Re: FreeBSD and DELL Perc H200

2011-04-20 Thread Simon L. B. Nielsen

On 19 Apr 2011, at 22:16, Holger Kipp wrote:

> I have to install two production servers from Dell that come with a Perc H 
> 200 controller.
> 
> Disks are not recognized with 8.2-RELEASE :-(

AFAIK Perc H 200 should be supported by mps(4) which wasn't merged to stable/8 
until after 8.2.

> Any ideas? If this works with 8-stable, where can I download an ISO Image?


Unfortunately the latest official snapshots were before the driver was merged.  
You could try first just to boot on the curent / FreeBSD 9 snapshots and see if 
it sees your disks at all.

You can get the snapshot from 
ftp://ftp.freebsd.org/pub/FreeBSD/snapshots/201102/ .

I don't think there are any other snapshot services still running... so 
(assuming mps(4) actually works with H200) you need to make a build of stable/8 
yourself - the simplest approach is probably to PXE boot the servers and 
install by hand... but that's of course not a trivial thing if you never tried 
it before.

I suspect there will be new official snapshots at some point, but I don't know 
when...

-- 
Simon L. B. Nielsen

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


svn.FreeBSD.org upgrade

2011-04-23 Thread Simon L . B . Nielsen
Hey,

Just FYI, I'm in the process of updating svn.FreeBSD.org to latest FreeBSD 
stable/8.

The base system is now upgraded, but now I need to recompile ports so to avoid 
any interesting mixups while that happens I will disable svn access until all 
ports have been recompiled.

I had forgotten it was running FreeBSD 7 so the process will take longer than 
expected, otherwise I would have sent a mail earlier.

PS. The viewvc svn interface is running separately so you can point your 
browser at http://svnweb.FreeBSD.org/base/ while I upgrade if you need to 
browse some history etc.

PPS. this now means that one of the last system having it's FreeBSD base source 
controlled by CVS is switched to using SVN...

-- 
Simon L. B. Nielsen
Hat: FreeBSD.org admins

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: svn.FreeBSD.org upgrade

2011-04-23 Thread Simon L. B. Nielsen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

- -BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On 23 Apr 2011, at 17:43, Simon L. B. Nielsen wrote:

> Just FYI, I'm in the process of updating svn.FreeBSD.org to latest FreeBSD 
> stable/8.

Hey,

Everything should be working again now.

For committers, note that the upgrade to FreeBSD 8 means the RSA ssh keys are 
now presented by default.

This should be the fingerprints:

1024 8d:35:fb:99:ec:66:01:f3:5a:0d:f4:06:17:58:d2:0f svn.freebsd.org DSA
2048 56:bc:da:e8:c0:40:31:0b:a9:b2:2d:6b:19:24:3b:2c svn.freebsd.org RSA

See also: http://www.freebsd.org/internal/ssh-keys.asc

- - -- 
Simon L. B. Nielsen
Hat: FreeBSD.org admins team




- -BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAk2zGm0ACgkQBJx0gP90kKu/7QCeK2i9lt8BDpPtvmWq/PRaRs69
/5oAn3AoR0Ln3ODVRItr/ojCGRgoWPZq
=mazb
- -END PGP SIGNATURE-
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAk2zGoEACgkQBJx0gP90kKs0HACaA18czONZFWOc+GXocr/2yMT6
hrkAnA8o1jF/JVipTsTPLZagozIgcWQe
=PRiN
-END PGP SIGNATURE-
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


FreeBSD mail was down for a few hours

2011-05-19 Thread Simon L. B. Nielsen
Hey,

Just FYI, the RAID controller on mx1.FreeBSD.org decided to take a break (IE, 
firmware crashed) so that all inbound mail, and much internal mail too, was not 
delivered for around 4.5 hours.

I think mx1 was one of the hosts which have not had RAID firmware etc. updated 
so it's likely the problem has already been fixed, but I will look into that 
when I have some spare time.

Everything should be working again and all queued mail delivered.

PS. this mail is primarily sent to stable@ so non-committers can also get the 
information.

