It is my understanding, that using the NONE cypher is not identical to using
“the old tools” (rsh/rlogin/rcp).
When ssh uses the NONE cypher, credentials and authorization are still
encrypted and verified. Only the actual data payload is not encrypted.
Perhaps similar level of security could be
> On 14.12.2015 г., at 17:35, Brad Davis wrote:
>
>
> Or just use pkg-static. :)
>
I always wondered, why pkg is not static ONLY. That eliminates the chicken/egg
dilemma.
Yes, you eliminate the friendly reminder that your system is out of sync with
the FreeBSD package building platforms,
> On 17.02.2016 г., at 15:40, Shawn Webb wrote:
>
> TL;DR: FreeBSD is not affected by CVE-2015-7547.
Unless you use Linux applications under emulation.
Daniel
signature.asc
Description: Message signed with OpenPGP using GPGMail
> On 1.03.2016 г., at 5:45, Sergey Manucharian wrote:
>
> Excerpts from Andrey Chernov's message from Tue 01-Mar-16 05:47:
>> On 01.03.2016 2:23, Baptiste Daroussin wrote:
>>>
>>> I can properly generate almost any of the said locales/encodings but a few
>>> that
>>> I would like to remove (pr
> On 19.04.2016 г., at 5:01, Roger Marquis wrote:
>
> Honestly, some of us are wondering what exactly is
> behind some of these concerns regarding base packages.
>
Not taking a side on this discussion, yet… but the first thing that occurred to
me is that such way of packaging is traditional f
> On 12.07.2016 г., at 12:12, Matthew Seaman wrote:
>
> I'm also curious as to how far these regulations are supposed to extend.
> Presumably traffic which is merely transiting Russian territory isn't
> covered, at least in a practical sense. How about people from Russia
> accessing foreign web
> On 12.07.2016 г., at 13:26, Franco Fichtner wrote:
>
>
>> On 12 Jul 2016, at 11:59 AM, Daniel Kalchev wrote:
>>
>> It is trivial to play MTIM with this protocol and in fact, there are
>> commercially available “solutions” for “securing one’s corporate n
It looks like your httpd server is doing a redirect to your internal IP
address, which it thinks is it’s ServerName. Don’t think NAT has anything to do
with it.
Daniel
> On 29.09.2016 г., at 15:47, O. Hartmann wrote:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
>
> Despite other
I never use the pre-built ISO images for tasks like this. Here is a script I
use to build my own USB boot drive. The drive contains the full OS to boot and
also a copy used to create a new system. I make these boot drives from time to
time, to stay current. Please note the script is few years ol
If you still have not found it, I have two Supermicro blades with these, one to
be upgraded with 6127 these days…
Daniel
> On 27.03.2017 г., at 16:11, Andriy Gapon wrote:
>
> On 27/03/2017 15:06, Piotr Kubaj wrote:
>> Does it have to be specifically 61xx series? I have a server running 2
>>
On 06.10.11 14:07, Ivan Voras wrote:
Um, you do realize this is a "physical" problem with metadata location
and cannot be solved in any meaningful way? Geom_label stores its label
in the last sector of the device, and GPT stores the "secondary" /
backup table also at the end of the device. The
On 06.10.11 15:36, Ivan Voras wrote:
On 06/10/2011 13:29, Daniel Kalchev wrote:
On 06.10.11 14:07, Ivan Voras wrote:
Um, you do realize this is a "physical" problem with metadata location
and cannot be solved in any meaningful way? Geom_label stores its label
in the last sec
On 06.10.11 17:04, Pieter de Goeje wrote:
The layering *is* correct and you *can* create a GPT inside a glabel
label, but then
1) you get device names like /dev/label/somethingp1,
/dev/label/somethingp2, etc.
.. and, you overwrite the last sector of the device, not of the
provider. This is in
On 07.10.11 22:44, Lev Serebryakov wrote:
Hello, Perryh.
You wrote 7 октября 2011 г., 18:06:38:
GPT (and MBR) metadata placement is dictated from outside world,
where is no GEOM and geom_label. They INTENDED to be used on DISKS.
BIOSes should be able to find it :)
Certainly GPT and MBR mu
On Oct 8, 2011, at 12:05 , Lev Serebryakov wrote:
> Hello, Ivan.
