-
ultramage
hi, I'm repeatedly having trouble compiling mysql80-server, it's getting stuck on storage/innobase/pars/pars0pars.cc for 3+ hours
-
ultramage
here's the info I have so far -
bsd.to/s8uE . it used to build on 13.0, unforunately I had an issue updating the ports tree for a long time, so there's a 2 year gap
-
VimDiesel
Title: dpaste/s8uE (Plain Text)
-
rtprio
ultramage: all the cool kids use mariadb now
-
rtprio
are you saying you're trying to build a port that's two years old?
-
ultramage
rtprio: no I mean my last successful build was 2 years ago, because after that I was stuck not being to update for a long time. And when I finally did, I found out that the thing wouldn't build
-
ultramage
I was suggested to attach a sampling profiler to the stuck process to see what it's doing, but I don't know how (and not sure if buildworld saves debug symbols)
-
Remilia
going to check if it really hangs
-
ultramage
one thing I could try is building the older mysql to see if it might be related to a src change on their end. Another would be to install latest llvm from ports, since freebsd's is 2.5 years out of date.
-
ultramage
I took the full commandline and tried building just that one file with -O0 into /tmp, but it got stuck the same way.
-
ultramage
finally, this is a ~2010 intel atom cpu running a single-core process. It's been running for 4 hours now whereas all other files compile within 30 seconds. I could try letting it run for 24 hours to see if maybe it'll eventually grind through whatever loop it's stuck on. Although maybe it'll never finish
-
ultramage
I just had a deja-vu moment. I know I investigated it 3 months ago when it first started happening. I believe I did thoroughly debug it with gdb and found that it's stuck in a register allocation loop, flipflopping between two states
-
Remilia
ultramage: so far it is building fine for me but
-
ultramage
yea I assume it's not a general issue, otehrwise a lot of people would complain
-
Remilia
[ 62%] Building CXX object storage/innobase/CMakeFiles/innobase.dir/pars/pars0pars.cc.o / [ 62%] Building CXX object storage/innobase/CMakeFiles/innobase.dir/pars/pars0sym.cc.o was a long while ago
-
Remilia
it is at 94% now
-
Remilia
-
ultramage
if it processed that file and produced its .o then it's fine
-
Remilia
do note I have innobase linked statically
-
ultramage
I have taken that stuck job's commandline, added -emit-llvm, and then tried a simple clang -c -O0 file.bc and it worked. However when I use -O1 it gets stuck.
-
Remilia
maybe it is something about the instruction set
-
ultramage
2 months ago when I first investigated with gdb, I found that it's looping in runOnMachineFunction -> allocatePhysRegs -> selectOrSplit -> selectOrSplitImpl -> tryLastChanceRecoloring -> ..., there is an enqueue() - dequeue() loop and in my case it's just repeating the same two steps
-
Remilia
why do you use mysql by the way? proprietary software that demands mysql/percona specifically?
-
ultramage
so the way their code is constructed there, there is an input on which this loop never terminates
-
ultramage
it's just the only thing I'm familiar with, and this php thing is built with mysql in mind (it does use pdo, but idk how independent it is)
-
Remilia
[01:22:34] [01] [01:10:36] Finished databases/mysql80-server | mysql80-server-8.0.32: Success
-
ultramage
thx
-
Remilia
this was a single threaded run inside Hyper-V on an AMD 3700X
-
ultramage
do you happen to know how to force cc into targeting a specific architecture?
-
ultramage
I would like to try a i386 build
-
Remilia
cross-compiling ports is possible but I really suggest you do not use the ports tree itself for that
-
Remilia
you are using ports, right?
-
Remilia
not anything more complex
-
ultramage
oh right the thing in base is only built for my arch
-
Remilia
use poudriere
-
Remilia
it might even be that it will build fine in poudriere for your arch
-
ultramage
-march gives me a wide selection of 64bit cpus. I tried 'sapphirerapids' which is the latest intel cpu, but it got stuck there too
-
ultramage
well freebsd 13.1's base llvm is 13.0, from 2021 ... it's 2 major versions behind. I imagine that if I installed devel/llvm latest then it would build. that's my next go-to
-
ultramage
my alternative is to build the sql parser with -O0 lmao
-
Remilia
poudriere uses base llvm
-
Remilia
my build above is 13.1, with llvm 13
-
Remilia
> if I installed devel/llvm latest
-
Remilia
I do not think ports will use that
-
Remilia
you would have to override
-
Remilia
in any case, consider poudriere, it is extremely convenient and gives you a binary package repo
-
ultramage
well yea
-
ultramage
I build from source because I have stupid obsessive requirements, like minimizing dependencies
-
Remilia
poudriere builds from source
-
Remilia
-
VimDiesel
Title: Poudriere bulk results
-
ultramage
hmhm but then what would be the point? you mean I should set up a standalone build server, and get packages from there?
