. But support for 10.3 ended 2 Month ago. 10.4 support will end in 3 Month. No Extended Support release for FreeBSD 11 has been announced yet. FreeBSD 11.1 support will end in 2 Month. Will 11.2 be an extended support Release or maybe 11.1 This i not a good situation to sell FreeBSD as a professional alternative to Linux or Windows to my bosses. Regards Estartu From owner-freebsd-questions@freebsd.org Thu Aug 9 06:50:13 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4C140105746A for ; Thu, 9 Aug 2018 06:50:13 +0000 (UTC) (envelope-from srs0=vvkw=ky=mail.sermon-archive.info=doug@sermon-archive.info) Received: from mail.sermon-archive.info (sermon-archive.info [71.177.216.148]) by mx1.freebsd.org (Postfix) with ESMTP id DC16383097 for ; Thu, 9 Aug 2018 06:50:12 +0000 (UTC) (envelope-from srs0=vvkw=ky=mail.sermon-archive.info=doug@sermon-archive.info) Received: from [10.0.1.251] (mini [10.0.1.251]) by mail.sermon-archive.info (Postfix) with ESMTPSA id 41mJlw43f4z2fjQT; Wed, 8 Aug 2018 23:50:04 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Subject: Re: No Extended Support Version right now? From: Doug Hardie In-Reply-To: Date: Wed, 8 Aug 2018 23:50:04 -0700 Cc: freebsd-questions@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <8F86D7B0-6E3A-40EE-A8B3-E5209AB579A5@mail.sermon-archive.info> References: To: Gerhard Schmidt X-Mailer: Apple Mail (2.3445.9.1) X-Virus-Scanned: clamav-milter 0.100.1 at mail X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 06:50:13 -0000 > On 8 August 2018, at 22:30, Gerhard Schmidt wrote: >=20 > Hi, >=20 > is there realy no version of FreeBSD with support longer than 3 Month > right now. >=20 > I'm running FreeBSD on quite a lot servers. I don't want to go through > updating every x Month. So in the past I stick with the Extended = Support > Releases. But support for 10.3 ended 2 Month ago. 10.4 support will = end > in 3 Month. >=20 > No Extended Support release for FreeBSD 11 has been announced yet. > FreeBSD 11.1 support will end in 2 Month. >=20 > Will 11.2 be an extended support Release or maybe 11.1 >=20 > This i not a good situation to sell FreeBSD as a professional > alternative to Linux or Windows to my bosses. >=20 from https://www.freebsd.org/security/security.html#sup The FreeBSD support model Effective FreeBSD 11.0-RELEASE, the support model has been changed to = allow more rapid development while also providing timely security = updates for all supported releases. Under the new support model, each major version's stable branch is = explicitly supported for 5 years, while each individual point release is = only supported for three months after the next point release. The details and rationale behind this change can be found in the = official announcement sent in February 2015. From owner-freebsd-questions@freebsd.org Thu Aug 9 07:29:49 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B8F4610598F9 for ; Thu, 9 Aug 2018 07:29:49 +0000 (UTC) (envelope-from estartu@ze.tum.de) Received: from mail.ze.tum.de (mail.ze.tum.de [IPv6:2001:4ca0:2e03::1:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.ze.tum.de", Issuer "Zertifizierungsstelle der TUM" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3E6A9843F0 for ; Thu, 9 Aug 2018 07:29:49 +0000 (UTC) (envelope-from estartu@ze.tum.de) Received: from etustar.ze.tum.de (etustar.ze.tum.de [129.187.39.200]) by mail.ze.tum.de (8.15.2/8.15.2) with ESMTPS id w797TlZ2031847 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 9 Aug 2018 09:29:48 +0200 (CEST) (envelope-from estartu@ze.tum.de) Subject: Re: No Extended Support Version right now? To: Doug Hardie Cc: freebsd-questions@freebsd.org References: <8F86D7B0-6E3A-40EE-A8B3-E5209AB579A5@mail.sermon-archive.info> From: Gerhard Schmidt Openpgp: preference=signencrypt Organization: =?UTF-8?Q?Technische_Universit=c3=a4t_M=c3=bcnchen_-_WWW_und_O?= =?UTF-8?Q?nline_Services?= Message-ID: <45977e25-80e4-9bb9-e36a-bb7d6e7e7dbb@ze.tum.de> Date: Thu, 9 Aug 2018 09:29:47 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <8F86D7B0-6E3A-40EE-A8B3-E5209AB579A5@mail.sermon-archive.info> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 07:29:49 -0000 Am 09.08.2018 um 08:50 schrieb Doug Hardie: > >> On 8 August 2018, at 22:30, Gerhard Schmidt wrote: >> >> Hi, >> >> is there realy no version of FreeBSD with support longer than 3 Month >> right now. >> >> I'm running FreeBSD on quite a lot servers. I don't want to go through >> updating every x Month. So in the past I stick with the Extended Support >> Releases. But support for 10.3 ended 2 Month ago. 10.4 support will end >> in 3 Month. >> >> No Extended Support release for FreeBSD 11 has been announced yet. >> FreeBSD 11.1 support will end in 2 Month. >> >> Will 11.2 be an extended support Release or maybe 11.1 >> >> This i not a good situation to sell FreeBSD as a professional >> alternative to Linux or Windows to my bosses. >> > > from https://www.freebsd.org/security/security.html#sup > > The FreeBSD support model > > Effective FreeBSD 11.0-RELEASE, the support model has been changed to allow more rapid development while also providing timely security updates for all supported releases. That's marketing bullshit and you know it. I like rapid developments but don't forget the people who run longtime legacy systems. > Under the new support model, each major version's stable branch is explicitly supported for 5 years, while each individual point release is only supported for three months after the next point release. So everyone has a window of 3 month starting with a date somebody else chooses to update all his systems or running out of support. Sorry that is nothing larger installation can do. I'm running 200+ FreeBSD servers. Updating each of them to the next Major release takes about 2h (really stupid things like FreeBSD id changes in config files are time consuming and annoying). More than 3-4 Servers a day is not possible so a major upgrade takes at least 50 workdays with is 2 1/2 Month. Minor updates are not really better. Not that much files but quite as annoying. It's nice to have 5 Years on a Major version but if i need to update every year that's not really a LTS. No wonder everyone is migrating to Linux and/or docker. Most Linux distributions have LTS Releases with 5 Years support with only security updates. Regards Estartu From owner-freebsd-questions@freebsd.org Thu Aug 9 07:48:30 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DD798105A4AE for ; Thu, 9 Aug 2018 07:48:30 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.netfence.it (net-2-44-121-52.cust.vodafonedsl.it [2.44.121.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mailserver.netfence.it", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4191584CB0 for ; Thu, 9 Aug 2018 07:48:29 +0000 (UTC) (envelope-from ml@netfence.it) Received: from alamar.ventu (alamar.local.netfence.it [10.1.2.18]) (authenticated bits=0) by soth.netfence.it (8.15.2/8.15.2) with ESMTPSA id w797mJnA032421 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Thu, 9 Aug 2018 09:48:26 +0200 (CEST) (envelope-from ml@netfence.it) X-Authentication-Warning: soth.netfence.it: Host alamar.local.netfence.it [10.1.2.18] claimed to be alamar.ventu Subject: Re: No Extended Support Version right now? To: estartu@ze.tum.de References: Cc: freebsd-questions@freebsd.org From: Andrea Venturoli Message-ID: Date: Thu, 9 Aug 2018 09:48:19 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 07:48:31 -0000 On 8/9/18 7:30 AM, Gerhard Schmidt wrote: > Hi, First off, I'm not speaking for FreeBSD officially; this is just my interpretation of the content of https://www.freebsd.org/security/. > is there realy no version of FreeBSD with support longer than 3 Month > right now. How do you came to that conclusion? 11.2 will be supported until three month later than the date 11.3 is released. So far 11.3 release has not been announced, so that's vague. However 12.0 is expected to come out in November; let's assume 11.3 comes out immediately after, that would mean 11.2 would be supported until February, so that's 6 month. This schedule is however very unlikely, so I guess it's safe to assume a much longer period. > No Extended Support release for FreeBSD 11 has been announced yet. > FreeBSD 11.1 support will end in 2 Month. > > Will 11.2 be an extended support Release or maybe 11.1 Unfortunately it seems "extended support" is gone, so no further release (11.x or whatever) will be such. > This i not a good situation to sell FreeBSD as a professional > alternative to Linux or Windows to my bosses. While I agree with you, there's been much discussion about this and I don't think repeating it over and over would be useful. bye av. From owner-freebsd-questions@freebsd.org Thu Aug 9 07:52:59 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 205FA105A91E for ; Thu, 9 Aug 2018 07:52:59 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.netfence.it (net-2-44-121-52.cust.vodafonedsl.it [2.44.121.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mailserver.netfence.it", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7B53A85085 for ; Thu, 9 Aug 2018 07:52:58 +0000 (UTC) (envelope-from ml@netfence.it) Received: from alamar.ventu (alamar.local.netfence.it [10.1.2.18]) (authenticated bits=0) by soth.netfence.it (8.15.2/8.15.2) with ESMTPSA id w797qnZt032996 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Thu, 9 Aug 2018 09:52:56 +0200 (CEST) (envelope-from ml@netfence.it) X-Authentication-Warning: soth.netfence.it: Host alamar.local.netfence.it [10.1.2.18] claimed to be alamar.ventu Subject: Re: No Extended Support Version right now? To: freebsd-questions@freebsd.org References: <8F86D7B0-6E3A-40EE-A8B3-E5209AB579A5@mail.sermon-archive.info> <45977e25-80e4-9bb9-e36a-bb7d6e7e7dbb@ze.tum.de> Cc: estartu@ze.tum.de From: Andrea Venturoli Message-ID: Date: Thu, 9 Aug 2018 09:52:49 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.0 MIME-Version: 1.0 In-Reply-To: <45977e25-80e4-9bb9-e36a-bb7d6e7e7dbb@ze.tum.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 07:52:59 -0000 On 8/9/18 9:29 AM, Gerhard Schmidt wrote: > Updating each of them to the next Major release takes about 2h (really > stupid things like FreeBSD id changes in config files are time consuming > and annoying). Are you talking about mergemaster? Are you aware of the -F and -U options (which have been somewhat recently added)? Notice: I'm not trying to convince you that upgrading so frequently is a good thing (as I said I agree with you); I'm just trying to ease the pain. bye av. From owner-freebsd-questions@freebsd.org Thu Aug 9 09:07:57 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E481B105D886 for ; Thu, 9 Aug 2018 09:07:56 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from mx18-out11.antispamcloud.com (mx18-out11.antispamcloud.com [207.244.64.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 73B1888CEA for ; Thu, 9 Aug 2018 09:07:56 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from [153.92.8.106] (helo=srv31.niagahoster.com) by mx62.antispamcloud.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1fngv5-00093x-ME; Thu, 09 Aug 2018 11:07:48 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sumeritec.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:References:In-Reply-To:Message-ID:Subject:Cc:To:From:Date:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=MIN/arZIaYdNz+C0658/A0DzA2Pm3FKnPx/6DVtc+4w=; b=kIC18bCWOxI3RI/+H6fIpvQQ86 gRqThBl7Pw+6heQ1BuNXyCjv9NQgDMngy0oJS2jlUqakzw1ts9v/BfXz97t6/XmA3JoFfKNKDyBcX KB7v8chRhOW8cUh8JBBEp0wnvJlWHfONIYFfjopwg/fADBqD9Zr2Gfo2F+Jx3k5+5EoSrECmGB+uq y6cQKeA+adkRcRO8lUmi9T3pbmJQkgq6Pk4V0oK2XpZd+pMnJKyazxVmRMd+v0We16MJBuTa71VpR Mre1q3hf44F7z2XMvGh1AfroTEg5rHow/GzL38evPq1tML50RExOJXs7gcG6MV3g3P13W7OY8YT59 aIuGNwpw==; Received: from [114.125.109.19] (port=39492 helo=X220.sumeritec.com) by srv31.niagahoster.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.91) (envelope-from ) id 1fnguD-00023b-7n; Thu, 09 Aug 2018 16:06:59 +0700 Date: Thu, 9 Aug 2018 17:06:51 +0800 From: Erich Dollansky To: Andrea Venturoli Cc: freebsd-questions@freebsd.org, estartu@ze.tum.de Subject: Re: No Extended Support Version right now? Message-ID: <20180809170651.515699ae.freebsd.ed.lists@sumeritec.com> In-Reply-To: References: <8F86D7B0-6E3A-40EE-A8B3-E5209AB579A5@mail.sermon-archive.info> <45977e25-80e4-9bb9-e36a-bb7d6e7e7dbb@ze.tum.de> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-OutGoing-Spam-Status: No, score=-1.0 X-AuthUser: freebsd.ed.lists@sumeritec.com X-Originating-IP: 153.92.8.106 X-AntiSpamCloud-Domain: out.niagahoster.com X-AntiSpamCloud-Username: niaga Authentication-Results: antispamcloud.com; auth=pass (login) smtp.auth=niaga@out.niagahoster.com X-AntiSpamCloud-Outgoing-Class: unsure X-AntiSpamCloud-Outgoing-Evidence: Combined (0.41) X-Recommended-Action: accept X-Filter-ID: EX5BVjFpneJeBchSMxfU5jcAUh0H7uwKrpXoybhVAxh602E9L7XzfQH6nu9C/Fh9KJzpNe6xgvOx q3u0UDjvOzT1htska1XLMHDUHwQCsIWc+oM7PKIIHvZocxcrlNitTq9l0Jsl51Hq5dP/jf8b0i0q H/RI+UppDmZcjEC5USia+dZCQZpapw/UCoUoF1vtIeebqmNzITIBQB6uQcT8T1Wvx4/5aan/L8AH YrKyAYPtLmXeKaxyHkYzGSbsk4sEK9tLbEmaBmPsQT3aIsBQFVV/a2W6v0kBTOTssGG04/WGbxeN FDWVOXj6Y6ruIh9sKNZe/k0K3IChzid4Dxyja3bwQEeqdiLXJYHgJzfhaOlEDBffVZVjmVaNbG4Z JG7FYTGAEpH4i5yCagzIeXQ1Z7wz2MpogAD7xcut2fULfiLavr9ZeziRMVMQY2DtQVwLwIKgmomx /w0lkMMz3v1CUeWBOXp8nHKe0R+FkIqN7hkzc8fJy+zvdR6g6rtfYMVqVgW9/bktU41htiJ8fk7N kFpKIxrnUNn8Kw10IXx0Njyu51a4mYCGb5aYUpZ7NJBexiGu5p/pZKWI4gyuH22OSIff17ZK94fM sXNf9icpky9aQsDp6lsFabMlQOQ85UacTHNbGMT+fsWoWlTp6js6n6IcLguvcfUihK+TuN0i4DbS mRXGb6RFefKpXK8LKM6rAkGNE+v/U721xE1IxeehanXgzQDMsAHDJQ17r7XurbPB/V9W1A7VEpcZ 1u3br3YDcEEbixJTgg9pT91WTkvMKFz1pRXWhjh9fdbl44I0Df3jtCQz+WhFmzZnZA9g/PLaNnXu MIAllvOzxgcIGHCzM97R945h66QDfUsb7b35RVA2AD9u+nF6eKoEMp0v7owZmFaIUt4991OA5J3E LURF5/5ZnKq6fmYD9S2+Y0MzftUOmnbQdjnvPHTYbpEBGcKIuUb+FATHOUWkw2bxin6QTsJwCTsI HmCarFKjfmeYeNHMPSA9n7O4Y7McSYkIYqEQ X-Report-Abuse-To: spam@quarantine1.antispamcloud.com X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 09:07:57 -0000 Hi, On Thu, 9 Aug 2018 09:52:49 +0200 Andrea Venturoli wrote: > On 8/9/18 9:29 AM, Gerhard Schmidt wrote: > > > Updating each of them to the next Major release takes about 2h > > (really stupid things like FreeBSD id changes in config files are > > time consuming and annoying). > > Are you talking about mergemaster? > Are you aware of the -F and -U options (which have been somewhat > recently added)? > > Notice: I'm not trying to convince you that upgrading so frequently > is a good thing (as I said I agree with you); I'm just trying to ease > the pain. > mergemaster? Isn't this for the ports only but the discussion started around FreeBSD versions? Erich From owner-freebsd-questions@freebsd.org Thu Aug 9 09:10:42 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7F7C3105D9F4 for ; Thu, 9 Aug 2018 09:10:42 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from out2-4.antispamcloud.com (out2-4.antispamcloud.com [185.201.17.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id EF57D88EAC for ; Thu, 9 Aug 2018 09:10:41 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from [153.92.8.106] (helo=srv31.niagahoster.com) by mx18.antispamcloud.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1fngxd-0007JZ-4C; Thu, 09 Aug 2018 11:10:31 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sumeritec.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:References:In-Reply-To:Message-ID:Subject:Cc:To:From:Date:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=kmDGZ2rhbJkAAP8qqts9Da5yfZeBYHXtiHuIILygOrw=; b=KM+JEOV24Yy8A6jPRr8KpiA3BN 9grKEinq48olZnhomBOk960Y/GiYRU/W7VDu0n+RKdix17tOYDSY/+rUF3mJC1BLWZQ0hU54LA7WO 99r0dhoEOyVAwEAS9Um4BJu9afoe+TSjS1LG65+W0+sKZCdMJGrv5naJv/au9pdclw0NeqdiRCE/R 67Ho4c2mu4TptztTRewHSyuwNygE9Bc+jorB24jz2tKUrK9XKTT/QIbZILJHBZQW02zezHZGhx1CE eg9uKGGV6v975rt2N+sgbK/uz8Y71x4nD2n3Ll9d1/QyS8WLK7yMUCW66ZkU0Es44i7kxQjmzXgR9 88W3u/8A==; Received: from [114.125.109.19] (port=48938 helo=X220.sumeritec.com) by srv31.niagahoster.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.91) (envelope-from ) id 1fngwk-0006fl-EE; Thu, 09 Aug 2018 16:09:34 +0700 Date: Thu, 9 Aug 2018 17:09:27 +0800 From: Erich Dollansky To: Andrea Venturoli Cc: freebsd-questions@freebsd.org, estartu@ze.tum.de Subject: Re: No Extended Support Version right now? Message-ID: <20180809170927.24554931.freebsd.ed.lists@sumeritec.com> In-Reply-To: References: <8F86D7B0-6E3A-40EE-A8B3-E5209AB579A5@mail.sermon-archive.info> <45977e25-80e4-9bb9-e36a-bb7d6e7e7dbb@ze.tum.de> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-OutGoing-Spam-Status: No, score=-1.0 X-AuthUser: freebsd.ed.lists@sumeritec.com X-Originating-IP: 153.92.8.106 X-AntiSpamCloud-Domain: out.niagahoster.com X-AntiSpamCloud-Username: niaga Authentication-Results: antispamcloud.com; auth=pass (login) smtp.auth=niaga@out.niagahoster.com X-AntiSpamCloud-Outgoing-Class: unsure X-AntiSpamCloud-Outgoing-Evidence: Combined (0.54) X-Recommended-Action: accept X-Filter-ID: EX5BVjFpneJeBchSMxfU5sKC4H+7N6Zu7kX/pWew2px602E9L7XzfQH6nu9C/Fh9KJzpNe6xgvOx q3u0UDjvO5aNQlwfH3hFdbqL4EFCcDDlGZflZ13PbuB5BzC23dkUCVn3AWVzV+2oOaIhGhqHdKxD UMSiYEwwg7JB9b66pdaprpGe/mVniGu/CLVPBpfM4pWx7WxWFZpsjT/483ewgu5JfusABNhIyJPP 5Nt4ch8im2W8FM0CYezVyrGHJVZmFHMPEyA05gafMZGwGiJNAwgts4D9rHMwYttlWJ53KUNFN1Mi Jvo7144GK03YqHgHibeRcXFPc8cqkLwvhK2OeezUrQIHG+qb7m6rsUJYqrkBWDoGJ+0yh69KXxwj Ya+s1lKjr5bPbebPOmRT2bIcf8x7BZzVdsrUJ1TjYZWWhhRIvwk+SzBXVEwrOfaE35eVP3PPkAMO qDnlk3PJ0+RlnD3dKxLhoxcmaInYbR5vlqHVuAvhr5K1q2gYP7Ih8AmzTAas0edmB2q/yBRqnQY9 Wn0gkfr9gZNk8zP+i4B7/fwZ8mt1cw3xO4d92gv79zMNfJSBBCR2DZDiEWpSuwB+0+idX4Ts4xdG +C13IyWeZaKQbQlRnWB2MLWjomD7HvE/ojmX5u6QQ8A3tr7Vu+yOdzN0bSRT1k5G2hFa0cFPVtPV EOSluRuLNfsptaOx3KS5w8R7gzpD8RVzGPbBbjse8REVniihuDwEGDcmr6e3OPQamfIaV9iZxMet Odr1ksZ4LgGiniNnfZ/9+lL633su2XfAlCiZNGXc89tW+HIGOkHMQVQxNzuCe7oCzbqDAuy6kC60 Pll3Rp6No9F02OQBU8pz01J8ygQ5/Ih9YWo2D+ec0TwPIBJnngHP89wHBJTrUR5P22vfHRUlzBGr PpFcJc8b3TdJXiMWjSI7O3Gz2XWZ3JKVmi72ocgY5kMQSjs7XKBCcuSSP1pxFExLxCRrSvoi5gf8 MRzbGeW+PX/PpGl5+4x+hbGIaKoDk7dEfv2S X-Report-Abuse-To: spam@quarantine1.antispamcloud.com X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 09:10:42 -0000 Hi, On Thu, 9 Aug 2018 09:52:49 +0200 Andrea Venturoli wrote: > On 8/9/18 9:29 AM, Gerhard Schmidt wrote: > > > Updating each of them to the next Major release takes about 2h > > (really stupid things like FreeBSD id changes in config files are > > time consuming and annoying). > > Are you talking about mergemaster? > Are you aware of the -F and -U options (which have been somewhat > recently added)? > > Notice: I'm not trying to convince you that upgrading so frequently > is a good thing (as I said I agree with you); I'm just trying to ease > the pain. > I was too fast with my former e-mail. Of course, mergemaster is for FreeBSD itself. It is less a problem of mergemaster as of having to touch a running system in a serious way. We have also the problem having to maintain a number of machines and decided to create our in-house solution. Yeah, it can leave the house after it works but it must work first. Erich From owner-freebsd-questions@freebsd.org Thu Aug 9 10:01:44 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 17F6F105F3AE for ; Thu, 9 Aug 2018 10:01:44 +0000 (UTC) (envelope-from mail@osfux.nl) Received: from vm1982.osfux.nl (vm1982.osfux.nl [79.99.187.212]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A35708AB84 for ; Thu, 9 Aug 2018 10:01:43 +0000 (UTC) (envelope-from mail@osfux.nl) Received: from vm1982.osfux.nl (localhost [127.0.0.1]) by vm1982.osfux.nl (Postfix) with ESMTP id D06C3201F8 for ; Thu, 9 Aug 2018 12:01:41 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=osfux.nl; s=default; t=1533808902; bh=G5k5S/bPKL2M6MVGKRSV7UveOIBFUpk1I8wImF2+W0Q=; h=Subject:From:To:References:Date:In-Reply-To; b=IAdgR9LOeuzYRQLk7VqK/41vNT2jjo//ki+UtYS9cCq5sBCD4OMUSsKKLaxms6mbJ npN6c0jjHARGyTy/gtY6/AqL8k7tFHNbW/chBj/rtJOk89e69BojvDoEdz4QuhTxs9 SfuBcvBFDdEmCVbEPEGWkYH2xoed+LGCycjz7jPJZqAbrXqp3SygSuPyI83pdt1uek S7xxzdVQbZSH6ETDOBHHzKB6vc8z8/W5n5Zbq3ygy/5rf0sIyA6wGnBoRrMTC2O2lL RHtSDBcwFd2wNcjo00unl/tsgGhTIzuQrX68v2FjuHmzzbXC9jZiPohiCp+RlqNru7 AH5JFS6ojKOp1mvbNQPCS4bZcX5PNH55XkMSENzaVMRbUbms6R5irBMmssJOxY5kzC 3AQ75goQePYBtjIL0XDUARhmg3eU8EE5S/m6HEzJfjXJ+/iOaJhgIkJgi9GL6ruy43 9lKQNOOg/7Yx/GuFPUFwAFnwdNE4T2ICHT9W161Nw/PBzXurtMd9sXO+gjyPsagtHe A+l6Heen26f3yWawJSSd3lZtAgiR/uy031v+uCVIFCUm91fXYCs+YRtcTtHfltlFwO Y1KiBF9P0WDbU2MCKBF9uVJ12UzZmlIk4Y+vZhU8wz3Xh/G1OwzqlxD+84gPwsVxs0 S/Li7mIIUcktYsr24HQNX9RE= Received: from vm1982.osfux.nl (localhost [127.0.0.1]) by vm1982.osfux.nl (Postfix) with ESMTP id 481962014F for ; Thu, 9 Aug 2018 12:01:39 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=osfux.nl; s=default; t=1533808901; bh=G5k5S/bPKL2M6MVGKRSV7UveOIBFUpk1I8wImF2+W0Q=; h=Subject:From:To:References:Date:In-Reply-To; b=WpgIgTiv9HE417qMXZhJG8tJPJPX5sXXRRmp89l9hIP6jZGLU5KNxqp9LzRinxOwO uRxkiAyz4dNegDig4+WvuE6yMCEWAtorO5bIsxjceYza3ySvWe4aCxuwOwTghzOkr/ /3oeD10lnLUx1PtdpTsuJUvooiSr+oe8qzBEnhqbkX2Bsh9U3tZCsKbblEezeGSjxT DiG5CLECUS0ZXJIn5fFSYuVRlzzQAY+Wym1HGNToKoZAstFmVFnxfVYIfi5s5dap1j Z3ZwaChLPLFoVu9Sqw+KUA5UnaQnLxDvXTIhi4gDE+mFeSWauarnf7mYeADpqhyCmA M5WQvHKE1Qd/HurRQjBBAMYfE7AYRA9Zlnm4wMCnYgEVfL84yZQ3XcwLqW8X10pzW/ COHEANxvXY9uVZ1I5dmuYP1tPaO3szIMko7GO9TWv768ATydxEbC593xMrD4EK9RYX kncVIblQnTQAM2UXANm3XJPq6ifgBG3OcV+Ish7dSHXjemtwaEhuh6jtsagC8B9bZD zLFcrRuqrUvCwLe550omOWpoThiKnn0kN1sQ4BHZSP2MMRw6mnlS8klVx40NxjGliT DRjhkTiyLkd11PGJupmZZYHdtNgkMuNlsGVVzuu9EWuPGvqVaaGi82HIaujivBmg9V ArzTE83l4r1zjMKYUOiPtpNk= X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on vm1982.osfux.nl X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED shortcircuit=no autolearn=ham autolearn_force=no version=3.4.1 Received: from [172.28.10.134] (engineering.quanza.net [91.208.87.