From matt at atopia.net  Sun Oct  4 16:53:53 2009
From: matt at atopia.net (Matt Juszczak)
Date: Sun, 4 Oct 2009 16:53:53 -0400 (EDT)
Subject: [nycbug-talk] cron management
In-Reply-To: <20090929180748.GP41655@zaph.org>
References: <alpine.BSF.2.00.0909291305380.30979@pluto.atopia.net>
	<20090929180748.GP41655@zaph.org>
Message-ID: <alpine.BSF.2.00.0910041653380.2325@pluto.atopia.net>

> If your dev team needs to do lots of frequent little changes, then the
> context switching for the person on your team who is responsible for
> merging and pushing out their code may be too high.

Probably not the case unfortunately.  They'd like to be able to make 
changes that are instant.


From brian.gupta at gmail.com  Tue Oct  6 02:20:29 2009
From: brian.gupta at gmail.com (Brian Gupta)
Date: Tue, 6 Oct 2009 02:20:29 -0400
Subject: [nycbug-talk] Cron management
In-Reply-To: <alpine.BSF.2.00.0909291305380.30979@pluto.atopia.net>
References: <alpine.BSF.2.00.0909291305380.30979@pluto.atopia.net>
Message-ID: <5b5090780910052320w1846287cu9c09912473452f86@mail.gmail.com>

If you store your puppet configs in a version control system, you should be
able to use creative commit ACLs to come up with a scheme that will
accomplish what you are trying to do. (I haven't tested this, or had anyone
ask for it but it should be doable, as most SCMs, including SVN and Git
support directory level ACLs.)
- Brian Gupta

New York City user groups calendar:
http://nyc.brandorr.com/



On Tue, Sep 29, 2009 at 1:07 PM, Matt Juszczak <matt at atopia.net> wrote:

> Hi All,
>
> I have a setup that is using puppet for system management/configuration,
> including crons.  It works well, except that many of the devs have
> requested access to add/edit/delete crons (95% of our crons are
> unfortunately for site-related code and DB related tasks).
>
> There are two options I have:
>
> - Give every dev access to our puppet server and access to change puppet
> configuration (not really something I want to do).
>
> - Setup a single cron inside puppet that runs every minute, and then
> somehow setup a "task management system" that can execute multiple tasks
> using that single cron.
>
> Are there such systems as the last one I mentioned, perhaps web and
> mysql/php based, where the dev's could create new "tasks" to run, and a
> single cron running every minute would execute those tasks when needed?
>
> Thanks!
>
> -Matt
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20091006/e2353773/attachment.htm>

From matt at atopia.net  Tue Oct  6 18:30:33 2009
From: matt at atopia.net (Matt Juszczak)
Date: Tue, 6 Oct 2009 18:30:33 -0400 (EDT)
Subject: [nycbug-talk] OT: SVN problem
Message-ID: <alpine.BSF.2.00.0910061827140.15798@pluto.atopia.net>

Hi all,

I'm having a really hard time figuring out an SVN problem that should be 
so simple.  I've been pulling my hair out and thought maybe someone on the 
list would know.

oak$ svn copy trunk branches/stable
A         branches/stable
oak$ svn copy trunk branches/live
A         branches/live
oak$ svn ci -m "recreated stable and live branch"
Adding         branches/live
Sending        branches/live/htdocs/static/js/global.js
Adding         branches/stable
Sending        branches/stable/htdocs/static/js/global.js
Transmitting file data ..
Committed revision 120.


Why is this thing singling out global.js?  These directories are brand new 
- it's doing it even if I do branches/hahahatesting123.

Any ideas anyone?

Thanks!

-Matt


From skreuzer at exit2shell.com  Wed Oct  7 10:57:23 2009
From: skreuzer at exit2shell.com (Steven Kreuzer)
Date: Wed, 7 Oct 2009 10:57:23 -0400
Subject: [nycbug-talk] Portmaster funding proposal
References: <4ACBBCBC.6000700@FreeBSD.org>
Message-ID: <2BEC2215-7583-4B47-9AEE-099CA144C0DD@exit2shell.com>

If you make use of the ports system on FreeBSD, there is a good chance  
you use portmaster to keep everything
up to date.

Doug Barton is looking for funding to add all of the features people  
have been requesting in case anyone is interested
in sponsoring part of the development.

SK

Begin forwarded message:

> From: Doug Barton <dougb at freebsd.org>
> Date: October 6, 2009 5:55:08 PM EDT
> To: freebsd-ports at freebsd.org
> Subject: Portmaster funding proposal
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: RIPEMD160
>
> I am launching an initiative to give the community the opportunity to
> fund further development on portmaster. As much as I love doing this
> work I need to be able to support myself and my family and the kinds
> of features that users have requested (such as package support) will
> take a lot of time to implement correctly.
>
> The URL is here: http://dougbarton.us/portmaster-proposal.html
>
> If you have any interest in funding this project take a look at that
> web page. Of course additional ideas for features are also welcome.
>
> Finally, if you find this message unwelcome or inappropriate please
> accept my apologies.
>
>
> Regards,
>
> Doug
>
> - --
>
>    This .signature sanitized for your protection
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.13 (FreeBSD)
>
> iEYEAREDAAYFAkrLvLwACgkQyIakK9Wy8PsADwCfSHs6zYxPNpz5jvZm3kweo6W9
> cFEAoLXYm4P+uouW5TLOIXnZ1mw/tXTg
> =IIY0
> -----END PGP SIGNATURE-----
> _______________________________________________
> freebsd-ports at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "freebsd-ports-unsubscribe at freebsd.org 
> "

--
Steven Kreuzer
http://www.exit2shell.com/~skreuzer



From chsnyder at gmail.com  Wed Oct  7 15:05:01 2009
From: chsnyder at gmail.com (Chris Snyder)
Date: Wed, 7 Oct 2009 15:05:01 -0400
Subject: [nycbug-talk] OT: SVN problem
In-Reply-To: <alpine.BSF.2.00.0910061827140.15798@pluto.atopia.net>
References: <alpine.BSF.2.00.0910061827140.15798@pluto.atopia.net>
Message-ID: <b76252690910071205o642ec48p22332c654d1c6a44@mail.gmail.com>

On Tue, Oct 6, 2009 at 6:30 PM, Matt Juszczak <matt at atopia.net> wrote:

> Why is this thing singling out global.js? ?These directories are brand new
> - it's doing it even if I do branches/hahahatesting123.
>

Is svn:externals in play here? I usually blame confusing things on that.

svn propget svn:externals


From matt at atopia.net  Wed Oct  7 16:51:04 2009
From: matt at atopia.net (Matt Juszczak)
Date: Wed, 7 Oct 2009 16:51:04 -0400 (EDT)
Subject: [nycbug-talk] OT: SVN problem
In-Reply-To: <b76252690910071205o642ec48p22332c654d1c6a44@mail.gmail.com>
References: <alpine.BSF.2.00.0910061827140.15798@pluto.atopia.net>
	<b76252690910071205o642ec48p22332c654d1c6a44@mail.gmail.com>
Message-ID: <alpine.BSF.2.00.0910071650590.67686@pluto.atopia.net>