-- 
Simon L. B. Nielsen
Hat: FreeBSD.org admins team



PGP.sig
Description: This is a digitally signed message part


Re: FreeBSD mail was down for a few hours

2011-05-19 Thread Simon L. B. Nielsen

On 19 May 2011, at 12:28, Jeremy Chadwick wrote:

> On Thu, May 19, 2011 at 11:55:57AM +0200, Simon L. B. Nielsen wrote:
>> Hey,
>> 
>> Just FYI, the RAID controller on mx1.FreeBSD.org decided to take a break 
>> (IE, firmware crashed) so that all inbound mail, and much internal mail too, 
>> was not delivered for around 4.5 hours.
>> 
>> I think mx1 was one of the hosts which have not had RAID firmware etc. 
>> updated so it's likely the problem has already been fixed, but I will look 
>> into that when I have some spare time.
> 
> I'm curious -- what brand of RAID controller and what driver on FreeBSD?
> Not that I have any solutions, just curious about what's in use.

Hey,

The server is a Dell PowerEdge 2950 with a PERC 5/i RAID controller (IE. really 
LSI MegaRAID) using the mfi(4) driver.

Many of the other primary FreeBSD.org systems are running on similar hardware.

At some point I will get around to updating our machine webpage again :-)

For mx1 the machine page is actually correct: 
http://www.freebsd.org/internal/machines.html

-- 
Simon L. B. Nielsen

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


svn2cvs fixed again

2011-12-29 Thread Simon L. B. Nielsen
Hey,

svn2cvs has been fixed and is catching up now. Mirrors should be fully up to 
date within a couple of hours (depending on their sync schedule).

-- 
Simon L. B. Nielsen

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


svn2cvs replication down for the moment

2010-11-04 Thread Simon L. B. Nielsen
Hey,

The FreeBSD svn2cvs exporter is currently down and won't be fixed until tonight 
CET at the earliest. This basically mean that until that is fixed, any change 
in svn (IE, src/) won't be available via CVS or CVSup.

A change yesterday morning "replaced" an entire directory, which svn2cvs don't 
know how to deal with.
As it's an entire directory I can't just use our usual hack and ignore the 
delete part as that will leave files in the directory in CVS which wasn't 
supposed to be there.

As that not a quick thing to do I won't be able to fix it before getting home 
from work.

-- 
Simon L. B. Nielsen
Hat: FreeBSD.org cluster admins team

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: svn2cvs replication down for the moment

2010-11-04 Thread Simon L. B. Nielsen

On 4 Nov 2010, at 09:55, Simon L. B. Nielsen wrote:

> The FreeBSD svn2cvs exporter is currently down and won't be fixed until 
> tonight CET at the earliest. This basically mean that until that is fixed, 
> any change in svn (IE, src/) won't be available via CVS or CVSup.
> 
> A change yesterday morning "replaced" an entire directory, which svn2cvs 
> don't know how to deal with.
> As it's an entire directory I can't just use our usual hack and ignore the 
> delete part as that will leave files in the directory in CVS which wasn't 
> supposed to be there.

After some handholding (and 'evil' direct cvs commit) cvs2svn is now running 
again.

-- 
Simon L. B. Nielsen
Hat: FreeBSD.org cluster admins team

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: FreeBSD 9.1-RC1 Available...

2012-08-23 Thread Simon L. B. Nielsen

On 23 Aug 2012, at 20:41, Peter Wemm  wrote:
>>> On Thu, 23 Aug 2012 00:50:46 -0400, Ken Smith wrote:
>>> 
>>>> With both the doc and ports repositories now moved to SVN it has been
>>>> decided to not export the 9.1 release branch activity to CVS.  So
>>>> csup/cvsup update mechanisms are not available for updating to 9.1-RC1.
>>>> If you would like to use SVN the branch to use is releng/9.1.
> * RIght now you can mirror
> svn://svn.freebsd.org/base/{stable/9,release/9.1*,etc} to your laptop,
> and Simon is setting up a US-east coast and US-west coast mirror.  You
> can easily switch your mirrors on the fly if there's a closer/faster
> one.

Real world got in the way, but they should be ready by Friday or Saturday, and 
will be documented in the Handbook.