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by vm1982.osfux.nl (Postfix) with ESMTPSA for ; Thu, 9 Aug 2018 12:01:39 +0200 (CEST) Subject: Re: newsyslogd / pflogd : daily logfiles for pf From: Ruben To: freebsd-questions@freebsd.org References: <58b3ce35-9426-6f00-885f-2dc7fa677ba5@osfux.nl> Message-ID: Date: Thu, 9 Aug 2018 12:01:38 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <58b3ce35-9426-6f00-885f-2dc7fa677ba5@osfux.nl> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Virus-Scanned: ClamAV using ClamSMTP X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 10:01:44 -0000 Hi, Somebody contacted me off-list and provided a lot of knowledge / efforts troubleshooting this issue: TnX! The problem eventually turned out to be (totally) unrelated to both newsylog and pflogd, and the issue has been "solved". Kind regards, Ruben On 08/01/2018 12:34 PM, Ruben wrote: > Hi, > > Anybody out there with a working rotation on /var/log/pflog (using > newsyslog) ? > > All help/suggestions welcome! > > Kind regards, > > Ruben > > On 07/30/2018 05:12 PM, Ruben wrote: >> >> Hi List, >> >> >> I'm running PF on some FreeBSD 11.x installs and I would very much >> like to have daily logfiles containing the entries that land up in the >> pflog device. I'm having trouble switching from "max size" rotation to >> "once a day, regardless of size" rotation. >> >> >> >> My pflog entry in /etc/newsyslog.conf looked like this: >> >> /var/log/pflog      600  3    100    @T00 JB    /var/run/pflogd.pid >> >> >> and after my attempted change now looks like this: >> >> /var/log/pflog      600  30    *    @T00 JB    /var/run/pflogd.pid >> >> >> but no new /var/log/pflog.0.bz2 files are created anymore. If I run >> the newsyslog binary manually like this : >> >> /usr/sbin/newsyslog -vCF >> >> then the /var/log/pflog.* are created / rotated. >> >> >> Could somebody perhaps shed some light on what I'm doing wrong here? >> >> >> Any help appreciated! >> >> >> Kind regards, >> >> >> Ruben >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to >> "freebsd-questions-unsubscribe@freebsd.org" > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" From owner-freebsd-questions@freebsd.org Thu Aug 9 10:10:38 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AA9E5105F747 for ; Thu, 9 Aug 2018 10:10:38 +0000 (UTC) (envelope-from julien@perdition.city) Received: from relay-b02.edpnet.be (relay-b02.edpnet.be [212.71.1.222]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "edpnet.email", Issuer "Go Daddy Secure Certificate Authority - G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3F18A8AE9E for ; Thu, 9 Aug 2018 10:10:37 +0000 (UTC) (envelope-from julien@perdition.city) X-ASG-Debug-ID: 1533809426-0a7b8d4a1422aabd0001-jLrpzn Received: from mordor.lan (77.109.126.17.adsl.dyn.edpnet.net [77.109.126.17]) by relay-b02.edpnet.be with ESMTP id EKaLAFQ7UbGja0jj (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 09 Aug 2018 12:10:27 +0200 (CEST) X-Barracuda-Envelope-From: julien@perdition.city X-Barracuda-Effective-Source-IP: 77.109.126.17.adsl.dyn.edpnet.net[77.109.126.17] X-Barracuda-Apparent-Source-IP: 77.109.126.17 Date: Thu, 9 Aug 2018 12:10:26 +0200 From: Julien Cigar To: Gerhard Schmidt Cc: Doug Hardie , freebsd-questions@freebsd.org Subject: Re: No Extended Support Version right now? Message-ID: <20180809101026.GK62853@mordor.lan> X-ASG-Orig-Subj: Re: No Extended Support Version right now? References: <8F86D7B0-6E3A-40EE-A8B3-E5209AB579A5@mail.sermon-archive.info> <45977e25-80e4-9bb9-e36a-bb7d6e7e7dbb@ze.tum.de> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="IJAclU0AInkryoed" Content-Disposition: inline In-Reply-To: <45977e25-80e4-9bb9-e36a-bb7d6e7e7dbb@ze.tum.de> User-Agent: Mutt/1.9.2 (2017-12-15) X-Barracuda-Connect: 77.109.126.17.adsl.dyn.edpnet.net[77.109.126.17] X-Barracuda-Start-Time: 1533809426 X-Barracuda-Encrypted: ECDHE-RSA-AES256-GCM-SHA384 X-Barracuda-URL: https://212.71.1.222:443/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at edpnet.be X-Barracuda-Scan-Msg-Size: 3351 X-Barracuda-BRTS-Status: 1 X-Barracuda-Bayes: INNOCENT GLOBAL 0.5000 1.0000 0.7500 X-Barracuda-Spam-Score: 0.75 X-Barracuda-Spam-Status: No, SCORE=0.75 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=7.0 tests= X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.55356 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 10:10:39 -0000 --IJAclU0AInkryoed Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Aug 09, 2018 at 09:29:47AM +0200, Gerhard Schmidt wrote: > Am 09.08.2018 um 08:50 schrieb Doug Hardie: > >=20 > >> On 8 August 2018, at 22:30, Gerhard Schmidt wrote: > >> > >> Hi, > >> > >> is there realy no version of FreeBSD with support longer than 3 Month > >> right now. > >> > >> I'm running FreeBSD on quite a lot servers. I don't want to go through > >> updating every x Month. So in the past I stick with the Extended Suppo= rt > >> Releases. But support for 10.3 ended 2 Month ago. 10.4 support will end > >> in 3 Month. > >> > >> No Extended Support release for FreeBSD 11 has been announced yet. > >> FreeBSD 11.1 support will end in 2 Month. > >> > >> Will 11.2 be an extended support Release or maybe 11.1 > >> > >> This i not a good situation to sell FreeBSD as a professional > >> alternative to Linux or Windows to my bosses. > >> > >=20 > > from https://www.freebsd.org/security/security.html#sup > >=20 > > The FreeBSD support model > >=20 > > Effective FreeBSD 11.0-RELEASE, the support model has been changed to a= llow more rapid development while also providing timely security updates fo= r all supported releases. >=20 > That's marketing bullshit and you know it. I like rapid developments but > don't forget the people who run longtime legacy systems. >=20 > > Under the new support model, each major version's stable branch is expl= icitly supported for 5 years, while each individual point release is only s= upported for three months after the next point release. >=20 > So everyone has a window of 3 month starting with a date somebody else > chooses to update all his systems or running out of support. Sorry that > is nothing larger installation can do. I'm running 200+ FreeBSD servers. > Updating each of them to the next Major release takes about 2h (really > stupid things like FreeBSD id changes in config files are time consuming > and annoying). More than 3-4 Servers a day is not possible so a major > upgrade takes at least 50 workdays with is 2 1/2 Month. Minor updates > are not really better. Not that much files but quite as annoying. +1.. We have 15 servers here at work and I have to admit that I haven't found a reliable way (yet ?) to upgrade them easily at once. For the jails (we have ~50 in total), it's just a matter of rm -rf /usr/jails on each host and recreating them with Saltstack afterwards (it takes some time but it's super easy), but for the hosts I'm still upgrading them one by one ... and I'm not really happy with that. >=20 > It's nice to have 5 Years on a Major version but if i need to update > every year that's not really a LTS. >=20 > No wonder everyone is migrating to Linux and/or docker. Most Linux > distributions have LTS Releases with 5 Years support with only security > updates. >=20 > Regards > Estartu > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" --=20 Julien Cigar Belgian Biodiversity Platform (http://www.biodiversity.be) PGP fingerprint: EEF9 F697 4B68 D275 7B11 6A25 B2BB 3710 A204 23C0 No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. --IJAclU0AInkryoed Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE7vn2l0to0nV7EWolsrs3EKIEI8AFAltsEw8ACgkQsrs3EKIE I8DjQQ/+Pl7jlebXLZ+uKcECVFYeEU76SVOt1fgnNikjTaFKlyp6yaybTuvggiC2 2KvoLNISrpoJd6cZJ7IHyPAn+9EOezU/3Lp51I107fbiO5+dxzN8eK84OaPsLhEc s9oVISlNAhCC7uDTqdXG56VtW2g16RsuPQ/NXoJ+0whLgvCIVNWNkG1DArltL1Dk r5sMCS0hRKUhbB9sXHoeP2dXckmpYTrIENjN49H/Slj2/ITDvNHaFABpcK6lXZ8v LimV3rwxQT5dK3s3Qv3/I98UdVyx3lOHRQP0twH7c2yQzPmdpEo6OT3xpnOodZci n4OlTzBzzgPZZiZHHPW25tH+ubOm8cWyYwamqyXlnAyikxODO2IBPlGLJpArVC6v uoy9vBuc05ZJNxhQ6PbT4VCeMcKKQoKliK9W+Ccy3JTOyk/kYCwn/a/slcD4Ddxk Gb5Jhv8RRPgHjunisdq43w5qOO8mIY3oWvhLMLhDoLYnVKHzI1WhlxJDFG4zDHCn +YIxdKIECJ4iBiHuospC86HaGUegr0qMZLJ2/GgUg4wOGAiSfpW/F6F4Pta59OfQ 2j7v4ZEyGXMB/7jbygfM44f6q3k7tYjpuTtJZSJrG9nesabfH4UneHUxTP11l9eJ ZLVCUgtmhwo7IwBXjS/2/Sv0pnShNr9ISu+uO9Kg/dwRgEj+2C4= =dZqS -----END PGP SIGNATURE----- --IJAclU0AInkryoed-- From owner-freebsd-questions@freebsd.org Thu Aug 9 10:33:08 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2280910602CA for ; Thu, 9 Aug 2018 10:33:08 +0000 (UTC) (envelope-from estartu@ze.tum.de) Received: from mail.ze.tum.de (mail.ze.tum.de [IPv6:2001:4ca0:2e03::1:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.ze.tum.de", Issuer "Zertifizierungsstelle der TUM" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9A38C8BC6E for ; Thu, 9 Aug 2018 10:33:07 +0000 (UTC) (envelope-from estartu@ze.tum.de) Received: from etustar.ze.tum.de (etustar.ze.tum.de [129.187.39.200]) by mail.ze.tum.de (8.15.2/8.15.2) with ESMTPS id w79AX4Ks043235 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 9 Aug 2018 12:33:04 +0200 (CEST) (envelope-from estartu@ze.tum.de) Subject: Re: No Extended Support Version right now? To: Andrea Venturoli , freebsd-questions@freebsd.org References: <8F86D7B0-6E3A-40EE-A8B3-E5209AB579A5@mail.sermon-archive.info> <45977e25-80e4-9bb9-e36a-bb7d6e7e7dbb@ze.tum.de> From: Gerhard Schmidt Openpgp: preference=signencrypt Organization: =?UTF-8?Q?Technische_Universit=c3=a4t_M=c3=bcnchen_-_WWW_und_O?= =?UTF-8?Q?nline_Services?= Message-ID: Date: Thu, 9 Aug 2018 12:33:04 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 10:33:08 -0000 Am 09.08.2018 um 09:52 schrieb Andrea Venturoli: > On 8/9/18 9:29 AM, Gerhard Schmidt wrote: > >> Updating each of them to the next Major release takes about 2h (really >> stupid things like FreeBSD id changes in config files are time consuming >> and annoying). > > Are you talking about mergemaster? > Are you aware of the -F and -U options (which have been somewhat > recently added)? > > Notice: I'm not trying to convince you that upgrading so frequently is a > good thing (as I said I agree with you); I'm just trying to ease the pain. No I'm Talking about freebsd-update upgrade that does the same shit for every file I touched. The more you customize the more files you get. Regards Estartu From owner-freebsd-questions@freebsd.org Thu Aug 9 11:41:41 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5F82010625E8 for ; Thu, 9 Aug 2018 11:41:41 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 04D868E403 for ; Thu, 9 Aug 2018 11:41:40 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1533814901; x=1536406901; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:to:from:date:x-thread-info; bh=6afL0tMC3acHLsgmc90p0dU2W5L5qinA+tgFS3X+W2c=; b=mFjTgdZaHaop7doiIN5jucSlkwMRUJv/Zgsj1FpwTThkAVRDW+l94Snruw60wF/Tin3atUkjy9Khyjh5+dmed2CeFh2376zdyRRUpZ12+o7PTAOB6EFKaPYaXioeGhIXEvxkEgJW20776oxNWW6X9uNlfajWfHu02clqEWJ7b2w= X-Thread-Info: NDI1MC4xMi4xOTUwMDAwMDE4MDUxNzEuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r5.us-east.aws.in.socketlabs.com (r5.us-east.aws.in.socketlabs.com [52.204.195.176]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Thu, 9 Aug 2018 07:41:31 -0400 Received: from smtp.lan.sohara.org (EMTPY [89.127.62.20]) by r5.us-east.aws.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Thu, 9 Aug 2018 07:41:30 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.91 (FreeBSD)) (envelope-from ) id 1fnjJp-0009D0-Ui for freebsd-questions@freebsd.org; Thu, 09 Aug 2018 11:41:30 +0000 Date: Thu, 9 Aug 2018 12:41:30 +0100 From: Steve O'Hara-Smith To: freebsd-questions@freebsd.org Subject: Re: No Extended Support Version right now? Message-Id: <20180809124130.f0137d22f0634f289f0cf4c3@sohara.org> In-Reply-To: References: X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd11.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 11:41:41 -0000 On Thu, 9 Aug 2018 09:48:19 +0200 Andrea Venturoli wrote: > Unfortunately it seems "extended support" is gone, so no further release > (11.x or whatever) will be such. Given that 11 will last five years and it is likely that 11. will come out well within that period I would say than N. is as LTS as it gets. -- Steve O'Hara-Smith From owner-freebsd-questions@freebsd.org Thu Aug 9 12:47:04 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5EE0E1065226 for ; Thu, 9 Aug 2018 12:47:04 +0000 (UTC) (envelope-from robert@webtent.org) Received: from mx2.webtent.net (mx2.webtent.net [216.139.202.4]) by mx1.freebsd.org (Postfix) with ESMTP id 09D177179E for ; Thu, 9 Aug 2018 12:47:03 +0000 (UTC) (envelope-from robert@webtent.org) Received: from localhost (localhost [127.0.0.1]) by mx2.webtent.net (WebTent ESMTP Postfix Internet Mail Exchange) with ESMTP id 8AB1AD803E for ; Thu, 9 Aug 2018 08:46:55 -0400 (EDT) Received: from mx2.webtent.net ([127.0.0.1]) by localhost (mx2.webtent.net [127.0.0.1]) (maiad, port 10024) with ESMTP id 01077-03 for ; Thu, 9 Aug 2018 08:46:55 -0400 (EDT) Received: from [192.168.1.113] (media.rfitz.com [96.254.71.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: robert@mx2.webtent.net) by mx2.webtent.net (WebTent ESMTP Postfix Internet Mail Exchange) with ESMTPSA id 1C016D8050 for ; Thu, 9 Aug 2018 08:46:55 -0400 (EDT) Message-ID: <5B6C37BF.3060701@webtent.org> Date: Thu, 09 Aug 2018 08:46:55 -0400 From: Robert Fitzpatrick User-Agent: Postbox 5.0.25 (Windows/20180328) MIME-Version: 1.0 To: FreeBSD Subject: Userland and kernel mismatch Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: WebTent Mailguard 1.0.3 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 12:47:04 -0000 I'm not sure how I messed up one server of mine, but hope someone can suggest how it can be fixed. When I try to run pkg, I get this error: root@mx2:~ # pkg update /lib/libc.so.7: version FBSD_1.4 required by /usr/local/lib/libpkg.so.4 not found It seems my userland is out of sync with the kernel: root@mx2:~ # freebsd-version -uk 10.4-RELEASE-p10 10.4-RELEASE-p10 root@mx2:~ # freebsd-update fetch root@mx2:~ # uname -U 1000510 root@mx2:~ # uname -K 1004000 I've found posts suggesting how to correct the reverse of an older kernel, but how could I fix this issue? -- Robert From owner-freebsd-questions@freebsd.org Thu Aug 9 13:18:39 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 62B2E1065DEF for ; Thu, 9 Aug 2018 13:18:39 +0000 (UTC) (envelope-from freebsd-en@lists.vlassakakis.de) Received: from dd14614.kasserver.com (dd14614.kasserver.com [85.13.136.14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id E28817288A for ; Thu, 9 Aug 2018 13:18:38 +0000 (UTC) (envelope-from freebsd-en@lists.vlassakakis.de) Received: from [10.254.163.152] (pd95ba13a.dip0.t-ipconnect.de [217.91.161.58]) by dd14614.kasserver.com (Postfix) with ESMTPSA id 38AF343C03D5; Thu, 9 Aug 2018 15:18:31 +0200 (CEST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) Subject: Re: Userland and kernel mismatch From: Philipp Vlassakakis X-Mailer: iPhone Mail (15G77) In-Reply-To: <5B6C37BF.3060701@webtent.org> Date: Thu, 9 Aug 2018 15:18:29 +0200 Cc: robert@webtent.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <5B6C37BF.3060701@webtent.org> To: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 13:18:39 -0000 Hi, run pkg-static instead. Maybe this helps. Regards Philipp > On 9. Aug 2018, at 14:46, Robert Fitzpatrick via freebsd-questions wrote: >=20 > I'm not sure how I messed up one server of mine, but hope someone can sugg= est how it can be fixed. When I try to run pkg, I get this error: >=20 > root@mx2:~ # pkg update > /lib/libc.so.7: version FBSD_1.4 required by /usr/local/lib/libpkg.so.4 no= t found >=20 > It seems my userland is out of sync with the kernel: >=20 > root@mx2:~ # freebsd-version -uk > 10.4-RELEASE-p10 > 10.4-RELEASE-p10 > root@mx2:~ # freebsd-update fetch > root@mx2:~ # uname -U > 1000510 > root@mx2:~ # uname -K > 1004000 >=20 > I've found posts suggesting how to correct the reverse of an older kernel,= but how could I fix this issue? >=20 > --=20 > Robert >=20 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.or= g" From owner-freebsd-questions@freebsd.org Thu Aug 9 14:12:11 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9764F1067953 for ; Thu, 9 Aug 2018 14:12:11 +0000 (UTC) (envelope-from kayasaman@gmail.com) Received: from mail-wm0-x230.google.com (mail-wm0-x230.google.com [IPv6:2a00:1450:400c:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 129C074835 for ; Thu, 9 Aug 2018 14:12:11 +0000 (UTC) (envelope-from kayasaman@gmail.com) Received: by mail-wm0-x230.google.com with SMTP id o11-v6so354924wmh.2 for ; Thu, 09 Aug 2018 07:12:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:cc:from:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding:content-language; bh=JV3FJMEYWIdicJ7XUjE84RZXE6swn4/VcpujET3FU8o=; b=VJAykU7ypQjgNdym/64UTjKQRaVy6/1WjaKuDGHBffjmsHp/caPdIDcj3t74eNmDRZ PEu1xz1OA8vRvM/9P+Vtth7h1uc5d3ZtRkB5QrUhejPkVOKLx2yo55y6UGKyhGtLMO4v oomHHvSIMJLFJuFlvYyLsNPjc79anp0wb8r1+0iTmdLp/Zr9GUpZTLGafvjw6nrU9wQK V4W7p1cvdM3jp1KcfceSVBXtUrOm307O7/jZZFh9kWdPuS628r+0XgIYhC0oMsOAQKu9 m08SDDFiLMACLVpGBbi/LsHFJJvVytOQCmbWyS+zhQqYQL136YREUVlG05QSY07vPVmW WRrQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:cc:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=JV3FJMEYWIdicJ7XUjE84RZXE6swn4/VcpujET3FU8o=; b=lXtFSOzsJXMNxWlkc34T21uBqV07QSKEqhiz5I+xc3KfOD6An7D72inxLC5nl/b18U CwK/NSDfVDsbYX0S3VaYdJHTFrgGO5eev5/FNJFYlYdJsqBQ4R9/k3OUYE3e7JTHmPZr dYj65XTS0/ITWQEnbghrPBR+teUqUIB0kZTAyUyoXKJoxwd2AllLPG2SaV2j+uEZAxuB ZvtJiATSxG3D0YF82JySSCD9DVtTp0WYPm1RyDWT96ldsbAOwP9sqgKclUlo2My3mbaJ cps6VGppWziFAt+3seLvTCNQsQrIHcg8/85tvF+lJ1+Z3a3aUerTJib4Nl0xuI6zq7zY dKlQ== X-Gm-Message-State: AOUpUlFkNjOuwubOpwbExYLapodZxMJ9020K1/sHaWdR3wHiLKtmogCh DtobWo4sPW6mr/BJCZNezz5q+zcX X-Google-Smtp-Source: AA+uWPwn1dubouyDCvFMdXmThleZEvj/nSARSNTFY3hVFPXNp4lROi3ENGOvJ/RHEDiQCU1DGpgw9Q== X-Received: by 2002:a1c:1dcd:: with SMTP id d196-v6mr1836060wmd.114.1533823929759; Thu, 09 Aug 2018 07:12:09 -0700 (PDT) Received: from Sting-Ray.optiplex-networks.com (optiplexnetworks.plus.com. [212.159.80.17]) by smtp.gmail.com with ESMTPSA id c13-v6sm5935901wrt.24.2018.08.09.07.12.08 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 09 Aug 2018 07:12:08 -0700 (PDT) Subject: Re: Userland and kernel mismatch To: freebsd-questions@freebsd.org References: <5B6C37BF.3060701@webtent.org> Cc: robert@webtent.org From: Kaya Saman Message-ID: <55690e33-1204-e359-da13-ee99357dada3@gmail.com> Date: Thu, 9 Aug 2018 15:12:08 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <5B6C37BF.3060701@webtent.