Re: zfs native encryption best practices on RELENG13

2021-04-24 Thread Andrea Venturoli

On 4/23/21 11:23 PM, Xin Li via freebsd-stable wrote:


I think loader do not support the native OpenZFS encryption yet.
However, you can encrypt non-essential datasets on a boot pool (that is,
if com.datto:encryption is "active" AND the bootfs dataset is not
encrypted, you can still boot from it).


This is what my tests showed too (on 12.2 with OpenZFS from ports).

This is in contrast to what is written here:
https://openzfs.github.io/openzfs-docs/Getting%20Started/FreeBSD.html

Can we get that page corrected?

 bye & Thanks
av.
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


FreeBSD 13.0 terrible performance in KVM

2021-04-24 Thread dashdruid via freebsd-stable
Hello List,

I hope some other folks out there running FreeBSD on KVM as well. I set up a 
base VM while doing so I noticed that the disk operations are very slow. Many 
times I edit a file in vim or try to run a command there is a huge lag.

I use UFS as the root filesystem. To have something to compare it with I have 
tested it against an OpenBSD 6.6 VM on the same host, same hardware. both have 
1 vCPU and 1GB of ram, 20GB virtual disk (they are exactly on the same physical 
disk no raid or anything to have a fair comparison).

Here is an example simple file search time for a non-existent file:

FreeBSD 13

time find / -name cacert.pem

real 0m30.656s
user 0m0.516s
sys 0m3.938s

Second run even worse

real 2m38.618s
user 0m0.711s
sys 0m6.882s

While on the OpenBSD VM I get

time find / -name cacert.pem

real 0m2.258s
user 0m0.290s
sys 0m1.970s

The amount of data is about the same on both systems but I would not consider 
this a "slight" performance degradation. If the base system is so slow then 
imagine putting Apache and other servers on top of it. Did anyone run into this?

Unless there is a definitive solution I will opt out to using other BSD 
variants.
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: FreeBSD 13.0 terrible performance in KVM

2021-04-24 Thread Rainer Duffner


> Am 24.04.2021 um 11:25 schrieb dashdruid via freebsd-stable 
> :
> 
> Hello List,
> 
> I hope some other folks out there running FreeBSD on KVM as well. I set up a 
> base VM while doing so I noticed that the disk operations are very slow. Many 
> times I edit a file in vim or try to run a command there is a huge lag.



It’s a huge and common problem that has been going on for years.
I also had the same problem with XenServer.

You can search bugzilla for „KVM“ bugs, as well as the forums.


Apparently, it was mostly fixed for VMWare, but fixing for KVM is apparently 
very difficult. Even more so as there are many different versions of KVM around 
that all behave differently, depending on how you configure the virtual 
hardware (of which there are endless variations and permutations on how you 
attach with virtual devices to which virtual PCI-bus etc.pp.).
It’s also likely fixed on AWS (but I do not use that, so I hardly care).

E.g. when I created a KVM VM on my local workstation at work, it performed 
identically (more or less) to e.g. a CentOS VM.

However, if I create a VM on our on-premise Openstack cloud, it achieves maybe 
10% or 20% of the disk-IO-speed of a CentOS VM with the same volume type.

There’s some work going on in some differentials, but I haven’t had the time to 
try.

The problem is IMHO that most of the paid developers (for FreeBSD) these days 
either use it on bare metal (hello Netflix, EMC, Netapp, Netgate et.al.) or use 
it inside VMWare, where the main pain-points seem to have been fixed. Or they 
even use FreeBSD’s own hypervisor (bhyve).

It’s a tragedy IMO and it totally rules out FreeBSD here around for almost all 
future use-cases (that are almost certainly moving to Openstack in the future).



___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: FreeBSD 13.0 terrible performance in KVM

2021-04-24 Thread Bane Ivosev via freebsd-stable
We have over 50 FreeBSD VM on KVM for years, several Proxmox (5x,6x) and 
Centos (6.x,7.x) servers, and never experienced performance problem like 
this.


Your example on fresh new 13 VM:

# time -p find / -name cacert.pem
real 0.28
user 0.00
sys 0.13

12.2 our syslog server:

# time -p find / -name cacert.pem
real 4.12
user 0.21
sys 3.77


Our hardware are Supermicro, IBM and Fujitsu servers with Xeon CPU-s, 
some with HW raid, others with ZFS as datastore, previous we had several 
IBM x3650 ...


Everything was ok. No big difference between Linux and FreeBSD guests. 
We use Linux as guests only if we have to.

___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: FreeBSD 13.0 terrible performance in KVM

2021-04-24 Thread Rob Belics
> I hope some other folks out there running FreeBSD on KVM as well. I set
up a base VM while doing so I noticed that the disk operations are very
slow. Many times I edit a file in vim or try to run a command there is a
huge lag.