> svn propget svn:externals

oak$ svn propget svn:externals
oak$


Nope =(


From lists at zaunere.com  Wed Oct  7 17:32:45 2009
From: lists at zaunere.com (Hans Zaunere)
Date: Wed, 7 Oct 2009 17:32:45 -0400
Subject: [nycbug-talk] OT: SVN problem
In-Reply-To: <alpine.BSF.2.00.0910061827140.15798@pluto.atopia.net>
References: <alpine.BSF.2.00.0910061827140.15798@pluto.atopia.net>
Message-ID: <0a2101ca4795$b569f600$203de200$@com>

Hi,

> I'm having a really hard time figuring out an SVN problem that should be
> so simple.  I've been pulling my hair out and thought maybe someone on the
> list would know.
> 
> oak$ svn copy trunk branches/stable
> A         branches/stable
> oak$ svn copy trunk branches/live
> A         branches/live
> oak$ svn ci -m "recreated stable and live branch"
> Adding         branches/live
> Sending        branches/live/htdocs/static/js/global.js
> Adding         branches/stable
> Sending        branches/stable/htdocs/static/js/global.js
> Transmitting file data ..
> Committed revision 120.

While it might be annoying, it's probably not really doing anything bad.
Best way to confirm is to check out the new branch and then just diff the
old file and new file...

> Why is this thing singling out global.js?  These directories are brand new
> - it's doing it even if I do branches/hahahatesting123.

Could be something like line ending munging or some other type of munge?

http://svnbook.red-bean.com/en/1.4/svn.advanced.props.file-portability.html

H




From matt at atopia.net  Wed Oct  7 18:06:08 2009
From: matt at atopia.net (Matt Juszczak)
Date: Wed, 7 Oct 2009 18:06:08 -0400 (EDT)
Subject: [nycbug-talk] OT: SVN problem
In-Reply-To: <0a2101ca4795$b569f600$203de200$@com>
References: <alpine.BSF.2.00.0910061827140.15798@pluto.atopia.net>
	<0a2101ca4795$b569f600$203de200$@com>
Message-ID: <alpine.BSF.2.00.0910071805530.70331@pluto.atopia.net>

> While it might be annoying, it's probably not really doing anything bad.
> Best way to confirm is to check out the new branch and then just diff the
> old file and new file...

I do.  diff returns nothing.  Which makes me wonder why it says there are 
changes.


From jkeen at verizon.net  Wed Oct  7 20:07:57 2009
From: jkeen at verizon.net (James E Keenan)
Date: Wed, 07 Oct 2009 20:07:57 -0400
Subject: [nycbug-talk] OT: SVN problem
In-Reply-To: <mailman.5.1254931205.29796.talk@lists.nycbug.org>
References: <mailman.5.1254931205.29796.talk@lists.nycbug.org>
Message-ID: <FD1FEB9B-0199-45EF-9EFF-E215B4322D3B@verizon.net>


On Oct 7, 2009, at 12:00 PM, talk-request at lists.nycbug.org wrote:

> Date: Tue, 6 Oct 2009 18:30:33 -0400 (EDT)
> From: Matt Juszczak <matt at atopia.net>
> Subject: [nycbug-talk] OT: SVN problem
>
> I'm having a really hard time figuring out an SVN problem that  
> should be
> so simple.  I've been pulling my hair out and thought maybe someone  
> on the
> list would know.
>
> oak$ svn copy trunk branches/stable
> A         branches/stable
> oak$ svn copy trunk branches/live
> A         branches/live
> oak$ svn ci -m "recreated stable and live branch"
> Adding         branches/live
> Sending        branches/live/htdocs/static/js/global.js
> Adding         branches/stable
> Sending        branches/stable/htdocs/static/js/global.js
> Transmitting file data ..
> Committed revision 120.
>
>
> Why is this thing singling out global.js?  These directories are  
> brand new
> - it's doing it even if I do branches/hahahatesting123.
>

I cannot definitely tell you what's going wrong.  However, I can say  
that if you are trying to create a new branch in your repository, you  
are not proceeding in the best manner.  The way I use -- and very  
reliably so -- is "URL to URL":

   svn cp file:///path/to/repository/module/trunk \
              file:///path/to/repository/module/branches/live -m  
"Creating 'live' branch of 'module' repository"

If you are copying over the Net, substitute 'http://' for 'file:///'  
above.

'svn cp --help' is your friend.  I read there (version 1.6.3):

"  SRC and DST can each be either a working copy (WC) path or URL:
     WC  -> WC:   copy and schedule for addition (with history)
     WC  -> URL:  immediately commit a copy of WC to URL
     URL -> WC:   check out URL into WC, schedule for addition
     URL -> URL:  complete server-side copy;  used to branch and tag
   All the SRCs must be of the same type.

"WARNING: For compatibility with previous versions of Subversion,
copies performed using two working copy paths (WC -> WC) will not
contact the repository.  As such, they may not, by default, be able
to propagate merge tracking information from the source of the copy
to the destination."

Jim Keenan


From skreuzer at exit2shell.com  Thu Oct  8 11:31:09 2009
From: skreuzer at exit2shell.com (Steven Kreuzer)
Date: Thu, 8 Oct 2009 11:31:09 -0400
Subject: [nycbug-talk] OT: NYC Big Apps
Message-ID: <601AC70F-AE8E-4D75-9C4B-D49C9EBA45CD@exit2shell.com>

Not BSD related, but NYC related...

The City is making more than 170 datasets from 30 agencies available  
and they are sponsoring a contest to "reward the developers of the  
most useful, inventive, appealing, effective, and commercially viable  
applications for delivering information from the City of New York's NYC.gov 
  Data Mine to interested users."

Contest Details - http://www.nycbigapps.com/
New York City Data Mine - http://www.nyc.gov/html/datamine/html/home/home.shtml

--
Steven Kreuzer
http://www.exit2shell.com/~skreuzer



From george at ceetonetechnology.com  Thu Oct  8 11:44:36 2009
From: george at ceetonetechnology.com (George Rosamond)
Date: Thu, 08 Oct 2009 11:44:36 -0400
Subject: [nycbug-talk] followup from meeting
Message-ID: <4ACE08E4.8040601@ceetonetechnology.com>

Great meeting last night. . . and some excellent followup discussions.

Thanks to Brian for the XMPP talk and Jim for the overview of QEMU for 
the BSDCert DVD

http://www.bsdcertification.org/store/

For our December meeting, we discussed a way to structure the Unix Tips 
as a meeting, based on this (long) thread:

http://lists.nycbug.org/pipermail/talk/2009-August/012665.html

Bill aptly described it as "give back to the community" for the 
holidays.  Maybe we could make it annual.

Basically, we would have a variety of people submit a slide composed of 
one to three "tips" that they would discuss for up to ten minutes.  We 
could probably do 5 to 7 for a meeting.

Submit your slide as a PDF to admin@ so we can put online, so there's no 
need to bring a laptop.

We'd like these meetings to be interactive. .  open the discussion, ask 
questions, make recommendations as to how improve, etc.

