From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 01:33:31 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id DFD26E26; Sun, 8 Mar 2015 01:33:31 +0000 (UTC) Received: from zoom.lafn.org (zoom.lafn.org [108.92.93.123]) by mx1.freebsd.org (Postfix) with ESMTP id BA3E9159; Sun, 8 Mar 2015 01:33:31 +0000 (UTC) Received: from [10.0.1.2] (static-71-177-216-148.lsanca.fios.verizon.net [71.177.216.148]) (authenticated bits=0) by zoom.lafn.org (8.14.7/8.14.7) with ESMTP id t281W59P012878 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 7 Mar 2015 17:32:06 -0800 (PST) (envelope-from bc979@lafn.org) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) Subject: Re: OpenSSL Ciphers From: Doug Hardie In-Reply-To: <79CC9795-C5EF-451A-9A49-A2847E7C5974@lafn.org> Date: Sat, 7 Mar 2015 17:32:05 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <70654C1C-913A-4406-B904-697E153646E0@lafn.org> References: <5347DC2D-AD6C-41A1-AEC7-A81C51F691B3@lafn.org> <031A70A3-C348-4E2A-8C30-79F85BA4B4A1@lafn.org> <4d416c9dfa4e2922174ff469313578a0@dweimer.net> <79CC9795-C5EF-451A-9A49-A2847E7C5974@lafn.org> To: Doug Hardie X-Mailer: Apple Mail (2.2070.6) X-Virus-Scanned: clamav-milter 0.98 at zoom.lafn.org X-Virus-Status: Clean Cc: FreeBSD - , owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 01:33:32 -0000 > On 7 March 2015, at 15:13, Doug Hardie wrote: >=20 >=20 >> On 7 March 2015, at 08:49, dweimer wrote: >>=20 >> On 03/07/2015 1:35 am, Doug Hardie wrote: >>>> On 6 March 2015, at 17:35, dweimer wrote: >>>> On 03/06/2015 6:36 pm, Doug Hardie wrote: >>>>>> On 6 March 2015, at 16:28, Charles Swiger = wrote: >>>>>> Hi-- >>>>>>> On Mar 6, 2015, at 3:58 PM, Doug Hardie wrote: >>>>>>>> On 3 March 2015, at 23:21, Doug Hardie wrote: >>>>>>>> The default list of ciphers is quite extensive and includes = some that are apparently causing some potential security issues. I have = a number of applications that use OpenSSL and many don=E2=80=99t have = the code to restrict the list. Fixing all that would take quite a bit = of work. However, looking into /usr/include/openssl/ssl.h I find a = definition for the SSL_DEFAULT_CIPHER_LIST. The comments indicate that = that list is the one used when the application doesn=E2=80=99t specify = anything. I changed its definition to: >>>>>>>> #define SSL_DEFAULT_CIPHER_LIST = "TLSv1+HIGH:!SSLv2:RC4+MEDIUM:!aNULL:!eNULL:!3DES:@STRENGTH: >>>>>>>> However, s_connect will still create a connection with the = export ciphers. I tried adding !EXPORT to that list and it had no = effect. Is the definition actually used by openssl or is it just there = for documentation? >>>>>>> Not hearing anything on this, I suspect it=E2=80=99s not very = well understood. I have started updating the various servers/clients = that use SSL/TLS. The one that has me completely stumped is sendmail. = There is a web page which provides instructions = "http://novosial.org/sendmail/cipherlist/index.html=E2=80=9D. However, = when I follow them, I can still establish a connection and deliver mail = using the export ciphers. >>>>>>> Has anyone successfully restricted the sendmail ciphers? >>>>>> You can see which ciphers openssl will support via a statement = like: >>>>>> % openssl ciphers -v = 'TLSv1+HIGH:RC4+MEDIUM:!aNULL:!eNULL:!3DES:@STRENGTH:!EXPORT' >>>>>> DHE-RSA-AES256-SHA SSLv3 Kx=3DDH Au=3DRSA = Enc=3DAES(256) Mac=3DSHA1 >>>>>> DHE-DSS-AES256-SHA SSLv3 Kx=3DDH Au=3DDSS = Enc=3DAES(256) Mac=3DSHA1 >>>>>> AES256-SHA SSLv3 Kx=3DRSA Au=3DRSA = Enc=3DAES(256) Mac=3DSHA1 >>>>>> DHE-RSA-AES128-SHA SSLv3 Kx=3DDH Au=3DRSA = Enc=3DAES(128) Mac=3DSHA1 >>>>>> DHE-DSS-AES128-SHA SSLv3 Kx=3DDH Au=3DDSS = Enc=3DAES(128) Mac=3DSHA1 >>>>>> AES128-SHA SSLv3 Kx=3DRSA Au=3DRSA = Enc=3DAES(128) Mac=3DSHA1 >>>>>> RC4-SHA SSLv3 Kx=3DRSA Au=3DRSA = Enc=3DRC4(128) Mac=3DSHA1 >>>>>> RC4-MD5 SSLv3 Kx=3DRSA Au=3DRSA = Enc=3DRC4(128) Mac=3DMD5 >>>>>> RC4-MD5 SSLv2 Kx=3DRSA Au=3DRSA = Enc=3DRC4(128) Mac=3DMD5 >>>>>> ...and you can experiment with TLS negotiation results via = something like: >>>>>> % openssl s_client -cipher 'AES256-SHA:AES128-SHA' -connect = www.google.com:443 >>>>>> [ ... ] >>>>>> New, TLSv1/SSLv3, Cipher is AES128-SHA >>>>>> Server public key is 2048 bit >>>>>> Secure Renegotiation IS supported >>>>>> Compression: NONE >>>>>> Expansion: NONE >>>>>> SSL-Session: >>>>>> Protocol : TLSv1 >>>>>> Cipher : AES128-SHA >>>>>> Session-ID: [ ... ] >>>>>> Sendmail normally performs crypto via STARTTLS negotiation rather = than via SMTPS; there's a CipherList option which can be defined via = sendmail.mc / sendmail.cf. You might need to recompile sendmail with = -D_FFR_TLS_1, which I think that novosial page mentions. >>>>> sendmail has _FFR_TLS_1 compiled in per th tests in the web page >>>>> mentioned above. The CipherList option doesn=E2=80=99t seem to = work. I can >>>>> connect and send mail with that in place using the EXPORT ciphers. >>>> Doug, >>>> I have this added to my /etc/mail/{HOSTNAME}.mc file. >>>> LOCAL_CONFIG >>>> O CipherList=3DALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM >>>> Of course you can use other options, this has been there for a = while in mine, carried over from some time a few versions back. Probably = should get around to testing it to make sure it actually is still = working. It doesn't take long to add it in and run a quick test. >>> As I replied earlier, I have done that. I can still use: >>> openssl s_client -connect localhost:25 -starttls smtp -cipher EXPORT >>=20 >> Strange, it seems to be working on mine. >>=20 >> if I use the following, it connects: >> openssl s_client -connect 192.168.5.2:25 -starttls smtp >> CONNECTED(00000003) >> depth=3D1 C =3D US, ST =3D Arizona, L =3D Scottsdale, O =3D = "GoDaddy.com, Inc.", OU =3D http://certs.godaddy.com/repository/, CN =3D = Go Daddy Secure Certificate Authority - G2 >> [snip] >> New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384 >> Server public key is 4096 bit >> Secure Renegotiation IS supported >> Compression: NONE >> Expansion: NONE >> SSL-Session: >> Protocol : TLSv1.2 >> Cipher : DHE-RSA-AES256-GCM-SHA384 >> [snip] >>=20 >>=20 >> if I use the cipher option specify aNULL it fails: >>=20 >> openssl s_client -connect 192.168.5.2:25 -starttls smtp -cipher aNULL >> CONNECTED(00000003) >> 34379254472:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 = alert handshake = failure:/jails/devel/ROOT/usr/src/secure/lib/libssl/../../../crypto/openss= l/ssl/s23_clnt.c:770: >> --- >> no peer certificate available >> --- >> No client certificate CA names sent >> --- >> SSL handshake has read 353 bytes and written 234 bytes >> --- >> New, (NONE), Cipher is (NONE) >> Secure Renegotiation IS NOT supported >> Compression: NONE >> Expansion: NONE >=20 > Interesting. That does seem to work for you. I will have to do some = more digging into the code. For some reason it doesn=E2=80=99t work for = me. Thanks for that assistance. =20 After more testing, I think you need to try: openssl s_client -connect 192.168.5.2:25 -starttls smtp -cipher EXP I suspect it will give: New, TLSv1/SSLv3, Cipher is EXP-DES-CBC-SHA That is the export cipher which is the problem. From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 01:36:44 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 7416EFAF for ; Sun, 8 Mar 2015 01:36:44 +0000 (UTC) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3486F186 for ; Sun, 8 Mar 2015 01:36:43 +0000 (UTC) Received: from r56.edvax.de (port-92-195-131-196.dynamic.qsc.de [92.195.131.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id F03D33CD44; Sun, 8 Mar 2015 02:36:40 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id t281aenL006784; Sun, 8 Mar 2015 02:36:40 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Sun, 8 Mar 2015 02:36:40 +0100 From: Polytropon To: Ben Woods Subject: Re: Num Lock goes off when entering X session Message-Id: <20150308023640.c156f734.freebsd@edvax.de> In-Reply-To: References: <20150307194825.eda3e686.freebsd@edvax.de> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 01:36:44 -0000 On Sun, 8 Mar 2015 07:15:49 +0800, Ben Woods wrote: > This previous post should help you: > https://lists.freebsd.org/pipermail/freebsd-questions/2004-September/058977.html > > In summary, install the numlockx package and put "numlockx" in ~/.xinitrc, > before the lines starting the window manager. Works very good. Thanks! Problem solved. Interesting to see that this problem (or let's say systematic inconvenience) has been kept in X for more than 10 years now, without the ability of a native solution... :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 02:17:24 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B78CD851 for ; Sun, 8 Mar 2015 02:17:24 +0000 (UTC) Received: from wonkity.com (wonkity.com [67.158.26.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "wonkity.com", Issuer "wonkity.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 5FD9F758 for ; Sun, 8 Mar 2015 02:17:24 +0000 (UTC) Received: from wonkity.com (localhost [127.0.0.1]) by wonkity.com (8.14.9/8.14.9) with ESMTP id t281rIoc031149 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Sat, 7 Mar 2015 18:53:18 -0700 (MST) (envelope-from wblock@wonkity.com) Received: from localhost (wblock@localhost) by wonkity.com (8.14.9/8.14.9/Submit) with ESMTP id t281rIBj031146; Sat, 7 Mar 2015 18:53:18 -0700 (MST) (envelope-from wblock@wonkity.com) Date: Sat, 7 Mar 2015 18:53:18 -0700 (MST) From: Warren Block To: scrat Subject: Re: Xorg problems In-Reply-To: <54FB2862.2050600@columbus.rr.com> Message-ID: References: <54FB2862.2050600@columbus.rr.com> User-Agent: Alpine 2.11 (BSF 23 2013-08-11) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (wonkity.com [127.0.0.1]); Sat, 07 Mar 2015 18:53:18 -0700 (MST) Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 02:17:24 -0000 On Sat, 7 Mar 2015, scrat wrote: > > I am in process of evaluating FreeBSD so I can move from the Linux world to > FreeBSD. > > I have installed FreeBSD onto a Dell laptop Inspiron 1501 for testing, Arch > linux runs fine on this laptop. > > I wish to install the base system, update it to the latest Released version > 10.1 and then build a desktop machine using the ports method outlined in the > online Handbook. > > Here is what I have done so far > > I have installed FreeBSD 10.0 and updated it to 10.1 using freebsd-update Why not just install 10.1? It doesn't matter, though. > Ss root entered the following: > /bin/sh > Xorg -configure > xorg.log 2>&1 Why? Always try to run X without an xorg.conf first. Only create one if necessary. > $ cat xorg.log > > X.Org X Server 1.14.7 > Release Date: 2014-06-05 > X Protocol Version 11, Revision 0 > Build Operating System: FreeBSD 10.1-RELEASE-p4 amd64 > Current Operating System: FreeBSD dell.example.com 10.1-RELEASE-p6 FreeBSD > 10.1-RELEASE-p6 #0: Tue Feb 24 19:00:21 UTC 2015 > root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 > Build Date: 19 February 2015 09:04:34PM > > Current version of pixman: 0.32.6 > Before reporting problems, check http://wiki.x.org > to make sure that you have the latest version. > Markers: (--) probed, (**) from config file, (==) default setting, > (++) from command line, (!!) notice, (II) informational, > (WW) warning, (EE) error, (NI) not implemented, (??) unknown. > (==) Log file: "/var/log/Xorg.0.log", Time: Sat Mar 7 10:54:47 2015 > List of video drivers: > ati > radeon > vesa > (++) Using config file: "/root/xorg.conf.new" > (II) [KMS] Kernel modesetting enabled. > Number of created screens does not match number of detected devices. > Configuration failed. > (EE) Server terminated with error (2). Closing log file. > $ > > How do I fix the error: > Number of created screens does not match number of detected devices. > Configuration failed > > If I then following the book > > *|Xorg -config xorg.conf.new -retro|* So it works with the generated xorg.conf? > I can not (from the book) do the following: > > To exit the test, switch to the virtual console used to start it by pressing > *Ctrl*+*Alt*+*F/|n|/* (*F1* for the first virtual console) and press > *Ctrl*+*C*. > it simply doesn't work ie I can not go to the term F1 and Ctrl+C to stop > xorg. That is because KMS is being used and requires vt(4) to switch back to the console. Add to /boot/loader.conf: kern.vty=vt > Continuing I built Xfce4 from ports, configured it to start from the command > line and started it. > I cannot simply log out and return to the command line as the display goes > haywire. To stop the computer I have to open a terminal in xfce and su to > root and issue a poweroff to shutdown. This is the same vt(4) issue. From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 02:27:07 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 81C599A7 for ; Sun, 8 Mar 2015 02:27:07 +0000 (UTC) Received: from ipmail04.adl6.internode.on.net (ipmail04.adl6.internode.on.net [150.101.137.141]) by mx1.freebsd.org (Postfix) with ESMTP id 0E2E9836 for ; Sun, 8 Mar 2015 02:27:06 +0000 (UTC) Received: from ppp118-210-136-81.lns20.adl6.internode.on.net (HELO leader.local) ([118.210.136.81]) by ipmail04.adl6.internode.on.net with ESMTP; 08 Mar 2015 12:51:56 +1030 Message-ID: <54FBB242.8050901@ShaneWare.Biz> Date: Sun, 08 Mar 2015 12:51:54 +1030 From: Shane Ambler User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: Polytropon , Ben Woods Subject: Re: Num Lock goes off when entering X session References: <20150307194825.eda3e686.freebsd@edvax.de> <20150308023640.c156f734.freebsd@edvax.de> In-Reply-To: <20150308023640.c156f734.freebsd@edvax.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 02:27:07 -0000 On 08/03/2015 12:06, Polytropon wrote: > On Sun, 8 Mar 2015 07:15:49 +0800, Ben Woods wrote: >> This previous post should help you: >> https://lists.freebsd.org/pipermail/freebsd-questions/2004-September/058977.html >> >> In summary, install the numlockx package and put "numlockx" in ~/.xinitrc, >> before the lines starting the window manager. > > Works very good. Thanks! Problem solved. Interesting to see > that this problem (or let's say systematic inconvenience) > has been kept in X for more than 10 years now, without the > ability of a native solution... :-) X11 is an advanced windowing system that is easily configured to your needs. Once you know which of the 5000 options you need to set in your config files it works exactly the way you want. ;) -- FreeBSD - the place to B...Software Developing Shane Ambler From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 02:41:07 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B2D208C1 for ; Sun, 8 Mar 2015 02:41:07 +0000 (UTC) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 72F9E9EB for ; Sun, 8 Mar 2015 02:41:07 +0000 (UTC) Received: from r56.edvax.de (port-92-195-131-196.dynamic.qsc.de [92.195.131.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx02.qsc.de (Postfix) with ESMTPS id 1FE01276DD; Sun, 8 Mar 2015 03:40:57 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id t282evZd002090; Sun, 8 Mar 2015 03:40:57 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Sun, 8 Mar 2015 03:40:57 +0100 From: Polytropon To: Shane Ambler Subject: Re: Num Lock goes off when entering X session Message-Id: <20150308034057.2eb05b7a.freebsd@edvax.de> In-Reply-To: <54FBB242.8050901@ShaneWare.Biz> References: <20150307194825.eda3e686.freebsd@edvax.de> <20150308023640.c156f734.freebsd@edvax.de> <54FBB242.8050901@ShaneWare.Biz> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 02:41:07 -0000 On Sun, 08 Mar 2015 12:51:54 +1030, Shane Ambler wrote: > X11 is an advanced windowing system that is easily configured to your needs. > > Once you know which of the 5000 options you need to set in your config > files it works exactly the way you want. > > ;) Yes, I know; I've read "man xorg.conf" with the ultimate and final wisdom which applies to almost every advanced software in use today: "Nobody wants to say how this works. Maybe nobody knows ..." ;-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 02:58:10 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 12AC6CB2; Sun, 8 Mar 2015 02:58:10 +0000 (UTC) Received: from webmail.dweimer.net (24-240-198-187.static.stls.mo.charter.com [24.240.198.187]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C7C70B4F; Sun, 8 Mar 2015 02:58:09 +0000 (UTC) Received: from www.dweimer.net (webmail [192.168.5.2]) by webmail.dweimer.net (8.14.9/8.14.9) with ESMTP id t282w17O072761 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Sat, 7 Mar 2015 20:58:02 -0600 (CST) (envelope-from dweimer@dweimer.net) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Sat, 07 Mar 2015 20:58:01 -0600 From: dweimer To: Doug Hardie Subject: Re: OpenSSL Ciphers Organization: dweimer.net Reply-To: dweimer@dweimer.net Mail-Reply-To: dweimer@dweimer.net In-Reply-To: <70654C1C-913A-4406-B904-697E153646E0@lafn.org> References: <5347DC2D-AD6C-41A1-AEC7-A81C51F691B3@lafn.org> <031A70A3-C348-4E2A-8C30-79F85BA4B4A1@lafn.org> <4d416c9dfa4e2922174ff469313578a0@dweimer.net> <79CC9795-C5EF-451A-9A49-A2847E7C5974@lafn.org> <70654C1C-913A-4406-B904-697E153646E0@lafn.org> Message-ID: X-Sender: dweimer@dweimer.net User-Agent: Roundcube Webmail/1.1.0 Cc: FreeBSD - , owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 02:58:10 -0000 On 03/07/2015 7:32 pm, Doug Hardie wrote: >> On 7 March 2015, at 15:13, Doug Hardie wrote: >> >> >>> On 7 March 2015, at 08:49, dweimer wrote: >>> >>> On 03/07/2015 1:35 am, Doug Hardie wrote: >>>>> On 6 March 2015, at 17:35, dweimer wrote: >>>>> On 03/06/2015 6:36 pm, Doug Hardie wrote: >>>>>>> On 6 March 2015, at 16:28, Charles Swiger >>>>>>> wrote: >>>>>>> Hi-- >>>>>>>> On Mar 6, 2015, at 3:58 PM, Doug Hardie wrote: >>>>>>>>> On 3 March 2015, at 23:21, Doug Hardie wrote: >>>>>>>>> The default list of ciphers is quite extensive and includes >>>>>>>>> some that are apparently causing some potential security >>>>>>>>> issues. I have a number of applications that use OpenSSL and >>>>>>>>> many don’t have the code to restrict the list. Fixing all that >>>>>>>>> would take quite a bit of work. However, looking into >>>>>>>>> /usr/include/openssl/ssl.h I find a definition for the >>>>>>>>> SSL_DEFAULT_CIPHER_LIST. The comments indicate that that list >>>>>>>>> is the one used when the application doesn’t specify anything. >>>>>>>>> I changed its definition to: >>>>>>>>> #define SSL_DEFAULT_CIPHER_LIST >>>>>>>>> "TLSv1+HIGH:!SSLv2:RC4+MEDIUM:!aNULL:!eNULL:!3DES:@STRENGTH: >>>>>>>>> However, s_connect will still create a connection with the >>>>>>>>> export ciphers. I tried adding !EXPORT to that list and it had >>>>>>>>> no effect. Is the definition actually used by openssl or is it >>>>>>>>> just there for documentation? >>>>>>>> Not hearing anything on this, I suspect it’s not very well >>>>>>>> understood. I have started updating the various servers/clients >>>>>>>> that use SSL/TLS. The one that has me completely stumped is >>>>>>>> sendmail. There is a web page which provides instructions >>>>>>>> "http://novosial.org/sendmail/cipherlist/index.html”. However, >>>>>>>> when I follow them, I can still establish a connection and >>>>>>>> deliver mail using the export ciphers. >>>>>>>> Has anyone successfully restricted the sendmail ciphers? >>>>>>> You can see which ciphers openssl will support via a statement >>>>>>> like: >>>>>>> % openssl ciphers -v >>>>>>> 'TLSv1+HIGH:RC4+MEDIUM:!aNULL:!eNULL:!3DES:@STRENGTH:!EXPORT' >>>>>>> DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) >>>>>>> Mac=SHA1 >>>>>>> DHE-DSS-AES256-SHA SSLv3 Kx=DH Au=DSS Enc=AES(256) >>>>>>> Mac=SHA1 >>>>>>> AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) >>>>>>> Mac=SHA1 >>>>>>> DHE-RSA-AES128-SHA SSLv3 Kx=DH Au=RSA Enc=AES(128) >>>>>>> Mac=SHA1 >>>>>>> DHE-DSS-AES128-SHA SSLv3 Kx=DH Au=DSS Enc=AES(128) >>>>>>> Mac=SHA1 >>>>>>> AES128-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(128) >>>>>>> Mac=SHA1 >>>>>>> RC4-SHA SSLv3 Kx=RSA Au=RSA Enc=RC4(128) >>>>>>> Mac=SHA1 >>>>>>> RC4-MD5 SSLv3 Kx=RSA Au=RSA Enc=RC4(128) >>>>>>> Mac=MD5 >>>>>>> RC4-MD5 SSLv2 Kx=RSA Au=RSA Enc=RC4(128) >>>>>>> Mac=MD5 >>>>>>> ...and you can experiment with TLS negotiation results via >>>>>>> something like: >>>>>>> % openssl s_client -cipher 'AES256-SHA:AES128-SHA' -connect >>>>>>> www.google.com:443 >>>>>>> [ ... ] >>>>>>> New, TLSv1/SSLv3, Cipher is AES128-SHA >>>>>>> Server public key is 2048 bit >>>>>>> Secure Renegotiation IS supported >>>>>>> Compression: NONE >>>>>>> Expansion: NONE >>>>>>> SSL-Session: >>>>>>> Protocol : TLSv1 >>>>>>> Cipher : AES128-SHA >>>>>>> Session-ID: [ ... ] >>>>>>> Sendmail normally performs crypto via STARTTLS negotiation rather >>>>>>> than via SMTPS; there's a CipherList option which can be defined >>>>>>> via sendmail.mc / sendmail.cf. You might need to recompile >>>>>>> sendmail with -D_FFR_TLS_1, which I think that novosial page >>>>>>> mentions. >>>>>> sendmail has _FFR_TLS_1 compiled in per th tests in the web page >>>>>> mentioned above. The CipherList option doesn’t seem to work. I >>>>>> can >>>>>> connect and send mail with that in place using the EXPORT ciphers. >>>>> Doug, >>>>> I have this added to my /etc/mail/{HOSTNAME}.mc file. >>>>> LOCAL_CONFIG >>>>> O CipherList=ALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM >>>>> Of course you can use other options, this has been there for a >>>>> while in mine, carried over from some time a few versions back. >>>>> Probably should get around to testing it to make sure it actually >>>>> is still working. It doesn't take long to add it in and run a quick >>>>> test. >>>> As I replied earlier, I have done that. I can still use: >>>> openssl s_client -connect localhost:25 -starttls smtp -cipher EXPORT >>> >>> Strange, it seems to be working on mine. >>> >>> if I use the following, it connects: >>> openssl s_client -connect 192.168.5.2:25 -starttls smtp >>> CONNECTED(00000003) >>> depth=1 C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, >>> Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy >>> Secure Certificate Authority - G2 >>> [snip] >>> New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384 >>> Server public key is 4096 bit >>> Secure Renegotiation IS supported >>> Compression: NONE >>> Expansion: NONE >>> SSL-Session: >>> Protocol : TLSv1.2 >>> Cipher : DHE-RSA-AES256-GCM-SHA384 >>> [snip] >>> >>> >>> if I use the cipher option specify aNULL it fails: >>> >>> openssl s_client -connect 192.168.5.2:25 -starttls smtp -cipher aNULL >>> CONNECTED(00000003) >>> 34379254472:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 >>> alert handshake >>> failure:/jails/devel/ROOT/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_clnt.c:770: >>> --- >>> no peer certificate available >>> --- >>> No client certificate CA names sent >>> --- >>> SSL handshake has read 353 bytes and written 234 bytes >>> --- >>> New, (NONE), Cipher is (NONE) >>> Secure Renegotiation IS NOT supported >>> Compression: NONE >>> Expansion: NONE >> >> Interesting. That does seem to work for you. I will have to do some >> more digging into the code. For some reason it doesn’t work for me. >> Thanks for that assistance. > > After more testing, I think you need to try: > > openssl s_client -connect 192.168.5.2:25 -starttls smtp -cipher EXP > > I suspect it will give: > New, TLSv1/SSLv3, Cipher is EXP-DES-CBC-SHA > > > That is the export cipher which is the problem. openssl s_client -connect 192.168.5.2:25 -starttls smtp -cipher EXP CONNECTED(00000003) 34379254472:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:/jails/devel/ROOT/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_clnt.c:770: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 353 bytes and written 108 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE --- I did nothing special with the build, just put this in the configuration for sendmail .mc file In my case the local hostname of the jail I am running sendmail in is webmail.dweimer.local So /etc/mail/webmail.dweimer.local.mc dnl Cert Options define(`confCACERT_PATH', `/common/GoDaddy.Cert/')dnl define(`confCACERT', `/common/GoDaddy.Cert/gd_bundle_g2_g1.pem')dnl define(`confSERVER_CERT', `/common/GoDaddy.Cert/dweimer.net.pem')dnl define(`confSERVER_KEY', `/common/GoDaddy.Cert/dweimer.net.key.pem')dnl dnl DAEMON_OPTIONS dnl DAEMON_OPTIONS(`Port=smtp, Name=MTA') DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s') LOCAL_CONFIG O CipherList=ALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM define(`confDOMAIN_NAME', `webmail.dweimer.net')dnl then from within /etc/mail run: make && make install && make restart Then the test should run fine. I guess I do have this in my make.conf SENDMAIL_CFLAGS=-I/usr/local/include/sasl -DSASL SENDMAIL_LDFLAGS=-L/usr/local/lib SENDMAIL_LDADD=-lsasl2 However I believe this was put in there when adding the SMTP Authentication support, and isn't required for the SSL part. This cipher list was pulled from an old Apache recommendation probably should update it, but this is just a server I use for my personal email and testing things. -- Thanks, Dean E. Weimer http://www.dweimer.net/ From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 03:16:26 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5A4DF362; Sun, 8 Mar 2015 03:16:26 +0000 (UTC) Received: from webmail.dweimer.net (24-240-198-187.static.stls.mo.charter.com [24.240.198.187]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2BE70E1C; Sun, 8 Mar 2015 03:16:25 +0000 (UTC) Received: from www.dweimer.net (webmail [192.168.5.2]) by webmail.dweimer.net (8.14.9/8.14.9) with ESMTP id t283GO2l073584 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Sat, 7 Mar 2015 21:16:24 -0600 (CST) (envelope-from dweimer@dweimer.net) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Sat, 07 Mar 2015 21:16:24 -0600 From: dweimer To: Doug Hardie Subject: Re: OpenSSL Ciphers Organization: dweimer.net Reply-To: dweimer@dweimer.net Mail-Reply-To: dweimer@dweimer.net In-Reply-To: References: <5347DC2D-AD6C-41A1-AEC7-A81C51F691B3@lafn.org> <031A70A3-C348-4E2A-8C30-79F85BA4B4A1@lafn.org> <4d416c9dfa4e2922174ff469313578a0@dweimer.net> <79CC9795-C5EF-451A-9A49-A2847E7C5974@lafn.org> <70654C1C-913A-4406-B904-697E153646E0@lafn.org> Message-ID: X-Sender: dweimer@dweimer.net User-Agent: Roundcube Webmail/1.1.0 Cc: FreeBSD - , owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 03:16:26 -0000 On 03/07/2015 8:58 pm, dweimer wrote: > On 03/07/2015 7:32 pm, Doug Hardie wrote: >>> On 7 March 2015, at 15:13, Doug Hardie wrote: >>> >>> >>>> On 7 March 2015, at 08:49, dweimer wrote: >>>> >>>> On 03/07/2015 1:35 am, Doug Hardie wrote: >>>>>> On 6 March 2015, at 17:35, dweimer wrote: >>>>>> On 03/06/2015 6:36 pm, Doug Hardie wrote: >>>>>>>> On 6 March 2015, at 16:28, Charles Swiger >>>>>>>> wrote: >>>>>>>> Hi-- >>>>>>>>> On Mar 6, 2015, at 3:58 PM, Doug Hardie wrote: >>>>>>>>>> On 3 March 2015, at 23:21, Doug Hardie wrote: >>>>>>>>>> The default list of ciphers is quite extensive and includes >>>>>>>>>> some that are apparently causing some potential security >>>>>>>>>> issues. I have a number of applications that use OpenSSL and >>>>>>>>>> many don’t have the code to restrict the list. Fixing all >>>>>>>>>> that would take quite a bit of work. However, looking into >>>>>>>>>> /usr/include/openssl/ssl.h I find a definition for the >>>>>>>>>> SSL_DEFAULT_CIPHER_LIST. The comments indicate that that list >>>>>>>>>> is the one used when the application doesn’t specify anything. >>>>>>>>>> I changed its definition to: >>>>>>>>>> #define SSL_DEFAULT_CIPHER_LIST >>>>>>>>>> "TLSv1+HIGH:!SSLv2:RC4+MEDIUM:!aNULL:!eNULL:!3DES:@STRENGTH: >>>>>>>>>> However, s_connect will still create a connection with the >>>>>>>>>> export ciphers. I tried adding !EXPORT to that list and it >>>>>>>>>> had no effect. Is the definition actually used by openssl or >>>>>>>>>> is it just there for documentation? >>>>>>>>> Not hearing anything on this, I suspect it’s not very well >>>>>>>>> understood. I have started updating the various >>>>>>>>> servers/clients that use SSL/TLS. The one that has me >>>>>>>>> completely stumped is sendmail. There is a web page which >>>>>>>>> provides instructions >>>>>>>>> "http://novosial.org/sendmail/cipherlist/index.html”. However, >>>>>>>>> when I follow them, I can still establish a connection and >>>>>>>>> deliver mail using the export ciphers. >>>>>>>>> Has anyone successfully restricted the sendmail ciphers? >>>>>>>> You can see which ciphers openssl will support via a statement >>>>>>>> like: >>>>>>>> % openssl ciphers -v >>>>>>>> 'TLSv1+HIGH:RC4+MEDIUM:!aNULL:!eNULL:!3DES:@STRENGTH:!EXPORT' >>>>>>>> DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) >>>>>>>> Mac=SHA1 >>>>>>>> DHE-DSS-AES256-SHA SSLv3 Kx=DH Au=DSS Enc=AES(256) >>>>>>>> Mac=SHA1 >>>>>>>> AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) >>>>>>>> Mac=SHA1 >>>>>>>> DHE-RSA-AES128-SHA SSLv3 Kx=DH Au=RSA Enc=AES(128) >>>>>>>> Mac=SHA1 >>>>>>>> DHE-DSS-AES128-SHA SSLv3 Kx=DH Au=DSS Enc=AES(128) >>>>>>>> Mac=SHA1 >>>>>>>> AES128-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(128) >>>>>>>> Mac=SHA1 >>>>>>>> RC4-SHA SSLv3 Kx=RSA Au=RSA Enc=RC4(128) >>>>>>>> Mac=SHA1 >>>>>>>> RC4-MD5 SSLv3 Kx=RSA Au=RSA Enc=RC4(128) >>>>>>>> Mac=MD5 >>>>>>>> RC4-MD5 SSLv2 Kx=RSA Au=RSA Enc=RC4(128) >>>>>>>> Mac=MD5 >>>>>>>> ...and you can experiment with TLS negotiation results via >>>>>>>> something like: >>>>>>>> % openssl s_client -cipher 'AES256-SHA:AES128-SHA' -connect >>>>>>>> www.google.com:443 >>>>>>>> [ ... ] >>>>>>>> New, TLSv1/SSLv3, Cipher is AES128-SHA >>>>>>>> Server public key is 2048 bit >>>>>>>> Secure Renegotiation IS supported >>>>>>>> Compression: NONE >>>>>>>> Expansion: NONE >>>>>>>> SSL-Session: >>>>>>>> Protocol : TLSv1 >>>>>>>> Cipher : AES128-SHA >>>>>>>> Session-ID: [ ... ] >>>>>>>> Sendmail normally performs crypto via STARTTLS negotiation >>>>>>>> rather than via SMTPS; there's a CipherList option which can be >>>>>>>> defined via sendmail.mc / sendmail.cf. You might need to >>>>>>>> recompile sendmail with -D_FFR_TLS_1, which I think that >>>>>>>> novosial page mentions. >>>>>>> sendmail has _FFR_TLS_1 compiled in per th tests in the web page >>>>>>> mentioned above. The CipherList option doesn’t seem to work. I >>>>>>> can >>>>>>> connect and send mail with that in place using the EXPORT >>>>>>> ciphers. >>>>>> Doug, >>>>>> I have this added to my /etc/mail/{HOSTNAME}.mc file. >>>>>> LOCAL_CONFIG >>>>>> O CipherList=ALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM >>>>>> Of course you can use other options, this has been there for a >>>>>> while in mine, carried over from some time a few versions back. >>>>>> Probably should get around to testing it to make sure it actually >>>>>> is still working. It doesn't take long to add it in and run a >>>>>> quick test. >>>>> As I replied earlier, I have done that. I can still use: >>>>> openssl s_client -connect localhost:25 -starttls smtp -cipher >>>>> EXPORT >>>> >>>> Strange, it seems to be working on mine. >>>> >>>> if I use the following, it connects: >>>> openssl s_client -connect 192.168.5.2:25 -starttls smtp >>>> CONNECTED(00000003) >>>> depth=1 C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, >>>> Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy >>>> Secure Certificate Authority - G2 >>>> [snip] >>>> New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384 >>>> Server public key is 4096 bit >>>> Secure Renegotiation IS supported >>>> Compression: NONE >>>> Expansion: NONE >>>> SSL-Session: >>>> Protocol : TLSv1.2 >>>> Cipher : DHE-RSA-AES256-GCM-SHA384 >>>> [snip] >>>> >>>> >>>> if I use the cipher option specify aNULL it fails: >>>> >>>> openssl s_client -connect 192.168.5.2:25 -starttls smtp -cipher >>>> aNULL >>>> CONNECTED(00000003) >>>> 34379254472:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 >>>> alert handshake >>>> failure:/jails/devel/ROOT/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_clnt.c:770: >>>> --- >>>> no peer certificate available >>>> --- >>>> No client certificate CA names sent >>>> --- >>>> SSL handshake has read 353 bytes and written 234 bytes >>>> --- >>>> New, (NONE), Cipher is (NONE) >>>> Secure Renegotiation IS NOT supported >>>> Compression: NONE >>>> Expansion: NONE >>> >>> Interesting. That does seem to work for you. I will have to do some >>> more digging into the code. For some reason it doesn’t work for me. >>> Thanks for that assistance. >> >> After more testing, I think you need to try: >> >> openssl s_client -connect 192.168.5.2:25 -starttls smtp -cipher EXP >> >> I suspect it will give: >> New, TLSv1/SSLv3, Cipher is EXP-DES-CBC-SHA >> >> >> That is the export cipher which is the problem. > > openssl s_client -connect 192.168.5.2:25 -starttls smtp -cipher EXP > CONNECTED(00000003) > 34379254472:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 > alert handshake > failure:/jails/devel/ROOT/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_clnt.c:770: > --- > no peer certificate available > --- > No client certificate CA names sent > --- > SSL handshake has read 353 bytes and written 108 bytes > --- > New, (NONE), Cipher is (NONE) > Secure Renegotiation IS NOT supported > Compression: NONE > Expansion: NONE > --- > > I did nothing special with the build, just put this in the > configuration for sendmail .mc file > > In my case the local hostname of the jail I am running sendmail in is > webmail.dweimer.local > > So /etc/mail/webmail.dweimer.local.mc > > dnl Cert Options > define(`confCACERT_PATH', `/common/GoDaddy.Cert/')dnl > define(`confCACERT', `/common/GoDaddy.Cert/gd_bundle_g2_g1.pem')dnl > define(`confSERVER_CERT', `/common/GoDaddy.Cert/dweimer.net.pem')dnl > define(`confSERVER_KEY', `/common/GoDaddy.Cert/dweimer.net.key.pem')dnl > > dnl DAEMON_OPTIONS > dnl DAEMON_OPTIONS(`Port=smtp, Name=MTA') > DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s') > > LOCAL_CONFIG > O CipherList=ALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM > > define(`confDOMAIN_NAME', `webmail.dweimer.net')dnl > > then from within /etc/mail > run: > make && make install && make restart > > Then the test should run fine. > > I guess I do have this in my make.conf > SENDMAIL_CFLAGS=-I/usr/local/include/sasl -DSASL > SENDMAIL_LDFLAGS=-L/usr/local/lib > SENDMAIL_LDADD=-lsasl2 > > However I believe this was put in there when adding the SMTP > Authentication support, and isn't required for the SSL part. > > This cipher list was pulled from an old Apache recommendation probably > should update it, but this is just a server I use for my personal > email and testing things. You got me thinking, and I did a little more digging, I now have this in my configuration: LOCAL_CONFIG O CipherList=ALL:!aNULL:!eNULL:!LOW:!EXP:!ADH:+HIGH:+MEDIUM:!SSLv2:!RC4 O ServerSSLOptions=+SSL_OP_CIPHER_SERVER_PREFERENCE +SSL_OP_NO_SSLv2 +SSL_OP_NO_SSLv3 O ClientSSLOptions=+SSL_OP_NO_SSLv2 +SSL_OP_NO_SSLv3 This was as close as I could figure out to mirror my current Apache configuration which gets an A rating on the Qualsys SSL Labs test (https://www.ssllabs.com/ssltest/index.html). -- Thanks, Dean E. Weimer http://www.dweimer.net/ From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 04:18:18 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id AF7E9A1B for ; Sun, 8 Mar 2015 04:18:18 +0000 (UTC) Received: from fly.hiwaay.net (fly.hiwaay.net [216.180.54.