-
Remilia
you can set it up on the same system
-
Remilia
it runs build jobs in clean jails
-
Remilia
and you get .pkg files you can instantly upgrade to
-
ultramage
I don't think there would be any benefit over just portmaster local src build
-
Remilia
there is also synth as an alternative
-
ultramage
it's not a build framework issue, it's an internal defect in llvm
-
ultramage
that apparently only manifests on my potato atom router box
-
Remilia
there is a huge benefit: the jails are *clean* images of a given FreeBSD version with no extra libs etc.
-
ultramage
I'm pretty sure it has something to do with the architecture, since the problematic place is physical register allocation using a graph coloring heuristic
-
Remilia
my router box is a Jaguar and I would never build ports there :D
-
Remilia
which is why I have poudriere on my desktop PC building packages for the router and the server
-
ultramage
ah yea but I don't want clean default freebsd-pkg builds. I flip all sorts of toggles in the ports tree
-
Remilia
anyway
-
Remilia
uhh
-
Remilia
who prevents you from doing that?
-
Remilia
isn't there `poudriere options`_
-
Remilia
?
-
ultramage
ah okay so I would customize the package repo to my needs. but then I ask again, what is the point, over just building them locally in /
-
Remilia
I use poudriere precisely because it lets me build multiple package repos with different options etc.
-
Remilia
the point is pkg upgrade is near instantaneous
-
ultramage
the host still has to spend 8 hours building the packages, that's just an extra step. unless I set up a separate build host that is faster.
-
Remilia
imagine running a portmaster-based upgrade for something that depends on mysql
-
Remilia
that something might be a daemon
-
Remilia
that forks at times, like php-fpm
-
Remilia
during the local build you can happen upon long periods of missing libraries
-
Remilia
it is why I switched to poudriere in 2009
-
Remilia
it gets worse if the build fails
-
ultramage
ah I see. well, in my case that's not a requirement, temporary malfunction is fine. That was a good example though.
-
Remilia
plus you can build on a fast system?
-
ultramage
in my case it's mt worker mode so nothing ever forks, and I just restart the whole thing after the build is done
-
Remilia
my router is "CPU: AMD GX-412TC SOC (998.16-MHz K8-class CPU)"
-
Remilia
with 4 GB RAM and a 32 GB mSATA SSD
-
Remilia
can you imagine building llvm for postgres on that
-
Remilia
or Rust, for py-cryptography
-
ultramage
building on a separate host would be nice, but I don't have any, plus the extra complexity of a second freebsd instance would not be worth it for just one router box
-
yuripv
i have a vm for that
-
Remilia
^
-
Remilia
my desktop PC is Windows and poudriere is a Hyper-V VM
-
ultramage
this thing has 2 atom HT cores at 1.8ghz max I think, with 4 gb ram. it isn't that bad. buildworld takes around 16 hours I think.
-
Remilia
it gets 8 virtual cores and 8-16 GB RAM on this 3700X
-
Remilia
I buildworld for the router in the poudriere VM too haha
-
Remilia
well, I no longer do
-
Remilia
but back when I still did buildworld and not just buildkernel, it took like 30-40 minutes
-
ultramage
a dedicated build system would defo make sense if you're dealing with more than 1 freebsd host
-
Remilia
it makes sense when your router is slow or when your server is a production system where extra build load would affect users
-
Remilia
if I tried building ports on this router I think I would be unable to use youtube
-
ultramage
ah that is interesting. never ran into issues with this thing, even when all ht cores are busy building something, it still moves packets around just as fine
-
Remilia
anyway, one of the biggest advantages of poudriere is that you build in a clean system without any noise
-
ultramage
(kernel networking proably runs at a higher priority than userland processes)
-
Remilia
which you cannot guarantee in your built-world case
-
ultramage
I would be worried if the VM got the target architecture right. even in this OS the compiler sometimes has trouble deciding. So I leave it at 'native', and let it figure it out.
-
Remilia
huh.