> You wrote 8 октября 2011 г., 0:23:14:
>
>> If you think this should be explicitely handled, please file a PR
>> which requests the modification of gpart so that it detects that a GPT
>> is being created in anything other than a r
Has this issue been resolved somehow? Sane method to build gptzfsboot
that will run on HP's P410i?
Daniel
___
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-c
On 13.10.11 00:33, Christoph Hoffmann wrote:
I am inclined to think that this is related to the way how we compile this code,
especially when run on the following particular processor:
1 Processor(s) detected, 4 total cores enabled, Hyperthreading is enabled
Proc 1: Intel(R) Xeon(R) CPU E5630
On Dec 5, 2011, at 9:27 PM, Luigi Rizzo wrote:
> - have two machines connected by a 10G link
> - on one run "nuttcp -S"
> - on the other one run "nuttcp -t -T 5 -w 128 -v the.other.ip"
>
Any particular tuning of FreeBSD?
Daniel
___
freebsd-current@f
Here is what I get, with an existing install, no tuning other than
kern.ipc.nmbclusters=512000
Pair of Supermicro blades:
FreeBSD 8.2-STABLE #0: Wed Sep 28 11:23:59 EEST 2011
CPU: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz (2403.58-MHz
K8-class CPU)
real memory = 51539607552 (49152 MB)
On 06.12.11 13:18, Daniel Kalchev wrote:
[...]
second blade:
# nuttcp -t -T 5 -w 128 -v 10.2.101.13
nuttcp-t: v6.1.2: socket
nuttcp-t: buflen=65536, nstream=1, port=5001 tcp -> 10.2.101.13
nuttcp-t: time limit = 5.00 seconds
nuttcp-t: connect to 10.2.101.13 with mss=1448, RTT=0.164 ms
nut
Some tests with updated FreeBSD to 8-stable as of today, compared with
the previous run
On 06.12.11 13:18, Daniel Kalchev wrote:
FreeBSD 8.2-STABLE #0: Wed Sep 28 11:23:59 EEST 2011
CPU: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz (2403.58-MHz
K8-class CPU)
real memory = 51539607552
I see significant difference between number of interrupts on the Intel and the
AMD blades. When performing a test between the Intel and AMD blades, the Intel
blade generates 20,000-35,000 interrupts, while the AMD blade generates under
1,000 interrupts.
There is no longer throttling, but the pe
On Dec 7, 2011, at 8:08 PM, Luigi Rizzo wrote:
> Summary:
>
> - with default interrupt mitigation, the fastest configuration
> is with checksums enabled on both sender and receiver, lro
> enabled on the receiver. This gets about 8.0 Gbit/s
I do not observe this. With defaults:
# nuttcp -t -T
On 07.12.11 22:23, Luigi Rizzo wrote:
Sorry, forgot to mention that the above is with TSO DISABLED
(which is not the default). TSO seems to have a very bad
interaction with HWCSUM and non-zero mitigation.
I have this on both sender and receiver
# ifconfig ix1
ix1: flags=8843 metric 0 mtu 15
On Dec 15, 2011, at 3:48 PM, Jeremy Chadwick wrote:
[…]
> That said: thrown out, data ignored, done.
>
> Now what? Where are we? We're right back where we were a day or two
> ago; meaning no closer to solving the dilemma reported by users and
> SCHED_ULE. Heck, we're not even sure if there is
On Dec 15, 2011, at 3:25 PM, Stefan Esser wrote:
> Am 15.12.2011 11:10, schrieb Michael Larabel:
>> No, the same hardware was used for each OS.
>>
>> In terms of the software, the stock software stack for each OS was used.
>
> Just curious: Why did you choose ZFS on FreeBSD, while UFS2 (with
>
I have already canceled few replies to this thread, but...
On 19.12.11 15:16, Alexander Yerenkow wrote:
IMHO, no offence, as always.
I feel obliged to include the same disclaimer :-)
As were told, Phoronix used "default" setup, not tuned.
Not really. They created some weird test environmen
I have observed similar behavior, even more extreme on a spool with dedup
enabled. Is dedup enabled on this spool?
Might be that the DDT tables somehow end up unevenly distributed to disks. My
observation was on a 6 disk raidz2.