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US-large X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 14:12:11 -0000 If the 'userland' is messed up, try this: https://www.freebsd.org/doc/handbook/makeworld.html 1. fetch sources for whatever version of FreeBSD you are using.... 10.4-Release? 2. build the same userland/kernel for it: # cd /usr/src # make buildworld # make buildkernel 3. install: # cd /usr/src # make installkernel # shutdown -r now # cd /usr/src # make installworld # shutdown -r now hopefully that should get you back in sync :-) Regards, Kaya On 08/09/18 13:46, Robert Fitzpatrick via freebsd-questions wrote: > I'm not sure how I messed up one server of mine, but hope someone can > suggest how it can be fixed. When I try to run pkg, I get this error: > > root@mx2:~ # pkg update > /lib/libc.so.7: version FBSD_1.4 required by > /usr/local/lib/libpkg.so.4 not found > > It seems my userland is out of sync with the kernel: > > root@mx2:~ # freebsd-version -uk > 10.4-RELEASE-p10 > 10.4-RELEASE-p10 > root@mx2:~ # freebsd-update fetch > root@mx2:~ # uname -U > 1000510 > root@mx2:~ # uname -K > 1004000 > > I've found posts suggesting how to correct the reverse of an older > kernel, but how could I fix this issue? > From owner-freebsd-questions@freebsd.org Thu Aug 9 17:19:47 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8DAA0106D604 for ; Thu, 9 Aug 2018 17:19:47 +0000 (UTC) (envelope-from peter@improveurbusiness.in) Received: from mail-it0-x244.google.com (mail-it0-x244.google.com [IPv6:2607:f8b0:4001:c0b::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1359E7F137 for ; Thu, 9 Aug 2018 17:19:46 +0000 (UTC) (envelope-from peter@improveurbusiness.in) Received: by mail-it0-x244.google.com with SMTP id d16-v6so2325835itj.0 for ; Thu, 09 Aug 2018 10:19:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=improveurbusiness-in.20150623.gappssmtp.com; s=20150623; h=mime-version:sender:from:date:message-id:subject:to; bh=gn2bXsaR7KkUk1KH3nmYKD07iEAYWw4an0rVIM1r8TQ=; b=IueNwcfDZ4TY6wKTq0G9Lz3CBq/4nNPTFrC2o0b6HNzcRs34il14acIboNF2TQAvY0 q4yzFgS4mKJFjHJBv6OLnKPMBFpvl+VQH3V3oTgiLj7KDTGvIJ6lrTndlXIs6ubYxB3h cDOIS1Vq2/rJCEhLOaIe3aurOIQ3P1o71hczHcZz4AZ6u8WB/zO3gObhBbeh+il7pLXw xFMDITzibOfbxCO4+tOPbpvETIXMnPwRjZHnyhZ0kBM4w4Uj4h+UO1BFdGJGlHkM4s8F zlmROtQe+zHX2ISJtNT9TI55bqIuV6rB5q35g8p7vRkxWPKI2zh9eFBxXVMZI18FyIkz n9gA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:from:date:message-id:subject :to; bh=gn2bXsaR7KkUk1KH3nmYKD07iEAYWw4an0rVIM1r8TQ=; b=tKPdKNZHx9WtlX17Bx8BATYzgihZc4IvFuMB9BBrekmsAg8K1aKD3bGczBtQgEc04Q aPZLHl3jbAeOXWcGuNwxJd1rhp6Ax0Sx6bHEfAiXCjVGk8YD/kKk0BfPsbUcFp1P7TjS ozrfwmf+5dU5wWKlPETrBLfGWkoI2NVGJtjvgQFEH1E9644yOWDPjVEptp7kp08MtttY sxRj/C11UV+Z3+z/wpzEPs/jdyaUAvZv226LcVD3ORNQI8FHbYJ2dPKoecdSUFbVWMmC vQInZeMwaaSa+LvS/pYTQBbKqys22pYGwDogXujs/1SqVIKEc/7Qn7fXczZ5e1h7V9fF XJIA== X-Gm-Message-State: AOUpUlGEdy7kRMrspH3kWWQd2Wub69J0dlpwDOVq47CqbsWDoorqmwbu ofIjvGWBOhVtovaEqPxI3DxH/YtfenxQhMXzyLGWFC5M X-Google-Smtp-Source: AA+uWPwesa7CkrdZJRuDdDJmfw07+N8pLTpYN8DMDX3ahFO7qclrcZ+VybaHc60vgpp8xPgEH7QiFQjnoeUpR2+83Dw= X-Received: by 2002:a24:c2c2:: with SMTP id i185-v6mr2823463itg.76.1533835185332; Thu, 09 Aug 2018 10:19:45 -0700 (PDT) Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST; Thu, 9 Aug 2018 13:19:44 -0400 MIME-Version: 1.0 Sender: Peter Schrum From: Peter Schrum Date: Thu, 9 Aug 2018 13:19:44 -0400 X-Google-Sender-Auth: NgwCe2EZ41IKVCz9s5MxaJAuHdM Message-ID: Subject: Re: freebsd.org : ROI driven campaign for your Website To: Freebsd-Questions Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.27 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 17:19:47 -0000 =E2=80=8BDear freebsd.org Team, Hope you are doing fantastic. I am wondering if you are interested to increase your customer outreach and online sales. As you know, customer outreach plays a key role in the growth of any business including revenue. We help clients in understanding and eventually reach their business goals. Our range of services includes Search Engine Marketing (SEM), Social Media Marketing (SMM) etc. for increasing organic search engine ranking and traffic level. Let us find the most relevant places for you on the internet and promote there through creative content & links. This gets your website regular traffic & visitors from sources such as: ~ Google Local Listings & Keyword Promotion. ~ Blogs, Classified, Forum & online groups in your niche. ~ Social media such as Facebook, Twitter, Google+, YouTube etc. Are you interested in promoting your business this way, and for an amazing price? Please let me know if you need more information. Also, if this is not the right address then could you please forward this to the respective decision maker? Kind Regards, Peter Schrum | Business Analyst ------------------------------------------------------------ -------------------------------------------------------------------- *Note:- **If you are interested then my Sales Manager will come back to you with an affordable SEO & Digital Marketing plan which contains our services, client reference, price list etc.* [image: beacon] From owner-freebsd-questions@freebsd.org Thu Aug 9 18:20:08 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A0B23106F0AA for ; Thu, 9 Aug 2018 18:20:08 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (mail8.networktest.com [192.73.244.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 04DFB818F3 for ; Thu, 9 Aug 2018 18:20:07 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (localhost [127.0.0.1]) by mail8.networktest.com (Postfix) with ESMTP id 09829618040 for ; Thu, 9 Aug 2018 11:19:59 -0700 (PDT) Authentication-Results: mail8.networktest.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=networktest.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=networktest.com; h=content-transfer-encoding:content-language:content-type :content-type:in-reply-to:mime-version:user-agent:date:date :message-id:subject:subject:organization:from:from:references :to; s=dkim; t=1533838798; x=1534443599; bh=d/d8i8u0L/a2zZA0pZaS G982Shr8vVnR+crk2mAgcJc=; b=rnVrxH7hUUnP690yqd86nVYN8CtNo3vO39dL uunqm1VbIkZ0RfqEhlk1AEKgKrDaduqtoddVsch9Aq197h7dbKKDppvOoIeMJFQi hS+8/Ddm0B8DNSYtHRBINoP8hPQGKP1/ex4chyG7HlULwNXotEItx+FUzwYmZvMa yO+9+bk= X-Virus-Scanned: amavisd-new at mail8.networktest.com Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id YFKXsQRi5DBD for ; Thu, 9 Aug 2018 11:19:58 -0700 (PDT) Received: from dhcp138.eng.networktest.com (ns.networktest.com [69.75.159.98]) by mail8.networktest.com (Postfix) with ESMTPSA id A787861803A for ; Thu, 9 Aug 2018 11:19:58 -0700 (PDT) To: freebsd-questions@freebsd.org References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> <2a4a6b24-b0ec-a1e8-2e52-00cf1703e193@networktest.com> <52e2c421-e766-859e-3331-92aeb0c9921e@networktest.com> From: David Newman Openpgp: preference=signencrypt Autocrypt: addr=dnewman@networktest.com; prefer-encrypt=mutual; keydata= xsFNBFnmfMEBEACt5x64cZy4FPct3SaH44BMAYkghlJDxI11XpHUJNFAuJ8MD8WgF5F6Nc9C PCl7WzIHAwgWkM2ntAgcOeKvBiFTtzMfiIczfgIAkhiyANYAm3MIH4Li9X0NltYtROQ7FUn+ H4IWZ0SF/BZH1jfoLRNVvuLHdXVYrol/9sGlSI1KTpzpt3GIgeTxdOgTy0nO0HO7c0EBTnRv L3fyYs2E9XgmqsHlFqHBvF1OV0HjVJsqohQxb9iReZEL2UseTZYIYOhKizI3oJOnwPmf7zYg E4jzL422tHbbj4Qwh8l4kZDvy3J+S+KmqFD+IvOUbFBmHZKKB8oFZvLrjd7PLRs0ORSaseqA di0TEUAC3RpmybB1iuukvYhayeLV9afwXWFGNTqrAGCrGPR9umP7OeKGIm6SHrmGnqMlAAz6 qfVITcbhdne2JiqLaZ23B1ezTmJwPPbDGi7G6Yk3Z5pzuZBgq/L1ZyenUBmIcx95C1kVmUtl POJJ3RUNXqJLkjfZhGcmQczR2U0WoOuHVWCmztxa3yhkQETjKhmlIkBV6pj2Bc/mtynVBZg8 XclC6f4Q9bADDOiwO6uDbqI8Bpa1X8YY7iL8QJy2JHACT/j/+mji6Er8c+xU9qkxNmjc3E2a KpCg7gIqnWFj/Ag76AHkPkIo2SO2QINyRMgnFMQeS6j7ij7BOwARAQABzUtEYXZpZCBOZXdt YW4gKERhdmlkIE5ld21hbiBOZXR3b3JrIFRlc3Qgd29yayBrZXkpIDxkbmV3bWFuQG5ldHdv cmt0ZXN0LmNvbT7CwX8EEwEIACkFAlnmfMECGwMFCQeGH4AHCwkIBwMCAQYVCAIJCgsEFgID AQIeAQIXgAAKCRB8vD6mldfDUqfvD/4zARgEeKZqNrJWOK9YMkIah6C6dMohRH0Pz9AkMz9+ 9i9VhdZf2Pv0hq+IEGw+6ISQZL/xiNmq4l6rBioU+AAq98CZq8sh0VLSSeEqYDbo9anvSu2W j1MzhC0BKhlaFPgy08EYZlN2z4pbSvG/ARc0xfTiGlU2jA+iEiMNDbHveGEH1iwAXV3JGA9T bIpe/D5pVO2aemTsePf6+OiATE7M3crqKYZX7WMejqMbOuXzWbeCh/HoDnBBSFDIHR3lQfqR 6jwvb/NogoBioMx6I9vtXvwkqVgp4/jxgkK+I1X4BCdXvC1s3qnJQ9lQT3kFPCJBhQ3qcORv Lvx5svBtp9undPvvp+7SEOBIZDyAfAtSRvBHSv86Y8XnTSrseqk/XtcQbsHs7eVAYcg7F0dR gXFNFUMg67VgacXfyi2GrmkIvA3Zh8h39pZBiTiKfizMhn10gFPhHI6zndR5mYVO5sGUVMVt Mw4f0MDiKHmgFZcs/zcO89OSx3vRwAn5YfBdCagrX1VPYAgGxsfPhnUT8BjmqAFLbHHpb23n HUtfepMIeNaN76/PcxQJUInx/9MfceKL/XGJ8uThM3Ujdv8x6IS7mzEqSbMQTqVVi7loIfP3 qqP87k4Z6G7IMNXKk/Mg84kLTq7YD48pm9S1ME+ghd7wraX2tcbMycuZsrE4XfI8ic7BTQRZ 5nzBARAA9fYZMETrO0l7alXxUVxYxLYVWulKh3GBz9yAeSXSEIJ+q8f0WsDK5zPd6ndBzY2k pT2DJ/ND1NfZJlEo5o27eETQJkpIMV38ZINZz/gVThMIIpCHZeSMW3JveZYEB1xYLFLxeILI ECBAO/h0ASdRz0KYLJldWmuWBUd3tsxhOpK/lZ/s5wbFpstAzsAiw0sm2de4UpNpmGHc1x1j eJH4WBKIAUkZLDXUWEkN1aSVMGWH/2yH87x/J/Mjrj49T+6RwwUohSgOQV3q1XjGjqDq/tpN BPODp32z9GchIvmCU4cRF0uQKpUXtu0fpwnmc1W5M/1aVPQ33vgEFcS/brpWMf7xLIL9EGDp 4/4BukImG4wOx1L3GuKIw5XXNLA9uCriWXr7NSvI00AhXR7m/NbE9ZLIHKfTWssFf9hYnh3p x2n1E+Hy/okqDppfGynHUJjcl5UwP2v6lKO4VO8Gz6wdhl2sYU9pNT6/8Hfp9lnY0BTbFv5Y zZfD77NdCJoDwEd2FUgRzb4vqjwoswci8U73pcOCylbQbAEC5scy/Bd5BOoSIy0kGaQYqumA 3rGXzDn4B02xiYiraNIH28jZPmWzYGM/jncajRFYARZFh/K1OW8Wl3JILAlwZP4VO6ECDj3r qv9EwUv6gxsikXtCT0xjnHL/N5+UQBIQOrx7/TKb80MAEQEAAcLBZQQYAQgADwUCWeZ8wQIb DAUJB4YfgAAKCRB8vD6mldfDUvPlD/4rpb17nhmvSnAy+ShanY2p40M4kgo46Mwmvm3Dmug8 5P+ECRtmhTZ+kEU8Ici/u7FFvE1WHydeNCdE/tOaJ3qXMLBOd4SiB+sa21E0veqR28qUmymI Ti/gFhMpL2Cfa5oPQj5sq/fdEPJzpAoaHfxUMPIUZ7ebM96syazndEFJAFS9MO00/SJ/HcUx 8VMypzqoG+EyBs4c+PThNRyuUH5x8gh4uABILTYIwqUE4HESpRef9ETdJpBkWhsQqxo3Nvoa TLjZH0LNnMyZXOb/aUeQBm0TSGda+on+0BdI70QgI42mu6ovKup32eUhHh7C9scKv8NJYo1Z 4PqRQVIEPznCizZ90aBP1Ia0rJfcADzFNrOQru1WXmm+zXu/TYdESyoL5MRAlitEIs34oeJF X8wMgkHZBFVhvEm60ynH2HZQRLWGIVBnW7oJ2apTx10L2AZWZvLQ6P8pn4eZMPX3+f854d4Q D4yEhE9Ec7CTiqmo6A5+bHGi/yf8VzxMNorlyHCIFZZdfm5vctcg78iUfqsKyvAULpmjLKyA YkX0qv2EnCMUb9urwITWbQTySOVazfjOjRPUO1z5RbfGwCMwNdW8ahf94jtLaVbvVp+7F8dD Y81Qhcbc2MAOWzP1ghr+wsyAyvzVJuDS0kDh6XjpuZddSBEYAh+aI8Kcwqsr75INMg== Organization: Network Test Inc. Subject: Re: xrdp configuration and xfce4 Message-ID: <75bc60f0-07f9-0448-391e-24a522c0f645@networktest.com> Date: Thu, 9 Aug 2018 11:19:57 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 18:20:08 -0000 On 8/8/18 3:22 PM, doug wrote: > On Wed, 8 Aug 2018, David Newman wrote: >=20 >> On 8/8/18 12:16 PM, Oleg Cherkasov wrote: >>> On 08. aug. 2018 19:57, David Newman wrote: >>>> On 8/8/18 9:32 AM, Oleg Cherkasov wrote: >>>>> On 08. aug. 2018 04:10, David Newman wrote: >>>> >>>> Previously the .xsession file was just 'startxfce4'. >>>> >>>> But adding the '#! /bin/sh' line and restarting xrdp did not change = the >>>> behavior: It's still a black screen with one xterm, and no xfce4 >>>> desktop >>>> or copy/paste support. >>>> >>>> Of course startxfce4 will run manually from the xterm but along with >>>> copy/paste, those are the problems I'm looking to solve. >>> >>> I think it was another in X called ~/.xinitrc, just give it a try. >> >> That file previously had these contents: >> >> exec /usr/local/bin/startxfce4 --with-ck-launch >> >> Changing this to just: >> >> startxfce4 >> >> and restarting the xrdp service did not result in xfce4 starting by >> itself or copy/paste being enabled. >> >> It's possible FreeBSD-specific changes are needed to xrdp.ini, >> startwm.sh, and maybe other config files, but I don't know what those >> changes are. >=20 > Do you have physical access to the FreeBSD system?=20 Didn't mention before, but this is a VM running in VMware vSphere. I have ssh and virtual console access. I don't think the VM part is relevant since xfce4 and copy-paste worked on the same VM prior to the upgrade from xrdp 0.6.x to 0.9.x (and again, the root problem here is my failure to back up configs before the upgrade). >If so look at > .xsession-errors in your home dir. In /var/log you will have Xorg.0.log > and some other simiarly name files. It seemed like getting xfce started > was at least part of the problem. If not, sorry for the noise. Sorry, but there's no .xsession-errors file in the home directory. >=20 > I use xdm with my .xsession as follows: >=20 > artemis:~> cat .xsession > #!/bin/sh > /usr/bin/ssh-agent /usr/local/bin/startxfce4 >=20 > startxfce4 from the console login also works. I do not have any other > user defined files. Interesting. startxfce4 from the console login also works for me, but without copy/paste support. I'm going to try Iwao-san's suggestion about startwm.sh and will report back. dn From owner-freebsd-questions@freebsd.org Thu Aug 9 18:25:59 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1A723106F4E8 for ; Thu, 9 Aug 2018 18:25:59 +0000 (UTC) (envelope-from bsd@lordcow.org) Received: from mail.lordcow.org (lordcow.org [197.155.6.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "devaux.za.net", Issuer "Cow Certificate Authority" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 456FA81DF5 for ; Thu, 9 Aug 2018 18:25:55 +0000 (UTC) (envelope-from bsd@lordcow.org) Received: from lordcow.org (localhost [127.0.0.1]) by mail.lordcow.org (8.15.2/8.15.2) with ESMTPS id w79IPXmg017008 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 9 Aug 2018 20:25:33 +0200 (SAST) (envelope-from lordcow@lordcow.org) X-Authentication-Warning: lordcow.org: Host localhost [127.0.0.1] claimed to be lordcow.org Received: (from lordcow@localhost) by lordcow.org (8.15.2/8.15.2/Submit) id w79IPSZM016836 for freebsd-questions@freebsd.org; Thu, 9 Aug 2018 20:25:28 +0200 (SAST) (envelope-from lordcow) Date: Thu, 9 Aug 2018 20:25:28 +0200 From: Gareth de Vaux To: freebsd-questions@freebsd.org Subject: Re: Replacing failed drives on a raidz2 with geli Message-ID: <20180809182528.GA89537@lordcow.org> References: <20180807142535.GA20017@lordcow.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20180807142535.GA20017@lordcow.org> User-Agent: Mutt/1.10.1 (2018-07-13) X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lordcow.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 18:25:59 -0000 On Tue 2018-08-07 (16:25), Gareth de Vaux wrote: > > gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 1 ada0 > geli init -e AES-XTS -l 256 -s 4096 -b /dev/ada0p3 Solved, I needed to add: geli configure -g /dev/ada0p3 From owner-freebsd-questions@freebsd.org Thu Aug 9 19:23:01 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 269411070C81 for ; Thu, 9 Aug 2018 19:23:01 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (mail8.networktest.com [192.73.244.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A57B083EBE for ; Thu, 9 Aug 2018 19:23:00 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (localhost [127.0.0.1]) by mail8.networktest.com (Postfix) with ESMTP id EA5D9618040 for ; Thu, 9 Aug 2018 12:22:56 -0700 (PDT) Authentication-Results: mail8.networktest.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=networktest.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=networktest.com; h=content-transfer-encoding:content-language:content-type :content-type:in-reply-to:mime-version:user-agent:date:date :message-id:subject:subject:organization:from:from:references :to; s=dkim; t=1533842576; x=1534447377; bh=+zsxgosoTJpCCpYkaPI8 g9XVNWi+5SSTz9q9hEIMVj0=; b=HvIvOoxKq7o9ODIxQlqy8Fp6qp6oI/qIX2uO raTnyoBGSWVPny6KQWOJYArY//wwJyMYuXZtuswe7+fYWaMQ9MPctiAGPJsDgTNh 6x+5BJFOQLj9VVgJD2plwHf8Y9WF92ppeZPWQKOQaUvYsg72fXndRY+Pj8Pr0QFa U2aYKC4= X-Virus-Scanned: amavisd-new at mail8.networktest.com Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id kbYIY5E1irq9 for ; Thu, 9 Aug 2018 12:22:56 -0700 (PDT) Received: from dhcp138.eng.networktest.com (ns.networktest.com [69.75.159.98]) by mail8.networktest.com (Postfix) with ESMTPSA id 3DC1961803A for ; Thu, 9 Aug 2018 12:22:55 -0700 (PDT) To: freebsd-questions@freebsd.org References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> <010101651cc2eaf1-3b1f8145-18bd-4665-bdf9-767470f85a3d-000000@us-west-2.amazonses.com> From: David Newman Openpgp: preference=signencrypt Autocrypt: addr=dnewman@networktest.com; prefer-encrypt=mutual; keydata= xsFNBFnmfMEBEACt5x64cZy4FPct3SaH44BMAYkghlJDxI11XpHUJNFAuJ8MD8WgF5F6Nc9C PCl7WzIHAwgWkM2ntAgcOeKvBiFTtzMfiIczfgIAkhiyANYAm3MIH4Li9X0NltYtROQ7FUn+ H4IWZ0SF/BZH1jfoLRNVvuLHdXVYrol/9sGlSI1KTpzpt3GIgeTxdOgTy0nO0HO7c0EBTnRv L3fyYs2E9XgmqsHlFqHBvF1OV0HjVJsqohQxb9iReZEL2UseTZYIYOhKizI3oJOnwPmf7zYg E4jzL422tHbbj4Qwh8l4kZDvy3J+S+KmqFD+IvOUbFBmHZKKB8oFZvLrjd7PLRs0ORSaseqA di0TEUAC3RpmybB1iuukvYhayeLV9afwXWFGNTqrAGCrGPR9umP7OeKGIm6SHrmGnqMlAAz6 qfVITcbhdne2JiqLaZ23B1ezTmJwPPbDGi7G6Yk3Z5pzuZBgq/L1ZyenUBmIcx95C1kVmUtl POJJ3RUNXqJLkjfZhGcmQczR2U0WoOuHVWCmztxa3yhkQETjKhmlIkBV6pj2Bc/mtynVBZg8 XclC6f4Q9bADDOiwO6uDbqI8Bpa1X8YY7iL8QJy2JHACT/j/+mji6Er8c+xU9qkxNmjc3E2a KpCg7gIqnWFj/Ag76AHkPkIo2SO2QINyRMgnFMQeS6j7ij7BOwARAQABzUtEYXZpZCBOZXdt YW4gKERhdmlkIE5ld21hbiBOZXR3b3JrIFRlc3Qgd29yayBrZXkpIDxkbmV3bWFuQG5ldHdv cmt0ZXN0LmNvbT7CwX8EEwEIACkFAlnmfMECGwMFCQeGH4AHCwkIBwMCAQYVCAIJCgsEFgID AQIeAQIXgAAKCRB8vD6mldfDUqfvD/4zARgEeKZqNrJWOK9YMkIah6C6dMohRH0Pz9AkMz9+ 9i9VhdZf2Pv0hq+IEGw+6ISQZL/xiNmq4l6rBioU+AAq98CZq8sh0VLSSeEqYDbo9anvSu2W j1MzhC0BKhlaFPgy08EYZlN2z4pbSvG/ARc0xfTiGlU2jA+iEiMNDbHveGEH1iwAXV3JGA9T bIpe/D5pVO2aemTsePf6+OiATE7M3crqKYZX7WMejqMbOuXzWbeCh/HoDnBBSFDIHR3lQfqR 6jwvb/NogoBioMx6I9vtXvwkqVgp4/jxgkK+I1X4BCdXvC1s3qnJQ9lQT3kFPCJBhQ3qcORv Lvx5svBtp9undPvvp+7SEOBIZDyAfAtSRvBHSv86Y8XnTSrseqk/XtcQbsHs7eVAYcg7F0dR gXFNFUMg67VgacXfyi2GrmkIvA3Zh8h39pZBiTiKfizMhn10gFPhHI6zndR5mYVO5sGUVMVt Mw4f0MDiKHmgFZcs/zcO89OSx3vRwAn5YfBdCagrX1VPYAgGxsfPhnUT8BjmqAFLbHHpb23n HUtfepMIeNaN76/PcxQJUInx/9MfceKL/XGJ8uThM3Ujdv8x6IS7mzEqSbMQTqVVi7loIfP3 qqP87k4Z6G7IMNXKk/Mg84kLTq7YD48pm9S1ME+ghd7wraX2tcbMycuZsrE4XfI8ic7BTQRZ 5nzBARAA9fYZMETrO0l7alXxUVxYxLYVWulKh3GBz9yAeSXSEIJ+q8f0WsDK5zPd6ndBzY2k pT2DJ/ND1NfZJlEo5o27eETQJkpIMV38ZINZz/gVThMIIpCHZeSMW3JveZYEB1xYLFLxeILI ECBAO/h0ASdRz0KYLJldWmuWBUd3tsxhOpK/lZ/s5wbFpstAzsAiw0sm2de4UpNpmGHc1x1j eJH4WBKIAUkZLDXUWEkN1aSVMGWH/2yH87x/J/Mjrj49T+6RwwUohSgOQV3q1XjGjqDq/tpN BPODp32z9GchIvmCU4cRF0uQKpUXtu0fpwnmc1W5M/1aVPQ33vgEFcS/brpWMf7xLIL9EGDp 4/4BukImG4wOx1L3GuKIw5XXNLA9uCriWXr7NSvI00AhXR7m/NbE9ZLIHKfTWssFf9hYnh3p x2n1E+Hy/okqDppfGynHUJjcl5UwP2v6lKO4VO8Gz6wdhl2sYU9pNT6/8Hfp9lnY0BTbFv5Y zZfD77NdCJoDwEd2FUgRzb4vqjwoswci8U73pcOCylbQbAEC5scy/Bd5BOoSIy0kGaQYqumA 3rGXzDn4B02xiYiraNIH28jZPmWzYGM/jncajRFYARZFh/K1OW8Wl3JILAlwZP4VO6ECDj3r qv9EwUv6gxsikXtCT0xjnHL/N5+UQBIQOrx7/TKb80MAEQEAAcLBZQQYAQgADwUCWeZ8wQIb DAUJB4YfgAAKCRB8vD6mldfDUvPlD/4rpb17nhmvSnAy+ShanY2p40M4kgo46Mwmvm3Dmug8 5P+ECRtmhTZ+kEU8Ici/u7FFvE1WHydeNCdE/tOaJ3qXMLBOd4SiB+sa21E0veqR28qUmymI Ti/gFhMpL2Cfa5oPQj5sq/fdEPJzpAoaHfxUMPIUZ7ebM96syazndEFJAFS9MO00/SJ/HcUx 8VMypzqoG+EyBs4c+PThNRyuUH5x8gh4uABILTYIwqUE4HESpRef9ETdJpBkWhsQqxo3Nvoa TLjZH0LNnMyZXOb/aUeQBm0TSGda+on+0BdI70QgI42mu6ovKup32eUhHh7C9scKv8NJYo1Z 4PqRQVIEPznCizZ90aBP1Ia0rJfcADzFNrOQru1WXmm+zXu/TYdESyoL5MRAlitEIs34oeJF X8wMgkHZBFVhvEm60ynH2HZQRLWGIVBnW7oJ2apTx10L2AZWZvLQ6P8pn4eZMPX3+f854d4Q D4yEhE9Ec7CTiqmo6A5+bHGi/yf8VzxMNorlyHCIFZZdfm5vctcg78iUfqsKyvAULpmjLKyA YkX0qv2EnCMUb9urwITWbQTySOVazfjOjRPUO1z5RbfGwCMwNdW8ahf94jtLaVbvVp+7F8dD Y81Qhcbc2MAOWzP1ghr+wsyAyvzVJuDS0kDh6XjpuZddSBEYAh+aI8Kcwqsr75INMg== Organization: Network Test Inc. Subject: Re: xrdp configuration and xfce4 Message-ID: Date: Thu, 9 Aug 2018 12:22:53 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <010101651cc2eaf1-3b1f8145-18bd-4665-bdf9-767470f85a3d-000000@us-west-2.amazonses.