We have commitments from a few people from last night (i remember who 
you are :). . . but the more the better.

Looking forward to hearing from a bunch of people, especially those who 
haven't done a meeting before.

George


From george at ceetonetechnology.com  Thu Oct  8 12:11:28 2009
From: george at ceetonetechnology.com (George Rosamond)
Date: Thu, 08 Oct 2009 12:11:28 -0400
Subject: [nycbug-talk] BSDCert Survey
Message-ID: <4ACE0F30.1020705@ceetonetechnology.com>

As mentioned last night, this is the URL for the BSD Professional 
Certification Job Analysis Survey:

http://surveys.bsdcertification.org/phpESP/public/survey.php?name=BSDP01_en

The more input we have the better, not just for the next level of 
BSDCert, but also since the results are among the most qualitative 
useful stats about individual's BSD usage available.

g


From compustretch at gmail.com  Thu Oct  8 12:12:36 2009
From: compustretch at gmail.com (forest mars)
Date: Thu, 8 Oct 2009 12:12:36 -0400
Subject: [nycbug-talk] FreeBSD kernel in Debian Squeeze
Message-ID: <c2f754300910080912q283460fer31cbe021ddd9d251@mail.gmail.com>

If you're already using Debian/kFreeBSD then you know it's pretty awesome.
So awesome in fact it's now officially part of the the next Debian release,
code-named "Squeeze."

http://www.tuxradar.com/content/debian-gives-freebsd-some-love


Forest Mars
-- 
"In theory, theory and practice are exactly the same.
In practice, they're completely different."
------------------------------------------------------------------
This email is:
[   ]  private: do not forward
[ x ]  o.k. to forward
[ x ]  o.k. to blog
[   ] ask first
-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its
affiliated companies. (Diffie-Helman/DSS-only version)

iQA/AwUBRkjTLDbz7LySoccvEQJDcQCguZZj4M4kOVOlOX4CtbgR0rppsdovAjra
3RRXIlkdzuYI0YJz4WyvKlTn
=MLhk
-----END PGP SIGNATURE-----
------------------------------------------------------------------
The New TLDs are Here!
Switch to Name.Space: http://namespace.org/switch
Support new domains & keep free media free! Register yours today!
https://secure.name-space.com/registry
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20091008/4820f127/attachment.htm>

From nikolai at fetissov.org  Thu Oct  8 22:07:25 2009
From: nikolai at fetissov.org (nikolai)
Date: Thu, 8 Oct 2009 22:07:25 -0400
Subject: [nycbug-talk] October 2009 meeting audio
Message-ID: <00c878a3449719f65f13c5bd1474bcff.squirrel@geekisp.com>

Folks,

Audio recording of Brian's talk is available at
http://www.fetissov.org/public/nycbug/nycbug-10-07-09.mp3

Cheers,
--
 Nikolai


From mspitzer at gmail.com  Tue Oct 13 12:43:56 2009
From: mspitzer at gmail.com (Marc Spitzer)
Date: Tue, 13 Oct 2009 12:43:56 -0400
Subject: [nycbug-talk] Mac network stats question
Message-ID: <8c50a3c30910130943m2b77dd23xfac15ed977a8d780@mail.gmail.com>

Hello,

There is a gui that gives you network usage graph on osx, does anyone
know where the data is stored that is used to draw the chart, and if
possible what format it is in?  This is for 10.4 and 10.5.

thanks,

marc
-- 
Freedom is nothing but a chance to be better.
--Albert Camus

 The problem with socialism is that eventually you run out
of other people's money.
--Margaret Thatcher


From bcully at gmail.com  Tue Oct 13 12:52:39 2009
From: bcully at gmail.com (Brian Cully)
Date: Tue, 13 Oct 2009 12:52:39 -0400
Subject: [nycbug-talk] Mac network stats question
In-Reply-To: <8c50a3c30910130943m2b77dd23xfac15ed977a8d780@mail.gmail.com>
References: <8c50a3c30910130943m2b77dd23xfac15ed977a8d780@mail.gmail.com>
Message-ID: <130518B6-5BDB-46A6-B27C-397BC8B6F338@gmail.com>

	For longer term stuff you can always use MRTG or its ilk. However, my  
uses tend more to the immediate conditions, and both MenuMeters and  
iStat Menus are excellent for at-a-glance analysis (and they also have  
stuff like CPU, memory usage, and MenuMeters has swap rates.)

-bjc

On 13-Oct-2009, at 12:43, Marc Spitzer wrote:

> Hello,
>
> There is a gui that gives you network usage graph on osx, does anyone
> know where the data is stored that is used to draw the chart, and if
> possible what format it is in?  This is for 10.4 and 10.5.
>
> thanks,
>
> marc
> -- 
> Freedom is nothing but a chance to be better.
> --Albert Camus
>
> The problem with socialism is that eventually you run out
> of other people's money.
> --Margaret Thatcher
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk



From mspitzer at gmail.com  Tue Oct 13 13:50:11 2009
From: mspitzer at gmail.com (Marc Spitzer)
Date: Tue, 13 Oct 2009 13:50:11 -0400
Subject: [nycbug-talk] Mac network stats question
In-Reply-To: <130518B6-5BDB-46A6-B27C-397BC8B6F338@gmail.com>
References: <8c50a3c30910130943m2b77dd23xfac15ed977a8d780@mail.gmail.com>
	<130518B6-5BDB-46A6-B27C-397BC8B6F338@gmail.com>
Message-ID: <8c50a3c30910131050t4fe178a6t68875d5612031ad5@mail.gmail.com>

I know that, I am looking for where the data files are stored.

thanks,

marc

On Tue, Oct 13, 2009 at 12:52 PM, Brian Cully <bcully at gmail.com> wrote:
> ? ? ? ?For longer term stuff you can always use MRTG or its ilk. However, my
> uses tend more to the immediate conditions, and both MenuMeters and iStat
> Menus are excellent for at-a-glance analysis (and they also have stuff like
> CPU, memory usage, and MenuMeters has swap rates.)
>
> -bjc
>
> On 13-Oct-2009, at 12:43, Marc Spitzer wrote:
>
>> Hello,
>>
>> There is a gui that gives you network usage graph on osx, does anyone
>> know where the data is stored that is used to draw the chart, and if
>> possible what format it is in? ?This is for 10.4 and 10.5.
>>
>> thanks,
>>
>> marc
>> --
>> Freedom is nothing but a chance to be better.
>> --Albert Camus
>>
>> The problem with socialism is that eventually you run out
>> of other people's money.
>> --Margaret Thatcher
>> _______________________________________________
>> talk mailing list
>> talk at lists.nycbug.org
>> http://lists.nycbug.org/mailman/listinfo/talk
>
>



-- 
Freedom is nothing but a chance to be better.
--Albert Camus

 The problem with socialism is that eventually you run out
of other people's money.
--Margaret Thatcher


From bcully at gmail.com  Tue Oct 13 14:46:35 2009
From: bcully at gmail.com (Brian Cully)
Date: Tue, 13 Oct 2009 14:46:35 -0400
Subject: [nycbug-talk] Mac network stats question
In-Reply-To: <8c50a3c30910131050t4fe178a6t68875d5612031ad5@mail.gmail.com>
References: <8c50a3c30910130943m2b77dd23xfac15ed977a8d780@mail.gmail.com>
	<130518B6-5BDB-46A6-B27C-397BC8B6F338@gmail.com>
	<8c50a3c30910131050t4fe178a6t68875d5612031ad5@mail.gmail.com>
Message-ID: <03C4ADBF-B522-4D70-9D68-C8D88DE26431@gmail.com>

	I don't know what GUI you're talking about, but the raw data is in  
the kernel, naturally. According to http://stackoverflow.com/questions/1126790/how-to-get-network-adapter-stats-in-linux-mac-osx 
  you can get it from sysctl, but it doesn't appear you can get it  
directly from sysctl on the cli. The netstat command also outputs this  
stuff if you use the -i flag.