Daniel___
freebsd-curr
On Dec 19, 2011, at 11:00 PM, Stefan Esser wrote:
> Am 19.12.2011 19:03, schrieb Daniel Kalchev:
>> I have observed similar behavior, even more extreme on a spool with dedup
>> enabled. Is dedup enabled on this spool?
>
> Thank you for the report!
>
> Well, I had de
On Dec 19, 2011, at 11:53 PM, Dan Nelson wrote:
>
> Since it looks like the algorithm ends up creating two half-cold parity
> disks instead of one cold disk, I bet a 3-disk RAIDZ would exhibit even
> worse balancing, and a 5-disk set would be more even.
There were some experiments a year or two
On 20.12.11 11:42, Garrett Cooper wrote:
As long as I have reliable checksums that match the what the upstream
source says is the real thing, it doesn't practically matter where I
get my images from.
Relying on checksums that are published on the same web site where you
download the files f
On 21.12.11 23:49, Johan Hendriks wrote:
I my opinion, you benchmark the latest release of Linux, FreeBSD,
Solaris, Windows and whatever OS you want to compare!
There is no 'general benchmark' as there is not one single tasks that
all computers are used for.
If you want to benchmark so
On 22.12.11 00:33, Igor Mozolevsky wrote:
Using the same argument one can say that Ferrari F430 vs Toyota Prius
is a meaningless comparison because the under-the-hood equipment is
different.
Of course, it is meaningless, the Ferrari will lose big time in the
fuel consumption comparison! I
On 22.12.11 11:02, Johan Hendriks wrote:
Stefan Esser schreef:
Am 21.12.2011 22:49, schrieb Johan Hendriks:
If you tune up FreeBSD to use the GCC 4.7 compiler, or downgrade linux
to 4.2.1, then that will tell me nothing about FreeBSD vs Linux.
The gcc version distributed with FreeBSD was cho
On 22.12.11 11:56, Igor Mozolevsky wrote:
On 22 December 2011 05:54, Daniel Kalchev wrote:
Of course, it is meaningless, the Ferrari will lose big time in the fuel
consumption comparison! I believe it will also lose the price comparison as
well. Not to speak the availability comparison
On 22.12.11 12:50, Igor Mozolevsky wrote:
On 22 December 2011 10:12, Daniel Kalchev wrote:
As for how fast to get from point A to point B. If you observe speed limits,
that will depend only on the pilot, no? :)
Both cars are sufficiently faster than the imposed speed limits.
You are
On 23.12.11 03:17, O. Hartmann wrote:
Or even look at the thread regarding to SCHED_ULE. Why has a user,
experiencing really worse performance with SCHED_ULE, in a nearly
scientific manner some engineer the fault? I'd expect the developer or
care-taking engineer taking care in a more user fri
On 23.12.11 08:47, Martin Sugioarto wrote:
A further thing is that I cannot understand the people here sometimes.
I would like that the -RELEASE versions of FreeBSD perform well
without any further optimizations.
The -RELEASE things is just a freeze (or, let's say tested freeze) of
the corr
On 23.12.11 12:48, O. Hartmann wrote:
Look at Steve Kargls problem. He investigated a SCHED_ULE problem in a
way that is far beyond enough! He gave tests, insights of his setup,
bad performance compared to SCHED_4BSD and what happend? We are still
stuck with this problem and more and more peo
On 23.12.11 16:47, Martin Sugioarto wrote:
I thought that the "D" in FreeBSD stands for "distribution". Yes, it's
ok that it compiles with LLVM. Does it also run faster in benchmarks?
It does. From a language perspective. It is a "distribution", because at
the times BSD was developed, it wa
On 29.12.11 14:19, O. Hartmann wrote:
Am 12/29/11 12:59, schrieb Kostik Belousov:
On Thu, Dec 29, 2011 at 12:19:40PM +0100, O. Hartmann wrote:
[...]
/usr/bin/ld: lapi.o: relocation R_X86_64_32 against `luaO_nilobject_'
can not be used when making a shared object; recompile with -fPIC
lapi.o:
On Jan 4, 2013, at 4:06 PM, Fleuriot Damien wrote:
>
> And network cards:
> # Up a bit our intel cards parameters
> hw.em.txd=4096
> hw.em.rxd=4096
> hw.em.tx_int_delay=512
> hw.em.rx_int_delay=512
> hw.em.tx_abs_int_delay=1024
> hw.em.rx_abs_int_delay=1024
>
I am curious why we need to manua
On 21.02.13 15:04, Mehmet Erol Sanliturk wrote:
Dear All ,
During development of FreeBSD , testing is very vital .