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5DA1B3FA for ; Sun, 8 Mar 2015 04:18:18 +0000 (UTC) Received: from kabini1.local (rbn1-216-180-19-38.adsl.hiwaay.net [216.180.19.38]) (authenticated bits=0) by fly.hiwaay.net (8.13.8/8.13.8/fly) with ESMTP id t284IAbC013646 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Sat, 7 Mar 2015 22:18:10 -0600 Message-ID: <54FBCEF9.7050906@hiwaay.net> Date: Sat, 07 Mar 2015 22:24:25 -0600 From: "William A. Mahaffey III" User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: Please don't... References: <54FA1D3B.9020705@hiwaay.net> <20150307185703.GA1395@WorkBox.Home> In-Reply-To: <20150307185703.GA1395@WorkBox.Home> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 04:18:18 -0000 On 03/07/15 12:57, Bigby James wrote: > ...Use elipses and vague, meaningless titles. They get marked as SPAM by my > filter, and while I can only speak for myself, I'm not very inclined to read > through an entire message just to determine whether it pertains to me or whether > I'm able to actually offer any help. The subject of this thread could just as > easily have been "Status of x86-64 Linux Emulation." Two more words to type, > sure, but a small price to pay to make sure people understand and read your > messages. > Sorry, bad habit, I'm in a 12-step for it, but progress is slow. -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr. From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 08:20:10 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 4AE9411F; Sun, 8 Mar 2015 08:20:10 +0000 (UTC) Received: from zoom.lafn.org (zoom.lafn.org [108.92.93.123]) by mx1.freebsd.org (Postfix) with ESMTP id 23C10CDA; Sun, 8 Mar 2015 08:20:09 +0000 (UTC) Received: from [10.0.1.2] (static-71-177-216-148.lsanca.fios.verizon.net [71.177.216.148]) (authenticated bits=0) by zoom.lafn.org (8.14.7/8.14.9) with ESMTP id t288Ineu020430 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 8 Mar 2015 00:18:49 -0800 (PST) (envelope-from bc979@lafn.org) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) Subject: Re: OpenSSL Ciphers From: Doug Hardie In-Reply-To: <70654C1C-913A-4406-B904-697E153646E0@lafn.org> Date: Sun, 8 Mar 2015 00:18:48 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: References: <5347DC2D-AD6C-41A1-AEC7-A81C51F691B3@lafn.org> <031A70A3-C348-4E2A-8C30-79F85BA4B4A1@lafn.org> <4d416c9dfa4e2922174ff469313578a0@dweimer.net> <79CC9795-C5EF-451A-9A49-A2847E7C5974@lafn.org> <70654C1C-913A-4406-B904-697E153646E0@lafn.org> To: Doug Hardie X-Mailer: Apple Mail (2.2070.6) X-Virus-Scanned: clamav-milter 0.98 at zoom.lafn.org X-Virus-Status: Clean Cc: FreeBSD - , owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 08:20:10 -0000 > On 7 March 2015, at 17:32, Doug Hardie wrote: >=20 >=20 >> On 7 March 2015, at 15:13, Doug Hardie wrote: >>=20 >>=20 >>> On 7 March 2015, at 08:49, dweimer wrote: >>>=20 >>> On 03/07/2015 1:35 am, Doug Hardie wrote: >>>>> On 6 March 2015, at 17:35, dweimer wrote: >>>>> On 03/06/2015 6:36 pm, Doug Hardie wrote: >>>>>>> On 6 March 2015, at 16:28, Charles Swiger = wrote: >>>>>>> Hi-- >>>>>>>> On Mar 6, 2015, at 3:58 PM, Doug Hardie wrote: >>>>>>>>> On 3 March 2015, at 23:21, Doug Hardie wrote: >>>>>>>>> The default list of ciphers is quite extensive and includes = some that are apparently causing some potential security issues. I have = a number of applications that use OpenSSL and many don=E2=80=99t have = the code to restrict the list. Fixing all that would take quite a bit = of work. However, looking into /usr/include/openssl/ssl.h I find a = definition for the SSL_DEFAULT_CIPHER_LIST. The comments indicate that = that list is the one used when the application doesn=E2=80=99t specify = anything. I changed its definition to: >>>>>>>>> #define SSL_DEFAULT_CIPHER_LIST = "TLSv1+HIGH:!SSLv2:RC4+MEDIUM:!aNULL:!eNULL:!3DES:@STRENGTH: >>>>>>>>> However, s_connect will still create a connection with the = export ciphers. I tried adding !EXPORT to that list and it had no = effect. Is the definition actually used by openssl or is it just there = for documentation? >>>>>>>> Not hearing anything on this, I suspect it=E2=80=99s not very = well understood. I have started updating the various servers/clients = that use SSL/TLS. The one that has me completely stumped is sendmail. = There is a web page which provides instructions = "http://novosial.org/sendmail/cipherlist/index.html=E2=80=9D. However, = when I follow them, I can still establish a connection and deliver mail = using the export ciphers. >>>>>>>> Has anyone successfully restricted the sendmail ciphers? >>>>>>> You can see which ciphers openssl will support via a statement = like: >>>>>>> % openssl ciphers -v = 'TLSv1+HIGH:RC4+MEDIUM:!aNULL:!eNULL:!3DES:@STRENGTH:!EXPORT' >>>>>>> DHE-RSA-AES256-SHA SSLv3 Kx=3DDH Au=3DRSA = Enc=3DAES(256) Mac=3DSHA1 >>>>>>> DHE-DSS-AES256-SHA SSLv3 Kx=3DDH Au=3DDSS = Enc=3DAES(256) Mac=3DSHA1 >>>>>>> AES256-SHA SSLv3 Kx=3DRSA Au=3DRSA = Enc=3DAES(256) Mac=3DSHA1 >>>>>>> DHE-RSA-AES128-SHA SSLv3 Kx=3DDH Au=3DRSA = Enc=3DAES(128) Mac=3DSHA1 >>>>>>> DHE-DSS-AES128-SHA SSLv3 Kx=3DDH Au=3DDSS = Enc=3DAES(128) Mac=3DSHA1 >>>>>>> AES128-SHA SSLv3 Kx=3DRSA Au=3DRSA = Enc=3DAES(128) Mac=3DSHA1 >>>>>>> RC4-SHA SSLv3 Kx=3DRSA Au=3DRSA = Enc=3DRC4(128) Mac=3DSHA1 >>>>>>> RC4-MD5 SSLv3 Kx=3DRSA Au=3DRSA = Enc=3DRC4(128) Mac=3DMD5 >>>>>>> RC4-MD5 SSLv2 Kx=3DRSA Au=3DRSA = Enc=3DRC4(128) Mac=3DMD5 >>>>>>> ...and you can experiment with TLS negotiation results via = something like: >>>>>>> % openssl s_client -cipher 'AES256-SHA:AES128-SHA' -connect = www.google.com:443 >>>>>>> [ ... ] >>>>>>> New, TLSv1/SSLv3, Cipher is AES128-SHA >>>>>>> Server public key is 2048 bit >>>>>>> Secure Renegotiation IS supported >>>>>>> Compression: NONE >>>>>>> Expansion: NONE >>>>>>> SSL-Session: >>>>>>> Protocol : TLSv1 >>>>>>> Cipher : AES128-SHA >>>>>>> Session-ID: [ ... ] >>>>>>> Sendmail normally performs crypto via STARTTLS negotiation = rather than via SMTPS; there's a CipherList option which can be defined = via sendmail.mc / sendmail.cf. You might need to recompile sendmail = with -D_FFR_TLS_1, which I think that novosial page mentions. >>>>>> sendmail has _FFR_TLS_1 compiled in per th tests in the web page >>>>>> mentioned above. The CipherList option doesn=E2=80=99t seem to = work. I can >>>>>> connect and send mail with that in place using the EXPORT = ciphers. >>>>> Doug, >>>>> I have this added to my /etc/mail/{HOSTNAME}.mc file. >>>>> LOCAL_CONFIG >>>>> O CipherList=3DALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM >>>>> Of course you can use other options, this has been there for a = while in mine, carried over from some time a few versions back. Probably = should get around to testing it to make sure it actually is still = working. It doesn't take long to add it in and run a quick test. >>>> As I replied earlier, I have done that. I can still use: >>>> openssl s_client -connect localhost:25 -starttls smtp -cipher = EXPORT >>>=20 >>> Strange, it seems to be working on mine. >>>=20 >>> if I use the following, it connects: >>> openssl s_client -connect 192.168.5.2:25 -starttls smtp >>> CONNECTED(00000003) >>> depth=3D1 C =3D US, ST =3D Arizona, L =3D Scottsdale, O =3D = "GoDaddy.com, Inc.", OU =3D http://certs.godaddy.com/repository/, CN =3D = Go Daddy Secure Certificate Authority - G2 >>> [snip] >>> New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384 >>> Server public key is 4096 bit >>> Secure Renegotiation IS supported >>> Compression: NONE >>> Expansion: NONE >>> SSL-Session: >>> Protocol : TLSv1.2 >>> Cipher : DHE-RSA-AES256-GCM-SHA384 >>> [snip] >>>=20 >>>=20 >>> if I use the cipher option specify aNULL it fails: >>>=20 >>> openssl s_client -connect 192.168.5.2:25 -starttls smtp -cipher = aNULL >>> CONNECTED(00000003) >>> 34379254472:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 = alert handshake = failure:/jails/devel/ROOT/usr/src/secure/lib/libssl/../../../crypto/openss= l/ssl/s23_clnt.c:770: >>> --- >>> no peer certificate available >>> --- >>> No client certificate CA names sent >>> --- >>> SSL handshake has read 353 bytes and written 234 bytes >>> --- >>> New, (NONE), Cipher is (NONE) >>> Secure Renegotiation IS NOT supported >>> Compression: NONE >>> Expansion: NONE >>=20 >> Interesting. That does seem to work for you. I will have to do some = more digging into the code. For some reason it doesn=E2=80=99t work for = me. Thanks for that assistance. =20 >=20 > After more testing, I think you need to try: >=20 > openssl s_client -connect 192.168.5.2:25 -starttls smtp -cipher EXP >=20 > I suspect it will give: > New, TLSv1/SSLv3, Cipher is EXP-DES-CBC-SHA >=20 >=20 > That is the export cipher which is the problem. >=20 I found the problem. Sendmail was not able to access the pid file. = Hence it would not shutdown. There was no error message about that. As = a result, the existing processes were not terminated. Starting sendmail = again ran into the same issue. That did generate a small error message = that was hidden in a bunch of other messages (this is a production = server). When I ran the tests, it was the original server (without the = CipherList entries that responded. Thus it always accepted mail using = any cipher. Once I managed to terminate the original processes and get the new ones = running, then the CipherList did work properly. Thanks to all for the = assistance. I did encounter one very interesting side effect when building the cf = file from the mc file for one system. Sendmail threw an error when = starting that line 46 was invalid. Line 46 was in the middle of a = string of blank lines. I deleted 3 lines around it (all blank) and then = sendmail is happy and works. I suspect there is some non-printing = character generated in that line, but I haven=E2=80=99t checked that = out. From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 13:11:02 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E677BCC8 for ; Sun, 8 Mar 2015 13:11:02 +0000 (UTC) Received: from cdptpa-oedge-vip.email.rr.com (cdptpa-outbound-snat.email.rr.com [107.14.166.228]) by mx1.freebsd.org (Postfix) with ESMTP id A807AD0D for ; Sun, 8 Mar 2015 13:11:01 +0000 (UTC) Received: from [75.187.32.8] ([75.187.32.8:55131] helo=raspberrypi.bildanet.com) by cdptpa-oedge02 (envelope-from ) (ecelerity 3.5.0.35861 r(Momo-dev:tip)) with ESMTP id 96/C6-22943-56A4CF45; Sun, 08 Mar 2015 13:11:01 +0000 Received: from [192.168.1.55] (helo=dell.bildanet.com) by raspberrypi.bildanet.com with esmtp (Exim 4.84) (envelope-from ) id 1YUayy-0000CZ-Ox for freebsd-questions@freebsd.org; Sun, 08 Mar 2015 09:11:00 -0400 Message-ID: <54FC4A64.701@columbus.rr.com> Date: Sun, 08 Mar 2015 09:11:00 -0400 From: scrat User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Questions Subject: Re: Xorg problems: FIXED References: <54FB2862.2050600@columbus.rr.com> In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-RR-Connecting-IP: 107.14.168.130:25 X-Cloudmark-Score: 0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 13:11:03 -0000 On 03/07/15 20:53, Warren Block wrote: > On Sat, 7 Mar 2015, scrat wrote: > [putolin] >> I have installed FreeBSD 10.0 and updated it to 10.1 using >> freebsd-update > > Why not just install 10.1? It doesn't matter, though. I had a USB drive already setup with 10.0 before 10.1 came out. I then used that as practice for updating the base system > >> Ss root entered the following: >> /bin/sh >> Xorg -configure > xorg.log 2>&1 > > Why? Always try to run X without an xorg.conf first. Only create one > if necessary. > I did that as to try to fix this problem, more later. [putolin] >> Configuration failed >> >> If I then following the book >> >> *|Xorg -config xorg.conf.new -retro|* > > So it works with the generated xorg.conf? After I set the video driver to vesa in the generated xorg.conf it worked. > >> I can not (from the book) do the following: >> >> To exit the test, switch to the virtual console used to start it by >> pressing *Ctrl*+*Alt*+*F/|n|/* (*F1* for the first virtual console) >> and press *Ctrl*+*C*. > >> it simply doesn't work ie I can not go to the term F1 and Ctrl+C to >> stop xorg. > > That is because KMS is being used and requires vt(4) to switch back to > the console. Add to /boot/loader.conf: > kern.vty=vt Ok I learned something here. Adding kern.vty=vt to /boot/loader.conf fixed my issues > >> Continuing I built Xfce4 from ports, configured it to start from the >> command line and started it. >> I cannot simply log out and return to the command line as the display >> goes haywire. To stop the computer I have to open a terminal in xfce >> and su to root and issue a poweroff to shutdown. > > This is the same vt(4) issue. See above fixed it. All working now :) Need to read up on KMS and vt The Xorg section of the handbook needs some updating: Maybe add something that points one to adding the kern.vt line to boot/loader. Fix the section on xorg configuration. The urw-fonts port installs to /usr/local/lib/X11/fonts/urw-fonts directory not /usr/local/lib/X11/fonts/URW. The /usr/local/lib/X11/fonts/URW directory doesn't exist. Thank you for all your help you have been a tremendous help You have made my day. From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 16:42:25 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8E175D33 for ; Sun, 8 Mar 2015 16:42:25 +0000 (UTC) Received: from mail-we0-x22d.google.com (mail-we0-x22d.google.com [IPv6:2a00:1450:400c:c03::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 218EC23C for ; Sun, 8 Mar 2015 16:42:25 +0000 (UTC) Received: by wevl61 with SMTP id l61so4267212wev.6 for ; Sun, 08 Mar 2015 09:42:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:subject:date:message-id:user-agent:mime-version :content-type; bh=s+wX5AGtsCrxBOAadbHXRv3Bri4YioF0un6Zdjk/F+M=; b=mvs0KzyTXKRIzQt+WPCnl51IoBcJToISBPACRRmMDSCkeqxGrVlbGjRPfhG86xYDo0 tZHRRU2sbKMIfLSLaaQorM6E9AHAKE/yv69OlzLHZWtyTP7KRAMjb5GgQALkS4PvMA+C z4FRD5QKTAv4YUyDJBuDHma5TO1TEzdr0QzUMGlO9d8lBdoZEKUPTRTnVbnYfCKnu9MT IVMK5PBMRvQIhHxdldQpsId7SewwrG7j+/g9LhJrgiFSFmfwqd1q8Xkw/BX61aq9oinI pL6odg9vct42YjFlRA1VGXAqX6Bl49ks06Birm3wc4SaMinJIoUZOwS0e/h80jJNS6WF pAIQ== X-Received: by 10.194.192.167 with SMTP id hh7mr49973497wjc.151.1425832943485; Sun, 08 Mar 2015 09:42:23 -0700 (PDT) Received: from localhost ([2a01:7e00::f03c:91ff:fe70:2696]) by mx.google.com with ESMTPSA id m10sm10628989wij.5.2015.03.08.09.42.20 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 08 Mar 2015 09:42:21 -0700 (PDT) From: Malcolm Matalka To: freebsd-questions@freebsd.org Subject: Raspberry Pi Network Performance Date: Sun, 08 Mar 2015 16:42:19 +0000 Message-ID: <871tkzl9uc.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 16:42:25 -0000 Hello, I'm having fun playing with FreeBSD running a Raspberry Pi. I've set mine up as a WiFi access point routing over a VPN. I am experiencing a slow network connection through the entire chain, but each individual component functions at a reasonable speed. I am wondering what I can do, if anything, to help improve the performance. Details: My setup is: Laptop (WiFi) -> USB Dongle -> Raspberry Pi (OpenVPN) -> Ethernet -> Router -> Internet I have done the following experiments, transferring 150meg ISO around: End-to-end - ~60 KB/s - Downloading the ISO on my laptop from a website. Laptop (WiFi) -> Router -> Ethernet -> Raspberry Pi - ~1.5MB/s - Scping a file to /dev/null on the RPi Laptop (WiFi) -> USB Dongle -> Raspberry Pi - ~1MB/s - Scping a file to /dev/null on RPi Raspberry Pi (OpenVPN) -> Ethernet -> Router -> Internet - ~1MB/s - Downloading the ISO from the end-to-end experiment Raspberry Pi (OpenVPN) -> Ethernet -> Router -> Internet - ~1MB/s AND Laptop (WiFi) -> USB Dongle -> Raspberry Pi - ~1MB/s In this experiment I tested hitting both interfaces with traffic at the same time. There was little noticeable degradation in the individual performances. $ uname -a FreeBSD gizmo 10.1-RELEASE-p6 FreeBSD 10.1-RELEASE-p6 #1 r279698: Sat Mar 7 16:07:29 CET 2015 mmatalka@bsd-junkyard:/usr/home/mmatalka/projects/freebsd/obj/arm.armv6/usr/home/mmatalka/projects/freebsd/src/sys/RPI-B-GIZMO arm # ipfw list 00100 nat 1 ip from any to any via tun0 09999 allow ip from any to any 65535 deny ip from any to any While each individual piece operates about as fast as I would expect, the end-to-end performance is an order of magnitude slower. If there are any other experiments I should do, let me know. What can I do to determine what is going on? Thank you, /Malcolm From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 17:37:37 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 90C64C6D for ; Sun, 8 Mar 2015 17:37:37 +0000 (UTC) Received: from BLU004-OMC1S8.hotmail.com (blu004-omc1s8.hotmail.com [65.55.116.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "MSIT Machine Auth CA 2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3B9FA968 for ; Sun, 8 Mar 2015 17:37:36 +0000 (UTC) Received: from BLU436-SMTP146 ([65.55.116.9]) by BLU004-OMC1S8.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751); Sun, 8 Mar 2015 10:36:29 -0700 X-TMN: [LmFvJ78izm6gPMKzKt0W8jLR/VKvw08W] X-Originating-Email: [bourne.identity@hotmail.com] Message-ID: Date: Sun, 8 Mar 2015 23:06:15 +0530 From: Manish Jain User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 MIME-Version: 1.0 To: CyberLeo Kitsana Subject: Re: Is there any plan to adopt devtmpfs ? References: <54F88D64.4000607@cyberleo.net> In-Reply-To: Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 08 Mar 2015 17:36:24.0683 (UTC) FILETIME=[663413B0:01D059C6] Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 17:37:37 -0000 On 03/06/2015 13:58, Manish Jain wrote:>>> Can you provide further details for these failures? Specific device >>> models and relevant dmesg(8) and usbconfig(8) output, for example. >>> > > I have something for the APC UPS (USB Powerchute) too. Again, the > complete output of dmesg is attached below my signature. > > 1) > Important lines from my /etc/rc.conf : > > apcupsd_enable="NO" #Needed to run apctest > dbus_enable="YES" > hald_enable="YES" > devfs_system_ruleset="system" > > > 2) > Important lines from my /usr/local/etc/apcupsd/apcupsd.conf : > > UPSNAME APC700BE > UPSCABLE usb > UPSTYPE usb > DEVICE > BATTERYLEVEL 5 > MINUTES 5 > UPSCLASS standalone > UPSNAME APC700BE > BATTDATE 05/28/14 > SENSITIVITY L > > > 3) > usbconfig -u 2 dump_info > ugen2.1: at usbus2, cfg=0 md=HOST spd=HIGH (480Mbps) > pwr=SAVE (0mA) > > ugen2.2: at usbus2, cfg=0 md=HOST spd=HIGH > (480Mbps) pwr=SAVE (100mA) > > ugen2.3: at usbus2, cfg=0 md=HOST spd=LOW > (1.5Mbps) pwr=ON (100mA) > > ugen2.4: at usbus2, cfg=0 md=HOST spd=LOW > (1.5Mbps) pwr=ON (90mA) > > ugen2.5: Conversion> at usbus2, cfg=0 md=HOST spd=LOW (1.5Mbps) pwr=ON (2mA) > > ugen2.5: Conversion> at usbus2, cfg=0 md=HOST spd=LOW (1.5Mbps) pwr=ON (2mA) > > > 4) > usbconfig -u 2 -a 5 dump_device_desc > > bLength = 0x0012 > bDescriptorType = 0x0001 > bcdUSB = 0x0110 > bDeviceClass = 0x0000 > bDeviceSubClass = 0x0000 > bDeviceProtocol = 0x0000 > bMaxPacketSize0 = 0x0008 > idVendor = 0x051d > idProduct = 0x0002 > bcdDevice = 0x0006 > iManufacturer = 0x0003 > iProduct = 0x0001 > iSerialNumber = 0x0002 > bNumConfigurations = 0x0001 > > > > 5) > This is what I get in apctest.output when I run apctest : > > #{//start output > 2015-03-06 11:43:17 apctest 3.14.12 (29 March 2014) freebsd > Checking configuration ... > sharenet.type = Network & ShareUPS Disabled > cable.type = USB Cable > mode.type = USB UPS Driver > Setting up the port ... > Doing prep_device() ... > > You are using a USB cable type, so I'm entering USB test mode > Hello, this is the apcupsd Cable Test program. > This part of apctest is for testing USB UPSes. > > Getting UPS capabilities...SUCCESS > > Please select the function you want to perform. > > 1) Test kill UPS power > 2) Perform self-test > 3) Read last self-test result > 4) View/Change battery date > 5) View manufacturing date > 6) View/Change alarm behavior > 7) View/Change sensitivity > 8) View/Change low transfer voltage > 9) View/Change high transfer voltage > 10) Perform battery calibration > 11) Test alarm > 12) View/Change self-test interval > Q) Quit > > Select function number: 2 > > > This test instructs the UPS to perform a self-test > operation and reports the result when the test completes. > > Clearing previous self test result...CLEARED > Initiating self test...INITIATED > Waiting for test to complete...COMPLETED > Result of last self test: PASSED > > 1) Test kill UPS power > 2) Perform self-test > 3) Read last self-test result > 4) View/Change battery date > 5) View manufacturing date > 6) View/Change alarm behavior > 7) View/Change sensitivity > 8) View/Change low transfer voltage > 9) View/Change high transfer voltage > 10) Perform battery calibration > 11) Test alarm > 12) View/Change self-test interval > Q) Quit > > Select function number: 4 > > Current battery date: 05/28/2014 > Enter new battery date (MM/DD/YYYY), blank to quit: > > Invalid format. > > 1) Test kill UPS power > 2) Perform self-test > 3) Read last self-test result > 4) View/Change battery date > 5) View manufacturing date > 6) View/Change alarm behavior > 7) View/Change sensitivity > 8) View/Change low transfer voltage > 9) View/Change high transfer voltage > 10) Perform battery calibration > 11) Test alarm > 12) View/Change self-test interval > Q) Quit > > Select function number: 7 > > Current sensitivity setting: MEDIUM > Press... > L for Low sensitivity > M for Medium sensitivity > H for High sensitivity > Q to Quit with no changes > Your choice: Select function: M > > New sensitivity setting: MEDIUM > > 1) Test kill UPS power > 2) Perform self-test > 3) Read last self-test result > 4) View/Change battery date > 5) View manufacturing date > 6) View/Change alarm behavior > 7) View/Change sensitivity > 8) View/Change low transfer voltage > 9) View/Change high transfer voltage > 10) Perform battery calibration > 11) Test alarm > 12) View/Change self-test interval > Q) Quit > > Select function number: 10 > > This test instructs the UPS to perform a battery calibration > operation and reports the result when the process completes. > The battery level must be at 100% and the load must be at least > 10% to begin this test. > > Failed to read current battery level > #}//end output > > > 6) > Running /usr/local/etc/apcupsd/commfailure fails : > > /usr/local/etc/apcupsd # ./commfailure > ./commfailure: -s: not found > Error contacting apcupsd @ localhost:3551: Connection refused > > > > Regards > Manish Jain > > #here is the complete dmesg : > > Copyright (c) 1992-2014 The FreeBSD Project. > Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 > The Regents of the University of California. All rights reserved. > FreeBSD is a registered trademark of The FreeBSD Foundation. > FreeBSD 10.1-RELEASE #0 r274401: Tue Nov 11 22:51:51 UTC 2014 > root@releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC i386 > FreeBSD clang version 3.4.1 (tags/RELEASE_34/dot1-final 208032) 20140512 > CPU: AMD Athlon(tm) II X2 270 Processor (3415.41-MHz 686-class CPU) > Origin = "AuthenticAMD" Id = 0x100f63 Family = 0x10 Model = 0x6 > Stepping = 3 > > Features=0x178bfbff > > Features2=0x802009 > AMD > Features=0xee500800 > AMD > Features2=0x837ff > > TSC: P-state invariant > real memory = 2147483648 (2048 MB) > avail memory = 1819914240 (1735 MB) > Event timer "LAPIC" quality 400 > ACPI APIC Table: <090412 APIC1527> > FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs > FreeBSD/SMP: 1 package(s) x 2 core(s) > cpu0 (BSP): APIC ID: 0 > cpu1 (AP): APIC ID: 1 > ACPI BIOS Warning (bug): Optional FADT field Pm2ControlBlock has zero > address or length: 0x0000000000000000/0x1 (20130823/tbfadt-630) > ioapic0 irqs 0-23 on motherboard > kbd1 at kbdmux0 > random: initialized > acpi0: <090412 XSDT1527> on motherboard > acpi0: Power Button (fixed) > acpi0: reservation of fee00000, 1000 (3) failed > acpi0: reservation of ffb80000, 80000 (3) failed > acpi0: reservation of fec10000, 20 (3) failed > acpi0: reservation of fed40000, 5000 (3) failed > acpi0: reservation of 0, a0000 (3) failed > acpi0: reservation of 100000, 6fe00000 (3) failed > cpu0: on acpi0 > cpu1: on acpi0 > attimer0: port 0x40-0x43 irq 0 on acpi0 > Timecounter "i8254" frequency 1193182 Hz quality 0 > Event timer "i8254" frequency 1193182 Hz quality 100 > atrtc0: port 0x70-0x71 irq 8 on acpi0 > Event timer "RTC" frequency 32768 Hz quality 0 > hpet0: iomem 0xfed00000-0xfed003ff on acpi0 > Timecounter "HPET" frequency 14318180 Hz quality 950 > Event timer "HPET" frequency 14318180 Hz quality 550 > Event timer "HPET1" frequency 14318180 Hz quality 450 > Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 > acpi_timer0: <32-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0 > pcib0: port 0xcf8-0xcff on acpi0 > pci0: on pcib0 > pcib1: at device 1.0 on pci0 > pci1: on pcib1 > vgapci0: port 0xd000-0xd0ff mem > 0xd0000000-0xdfffffff,0xfebe0000-0xfebeffff,0xfea00000-0xfeafffff irq 18 > at device 5.0 on pci1 > vgapci0: Boot video device > pcib2: irq 16 at device 4.0 on pci0 > pci2: on pcib2 > re0: port > 0xe800-0xe8ff mem 0xfdfff000-0xfdffffff,0xfdff8000-0xfdffbfff irq 16 at > device 0.0 on pci2 > re0: Using 1 MSI-X message > re0: Chip rev. 0x2c800000 > re0: MAC rev. 0x00100000 > miibus0: on re0 > rgephy0: PHY 1 on miibus0 > rgephy0: none, 10baseT, 10baseT-FDX, 10baseT-FDX-flow, 100baseTX, > 100baseTX-FDX, 100baseTX-FDX-flow, 1000baseT, 1000baseT-master, > 1000baseT-FDX, 1000baseT-FDX-master, 1000baseT-FDX-flow, > 1000baseT-FDX-flow-master, auto, auto-flow > re0: Ethernet address: 50:46:5d:66:fd:10 > ahci0: port > 0xc000-0xc007,0xb000-0xb003,0xa000-0xa007,0x9000-0x9003,0x8000-0x800f > mem 0xfe9ffc00-0xfe9fffff irq 22 at device 17.0 on pci0 > ahci0: AHCI v1.10 with 4 3Gbps ports, Port Multiplier supported > ahcich0: at channel 0 on ahci0 > ahcich1: at channel 1 on ahci0 > ahcich2: at channel 2 on ahci0 > ahcich3: at channel 3 on ahci0 > ohci0: mem 0xfe9fe000-0xfe9fefff > irq 16 at device 18.0 on pci0 > usbus0 on ohci0 > ohci1: mem 0xfe9fd000-0xfe9fdfff > irq 16 at device 18.1 on pci0 > usbus1 on ohci1 > ehci0: mem > 0xfe9ff800-0xfe9ff8ff irq 17 at device 18.2 on pci0 > usbus2: EHCI version 1.0 > usbus2 on ehci0 > ohci2: mem 0xfe9fc000-0xfe9fcfff > irq 18 at device 19.0 on pci0 > usbus3 on ohci2 > ohci3: mem 0xfe9fb000-0xfe9fbfff > irq 18 at device 19.1 on pci0 > usbus4 on ohci3 > ehci1: mem > 0xfe9ff400-0xfe9ff4ff irq 19 at device 19.2 on pci0 > usbus5: EHCI version 1.0 > usbus5 on ehci1 > atapci0: port > 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xff00-0xff0f at device 20.1 on pci0 > ata0: at channel 0 on atapci0 > ata1: at channel 1 on atapci0 > hdac0: mem 0xfe9f4000-0xfe9f7fff irq 16 at > device 20.2 on pci0 > isab0: at device 20.3 on pci0 > isa0: on isab0 > pcib3: at device 20.4 on pci0 > pci3: on pcib3 > ohci4: mem 0xfe9fa000-0xfe9fafff > irq 18 at device 20.5 on pci0 > usbus6 on ohci4 > acpi_button0: on acpi0 > ppc0: port 0x378-0x37f irq 7 on acpi0 > ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode > ppbus0: on ppc0 > lpt0: on ppbus0 > lpt0: Interrupt-driven port > ppi0: on ppbus0 > uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 > pmtimer0 on isa0 > sc0: at flags 0x100 on isa0 > sc0: VGA <16 virtual consoles, flags=0x300> > vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 > atkbdc0: at port 0x60,0x64 on isa0 > atkbd0: irq 1 on atkbdc0 > kbd0 at atkbd0 > atkbd0: [GIANT-LOCKED] > acpi_throttle0: on cpu0 > hwpstate0: on cpu0 > Timecounters tick every 1.000 msec > hdacc0: at cad 0 on hdac0 > hdaa0: at nid 1 on hdacc0 > pcm0: at nid 20 and 24,26 on hdaa0 > pcm1: at nid 27 and 25 on hdaa0 > pcm2: at nid 17 on hdaa0 > random: unblocking device. > usbus0: 12Mbps Full Speed USB v1.0 > usbus1: 12Mbps Full Speed USB v1.0 > usbus2: 480Mbps High Speed USB v2.0 > usbus3: 12Mbps Full Speed USB v1.0 > usbus4: 12Mbps Full Speed USB v1.0 > usbus5: 480Mbps High Speed USB v2.0 > usbus6: 12Mbps Full Speed USB v1.0 > ugen5.1: at usbus5 > uhub0: on usbus5 > ugen4.1: at usbus4 > uhub1: on usbus4 > ugen3.1: at usbus3 > uhub2: on usbus3 > ugen2.1: at usbus2 > uhub3: on usbus2 > ugen1.1: at usbus1 > uhub4: on usbus1 > ugen0.1: at usbus0 > uhub5: on usbus0 > ugen6.1: at usbus6 > uhub6: on usbus6 > uhub6: 2 ports with 2 removable, self powered > uhub1: 3 ports with 3 removable, self powered > uhub2: 3 ports with 3 removable, self powered > uhub4: 3 ports with 3 removable, self powered > uhub5: 3 ports with 3 removable, self powered > ada0 at ahcich0 bus 0 scbus0 target 0 lun 0 > ada0: ATA-8 SATA 1.x device > ada0: Serial Number WD-WMAV27542837 > ada0: 150.000MB/s transfers (SATA 1.x, UDMA6, PIO 8192bytes) > ada0: Command Queueing enabled > ada0: 305244MB (625140335 512 byte sectors: 16H 63S/T 16383C) > ada0: Previously was known as ad4 > ada1 at ahcich1 bus 0 scbus1 target 0 lun 0 > ada1: ATA-8 SATA 2.x device > ada1: Serial Number WD-WCAWF6026337 > ada1: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) > ada1: Command Queueing enabled > ada1: 152626MB (312579695 512 byte sectors: 16H 63S/T 16383C) > ada1: Previously was known as ad6 > cd0 at ahcich2 bus 0 scbus2 target 0 lun 0 > cd0: Removable CD-ROM SCSI-0 device > cd0: Serial Number 3524497 206238502323 > cd0: 150.000MB/s transfers (SATA 1.x, UDMA5, ATAPI 12bytes, PIO 8192bytes) > cd0: Attempt to query device size failed: NOT READY, Medium not present > - tray closed > SMP: AP CPU #1 Launched! > Timecounter "TSC-low" frequency 1707704409 Hz quality 800 > uhub0: 6 ports with 6 removable, self powered > uhub3: 6 ports with 6 removable, self powered > Root mount waiting for: usbus2 > ugen2.2: at usbus2 > uhub7: on > usbus2 > Root mount waiting for: usbus2 > uhub7: 4 ports with 4 removable, self powered > ugen2.3: at usbus2 > Root mount waiting for: usbus2 > ugen2.4: at usbus2 > ukbd0: on usbus2 > kbd2 at ukbd0 > Root mount waiting for: usbus2 > ugen2.5: at usbus2 > Trying to mount root from ufs:/dev/ada0s1a [rw]... > ums0: on > usbus2 > ums0: 3 buttons and [XYZ] coordinates ID=0 > uhid0: on usbus2 > fuse-freebsd: version 0.4.4, FUSE ABI 7.8 > info: [drm] Initialized drm 1.1.0 20060810 > drmn0: on vgapci0 > info: [drm] RADEON_IS_PCI > info: [drm] initializing kernel modesetting (RS780 0x1002:0x9616 > 0x1043:0x8388). > info: [drm] register mmio base: 0xFEBE0000 > info: [drm] register mmio size: 65536 > info: [drm] radeon_atrm_get_bios: ===> Try ATRM... > info: [drm] radeon_atrm_get_bios: IGP card detected, skipping this > method... > info: [drm] radeon_acpi_vfct_bios: ===> Try VFCT... > info: [drm] radeon_acpi_vfct_bios: Get "VFCT" ACPI table > info: [drm] radeon_acpi_vfct_bios: Failed to get "VFCT" table: AE_NOT_FOUND > info: [drm] igp_read_bios_from_vram: ===> Try IGP's VRAM... > info: [drm] igp_read_bios_from_vram: VRAM base address: 0xd0000000 > info: [drm] igp_read_bios_from_vram: Map address: 0xf021f000 (262144 bytes) > info: [drm] igp_read_bios_from_vram: Incorrect BIOS signature: 0x5307 > info: [drm] radeon_read_bios: ===> Try PCI Expansion ROM... > info: [drm] radeon_read_bios: Map address: 0xc00c0000 (131072 bytes) > info: [drm] ATOM BIOS: B27722_RS780C > drmn0: info: VRAM: 256M 0x00000000C0000000 - 0x00000000CFFFFFFF (256M used) > drmn0: info: GTT: 512M 0x00000000A0000000 - 0x00000000BFFFFFFF > info: [drm] Detected VRAM RAM=256M, BAR=256M > info: [drm] RAM width 32bits DDR > [TTM] Zone kernel: Available graphics memory: 906222 kiB > [TTM] Initializing pool allocator > info: [drm] radeon: 256M of VRAM memory ready > info: [drm] radeon: 512M of GTT memory ready. > info: [drm] Supports vblank timestamp caching Rev 1 (10.10.2010). > info: [drm] Driver supports precise vblank timestamp query. > info: [drm] radeon: irq initialized. > info: [drm] GART: num cpu pages 131072, num gpu pages 131072 > info: [drm] Loading RS780 Microcode > info: [drm] PCIE GART of 512M enabled (table at 0x00000000C0040000). > drmn0: info: WB enabled > drmn0: info: fence driver on ring 0 use gpu addr 0x00000000a0000c00 and > cpu addr 0x0xec6dcc00 > drmn0: info: fence driver on ring 3 use gpu addr 0x00000000a0000c0c and > cpu addr 0x0xec6dcc0c > info: [drm] ring test on 0 succeeded in 1 usecs > info: [drm] ring test on 3 succeeded in 1 usecs > info: [drm] ib test on ring 0 succeeded in 0 usecs > info: [drm] ib test on ring 3 succeeded in 0 usecs > info: [drm] radeon_device_init: Taking over the fictitious range > 0xd0000000-0xe0000000 > iicbus0: on iicbb0 addr 0xf0 > iic0: on iicbus0 > iicbus1: on iicbb1 addr 0xc7 > iic1: on iicbus1 > iicbus2: on iicbb2 addr 0xc7 > iic2: on iicbus2 > iicbus3: on iicbb3 addr 0xc7 > iic3: on iicbus3 > iicbus4: on iicbb4 addr 0xc7 > iic4: on iicbus4 > info: [drm] Radeon Display Connectors > info: [drm] Connector 0: > info: [drm] VGA-1 > info: [drm] DDC: 0x7e40 0x7e40 0x7e44 0x7e44 0x7e48 0x7e48 0x7e4c 0x7e4c > info: [drm] Encoders: > info: [drm] CRT1: INTERNAL_KLDSCP_DAC1 > info: [drm] Connector 1: > info: [drm] DVI-D-1 > info: [drm] HPD1 > info: [drm] DDC: 0x7e50 0x7e50 0x7e54 0x7e54 0x7e58 0x7e58 0x7e5c 0x7e5c > info: [drm] Encoders: > info: [drm] DFP3: INTERNAL_KLDSCP_LVTMA > info: [drm] radeon: power management initialized > info: [drm] fb mappable at 0xD0142000 > info: [drm] vram apper at 0xD0000000 > info: [drm] size 5787648 > info: [drm] fb depth is 24 > info: [drm] pitch is 6400 > fbd0 on drmn0 > info: [drm] Initialized radeon 2.29.0 20080528 Please let me know if you need any further information from me. If yes, I would need specific commands to run on my system. It is not as is I cannot live without the printer or the UPS. I just feel that for so long - over 20 years - I have been of the opinion that FreeBSD is the greatest idea anyone ever came across. I wish I had more more to add to our community than just questions and bug reports. But I cannot - I am very, very average. Regards Manish Jain From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 17:48:02 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6E0941F5; Sun, 8 Mar 2015 17:48:02 +0000 (UTC) Received: from BLU004-OMC4S27.hotmail.com (blu004-omc4s27.hotmail.com [65.55.111.166]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "MSIT Machine Auth CA 2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2554AAC6; Sun, 8 Mar 2015 17:48:01 +0000 (UTC) Received: from BLU436-SMTP164 ([65.55.111.136]) by BLU004-OMC4S27.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751); Sun, 8 Mar 2015 10:47:55 -0700 X-TMN: [zlyEEsEP7ZdAGEjuOvo6rqA7vsQWK4WW] X-Originating-Email: [bourne.identity@hotmail.com] Message-ID: Date: Sun, 8 Mar 2015 23:17:43 +0530 From: Manish Jain User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 MIME-Version: 1.0 To: Adrian Chadd Subject: Re: Is there any plan to adopt devtmpfs ? References: In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 08 Mar 2015 17:47:52.0740 (UTC) FILETIME=[00513E40:01D059C8] Cc: "freeb >> User Questions" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 17:48:02 -0000 On 03/05/2015 22:30, Adrian Chadd wrote: > It's not devtmpfs - it's likely some USB bugs that haven't been nailed down. > > can you gather some debugging output (dmesg > file.txt would be a good > start) and email that to freebsd-usb@freebsd.org ? It may be something > that's been fixed since 10.1 was released. > > Thanks! > > > > -adrian > It does not work. I tried adding all clauses/lines to /etc/hosts, but still X would refuse to come up if the name ends with .domain.super_domain (specifically roundabouttech.com) I have opted for QMail, specifically hoping that hostname is not a problem and, more importantly, that it seems to have better documentation available than even for the inbuilt sendmail system. Even QMail documentation is not exactly state-of-the-art, but it seems adaptable. Thanks Manish jain From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 17:55:30 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 62C20458 for ; Sun, 8 Mar 2015 17:55:30 +0000 (UTC) Received: from mail-yk0-x233.google.com (mail-yk0-x233.google.com [IPv6:2607:f8b0:4002:c07::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 09457BF6 for ; Sun, 8 Mar 2015 17:55:30 +0000 (UTC) Received: by ykr79 with SMTP id 79so3799132ykr.13 for ; Sun, 08 Mar 2015 10:55:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=seibercom.net; s=google; h=date:from:to:subject:message-id:in-reply-to:references:reply-to :organization:mime-version:content-type; bh=6i+KeXdhbQwwRgNCg70VsOT+eKVWOTmKAMC/JH9HeaU=; b=bOM/CYBzcs1QLCwU3B0xhqVFCyYlCyOOgyZo9vPl4WjKjGtt5skTxJc6kW8x1z1KPD zZm/5pGG4RfnaF30cvMVqM9+1wo6yKTCCSuJ4zvVRcoBRdea/uE3DjK95IsoG7tWcMiU KTEJhNVrg1erlJXflR4nlwwZoUWtnKXBet2bs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:reply-to:organization:mime-version:content-type; bh=6i+KeXdhbQwwRgNCg70VsOT+eKVWOTmKAMC/JH9HeaU=; b=VAckLqRMGq70y17ljOqogdlq3jiG1oa+b0MRKFtJjEh2Jtxnp9Rlr+aAxeaS+o0MJZ dt8/0dJSCZ6YOq2Fr0HqUCwNPixYjYzN+GFmDl59x/0GEIn5Wi22jKyx+oYc7lz5myNh kRyli7cSdOxsE1EJljlLYYH3SGItIO+CLiWrRRaztz59O+ihRFFQnlg1Q13icTNbiAky 9MstZFJv3LLYXVwF2mz/OA2YCNvQgX+yjBvtma2FlufOWTvi+6leR9/7Dfs6ETjqUkEH z3anVKX/MRI2mMxzMD9zAxUsPcQ3X6B8YgnD9ulfB4rQLYWDjub5/UTaNniwF4o1qWwO nMvw== X-Gm-Message-State: ALoCoQn6fm2rc4J3+dzxUnvqRTVi4ByUe3oymtl/2RMaxE/J6+slvmBEAmEymTRkqsf+NWFIRD6h X-Received: by 10.170.87.5 with SMTP id e5mr26527555yka.123.1425837329081; Sun, 08 Mar 2015 10:55:29 -0700 (PDT) Received: from scorpio.seibercom.net (cpe-076-182-104-150.nc.res.rr.com. [76.182.104.150]) by mx.google.com with ESMTPSA id t44sm13978815yht.23.2015.03.08.10.55.28 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 08 Mar 2015 10:55:28 -0700 (PDT) Received: from scorpio (cpe-076-182-104-150.nc.res.rr.com [76.182.104.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by scorpio.seibercom.net (Postfix) with ESMTPSA id 3l0Vhb3wd8z3DlX3 for ; Sun, 8 Mar 2015 13:55:27 -0400 (EDT) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.98.6 at scorpio.seibercom.net Date: Sun, 8 Mar 2015 13:55:19 -0400 From: Jerry To: FreeBSD FreeBSD Subject: Re: Is there any plan to adopt devtmpfs ? Message-ID: <20150308135519.055d3ed4@scorpio> In-Reply-To: References: <54F88D64.4000607@cyberleo.net> Reply-To: FreeBSD FreeBSD Organization: seibercom NET X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.25; amd64-portbld-freebsd10.1) MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; boundary="Sig_/Cr4hlrzB/mFbGx+sLiaF2Gn"; protocol="application/pgp-signature" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 17:55:30 -0000 --Sig_/Cr4hlrzB/mFbGx+sLiaF2Gn Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Sun, 8 Mar 2015 23:06:15 +0530, Manish Jain stated: > It is not as is I cannot live without the printer or the UPS. I just=20 > feel that for so long - over 20 years - I have been of the opinion that=20 > FreeBSD is the greatest idea anyone ever came across. Seriously, you lead one hell of a sheltered life. --=20 Jerry --Sig_/Cr4hlrzB/mFbGx+sLiaF2Gn Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJU/I0HAAoJEElTsHIJnX8efL8IAM3TDON+HF7CenG5Zka5ulfD 24mrxA0WBoIJN6PV/CfC6FxnBPnnizarNuQzqlX0v8DtcuUALlZIS/pfShoCC7gK w8inXGKBRnt/cv0gxjPoTJ6Mj3WfzyeRi5VkgxwJOvi5Dx5NSDlQWZMKJX0uYfl/ +Z0CNNgzr6T5l2rrUifxKE79tTx1zLEKiPL3Koef4Uc9QWTgXxFcp+kV9mTl0UKj v8Fc2OVJcT3dIqtW5TeLCwSd2CLkTTmruSxpJKq36zNsRAu6eHV4D+kPI8p4VieD BhK0yqVpnJk3P7tYNxgz0PsQaaBGVxnUq+iFwuoCI2cVlu/uXZ2TeqcjwjJNDu0= =3uKa -----END PGP SIGNATURE----- --Sig_/Cr4hlrzB/mFbGx+sLiaF2Gn-- From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 17:56:31 2015 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5D51B541 for ; Sun, 8 Mar 2015 17:56:31 +0000 (UTC) Received: from s17151775.onlinehome-server.info (s17151775.onlinehome-server.info [IPv6:2001:8d8:86b:9300::29:494f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 268DFC18 for ; Sun, 8 Mar 2015 17:56:31 +0000 (UTC) Received: by s17151775.onlinehome-server.info (Postfix, from userid 502) id 79B97425401; Sun, 8 Mar 2015 18:14:38 +0100 (CET) To: questions@freebsd.org Subject: Quote products details X-PHP-Originating-Script: 502:a.php From: Grace Reply-To: gracemacf@yahoo.com MIME-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: 8bit Message-Id: <20150308173239.79B97425401@s17151775.onlinehome-server.info> Date: Sun, 8 Mar 2015 18:14:38 +0100 (CET) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 17:56:31 -0000 Dear Sales Manager, This is Grace, the Sales Manager of Stock Pile LTD, Thailand. We are an US based B2B Platform. We are in the process of gathering various types of trade-able goods for various international markets like USA, UK, India, Germany, Australia and various other Asian & European countries. We offer great interest to do a purchase agreement with your company. Please get back to us with the following information 1,Minimum Order 2,Payment Terms 3,Product Specification 4,Delivery Time 5,Country Of Origin 6,Sample Availability 7,Is Your Price Negotiable? We would need a quick reply. Brst Regards, Grace Macfede Amata Nakorn Industrial Estate 700/553, Moo 7, T.Don Hua Roh, A.Maung, Chonburi, 20000, Thailand From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 18:26:07 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D5C96DF7 for ; Sun, 8 Mar 2015 18:26:07 +0000 (UTC) Received: from mail-ig0-x22c.google.com (mail-ig0-x22c.google.com [IPv6:2607:f8b0:4001:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9C0EDFBE for ; Sun, 8 Mar 2015 18:26:07 +0000 (UTC) Received: by igal13 with SMTP id l13so15664982iga.0 for ; Sun, 08 Mar 2015 11:26:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=R4CjVYluhXLRK9fcrZln07KNmmTEQ8+Y/7fIyA6rXk4=; b=TM4rrQKp7/8BONHOQkAPmHJFmbNtSywOns5SOxAzySu0FKr799Zye5q0DknJNQAFno 0wexR/irz2sua84yHF9lfOhMS6LoplZZ/OxSI3cNBPEoS+VoZyxp63LkIke1X6cQ+50P /PBZmc1GSder9VD+JDJM8dtDLsSwdthMggK+FgDsB5fzdxrmuc/Xxr9Fx95QQ6l7hkFh EFJpC0MCBVAxqckflAfbUNFX3qQMDJNUiOD2oHVcOriLB/noWaU7gTZ0SKmM4M/0e6SM IsinfUpMlJ8BTy21iFC2otolkG/m9ZvduXomk93jLb/lFqVH0uCeWnPnAV70qVBfEWwR plWQ== MIME-Version: 1.0 X-Received: by 10.50.142.106 with SMTP id rv10mr42402320igb.18.1425839167012; Sun, 08 Mar 2015 11:26:07 -0700 (PDT) Received: by 10.64.223.110 with HTTP; Sun, 8 Mar 2015 11:26:06 -0700 (PDT) Date: Sun, 8 Mar 2015 19:26:06 +0100 Message-ID: Subject: Adding a root CA cert on FreeBSD10 From: Florian Heigl To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 18:26:08 -0000 Hi, I'm trying to identify how and where to add a trusted root certificate in FreeBSD10. Doing so used to be dead easy on FreeBSD until now, just drop them in /usr/local/etc/ssl/certs or even /etc/ssl/certs and it worked. This seems to be no longer true? I'm working with CACert or "private" CAs in many cases, so this is a standard thing. Right now I'm pulling my hair how to make it work in FreeBSD 10. What I want: - openssl s_client -connect to work I'm aware different tools are using different methods, but i.e. curl on many OS is tamed to respect the openssl CAs so I figure once openssl is happy it should be all good. But OpenSSL ain't happy: # openssl s_client -connect demoserver:443 | grep -i -e issuer -e verify depth=1 O = Root CA, OU = http://www.cacert.org, CN = CA Cert Signing Authority, emailAddress = support@cacert.org verify error:num=19:self signed certificate in certificate chain verify return:0 issuer=/O=Root CA/OU=http://www.cacert.org/CN=CA Cert Signing Authority/emailAddress=support@cacert.org Verify return code: 19 (self signed certificate in certificate chain) I've put the CACert certificates in the following places, to no avail: /etc/ssl/certs/cacert-class3.crt /etc/ssl/certs/cacert-root.crt /usr/local/etc/ssl/cacert-root.crt /usr/local/etc/ssl/certs/cacert-root.crt /usr/local/etc/ssl/certs/cacert-class3.crt /usr/local/etc/ssl/cacert-class3.crt /usr/local/etc/openssl/cacert-class3.crt /usr/local/etc/openssl/cacert-root.crt /usr/local/etc/openssl/certs/cacert-class3.crt /usr/local/etc/openssl/certs/cacert-root.crt I've not tried to patch them into the OS-side CA bundles like ca_root_nss-3.17.4_1. That would be utterly stupid since they would be lost on update of the package. Is there any documentation regarding certs that is _working_ on FreeBSD10? I'm so far still inclined the error is on my side, but without current documentation it's hard to tell. Florian (I hope we didn't inherit another shitty linux mechanism like hal, update-ca-certs or resolvconf to break proven functionality. If so, please let me know what it is and I'll gladly open a PR to name it a regression. Also, please excuse my lack of enthusiasm, but this has ruined much of my day meaning the coming week will also be ruined, trying to catch up) -- the purpose of libvirt is to provide an abstraction layer hiding all xen features added since 2006 until they were finally understood and copied by the kvm devs. From owner-freebsd-questions@FreeBSD.ORG Sun Mar 8 18:39:58 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id AEF04288 for ; Sun, 8 Mar 2015 18:39:58 +0000 (UTC) Received: from mail-la0-x22f.google.com (mail-la0-x22f.google.com [IPv6:2a00:1450:4010:c03::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4A60A1C9 for ; Sun, 8 Mar 2015 18:39:58 +0000 (UTC) Received: by labmn12 with SMTP id mn12so4834582lab.0 for ; Sun, 08 Mar 2015 11:39:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to:content-type; bh=cpz9V5/vyuKS/1VG4Z6bHjZnDfqfwbRigbgZ9+WkuMQ=; b=H/Fphk0NsxVBA1oY0Q7wG2fKW1yOgzA299xVuSHcnWQ2hMAunoB6eLUrSN5/zIdLbD GqPtE0nW/wrr0QfDUk42sgymhoDWV23YbWwk1gZWFMkdnqtQJpHZvRombIDGkEk2vs3v T/rgkuByL5P7bZwULhNPcEJCy6ngTHvEDn1Ds1xEC6WIY1rZu6zkWoMfGXAA/bfZ1Vil sKKEZERDCl/jHCI2/3J2wZnuPOkyhlp4nW44fK8q2ErmCBixIVKIPvjEk+oULCPFNNxt 5ditW1nCav7+CvINv1dAL8gxZNchKCGnHKuQCWNHYcn+hj+6AnmPZ55GNqxJRFZuuWC3 fbrQ== X-Received: by 10.152.6.163 with SMTP id c3mr21972468laa.69.1425839996183; Sun, 08 Mar 2015 11:39:56 -0700 (PDT) MIME-Version: 1.0 Received: by 10.112.9.202 with HTTP; Sun, 8 Mar 2015 11:39:15 -0700 (PDT) From: Odhiambo Washington Date: Sun, 8 Mar 2015 21:39:15 +0300 Message-ID: Subject: buildworld failure on 10.1-REL To: User Questions Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Mar 2015 18:39:58 -0000 I have encountered this since I applied the openssl patch recently. I have even moved my /usr/src aside and fetched a new source: svn checkout https://svn0.us-east.freebsd.org/base/release/10.1.0 /usr/src But.. ===> gnu/usr.bin/gperf/doc (depend) clang++ -O2 -pipe -I/usr/obj/usr/src/tmp/legacy/usr/include -I/usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/lib -I/usr/src/gn u/usr.bin/gperf -c /usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/src/bool-array.cc clang++ -O2 -pipe -I/usr/obj/usr/src/tmp/legacy/usr/include -I/usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/lib -I/usr/src/gn u/usr.bin/gperf -c /usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/src/hash-table.cc clang++ -O2 -pipe -I/usr/obj/usr/src/tmp/legacy/usr/include -I/usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/lib -I/usr/src/gn u/usr.bin/gperf -c /usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/src/input.cc clang++ -O2 -pipe -I/usr/obj/usr/src/tmp/legacy/usr/include -I/usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/lib -I/usr/src/gn u/usr.bin/gperf -c /usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/src/keyword-list.cc clang++ -O2 -pipe -I/usr/obj/usr/src/tmp/legacy/usr/include -I/usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/lib -I/usr/src/gn u/usr.bin/gperf -c /usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/src/keyword.cc clang++ -O2 -pipe -I/usr/obj/usr/src/tmp/legacy/usr/include -I/usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/lib -I/usr/src/gn u/usr.bin/gperf -c /usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/src/main.cc clang++ -O2 -pipe -I/usr/obj/usr/src/tmp/legacy/usr/include -I/usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/lib -I/usr/src/gn u/usr.bin/gperf -c /usr/src/gnu/usr.bin/gperf/../../../contrib/gperf/src/options.cc *** Error code 1 Stop. make[3]: stopped in /usr/src/gnu/usr.bin/gperf *** Error code 1 Stop. make[2]: stopped in /usr/src *** Error code 1 Stop. make[1]: stopped in /usr/src *** Error code 1 Stop. make: stopped in /usr/src wash@mail:/usr/src$ uname-a -bash: uname-a: command not found wash@mail:/usr/src$ uname -a FreeBSD mail.ili.or.ug 10.1-RELEASE-p5 FreeBSD 10.1-RELEASE-p5 #4: Thu Feb 19 16:55:56 EAT 2015 root@mail.ili.or.ug:/usr/obj/usr/src/sys/BEASTIE-10.x amd64 What am I gonna do? