00:08:48 The reality is that most folks are coming to ask for features from these because some app wants it, so that's always the lens to remember. I don't think anyone is going to be trying to pass a conformance test. 07:04:42 Hi to all, I'm moving my first steps with IlumOS distributions, and I'm banging my head around to find how to import a root CA certificate into OmniOS CA bundle... anyone here can kindly point me to the right direction? :) 08:10:10 warden: I could tell you how to do it on OpenIndiana since I wrote the responsible script ;) 08:12:09 you could check for a SMF service called ca-certificates (svcs ca-certificates) and it it exists, put you new root ca in PEM format into /etc/certs/CA and run svcadm refresh ca-certificates 08:17:54 Agnar: thanks, I already searched for it, but no service like this seems to exist in OmniOS :( 08:18:57 they should adopt it ;) 08:19:01 sorry... 08:19:09 have you checked their website? 08:19:17 You are right!:) I guess the bundled CA list in OmniOS is under /etc/ssl , but I didn't find any documentation about that 08:19:25 or just find /etc -name \*.pem 08:19:54 and the bundle of course, ca-certificates.crt 08:19:55 putting my CA pem file into /etc/ssl/certs didn't seem to work 08:20:47 well, I'll go on with a trial-and-error process... :) 08:20:52 your tools might read the bundle file, so you need to append it there also 08:23:16 actually my wish is to make integrated wget and curl binaries to work without the "-k" workaround 08:24:25 Agnar: I'll go on trying to mangle further into /etc/ssl contents. Thanks for your suggestion. 08:25:55 warden what version of OmniOS are you running? I can help once I am back at a proper keyboard but I am surprised you need to use "-k" if it's a public web server. Perhaps omnios is missing some certificate updates and we should get that fixed. 08:30:50 andyf: thank, but the bundled CA list is ok as for me, I'm only trying to add my private root CA into it 08:32:27 We should definitely do something to make that easier! I think you need to put the certificate into `/etc/ssl/certs` with a name ending in `.pem`, and then run `c_rehash -v /etc/ssl/certs` 08:37:43 andyf: why not adopt OIs service, it simulates the behaviour of solaris 11.3... 08:39:09 andyf: https://github.com/OpenIndiana/oi-userland/tree/oi/hipster/components/openindiana/smf-cacert 08:40:27 andyf: and https://github.com/openindiana/smf-cacert 08:43:01 andyf: thank you so much, I launched the 'c_rehash' and it worked! 08:49:01 when you put certificate into /etc/ssl/cert, you most probablt also need c_rehash or such 09:43:17 Agnar - thanks, looks useful! 11:22:25 I'm following https://illumos.org/docs/contributing/gerrit/, but I fail on the step to scp the hook script: scp olafbohlen⊙cio:hooks/commit-msg .git/hooks/ # subsystem request failed on channel 0 11:24:18 Try adding `-O` to scp 11:28:40 ah right 11:28:48 switched to sftp 11:29:04 thanks for returning a favor :) 11:39:57 yay, that worked. the gerrit doc is phantastic btw, 11:40:11 very very clear instructions, a great example 11:41:06 so, if someone wants to review a 6lines code removal in emlxs_solaris.c: https://code.illumos.org/c/illumos-gate/+/3415 ;) 11:41:07 → CODE REVIEW 3415: 16459 want emlxs to support Oracle branded LP adapters (NEW) | https://www.illumos.org/issues/16459 12:34:00 so I see it correctly that I now git commit --amend, add reviewers to the commit message and then prepare the RTI? 12:38:20 That sounds right. Some people also push again to gerrit and some others even set the integration ready bit, but it just generates more emails to people who are copied on it. 12:39:04 okies. 12:40:04 I'll re-run the built tonight, my previous built unfortunately contained mofifications somewhere else in the tree which I forgot to branch correctly, so I'll rebuilt to get a clean mail_msg 12:40:46 At some point in the future we can hopefully integrate through gerrit directly in which case the IA flag becomes useful. 12:43:08 ok, good to know 12:43:37 it's phantastic how pain can motivate you to learn about code contribution ;) 12:46:33 It's always great when somebody goes through the process for the first time too. It helps make sure the documentation is up to snuff. 12:47:12 andyf: I went through gerrit the first time, other contributions are already 7y ago :/ 12:47:22 too much paid work to do 12:55:33 I use --amend mostly, and sometimes --author and --date is useful too;) 13:03:19 tsoome_: I actually looked at one of your commits for a template ;) 13:03:30 ouch:) 13:11:51 [illumos-gate] 16461 Introduce sequence to clear Branch History Buffer (BHB) -- Dan McDonald 13:20:10 Hey, How can I use TSO/LRO in illumos? "dladm show-linkprop" doesn't show so much. 13:25:34 Is it supported in illumos? 13:41:00 if the driver supports iit, it should show up on dladm show-linprop -p lro 13:41:40 at least for e1000g and ixgbe it seems not to be supported 13:45:08 So it looks like i40e doesn't support it at all? 13:46:44 The man pages list the supported features fwiw - https://illumos.org/man/4D/i40e 13:47:25 I don't know how much is plumbed up to dladm today. 13:47:32 seems i40e has LSO but not TSP/LRO 13:48:11 also, I have seen a lot of issues in the past with TSO on other operating systems btw... 13:48:15 and LSO is on by default 14:00:11 i'm not sure it's a dladm property and might just be a driver.conf property 14:00:24 but yeah, i believe it's enabled by default 14:00:43 I also don't believe the i40e hardware itself supports LRO 14:01:03 (though in general any hardware that does support LRO is going to have it disabled by default) 14:08:27 ok, git pbchk fails for me with: b"fatal: ambiguous argument 'origin/master..': unknown revision or path not in the working tree.\nUse '--' to separate paths from revisions, like this:\n'git [...] -- [...]'