Re: Deprecating base system ftpd?

2021-04-05 Thread Patrick M. Hausen
. You cannot teach these people what an SSH key is. Just my experience, but backed by a load of customer interactions over more than 20 years ... Kind regards, Patrick -- punkt.de GmbH Patrick M. Hausen .infrastructure Kaiserallee 13a 76133 Karlsruhe Tel. +49 721 9109500 https://infrastruc

Re: FreeBSD 13.0 RC1 UEFI RAID-10 boot problems under VMware Fusio

2021-03-09 Thread Patrick M. Hausen
s much less > flexible than loader.efi. What precisely is the difference between boot1.efi and loader.efi? Practically from a sysadmin point of view? I have been using boot1.efi exclusively the last couple of years to boot EFI based systems with ZFS ... Thanks! Patrick -- punkt.de GmbH Patrick

Re: LUA ERROR: memory allocation error: block too big

2020-06-04 Thread Patrick M. Hausen
erstand. As for the choice of language I am actually pretty agnostic and willing to learn whatever is needed to get a particular task done. Just my 2ct. Patrick -- punkt.de GmbH Patrick M. Hausen .infrastructure Kaiserallee 13a 76133 Karlsruhe Tel. +49 721 9109500 https://infrastructure.punkt.

Re: [FreeBSD-Announce] FreeBSD 12.0 end-of-life

2020-02-18 Thread Patrick M. Hausen
nnnoying, but hardly a > showstopper I find. `pkg lock` after installing from ports is your friend ;-) Kind regards, Patrick -- punkt.de GmbH Patrick M. Hausen .infrastructure Kaiserallee 13a 76133 Karlsruhe Tel. +49 721 9109500 https://infrastructure.punkt.de i...@punkt.de AG Mannheim 10828

Re: RELENG_10 to RELENG11 buildworld no possible ?

2019-07-08 Thread Patrick M. Hausen
Hi all, > Am 08.07.2019 um 08:30 schrieb Thomas Mueller : > Or maybe via 11.2R, if that can be built from RELENG_10? I just completed a successful build of RELENG_11_2 on a RELENG_10_4 system … Kind regards, Patrick -- punkt.de GmbH Internet - Dienstleistungen - Beratung Kaise

Re: fsck vs zvol

2019-06-11 Thread Patrick M. Hausen
Hi all, > Am 12.06.2019 um 03:04 schrieb O'Connor, Daniel : > I have a small UFS partition that is the sysvol for Samba 4 (otherwise it > doesn't work due to ACL issues). AFAIK this was fixed by iX Systems for Samba 4.9: https://jira.ixsystems.com/browse/NAS-100698 You might want to c

Re: ZFS...

2019-05-09 Thread Patrick M. Hausen
Hi all, > Am 09.05.2019 um 00:55 schrieb Michelle Sullivan : > No, one disk in the 16 disk zRAID2 ... previously unseen but it could be the > errors have occurred in the last 6 weeks... everytime I reboot it started > resilvering, gets to 761M resilvered and then stops. 16 disks in *one* RAIDZ

Re: ZFS...

2019-05-06 Thread Patrick M. Hausen
Hi! > Am 30.04.2019 um 18:07 schrieb Walter Cramer : > With even a 1Gbit ethernet connection to your main system, savvy use of (say) > rsync (net/rsync in Ports), and the sort of "know your data / divide & > conquer" tactics that Karl mentions, you should be able to complete initial > backups (

Re: ZFS...

2019-05-06 Thread Patrick M. Hausen
Hi! > Am 01.05.2019 um 02:14 schrieb Michelle Sullivan : > And the irony is the FreeBSD policy to default to zfs on new installs using > the complete drive.. even when there is only one disk available and > regardless of the cpu or ram class... with one usb stick I have around here > it attemp

Re: NVME aborting outstanding i/o and controller resets

2019-04-15 Thread Patrick M. Hausen
Some updates: https://www.ixsystems.com/community/threads/nvme-problems-are-there-nightlies-based-on-12-stable-already.75685 https://jira.ixsystems.com/browse/NAS-101427 Kind regards, Patrick -- punkt.de GmbH Internet - Dienstleistungen - Beratung Kaiserallee 13a

Re: NVME aborting outstanding i/o and controller resets

2019-04-15 Thread Patrick M. Hausen
Hi! > Am 15.04.2019 um 10:51 schrieb Patrick M. Hausen : > Now, RELENG_12 kernel, 11.2-RELEASE userland: > > root@hurz:/var/tmp # uname -a > FreeBSD hurz 12.0-STABLE FreeBSD 12.0-STABLE r346220 GENERIC amd64 > root@hurz:/var/tmp # dd if=/dev/urandom of=hurz bs=10m > >

Re: NVME aborting outstanding i/o and controller resets

2019-04-15 Thread Patrick M. Hausen
> Am 15.04.2019 um 08:46 schrieb Patrick M. Hausen : > So I’ll test RELENG_12 next. If that works, I can probably craft > a FreeNAS 11.2 installation with a 12 kernel. I would be hesitating to run > HEAD in production, though. root@hurz:/var/tmp # uname -a FreeBSD hurz 11.2-RELEASE