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler." From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 14:04:17 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 0B1B7A98 for ; Mon, 9 Mar 2015 14:04:17 +0000 (UTC) Received: from mail-lb0-x232.google.com (mail-lb0-x232.google.com [IPv6:2a00:1450:4010:c04::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6CA0AD2F for ; Mon, 9 Mar 2015 14:04:16 +0000 (UTC) Received: by lbiz11 with SMTP id z11so45264647lbi.3 for ; Mon, 09 Mar 2015 07:04:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to:content-type; bh=S160egkzSOHlqQg/fzfKBV7jQ28PK6+I2Mans9Zrid4=; b=Fi0S9vn62BmJZbRKbJzbLocd14k/xDoNfxHMTMKB9Y6xCxBtSLgq5GRgyoJ60KvCG3 BSSjIoj/mcUpq7Yxhx/Z+jA4ggGuTXHn6QdVvzoV+lkXadAGzLS+nRA9MxVWPSCAbf8t 9CYTjUG/4GdCMQoklZFyKdD9Ccic+WpW/qrFF9BfJOzzHh0pOqYQCJIUSt9ZuC+n4Hna GEZe4OxRYBRsntp/GEWY3XZF/lXTS+KihqOU0IW9SDaCV7KwObBc0eTjnoTfWGZ+l5Q6 KJvlEayUt5A1OjuY0kL5KWA49/fbsgjo7mEIv8INsZSC4p/70pZia05Os/vWSaQtDl9F BWfw== X-Received: by 10.152.18.225 with SMTP id z1mr26315778lad.124.1425909854449; Mon, 09 Mar 2015 07:04:14 -0700 (PDT) MIME-Version: 1.0 Received: by 10.112.89.170 with HTTP; Mon, 9 Mar 2015 07:03:54 -0700 (PDT) From: Monah Baki Date: Mon, 9 Mar 2015 10:03:54 -0400 Message-ID: Subject: FreeBSD PF question To: FreeBSD Questions Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 14:04:17 -0000 Hi All, I have a freebsd 10.1 server with a single interface (bge0) running squid in intercept mode. There is a Cisco device doing the policy routing. interface GigabitEthernet0/0/1.1 encapsulation dot1Q 1 native ip address 10.0.0.9 255.255.255.0 no ip redirects no ip unreachables ip nat inside standby 1 ip 10.0.0.10 standby 1 priority 120 standby 1 preempt standby 1 name HSRP ip policy route-map CFLOW ip access-list extended REDIRECT deny tcp host 10.0.0.24 any eq www permit tcp host 10.0.0.23 any eq www route-map CFLOW permit 10 match ip address REDIRECT set ip next-hop 10.0.0.24 My squid.conf has the following: http_port 3128 http_port 3129 intercept My pf.conf has the following: rdr on bge0 inet proto tcp from 10.0.0.0/8 to any port 80 -> 10.0.0.24 port 3129 # block in pass in log quick on bge0 pass out log quick on bge0 pass out keep state User gets an access denied on browsing, and in my cache.log file, I see: WARNING: Forwarding loop detected for: Any help/guidance is appreciated. Thanks From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 14:12:53 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 0F2C7DF6 for ; Mon, 9 Mar 2015 14:12:53 +0000 (UTC) Received: from mail-yh0-x22d.google.com (mail-yh0-x22d.google.com [IPv6:2607:f8b0:4002:c01::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id BB59AE59 for ; Mon, 9 Mar 2015 14:12:52 +0000 (UTC) Received: by yhoa41 with SMTP id a41so36144577yho.9 for ; Mon, 09 Mar 2015 07:12:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=m0l1ZIVzJ1QVozBUnCM4V7BB/Wn76oeODd64IIaV4gw=; b=i5Gi2KpHO+0N+qux66w2qpVKUu/pwwnQJy8dTkYJewi99Y9r99ihtHJITogA77DZFB 3Fu5H6bOWtpYuJ7S4UPCri9vMJHcCvQArX0nR+XRW0Bmy9OgNjvjOA+V8+wGtrnsbZ0y UzPmKp+KN4y3GwYZ7/tJk9rxNhRyNi7rWnYEwKemQJng5zSOktwWh4AwXPxKyxrAYrOH bWOSf+XE7cgFy3GEugXKZwqXzYvxCyfjRC4QQZ7qN0OXJJ2DyRPqh+wCSbMSUSMvljhQ e/AFOI743qxRYBrCMQ2mqLTXFPY9DbywkS2t9zg19HCTu0YwNhb8mN0Gi/ZZM4AWbfK1 h92A== MIME-Version: 1.0 X-Received: by 10.236.103.166 with SMTP id f26mr26526919yhg.187.1425910371859; Mon, 09 Mar 2015 07:12:51 -0700 (PDT) Received: by 10.170.188.1 with HTTP; Mon, 9 Mar 2015 07:12:51 -0700 (PDT) In-Reply-To: References: Date: Mon, 9 Mar 2015 14:12:51 +0000 Message-ID: Subject: Re: Adding a root CA cert on FreeBSD10 From: krad To: Florian Heigl Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 14:12:53 -0000 I got mine working fine when i built a transparent ssl proxy. I had to put all the root certs into /etc/ssl/certs The filenames had to be a the hash of the cert though. This can be generated via the following command openssl x509 -noout -hash -in eg # openssl x509 -noout -hash -in some_cert 0810bc98 # mv some_cert /etc/ssl/certs/0810bc98.o On 8 March 2015 at 18:26, Florian Heigl wrote: > Hi, > > I'm trying to identify how and where to add a trusted root certificate in > FreeBSD10. > > Doing so used to be dead easy on FreeBSD until now, just drop them in > /usr/local/etc/ssl/certs or even /etc/ssl/certs and it worked. > This seems to be no longer true? > > I'm working with CACert or "private" CAs in many cases, so this is a > standard thing. Right now I'm pulling my hair how to make it work in > FreeBSD 10. > > What I want: > - openssl s_client -connect to work > > I'm aware different tools are using different methods, but i.e. curl on > many OS is tamed to respect the openssl CAs so I figure once openssl is > happy it should be all good. > But OpenSSL ain't happy: > > > # openssl s_client -connect demoserver:443 | grep -i -e issuer -e verify > depth=1 O = Root CA, OU = http://www.cacert.org, CN = CA Cert Signing > Authority, emailAddress = support@cacert.org > verify error:num=19:self signed certificate in certificate chain > verify return:0 > issuer=/O=Root CA/OU=http://www.cacert.org/CN=CA Cert Signing > Authority/emailAddress=support@cacert.org > Verify return code: 19 (self signed certificate in certificate chain) > > I've put the CACert certificates in the following places, to no avail: > > /etc/ssl/certs/cacert-class3.crt > /etc/ssl/certs/cacert-root.crt > /usr/local/etc/ssl/cacert-root.crt > /usr/local/etc/ssl/certs/cacert-root.crt > /usr/local/etc/ssl/certs/cacert-class3.crt > /usr/local/etc/ssl/cacert-class3.crt > /usr/local/etc/openssl/cacert-class3.crt > /usr/local/etc/openssl/cacert-root.crt > /usr/local/etc/openssl/certs/cacert-class3.crt > /usr/local/etc/openssl/certs/cacert-root.crt > > I've not tried to patch them into the OS-side CA bundles > like ca_root_nss-3.17.4_1. That would be utterly stupid since they would be > lost on update of the package. > > Is there any documentation regarding certs that is _working_ on FreeBSD10? > I'm so far still inclined the error is on my side, but without current > documentation it's hard to tell. > > > Florian > > > (I hope we didn't inherit another shitty linux mechanism like hal, > update-ca-certs or resolvconf to break proven functionality. > If so, please let me know what it is and I'll gladly open a PR to name it a > regression. > Also, please excuse my lack of enthusiasm, but this has ruined much of my > day meaning the coming week will also be ruined, trying to catch up) > > > > -- > the purpose of libvirt is to provide an abstraction layer hiding all xen > features added since 2006 until they were finally understood and copied by > the kvm devs. > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 14:24:59 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1BAF1F79 for ; Mon, 9 Mar 2015 14:24:59 +0000 (UTC) Received: from mail-yh0-x234.google.com (mail-yh0-x234.google.com [IPv6:2607:f8b0:4002:c01::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id C9060F6F for ; Mon, 9 Mar 2015 14:24:58 +0000 (UTC) Received: by yhl29 with SMTP id 29so36188342yhl.0 for ; Mon, 09 Mar 2015 07:24:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=GNcPep08zOyQjkVms655FVbX//Z7TqEvcEtM82glk74=; b=xhzlHXxhlXyOv8ZYUX7CU+pPpwBE7EUkDz0/mAYF+2377eUfuXSX6Z7yDDjT5QFQdT WvHcBZ3ED8QqRpli1dJkWJjbuRhEtHrl66UhqqDC4NqU0jLisFqduEL18heIlmHk/1GH kNXpdn+MfGtDHrPSaRNA8x9/SYNIG1PXCmgF/5eJAN1VccnwDRVEIBImcxm/1rIEgJOa tiIyltjoNmXO5B5VB8CMHccRoEg8btt5U7RET1QW2a8yXhzloCTF/TSzs44wCzfIYsbc PiO5cVfSkYm76NgJJYjldCLqU02SuJO6zmt2f9HF3tmAqE6OgXere9WA9Kbmj1Bv4n64 U4QQ== MIME-Version: 1.0 X-Received: by 10.236.105.227 with SMTP id k63mr27106004yhg.100.1425911097959; Mon, 09 Mar 2015 07:24:57 -0700 (PDT) Received: by 10.170.188.1 with HTTP; Mon, 9 Mar 2015 07:24:57 -0700 (PDT) In-Reply-To: References: Date: Mon, 9 Mar 2015 14:24:57 +0000 Message-ID: Subject: Re: FreeBSD PF question From: krad To: Monah Baki Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 14:24:59 -0000 It sounds like your cisco isnt letting the squid web traffic out and redirecting it back to itself. You need to exclude the squid proxyies address from redirection On 9 March 2015 at 14:03, Monah Baki wrote: > Hi All, > > I have a freebsd 10.1 server with a single interface (bge0) running squid > in intercept mode. There is a Cisco device doing the policy routing. > > interface GigabitEthernet0/0/1.1 > > encapsulation dot1Q 1 native > > ip address 10.0.0.9 255.255.255.0 > > no ip redirects > > no ip unreachables > > ip nat inside > > standby 1 ip 10.0.0.10 > > standby 1 priority 120 > > standby 1 preempt > > standby 1 name HSRP > > ip policy route-map CFLOW > > > > ip access-list extended REDIRECT > > deny tcp host 10.0.0.24 any eq www > > permit tcp host 10.0.0.23 any eq www > > > > route-map CFLOW permit 10 > > match ip address REDIRECT > set ip next-hop 10.0.0.24 > > My squid.conf has the following: > http_port 3128 > http_port 3129 intercept > > > > My pf.conf has the following: > > rdr on bge0 inet proto tcp from 10.0.0.0/8 to any port 80 -> 10.0.0.24 > port > 3129 > # block in > pass in log quick on bge0 > pass out log quick on bge0 > pass out keep state > > > > User gets an access denied on browsing, and in my cache.log file, I see: > WARNING: Forwarding loop detected for: > > > > Any help/guidance is appreciated. > > > Thanks > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 14:27:36 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 24FEB19B for ; Mon, 9 Mar 2015 14:27:36 +0000 (UTC) Received: from mail-lb0-x22c.google.com (mail-lb0-x22c.google.com [IPv6:2a00:1450:4010:c04::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9662AF9A for ; Mon, 9 Mar 2015 14:27:35 +0000 (UTC) Received: by lbdu14 with SMTP id u14so50268576lbd.0 for ; Mon, 09 Mar 2015 07:27:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=Wsi2QiXa+wWRQoCORhjGp8fleeoq0Ym9fYPcfk+pPPs=; b=THOfmV1WKX5+g1tMfDPfaBneW/+Lv/l/tk1cGdr5ZfIY6HoIxbgR/h+DPAXac5ewSM 8k2EhQQ4q7Eac1ZrEQ42D9XE5JgPMhcRvMMO9ItdW1Sorxby7CIZ5pTv4cg/jD+IFRBj /2hDP8/ip+ysJHIOxmp8nCdzKIG0kyYQMCEGl/vZtQG/7DR1UWDLs3BUEt1BbC/gEZyi pR6GXopsvH8g4ruz3ph67c8o0ew8HuONioLvZVXdcFaeZNYmaO+JIOEfINl0FT8BzJBo GWM/I3Zo54r53shOsSXDWsOYDdK3FQMjRzH6Z9jQXRwtiHRGG2pg0z4cOTvGIfu0t27+ ycKA== X-Received: by 10.153.8.135 with SMTP id dk7mr25602167lad.93.1425911252849; Mon, 09 Mar 2015 07:27:32 -0700 (PDT) MIME-Version: 1.0 Received: by 10.112.89.170 with HTTP; Mon, 9 Mar 2015 07:27:12 -0700 (PDT) In-Reply-To: References: From: Monah Baki Date: Mon, 9 Mar 2015 10:27:12 -0400 Message-ID: Subject: Re: FreeBSD PF question To: krad Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 14:27:36 -0000 Should I do this on the cisco itself? On Mon, Mar 9, 2015 at 10:24 AM, krad wrote: > It sounds like your cisco isnt letting the squid web traffic out and > redirecting it back to itself. You need to exclude the squid proxyies > address from redirection > > On 9 March 2015 at 14:03, Monah Baki wrote: > >> Hi All, >> >> I have a freebsd 10.1 server with a single interface (bge0) running squid >> in intercept mode. There is a Cisco device doing the policy routing. >> >> interface GigabitEthernet0/0/1.1 >> >> encapsulation dot1Q 1 native >> >> ip address 10.0.0.9 255.255.255.0 >> >> no ip redirects >> >> no ip unreachables >> >> ip nat inside >> >> standby 1 ip 10.0.0.10 >> >> standby 1 priority 120 >> >> standby 1 preempt >> >> standby 1 name HSRP >> >> ip policy route-map CFLOW >> >> >> >> ip access-list extended REDIRECT >> >> deny tcp host 10.0.0.24 any eq www >> >> permit tcp host 10.0.0.23 any eq www >> >> >> >> route-map CFLOW permit 10 >> >> match ip address REDIRECT >> set ip next-hop 10.0.0.24 >> >> My squid.conf has the following: >> http_port 3128 >> http_port 3129 intercept >> >> >> >> My pf.conf has the following: >> >> rdr on bge0 inet proto tcp from 10.0.0.0/8 to any port 80 -> 10.0.0.24 >> port >> 3129 >> # block in >> pass in log quick on bge0 >> pass out log quick on bge0 >> pass out keep state >> >> >> >> User gets an access denied on browsing, and in my cache.log file, I see: >> WARNING: Forwarding loop detected for: >> >> >> >> Any help/guidance is appreciated. >> >> >> Thanks >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to " >> freebsd-questions-unsubscribe@freebsd.org" >> > > From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 14:46:37 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CC8D88D3 for ; Mon, 9 Mar 2015 14:46:37 +0000 (UTC) Received: from mail-yk0-x229.google.com (mail-yk0-x229.google.com [IPv6:2607:f8b0:4002:c07::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8384E238 for ; Mon, 9 Mar 2015 14:46:37 +0000 (UTC) Received: by ykbq9 with SMTP id q9so4627369ykb.5 for ; Mon, 09 Mar 2015 07:46:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=m6B1Tn+v+MgnLYQ9WIfAN9gfCdw5TNrbPfPymp9kNsQ=; b=dGSx9txkWEw9b0XXFgCdlHzm3VoTZ0wjuHzpr4iMnMTjxT+sjH3vAA/WpHbNYuYVtm /rErny7eJp6NtJ7f9q3vJao4mlMLHu+3KWn1UUPhP750z7n28iDgmBctIlHsn2I8XmAM 5KPqIazyHRNLKiqp5ZZptbUufbvoEB2OY0TdJJ0w5pv1FUARjQ7yul1ygvrU7IUkG4zn vwe9k+cCQ3FGGRfRsSiYGrXDRXv2PiND43+u2rB5IPkOgqNUU8bCIUaKRwl/ujZK65T3 AYkVfWnR5sWzW8I7AyzqNlyseZbrrMm6C8wKKlwtt5TbrO5hQo1lp3htDdt5IfENy6k+ pdDg== MIME-Version: 1.0 X-Received: by 10.236.103.166 with SMTP id f26mr26678965yhg.187.1425912396489; Mon, 09 Mar 2015 07:46:36 -0700 (PDT) Received: by 10.170.188.1 with HTTP; Mon, 9 Mar 2015 07:46:36 -0700 (PDT) In-Reply-To: References: Date: Mon, 9 Mar 2015 14:46:36 +0000 Message-ID: Subject: Re: FreeBSD PF question From: krad To: Monah Baki Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 14:46:38 -0000 yes the squid box needs to be whitelisted for no redirection On 9 March 2015 at 14:27, Monah Baki wrote: > Should I do this on the cisco itself? > > On Mon, Mar 9, 2015 at 10:24 AM, krad wrote: > >> It sounds like your cisco isnt letting the squid web traffic out and >> redirecting it back to itself. You need to exclude the squid proxyies >> address from redirection >> >> On 9 March 2015 at 14:03, Monah Baki wrote: >> >>> Hi All, >>> >>> I have a freebsd 10.1 server with a single interface (bge0) running squid >>> in intercept mode. There is a Cisco device doing the policy routing. >>> >>> interface GigabitEthernet0/0/1.1 >>> >>> encapsulation dot1Q 1 native >>> >>> ip address 10.0.0.9 255.255.255.0 >>> >>> no ip redirects >>> >>> no ip unreachables >>> >>> ip nat inside >>> >>> standby 1 ip 10.0.0.10 >>> >>> standby 1 priority 120 >>> >>> standby 1 preempt >>> >>> standby 1 name HSRP >>> >>> ip policy route-map CFLOW >>> >>> >>> >>> ip access-list extended REDIRECT >>> >>> deny tcp host 10.0.0.24 any eq www >>> >>> permit tcp host 10.0.0.23 any eq www >>> >>> >>> >>> route-map CFLOW permit 10 >>> >>> match ip address REDIRECT >>> set ip next-hop 10.0.0.24 >>> >>> My squid.conf has the following: >>> http_port 3128 >>> http_port 3129 intercept >>> >>> >>> >>> My pf.conf has the following: >>> >>> rdr on bge0 inet proto tcp from 10.0.0.0/8 to any port 80 -> 10.0.0.24 >>> port >>> 3129 >>> # block in >>> pass in log quick on bge0 >>> pass out log quick on bge0 >>> pass out keep state >>> >>> >>> >>> User gets an access denied on browsing, and in my cache.log file, I see: >>> WARNING: Forwarding loop detected for: >>> >>> >>> >>> Any help/guidance is appreciated. >>> >>> >>> Thanks >>> _______________________________________________ >>> freebsd-questions@freebsd.org mailing list >>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >>> To unsubscribe, send any mail to " >>> freebsd-questions-unsubscribe@freebsd.org" >>> >> >> > From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 14:57:37 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B1EEADF4 for ; Mon, 9 Mar 2015 14:57:37 +0000 (UTC) Received: from mail-la0-x230.google.com (mail-la0-x230.google.com [IPv6:2a00:1450:4010:c03::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1D8B43B5 for ; Mon, 9 Mar 2015 14:57:37 +0000 (UTC) Received: by labgm9 with SMTP id gm9so2179256lab.13 for ; Mon, 09 Mar 2015 07:57:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=CfjO3+ehAvlCoKEKiHKIaWOWrVGovyTWUJanHN9+X3o=; b=JE2VFvGG9hbox4EuIiPBV8onkO4Bfy/WnJqlg14BBRf9Z+E9g7gi0LKNCeoXpKpkxt o5PMYhBlaQ8yO1HpSVV5TjCBuWQyQITAqaSnn5IkzQHuAObrmaF7EZ++zT+1F6vFg7iM leplzP5poMtgRtlhqdpRRz0Uv4zo/7othY2lw6AT1kxOhTo1JOKWFK2FwlS7ST8PFqWl tvrfxTsWqOkkMCMHxI5kY1WCJVRSRPrD2DZVG7af5jUoOe0b23m8wYVKzxeBEtrSWHny Tb3iHoxzc6RPeviT3zjZoREiEivbpemBg/qKyX2qw99VCCB4i+VdgBDpB4I3H7daWaWs WlZg== X-Received: by 10.152.245.41 with SMTP id xl9mr9338306lac.24.1425913054881; Mon, 09 Mar 2015 07:57:34 -0700 (PDT) MIME-Version: 1.0 Received: by 10.112.89.170 with HTTP; Mon, 9 Mar 2015 07:57:14 -0700 (PDT) In-Reply-To: References: From: Monah Baki Date: Mon, 9 Mar 2015 10:57:14 -0400 Message-ID: Subject: Re: FreeBSD PF question To: krad Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 14:57:37 -0000 I'm a not a cisco person, but "no ip redirect" shouldn't that take care of it? Thanks On Mon, Mar 9, 2015 at 10:46 AM, krad wrote: > yes the squid box needs to be whitelisted for no redirection > > On 9 March 2015 at 14:27, Monah Baki wrote: > >> Should I do this on the cisco itself? >> >> On Mon, Mar 9, 2015 at 10:24 AM, krad wrote: >> >>> It sounds like your cisco isnt letting the squid web traffic out and >>> redirecting it back to itself. You need to exclude the squid proxyies >>> address from redirection >>> >>> On 9 March 2015 at 14:03, Monah Baki wrote: >>> >>>> Hi All, >>>> >>>> I have a freebsd 10.1 server with a single interface (bge0) running >>>> squid >>>> in intercept mode. There is a Cisco device doing the policy routing. >>>> >>>> interface GigabitEthernet0/0/1.1 >>>> >>>> encapsulation dot1Q 1 native >>>> >>>> ip address 10.0.0.9 255.255.255.0 >>>> >>>> no ip redirects >>>> >>>> no ip unreachables >>>> >>>> ip nat inside >>>> >>>> standby 1 ip 10.0.0.10 >>>> >>>> standby 1 priority 120 >>>> >>>> standby 1 preempt >>>> >>>> standby 1 name HSRP >>>> >>>> ip policy route-map CFLOW >>>> >>>> >>>> >>>> ip access-list extended REDIRECT >>>> >>>> deny tcp host 10.0.0.24 any eq www >>>> >>>> permit tcp host 10.0.0.23 any eq www >>>> >>>> >>>> >>>> route-map CFLOW permit 10 >>>> >>>> match ip address REDIRECT >>>> set ip next-hop 10.0.0.24 >>>> >>>> My squid.conf has the following: >>>> http_port 3128 >>>> http_port 3129 intercept >>>> >>>> >>>> >>>> My pf.conf has the following: >>>> >>>> rdr on bge0 inet proto tcp from 10.0.0.0/8 to any port 80 -> 10.0.0.24 >>>> port >>>> 3129 >>>> # block in >>>> pass in log quick on bge0 >>>> pass out log quick on bge0 >>>> pass out keep state >>>> >>>> >>>> >>>> User gets an access denied on browsing, and in my cache.log file, I see: >>>> WARNING: Forwarding loop detected for: >>>> >>>> >>>> >>>> Any help/guidance is appreciated. >>>> >>>> >>>> Thanks >>>> _______________________________________________ >>>> freebsd-questions@freebsd.org mailing list >>>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >>>> To unsubscribe, send any mail to " >>>> freebsd-questions-unsubscribe@freebsd.org" >>>> >>> >>> >> > From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 16:28:16 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 2D8A2844 for ; Mon, 9 Mar 2015 16:28:16 +0000 (UTC) Received: from mail-wi0-x233.google.com (mail-wi0-x233.google.com [IPv6:2a00:1450:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id AA86DE7 for ; Mon, 9 Mar 2015 16:28:15 +0000 (UTC) Received: by wiwh11 with SMTP id h11so12269047wiw.5 for ; Mon, 09 Mar 2015 09:28:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:message-id:mime-version:subject:date:references :to:in-reply-to; bh=82ElmRbZ9QnDoEQt1DHxHXkYrDXykthKiPT0ZGrpVVI=; b=GB0hepIjvZ1QsEoh7BJXQ54VPMg8hFVXbJo++VQpwp2Tc6jnvM9mAuu5DQoDxB8Dur r0x8a1EQq+eEylWhAoFoilIsbPlWhl9P5gfOLf8HZ5C93jvmqJmbKID8j9feQPxAR83q jO6C/IM23mIKqX2Zku0MkMhobQhyvDyPHft1TAYhREKmI1cMzA58WMhPuEgpHt/P0JPE amgSczS1COewtufiJ2vo4VmlUwNQPhOG1qhWTg3fhs0ddsO+DK+Q0ZCCwOkKOWEJCG7W A6W8fL2CAjJdTywkqpO/J2DLWPeTonwDxw6xND2g2pkYZ9fpjX0kOeWQipn6O0cuHgJk 23eQ== X-Received: by 10.194.61.161 with SMTP id q1mr60958251wjr.132.1425918493579; Mon, 09 Mar 2015 09:28:13 -0700 (PDT) Received: from ?IPv6:2001:a60:16c5:5201:4c62:78b1:2770:4fec? ([2001:a60:16c5:5201:4c62:78b1:2770:4fec]) by mx.google.com with ESMTPSA id ub1sm28914249wjc.43.2015.03.09.09.28.12 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 09 Mar 2015 09:28:12 -0700 (PDT) From: Florian Heigl Message-Id: <86A77076-E8E3-45F9-B07D-3E47EE120B6E@gmail.com> Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) Subject: Re: Adding a root CA cert on FreeBSD10 Date: Mon, 9 Mar 2015 17:28:10 +0100 References: To: krad , FreeBSD Questions In-Reply-To: X-Mailer: Apple Mail (2.1878.6) Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 16:28:16 -0000 Hi, thank you a lot! I=92ll try adding hashed versions, i.e. with ln -s my_ca_cert hash.0=20 Do you know / understand the preference between the different = directories on FreeBSD? I very much like using /etc/ssl/certs but since we also have the = /usr/local/etc/ssl and /usr/share.. and /usr/local/openssl paths I = really wonder what the =93right=94 path would be. Anyone? Florian On 09.03.2015, at 15:12, krad wrote: > I got mine working fine when i built a transparent ssl proxy. I had to = put all the root certs into /etc/ssl/certs >=20 > The filenames had to be a the hash of the cert though. This can be = generated via the following command >=20 > openssl x509 -noout -hash -in >=20 > eg >=20 > # openssl x509 -noout -hash -in some_cert > 0810bc98 > # mv some_cert /etc/ssl/certs/0810bc98.o >=20 >=20 > On 8 March 2015 at 18:26, Florian Heigl = wrote: > Hi, >=20 > I'm trying to identify how and where to add a trusted root certificate = in > FreeBSD10. >=20 > Doing so used to be dead easy on FreeBSD until now, just drop them in > /usr/local/etc/ssl/certs or even /etc/ssl/certs and it worked. > This seems to be no longer true? >=20 > I'm working with CACert or "private" CAs in many cases, so this is a > standard thing. Right now I'm pulling my hair how to make it work in > FreeBSD 10. >=20 > What I want: > - openssl s_client -connect to work >=20 > I'm aware different tools are using different methods, but i.e. curl = on > many OS is tamed to respect the openssl CAs so I figure once openssl = is > happy it should be all good. > But OpenSSL ain't happy: >=20 >=20 > # openssl s_client -connect demoserver:443 | grep -i -e issuer -e = verify > depth=3D1 O =3D Root CA, OU =3D http://www.cacert.org, CN =3D CA Cert = Signing > Authority, emailAddress =3D support@cacert.org > verify error:num=3D19:self signed certificate in certificate chain > verify return:0 > issuer=3D/O=3DRoot CA/OU=3Dhttp://www.cacert.org/CN=3DCA Cert Signing > Authority/emailAddress=3Dsupport@cacert.org > Verify return code: 19 (self signed certificate in certificate = chain) >=20 > I've put the CACert certificates in the following places, to no avail: >=20 > /etc/ssl/certs/cacert-class3.crt > /etc/ssl/certs/cacert-root.crt > /usr/local/etc/ssl/cacert-root.crt > /usr/local/etc/ssl/certs/cacert-root.crt > /usr/local/etc/ssl/certs/cacert-class3.crt > /usr/local/etc/ssl/cacert-class3.crt > /usr/local/etc/openssl/cacert-class3.crt > /usr/local/etc/openssl/cacert-root.crt > /usr/local/etc/openssl/certs/cacert-class3.crt > /usr/local/etc/openssl/certs/cacert-root.crt >=20 > I've not tried to patch them into the OS-side CA bundles > like ca_root_nss-3.17.4_1. That would be utterly stupid since they = would be > lost on update of the package. >=20 > Is there any documentation regarding certs that is _working_ on = FreeBSD10? > I'm so far still inclined the error is on my side, but without current > documentation it's hard to tell. >=20 >=20 > Florian >=20 >=20 > (I hope we didn't inherit another shitty linux mechanism like hal, > update-ca-certs or resolvconf to break proven functionality. > If so, please let me know what it is and I'll gladly open a PR to name = it a > regression. > Also, please excuse my lack of enthusiasm, but this has ruined much of = my > day meaning the coming week will also be ruined, trying to catch up) >=20 >=20 >=20 > -- > the purpose of libvirt is to provide an abstraction layer hiding all = xen > features added since 2006 until they were finally understood and = copied by > the kvm devs. > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org" >=20 From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 19:18:20 2015 Return-Path: Delivered-To: freebsd-questions@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 033DAB2D for ; Mon, 9 Mar 2015 19:18:20 +0000 (UTC) Received: from cyrus.watson.org (cyrus.watson.org [198.74.231.69]) by mx1.freebsd.org (Postfix) with ESMTP id CB442AB2 for ; Mon, 9 Mar 2015 19:18:19 +0000 (UTC) Received: from fledge.watson.org (fledge.watson.org [198.74.231.63]) by cyrus.watson.org (Postfix) with ESMTPS id CFEDA46B59 for ; Mon, 9 Mar 2015 15:18:12 -0400 (EDT) Received: from fledge.watson.org (doug@localhost.watson.org [127.0.0.1]) by fledge.watson.org (8.14.9/8.14.9) with ESMTP id t29JICMp074794 for ; Mon, 9 Mar 2015 15:18:12 -0400 (EDT) (envelope-from doug@fledge.watson.org) Received: from localhost (doug@localhost) by fledge.watson.org (8.14.9/8.14.9/Submit) with ESMTP id t29JIC66074791 for ; Mon, 9 Mar 2015 15:18:12 -0400 (EDT) (envelope-from doug@fledge.watson.org) Date: Mon, 9 Mar 2015 15:18:12 -0400 (EDT) From: doug Reply-To: doug@safeport.com To: freebsd-questions@FreeBSD.org Subject: pkg question upgrade question Message-ID: User-Agent: Alpine 2.11 (BSF 23 2013-08-11) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (fledge.watson.org [127.0.0.1]); Mon, 09 Mar 2015 15:18:12 -0400 (EDT) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 19:18:20 -0000 I added tigervnc to a 10.0-RELEASE-p12 system. Without warning libpng15.so.15 was removed which effectively means upon the next reboot xfce will not run. Sorta disappointing as it is like the pkg_add days. But the only question I have is where can one find libpng15.so.15? I have all the iso images and can easily build a 10.0 system but I would rather just pick up the missing module if possible. According to pkg info no installed packages require libpng15.so.15. The executables know better From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 19:33:42 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6230EE1F for ; Mon, 9 Mar 2015 19:33:42 +0000 (UTC) Received: from mail-pa0-x22d.google.com (mail-pa0-x22d.google.com [IPv6:2607:f8b0:400e:c03::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2EDC3D12 for ; Mon, 9 Mar 2015 19:33:42 +0000 (UTC) Received: by pablj1 with SMTP id lj1so65770264pab.10 for ; Mon, 09 Mar 2015 12:33:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=IQQ1D5UiGsz+bIXmDj4hgrpX4PG99HcRAYSVmFO9FTM=; b=tv3KZ/ga1RsaTzTD2cQAqop8zzOXSnhJR9ydy5qsoAi6g16WGMdgbvjIQNhPuJaA1j LHeaOFxcNPuSwnEOlgy5+P2vCpWMyKAKe7e61zINWLmB4hriS9yKQEix3fo7ZeDQM88g xRyIgx12lMKElUIoHbQ6Y0X4vnSKjZY1Na6hHZeLtZryNhk6NIaqIEQJQ6JdXGdtc7EM veChzKQRzNwmUC6n6d+qWXbaBX+8dEeoUzyoJIU7RxmlmKuG24Nrhb2Aeu7fvRO9n3Vj 52bYyxBV/E7PzSXMxu+OYk0IK8l8eSvtbJtwL9Srt5wUgpIf7fG2DV2GrrQQ/LrNmAf7 kA3A== MIME-Version: 1.0 X-Received: by 10.66.119.37 with SMTP id kr5mr57222861pab.136.1425929621079; Mon, 09 Mar 2015 12:33:41 -0700 (PDT) Received: by 10.70.110.134 with HTTP; Mon, 9 Mar 2015 12:33:41 -0700 (PDT) In-Reply-To: References: Date: Mon, 9 Mar 2015 14:33:41 -0500 Message-ID: Subject: Re: pkg question upgrade question From: Adam Vande More To: doug@safeport.com Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 19:33:42 -0000 On Mon, Mar 9, 2015 at 2:18 PM, doug wrote: > I added tigervnc to a 10.0-RELEASE-p12 system. Without warning > libpng15.so.15 was removed By default, pkg warns of actions prior to execution. If you have a standard environment and this occurred, a bug report should be filed. > which effectively means upon the next reboot xfce will not run. Sorta > disappointing as it is like the pkg_add days. But the only question I have > is where can one find libpng15.so.15? > > I have all the iso images and can easily build a 10.0 system but I would > rather just pick up the missing module if possible. According to pkg info > no installed packages require libpng15.so.15. The executables know better > If you have a fully updated system using system defaults, nothing will depend on png-1.6.15. -- Adam From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 20:32:49 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 9CF186CB for ; Mon, 9 Mar 2015 20:32:49 +0000 (UTC) Received: from relaygateway02.edpnet.net (relaygateway02.edpnet.net [212.71.1.211]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "*.edpnet.net", Issuer "Go Daddy Secure Certificate Authority - G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DA723891 for ; Mon, 9 Mar 2015 20:32:47 +0000 (UTC) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmYGAMf//VRNbXSW/2dsb2JhbABcgwZSWoMKv10KhSdJAoEqTgEBAQEBAXyEDwEBAQMBAQEBICsIGAsFCwsYCRMOAgIPBRMBCQgkCAcEARwEiAYMCaZullqEbwEKAQEBHosXhB0BAQ1CB4JogUUFk3ODToIgAYFTkiEjggIcgVE9MQd9BxeBIQEBAQ X-IPAS-Result: AmYGAMf//VRNbXSW/2dsb2JhbABcgwZSWoMKv10KhSdJAoEqTgEBAQEBAXyEDwEBAQMBAQEBICsIGAsFCwsYCRMOAgIPBRMBCQgkCAcEARwEiAYMCaZullqEbwEKAQEBHosXhB0BAQ1CB4JogUUFk3ODToIgAYFTkiEjggIcgVE9MQd9BxeBIQEBAQ X-IronPort-AV: E=Sophos;i="5.11,369,1422918000"; d="scan'208";a="304476527" Received: from 77.109.116.150.adsl.dyn.edpnet.net (HELO mordor.lan) ([77.109.116.150]) by relaygateway02.edpnet.net with ESMTP/TLS/DHE-RSA-AES256-SHA; 09 Mar 2015 21:31:34 +0100 Date: Mon, 9 Mar 2015 21:31:33 +0100 From: Julien Cigar To: doug Subject: Re: pkg question upgrade question Message-ID: <20150309203133.GH6600@mordor.lan> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="oqiVxqbeHx5cy56u" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) Cc: freebsd-questions@FreeBSD.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 20:32:49 -0000 --oqiVxqbeHx5cy56u Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Mar 09, 2015 at 03:18:12PM -0400, doug wrote: > I added tigervnc to a 10.0-RELEASE-p12 system. Without warning libpng15.s= o.15=20 added or upgraded ..? are you sure you arent't in the following scenario: 1) tigervnc depends on graphics/png (direct dependency) 2) you did "pkg upgrade tigervnc" 3) there was an upgrade for graphics/png too, with a shared library bump 4) pkg upgraded tigervnc, png, and other dependencies AFAIK pkg doesn't handle this scenario properly as reverse dependencies of graphics/png aren't upgraded at the same time... and you end up with a semi-"broken" system :( I hope this will be fixed in a close future as this is pretty annoying and limiting > was removed which effectively means upon the next reboot xfce will not ru= n.=20 > Sorta disappointing as it is like the pkg_add days. But the only question= I have=20 > is where can one find libpng15.so.15? >=20 > I have all the iso images and can easily build a 10.0 system but I would = rather=20 > just pick up the missing module if possible. According to pkg info no ins= talled=20 > packages require libpng15.so.15. The executables know better >=20 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" --=20 Julien Cigar Belgian Biodiversity Platform (http://www.biodiversity.be) PGP fingerprint: EEF9 F697 4B68 D275 7B11 6A25 B2BB 3710 A204 23C0 No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. --oqiVxqbeHx5cy56u Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABCgAGBQJU/gMlAAoJEAi2KiTKQR5pWqAP/Rx99zhyCJYCKXa97R6wKxKw x9eaEmu4z43H/nY79A8yFm6CQ5NqX2/tvgqsCEnqmgYz4Mi1/NgiYhL6wDNFNHC6 Z6dCcHW5J05gNU0/TlIDiIx5GfVWR0yE+dRsYKfLJdSs9A6gipJCfqKmdHx/gi2e Piht0K5KYcfrFM3lMci2c3c8nP4tNw2NoQNxJhQCdRdMYzEmr36/AegCyFTMr4TN qK1Ho0idg6nKmk8RFEIyncc8dHQoFYKaA6PQpW5OEDdyFbksJvHY6R+Ah1k4vNEh 31sN1vGQ8AqJ1jFUo8Vftd3jM6Ws4EKJ+MlkfIyh9xYPARZysYkfWHXQRSQKiRow JFP0fucctwuPZnDJCCazjc3leQuYUcn1m/51w2GSKO6c+rLg9Ov4j1D03i7Skobm qDvxrlRcIH909WJgXSyQiA9AFr+lcQtKU4zPlBPK1ExPkBjR5SkEVOoLXgg7GuJ7 vCG4VG2OlzZv4qcSSq/39zJtVqlfKx4WUlsw0zIYHvLd+8Mn9ZYo97NDtkcGOq1z +7KShTFY6pvzt4wIRk3fpRK7CPws1NbgvQWmHDKOWJxrRcLlS1KXId/KsmyCRMXw FBkQXHtirHkKzxJpZYNirADwv3yd/jCb+wuUsfy12bQhCjDm697zs87I444isnMU cRIZ7Izpzl0ms6z4K9h1 =E4iy -----END PGP SIGNATURE----- --oqiVxqbeHx5cy56u-- From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 20:49:40 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 9EB6DF35 for ; Mon, 9 Mar 2015 20:49:40 +0000 (UTC) Received: from avasout07.plus.net (avasout07.plus.net [84.93.230.235]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (Client CN "Bizanga Labs SMTP Client Certificate", Issuer "Bizanga Labs CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 08BAFAC0 for ; Mon, 9 Mar 2015 20:49:39 +0000 (UTC) Received: from curlew.milibyte.co.uk ([84.92.153.232]) by avasout07 with smtp id 1Ypb1q001516WCc01Ypch4; Mon, 09 Mar 2015 20:49:37 +0000 X-CM-Score: 0.00 X-CNFS-Analysis: v=2.1 cv=J50k7WXS c=1 sm=1 tr=0 a=lfSX4pPLp9EkufIcToJk/A==:117 a=lfSX4pPLp9EkufIcToJk/A==:17 a=D7rCoLxHAAAA:8 a=0Bzu9jTXAAAA:8 a=kj9zAlcOel0A:10 a=emO1SXQWCLwA:10 a=GBn42IgThoXxK5WQRTUA:9 a=CjuIK1q_8ugA:10 Received: from curlew.lan ([192.168.1.13]) by curlew.milibyte.co.uk with esmtp (Exim 4.85) (envelope-from ) id 1YV4cH-0002MX-I0; Mon, 09 Mar 2015 20:49:35 +0000 Date: Mon, 9 Mar 2015 20:49:33 +0000 From: Mike Clarke To: Julien Cigar Message-ID: <20150309204933.3bab9fc2@curlew.lan> In-Reply-To: <20150309203133.GH6600@mordor.lan> References: <20150309203133.GH6600@mordor.lan> X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.25; amd64-portbld-freebsd10.0) MIME-Version: 1.0 X-SA-Exim-Connect-IP: 192.168.1.13 X-SA-Exim-Mail-From: jmc-freebsd2@milibyte.co.uk X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on curlew.lan X-Spam-Level: X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham autolearn_force=no version=3.4.0 Subject: Re: pkg question upgrade question Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-SA-Exim-Version: 4.2 X-SA-Exim-Scanned: Yes (on curlew.milibyte.co.uk) Cc: doug , freebsd-questions@FreeBSD.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 20:49:40 -0000 On Mon, 9 Mar 2015 21:31:33 +0100 Julien Cigar wrote: > 1) tigervnc depends on graphics/png (direct dependency) > 2) you did "pkg upgrade tigervnc" > 3) there was an upgrade for graphics/png too, with a shared library bump > 4) pkg upgraded tigervnc, png, and other dependencies > > AFAIK pkg doesn't handle this scenario properly as reverse dependencies > of graphics/png aren't upgraded at the same time... and you end up with > a semi-"broken" system :( > > I hope this will be fixed in a close future as this is pretty annoying > and limiting In the meantime the way to avoid this is to run pkg upgrade before installing any new package. It's quite likely that running pkg upgrade now will rectify the problem. -- Mike Clarke From owner-freebsd-questions@FreeBSD.ORG Mon Mar 9 21:31:27 2015 Return-Path: Delivered-To: freebsd-questions@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E5748D6D for ; Mon, 9 Mar 2015 21:31:27 +0000 (UTC) Received: from cyrus.watson.org (cyrus.watson.org [198.74.231.69]) by mx1.freebsd.org (Postfix) with ESMTP id B2398E for ; Mon, 9 Mar 2015 21:31:27 +0000 (UTC) Received: from fledge.watson.org (fledge.watson.org [198.74.231.63]) by cyrus.watson.org (Postfix) with ESMTPS id 1409846B20; Mon, 9 Mar 2015 17:31:27 -0400 (EDT) Received: from fledge.watson.org (doug@localhost.watson.org [127.0.0.1]) by fledge.watson.org (8.14.9/8.14.9) with ESMTP id t29LVQuB081212; Mon, 9 Mar 2015 17:31:26 -0400 (EDT) (envelope-from doug@safeport.com) Received: from localhost (doug@localhost) by fledge.watson.org (8.14.9/8.14.9/Submit) with ESMTP id t29LVQV2081209; Mon, 9 Mar 2015 17:31:26 -0400 (EDT) (envelope-from doug@safeport.com) X-Authentication-Warning: fledge.watson.org: doug owned process doing -bs Date: Mon, 9 Mar 2015 17:31:26 -0400 (EDT) From: doug@safeport.com X-X-Sender: doug@fledge.watson.org Reply-To: doug@fledge.watson.org To: Mike Clarke Subject: Re: pkg question upgrade question In-Reply-To: <20150309204933.3bab9fc2@curlew.lan> Message-ID: References: <20150309203133.GH6600@mordor.lan> <20150309204933.3bab9fc2@curlew.lan> User-Agent: Alpine 2.11 (BSF 23 2013-08-11) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (fledge.watson.org [127.0.0.1]); Mon, 09 Mar 2015 17:31:26 -0400 (EDT) Cc: Julien Cigar , freebsd-questions@FreeBSD.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 21:31:28 -0000 On Mon, 9 Mar 2015, Mike Clarke wrote: > On Mon, 9 Mar 2015 21:31:33 +0100 > Julien Cigar wrote: > >> 1) tigervnc depends on graphics/png (direct dependency) >> 2) you did "pkg upgrade tigervnc" >> 3) there was an upgrade for graphics/png too, with a shared library bump >> 4) pkg upgraded tigervnc, png, and other dependencies >> >> AFAIK pkg doesn't handle this scenario properly as reverse dependencies >> of graphics/png aren't upgraded at the same time... and you end up with >> a semi-"broken" system :( >> >> I hope this will be fixed in a close future as this is pretty annoying >> and limiting > > In the meantime the way to avoid this is to run pkg upgrade before > installing any new package. > > It's quite likely that running pkg upgrade now will rectify the problem. Thank guys. pkg was up-to-date. The message I got said it was going to install the single package. The install process have no wanring. I later hit the problem when I used one of the affected packages. As I was 1500 miles from the workstation and xfce was included in the 138 packages a 'pkg upgrade' was going to hit, upgrading was not in the cards. I could use the system just not any of the 68 packages that were invalidated. A warning would have been nice. I believe as, I have no need to have the latest stuff, if I can find libpng15.so.15, I will see how that works. Going with a new system is probably quicker that the upgrade process will be. I thought be point of having an installed DB on my system is that pkg could have said what was going to be deinstalled. I did not need tigerVNC that badly. If anyone knows how to check for this issue that would be as good as a fix. From owner-freebsd-questions@FreeBSD.ORG Tue Mar 10 14:23:39 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5C655874 for ; Tue, 10 Mar 2015 14:23:39 +0000 (UTC) Received: from mail-yk0-x22d.google.com (mail-yk0-x22d.google.com [IPv6:2607:f8b0:4002:c07::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1131E3E3 for ; Tue, 10 Mar 2015 14:23:39 +0000 (UTC) Received: by ykp131 with SMTP id 131so832761ykp.12 for ; Tue, 10 Mar 2015 07:23:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=mRNFvzlcsmm+vFTgaVXMYQ7iycLCv5l+GghDtDIMooY=; b=OHXMgERLitU4CjWeByXvYKfv3lhCv4t9GK+AMdKBXNYw9Mv9rmG9HSUde51cijrBsr hfilOzfHzTh64RbA4YGNEDvzmACpWvegl1C+UrvTXUumcsFIMy/fF6xkDkaaU6Xya+ZQ vfY0jSpmP7B/INSLsJM3trBHkqpKk/ajda5tTJvfYQOsDs3NudxBPZr9NkoMfezJpJp1 yiN/DmxI0aaGrP0byPhwjQQe7+fWIo6DKWOX+RRF+1anvHOCVejaMDsI/h4a0WlgjnWz RWtWgG3trw8hydmt7iFLuIeY6iGXD4718IflzT7eGwoxWohlzT5AcJuEKwvltYs5eeVJ EzGg== MIME-Version: 1.0 X-Received: by 10.236.32.203 with SMTP id o51mr31636845yha.88.1425997418181; Tue, 10 Mar 2015 07:23:38 -0700 (PDT) Received: by 10.170.188.1 with HTTP; Tue, 10 Mar 2015 07:23:38 -0700 (PDT) Received: by 10.170.188.1 with HTTP; Tue, 10 Mar 2015 07:23:38 -0700 (PDT) In-Reply-To: <86A77076-E8E3-45F9-B07D-3E47EE120B6E@gmail.com> References: <86A77076-E8E3-45F9-B07D-3E47EE120B6E@gmail.com> Date: Tue, 10 Mar 2015 14:23:38 +0000 Message-ID: Subject: Re: Adding a root CA cert on FreeBSD10 From: krad To: Florian Heigl Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Mar 2015 14:23:39 -0000 Anything under local suggests you have installed openssl from ports . You will have to use the one your application is linked to. Check with ldd On 9 Mar 2015 16:28, "Florian Heigl" wrote: > Hi, > > thank you a lot! > > I=E2=80=99ll try adding hashed versions, i.e. with ln -s my_ca_cert hash.