To my knowledge ( which may not be correct ) , at present ,
Tinderbox is used to only compilation correctness ,
means "Syntax" is tested .
I have downloaded
ftp://ftp.freebsd.o
On 27.02.13 12:23, Daniel Nebdal wrote:
I think you're supposed to be automatically sent to the mirror that is
closest to you - for some value of "closest". If the mirror you're
getting has issues, that might show up like this. Could you post the
output of "traceroute ftp.freebsd.org" ? It shou
On 27.02.13 15:13, Fbsd8 wrote:
Mark Felder wrote:
On Wed, 27 Feb 2013 06:52:29 -0600, wrote:
Well I am in cleveland ohio usa and I have noticed that
http://www.freebsd.org/handbook/ is slow or in most cases just
times out. So this is bigger problem that some mirror being down in
turkey.
I had few troubles compiling OpenOffice, until closer inspection, that revealed
I had forgotten to remove the redirection of libs to gcc4.6 in /etc/libmap.conf
-- left from my experiments to like it for compiling ports… (with the pipe
dream software will run faster)
After cleaning my system of
On 03.06.12 23:55, O. Hartmann wrote:
On 06/03/12 15:29, Erich wrote:
yes, you miss a very simple thing. Updated this morning your ports tree. Your
client asks for something for Monday morning for which you need now a program
which needs some kind of PNG but you did not install it.
... I sp
On 06.06.12 05:31, Erich wrote:
On 05 June 2012 10:55:57 Chris Rees wrote:
It is absolutely a bad idea for "beginners" to be using tagged/dated
ports trees-- they are not supported and will lead to many complaints
about problems that were solved since the tag.
How do they fall back when thing
On 06.06.12 05:35, Erich wrote:
Warning: Be very careful to specify any tag= fields correctly. Some tags are
valid only for certain collections of files. If you specify an incorrect or
misspelled tag, CVSup will delete files which you probably do not want deleted.
In particular, use only tag
On 07.06.12 02:09, Erich wrote:
Those "minor" issues are, having the recent mess in front of my eyes, a
simple "negative exaggeration". What is that "price worth", if the
system is faulting and rendered useless or partially useless?
just do what was recommended in this thread: wait.
Tell thi
On 07.06.12 12:30, Erich wrote:
On 07 June 2012 12:17:14 Daniel Kalchev wrote:
just do what was recommended in this thread: wait. Tell this ones to
a commercial client. They will use words on you for which use you
get a life ban on this list.
If you are not qualified enough to handle
On 07.06.12 13:58, Hartmann, O. wrote:
... in some cases this needs the deep knowledge of all ports/software
provided and used and this is simply impossible, or at least null
convergent probability.
Only God is required to know and be able to do everything. We humans can
be imperfect.
In so
On 22.06.12 09:22, Hans Petter Selasky wrote:
I'm sorry to say a lot of USB flash sticks out there are broken and
only tested with the timing of MS Windows. Part of the problem is that
it is difficult to autodetect these issues, because once you trigger
the non- supported SCSI command, then t
On 16.10.13 08:42, Kevin Oberman wrote:
nslookup(1) was deprecated about a decade ago because it often provides
misleading results when used for DNS troubleshooting. It generally works
fine for simply turning a name to an address or vice-versa.
People should really use host(1) for simple looku
On 24.02.14 13:47, Thomas Mueller wrote:
I don't believe BSD users use base system of itself to send and receive email.
They use ports (FreeBSD) or equivalent in other BSDs.
One of the beauties of the BSD 'base system' is that upon installation
you have an usable workstation/server environm
On 24.02.14 19:49, Mark Felder wrote:
We can strip pieces of FreeBSD off and end up with an kernel. Or we
could keep the system very much usable out of the box.