On a side note, the svn part of one mirror had to be re-created a few days ago 
as svnsync gets very unhappy if you pull the power while it's running (we had a 
PSU die). There seem to be a fair chance your local repository gets corrupted 
enough in that case that svn just gives up. Not that it's a big problem, but is 
a bit annoying.

We (clusteradm) are working on getting an EU mirror up, but no timeframe yet.

> You can do your own personal svnsync all the way from rev 0, but it
> takes some time.  It's more time efficient to start with a seed and
> let it catch up.

And if people are wondering, some time is really some time. The original ports 
mirror took ~24h to create - and that was over the LAN. Don't do that yourself 
unless you feel like doing a latency test of your internet connection :-).

-- 
Simon L. B. Nielsen

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: FreeBSD 9.1-RC1 Available...

2012-08-25 Thread Simon L. B. Nielsen
[Removing re@]

On 25 Aug 2012, at 10:33, Harald Schmalzbauer  wrote:

> schrieb Peter Wemm am 24.08.2012 00:14 (localtime):
>> ...
>> You'll also find out very quickly how much fsync(2) hurts on a softdep
>> or su+j system.  The svn fsfs backend does a fsync multiple times per
>> revision to guarantee its transaction boundaries.
> 
> Not only on softdep ufs, also with zfs I'm seeing big performance
> regressions (checkout ports from one zfs holding svnsynced repo to
> another on the same pool takes hours with svn, while completed in less
> than half an hour with csup)
> But my real problem is that svn is not in the base system. And for
> example installing subversion package on my cvsup mirror failed because
> pkg-config-0-25_1 was installed and sqlite, a dependency of subversion,
> wants to install pkgconf-0.8.5. So I'm hit by the henn-egg problem. I
> hope I can build subversion (sqlite) with pkg-config-0 dependency, but
> right now I still have to wait for this awful slow svn checkout (svn co
> file:///svn/repos/mirror/ports/head /usr/ports/)
> 
> Can someone share any sensible tuning for svn and zfs?
> 
> Is it possible to build any svn compatible (checkout-only-capable)
> binary without that much dependencies? If so, I hope this will be in the
> base very soon.

If you are going to do checkouts from svn:// only you can disable Neon which 
should reduce the dependency chain some. I haven't found svn checkouts to be 
too slow most of the time, but of course I'm generally using systems with 
hardware RAID controller which likely helps some.

PS. I don't think you should expect svn in base - it has too many dependencies, 
options, and is too fast moving to sanely be in the base system.

-- 
Simon L. B. Nielsen

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: FreeBSD 9.1-RC1 Available...

2012-08-25 Thread Simon L. B. Nielsen

On 23 Aug 2012, at 22:52, "Simon L. B. Nielsen"  wrote:

> 
> On 23 Aug 2012, at 20:41, Peter Wemm  wrote:
>>>> On Thu, 23 Aug 2012 00:50:46 -0400, Ken Smith wrote:
>>>> 
>>>>> With both the doc and ports repositories now moved to SVN it has been
>>>>> decided to not export the 9.1 release branch activity to CVS.  So
>>>>> csup/cvsup update mechanisms are not available for updating to 9.1-RC1.
>>>>> If you would like to use SVN the branch to use is releng/9.1.
>> * RIght now you can mirror
>> svn://svn.freebsd.org/base/{stable/9,release/9.1*,etc} to your laptop,
>> and Simon is setting up a US-east coast and US-west coast mirror.  You
>> can easily switch your mirrors on the fly if there's a closer/faster
>> one.
> 
> Real world got in the way, but they should be ready by Friday or Saturday, 
> and will be documented in the Handbook.

Mirrors are now running and documented: 
http://www.freebsd.org/doc/en/books/handbook/mirrors-svn.html

I'm still doing some final tweaks so there might be some shorter outages over 
the weekend, but it should be < 1m issues.

PS. also, if anyone are access http://svn.FreeBSD.org/ you are in fact now 
using svn0.us-west.FreeBSD.org, to avoid having to run apache on the main svn 
server, so - you might as well use the mirror directly and avoid going through 
netcat...