= 0 > > Do you know / understand the preference between the different directories > on FreeBSD? > I very much like using /etc/ssl/certs but since we also have the > /usr/local/etc/ssl and /usr/share.. and /usr/local/openssl paths I really > wonder what the =E2=80=9Cright=E2=80=9D path would be. > > Anyone? > > Florian > > > On 09.03.2015, at 15:12, krad wrote: > > I got mine working fine when i built a transparent ssl proxy. I had to pu= t > all the root certs into /etc/ssl/certs > > The filenames had to be a the hash of the cert though. This can be > generated via the following command > > openssl x509 -noout -hash -in > > eg > > # openssl x509 -noout -hash -in some_cert > 0810bc98 > # mv some_cert /etc/ssl/certs/0810bc98.o > > > On 8 March 2015 at 18:26, Florian Heigl wrote: > >> Hi, >> >> I'm trying to identify how and where to add a trusted root certificate i= n >> FreeBSD10. >> >> Doing so used to be dead easy on FreeBSD until now, just drop them in >> /usr/local/etc/ssl/certs or even /etc/ssl/certs and it worked. >> This seems to be no longer true? >> >> I'm working with CACert or "private" CAs in many cases, so this is a >> standard thing. Right now I'm pulling my hair how to make it work in >> FreeBSD 10. >> >> What I want: >> - openssl s_client -connect to work >> >> I'm aware different tools are using different methods, but i.e. curl on >> many OS is tamed to respect the openssl CAs so I figure once openssl is >> happy it should be all good. >> But OpenSSL ain't happy: >> >> >> # openssl s_client -connect demoserver:443 | grep -i -e issuer -e verif= y >> depth=3D1 O =3D Root CA, OU =3D http://www.cacert.org, CN =3D CA Cert Si= gning >> Authority, emailAddress =3D support@cacert.org >> verify error:num=3D19:self signed certificate in certificate chain >> verify return:0 >> issuer=3D/O=3DRoot CA/OU=3Dhttp://www.cacert.org/CN=3DCA Cert Signing >> Authority/emailAddress=3Dsupport@cacert.org >> Verify return code: 19 (self signed certificate in certificate chain= ) >> >> I've put the CACert certificates in the following places, to no avail: >> >> /etc/ssl/certs/cacert-class3.crt >> /etc/ssl/certs/cacert-root.crt >> /usr/local/etc/ssl/cacert-root.crt >> /usr/local/etc/ssl/certs/cacert-root.crt >> /usr/local/etc/ssl/certs/cacert-class3.crt >> /usr/local/etc/ssl/cacert-class3.crt >> /usr/local/etc/openssl/cacert-class3.crt >> /usr/local/etc/openssl/cacert-root.crt >> /usr/local/etc/openssl/certs/cacert-class3.crt >> /usr/local/etc/openssl/certs/cacert-root.crt >> >> I've not tried to patch them into the OS-side CA bundles >> like ca_root_nss-3.17.4_1. That would be utterly stupid since they would >> be >> lost on update of the package. >> >> Is there any documentation regarding certs that is _working_ on FreeBSD1= 0? >> I'm so far still inclined the error is on my side, but without current >> documentation it's hard to tell. >> >> >> Florian >> >> >> (I hope we didn't inherit another shitty linux mechanism like hal, >> update-ca-certs or resolvconf to break proven functionality. >> If so, please let me know what it is and I'll gladly open a PR to name i= t >> a >> regression. >> Also, please excuse my lack of enthusiasm, but this has ruined much of m= y >> day meaning the coming week will also be ruined, trying to catch up) >> >> >> >> -- >> the purpose of libvirt is to provide an abstraction layer hiding all xen >> features added since 2006 until they were finally understood and copied = by >> the kvm devs. >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to " >> freebsd-questions-unsubscribe@freebsd.org" >> > > > From owner-freebsd-questions@FreeBSD.ORG Tue Mar 10 15:21:59 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5EED5411 for ; Tue, 10 Mar 2015 15:21:59 +0000 (UTC) Received: from relay6-d.mail.gandi.net (relay6-d.mail.gandi.net [IPv6:2001:4b98:c:538::198]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1B378DAF for ; Tue, 10 Mar 2015 15:21:58 +0000 (UTC) Received: from mfilter23-d.gandi.net (mfilter23-d.gandi.net [217.70.178.151]) by relay6-d.mail.gandi.net (Postfix) with ESMTP id 42AA64F1867 for ; Tue, 10 Mar 2015 16:21:56 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mfilter23-d.gandi.net Received: from relay6-d.mail.gandi.net ([217.70.183.198]) by mfilter23-d.gandi.net (mfilter23-d.gandi.net [10.0.15.180]) (amavisd-new, port 10024) with ESMTP id 98c+nhRXHopz for ; Tue, 10 Mar 2015 16:21:54 +0100 (CET) X-Originating-IP: 120.60.179.168 Received: from localhost (triband-mum-120.60.179.168.mtnl.net.in [120.60.179.168]) (Authenticated sender: mayuresh@kathe.in) by relay6-d.mail.gandi.net (Postfix) with ESMTPSA id 67B82FB8B8 for ; Tue, 10 Mar 2015 16:21:51 +0100 (CET) Date: Tue, 10 Mar 2015 20:51:47 +0530 From: Mayuresh Kathe To: freebsd-questions@freebsd.org Subject: obj-c : gnustep : development : strange problem Message-ID: <20150310152146.GA1803@aio.kathe.in> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Mar 2015 15:21:59 -0000 hello, i have been tinkering with obj-c under freebsd for a while. all was well, till i had to re-install my system (10.1p6) today. the freebsd system install itself went well, except for the minor hiccup after running "freebsd-update". even the installation of required packages (below) went smoothly; 1. gnustep-base, 2. gmake. i followed all the steps mentioned at http://104.131.11.179/, but, after running "gmake" within the code directory, the following error was thrown out; /usr/local/GNUstep/System/Library/Makefiles:1: *** missing separator. Stop. i have no idea about what this is, i have checked and double checked everything per the instructions, the only deviation being that i no longer need to edit the following file; /usr/local/GNUstep/System/Library/Makefiles/config.make reason being, that file has the correct locations of the clang tools as compared to previous conditions, i.e. /usr/bin/clang, instead of /usr/local/bin/clang (needed to remove "local" from that path). i have visited http://www.freshports.org/devel/gnustep to check if there have been any major changes which might have messed up the installation, couldn't identify anything, maybe i am obtuse. can someone please help me by directing me to appropriate documentation? thanks, ~mayuresh From owner-freebsd-questions@FreeBSD.ORG Tue Mar 10 17:27:12 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 3BB14D8D for ; Tue, 10 Mar 2015 17:27:12 +0000 (UTC) Received: from mail.tezzaron.com (mail.tezzaron.com [50.206.41.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0231DB3 for ; Tue, 10 Mar 2015 17:27:11 +0000 (UTC) Received: from delaware.tezzaron.com ([10.252.50.1]) by mail.tezzaron.com (IceWarp 11.1.2.0 x64) with ASMTP (SSL) id 201503101224552152 for ; Tue, 10 Mar 2015 12:24:55 -0500 Message-ID: <54FF2892.7040406@tezzaron.com> Date: Tue, 10 Mar 2015 12:23:30 -0500 From: Adam Guimont User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: NFSD high CPU usage Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Mar 2015 17:27:12 -0000 I have an issue where NFSD will max out the CPU (1200% in this case) when a client workstation runs out of memory while trying to write via NFS. What also happens is the TCP Recv-Q fills up and causes connection timeouts for any other client trying to use the NFS server. I can reproduce the issue by running stress on a low-end client workstation. Change into the NFS mounted directory and then use stress to write via NFS and exhaust the memory, example: stress --cpu 2 --io 4 --vm 20 --hdd 4 The client workstation will eventually run out of memory trying to write into the NFS directory, fill the TCP Recv-Q on the NFS server, and then NFSD will max out the CPU. The actual client workstations (~50) are not running stress when this happens, it's a mixture of EDA tools (simulation and verification). For what it's worth, this is how I've been monitoring the TCP buffer queues where "xx.xxx.xx.xxx" is the IP address of the NFS server: cmdwatch -n1 'netstat -an | grep -e "Proto" -e "tcp4" | grep -e "Proto" -e "xx.xxx.xx.xxx.2049"' I have tried several tuning recommendations but it has not solved the problem. Has anyone else experienced this and is anyone else able to reproduce it? --- NFS server specs: OS = FreeBSD 10.0-RELEASE CPU = E5-1650 v3 Memory = 96GB Disks = 24x ST6000NM0034 in 4x raidz2 HBA = LSI SAS 9300-8i NIC = Intel 10Gb X540-T2 --- /boot/loader.conf autoboot_delay="3" geom_mirror_load="YES" mpslsi3_load="YES" cc_htcp_load="YES" --- /etc/rc.conf hostname="***" ifconfig_ix0="inet *** netmask 255.255.248.0 -tso -vlanhwtso" defaultrouter="***" sshd_enable="YES" ntpd_enable="YES" zfs_enable="YES" sendmail_enable="NO" nfs_server_enable="YES" nfs_server_flags="-h *** -t -n 128" nfs_client_enable="YES" rpcbind_enable="YES" rpc_lockd_enable="YES" rpc_statd_enable="YES" samba_enable="YES" atop_enable="YES" atop_interval="5" zabbix_agentd_enable="YES" --- /etc/sysctl.conf vfs.nfsd.server_min_nfsvers=3 vfs.nfsd.cachetcp=0 kern.ipc.maxsockbuf=16777216 net.inet.tcp.sendbuf_max=16777216 net.inet.tcp.recvbuf_max=16777216 net.inet.tcp.sendspace=1048576 net.inet.tcp.recvspace=1048576 net.inet.tcp.sendbuf_inc=32768 net.inet.tcp.recvbuf_inc=65536 net.inet.tcp.keepidle=10000 net.inet.tcp.keepintvl=2500 net.inet.tcp.always_keepalive=1 net.inet.tcp.cc.algorithm=htcp net.inet.tcp.cc.htcp.adaptive_backoff=1 net.inet.tcp.cc.htcp.rtt_scaling=1 net.inet.tcp.sack.enable=0 kern.ipc.soacceptqueue=1024 net.inet.tcp.mssdflt=1460 net.inet.tcp.minmss=1300 net.inet.tcp.tso=0 --- Client workstations: OS = CentOS 6.6 x64 Mount options from `cat /proc/mounts` = rw,nosuid,noatime,vers=3,rsize=65536,wsize=65536,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=***,mountvers=3,mountport=916,mountproto=udp,local_lock=none,addr=*** --- Regards, Adam Guimont From owner-freebsd-questions@FreeBSD.ORG Tue Mar 10 22:08:39 2015 Return-Path: Delivered-To: freebsd-questions@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 91DD8554 for ; Tue, 10 Mar 2015 22:08:39 +0000 (UTC) Received: from cyrus.watson.org (cyrus.watson.org [198.74.231.69]) by mx1.freebsd.org (Postfix) with ESMTP id 5F85B8F4 for ; Tue, 10 Mar 2015 22:08:39 +0000 (UTC) Received: from fledge.watson.org (fledge.watson.org [198.74.231.63]) by cyrus.watson.org (Postfix) with ESMTPS id A802346B09; Tue, 10 Mar 2015 18:08:32 -0400 (EDT) Received: from fledge.watson.org (doug@localhost.watson.org [127.0.0.1]) by fledge.watson.org (8.14.9/8.14.9) with ESMTP id t2AM8WQG088813; Tue, 10 Mar 2015 18:08:32 -0400 (EDT) (envelope-from doug@safeport.com) Received: from localhost (doug@localhost) by fledge.watson.org (8.14.9/8.14.9/Submit) with ESMTP id t2AM8V4J088809; Tue, 10 Mar 2015 18:08:31 -0400 (EDT) (envelope-from doug@safeport.com) X-Authentication-Warning: fledge.watson.org: doug owned process doing -bs Date: Tue, 10 Mar 2015 18:08:31 -0400 (EDT) From: doug@safeport.com X-X-Sender: doug@fledge.watson.org Reply-To: doug@fledge.watson.org To: Mike Clarke Subject: Re: pkg question upgrade question In-Reply-To: <20150309204933.3bab9fc2@curlew.lan> Message-ID: References: <20150309203133.GH6600@mordor.lan> <20150309204933.3bab9fc2@curlew.lan> User-Agent: Alpine 2.11 (BSF 23 2013-08-11) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (fledge.watson.org [127.0.0.1]); Tue, 10 Mar 2015 18:08:32 -0400 (EDT) Cc: Julien Cigar , freebsd-questions@FreeBSD.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Mar 2015 22:08:39 -0000 On Mon, 9 Mar 2015, Mike Clarke wrote: > On Mon, 9 Mar 2015 21:31:33 +0100 > Julien Cigar wrote: > >> 1) tigervnc depends on graphics/png (direct dependency) >> 2) you did "pkg upgrade tigervnc" >> 3) there was an upgrade for graphics/png too, with a shared library bump >> 4) pkg upgraded tigervnc, png, and other dependencies >> >> AFAIK pkg doesn't handle this scenario properly as reverse dependencies >> of graphics/png aren't upgraded at the same time... and you end up with >> a semi-"broken" system :( >> >> I hope this will be fixed in a close future as this is pretty annoying >> and limiting > > In the meantime the way to avoid this is to run pkg upgrade before > installing any new package. Ah - I misread this -- yes, I got it thanks > It's quite likely that running pkg upgrade now will rectify the problem. And it did. My initial problem was I did not want to do that remotely. Again, thank you. I had to read your email a couple of times to understand it. The only issue was with xfce/xdm, which has nothing to do with pkg. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 11:43:09 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D21DC86D for ; Wed, 11 Mar 2015 11:43:09 +0000 (UTC) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 37C99DAF for ; Wed, 11 Mar 2015 11:43:08 +0000 (UTC) Received: from kw.news4all.se (localhost [127.0.0.1]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id t2BBgwR6075102 for ; Wed, 11 Mar 2015 12:42:58 +0100 (CET) (envelope-from bah@bananmonarki.se) Message-ID: <55002A42.4070608@bananmonarki.se> Date: Wed, 11 Mar 2015 12:42:58 +0100 From: Bernt Hansson User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: freeBSD Mailing List Subject: sysinfo.h Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 11:43:09 -0000 Hello list! Trying to build a program (freecad) I have got cmake to find libs and other programs it needs. running cmake -DFREECAD_USE_EXTERNAL_PIVY=1 -DCMAKE_BUILD_TYPE=Release . results is this -- Configuring done -- Generating done -- Build files have been written to: /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master Then one should run make. make gives this error /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master/src/3rdParty/salomesmesh/src/SMDS/SMDS_MemoryLimit.cpp:32:25: error: sys/sysinfo.h: No such file or directory Guess it's linuxism. What is sysinfo.h called in freebsd? From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 11:58:57 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 22810A52 for ; Wed, 11 Mar 2015 11:58:57 +0000 (UTC) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D60B9ED4 for ; Wed, 11 Mar 2015 11:58:56 +0000 (UTC) Received: from r56.edvax.de (port-92-195-131-196.dynamic.qsc.de [92.195.131.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx02.qsc.de (Postfix) with ESMTPS id 70F1C27808; Wed, 11 Mar 2015 12:58:47 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id t2BBwkre003852; Wed, 11 Mar 2015 12:58:46 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Wed, 11 Mar 2015 12:58:46 +0100 From: Polytropon To: Bernt Hansson Subject: Re: sysinfo.h Message-Id: <20150311125846.e1b7fdb5.freebsd@edvax.de> In-Reply-To: <55002A42.4070608@bananmonarki.se> References: <55002A42.4070608@bananmonarki.se> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freeBSD Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 11:58:57 -0000 On Wed, 11 Mar 2015 12:42:58 +0100, Bernt Hansson wrote: > Hello list! > > Trying to build a program (freecad) > > I have got cmake to find libs and other programs it needs. > > running cmake -DFREECAD_USE_EXTERNAL_PIVY=1 -DCMAKE_BUILD_TYPE=Release . > > results is this > -- Configuring done > -- Generating done > -- Build files have been written to: > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master > > Then one should run make. > > make gives this error > > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master/src/3rdParty/salomesmesh/src/SMDS/SMDS_MemoryLimit.cpp:32:25: > error: sys/sysinfo.h: No such file or directory > > Guess it's linuxism. > > What is sysinfo.h called in freebsd? FreeBSD has a sysinfo utility, see "man 8 sysinfo", which can be obtained with the "sysinfo" package. But as far as I can see, it's implemented via shell scripts. On Linux systems, sysinfo.h is a system-level header file. >From this file (example of a sysinfo.h file): http://www.scs.stanford.edu/histar/src/pkg/uclibc/include/sys/sysinfo.h More precisely: sysinfo.h is part of the GNU C library (glibc) include files, where sysinfo() is a library function, not an external program. See for example: http://www.informit.com/articles/article.aspx?p=23618&seqNum=15 Also see: http://man7.org/linux/man-pages/man2/sysinfo.2.html Let me quote: "This function is Linux-specific, and should not be used in programs intended to be portable." Summary: It's a Linuxism. :-) But maybe you can "fake" the required functionality somehow through FreeBSD's Linux ABI... There are also ports which seem to install a sysinfo.h file (search for *.plist containing "sysinfo.h"), for example devel/libgtop or lang/gnatdroid-sysroot. Maybe that's a way to get the required files? -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 12:15:26 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 950D12BD for ; Wed, 11 Mar 2015 12:15:26 +0000 (UTC) Received: from mail-yh0-x22d.google.com (mail-yh0-x22d.google.com [IPv6:2607:f8b0:4002:c01::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 43F1D16B for ; Wed, 11 Mar 2015 12:15:26 +0000 (UTC) Received: by yhaf73 with SMTP id f73so4189895yha.1 for ; Wed, 11 Mar 2015 05:15:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=seibercom.net; s=google; h=date:from:to:subject:message-id:reply-to:organization:mime-version :content-type; bh=2FZtze+bIpJxwCuxO7OZG1+AUkUb8LoRmwzr1/2aVbE=; b=C0qx/Aqo3uUb3jYFQ4ZlCTWu6twWKv5jgjQ/w5X9SyAfjqfgYX2DeYICL3AwsoX2ub BurPPc5wvOgb1QpzRzIiPLBIXPM/qFdRpjDgJBh0AlrkfEUK3dG1ygLBI+s/Hykof0k8 4AWUU6ah8qKs088qjgtspFrNHp7eor0cyuXCo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:reply-to :organization:mime-version:content-type; bh=2FZtze+bIpJxwCuxO7OZG1+AUkUb8LoRmwzr1/2aVbE=; b=fQHz8QZ1EHME5ImpDu3HNkR02Y8lx797xkMAYMp3BBr8LeLYhHK0kmUbpWlfQV4/9t 1T1inLV2Z081jfaADxMWzFNquD3+SS6NnFmfmCOdTJCBGBPtjxDP4N2hy8KF0Z8k6ynw KetJIeTegikzSeNI2ybD6A9XY5/RkLxMJFMzo801kuRNmpHbHvEJ7j9ENdHk8C+0vvYZ DVUUEpXB/fc5w+tDfbsZPdCPc3pH2RjIyWd+l2ZyPyr03aLJUtsghrIaPMHDw6wnVy7y O4QHpp9BNM0GpUPnT9omrlY5csFLYDzk+keyWbvYN18idyZ5bZoDG3Shvb0ecj8n12MT FnCQ== X-Gm-Message-State: ALoCoQlBXzoqLm7ZIx/Oh5Mmvx1mid0/GQwbJDUT57zVeh5rsv2ukcj33iTK1supMXO7C8eB3uyi X-Received: by 10.236.66.33 with SMTP id g21mr36978852yhd.72.1426076125263; Wed, 11 Mar 2015 05:15:25 -0700 (PDT) Received: from scorpio.seibercom.net (cpe-076-182-104-150.nc.res.rr.com. [76.182.104.150]) by mx.google.com with ESMTPSA id 30sm2861311yhf.8.2015.03.11.05.15.24 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Mar 2015 05:15:24 -0700 (PDT) Received: from scorpio (cpe-076-182-104-150.nc.res.rr.com [76.182.104.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by scorpio.seibercom.net (Postfix) with ESMTPSA id 3l2C0q4YSkz3DlXj for ; Wed, 11 Mar 2015 08:15:23 -0400 (EDT) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.98.6 at scorpio.seibercom.net Date: Wed, 11 Mar 2015 08:15:15 -0400 From: Jerry To: FreeBSD FreeBSD Subject: google chrome requires tsync support under linux Message-ID: <20150311081515.0f77be89@scorpio> Reply-To: FreeBSD FreeBSD Organization: seibercom NET X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.25; amd64-portbld-freebsd10.1) MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; boundary="Sig_/SJvjg60AnVzsl5+letuOwWy"; protocol="application/pgp-signature" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 12:15:26 -0000 --Sig_/SJvjg60AnVzsl5+letuOwWy Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I was just reading where google chrome requires tsync support under linux. Will this affect FreeBSD? --=20 Jerry --Sig_/SJvjg60AnVzsl5+letuOwWy Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJVADHUAAoJEElTsHIJnX8ee68IAKsIajMiI8+d6wXb2F0TQnO5 GxZ/UPJ3QBVIpemPDJ/lnBpsykhFhH6EwUH48jPRtI7CPwyNxQvvYvHmnDGbWEmW yhBs9+yi+isAj/7bJ6g5SygQehdcMgcbGfAkIYazW/t3EuOaXA6TimbuPn8CzIM9 qoM4HTBwZLUb3RFsVeMUPnAd8pVz1D2Zj2noD9RCWiZS+YZlnJK7EfaPYtgBTyvJ bkTt38WBzvSgaeU47H4u4fhUUjCWW7+wrCW2K4lqYcc0sI4bKSiCG3nn2cPC4wIL Fvz8JQ0xOlnzIxBpBh0vaDF4HKkbSWJM4iQc6JGYVOC7P+Hameeo4Ow1YeZjGCE= =nH4f -----END PGP SIGNATURE----- --Sig_/SJvjg60AnVzsl5+letuOwWy-- From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 12:20:36 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CAC6A535 for ; Wed, 11 Mar 2015 12:20:36 +0000 (UTC) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 477641AF for ; Wed, 11 Mar 2015 12:20:35 +0000 (UTC) Received: from kw.news4all.se (localhost [127.0.0.1]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id t2BCJD5l075836; Wed, 11 Mar 2015 13:19:14 +0100 (CET) (envelope-from bah@bananmonarki.se) Message-ID: <550032C1.8040903@bananmonarki.se> Date: Wed, 11 Mar 2015 13:19:13 +0100 From: Bernt Hansson User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: Polytropon Subject: Re: sysinfo.h References: <55002A42.4070608@bananmonarki.se> <20150311125846.e1b7fdb5.freebsd@edvax.de> In-Reply-To: <20150311125846.e1b7fdb5.freebsd@edvax.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Cc: freeBSD Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 12:20:36 -0000 Thanks to Polytropon and Arthur I've found this libsysinfo GNU libc's sysinfo port for FreeBSD Installed it and getting other problems. % make [ 0%] Built target Driver [ 0%] Building CXX object src/3rdParty/salomesmesh/CMakeFiles/SMDS.dir/src/SMDS/SMDS_MemoryLimit.cpp.o [ 0%] Building CXX object src/3rdParty/salomesmesh/CMakeFiles/SMDS.dir/src/SMDS/SMDS_Mesh.cpp.o /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master/src/3rdParty/salomesmesh/src/SMDS /SMDS_Mesh.cpp: In static member function 'static int SMDS_Mesh::CheckMemory(bool)': /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master/src/3rdParty/salomesmesh/src/SMDS /SMDS_Mesh.cpp:77: error: 'WEXITSTATUS' was not declared in this scope *** [src/3rdParty/salomesmesh/CMakeFiles/SMDS.dir/src/SMDS/SMDS_Mesh.cpp.o] Error code 1 Stop in /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master. *** [src/3rdParty/salomesmesh/CMakeFiles/SMDS.dir/all] Error code 1 Stop in /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master. *** [all] Error code 1 Stop in /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 12:26:36 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6B8DB61D for ; Wed, 11 Mar 2015 12:26:36 +0000 (UTC) Received: from bede.qeng-ho.org (bede.qeng-ho.org [217.155.128.241]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0594D27C for ; Wed, 11 Mar 2015 12:26:35 +0000 (UTC) Received: from arthur.home.qeng-ho.org (arthur.home.qeng-ho.org [172.23.1.2]) by bede.home.qeng-ho.org (8.14.9/8.14.7) with ESMTP id t2BC4E6V046834; Wed, 11 Mar 2015 12:04:14 GMT (envelope-from freebsd@qeng-ho.org) Message-ID: <55002F3E.1030301@qeng-ho.org> Date: Wed, 11 Mar 2015 12:04:14 +0000 From: Arthur Chance User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Bernt Hansson , freeBSD Mailing List Subject: Re: sysinfo.h References: <55002A42.4070608@bananmonarki.se> In-Reply-To: <55002A42.4070608@bananmonarki.se> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 12:26:36 -0000 On 11/03/2015 11:42, Bernt Hansson wrote: > Hello list! > > Trying to build a program (freecad) > > I have got cmake to find libs and other programs it needs. > > running cmake -DFREECAD_USE_EXTERNAL_PIVY=1 -DCMAKE_BUILD_TYPE=Release . > > results is this > -- Configuring done > -- Generating done > -- Build files have been written to: > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master > > > Then one should run make. > > make gives this error > > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master/src/3rdParty/salomesmesh/src/SMDS/SMDS_MemoryLimit.cpp:32:25: > error: sys/sysinfo.h: No such file or directory > > Guess it's linuxism. > > What is sysinfo.h called in freebsd? I'm not sure if there is a direct equivalent. A quick search gives me http://man7.org/linux/man-pages/man2/sysinfo.2.html & http://lxr.free-electrons.com/source/include/uapi/linux/sysinfo.h sysinfo(2) is a Linux syscall that "provides a simple way of getting overall system statistics". You might want to "man 3 kvm" to find FBSD equivalents. -- Those who do not learn from computing history are doomed to GOTO 1 From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 12:32:27 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 56F85707 for ; Wed, 11 Mar 2015 12:32:27 +0000 (UTC) Received: from mail-pd0-x232.google.com (mail-pd0-x232.google.com [IPv6:2607:f8b0:400e:c02::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 227A8371 for ; Wed, 11 Mar 2015 12:32:27 +0000 (UTC) Received: by pdbfl12 with SMTP id fl12so10931363pdb.5 for ; Wed, 11 Mar 2015 05:32:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=T0ded01b+fFhdmc0PJ9/ztn1Hml/OYxJgfzebvWnuTM=; b=eHwDb0QSXsaUT+djBsbilq9xGq7ZKW90Pw50r1dtIR/pF7kuG1gl45iSgJroNLTkzB 3xoJ4sVjAcuzhE9zzwbILWUwXY0TRSc04XWhqtxRwj35szGaWGj/OLWDMdt6xr+2YZkm TD4rQpcKCSmEj+4d1XdSu1cmcD//J+8HQo3sbkYKhLj0F+Iuh5jN0F9UBx1ZHsxnUBVy EWj1WTYe4M7F50wyzuvIcS1cPYjqqXy0zIJR69uDgvoW3de6QiSCO7v+RBTGDslYmGEs pQWk4h7h4URw2TjxoJtDFisDkCj2UAwjEzKKIjXEi+GTwaA97oXGvF6OKwPlLdQHwkGn GcBw== X-Received: by 10.70.125.129 with SMTP id mq1mr77610090pdb.70.1426077145752; Wed, 11 Mar 2015 05:32:25 -0700 (PDT) MIME-Version: 1.0 Received: by 10.70.81.198 with HTTP; Wed, 11 Mar 2015 05:32:05 -0700 (PDT) In-Reply-To: <550032C1.8040903@bananmonarki.se> References: <55002A42.4070608@bananmonarki.se> <20150311125846.e1b7fdb5.freebsd@edvax.de> <550032C1.8040903@bananmonarki.se> From: Michael Schuster Date: Wed, 11 Mar 2015 13:32:05 +0100 Message-ID: Subject: Re: sysinfo.h To: Bernt Hansson Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: Polytropon , freeBSD Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 12:32:27 -0000 I'd expect you have more porting work ahead of you - after all, sysinfo.h most likely is not included just for fun :-) Try to find out what "questions" the code in question is trying to answer, then maybe you'll find FreeBSD-specific solutions to them easier than when you attempt a line-for-line "port". regards Michael (admittedly, I haven't done any significant work on FreeBSD for ages ... so feel free to correct me if I'm wrong ;) On Wed, Mar 11, 2015 at 1:19 PM, Bernt Hansson wrote: > Thanks to Polytropon and Arthur > > I've found this > > libsysinfo GNU libc's sysinfo port for FreeBSD > > Installed it and getting other problems. > > % make > [ 0%] Built target Driver > [ 0%] Building CXX object src/3rdParty/salomesmesh/ > CMakeFiles/SMDS.dir/src/SMDS/SMDS_MemoryLimit.cpp.o > [ 0%] Building CXX object src/3rdParty/salomesmesh/ > CMakeFiles/SMDS.dir/src/SMDS/SMDS_Mesh.cpp.o > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_ > master-master/src/3rdParty/salomesmesh/src/SMDS > > /SMDS_Mesh.cpp: In static member function 'static int > > SMDS_Mesh::CheckMemory(bool)': > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_ > master-master/src/3rdParty/salomesmesh/src/SMDS > > /SMDS_Mesh.cpp:77: error: 'WEXITSTATUS' was not declared in this scope > *** [src/3rdParty/salomesmesh/CMakeFiles/SMDS.dir/src/SMDS/SMDS_Mesh.cpp.o] > Error code 1 > > Stop in /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_ > master-master/FreeCAD_sf_master-master. > *** [src/3rdParty/salomesmesh/CMakeFiles/SMDS.dir/all] Error code 1 > > Stop in /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_ > master-master/FreeCAD_sf_master-master. > *** [all] Error code 1 > > Stop in /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_ > master-master/FreeCAD_sf_master-master. > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org" > -- Michael Schuster http://recursiveramblings.wordpress.com/ From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 12:36:06 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CC37C7FB for ; Wed, 11 Mar 2015 12:36:06 +0000 (UTC) Received: from bede.qeng-ho.org (bede.qeng-ho.org [217.155.128.241]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 661653A5 for ; Wed, 11 Mar 2015 12:36:05 +0000 (UTC) Received: from arthur.home.qeng-ho.org (arthur.home.qeng-ho.org [172.23.1.2]) by bede.home.qeng-ho.org (8.14.9/8.14.7) with ESMTP id t2BCa2t2046909; Wed, 11 Mar 2015 12:36:02 GMT (envelope-from freebsd@qeng-ho.org) Message-ID: <550036B2.1070700@qeng-ho.org> Date: Wed, 11 Mar 2015 12:36:02 +0000 From: Arthur Chance User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Bernt Hansson , Polytropon Subject: Re: sysinfo.h References: <55002A42.4070608@bananmonarki.se> <20150311125846.e1b7fdb5.freebsd@edvax.de> <550032C1.8040903@bananmonarki.se> In-Reply-To: <550032C1.8040903@bananmonarki.se> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Cc: freeBSD Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 12:36:06 -0000 On 11/03/2015 12:19, Bernt Hansson wrote: > Thanks to Polytropon and Arthur > > I've found this > > libsysinfo GNU libc's sysinfo port for FreeBSD > > Installed it and getting other problems. > > % make > [ 0%] Built target Driver > [ 0%] Building CXX object > src/3rdParty/salomesmesh/CMakeFiles/SMDS.dir/src/SMDS/SMDS_MemoryLimit.cpp.o > > [ 0%] Building CXX object > src/3rdParty/salomesmesh/CMakeFiles/SMDS.dir/src/SMDS/SMDS_Mesh.cpp.o > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master/src/3rdParty/salomesmesh/src/SMDS > > > /SMDS_Mesh.cpp: In static member function 'static int > > SMDS_Mesh::CheckMemory(bool)': > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master/src/3rdParty/salomesmesh/src/SMDS > > > /SMDS_Mesh.cpp:77: error: 'WEXITSTATUS' was not declared in this scope > *** > [src/3rdParty/salomesmesh/CMakeFiles/SMDS.dir/src/SMDS/SMDS_Mesh.cpp.o] > Error code 1 > > Stop in > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master. > > *** [src/3rdParty/salomesmesh/CMakeFiles/SMDS.dir/all] Error code 1 > > Stop in > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master. > > *** [all] Error code 1 > > Stop in > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master. WEXITSTATUS is You might need __BSD_VISIBLE defined to see it. -- Those who do not learn from computing history are doomed to GOTO 1 From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 12:39:18 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 670668DC for ; Wed, 11 Mar 2015 12:39:18 +0000 (UTC) Received: from bede.qeng-ho.org (bede.qeng-ho.org [217.155.128.241]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id DBA7E3D9 for ; Wed, 11 Mar 2015 12:39:17 +0000 (UTC) Received: from arthur.home.qeng-ho.org (arthur.home.qeng-ho.org [172.23.1.2]) by bede.home.qeng-ho.org (8.14.9/8.14.7) with ESMTP id t2BCdEcu046912; Wed, 11 Mar 2015 12:39:14 GMT (envelope-from freebsd@qeng-ho.org) Message-ID: <55003772.8060301@qeng-ho.org> Date: Wed, 11 Mar 2015 12:39:14 +0000 From: Arthur Chance User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Bernt Hansson Subject: Re: sysinfo.h References: <55002A42.4070608@bananmonarki.se> <20150311125846.e1b7fdb5.freebsd@edvax.de> <550032C1.8040903@bananmonarki.se> <550036B2.1070700@qeng-ho.org> In-Reply-To: <550036B2.1070700@qeng-ho.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Cc: FreeBSD-Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 12:39:18 -0000 On 11/03/2015 12:36, Arthur Chance wrote: > WEXITSTATUS is Ack, typo! That should be "is in" of course. -- Those who do not learn from computing history are doomed to GOTO 1 From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 12:50:01 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8FA3BA54 for ; Wed, 11 Mar 2015 12:50:01 +0000 (UTC) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0B1666D3 for ; Wed, 11 Mar 2015 12:49:59 +0000 (UTC) Received: from kw.news4all.se (localhost [127.0.0.1]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id t2BCnrbX076291; Wed, 11 Mar 2015 13:49:53 +0100 (CET) (envelope-from bah@bananmonarki.se) Message-ID: <550039F1.2060603@bananmonarki.se> Date: Wed, 11 Mar 2015 13:49:53 +0100 From: Bernt Hansson User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: Michael Schuster Subject: Re: sysinfo.h References: <55002A42.4070608@bananmonarki.se> <20150311125846.e1b7fdb5.freebsd@edvax.de> <550032C1.8040903@bananmonarki.se> In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Cc: Polytropon , freeBSD Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 12:50:01 -0000 On 2015-03-11 13:32, Michael Schuster wrote: > I'd expect you have more porting work ahead of you - after all, sysinfo.h > most likely is not included just for fun :-) > > Try to find out what "questions" the code in question is trying to answer, > then maybe you'll find FreeBSD-specific solutions to them easier than when > you attempt a line-for-line "port". > > regards > Michael > > (admittedly, I haven't done any significant work on FreeBSD for ages ... so > feel free to correct me if I'm wrong ;) Not trying to port it, just trying to get it working. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 12:51:27 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 072C9BCB for ; Wed, 11 Mar 2015 12:51:27 +0000 (UTC) Received: from mail-pd0-x22e.google.com (mail-pd0-x22e.google.com [IPv6:2607:f8b0:400e:c02::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id C594F754 for ; Wed, 11 Mar 2015 12:51:26 +0000 (UTC) Received: by pdno5 with SMTP id o5so11111950pdn.1 for ; Wed, 11 Mar 2015 05:51:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=/rHaTX0ESzl8wQbC5O3IHuDgMZCu6B49n8hBkW0Oa0A=; b=K6U5Xw3Tu6Efo5gfHqBpys09/UfLpgTKglJNkQHBeyQyPRUgy6KgqFeChj0OGl8rkb mZI70TyQCJINkLDlw++OID+wUuvF32MhP2M8Iw8VHjWducpRCyxMUQHD+18UkWG4FnoK xvEHKUgI5F6IwItVCeLrB5M9tstpst1wXCjBCmEdoyWOTF5iiiLWt+jG1mTrJhW9npqR ECo+0k6cL2DIGHHqoLrVOGvGvUDErgXVVCDFQ/0VIcAeDW1/EKo+YVO2SIJ055hVYQCF lLtjg0/Iwly8UvEvsDzkIuXvcPdgn+dlO64DsANyjJgsouLpfi4qDCGttTDfjF+tC58t xp2A== X-Received: by 10.70.131.164 with SMTP id on4mr45748337pdb.100.1426078285976; Wed, 11 Mar 2015 05:51:25 -0700 (PDT) MIME-Version: 1.0 Received: by 10.70.81.198 with HTTP; Wed, 11 Mar 2015 05:51:05 -0700 (PDT) In-Reply-To: <550039F1.2060603@bananmonarki.se> References: <55002A42.4070608@bananmonarki.se> <20150311125846.e1b7fdb5.freebsd@edvax.de> <550032C1.8040903@bananmonarki.se> <550039F1.2060603@bananmonarki.se> From: Michael Schuster Date: Wed, 11 Mar 2015 13:51:05 +0100 Message-ID: Subject: Re: sysinfo.h To: Bernt Hansson Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: Polytropon , freeBSD Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 12:51:27 -0000 is there a difference? ;-) On Wed, Mar 11, 2015 at 1:49 PM, Bernt Hansson wrote: > > > On 2015-03-11 13:32, Michael Schuster wrote: > >> I'd expect you have more porting work ahead of you - after all, sysinfo.h >> most likely is not included just for fun :-) >> >> Try to find out what "questions" the code in question is trying to answer, >> then maybe you'll find FreeBSD-specific solutions to them easier than when >> you attempt a line-for-line "port". >> >> regards >> Michael >> >> (admittedly, I haven't done any significant work on FreeBSD for ages ... >> so >> feel free to correct me if I'm wrong ;) >> > > Not trying to port it, just trying to get it working. > -- Michael Schuster http://recursiveramblings.wordpress.com/ From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 13:04:49 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B3D14F4E for ; Wed, 11 Mar 2015 13:04:49 +0000 (UTC) Received: from smtp1.hushmail.com (smtp1.hushmail.com [65.39.178.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 9926D904 for ; Wed, 11 Mar 2015 13:04:49 +0000 (UTC) Received: from smtp1.hushmail.com (localhost [127.0.0.1]) by smtp1.hushmail.com (Postfix) with SMTP id CCAFE401CA for ; Wed, 11 Mar 2015 12:26:56 +0000 (UTC) Received: from smtp.hushmail.com (w6.hushmail.com [65.39.178.92]) by smtp1.hushmail.com (Postfix) with ESMTP for ; Wed, 11 Mar 2015 12:26:56 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id 96F2020341; Wed, 11 Mar 2015 12:26:56 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 11 Mar 2015 12:26:56 +0000 To: freebsd-questions@freebsd.org Subject: Limiting CPU on some processes on web server From: opendaddy@hushmail.com Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150311122656.96F2020341@smtp.hushmail.com> X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 13:04:49 -0000 Hi! I run this web app that depends on ImageMagick to process images and ffmpeg to process videos. These processes, unfortunately, consume 100% of my CPU, rendering my web app unusable (gateway timeout). Tried `nice -n 19` but to no avail. What other options do I have? Thanks! O.D. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 13:08:28 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1A9371F3 for ; Wed, 11 Mar 2015 13:08:28 +0000 (UTC) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 70ACD954 for ; Wed, 11 Mar 2015 13:08:26 +0000 (UTC) Received: from kw.news4all.se (localhost [127.0.0.1]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id t2BD8KxX076747; Wed, 11 Mar 2015 14:08:21 +0100 (CET) (envelope-from bah@bananmonarki.se) Message-ID: <55003E44.8030600@bananmonarki.se> Date: Wed, 11 Mar 2015 14:08:20 +0100 From: Bernt Hansson User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: Michael Schuster Subject: Re: sysinfo.h References: <55002A42.4070608@bananmonarki.se> <20150311125846.e1b7fdb5.freebsd@edvax.de> <550032C1.8040903@bananmonarki.se> <550039F1.2060603@bananmonarki.se> In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Cc: Polytropon , freeBSD Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 13:08:28 -0000 On 2015-03-11 13:51, Michael Schuster wrote: > is there a difference? ;-) Don't know. Since i'm not a programmer. You tell me. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 13:13:57 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D5EE2414 for ; Wed, 11 Mar 2015 13:13:57 +0000 (UTC) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 953F1A4D for ; Wed, 11 Mar 2015 13:13:57 +0000 (UTC) Received: from r56.edvax.de (port-92-195-131-196.dynamic.qsc.de [92.195.131.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 765243CEBA; Wed, 11 Mar 2015 14:13:48 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id t2BDDlZm004376; Wed, 11 Mar 2015 14:13:47 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Wed, 11 Mar 2015 14:13:47 +0100 From: Polytropon To: opendaddy@hushmail.com Subject: Re: Limiting CPU on some processes on web server Message-Id: <20150311141347.1013d42d.freebsd@edvax.de> In-Reply-To: <20150311122656.96F2020341@smtp.hushmail.com> References: <20150311122656.96F2020341@smtp.hushmail.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 13:13:57 -0000 On Wed, 11 Mar 2015 12:26:56 +0000, opendaddy@hushmail.com wrote: > Hi! > > I run this web app that depends on ImageMagick to process images and ffmpeg to process videos. These processes, unfortunately, consume 100% of my CPU, rendering my web app unusable (gateway timeout). > > Tried `nice -n 19` but to no avail. > > What other options do I have? You can try ulimit. See "man sh" for ulimit parameters, for example: -t time The maximal amount of CPU time to be used by each process, in seconds. There are other restrictions you can apply, like memory locking or simultaneous processes. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 13:32:34 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C13FF8CE for ; Wed, 11 Mar 2015 13:32:34 +0000 (UTC) Received: from be-well.ilk.org (be-well.ilk.org [23.30.133.173]) by mx1.freebsd.org (Postfix) with ESMTP id 9B05EC9B for ; Wed, 11 Mar 2015 13:32:34 +0000 (UTC) Received: by be-well.ilk.org (Postfix, from userid 1147) id 2706033C48; Wed, 11 Mar 2015 09:32:33 -0400 (EDT) From: Lowell Gilbert To: Bernt Hansson To: freeBSD Mailing List Subject: Re: sysinfo.h References: <55002A42.4070608@bananmonarki.se> <20150311125846.e1b7fdb5.freebsd@edvax.de> <550032C1.8040903@bananmonarki.se> Reply-To: freeBSD Mailing List Date: Wed, 11 Mar 2015 09:32:32 -0400 In-Reply-To: <550032C1.8040903@bananmonarki.se> (Bernt Hansson's message of "Wed, 11 Mar 2015 13:19:13 +0100") Message-ID: <44pp8fr767.fsf@be-well.ilk.