-
Remilia
that is really weird
-
Remilia
I never ever had problems like that
-
Remilia
the only case where I had issues was when I was over-eager with port options and built something like ffmpeg? I think? with 'optimise for this platform'
-
Remilia
and AMD Ryzen is very different from AMD Jaguar
-
Remilia
if your Atom system is x86 rather than x86_64, you just make an x86 poudriere jail
-
mystic
hello guys, can I remove /usr/src ? I don't use ports, only packages and I need of space..
-
ultramage
Question. When a port's configure script seffaults and coredumps, it is logged into /var/log/messages, creating log noise.
-
otis
mystic: yes, you can remove /usr/src and /usr/ports
-
mystic
otis: thanks :)
-
ultramage
I have found libtool, gdb, screen and bind generating these events. I have debugged libtool's configure script, it happens when testing "checking whether a statically linked program can dlopen itself". It fails during puts() inside jemalloc's tsd.h tsd_state_get(), with "Address not mapped to object.". Is this an okay thing to be happening? If configure scripts are expected to coredump, shouldn't the
-
ultramage
messages be silenced?
-
dch
huh, bifrost27:/# dd if=img of=/dev/nvme0n1 conv=sync bs=1M
-
dch
I just dd'd FreeBSD over an alpine / boot device and rebooted ... into alpine again? wtf
-
V_PauAmma_V
Easy questions first: 1- did you write to the right device/partition? 2- are you sure you're booting that same partition? 3- is that partition still recognized as bootable after you wrote into it? (Thinking of secure booting or similar, which may require you to jump through additional hoops.)
-
ultramage
you did not specify count. iirc in the absence of count, count = 1
-
ultramage
(I don't remember if it's possible to say 'until `if` is consumed')
-
ultramage
actually I might be wrong, since dd manual says nothing about count. I might be mixing it up with some third party dd tool
-
CrtxReavr
debdrup, makes sense (newsyslog.conf(5)). For some reasons I was thinking that particular bit of info was stored elsewhere, given its very short retention.
-
CrtxReavr
In absense of a count, count should be all the counts.
-
CrtxReavr
dch, I've nto worked with nvme drives on FreeBSD. . . what's the n1 portion of the device name?
-
CrtxReavr
Also: file -s /dev/nvme0
-
CrtxReavr
And: file -s /dev/nvme0n1
-
dch
fixed, I just need to dd *all* the drives, turns out they install a non-mirrored alpine to both drives
-
dch
"a bigger hammer required"
-
CrtxReavr
Ball-peen?
-
dch
nvme has namespaces, allowing subdivision of devices, so nvme0n1 is the first "namespace" and nvme0n1p1 a partition within that
-
CrtxReavr
o_O
-
drobban
Hi you all.. having some problem starting xorg. everything worked just fine before I replaced my motherboard and cpu... I guess the problem might be caused by the built-in graphics card some interfering with my nvidia card.
-
CrtxReavr
pciconf -lv
-
drobban
but dont know where to start on how to resolve this.
-
CrtxReavr
(pastebin it)
-
CrtxReavr
You're on the console? Not ssh'd into it?
-
drobban
hold on, need to ssh to my machine then
-
CrtxReavr
No - do this:
-
CrtxReavr
alias tb='ncat termbin.com 9999'
-
CrtxReavr
Then: pciconf -lv | tb
-
CrtxReavr
Then share the URL it prints.
-
drobban
neat trick
-
CrtxReavr
Also. . . ncat is in ports, so you may not have it, you can substitute nc from base.
-
drobban
termbin.com/dzorj
-
drobban
went with netcat, seemed to work
-
CrtxReavr
So you have onboard ATI. . . and your'e trying to use the nVidia 1080 card?
-
CrtxReavr
Using the binary blob driver?
-
drobban
yea, thats right
-
CrtxReavr
IT's loaded?
-
drobban
yupp
-
CrtxReavr
kldstat | tb
-
drobban
all I have done since it worked, is swapping out the motherboard and cpu
-
CrtxReavr
Well, those are not small things to change.
-
drobban
termbin.com/sq59v
-
CrtxReavr
And I assume you're looking at this console through a monitor connected to the nVidia?
-
Remilia
ultramage: you cannot really silence a segfault message
-
drobban
CrtxReavr: yea.. Almost got a disaster on my hands.... computer didnt boot, and I started making things worse and worse last night.