-bjc

On 13-Oct-2009, at 13:50, Marc Spitzer wrote:

> I know that, I am looking for where the data files are stored.
>
> thanks,
>
> marc
>
> On Tue, Oct 13, 2009 at 12:52 PM, Brian Cully <bcully at gmail.com>  
> wrote:
>>        For longer term stuff you can always use MRTG or its ilk.  
>> However, my
>> uses tend more to the immediate conditions, and both MenuMeters and  
>> iStat
>> Menus are excellent for at-a-glance analysis (and they also have  
>> stuff like
>> CPU, memory usage, and MenuMeters has swap rates.)
>>
>> -bjc
>>
>> On 13-Oct-2009, at 12:43, Marc Spitzer wrote:
>>
>>> Hello,
>>>
>>> There is a gui that gives you network usage graph on osx, does  
>>> anyone
>>> know where the data is stored that is used to draw the chart, and if
>>> possible what format it is in?  This is for 10.4 and 10.5.
>>>
>>> thanks,
>>>
>>> marc
>>> --
>>> Freedom is nothing but a chance to be better.
>>> --Albert Camus
>>>
>>> The problem with socialism is that eventually you run out
>>> of other people's money.
>>> --Margaret Thatcher
>>> _______________________________________________
>>> talk mailing list
>>> talk at lists.nycbug.org
>>> http://lists.nycbug.org/mailman/listinfo/talk
>>
>>
>
>
>
> -- 
> Freedom is nothing but a chance to be better.
> --Albert Camus
>
> The problem with socialism is that eventually you run out
> of other people's money.
> --Margaret Thatcher



From jf2412 at columbia.edu  Tue Oct 13 17:20:53 2009
From: jf2412 at columbia.edu (Joshua S. Freeman)
Date: Tue, 13 Oct 2009 17:20:53 -0400
Subject: [nycbug-talk] Specifying hardware for a freenas setup???
In-Reply-To: <8c50a3c30910131050t4fe178a6t68875d5612031ad5@mail.gmail.com>
Message-ID: <C6FA6775.241B1%jf2412@columbia.edu>

Hi everyone,

I apologize if this has been addressed multiple times.

It's time for me to get a home NAS setup for backups and media center....

I'm looking at Drobos and Promise Technology NASes and so on.. I can get a
4-bay setup with RAID 5, hot swappable, etc. for somewhere between $750 -
$950 all wrapped up in a little box.

I don't particularly have a lot of old kit laying around.. At least nothing
with 4 bays...   

I'm decidedly *not* a hardware guy, in terms of knowing what's current or a
good deal, etc.

I'd like some advice on what I'd need to pull this off... I have a
monitor... I reckon I need:

1) enclosure for at least 4 drives, fan(s), mobo, video, RAM, PCI RAID card,
usb port, ethernet

2) I know which drives I'm planning to get.. But I could use advice on the
mobo, video, RAM, pci RAID and USB port... I figure I'll install freenas via
the USB port from usb drive?

Anyway... If anyone can recommend a components list I could price out that
would get me where I want to go, that'd be brilliant!

Thanks in advance!

Joshua




From njt at ayvali.org  Tue Oct 13 17:42:52 2009
From: njt at ayvali.org (N.J. Thomas)
Date: Tue, 13 Oct 2009 17:42:52 -0400
Subject: [nycbug-talk] Specifying hardware for a freenas setup???
In-Reply-To: <C6FA6775.241B1%jf2412@columbia.edu>
References: <8c50a3c30910131050t4fe178a6t68875d5612031ad5@mail.gmail.com>
	<C6FA6775.241B1%jf2412@columbia.edu>
Message-ID: <20091013214252.GV8478@zaph.org>

* Joshua S. Freeman <jf2412 at columbia.edu> [2009-10-13 17:20:53-0400]:
> It's time for me to get a home NAS setup for backups and media
> center....
> 
> I'm looking at Drobos and Promise Technology NASes and so on.. I can
> get a 4-bay setup with RAID 5, hot swappable, etc. for somewhere
> between $750 - $950 all wrapped up in a little box.

I was researching something similar a few days ago, only for 2 drives
instead of 4, and I saw good things about this system:

    http://www.via.com.tw/en/products/embedded/artigo/a2000/

AFAICT, it runs FreeNAS (there were some threads on the FreeBSD
mailing list that referred to this combo) quite well and will probably
be what I go for when I decide to pull the trigger on this.

I don't think Via makes a 4-bay version though, but I'm sure it
shouldn't be too hard to find.

Thomas


From jf2412 at columbia.edu  Tue Oct 13 17:48:21 2009
From: jf2412 at columbia.edu (Joshua S. Freeman)
Date: Tue, 13 Oct 2009 17:48:21 -0400
Subject: [nycbug-talk] Specifying hardware for a freenas setup???
In-Reply-To: <20091013214252.GV8478@zaph.org>
Message-ID: <C6FA6DE5.241B8%jf2412@columbia.edu>

Thanks Thomas,

I wonder if something like this:

http://www.synology.com/enu/products/DS409slim/index.php

would work...

I wonder how you'd get the freenas mgmt. software onto it though...

That's the part I'm having trouble getting my mind around.

J.



On 10/13/09 5:42 PM, "N.J. Thomas" <njt at ayvali.org> wrote:

> * Joshua S. Freeman <jf2412 at columbia.edu> [2009-10-13 17:20:53-0400]:
>> It's time for me to get a home NAS setup for backups and media
>> center....
>> 
>> I'm looking at Drobos and Promise Technology NASes and so on.. I can
>> get a 4-bay setup with RAID 5, hot swappable, etc. for somewhere
>> between $750 - $950 all wrapped up in a little box.
> 
> I was researching something similar a few days ago, only for 2 drives
> instead of 4, and I saw good things about this system:
> 
>     http://www.via.com.tw/en/products/embedded/artigo/a2000/
> 
> AFAICT, it runs FreeNAS (there were some threads on the FreeBSD
> mailing list that referred to this combo) quite well and will probably
> be what I go for when I decide to pull the trigger on this.
> 
> I don't think Via makes a 4-bay version though, but I'm sure it
> shouldn't be too hard to find.
> 
> Thomas
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
> 

-- 
Joshua S. Freeman
Director- CUIT Interactive Services
o: 212.854.2083 | m: 914.233.3557
Skype/YIM: karmester | AIM: varese60




From njt at ayvali.org  Tue Oct 13 18:00:30 2009
From: njt at ayvali.org (N.J. Thomas)
Date: Tue, 13 Oct 2009 18:00:30 -0400
Subject: [nycbug-talk] Specifying hardware for a freenas setup???
In-Reply-To: <C6FA6DE5.241B8%jf2412@columbia.edu>
References: <20091013214252.GV8478@zaph.org>
	<C6FA6DE5.241B8%jf2412@columbia.edu>
Message-ID: <20091013220030.GW8478@zaph.org>

* Joshua S. Freeman <jf2412 at columbia.edu> [2009-10-13 17:48:21-0400]:
> I wonder if something like this:
> http://www.synology.com/enu/products/DS409slim/index.php
> would work...