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.4 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 13:32:34 -0000 Bernt Hansson writes: > /SMDS_Mesh.cpp:77: error: 'WEXITSTATUS' was not declared in this scope WEXITSTATUS is explained in the manual for wait(2), for which sys/wait.h is supposed to be included. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 13:35:26 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 9D6059AE for ; Wed, 11 Mar 2015 13:35:26 +0000 (UTC) Received: from e13.lloumarturismo.com.br (e13.lloumarturismo.com.br [187.61.33.13]) by mx1.freebsd.org (Postfix) with ESMTP id 472B8CC3 for ; Wed, 11 Mar 2015 13:35:24 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=lloumarturismo.com.br; h=From:To:Subject:MIME-Version:Content-Type:Reply-To:List-Unsubscribe:Message-ID:Date; bh=WTh28K02kkdfwYF0uOA5PwvrVwk=; b=gDa8h5x504hXRKw0HMgiVhy8c8Fz5DV/oTcEetQ4QLPR4O5/r49CCOpCPkH23ZIFm1a6rEc6+LFP RkpF4d966BCdzRYcUSx+/MG3pWpCDwppszH2G/FrrNOGI36qtE78F/zRCu3BJUPFvbbC0I+YAQiK B+geWvhlMwoYPLeV610= Received: by e13.lloumarturismo.com.br id h0129q0sh4sk for ; Wed, 11 Mar 2015 10:09:00 -0300 (envelope-from ) From: "Loumarturismo.com.br" To: "" Subject: =?ISO-8859-1?Q?Hotel_com_pre=E7o_imbat=EDvel_na_baixa_temporada_em_Foz_do_Igua=E7u?= MIME-Version: 1.0 Reply-To: "Loumarturismo.com.br" X-Hash: 20830-2746-839534-4716589870f7d9103976198083306953 X-DMA: 23639784 Message-ID: <0.4.33.D9.1D05BFC8A768D10.98BB@e13.lloumarturismo.com.br> Date: Wed, 11 Mar 2015 10:35:25 -0300 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 13:35:26 -0000 Loumar Turismo - Foz do Igua=E7u - Seu destino =E9 com a gente. [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,940= 39,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5sb3VtYXJ0dXJpc21vLmNvbS5= ici8/dXRtX3NvdXJjZT1WaXJ0dWFsKy0rVGFyZ2V0JnV0bV9tZWRpdW09RS1tYWlsJnV0bV9jb2= 50ZW50PSZ1dG1fY2FtcGFpZ249QmFpeGEKVGVtcG9yYWRhJnV0bV90ZXJtPQ=3D=3D,1,ZnJlZW= JzZC5vcmc=3D] Baixa temporada em Foz do Igua=E7u S=E3o v=E1rias op=E7=F5es para se hospedar [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,940= 48,4716589870f7d9103976198083306953,aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tL2xvdW1= hcnR1cj91dG1fc291cmNlPVZpcnR1YWwrLStUYXJnZXQmdXRtX21lZGl1bT1FLW1haWwmdXRtX2= NvbnRlbnQ9JnV0bV9jYW1wYWlnbj1CYWl4YQpUZW1wb3JhZGEmdXRtX3Rlcm09,1,ZnJlZWJzZC= 5vcmc=3D] [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 0,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5pbnN0YWdyYW0uY29tL2xvdW1h= cnR1cj91dG1fc291cmNlPVZpcnR1YWwrLStUYXJnZXQmdXRtX21lZGl1bT1FLW1haWwmdXRtX2N= vbnRlbnQ9JnV0bV9jYW1wYWlnbj1CYWl4YQpUZW1wb3JhZGEmdXRtX3Rlcm09,1,ZnJlZWJzZC5= vcmc=3D] [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 9,4716589870f7d9103976198083306953,aHR0cHM6Ly93d3cudHdpdHRlci5jb20vbG91bWFy= dHVyP3V0bV9zb3VyY2U9VmlydHVhbCstK1RhcmdldCZ1dG1fbWVkaXVtPUUtbWFpbCZ1dG1fY29= udGVudD0mdXRtX2NhbXBhaWduPUJhaXhhClRlbXBvcmFkYSZ1dG1fdGVybT0=3D,1,ZnJlZWJzZ= C5vcmc=3D] [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 1,4716589870f7d9103976198083306953,[DMA6_ENCODE_URL]http://circule.me/louma= rtur?utm_source=3DVirtual+-+Target&utm_medium=3DE-mail&utm_content=3D&utm_c= ampaign=3DBaixa Temporada font-weight:bold"> Hot=E9is [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 2,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5sb3VtYXJ0dXJpc21vLmNvbS5i= ci9ob3RlaXMtZW0tZm96Lmh0bWw/dXRtX3NvdXJjZT1WaXJ0dWFsKy0rVGFyZ2V0JnV0bV9tZWR= pdW09RS1tYWlsJnV0bV9jb250ZW50PSZ1dG1fY2FtcGFpZ249QmFpeGEKVGVtcG9yYWRhJnV0bV= 90ZXJtPQ=3D=3D,1,ZnJlZWJzZC5vcmc=3D] Pacotes a=E9reos [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 3,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5sb3VtYXJ0dXJpc21vLmNvbS5i= ci9wYWNvdGUtYWVyZW8tZm96LWRvLWlndWFjdS5waHA/dXRtX3NvdXJjZT1WaXJ0dWFsKy0rVGF= yZ2V0JnV0bV9tZWRpdW09RS1tYWlsJnV0bV9jb250ZW50PSZ1dG1fY2FtcGFpZ249QmFpeGEKVG= VtcG9yYWRhJnV0bV90ZXJtPQ=3D=3D,1,ZnJlZWJzZC5vcmc=3D] Transportes [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 4,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5sb3VtYXJ0dXJpc21vLmNvbS5i= ci90cmFuc3BvcnRlLWVtLWZvei1kby1pZ3VhY3UuaHRtbD91dG1fc291cmNlPVZpcnR1YWwrLSt= UYXJnZXQmdXRtX21lZGl1bT1FLW1haWwmdXRtX2NvbnRlbnQ9JnV0bV9jYW1wYWlnbj1CYWl4YQ= pUZW1wb3JhZGEmdXRtX3Rlcm09,1,ZnJlZWJzZC5vcmc=3D] Passeios [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 5,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5sb3VtYXJ0dXJpc21vLmNvbS5i= ci9hdHJhdGl2b3MtcGFzc2Vpb3MtZW0tZm96LWRvLWlndWFjdS5waHA/dXRtX3NvdXJjZT1WaXJ= 0dWFsKy0rVGFyZ2V0JnV0bV9tZWRpdW09RS1tYWlsJnV0bV9jb250ZW50PSZ1dG1fY2FtcGFpZ2= 49QmFpeGEKVGVtcG9yYWRhJnV0bV90ZXJtPQ=3D=3D,1,ZnJlZWJzZC5vcmc=3D] Compras no Paraguai [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 6,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5sb3VtYXJ0dXJpc21vLmNvbS5i= ci9jb21wcmFzLW5vLXBhcmFndWFpLmh0bWw/dXRtX3NvdXJjZT1WaXJ0dWFsKy0rVGFyZ2V0JnV= 0bV9tZWRpdW09RS1tYWlsJnV0bV9jb250ZW50PSZ1dG1fY2FtcGFpZ249QmFpeGEKVGVtcG9yYW= RhJnV0bV90ZXJtPQ=3D=3D,1,ZnJlZWJzZC5vcmc=3D] [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,940= 47,4716589870f7d9103976198083306953,[DMA6_ENCODE_URL]http://www.loumarturis= mo.com.br/baixatemporada-foz-do-iguacu.html?utm_source=3DVirtual+-+Target&u= tm_medium=3DE-mail&utm_content=3D&utm_campaign=3DBaixa Temporada"> Aproveite a nossa sele=E7=E3o especial de hot=E9is para garantir o melhor pre=E7o entre os meses de fevereiro a junho*. Reserve duas di=E1rias e ganhe totalmente gr=E1tis o transporte para compras no Duty Free Shop. Hotel Aguas do Igua=E7u *** Hotel Bella italia **** [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,940= 47,4716589870f7d9103976198083306953,[DMA6_ENCODE_URL]http://www.loumarturis= mo.com.br/baixatemporada-foz-do-iguacu.html?utm_source=3DVirtual+-+Target&u= tm_medium=3DE-mail&utm_content=3D&utm_campaign=3DBaixa Temporada padding:5px"> INDIVIDUAL R$ 119 DUPLO R$ 159 TRIPLO R$ 219 CONSULTE DISPONIBILIDADE [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 7,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5sb3VtYXJ0dXJpc21vLmNvbS5i= ci9iYWl4YXRlbXBvcmFkYS1mb3otZG8taWd1YWN1Lmh0bWw/dXRtX3NvdXJjZT1WaXJ0dWFsKy0= rVGFyZ2V0JnV0bV9tZWRpdW09RS1tYWlsJnV0bV9jb250ZW50PSZ1dG1fY2FtcGFpZ249QmFpeG= EKVGVtcG9yYWRhJnV0bV90ZXJtPQ=3D=3D,1,ZnJlZWJzZC5vcmc=3D] [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,940= 47,4716589870f7d9103976198083306953,[DMA6_ENCODE_URL]http://www.loumarturis= mo.com.br/baixatemporada-foz-do-iguacu.html?utm_source=3DVirtual+-+Target&u= tm_medium=3DE-mail&utm_content=3D&utm_campaign=3DBaixa Temporada padding:5px"> INDIVIDUAL R$ 150 DUPLO R$ 195 TRIPLO R$ 270 CONSULTE DISPONIBILIDADE [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 7,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5sb3VtYXJ0dXJpc21vLmNvbS5i= ci9iYWl4YXRlbXBvcmFkYS1mb3otZG8taWd1YWN1Lmh0bWw/dXRtX3NvdXJjZT1WaXJ0dWFsKy0= rVGFyZ2V0JnV0bV9tZWRpdW09RS1tYWlsJnV0bV9jb250ZW50PSZ1dG1fY2FtcGFpZ249QmFpeG= EKVGVtcG9yYWRhJnV0bV90ZXJtPQ=3D=3D,1,ZnJlZWJzZC5vcmc=3D] Hotel Flor ** Hotel Villa Canoas ** [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,940= 47,4716589870f7d9103976198083306953,[DMA6_ENCODE_URL]http://www.loumarturis= mo.com.br/baixatemporada-foz-do-iguacu.html?utm_source=3DVirtual+-+Target&u= tm_medium=3DE-mail&utm_content=3D&utm_campaign=3DBaixa Temporada padding:5px"> INDIVIDUAL R$ 128 DUPLO R$ 147 TRIPLO R$ 195 QUADRUPLO R$ 247 CONSULTE DISPONIBILIDADE [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 7,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5sb3VtYXJ0dXJpc21vLmNvbS5i= ci9iYWl4YXRlbXBvcmFkYS1mb3otZG8taWd1YWN1Lmh0bWw/dXRtX3NvdXJjZT1WaXJ0dWFsKy0= rVGFyZ2V0JnV0bV9tZWRpdW09RS1tYWlsJnV0bV9jb250ZW50PSZ1dG1fY2FtcGFpZ249QmFpeG= EKVGVtcG9yYWRhJnV0bV90ZXJtPQ=3D=3D,1,ZnJlZWJzZC5vcmc=3D] [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,940= 47,4716589870f7d9103976198083306953,[DMA6_ENCODE_URL]http://www.loumarturis= mo.com.br/baixatemporada-foz-do-iguacu.html?utm_source=3DVirtual+-+Target&u= tm_medium=3DE-mail&utm_content=3D&utm_campaign=3DBaixa Temporada padding:5px"> INDIVIDUAL R$ 110 DUPLO R$ 134 TRIPLO R$ 167 QUADRUPLO R$ 203 CONSULTE DISPONIBILIDADE [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,9404= 7,4716589870f7d9103976198083306953,[DMA6_ENCODE_URL]http://www.loumarturism= o.com.br/baixatemporada-foz-do-iguacu.html?utm_source=3DVirtual+-+Target&ut= m_medium=3DE-mail&utm_content=3D&utm_campaign=3DBaixa Temporada padding-top:10px; padding-bottom:10px; font-size:11px; text-align:justify">Observa=E7=F5es: Pre=E7o por apartamento | As cortesias n=E3o podem ser substitu=EDdas por outros servi=E7os | Valores por apartamento individual | Promo=E7=E3o v=E1l= ida para hospedagens entre os meses de fevereiro e junho | N=E3o v=E1lida para feriados e eventos (calend=E1rio de eventos pode variar de acordo com o hotel) | Cortesias de transportes devem ser agendadas no ato da reserva do hotel e n=E3o d=E3o direito a remarca=E7=E3o ou reembolso | Pagamento nos cart=F5es Visa, Martercard e Dinners Club. Central de Atendimento: 0800 645 4100 [http://trk.lloumarturismo.com.br/index.dma/DmaClick?20830,2746,839534,940= 39,4716589870f7d9103976198083306953,aHR0cDovL3d3dy5sb3VtYXJ0dXJpc21vLmNvbS5= ici8/dXRtX3NvdXJjZT1WaXJ0dWFsKy0rVGFyZ2V0JnV0bV9tZWRpdW09RS1tYWlsJnV0bV9jb2= 50ZW50PSZ1dG1fY2FtcGFpZ249QmFpeGEKVGVtcG9yYWRhJnV0bV90ZXJtPQ=3D=3D,1,ZnJlZW= JzZC5vcmc=3D] Loumar Turismo - Rua Venanti Otremba 772, CEP 85852-020 - Foz do Igua=E7u - Paran=E1 From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 13:42:40 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1B36EB25 for ; Wed, 11 Mar 2015 13:42:40 +0000 (UTC) Received: from smtp5.hushmail.com (smtp5.hushmail.com [65.39.178.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id F3086DAB for ; Wed, 11 Mar 2015 13:42:39 +0000 (UTC) Received: from smtp5.hushmail.com (localhost [127.0.0.1]) by smtp5.hushmail.com (Postfix) with SMTP id E115F60419 for ; Wed, 11 Mar 2015 13:42:32 +0000 (UTC) Received: from smtp.hushmail.com (w3.hushmail.com [65.39.178.62]) by smtp5.hushmail.com (Postfix) with ESMTP; Wed, 11 Mar 2015 13:42:32 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id 838ABC0451; Wed, 11 Mar 2015 13:42:32 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 11 Mar 2015 13:42:32 +0000 To: "Polytropon" Subject: Re: Limiting CPU on some processes on web server From: opendaddy@hushmail.com In-Reply-To: <20150311141347.1013d42d.freebsd@edvax.de> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150311134232.838ABC0451@smtp.hushmail.com> Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 13:42:40 -0000 On 11. mars 2015 at 1:04 PM, "Polytropon" wrote: > >You can try ulimit. See "man sh" for ulimit parameters, >for example: > > -t time > The maximal amount of CPU time to be used by >each > process, in seconds. > >There are other restrictions you can apply, like memory >locking or simultaneous processes. > Thanks, will give that a go. Any idea how it compares to https://github.com/opsengine/cpulimit/ though? All the best, O.D. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 13:44:59 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 7716FCC3 for ; Wed, 11 Mar 2015 13:44:59 +0000 (UTC) Received: from smtp5.hushmail.com (smtp5.hushmail.com [65.39.178.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 5A093DCA for ; Wed, 11 Mar 2015 13:44:59 +0000 (UTC) Received: from smtp5.hushmail.com (localhost [127.0.0.1]) by smtp5.hushmail.com (Postfix) with SMTP id CD88B60317 for ; Wed, 11 Mar 2015 13:44:58 +0000 (UTC) Received: from smtp.hushmail.com (w3.hushmail.com [65.39.178.62]) by smtp5.hushmail.com (Postfix) with ESMTP for ; Wed, 11 Mar 2015 13:44:58 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id AF7B8C0450; Wed, 11 Mar 2015 13:44:58 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 11 Mar 2015 13:44:58 +0000 To: freebsd-questions@freebsd.org Subject: Compiling cpulimit: warning: implicit declaration of function 'basename' From: opendaddy@hushmail.com In-Reply-To: <20150311141347.1013d42d.freebsd@edvax.de> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150311134458.AF7B8C0450@smtp.hushmail.com> X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 13:44:59 -0000 Hi! Anybody know how to fix these cpulimit (https://github.com/opsengine/cpulimit/) build warnings? They seem to make cpulimit prevent processes from getting more than 2% CPU. # gmake cd src && gmake all gmake[1]: Entering directory '/root/cpulimit/src' cc -c list.c -Wall -g -D_GNU_SOURCE cc -c process_iterator.c -Wall -g -D_GNU_SOURCE cc -c process_group.c -Wall -g -D_GNU_SOURCE process_group.c:64:15: warning: implicit declaration of function 'basename' is invalid in C99 [-Wimplicit-function-declaration] if (strncmp(basename(proc.command), process_name, str... ^ process_group.c:64:15: warning: incompatible integer to pointer conversion passing 'int' to parameter of type 'const char *' [-Wint-conversion] if (strncmp(basename(proc.command), process_name, str... ^~~~~~~~~~~~~~~~~~~~~~ /usr/include/string.h:100:26: note: passing argument to parameter here int strncmp(const char *, const char *, size_t) __pure; ^ 2 warnings generated. cc -o cpulimit cpulimit.c list.o process_iterator.o process_group.o -lkvm -Wall -g -D_GNU_SOURCE gmake[1]: Leaving directory '/root/cpulimit/src' cd tests && gmake all gmake[1]: Entering directory '/root/cpulimit/tests' cc -o busy busy.c -lpthread -Wall -g cc -I../src -o process_iterator_test process_iterator_test.c ../src/list.o ../src/process_iterator.o ../src/process_group.o -lkvm -lpthread -Wall -g gmake[1]: Leaving directory '/root/cpulimit/tests' Thanks! O.D. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 13:50:01 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id DE71FFD9 for ; Wed, 11 Mar 2015 13:50:01 +0000 (UTC) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 96288E20 for ; Wed, 11 Mar 2015 13:50:01 +0000 (UTC) Received: from r56.edvax.de (port-92-195-131-196.dynamic.qsc.de [92.195.131.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 62F0A3CD9F; Wed, 11 Mar 2015 14:49:58 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id t2BDnwl7004935; Wed, 11 Mar 2015 14:49:58 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Wed, 11 Mar 2015 14:49:58 +0100 From: Polytropon To: opendaddy@hushmail.com Subject: Re: Limiting CPU on some processes on web server Message-Id: <20150311144958.3ef9519d.freebsd@edvax.de> In-Reply-To: <20150311134232.838ABC0451@smtp.hushmail.com> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 13:50:02 -0000 On Wed, 11 Mar 2015 13:42:32 +0000, opendaddy@hushmail.com wrote: > On 11. mars 2015 at 1:04 PM, "Polytropon" wrote: > > > >You can try ulimit. See "man sh" for ulimit parameters, > >for example: > > > > -t time > > The maximal amount of CPU time to be used by > >each > > process, in seconds. > > > >There are other restrictions you can apply, like memory > >locking or simultaneous processes. > > > > Thanks, will give that a go. > > Any idea how it compares to https://github.com/opsengine/cpulimit/ though? The main differnce in functionality is that ulimit -t defines the limit as time, whereas cpulimit defines it as percentage of CPU resources used. Another difference is that ulimit comes with FreeBSD's default scripting shell, whereas cpulimit is a Linux program that has to be compiled from source, after porting it, of course. :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 13:53:31 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 7EE7A163 for ; Wed, 11 Mar 2015 13:53:31 +0000 (UTC) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3BA15EE2 for ; Wed, 11 Mar 2015 13:53:30 +0000 (UTC) Received: from r56.edvax.de (port-92-195-131-196.dynamic.qsc.de [92.195.131.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 448BA3CDA7; Wed, 11 Mar 2015 14:53:29 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id t2BDrS4t004941; Wed, 11 Mar 2015 14:53:28 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Wed, 11 Mar 2015 14:53:28 +0100 From: Polytropon To: opendaddy@hushmail.com Subject: Re: Compiling cpulimit: warning: implicit declaration of function 'basename' Message-Id: <20150311145328.09853966.freebsd@edvax.de> In-Reply-To: <20150311134458.AF7B8C0450@smtp.hushmail.com> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134458.AF7B8C0450@smtp.hushmail.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 13:53:31 -0000 On Wed, 11 Mar 2015 13:44:58 +0000, opendaddy@hushmail.com wrote: > Hi! > > Anybody know how to fix these cpulimit (https://github.com/opsengine/cpulimit/) build warnings? > > They seem to make cpulimit prevent processes from getting more than 2% CPU. > > # gmake > cd src && gmake all > gmake[1]: Entering directory '/root/cpulimit/src' > cc -c list.c -Wall -g -D_GNU_SOURCE > cc -c process_iterator.c -Wall -g -D_GNU_SOURCE > cc -c process_group.c -Wall -g -D_GNU_SOURCE > process_group.c:64:15: warning: implicit declaration of function 'basename' > is invalid in C99 [-Wimplicit-function-declaration] > if (strncmp(basename(proc.command), process_name, str... > ^ FreeBSD has a basename() function, interface in libgen.h, check if included; also see "man 3 basename" for details. The following warning is probably a "follow-up error". -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 13:59:56 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id AD82937C for ; Wed, 11 Mar 2015 13:59:56 +0000 (UTC) Received: from smtprelay06.ispgateway.de (smtprelay06.ispgateway.de [80.67.18.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 70167F38 for ; Wed, 11 Mar 2015 13:59:56 +0000 (UTC) Received: from [92.204.54.227] (helo=localhost) by smtprelay06.ispgateway.de with esmtpsa (TLSv1.2:AES128-GCM-SHA256:128) (Exim 4.84) (envelope-from ) id 1YVhAO-0002ps-27 for freebsd-questions@freebsd.org; Wed, 11 Mar 2015 14:59:20 +0100 From: 1126 (Christian Lask) To: "Questions" Subject: Jail with bitblee running, connection timed out User-Agent: Notmuch/0.19 (http://notmuchmail.org) Emacs/24.4.2 (x86_64-unknown-linux-gnu) Date: Wed, 11 Mar 2015 14:59:19 +0100 Message-ID: <87vbi7zlc8.fsf@piet.i-did-not-set--mail-host-address--so-tickle-me> MIME-Version: 1.0 Content-Type: text/plain X-Df-Sender: bWFpbEBlbGZzZWNoc3VuZHp3YW56aWcuZGU= X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 13:59:56 -0000 Hello there! This might just be my first posting ever to this very mailinglist. :) I am currently deploying FreeBSD 10.1 on a spare server to learn how that works and - if everything works out - use this server for a manifold of tasks. One of them would be and currently is to run a Weechat instance in a jail to which I then connect via SSH. This is working just fine including NAT via PF and everything. Yesterday I tried to add bitlbee to the mix to connect to Twitter and Jabber via this Weechat instance. This however did not work. I configured bitlbee to run as ForkDeamon and by the user bitlbee and started it via `service bitlbee start`. `stockstat -l4p 6667` reveals that it is indeed listening on the jails IP on port 6667. In Weechat then I added a new server (localhost/6667) and tried to connect to it. This connection however is never established and times out. I do not know how to debug this properly and have no idea what is wrong here. Configuration of both seems pretty straightforward, so I don't know what I am doing wrong here. Maybe one of you could point me in the right direction? Thanks in advance! -- From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 14:04:21 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 4AD07483 for ; Wed, 11 Mar 2015 14:04:21 +0000 (UTC) Received: from smtp5.hushmail.com (smtp5.hushmail.com [65.39.178.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 2D2598E for ; Wed, 11 Mar 2015 14:04:21 +0000 (UTC) Received: from smtp5.hushmail.com (localhost [127.0.0.1]) by smtp5.hushmail.com (Postfix) with SMTP id 842D46041F for ; Wed, 11 Mar 2015 14:04:20 +0000 (UTC) Received: from smtp.hushmail.com (w3.hushmail.com [65.39.178.62]) by smtp5.hushmail.com (Postfix) with ESMTP; Wed, 11 Mar 2015 14:04:20 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id 1646CC044F; Wed, 11 Mar 2015 14:04:20 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 11 Mar 2015 14:04:19 +0000 To: "Polytropon" Subject: Re: Limiting CPU on some processes on web server From: opendaddy@hushmail.com In-Reply-To: <20150311144958.3ef9519d.freebsd@edvax.de> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> <20150311144958.3ef9519d.freebsd@edvax.de> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150311140420.1646CC044F@smtp.hushmail.com> Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 14:04:21 -0000 On 11. mars 2015 at 1:41 PM, "Polytropon" wrote: > >The main differnce in functionality is that ulimit -t defines >the limit as time, whereas cpulimit defines it as percentage >of CPU resources used. > >Another difference is that ulimit comes with FreeBSD's default >scripting shell, whereas cpulimit is a Linux program that has >to be compiled from source, after porting it, of course. :-) > Sounds really tempting especially considering those other cpulimit compile errors. Is there a CPU time limit equivalent to say 20% or have I totally misunderstood? O.D. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 14:09:33 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 22273657 for ; Wed, 11 Mar 2015 14:09:33 +0000 (UTC) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "ca.infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 888EECA for ; Wed, 11 Mar 2015 14:09:32 +0000 (UTC) Received: from zero-gravitas.local (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.1/8.15.1) with ESMTPSA id t2BE9Kag091230 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Wed, 11 Mar 2015 14:09:26 GMT (envelope-from matthew@FreeBSD.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org DKIM-Filter: OpenDKIM Filter v2.9.2 smtp.infracaninophile.co.uk t2BE9Kag091230 Authentication-Results: smtp.infracaninophile.co.uk/t2BE9Kag091230; dkim=none reason="no signature"; dkim-adsp=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be zero-gravitas.local Message-ID: <55004C8E.5050407@FreeBSD.org> Date: Wed, 11 Mar 2015 14:09:18 +0000 From: Matthew Seaman User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: Jail with bitblee running, connection timed out References: <87vbi7zlc8.fsf@piet.i-did-not-set--mail-host-address--so-tickle-me> In-Reply-To: <87vbi7zlc8.fsf@piet.i-did-not-set--mail-host-address--so-tickle-me> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.98.6 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 14:09:33 -0000 On 2015/03/11 13:59, 1126 (Christian Lask) wrote: > `stockstat -l4p 6667` reveals that it is indeed listening on the jails > IP on port 6667. In Weechat then I added a new server (localhost/6667) > and tried to connect to it. This connection however is never established > and times out. I do not know how to debug this properly and have no idea > what is wrong here. Configuration of both seems pretty straightforward, > so I don't know what I am doing wrong here. Jails tend not to have localhost (ie. 127.0.0.1 or ::1) addresses accessible to them[*]. Try logging into the jail and examine the output of 'ifconfig -a' -- compare it with what you get on the host system. If you want some processes within the same jail to be able to communicate through a network-like protocol, then unix domain sockets are the way to go, assuming that the software you want to run supports them. Failing that, you'll have to use the jail's allocated IP number(s). Cheers, Matthew [*] There is a new alternative style of jail, called a VNET jail, which you could use and that do have their own loopback interfaces and localhost addresses, but these are still fairly new, somewhat more complicated to setup and still not thoroughly debugged. Last I checked, they also required you to run a custom kernel. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 14:12:01 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6B4456FD for ; Wed, 11 Mar 2015 14:12:01 +0000 (UTC) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 24952173 for ; Wed, 11 Mar 2015 14:12:00 +0000 (UTC) Received: from r56.edvax.de (port-92-195-131-196.dynamic.qsc.de [92.195.131.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx02.qsc.de (Postfix) with ESMTPS id 35AAF2780B; Wed, 11 Mar 2015 15:11:58 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id t2BEBvdb005205; Wed, 11 Mar 2015 15:11:57 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Wed, 11 Mar 2015 15:11:57 +0100 From: Polytropon To: opendaddy@hushmail.com Subject: Re: Limiting CPU on some processes on web server Message-Id: <20150311151157.5baea8b7.freebsd@edvax.de> In-Reply-To: <20150311140420.1646CC044F@smtp.hushmail.com> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> <20150311144958.3ef9519d.freebsd@edvax.de> <20150311140420.1646CC044F@smtp.hushmail.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 14:12:01 -0000 On Wed, 11 Mar 2015 14:04:19 +0000, opendaddy@hushmail.com wrote: > On 11. mars 2015 at 1:41 PM, "Polytropon" wrote: > > > >The main differnce in functionality is that ulimit -t defines > >the limit as time, whereas cpulimit defines it as percentage > >of CPU resources used. > > > >Another difference is that ulimit comes with FreeBSD's default > >scripting shell, whereas cpulimit is a Linux program that has > >to be compiled from source, after porting it, of course. :-) > > > > Sounds really tempting especially considering those other cpulimit > compile errors. If you manually add "#include " to src/cpulimit.c and remove "#ifdef __APPLE__" ... "#endif" from tests/process_iterator_test.c around the "#include " line, you can run "gmake" (in src/ and /test, or at the top level), and it will successfully build. Result: $ ./cpulimit Error: You must specify a cpu limit percentage Usage: cpulimit [OPTIONS...] TARGET OPTIONS -l, --limit=N percentage of cpu allowed from 0 to 200 (required) -v, --verbose show control statistics -z, --lazy exit if there is no target process, or if it dies -i, --include-children limit also the children processes -h, --help display this help and exit TARGET must be exactly one of these: -p, --pid=N pid of the process (implies -z) -e, --exe=FILE name of the executable program file or path name COMMAND [ARGS] run this command and limit it (implies -z) You can try that "quick & dirty" modification and check if the cputime program _works_ for you. > Is there a CPU time limit equivalent to say 20% or have I totally misunderstood? I'd say it's hard to calculate or estimate absolute CPU time from relative resource consumption (load). You will probably have to test this with the real application you want to limit. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 14:16:57 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C401D817 for ; Wed, 11 Mar 2015 14:16:57 +0000 (UTC) Received: from relaygateway02.edpnet.net (relaygateway02.edpnet.net [212.71.1.211]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "*.edpnet.net", Issuer "Go Daddy Secure Certificate Authority - G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 20A331C7 for ; Wed, 11 Mar 2015 14:16:56 +0000 (UTC) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AosGAHRNAFVNbXSW/2dsb2JhbABcgwZSWoMLwEoKhSdJAoE2TgEBAQEBAXyEDwEBAQMBAQEBICsIGAsQCxgJEw4CAg8FEwEJCCQIBwQBHASHegMJDAmtEpVcD0OEYwEBAQcBAQEBHosXhBcGAQFPB4ItOxKBMwWUA4NSgiIBgVOSJCOCAhyBUT0xB3wIF4EhAQEB X-IPAS-Result: AosGAHRNAFVNbXSW/2dsb2JhbABcgwZSWoMLwEoKhSdJAoE2TgEBAQEBAXyEDwEBAQMBAQEBICsIGAsQCxgJEw4CAg8FEwEJCCQIBwQBHASHegMJDAmtEpVcD0OEYwEBAQcBAQEBHosXhBcGAQFPB4ItOxKBMwWUA4NSgiIBgVOSJCOCAhyBUT0xB3wIF4EhAQEB X-IronPort-AV: E=Sophos;i="5.11,382,1422918000"; d="scan'208";a="304862487" Received: from 77.109.116.150.adsl.dyn.edpnet.net (HELO mordor.lan) ([77.109.116.150]) by relaygateway02.edpnet.net with ESMTP/TLS/DHE-RSA-AES256-SHA; 11 Mar 2015 15:16:46 +0100 Date: Wed, 11 Mar 2015 15:16:44 +0100 From: Julien Cigar To: Polytropon Subject: Re: Limiting CPU on some processes on web server Message-ID: <20150311141644.GS6600@mordor.lan> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> <20150311144958.3ef9519d.freebsd@edvax.de> <20150311140420.1646CC044F@smtp.hushmail.com> <20150311151157.5baea8b7.freebsd@edvax.de> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="KWhV7zotm6ea722p" Content-Disposition: inline In-Reply-To: <20150311151157.5baea8b7.freebsd@edvax.de> User-Agent: Mutt/1.5.23 (2014-03-12) Cc: opendaddy@hushmail.com, freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 14:16:57 -0000 --KWhV7zotm6ea722p Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Mar 11, 2015 at 03:11:57PM +0100, Polytropon wrote: > On Wed, 11 Mar 2015 14:04:19 +0000, opendaddy@hushmail.com wrote: > > On 11. mars 2015 at 1:41 PM, "Polytropon" wrote: > > > > > >The main differnce in functionality is that ulimit -t defines > > >the limit as time, whereas cpulimit defines it as percentage > > >of CPU resources used. > > > > > >Another difference is that ulimit comes with FreeBSD's default > > >scripting shell, whereas cpulimit is a Linux program that has > > >to be compiled from source, after porting it, of course. :-) > > > > >=20 > > Sounds really tempting especially considering those other cpulimit > > compile errors. >=20 > If you manually add "#include " to src/cpulimit.c > and remove "#ifdef __APPLE__" ... "#endif" from tests/process_iterator_te= st.c > around the "#include " line, you can run "gmake" > (in src/ and /test, or at the top level), and it will successfully > build. there is sysutils/cpulimit too .. >=20 > Result: >=20 > $ ./cpulimit=20 > Error: You must specify a cpu limit percentage > Usage: cpulimit [OPTIONS...] TARGET > OPTIONS > -l, --limit=3DN percentage of cpu allowed from 0 to 200 (r= equired) > -v, --verbose show control statistics > -z, --lazy exit if there is no target process, or if it= dies > -i, --include-children limit also the children processes > -h, --help display this help and exit > TARGET must be exactly one of these: > -p, --pid=3DN pid of the process (implies -z) > -e, --exe=3DFILE name of the executable program file or pat= h name > COMMAND [ARGS] run this command and limit it (implies -z) >=20 > You can try that "quick & dirty" modification and check if > the cputime program _works_ for you. >=20 >=20 >=20 > > Is there a CPU time limit equivalent to say 20% or have I totally misun= derstood? >=20 > I'd say it's hard to calculate or estimate absolute CPU time > from relative resource consumption (load). You will probably > have to test this with the real application you want to limit. >=20 >=20 >=20 > --=20 > Polytropon > Magdeburg, Germany > Happy FreeBSD user since 4.0 > Andra moi ennepe, Mousa, ... > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" --=20 Julien Cigar Belgian Biodiversity Platform (http://www.biodiversity.be) PGP fingerprint: EEF9 F697 4B68 D275 7B11 6A25 B2BB 3710 A204 23C0 No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. --KWhV7zotm6ea722p Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABCgAGBQJVAE5MAAoJEAi2KiTKQR5poUMQALZx3K7tImN9Tw/IzByaB22V +OklM+M6DrLcq8K+AdBvWfIWW+ZP+7v5mkvlZoK0WmdoU1Ahhg8KdCNSq60iCdIR Y9uFDe1yaH8q9U/otTfsEGEwhG4pHlQWoXHyeLPvULqVBnnGl7RlH8TLscMuDZoF zo8BDmzOERIvcHrDaZyfK4sk4MDzvbrHghvI8uoDUQQTxM4xHAfRmFXgnlPRsJ+t BDeOpK8aSrviJj9Os9LKU1nM8z3DOSwlxBT4NX75ZsgsPZVquP1FNgEgjDOec5qY 0h8/fdap9bfMoyj+mF3jxm1E0OisNP6YmzOUR3r4eCFOufYpM3UCp40GYlFlXz2Y 82vcsaUVYKaXEglPD73wkT1BTM2IOtYIfvTR4AVGyLhjXxS7mWUiYrLIGvhbTBNK gz1aZOaJqAeg78xUEn9QqORtgDfbSBxiycjQyvR8JZlCCoU/Cky010cJRuhQBezS ubp7zdsIJxJdAbBAAQOIw23dWsaE3gagpil/8/dDYW6M1EfiE+HyYRhHb8j+D20z OlgbkSW2iQXbImjSZ4oMKLtUxZ1J52a0NrUw439wBgCRcQ2jNx+DVKfJpT1Hxepw KwmdkeH2dphLDyrFWWGECLQHpkZUyzXvdQECIxK3+NV/HP91Hph4T8CIVIvfljAz Q65IITr1wXFxYnmK2MdU =lwFR -----END PGP SIGNATURE----- --KWhV7zotm6ea722p-- From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 14:18:32 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 063948C3; Wed, 11 Mar 2015 14:18:32 +0000 (UTC) Received: from smtprelay04.ispgateway.de (smtprelay04.ispgateway.de [80.67.31.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id BBDFF1DE; Wed, 11 Mar 2015 14:18:31 +0000 (UTC) Received: from [92.204.54.227] (helo=localhost) by smtprelay04.ispgateway.de with esmtpsa (TLSv1.2:AES128-GCM-SHA256:128) (Exim 4.84) (envelope-from ) id 1YVhSL-0008DB-8g; Wed, 11 Mar 2015 15:17:53 +0100 From: Christian Lask To: Matthew Seaman , freebsd-questions@freebsd.org Subject: Re: Jail with bitblee running, connection timed out In-Reply-To: <55004C8E.5050407@FreeBSD.org> References: <87vbi7zlc8.fsf@piet.i-did-not-set--mail-host-address--so-tickle-me> <55004C8E.5050407@FreeBSD.org> User-Agent: Notmuch/0.19 (http://notmuchmail.org) Emacs/24.4.2 (x86_64-unknown-linux-gnu) Date: Wed, 11 Mar 2015 15:17:52 +0100 Message-ID: <87sidbzkhb.fsf@piet.i-did-not-set--mail-host-address--so-tickle-me> MIME-Version: 1.0 Content-Type: text/plain X-Df-Sender: bGlzdHNAZWxmc2VjaHN1bmR6d2FuemlnLmRl X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 14:18:32 -0000 Matthew Seaman writes: > On 2015/03/11 13:59, 1126 (Christian Lask) wrote: >> `stockstat -l4p 6667` reveals that it is indeed listening on the jails >> IP on port 6667. In Weechat then I added a new server (localhost/6667) >> and tried to connect to it. This connection however is never established >> and times out. I do not know how to debug this properly and have no idea >> what is wrong here. Configuration of both seems pretty straightforward, >> so I don't know what I am doing wrong here. > > Jails tend not to have localhost (ie. 127.0.0.1 or ::1) addresses > accessible to them[*]. Try logging into the jail and examine the output > of 'ifconfig -a' -- compare it with what you get on the host system. I see! Thanks, I didn't know that, but that explains a lot. > If you want some processes within the same jail to be able to > communicate through a network-like protocol, then unix domain sockets > are the way to go, assuming that the software you want to run supports > them. Failing that, you'll have to use the jail's allocated IP > number(s). I will look into it. I guess, I know now where to look and how to get it running. Thanks again! -- From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 14:36:38 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 549C9FE2 for ; Wed, 11 Mar 2015 14:36:38 +0000 (UTC) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 10C0D66D for ; Wed, 11 Mar 2015 14:36:37 +0000 (UTC) Received: from r56.edvax.de (port-92-195-131-196.dynamic.qsc.de [92.195.131.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx02.qsc.de (Postfix) with ESMTPS id BF04F27752; Wed, 11 Mar 2015 15:36:35 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id t2BEaZ8i005417; Wed, 11 Mar 2015 15:36:35 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Wed, 11 Mar 2015 15:36:35 +0100 From: Polytropon To: Julien Cigar Subject: Re: Limiting CPU on some processes on web server Message-Id: <20150311153635.a87543cc.freebsd@edvax.de> In-Reply-To: <20150311141644.GS6600@mordor.lan> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> <20150311144958.3ef9519d.freebsd@edvax.de> <20150311140420.1646CC044F@smtp.hushmail.com> <20150311151157.5baea8b7.freebsd@edvax.de> <20150311141644.GS6600@mordor.lan> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: opendaddy@hushmail.com, freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 14:36:38 -0000 On Wed, 11 Mar 2015 15:16:44 +0100, Julien Cigar wrote: > there is sysutils/cpulimit too .. Judging from its manpage (yes, it _has_ a manpage!): -l, --limit=N percentage of CPU allowed from 0 to 100 (mandatory) This seems to fulfill the requirement of setting the limit according to load percentage, instead of time (like ulimit -t). -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 14:38:22 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D192E141 for ; Wed, 11 Mar 2015 14:38:22 +0000 (UTC) Received: from smtp10.hushmail.com (smtp10.hushmail.com [65.39.178.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id B357A6A7 for ; Wed, 11 Mar 2015 14:38:22 +0000 (UTC) Received: from smtp10.hushmail.com (localhost [127.0.0.1]) by smtp10.hushmail.com (Postfix) with SMTP id 848BEC02C1 for ; Wed, 11 Mar 2015 14:07:20 +0000 (UTC) Received: from smtp.hushmail.com (w3.hushmail.com [65.39.178.62]) by smtp10.hushmail.com (Postfix) with ESMTP; Wed, 11 Mar 2015 14:07:20 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id 2A7F4C0451; Wed, 11 Mar 2015 14:07:20 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 11 Mar 2015 14:07:20 +0000 To: "Polytropon" Subject: Re: Compiling cpulimit: warning: implicit declaration of function 'basename' From: opendaddy@hushmail.com In-Reply-To: <20150311145328.09853966.freebsd@edvax.de> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134458.AF7B8C0450@smtp.hushmail.com> <20150311145328.09853966.freebsd@edvax.de> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150311140720.2A7F4C0451@smtp.hushmail.com> Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 14:38:22 -0000 On 11. mars 2015 at 1:44 PM, "Polytropon" wrote: > >FreeBSD has a basename() function, interface in libgen.h, check >if included; also see "man 3 basename" for details. The following >warning is probably a "follow-up error". > Not sure what to look for here, C is way, way beyond my level. https://github.com/opsengine/cpulimit/blob/master/src/process_group.c#L64-L68 Are you able to compile it over at your end? Many thanks! O.D. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 14:41:22 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 21A9B21F for ; Wed, 11 Mar 2015 14:41:22 +0000 (UTC) Received: from smtp1.hushmail.com (smtp1.hushmail.com [65.39.178.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 0105D6D5 for ; Wed, 11 Mar 2015 14:41:21 +0000 (UTC) Received: from smtp1.hushmail.com (localhost [127.0.0.1]) by smtp1.hushmail.com (Postfix) with SMTP id E526540379 for ; Wed, 11 Mar 2015 14:41:20 +0000 (UTC) Received: from smtp.hushmail.com (w3.hushmail.com [65.39.178.62]) by smtp1.hushmail.com (Postfix) with ESMTP; Wed, 11 Mar 2015 14:41:20 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id 917CCC044F; Wed, 11 Mar 2015 14:41:20 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 11 Mar 2015 14:41:20 +0000 To: "Polytropon" , "Julien Cigar" Subject: Re: Limiting CPU on some processes on web server From: opendaddy@hushmail.com In-Reply-To: <20150311153635.a87543cc.freebsd@edvax.de> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> <20150311144958.3ef9519d.freebsd@edvax.de> <20150311140420.1646CC044F@smtp.hushmail.com> <20150311151157.5baea8b7.freebsd@edvax.de> <20150311141644.GS6600@mordor.lan> <20150311153635.a87543cc.freebsd@edvax.de> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150311144120.917CCC044F@smtp.hushmail.com> Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 14:41:22 -0000 On 11. mars 2015 at 2:27 PM, "Polytropon" wrote: > >Judging from its manpage (yes, it _has_ a manpage!): > > -l, --limit=N > percentage of CPU allowed from 0 to 100 (mandatory) > >This seems to fulfill the requirement of setting the limit >according to load percentage, instead of time (like ulimit -t). Yep. If I'm not mistaken, sysutils/cpulimit is just an older version of https://github.com/opsengine/cpulimit, one that doesn't support custom arguments (http://superuser.com/a/443008/327566 mentions that it's only available in the development version). Thanks! O.D. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 14:58:40 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 794C3D6A; Wed, 11 Mar 2015 14:58:40 +0000 (UTC) Received: from bede.qeng-ho.org (bede.qeng-ho.org [217.155.128.241]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 118BF9E3; Wed, 11 Mar 2015 14:58:39 +0000 (UTC) Received: from arthur.home.qeng-ho.org (arthur.home.qeng-ho.org [172.23.1.2]) by bede.home.qeng-ho.org (8.14.9/8.14.7) with ESMTP id t2BEwatJ047184; Wed, 11 Mar 2015 14:58:37 GMT (envelope-from freebsd@qeng-ho.org) Message-ID: <5500581C.8060300@qeng-ho.org> Date: Wed, 11 Mar 2015 14:58:36 +0000 From: Arthur Chance User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Matthew Seaman , freebsd-questions@freebsd.org Subject: Re: Jail with bitblee running, connection timed out References: <87vbi7zlc8.fsf@piet.i-did-not-set--mail-host-address--so-tickle-me> <55004C8E.5050407@FreeBSD.org> In-Reply-To: <55004C8E.5050407@FreeBSD.org> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 14:58:40 -0000 On 11/03/2015 14:09, Matthew Seaman wrote: > On 2015/03/11 13:59, 1126 (Christian Lask) wrote: >> `stockstat -l4p 6667` reveals that it is indeed listening on the jails >> IP on port 6667. In Weechat then I added a new server (localhost/6667) >> and tried to connect to it. This connection however is never established >> and times out. I do not know how to debug this properly and have no idea >> what is wrong here. Configuration of both seems pretty straightforward, >> so I don't know what I am doing wrong here. > > Jails tend not to have localhost (ie. 127.0.0.1 or ::1) addresses > accessible to them[*]. Try logging into the jail and examine the output > of 'ifconfig -a' -- compare it with what you get on the host system. The networking code special cases attempts to connect to or listen on 127.0.0.1 (or ::1 for IPv6) within jails and replaces those addresses with the primary IP address for the jail (failing if there isn't one). Take a look at prison_(local|remote)_ip[46] in /usr/src/sys/kern/kern_jail.c and their uses in the inet code. (I'm looking at 10.1-REL code). Did the OP actually have an /etc/hosts in the jail? If not, localhost wouldn't resolve. Not sure why that would cause a hang though. > If you want some processes within the same jail to be able to > communicate through a network-like protocol, then unix domain sockets > are the way to go, assuming that the software you want to run supports > them. Failing that, you'll have to use the jail's allocated IP number(s). > > Cheers, > > Matthew > > [*] There is a new alternative style of jail, called a VNET jail, which > you could use and that do have their own loopback interfaces and > localhost addresses, but these are still fairly new, somewhat more > complicated to setup and still not thoroughly debugged. Last I checked, > they also required you to run a custom kernel. -- Those who do not learn from computing history are doomed to GOTO 1 From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 15:00:06 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BB37CE17 for ; Wed, 11 Mar 2015 15:00:06 +0000 (UTC) Received: from smtp2.hushmail.com (smtp2.hushmail.com [65.39.178.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 9C3629F8 for ; Wed, 11 Mar 2015 15:00:06 +0000 (UTC) Received: from smtp2.hushmail.com (localhost [127.0.0.1]) by smtp2.hushmail.com (Postfix) with SMTP id C1B7FA0465 for ; Wed, 11 Mar 2015 14:23:10 +0000 (UTC) Received: from smtp.hushmail.com (w3.hushmail.com [65.39.178.62]) by smtp2.hushmail.com (Postfix) with ESMTP; Wed, 11 Mar 2015 14:23:10 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id 321CAC044F; Wed, 11 Mar 2015 14:23:10 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 11 Mar 2015 14:23:10 +0000 To: "Polytropon" Subject: Re: Limiting CPU on some processes on web server From: opendaddy@hushmail.com In-Reply-To: <20150311151157.5baea8b7.freebsd@edvax.de> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> <20150311144958.3ef9519d.freebsd@edvax.de> <20150311140420.1646CC044F@smtp.hushmail.com> <20150311151157.5baea8b7.freebsd@edvax.de> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150311142310.321CAC044F@smtp.hushmail.com> Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 15:00:06 -0000 On 11. mars 2015 at 2:03 PM, "Polytropon" wrote: > >You can try that "quick & dirty" modification and check if >the cputime program _works_ for you. > Awesome - no more warnings! Unfortunately though, the processes that run inside it doesn't seem to get more than 2% CPU. As expected, this works just fine on Linux. >> Is there a CPU time limit equivalent to say 20% or have I >totally misunderstood? > >I'd say it's hard to calculate or estimate absolute CPU time >from relative resource consumption (load). You will probably >have to test this with the real application you want to limit. Basically I run this web app that requires ImageMagick to process photos, but whenever ImageMagick runs, it consumes up to 100% CPU, rendering the actual web app inaccessible (gateway timeout). Thanks! O.D. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 15:05:43 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 04A9971 for ; Wed, 11 Mar 2015 15:05:43 +0000 (UTC) Received: from smtp5.hushmail.com (smtp5.hushmail.com [65.39.178.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id D818BAD4 for ; Wed, 11 Mar 2015 15:05:42 +0000 (UTC) Received: from smtp5.hushmail.com (localhost [127.0.0.1]) by smtp5.hushmail.com (Postfix) with SMTP id 07593605A9 for ; Wed, 11 Mar 2015 15:05:42 +0000 (UTC) Received: from smtp.hushmail.com (w3.hushmail.com [65.39.178.62]) by smtp5.hushmail.com (Postfix) with ESMTP; Wed, 11 Mar 2015 15:05:40 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id 5A087C044F; Wed, 11 Mar 2015 15:05:40 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 11 Mar 2015 15:05:40 +0000 To: "Polytropon" , "Julien Cigar" Subject: Re: Limiting CPU on some processes on web server From: opendaddy@hushmail.com In-Reply-To: <20150311153635.a87543cc.freebsd@edvax.de> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> <20150311144958.3ef9519d.freebsd@edvax.de> <20150311140420.1646CC044F@smtp.hushmail.com> <20150311151157.5baea8b7.freebsd@edvax.de> <20150311141644.GS6600@mordor.lan> <20150311153635.a87543cc.freebsd@edvax.de> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150311150540.5A087C044F@smtp.hushmail.com> Cc: freebsd-questions@freebsd.org, jessefrgsmith@yahoo.ca X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 15:05:43 -0000 I've asked that the sysutils/cpulimit maintainer please upgrade the port. Thanks a lot for the help guys! Have a wonderful week! O.D. On 11. mars 2015 at 2:27 PM, "Polytropon" wrote: > >On Wed, 11 Mar 2015 15:16:44 +0100, Julien Cigar wrote: >> there is sysutils/cpulimit too .. > >Judging from its manpage (yes, it _has_ a manpage!): > > -l, --limit=N > percentage of CPU allowed from 0 to 100 (mandatory) > >This seems to fulfill the requirement of setting the limit >according to load percentage, instead of time (like ulimit -t). > > >-- >Polytropon >Magdeburg, Germany >Happy FreeBSD user since 4.0 >Andra moi ennepe, Mousa, ... From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 15:08:04 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id AEF5619B for ; Wed, 11 Mar 2015 15:08:04 +0000 (UTC) Received: from smtp3.hushmail.com (smtp3.hushmail.com [65.39.178.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 8F664B37 for ; Wed, 11 Mar 2015 15:08:04 +0000 (UTC) Received: from smtp3.hushmail.com (localhost [127.0.0.1]) by smtp3.hushmail.com (Postfix) with SMTP id 1EC7AE0495 for ; Wed, 11 Mar 2015 14:34:43 +0000 (UTC) Received: from smtp.hushmail.com (w3.hushmail.com [65.39.178.62]) by smtp3.hushmail.com (Postfix) with ESMTP; Wed, 11 Mar 2015 14:34:42 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id C3FA3C044F; Wed, 11 Mar 2015 14:34:42 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 11 Mar 2015 14:34:42 +0000 To: "Julien Cigar" , "Polytropon" Subject: Re: Limiting CPU on some processes on web server From: opendaddy@hushmail.com In-Reply-To: <20150311141644.GS6600@mordor.lan> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> <20150311144958.3ef9519d.freebsd@edvax.de> <20150311140420.1646CC044F@smtp.hushmail.com> <20150311151157.5baea8b7.freebsd@edvax.de> <20150311141644.GS6600@mordor.lan> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150311143442.C3FA3C044F@smtp.hushmail.com> Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 15:08:04 -0000 On 11. mars 2015 at 2:07 PM, "Julien Cigar" wrote: > >there is sysutils/cpulimit too .. > Unfortunately this one doesn't seem to let me run commands with custom arguments, ie. the latest cpulimit at GitHub lets me do: cpulimit --limit 20 /usr/local/bin/myscript -a -b -c But the one in ports seems to be limited to: cpulimit -P /usr/local/bin/myscript -l 20 Tried stuff like: cpulimit -P /usr/local/bin/myscript -l 20 -- -a -b -c but to no avail. Thanks, O.D. From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 17:51:53 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 9A533C89 for ; Wed, 11 Mar 2015 17:51:53 +0000 (UTC) Received: from mail-we0-x233.google.com (mail-we0-x233.google.com [IPv6:2a00:1450:400c:c03::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2B61D1AA for ; Wed, 11 Mar 2015 17:51:53 +0000 (UTC) Received: by wesq59 with SMTP id q59so10965652wes.9 for ; Wed, 11 Mar 2015 10:51:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=date:from:to:subject:message-id:in-reply-to:references:mime-version :content-type:content-transfer-encoding; bh=4GF6JlyqXnNk6sZ+iXxRACR7BBUB71HUftmyKJ2UDl0=; b=LW6k9XQXbiyxo8lUx6O03elUobRapg7lAKXskoZxli3KeCowWJeEP7z6Ji99fnGdLL 7QLnrppKf0l1v8yNHULm4dVr9ahGRHU3uep07WCLhiDNlqeSafHcygOKrP2U+47wP7Dn lTsj2oOlQkFxdVXUyPoZGs2VaFrt3MzpfTreQFDpJ6mdf76//m/p8Lk6eEzIr8dzC1Rg NR9NPSQrCsRqcN6ULLC86ZdqthzvOigMz8/O1H6dFAQmvqESndJ2hT2NH73q7/FZPLNl +v5h3zhtMHG9LZ8dIH3ghbfV9fW9DSvBt2fgqhkjYUHz3Cro6v5yOa3F9UN5ijErNhgv Wm6Q== X-Received: by 10.194.175.137 with SMTP id ca9mr18189482wjc.67.1426096311494; Wed, 11 Mar 2015 10:51:51 -0700 (PDT) Received: from gumby.homeunix.com (4e5670d9.skybroadband.com. [78.86.112.217]) by mx.google.com with ESMTPSA id nd15sm7091552wic.8.2015.03.11.10.51.49 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Mar 2015 10:51:50 -0700 (PDT) Date: Wed, 11 Mar 2015 17:51:47 +0000 From: RW To: freebsd-questions@freebsd.org Subject: Re: google chrome requires tsync support under linux Message-ID: <20150311175147.0a0117b3@gumby.homeunix.com> In-Reply-To: <20150311081515.0f77be89@scorpio> References: <20150311081515.0f77be89@scorpio> X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.25; amd64-portbld-freebsd10.0) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 17:51:53 -0000 On Wed, 11 Mar 2015 08:15:15 -0400 Jerry wrote: > I was just reading where google chrome requires tsync support under > linux. > > > > Will this affect FreeBSD? http://tech.slashdot.org/story/15/03/10/1430239/tsync-not-a-hard-requirement-for-google-chrome-after-all From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 19:21:37 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C3221905 for ; Wed, 11 Mar 2015 19:21:37 +0000 (UTC) Received: from lb2-smtp-cloud2.xs4all.net (lb2-smtp-cloud2.xs4all.net [194.109.24.25]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (Client CN "Bizanga Labs SMTP Client Certificate", Issuer "Bizanga Labs CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 5371FEBA for ; Wed, 11 Mar 2015 19:21:36 +0000 (UTC) Received: from slackbox.erewhon.home ([83.162.243.5]) by smtp-cloud2.xs4all.net with ESMTP id 2KLP1q00507iGuj01KLQ4b; Wed, 11 Mar 2015 20:20:25 +0100 Received: by slackbox.erewhon.home (Postfix, from userid 1001) id 1EE851243F; Wed, 11 Mar 2015 20:20:23 +0100 (CET) Date: Wed, 11 Mar 2015 20:20:23 +0100 From: Roland Smith To: Bernt Hansson Subject: Re: sysinfo.h Message-ID: <20150311192023.GA8178@slackbox.erewhon.home> Mail-Followup-To: Bernt Hansson , Michael Schuster , Polytropon , freeBSD Mailing List References: <55002A42.4070608@bananmonarki.se> <20150311125846.e1b7fdb5.freebsd@edvax.de> <550032C1.8040903@bananmonarki.se> <550039F1.2060603@bananmonarki.se> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="fdj2RfSjLxBAspz7" Content-Disposition: inline In-Reply-To: <550039F1.2060603@bananmonarki.se> X-GPG-Fingerprint: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 X-GPG-Key: http://www.xs4all.nl/~rsmith/pubkey.txt X-GPG-Notice: If this message is not signed, don't assume I sent it! User-Agent: Mutt/1.5.23 (2014-03-12) Cc: Michael Schuster , Polytropon , freeBSD Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 19:21:37 -0000 --fdj2RfSjLxBAspz7 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Mar 11, 2015 at 01:49:53PM +0100, Bernt Hansson wrote: >=20 >=20 > On 2015-03-11 13:32, Michael Schuster wrote: > > I'd expect you have more porting work ahead of you - after all, sysinfo= =2Eh > > most likely is not included just for fun :-) > > > > Try to find out what "questions" the code in question is trying to answ= er, > > then maybe you'll find FreeBSD-specific solutions to them easier than w= hen > > you attempt a line-for-line "port". > > > > regards > > Michael > > > > (admittedly, I haven't done any significant work on FreeBSD for ages ..= =2E so > > feel free to correct me if I'm wrong ;) >=20 > Not trying to port it, just trying to get it working. There are differences between different UNIX-like operating systems like *B= SD, Linux and OS-X, even though they all try to deliver more or less the same functionality. So in general, "getting it to work" means porting. Hence we have the "ports tree" in FreeBSD. :-) You should consider writing a port for freecad. This will help make sure th= at you have the required libraries installed, and you can put the necessary patches in the port's files directory. If you have never done any programming, porting a major program like this w= ill involve a non-trivial learning curve. But there are lots of examples in the ports tree, and you can reach out on the mailing lists for assistance. The following page that details how to compile FreeCAD might be of use: http://www.freecadweb.org/wiki/index.php?title=3DCompileOnUnix The dependencies eigen3 and opencascade, soqt and pivy are already in the ports tree as math/eigen3, cad/opencascade, x11-toolkits/soqt and graphics/py-pivy. Roland --=20 R.F.Smith http://rsmith.home.xs4all.nl/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 5753 3324 1661 B0FE 8D93 FCED 40F6 D5DC A38A 33E0 (keyID: A38A33E0) --fdj2RfSjLxBAspz7 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABCAAGBQJVAJV3AAoJEED21dyjijPgwzkP/0uhRRNEAf9og8OBEvnDfDrc w5QJ+9unrxkYuYDHg0YrH0ZfPGebweBI1IY+SyrehFiRCv5aMLYh0/IypjDG7PRY 71IqKFxryBTgdNTlytYUH44vGwtyd/fTkvywHBs/UpoRDQOZLgDGIL3MgxWHctNO 5d52qEKPEPr98aHEm8tgFqekSc3mgstRMVf1Hv9U3MJUa8zBHj9fS3DR/DGb5Swo GC7m/nCLeKDZmiVMuhaPDgWhPFRmntkctGTKnqISXMdSL39XABS2rPeMTwsflJnk k8vgsLP7VhnbTayTocVkYZJ9DjHZ4m+WqP0dZFB2yHPQOG0MAczRb7m/JCJxFeRa mB16LEKWbS70cNoXvk2eJrjQOXDi3RAOx0IJ9uopzRDMtej3PClWnOTkj9NGvV7O O4s99myRUW8YOZAdQQKMlWlRN2CnyH5ShnJiqU04yn5TYvPRIFP7+7Vr5bklUSOn ADQgXIQ6+pQxerGYAZ3srpOzCHlQeXDRgzG+WRR3JPRDrEo0/QtXfpNSFH2mXEB9 Sw9EegH9/wYjzaDZmDvIFoXmxbN9PW/C26oVhawMSF6z4KszA7BQdX7cPbYVobTm 61DQgSRgZ2VIRiyFZedgTmRUdAY6TRNnRuR6DlnpaJkpodOwXQS8QIRq5WAcq/1F PsASoK2XNHYkPDrzy/1a =dqHU -----END PGP SIGNATURE----- --fdj2RfSjLxBAspz7-- From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 19:47:42 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 12A3E246 for ; Wed, 11 Mar 2015 19:47:42 +0000 (UTC) Received: from lb1-smtp-cloud2.xs4all.net (lb1-smtp-cloud2.xs4all.net [194.109.24.21]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (Client CN "Bizanga Labs SMTP Client Certificate", Issuer "Bizanga Labs CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 9BCB218E for ; Wed, 11 Mar 2015 19:47:41 +0000 (UTC) Received: from slackbox.erewhon.home ([83.162.243.5]) by smtp-cloud2.xs4all.net with ESMTP id 2KmU1q00K07iGuj01KmVgf; Wed, 11 Mar 2015 20:46:29 +0100 Received: by slackbox.erewhon.home (Postfix, from userid 1001) id C41691243F; Wed, 11 Mar 2015 20:46:28 +0100 (CET) Date: Wed, 11 Mar 2015 20:46:28 +0100 From: Roland Smith To: opendaddy@hushmail.com Subject: Re: Limiting CPU on some processes on web server Message-ID: <20150311194628.GB8178@slackbox.erewhon.home> Mail-Followup-To: opendaddy@hushmail.com, freebsd-questions@freebsd.org References: <20150311122656.96F2020341@smtp.hushmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="0eh6TmSyL6TZE2Uz" Content-Disposition: inline In-Reply-To: <20150311122656.96F2020341@smtp.hushmail.com> X-GPG-Fingerprint: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 X-GPG-Key: http://www.xs4all.nl/~rsmith/pubkey.txt X-GPG-Notice: If this message is not signed, don't assume I sent it! User-Agent: Mutt/1.5.23 (2014-03-12) Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 19:47:42 -0000 --0eh6TmSyL6TZE2Uz Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Mar 11, 2015 at 12:26:56PM +0000, opendaddy@hushmail.com wrote: > Hi! > > I run this web app that depends on ImageMagick to process images and ffmp= eg > to process videos. These processes, unfortunately, consume 100% of my CPU, > rendering my web app unusable (gateway timeout). *How* does the web app actually start those programs? E.g. if the web app is written in Python, it should use subprocess.Popen() instead of subprocess.call or subprocess.check-output(), because the latter two would block the calling program. As far as I can tell, ImageMagick only uses one core. And whether ffmepg c= an use multiple cores depends on the encoder. X264 can use multiple cores, but Theora can=C2=B4t. So on a relatively modern (multi-core) CPU launching one or two CPU intensi= ve programs should leave enough cores for your web-app. > Tried `nice -n 19` but to no avail. Have you verified with `ps -l` (or `ps -xal`) that the ffmeg and convert processes are actually running at a lower priority? Try using /usr/bin/nice directly instead of using the shell's built-in nice= (assuming the web app starts the commands from a shell?). > What other options do I have? Run you web app stack with a higher priority. Roland --=20 R.F.Smith http://rsmith.home.xs4all.nl/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 5753 3324 1661 B0FE 8D93 FCED 40F6 D5DC A38A 33E0 (keyID: A38A33E0) --0eh6TmSyL6TZE2Uz Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABCAAGBQJVAJuUAAoJEED21dyjijPgTxAP/0f17q8RUXyDKix61OQu6uKF nwlI0G872mYasgrPdMwGP/YaXD7U3QFN7SXwCF5Ce1ruh4EjZWAdk3S6dLqt7rwv yRhuPXsWlS9QzB6hdtYHEcNw/g41g0o9m/hhvVuKGy9jQC4UgIz8Ymj6IaKTptGX Tv7W7nyE51fvHNibXy6DCd00+73VR4JoD26JRzd6qU90D7mAxdqllEIbdcgViFEX NtT0nPb2pzdcF8/E2KPnb+bpnwMSKbiJh+bFgfdSBlXxL0jw5+0sdR2c3NSWh7e7 VpKvSq9DeI1BgZMs0TKjSFFQPQ1Jjl03Bj1ZD8tMzJQiGWc5Yc/d3nT0sFJHiN/F YC9WjGkMpe4zdXL54Mv8yQGgj03q+ltTikMzzsGHy95quQsVAmnaYBw2361rXjpG uH8rp5BRnUy/qNjZv1Z0RO7yws+BLwe0PnMaITReMl1okGb5okyhYD5kB9Wnk/OY zcjCoLvM2l4jXep1lxs9TSfJ3StOl/I0VOTjORJMO3O7+T4iSjC/10cy6p/dSQhz fM7RtzHMJd8WnWRKvmOLyPAly40HjQ6CrHyaY8wPpV4NyDCmcLfyOAzz/76U84fh hdfjK263ocAwcyLKrUvBbnxgv9hY04Oxdoqm/KF8EtONtkFspURuNI9/oX1PFOuI yl/F+WQno6mZDhUQjAQ5 =eh6J -----END PGP SIGNATURE----- --0eh6TmSyL6TZE2Uz-- From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 22:12:09 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6B486DEC for ; Wed, 11 Mar 2015 22:12:09 +0000 (UTC) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id DCB4669B for ; Wed, 11 Mar 2015 22:12:07 +0000 (UTC) Received: from kw.news4all.se (localhost [127.0.0.1]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id t2BMC3jA086542 for ; Wed, 11 Mar 2015 23:12:03 +0100 (CET) (envelope-from bah@bananmonarki.se) Message-ID: <5500BDB3.2040605@bananmonarki.se> Date: Wed, 11 Mar 2015 23:12:03 +0100 From: Bernt Hansson User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: freeBSD Mailing List Subject: Re: sysinfo.h FAILED References: <55002A42.4070608@bananmonarki.se> In-Reply-To: <55002A42.4070608@bananmonarki.se> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 22:12:09 -0000 This is a to hard nut for me to crack. So i leave it to someone else. Thanks for all the input. On 2015-03-11 12:42, Bernt Hansson wrote: > Hello list! > > Trying to build a program (freecad) > > I have got cmake to find libs and other programs it needs. > > running cmake -DFREECAD_USE_EXTERNAL_PIVY=1 -DCMAKE_BUILD_TYPE=Release . > > results is this > -- Configuring done > -- Generating done > -- Build files have been written to: > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master > > > Then one should run make. > > make gives this error > > /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_master-master/src/3rdParty/salomesmesh/src/SMDS/SMDS_MemoryLimit.cpp:32:25: > error: sys/sysinfo.h: No such file or directory > > Guess it's linuxism. > > What is sysinfo.h called in freebsd? From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 22:43:10 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id AB1AC78E for ; Wed, 11 Mar 2015 22:43:10 +0000 (UTC) Received: from mail-ob0-x22f.google.com (mail-ob0-x22f.google.com [IPv6:2607:f8b0:4003:c01::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 66AC9A2E for ; Wed, 11 Mar 2015 22:43:10 +0000 (UTC) Received: by obcuz6 with SMTP id uz6so12331602obc.7 for ; Wed, 11 Mar 2015 15:43:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:subject:message-id:date:to:mime-version; bh=BGjWkw3UwsZbhkXnZvKnDLJrYbFM1KYgnWE57fMqrlI=; b=caI8f3Bdtwml0b2tWxqiCJcLmYNTCrUS5bD0LZbRaLzxRE6VRog0z3f9EB2CN45nXf bcRQSdwt9BgWmAcyKotfsY5rhdajOcjbwj3hzIZzyadYDvLlIeD6825ktgPOvNDTQoxk W5Yp8yqywLM21lwDwom7TR/KivAD+FLrJF6LjYDqISwrHwGDG6b5bsSqNgD6cKmtCidj LoQjP7XO+53IpVnhy8b4h4y8jXIjNHUgShjoFo/e4Sq1GuMJyT9mD6eekMS7a8xRaiJ7 IPP3m64nEuYIXeb0+2bdiYxIWPmv5t7ZJBw/Tt3RKW8j8f4UqqCJaNtCnrl28UZl9Sgj ve2g== X-Received: by 10.42.88.1 with SMTP id a1mr44408069icm.29.1426113789797; Wed, 11 Mar 2015 15:43:09 -0700 (PDT) Received: from [192.168.89.100] (192-171-49-199.cpe.pppoe.ca. [192.171.49.199]) by mx.google.com with ESMTPSA id y142sm3276609iod.25.2015.03.11.15.43.06 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 11 Mar 2015 15:43:07 -0700 (PDT) From: The Lost Admin Subject: FreeBSD 9.3 is not recognizing USB 2.0 peripherals (or maybe USB2 bus) Message-Id: Date: Wed, 11 Mar 2015 18:43:03 -0400 To: freebsd-questions@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) X-Mailer: Apple Mail (2.1878.6) Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 22:43:10 -0000 Hi all, I=92ve got a Zotac Zbox SD-ID12 (Intel Atop D525). According to the = vendor specs it=92s got 6 USB 2.0 ports. It=92s spend the last few years = sitting on a shelf running FreeBSD and getting periodic updates/upgrades = and little else. Currently at FreeBSD 9.3-RELEASE-p10. Recently I decided to make use of some old USB2 hard drives I had lying = around and turn the box into a basic NAS for my home network (nothing = fancy just NFS). I got the NFS working without a hitch. I attached the first of the USB 2.0 drives and it seamed really slow. = Looking at /var/messages it indicates it=92s running at USB 1 speeds: da0 at umass-sim0 bus 0 scbus4 target 0 lun 0 da0: Fixed Direct Access SCSI-4 device=20 da0: Serial Number 575851314136305639323030 da0: 1.000MB/s transfers da0: 953842MB (1953468416 512 byte sectors: 255H 63S/T 121597C) da0: quirks=3D0x2 Further digging into dmesg suggests to me that FreeBSD is somehow either = not finding or not using USB2 drivers. For the sake of keeping this message short, the full verbose dmesg can = be found here -> http://pastebin.com/sUxvCd0m ; it will expire in one = month (April 11, 2015). NOTES: I have tried a variety of USB2 devices (CD R/W, usb hard drive, thumb = drives). I have confirmed that all are detected and accessed as USB 2.0 = devices on Windows 7, Mac OSX. I have also confirmed that Linux = (Raspbian on a raspberry Pi) recognized and used the hard drive as a = USB2.0 device. I tried a few different cables just in case. Also, I have been using FreeBSD since the 1990s and used to be pretty = active at helping people on this list (a long time ago). The Lost Admin thelostadmin@gmail.com From owner-freebsd-questions@FreeBSD.ORG Wed Mar 11 23:12:41 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 91185F1A for ; Wed, 11 Mar 2015 23:12:41 +0000 (UTC) Received: from mail-qg0-f52.google.com (mail-qg0-f52.google.com [209.85.192.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4EE04D2E for ; Wed, 11 Mar 2015 23:12:40 +0000 (UTC) Received: by qgfh3 with SMTP id h3so14056792qgf.13 for ; Wed, 11 Mar 2015 16:12:34 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=ppxlY1Vf8HyMhOxECAQeLXj3XDUwHkROGZGN05YvGPQ=; b=Jstj9Zl+9JVsBcXu7W2ADM6Q1b8weFQyHf9jKu6HNiWwKtOjugf2rEEjKiq/UXYhqN 1ElfmjuJ7teMgeOntHJPZBp3rlSKjGCmko7tt3riEDWSo8BssaxIznU+6UWml1l26FF+ 1mj0aChk/TeRNIpYw5d+Y3dMgaTeYafwCLJKLKJfjc4dHHgHxoxGpN+HEABB9wVncynR HWgc4MgOIn6xD+QR2wBESpIQquylCEghfPB6Kyld1l5PWJWWUtJGbwXmwCql0V9/CIXc McKq+OGu5c8xId2xbLD1D0R757r0P6X0D5QtDok5K6GnhxSdQd2qxIa0L5jlQl3GOEKQ 0ZzQ== X-Gm-Message-State: ALoCoQlrzI972wJdo/dot7+/wjwezCgjEGObr5xI1/GT7cxtjw9EaMXt4V5RF+A7EOZzIHI3jQnU MIME-Version: 1.0 X-Received: by 10.55.23.84 with SMTP id i81mr16130469qkh.51.1426115553933; Wed, 11 Mar 2015 16:12:33 -0700 (PDT) Received: by 10.140.94.212 with HTTP; Wed, 11 Mar 2015 16:12:33 -0700 (PDT) In-Reply-To: <5500BDB3.2040605@bananmonarki.se> References: <55002A42.4070608@bananmonarki.se> <5500BDB3.2040605@bananmonarki.se> Date: Wed, 11 Mar 2015 16:12:33 -0700 Message-ID: Subject: Re: sysinfo.h FAILED From: Michael Sierchio To: Bernt Hansson Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: freeBSD Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Mar 2015 23:12:41 -0000 most of the things you find in the sysctl struct on Linux are sysctl MIB entries on FreeBSD. Example programs that display such info are /usr/bin/w and /sbin/sysctl. Look at the sources. - M On Wed, Mar 11, 2015 at 3:12 PM, Bernt Hansson wrote: > This is a to hard nut for me to crack. So i leave it to someone else. > > Thanks for all the input. > > On 2015-03-11 12:42, Bernt Hansson wrote: > >> Hello list! >> >> Trying to build a program (freecad) >> >> I have got cmake to find libs and other programs it needs. >> >> running cmake -DFREECAD_USE_EXTERNAL_PIVY=1 -DCMAKE_BUILD_TYPE=Release . >> >> results is this >> -- Configuring done >> -- Generating done >> -- Build files have been written to: >> /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_ >> master-master >> >> >> Then one should run make. >> >> make gives this error >> >> /usr/home/bernt/vebbnerladdningar/FreeCAD_sf_master-master/FreeCAD_sf_ >> master-master/src/3rdParty/salomesmesh/src/SMDS/SMDS_ >> MemoryLimit.cpp:32:25: >> error: sys/sysinfo.h: No such file or directory >> >> Guess it's linuxism. >> >> What is sysinfo.h called in freebsd? >> > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org" > From owner-freebsd-questions@FreeBSD.ORG Thu Mar 12 01:25:32 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BB45E6F9 for ; Thu, 12 Mar 2015 01:25:32 +0000 (UTC) Received: from smtp3.hushmail.com (smtp3.hushmail.com [65.39.178.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 9C97FCA6 for ; Thu, 12 Mar 2015 01:25:32 +0000 (UTC) Received: from smtp3.hushmail.com (localhost [127.0.0.1]) by smtp3.hushmail.com (Postfix) with SMTP id 6C6DFE019D for ; Thu, 12 Mar 2015 01:25:31 +0000 (UTC) Received: from smtp.hushmail.com (w2.hushmail.com [65.39.178.46]) by smtp3.hushmail.com (Postfix) with ESMTP; Thu, 12 Mar 2015 01:25:30 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id DA0CFE0404; Thu, 12 Mar 2015 01:25:30 +0000 (UTC) MIME-Version: 1.0 Date: Thu, 12 Mar 2015 01:25:30 +0000 To: "Polytropon" Subject: Re: Limiting CPU on some processes on web server From: opendaddy@hushmail.com In-Reply-To: <20150311151157.5baea8b7.freebsd@edvax.de> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> <20150311144958.3ef9519d.freebsd@edvax.de> <20150311140420.1646CC044F@smtp.hushmail.com> <20150311151157.5baea8b7.freebsd@edvax.de> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150312012530.DA0CFE0404@smtp.hushmail.com> Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Mar 2015 01:25:32 -0000 Hi, On 11. mars 2015 at 2:03 PM, "Polytropon" wrote: > >https://github.com/opsengine/cpulimit > >If you manually add "#include " to src/cpulimit.c >and remove "#ifdef __APPLE__" ... "#endif" from >tests/process_iterator_test.c >around the "#include " line, you can run "gmake" >(in src/ and /test, or at the top level), and it will successfully >build. > >Result: > >$ ./cpulimit >Error: You must specify a cpu limit percentage Are you able to successfully limit any processes with it? Over here it seems to force 0% no matter what. Spoke to the sysutils/cpulimit guy. Seems he's no longer the maintainer and can't be of any help. Thanks! O.D. From owner-freebsd-questions@FreeBSD.ORG Thu Mar 12 01:32:09 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id DD0048E1 for ; Thu, 12 Mar 2015 01:32:09 +0000 (UTC) Received: from smtp2.hushmail.com (smtp2.hushmail.com [65.39.178.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id C0987D86 for ; Thu, 12 Mar 2015 01:32:09 +0000 (UTC) Received: from smtp2.hushmail.com (localhost [127.0.0.1]) by smtp2.hushmail.com (Postfix) with SMTP id 7AD24A0182 for ; Thu, 12 Mar 2015 01:32:08 +0000 (UTC) Received: from smtp.hushmail.com (w2.hushmail.com [65.39.178.46]) by smtp2.hushmail.com (Postfix) with ESMTP; Thu, 12 Mar 2015 01:32:08 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id 66869E0403; Thu, 12 Mar 2015 01:32:08 +0000 (UTC) MIME-Version: 1.0 Date: Thu, 12 Mar 2015 01:32:08 +0000 To: "Roland Smith" Subject: Re: Limiting CPU on some processes on web server From: opendaddy@hushmail.com In-Reply-To: <20150311194628.GB8178@slackbox.erewhon.home> References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311194628.GB8178@slackbox.erewhon.home> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150312013208.66869E0403@smtp.hushmail.com> Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Mar 2015 01:32:09 -0000 Hi, On 11. mars 2015 at 7:37 PM, "Roland Smith" wrote: > >*How* does the web app actually start those programs? Unfortunately I'm getting the same 100% if I run ImageMagick / ffmpeg separately. >Have you verified with `ps -l` (or `ps -xal`) that the ffmeg and >convert processes are actually running at a lower priority? No, but isn't this whole nice thing a dead end? Often times when ImageMagick / ffmpeg run there are no competing processes (ie. no visitors). But then if a visitor appears while ImageMagick / ffmpeg is running, it is already too late. >Run you web app stack with a higher priority. I'll look into it. A lot of great advice here, thanks a lot! O.D. > >Roland >-- >R.F.Smith >http://rsmith.home.xs4all.nl/ >[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much >appreciated] >pgp: 5753 3324 1661 B0FE 8D93 FCED 40F6 D5DC A38A 33E0 (keyID: >A38A33E0) From owner-freebsd-questions@FreeBSD.ORG Thu Mar 12 01:55:32 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 2E555B29 for ; Thu, 12 Mar 2015 01:55:32 +0000 (UTC) Received: from mail-pa0-x22c.google.com (mail-pa0-x22c.google.com [IPv6:2607:f8b0:400e:c03::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 07395F64 for ; Thu, 12 Mar 2015 01:55:31 +0000 (UTC) Received: by pabrd3 with SMTP id rd3so16191177pab.6 for ; Wed, 11 Mar 2015 18:55:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=Bu6puB5NHjDhcX03+i8SuKufzFb6LGXaPYrV91o6438=; b=NQ+FxzLYfPQpx1Gn5kSxSO5q/2QztaSGMjNOXFLBnok+7czLr9oill7wxVOfW0caot 9uafoJFeReDQa6oPVzDqzmYaPSHJKoEExJ/fVAPUqnyfSja9fUgnd/5eRLQuH/ekS/fc UQGDGCNquMT3g5R9BmkRJzBMqFVioijg7jMOP8M0Ek+TWwLv0OLgATIMNeQ+3o+xdU7z vBJ242DU35Bc0keOLoFogrv4MEGnYG9djUowrCCNus7US1a9vbyNeXmQW/+aWIqK8Yyq JHs1GBVmJWkGi1pQqPXaAoNSQXXAl3Z9q+aD0ZSIfDjGpxhdv6UUMisvHyCBPJogEaIh RT4Q== MIME-Version: 1.0 X-Received: by 10.67.1.164 with SMTP id bh4mr82737968pad.129.1426125331437; Wed, 11 Mar 2015 18:55:31 -0700 (PDT) Received: by 10.70.79.166 with HTTP; Wed, 11 Mar 2015 18:55:31 -0700 (PDT) In-Reply-To: <20150311122656.96F2020341@smtp.hushmail.com> References: <20150311122656.96F2020341@smtp.hushmail.com> Date: Wed, 11 Mar 2015 20:55:31 -0500 Message-ID: Subject: Re: Limiting CPU on some processes on web server From: Adam Vande More To: opendaddy@hushmail.com Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Mar 2015 01:55:32 -0000 On Wed, Mar 11, 2015 at 7:26 AM, wrote: > Hi! > > I run this web app that depends on ImageMagick to process images and > ffmpeg to process videos. These processes, unfortunately, consume 100% of > my CPU, rendering my web app unusable (gateway timeout). > > Tried `nice -n 19` but to no avail. > > What other options do I have? > Make your web app less nice. -- Adam From owner-freebsd-questions@FreeBSD.ORG Thu Mar 12 08:52:04 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C16818D3 for ; Thu, 12 Mar 2015 08:52:04 +0000 (UTC) Received: from smtp5.hushmail.com (smtp5.hushmail.com [65.39.178.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.hushmail.com", Issuer "smtp.hushmail.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id A42C65EC for ; Thu, 12 Mar 2015 08:52:04 +0000 (UTC) Received: from smtp5.hushmail.com (localhost [127.0.0.1]) by smtp5.hushmail.com (Postfix) with SMTP id 6B6746026B for ; Thu, 12 Mar 2015 08:52:03 +0000 (UTC) Received: from smtp.hushmail.com (w7.hushmail.com [65.39.178.32]) by smtp5.hushmail.com (Postfix) with ESMTP; Thu, 12 Mar 2015 08:52:02 +0000 (UTC) Received: by smtp.hushmail.com (Postfix, from userid 99) id B8A954047E; Thu, 12 Mar 2015 08:52:02 +0000 (UTC) MIME-Version: 1.0 Date: Thu, 12 Mar 2015 08:52:02 +0000 To: "Polytropon" Subject: Re: Limiting CPU on some processes on web server From: opendaddy@hushmail.com References: <20150311122656.96F2020341@smtp.hushmail.com> <20150311141347.1013d42d.freebsd@edvax.de> <20150311134232.838ABC0451@smtp.hushmail.com> <20150311144958.3ef9519d.freebsd@edvax.de> <20150311140420.1646CC044F@smtp.hushmail.com> <20150311151157.5baea8b7.freebsd@edvax.de> Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="UTF-8" Message-Id: <20150312085202.B8A954047E@smtp.hushmail.com> Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Mar 2015 08:52:04 -0000 On 12. mars 2015 at 1:16 AM, opendaddy@hushmail.com wrote: > >Are you able to successfully limit any processes with it? Over >here it seems to force 0% no matter what. Seems to work fine now. No idea why it showed up as 0% yesterday. Thanks again for your help. O.D. From owner-freebsd-questions@FreeBSD.ORG Thu Mar 12 07:04:49 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id A5350DE4; Thu, 12 Mar 2015 07:04:49 +0000 (UTC) Received: from mail-ie0-x235.google.com (mail-ie0-x235.google.com [IPv6:2607:f8b0:4001:c03::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 72C74829; Thu, 12 Mar 2015 07:04:49 +0000 (UTC) Received: by iecsl2 with SMTP id sl2so22270522iec.1; Thu, 12 Mar 2015 00:04:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:cc:content-type; bh=msvomxlhH3RLBUa5xwNCusngPnYXyrlYooSn5Ee3zkc=; b=tdTtNnpI08c2N/IGKsUY80SDn6yu29K+JOVoKA1bfJ9Ysw2XZsqlD2Q1ySBsaed3uj 9Y3x3XdoS6/jhrJOxyMnTA81vkuptb2w3G+3XYK6qUIYTukVdz2V0AExYPkJxIn8r8qN wd24wJn0kx7iiOwqd0HdJVKFvxZI6Vtprd0plLeMRVwtdYgJ8ZUYFTvxEYhrNsCdWfp9 M+STiLp8xSr5DGnksQH5Xtphra5SbXcXBhWESTjFPThA2o5RwTPO0RCX37NKrg34wq1v 8U5ckA+DGvVbstOMikArKe07nz2PLJvG50xe4uL3TtOWrelt1Qt9GODtSVByoMfxHVIG HfUw== MIME-Version: 1.0 X-Received: by 10.42.93.83 with SMTP id w19mr46367855icm.37.1426143888718; Thu, 12 Mar 2015 00:04:48 -0700 (PDT) Received: by 10.36.104.78 with HTTP; Thu, 12 Mar 2015 00:04:48 -0700 (PDT) Date: Thu, 12 Mar 2015 03:04:48 -0400 Message-ID: Subject: FreeBSD forums, etc [was: Protest Blocking Tor via CloudFlare] From: grarpamp To: tor-talk@lists.torproject.org Content-Type: text/plain; charset=UTF-8 X-Mailman-Approved-At: Thu, 12 Mar 2015 11:04:56 +0000 Cc: freebsd-git@freebsd.org, freebsd-security@freebsd.org, freebsd-hubs@freebsd.org, freebsd-questions@freebsd.org, freebsd-core@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Mar 2015 07:04:49 -0000 Various wrote: > > Which site blocks tor exit entirely? On Wed, Mar 11, 2015 at 11:58 PM, Libertas wrote: > The FreeBSD forums and (IIRC) download servers do the same thing, just > dropping packets from Tor exits. Very annoying. I haven't got around to > emailing them about it yet. Found an exit that works forums and mapped it for weeks now, but that's a real pain for normal Tor users to contemplate doing. Yes, it's quite annoying and one would hope mailing them to achieve at least readonly access would be opened up. Why block disemmination and viewing of simple free knowledge? This may be inadvertant lack of in depth and open thought on things. This should hopefully get further thought going. They also need to make their builds deterministic and crypto traceable back to a crypto secure source repo which SVN is not afaict. But that's a whole other topic, and these days an important one to raise and ensure is addressed. After all, spies, moles, exploit[er]s, and bitrot are everywhere. Relavent link hierarchies... https://blog.torproject.org/blog/deterministic-builds-part-one-cyberwar-and-global-compromise https://blog.torproject.org/blog/deterministic-builds-part-two-technical-details http://en.wikipedia.org/wiki/Comparison_of_revision_control_software http://git-scm.com/about/distributed http://git-scm.com/about/info-assurance http://www.monotone.ca/ From owner-freebsd-questions@FreeBSD.ORG Thu Mar 12 15:55:41 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 980BCEE4 for ; Thu, 12 Mar 2015 15:55:41 +0000 (UTC) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 17888DBC for ; Thu, 12 Mar 2015 15:55:40 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id t2CFtUZK087531 for ; Fri, 13 Mar 2015 02:55:30 +1100 (EST) (envelope-from smithi@nimnet.asn.au) Date: Fri, 13 Mar 2015 02:55:30 +1100 (EST) From: Ian Smith To: freebsd-questions@freebsd.org Subject: Any pascal-source programs in the ports tree? Message-ID: <20150313005804.L42290@sola.nimnet.asn.au> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Mar 2015 15:55:41 -0000 Hi all, Does anyone know of any ports written IN freepascal (fpc)? I've spent some time trolling through ports (other than fpc itself) that mention 'pascal' anywhere, but so far have found nothing with pascal sources. I hope to publish two going on three programs (one of them pretty big) in the coming months, written largely in ol' Turbo Pascal dialect and compiled with fpc 2.6, via the fp IDE. These are console-mode programs, essentially a series of astronomical calculations leading to generation of RIFF wave audio files. That all works without drama. Build dependency would require installing (relevant bits of) fpc and coming up with a sane Makefile etc for which I'd need lots of guidance, without immersing myself too deeply in the deep and wide ports world, so I was hoping to find another port for a monkey-see monkey-do template. If making a port isn't pretty straightforward I'm not too fussed; I have little extra time so will probably just publish sources and i386 & amd64 binaries (maybe for linux too) and text docs for the few people who may be interested, but a port might be a good way to give something back. Anyone suggesting p2c will be politely ignored :) cheers, Ian (please cc me; I'm subscribed to questions-digest) From owner-freebsd-questions@FreeBSD.ORG Thu Mar 12 16:17:05 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 3B68D9D0 for ; Thu, 12 Mar 2015 16:17:05 +0000 (UTC) Received: from mail-yh0-x234.google.com (mail-yh0-x234.google.com [IPv6:2607:f8b0:4002:c01::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E8B7EBF for ; Thu, 12 Mar 2015 16:17:04 +0000 (UTC) Received: by yhot59 with SMTP id t59so8824470yho.5 for ; Thu, 12 Mar 2015 09:17:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=rIm3Xjw7Uy+7YA/+jPsSxo57kBbq3NrB/r0gpvSp4Dc=; b=yP85rJjzh9JwdH0Sg0e9EZo5ntfwU7JDaUZASY4SpD3i1ZA4ld/38KHqMbz4rNqhSI t//mr3SdYY/V+Zk/qzdvuV9SKHXE99R7S99u/UlWYgM1ZroCoxBzddxqtZDd+gpguOeD 56cWsSGXNowBvpkbSXCm1ocA/BTI/SNGr5NLLsPOXwYEHyC7gBb4VT65V/ie8fZFAInn /7iEQayQJuL16e8EcOCa/g7tQBfAqMfs9Xd4j12Hy1vGWgUX1y0Ib9veGnnP7deZ90Gi HjlkD9GgtfP2fTjGpVv89+N+/PycvrZcq54894tyfdxA+VP7V6ybjfU5uZ5w59bS+40t HCAA== MIME-Version: 1.0 X-Received: by 10.236.228.162 with SMTP id f32mr42143867yhq.53.1426177024162; Thu, 12 Mar 2015 09:17:04 -0700 (PDT) Received: by 10.170.60.69 with HTTP; Thu, 12 Mar 2015 09:17:04 -0700 (PDT) In-Reply-To: <20150313005804.L42290@sola.nimnet.asn.au> References: <20150313005804.L42290@sola.nimnet.asn.au> Date: Thu, 12 Mar 2015 09:17:04 -0700 Message-ID: Subject: Re: Any pascal-source programs in the ports tree? From: Mehmet Erol Sanliturk To: Ian Smith Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: FreeBSD Questions Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Mar 2015 16:17:05 -0000 On Thu, Mar 12, 2015 at 8:55 AM, Ian Smith wrote: > Hi all, > > Does anyone know of any ports written IN freepascal (fpc)? I've spent > some time trolling through ports (other than fpc itself) that mention > 'pascal' anywhere, but so far have found nothing with pascal sources. > > I hope to publish two going on three programs (one of them pretty big) > in the coming months, written largely in ol' Turbo Pascal dialect and > compiled with fpc 2.6, via the fp IDE. These are console-mode programs, > essentially a series of astronomical calculations leading to generation > of RIFF wave audio files. That all works without drama. > > Build dependency would require installing (relevant bits of) fpc and > coming up with a sane Makefile etc for which I'd need lots of guidance, > without immersing myself too deeply in the deep and wide ports world, so > I was hoping to find another port for a monkey-see monkey-do template. > > If making a port isn't pretty straightforward I'm not too fussed; I have > little extra time so will probably just publish sources and i386 & amd64 > binaries (maybe for linux too) and text docs for the few people who may > be interested, but a port might be a good way to give something back. > > Anyone suggesting p2c will be politely ignored :) > > cheers, Ian (please cc me; I'm subscribed to questions-digest) > _______________________________________________ > > The ports tree is full of fpc-* ( fpc parts and units are separately prepared as packages ) and Lazarus and its some parts . Therefore , you may imitate these ports by using them as samples . In http://www.freshports.org/ search fpc lazarus and see found parts for how they can be build from the sources . Thank you very much . Mehmet Erol Sanliturk From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 02:16:37 2015 Return-Path: Delivered-To: freebsd-questions@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1F68A53E for ; Fri, 13 Mar 2015 02:16:37 +0000 (UTC) Received: from cefaq.ru (cefaq.ru [37.143.12.