I noticed this on Ramnode--my VPS--and tech support there has told me it is
due to their container set up with Docker(?). They made some adjustments
and then it worked fine.
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: FreeBSD 13.0 terrible performance in KVM

2021-04-24 Thread Jeff Love
I'm running 12.2 and 13.0 on KVM using virtio and zfs. I am not having 
disk I/O issues.


Jeff Love

On 4/24/21 5:25 AM, dashdruid via freebsd-stable wrote:

Hello List,

I hope some other folks out there running FreeBSD on KVM as well. I set up a 
base VM while doing so I noticed that the disk operations are very slow. Many 
times I edit a file in vim or try to run a command there is a huge lag.

I use UFS as the root filesystem. To have something to compare it with I have 
tested it against an OpenBSD 6.6 VM on the same host, same hardware. both have 
1 vCPU and 1GB of ram, 20GB virtual disk (they are exactly on the same physical 
disk no raid or anything to have a fair comparison).

Here is an example simple file search time for a non-existent file:

FreeBSD 13

time find / -name cacert.pem

real 0m30.656s
user 0m0.516s
sys 0m3.938s

Second run even worse

real 2m38.618s
user 0m0.711s
sys 0m6.882s

While on the OpenBSD VM I get

time find / -name cacert.pem

real 0m2.258s
user 0m0.290s
sys 0m1.970s

The amount of data is about the same on both systems but I would not consider this a 
"slight" performance degradation. If the base system is so slow then imagine 
putting Apache and other servers on top of it. Did anyone run into this?

Unless there is a definitive solution I will opt out to using other BSD 
variants.
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


FreeBSD 13.0 terrible performance in KVM

2021-04-24 Thread Rob Belics
> I hope some other folks out there running FreeBSD on KVM as well. I set up a 
> base VM while doing so I noticed that the disk operations are very slow. Many 
> times I edit a file in vim or try to run a command there is a huge lag.

I noticed this on Ramnode--my VPS--and tech support there has told me it is due 
to their container set up with Docker(?). They made some adjustments and then 
it worked fine.

Rob
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Despite the documentation, "etcupdate extract" handles -D destdir (and its contribution to the default workdir)

2021-04-24 Thread Mark Millard via freebsd-stable
# etcupdate -?
Illegal option -?

usage: etcupdate [-npBF] [-d workdir] [-r | -s source | -t tarball]
 [-A patterns] [-D destdir] [-I patterns] [-L logfile]
 [-M options]
   etcupdate build [-B] [-d workdir] [-s source] [-L logfile] [-M options]
 
   etcupdate diff [-d workdir] [-D destdir] [-I patterns] [-L logfile]
   etcupdate extract [-B] [-d workdir] [-s source | -t tarball] [-L logfile]
 [-M options]
   etcupdate resolve [-p] [-d workdir] [-D destdir] [-L logfile]
   etcupdate status [-d workdir] [-D destdir]

The "etcupdate extract" material does not show -D destdir as valid.


# man etcupdate
. . .
SYNOPSIS
 etcupdate [-npBF] [-d workdir] [-r | -s source | -t tarball]
   [-A patterns] [-D destdir] [-I patterns] [-L logfile]
   [-M options]
 etcupdate build [-B] [-d workdir] [-s source] [-L logfile] [-M options]
   tarball
 etcupdate diff [-d workdir] [-D destdir] [-I patterns] [-L logfile]
 etcupdate extract [-B] [-d workdir] [-s source | -t tarball] [-L logfile]
   [-M options]
 etcupdate resolve [-p] [-d workdir] [-D destdir] [-L logfile]
 etcupdate status [-d workdir] [-D destdir]
. . .

Again the "etcupdate extract" material does not show -D destdir as valid.

But I used it:

# etcupdate extract -D usr/obj/DESTDIRs/13_0R-CA7-for-chroot

and it created and filled in the workdir:

/usr/obj/DESTDIRs/13_0R-CA7-for-chroot/var/db/etcupdate/


I have not checked on if "etcupdate build" has a similar issue
vs. not.

===
Mark Millard
marklmi at yahoo.com
( dsl-only.net went
away in early 2018-Mar)

___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


iPhone tethering not working

2021-04-24 Thread 宋立杰 via freebsd-stable

I tried to connect my iPhone SE2 (iOS 13.7) to FreeBSD 12.2-stable. After 
loaded the kernel module if_ipheth, I connected my phone.
> ugen0.2:  at usbus0

Then I typed usbconfig -u 0 -a 2 set_config 3
> ipeth0 on uhub6
> Ipeth0:  on usbus0
Then I chose to trust the computer, but nothing happened. My computer still 
can’t get to the internet.

This is ifconfig ue0 output:

> ue0: flags=8843 metric 0 mtu 1500
> ether 
> nd6 options=29

I tried dhclient ue0, but got no reply from iPhone. What can I do?
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"