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 19:23:01 -0000 On 8/8/18 8:37 PM, Koichiro IWAO wrote: >=20 >> Sorry, no go. >> >> A startwm.sh script with just these two lines produces a black screen >> with one xterm and doesn't start xfce, let alone deal with the >> copy/paste problem. >=20 > Also try creating ~/startwm.sh instead with following two lines. > Don't forget to add execute permission to the script. If it doesn't > work and you see xterm, see and show me /var/log/xrdp-sesman.log. >=20 >>> ``` >>> #!/bin/sh >>> startxfce4 >>> ``` >=20 > Again, in xrdp context, ~/.xinitrc or ~/.xsession doesn't affect. Forge= t > it and > see /usr/local/etc/xrdp/startwm.sh or ~/startwm.sh. Partial success! xfce4 now starts automatically with a local startwm.sh file. However, copy/paste functionality still is missing. This worked with the earlier 0.6.x pkg, and appears to be enabled in the 0.9.x version of the xrdp.ini file. Is there something else that needs to be enabled? Thanks! dn From owner-freebsd-questions@freebsd.org Thu Aug 9 22:31:57 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 78FFD10755AB for ; Thu, 9 Aug 2018 22:31:57 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (mail8.networktest.com [192.73.244.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id F3CF18B3D4 for ; Thu, 9 Aug 2018 22:31:56 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (localhost [127.0.0.1]) by mail8.networktest.com (Postfix) with ESMTP id B3BCB618040 for ; Thu, 9 Aug 2018 15:31:50 -0700 (PDT) Authentication-Results: mail8.networktest.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=networktest.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=networktest.com; h=content-transfer-encoding:content-language:content-type :content-type:in-reply-to:mime-version:user-agent:date:date :message-id:subject:subject:organization:from:from:references :to; s=dkim; t=1533853910; x=1534458711; bh=2wAmcRtQI28Q9fUyfiTE DANbCAhWOSnFc65EX68dCM0=; b=i+X4VIXJ4LfpSG4Ncah36PVaEq2ql4k4JcEu oeuvE3941fpZfhnnSMd5eLclux0CJdm8GvFgHChE3quUsisG59e5SsESFpggE50k Rprqc9X9mXXl0kKbRRHgzMuGqi7ysV30KKD5fWtBDH9SHhy/4n/mh2kd6EN9RJtb FOorPrE= X-Virus-Scanned: amavisd-new at mail8.networktest.com Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id UhndxK8Myi_z for ; Thu, 9 Aug 2018 15:31:50 -0700 (PDT) Received: from dhcp138.eng.networktest.com (ns.networktest.com [69.75.159.98]) by mail8.networktest.com (Postfix) with ESMTPSA id EC78561803B for ; Thu, 9 Aug 2018 15:31:49 -0700 (PDT) To: freebsd-questions@freebsd.org References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> <010101651cc2eaf1-3b1f8145-18bd-4665-bdf9-767470f85a3d-000000@us-west-2.amazonses.com> From: David Newman Openpgp: preference=signencrypt Autocrypt: addr=dnewman@networktest.com; prefer-encrypt=mutual; keydata= xsFNBFnmfMEBEACt5x64cZy4FPct3SaH44BMAYkghlJDxI11XpHUJNFAuJ8MD8WgF5F6Nc9C PCl7WzIHAwgWkM2ntAgcOeKvBiFTtzMfiIczfgIAkhiyANYAm3MIH4Li9X0NltYtROQ7FUn+ H4IWZ0SF/BZH1jfoLRNVvuLHdXVYrol/9sGlSI1KTpzpt3GIgeTxdOgTy0nO0HO7c0EBTnRv L3fyYs2E9XgmqsHlFqHBvF1OV0HjVJsqohQxb9iReZEL2UseTZYIYOhKizI3oJOnwPmf7zYg E4jzL422tHbbj4Qwh8l4kZDvy3J+S+KmqFD+IvOUbFBmHZKKB8oFZvLrjd7PLRs0ORSaseqA di0TEUAC3RpmybB1iuukvYhayeLV9afwXWFGNTqrAGCrGPR9umP7OeKGIm6SHrmGnqMlAAz6 qfVITcbhdne2JiqLaZ23B1ezTmJwPPbDGi7G6Yk3Z5pzuZBgq/L1ZyenUBmIcx95C1kVmUtl POJJ3RUNXqJLkjfZhGcmQczR2U0WoOuHVWCmztxa3yhkQETjKhmlIkBV6pj2Bc/mtynVBZg8 XclC6f4Q9bADDOiwO6uDbqI8Bpa1X8YY7iL8QJy2JHACT/j/+mji6Er8c+xU9qkxNmjc3E2a KpCg7gIqnWFj/Ag76AHkPkIo2SO2QINyRMgnFMQeS6j7ij7BOwARAQABzUtEYXZpZCBOZXdt YW4gKERhdmlkIE5ld21hbiBOZXR3b3JrIFRlc3Qgd29yayBrZXkpIDxkbmV3bWFuQG5ldHdv cmt0ZXN0LmNvbT7CwX8EEwEIACkFAlnmfMECGwMFCQeGH4AHCwkIBwMCAQYVCAIJCgsEFgID AQIeAQIXgAAKCRB8vD6mldfDUqfvD/4zARgEeKZqNrJWOK9YMkIah6C6dMohRH0Pz9AkMz9+ 9i9VhdZf2Pv0hq+IEGw+6ISQZL/xiNmq4l6rBioU+AAq98CZq8sh0VLSSeEqYDbo9anvSu2W j1MzhC0BKhlaFPgy08EYZlN2z4pbSvG/ARc0xfTiGlU2jA+iEiMNDbHveGEH1iwAXV3JGA9T bIpe/D5pVO2aemTsePf6+OiATE7M3crqKYZX7WMejqMbOuXzWbeCh/HoDnBBSFDIHR3lQfqR 6jwvb/NogoBioMx6I9vtXvwkqVgp4/jxgkK+I1X4BCdXvC1s3qnJQ9lQT3kFPCJBhQ3qcORv Lvx5svBtp9undPvvp+7SEOBIZDyAfAtSRvBHSv86Y8XnTSrseqk/XtcQbsHs7eVAYcg7F0dR gXFNFUMg67VgacXfyi2GrmkIvA3Zh8h39pZBiTiKfizMhn10gFPhHI6zndR5mYVO5sGUVMVt Mw4f0MDiKHmgFZcs/zcO89OSx3vRwAn5YfBdCagrX1VPYAgGxsfPhnUT8BjmqAFLbHHpb23n HUtfepMIeNaN76/PcxQJUInx/9MfceKL/XGJ8uThM3Ujdv8x6IS7mzEqSbMQTqVVi7loIfP3 qqP87k4Z6G7IMNXKk/Mg84kLTq7YD48pm9S1ME+ghd7wraX2tcbMycuZsrE4XfI8ic7BTQRZ 5nzBARAA9fYZMETrO0l7alXxUVxYxLYVWulKh3GBz9yAeSXSEIJ+q8f0WsDK5zPd6ndBzY2k pT2DJ/ND1NfZJlEo5o27eETQJkpIMV38ZINZz/gVThMIIpCHZeSMW3JveZYEB1xYLFLxeILI ECBAO/h0ASdRz0KYLJldWmuWBUd3tsxhOpK/lZ/s5wbFpstAzsAiw0sm2de4UpNpmGHc1x1j eJH4WBKIAUkZLDXUWEkN1aSVMGWH/2yH87x/J/Mjrj49T+6RwwUohSgOQV3q1XjGjqDq/tpN BPODp32z9GchIvmCU4cRF0uQKpUXtu0fpwnmc1W5M/1aVPQ33vgEFcS/brpWMf7xLIL9EGDp 4/4BukImG4wOx1L3GuKIw5XXNLA9uCriWXr7NSvI00AhXR7m/NbE9ZLIHKfTWssFf9hYnh3p x2n1E+Hy/okqDppfGynHUJjcl5UwP2v6lKO4VO8Gz6wdhl2sYU9pNT6/8Hfp9lnY0BTbFv5Y zZfD77NdCJoDwEd2FUgRzb4vqjwoswci8U73pcOCylbQbAEC5scy/Bd5BOoSIy0kGaQYqumA 3rGXzDn4B02xiYiraNIH28jZPmWzYGM/jncajRFYARZFh/K1OW8Wl3JILAlwZP4VO6ECDj3r qv9EwUv6gxsikXtCT0xjnHL/N5+UQBIQOrx7/TKb80MAEQEAAcLBZQQYAQgADwUCWeZ8wQIb DAUJB4YfgAAKCRB8vD6mldfDUvPlD/4rpb17nhmvSnAy+ShanY2p40M4kgo46Mwmvm3Dmug8 5P+ECRtmhTZ+kEU8Ici/u7FFvE1WHydeNCdE/tOaJ3qXMLBOd4SiB+sa21E0veqR28qUmymI Ti/gFhMpL2Cfa5oPQj5sq/fdEPJzpAoaHfxUMPIUZ7ebM96syazndEFJAFS9MO00/SJ/HcUx 8VMypzqoG+EyBs4c+PThNRyuUH5x8gh4uABILTYIwqUE4HESpRef9ETdJpBkWhsQqxo3Nvoa TLjZH0LNnMyZXOb/aUeQBm0TSGda+on+0BdI70QgI42mu6ovKup32eUhHh7C9scKv8NJYo1Z 4PqRQVIEPznCizZ90aBP1Ia0rJfcADzFNrOQru1WXmm+zXu/TYdESyoL5MRAlitEIs34oeJF X8wMgkHZBFVhvEm60ynH2HZQRLWGIVBnW7oJ2apTx10L2AZWZvLQ6P8pn4eZMPX3+f854d4Q D4yEhE9Ec7CTiqmo6A5+bHGi/yf8VzxMNorlyHCIFZZdfm5vctcg78iUfqsKyvAULpmjLKyA YkX0qv2EnCMUb9urwITWbQTySOVazfjOjRPUO1z5RbfGwCMwNdW8ahf94jtLaVbvVp+7F8dD Y81Qhcbc2MAOWzP1ghr+wsyAyvzVJuDS0kDh6XjpuZddSBEYAh+aI8Kcwqsr75INMg== Organization: Network Test Inc. Subject: Re: xrdp configuration and xfce4 Message-ID: <20b099dc-5481-3ca2-ae80-5859d1f02bbf@networktest.com> Date: Thu, 9 Aug 2018 15:31:48 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 22:31:57 -0000 On 8/9/18 12:22 PM, David Newman wrote: > However, copy/paste functionality still is missing. This worked with th= e > earlier 0.6.x pkg, and appears to be enabled in the 0.9.x version of th= e > xrdp.ini file.=20 ps. Here are the clipboard settings currently in /usr/local/etc/xrdp/xrdp.ini: cliprdr=3Dtrue channel.cliprdr=3Dtrue Checking the logs, there is no update to xrdp.log, xrdp-sesman.log, or Xorg.10.log upon a copy/paste failure. dn Is there something else that needs to be enabled? >=20 > Thanks! >=20 > dn From owner-freebsd-questions@freebsd.org Thu Aug 9 23:31:21 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 908581076BB1 for ; Thu, 9 Aug 2018 23:31:21 +0000 (UTC) (envelope-from 0101016521032eb2-f262b8e9-b49d-4698-b7fa-b164846438d8-000000@us-west-2.amazonses.com) Received: from a27-35.smtp-out.us-west-2.amazonses.com (a27-35.smtp-out.us-west-2.amazonses.com [54.240.27.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1AB2F8CFFB for ; Thu, 9 Aug 2018 23:31:20 +0000 (UTC) (envelope-from 0101016521032eb2-f262b8e9-b49d-4698-b7fa-b164846438d8-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=4nphvxivhgsntfxkzsopqsdbvjscuhxm; d=vmeta.jp; t=1533857181; h=MIME-Version:Content-Type:Content-Transfer-Encoding:Date:From:To:Cc:Subject:In-Reply-To:References:Message-ID; bh=F6Cby3iRu+ymbYh8zarqBGm9rXWog1Z8Luz+SsJhENg=; b=icoL3AenK/gu7ATuPDFzA5gKAEfRStLtcvEv7NiwbfQE8hT06XN40auUFbJrMvzj PJoCNJArGqaniCB9jBrjF2whVxcD8Lzl05M6Qe7LAlAKR8/BmhCHeeWwNx65VUwCBIT gK0qPNhAVbe2S1OYtihoAHOR7rpf3sJq0DLHO77k= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1533857181; h=MIME-Version:Content-Type:Content-Transfer-Encoding:Date:From:To:Cc:Subject:In-Reply-To:References:Message-ID:Feedback-ID; bh=F6Cby3iRu+ymbYh8zarqBGm9rXWog1Z8Luz+SsJhENg=; b=VevsFa04q90xEghGRSQqrsJs3AW/RHp45RSPsucuCSZB/7KAeowV8eFSdro5hT9M 6d+/G64olFA5weMPDgKsjP0k5L66HhkVUwJzuLp4WcBJaIrpr/XSNsoc6aEIxCgMLiv rls1NMq3vpd9NTuSu2YRS4YFhwA4ggoxJrTdfrc0= X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on glory.vmeta.jp X-Spam-Level: X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=unavailable autolearn_force=no version=3.4.1 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Thu, 9 Aug 2018 23:26:21 +0000 From: Koichiro IWAO To: David Newman Cc: freebsd-questions@freebsd.org Subject: Re: xrdp configuration and xfce4 In-Reply-To: References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> <010101651cc2eaf1-3b1f8145-18bd-4665-bdf9-767470f85a3d-000000@us-west-2.amazonses.com> Message-ID: <0101016521032eb2-f262b8e9-b49d-4698-b7fa-b164846438d8-000000@us-west-2.amazonses.com> X-Sender: meta@vmeta.jp User-Agent: Roundcube Webmail/1.3.6 X-SES-Outgoing: 2018.08.09-54.240.27.35 Feedback-ID: 1.us-west-2.ngRt4x2U/cWqug8pbfjwMxB6pcDw1fmN73bGmMLYyRI=:AmazonSES X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Aug 2018 23:31:21 -0000 >> Again, in xrdp context, ~/.xinitrc or ~/.xsession doesn't affect. >> Forget >> it and >> see /usr/local/etc/xrdp/startwm.sh or ~/startwm.sh. > > Partial success! xfce4 now starts automatically with a local startwm.sh > file. Which did you try? ~/startwm.sh? If you got success with ~/startwm.sh, there might be a bug of xrdp. Some people reported similar issue to yours. Let me break down the issue and help us improve xrdp before looking at clipboard issue. 1. remove ~/startwm.sh 2. confirm /usr/local/etc/xrdp/startwm.sh starts startxfce4 3. login via xrdp 4. you'll see xterm 5. see /var/log/xrdp-sesman.log 6. you'll see the log like this [20180710-23:08:24] [CORE ] waiting for window manager (pid 41266) to exit [20180710-23:08:24] [CORE ] error starting default wm for user meta - pid 41266 [20180710-23:08:25] [DEBUG] errno: 2, description: No such file or directory [20180710-23:08:25] [DEBUG] execlp3 parameter list: [20180710-23:08:25] [DEBUG] argv[0] = startwm.sh [20180710-23:08:25] [DEBUG] argv[1] = startwm.sh If you see the log like this, xrdp is failing to find /usr/local/etc/xrdp/startwm.sh. If you specify the full path to startwm.sh in sesman.ini, it should work. Try it. Don't forget to restart xrdp-sesman after you edited sesman.ini. ``` DefaultWindowManager=/usr/local/etc/xrdp/startwm.sh ``` Thank you for your cooperation. -- `whois vmeta.jp | nkf -w` meta From owner-freebsd-questions@freebsd.org Fri Aug 10 09:12:41 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6BEEF106344D for ; Fri, 10 Aug 2018 09:12:41 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from smh-06.1blu.de (smh-06.1blu.de [178.254.0.206]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0C0D880F81 for ; Fri, 10 Aug 2018 09:12:40 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from [172.16.29.5] (helo=sh4-5.1blu.de) by smh-06.1blu.de with esmtp (Exim 4.86_2) (envelope-from ) id 1fo3TA-0007fV-Gj for freebsd-questions@freebsd.org; Fri, 10 Aug 2018 11:12:30 +0200 Received: from ftp51246-2575596 by sh4-5.1blu.de with local (Exim 4.86_2) (envelope-from ) id 1fo3TA-0003Rj-Do for freebsd-questions@freebsd.org; Fri, 10 Aug 2018 11:12:28 +0200 Date: Fri, 10 Aug 2018 11:12:28 +0200 From: Matthias Apitz To: freebsd-questions@freebsd.org Subject: missing perl module Lib::Text Message-ID: <20180810091228.GA10802@sh4-5.1blu.de> Reply-To: Matthias Apitz Mail-Followup-To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit X-Operating-System: FreeBSD 12.0-CURRENT r314251 (amd64) X-message-flag: Mails containing HTML will not be read! Please send only plain text. User-Agent: Mutt/1.5.24 (2015-08-30) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 09:12:41 -0000 Hello, I have a 3rd party perl script which says: $ ./magzett_PclToPs.pl < lp.test > lp.ps Can't locate Lib/Text.pm in @INC (you may need to install the Lib::Text module) (@INC contains: /usr/local/sisis-pap/lib/perl5 /usr/local/lib/perl5/site_perl/mach/5.24 /usr/local/lib/perl5/site_perl /usr/local/lib/perl5/5.24/mach /usr/local/lib/perl5/5.24 .) at ./magzett_PclToPs.pl line 120. BEGIN failed--compilation aborted at ./magzett_PclToPs.pl line 120. WHat is the way to know which of the /usr/ports/*/p5-* is missing? Thanks matthias -- Matthias Apitz, ✉ guru@unixarea.de, ⌂ http://www.unixarea.de/ 📱 +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub From owner-freebsd-questions@freebsd.org Fri Aug 10 09:39:24 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D77C71064372 for ; Fri, 10 Aug 2018 09:39:24 +0000 (UTC) (envelope-from Albert.Shih@obspm.fr) Received: from mx-p1.obspm.fr (mx-p1.obspm.fr [145.238.193.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "*.obspm.fr", Issuer "TERENA SSL CA 3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 731B682239 for ; Fri, 10 Aug 2018 09:39:24 +0000 (UTC) (envelope-from Albert.Shih@obspm.fr) Received: from io.chezmoi.fr (io-m.obspm.fr [145.238.184.193]) (authenticated bits=0) by mx-p1.obspm.fr (8.14.4/8.14.4/DIO Observatoire de Paris - 15/04/10) with ESMTP id w7A9bDWK266496 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 10 Aug 2018 11:37:14 +0200 Date: Fri, 10 Aug 2018 11:37:44 +0200 From: Albert Shih To: freebsd-questions@freebsd.org Subject: freebsd-update for many server Message-ID: <20180810093744.GA10035@io.chezmoi.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.10.1 (2018-07-13) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.11 (mx-p1.obspm.fr [145.238.193.20]); Fri, 10 Aug 2018 11:37:14 +0200 (CEST) X-Virus-Scanned: clamav-milter 0.100.0 at mx-p1.obspm.fr X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 09:39:25 -0000 Hi, I'm using freebsd-update to update my jail. It's working. But, I've got lot a jail and freebsd-update is very slow to download. Is they are anyway to re-use the file already downloaded ? So I don't have to download again everything ? Regards -- Albert SHIH DIO bâtiment 15 Observatoire de Paris xmpp: jas@obspm.fr Heure local/Local time: Fri Aug 10 11:36:29 CEST 2018 From owner-freebsd-questions@freebsd.org Fri Aug 10 09:47:09 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6F9E71064856 for ; Fri, 10 Aug 2018 09:47:09 +0000 (UTC) (envelope-from mail@osfux.nl) Received: from vm1982.osfux.nl (vm1982.osfux.nl [79.99.187.212]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 788DE827C4 for ; Fri, 10 Aug 2018 09:47:08 +0000 (UTC) (envelope-from mail@osfux.nl) Received: from vm1982.osfux.nl (localhost [127.0.0.1]) by vm1982.osfux.nl (Postfix) with ESMTP id 6DCDE201E1 for ; Fri, 10 Aug 2018 11:47:00 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=osfux.nl; s=default; t=1533894420; bh=ZTxil8Snz3lmUlW/9ACHXkj3usjf+cjEY7Xt45shVtc=; h=Subject:To:References:From:Date:In-Reply-To; b=lEIM2gwAmOOvyGkVTnhASIeLmeReAdivX5ObbNrYs9AawSbfnp2X3GbRcDGYDplqC Vut1Wq/wLTF4FeRRfkypOsvMJ8dNKJH9V9Q5tKcPJPiui/HqHKXFbMTAT58M/lCfrP ekIBf3UDcEFLwNQdAN6pbZ2BTKZJQhWv2YJ8TbmB4tfw0ERyTHp5tYGSDwvaaV/cSF 2ii9o6lBj2cp/xdIJXkmJy25Dg1TsQQTcR1zNH+6ibN88OL4WSPwn8yk5Fq/FNOa0D GwCTH9YU6j7IjEVWkFOpDMG/kYCErka2LAOYpe1/liiNgL9G0pwHlTkDlQ/d14IUre UHorAE1/W42qdHBXEO8cFIOrWu0L5M1vaO9rwnt3KjkwELEE6/i1adq3WvFlgSdQLT cPbk0Brp4lO0mmDGqE53USVzhOqugbYp0Bv69xnorALI8nlsu0p1xGVtUrThxBUhtf QjuLW3B9IrhGwlWqMpNR9CbNK4md/NjKlzF3gsPS4IyJ0ngseqTq367GgNHWVxWI8X RCEfPif6se04UTVPPOjH8x3i7qlsLcBb+58p2XCs79VYccoIW+Fas4B2KK+MTCk9zR jIsGH1GEByU01VpJrD/BFU/GczoZof8cDp0th/TQJ1K/xtTkmh4CGPVrn09WOlLeQt isEo/n22KxCf9SCKH6Te2OiA= Received: from vm1982.osfux.nl (localhost [127.0.0.1]) by vm1982.osfux.nl (Postfix) with ESMTP id 94CC8201A0 for ; Fri, 10 Aug 2018 11:46:57 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=osfux.nl; s=default; t=1533894420; bh=ZTxil8Snz3lmUlW/9ACHXkj3usjf+cjEY7Xt45shVtc=; h=Subject:To:References:From:Date:In-Reply-To; b=lEIM2gwAmOOvyGkVTnhASIeLmeReAdivX5ObbNrYs9AawSbfnp2X3GbRcDGYDplqC Vut1Wq/wLTF4FeRRfkypOsvMJ8dNKJH9V9Q5tKcPJPiui/HqHKXFbMTAT58M/lCfrP ekIBf3UDcEFLwNQdAN6pbZ2BTKZJQhWv2YJ8TbmB4tfw0ERyTHp5tYGSDwvaaV/cSF 2ii9o6lBj2cp/xdIJXkmJy25Dg1TsQQTcR1zNH+6ibN88OL4WSPwn8yk5Fq/FNOa0D GwCTH9YU6j7IjEVWkFOpDMG/kYCErka2LAOYpe1/liiNgL9G0pwHlTkDlQ/d14IUre UHorAE1/W42qdHBXEO8cFIOrWu0L5M1vaO9rwnt3KjkwELEE6/i1adq3WvFlgSdQLT cPbk0Brp4lO0mmDGqE53USVzhOqugbYp0Bv69xnorALI8nlsu0p1xGVtUrThxBUhtf QjuLW3B9IrhGwlWqMpNR9CbNK4md/NjKlzF3gsPS4IyJ0ngseqTq367GgNHWVxWI8X RCEfPif6se04UTVPPOjH8x3i7qlsLcBb+58p2XCs79VYccoIW+Fas4B2KK+MTCk9zR jIsGH1GEByU01VpJrD/BFU/GczoZof8cDp0th/TQJ1K/xtTkmh4CGPVrn09WOlLeQt isEo/n22KxCf9SCKH6Te2OiA= X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on vm1982.osfux.nl X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED shortcircuit=no autolearn=ham autolearn_force=no version=3.4.1 Received: from [172.28.10.134] (engineering.quanza.net [91.208.87.