Re: NVME aborting outstanding i/o and controller resets

2019-04-14 Thread Patrick M. Hausen
Hi! > Am 14.04.2019 um 23:33 schrieb Patrick M. Hausen : > Since the system runs well with RELENG_11 and only 4 drives > and there is this question about the cabling and shared resources > I will try to set up a system with 5 drives, each of them *without* > another one in a „pa

Re: NVME aborting outstanding i/o and controller resets

2019-04-14 Thread Patrick M. Hausen
Alright ... > Am 13.04.2019 um 02:37 schrieb Warner Losh : > > There's been some minor improvements in -current here. Any chance you could > > experimentally try that with this test? You won't get as many I/O abort > > errors (since we don't print those), and we have a few more workarounds f

Re: NVME aborting outstanding i/o and controller resets

2019-04-12 Thread Patrick M. Hausen
Hi Warner, thanks for taking the time again … > OK. This means that whatever I/O workload we've done has caused the NVME card > to stop responding for 30s, so we reset it. I figured as much ;-) > So it's an intel card. Yes - I already added this info several times. 6 of them, 2.5“ NVME „disk

Re: NVME aborting outstanding i/o and controller resets

2019-04-12 Thread Patrick M. Hausen
Hi all, my problems seem not to be TRIM related after all … and I can now quickly reproduce it. = root@freenas01[~]# sysctl vfs.zfs.trim.enabled vfs.zfs.trim.enabled: 0 = root@freenas01[~]# cd /mnt/zfs root@freenas01[/mnt/zfs]# dd if=/dev/urandom of=hurz bs=10m ^C — system freezes tempora

Re: Rare NVME related freeze at boot (was: Re: NVME aborting outstanding i/o)

2019-04-05 Thread Patrick M. Hausen
Hi! > Am 05.04.2019 um 16:36 schrieb Warner Losh : > What normally comes after the nvme6 line in boot? Often times it's the next > thing after the last message that's the issue, not the last thing. nvme7 ;-) And I had hangs at nvme1, nvme3, … as well. Patrick -- punkt.de GmbH

Rare NVME related freeze at boot (was: Re: NVME aborting outstanding i/o)

2019-04-05 Thread Patrick M. Hausen
Hi all, in addition to the aborted commands every dozen of system boots or so (this order of magnitude) the kernel simply hangs during initialisation of one of the NVME devices: https://cloud.hausen.com/s/TxPTDFJwMe6sJr2 The particular device affected is not constant. A power cycle fixes it, th

Re: NVME aborting outstanding i/o

2019-04-05 Thread Patrick M. Hausen
Hi all, > Am 04.04.2019 um 17:11 schrieb Warner Losh : > There's a request that was sent down to the drive. It took longer than 30s to > respond. One of them, at least, was a trim request. > […] Thanks for the explanation. This further explains why I was seeing a lot more of those and the syste

Re: NVME aborting outstanding i/o

2019-04-04 Thread Patrick M. Hausen
> Am 04.04.2019 um 16:51 schrieb Chuck Tuffli : > nvmecontrol identify nvme7 Controller Capabilities/Features Vendor ID: 8086 Subsystem Vendor ID:8086 Serial Number: BTLJ90230F1R1P0FGN Model Number: INTEL SSDPE2KX

Re: NVME aborting outstanding i/o

2019-04-04 Thread Patrick M. Hausen
Hi, > Am 04.04.2019 um 10:37 schrieb Patrick M. Hausen : > But: > > root@freenas01[~]# sysctl hw.nvme.per_cpu_io_queues > sysctl: unknown oid 'hw.nvme.per_cpu_io_queues' > root@freenas01[~]# sysctl hw.nvme.min_cpus_per_ioq > sysctl: unknow

NVME aborting outstanding i/o

2019-04-04 Thread Patrick M. Hausen
Hi all, I’m currently doing some load tests/burn in for two new servers. These feature all NVME SSDs and run FreeNAS, i.e. FreeBSD 11.2-STABLE. pcib17: at device 3.2 numa-domain 1 on pci15 pcib17: [GIANT-LOCKED] pci17: numa-domain 1 on pcib17 nvme7: mem 0xeca100

Re: libcrypto.so.111 linked binaries SIGSEGV (in bhyve guest)

2019-02-21 Thread Patrick M. Hausen
Hello, I don’t know if this is related or not, but when I compile the Nextcloud client port https://svnweb.freebsd.org/ports/head/deskutils/nextcloudclient/ on 11.2 by setting DEFAULT_VERSIONS+=ssl=openssl111 it dumps core, too. Kind regards Patrick -- punkt.de GmbH

Re: Binary update to -STABLE? And if so, what do I get?