-
drobban
involving thermal paste and bent pins on the motherboard socket
-
drobban
CrtxReavr: you assume correctly
-
drobban
also not remembering in what order my zfs-pool was connect is clearly a thing as well =D
-
drobban
brb
-
CrtxReavr
startx 2>&1 | tb
-
ultramage
Remilia: I'm just wondering why messy configure-releated noise is showing up in the main log like that
-
ultramage
is there a guideline that configure scripts must not segfault / use some sort of trap to silence them?
-
ultramage
I build everything from source and this is the first time I saw stuff like that (that is a lie, logs say that it first appeared in my libtool-2.4.6_1 build on 2021-02-27)
-
drobban
how can i specify primary device in xorg?
-
drobban
aaah, =) now it works.
-
drobban
CrtxReavr: thank you for the help
-
Remilia
ultramage: no, there are no such guidelines and you cannot 'silence' kernel messages arbitrarily
-
Remilia
segfaults during configure stage are normal and expected
-
ultramage
Remilia: I know, it's just that nobody except libtool is having them. so either they were smart enough not to do that, or port maintainers patched around them, or there's a way to write those test cases in a silent way
-
ultramage
on windows I can install an exception handler that just returns, and all segfaults will go off the record
-
ultramage
... setjmp is the equivalent, iirc?
-
Remilia
'nobody' is quite a strong statement
-
Remilia
a segmentation fault is not an exception
-
ultramage
anyways, libtool is testing if it can compile a -static -fPIC shared library as an executable, and then dlopen() on itself. it fails, but on top of that, puts() causes segfault, either due to the process information block getting destabilized, or because the so executable was never ready to invoke libc anyway
-
Remilia
I can say that I get numerous segfaults in /var/log/messages when I build packages in poudriere
-
Remilia
it never really bothered me because it is expecteds
-
Remilia
-s
-
ultramage
oh. in my case, it's just libtool, gdb (probs uses libtool), screen (same?) and bind (same?)
-
Remilia
you could patch the kernel to not emit that message?
-
Remilia
locally
-
Remilia
since you are building world anyway
-
ultramage
no that was just portmaster updating some ports
-
Remilia
I dunno how to explain that what you see in the logs/console is the standard kernel message emitted when a process is killed
-
Remilia
Feb 21 15:06:16 poudriere kernel: pid 25379 (conftest), jid 137, uid 0: exited on signal 11 (core dumped)
-
ultramage
I know, I'm just saying that nutty test cases during compilation of userland software should shut up about these
-
Remilia
userland software is not kernel
-
Remilia
it cannot block kernel messages
-
Remilia
you may want to switch to Windows Server
-
ultramage
I mean, should not be causing those. If apache and php and sshd other good stuff were casually producing 10 of these during build, then I guess I would consider it a common thing
-
ultramage
the fact that nobody but libtool produces untrapped segfaults during every build is really suspicious, and makes me assume that that is not the norm, or, is even actively discouraged
-
Remilia
you are probably the only person bothered by segfaults in dmesg so I doubt this will be 'solved'
-
ultramage
I'm not a port dev, but my observation from the current state is that having your test case segfault (instead of failing to compile, or returning a negative test result) is an anomaly
-
Remilia
2022-03-21_10h18m50s/logs/libmemcached-1.0.18_7.log:checking whether the compiler supports GCC C++ ABI name demangling... Segmentation fault (core dumped)
-
ultramage
=D
-
Remilia
I guess this is libtool?
-
Remilia
we are talking about software written in C
-
Remilia
and autoconf
-
ultramage
that seems like their own configure script log message. was that segfault also logged in /var/log/messages?
-
Remilia
of course.
-
ultramage
hmhm
-
Remilia
do you know what C/C++ have?
-
Remilia
UB. like, loads of UB.
-
Remilia
do you know what autotools are for?
-
Remilia
they let you find out what kinds of UB and other stuff you can expect on the platform you are building for.
-
Remilia
certain kinds of UB and certain approaches result in hard errors like segmentation faults
-
Remilia
that means the test binary crashes with a non-zero return value and the script knows it did not work
-
ultramage
I wonder why perl doesn't generate any. I know its configure script is long as hell
-
Remilia
because it is an interpreter
-
Remilia
it does not need to do black magic
-
ultramage
well, you say that, but php is casually engaging in UB by building all of its dynamic modules with static thread local storage mode (meant for .a files)
-
Remilia
it does not crash so it must be doing it in an acceptable way
-
Remilia
you could likely open an issue with the upstream libtool developers/maintainers?