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by vm1982.osfux.nl (Postfix) with ESMTPSA for ; Fri, 10 Aug 2018 11:46:57 +0200 (CEST) Subject: Re: freebsd-update for many server To: freebsd-questions@freebsd.org References: <20180810093744.GA10035@io.chezmoi.fr> From: Ruben Message-ID: <29642e5d-654c-5c90-46b4-54cace87570c@osfux.nl> Date: Fri, 10 Aug 2018 11:46:56 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20180810093744.GA10035@io.chezmoi.fr> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Virus-Scanned: ClamAV using ClamSMTP X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 09:47:09 -0000 Hi Albert, You might want to take a look at : https://forums.freebsd.org/threads/freebsd-update-mirror.59777/ (easy to implement) and / or http://confluence.wartungsfenster.de/display/Adminspace/FreeBSD+update+Tuning#FreeBSDupdateTuning-FasterUpdates (more difficult to implement) Kind regards, Ruben On 08/10/2018 11:37 AM, Albert Shih wrote: > Hi, > > > I'm using freebsd-update to update my jail. It's working. > > But, I've got lot a jail and freebsd-update is very slow to download. Is > they are anyway to re-use the file already downloaded ? So I don't have to > download again everything ? > > Regards > -- > Albert SHIH > DIO bâtiment 15 > Observatoire de Paris > xmpp: jas@obspm.fr > Heure local/Local time: > Fri Aug 10 11:36:29 CEST 2018 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Fri Aug 10 09:52:18 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9B5141064B3C for ; Fri, 10 Aug 2018 09:52:18 +0000 (UTC) (envelope-from denis.raux@lix.polytechnique.fr) Received: from mx-a.polytechnique.fr (mx-a.polytechnique.fr [129.104.30.14]) by mx1.freebsd.org (Postfix) with ESMTP id 0CEB082C13 for ; Fri, 10 Aug 2018 09:52:17 +0000 (UTC) (envelope-from denis.raux@lix.polytechnique.fr) Received: from argos.lix.polytechnique.fr (argos.lix.polytechnique.fr [193.55.176.2]) by mx-a.polytechnique.fr (tbp 5.3.2/2.0.7) with ESMTP id w7A9mCUw016624 for ; Fri, 10 Aug 2018 11:48:16 +0200 Received: from [192.168.112.203] (unknown [192.168.112.203]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by argos.lix.polytechnique.fr (Postfix) with ESMTPSA id BDE3A24A2A for ; Fri, 10 Aug 2018 11:48:12 +0200 (CEST) From: Denis RAUX Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Reply-To: raux@texmacs.org Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Subject: Last texmacs (1.99.7) build process is now FreeBSD Compatible Message-Id: <912FFB9B-1E55-42C6-B791-63D3D22FA31A@lix.polytechnique.fr> Date: Fri, 10 Aug 2018 11:48:08 +0200 To: freebsd-questions@FreeBSD.org X-Mailer: Apple Mail (2.3273) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 09:52:18 -0000 Hello, I name is Denis Raux, I work in the TeXmacs team. Last month, I made lot = of work on configuration and make files in order to get the building = process more =C2=AB friendly =C2=BB. I did some final adjustments yesterday to make TeXmacs build FreeBSD = compatible. All what TeXmacs needs (guile1.8, Qt4, limping) is offered = by FreeBSD, what makes the build quite easier. If you have any questions regarding TeXmacs and FreeBSD, don=E2=80=99t = hesitate to contact me (raux@texmacs.org) or Joris van der Hoeven = (vdhoeven@texmacs.org). Some of our users are fond of FreeBSD and they struggle with texmacs = building. Best Regards, Denis Raux From owner-freebsd-questions@freebsd.org Fri Aug 10 11:16:23 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A3F5D1066E74 for ; Fri, 10 Aug 2018 11:16:23 +0000 (UTC) (envelope-from alisha.wilson0002@weboptimizes.com) Received: from mail-pg1-x543.google.com (mail-pg1-x543.google.com [IPv6:2607:f8b0:4864:20::543]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 26F0685AE3 for ; Fri, 10 Aug 2018 11:16:23 +0000 (UTC) (envelope-from alisha.wilson0002@weboptimizes.com) Received: by mail-pg1-x543.google.com with SMTP id y4-v6so4254234pgp.9 for ; Fri, 10 Aug 2018 04:16:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=weboptimizes.com; s=google; h=mime-version:sender:from:date:message-id:subject:to; bh=wN9o9tNkIeMmJb3Twx/d5kF2Ba87IQ9tyYZAJ4EQ8KU=; b=f5LHcSnMh9kIbwu/ytnStQIF4e+SOVvbrpGAPF6xH43mtgaD3+JWmh008x4vgC+1fq I5XvoaljFz3kcIpcUNPd/kqZ5xpHpLD//40g4pwXIImqH0ZRO4eylkLDbeojBdZWyoJ9 yXEBBTdCSl2Cc44qfidLMmD3ioul0avCWaNAs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:from:date:message-id:subject :to; bh=wN9o9tNkIeMmJb3Twx/d5kF2Ba87IQ9tyYZAJ4EQ8KU=; b=R7NqDrcL5iqH2sd6PAfSVszwhTnA9JBOzxkYXfB4ACdKSfFNOh+fXCxeKUAPbUhpMS NuULk6rOeX3vxQ6SAA49IiW3dp9dqE/pGGW7ROpqFLwlWTi8wjOv35iEgSLjPSIQiZTh N5+KEx3EHUEMaHbiL53Y01BtGrcUaBF7QqQDjWMKfzs1pVW7+Jc5+IUPxyVp4zj2ZksT scWb5GcL0uZnon6nK4qJ8NgA9SPSAXwwlKiDTQG5tFqA79FjmCm6tOOgqDNnqYDhpwGK +hihpApIvaR+vqz1g8495GqWB8q27e0RdUNqitnxtQ1ADTE+Lbtzp/TuzB9OxRdNrxrK 7ybg== X-Gm-Message-State: AOUpUlF2h34krwbuMHsDF4n/5UnIbXp8SogPUKlBrSnDTEjG7V/BzZ2S hWPEv0ebpNKTNSPk2sIUg31l6vvSNRM2bdnebGXUmMQK X-Google-Smtp-Source: AA+uWPwjuX8qVMVRGcjeB0yEBrAV2ledo+7a4hiSGZ3RjZKOisAc7aD+H5XONaxY5Y3sY/v98s3RkhMZ6luxniDpHXE= X-Received: by 2002:a65:4c87:: with SMTP id m7-v6mr5961618pgt.98.1533899781770; Fri, 10 Aug 2018 04:16:21 -0700 (PDT) Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST; Fri, 10 Aug 2018 04:16:21 -0700 MIME-Version: 1.0 Sender: Alisha Wilson From: Alisha Wilson Date: Fri, 10 Aug 2018 04:16:21 -0700 X-Google-Sender-Auth: YVb23ot_Pa5-2MrpR9lOnxh3o_M Message-ID: Subject: Serious issue found while visiting your website To: Freebsd-Questions Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.27 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 11:16:24 -0000 Hi *freebsd.org *,*Team,* Hope this email finds you well. I am * Alisha Wilson * I visited your website and found that your website has been diagnosed with many coding issues, which affects your ranking. promote your website online and increase sales by putting your website top in all search engines. As per the trends in your industry =E2=80=93 over 80% of people search for= your products/services online and buy the same. These rankings also influence other channels of sales as well. It is simple math=E2=80=94the more people who come to your website, the mo= re potential customers you attract. Don=E2=80=99t wait another moment to drive= more traffic, increase sales, and improve your visual appearance. 1. We have all the best expertise to take the risk and give you what we commit. 2. If you are willing to have more business online and more Return on Investment (ROI) we are just an Email /Phone away. 3. We can increase the number of visitors to your website, and get you on the top searches of all the search engines. 4. Affordable way to market website and get online business. I also prepared a *free website audit report* for your website.If you are *interested* i can show you the report. I'd be happy to send you our package, pricing and past work details, if you'd like to assess our work. I look forward to hearing from you. *Best Regards,* *Alisha Wilson* *SEO-Consultant* [image: beacon] From owner-freebsd-questions@freebsd.org Fri Aug 10 12:24:16 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4E4931069830 for ; Fri, 10 Aug 2018 12:24:16 +0000 (UTC) (envelope-from 5fb240be.AL8AABLX6wQAAcEdHIAAAEo91zIAAML8oQsAHvWaAAFMuwBbbYPs@bnc3.mailjet.com) Received: from o121.p8.mailjet.com (o121.p8.mailjet.com [87.253.233.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A3AE988A24 for ; Fri, 10 Aug 2018 12:24:15 +0000 (UTC) (envelope-from 5fb240be.AL8AABLX6wQAAcEdHIAAAEo91zIAAML8oQsAHvWaAAFMuwBbbYPs@bnc3.mailjet.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; q=dns/txt; d=bnc3.mailjet.com; i=sales=3Dlondonvintageguitars.com@bnc3.mailjet.com; s=mailjet; h=message-id:mime-version:from:to:subject:date:list-id:list-unsubscribe: precedence:x-csa-complaints:x-mj-mid:x-mj-smtpguid:x-report-abuse-to: content-type; bh=LhczbNcFOXdOGMF5AMH6C0EhpyyBpTCvu/XWuuhUSH4=; b=EPwNtm1L0DLYgHe0lSpoXIy8wy8s0KVbdrCfwSc46CkeiAIibBXNTI0hd EhxylPb1Bwfv3TQ/CQXcpE90lWbutWATjMpR6WnxGd9Cxg0M/qpiALziVzTo 7WVxC4VGP+LAhz2hFuGTqHHHzRgVADObkTDIYzEXEtzfyzgw2LTo2Q= Message-Id: <5fb240be.AL8AABLX6wQAAcEdHIAAAEo91zIAAML8oQsAHvWaAAFMuwBbbYPs@mailjet.com> MIME-Version: 1.0 From: Denmark Street Guitars To: freebsd-questions@freebsd.org Subject: Classic Gear Priced to Sell Date: Fri, 10 Aug 2018 12:24:12 +0000 (UTC) Precedence: bulk X-CSA-Complaints: whitelist-complaints@eco.de X-MJ-Mid: AL8AABLX6wQAAcEdHIAAAEo91zIAAML8oQsAHvWaAAFMuwBbbYPsFTxLDrTVQCSUjdfy73l1sQABPns X-MJ-SMTPGUID: 153c4b0e-b4d5-4024-948d-d7f2ef7975b1 X-REPORT-ABUSE-TO: Message sent by Mailjet please report to abuse@mailjet.com with a copy of the message Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.27 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 12:24:16 -0000 [[HEADLINE]] [[PERMALINK_FULL_LINK]] TITLE OF YOUR EMAIL =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D The content of your email goes here. You can drag and drop blocks of text, images or other content elements to a= dd them to your message. Customize the font and the colors. Add links to tr= ack clicks. This is a second paragraph you can customize as your please. If you have stored contact properties with your contacts, you can include p= ersonalization variables such as first name, last name in your message cont= ent. [[DELIVERY_INFO]] [[POSTAL_ADDRESS]]= From owner-freebsd-questions@freebsd.org Fri Aug 10 12:30:07 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 369571069C7D for ; Fri, 10 Aug 2018 12:30:07 +0000 (UTC) (envelope-from jim@mailman-hosting.com) Received: from maurice.jlkmail.com (maurice.jlkmail.com [IPv6:2606:c700:1:30::23:2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B3AFF88D61 for ; Fri, 10 Aug 2018 12:30:06 +0000 (UTC) (envelope-from jim@mailman-hosting.com) Received: from maurice.jlkmail.com (localhost [127.0.0.1]) by maurice.jlkmail.com (Postfix) with ESMTP id 32E7924C04AF for ; Fri, 10 Aug 2018 08:29:57 -0400 (EDT) Authentication-Results: maurice.jlkmail.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=mailman-hosting.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d= mailman-hosting.com; h=content-type:content-type:in-reply-to :mime-version:user-agent:date:date:message-id:from:from :references:to:subject:subject; s=dkim; t=1533904195; x= 1534768196; bh=Orh0TYnrzREjWYTnNbF/zpSSiWUGAjjjb2CINh3KJkw=; b=Z 1+je2VdxJEVJjWBHM7fOHtwXjVFDmSxIzq/x3p8gVyUWmvFIs1UzD01e8p1WS6vs kWU219TtAqVJ0qm0Xf5XK1iWKSnz2n9IiTJ3l0R80pAJMuzg1reERS8FznRaJTis 69+ncRHEs2qU+ocW9jS3hftbCpgNF5vCfatVDEPfVI= X-Virus-Scanned: Debian amavisd-new at maurice.jlkmail.com X-Spam-Flag: NO X-Spam-Score: -1 X-Spam-Level: X-Spam-Status: No, score=-1 tagged_above=-999 required=6.31 tests=[ALL_TRUSTED=-1] autolearn=ham autolearn_force=no Received: from maurice.jlkmail.com ([127.0.0.1]) by maurice.jlkmail.com (maurice.jlkmail.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id Ptl0TrWECKLp for ; Fri, 10 Aug 2018 08:29:55 -0400 (EDT) Received: from [192.168.1.164] (static-70-104-198-156.nrflva.fios.verizon.net [70.104.198.156]) by maurice.jlkmail.com (Postfix) with ESMTPSA id 665F824C0208 for ; Fri, 10 Aug 2018 08:29:55 -0400 (EDT) Subject: Re: Classic Gear Priced to Sell To: freebsd-questions@freebsd.org References: <5fb240be.AL8AABLX6wQAAcEdHIAAAEo91zIAAML8oQsAHvWaAAFMuwBbbYPs@mailjet.com> From: Jim Ohlstein Openpgp: preference=signencrypt Autocrypt: addr=jim@mailman-hosting.com; prefer-encrypt=mutual; keydata= xsBNBFk4U7QBCAD0xK4/jXvDamBRX1uQX9DD874PhAYLPZGuqgppchs41JpfUWOrbzKeYOca iPrryvtFfUz5mKY8Yzh3sLwpkrgsFsxDS2ByC/DJMo7BAoD3jCjzI35SH/8pTLDp8/QCj09k +u8PMA7Tc03OoITGkqXwsrZGxPYjVtA07aanY+Zk2B0ywET2XRhjI+3RNgTTulsw+ifm8WEm Woxpp5uFtx9sWFbMx1h6cUmbth44GYLyFoqB2yMiaEPcEX/vyMkeEZ2Xy7wA1kJi+rsCoLeG YlRyF7PWA75KYSNP/0kNIzrs9HFI7gm/Ad50+NrqOvcDoJ5eoOuWYVtk/OVDiBQb/bvHABEB AAHNJkppbSBPaGxzdGVpbiA8amltQG1haWxtYW4taG9zdGluZy5jb20+wsB3BBMBCAAhBQJZ OFO0AhsDBQsJCAcCBhUICQoLAgQWAgMBAh4BAheAAAoJEEv1Sg15i1V9TSEIALyJeMwKKJYn HstciQnX4+t4TXqCYSHtm/ZruJ6y2Z0MtXZqzcYI+ZB/y9+/81kKml8WI0swpPQPUUx6h4uJ d19NvoJTAjtDnU+H5p8o95vU+QfKaIB+XC3O2DirFlnFo6nXwjUYAscWAclh65fH9saBoM4Z TCtgDuiG5DKuLdTcW34QrTl5z6vODNUExGKcHiY5+wpI7irXbLBwxcyuRy6sq9ohriIjGaAj 0SrsvkkiojXx6xOPJprA27kwSdj2d2XrKT1X/uxmqJNgARgi6QhbA2nQMiYQ+Tr+6HDdSzTn ltdFLnmfSQoX/zJNx6DXK4I8cLYE4EDKw98bhSAzG7XOwE0EWThTtAEIALab7EzO2xKXRsF/ 6b0WgFvLWrkKqX07zqiLAUJTP8NzmGZzKUVlTGGIXnK5eTfWa0HE3/ksTyFJfJRAORpITjpq WPMwcvJDNf+/CKC1C6P7YtfUX+voX58XN0lzbF/7Zqn7QbeyKntU8qHaMQUvYDBHuVru+qd/ jqHWqBUBx2wXC1qYiQtQwVA5bUt4jtBXOla2fRp+1cVBiG0sdB2qWW+ZvjYJRKamXhhpbrNz BzAbry2JjM2QXl71cuzD37OK5tXusYqKrv58wHiG1MiWknW0cU4vorbNcnskga/Zvq2UqHTV THbLS0CiQ2Z8zzfFtm9f55GwLamOXhdAYh4xoD8AEQEAAcLAXwQYAQgACQUCWThTtAIbDAAK CRBL9UoNeYtVfVucCADTNR6FdXsLFEinBaSxRCcIUaCPzTwYCTzWKLAvB2vpTtgZM4FHySpy BxHuGLtPOkujtRN51Ow1ejZ8qmJMM0qWb2IKTa2eNFAVE/vBxcn9rr2d7djTQDPPp0oKogeE llaCrvlqE0LbjvUWQXgpcRx/Xz0jsvrCnDX3OCm/SUxbaxAdz7fhg/D1zHGTi/KBQTIxpL58 /xFUwP55aGRdxzlEGJul5NDYdyTQLZTMK1PS62dK4k5q9OF9h7h4kgkLUfmD33ABmPktx8R8 86v6qQ5ye7rjZ+HIZwWVVCSbLE2DsLMgIQp7O/x8PnrSEEMAiz1Dw54Egc2j6Ahc2Ckm4OAo Message-ID: Date: Fri, 10 Aug 2018 08:29:53 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <5fb240be.AL8AABLX6wQAAcEdHIAAAEo91zIAAML8oQsAHvWaAAFMuwBbbYPs@mailjet.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="CPq3heoR4zrw3G6uc1dvjHtZv71YVZbOw" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 12:30:07 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --CPq3heoR4zrw3G6uc1dvjHtZv71YVZbOw Content-Type: multipart/mixed; boundary="WpnaXUq07YwpTFf3dnZ2zBWiAJzFXFEqI"; protected-headers="v1" From: Jim Ohlstein To: freebsd-questions@freebsd.org Message-ID: Subject: Re: Classic Gear Priced to Sell References: <5fb240be.AL8AABLX6wQAAcEdHIAAAEo91zIAAML8oQsAHvWaAAFMuwBbbYPs@mailjet.com> In-Reply-To: <5fb240be.AL8AABLX6wQAAcEdHIAAAEo91zIAAML8oQsAHvWaAAFMuwBbbYPs@mailjet.com> --WpnaXUq07YwpTFf3dnZ2zBWiAJzFXFEqI Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Can an admin block this address from which this came (sales@londonvintageguitars.com)? It seems to send spam almost every day.= On 08/10/2018 08:24 AM, Denmark Street Guitars wrote: > [[HEADLINE]] >=20 > [[PERMALINK_FULL_LINK]] >=20 >=20 >=20 >=20 >=20 >=20 >=20 > TITLE OF YOUR EMAIL > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D > The content of your email goes here. >=20 > You can drag and drop blocks of text, images or other content elements = to add them to your message. Customize the font and the colors. Add links= to track clicks. >=20 >=20 >=20 >=20 >=20 >=20 >=20 > This is a second paragraph you can customize as your please. >=20 > If you have stored contact properties with your contacts, you can inclu= de personalization variables such as first name, last name in your messag= e content. >=20 >=20 >=20 > [[DELIVERY_INFO]] > [[POSTAL_ADDRESS]] > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd= =2Eorg" >=20 --=20 Jim Ohlstein Professional Mailman Hosting https://mailman-hosting.com --WpnaXUq07YwpTFf3dnZ2zBWiAJzFXFEqI-- --CPq3heoR4zrw3G6uc1dvjHtZv71YVZbOw Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEGuTcIH7bi7c+YS0aS/VKDXmLVX0FAltthUIACgkQS/VKDXmL VX0WLggAzaCBDY3udaj5dXjtMYz5dzfnFyHfCcyQC8/f+hPQEk34k8Y+CibflW/c AllwgNA/P/YGk53W7eew2pwHw213bKx3AuH/9cT1TMHivbIdn84yIsO48CMg3ogr j5OiBO86CjRsOiSd69OkgRqFaRKS+tQm0rQnksJPO4qnlKGGC2WRsWxvhW5L9sp/ rDMGyqIfOciHPk4BIloYr/YWLGb1CvvOdBCCzgzSde134fTp+fdhwlYhYGMKvkph dUoj/Fxt4dztNPp5+qAZabsmMT6FukvOnCCKkfSh1EO7OTjeFxhZQjyGjEclk5mW jEzt7O999McjtY3QQwBBt0sdtoVj1w== =ZE1a -----END PGP SIGNATURE----- --CPq3heoR4zrw3G6uc1dvjHtZv71YVZbOw-- From owner-freebsd-questions@freebsd.org Fri Aug 10 13:48:17 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1CDCA106B5E5 for ; Fri, 10 Aug 2018 13:48:17 +0000 (UTC) (envelope-from ralf.mardorf@rocketmail.com) Received: from sonic302-20.consmr.mail.ir2.yahoo.com (sonic302-20.consmr.mail.ir2.yahoo.com [87.248.110.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 78B678B71E for ; Fri, 10 Aug 2018 13:48:16 +0000 (UTC) (envelope-from ralf.mardorf@rocketmail.com) X-YMail-OSG: UZM7iEQVM1kKUW45mwjNW0a0dD442BV4GyKowlNqo0l2.V.YkLRhoZtoPZ6n89W vTXkpP80EU4AzC09iMYtmScfP0VYFeKWpgu9q9Ue3.3xmRmAUYRHF4CJbohidCsyAOzDRAfMKzb2 o43mYukMfnbYyZx.fMF.WRnCx_69StiZ4ffR.TOM2qdEI0nHbyyKhT5ALNYy4bldPIxf8pIo6Kfz _hdApfyvxSjE1AGIunRx2FxoRknjnVCXm5aDW0OkGT_IAG1MLYTXXf6m7Vbp465XjfmubOcoJ_ro Np0r3iJ0wvRkHCgPNDd2BG9QmGcNmXmC.dfsi.bHcDQPqlI0q006IaPhonVf_LhZxBhq74NE0Krt tZSEanvVFjr1TqBQnxoxEpqQySDouLZkIIQNGR97Ihrc4dZOJB7tLzKJyLPq8izg0c.nZIUZAwpe Uc_UAziIC07pd1vE._MQDOfgnFb5qlt9e9YvTr.L2ydAk0UVJPT6FxV7Y1H1.xKolxZconDD9xNw QEIvTWc3YB7yLMpUDKk2fy1G0y5eP6SdD1OcJsyJ2jpn3tpkl.Wm4T6WIYVjU_CkubtAKnTPcIbD PYnVtj3c7Rry07Wi0ELMzPUDcl5VqTsDQeLAvETcKYyK9jx62IHTylPrZZ345B3tMl2KmavrW5o. GPM548NbBxEGufhQb4ub2kTSQ8FIvL3R9OJO0TKX8c0qlMl5mx2QeX7IU_D.ZzWJ1WbQOIYQz5_5 j6k5SKuLvUQoJfO6gPyyJ8QFcZ5J4diUPi6ssFcBP2xTRwleKP2WBBXDZctDy9UPGMFhyx0v0IM2 jqeRAmy6JLCxF1O6N71H1z23AyUfTOk4AVterWTgKL9m1p3FrXtQKVLRJbJbNcP7vJmJj9ixxE8G cGJQdWsMcU1bN9LrT3ZdvkGuB1btOGxur7hltd22euVzslKYyLAhZMiZWAAZLPfqebZjIdCBOunZ ZxI6eszxDM9d8KgbaxGy_M2mdxrQnmDwCPFD6SASKXKrZT6tfLb81i82YI2xdjbiUeH2bMla68dX L2gkM7zE- Received: from sonic.gate.mail.ne1.yahoo.com by sonic302.consmr.mail.ir2.yahoo.com with HTTP; Fri, 10 Aug 2018 13:48:09 +0000 Received: from x4db6dd1e.dyn.telefonica.de (EHLO archlinux) ([77.182.221.30]) by smtp426.mail.ir2.yahoo.com (Oath Hermes SMTP Server) with ESMTPA ID 1e7d25a11dfdadea9c3bcede79149be7 for ; Fri, 10 Aug 2018 13:48:04 +0000 (UTC) Date: Fri, 10 Aug 2018 15:48:04 +0200 From: Ralf Mardorf To: freebsd-questions@freebsd.org Subject: Re: Classic Gear Priced to Sell Message-ID: <20180810154804.661f54ba@archlinux> In-Reply-To: References: <5fb240be.AL8AABLX6wQAAcEdHIAAAEo91zIAAML8oQsAHvWaAAFMuwBbbYPs@mailjet.com> X-Mailer: Claws Mail 3.16.0git213 (GTK+ 2.24.32; x86_64-arch-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 13:48:17 -0000 On Fri, 10 Aug 2018 08:29:53 -0400, Jim Ohlstein wrote: >Can an admin block this address from which this came >(sales@londonvintageguitars.com)? It seems to send spam almost every >day. Hi, I had in mind that we often get "Serious issue found while visiting your website"", but we don't. There is one "Classic Gear Priced to Sell" and one "Serious issue found while visiting your website" in the mailing list archive of the last month and one of each this month. The month before last month, there is only the obligatory "Serious issue found while visiting your website", no ""Classic Gear Priced to Sell". On freebsd-multimedia there is non of those mails in the archive of June, July and August. If I glance over the archive of this month for freebsd-questions, I see a lot of spam. Here are the subjects of the spam I noticed: "=E6=97=A5=E6=9C=AC=E6=9D=B1=E4=BA=AC=E9=83=BD=E7=9B=AE=E9=BB=91=E5=8D=80= =E6=99=82=E5=B0=9A=E5=85=AC=E5=AF=93 Concieria Meguro =E9=A6=99=E6=B8=AF=E5= =84=AA=E5=85=88=E7=99=BC=E5=94=AE", "ReP8KP9", "Ih", "Attempted unauthorized access to your PayPal account", "No subject", "Article - AAB International Summer Academy", "baronetomli, =CF=84=CF=8E=CF=81=CE=B1 =CE=BC=CF=80=CE=BF=CF=81=CE=B5=CE=AF= =CF=84=CE=B5 =CE=BD=CE=B1 =CE=B5=CF=80=CE=B9=CF=83=CF=84=CF=81=CE=AD=CF=88= =CE=B5=CF=84=CE=B5 =CF=83=CF=84=CE=BF Instagram =CE=B5=CF=8D=CE=BA=CE=BF=CE= =BB=CE=B1", "Inversi=C3=B3n o liquidez", "56.19.125.255", "Cybernet Media Limited, The luxury Indiana Executive Chair", "Calgary - Canada - Market update talk on this weekend 2-3 June in HK", "Get Patent Solar 4LED Warning Beacon Now", "DBG 7630765", "Alternate Donation Method Request", "Keep Freebsddiary.org unaffected from Google Updates", "Never Been Easier to Add a Reverse Camera Like This", "Resultados en 2018", "freebsd.org is missing out on Google ranking", "Financiaci=C3=B3n con fondos europeos", "Handheld Inkjet Printer Manufacturer", "Informaci=C3=B3n sobre ICO" I don't know how to value "HackerEarth and Free BSD Partnership" and "No internet". That is a lot of spam, but they are using different addresses. Btw. "freebsd-questions list run by freebsd-questions-owner at freebsd.org", see https://lists.freebsd.org/mailman/listinfo/freebsd-questions ;). Regards, Ralf From owner-freebsd-questions@freebsd.org Fri Aug 10 13:54:07 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 04611106B8F1 for ; Fri, 10 Aug 2018 13:54:07 +0000 (UTC) (envelope-from ralf.mardorf@rocketmail.com) Received: from sonic308-18.consmr.mail.ir2.yahoo.com (sonic308-18.consmr.mail.ir2.yahoo.com [77.238.178.146]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7DAC28BBA8 for ; Fri, 10 Aug 2018 13:54:06 +0000 (UTC) (envelope-from ralf.mardorf@rocketmail.com) X-YMail-OSG: sKLBGZUVM1k3z5yTVVU01HBjV_AyTBg7BoCumY75hx65i9xdcc52J41o0AH7Ur3 h9dqaET3clkAdp_8Ye8EhfLPcQTQnx2CoSjLvgHHts_6XoZFVPJWezuyVTLVncCekmK.bcspqVzG gmcAoXWtPkY3SmfmwpwL.JJ._pu_2v7ldVEioXcqrLJcexqr48kBNRRmd_ETc9gzC69IufmsDcw_ rCHXAX.6WEhhADWz5_1QhSSO0h4Z6z7fbq62bhy47XDVDBoPkosVYnilzLJAn5ozIlQo15Ihlpfu 7xRFUM_3Au9USTRtxvZz9mhXjVCtigo3MjP236X3Y9AU9uTc3w8KEodas9wzcdQOMNFikenIOLXt vQHYTIktdE7gQINwk2I_w_FyvQ0dkWfQAzniFJwDW_QsrXbbLJJqwFk36cqyO6seb_ELfi4up2cK fiEXYSt7FuOvNu.MK3HQQEaYj2GcXUXv7EvGRuqbZryXh4PBSupBStJZeewumd_0rffu2KZQIIeG lhu.