I would double check with the FreeNAS guys before you purchase to be
sure. It also can't hurt to ask/search around and see if other people
have used it with FreeNAS before.

> I wonder how you'd get the freenas mgmt. software onto it though...
> That's the part I'm having trouble getting my mind around.

That's pretty easy. FreeNAS provides an image file that you "burn"
(using dd or some other utility) onto a USB key and then plug that into
your device and boot off it. (That's pretty much how you would install
the OS on a netbook as well.)

Thomas


From brian.gupta at gmail.com  Wed Oct 14 00:59:43 2009
From: brian.gupta at gmail.com (Brian Gupta)
Date: Wed, 14 Oct 2009 00:59:43 -0400
Subject: [nycbug-talk] Mac network stats question
In-Reply-To: <8c50a3c30910131050t4fe178a6t68875d5612031ad5@mail.gmail.com>
References: <8c50a3c30910130943m2b77dd23xfac15ed977a8d780@mail.gmail.com> 
	<130518B6-5BDB-46A6-B27C-397BC8B6F338@gmail.com>
	<8c50a3c30910131050t4fe178a6t68875d5612031ad5@mail.gmail.com>
Message-ID: <5b5090780910132159ya641f51i186e143cab286266@mail.gmail.com>

Marc,
I assume you are referring to "/Applications/Utilities/Activity Monitor"? As
I understand "Activity Monitor" doesn't really store historical data, and
can only list data that it's seen since you launched it, and/or info it can
query from the kernel. However I could be wrong. Here is the list of files
that "Activity Monitor" holds open.:

$ lsof -p 158
COMMAND   PID   USER   FD     TYPE     DEVICE  SIZE/OFF    NODE NAME
Activity  158 bgupta  cwd      DIR       14,2      1190       2 /
Activity  158 bgupta  txt      REG       14,2    481680 1821547
/Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor
Activity  158 bgupta  txt      REG       14,2   1250592 1713351
/System/Library/PrivateFrameworks/GraphKit.framework/Versions/A/GraphKit
Activity  158 bgupta  txt      REG       14,2      3144 1682994
/System/Library/ColorSync/Profiles/sRGB Profile.icc
Activity  158 bgupta  txt      REG       14,2     28564 1686910
/System/Library/Fonts/Keyboard.ttf
Activity  158 bgupta  txt      REG       14,2    811436 1683523
/System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/Resources/SArtFile.bin
Activity  158 bgupta  txt      REG       14,2  13993264 1688285
/usr/share/icu/icudt40l.dat
Activity  158 bgupta  txt      REG       14,2    460976 1693001
/System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLRendererFloat.bundle/GLRendererFloat
Activity  158 bgupta  txt      REG       14,2   2414697 1686908
/System/Library/Fonts/Helvetica.dfont
Activity  158 bgupta  txt      REG       14,2    559995 1686914
/System/Library/Fonts/Monaco.dfont
Activity  158 bgupta  txt      REG       14,2   4431872 5042099
/private/var/folders/pU/pUKt48bXGN8gH5JVmeMHNk+++TI/-Caches-/com.apple.LaunchServices-025501.csstore
Activity  158 bgupta  txt      REG       14,2   5425538 1687842
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/Extras2.rsrc
Activity  158 bgupta  txt      REG       14,2   1757684 1686912
/System/Library/Fonts/LucidaGrande.ttc
Activity  158 bgupta  txt      REG       14,2    802460 1691736
/System/Library/Keyboard
Layouts/AppleKeyboardLayouts.bundle/Contents/Resources/AppleKeyboardLayouts-L.dat
Activity  158 bgupta  txt      REG       14,2   5236560 1692999
/System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLEngine.bundle/GLEngine
Activity  158 bgupta  txt      REG       14,2   7944096 2763912
/System/Library/Extensions/GeForce8xxxGLDriver.bundle/Contents/MacOS/libclh.dylib
Activity  158 bgupta  txt      REG       14,2    144580 1687844
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/HIToolbox.rsrc
Activity  158 bgupta  txt      REG       14,2    490410 1687831
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/English.lproj/Localized.rsrc
Activity  158 bgupta  txt      REG       14,2   5946480 1683518
/System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/Resources/ArtFile.bin
Activity  158 bgupta  txt      REG       14,2  13972240 2763911
/System/Library/Extensions/GeForce8xxxGLDriver.bundle/Contents/MacOS/GeForce8xxxGLDriver
Activity  158 bgupta  txt      REG       14,2   1054960 1700909
/usr/lib/dyld
Activity  158 bgupta  txt      REG       14,2 197410816 2764561
/private/var/db/dyld/dyld_shared_cache_x86_64
Activity  158 bgupta    0r     CHR        3,2       0t0     303 /dev/null
Activity  158 bgupta    1     PIPE 0x0d4367d0     16384         ->0x0d436834
Activity  158 bgupta    2     PIPE 0x0d4367d0     16384         ->0x0d436834
Activity  158 bgupta    3r     REG       14,2       163 1717953
/private/etc/security/audit_control
Activity  158 bgupta    4u  KQUEUE                              count=1,
state=0x2
Activity  158 bgupta    5r     REG       14,2   5425538 1687842
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/Extras2.rsrc
Activity  158 bgupta    6r     REG       14,2    144580 1687844
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/HIToolbox.rsrc
Activity  158 bgupta    7r     REG       14,2    490410 1687831
/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/Resources/English.lproj/Localized.rsrc
Activity  158 bgupta   89r     REG       14,2       611 1717952
/private/etc/security/audit_class

- Brian Gupta

New York City user groups calendar:
http://nyc.brandorr.com/



On Tue, Oct 13, 2009 at 1:50 PM, Marc Spitzer <mspitzer at gmail.com> wrote:

