Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
Ninja Rope
Oct 22, 2005

Wee.
You don't need to recompile your kernel to get (lin)procfs, they should be available as modules if they're not already there in your kernel. You might need to load the modules, though, via kldload. I don't remember if they're in the GENERIC kernel by default.

Ninja Rope fucked around with this message at 03:58 on Mar 16, 2008

Adbot
ADBOT LOVES YOU

Ninja Rope
Oct 22, 2005

Wee.
Have you fdisk'ed it? Created partitions and slices? Have you newfs'd it? It sounds like you haven't, so you'll need to start there.

I think /sbin/sysinstall has a fancy GUI (well, text mode GUI) for partitioning, but if you want to be really lazy you can just "newfs -O 2 -U /dev/ar0", which creates the filesystem on the device without partitioning or slicing. You should then be able to mount it and add it to /etc/fstab.

Ninja Rope
Oct 22, 2005

Wee.
We have lots of Dell 2950's running FreeBSD. Can you be more specific about the problems you're experiencing? What version are you running?

Ninja Rope
Oct 22, 2005

Wee.
Sorry if I missed it earlier, but how many cores is that? ULE seems to be doing great on my 4-core machines, but I didn't do any benchmarking.

Ninja Rope
Oct 22, 2005

Wee.
Does anyone have FreeBSD running on a Thinkpad (t42)? I'm trying to get the blue mouse button to work, but it doesn't seem to register. I've tried pointing X at /dev/pcm0 and using moused/sysmouse. pcm0 doesn't register any data from the button and moused disables all three buttons on the row. Using moused in debug mode doesn't show any events when the blue mouse button is clicked, but the other buttons seem to work. Does anyone else have this working?

Ninja Rope
Oct 22, 2005

Wee.

Sergeant Hobo posted:

I seem to be having trouble with a NFS mount between my FreeBSD server and my Ubuntu laptop.

A couple of NFS notes:

1) Your user UID and GID should be the same on both machines. Run "id" as you on both machines and make sure the UID and GID on each are the same. If they're not, NFS will think you are someone you're not, and this can cause permission errors. There are a few ways to work around this, if this is the cause of the problem.

2) For security reasons, the root account is treated specially over NFS and is mapped (usually) to "nobody", or another service account, which usually has read-only access across the filesystem. If you're logged in as root on the Ubuntu machine, this could be part of the problem. Try not to use root over NFS, but if you must, you can use the maproot command in exports to tell the server that when a client tries to access a file as root, it should treat that as if a different local user were accessing the file. You can use -maproot=root to disable this feature.

Ninja Rope
Oct 22, 2005

Wee.

complex posted:

According to http://www.cs.ucr.edu/~trep/tsrT40freebsd.html you should try disabling the touchpad in the BIOS. :confused:

Thanks! I tried this and it does actually work, but it also disables the touchpad. :(

I seem to remember being able to get both the touchpad and the nipple mouse working at the same time in windows, yes?

Ninja Rope
Oct 22, 2005

Wee.

Sergeant Hobo posted:

1) It would appear that the UID and GID on my FreeBSD machine is 1003 whereas it's 1000 on my Ubuntu laptop. So that appears to be a start to fixing the problem. But I'm not entirely sure on how to change those values. Off to :google: I suppose.

2) Would invoking the mount via sudo cause a problem like this? Believe me, I don't want to use the root user over NFS if I don't have to. I'll look into the maproot exports option just in case though. Thanks.

Changing UIDs and GIDs is kind of complicated, but is the best method I know of for resolving this problem. If someone has a better one, do tell. You can use the "id" command followed by a number to find out which UIDs are in use and which are not. Check and see if UID 1000 is free on your BSD server or if 1003 is free on your linux machine.

If it's free on the linux machine, change it there. Otherwise change it on the BSD machine. If both are free, change it on the box with the least files/stuff running on it.

To change a UID on freebsd you should log in in single user mode and run "chpass <user>". You get a little editor/UI where you can change the UID and save. Once that's done, you have to "chown -R <user> ~/<user>" so the user can access all of their files. Once complete, you can reboot and log in as that user. Usually.

Pavol Paska posted:

There's no real need to follow STABLE unless you want some cutting-edge feature for the base system, just stick with the latest errata release and get the newest port tree.

CURRENT contains all of the newest features, STABLE contains bug and security fixes, but also new features as once they are considered stable. You can also track the stable branch for your release, eg, RELENG_7_0, for just critical fixes and no new features.

I generally rebuild world+kernel on a new box, to get it up to STABLE and then leave it alone until I have a reason to upgrade it again (eg, affected by a security issue, need a new feature, etc). I don't see any significant changes to STABLE from RELEASE for 7.0.