-
Remilia
'hey guys I do not like that you test something via inducing a segfault, can you stop'
-
ultramage
the freebsd dynamic linker is providing it with a kludge 128-byte buffer to help it run (except 128 is not much room for global variables). linux gives around 2kb.
-
meena
ultramage: php is a waver thin layer on top of C
-
Remilia
no, php is a disaster
-
Remilia
on top of C
-
Remilia
(which is a disaster)
-
meena
that, too
-
meena
every year or so, i reread
eev.ee/blog/2012/04/09/php-a-fractal-of-bad-design and it's fascinating how little has gotten fixed each time
-
VimDiesel
Title: PHP: a fractal of bad design / fuzzy notepad
-
Remilia
Perl is at least an exponential function of bad design
-
ultramage
found logs from 2019 where libtool, libtdl, libmcrypt were doing it. They all have 'conftest', so I assume it's the same piece of code
-
meena
ultramage: is this a production system where you're trying to make sense of logs, and this is generating noise you don't know how to filter, or what is the issue here?
-
ultramage
kinda. I would prefer if these messages were limited to services that are failing at runtime. though this noise is just that, noise - it's easy to spot and skip over, since it only appears in the middle of package operations
-
Remilia
-
VimDiesel
Title: Runtime - Autoconf
-
Remilia
re: conftest
-
debdrup
yuripv: pr 666 on github is going to be a duplicate of
openzfs/zfs #14527 when that gets merged
-
VimDiesel
666 – The ldconfig program in SNAP wasn't good
bugs.freebsd.org/bugzilla/show_bug.cgi?id=666
-
VimDiesel
Title: Add vdevprops.7 to the Makefile by debdrup · Pull Request #14527 · openzfs/zfs · GitHub
-
Remilia
ultramage: if you do not want port build-related messages on your production system, build your ports elsewhere and use built packages
-
ultramage
sort of like microsoft's dcom permission warnings that litter the system log, where ms says they're expected (and they can't be arsed to silence them within the offending software even though iirc the flag is there)
-
Remilia
it is weird to expect the kernel to filter out messages based on arbitrary rules
-
drobban
=)
-
ultramage
nah I wanted the configure script itself to contain the segfaults. It is possible to do by adding a bunch of sigaction code, but that goes against the idea of minimalistic configure test cases. I can't think of anything good. Maybe if `sh` had an operator that trapped all signals coming from child processes?
-
ultramage
that said, in the case of libtool, puts(dlerror()) is completely unnecessary, since the test case just wants the return value from main, and it's the puts() that's causing the fault. So if they ditched those text outputs that nobody reads anyway, that'd do the job
-
ultramage
not sure if it's libtool writing the test case, or if it's some predefined autoconf macro
-
meena
right now, configure's function is built on segfaults of code that doesn't work
-
meena
do what Remilia said and build ports elsewhere
-
ultramage
I'm sure I could obsessively file upstream issue reports, but I'm too burnt out from doing nothing but freebsd maintenance activities for the last 10 hours, in total silence. I'll let this one go for now.
-
meena
what upstream issues?
-
meena
autotools just works that way
-
meena
there's a reason people think it's a blight
-
meena
well, there's actually upwards of 36 reasons
-
ultramage
as I said, I could ask libtool to make their dlopen testing macro not invoke libc string functions and try to print the reason why dlopen failed, instead just return 0 or 1 from main. I assume that would clean up the segfault without any loss in functionality.
-
ultramage
I could ask freebsd kernel devs about why that PoS UB test executable is crashing inside jemalloc, and what it would take (different compiler flags?) to make it execute safely
-
ultramage
I could ask libtool devs why the f they're testing if you can compile a small program as a static library with an elf header, then try to execute it, and then try to dynamic load a copy of itself into the same process space.
-
V_PauAmma_V
IIRC, this isn't the first time I see this config segfault question. I wonder if it should be a FAQ.
-
vext01
so, if i have a vm-bhyve vm and it is using a flat file for its disk image, can i move it to a zfs volume by dding it to the volume?
-
concrete_houses
if I pt 3 usb 3 external drives into zfs 1 pool will the speed be combined speed of the disks?
-
vkarlsen
Combined lack of speed would be my guess :D
-
vext01
concrete_houses: raid 1 will improve read speeds in theory, as long as you don't max out the usb bus
-
vext01
with mirrors, it uses round robin to read from the disks in the mirror
-
concrete_houses
what about write?