\n" 14:08:54 I guess I'm missing arguments, however https://illumos.org/docs/contributing/ doesn't specify anything precisly 14:11:09 If pbchk can't find the parent commit, you can specify what you're comparing against as the last argument. 14:11:20 So if you just have one commit, something like `git pbchk -p HEAD~` works 14:11:33 ah, it needs the previous commit 14:11:45 but usually you point it at the master branch from illumos-gate - in your case it's not finding origin/master which is usually where I'd expect it to be. 14:12:31 and what does it mean with: only complete workspaces may be pbchk'd 14:13:54 Looking at the code, you have an extra parameter at the end of the line that it doesn't like 14:14:24 which it's interpreting as [path...] and you can't specify paths with pbchk 14:15:06 hmm, where exactly? 14:15:17 What was your command? 14:15:29 git pbchk master 14:15:36 You missed the `-p` 14:15:41 git pbchk -p master 14:15:41 oh, me stupid 14:15:46 so it thought master was a filename 14:16:02 now it works :) 14:16:15 How bad was that file? :) 14:17:24 just missing copyright, but I will not put my copyright in it for deleting 6 lines ;) 14:18:44 Ah nice. Sometimes you make a small change like that and pbchk shows you things from everywhere else in the file (I think fixing most of them is optional but encouraged). 14:19:27 ah, yeah. 14:20:20 no, nothing - I send my mail to advocates 14:20:24 have 14:31:26 andyf: "dladm show-linkprop i40e5|grep lso" doesn't show anything. Or it is not supposed to be set on/off? 14:33:40 LSO is not managed via dladm 14:34:45 Yea, LSO is managed through the driver conf file (i40e.conf). And it's enabled by default unless you set tx_lso_enable to 0. 14:35:35 (That should probably be a private dladm(8) attribute using the private _ convention.) 14:35:46 (Unless it's something that can only be enabled/disabled at attach time.) 14:36:13 Good. The rest question is how to check whether it works or not ;) 14:38:11 vetal: One way to check is to use dtrace to see if `i40e_lso_chain()` is being called. 14:39:53 i _think_ it could probably be made a private dladm property (which means it doesn't show up unless you explicitly ask for it) 14:40:09 and remember that LSO doesn't really kick in if the application isn't trying to send large buffers 14:41:37 it looks like really just needs to be set/unset before m_start() is called 14:42:14 For the dladm prop you'll have to think about quiescence and how to deal with outstanding LSO mblks coming from userland. Though we do have generic LSO emulation code now, so that could help. 14:42:19 (it looks like mac will call m_getcapab to get LSO parameters after the instance is started, so you'd not want to toggle after it's started) 14:44:37 Agnar - the RTI message looks good to me but your mail_msg shows some build errors - possibly something around perl. 14:44:45 One thing rmustacc and I have talked about in years past is just saying _everything_ supports stuff like checksum offload and LSO. Then, if the driver doesn't actually support those features, you rectify it with emulation code just before handing the mblk off to the driver. If that were our world than I imagine we could just expose a standard dladm option in the case that we do want to turn those features off. 14:46:27 andyf: yes, a lot of perl. let me correct the perl patch and rebuild 14:50:39 I forgot to set the correct perl path 14:50:42 :/ 14:59:10 I think it's safe to say that we've all done it! 14:59:19 Either perl or python anyway.. 14:59:29 perl and python version problems are like 97% of all my build failures 15:00:17 it must be the p 15:00:34 perl...python...php...penguins... ;) 15:19:08 [illumos-gate] 16460 dmu_zfetch_stream_fini leaks refcount -- Andy Fiddaman 16:49:43 is there a way to see the various tcp socket options of a socket belonging to an arbitrary process (at least without a lot of mdb spelunking)? 16:54:52 pfiles? 17:06:06 ahh.. actually that does show what i wanted (once I fould find the actual fd amongst the noise :P) 17:06:54 trying to diagnose glacial zfs send perf, so trying to look at each piece along the way 17:55:47 oh wonderful, took 20s to remove 6 lines from a c file, now finding obscure perl bugs during build :) 18:16:07 make sure the version in your env file matches what's on the system 18:16:15 they don't always get updated when distros bump perl versions 18:16:58 that's usually what bites me, then i get upset for myself for having wasted 1-4 hours 18:17:02 err at myself 18:17:22 which should probably motivate me to update my 'theperlthe' branch :) 19:55:15 rzezeski: It looks like it should be improved somehow. For the instance Solaris has ability to modify LRO value via 'dladm set-linkprop'. 20:02:50 rzezeski: As I checked i40e_lso_chain() is called for output traffic. Is it possible to verify LRO is used for received traffic ? 20:10:06 AFAIK i40e doesn't support LRO.. as in the actual hardware itself doesn't support it 20:10:20 just send 20:10:57 which is kinda surprising consider how much kitchen sink stuff it does have :) 20:43:19 [illumos-gate] 16464 Typo in i40e(4D) -- Andy Fiddaman 20:43:19 [illumos-gate] 16463 zfs_ioc_recv leaks nvlist -- Andy Fiddaman 20:54:46 I've thought about writing up an ipd around better dynamic control of those properties and the resulting GLD APIs we'd want. 20:55:57 vetal: As jbk mentioned, the 700-series parts do not support hardware LRO. 20:56:22 And I think we want to use the software LRO stuff we prototyped anyways as that simplifies a lot of the driver chicanery involved. 20:56:38 As then you have internal timers that it's using to decide when to merge and having to figure out how to get up to 64 KiB buffers consumed. 20:57:30 Yes, it seems better if we just had a generic LRO feature in mac that all drivers can take advantage of.