__xLLX02VoNkGhRj_xpdrtGxTnTSB6Hw1CiFVPq6uTaxwCyotGcEa639LkdMFcWzTyv8xcjH eIz_bzouW2OBf.aLZBqTw1D06fIO_TbL6stFsV3uq3qTt8g99_oFl6l_xie7kZTbrHICxqHvMNPw 9EpVEqS0_Gr4fzk45fdqo00yKFrvU9hubzgyVa3LSLyjjU9hTNoOEVkwdnARhtj1OtaGJyzXG2J0 OFrR8qn767vxTwyTndktwTjdN.qPpO9cAnF14TbvJQAd_c29O4LTGagwNTWge08TuiY9EO_1pgUg GmAvOHkF929hcX9LDJVWfsaPmLCaQWZ_mBKzQu_3TsSBJidTpJUscDNPD86mvXO3cbQlQyivLQdX F3jYCGHEnpTCIu5pc6sZu60iB9gJR_jDgpN91iMkBB5rmi8kwz0WiZkLWJM3Jq70SvIWmX6RTk6s WggxmEdNQl8z2_iBfWv23lIVBIjOfpwthPEAEMOIxk0X4BhZlOnpk3nUaMRimDTQvGGwC4xtY8SV OjjoreCs- Received: from sonic.gate.mail.ne1.yahoo.com by sonic308.consmr.mail.ir2.yahoo.com with HTTP; Fri, 10 Aug 2018 13:54:04 +0000 Received: from x4db6dd1e.dyn.telefonica.de (EHLO archlinux) ([77.182.221.30]) by smtp418.mail.ir2.yahoo.com (Oath Hermes SMTP Server) with ESMTPA ID 3410a88e13dd6864b4ddfe5595ccb4b8 for ; Fri, 10 Aug 2018 13:54:02 +0000 (UTC) Date: Fri, 10 Aug 2018 15:54:02 +0200 From: Ralf Mardorf To: freebsd-questions@FreeBSD.org Subject: Re: Classic Gear Priced to Sell Message-ID: <20180810155402.5e4dba08@archlinux> In-Reply-To: <20180810154804.661f54ba@archlinux> References: <5fb240be.AL8AABLX6wQAAcEdHIAAAEo91zIAAML8oQsAHvWaAAFMuwBbbYPs@mailjet.com> <20180810154804.661f54ba@archlinux> X-Mailer: Claws Mail 3.16.0git213 (GTK+ 2.24.32; x86_64-arch-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 13:54:07 -0000 On Fri, 10 Aug 2018 15:48:04 +0200, Ralf Mardorf wrote: >If I glance over the archive of this month for freebsd-questions, I see >a lot of spam. Here are the subjects of the spam I noticed: Sorry, by accident it was the archive of June. maybe (maybe not) mixed with this month :D. >"=E6=97=A5=E6=9C=AC=E6=9D=B1=E4=BA=AC=E9=83=BD=E7=9B=AE=E9=BB=91=E5=8D=80= =E6=99=82=E5=B0=9A=E5=85=AC=E5=AF=93 Concieria Meguro =E9=A6=99=E6=B8=AF=E5= =84=AA=E5=85=88=E7=99=BC=E5=94=AE", >"ReP8KP9", >"Ih", >"Attempted unauthorized access to your PayPal account", >"No subject", >"Article - AAB International Summer Academy", >"baronetomli, =CF=84=CF=8E=CF=81=CE=B1 =CE=BC=CF=80=CE=BF=CF=81=CE=B5=CE= =AF=CF=84=CE=B5 =CE=BD=CE=B1 =CE=B5=CF=80=CE=B9=CF=83=CF=84=CF=81=CE=AD=CF= =88=CE=B5=CF=84=CE=B5 =CF=83=CF=84=CE=BF Instagram =CE=B5=CF=8D=CE=BA=CE=BF= =CE=BB=CE=B1", >"Inversi=C3=B3n o liquidez", >"56.19.125.255", >"Cybernet Media Limited, The luxury Indiana Executive Chair", >"Calgary - Canada - Market update talk on this weekend 2-3 June in HK", >"Get Patent Solar 4LED Warning Beacon Now", >"DBG 7630765", >"Alternate Donation Method Request", >"Keep Freebsddiary.org unaffected from Google Updates", >"Never Been Easier to Add a Reverse Camera Like This", >"Resultados en 2018", >"freebsd.org is missing out on Google ranking", >"Financiaci=C3=B3n con fondos europeos", >"Handheld Inkjet Printer Manufacturer", >"Informaci=C3=B3n sobre ICO" From owner-freebsd-questions@freebsd.org Fri Aug 10 14:08:05 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 94D39106BD70 for ; Fri, 10 Aug 2018 14:08:05 +0000 (UTC) (envelope-from cpghost@cordula.ws) Received: from mail-ed1-x543.google.com (mail-ed1-x543.google.com [IPv6:2a00:1450:4864:20::543]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 136DB8C35A for ; Fri, 10 Aug 2018 14:08:04 +0000 (UTC) (envelope-from cpghost@cordula.ws) Received: by mail-ed1-x543.google.com with SMTP id x5-v6so4861624edr.0 for ; Fri, 10 Aug 2018 07:08:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cordula-ws.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=6ewpSaOk7PajNSXPjObP9FY1ukYQnANA3hGiBCQtjiU=; b=rh+xTdSaLzdxSHTGTcZF07LHOyTWZhYyiRAhGXx4X2Uxcqqxrj+o5emYPAsqfl1wHy Va8U+cmg2WOdVdtkBVMzRGr3hfQLwYnD6p/VZbfUFUMQto9T6OhivnXx8apTGgvdMnN1 BFmAzBQRw5DGpW5z9LKGrmUiyNqUB+zbx/WALRhztbdneFnCs0lEM5CZY58ZMD37F588 SrsNbSQIO5U2SdmZNU0G84q16liLSYR1h5cNAtd/gwAU3ilKlINptJFOED7SICn6qpF2 CiOpql01u31GPOMEb01Oh2HR30/Tp1qDT0cumlzlxp2GniV+U7vDxoFfh9QikULBAiY8 XaTw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=6ewpSaOk7PajNSXPjObP9FY1ukYQnANA3hGiBCQtjiU=; b=uhX2d2EUbEETOhQitIhG3pD4bqa+z3bTom8pTE9ttQ22914IoJu7yPzxci2IZGig/4 MLlYSYWQOsRwbEqOB9uiREkKH6bBc78X9PzrEPocYVbjxcx4/LHlm/f5n6dMcJ7Du8et u4fTOWVPv9lwAx/bwZShi7fYKOfiNKJguFkFlPaoNnxw5oRpLfo0jmTjjJYM7u+XnoTp WNdZ1cDzpJkedpdGl57Ehywr6rLLI9x70EFKQNg3tOYAVa8FLlJpw8H5ZYbImdRIAUMh QOTxDH7ixqZXN3Ib43MKvN/WAgYv/HsXhx3jnGaUnJASSKmIyo0iYZysiCfGB6Ms93LO NtJQ== X-Gm-Message-State: AOUpUlEE7i55CiOrtnozSO/yNNo2XzH8Hl8eow8Z5VPPRcZvqGn5IKuE sT9v74PE+qitLALZ8giTiogWnHK3djQ= X-Google-Smtp-Source: AA+uWPyw1obZ4gs3Ipo8lg96nBEc0mOqlKHJIknSSusfkBX5Sb1mR1Cvk4sk7/ClWm0aRbrxuGTKlA== X-Received: by 2002:aa7:d786:: with SMTP id s6-v6mr8600328edq.228.1533910083604; Fri, 10 Aug 2018 07:08:03 -0700 (PDT) Received: from ?IPv6:2a02:908:960:c43e:2efd:a1ff:fe57:abb8? ([2a02:908:960:c43e:2efd:a1ff:fe57:abb8]) by smtp.gmail.com with ESMTPSA id y57-v6sm5214664edb.49.2018.08.10.07.08.02 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 10 Aug 2018 07:08:02 -0700 (PDT) Subject: Re: Erase memory on shutdown To: freebsd-questions@freebsd.org References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> From: cpghost Message-ID: Date: Fri, 10 Aug 2018 16:08:01 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms000207020502040008040600" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 14:08:05 -0000 This is a cryptographically signed message in MIME format. --------------ms000207020502040008040600 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 08/05/18 17:55, Valeri Galtsev wrote: > Another route could be encryption of RAM on-the-fly while system runs, = yet > it is questionable where the encryption key itself is kept to be > unaccessible for the attacker in the attack above, and boot of such sys= tem > may require warm body present. What about SEV? https://developer.amd.com/amd-secure-memory-encryption-sme-amd-secure-enc= rypted-virtualization-sev/ https://github.com/AMDESE/AMDSEV > Valeri -cpghost. --------------ms000207020502040008040600 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC Cx4wggUwMIIEGKADAgECAhEAxi8czu5BfArXx+KbCt8qNjANBgkqhkiG9w0BAQsFADCBlzEL MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2Fs Zm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0Eg Q2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwHhcNMTcxMjIwMDAw MDAwWhcNMTgxMjIwMjM1OTU5WjAjMSEwHwYJKoZIhvcNAQkBFhJjcGdob3N0QGNvcmR1bGEu d3MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuV3EBb8py/1yrTdT8cb8h5Ocl h5XDYOn2HNcGCENONWU7Rrz9X+suOufiGCwUzrj+ysDLzM/jfB8EQMFH+uZrt9hi1gb9QvXh jzHvHqrb0P6Bj/HV8VvWyywa+BbuHNxuvOHB+ECpQYs4/Itfyhr4F/08FhweUpP7W+NKK/m8 VvLyY3kT5T58DYN0AvxgN6LK0ejbKD44wOrjK4EwuZpRmKewuWi+VquqRS04vo6xVE+h2tqq BUmVv4q9S6fHnvDcDCg3Gs4NTc6eujsHK6O9SLcgKB3CkHm5mxMkqGWNvtLb9p3/y9A+/v3n 2GRE07mmRkeJ43ntSytkz5xCiYmpAgMBAAGjggHoMIIB5DAfBgNVHSMEGDAWgBSCr2yM+MX+ lmF86B89K3FIXsSLwDAdBgNVHQ4EFgQUJVBhgnBvX0Bb+4bCJ8KLFjYJ4powDgYDVR0PAQH/ BAQDAgWgMAwGA1UdEwEB/wQCMAAwIAYDVR0lBBkwFwYIKwYBBQUHAwQGCysGAQQBsjEBAwUC MBEGCWCGSAGG+EIBAQQEAwIFIDBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEBATArMCkGCCsG AQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBaBgNVHR8EUzBRME+gTaBL hklodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDbGllbnRBdXRoZW50aWNhdGlv bmFuZFNlY3VyZUVtYWlsQ0EuY3JsMIGLBggrBgEFBQcBAQR/MH0wVQYIKwYBBQUHMAKGSWh0 dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5k U2VjdXJlRW1haWxDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNv bTAdBgNVHREEFjAUgRJjcGdob3N0QGNvcmR1bGEud3MwDQYJKoZIhvcNAQELBQADggEBAAZ0 otdXgClU/ijwGvnOdARI7LVDD4pPg6BD1kTbMywUE6ti082zAvujveH4DkleGZaVByv1VHGV HAdB8S7P21bm2uGCxwJNdRGl2R8USNmE7OP0EXYlQLTXDQbpBBPoB8k5Tv8WGJfguxIrPpS6 L729xb5d75NoKFMYn8JHTlujcfYt5TZCir0tO5/B9BgfB01tokFQ814wpUWmXplnD+tfRLaJ OChKmyUnOi5qpBntd/PHpUDNFIUJy0QZ3sYt1PyW7ejhtMvGvI/cQLZdDOUXv432nu0dgy2K 8PDGRfhp/NZhW8He7ililwDIu4B229OfiKI3fpPCDtm+xz7V900wggXmMIIDzqADAgECAhBq m+E4O/8ra58B1dm4p1JWMA0GCSqGSIb3DQEBDAUAMIGFMQswCQYDVQQGEwJHQjEbMBkGA1UE CBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P RE8gQ0EgTGltaXRlZDErMCkGA1UEAxMiQ09NT0RPIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhv cml0eTAeFw0xMzAxMTAwMDAwMDBaFw0yODAxMDkyMzU5NTlaMIGXMQswCQYDVQQGEwJHQjEb MBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQK ExFDT01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJTQSBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAL6znlesKHZ1QBbHOAOY08YYdiFQ8yV5C0y1oNF9Olg+nKcxLqf2NHbZhGra0D00 SOTq9bus3/mxgUsg/Wh/eXQ0pnp8tZ8XZWAnlyKMpjL+qUByRjXCA6RQyDMqVaVUkbIr5SU0 RDX/kSsKwer3H1pT/HUrBN0X8sKtPTdGX8XAWt/VdMLBrZBlgvnkCos+KQWWCo63OTTqRvaq 8aWccm+KOMjTcE6s2mj6RkalweyDI7X+7U5lNo6jzC8RTXtVV4/Vwdax720YpMPJQaDaElmO upyTf1Qib+cpukNJnQmwygjD8m046DQkLnpXNCAGjuJy1F5NATksUsbfJAr7FLUCAwEAAaOC ATwwggE4MB8GA1UdIwQYMBaAFLuvfgI9+qbxPISOre44mOzZMjLUMB0GA1UdDgQWBBSCr2yM +MX+lmF86B89K3FIXsSLwDAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAR BgNVHSAECjAIMAYGBFUdIAAwTAYDVR0fBEUwQzBBoD+gPYY7aHR0cDovL2NybC5jb21vZG9j YS5jb20vQ09NT0RPUlNBQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwcQYIKwYBBQUHAQEE ZTBjMDsGCCsGAQUFBzAChi9odHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FBZGRU cnVzdENBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqG SIb3DQEBDAUAA4ICAQB4XLKBKDRPPO5fVs6fl1bsj6JrF/bz9kkIBtTYLzXN30D+03Hj6OxC DBEaIeNmsBhrJmuubvyE7HtoSmR809AgcYboW+rcTNZ/8u/Hv+GTrNI/AhqX2/kiQNxmgUPt /eJPs92Qclj0HnVyy9TnSvGkSDU7I5Px+TbO+88G4zipA2psZaWeEykgzClZlPz1FjTCkk77 ZXp5cQYYexE6zeeN4/0OqqoAloFrjAF4o50YJafX8mnahjp3I2Y2mkjhk0xQfhNqbzlLWPoT 3m7j7U26u7zg6swjOq8hITYc3/np5tM5aVyu6t99p17bTbY7+1RTWBviN9YJzK8HxzObXYWB f/L+VGOYNsQDTxAk0Hbvb1j6KjUhg7fO294F29QIhhmiNOr84JHoy+fNLpfvYc/Q9EtFOI5I SYgOxLk3nD/whbUe9rmEQXLp8MB933Ij474gwwCPUpwv9mj2PMnXoc7mbrS22XUSeTwxCTP9 bcmUdp4jmIoWfhQm7X9w/Zgddg+JZ/YnIHOwsGsaTUgj7fIvxqith7DoJC91WJ8Lce3CVJqb 1XWeKIJ84F7YLXZN0oa7TktYgDdmQVxYkZo1c5noaDKH9Oq9cbm/vOYRUM1cWcef20Wkyk5S /GFyyPJwG0fR1nRas3DqAf4cXxMiEKcff7PNa4M3RGTqH0pWR8p6EjGCBDgwggQ0AgEBMIGt MIGXMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQH EwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RP IFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIRAMYvHM7u QXwK18fimwrfKjYwDQYJYIZIAWUDBAIBBQCgggJbMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0B BwEwHAYJKoZIhvcNAQkFMQ8XDTE4MDgxMDE0MDgwMVowLwYJKoZIhvcNAQkEMSIEIPniXhKE 8JaAVP7uRHPEEAqniFUMPCKtgeQSp/UkiyQRMGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUD BAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgb4GCSsGAQQBgjcQBDGBsDCBrTCBlzEL MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2Fs Zm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0Eg Q2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQDGLxzO7kF8CtfH 4psK3yo2MIHABgsqhkiG9w0BCRACCzGBsKCBrTCBlzELMAkGA1UEBhMCR0IxGzAZBgNVBAgT EkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RP IENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9u IGFuZCBTZWN1cmUgRW1haWwgQ0ECEQDGLxzO7kF8CtfH4psK3yo2MA0GCSqGSIb3DQEBAQUA BIIBAChoxAM3F8ZzG641Lj3+beMsNeuBt1U9b1CMYR9cYAuNKvjT7v3/P20E9iXrkiPylyxd QjP6OLlojXmPPn9EXOS4SeZicSWiRJa+lFOhXyvXAa5k9AzyX/VaonFsrq3KwHK1RMZIYvSX 3FhttGzauWxoO4Y4raSIniKTf28K4lerjI0dTfRWQadxq/0xEbbvef7cokiEOjI7OAhmgyUR 2xFDqsdRBlPohDmLfWWI8E1IGK8glzl0KoVplgA3WNNb69C4JTRXAJUamxdoRPamatgfFroj HgmcGKhXrvtA4dbMhldxWwguHYe6tzxOSI69mBtd37ll75el4GihCREsCrsAAAAAAAA= --------------ms000207020502040008040600-- From owner-freebsd-questions@freebsd.org Fri Aug 10 14:35:50 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DD0C3106C77E for ; Fri, 10 Aug 2018 14:35:49 +0000 (UTC) (envelope-from estartu@ze.tum.de) Received: from mail.ze.tum.de (mail.ze.tum.de [IPv6:2001:4ca0:2e03::1:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.ze.tum.de", Issuer "Zertifizierungsstelle der TUM" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 55F6A8D457 for ; Fri, 10 Aug 2018 14:35:48 +0000 (UTC) (envelope-from estartu@ze.tum.de) Received: from [192.168.71.66] (ppp-93-104-177-22.dynamic.mnet-online.de [93.104.177.22]) (authenticated bits=0) by mail.ze.tum.de (8.15.2/8.15.2) with ESMTPSA id w7AEZiUm049311 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 10 Aug 2018 16:35:45 +0200 (CEST) (envelope-from estartu@ze.tum.de) X-Authentication-Warning: hades.ze.tum.de: Host ppp-93-104-177-22.dynamic.mnet-online.de [93.104.177.22] claimed to be [192.168.71.66] Subject: Re: No Extended Support Version right now? To: "Steve O'Hara-Smith" , freebsd-questions@freebsd.org References: <20180809124130.f0137d22f0634f289f0cf4c3@sohara.org> From: Gerhard Schmidt Openpgp: preference=signencrypt Autocrypt: addr=schmidt@ze.tum.de; prefer-encrypt=mutual; keydata= xsFNBFTtbnsBEACvr5ttOqLgbNfYsyObXlg3/FMYKxujqRgYx3EDJ6bkb1bl3KSkMSQDyvb/ P/T1hHNt/K6e2RxN6IgtCcLt4y8b6PW3i9XIK6/JBf1DCw3P+r7hKsW+R54d30hTHbIglQLc Q20EXX806LvXgZU/P6ny2jMikvd5B9IgrpxLUMrWB9jO2yJCvEYrKSFjGgRnl5kjz93Cp8+E 61Un9YdNDCoDA+M8bpOAy6H8rWHap+qIR+eHb0Tl5KwgFiEMty1uRvQrVtJHWM2EaaavlebC I/JZshy0CNOC8CXdYxbH4IhKCY6/bCWH2+hGaLpzULu9Zwh4SnTqOe4P773Mk5oUVFhLEhnK mQb/3VPGi5eA8FcRaSenNMjUa4nrD0nBUUSu9FZZEW0Pru1OVbvR00vhHKmwu0Q8XAJvhlxK JKcRlyq46Xkf5eBDS/I2Z/BY7XBmenLULSXOcAS1ChjAGocuuMEnNUx3xcVO5FIyhI241aOD ePGZcJddhIlnlFtMYF7vBgdHU0tnyjrbLjCMblnA+sXhXDYNCzI/rI1z7wKgUW2fuw1SmWTT TyeTCaXkLVqtTesIGMKgrD1kJ3zEysRpy3k4piOw7mJpyPjmBOgbZck4ck5pR2G49V2FDaa3 tpd6r3Xv9+pUX86M58PGJqnUyF5DuRaPPYf50T7Zfgy0+rsRzwARAQABzSNHZXJoYXJkIFNj aG1pZHQgPHNjaG1pZHRAemUudHVtLmRlPsLBegQTAQgAJAIbIwULCQgHAgYVCAkKCwIEFgID AQIeAQIXgAUCVO16iwIZAQAKCRB00kPMRXANo6/ID/9yu6YrkBib996NK6fRvu7PcnjINxi8 BSGknDoHsxxygWTetPTsH1ePDN5aIkSYWNcrUFyi1+Wx3phdEOgUSTaJc/59dhbixzArmZ+p B67M0y3LxO7tkBsbOAYglO5DgpCcol/wFat2bILlPCUfzYYqUmEog3gpRUss/bMCwhRQpk+J 7Bm/kyGZHhWg74p1WW5GUqRTbRqSBumXg/wnV81f8L38v2MyWO9eqz/L8PFGHvs+t50S0Z0Q 3mVu6ko+czzFNAPWcKduVeuoeKK6HXFuPRH8VUGwEZYBAjTLMjbEaNF/vmqsIF7dIFWHa79P ETpvYVY5Rreb4Jkx0Rrn8ddus/m7tTReHLFYLNRjSTL8BTWaG6DhEUzC2oFfXCDFw9HCeF/6 v9xH7YzvKtz2U8oYqHyE5UD7UBJ851b+LZF+nXnESuqW/OjVbf+0mGpKe5Xvs6PBTVPjttoR nkmEroaChj0eWIYsNq6JyKXM78JxZCRpPqmCzxXDUPBS9U3WqLJi5L798ZKNQIT2210tETIM pWHaF8rsYtYSB2QKTsrVAh9Hy18tMB4EhVH2G5sRVUlQ15gOBd87ues2qZdg5Wte3dFJzeTl s5cEdNf8t/yEnDWOO+grZJW1SrcbXHUNhadQq2qHOIY188g/emMRtrCXjU8AcQ8pQir1LIJq J8L+3s7BTQRU7W57ARAA3N2qMrRqGkq6Qhp/N8jcbQwmPTlcfd0s/BjsSsz2V4Ix5FGB5Xgz 3nAprPczKvEpJBkDCtdoNA+lUvxNRIurtottpdcPgjDk5zYjafMr65YgPMQAiuMHh0jGQsw4 n70v2zrNU/E8Thb7lxpKPAsHFYs98kP5cxX1V4+g71uo7lYEH3NXWVYFg65n3+qYsIAi2cAW eKRjD4ftZUOU55eG6VnJtQNtchjzJEPCwIDcPtz3toiPsz2zGNSbiPmp8TnGI94sdVhKUF4f 6S51s4N7BGLP2CYSdL0WoLSiXTenNpBVmlT3NZfv8qxcbXmNhqYw9E6F/Uvwn3i2ILHRCs2g Avf1fFICfCOf56dkQEhk1k1/05g9oZeDaMGrKBL/mEOzkJDOMB1/N2Yng0HJwfHuTqMxHfZ1 sinUbnRQ9KoR+RWTKLxq/X7uAi38fLum/FAZgyyOsXK7eoUuEIdf8X2eJWxZE99v0i5PfcDb xKEwzwqECybIT/3HK0eRF0qFx1Wq46jNUju8/lcSiLauCptWbZYdv9lpbZDTU+GvmxILuyv3 MwbF5FsEQunEooyq/grX+3etAO8cuCor4wPasrZXCfwNqjENPNnRuckzI94PEN3AQTZvFPUm Q7RVue0ejf5lc+Y20HrWpvCv2vxIjkMARxd8s2dNyfrdyNUs3xp+JiEAEQEAAcLBXwQYAQgA CQUCVO1uewIbDAAKCRB00kPMRXANo3nwD/98G+MfI3hNN3A8SGL/1VqZeVRNTSK/zzZ9NeoS 6Afq8fz7eq9e1E1XUYVU8hS6i+PEDM7XiI3rtt9V1T8H2cBa6O1tq9DwQODFa3l9d57o/X+V DOKM3Ug3u46DflBX06zkBBX1Ug9axDy8MlEEC2IbeBChBEnWjkM+jwdX8dg1t3cDwrWYVfwE FRtpMOQOERTqqtWd9xe/diiIpjqKmpkO9EOzMFVODH2uRaDSZ4dae5uhblMciP/RH9KqlJAJ I2yQ/KUrfp69QvRRB2S9cfL4ib3iaDAyhTSB00Ke7Wsm578L/sa5pmNKu+gB9qNWQeRAknPp /UeVzJzvcg09XmS7gIwtPB+axJbge4XtZddavrMwHpUGSQUBJLLBGO1Lt3/MkZmv9xvlmwbs iBnGnkNHgQYgSWPrkTqN/D00RWkmOWs4MuQ3XAF1+eKNT7Q/lWlCRwRSurb8m4ykafq3odU0 0TwbilyqzzlgS2DEldqrcTG0gM6mmClEqS6ba2L9VVQrRs8Bcbj9z3wHagBijY59ZvsPiVPv iGtRX1p2RPBmBQ+JzwHWzdjM2IVMGy/D2KMnpXwdOJGmE3Voj1UlGzpOjZYA83Tyzuz0eq4s 2jq9e/6dzT//btjh3Qd1arAgnwA/oXR4tmjTSvxivP4kiJtR20ky1KVqEGPVkgfJAGcOoQ== Message-ID: Date: Fri, 10 Aug 2018 16:35:44 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <20180809124130.f0137d22f0634f289f0cf4c3@sohara.org> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 14:35:50 -0000 Am 09.08.2018 um 13:41 schrieb Steve O'Hara-Smith: > On Thu, 9 Aug 2018 09:48:19 +0200 > Andrea Venturoli wrote: > >> Unfortunately it seems "extended support" is gone, so no further release >> (11.x or whatever) will be such. > > Given that 11 will last five years and it is likely that 11. > will come out well within that period I would say than N. is as LTS > as it gets. No it's not because you have to do minor updates roughly every year. Every update brings new features and changes in the system. So you have to go thru all the tests that a major update causes. There is just no ABI change so you don't have to recompile every installed software. LTS means that you don't have to do all the testing before installing updates because there should no changes in features or how the system does things, only security problems are fixed. Regards Estartu From owner-freebsd-questions@freebsd.org Fri Aug 10 15:05:57 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 338F3106D7B0 for ; Fri, 10 Aug 2018 15:05:57 +0000 (UTC) (envelope-from schmidt@ze.tum.de) Received: from mail.ze.tum.de (mail.ze.tum.de [IPv6:2001:4ca0:2e03::1:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.ze.tum.de", Issuer "Zertifizierungsstelle der TUM" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id ADE688EB43 for ; Fri, 10 Aug 2018 15:05:56 +0000 (UTC) (envelope-from schmidt@ze.tum.de) Received: from [192.168.71.66] (ppp-93-104-177-22.dynamic.mnet-online.de [93.104.177.22]) (authenticated bits=0) by mail.ze.tum.de (8.15.2/8.15.2) with ESMTPSA id w7AF5sgf051023 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 10 Aug 2018 17:05:55 +0200 (CEST) (envelope-from schmidt@ze.tum.de) X-Authentication-Warning: hades.ze.tum.de: Host ppp-93-104-177-22.dynamic.mnet-online.de [93.104.177.22] claimed to be [192.168.71.66] Subject: Re: No Extended Support Version right now? To: "Steve O'Hara-Smith" , freebsd-questions@freebsd.org References: <20180809124130.f0137d22f0634f289f0cf4c3@sohara.org> From: Gerhard Schmidt Openpgp: preference=signencrypt Autocrypt: addr=schmidt@ze.tum.de; prefer-encrypt=mutual; keydata= xsFNBFTtbnsBEACvr5ttOqLgbNfYsyObXlg3/FMYKxujqRgYx3EDJ6bkb1bl3KSkMSQDyvb/ P/T1hHNt/K6e2RxN6IgtCcLt4y8b6PW3i9XIK6/JBf1DCw3P+r7hKsW+R54d30hTHbIglQLc Q20EXX806LvXgZU/P6ny2jMikvd5B9IgrpxLUMrWB9jO2yJCvEYrKSFjGgRnl5kjz93Cp8+E 61Un9YdNDCoDA+M8bpOAy6H8rWHap+qIR+eHb0Tl5KwgFiEMty1uRvQrVtJHWM2EaaavlebC I/JZshy0CNOC8CXdYxbH4IhKCY6/bCWH2+hGaLpzULu9Zwh4SnTqOe4P773Mk5oUVFhLEhnK mQb/3VPGi5eA8FcRaSenNMjUa4nrD0nBUUSu9FZZEW0Pru1OVbvR00vhHKmwu0Q8XAJvhlxK JKcRlyq46Xkf5eBDS/I2Z/BY7XBmenLULSXOcAS1ChjAGocuuMEnNUx3xcVO5FIyhI241aOD ePGZcJddhIlnlFtMYF7vBgdHU0tnyjrbLjCMblnA+sXhXDYNCzI/rI1z7wKgUW2fuw1SmWTT TyeTCaXkLVqtTesIGMKgrD1kJ3zEysRpy3k4piOw7mJpyPjmBOgbZck4ck5pR2G49V2FDaa3 tpd6r3Xv9+pUX86M58PGJqnUyF5DuRaPPYf50T7Zfgy0+rsRzwARAQABzSNHZXJoYXJkIFNj aG1pZHQgPHNjaG1pZHRAemUudHVtLmRlPsLBegQTAQgAJAIbIwULCQgHAgYVCAkKCwIEFgID AQIeAQIXgAUCVO16iwIZAQAKCRB00kPMRXANo6/ID/9yu6YrkBib996NK6fRvu7PcnjINxi8 BSGknDoHsxxygWTetPTsH1ePDN5aIkSYWNcrUFyi1+Wx3phdEOgUSTaJc/59dhbixzArmZ+p B67M0y3LxO7tkBsbOAYglO5DgpCcol/wFat2bILlPCUfzYYqUmEog3gpRUss/bMCwhRQpk+J 7Bm/kyGZHhWg74p1WW5GUqRTbRqSBumXg/wnV81f8L38v2MyWO9eqz/L8PFGHvs+t50S0Z0Q 3mVu6ko+czzFNAPWcKduVeuoeKK6HXFuPRH8VUGwEZYBAjTLMjbEaNF/vmqsIF7dIFWHa79P ETpvYVY5Rreb4Jkx0Rrn8ddus/m7tTReHLFYLNRjSTL8BTWaG6DhEUzC2oFfXCDFw9HCeF/6 v9xH7YzvKtz2U8oYqHyE5UD7UBJ851b+LZF+nXnESuqW/OjVbf+0mGpKe5Xvs6PBTVPjttoR nkmEroaChj0eWIYsNq6JyKXM78JxZCRpPqmCzxXDUPBS9U3WqLJi5L798ZKNQIT2210tETIM pWHaF8rsYtYSB2QKTsrVAh9Hy18tMB4EhVH2G5sRVUlQ15gOBd87ues2qZdg5Wte3dFJzeTl s5cEdNf8t/yEnDWOO+grZJW1SrcbXHUNhadQq2qHOIY188g/emMRtrCXjU8AcQ8pQir1LIJq J8L+3s7BTQRU7W57ARAA3N2qMrRqGkq6Qhp/N8jcbQwmPTlcfd0s/BjsSsz2V4Ix5FGB5Xgz 3nAprPczKvEpJBkDCtdoNA+lUvxNRIurtottpdcPgjDk5zYjafMr65YgPMQAiuMHh0jGQsw4 n70v2zrNU/E8Thb7lxpKPAsHFYs98kP5cxX1V4+g71uo7lYEH3NXWVYFg65n3+qYsIAi2cAW eKRjD4ftZUOU55eG6VnJtQNtchjzJEPCwIDcPtz3toiPsz2zGNSbiPmp8TnGI94sdVhKUF4f 6S51s4N7BGLP2CYSdL0WoLSiXTenNpBVmlT3NZfv8qxcbXmNhqYw9E6F/Uvwn3i2ILHRCs2g Avf1fFICfCOf56dkQEhk1k1/05g9oZeDaMGrKBL/mEOzkJDOMB1/N2Yng0HJwfHuTqMxHfZ1 sinUbnRQ9KoR+RWTKLxq/X7uAi38fLum/FAZgyyOsXK7eoUuEIdf8X2eJWxZE99v0i5PfcDb xKEwzwqECybIT/3HK0eRF0qFx1Wq46jNUju8/lcSiLauCptWbZYdv9lpbZDTU+GvmxILuyv3 MwbF5FsEQunEooyq/grX+3etAO8cuCor4wPasrZXCfwNqjENPNnRuckzI94PEN3AQTZvFPUm Q7RVue0ejf5lc+Y20HrWpvCv2vxIjkMARxd8s2dNyfrdyNUs3xp+JiEAEQEAAcLBXwQYAQgA CQUCVO1uewIbDAAKCRB00kPMRXANo3nwD/98G+MfI3hNN3A8SGL/1VqZeVRNTSK/zzZ9NeoS 6Afq8fz7eq9e1E1XUYVU8hS6i+PEDM7XiI3rtt9V1T8H2cBa6O1tq9DwQODFa3l9d57o/X+V DOKM3Ug3u46DflBX06zkBBX1Ug9axDy8MlEEC2IbeBChBEnWjkM+jwdX8dg1t3cDwrWYVfwE FRtpMOQOERTqqtWd9xe/diiIpjqKmpkO9EOzMFVODH2uRaDSZ4dae5uhblMciP/RH9KqlJAJ I2yQ/KUrfp69QvRRB2S9cfL4ib3iaDAyhTSB00Ke7Wsm578L/sa5pmNKu+gB9qNWQeRAknPp /UeVzJzvcg09XmS7gIwtPB+axJbge4XtZddavrMwHpUGSQUBJLLBGO1Lt3/MkZmv9xvlmwbs iBnGnkNHgQYgSWPrkTqN/D00RWkmOWs4MuQ3XAF1+eKNT7Q/lWlCRwRSurb8m4ykafq3odU0 0TwbilyqzzlgS2DEldqrcTG0gM6mmClEqS6ba2L9VVQrRs8Bcbj9z3wHagBijY59ZvsPiVPv iGtRX1p2RPBmBQ+JzwHWzdjM2IVMGy/D2KMnpXwdOJGmE3Voj1UlGzpOjZYA83Tyzuz0eq4s 2jq9e/6dzT//btjh3Qd1arAgnwA/oXR4tmjTSvxivP4kiJtR20ky1KVqEGPVkgfJAGcOoQ== Message-ID: <483341c7-9494-8fbc-e981-5cc31c211d32@ze.tum.de> Date: Fri, 10 Aug 2018 17:05:51 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <20180809124130.f0137d22f0634f289f0cf4c3@sohara.org> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="5KxKSrZev5LGSu5BK7JUJFy5iQ9Eh7orX" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 15:05:57 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --5KxKSrZev5LGSu5BK7JUJFy5iQ9Eh7orX Content-Type: multipart/mixed; boundary="RC3gAJ4NZxk1MW1BPFr1Vgu4R4BGSvf2P"; protected-headers="v1" From: Gerhard Schmidt To: Steve O'Hara-Smith , freebsd-questions@freebsd.org Message-ID: <483341c7-9494-8fbc-e981-5cc31c211d32@ze.tum.de> Subject: Re: No Extended Support Version right now? References: <20180809124130.f0137d22f0634f289f0cf4c3@sohara.org> In-Reply-To: <20180809124130.f0137d22f0634f289f0cf4c3@sohara.org> --RC3gAJ4NZxk1MW1BPFr1Vgu4R4BGSvf2P Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Am 09.08.2018 um 13:41 schrieb Steve O'Hara-Smith: > On Thu, 9 Aug 2018 09:48:19 +0200 > Andrea Venturoli wrote: >=20 >> Unfortunately it seems "extended support" is gone, so no further relea= se=20 >> (11.x or whatever) will be such. >=20 > Given that 11 will last five years and it is likely that 11. > will come out well within that period I would say than N. is as L= TS > as it gets. Sorry didn't get what you tried to say. I don't see that 11. will be out that much before the 5 years are up. FreeBSD tends to do releases long after the next major is released. 