-
vext01
as slow as normal, as it has to write the data to all disks in the mirror
-
concrete_houses
say there are 3 disks in the zfs raid 1, will it break the file into small parts put put 1 on 1 2 on 2 3 on 33 and repreat so all sped is used?
-
concrete_houses
no mirror just stripe
-
vext01
when you said zfs 1 i thought you meant raid 1, sorry
-
concrete_houses
0
-
vext01
i've never used stripes
-
vext01
i'd reccommend reading michael lukas' book
-
concrete_houses
whats that
-
vext01
a book on zfs on freebsd
-
concrete_houses
-
VimDiesel
Title: Distributed Control Systems: Their Evaluation and Design (Mechanical Engineering (Marcel Dekker Hardcover)): Lukas, Michael P.: 9780442260200: Amazon.com: Books
-
vext01
not that one
-
vext01
type "zfs" into amazon
-
concrete_houses
in the past I had some problem with disks rearraging on reboot
-
concrete_houses
does taht happen in zfs
-
vext01
as far as i know, not
-
vext01
zfs uses a duid to identify the disks
-
Oleg1
if unxz is not a POSIX utility and my goal is to only use POSIX utilities, what POSIX command can I use to uncompress a file with the .xz extension?
-
zwr
if I were you I'd worry about compatibility with real systems and not with standards. I'm sure someone has ported xz to whatever system you want your program to run on
-
zwr
POSIX has a "compress" command
-
zwr
it doesn't have anything to uncompress xz
-
pertho
hi all quick q... the iwm(4) driver.. does it support 5ghz in FreeBSD 13? And if so, how do I tell it to prefer 5 Ghz over 2.4 GHz?
-
pertho
or should I be usin iwlwifi?
-
pertho
iwm0: <Intel(R) Dual Band Wireless AC 8265>
-
polyex
im learning about jails and it says there's 1 main program the jail runs. but what if i want a jail to have a few daemons not just 1 running, like postgresql nginx and my web app binary?
-
meena
polyex: first of, you get just start rc
-
meena
but, secondly, and more importantly, what's the point of putting them into one jail if you're not separating them?
-
polyex
so i can deploy a self-contained web app that's made of 3 pieces of tech
-
polyex
if i break it into 3 jails then it's just OS level virtualization but not a nicer deployment vehicle like first class containers
-
polyex
am i wrong?
-
polyex
right now i just run these things on a vps, no jails, but i wanna try container style deployment with jails
-
meena
having three different things with vastly different resource demands in one single container is nice for easy deployment, yes, but, uh
-
V_PauAmma_V
The trade off is in ease of sysadmining (1 jail or 3) versus security (less unwanted interactions between them).
-
meena
the tradeoff is: easier deployment vs everything else
-
meena
oh, and migration
-
meena
but, upgrades, resource management, security issues, etc
-
meena
means you have three components down instead of one
-
polyex
i can maybe see wisdom in putting db server in its own jail then web server and app in its own jail. then does web app talk to db server over network like db.mysite.com? (even tho it's on the same host)
-
meena
yes, or you do crimes against security and mount the socket into the other jail
-
polyex
ya i dont wanna do that i think i rather have jails be ignorant of eachother and not assume they're local to eachother
-
polyex
so let's say the web app takes file uploads. i guess i wouldn't store them in the web app jail because then when i deploy a new version it would get overwritten. so how are stateful jails done best?
-
» meena 🤷🏻♀️ in VPN
-
meena
polyex: by giving it storage for state
-
meena
same with DB
-
polyex
that's the path the jail is given in the host FS to live in right?
-
satanist
meena: why is mounting a socket in another jail crimes against security?
-
meena
-
VimDiesel
Title: ⚙ D27411 add altlog_jaillist to syslogd's rc script
-
satanist
yes there are problems, but is the general idee to let two jails talk about a socket in a shared mountpoint a crime against security?
-
meena
satanist: maybe? i don't know… yet
-
jilles
satanist, it may allow colluding jails to escape partially by passing directory file descriptors over the socket
-
polyex
ya i don't want to open any leaks from jail out unless it's through the network or something. so a db jail is given some state to save the db files in, and i guess a web app jail that takes file uploads but should be stateless needs to have another file upload service jail that the web app middles to?