2019-02-15 Thread Patrick M. Hausen
Good morning, > Am 14.02.2019 um 19:11 schrieb Kevin Oberman : > Far and away the biggest is the requirement to build from sources. It's not > a big deal for me, but if I still had many systems to deal with, that would > be a pain. > […] > The bottom line is that the only real reasons I see for no

Re: issue upgradning src

2018-12-05 Thread Patrick M. Hausen
Hi! > Am 05.12.2018 um 16:45 schrieb Maciej Jan Broniarz : > I want to upgrade my 12.0-ALPHA8 to the latest release, yet I am unable to > update from source: > [...] > #freebsd-update fetch freebsd-update upgrade -r 12.0-RC3 HTH, Patrick -- punkt.de GmbH Internet - Dienstleis

Memory error logged in /var/log/messages

2018-11-19 Thread Patrick M. Hausen
Hi all, one of our production servers, 11.2p3 is logging this every couple of minutes: Nov 19 11:48:06 ph002 kernel: MCA: CPU 0 COR (5) OVER MS channel 3 memory error Nov 19 11:48:06 ph002 kernel: MCA: Address 0x1f709a48c0 Nov 19 11:48:06 ph002 kernel: MCA: Misc 0x9001040188c Nov 19 11:48:06

Re: ctld(8) 11.2-release lockup with w2k16 [Was: Re: ctld(8), multiple 'portal-group' on same socket (individual 'discovery-auth-group' restrictions)]

2018-08-27 Thread Patrick M. Hausen
Hi, all, > Am 25.08.2018 um 15:04 schrieb Harry Schmalzbauer : > [...] > This is with 11.2 release. > It's a ESXi guest, which I used severla years with previous FreeBSD versions > without such massive iSCSI performance problems. > > Using the same /dev/zvol with istgt(1) on the same 11.2-releas

Re: Spectre/Meltdown mitigation in 11.1-p10 bogging down zfs send/receive?

2018-05-14 Thread Patrick M. Hausen
Hi! > Am 14.05.2018 um 17:35 schrieb Patrick M. Hausen : > Possibly we are on the wrong track altogether. We were - please just forget it ... ZFS scrub running during our activity ... everybody who already put more than five minutes of thought into this deserves a beer at the next Euro

Spectre/Meltdown mitigation in 11.1-p10 bogging down zfs send/receive?

2018-05-14 Thread Patrick M. Hausen
Hey guys, as some might know we run our hosting products in ZFS and iocage based jails. The backup concept relies on recurring local snapshots and a copy of these on one (more planned) central storage server. The storage server does essentially nothing but run zfs receive for each dataset on each

Re: Notification for GMirror failures

2018-05-08 Thread Patrick M. Hausen
Hi all, > Am 08.05.2018 um 09:28 schrieb Andrea Brancatelli : > out of curiosity, does any kind of GMirror-failure notification tools > exist? http://soren.klintrup.dk/gmirror We use it in production. Works as designed. HTH, Patrick -- punkt.de GmbH Internet - Dienstleistun

Re: another question about zfs compression numbers

2018-04-04 Thread Patrick M. Hausen
Hi all, > Am 04.04.2018 um 09:21 schrieb Eugene M. Zheganin : > I'm just trying to understand these numbers: > > file size is 232G, it's actual size on the lz4-compressed dataset is 18G, so > then why is the compressratio only 1.86x ? And why logicalused is 34.2G ? On > one hand, 34.2G exactlyf

IPv6 connectivity lost when combining if_bridge with a VLAN ...

2018-03-21 Thread Patrick M. Hausen
Hi all, a follow-up to my discovery that certain chipsets don't support 100baseTX any more. ;-) We use these servers as jail hosts and use if_bridge with VIMAGE and iocage a lot. Our tried and true setup used to be like this: - sysctl net.link.bridge.inherit_mac=1 - ifc

Re: FreeBSD 11.1 ixl(4) interface does not negotiate at 100 Mbit/s

2018-03-19 Thread Patrick M. Hausen
Hi all, > Am 19.03.2018 um 17:37 schrieb Eric Joyner : > I'm guessing these are 10G copper LOMs using X722; those don't support 100Mb > speeds. Your guess is probably correct. Going to re-wire tomorrow. Thanks, everyone. Patrick -- punkt.de GmbH Internet - Dienstleistungen -

FreeBSD 11.1 ixl(4) interface does not negotiate at 100 Mbit/s

2018-03-19 Thread Patrick M. Hausen
Hi all, any ideas why a current RELENG_11_1 system with ixl(4) onboard interfaces might not negotiate with a switch that has only fast ethernet? status: no carrier on the host line protocol is down (notconnect) on the switch dmesg: https://imgur.

Re: iscsi target and VMware/esxi timeouts

2017-11-14 Thread Patrick M. Hausen
Hello, > Am 14.11.2017 um 10:08 schrieb Daniel Braniss : > > Hi, > we are experimenting issues with several esxi’s servers that use freebsd 10.2 > stable as a iscsi target. > ie: > Nov 11 17:58:16 store-07 kernel: WARNING: 132.65.11.201 > (iqn.1998-01.com.vmware:pe-02-2fa7cd9e): no ping reply (

Re: ABI changes within stable branch

2017-09-24 Thread Patrick M. Hausen
Morning, > Am 20.09.2017 um 19:27 schrieb Mark Linimon : > > On Tue, Sep 19, 2017 at 10:15:32AM +0200, Kurt Jaeger wrote: >> A pointer to the official policy would be nice 8-} > > 3rd paragraph of: > > http://www.freebsd.org/portmgr/policies_eol.html One comment: it's easy to overlook the imp

Re: ABI changes within stable branch

2017-09-20 Thread Patrick M. Hausen
Hi! > Am 20.09.2017 um 04:09 schrieb Aristedes Maniatis : > At the very least I need to remember to keep poudriere on the x.0 release > even after it is EOL, > until every one of my servers has been upgraded Not necessarily. You can run build jails with lower OS versions on an up-to-date poudrie

Re: ABI changes within stable branch

2017-09-19 Thread Patrick M. Hausen
Hi all, > Am 19.09.2017 um 10:32 schrieb Aristedes Maniatis : > Then we have a problem since > https://pkg.freebsd.org/freebsd:11:x86:64/latest/All/ has been built on 11.1, > not on 11.0 (I just tested it with csync2 which I know fails). Packages there > may fail to run on 11.0, but there is no

Re: Bridged networking regression in 11.0?