Ninja Rope
Oct 22, 2005

Wee.
It's a non-issue if you know about it ahead of time, since you can specify the UID when you create the user, you probably just never noticed the option. Most companies have a master passwd file with all users and their unique UIDs, and each machine that is rolled out just pulls from that file.

If you had installed the same OS on both machines, it is likely they would have picked the same UID, but not guaranteed. By default, UIDs are allocated in order, and some packages (apache, bind, etc) will add users on their own. Generally, users added by packages get UIDs of < 1000, but it's hard to predict which UIDs will be allocated by users created by default by the OS, by packages installed, or by the user herself.

If the GIDs are incorrect you may need to do similar for the GIDs, but I don't know of any way of changing the GID of a group other than by editing /etc/groups. However, you can set the UID and GID at the same time when you do "chmod -R user:usersgroup ~user" at the end to save time.

You can probably get by by not changing the GIDs to match, but it may be helpful to change them for simplicity. Keep in mind that if your user is not in the Wheel group on BSD, he will not be able to run "su".

Make sure there are no user processes running when you change the UIDs or things will get very confused very fast. Good luck!

Ninja Rope
Oct 22, 2005

Wee.
I think pf is a lot easier to configure. It also has several powerful options missing from ipfw, and pf is considered "the future". As far as I know, the only feature available in ipfw that is not in pf is divert sockets, where as pf adds built in bandwidth throttling, built in NAT, the "scrub" command, etc.

Either would work fine, but I would start with pf if I were you.

Ninja Rope
Oct 22, 2005

Wee.
Any reason you don't want to use pkg_add -r ?

If you've got the build files still in /usr/ports/whatever, I believe you can use "make package" to create a package you can install with pkg_add. I don't have a copy of the ports tree handy so I can't look up the exact command.

Edit: I also use rootbsd, but I haven't really done anything with it yet.

Ninja Rope
Oct 22, 2005

Wee.
I've got a VIA C7 on a janky Jetway board that panics in FBSD 6.2 and 8.1 when powerd tries to throttle the CPU. It's using ACPI but I think it crashed when I ran without ACPI too. Regardless, where would I start to debug this? Do I need to start debugging AML or is there a more sane way of resolving this?

Ninja Rope
Oct 22, 2005

Wee.
Out of curiosity, what does that server think its hostname is? What's in /etc/hosts ?

Ninja Rope
Oct 22, 2005

Wee.
ifconfig ath0 up?

I'd forget about the fn key and whatever lights on the keyboard. Go with what ifconfig and dmesg tell you.

Ninja Rope
Oct 22, 2005

Wee.
Can't you cron something like:

ping -c 3 4.2.2.2 || route del default gw && route add default gw x.x.x.252

Obviously you should check the flags to all of that and include some way of failing back if the old gateway comes back up, but you get the idea. Shell script + ping + route command.

Edit: Or build ifstated, whatever that is, or run a routing protocol between you and the gateways, or...

Ninja Rope
Oct 22, 2005

Wee.
It should pick up where it left off, give or take.

Ninja Rope
Oct 22, 2005

Wee.
It looks like you also have a path incorrect, but you obscured so much I can't tell.

Ninja Rope
Oct 22, 2005

Wee.

Nystral posted:

However running the below command just works :(
rsync -az -e "ssh -i /home/nystral/cron/private-key" nystral@108.x.x.x:~/backup /mnt/NFS/backup

Anyone have a good resource on writing bash scripts?

Would the script be running as a different user - ie as the deamon cron vs as the user executing the command?

What if you do it without the tilde (~) in the path? Put in the whole absolute path instead.

Ninja Rope
Oct 22, 2005

Wee.
All of those firewall rules are allows. If you're not currently running pf (or another firewall) you don't need to change anything.

The pf docs say it defaults to passing all traffic, so you could enable pf and add those rules, but it wouldn't have any effect.

Also, you might want to look into openvpn. The client config is a little more complicated (having to set up default routes and some such, there's no automagic for Windows), but it's usually easier to configure on the server/router/firewall level since it runs over UDP.

Ninja Rope
Oct 22, 2005

Wee.
Unlike Linux, though, the man pages are actually useful. There's no "see info page" which says "see http://gnu.org/blah".

There's not too much to worry about except how the boot and init processes work. The rest is similar to linux with a slightly different fs heirarchy and some different apps (automounter, pw, ps and top are slightly different, etc).

You also forgot the FreeBSD handbook, which is probably the best source of info. Feel free to skip sections you don't care about.

Ninja Rope
Oct 22, 2005

Wee.

EvilMoFo posted:

I asked about this at a BSD conference, it is in -CURRENT but not finalized at this moment.

Were you at the conference this weekend?