> I know that, I am looking for where the data files are stored.
>
> thanks,
>
> marc
>
> On Tue, Oct 13, 2009 at 12:52 PM, Brian Cully <bcully at gmail.com> wrote:
> >        For longer term stuff you can always use MRTG or its ilk. However,
> my
> > uses tend more to the immediate conditions, and both MenuMeters and iStat
> > Menus are excellent for at-a-glance analysis (and they also have stuff
> like
> > CPU, memory usage, and MenuMeters has swap rates.)
> >
> > -bjc
> >
> > On 13-Oct-2009, at 12:43, Marc Spitzer wrote:
> >
> >> Hello,
> >>
> >> There is a gui that gives you network usage graph on osx, does anyone
> >> know where the data is stored that is used to draw the chart, and if
> >> possible what format it is in?  This is for 10.4 and 10.5.
> >>
> >> thanks,
> >>
> >> marc
> >> --
> >> Freedom is nothing but a chance to be better.
> >> --Albert Camus
> >>
> >> The problem with socialism is that eventually you run out
> >> of other people's money.
> >> --Margaret Thatcher
> >> _______________________________________________
> >> talk mailing list
> >> talk at lists.nycbug.org
> >> http://lists.nycbug.org/mailman/listinfo/talk
> >
> >
>
>
>
> --
> Freedom is nothing but a chance to be better.
> --Albert Camus
>
>  The problem with socialism is that eventually you run out
> of other people's money.
> --Margaret Thatcher
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20091014/f95ad1db/attachment.htm>

From josh at rivels.org  Thu Oct 15 11:22:03 2009
From: josh at rivels.org (Josh Rivel)
Date: Thu, 15 Oct 2009 11:22:03 -0400
Subject: [nycbug-talk] ChrootDirectory user w/OpenSSH 5.3 on OpenBSD 4.4
Message-ID: <ba54b6490910150822s6aa4015ag923196b46b5e0af3@mail.gmail.com>

Hi,

So I'm trying to setup a user on my OpenBSD 4.4 box (OpenSSH 5.3)
using the ChrootDirectory option in sshd_config.  I know that for a
scp/sftp only account it's trivial and you don't need to do anything
other than what's in the manpage for sshd_config.  However, for ssh
access there's more required.  I found quite a few guides on how to do
this with Linux, but I'm wondering if anyone has done it with OpenBSD,
or can provide me with a suggestion on how to give someone a shell
account on my box, but not let them have access to any files outside
of /home/username.  If it were a FreeBSD box or OpenSolaris I could
just setup a jail for them, but it's not.  I came across jailkit -
http://olivier.sessink.nl/jailkit/ - has anyone used that w/OpenBSD?
It looks like it might do what I need it to.

Thanks in advance,
Josh


From josh at rivels.org  Thu Oct 15 12:13:05 2009
From: josh at rivels.org (Josh Rivel)
Date: Thu, 15 Oct 2009 12:13:05 -0400
Subject: [nycbug-talk] ChrootDirectory user w/OpenSSH 5.3 on OpenBSD 4.4
In-Reply-To: <D615ED0E-103D-4FFF-B962-F44C8D7B9041@techally.com>
References: <ba54b6490910150822s6aa4015ag923196b46b5e0af3@mail.gmail.com>
	<D615ED0E-103D-4FFF-B962-F44C8D7B9041@techally.com>
Message-ID: <ba54b6490910150913m166361x41c55faeddaf974@mail.gmail.com>

Michael,

On Thu, Oct 15, 2009 at 11:54 AM, Michael Hernandez
<mike.hernandez at techally.com> wrote:
> I asked about this once in #openbsd on freenode and I got yelled at.
> They told me I could accomplish all of this with login classes, but I
> never figured out how. ?In the end I decided it didn't really matter
> if the users could see files outside of their home... I sort of gave
> up ;)
>
> I'm curious to see an answer to this questio!
>
> --Mike H
>

Heh OK.  I'll read up on the login classes as well, thanks.

Josh


From lists at stringsutils.com  Thu Oct 15 14:12:37 2009
From: lists at stringsutils.com (Francisco Reyes)
Date: Thu, 15 Oct 2009 14:12:37 -0400
Subject: [nycbug-talk] Specifying hardware for a freenas setup???
References: <C6FA6DE5.241B8%jf2412@columbia.edu>
Message-ID: <cone.1255630357.199783.20230.1000@zoraida.natserv.net>

Joshua S. Freeman writes:

> I wonder if something like this:
> http://www.synology.com/enu/products/DS409slim/index.php

If you get something like that, any specific features you are looing for  
that you would still want to replace the OS that comes with it?

Also I think if you buy a box like that make sure that  somehow you could 
re-install the OS that comes with it.. in case you can't get FreeNAS to work 
so you could at least re-install  the OS that comes with it.


From mark.saad at ymail.com  Thu Oct 15 17:44:20 2009
From: mark.saad at ymail.com (Mark Saad)
Date: Thu, 15 Oct 2009 14:44:20 -0700 (PDT)
Subject: [nycbug-talk] NIC Device Polling in FreeBSD
Message-ID: <27998.75234.qm@web43412.mail.sp1.yahoo.com>

Hello Talk
  Does anyone know off hand why "options DEVICE_POLLING" is still not in the GENERIC FreeBSD kernel ?
I understand that it does not work with every card, but is there any issue with a kernel having polling enabled and the device not using it ?

 --
Mark Saad
mark.saad at ymail.com



From george at ceetonetechnology.com  Thu Oct 15 23:00:42 2009
From: george at ceetonetechnology.com (George Rosamond)
Date: Thu, 15 Oct 2009 23:00:42 -0400
Subject: [nycbug-talk] followup from meeting
In-Reply-To: <4ACE08E4.8040601@ceetonetechnology.com>
References: <4ACE08E4.8040601@ceetonetechnology.com>
Message-ID: <4AD7E1DA.60305@ceetonetechnology.com>

<snip>
> For our December meeting, we discussed a way to structure the Unix Tips 
> as a meeting, based on this (long) thread:
> 
> http://lists.nycbug.org/pipermail/talk/2009-August/012665.html
> 
> Bill aptly described it as "give back to the community" for the 
> holidays.  Maybe we could make it annual.
> 
> Basically, we would have a variety of people submit a slide composed of 
> one to three "tips" that they would discuss for up to ten minutes.  We 
> could probably do 5 to 7 for a meeting.
> 
> Submit your slide as a PDF to admin@ so we can put online, so there's no 
> need to bring a laptop.
> 
> We'd like these meetings to be interactive. .  open the discussion, ask 
> questions, make recommendations as to how improve, etc.
> 
> We have commitments from a few people from last night (i remember who 
> you are :). . . but the more the better.
> 
> Looking forward to hearing from a bunch of people, especially those who 
> haven't done a meeting before.

I opened this thread a while ago. . .and have some off-list people 
who've made commitments.  . but we need a few more.

I think ssh-hackery (as discussed so many times on this list) is highly 
appropriate, esp considering the anniversary.

If you are interested, and have slide together, hit me at george@ this 
user group domain.

ty

g


From bonsaime at gmail.com  Fri Oct 16 11:45:17 2009
From: bonsaime at gmail.com (Jesse Callaway)
Date: Fri, 16 Oct 2009 11:45:17 -0400
Subject: [nycbug-talk] Specifying hardware for a freenas setup???
In-Reply-To: <C6FA6DE5.241B8%jf2412@columbia.edu>
References: <20091013214252.GV8478@zaph.org>
	<C6FA6DE5.241B8%jf2412@columbia.edu>
Message-ID: <aa9991030910160845h492f2556pbe959304a1f9ab1e@mail.gmail.com>

It would be difficult. Besides it has stuff built into it like an
itunes server which you'd probably want to keep. Really I wanted to
comment that that website has a cool favicon.