2017-08-30 Thread Patrick M. Hausen
OK, guys, more replying to myswlf ;-) > Am 30.08.2017 um 12:04 schrieb Patrick M. Hausen : > > Hi, all, > >> Am 30.08.2017 um 09:29 schrieb Patrick M. Hausen : >> one of the systems on which we run our jail based "proServer" product failed >> in a very o

Re: Bridged networking regression in 11.0?

2017-08-30 Thread Patrick M. Hausen
Hi, all, > Am 30.08.2017 um 09:29 schrieb Patrick M. Hausen : > one of the systems on which we run our jail based "proServer" product failed > in a very odd way for the second time with a couple of days between the two > incidents. > [...] We found this open bug:

Bridged networking regression in 11.0?

2017-08-30 Thread Patrick M. Hausen
Hi, everyone, one of the systems on which we run our jail based "proServer" product failed in a very odd way for the second time with a couple of days between the two incidents. We run VIMAGE based jails (a lot) and bridge them with the physical interface of the machine. - cloned_interfa

Re: recommendations for file server based zfs appliance

2017-08-18 Thread Patrick M. Hausen
Hi Stefan, > Am 18.08.2017 um 14:35 schrieb Stefan Hagen : >> What do you mean by "JBOD support"? Disable RAID in the systems BIOS >> setup, put ZFS on AHCI drives ... > > Activating JBOD deactivates the B120i raid controller. Unfortnately the > temperature sensor > is somehow controlled by the

Re: recommendations for file server based zfs appliance

2017-08-18 Thread Patrick M. Hausen
Hi! > Am 18.08.2017 um 14:03 schrieb Stefan Hagen : > > * Patrick M. Hausen wrote: >>> Am 18.08.2017 um 11:19 schrieb Pete French : >>> The HP micro servers work very well, and you can pick them up remakably >>> cheaply [...] >>> Not sure about EC

Re: recommendations for file server based zfs appliance

2017-08-18 Thread Patrick M. Hausen
Hi all, > Am 18.08.2017 um 13:58 schrieb Pete French : > >> Maybe the folk that made hardware suggestions can post which net >> interface(s) they are using and whether they are seeing driver issues? > > The HP boxes have Broadcom ethernet controllers driven with the 'bge' > driver, and thatw ork

Re: recommendations for file server based zfs appliance

2017-08-18 Thread Patrick M. Hausen
Hi, all, > Am 18.08.2017 um 11:19 schrieb Pete French : > The HP micro servers work very well, and you can pick them up remakably > cheaply [...] > Not sure about ECC memory support there though. They do support ECC, no problem. They are available with different CPU configurations from as Pete

What is /dev/zfs?

2017-06-29 Thread Patrick M. Hausen
Hi, folks any pointer to an explanation would be nice, there seems to be no zfs(4) manpage ... Reason for asking: I have a piece of software that uses 14,000 ioctl() calls on that device during one execution and I'm asking myself what it tries to do. Thanks! Patrick signature.asc Description:

Re: FreeBSD as VirtualBox guest panics when starting VBoxService

2017-05-24 Thread Patrick M. Hausen
Hello, > Am 23.05.2017 um 23:10 schrieb jungle Boogie : > > Hi Patrick, > On 23 May 2017 at 05:52, Patrick M. Hausen wrote: >> Hi, all, >> >> just for the record - today I published our own boxesat Hashicorp Atlas: >> >>https://atlas.hashicorp

Re: FreeBSD as VirtualBox guest panics when starting VBoxService

2017-05-23 Thread Patrick M. Hausen
Hi, all, just for the record - today I published our own boxesat Hashicorp Atlas: https://atlas.hashicorp.com/punktde If you trust me enough, enjoy ;-) FreeBSD 11.0p10 - we intend to publish updated ones for every FreeBSD update. Kind regards, Patrick signature.asc Description: Messa

Re: FreeBSD Vagrant Box Kernel Panic

2017-05-11 Thread Patrick M. Hausen
Hello, > Am 10.05.2017 um 21:24 schrieb Robert Simmons : > It appears that the maintainer of the boxes should create a > 11.0-RELEASE-p10 box and revoke the -p1 box. The official Hashicorp boxes have been invoking freebsd-update on startup for a while, now. So every box automatically updates itse

Kernel panic on production system - what now?