Ninja Rope
Oct 22, 2005

Wee.
I don't know how to help with your problem, but if you don't need custom compilation flags you can try installing the package. pkg_add -r <whatever you were trying to build>

Ninja Rope
Oct 22, 2005

Wee.
Is it possible to boot a FreeBSD system from a USB stick and have it check for rootkits? I recall there was some tool that would scan installed package MD5's and such, can that be run from a USB stick against the host's attached drive? What other options are there?

Ninja Rope
Oct 22, 2005

Wee.
You did pick a weird time, but I believe packages installed by pkg_add can be managed by pkg and vice versa. If you have a system running well with packages added by one of the tools there's no reason to remove and reinstall with a different tool.

Ninja Rope
Oct 22, 2005

Wee.
csup with the stable-supfile and build/installkernel should get you the new one. Some modules tell you what version they are when you load them.

Ninja Rope
Oct 22, 2005

Wee.
The FreeBSD Handbook covers it well. You probably won't need to update world or change the GENERIC config file, but you do need the csup step to make sure you have the latest stable sources.

Ninja Rope
Oct 22, 2005

Wee.

shrughes posted:

How can they release a system where installing packages doesn't work?

Yep, it's pretty stupid. You should be able to install 9.0 and have everything work as normal.

Ninja Rope
Oct 22, 2005

Wee.
Could you set tinker panic 0 in ntp.conf and then run ntp with -x?

Ninja Rope
Oct 22, 2005

Wee.
Is there any ETA on getting binary packages built for 9.1? Or is the plan to skip it for 9.1 and wait for 9.2? Is this communicated officially somewhere?

Ninja Rope
Oct 22, 2005

Wee.
Check /etc/periodic/security/200.chkmounts. It's basically the output of mount -p from today diffed with /var/log/mount.yesterday (which is the output of mount -p from yesterday).

You can disable the check completely by setting daily_status_security_chkmounts_enable="NO" in /etc/periodic.conf.local

Ninja Rope
Oct 22, 2005

Wee.
The BSD used by big companies isn't usually the same thing that goes to the public, usually it's cherry picked patches and fixes. Plus their hardware is very specific and supported in-house, so there are a lot of parts of the system they won't use. It's not that simple.

Ninja Rope
Oct 22, 2005

Wee.
Yes, but my point is that those companies aren't just downloading 10-BETA2 and putting it on production servers and calling it a day. They have FreeBSD committers on staff to work cherry-pick patches and test only specific configs, as well as fix bugs as they occur (and feed them back upstream). I didn't understand the question to be "is FreeBSD suitable for production", which in a general sense it is, but "is the latest FreeBSD 10 beta suitable for a random internet user to use in production", which I think the answer is no. It will be, but it's not right now.

Ninja Rope
Oct 22, 2005

Wee.
Has anyone done virtualization on FreeBSD? Are kquemu and virtualbox the only/best options? Anyone have any experiences to share? Are they both terrible and I should wait for bhyve?

Ninja Rope
Oct 22, 2005

Wee.
Are all pkgng packages now signed, or does that come later?

Ninja Rope
Oct 22, 2005

Wee.
I haven't done this in a while, but last time I tried it was a bit confusing so I figure I'll ask again now that 10/pkgng are out: what's the best way to install Apache HTTPD + mod_ssl + mod_perl?

Ninja Rope
Oct 22, 2005

Wee.

evol262 posted:

pycrypto is using terrible/dangerous bindings.
Those bindings are calling out to a native C library.

Unrelated, but what is a better python openssl API wrapper to use/why is that terrible?

Ninja Rope
Oct 22, 2005

Wee.
What's the best way to update openssl on a freebsd 10 machine with a custom kernel? I can't use freebsd-update because the kernel is 10-stable. The machine is not powerful enough to rebuild kernel and world in a reasonable amount of time. Is my only option to rebuild world on another machine and then overwrite everything over the existing system?

Ninja Rope
Oct 22, 2005

Wee.

JamesOff posted:

Do you need to rebuild world or will just /usr/src/usr.bin/openssl or similar do?

It seems like everything I care about is linked against /usr/lib/libssl.7 and /usr/lib/libcrypto.7. Even if I rebuild openssl or install from pkg it installs /usr/local/lib/libssl.8 and /usr/local/lib/libssl.8 and I'm hesitant to assume .7 and .8 are compatible.

Ninja Rope
Oct 22, 2005

Wee.

feld posted:

The instructions highly recommend you rebuild the entire world

That's the conclusion I came to also. I ended up mounting actual disks via NFS and then just letting the thing rebuild world and kernel over a few days. It didn't occur to me I could do the build on a different machine and installworld on this one but I'll remember that for next time, thank you.

If only the stock FreeBSD kernel had ALTQ enabled I could use the binary updates. Why is that not enabled by default?

Adbot
ADBOT LOVES YOU

Ninja Rope
Oct 22, 2005

Wee.
How's the current maintainer of FreeBSD's pf doing? Is he able to keep up or does he need help?

  • Locked thread