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D1C553D7 for ; Fri, 13 Mar 2015 02:16:36 +0000 (UTC) Received: from [192.168.3.2] (ppp91-76-190-132.pppoe.mtu-net.ru [91.76.190.132]) by cefaq.ru (ESMTP) with ESMTPSA id E4D4E1280110 for ; Fri, 13 Mar 2015 05:16:33 +0300 (MSK) Message-ID: <55024880.7080709@leha.info> Date: Fri, 13 Mar 2015 05:16:32 +0300 From: =?UTF-8?B?0JDQu9C10LrRgdC10Lkg0J/RgNCw0YY=?= Reply-To: mail@leha.info User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: freebsd-questions@FreeBSD.org Subject: there is a mistake in ipfw docs on your site Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 02:16:37 -0000 hello talking about this page: https://www.freebsd.org/doc/en/books/handbook/firewalls-ipfw.html there's RFC (http://www.rfc-editor.org/rfc/rfc5735.txt), which says: 4. Summary Table Address Block Present Use Reference ------------------------------------------------------------------ 0.0.0.0/8 "This" Network RFC 1122, Section 3.2.1.3 10.0.0.0/8 Private-Use Networks RFC 1918 127.0.0.0/8 Loopback RFC 1122, Section 3.2.1.3 169.254.0.0/16 Link Local RFC 3927 172.16.0.0/12 Private-Use Networks RFC 1918 192.0.0.0/24 IETF Protocol Assignments RFC 5736 192.0.2.0/24 TEST-NET-1 RFC 5737 192.88.99.0/24 6to4 Relay Anycast RFC 3068 192.168.0.0/16 Private-Use Networks RFC 1918 198.18.0.0/15 Network Interconnect Device Benchmark Testing RFC 2544 198.51.100.0/24 TEST-NET-2 RFC 5737 203.0.113.0/24 TEST-NET-3 RFC 5737 224.0.0.0/4 Multicast RFC 3171 240.0.0.0/4 Reserved for Future Use RFC 1112, Section 4 255.255.255.255/32 Limited Broadcast RFC 919, Section 7 RFC 922, Section 7 ------------- BUT your page says: " $cmd 00307 deny all from 204.152.64.0/23 to any in via $pif #Sun cluster interconnect $cmd 00308 deny all from 224.0.0.0/3 to any in via $pif #Class D & E multicast " but i see there's no 204.152.64.0 in RFC and there's block /4 not /3 please tell me what i don't understand? From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 03:04:54 2015 Return-Path: Delivered-To: freebsd-questions@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B42A317C for ; Fri, 13 Mar 2015 03:04:54 +0000 (UTC) Received: from mail.gsicomp.on.ca (salamander.gsicomp.on.ca [162.243.98.91]) by mx1.freebsd.org (Postfix) with ESMTP id 90179BC9 for ; Fri, 13 Mar 2015 03:04:54 +0000 (UTC) Received: from HEXEN (ip-104-193-58-36.user.start.ca [104.193.58.36]) by mail.gsicomp.on.ca (Postfix) with ESMTPA id B2456408B4; Thu, 12 Mar 2015 22:57:39 -0400 (EDT) From: "Matt Emmerton" To: , References: <55024880.7080709@leha.info> In-Reply-To: <55024880.7080709@leha.info> Subject: RE: there is a mistake in ipfw docs on your site Date: Thu, 12 Mar 2015 22:59:33 -0400 Message-ID: <002e01d05d39$bbcbf790$3363e6b0$@on.ca> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Content-Language: en-us Thread-Index: AdBdM8E1T0kAnbdNRXKjajPeu30BHgABdxzA X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 03:04:54 -0000 -----Original Message----- From: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of ??????? ???? Sent: Thursday, March 12, 2015 10:17 PM To: freebsd-questions@FreeBSD.org Subject: there is a mistake in ipfw docs on your site hello talking about this page: https://www.freebsd.org/doc/en/books/handbook/firewalls-ipfw.html there's RFC (http://www.rfc-editor.org/rfc/rfc5735.txt), which says: 4. Summary Table Address Block Present Use Reference ------------------------------------------------------------------ 0.0.0.0/8 "This" Network RFC 1122, Section 3.2.1.3 10.0.0.0/8 Private-Use Networks RFC 1918 127.0.0.0/8 Loopback RFC 1122, Section 3.2.1.3 169.254.0.0/16 Link Local RFC 3927 172.16.0.0/12 Private-Use Networks RFC 1918 192.0.0.0/24 IETF Protocol Assignments RFC 5736 192.0.2.0/24 TEST-NET-1 RFC 5737 192.88.99.0/24 6to4 Relay Anycast RFC 3068 192.168.0.0/16 Private-Use Networks RFC 1918 198.18.0.0/15 Network Interconnect Device Benchmark Testing RFC 2544 198.51.100.0/24 TEST-NET-2 RFC 5737 203.0.113.0/24 TEST-NET-3 RFC 5737 224.0.0.0/4 Multicast RFC 3171 240.0.0.0/4 Reserved for Future Use RFC 1112, Section 4 255.255.255.255/32 Limited Broadcast RFC 919, Section 7 RFC 922, Section 7 ------------- BUT your page says: " $cmd 00307 deny all from 204.152.64.0/23 to any in via $pif #Sun cluster interconnect $cmd 00308 deny all from 224.0.0.0/3 to any in via $pif #Class D & E multicast " but i see there's no 204.152.64.0 in RFC and there's block /4 not /3 please tell me what i don't understand? -----Reply ----------------------------------------------------------------- >> please tell me what i don't understand? CIDR addressing. 224.0.0.0/4 ==> 4 bits of network (1110) with 28 bits of mask 240.0.0.0/4 ==> 4 bits of network (1111) with 28 bits of mask These two adjacent netblocks can be represented by a single netblock for simplicity. 224.0.0.0/3 ==> 3 bits of network (111) with 29 bits of mask Matt _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 08:36:45 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 7C80C267 for ; Fri, 13 Mar 2015 08:36:45 +0000 (UTC) Received: from mail.cs.ait.ac.th (mail.cs.ait.ac.th [192.41.170.16]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 276B22C1 for ; Fri, 13 Mar 2015 08:36:44 +0000 (UTC) Received: from mail.cs.ait.ac.th (localhost [127.0.0.1]) by mail.cs.ait.ac.th (Postfix) with ESMTP id B47D5160B05 for ; Fri, 13 Mar 2015 15:27:00 +0700 (ICT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.ait.ac.th; h= content-type:content-type:mime-version:message-id:date:date :subject:subject:from:from:received:received:received; s= selector1; t=1426235220; x=1428049621; bh=0dnNJ8Dv1+ZIn5YjwDv/h6 gxiX7dWIilIxPCkA7YUvA=; b=UcBfSRlsq3zId2IvQNQKHn+uc523cKGWYE6zPn eyDVvWxqQEmqoxzB48WdHEVRQwbRJQSH3JWWgv/MdwD/L8Ha/YitJlEWdnriiiGQ DilGRQDEtm6SmnMqTLj0l7YIzGm3WPAuRSLwwsPjr3CV7FRdGws0PkQH+U/u4Xoy HD6Nk= X-Virus-Scanned: amavisd-new at cs.ait.ac.th Received: from mail.cs.ait.ac.th ([127.0.0.1]) by mail.cs.ait.ac.th (mail.cs.ait.ac.th [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id G3O7YVdGLRZ3 for ; Fri, 13 Mar 2015 15:27:00 +0700 (ICT) Received: from banyan.cs.ait.ac.th (banyan.cs.ait.ac.th [192.41.170.5]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.cs.ait.ac.th (Postfix) with ESMTPS id EE7D5160B01 for ; Fri, 13 Mar 2015 15:26:59 +0700 (ICT) Received: (from on@localhost) by banyan.cs.ait.ac.th (8.14.7/8.14.7/Submit) id t2D8RAWU007503; Fri, 13 Mar 2015 15:27:10 +0700 (ICT) (envelope-from on@banyan.cs.ait.ac.th) From: Olivier Nicole To: freebsd-questions@freebsd.org Subject: pkg delete --no-recursive Date: Fri, 13 Mar 2015 15:27:10 +0700 Message-ID: MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 08:36:45 -0000 Hi, How to tell pkg delete to remove only *this* package and not all the ones that depends on it. There is a --recursive option, but it is applied by default and I don't see how to disable it. My goal is to remove perl5.14 in order to install perl5.20. All other packages that depend on perl5.14 will be rebuild afterward, so the dependecy will be updated accordingly. But in no case I want to delete all packages depending on perl, I *do* need them. best regards, olivier -- From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 08:47:41 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 935BF525 for ; Fri, 13 Mar 2015 08:47:41 +0000 (UTC) Received: from vps.markoturk.info (vps.markoturk.info [95.154.208.14]) by mx1.freebsd.org (Postfix) with ESMTP id 5C2C83DE for ; Fri, 13 Mar 2015 08:47:40 +0000 (UTC) Received: by vps.markoturk.info (Postfix, from userid 1001) id B8A10273A4; Fri, 13 Mar 2015 09:42:13 +0100 (CET) Date: Fri, 13 Mar 2015 09:42:13 +0100 From: Marko Turk To: Olivier Nicole Subject: Re: pkg delete --no-recursive Message-ID: <20150313084213.GA39602@vps.markoturk.info> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="qDbXVdCdHGoSgWSk" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 08:47:41 -0000 --qDbXVdCdHGoSgWSk Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Mar 13, 2015 at 03:27:10PM +0700, Olivier Nicole wrote: > Hi, >=20 > How to tell pkg delete to remove only *this* package and not all the > ones that depends on it. >=20 > There is a --recursive option, but it is applied by default and I don't > see how to disable it. >=20 > My goal is to remove perl5.14 in order to install perl5.20. All other > packages that depend on perl5.14 will be rebuild afterward, so the > dependecy will be updated accordingly. >=20 > But in no case I want to delete all packages depending on perl, I *do* > need them. >=20 Hi, -f, --force Forces packages to be removed despite leaving unresolved dependencies. BR, Marko --qDbXVdCdHGoSgWSk Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJVAqLlAAoJEDcRe7P/w1sjlDcQAJSGKh0iVeo3w6TtWAIqyjtD D5T+nTkXIsxOEPXfRSHy6eQhm65WQDcW8q6F3CMLxXZ2OYuTu0JnCMBEgZKXUrdg IuMUYKKMvOHBn0kI9wOTKwJWOR+3teXgWO4AIHeBVNd424GbH2UzkDwPrjjNDr4b ZPNfwyJHJPLRF0/SicsG0wImkBo2W1MOesMECmeOFfyeVRxrdmvkl9mLOGi+7+2K GNzPisGUI8mMtvSTRcuTnzka1nRepV2+OV8plhcYzGOUouiagKHo8T3xVaZiipLB 8EzilrSF/zhNyFzAn+yNv3ZdGi5gRj7QDYlWq9sJsa1X8B6tLezFG2/85rlg4Jrj 7uU7S4AsPqXg7psNo6i8fExAJJ+QwoBY0mgtw5jL6kqtX8SlgvBZW92MDNFcrS12 F+CXpBD0f+RnWrR8gJL18aw6yC5mWSzhaCbPmweUHc6vjFkvxgEBh7wpeve3OhlI 1/ZQyQKsN0Jqq/i8RBBCZlPOoO6ZEXUyA0MS7v/MQSHGU/CT5+Ks3WWT5BMP3r1Y iDE+MddcpuqLIplW5U86MiDx+QALaWr2TlxpTb1O4uz5RpZW3x5iRBPMapOonjoR 5gy+4rWkEfhQdz0oKIiJCWeX/DGv4QfGnncVlXZHB5CuWUGn9IVh/FplZWl14IKT g44hvhTtijzYQ0KQnymJ =MPZ5 -----END PGP SIGNATURE----- --qDbXVdCdHGoSgWSk-- From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 08:50:00 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 066555E2 for ; Fri, 13 Mar 2015 08:50:00 +0000 (UTC) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "ca.infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 893725E2 for ; Fri, 13 Mar 2015 08:49:59 +0000 (UTC) Received: from ox-dell39.ox.adestra.com (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.15.1/8.15.1) with ESMTPSA id t2D8nb8O058729 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Fri, 13 Mar 2015 08:49:53 GMT (envelope-from matthew@freebsd.org) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=freebsd.org DKIM-Filter: OpenDKIM Filter v2.9.2 smtp.infracaninophile.co.uk t2D8nb8O058729 Authentication-Results: smtp.infracaninophile.co.uk/t2D8nb8O058729; dkim=none reason="no signature"; dkim-adsp=none; dkim-atps=neutral X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be ox-dell39.ox.adestra.com Message-ID: <5502A4A0.8090704@freebsd.org> Date: Fri, 13 Mar 2015 08:49:36 +0000 From: Matthew Seaman User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: pkg delete --no-recursive References: In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="hG2DnKqE1sSqri79sn3wmIKBguB9wbfBN" X-Virus-Scanned: clamav-milter 0.98.6 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 08:50:00 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --hG2DnKqE1sSqri79sn3wmIKBguB9wbfBN Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 03/13/15 08:27, Olivier Nicole wrote: > How to tell pkg delete to remove only *this* package and not all the > ones that depends on it. pkg delete -f pkgname > There is a --recursive option, but it is applied by default and I don't= > see how to disable it. >=20 > My goal is to remove perl5.14 in order to install perl5.20. All other > packages that depend on perl5.14 will be rebuild afterward, so the > dependecy will be updated accordingly. >=20 > But in no case I want to delete all packages depending on perl, I *do* > need them. The best way to do a perl5.14 to perl5.20 upgrade is by simply upgrading from a package repo with all the perl stuff built against perl5.20. Works like a charm, and only reinstalls the necessary stuff. Trying to work out all this dependency stuff by hand tends to be error-prone, tedious and leave your system in a bit of a mess. Cheers, Matthew --hG2DnKqE1sSqri79sn3wmIKBguB9wbfBN Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJVAqSgXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTn2PsQAKZNjV5mUTdYDVAW+iMbbQOR tGvd2CdB/eVfxykuqEFSX8w14NqH1bz+TaJCCIx6S6dKq9FtL9YlAoKHSk9/Y3LI ne2Bgr+OYrYQuI2aL4XV1JjWsSuJJ8nlfpAxAylNNah+TBqoK4UiBWx8KAXWW8Cm pTDGi0IoarJlIjSPyVpDn+Avpg5XJDDGHBfuuye/YgFjD9hYOBVVg21rRBnrMa6H PtjO2oIlOuLq+ggmCSnxUQDAgtUlMopFVDryL+eYHJsVhTNsTRErb7raiT/Jj/Bg sRW+eLb58fjzpUbblsju71MQCGQZCchOGLR6eWTJJuq9jrPv5owth9CXr3qkGKQB RJL2gcqcPN32NL1XkPSG4yrAp78Fnl+dukt2mqZjodP3ECEJxpN5ZTBrn1WCm7U4 JPNeRsMCsaMUSgTc1lrmsb7n97U5euXVs97JCHkdNbop1cDBorUIyNcFpu9NDTj5 VLjBKl77lvgwLMapisfM2krLQ5SHaH5d0Hm9NovrKdC7LTyJbzWHGj0gT0vyqQ+8 /lTDar1yRqdsh3nbHcjR6Ix5f9vwWNkb2ID6IslwLDNDvaQyxU3QWtKZE8MAMk/2 Cl5rUQX9C+cCqCozMpbF1YtZ4ri/reLIsEbx5LPUupAMLIMsEBOfpKEgancOx0OT 6YlAVQtUl+gm8os5JlhM =KA6n -----END PGP SIGNATURE----- --hG2DnKqE1sSqri79sn3wmIKBguB9wbfBN-- From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 08:51:59 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 104B967F for ; Fri, 13 Mar 2015 08:51:59 +0000 (UTC) Received: from mail-ie0-x230.google.com (mail-ie0-x230.google.com [IPv6:2607:f8b0:4001:c03::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D494168B for ; Fri, 13 Mar 2015 08:51:58 +0000 (UTC) Received: by iecsl2 with SMTP id sl2so92478924iec.1 for ; Fri, 13 Mar 2015 01:51:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=JdrX1J+LAu047dRVYNlrbvy/eMA9btfwNWlW96GsHds=; b=UyUq7uTxa1ex21mfTPEFbkWDJBkfMmweCM3VtSezjxFk2QiZLXlHqTFLD38XQ49n/K nxL6qlKgxO8fYUvUFEoQaIR0fuXxyyO+MeX3+DXa09MTNgqilI/dkx1Ei1jB4/LCJPEL 2QNIZH4OTtbQTRim14EjPTBJh4BMjF58r9/H/t9ohIH7aPIaQopiZWOnhwC8dgh+spsi v22kZnQr1N9+bAMnX5F2swTqdV8+x8IUzL8IzS92JKhooVWuAbkw1s4C/1p1iLueMHqR jMkqqkoOKE3mPZRp8qhNnK6J0NWUE9SetdG0Je73GfeNA27RU7Z5/+U9eBiKoLVwQU6G X5fw== MIME-Version: 1.0 X-Received: by 10.50.129.9 with SMTP id ns9mr80683110igb.24.1426236718131; Fri, 13 Mar 2015 01:51:58 -0700 (PDT) Sender: olivier2553@gmail.com Received: by 10.107.9.224 with HTTP; Fri, 13 Mar 2015 01:51:58 -0700 (PDT) In-Reply-To: <20150313084213.GA39602@vps.markoturk.info> References: <20150313084213.GA39602@vps.markoturk.info> Date: Fri, 13 Mar 2015 15:51:58 +0700 X-Google-Sender-Auth: XN1I11yz0k-pRbCWLCa7TLEYUeg Message-ID: Subject: Re: pkg delete --no-recursive From: Olivier Nicole To: Marko Turk Content-Type: text/plain; charset=UTF-8 Cc: Olivier Nicole , "freebsd-questions@freebsd.org" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 08:51:59 -0000 Marco, On Fri, Mar 13, 2015 at 3:42 PM, Marko Turk wrote: > On Fri, Mar 13, 2015 at 03:27:10PM +0700, Olivier Nicole wrote: >> Hi, >> >> How to tell pkg delete to remove only *this* package and not all the >> ones that depends on it. >> >> There is a --recursive option, but it is applied by default and I don't >> see how to disable it. >> >> My goal is to remove perl5.14 in order to install perl5.20. All other >> packages that depend on perl5.14 will be rebuild afterward, so the >> dependecy will be updated accordingly. >> >> But in no case I want to delete all packages depending on perl, I *do* >> need them. >> > > Hi, > > -f, --force > Forces packages to be removed despite leaving unresolved > dependencies. thank you, that is really a *bad* choice of name for the option: it does what I need, but it certainly not mean what it does! Best regards, olivier From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 09:22:56 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5736BC7E for ; Fri, 13 Mar 2015 09:22:56 +0000 (UTC) Received: from mail-we0-x229.google.com (mail-we0-x229.google.com [IPv6:2a00:1450:400c:c03::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D9BDA9CA for ; Fri, 13 Mar 2015 09:22:55 +0000 (UTC) Received: by wesp10 with SMTP id p10so21883381wes.11 for ; Fri, 13 Mar 2015 02:22:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=9RhceJe+z3DWXC58u3RVGp8MunLIWu3F4dsdmok4Nv8=; b=HFFP0lnwR2JVkrlQbKz4LeB6VcxVSGqBLkuA7FxPYTJFjrEVFoFwLwV5+O1+tKYI2Q hrfWCNlua8IzYRoQzt90JyeyatTrvXbLdyAHGjX+PhCGhynRByze1nIKcEMrm9E3G8gO W5tGIGnGLS4WRZUjrSQamdwbl6MzdVN10OTMLJLbaWD2hDV/z542hare/vjtQU3SIjD1 Y5D+g6VCu3QLi0Rr1y9Av8tmvgq+CadaA1t1OTixa6tbnxh5+pR3dYgSeEBKD1m5uTdt Yq/O8xRi0f3COWZ3ih7UZ/6PSlWDDeR4J18qdVEUyXBsThOMy3jAJM5OXm3kUrXsUrPY zUSA== MIME-Version: 1.0 X-Received: by 10.195.12.97 with SMTP id ep1mr97050922wjd.134.1426238574302; Fri, 13 Mar 2015 02:22:54 -0700 (PDT) Received: by 10.194.124.35 with HTTP; Fri, 13 Mar 2015 02:22:54 -0700 (PDT) In-Reply-To: References: <20150313084213.GA39602@vps.markoturk.info> Date: Fri, 13 Mar 2015 17:22:54 +0800 Message-ID: Subject: Re: pkg delete --no-recursive From: Ben Woods To: Olivier Nicole Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: Olivier Nicole , Marko Turk , "freebsd-questions@freebsd.org" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 09:22:56 -0000 I have an existing bug report for correcting the pkg-delete man page: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194981 Whilst my patch doesn't change the wording of the -f, --force option, the wording of that option makes more sense in the context of the man page once it explains the default behavior is to delete packages that would be left with unresolved dependencies. Regards, Ben On Friday, March 13, 2015, Olivier Nicole wrote: > Marco, > > On Fri, Mar 13, 2015 at 3:42 PM, Marko Turk > wrote: > > On Fri, Mar 13, 2015 at 03:27:10PM +0700, Olivier Nicole wrote: > >> Hi, > >> > >> How to tell pkg delete to remove only *this* package and not all the > >> ones that depends on it. > >> > >> There is a --recursive option, but it is applied by default and I don't > >> see how to disable it. > >> > >> My goal is to remove perl5.14 in order to install perl5.20. All other > >> packages that depend on perl5.14 will be rebuild afterward, so the > >> dependecy will be updated accordingly. > >> > >> But in no case I want to delete all packages depending on perl, I *do* > >> need them. > >> > > > > Hi, > > > > -f, --force > > Forces packages to be removed despite leaving unresolved > > dependencies. > > thank you, that is really a *bad* choice of name for the option: it > does what I need, but it certainly not mean what it does! > > Best regards, > > olivier > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org " > -- -- From: Benjamin Woods woodsb02@gmail.com From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 12:41:20 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BC7778F6 for ; Fri, 13 Mar 2015 12:41:20 +0000 (UTC) Received: from mail-wi0-x233.google.com (mail-wi0-x233.google.com [IPv6:2a00:1450:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5134E1BF for ; Fri, 13 Mar 2015 12:41:20 +0000 (UTC) Received: by wiwh11 with SMTP id h11so5596659wiw.5 for ; Fri, 13 Mar 2015 05:41:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:content-type; bh=nSxqru5TJCG2IvPZt2XgU6hxEJ/dTEMoU5rFPVtsq7U=; b=GfNVYUKx1JXUUaitB2PbZR///GbaORQ2h8KmZ4jn0StX7aiZBnkustq/pCCqyL2nZl yUU9tYYhpQm9Jng9V8nqAJiuo7Q7uukUPB7eTwNll333hiAVo07EWcG4qn1pxNFZXDve UPcUwoAZGD6wnbGPAIr9mIaqs1edjFKKADxqeAn8HOw9J07WpcycvrKneScBzCWJgtSH q8FWSzgUKloSDIRF/o3p8oeKbV+YQAXg2UTjyKEZq0X4Zpo54msBZoMT3Uo3nVrN6hsw 0f2b4UxFL53PhNYWPAZ8NPXypuh6aB81IrPkcinSNgIm0tDUy+aUVnSDk+gYCy+yZWBB tdtQ== MIME-Version: 1.0 X-Received: by 10.194.57.170 with SMTP id j10mr23328255wjq.102.1426250477967; Fri, 13 Mar 2015 05:41:17 -0700 (PDT) Sender: fluca1978@gmail.com Received: by 10.194.73.233 with HTTP; Fri, 13 Mar 2015 05:41:17 -0700 (PDT) In-Reply-To: <5502A4A0.8090704@freebsd.org> References: <5502A4A0.8090704@freebsd.org> Date: Fri, 13 Mar 2015 13:41:17 +0100 X-Google-Sender-Auth: y9wrNzTVMVAuhN6iEI5DWTza4x0 Message-ID: Subject: Re: pkg delete --no-recursive From: Luca Ferrari To: freebsd-questions Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 12:41:20 -0000 On Fri, Mar 13, 2015 at 9:49 AM, Matthew Seaman wrote: > On 03/13/15 08:27, Olivier Nicole wrote: >> How to tell pkg delete to remove only *this* package and not all the >> ones that depends on it. > > pkg delete -f pkgname > Sounds to me like a call for trouble: removing a package and not those that depends on it will result in a lot of work that can be automated and will not provide any gain in time/cpu, at least in my opinion. > Trying to work out all this dependency stuff by hand tends to be > error-prone, tedious and leave your system in a bit of a mess. A few days ago I had a Linux update that did pretty much what the OP was trying to achieve: update Perl without rebuilding the dependencies, and so I had to upgrade them by myself. And in the meantime I had a few Perl-service downtime...grrrr... Luca From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 14:06:49 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C5790BCC for ; Fri, 13 Mar 2015 14:06:49 +0000 (UTC) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1A028DA2 for ; Fri, 13 Mar 2015 14:06:48 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id t2DE6iVj033167; Sat, 14 Mar 2015 01:06:44 +1100 (EST) (envelope-from smithi@nimnet.asn.au) Date: Sat, 14 Mar 2015 01:06:43 +1100 (EST) From: Ian Smith To: Mehmet Erol Sanliturk Subject: Re: Any pascal-source programs in the ports tree? In-Reply-To: Message-ID: <20150314003138.J29188@sola.nimnet.asn.au> References: <20150313005804.L42290@sola.nimnet.asn.au> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: FreeBSD Questions Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 14:06:49 -0000 On Thu, 12 Mar 2015 09:17:04 -0700, Mehmet Erol Sanliturk wrote: > On Thu, Mar 12, 2015 at 8:55 AM, Ian Smith wrote: > > > Hi all, > > > > Does anyone know of any ports written IN freepascal (fpc)? I've spent > > some time trolling through ports (other than fpc itself) that mention > > 'pascal' anywhere, but so far have found nothing with pascal sources. > > > > I hope to publish two going on three programs (one of them pretty big) > > in the coming months, written largely in ol' Turbo Pascal dialect and > > compiled with fpc 2.6, via the fp IDE. These are console-mode programs, > > essentially a series of astronomical calculations leading to generation > > of RIFF wave audio files. That all works without drama. > > > > Build dependency would require installing (relevant bits of) fpc and > > coming up with a sane Makefile etc for which I'd need lots of guidance, > > without immersing myself too deeply in the deep and wide ports world, so > > I was hoping to find another port for a monkey-see monkey-do template. > > > > If making a port isn't pretty straightforward I'm not too fussed; I have > > little extra time so will probably just publish sources and i386 & amd64 > > binaries (maybe for linux too) and text docs for the few people who may > > be interested, but a port might be a good way to give something back. > > > > Anyone suggesting p2c will be politely ignored :) > > > > cheers, Ian (please cc me; I'm subscribed to questions-digest) > > _______________________________________________ > The ports tree is full of fpc-* ( fpc parts and units are separately > prepared as packages ) and Lazarus and its some parts . > > Therefore , you may imitate these ports by using them as samples . > > In > > http://www.freshports.org/ > > search > > fpc > lazarus > > and see found parts for how they can be build from the sources . Thankyou Mehmet, but that's not what I'm looking for. All the fpc-* ports (and Lazarus) are part of the freepascal infrastructure itself, but what I'm after is something using fpc (or gpc, I suppose) to build programs outside of that infrastructure. I did browse freshports, but didn't find any fpc* standalone programs, just add-on units, libraries and such. fpc itself, from what I can make of the Makefile, needs to download and install a bootstrap binary of the compiler before it can then compile the compiler (ppc386 or ppcx64) and all of the (considerable) rest of it, which is way out of my scope. And sure, I'd use Lazarus if I were writing graphics programs to run in X, but I'm not - these are commandline-driven static-linked utilities. Might anyone know a way to search the ports tree for anything with a build dependency of fpc (or gpc, I guess) that is not called fpc-* ? cheers, Ian From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 16:07:03 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E88CC713 for ; Fri, 13 Mar 2015 16:07:03 +0000 (UTC) Received: from smtp5-g21.free.fr (smtp5-g21.free.fr [IPv6:2a01:e0c:1:1599::14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B07E8D11 for ; Fri, 13 Mar 2015 16:07:02 +0000 (UTC) Received: from che78-3-82-246-30-233.fbx.proxad.net (unknown [82.246.30.233]) by smtp5-g21.free.fr (Postfix) with ESMTP id 24781D48098 for ; Fri, 13 Mar 2015 17:05:59 +0100 (CET) Received: by che78-3-82-246-30-233.fbx.proxad.net (Postfix, from userid 2000) id B3B242841B; Fri, 13 Mar 2015 17:06:59 +0100 (CET) Date: Fri, 13 Mar 2015 17:06:59 +0100 From: Harald Weis To: freebsd-questions@freebsd.org Subject: getmail problem Message-ID: <20150313160659.GA4425@pollux.local.net> Mail-Followup-To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.23 (2014-03-12) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 16:07:04 -0000 What could be the cause for the following error message: SimpleIMAPSSLRetriever:hawei@imap.free.fr:993: getmail-hawei-rc: operation error (command: LOGIN => socket error: EOF) This occurs frequently for imap.free.fr, where I have two accounts (hawei and hawei2), but never ever for imap.googlemail.com or imap.orange.fr. Since ages all my mail accounts were pop3 accounts. The trouble started end of last year. The message was: "hawei on pop.free.fr is broken". hawei2 was fine as usual. As Free support was unable to help I converted all accounts from pop3 to imap to see what happens. As you see imap is better than "broken", but far from satisfactory. Sometimes I need to relaunch getmail three or four times. A single time is already too much for a working system. Any idea what's going wrong here or there? Thanks for any help. -- Harald Weis From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 16:34:21 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5B239CA6 for ; Fri, 13 Mar 2015 16:34:21 +0000 (UTC) Received: from DUB004-OMC4S34.hotmail.com (dub004-omc4s34.hotmail.com [157.55.2.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "MSIT Machine Auth CA 2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D6C2092 for ; Fri, 13 Mar 2015 16:34:20 +0000 (UTC) Received: from DUB131-W58 ([157.55.2.71]) by DUB004-OMC4S34.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751); Fri, 13 Mar 2015 09:33:11 -0700 X-TMN: [mJYfRMspEd6jzhl8Pa4oogy7DLOTD6Fx] X-Originating-Email: [cipher_nl@hotmail.com] Message-ID: From: Dirk E To: "freebsd-questions@FreeBSD.org" Subject: EFI boot not working Date: Fri, 13 Mar 2015 17:33:10 +0100 Importance: Normal Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 13 Mar 2015 16:33:11.0077 (UTC) FILETIME=[651A7D50:01D05DAB] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 16:34:21 -0000 Hi guys!=0A= =0A= I'm trying to get EFI boot working by following the document: https://wiki.= freebsd.org/UEFI=0A= =0A= It roughly says:=0A= =0A= gpart create -s gpt da0=0A= gpart add -t efi -s 800K da0=0A= gpart add -t freebsd-ufs da0=0A= dd if=3D/boot/boot1.efifat of=3D/dev/da0p1=0A= newfs /dev/da0p2=0A= =0A= I did exactly that=3B except locate the second partition on a 1024K-boundar= y which the above command does not do. I used the /boot/boot1.efifat from F= reeBSD 10.1 amd64.=0A= =0A= I used RaWrite to create the USB stick. When booting my USB stick i get an = error trying to read /boot/loader.conf=2C then it tries to load the kernel.= It finds the kernel but yields errors when inflating the kernel.=0A= =0A= Some of the error messages:=0A= ---=0A= inflate: invalid code lengths set=0A= invalid distance too far back=0A= invalid distance code=0A= inflate: invalid stored block lengths=0A= readin failed. elf64_loadimage: read failed=0A= inflate: invalid block type=0A= ---=0A= =0A= The strange thing is that trying to boot (OK loader prompt) will yield a di= fferent error. I would expect getting the same error from the same input. I= t appears the error is randomly chosen from the above list. Maybe this is a= clue?=0A= =0A= I am using a preloaded mfsroot. I saw some recent commits to HEAD about add= ressing some issues. But i'm not sure this is the problem=2C since the load= er cannot load /boot/loader.conf or even the kernel itself. So loading the = mfsroot of about 10MB would probably not be the issue?=0A= =0A= Thanks in advance to anyone who can provide assistance!=0A= = From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 18:02:35 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 4C3BE6B3 for ; Fri, 13 Mar 2015 18:02:35 +0000 (UTC) Received: from mail-qg0-x241.google.com (mail-qg0-x241.google.com [IPv6:2607:f8b0:400d:c04::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id F2256D5D for ; Fri, 13 Mar 2015 18:02:34 +0000 (UTC) Received: by qgea108 with SMTP id a108so5723255qge.1 for ; Fri, 13 Mar 2015 11:02:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:subject:message-id:in-reply-to:references:mime-version :content-type; bh=l562c9UrAOeY8eMfKEpPXJ9u8cji2WG0zH30h6kz1f0=; b=jNaW1f/igHJE4YxuUf8eAppfdUDtJDwhKft5cFHw7yOBw3YFzYQ/UO5Doa+csuNn4A KoCR9k063SSrmTvlFKQ7/gOo67vs1osyvoptuP5Dc4aaroeqDfhiR2S6OewTZu9gRYfj /qRcXTgWGQ6szpPBio4dDHU3DzCd9yEyQBJFrDvjH3AgonDn9gzZiqI0LBgcDzi/fQot OLmgV6Yn/1MEdLwsMe5V1YOmiJVPuJmsAX7i+1Utidab/XfDChivLlE4acfNCn813ZSG mFCdLx1lCYcxxCMIJYXy8zJ7t37uS/e3UdUTiqc/nswAUtleq8fk6JHBUtfbySSR5DIZ uxlw== X-Received: by 10.140.233.79 with SMTP id e76mr63551237qhc.100.1426269754096; Fri, 13 Mar 2015 11:02:34 -0700 (PDT) Received: from lapsdeb (207-172-207-96.c3-0.upd-ubr1.trpr-upd.pa.cable.rcn.com. [207.172.207.96]) by mx.google.com with ESMTPSA id e23sm1855629qhc.21.2015.03.13.11.02.33 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 13 Mar 2015 11:02:33 -0700 (PDT) Date: Fri, 13 Mar 2015 14:02:27 -0400 From: Stephen R Guglielmo To: freebsd-questions@freebsd.org Subject: Re: getmail problem Message-ID: <20150313140227.63f60ec1@lapsdeb> In-Reply-To: <20150313160659.GA4425@pollux.local.net> References: <20150313160659.GA4425@pollux.local.net> X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.25; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; boundary="Sig_/WaBqcXcm5e0QEFo1ch/h9Pf"; protocol="application/pgp-signature" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 18:02:35 -0000 --Sig_/WaBqcXcm5e0QEFo1ch/h9Pf Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Fri, 13 Mar 2015 17:06:59 +0100 Harald Weis wrote: > What could be the cause for the following error message: >=20 > SimpleIMAPSSLRetriever:hawei@imap.free.fr:993: > getmail-hawei-rc: operation error (command: LOGIN =3D> socket error: > EOF) It would be my first instinct to blame the remote server, but I don't want to jump to conclusions too quickly. You could run tcpdump (or wireshark if you want a GUI) to get more of an idea of what's causing it. I have used getmail with Gmail in the past through a cronjob and it's worked quite well. I assume you're using the latest version of getmail? I thought I could make an account on free.fr so I could test it from my end, but it doesn't seem to offer this (I initially thought it was a free webmail site). --Sig_/WaBqcXcm5e0QEFo1ch/h9Pf Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJVAyY4AAoJEA8nk/BQet6Lo3cP/219KG2ks8xk1I+to+35xeap Kafnq32ZivCJOK+xJK6++tdMmkQIlLp16HzQc/K3+9BjUcW+okcg8PgwMIK+3KJP QmWZuphTVqYitdt1+rrXZYKLK+edZnzv75U+xwVSmRrNtUX91fXeiBqy5ubZdOeO BjDn2AC+hOtl9Dw6LaE61DJfKymCI+IG7jCKA+v8ET2GMT9lKR9E9FiHzLliU9v6 pACmmaXfVlkTPN8cJI8mS/2435nckjoT4hWcM8QTT7h11MuCJnWzm6AGHbKJ9vWI 2QDiXGFC4cB4Sgq0aZaPxZpPCyymmJyzUjG0tHPOL6iyOgA4B4bWSb5Tyzl8nweC vGRmxY67N5T8RU5uoY/0N8CldKE+08j58HoxwF/ulTLyxSTjWcEwdKLBGz+ciqqa FR4mFvLHxAkD3CSXgrRxpU5bW/wkpBPtozfurDwcD9E6JtVoe7419S8M/q+xDXHg LQolL7TmQ7H8IfbH/qGCZZrzVhvjab/ARXFqPE1DcHL1jkOGI3JQxu028YCui5yV 0gq7VDShMza1rSRKYDzFCykFlwknmIGG86cvA+ZBLT2Vw5IGIq/crclQCQQYjqbJ TZYHWwORlkaXlPocmXuiYv1koloc+30wWkVZ35ixyJfwgZmsExpSgHi+SEwAmTis SY7ana4Al/l3ooYfAkg5 =BMNX -----END PGP SIGNATURE----- --Sig_/WaBqcXcm5e0QEFo1ch/h9Pf-- From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 18:46:31 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id ADC948B8 for ; Fri, 13 Mar 2015 18:46:31 +0000 (UTC) Received: from nm21.bullet.mail.bf1.yahoo.com (nm21.bullet.mail.bf1.yahoo.com [98.139.212.180]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 57C0032D for ; Fri, 13 Mar 2015 18:46:30 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.es; s=s2048; t=1426272389; bh=nXg6bq/3XDGX3W/LNR8Xg4pdzqFFHN0CqtSEaIWbdkg=; h=Date:From:To:Subject:In-Reply-To:References:From:Subject; b=lKitWsyFZ5x3ojYdW3q2yax1WA8YkGIAw6JTGKo28O2QxrU+03OcgteNtcodOVEfOhUc+rJ1Vd5Z61wIKu+/BxlS8Y3vDEmVMygtH1Ge1o9WD+BvFlHm7jV9LUSCtJCCPiuoLoz6kvcZJaWdIoQyq9TwpEnA5pQ81FrJxA6MTZten4E6heK6NFp372he/ZzXTUv+osGQ25Bwa8Q8qnKuvUllZzNlkbvxqhwgNsj5PhlQAEr1eiCMQOOLBZDddW8g3Mo6xfetKRSNmUw1W3tcBIjl3akNqbeuHf+jnAwd6NlBp5M4fZNk0M/5AX4bK2PC8pnSwk5B23Mw8d8EMiM6CA== Received: from [98.139.215.142] by nm21.bullet.mail.bf1.yahoo.com with NNFMP; 13 Mar 2015 18:46:29 -0000 Received: from [46.228.39.103] by tm13.bullet.mail.bf1.yahoo.com with NNFMP; 13 Mar 2015 18:46:29 -0000 Received: from [127.0.0.1] by smtp140.mail.ir2.yahoo.com with NNFMP; 13 Mar 2015 18:46:26 -0000 X-Yahoo-Newman-Id: 541737.71061.bm@smtp140.mail.ir2.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: 5Q7RA20VM1lkWHKOcKkiLK8YHo_rO8dlmXYxjaGsMP8LiiY icW1NZYlMmUufMO2u.XIG4cqqH4TCeiqLH7ot61RAVj0TAISNjajaVb6LKod p46BO.y8m2SLrRYhIkORAcUI2jef82rDE_i23oLioVs5aEtWIHRYSWfBW891 hK9y_HWfKLNOywOpkCKsYdZdrYv2P6G4KLlcYrb2gYEw.Y2rGNAypwJTwST8 TCox0JXlSZ54kpyMNqSyUhP4NVKFOFQwgPF73kovhlZHyzzghGDZmcdb5gHI BL9cCWt6WaF5cEaPJ8RaFiiXUcoUHSgKM1m7Yrrf.nrTwpWJmByMN2bPdXNx gZB1j.BiqFjHKnmjKSgODa3zd73g4hRs1SkobLxJzV8E2POcFz9t3cDDUWxr 5RERQNe2vclnEvzZXK19S5QMnJNOVKQrBjrrmG.4VymNwChVEtXWRuwZ.mny PvFUEzFhvYktpu8627NlQAgh93X4Se7kHjjdJjNPTtkxYhDBg9KiUp5P4OA- - X-Yahoo-SMTP: mX392iiswBAeJNdO_s.EW62LZDJR Date: Fri, 13 Mar 2015 19:46:37 +0100 From: Eduardo Morras To: freebsd-questions@freebsd.org Subject: Re: Limiting CPU on some processes on web server Message-Id: <20150313194637.a509370f64ad0697e3c09a70@yahoo.es> In-Reply-To: <20150311122656.96F2020341@smtp.hushmail.com> References: <20150311122656.96F2020341@smtp.hushmail.com> X-Mailer: Sylpheed 3.4.2 (GTK+ 2.24.25; amd64-portbld-freebsd9.3) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 18:46:31 -0000 On Wed, 11 Mar 2015 12:26:56 +0000 opendaddy@hushmail.com wrote: > Hi! > > I run this web app that depends on ImageMagick to process images and > ffmpeg to process videos. These processes, unfortunately, consume > 100% of my CPU, rendering my web app unusable (gateway timeout). > > Tried `nice -n 19` but to no avail. > > What other options do I have? You can use cpuset from shell script, if use imagemagick: cpuset -c -l 1 /usr/local/bin/ImageMagick to restrict imagemagick to use cpu 1. If process is running, use cpuset -c -l 0,2 -p To force your webapp to run only on cpus 0 and 2 Check man cpuset and man 2 cpuset for more information. > Thanks! > > O.D. --- --- Eduardo Morras From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 18:55:34 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D8CBA9FF for ; Fri, 13 Mar 2015 18:55:34 +0000 (UTC) Received: from nm16.bullet.mail.ir2.yahoo.com (nm16.bullet.mail.ir2.yahoo.com [212.82.96.39]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 29CCD5FE for ; Fri, 13 Mar 2015 18:55:32 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.es; s=s2048; t=1426272730; bh=FctbFK7zZw8AclduLDnK5/nX9esRE+LBKFTaKc342Ww=; h=Date:From:To:Subject:In-Reply-To:References:From:Subject; b=WGJmVKH4fVY8YhaSQEzwq/ckeKuBI4bvJuBnGgdHPlSvl7VremoCaRfyP8shXh7s0nXH8dZczHhZpq/oTBtJsvG1G8YuMrz3UvXvb+F2cQchirihg77Ftuz1zIo09C3gPeLiSDVlK16ppl+YiWehlUH46nOu27S3EAPu2HoX5FUOLF5LgWwOUYse14qU2vYNa0nFwIeoVmLJFn//h9m14IdlJBN89XvJjbiVpkobVOK9SDnsnl5Yaukr3ovOKrKtZLxcxiqWiiSCCdnkKd+1LSLrBlKVRlrk/bTjoKNREwAJeMLda0m1eWJRpxrCp0LHhlNUTSGeRKx/wKEsXyWkJg== Received: from [212.82.98.50] by nm16.bullet.mail.ir2.yahoo.com with NNFMP; 13 Mar 2015 18:52:10 -0000 Received: from [46.228.39.89] by tm3.bullet.mail.ir2.yahoo.com with NNFMP; 13 Mar 2015 18:52:10 -0000 Received: from [127.0.0.1] by smtp126.mail.ir2.yahoo.com with NNFMP; 13 Mar 2015 18:52:10 -0000 X-Yahoo-Newman-Id: 169825.11677.bm@smtp126.mail.ir2.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: 4iQiWlAVM1kOpIEt6FOKG4taEuCjInesR0Zf.kPqVOtBWk3 TA__HlkLfhHBRY57Tu1wwYLeRNoJGNdfbIv2HnP8z7sDmLeOWDjOBnO8QS.F d.B3nF5sYL3xcoirINyb8yCbKT0LdapXGZgFC2U1_Ygy8J.v3AGvgrIxiJeg GqJdoJQ88fm9jVVGZdv2t9o4zteEI_SklEAW45yKHQgotw9EVMNIikmO9JEu 2cPjftZo1CZIPlR_5pAwdP0akUgGBn.d_lgH5COaaeUlw30kxQrg043.6Jvn TXn3ZDG4l.6IECKnNgZlOjyAiAIQB2ZH1AU1xX6izZrt.sHJWcVXMdos8jBn AEySdRUNgxh2uidxS_c2HG_x4lcRF1AI7dGo10fSoBrvkPTSGAm_nuj5t8xA RnCcnscU7RYJWqCulaAKhSlYyoAOtOJUX9lHiyIJRUqbLWDXMlSZaTGUwFzc 6t2kxBh9d0OUBqpd8o0GQwgQ0f8eCBBfYuR25izoZITAmF8D9TQtfUbdhqGh Pzo6UuEJe1udPZQMPazs29BBV.7VOUBBp5w-- X-Yahoo-SMTP: mX392iiswBAeJNdO_s.EW62LZDJR Date: Fri, 13 Mar 2015 19:52:21 +0100 From: Eduardo Morras To: freebsd-questions@freebsd.org Subject: Re: Any pascal-source programs in the ports tree? Message-Id: <20150313195221.8a02be5dbf0fdbc338f256e1@yahoo.es> In-Reply-To: <20150313005804.L42290@sola.nimnet.asn.au> References: <20150313005804.L42290@sola.nimnet.asn.au> X-Mailer: Sylpheed 3.4.2 (GTK+ 2.24.25; amd64-portbld-freebsd9.3) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 18:55:34 -0000 On Fri, 13 Mar 2015 02:55:30 +1100 (EST) Ian Smith wrote: > Hi all, > > Does anyone know of any ports written IN freepascal (fpc)? I've > spent some time trolling through ports (other than fpc itself) that > mention 'pascal' anywhere, but so far have found nothing with pascal > sources. There is a game, a Worms clone written in fpc, check /usr/ports/games/hedgewars > Anyone suggesting p2c will be politely ignored :) > > cheers, Ian (please cc me; I'm subscribed to questions-digest) --- --- Eduardo Morras From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 21:36:51 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CEF34F18 for ; Fri, 13 Mar 2015 21:36:51 +0000 (UTC) Received: from mail-ob0-x241.google.com (mail-ob0-x241.google.com [IPv6:2607:f8b0:4003:c01::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 92248AD9 for ; Fri, 13 Mar 2015 21:36:51 +0000 (UTC) Received: by obbnt9 with SMTP id nt9so5485807obb.0 for ; Fri, 13 Mar 2015 14:36:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=gGuvYEbquXs9Uv1A4kUKdL5A21TNJTadezUwB6AA41w=; b=NdZnH8Tokv2FDJ+QoyNQ5h83MaHOMVGU8kkwxaP7uEysjYzHw1/ns8Y0wRhmpqr7mG vCdpNTgDc3OKPtquTHTo6EIzsaeK+z11fncktZfY/0mmpg7uED8gC+ILh+EEwXSYvN/A jciL5tyEZuDYZ/JL4BT9Wu5MTENdhZ68AGY+lWOai2r3rG6d2TQkAGe9iYBnqDGiFXVK 5pRjNk4RM1iTKXW8owSm9rS8UwfRSlboJjRYmjHkSbrkmzjGjSUd7ekY3pfxXf1szDUT eU9zvv+EvzL995AnRkJ57XCHAyROYXFF94lYpet1sEeHgg466eIoXelvt/rOvmp8AOqx WyjA== MIME-Version: 1.0 X-Received: by 10.60.158.130 with SMTP id wu2mr2770621oeb.64.1426282610835; Fri, 13 Mar 2015 14:36:50 -0700 (PDT) Received: by 10.202.49.204 with HTTP; Fri, 13 Mar 2015 14:36:50 -0700 (PDT) Date: Fri, 13 Mar 2015 18:36:50 -0300 Message-ID: Subject: Exist more advantage in doing design using open source or operating system of closed source? From: clark designer To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 21:36:51 -0000 Exist more advantage in doing design using open source or operating system of closed source? For example, using Linux? BSD? If yes, what are the advantages? What distribution Linux and BSD are advisable to use to design for desktop? I'm studying baccalaureate in design and want see if exist more advantage in doing design using open source or operating system of closed source. I'm starting the course now, but I know that the designer uses the computer to do the final work. Examples of disciplines that are part of the course curriculum: COMPUTER GRAPHICS COMPUTER GRAPHICS IN 3D WEB DESIGN PROJECT GRAPHIC V (DIGITAL) SEMIOTIC There Linux distribution, BSD operating system and another operating system open source that serve to do design? From owner-freebsd-questions@FreeBSD.ORG Fri Mar 13 22:08:04 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 0435060B for ; Fri, 13 Mar 2015 22:08:04 +0000 (UTC) Received: from nm33-vm8.bullet.mail.ir2.yahoo.com (nm33-vm8.bullet.mail.ir2.yahoo.com [212.82.97.113]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4C2EEE19 for ; Fri, 13 Mar 2015 22:08:02 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rocketmail.com; s=s2048; t=1426284259; bh=R7OVV4v7BIPfk4dlXMWQs7IMqd03Xv7RuuSGxjEzkrw=; h=Date:From:To:Subject:In-Reply-To:References:From:Subject; b=VdhC93E/gMMOD1+6lGFNYsOmk4j6oQpqF9XVk+9r0dRxq6HVPqu9ZqmsYRKPGcrVVGA6oKTGapzu27hGUATmJWBqLGiFF1EhSN9edJHfqYjMhQzJn2yf4VQruHzZzwvqAAYw+ppLekAFKRFfWDDf1UkBJkii1CtI9MKYoDX/nB1MhgLY7K8xgcWo9YU35GzZpn8K4XRRevfbDNbWg3BqOJQ3Yud+Sjnf8atzverC0h5TZggRon16P1ipMVykpmGPjrZyGR9wNL8EQaVAv+/goc+360w1OHsExkQrFtB7wCgxyYwCPZmn2g+OSU+i3+NjsAobY7GadFAnSh5uBOS35Q== Received: from [212.82.98.52] by nm33.bullet.mail.ir2.yahoo.com with NNFMP; 13 Mar 2015 22:04:19 -0000 Received: from [46.228.39.98] by tm5.bullet.mail.ir2.yahoo.com with NNFMP; 13 Mar 2015 22:04:19 -0000 Received: from [127.0.0.1] by smtp135.mail.ir2.yahoo.com with NNFMP; 13 Mar 2015 22:04:19 -0000 X-Yahoo-Newman-Id: 779935.89837.bm@smtp135.mail.ir2.