2017-03-24 Thread Patrick M. Hausen
Hi all, Mar 24 02:39:36 ph001 kernel: kernel trap 12 with interrupts disabled Mar 24 02:39:36 ph001 kernel: Mar 24 02:39:36 ph001 kernel: Mar 24 02:39:36 ph001 kernel: Fatal trap 12: page fault while in kernel mode Mar 24 02:39:37 ph001 kernel: cpuid = 8; apic id = 08 Mar 24 02:39:37 ph001 kerne

Re: boot1.efifat's FAT12 volume label prevents booting (some systems)

2016-11-07 Thread Patrick M. Hausen
Hi, > Am 07.11.2016 um 09:04 schrieb Harry Schmalzbauer : >> create the EFI boot volume like this? >> >> gpart add -t efi -l efi -a 512k -s 512k >> newfs_msdos /dev/gpt/efi >> mount_msdosfs /dev/gpt/efi /mnt >> mkdir -p /mnt/efi/boot >> cp /boot/boot1.efi /mnt/efi/boot/bootx64.efi > > You are m

Re: boot1.efifat's FAT12 volume label prevents booting (some systems)

2016-11-06 Thread Patrick M. Hausen
Hi, all, > Am 06.11.2016 um 18:14 schrieb Dimitry Andric : > > Please do, so it is not forgotten. It is relatively easy to change the > volume label, by editing sys/boot/efi/boot1/generate-fat.sh, and then > regenerating the FAT templates. Why use the pre-generated image at all when you can eas

Re: boot0cfg on does not set default selection on gmirror device

2016-10-24 Thread Patrick M. Hausen
Hi, all, > Am 24.10.2016 um 04:50 schrieb Ian Smith : > > On Sun, 23 Oct 2016 15:53:59 +0200, Patrick M. Hausen wrote: > >> Actual reboot of this production machine in two weeks when we run our >> regular updates. But I expect that to "just work". > > Wa

Re: boot0cfg on does not set default selection on gmirror device

2016-10-23 Thread Patrick M. Hausen
Hi, Ian, > Am 22.10.2016 um 05:36 schrieb Ian Smith : > [...] > I wonder two things: > > Do 'boot0cfg -v ada0' and 'boot0cfg -v ada1' both report the same? OK, situation before I try to change anything: root@hd45:~ # boot0cfg -v mirror/m0 [...] default_selection=F1 (Slice 1) root@hd45:~ # boot

Re: boot0cfg on does not set default selection on gmirror device

2016-10-21 Thread Patrick M. Hausen
Hi, Warner, > Am 21.10.2016 um 20:25 schrieb Warner Losh : > Can you give us the strace output? amd64 - no strace. I need a hand here, what precisely do I need to enter? > It looks like it is reading the current blocks, setting the options, > and then writing it back to the device. If the write

Re: boot0cfg on does not set default selection on gmirror device

2016-10-21 Thread Patrick M. Hausen
Hi, all, > Am 21.10.2016 um 16:41 schrieb Warner Losh : > Any chance you can migrate to using gpart? Is boot0cfg still > referenced in NanoBSD somewhere? Not in NanoBSD but how would you configure boot0's default slice with gpart? It doesn't pay attention to the "active" flag. See Miroslav's mail

boot0cfg on does not set default selection on gmirror device

2016-10-21 Thread Patrick M. Hausen
Hi, all, we are repeatedly bitten by the following misbehaviour of boot0cfg: root@hd45:/usr/local # boot0cfg -s 1 mirror/m0 root@hd45:/usr/local # boot0cfg -v mirror/m0 # flag start chs type end chs offset size 1 0x80 1: 0: 1 0xa5 1022:254:6316065

Re: How to setup ethernet address and IPv4 address on interface?

2016-06-29 Thread Patrick M. Hausen
Hi, all, > Am 29.06.2016 um 14:23 schrieb Slawa Olhovchenkov : > > On Wed, Jun 29, 2016 at 02:13:59PM +0200, Patrick M. Hausen wrote: > >> What about using a combination of >> >> ifconfig_em1 >> ipv4_addrs_em1 >> >> in rc.conf? > &g

Re: How to setup ethernet address and IPv4 address on interface?

2016-06-29 Thread Patrick M. Hausen
Hi! > Am 29.06.2016 um 14:01 schrieb Slawa Olhovchenkov : > I am need in one call, multiple commands not allways allowed. > Using /etc/start_if.$IFNAME produce side effects and can mask errors > in rc.conf. What about using a combination of ifconfig_em1 ipv4_addrs_em1 in rc.conf? Kind regards

State of unionfs?

2016-05-18 Thread Patrick M. Hausen
Hi, all, we were looking for a way to get overlay/copy-on-write mounts for ZFS datasets to ease jail management. Google turned up this old thread: https://lists.freebsd.org/pipermail/freebsd-fs/2010-September/009221.html So, clearly in September 2010 mount_unionfs(8) was not supported for ZFS da

Re: OpenSSH changes between 10.2 and 10.3 ...

2016-04-14 Thread Patrick M. Hausen
Hi, all, > Am 14.04.2016 um 12:20 schrieb Eugene Grosbein : > > It does change for me. And helps. Make double sure you have added > KexAlgorithms > to system wide defaults section of ssh_config and not after limiting "Host" > directive, > or similar. Thanks for that hint - much ado about nothi

OpenSSH changes between 10.2 and 10.3 ...

2016-04-14 Thread Patrick M. Hausen
Hi, all, minor problem/annoyance here: root@noc:/etc/ssh # ssh admin@10.4.0.62 Unable to negotiate with 10.4.0.62 port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,none root@noc:/etc/ssh # uname -a FreeBSD noc.pluspunkthosting.de 10.3-RELEASE FreeBSD 10.3-RE

Re: Best practices for ZFS setup for a strictly SSD based system?