-- 
Simon L. B. Nielsen
Hat: FreeBSD.org admins team

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


GNATS now available via rsync

2012-12-23 Thread Simon L. B. Nielsen
Hey,

The GNATS database can now be mirrored using rsync from:

  rsync://bit0.us-west.freebsd.org/FreeBSD-bit/gnats/

I expect that URL to be permanent, at least while GNATS is still
alive. At a later point there will be more mirrors (a us-east will be
the first) and I will find a place to publish the mirror list.

On a side note, GNATS changes aren't mirrored to the old CVSup system
right now, as cvsupd broke on FreeBSD 10.0, which the hosts running
GNATS is running. There is no current plans from clusteradm@'s side to
fix this now that an alternative way to get GNATS exists and cvsup is
deprecated long term anyway.

-- 
Simon L. B. Nielsen
Hat: clusteradm@
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


FreeBSD wiki offline for a bit

2013-01-04 Thread Simon L. B. Nielsen
Hey,

Due to a security issue in the moinmoin wiki software, the FreeBSD
wiki will be offline for a bit. I do not yet know if the issue
actually has been exploited in the FreeBSD wiki (haven't had the time
yet to examine it), but I took the wiki down just in case.

Note that even if the software was compromised, it was considered
untrusted from the start and as such heavily sandboxed (including
jailed) to keep it away from any sensitive FreeBSD.org parts, so there
is absolutely no reason to believe a compromise would go any further
than the wiki itself.

I hope to have the wiki back within 24 hours, assuming not too much
gets in the way.

For further reference see: http://moinmo.in/SecurityFixes and
http://permalink.gmane.org/gmane.linux.debian.devel.announce/1754 .

PS. this is entirely unrelated to the 2012 November FreeBSD.org compromise.

-- 
Simon L. B. Nielsen
Hat: FreeBSD clusteradm / FreeBSD Security Officer
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: FreeBSD wiki offline for a bit

2013-01-06 Thread Simon L. B. Nielsen
Hey,

tl;dr Wiki is back, and everybody with account need to reset their password.

On 4 January 2013 22:38, Simon L. B. Nielsen  wrote:
> Due to a security issue in the moinmoin wiki software, the FreeBSD
> wiki will be offline for a bit. I do not yet know if the issue
> actually has been exploited in the FreeBSD wiki (haven't had the time
> yet to examine it), but I took the wiki down just in case.
>
> Note that even if the software was compromised, it was considered
> untrusted from the start and as such heavily sandboxed (including
> jailed) to keep it away from any sensitive FreeBSD.org parts, so there
> is absolutely no reason to believe a compromise would go any further
> than the wiki itself.
>
> I hope to have the wiki back within 24 hours, assuming not too much
> gets in the way.
>
> For further reference see: http://moinmo.in/SecurityFixes and
> http://permalink.gmane.org/gmane.linux.debian.devel.announce/1754 .
>
> PS. this is entirely unrelated to the 2012 November FreeBSD.org compromise.

The wiki is back now.

Looking at logs it there were people attempting to exploit this back
in July but I do not think they actually succeeded. It seemed to
mostly automated bot and not a target attempt.

The wiki has been reinstalled from scratch and users and pages were
copied. As I did a very selective copy it's entirely possible I made
the wiki unhappy, so let me know if you see issues.

Just to be extra safe I have reset all password, so everybody will
need need to use the standard account recovery process to set a new
password.

On a side note we have ~23000 user accounts and had 26000 empty pages
mostly caused by spammers, so someone(tm) will likely need to find a
way to change how we handle wiki user accounts to fix this.

PS. only reason I could see that they tried back in July was that I
found out I had forgotten to set up log rotation, so the wiki logfile
was over 3GB :-). (It was the internal log file which doesn't contain
user IP's so privacy part isn't really an issue.)

-- 
Simon L. B. Nielsen
Hat: clusteradm
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: FreeBSD wiki offline for a bit

2013-01-08 Thread Simon L. B. Nielsen
On 6 January 2013 20:40, Simon L. B. Nielsen  wrote:
> Hey,
>
> tl;dr Wiki is back, and everybody with account need to reset their password.

Small followup. The wiki's surge protection (yet again) got confused
and blocked the frontend proxy. I think it should be fixed now.

If you see any 'varnish guru meditation' please let me know, and
include the XID number so I can trace it in the logs.

-- 
Simon L. B. Nielsen
Hat: clusteradm
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"