-jesse

On Tue, Oct 13, 2009 at 5:48 PM, Joshua S. Freeman <jf2412 at columbia.edu> wrote:
> Thanks Thomas,
>
> I wonder if something like this:
>
> http://www.synology.com/enu/products/DS409slim/index.php
>
> would work...
>
> I wonder how you'd get the freenas mgmt. software onto it though...
>
> That's the part I'm having trouble getting my mind around.
>
> J.
>
>
>
> On 10/13/09 5:42 PM, "N.J. Thomas" <njt at ayvali.org> wrote:
>
>> * Joshua S. Freeman <jf2412 at columbia.edu> [2009-10-13 17:20:53-0400]:
>>> It's time for me to get a home NAS setup for backups and media
>>> center....
>>>
>>> I'm looking at Drobos and Promise Technology NASes and so on.. I can
>>> get a 4-bay setup with RAID 5, hot swappable, etc. for somewhere
>>> between $750 - $950 all wrapped up in a little box.
>>
>> I was researching something similar a few days ago, only for 2 drives
>> instead of 4, and I saw good things about this system:
>>
>> ? ? http://www.via.com.tw/en/products/embedded/artigo/a2000/
>>
>> AFAICT, it runs FreeNAS (there were some threads on the FreeBSD
>> mailing list that referred to this combo) quite well and will probably
>> be what I go for when I decide to pull the trigger on this.
>>
>> I don't think Via makes a 4-bay version though, but I'm sure it
>> shouldn't be too hard to find.
>>
>> Thomas
>> _______________________________________________
>> talk mailing list
>> talk at lists.nycbug.org
>> http://lists.nycbug.org/mailman/listinfo/talk
>>
>
> --
> Joshua S. Freeman
> Director- CUIT Interactive Services
> o: 212.854.2083 | m: 914.233.3557
> Skype/YIM: karmester | AIM: varese60
>
>
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
>


From bonsaime at gmail.com  Fri Oct 16 13:59:44 2009
From: bonsaime at gmail.com (Jesse Callaway)
Date: Fri, 16 Oct 2009 13:59:44 -0400
Subject: [nycbug-talk] ChrootDirectory user w/OpenSSH 5.3 on OpenBSD 4.4
In-Reply-To: <ba54b6490910150822s6aa4015ag923196b46b5e0af3@mail.gmail.com>
References: <ba54b6490910150822s6aa4015ag923196b46b5e0af3@mail.gmail.com>
Message-ID: <aa9991030910161059m27b78e32t1d5074f3e87410bc@mail.gmail.com>

On Thu, Oct 15, 2009 at 11:22 AM, Josh Rivel <josh at rivels.org> wrote:
> Hi,
>
> So I'm trying to setup a user on my OpenBSD 4.4 box (OpenSSH 5.3)
> using the ChrootDirectory option in sshd_config. ?I know that for a
> scp/sftp only account it's trivial and you don't need to do anything
> other than what's in the manpage for sshd_config. ?However, for ssh
> access there's more required. ?I found quite a few guides on how to do
> this with Linux, but I'm wondering if anyone has done it with OpenBSD,
> or can provide me with a suggestion on how to give someone a shell
> account on my box, but not let them have access to any files outside
> of /home/username. ?If it were a FreeBSD box or OpenSolaris I could
> just setup a jail for them, but it's not. ?I came across jailkit -
> http://olivier.sessink.nl/jailkit/ - has anyone used that w/OpenBSD?
> It looks like it might do what I need it to.
>
> Thanks in advance,
> Josh
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
>

I've only done this in linux as well. But either way, you'll need to
run your shell entirely in the chroot. I'm guessing you know this, but
don't hit me if you do. Usually your shell program is dynamically
linked to libraries in order to do anything interesting. These
libraries will likely lie outside of the chroot, in your system
library directories. So one thing you'll need to do is either a) list
the libraries using the 'ldd' tool and make them accessible in the
chroot path. Or b) find yourself a statically linked shell.
You will likely need to have some sort of /etc/passwd file in there
unless you use directory services. I usually just have a couple lines
for any users in that chroot.
Do this for all the commands you want to run in the chroot
environment. There is a great deal of overlap in these libraries, I
guess that's the point, right ; ) Point being, once you satisfy the
shell things like cp, ls, etc should already be covered.
I'm not sure what login classes are, and Michaels' mention of them
makes me want to get educated on them as well. Whatever the case, if
you do use the chroot option you'll need to go through the usual
rigamorole as described above.

-jesse


From bonsaime at gmail.com  Fri Oct 16 15:55:30 2009
From: bonsaime at gmail.com (Jesse Callaway)
Date: Fri, 16 Oct 2009 15:55:30 -0400
Subject: [nycbug-talk] ChrootDirectory user w/OpenSSH 5.3 on OpenBSD 4.4
In-Reply-To: <aa9991030910161059m27b78e32t1d5074f3e87410bc@mail.gmail.com>
References: <ba54b6490910150822s6aa4015ag923196b46b5e0af3@mail.gmail.com>
	<aa9991030910161059m27b78e32t1d5074f3e87410bc@mail.gmail.com>
Message-ID: <aa9991030910161255m7b627e34uc8511c2ed8d370ef@mail.gmail.com>

On Fri, Oct 16, 2009 at 1:59 PM, Jesse Callaway <bonsaime at gmail.com> wrote:
> On Thu, Oct 15, 2009 at 11:22 AM, Josh Rivel <josh at rivels.org> wrote:
>> Hi,
>>
>> So I'm trying to setup a user on my OpenBSD 4.4 box (OpenSSH 5.3)
>> using the ChrootDirectory option in sshd_config. ?I know that for a
>> scp/sftp only account it's trivial and you don't need to do anything
>> other than what's in the manpage for sshd_config. ?However, for ssh
>> access there's more required. ?I found quite a few guides on how to do
>> this with Linux, but I'm wondering if anyone has done it with OpenBSD,
>> or can provide me with a suggestion on how to give someone a shell
>> account on my box, but not let them have access to any files outside
>> of /home/username. ?If it were a FreeBSD box or OpenSolaris I could
>> just setup a jail for them, but it's not. ?I came across jailkit -
>> http://olivier.sessink.nl/jailkit/ - has anyone used that w/OpenBSD?
>> It looks like it might do what I need it to.
>>
>> Thanks in advance,
>> Josh
>> _______________________________________________
>> talk mailing list
>> talk at lists.nycbug.org
>> http://lists.nycbug.org/mailman/listinfo/talk
>>
>
> I've only done this in linux as well. But either way, you'll need to
> run your shell entirely in the chroot. I'm guessing you know this, but
> don't hit me if you do. Usually your shell program is dynamically
> linked to libraries in order to do anything interesting. These
> libraries will likely lie outside of the chroot, in your system
> library directories. So one thing you'll need to do is either a) list
> the libraries using the 'ldd' tool and make them accessible in the
> chroot path. Or b) find yourself a statically linked shell.
> You will likely need to have some sort of /etc/passwd file in there
> unless you use directory services. I usually just have a couple lines
> for any users in that chroot.
> Do this for all the commands you want to run in the chroot
> environment. There is a great deal of overlap in these libraries, I
> guess that's the point, right ; ) Point being, once you satisfy the
> shell things like cp, ls, etc should already be covered.
> I'm not sure what login classes are, and Michaels' mention of them
> makes me want to get educated on them as well. Whatever the case, if
> you do use the chroot option you'll need to go through the usual
> rigamorole as described above.
>
> -jesse
>

Eh... now you're making me install Open. Login classes are defined in
/etc/login.conf. The login class may also have MAC policies tied to
it. I didn't see anywhere how login classes alone could help solve the
problem of restriction access to certain parts of the filesystem,
except in the case of ftp.
So I'm guessing that their use and subsequent definitions of a MAC
scheme for the restricted users would get you what you want. You've
probably read up much more on this than I have by now.