10.4 got released 1 month after 11.1. Even if that will be so in the future right now we have the problem that we have to upgrade all systems currently running 10.4 to 11.2 and the ones already running 11.1 two because 11.2 is the only release out there with more then 3 month support. I never updated to a Version before least 2 Month (mostly I waited 3 Month) after the Release to be sure every minor issue was fixed. Now i have to go to mainly unproven releases just to stay supported for Security updates. Let's go to the future. FreeBSD does a new major release every 2 to 3 Years and does a minor release every year. Even if the don't do a minor after the new major is released, you have a maximum of 2 years on the last release. And at the end of that period the latest release of the new Major isn't there yet. So you have to update again to a release that only has roughly a year and 3 month of support left. I the past we updated mostly when the new extended support release was 3 to 6 month old. The new model gives no way of knowing if the version I'm updating to, will be supported for longer than 1 year. So nobody can do a serious resource planning other than planning an update every year. This raises the cost of using FreeBSD considerably. Regards Estartu --RC3gAJ4NZxk1MW1BPFr1Vgu4R4BGSvf2P-- --5KxKSrZev5LGSu5BK7JUJFy5iQ9Eh7orX Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEPVa8SM32TGPJTcIIdNJDzEVwDaMFAlttqdIACgkQdNJDzEVw DaP2Cg//WFe3q9MMv4/tkHYU7jEqld71Yscwatnfk5ADJhvG/WQlDxbDlBNkDug2 tV83u+mI+VEib7nseUHeDh2O0lo9PsRQ9IfpAqhO0/r4H4sdGHyDdE+J3TtXES2y oDBGyj/pf8AXtKVVBxygSReRocV4I744f9t8iVbWGDh+ZC4Qh1F7S2e7VGYq0RDD Rv/ewYe8ONwJnqqK1o1fQ2tXmjw4pudHqRYKg5y9YDy6+rjvhNWQdD+QYT+Wim9j AaviXM5GByLpO6ae13mFldcmDxIEOlw80bKxKBPfzufdcrCtY2cvbY3KNxwqjSmb x/rHu/juSHmAPGkitEAaP+YlzPwnOPM3+0kpYS8tXY3MNM+WlbX3sh/tsryr3/3M G/S4IgmcIAE8d6H9aaa5VoVQgRfbKTaA7tGIJ6TV8XjmaDbCjuPiaQXzGrG6N5oq CtV6iXRaJfLYhzmPDsmtSH2Pi0vm9miIqR3kKKlXfynYcknD2JddKTK5sBTl/erD MWT4jXjRWdYRDHxCi8gvHuPIquQ/286WwLaEoKUEPkVSBIrSIPOezIWNLt+KpFF8 vqEuO9SS/BpUGEalf3goIf27ipKzoqmU4XOFP1tGmT+FAZNw1XW2S0vmhN8bHT+l olX/HlGD5uYk2rnEfyhhe2i/FzWG+pbyDFbzmiDI6NBWco0GLBI= =lhFo -----END PGP SIGNATURE----- --5KxKSrZev5LGSu5BK7JUJFy5iQ9Eh7orX-- From owner-freebsd-questions@freebsd.org Fri Aug 10 15:11:07 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4869F106DA13 for ; Fri, 10 Aug 2018 15:11:07 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id EBAB28EE66 for ; Fri, 10 Aug 2018 15:11:06 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1533913867; x=1536505867; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:to:from:date:x-thread-info; bh=MZo6kgFsdDOH5WAhjsPorUE264JoBT/hk276Om6vGM4=; b=M0J8ubfInojx7HZ1PKlx/YWkyZ5cQk7p5Jtdr9pIQd4cTo4eLfwr+/ZA/hZy1WKBc0nzEzSGjXvDJssY1N6YQK6+eSrJsRvoMCjxUUKd/rI/0EaaXgeGSj2Ubvjn7MoPjxwhGmBq93TqAKAgP6mf8JIIs7ZaC3YWOrFsUue4F7Y= X-Thread-Info: NDI1MC4xMi4xOTUwMDAwMDE5OWUwYjQuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r2.us-east.aws.in.socketlabs.com (r2.us-east.aws.in.socketlabs.com [54.85.171.149]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Fri, 10 Aug 2018 11:10:55 -0400 Received: from smtp.lan.sohara.org (EMTPY [89.127.62.20]) by r2.us-east.aws.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Fri, 10 Aug 2018 11:10:55 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.91 (FreeBSD)) (envelope-from ) id 1fo942-000Jfs-Aa for freebsd-questions@freebsd.org; Fri, 10 Aug 2018 15:10:54 +0000 Date: Fri, 10 Aug 2018 16:10:55 +0100 From: Steve O'Hara-Smith To: freebsd-questions@freebsd.org Subject: Re: No Extended Support Version right now? Message-Id: <20180810161055.d2f3a29ada48aeb4b717450f@sohara.org> In-Reply-To: References: <20180809124130.f0137d22f0634f289f0cf4c3@sohara.org> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd11.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 15:11:07 -0000 On Fri, 10 Aug 2018 16:35:44 +0200 Gerhard Schmidt wrote: > Am 09.08.2018 um 13:41 schrieb Steve O'Hara-Smith: > > Given that 11 will last five years and it is likely that > > 11. will come out well within that period I would say than > > N. is as LTS as it gets. > > No it's not because you have to do minor updates roughly every year. s/it/FeeBSD/ in the last line to get my meaning. > LTS means that you don't have to do all the testing before installing > updates because there should no changes in features or how the system ________________________^^^^^^ Critical word that, not one I tend to trust to be honest. -- Steve O'Hara-Smith | Directable Mirror Arrays C:\>WIN | A better way to focus the sun The computer obeys and wins. | licences available see You lose and Bill collects. | http://www.sohara.org/ From owner-freebsd-questions@freebsd.org Fri Aug 10 15:24:27 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 26CD9106DF00 for ; Fri, 10 Aug 2018 15:24:27 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from kicp.uchicago.edu (kicp.uchicago.edu [128.135.20.70]) by mx1.freebsd.org (Postfix) with ESMTP id C14878F8E2 for ; Fri, 10 Aug 2018 15:24:26 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from point.uchicago.edu (point.uchicago.edu [128.135.52.6]) by kicp.uchicago.edu (Postfix) with ESMTP id 607BC7180EF for ; Fri, 10 Aug 2018 10:24:20 -0500 (CDT) Subject: Re: Erase memory on shutdown To: freebsd-questions@freebsd.org References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> From: Valeri Galtsev Message-ID: <915020aa-65ba-7b8c-8676-40e41dc77c0a@kicp.uchicago.edu> Date: Fri, 10 Aug 2018 10:24:19 -0500 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 15:24:27 -0000 On 08/10/18 09:08, cpghost wrote: > On 08/05/18 17:55, Valeri Galtsev wrote: >> Another route could be encryption of RAM on-the-fly while system runs, yet >> it is questionable where the encryption key itself is kept to be >> unaccessible for the attacker in the attack above, and boot of such system >> may require warm body present. > > What about SEV? > > https://developer.amd.com/amd-secure-memory-encryption-sme-amd-secure-encrypted-virtualization-sev/ > https://github.com/AMDESE/AMDSEV I personally am an opponent of the other processor in my machine that has almighty access to my machine, can access external hosts via the same physical network connection though not controllable by me, the sysadmin of the machine (or machine owner). It sounds to me that it is in the same general direction as Intel ME. Out of two bads I choose the lesser bad. Namely: the possibility of attack by the bad guy who has physical access to my machine is lesser bad than the possibility of attack through super-system which I have no way to modify, control, or turn off, that runs on another CPU, has control over my hardware that runs my system, and my system is a slave to that super-system. Do you think it is your machine? No, it is their machine (whoever they are). There is one (small?) company that tries to rid of all proprietary code and other means of control, thus giving the owner full possession of his hardware ("impregnable" for third parties, be it even the main CPU manufacturer): https://puri.sm/ https://puri.sm/posts/purism-librem-laptops-completely-disable-intel-management-engine/ They also implement open source coreboot instead of proprietary EFI or BIOS. And they do not have in their hardware anything that requires available as binary only "firmware" or "microcode". So, they use famous Atheros WiFi, but they never use working great but running proprietary firmware Intel WiFi. I'd like to hear if anyone knows about similar efforts by other computer manufacturers. Sorry, this went a bit off the original point (but not quite off of it). Valeri > >> Valeri > > -cpghost. > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Fri Aug 10 15:48:47 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E8FE7106E93E for ; Fri, 10 Aug 2018 15:48:46 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (mail8.networktest.com [IPv6:2607:f740:c::a13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 583557085A for ; Fri, 10 Aug 2018 15:48:46 +0000 (UTC) (envelope-from dnewman@networktest.com) Received: from mail8.networktest.com (localhost [127.0.0.1]) by mail8.networktest.com (Postfix) with ESMTP id 5B852618AF9 for ; Fri, 10 Aug 2018 08:48:41 -0700 (PDT) Authentication-Results: mail8.networktest.com (amavisd-new); dkim=pass (1024-bit key) reason="pass (just generated, assumed good)" header.d=networktest.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=networktest.com; h=content-transfer-encoding:content-language:content-type :content-type:in-reply-to:mime-version:user-agent:date:date :message-id:subject:subject:organization:from:from:references :to; s=dkim; t=1533916121; x=1534520922; bh=KQZOgcH9KxlQgLuDouK4 tbpRjUk2buLmUOVs6kIrVLI=; b=JiLj2Xzk7jU9WW5pzhgCIF84xWffFkO/buPM OAl40WvDkW9HIpLa1oK1fC6T7xQ1KAgdJCqTSX8pEkBO6iY5WHDmHVBVbs6Bt4zg 9zcAdNtDoX9CUiv59/Y9e+d1vIehxI1oEK1V31TJpha8IO+IxrQhvpdZcBjW9Uco aqN/Q3g= X-Virus-Scanned: amavisd-new at mail8.networktest.com Received: from mail8.networktest.com ([127.0.0.1]) by mail8.networktest.com (mail8.networktest.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id xwfuz88fVy51 for ; Fri, 10 Aug 2018 08:48:41 -0700 (PDT) Received: from tejay.local (unknown [IPv6:2605:e000:141f:6d4:c1c7:1b85:5cb8:17c]) by mail8.networktest.com (Postfix) with ESMTPSA id 93DDF61803B for ; Fri, 10 Aug 2018 08:48:39 -0700 (PDT) To: freebsd-questions@freebsd.org References: <7d12e2d7-e8e6-53d0-3c62-d3ca8868f9be@networktest.com> <20180808013151.sia5lgegjcxu2pr3@icepick.vmeta.jp> <3d2a1aa3-94de-e4e7-bb1d-a54ff7a92f94@networktest.com> <010101651cc2eaf1-3b1f8145-18bd-4665-bdf9-767470f85a3d-000000@us-west-2.amazonses.com> <0101016521032eb2-f262b8e9-b49d-4698-b7fa-b164846438d8-000000@us-west-2.amazonses.com> From: David Newman Openpgp: preference=signencrypt Autocrypt: addr=dnewman@networktest.com; prefer-encrypt=mutual; keydata= xsFNBFnmfMEBEACt5x64cZy4FPct3SaH44BMAYkghlJDxI11XpHUJNFAuJ8MD8WgF5F6Nc9C PCl7WzIHAwgWkM2ntAgcOeKvBiFTtzMfiIczfgIAkhiyANYAm3MIH4Li9X0NltYtROQ7FUn+ H4IWZ0SF/BZH1jfoLRNVvuLHdXVYrol/9sGlSI1KTpzpt3GIgeTxdOgTy0nO0HO7c0EBTnRv L3fyYs2E9XgmqsHlFqHBvF1OV0HjVJsqohQxb9iReZEL2UseTZYIYOhKizI3oJOnwPmf7zYg E4jzL422tHbbj4Qwh8l4kZDvy3J+S+KmqFD+IvOUbFBmHZKKB8oFZvLrjd7PLRs0ORSaseqA di0TEUAC3RpmybB1iuukvYhayeLV9afwXWFGNTqrAGCrGPR9umP7OeKGIm6SHrmGnqMlAAz6 qfVITcbhdne2JiqLaZ23B1ezTmJwPPbDGi7G6Yk3Z5pzuZBgq/L1ZyenUBmIcx95C1kVmUtl POJJ3RUNXqJLkjfZhGcmQczR2U0WoOuHVWCmztxa3yhkQETjKhmlIkBV6pj2Bc/mtynVBZg8 XclC6f4Q9bADDOiwO6uDbqI8Bpa1X8YY7iL8QJy2JHACT/j/+mji6Er8c+xU9qkxNmjc3E2a KpCg7gIqnWFj/Ag76AHkPkIo2SO2QINyRMgnFMQeS6j7ij7BOwARAQABzUtEYXZpZCBOZXdt YW4gKERhdmlkIE5ld21hbiBOZXR3b3JrIFRlc3Qgd29yayBrZXkpIDxkbmV3bWFuQG5ldHdv cmt0ZXN0LmNvbT7CwX8EEwEIACkFAlnmfMECGwMFCQeGH4AHCwkIBwMCAQYVCAIJCgsEFgID AQIeAQIXgAAKCRB8vD6mldfDUqfvD/4zARgEeKZqNrJWOK9YMkIah6C6dMohRH0Pz9AkMz9+ 9i9VhdZf2Pv0hq+IEGw+6ISQZL/xiNmq4l6rBioU+AAq98CZq8sh0VLSSeEqYDbo9anvSu2W j1MzhC0BKhlaFPgy08EYZlN2z4pbSvG/ARc0xfTiGlU2jA+iEiMNDbHveGEH1iwAXV3JGA9T bIpe/D5pVO2aemTsePf6+OiATE7M3crqKYZX7WMejqMbOuXzWbeCh/HoDnBBSFDIHR3lQfqR 6jwvb/NogoBioMx6I9vtXvwkqVgp4/jxgkK+I1X4BCdXvC1s3qnJQ9lQT3kFPCJBhQ3qcORv Lvx5svBtp9undPvvp+7SEOBIZDyAfAtSRvBHSv86Y8XnTSrseqk/XtcQbsHs7eVAYcg7F0dR gXFNFUMg67VgacXfyi2GrmkIvA3Zh8h39pZBiTiKfizMhn10gFPhHI6zndR5mYVO5sGUVMVt Mw4f0MDiKHmgFZcs/zcO89OSx3vRwAn5YfBdCagrX1VPYAgGxsfPhnUT8BjmqAFLbHHpb23n HUtfepMIeNaN76/PcxQJUInx/9MfceKL/XGJ8uThM3Ujdv8x6IS7mzEqSbMQTqVVi7loIfP3 qqP87k4Z6G7IMNXKk/Mg84kLTq7YD48pm9S1ME+ghd7wraX2tcbMycuZsrE4XfI8ic7BTQRZ 5nzBARAA9fYZMETrO0l7alXxUVxYxLYVWulKh3GBz9yAeSXSEIJ+q8f0WsDK5zPd6ndBzY2k pT2DJ/ND1NfZJlEo5o27eETQJkpIMV38ZINZz/gVThMIIpCHZeSMW3JveZYEB1xYLFLxeILI ECBAO/h0ASdRz0KYLJldWmuWBUd3tsxhOpK/lZ/s5wbFpstAzsAiw0sm2de4UpNpmGHc1x1j eJH4WBKIAUkZLDXUWEkN1aSVMGWH/2yH87x/J/Mjrj49T+6RwwUohSgOQV3q1XjGjqDq/tpN BPODp32z9GchIvmCU4cRF0uQKpUXtu0fpwnmc1W5M/1aVPQ33vgEFcS/brpWMf7xLIL9EGDp 4/4BukImG4wOx1L3GuKIw5XXNLA9uCriWXr7NSvI00AhXR7m/NbE9ZLIHKfTWssFf9hYnh3p x2n1E+Hy/okqDppfGynHUJjcl5UwP2v6lKO4VO8Gz6wdhl2sYU9pNT6/8Hfp9lnY0BTbFv5Y zZfD77NdCJoDwEd2FUgRzb4vqjwoswci8U73pcOCylbQbAEC5scy/Bd5BOoSIy0kGaQYqumA 3rGXzDn4B02xiYiraNIH28jZPmWzYGM/jncajRFYARZFh/K1OW8Wl3JILAlwZP4VO6ECDj3r qv9EwUv6gxsikXtCT0xjnHL/N5+UQBIQOrx7/TKb80MAEQEAAcLBZQQYAQgADwUCWeZ8wQIb DAUJB4YfgAAKCRB8vD6mldfDUvPlD/4rpb17nhmvSnAy+ShanY2p40M4kgo46Mwmvm3Dmug8 5P+ECRtmhTZ+kEU8Ici/u7FFvE1WHydeNCdE/tOaJ3qXMLBOd4SiB+sa21E0veqR28qUmymI Ti/gFhMpL2Cfa5oPQj5sq/fdEPJzpAoaHfxUMPIUZ7ebM96syazndEFJAFS9MO00/SJ/HcUx 8VMypzqoG+EyBs4c+PThNRyuUH5x8gh4uABILTYIwqUE4HESpRef9ETdJpBkWhsQqxo3Nvoa TLjZH0LNnMyZXOb/aUeQBm0TSGda+on+0BdI70QgI42mu6ovKup32eUhHh7C9scKv8NJYo1Z 4PqRQVIEPznCizZ90aBP1Ia0rJfcADzFNrOQru1WXmm+zXu/TYdESyoL5MRAlitEIs34oeJF X8wMgkHZBFVhvEm60ynH2HZQRLWGIVBnW7oJ2apTx10L2AZWZvLQ6P8pn4eZMPX3+f854d4Q D4yEhE9Ec7CTiqmo6A5+bHGi/yf8VzxMNorlyHCIFZZdfm5vctcg78iUfqsKyvAULpmjLKyA YkX0qv2EnCMUb9urwITWbQTySOVazfjOjRPUO1z5RbfGwCMwNdW8ahf94jtLaVbvVp+7F8dD Y81Qhcbc2MAOWzP1ghr+wsyAyvzVJuDS0kDh6XjpuZddSBEYAh+aI8Kcwqsr75INMg== Organization: Network Test Inc. Subject: Re: xrdp configuration and xfce4 Message-ID: Date: Fri, 10 Aug 2018 08:48:38 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <0101016521032eb2-f262b8e9-b49d-4698-b7fa-b164846438d8-000000@us-west-2.amazonses.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 15:48:47 -0000 On 8/9/18 4:26 PM, Koichiro IWAO wrote: >=20 >>> Again, in xrdp context, ~/.xinitrc or ~/.xsession doesn't affect. For= get >>> it and >>> see /usr/local/etc/xrdp/startwm.sh or ~/startwm.sh. >> >> Partial success! xfce4 now starts automatically with a local startwm.s= h >> file. >=20 > Which did you try? ~/startwm.sh?=20 Yes. xfce4 starts up with ~/startwm.sh in place, using the contents and permissions you described. > If you got success with ~/startwm.sh, > there might be a bug of xrdp. Some people reported similar issue to you= rs. OK. That is a separate issue, but a big one for me, as it makes remote management difficult. Where is the appropriate place to report the clipboard issue? > Let me break down the issue and help us improve xrdp before looking at > clipboard issue. >=20 > 1. remove ~/startwm.sh > 2. confirm /usr/local/etc/xrdp/startwm.sh starts startxfce4 > 3. login via xrdp > 4. you'll see xterm > 5. see /var/log/xrdp-sesman.log > 6. you'll see the log like this >=20 > [20180710-23:08:24] [CORE ] waiting for window manager (pid 41266) to e= xit > [20180710-23:08:24] [CORE ] error starting default wm for user meta - > pid 41266 > [20180710-23:08:25] [DEBUG] errno: 2, description: No such file or > directory > [20180710-23:08:25] [DEBUG] execlp3 parameter list: > [20180710-23:08:25] [DEBUG]=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 argv[0] =3D startwm.sh > [20180710-23:08:25] [DEBUG]=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 argv[1] =3D startwm.sh >=20 > If you see the log like this, xrdp is failing to find > /usr/local/etc/xrdp/startwm.sh. > If you specify the full path to startwm.sh in sesman.ini, it should > work. Try it. > Don't forget to restart xrdp-sesman after you edited sesman.ini. >=20 > ``` > DefaultWindowManager=3D/usr/local/etc/xrdp/startwm.sh > ``` >=20 > Thank you for your cooperation. Thank YOU, Iwao-san, for your help with this. The behavior is exactly as you described, but only if we replace the startwm.sh script supplied with the pkg with the two-line version you suggested: #!/bin/sh startxfce4 The startwm.sh script supplied with the package has three different cases for Linux distributions (lines 66-88) but nothing for xfce4 on FreeBSD. Thanks again for your help with the startup issue, and in advance for pointers on debugging the clipboard issue. dn From owner-freebsd-questions@freebsd.org Fri Aug 10 15:51:19 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4E0E5106EBF0 for ; Fri, 10 Aug 2018 15:51:19 +0000 (UTC) (envelope-from cpghost@cordula.ws) Received: from mail-wr1-x436.google.com (mail-wr1-x436.google.com [IPv6:2a00:1450:4864:20::436]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D596470ACA for ; Fri, 10 Aug 2018 15:51:18 +0000 (UTC) (envelope-from cpghost@cordula.ws) Received: by mail-wr1-x436.google.com with SMTP id h10-v6so8707555wre.6 for ; Fri, 10 Aug 2018 08:51:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cordula-ws.