-
satanist
jilles: but to achieve that one jail need a directory fd, if this fd is from outside the jail the problem is the access to the dirfd outside the jail not pasing it over a socket
-
spork_css_
Anyone run into issues with FreeBSD (this is 12.4) install media and older Tyan IP-KVM "virtual media" acting like this?
-
spork_css_
-
rwp
If I saw that I would be thinking the disk drive is failing.
-
spork_css_
I've verified checksums, reset the BIOS to "optimal defaults", tried the mini ISO (which gets closer to working).
-
spork_css_
Yeah, the puzzler is there's no actual disk involved. :)
-
rwp
It's a VM image? Oh.
-
spork_css_
It's an ISO.
-
spork_css_
The IPMI/BMC has full remote access, including the ability to "mount" an ISO as a drive. It appears as a USB CDROM drive (also an option to use a floppy).
-
spork_css_
I'm guessing this Tyan board is so old (2011 or so?), and so uncommon that there's probably some USB quirks FreeBSD needs that nobody ever ran into.
-
rwp
Hmm... I am running VMs in a Linux hosted KVM system, running a 12.4-RELEASE system, and I haven't hit this myself. That's all I know.
-
rtprio
it might need some quirks added to function properly
-
spork_css_
I'm going to try some flavor of linux in a bit and see if the problem persists.
-
spork_css_
It's not a VM, it's real hardware. The only "virtual" thing is the CDROM.
-
debdrup
cd1 is presumably a virtual CD-ROM drive supplied by the OOB BMC? Having it return read errors would, to me, indicate there's something wrong with the OOB BMC chip (which, being one of many completely separate computers in a modern system, is completely non-debuggable).
-
debdrup
I doubt that anything that implements a block device is going to be able to tell you errors like CAM is doing there, because since it's a block device it can't per definition correlate errors with their operations.
-
debdrup
That's... pretty much the biggest reason block devices were removed from FreeBSD. ;)
-
debdrup
Considering that the snapshot also contains a vm_fault, I suspect there are bigger problems afoot.
-
debdrup
snapshot/screenshot
-
debdrup
I don't find it outside the realm of the possibility that the a +10 year old 400MHz ARM9 (or possibly the even older 200MHz FreeScale, which is based on a M68000), which forms the basis of that era of OOB BMCs, would start experiencing severe issues.
-
debdrup
Even if Tyan splurged on Aspeed chip with ECC (which is an option according to the specs), that's not really a guarentee.
-
jilles
satanist, the issue I'm hinting at occurs when nullfs mounting some directory into another jail
-
satanist
jilles: can you be a bit more specific about the issue?
-
jilles
satanist, given jail A and jail B, if one is not an (indirect) child of the other and sends a directory fd to the other, the normal jail restriction doesn't work properly
-
jilles
because it doesn't apply the sender's root to the receiver's use of the fd
-
satanist
ok yes thats clear, but I would say this maybe (depending on the setup) acceptable
-
spork_css_
making a little progress with the Tyan BMC... Wouldn't boot linux either, then the virtual CD just stopped appearing.
-
spork_css_
just rebooted the BMC itself and it boots the same linux image that failed.
-
spork_css_
I wonder if my first attempt of using the normal install ISO was just too much for it - not clear if the image resides in RAM or what.
-
spork_css_
Or a memory leak, or bad RAM in the BMC that only gets tickled after it's been up for awhile...
-
debdrup
spork_css_: generally the virtual CD-ROM drive does a streaming read of a file from the filesystem that it's hosted on
-
debdrup
The OOB BMC is a completely separate system.
-
rtprio
spork_css_: i suspect it's not the motherboard that's the problem
-
debdrup
rtprio: it's not exactly simple to desolder the OOB BMC chip :3
-
rtprio
out of band bmc.. board management controller?
-
spork_css_
Baseboard Management Controller(?)
-
spork_css_
Back to "linux boots, freebsd doesn't" - but the "linux boots" only works until you try the freebsd ISO, then the "linux boots" stops working as well.
-
spork_css_
Of note, the FreeBSD bootonly ISO is around 375MB, the Linux ISO is 170MB. I kind of feel like this is all a little half-assed.
-
spork_css_
This sucker's going into quasi-production, so I guess I'll just keep a little USB stick in it for any future reinstalls - the rest of the BMC features work fine.
-
spork_css_
All academic at this point to some extent, the colo is only about 15 minutes away and I have errands to run anyhow.
-
spork_css_
reflashing the BMC for giggles