2016-02-10 Thread Patrick M. Hausen
Hi, all, > Am 10.02.2016 um 11:15 schrieb krad : > > Dont forget alignment and ashift. You may also want to test compression as > well. IF you have spare cpu cycles I would imagine the systems cpu will > handle it faster than any onboard ssd compression. Benchmarking would be of > use here tho

Re: Best practices for ZFS setup for a strictly SSD based system?

2016-02-09 Thread Patrick M. Hausen
Hi! > Am 09.02.2016 um 17:32 schrieb Alan Somers : > [...] > http://blog.delphix.com/matt/2014/06/06/zfs-stripe-width/ > >> >> * Will e.g. MySQL still profit from residing on a mirror >>instead of a RAIDZ2, even if all disks are SSDs? > > Yes, because a mirrored vdev has as many r

Best practices for ZFS setup for a strictly SSD based system?

2016-02-09 Thread Patrick M. Hausen
Hi, all, while there is quite a bit of documentation on how to improve ZFS performance by using a combination of rotating disks and SSDs, I have not found much about an SSD only setup. We are planning to try a hosting server with 8 SATA SSDs with ZFS. Things I am not at all sure about: * D

PAM changes? (was: Re: NSS changes in releng/10.2?)

2015-11-23 Thread Patrick M. Hausen
Hi, all, sorry for not trying this earlier and now replying to myself, but I'm slowly making progress isolating the problem. > Am 23.11.2015 um 15:42 schrieb Patrick M. Hausen : > > Hi, all, > > I just upgraded an older system from 8.4 to 10.2 in a single go. > No unexp

NSS changes in releng/10.2?

2015-11-23 Thread Patrick M. Hausen
Hi, all, I just upgraded an older system from 8.4 to 10.2 in a single go. No unexpected problems, until I tried to use "su": $ su - su: Sorry Well, I *am* a member of the wheel group: $ id uid=10093(ry93) gid=10001(intern) groups=10001(intern),0(wheel),10002(ent

ZFS on labelled partitions (was: Re: LSI SAS2008 mps driver preferred firmware version)

2015-11-17 Thread Patrick M. Hausen
Hi, all, > Am 16.11.2015 um 22:19 schrieb Freddie Cash : > > ​You label the disks as they are added to the system the first time. That > way, you always know where each disk is located, and you only deal with the > labels. we do the same for obvious reasons. But I always wonder about the possib

Re: zfs, mc, mcview and files opening

2015-11-10 Thread Patrick M. Hausen
Hi, all, > Am 10.11.2015 um 12:54 schrieb Eugene M. Zheganin : > > Hi, > > on 10.11.2015 15:05, Trond Endrestøl wrote: >> I blame file(1), it's hopelessly slow. mcview uses file(1) to deduce >> if it should just display the damn file or run the file through some >> filter. Maybe an option in mc

Re: Swap Questions

2015-08-14 Thread Patrick M. Hausen
HI! > Am 14.08.2015 um 15:15 schrieb Tim Daneliuk : > > I just built a 10.2 machine on a cloud-based VPS (Digital Ocean) that has > 512M of memory and 1G of swap partition. I am seeing a ton of errors like > this: > > [...] > So, I added this to fstab (after creating /usr/swap0): Did you creat

Re: [SOLVED][BUG??] Unattended install using bsdinstall and ZFS

2015-07-29 Thread Patrick M. Hausen
w terminal" echo echo -n "Console type [vt100]: " read TERM TERM=${TERM:-vt100} fi IMHO hardwiring this is not a good idea. Can be solved by simply commenting out the unwanted parts, but this should be configurable in installerconfig. Currently it quite defeats the p

Re: svn - but smaller?

2013-04-09 Thread Patrick M. Hausen
cho ">>> Running ${SVNUP}" @echo "--" .if defined(SVNUPFLAGS) @${SVNUP} ${SVNUPFLAGS} -h ${SVNUPHOST} .endif … Just a rough sketch - I can put more thought into this if nobody else is already working on it. Best regards

Re: svn - but smaller?

2013-04-09 Thread Patrick M. Hausen
Hi, Am 09.04.2013 um 17:05 schrieb Patrick M. Hausen : > PORTSSUPFILE= -b base/head -l /usr/ports ports/head, of course. Regards Patrick M. Hausen Leiter Netzwerke und Sicherheit -- punkt.de GmbH * Kaiserallee 13a * 76133 Karlsruhe Tel. 0721 9109 0 * Fax 0721 9109 100 i...@punkt.de h

Re: Poudriere questions

2013-02-21 Thread Patrick M. Hausen
Good morning, Am 20.02.2013 um 18:28 schrieb Guido Falsi : > There is no per port file, but, bbeing make.conf a file sourced by make, you > can use make syntax: > > .if ${.CURDIR:M*www/apache22*} > SUEXEC_DOCROOT=/foo/bar > .endif Now that I gave that a try it seems like there's somethin

Re: Poudriere questions

2013-02-21 Thread Patrick M. Hausen
Hi, Guido, hope you have a couple of more minutes ... After the first failure with the make.conf syntax I just put the options in unconditionally, to try if they end up in the final Apache package. Nope: Server version: Apache/2.2.23 (FreeBSD) Server built: Feb 21 2013 08:56:52 Server's Modu