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=LkqC8oCCj6B0wSf0aW2ygdvyF0VBH+Vn0jexfDMgmYc=; b=ULZHVCIxxxTbefkuJSfuNyfByK3uAxrIsrtGLNE6L0Qds1yrYez+smC8mxJlbCtFZ9 zwY09LnsgMQHKxvkxdaxWDTd27Wg0ebxpzPxRbutsChRJZFNPNTv5zVfi7xCHGBjIb1N sPP+w0AgR0TbfpAk9M+XivIvrKhYgll63Zs191/l6jtaH441fQmZEMpl0IT0/irp2TrG 6F4Sh2AQ3C9NVO88Jz+wcBkFw+mxXEB/Jqgurh3ba33nfIeruMPLRK6cN9phfnkGaCw/ b6iDQbP/qzWFQ4G/tltZ1Cylbcbo+GoX7k4EZnB+z2gJ+L1SnhfPAcT0XVaT9gs6s2zF wBZQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=LkqC8oCCj6B0wSf0aW2ygdvyF0VBH+Vn0jexfDMgmYc=; b=Jvzesu7RE5Z50giyz/8jGHMCHRf7nYeJ52ah/q/lgd0VAx5j3H8Y+y1qWsI4Y13SJj e7a9iIf4Cf2rVWzsbqx9jQnQH+mV91OIK6OxBugOWyfO3i7znX0P5lKdghQqBJ15axKy rB/4d9vnbRr655t0rY1j+lv2deqFk/+QK/SDs7BJrkX57f3Le3tsy1q03sA1U5CKCNYd l7yfkaseeeNzJkAo+J4HfdmUs0cUqknA1+9xTqwGnAfmrxQsC3aPpBubLLjFkHjSBBRs ePKp8ZStymhkPM6iUkIxaamEgedZ8wl28foIFCO+zisMGApZm9P0Ku+dZkX1tmYjPXeE 1uxw== X-Gm-Message-State: AOUpUlHTKyHjF5t2P1FgFRyPuGbZ2CJ2Kbbu3FldPRKSXC84OINB4q7x Wt4cEIWgSzLnJvvjmo3VVelrSMDijY4= X-Google-Smtp-Source: AA+uWPxdkAliJeV8gSjCl8mb3Tj8uscZR4UnbuftGBYCrau6jW6acsYxidGVFQ2kuLpdCrGzfGx5LA== X-Received: by 2002:a5d:4b90:: with SMTP id b16-v6mr4510800wrt.168.1533916277429; Fri, 10 Aug 2018 08:51:17 -0700 (PDT) Received: from ?IPv6:2a02:908:960:c43e:2efd:a1ff:fe57:abb8? ([2a02:908:960:c43e:2efd:a1ff:fe57:abb8]) by smtp.gmail.com with ESMTPSA id b8-v6sm12638419wrw.22.2018.08.10.08.51.16 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 10 Aug 2018 08:51:16 -0700 (PDT) Subject: Re: Erase memory on shutdown To: freebsd-questions@freebsd.org References: <20180805150241.1E186200349F8E@ary.qy> <4e70e969-14f7-c65d-96d2-dd1610499cd0@irk.ru> <63033.108.68.162.197.1533484522.squirrel@cosmo.uchicago.edu> <915020aa-65ba-7b8c-8676-40e41dc77c0a@kicp.uchicago.edu> From: cpghost Message-ID: <28e094e6-d425-7367-4519-0ae72da54901@cordula.ws> Date: Fri, 10 Aug 2018 17:51:15 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <915020aa-65ba-7b8c-8676-40e41dc77c0a@kicp.uchicago.edu> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms060304070202020500010000" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 15:51:19 -0000 This is a cryptographically signed message in MIME format. --------------ms060304070202020500010000 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 08/10/18 17:24, Valeri Galtsev wrote: >=20 >=20 > On 08/10/18 09:08, cpghost wrote: >> On 08/05/18 17:55, Valeri Galtsev wrote: >>> Another route could be encryption of RAM on-the-fly while system runs= , yet >>> it is questionable where the encryption key itself is kept to be >>> unaccessible for the attacker in the attack above, and boot of such s= ystem >>> may require warm body present. >> >> What about SEV? >> >> https://developer.amd.com/amd-secure-memory-encryption-sme-amd-secure-= encrypted-virtualization-sev/ >> https://github.com/AMDESE/AMDSEV >=20 > I personally am an opponent of the other processor in my machine that h= as almighty access to my machine, can access external hosts via the same = physical network connection though not controllable by me, the sysadmin o= f the machine (or machine owner). It sounds to me that it is in the same = general direction as Intel ME. You're right. Basically, it's all about Trusting Trust[1], all over again= , but now on hardware/firmware. And what's worse: who can audit the crypto,= when done on a closed proprietary hardware design? But still, if we talk about encrypting memory, hardware-assists like thes= e where the (ephemeral) keys are kept in some hidden CPU registers that cle= ar much faster than (cold) DRAM/SRAM seems like a practical way to make cold boot attacks harder. [1] https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p761-thomps= on.pdf > Out of two bads I choose the lesser bad. Namely: the possibility of att= ack by the bad guy who has physical access to my machine is lesser bad th= an the possibility of attack through super-system which I have no way to = modify, control, or turn off, that runs on another CPU, has control over = my hardware that runs my system, and my system is a slave to that super-s= ystem. >=20 > Do you think it is your machine? No, it is their machine (whoever they = are). >=20 > There is one (small?) company that tries to rid of all proprietary code= and other means of control, thus giving the owner full possession of his= hardware ("impregnable" for third parties, be it even the main CPU manuf= acturer): >=20 > https://puri.sm/ > https://puri.sm/posts/purism-librem-laptops-completely-disable-intel-ma= nagement-engine/ >=20 > They also implement open source coreboot instead of proprietary EFI or = BIOS. And they do not have in their hardware anything that requires avail= able as binary only "firmware" or "microcode". So, they use famous Athero= s WiFi, but they never use working great but running proprietary firmware= Intel WiFi. Good to know. Thanks for the pointer! > I'd like to hear if anyone knows about similar efforts by other compute= r manufacturers. >=20 > Sorry, this went a bit off the original point (but not quite off of it)= =2E >=20 > Valeri -cpghost. --------------ms060304070202020500010000 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC Cx4wggUwMIIEGKADAgECAhEAxi8czu5BfArXx+KbCt8qNjANBgkqhkiG9w0BAQsFADCBlzEL MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2Fs Zm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0Eg Q2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwHhcNMTcxMjIwMDAw MDAwWhcNMTgxMjIwMjM1OTU5WjAjMSEwHwYJKoZIhvcNAQkBFhJjcGdob3N0QGNvcmR1bGEu d3MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuV3EBb8py/1yrTdT8cb8h5Ocl h5XDYOn2HNcGCENONWU7Rrz9X+suOufiGCwUzrj+ysDLzM/jfB8EQMFH+uZrt9hi1gb9QvXh jzHvHqrb0P6Bj/HV8VvWyywa+BbuHNxuvOHB+ECpQYs4/Itfyhr4F/08FhweUpP7W+NKK/m8 VvLyY3kT5T58DYN0AvxgN6LK0ejbKD44wOrjK4EwuZpRmKewuWi+VquqRS04vo6xVE+h2tqq BUmVv4q9S6fHnvDcDCg3Gs4NTc6eujsHK6O9SLcgKB3CkHm5mxMkqGWNvtLb9p3/y9A+/v3n 2GRE07mmRkeJ43ntSytkz5xCiYmpAgMBAAGjggHoMIIB5DAfBgNVHSMEGDAWgBSCr2yM+MX+ lmF86B89K3FIXsSLwDAdBgNVHQ4EFgQUJVBhgnBvX0Bb+4bCJ8KLFjYJ4powDgYDVR0PAQH/ BAQDAgWgMAwGA1UdEwEB/wQCMAAwIAYDVR0lBBkwFwYIKwYBBQUHAwQGCysGAQQBsjEBAwUC MBEGCWCGSAGG+EIBAQQEAwIFIDBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEBATArMCkGCCsG AQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBaBgNVHR8EUzBRME+gTaBL hklodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDbGllbnRBdXRoZW50aWNhdGlv bmFuZFNlY3VyZUVtYWlsQ0EuY3JsMIGLBggrBgEFBQcBAQR/MH0wVQYIKwYBBQUHMAKGSWh0 dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5k U2VjdXJlRW1haWxDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNv bTAdBgNVHREEFjAUgRJjcGdob3N0QGNvcmR1bGEud3MwDQYJKoZIhvcNAQELBQADggEBAAZ0 otdXgClU/ijwGvnOdARI7LVDD4pPg6BD1kTbMywUE6ti082zAvujveH4DkleGZaVByv1VHGV HAdB8S7P21bm2uGCxwJNdRGl2R8USNmE7OP0EXYlQLTXDQbpBBPoB8k5Tv8WGJfguxIrPpS6 L729xb5d75NoKFMYn8JHTlujcfYt5TZCir0tO5/B9BgfB01tokFQ814wpUWmXplnD+tfRLaJ OChKmyUnOi5qpBntd/PHpUDNFIUJy0QZ3sYt1PyW7ejhtMvGvI/cQLZdDOUXv432nu0dgy2K 8PDGRfhp/NZhW8He7ililwDIu4B229OfiKI3fpPCDtm+xz7V900wggXmMIIDzqADAgECAhBq m+E4O/8ra58B1dm4p1JWMA0GCSqGSIb3DQEBDAUAMIGFMQswCQYDVQQGEwJHQjEbMBkGA1UE CBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P RE8gQ0EgTGltaXRlZDErMCkGA1UEAxMiQ09NT0RPIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhv cml0eTAeFw0xMzAxMTAwMDAwMDBaFw0yODAxMDkyMzU5NTlaMIGXMQswCQYDVQQGEwJHQjEb MBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQK ExFDT01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJTQSBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAL6znlesKHZ1QBbHOAOY08YYdiFQ8yV5C0y1oNF9Olg+nKcxLqf2NHbZhGra0D00 SOTq9bus3/mxgUsg/Wh/eXQ0pnp8tZ8XZWAnlyKMpjL+qUByRjXCA6RQyDMqVaVUkbIr5SU0 RDX/kSsKwer3H1pT/HUrBN0X8sKtPTdGX8XAWt/VdMLBrZBlgvnkCos+KQWWCo63OTTqRvaq 8aWccm+KOMjTcE6s2mj6RkalweyDI7X+7U5lNo6jzC8RTXtVV4/Vwdax720YpMPJQaDaElmO upyTf1Qib+cpukNJnQmwygjD8m046DQkLnpXNCAGjuJy1F5NATksUsbfJAr7FLUCAwEAAaOC ATwwggE4MB8GA1UdIwQYMBaAFLuvfgI9+qbxPISOre44mOzZMjLUMB0GA1UdDgQWBBSCr2yM +MX+lmF86B89K3FIXsSLwDAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAR BgNVHSAECjAIMAYGBFUdIAAwTAYDVR0fBEUwQzBBoD+gPYY7aHR0cDovL2NybC5jb21vZG9j YS5jb20vQ09NT0RPUlNBQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwcQYIKwYBBQUHAQEE ZTBjMDsGCCsGAQUFBzAChi9odHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FBZGRU cnVzdENBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqG SIb3DQEBDAUAA4ICAQB4XLKBKDRPPO5fVs6fl1bsj6JrF/bz9kkIBtTYLzXN30D+03Hj6OxC DBEaIeNmsBhrJmuubvyE7HtoSmR809AgcYboW+rcTNZ/8u/Hv+GTrNI/AhqX2/kiQNxmgUPt /eJPs92Qclj0HnVyy9TnSvGkSDU7I5Px+TbO+88G4zipA2psZaWeEykgzClZlPz1FjTCkk77 ZXp5cQYYexE6zeeN4/0OqqoAloFrjAF4o50YJafX8mnahjp3I2Y2mkjhk0xQfhNqbzlLWPoT 3m7j7U26u7zg6swjOq8hITYc3/np5tM5aVyu6t99p17bTbY7+1RTWBviN9YJzK8HxzObXYWB f/L+VGOYNsQDTxAk0Hbvb1j6KjUhg7fO294F29QIhhmiNOr84JHoy+fNLpfvYc/Q9EtFOI5I SYgOxLk3nD/whbUe9rmEQXLp8MB933Ij474gwwCPUpwv9mj2PMnXoc7mbrS22XUSeTwxCTP9 bcmUdp4jmIoWfhQm7X9w/Zgddg+JZ/YnIHOwsGsaTUgj7fIvxqith7DoJC91WJ8Lce3CVJqb 1XWeKIJ84F7YLXZN0oa7TktYgDdmQVxYkZo1c5noaDKH9Oq9cbm/vOYRUM1cWcef20Wkyk5S /GFyyPJwG0fR1nRas3DqAf4cXxMiEKcff7PNa4M3RGTqH0pWR8p6EjGCBDgwggQ0AgEBMIGt MIGXMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQH EwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RP IFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIRAMYvHM7u QXwK18fimwrfKjYwDQYJYIZIAWUDBAIBBQCgggJbMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0B BwEwHAYJKoZIhvcNAQkFMQ8XDTE4MDgxMDE1NTExNVowLwYJKoZIhvcNAQkEMSIEIN9RiRwY sGEwqAayxb/npZQ9FyRHmcJVbMzjtgEMKR8vMGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUD BAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgb4GCSsGAQQBgjcQBDGBsDCBrTCBlzEL MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2Fs Zm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0Eg Q2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEQDGLxzO7kF8CtfH 4psK3yo2MIHABgsqhkiG9w0BCRACCzGBsKCBrTCBlzELMAkGA1UEBhMCR0IxGzAZBgNVBAgT EkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RP IENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9u IGFuZCBTZWN1cmUgRW1haWwgQ0ECEQDGLxzO7kF8CtfH4psK3yo2MA0GCSqGSIb3DQEBAQUA BIIBAERHDujyptctbu8+7o9lPXJZnru5tYFHvNXadkqwdaTu4c2p+AlE5qstrlVq22391sCN VmxISql86tL74bFtvGkgD475OBNvCVD2qJDy92DLseoU8gen021y8Kx/zr/w6PeTtjrRnpyd /8u2AKQ0M8h3BWioSPT486cy6BWDGNsCQjgF7XOWoffeZBa6nq0rqrAutqMnseqvboPO4WTO XHfdJlBjVicP7A8aE/3Tt1gLE5XttnOvOQ+Jk45gVoMXJxYhVLrNPQjD1vAJgN4zgp1viUf8 JgqtlNnZcVJG7k2aYQMMhkCAKftlAIbLO9AJE+hEPraJjHlXrgnepVCqw4gAAAAAAAA= --------------ms060304070202020500010000-- From owner-freebsd-questions@freebsd.org Fri Aug 10 17:11:04 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6CEDF10705D4 for ; Fri, 10 Aug 2018 17:11:04 +0000 (UTC) (envelope-from norman@astro.gla.ac.uk) Received: from smtp124.ord1d.emailsrvr.com (smtp124.ord1d.emailsrvr.com [184.106.54.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 167FC734AD for ; Fri, 10 Aug 2018 17:11:03 +0000 (UTC) (envelope-from norman@astro.gla.ac.uk) Received: from smtp16.relay.ord1d.emailsrvr.com (localhost [127.0.0.1]) by smtp16.relay.ord1d.emailsrvr.com (SMTP Server) with ESMTP id A5B874037D; Fri, 10 Aug 2018 13:10:57 -0400 (EDT) X-Auth-ID: astro@nxg.name Received: by smtp16.relay.ord1d.emailsrvr.com (Authenticated sender: astro-AT-nxg.name) with ESMTPSA id 42D374032B; Fri, 10 Aug 2018 13:10:57 -0400 (EDT) X-Sender-Id: astro@nxg.name Received: from [130.209.45.140] (ptolemy.astro.gla.ac.uk [130.209.45.140]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA256) by 0.0.0.0:25 (trex/5.7.12); Fri, 10 Aug 2018 13:10:58 -0400 From: "Norman Gray" To: freebsd-questions@freebsd.org Subject: Resolving package conflicts (pkg set -o?) Date: Fri, 10 Aug 2018 18:10:55 +0100 X-Mailer: MailMate (1.11.3r5509) Message-ID: <03EF2AAC-B928-4B82-BB14-3AF4C009E5E5@astro.gla.ac.uk> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 17:11:04 -0000 Greetings. When installing the 'ceph' package, I get an error: pkg: openldap-client-2.4.46 conflicts with openldap-sasl-client-2.4.46 (installs files into the same place). Problematic file: /usr/local/bin/ldapadd I'm not sure how best to resolve this. Can anyone offer advice? This happens because I've installed the openldap-sasl-client package in preference to openldap-client (or rather, the nss-pam-ldapd-sasl package installs the former rather than the latter). I take it that the two packages would be broadly equivalent in function from the point of view of dependencies. However I'm not sure what the real difference is between these two alternatives. One way of resolving this appears to be to use pkg set -o net/openldap24-client:net/openldap24-sasl-client, as mentioned in a UPDATING entry of 20121212 (I haven't tried this yet). However the pkg-set(8) manpage suggests this is deprecated, I can't find any way to reverse this if I mess up, and the discussion at suggests this is a rather desperate measure, in the sense that (I quote) 'there's no going back', and there seems to be no way to discover later what fixes have been applied. That is, this sounds highly breakable, and pretty clearly not TRTTD. Section 4 of the handbook doesn't seem to cover this situation. I can't think of where else to look. I (vaguely) imagine I could get round this by installing ceph's dependencies via pkg by hand, and then building net/ceph using portmaster. Though I see that that has an 'R-dep' on openldap-client, so that might just be a longer route to the same problem. I don't really want to build ceph from source. I doubt that'd be hard to do, but it'd be annoying to maintain (and hence errorprone). I can't be the first to have this type of problem, so I expect I'm missing something pretty obvious. Best wishes, Norman -- Norman Gray : https://nxg.me.uk SUPA School of Physics and Astronomy, University of Glasgow, UK From owner-freebsd-questions@freebsd.org Fri Aug 10 23:37:05 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9CF9D1078805 for ; Fri, 10 Aug 2018 23:37:05 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from mx6-out9.antispamcloud.com (mx6-out9.antispamcloud.com [95.211.2.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2A29B80F6C for ; Fri, 10 Aug 2018 23:37:05 +0000 (UTC) (envelope-from freebsd.ed.lists@sumeritec.com) Received: from [153.92.8.106] (helo=srv31.niagahoster.com) by mx62.antispamcloud.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1foGwF-0001ml-7k; Sat, 11 Aug 2018 01:36:57 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sumeritec.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:References:In-Reply-To:Message-ID:Subject:Cc:To:From:Date:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=UHGCq1aYFUzIjUvtgI4clH/X0sUekvl63djfIsyWa30=; b=QLaPEOUUmEaFoOkortBukeIOOO WIfQ/K9T+PGKx0+oaSiVXFyLRW9kD5ZOwJ8qsbJvA17ZGuEKNTFtz8bc1ZGsg4jL/tll8YwWolVhr bNas6DsMf6/4vfjxhefvKtS6unTNSpsvaN/DDcfZYdnSbpyOUd8qIPsSBr6pmTlfcwxaUjtls1ucV +va30TourM8wre9lvoxlbN8m5wgPVw2Y+Y4i/s9m52zpt9jcVDByJM8Mz0H+Lqvq7L/fcthJtldOx KT3SfAN096IF4HqOnN0izt+4+W63275pIu6FFPj6SQW8Nbn1ruQvQvakqapHFwQodSo/oVRPwa+F3 FytNkzfQ==; Received: from [182.1.80.97] (port=61628 helo=X220.sumeritec.com) by srv31.niagahoster.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.91) (envelope-from ) id 1foGvP-0006en-UG; Sat, 11 Aug 2018 06:34:36 +0700 Date: Sat, 11 Aug 2018 07:34:29 +0800 From: Erich Dollansky To: Gerhard Schmidt Cc: "Steve O'Hara-Smith" , freebsd-questions@freebsd.org Subject: Re: No Extended Support Version right now? Message-ID: <20180811073429.7b50843f.freebsd.ed.lists@sumeritec.com> In-Reply-To: <483341c7-9494-8fbc-e981-5cc31c211d32@ze.tum.de> References: <20180809124130.f0137d22f0634f289f0cf4c3@sohara.org> <483341c7-9494-8fbc-e981-5cc31c211d32@ze.tum.de> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-OutGoing-Spam-Status: No, score=-1.0 X-AuthUser: freebsd.ed.lists@sumeritec.com X-Originating-IP: 153.92.8.106 X-AntiSpamCloud-Domain: out.niagahoster.com X-AntiSpamCloud-Username: niaga Authentication-Results: antispamcloud.com; auth=pass (login) smtp.auth=niaga@out.niagahoster.com X-AntiSpamCloud-Outgoing-Class: unsure X-AntiSpamCloud-Outgoing-Evidence: Combined (0.29) X-Recommended-Action: accept X-Filter-ID: EX5BVjFpneJeBchSMxfU5tMvpWzb+YZdYdFI/HZYesx602E9L7XzfQH6nu9C/Fh9KJzpNe6xgvOx q3u0UDjvO/TArO60pRSVOCJOWtMqzv68lvR1NkUXiCIJqa9VvKG/YHFuMarv5rB8iql2fxX3i9WZ i5bIIYa9S0h67ZH5SXvViItGz8WIldSaT/oADI3u4pWx7WxWFZpsjT/483ewgu5JfusABNhIyJPP 5Nt4ch8Gwqpyck1l7B6H+O5wact/FHMPEyA05gafMZGwGiJNAwgts4D9rHMwYttlWJ53KUNFN1Mi Jvo7144GK03YqHgHibeRcXFPc8cqkLwvhK2OeezUrQIHG+qb7m6rsUJYqrkBWDoGJ+0yh69KXxwj Ya+s1lKjr5bPbebPOmRT2bIcf8x7BZzVdsrUJ1TjYZWWhhRIvwk+SzBXVEwrOfaE35eVP3PPkAMO qDnlk3PJ0+RlnD3dKxLhoxcmaInYbR5vlqHVuAvhr5K1q2gYP7Ih8AmzTAas0edmB2q/yBRqnQY9 Wn0gkfr9gZNk8zP+i4B7/fwZ8mt1cw3xO4d92gv79zMNfJSBBCR2DZDiEWpSuwB+0+idX4Ts4xdG +C13IyWeZaIKaP92kYvCAgLvXDsJxwwjJnDMxV9leNr3IsZL3Yw+2kXPNc+acx+HGV+RnVzxEWWC +kSmM4tAxl58TOfEEjNEmXruGWa7N54JSUca4pPHdIsEMysPur9wmiDBurOy6iQnq6cHsIo5mrxp ZRr/jz9JaPqx0+93Y7cegIgpCptvKW6/CrNEqgqUViIlzLTqPP6pUcxCvAvkUVYGicJRckdnOyPk zu19ii4PlCQnDEninnEYd4LuseiMLZi1UwuOxReRNkAEETzgfODJrA65N8kZxkjt5aFCBb9ryQ4X Nm74b3uaU7UD02FRg858AaX7/1YhEWyJzIkwSFAW0Pw8uiKeIhm2mdF3K9L2qvwKeZ05uGLGxMOp 3NjyUqIzeAEyy9F2yUFTDGqfxW5pcMNQcc53 X-Report-Abuse-To: spam@quarantine1.antispamcloud.com X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2018 23:37:05 -0000 Hi, On Fri, 10 Aug 2018 17:05:51 +0200 Gerhard Schmidt wrote: > Am 09.08.2018 um 13:41 schrieb Steve O'Hara-Smith: > > On Thu, 9 Aug 2018 09:48:19 +0200 > > Andrea Venturoli wrote: > > > >> Unfortunately it seems "extended support" is gone, so no further > >> release (11.x or whatever) will be such. > > > > Given that 11 will last five years and it is likely that > > 11. will come out well within that period I would say than > > N. is as LTS as it gets. > > Sorry didn't get what you tried to say. > > I don't see that 11. will be out that much before the 5 years > are up. FreeBSD tends to do releases long after the next major is > released. 10.4 got released 1 month after 11.1. > > Even if that will be so in the future right now we have the problem > that we have to upgrade all systems currently running 10.4 to 11.2 > and the ones already running 11.1 two because 11.2 is the only > release out there with more then 3 month support. > > I never updated to a Version before least 2 Month (mostly I waited 3 > Month) after the Release to be sure every minor issue was fixed. Now i > have to go to mainly unproven releases just to stay supported for > Security updates. we try to skip the odd releases. It works some how. Like 10 is near its end but 12 is not out yet. So, running 10 a bit longer or adapting 12 a bit earlier will be our solution. > > Let's go to the future. FreeBSD does a new major release every 2 to 3 > Years and does a minor release every year. Even if the don't do a > minor after the new major is released, you have a maximum of 2 years > on the last release. And at the end of that period the latest release > of the new Major isn't there yet. So you have to update again to a > release that only has roughly a year and 3 month of support left. > > I the past we updated mostly when the new extended support release > was 3 to 6 month old. The new model gives no way of knowing if the > version I'm updating to, will be supported for longer than 1 year. So > nobody can do a serious resource planning other than planning an > update every year. This raises the cost of using FreeBSD considerably. Things nobody thinks here about. Erich From owner-freebsd-questions@freebsd.org Sat Aug 11 10:55:54 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E71151066EE9 for ; Sat, 11 Aug 2018 10:55:53 +0000 (UTC) (envelope-from dialesmana47@gmail.com) Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 72F0C76674 for ; Sat, 11 Aug 2018 10:55:53 +0000 (UTC) (envelope-from dialesmana47@gmail.com) Received: by mail-io0-x22a.google.com with SMTP id z19-v6so9970141ioh.4 for ; Sat, 11 Aug 2018 03:55:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=eXx8DBL/yKjAP5U/8q53F3NDLKQevFGx2D2JMoPD6dI=; b=CdiqOBgSQbWLbpKy+DMmIturAiSaRJHb765CA9PErxv9K3bO8Etu5SJ+OU2LjW4loW y3Ze70lVadW7O+/8IYoyoWf5SufYtekEiTTsyrJoj4C260hEW8qAh33cCXV6BbImvYAf QAoFLblg+p69WFSF70nerC/yhhw0iTz8f8PwLCjLknK5hODcs4zqIvJEoxBERRFUVP9w jRJ+PQ2ZHQScKRMqTdwZ33jNbtbYvEZbtscvB2oxXElF7rrlsrFyXWT+h5ugRWuOFMQ2 x/58huTWdhytYdSrkmqt5X3LlDfT91GuMavFDSwaQnsm0e89m2FiM+Jrn4QFNZfzxU6J WhcQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=eXx8DBL/yKjAP5U/8q53F3NDLKQevFGx2D2JMoPD6dI=; b=eQtk4xjUhpPOp7ogM0dXz48GGh8LG3vS4lAQ3lRcJl4aMSFKmuH7AMvys22ENpt7wu 5xP/4LcLj2zWeIymJT+mxR9xKEOYNKTluORtgLqCuofUdMlEVcnhIUsiWIoaD4pCy1+b S7MtTn3Ikf7ADMhCDLX9mjenje4he0mWRGJZ0T05ndtwWlrT0KrzjXUGuZv/JCcRoHxe hWg4onvrsy1P9HmC5q86aUYJtxzauPn2XSgdPiFWNceADB5eCSlo0QG7tATBjE5jRQWf b7twPaEb85Yjz/jA1lKIhTPhnmLAVVJ4EAK9OGCTO6twd5/bE0zu/dDr8ORuSCxEWfet tMlQ== X-Gm-Message-State: AOUpUlFdQYVLRAwoH34H1vkfxlzYEfzuJ5mJSMT5ya1fG0J7IHBt5sYj xwZmo9Pyb5KIXd1RnhSms3AmsV3MxZmmZho812UxWA== X-Google-Smtp-Source: AA+uWPxNuA9YHR2YBq52Aam0aKo1PUZuNiGjzxQ9CGOqsU7eKL846HkVcAuQUVHuUV9VFS7b0BH6cKAMl83XBd4tIvg= X-Received: by 2002:a6b:c3c4:: with SMTP id t187-v6mr8260137iof.304.1533984952915; Sat, 11 Aug 2018 03:55:52 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a6b:ec01:0:0:0:0:0 with HTTP; Sat, 11 Aug 2018 03:55:52 -0700 (PDT) Received: by 2002:a6b:ec01:0:0:0:0:0 with HTTP; Sat, 11 Aug 2018 03:55:52 -0700 (PDT) From: MINE GAMING Date: Sat, 11 Aug 2018 03:55:52 -0700 Message-ID: Subject: To: freebsd-questions@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.27 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Aug 2018 10:55:54 -0000 dialesmana47@gmail.com