Imagine a world where everything in FreeBSD is a package and we have a
working "PROVIDES" framework. Upon installation you can choose
Hice April 1st piece,
Let's see what I could contribute :)
On 01.04.14 08:46, Eitan Adler wrote:
Hi all,
Some of you may have seen my posts entitled "Story of a Laptop User"
and "Story of a Desktop User". For those of you who did not, it can
be a worthwhile read to see what life is like when
On 02.04.14 12:22, David Chisnall wrote:
The use case that PulseAudio was [over]designed to fix was plugging in
USB headphones (or connecting a Bluetooth headset) and having existing
audio streams redirected there.
Please don't ever make this behavior the default!
Imagine, you have an audio
On 02.04.14 15:52, David Chisnall wrote:
On 2 Apr 2014, at 13:40, Daniel Kalchev wrote:
On 02.04.14 12:22, David Chisnall wrote:
The use case that PulseAudio was [over]designed to fix was plugging in USB
headphones (or connecting a Bluetooth headset) and having existing audio
streams
On 02.04.14 04:26, Adrian Chadd wrote:
It's no longer "xorg just speaks to the graphics chip."
This is a common trend in computing recently. What once required tightly
integrated OS/applications is now distributed, in the widest sense. The
so called "Personal Computer" is nowadays actually s
On 14.04.13 21:55, Joe Holden wrote:
For non-nat ipfw is still superior in every way, numbered rules
(think: scripts), dummynet, much faster than pf, syntax is a lot nicer
and predictable...
And, best of all, it still is buggy. At lest, it's tables handling is
unusable.
I have been very st
On Apr 29, 2013, at 2:37 AM, Diane Bruce wrote:
> http://www.softpanorama.org/Copyright/License_classification/social_roots_of_GPL.shtml
By any measure a very good one. Could use some editing of course to make it
easier to comprehend for readers of different cultures though … and simplify
Eng
On 29.04.13 12:40, Julian H. Stacey wrote:
Daniel Kalchev wrote:
On Apr 29, 2013, at 2:37 AM, Diane Bruce wrote:
http://www.softpanorama.org/Copyright/License_classification/social_roots_of_GPL.shtml
By any measure a very good one. Could use some editing of course to make it
easier to
On 06.08.13 21:11, Matthew D. Fuller wrote:
Sure, right _now_ devel/subversion and base svnlite get along, but
what happens when ports moves to 1.9 which changes the WT format?
This is just one of the quirks that subversion has, in that it's
database can't be easily parsed with other tools. Pe
On 23.08.13 14:16, Kurt Jaeger wrote:
Hi!
I have a patch that I intend to commit before the 10.0 code
slush that removes GCC and libstdc++ from the default build on
platforms where clang is the system compiler. We definitely don't
want to be supporting our 6-year-old versions of these for the
On 29.05.11 16:10, Daniel Staal wrote:
--As of May 29, 2011 12:06:30 PM +0300, George Kontostanos is alleged
to have said:
"http://www.aisecure.net/?p=132";
Thanks, that's about what I expected the install procedure to be at
this point. Nice to have the reminder about the zpool.cache. (D
On 03.06.11 11:26, Maxim Sobolev wrote:
On 5/29/2011 4:11 AM, Mikolaj Golub wrote:
This might be MSG_WAITALL issue I described on net@ (look for the thread
"recv() with MSG_WAITALL might stuck when receiving more than
rcvbuf", and
also kern/154504).
Could you please try the patch?
http://p
> On 13 Dec 2017, at 1:26, Freddie Cash wrote:
>
> On Tue, Dec 12, 2017 at 2:55 PM, Rodney W. Grimes <
> freebsd-...@pdx.rh.cn85.dnsmgr.net> wrote:
>
>> Hum, just noticed this. 25k hours power on, 2M load cycles, this is
>> very hard on a hard drive. Your drive is going into power save mode
> On 13 Dec 2017, at 21:39, O. Hartmann wrote:
>
> Am Wed, 13 Dec 2017 08:47:53 -0800 (PST)
> "Rodney W. Grimes" schrieb:
>
>>> On Tue, 12 Dec 2017 14:58:28 -0800
>>> Cy Schubert wrote:
>>>
There are a couple of ways you can address this. You'll need to
offline the vdev first. If
> На 23.01.2025 г., в 5:38, Florian Walpen написа:
>
> The remedy is clearly to build kernel module packages for every minor release,
> and there has been an attempt to do this recently, through a separate pkg repo
> I think.
Either that, or do the kernel module compilation locally. For this y
70 matches
Mail list logo