Re: Poudriere questions

2013-02-21 Thread Patrick M. Hausen
Hi, all, Am 21.02.2013 um 09:54 schrieb Guido Falsi : > Sorry, I forgot to mention: no tabs. tabs have a spacial meaning to make. > They mean a shell command follows and should be used only in make targets. I *should* have guessed as much ;-) Of course tabs are syntactically relevant. Thanks agai

Re: Poudriere questions

2013-02-21 Thread Patrick M. Hausen
Hi! Am 21.02.2013 um 11:44 schrieb Guido Falsi : > Just to be sure, are you putting these lines in poudriere's make.conf for > your jail? Yes, sure. nanobsd# cat /usr/local/etc/poudriere.d/make.conf PROXY=on PROXY_HTTP=on SUEXEC=on SUEXEC_DOCROOT=/var/apache SUEXEC_LOGFILE=/var/apache/GLOBAL/s

Re: Poudriere questions

2013-02-20 Thread Patrick M. Hausen
Hi, Guido, Am 20.02.2013 um 18:28 schrieb Guido Falsi : >> Is there no way to specify make variables that need values in the port >> specific >> options file? > > There is no per port file, but, bbeing make.conf a file sourced by make, you > can use make syntax: > > .if ${.CURDIR:M*www/apache2

Re: Poudriere questions

2013-02-20 Thread Patrick M. Hausen
Hello, Am 20.02.2013 um 18:07 schrieb Guido Falsi : > I'm not sure I get what you ask. You can make poudriere fetch sources from > any subversion branch/tag and compile those > instead of using the distribution files. For example: > > poudriere jail -c -j 91releng -v releng/9.1 -m svn > > will

Poudriere questions

2013-02-20 Thread Patrick M. Hausen
Hello, we use NanoBSD to build the software installations for our hosting platform and I'm trying to better automate the process of building packages. Poudriere looked like an interesting tool to me, so I tried it. Quite painless, but two questions currently remain: To me it looks like Poudriere

Re: svn - but smaller?

2013-01-24 Thread Patrick M. Hausen
Hi, all, Am 24.01.2013 um 15:20 schrieb Gyrd Thane Lange : > It is not a well publicized fact, but I understand that the base utility > freebsd-update(8) through it's freebsd-update.conf(5) is able to pull the > base sources (/usr/src/) only instead of also updating your binaries. > > less /etc

Re: Does / Is anyone maintaining CVS for FreeBSD?

2013-01-04 Thread Patrick M. Hausen
/usr/src/UPDATING is still at p4 instead of p5??? So - this is definitely no simple plug-in replacement for csup. And is there a "Components ports"? Doesn't look like it. Thanks, Patrick M. Hausen Leiter Netzwerke und Sicherheit -- punkt.de GmbH * Kaiserallee 13a * 76133 Karlsruhe Tel.

Re: Does / Is anyone maintaining CVS for FreeBSD?

2013-01-04 Thread Patrick M. Hausen
Hi, all, Am 03.01.2013 um 19:21 schrieb Matthew Seaman : > On 03/01/2013 17:48, Patrick M. Hausen wrote: >> I'm a bit reluctant to installing svn on every system that needs source >> updates. Are there more lightweight ways? > > freebsd-update(8) > > which i

Re: Does / Is anyone maintaining CVS for FreeBSD?

2013-01-03 Thread Patrick M. Hausen
Hello, Am 03.01.2013 um 16:36 schrieb Eitan Adler : > CVS/SVN should be considered a development tool. Users should not see > the impact of the switch. In theory. What is the recommended csup replacement for users that did cd /usr/src && make update buildworld buildkernel as their me

Re: FreeBSD and IPMI how-to (was Re: su problem)

2012-06-14 Thread Patrick M. Hausen
Hi, all, Am 15.06.2012 um 03:27 schrieb Matthew X. Economou: > Daniel Braniss writes: > >> just for the record, serial on 8.x works fine! the device naming >> has changed from sio to uart, and maybe some features. We use it >> on all our servers, even redirecting it where possible via >> ILO,IMP

Re: ZFS autoexpand when there are 2 raidz2 vdevs

2012-06-05 Thread Patrick M. Hausen
Hi, Am 05.06.2012 um 14:28 schrieb Holger Kipp: > I used > zpool set autoextend=on tank > zpool online -e tank da0 > zpool online -e tank da1 > ... > zpool online -e tank da7 > > to increase the size of a raidz2 > here from 5+ to 11+TB. Worked without problems. datatomb2# zpool online -e sx40 gp

ZFS autoexpand when there are 2 raidz2 vdevs

2012-06-05 Thread Patrick M. Hausen
Hi, all, during the last couple of years I occasionally increased the capacity of raidz2 based zpools by replacing one disk at a time and resilvering, subsequently. After replacing the final disk and a reboot (I guess zpool export & zpool import would have done the trick, too) the capacity of the

Re: Restricting users from certain privileges

2012-04-28 Thread Patrick M. Hausen
Hi, all, Am 28.04.2012 um 11:39 schrieb Eugene Grosbein: > 28.04.2012 14:50, Zenny пишет: > >>> try sudo from ports, security/sudo >>> >>> cheers, >>> danny >>> >>> >> Thanks Daniel, but sudo gives all (not selective) root privileges to the >> user (admin in my case). So this is not wha