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: pRDWml4VM1lMO4ksd0_6bPR.6Rm_4MioQCZXjIqPYsOUo9M ssYaU_WYtC5Uz4NdV8uavEY59RJEm7DekKhsIj8LsoSBtCBxbF0WUgzZLwws v5HzOEYMxjS6ltLIG2coZe9uXz08H9zmQbM1fEdotzm127m6.gWi6Fy6OUVW WpfMk2BNYCiIaie3_tnZJNr3.YEnFdxEnoHnqAq2LE35Pv4H9AmNgiPi766Y _hSTEkIEb4.NCsn9uFIh3cOxteTVDcpnXLZq1fMahwxUkk4Azw8oeEVGpse0 pP23kxQJj5YfdNoYcwh3qjpNSj69CwLT1hwVaKJwlAJwTyBSDubVDaXHv6wS one_6ZA6be5aORmDNmH1nvqF7q4mmdg9ScL5DlpKLhrf3T7vb48d1K3_rL4V JdG8lh3t5gH5W7cHAz661LXlwYF21aTAoKRKpYGETtATecr9_YbOf4__aK7z FKjRBuWhHnMKsG9UB7Jl_DYDbQ88Pxct9bfkIFlgZYaQfrGrhNd3c1StJpp7 f39S_gxvGqlnF5N19rtMebkO.tHYdbT83npS_2LAeunTo7CC9.4w2iyTMcfj qT6NLVgLKNVPXoPIQj3VQDKqEvmmEgowGf7OEwbOvZH8S8KdWM1Fbxm7EVEq uLhvUM3At1H0_0Nl.OWCz67UmXuDlJ.E9Balv6LLZz8o- X-Yahoo-SMTP: BeMCPs2swBABTJ3kAeEiC_hE0mz8jRexLddJfD8pI2j32fOacjBmXg-- Date: Fri, 13 Mar 2015 23:04:18 +0100 From: Ralf Mardorf To: freebsd-questions@freebsd.org Subject: Re: Exist more advantage in doing design using open source or operating system of closed source? Message-ID: <20150313230418.2851d35f@archlinux> In-Reply-To: References: X-Mailer: Claws Mail 3.11.1-72-g9cbe67d (GTK+ 2.24.27; x86_64-arch-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Mar 2015 22:08:04 -0000 A good starting point IMO is a Linux distro called "Ubuntu Studio". https://ubuntustudio.org/about-ubuntustudio/ You can download it and test the applications by booting from the DVD. IOW you don't need to install it. Several things are only provided by proprietary software. Printing companies might want your work in a required format. You perhaps need comfortable lips sync or screen tones? You need to test it on your own. Hth, Ralf From owner-freebsd-questions@FreeBSD.ORG Sat Mar 14 02:14:24 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 4BCFDBDB for ; Sat, 14 Mar 2015 02:14:24 +0000 (UTC) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D401498E for ; Sat, 14 Mar 2015 02:14:23 +0000 (UTC) Received: from r56.edvax.de (port-92-195-131-196.dynamic.qsc.de [92.195.131.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id B38943CCD5; Sat, 14 Mar 2015 03:14:14 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id t2E2EEUj002174; Sat, 14 Mar 2015 03:14:14 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Sat, 14 Mar 2015 03:14:14 +0100 From: Polytropon To: clark designer Subject: Re: Exist more advantage in doing design using open source or operating system of closed source? Message-Id: <20150314031414.19111a78.freebsd@edvax.de> In-Reply-To: References: Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Mar 2015 02:14:24 -0000 On Fri, 13 Mar 2015 18:36:50 -0300, clark designer wrote: > Exist more advantage in doing design using open source or operating system > of closed source? It's always an advantage for you (as a designer) and your clients to have your work stored in files with standardized file formats with publicly available specifications, as well as using software which is open source (because it benefits your safety and puts you in control of what software can do). This doesn't just work for the application software you use, but also for the operating system you use it on. :-) > For example, using Linux? There are many distributions of GNU/Linux. Some of them explicitely aim at designers. There are also distributions that come with proprietary software, or allow the use of such software easily. > BSD? FreeBSD has a ports collection with several thousands applications available. The design-related software is usually ported from Linux to FreeBSD. > If yes, what are the advantages? As mentioned earlier, choice, control, security, but also portability and interoperability are advantages you usually cannot get when you're using proprietary closed-source software. You can avoid vendor lock-in and being left with files which you can't open anymore after 5 years. You're also not forced to register, hand over personal information, or be tied to using things "online only". > What distribution Linux and BSD are advisable to use to design for > desktop? FreeBSD (as well as the other BSD operating systems) do not come in different distributions. They are a "core operating system" which can be extended by installing applications as _you_ decide. However, systems like PC-BSD come with a preinstalled and preconfigured desktop environment and aim at desktop users. Maybe that is a good point to start. Depending on _what_ kind of design you wish to do, there are several tools that can be of great value for you: LibreOffice's DTP components, Scribus, Blender, Gimp & GimpShop, Inkscape, Krita, XFig, LaTeX & LyX... There are many. Which work for you is a question only you can answer, by giving them a try. Most applications can be used on FreeBSD, but are usually also available on almost any Linux. There are Linux distributions especially created for designers, such as "Dream Studio": http://sourceforge.net/projects/dreamstudio/ Other distributions may also work for you. Most of them offer a live system DVD or USB image wich allows you to _test_ the system without actually having to install it. Boot your system with it and give it a try. If you don't like it - reboot. No alteration has been done to your system. > I'm studying baccalaureate in design and want see if exist more advantage > in doing design using open source or operating system of closed source. There are operational, functional, financial and moral advantages as pointed out. You'll find great resources on the web on why open source is a great deal for education and work. > I'm starting the course now, but I know that the designer uses the computer > to do the final work. That's nothing bad. A computer, with the proper software, can be a really great tool. With bad software - it will slow you down, make things expensive, unreliable, and you're left with "binary garbage" after few years. :-) > Examples of disciplines that are part of the course curriculum: > > COMPUTER GRAPHICS > COMPUTER GRAPHICS IN 3D > WEB DESIGN > PROJECT GRAPHIC V (DIGITAL) > SEMIOTIC > > There Linux distribution, BSD operating system and another operating system > open source that serve to do design? I'd say that with a good selection of software, FreeBSD (as well as a Linux distribution) could be the way to go. Especially computer graphics, if you'll also have programming assignments during the course, can be done with FreeBSD and OpenGL, plus an IDE if you want. Web design can also be done with FreeBSD, as it offers development tools as well as web browsers, and for understanding the foundation of design (or let's say, the tools and formats), learning HTML, CSS and maybe JS can be done as well. Firefox also offers web development and design tools and add-ons, just as Chrome. The more you know the requirements, the better you can select the tools that will do the job. Summary: If you can, use open source software. If people say you shouldn't (or you're not supposed to), ask them for reasons. It will benefit your education, especially on dealing with FUD. :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@FreeBSD.ORG Sat Mar 14 02:48:27 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C0BE018B for ; Sat, 14 Mar 2015 02:48:27 +0000 (UTC) Received: from dragon.rutgers.edu (dragon.rutgers.edu [128.6.4.3]) by mx1.freebsd.org (Postfix) with ESMTP id 7F1E3C4E for ; Sat, 14 Mar 2015 02:48:26 +0000 (UTC) X-ExtScanner: Niversoft's Regex Matcher X-Virus-Scanned: by dragon-cgpav-clamav-v1.3b Received: by dragon.rutgers.edu (CommuniGate Pro PIPE 6.0.11) with PIPE id 119425518; Fri, 13 Mar 2015 21:48:11 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on spamfilter2.cs.rutgers.edu X-Spam-ASN: X-Spam-Status: No, score=-32.4 required=5.0 tests=ALL_TRUSTED,BAYES_20, KHOP_THREADED,LCSR_THREAD,RUMAILX shortcircuit=no autolearn=disabled version=3.3.1 X-Spam-Relay-Country: X-Spam-Language: en X-Spam-Level: Received: from almini.rcthomas.org (account rbthomas@dragon.rutgers.edu [208.53.120.31] verified) by dragon.rutgers.edu (CommuniGate Pro SMTP 6.0.11) with ESMTPSA id 119425517; Fri, 13 Mar 2015 21:48:05 -0400 Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) Subject: Re: How to adjust clock frequency in FreeBSD 10.1 ? From: Rick Thomas In-Reply-To: <61602B0F-2114-4B65-A576-34EDDF94EAFA@pobox.com> Date: Fri, 13 Mar 2015 18:48:04 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <3FCD9F24-D319-41D2-A670-53A8E2ACE16D@cs.rutgers.edu> References: <54EDC2DD.8060307@gmx.de> <61602B0F-2114-4B65-A576-34EDDF94EAFA@pobox.com> To: FreeBSD Questions X-Mailer: Apple Mail (2.1878.6) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Mar 2015 02:48:27 -0000 > On 02/12/15 04:09, Rick Thomas wrote: >> I=92ve got a machine with a really bad clock. When I run NTPD on it, >> the freq goes straight to 500.0 (over a period of a few days) and >> stays there, while the offset grows and grows. >>=20 >> I recently switched this machine from Debian Linux to FreeBSD >> (wanting to learn more about FreeBSD). Under Linux, I used >> adjtimex to modify the TICK value and (once I had converged on the >> right TICK value) NTP was able to stabilize the clock. >>=20 >> Is there an equivalent hack for FreeBSD? On Feb 25, 2015, at 4:41 AM, lokadamus@gmx.de wrote: > You can use a cronjob with ntpdate to synchronize your clock. > But ntpd shouldn=92t run, when ntpdate is used. >=20 As it turns out, current versions of ntpd will do as well as (actually = better than) periodic ntpdate =97 even under such adverse circumstances = as this machine. What it does is to attempt to slew the time using its = normal algorithms until the frequency adjustment gets pegged at 500ppm = and the offset is over 1 second. Then it steps the clock and starts the = game all over. This is better than previous versions of ntpd and xntpd. = They would get to that point and abort =97 on the theory that something = was acutely wrong and needed human operator attention. Current versions = at least have the option of plugging on as best as possible. So, with current ntpd, the system clock is never more than about 1 = second off from network time. And for a normal desktop machine (or ever a small-/home-office server) = that=92s really good enough and I should stop complaining. BUT=85 The trouble is, I=92m a =93time nut=94 and I keep this machine (and a = few others) around specifically as a test case =97 to prove that it *is* = possible to keep good time (sub millisecond offsets from a GPS server on = the same LAN) even with machines that are out of spec, as long as they = are *reliably* out of spec. I=92ve succeeded in twisting Linux to my ends as noted in my original = post (quoted above), but so far I haven=92t found a way to do that for = FreeBSD, short of custom modifications to the kernel and/or ntpd. Any and all suggestions will be gratefully received. Enjoy! Rick PS: Does anybody know if there=92s a FreeBSD package for P-HK=92s = Ntimed? From owner-freebsd-questions@FreeBSD.ORG Sat Mar 14 03:20:43 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 83FFC62E for ; Sat, 14 Mar 2015 03:20:43 +0000 (UTC) Received: from mout.perfora.net (mout.perfora.net [74.208.4.196]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mout.perfora.net", Issuer "Thawte SSL CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4675DFD0 for ; Sat, 14 Mar 2015 03:20:42 +0000 (UTC) Received: from neon.local ([73.207.230.118]) by mrelay.perfora.net (mreueus002) with ESMTPSA (Nemesis) id 0MYuNZ-1Z0eFb1oRf-00VibP for ; Sat, 14 Mar 2015 04:20:36 +0100 Message-ID: <5503A903.8080601@flederma.us> Date: Fri, 13 Mar 2015 23:20:35 -0400 From: Cary User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Kerberos + automountd issues Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:q4EahtcZ0wKHXOMdycSBQHyLlxFKwmRWLEcAk+0f9B8R6kFJVji S9fwaP/0RSjQQfrxZV+Ntdw41K3s6596QulinVqm9AL0b8Ei2tqirvqQECqyL6w86uyjQmc fw3AEkqwv4p/ajh0NTGQsv0uJLkIGw84v50jlJr8EglHjMC/T0XK5yZ4jq9QkTm13ux8aE8 ZwJkMAmE2YbJjAtAF+bpA== X-UI-Out-Filterresults: notjunk:1; X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Mar 2015 03:20:43 -0000 Hello, I've been struggling with this issue for the past couple of weeks and I've hit a wall with the FreeBSD-related NFS content I can find via Google and Yahoo!. Apologies for the wall of text up front; I've tried to be as concise as possible while describing a complex issue. My goal is to let users authenticate with Kerberos, get a Kerberos ticket, then have the home directory auto-mounted over NFSv4 using krb[i|p] security. User information (e.g., UID, GID, home dir path) is stored in LDAP (which is working). Kerberos authentication works. I can kinit(1)/kdestroy(1) tickets without issue. If I stop the automount services, I can ssh into the host successfully (using the pam_mkhomedir.so module to make a home directory instead of using NFS). UID/GID mappings are pulled from LDAP successfully. When automount services are running, things work in inconsistent ways. As "user1", if I kinit(1) and get a ticket for "user2", then cd to user2's home directory, everything works: the home directory is mounted (the user's directory is created if necessary, and I can ls(1) the contents, touch(1) files, etc.) I see mount(8) report the directory has been automounted and I see the changes reflected on the NFS server, so I know things are working as desired. However, if I try to ssh(1) in as user2, after authenticating, I get dropped into the home directory (according to pwd(1)), but I cannot ls(1), touch(1), etc. the files in the directory. In trying to troubleshoot this, I've observed the following: 1. there is no Kerberos credentials cache (/tmp/krb5cc_) 2. the home directory is not mounted (running mount(1) on the client does not show the exported directory as having been mounted 3. Running a packet capture on the *NFS server* shows the *client* is using AUTH_UNIX credentials instead of RPCSEC_GSS. 4. The PAM debug logs seem to indicate that a credentials stash is created under the auth portion (pam_sm_authenticate()) of the pam_krb5.so module, but deleted after the pam_ldap.so account portion (pam_sm_acct_mgmt()) runs [Aside: why would the pam_sm_setcred() be run *AFTER* the pam_sm_acct_mgmt() function?] Additional troubleshooting steps: 1. Both the NFS server and client are running nfsuserd(8), gssd(8), and nslcd(8), as per relevant man pages 2. I've uploaded conf file contents for auto_master, auto_home, pam.d/sshd, and exports (all with line numbers) to pastebin (http://pastebin.com/RRCjfAvG) 3. I've uploaded a failed ssh session PAM logs (with line numbers) to pastebin (http://pastebin.com/wLm3Knws) 4. The NFS client is running FreeBSD 10.1-RELEASE #0 r274401 5. The NFS server is running FreeBSD 10.0-RELEASE-p12 #0 6. On the server, I've set the sysctl options vfs.nfs.debuglevel=3 and vfs.usermount=1 7. In the client, I've set the sysctl option vfs.usermount=1 8. My sshd_config has the following options set which may be applicable to the situation (GSSAPI* and Kerberos* options are disabled) : PasswordAuthentication no ChallengeResponseAuthentication yes UsePAM yes What steps, programs, or settings have I overlooked? What else do I need to automount home directories with sec=krb5 when ssh'ing into the host? Any help will be welcomed enthusiastically! If additional information or settings are needed, please let me know. Thank you in advance! -- Mr. Cary Mathews From owner-freebsd-questions@FreeBSD.ORG Sat Mar 14 04:53:47 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1C3353E3 for ; Sat, 14 Mar 2015 04:53:47 +0000 (UTC) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7DFDEBE6 for ; Sat, 14 Mar 2015 04:53:45 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id t2E4rZZm063361; Sat, 14 Mar 2015 15:53:35 +1100 (EST) (envelope-from smithi@nimnet.asn.au) Date: Sat, 14 Mar 2015 15:53:35 +1100 (EST) From: Ian Smith To: The Lost Admin Subject: FreeBSD 9.3 is not recognizing USB 2.0 peripherals (or maybe USB2 bus) In-Reply-To: Message-ID: <20150314144238.N29188@sola.nimnet.asn.au> References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Mar 2015 04:53:47 -0000 In freebsd-questions Digest, Vol 562, Issue 4, Message: 3 On Wed, 11 Mar 2015 18:43:03 -0400 The Lost Admin wrote: > Hi all, > > I?ve got a Zotac Zbox SD-ID12 (Intel Atop D525). According to the > vendor specs it?s got 6 USB 2.0 ports. It?s spend the last few years > sitting on a shelf running FreeBSD and getting periodic > updates/upgrades and little else. > > Currently at FreeBSD 9.3-RELEASE-p10. > > Recently I decided to make use of some old USB2 hard drives I had > lying around and turn the box into a basic NAS for my home network > (nothing fancy just NFS). I got the NFS working without a hitch. > > I attached the first of the USB 2.0 drives and it seamed really slow. > Looking at /var/messages it indicates it?s running at USB 1 speeds: > > da0 at umass-sim0 bus 0 scbus4 target 0 lun 0 > da0: Fixed Direct Access SCSI-4 device > da0: Serial Number 575851314136305639323030 > da0: 1.000MB/s transfers > da0: 953842MB (1953468416 512 byte sectors: 255H 63S/T 121597C) > da0: quirks=0x2 > > Further digging into dmesg suggests to me that FreeBSD is somehow > either not finding or not using USB2 drivers. > > For the sake of keeping this message short, the full verbose dmesg > can be found here -> http://pastebin.com/sUxvCd0m ; it will expire in > one month (April 11, 2015). Unfortunately your dmesg is missing the top - these days you likely need to set kern.msgbufsize=98304 or at least >64K, to capture a full verbose boot; I have that in /boot/loader.conf or you can set it from the loader prompt - so it's not clear whether you're running a GENERIC kernel, but as you say 9.3-RELEASE-p10 I'll assume you probably do. If not, and your kernel doesn't include device ehci, that's your problem solved :) > NOTES: > I have tried a variety of USB2 devices (CD R/W, usb hard drive, thumb > drives). I have confirmed that all are detected and accessed as USB > 2.0 devices on Windows 7, Mac OSX. I have also confirmed that Linux > (Raspbian on a raspberry Pi) recognized and used the hard drive as a > USB2.0 device. Your dmesg shows: uhci0: port 0xd880-0xd89f irq 23 at device 29.0 on pci0 ioapic0: routing intpin 23 (PCI IRQ 23) to lapic 0 vector 55 uhci0: LegSup = 0x2f00 usbus0 on uhci0 usbus0: bpf attached uhci0: usbpf: Attached and the same for uhci1, uhci2 and uhci3. If ehci (USB 2) were being detected you'd then expect to see something like, as here on 9.3-R: ehci0: mem 0xf2926c00-0xf2926fff irq 23 at device 26.7 on pci0 ioapic0: routing intpin 23 (PCI IRQ 23) to lapic 0 vector 55 usbus3: EHCI version 1.0 usbus3 on ehci0 usbus3: bpf attached ehci0: usbpf: Attached though on a different irq and usbus than the uhci ones. > I tried a few different cables just in case. > > Also, I have been using FreeBSD since the 1990s and used to be pretty > active at helping people on this list (a long time ago). That's cool, but you don't need a credit balance to qualify :) smithi@x200:~ % kldstat -v | grep ehci 295 ehci/usbus 287 pci/ehci smithi@x200:~ % devinfo -v | grep ehci ehci0 pnpinfo vendor=0x8086 device=0x293c subvendor=0x17aa subdevice=0x20f1 class=0x0c0320 at slot=26 function=7 handle=\_SB_.PCI0.EHC1 ehci1 pnpinfo vendor=0x8086 device=0x293a subvendor=0x17aa subdevice=0x20f1 class=0x0c0320 at slot=29 function=7 handle=\_SB_.PCI0.EHC0 If you've got ehci loaded then it's not being detected, which is weird indeed. Report back with the output of those two commands? cheers, Ian (please cc me, I take questions as a digest) From owner-freebsd-questions@FreeBSD.ORG Sat Mar 14 13:04:16 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C33BE5B4 for ; Sat, 14 Mar 2015 13:04:16 +0000 (UTC) Received: from fly.hiwaay.net (fly.hiwaay.net [216.180.54.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 88C93ED9 for ; Sat, 14 Mar 2015 13:04:16 +0000 (UTC) Received: from kabini1.local (rbn1-216-180-76-211.adsl.hiwaay.net [216.180.76.211]) (authenticated bits=0) by fly.hiwaay.net (8.13.8/8.13.8/fly) with ESMTP id t2ED48kb011759 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Sat, 14 Mar 2015 08:04:09 -0500 Message-ID: <5504333F.1000903@hiwaay.net> Date: Sat, 14 Mar 2015 08:10:23 -0500 From: "William A. Mahaffey III" User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 CC: freebsd-questions@freebsd.org Subject: Re: FreeBSD 9.3 is not recognizing USB 2.0 peripherals (or maybe USB2 bus) References: <20150314144238.N29188@sola.nimnet.asn.au> In-Reply-To: <20150314144238.N29188@sola.nimnet.asn.au> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Mar 2015 13:04:16 -0000 On 03/13/15 23:53, Ian Smith wrote: > In freebsd-questions Digest, Vol 562, Issue 4, Message: 3 > On Wed, 11 Mar 2015 18:43:03 -0400 The Lost Admin wrote: > > Hi all, > > > > I?ve got a Zotac Zbox SD-ID12 (Intel Atop D525). According to the > > vendor specs it?s got 6 USB 2.0 ports. It?s spend the last few years > > sitting on a shelf running FreeBSD and getting periodic > > updates/upgrades and little else. > > > > Currently at FreeBSD 9.3-RELEASE-p10. > > > > Recently I decided to make use of some old USB2 hard drives I had > > lying around and turn the box into a basic NAS for my home network > > (nothing fancy just NFS). I got the NFS working without a hitch. > > > > I attached the first of the USB 2.0 drives and it seamed really slow. > > Looking at /var/messages it indicates it?s running at USB 1 speeds: > > > > da0 at umass-sim0 bus 0 scbus4 target 0 lun 0 > > da0: Fixed Direct Access SCSI-4 device > > da0: Serial Number 575851314136305639323030 > > da0: 1.000MB/s transfers > > da0: 953842MB (1953468416 512 byte sectors: 255H 63S/T 121597C) > > da0: quirks=0x2 > > > > Further digging into dmesg suggests to me that FreeBSD is somehow > > either not finding or not using USB2 drivers. > > > > For the sake of keeping this message short, the full verbose dmesg > > can be found here -> http://pastebin.com/sUxvCd0m ; it will expire in > > one month (April 11, 2015). > > Unfortunately your dmesg is missing the top - these days you likely need > to set kern.msgbufsize=98304 or at least >64K, to capture a full verbose > boot; I have that in /boot/loader.conf or you can set it from the loader > prompt - so it's not clear whether you're running a GENERIC kernel, but > as you say 9.3-RELEASE-p10 I'll assume you probably do. If not, and > your kernel doesn't include device ehci, that's your problem solved :) > > > NOTES: > > I have tried a variety of USB2 devices (CD R/W, usb hard drive, thumb > > drives). I have confirmed that all are detected and accessed as USB > > 2.0 devices on Windows 7, Mac OSX. I have also confirmed that Linux > > (Raspbian on a raspberry Pi) recognized and used the hard drive as a > > USB2.0 device. > > Your dmesg shows: > > uhci0: port 0xd880-0xd89f irq > 23 at device 29.0 on pci0 > ioapic0: routing intpin 23 (PCI IRQ 23) to lapic 0 vector 55 > uhci0: LegSup = 0x2f00 > usbus0 on uhci0 > usbus0: bpf attached > uhci0: usbpf: Attached > > and the same for uhci1, uhci2 and uhci3. If ehci (USB 2) were being > detected you'd then expect to see something like, as here on 9.3-R: > > ehci0: mem 0xf2926c00-0xf2926fff irq > 23 at device 26.7 on pci0 > ioapic0: routing intpin 23 (PCI IRQ 23) to lapic 0 vector 55 > usbus3: EHCI version 1.0 > usbus3 on ehci0 > usbus3: bpf attached > ehci0: usbpf: Attached > > though on a different irq and usbus than the uhci ones. > > > I tried a few different cables just in case. > > > > Also, I have been using FreeBSD since the 1990s and used to be pretty > > active at helping people on this list (a long time ago). > > That's cool, but you don't need a credit balance to qualify :) > > smithi@x200:~ % kldstat -v | grep ehci > 295 ehci/usbus > 287 pci/ehci > smithi@x200:~ % devinfo -v | grep ehci > ehci0 pnpinfo vendor=0x8086 device=0x293c subvendor=0x17aa > subdevice=0x20f1 class=0x0c0320 at slot=26 function=7 handle=\_SB_.PCI0.EHC1 > ehci1 pnpinfo vendor=0x8086 device=0x293a subvendor=0x17aa > subdevice=0x20f1 class=0x0c0320 at slot=29 function=7 handle=\_SB_.PCI0.EHC0 > > If you've got ehci loaded then it's not being detected, which is weird > indeed. Report back with the output of those two commands? > > cheers, Ian (please cc me, I take questions as a digest) > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > FWIW, the OP'er is on 9.3R-p10, i'm on p9, here is what my box shows: [root@kabini1, /etc, 8:06:21am] 504 % grep -i uhci /var/log/dmesg.today [root@kabini1, /etc, 8:06:44am] 505 % grep -i ehci /var/log/dmesg.today ehci0: mem 0xffb6c000-0xffb6c0ff irq 17 at device 18.2 on pci0 usbus3: EHCI version 1.0 usbus3 on ehci0 ehci1: mem 0xffb6a000-0xffb6a0ff irq 17 at device 19.2 on pci0 usbus5: EHCI version 1.0 usbus5 on ehci1 uhub3: on usbus3 uhub5: on usbus5 ehci0: mem 0xffb6c000-0xffb6c0ff irq 17 at device 18.2 on pci0 usbus3: EHCI version 1.0 usbus3 on ehci0 ehci1: mem 0xffb6a000-0xffb6a0ff irq 17 at device 19.2 on pci0 usbus5: EHCI version 1.0 usbus5 on ehci1 uhub3: on usbus3 uhub5: on usbus5 [root@kabini1, /etc, 8:06:49am] 506 % kldstat -v | grep ehci 329 ehci/usbus 321 pci/ehci [root@kabini1, /etc, 8:07:42am] 507 % devinfo -v | grep ehci ehci0 pnpinfo vendor=0x1022 device=0x7808 subvendor=0x1849 subdevice=0x7808 class=0x0c0320 at slot=18 function=2 handle=\_SB_.PCI0.EHC1 ehci1 pnpinfo vendor=0x1022 device=0x7808 subvendor=0x1849 subdevice=0x7808 class=0x0c0320 at slot=19 function=2 handle=\_SB_.PCI0.EHC2 [root@kabini1, /etc, 8:07:45am] 508 % uname -a FreeBSD kabini1.local 9.3-RELEASE-p9 FreeBSD 9.3-RELEASE-p9 #0: Tue Jan 27 10:43:40 UTC 2015 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 [root@kabini1, /etc, 8:07:50am] 509 % Maybe an issue crept in w/ the newer OS-base code ? $0.02, no more, no less .... -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr. From owner-freebsd-questions@FreeBSD.ORG Sat Mar 14 14:24:59 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D9E2FB76 for ; Sat, 14 Mar 2015 14:24:59 +0000 (UTC) Received: from mail-ie0-x236.google.com (mail-ie0-x236.google.com [IPv6:2607:f8b0:4001:c03::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9A79A88E for ; Sat, 14 Mar 2015 14:24:59 +0000 (UTC) Received: by iecsl2 with SMTP id sl2so139565947iec.1 for ; Sat, 14 Mar 2015 07:24:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=c8R1Zd9XNtIXl1AdkfUDRvGyYMe7pukPOlbJMGsQ8Ss=; b=V0qeDlOm6IzzFHgWn3QfYEHPfnnfE01gu1eWw3rrgX7ASHTU9vG/d4VXIVy+TwQARP 7VCyPBI2w+YQLgi7Ptzz4u5mGpy9Qm+CqaNG0p9ZMeDXFwkpQC7N1kZcTzsWa6ZsIdYE s1IhlU71TEMmdauGWvUzL9b5/zYyVe7MNFQpPjb3BnpVsQXfqE1aQhXXStHid6H0WkxJ +GRyu7k3HkIE2zIPmlBwsb6CKk/I3BJeBgq+v5XrX2OLPCmLZbc4LizJ18qCYfo2ov5T S6rMC1nxXBHMFmi4FRYiOwl9DiqfHN50mu8HqG98iUnmTecfkw2XrOCGFrUNcT/kXiqE pPQQ== X-Received: by 10.107.134.9 with SMTP id i9mr58563116iod.90.1426343098911; Sat, 14 Mar 2015 07:24:58 -0700 (PDT) Received: from [192.168.89.100] (192-171-49-199.cpe.pppoe.ca. [192.171.49.199]) by mx.google.com with ESMTPSA id w9sm3335693igl.0.2015.03.14.07.24.56 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sat, 14 Mar 2015 07:24:57 -0700 (PDT) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) Subject: Re: FreeBSD 9.3 is not recognizing USB 2.0 peripherals (or maybe USB2 bus) From: The Lost Admin In-Reply-To: <20150314144238.N29188@sola.nimnet.asn.au> Date: Sat, 14 Mar 2015 10:24:52 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <0FFFB482-ACDF-4751-81E4-BD745BB79867@gmail.com> References: <20150314144238.N29188@sola.nimnet.asn.au> To: "freebsd-questions@freebsd.org" X-Mailer: Apple Mail (2.1878.6) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Mar 2015 14:24:59 -0000 On Mar 14, 2015, at 12:53 AM, Ian Smith wrote: > In freebsd-questions Digest, Vol 562, Issue 4, Message: 3 > On Wed, 11 Mar 2015 18:43:03 -0400 The Lost Admin = wrote: >> Hi all, >>=20 >> I?ve got a Zotac Zbox SD-ID12 (Intel Atop D525). According to the=20 >> vendor specs it?s got 6 USB 2.0 ports. It?s spend the last few years=20= >> sitting on a shelf running FreeBSD and getting periodic=20 >> updates/upgrades and little else. >>=20 >> Currently at FreeBSD 9.3-RELEASE-p10. >>=20 >> Recently I decided to make use of some old USB2 hard drives I had=20 >> lying around and turn the box into a basic NAS for my home network=20 >> (nothing fancy just NFS). I got the NFS working without a hitch. >>=20 >> I attached the first of the USB 2.0 drives and it seamed really slow.=20= >> Looking at /var/messages it indicates it?s running at USB 1 speeds: >>=20 >> da0 at umass-sim0 bus 0 scbus4 target 0 lun 0 >> da0: Fixed Direct Access SCSI-4 device=20 >> da0: Serial Number 575851314136305639323030 >> da0: 1.000MB/s transfers >> da0: 953842MB (1953468416 512 byte sectors: 255H 63S/T 121597C) >> da0: quirks=3D0x2 >>=20 >> Further digging into dmesg suggests to me that FreeBSD is somehow=20 >> either not finding or not using USB2 drivers. >>=20 >> For the sake of keeping this message short, the full verbose dmesg=20 >> can be found here -> http://pastebin.com/sUxvCd0m ; it will expire in=20= >> one month (April 11, 2015). >=20 > Unfortunately your dmesg is missing the top - these days you likely = need=20 > to set kern.msgbufsize=3D98304 or at least >64K, to capture a full = verbose=20 > boot; I have that in /boot/loader.conf or you can set it from the = loader=20 > prompt - so it's not clear whether you're running a GENERIC kernel, = but=20 > as you say 9.3-RELEASE-p10 I'll assume you probably do. If not, and=20= > your kernel doesn't include device ehci, that's your problem solved :) This is the top of a non-verbose DMESG. It will take some fiddling to = get the verbose one out of the box because it=92s headless. NOTE: = currently I have module_load eyries for ehci and ohci in loader.conf. It is a GENERIC kernel. Copyright (c) 1992-2014 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights = reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 9.3-RELEASE-p10 #0: Tue Feb 24 21:01:19 UTC 2015 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC i386 gcc version 4.2.1 20070831 patched [FreeBSD] module_register: module pci/ehci already exists! Module pci/ehci failed to register: 17 module_register: module pci/ohci already exists! Module pci/ohci failed to register: 17 CPU: Intel(R) Atom(TM) CPU D525 @ 1.80GHz (1795.74-MHz 686-class CPU) Origin =3D "GenuineIntel" Id =3D 0x106ca Family =3D 0x6 Model =3D = 0x1c Stepping =3D 10 = Features=3D0xbfebfbff = Features2=3D0x40e31d AMD Features=3D0x20100000 AMD Features2=3D0x1 TSC: P-state invariant, performance statistics real memory =3D 2147483648 (2048 MB) avail memory =3D 2071896064 (1975 MB) Event timer "LAPIC" quality 400 ACPI APIC Table: <122310 APIC1702> FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs FreeBSD/SMP: 1 package(s) x 2 core(s) x 2 HTT threads cpu0 (BSP): APIC ID: 0 cpu1 (AP/HT): APIC ID: 1 cpu2 (AP): APIC ID: 2 cpu3 (AP/HT): APIC ID: 3 ioapic0: Changing APIC ID to 4 ioapic0 irqs 0-23 on motherboard kbd1 at kbdmux0 acpi0: <122310 RSDT1702> on motherboard acpi0: Power Button (fixed) acpi0: reservation of fee00000, 1000 (3) failed acpi0: reservation of 0, a0000 (3) failed acpi0: reservation of 100000, 7f600000 (3) failed >> NOTES: >> I have tried a variety of USB2 devices (CD R/W, usb hard drive, thumb=20= >> drives). I have confirmed that all are detected and accessed as USB=20= >> 2.0 devices on Windows 7, Mac OSX. I have also confirmed that Linux=20= >> (Raspbian on a raspberry Pi) recognized and used the hard drive as a=20= >> USB2.0 device. >=20 > Your dmesg shows: >=20 > uhci0: port 0xd880-0xd89f = irq=20 > 23 at device 29.0 on pci0 > ioapic0: routing intpin 23 (PCI IRQ 23) to lapic 0 vector 55 > uhci0: LegSup =3D 0x2f00 > usbus0 on uhci0 > usbus0: bpf attached > uhci0: usbpf: Attached >=20 > and the same for uhci1, uhci2 and uhci3. If ehci (USB 2) were being=20= > detected you'd then expect to see something like, as here on 9.3-R: >=20 > ehci0: mem = 0xf2926c00-0xf2926fff irq > 23 at device 26.7 on pci0 > ioapic0: routing intpin 23 (PCI IRQ 23) to lapic 0 vector 55 > usbus3: EHCI version 1.0 > usbus3 on ehci0 > usbus3: bpf attached > ehci0: usbpf: Attached >=20 > though on a different irq and usbus than the uhci ones. >=20 >> I tried a few different cables just in case. >>=20 >> Also, I have been using FreeBSD since the 1990s and used to be pretty=20= >> active at helping people on this list (a long time ago). >=20 > That's cool, but you don't need a credit balance to qualify :) >=20 > smithi@x200:~ % kldstat -v | grep ehci > 295 ehci/usbus > 287 pci/ehci > smithi@x200:~ % devinfo -v | grep ehci > ehci0 pnpinfo vendor=3D0x8086 device=3D0x293c subvendor=3D0x17aa=20= > subdevice=3D0x20f1 class=3D0x0c0320 at slot=3D26 function=3D7 = handle=3D\_SB_.PCI0.EHC1 > ehci1 pnpinfo vendor=3D0x8086 device=3D0x293a subvendor=3D0x17aa=20= > subdevice=3D0x20f1 class=3D0x0c0320 at slot=3D29 function=3D7 = handle=3D\_SB_.PCI0.EHC0 $ kldstat -v | grep ehci 317 ehci/usbus 3 1 0xc1697000 e7b4 ehci.ko (/boot/kernel/ehci.ko) 2 pci/ehci $ devinfo -v | grep ehci # produced nothing so.. $ devinfo -v | grep hci uhci0 pnpinfo vendor=3D0x8086 device=3D0x27c8 subvendor=3D0x8086 = subdevice=3D0x27c8 class=3D0x0c0300 at slot=3D29 function=3D0 = handle=3D\_SB_.PCI0.USB0 uhci1 pnpinfo vendor=3D0x8086 device=3D0x27c9 subvendor=3D0x8086 = subdevice=3D0x27c9 class=3D0x0c0300 at slot=3D29 function=3D1 = handle=3D\_SB_.PCI0.USB1 uhci2 pnpinfo vendor=3D0x8086 device=3D0x27ca subvendor=3D0x8086 = subdevice=3D0x27ca class=3D0x0c0300 at slot=3D29 function=3D2 = handle=3D\_SB_.PCI0.USB2 uhci3 pnpinfo vendor=3D0x8086 device=3D0x27cb subvendor=3D0x8086 = subdevice=3D0x27cb class=3D0x0c0300 at slot=3D29 function=3D3 = handle=3D\_SB_.PCI0.USB3 >=20 > If you've got ehci loaded then it's not being detected, which is weird=20= > indeed. Report back with the output of those two commands? >=20 > cheers, Ian (please cc me, I take questions as a digest) From owner-freebsd-questions@FreeBSD.ORG Sat Mar 14 23:17:18 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 10CCC111 for ; Sat, 14 Mar 2015 23:17:18 +0000 (UTC) Received: from mail-qg0-x232.google.com (mail-qg0-x232.google.com [IPv6:2607:f8b0:400d:c04::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id B9ACCE54 for ; Sat, 14 Mar 2015 23:17:17 +0000 (UTC) Received: by qgfa8 with SMTP id a8so14141534qgf.0 for ; Sat, 14 Mar 2015 16:17:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; bh=X4Ag4nNWU/339ft8stglMAcfs46hPmJ+4YMdlIfTmU8=; b=unyko0d3A/tD+acEVxFAKn2KB6S86k9F4Xw7ZK0i70blIIzaq/BEnixt1dRg5fi0Tu PNXs5KdmvF5mcZQX9lnJ+q4haqDlYNiQCChBFdSoL1MSa3yBoDKY0CsjT+ajQC7yf3hB C5P2D59oxfC1OOsT4AOgTYjR75/RoN3/lzgPZ+T7iR3XKwQ6Fy0E7RHv4VVhPWVZHa8D bOFFL+c0FBd9Q0cYPwPjQx+fGPZXh07MghrbifGlU2N2+BoB7XU5kH/+PfzA3mqGnD7Z VZSOJOxVt7cmZe7l6JZZg1A/3adSsoKzvHMKaH3quAWOnIqFX8gti82FUmXM33eo35AD aV5A== X-Received: by 10.229.95.74 with SMTP id c10mr66808790qcn.17.1426375036905; Sat, 14 Mar 2015 16:17:16 -0700 (PDT) Received: from localhost.localdomain ([209.181.150.218]) by mx.google.com with ESMTPSA id t51sm4382292qge.28.2015.03.14.16.17.15 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 14 Mar 2015 16:17:16 -0700 (PDT) Message-ID: <5504C179.5040202@gmail.com> Date: Sat, 14 Mar 2015 17:17:13 -0600 From: jd1008 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Fedora Community Users Support , FreeBSD Users Subject: Could someone explain why thunderbird creates so many processes per folder Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Mar 2015 23:17:18 -0000 For example: $ lsof | grep Sent thunderbi 3165 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Gecko_IOT 3165 3192 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Socket 3165 3193 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf JS 3165 3194 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf JS 3165 3195 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Hang 3165 3196 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Cache2 3165 3197 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Timer 3165 3198 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf gdbus 3165 3200 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf HTML5 3165 3202 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf mozStorag 3165 3203 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Analysis 3165 3204 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Analysis 3165 3205 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf DOM 3165 3211 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Cert 3165 3217 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf URL 3165 3218 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Network 3165 3219 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf mozStorag 3165 3220 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf dconf 3165 3221 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Proxy 3165 3222 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf Cache 3165 3224 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf mozStorag 3165 3228 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf threaded- 3165 3265 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf gmain 3165 3316 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf mozStorag 3165 3386 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf DOM 3165 3773 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf mozStorag 3165 3775 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf MediaMana 3165 3782 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf DNS 3165 4087 jd 37u REG 8,19 3107745 62260168 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Sent.msf $ lsof | grep Inbox thunderbi 3165 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Gecko_IOT 3165 3192 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Socket 3165 3193 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf JS 3165 3194 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf JS 3165 3195 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Hang 3165 3196 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Cache2 3165 3197 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Timer 3165 3198 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf gdbus 3165 3200 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf HTML5 3165 3202 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf mozStorag 3165 3203 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Analysis 3165 3204 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Analysis 3165 3205 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf DOM 3165 3211 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Cert 3165 3217 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf URL 3165 3218 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Network 3165 3219 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf mozStorag 3165 3220 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf dconf 3165 3221 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Proxy 3165 3222 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf Cache 3165 3224 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf mozStorag 3165 3228 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf threaded- 3165 3265 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf gmain 3165 3316 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf mozStorag 3165 3386 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf DOM 3165 3773 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf mozStorag 3165 3775 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf MediaMana 3165 3782 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf DNS 3165 4087 jd 44u REG 8,19 2678870 62260180 /sdb3/home/jd/.thunderbird/jd1008/Mail/pop.googlemail.com/Inbox.msf