Re: Support for IPSec NAT-T in transoprt mode

2012-04-15 Thread Patrick M. Hausen
Hi, all, Am 14.04.2012 um 18:59 schrieb Bjoern A. Zeeb: > No FreeBSD tree shipped does > support transport mode at this time. I remember that I ran a Soekris device with RELENG_6 NanoBSD to drive my VPN connection via transport mode. Racoon for IKE, standard IPSEC as shipped with RELENG_6. Was i

Re: ZFS & NFS

2012-03-16 Thread Patrick M. Hausen
Hi, all, Am 16.03.2012 um 18:51 schrieb Florian Wagner: > And FreeBSD != Linux. Access from root does not get mapped to nobody. > See exports(5). $ man exports ... In the absence of -maproot and -mapall options, remote accesses by root will result in using a credential of -2:-2. All o

Re: ZFS & NFS

2012-03-16 Thread Patrick M. Hausen
Hello, Am 16.03.2012 um 18:42 schrieb Slawa Olhovchenkov: > On Fri, Mar 16, 2012 at 06:32:43PM +0100, Patrick M. Hausen wrote: > >> Hello, >> >> Am 16.03.2012 um 18:20 schrieb Slawa Olhovchenkov: >>> I do NFSv3 export of ZFS. >>> root from remote

Re: ZFS & NFS

2012-03-16 Thread Patrick M. Hausen
Hello, Am 16.03.2012 um 18:20 schrieb Slawa Olhovchenkov: > I do NFSv3 export of ZFS. > root from remote host create files on ZFS witch uid 2^32-2: > > # ls -l /usr/ports/packages32/ > total 6 > drwxr-xr-x 2 4294967294 wheel 5 Mar 17 00:57 All > drwxr-xr-x 2 4294967294 wheel 5 Mar 17 00:57

Swap on zvol - recommendable?

2012-02-06 Thread Patrick M. Hausen
Hi, all, is it possible to make a definite statement about swap on zvols? I found some older discussions about a resource starvation scenario when ZFS arc would be the cause of the system running out of memory, trying to swap, yet the ZFS would not be accessible until some memory was freed - lead

Re: about thumper aka sun fire x4500

2012-01-17 Thread Patrick M. Hausen
Hi all, Am 18.01.2012 um 00:14 schrieb peter h : > On Tuesday 17 January 2012 23.15, Ronald Klop wrote: >> On Tue, 17 Jan 2012 18:59:08 +0100, peter h wrote: >> >>> I have been beating on of these a few days, i have udes freebsd 9.0 and >>> 8.2 >>> Both fails when i engage > 10 disks, the syst

Re: about thumper aka sun fire x4500

2012-01-17 Thread Patrick M. Hausen
Hi, all, Am 17.01.2012 um 18:59 schrieb peter h : > I have been beating on of these a few days, i have udes freebsd 9.0 and 8.2 > Both fails when i engage > 10 disks, the system craches and messages : > "Hyper transport sync flood" will get into the BIOS errorlog ( but nothing > will > come to s

Re: Benchmark (Phoronix): FreeBSD 9.0-RC2 vs. Oracle Linux 6.1 Server

2011-12-15 Thread Patrick M. Hausen
Hi, all, Am 15.12.2011 um 12:18 schrieb Michael Ross: > Following Steven Hartlands' suggestion, > from one of my machines: > > /usr/ports/sysutils/dmidecode/#sysctl -a | egrep "hw.vendor|hw.product" > > /usr/ports/sysutils/dmidecode/#dmidecode -t 2 > # dmidecode 2.11 > SMBIOS 2.6 present. > > H

Re: Hot-changing a failed HDD with ahci.ko

2011-12-14 Thread Patrick M. Hausen
Hi! Am 14.12.2011 um 10:52 schrieb Patrick M. Hausen: > Yes - my fault. I had an active swap partition on the disk which perfectly > explains the panic. I replaced that one with a gmirror device, now. >> You might try booting RELENG_9 (which has ahci.ko as the default, so no >

Re: Hot-changing a failed HDD with ahci.ko

2011-12-14 Thread Patrick M. Hausen
Hi! Am 14.12.2011 um 10:26 schrieb Jeremy Chadwick: >> What is the proper equivalent for ahci, ada0 and camcontrol? > > None is needed: yank the disk, reinsert, wait a few seconds, done. > Validation, with full output, hardware, etc: > > http://koitsu.wordpress.com/2010/07/22/freebsd-and-zfs-hot

Hot-changing a failed HDD with ahci.ko

2011-12-14 Thread Patrick M. Hausen
Hi, all, while most cheap servers with SATA disks are not really hot-plug capable, changing a failed disk (either gmirror or zfs) was possible without a reboot by executing e.g. if ad4 failed: atacontrol detach ata2 atacontrol attach ata2 What is the proper equivalent for ahci, ada0 and camcont

Re: nsswitch problem ...

2011-09-30 Thread Patrick M. Hausen
Hello, Am 30.09.2011 um 16:00 schrieb Teratux: > My nscd daemon is also configured to hold it's cache for a long period of > time. > When I reboot my machine I cannot login ... reboot == restart of nscd == empty cache, if I'm not mistaken. If nscd has a persistent storage for cache entries, tha

  1   2   3   >