-jesse


From josh at rivels.org  Fri Oct 16 20:58:12 2009
From: josh at rivels.org (Josh Rivel)
Date: Fri, 16 Oct 2009 20:58:12 -0400
Subject: [nycbug-talk] ChrootDirectory user w/OpenSSH 5.3 on OpenBSD 4.4
In-Reply-To: <aa9991030910161255m7b627e34uc8511c2ed8d370ef@mail.gmail.com>
References: <ba54b6490910150822s6aa4015ag923196b46b5e0af3@mail.gmail.com>
	<aa9991030910161059m27b78e32t1d5074f3e87410bc@mail.gmail.com>
	<aa9991030910161255m7b627e34uc8511c2ed8d370ef@mail.gmail.com>
Message-ID: <7512887F-995A-461C-8DB4-199B9EFF1279@rivels.org>

Jesse,

On Oct 16, 2009, at 3:55 PM, Jesse Callaway wrote:

> On Fri, Oct 16, 2009 at 1:59 PM, Jesse Callaway <bonsaime at gmail.com>  
> wrote:
>> On Thu, Oct 15, 2009 at 11:22 AM, Josh Rivel <josh at rivels.org> wrote:
>>> Hi,
>>>
>>> So I'm trying to setup a user on my OpenBSD 4.4 box (OpenSSH 5.3)
>>> using the ChrootDirectory option in sshd_config.  I know that for a
>>> scp/sftp only account it's trivial and you don't need to do anything
>>> other than what's in the manpage for sshd_config.  However, for ssh
>>> access there's more required.  I found quite a few guides on how  
>>> to do
>>> this with Linux, but I'm wondering if anyone has done it with  
>>> OpenBSD,
>>> or can provide me with a suggestion on how to give someone a shell
>>> account on my box, but not let them have access to any files outside
>>> of /home/username.  If it were a FreeBSD box or OpenSolaris I could
>>> just setup a jail for them, but it's not.  I came across jailkit -
>>> http://olivier.sessink.nl/jailkit/ - has anyone used that w/OpenBSD?
>>> It looks like it might do what I need it to.
>>>
>>> Thanks in advance,
>>> Josh
>>> _______________________________________________
>>> talk mailing list
>>> talk at lists.nycbug.org
>>> http://lists.nycbug.org/mailman/listinfo/talk
>>>
>>
>> I've only done this in linux as well. But either way, you'll need to
>> run your shell entirely in the chroot. I'm guessing you know this,  
>> but
>> don't hit me if you do. Usually your shell program is dynamically
>> linked to libraries in order to do anything interesting. These
>> libraries will likely lie outside of the chroot, in your system
>> library directories. So one thing you'll need to do is either a) list
>> the libraries using the 'ldd' tool and make them accessible in the
>> chroot path. Or b) find yourself a statically linked shell.
>> You will likely need to have some sort of /etc/passwd file in there
>> unless you use directory services. I usually just have a couple lines
>> for any users in that chroot.
>> Do this for all the commands you want to run in the chroot
>> environment. There is a great deal of overlap in these libraries, I
>> guess that's the point, right ; ) Point being, once you satisfy the
>> shell things like cp, ls, etc should already be covered.
>> I'm not sure what login classes are, and Michaels' mention of them
>> makes me want to get educated on them as well. Whatever the case, if
>> you do use the chroot option you'll need to go through the usual
>> rigamorole as described above.
>>
>> -jesse
>>
>

Yeah, I was trying to avoid making copies of various libraries, etc.  
into a chroot jail.  Also I have all my filesystems mounted nodev/ 
nosuid, so that's a small issue as well.
(Yes I could remount them)

> Eh... now you're making me install Open. Login classes are defined in
> /etc/login.conf. The login class may also have MAC policies tied to
> it. I didn't see anywhere how login classes alone could help solve the
> problem of restriction access to certain parts of the filesystem,
> except in the case of ftp.
> So I'm guessing that their use and subsequent definitions of a MAC
> scheme for the restricted users would get you what you want. You've
> probably read up much more on this than I have by now.

I did some reading up on login classes/login.conf as well, seems a bit  
overkill.  A friend of mine (who's also on this list) - Thanks Rick! -  
suggested making the users shell /bin/rksh, setting their profile to  
have PATH=$HOME/bin, making .profile owned by root, and then just  
putting whatever binaries they need into ~user/bin - I've been testing  
it out and it seems to work, no need for any jails, copying libraries  
around, etc.  If I don't want them to have access to a command, I just  
don't put it into ~user/bin, and they can't cd out of it.

Josh



From mark.saad at ymail.com  Mon Oct 19 11:10:52 2009
From: mark.saad at ymail.com (Mark Saad)
Date: Mon, 19 Oct 2009 08:10:52 -0700 (PDT)
Subject: [nycbug-talk] NIC Device Polling in FreeBSD
In-Reply-To: <ADAEBEE7-8396-43B8-BE01-1A3E032517AB@neville-neil.com>
References: <27998.75234.qm@web43412.mail.sp1.yahoo.com>
	<ADAEBEE7-8396-43B8-BE01-1A3E032517AB@neville-neil.com>
Message-ID: <768261.41225.qm@web43411.mail.sp1.yahoo.com>


George 
  Thanks for the info, can you elaborate more on what a good or bad work load
would be. Is there any rule of thumb like a SQL server is a bad place to use polling,
and a high traffic nfs server is a good place , or is this more complicated. 
Also is there any harm in deploying a kernel with Polling enabled but 
the nic not configured to use it? 




----- Original Message ----
> From: George Neville-Neil <gnn at neville-neil.com>
> To: Mark Saad <mark.saad at ymail.com>
> Cc: nycbug <talk at lists.nycbug.org>
> Sent: Sat, October 17, 2009 3:51:36 PM
> Subject: Re: [nycbug-talk] NIC Device Polling in FreeBSD
> 
> 
> On Oct 15, 2009, at 17:44 , Mark Saad wrote:
> 
> > Hello Talk
> >  Does anyone know off hand why "options DEVICE_POLLING" is still not in the 
> GENERIC FreeBSD kernel ?
> > I understand that it does not work with every card, but is there any issue 
> with a kernel having polling enabled and the device not using it ?
> 
> I believe this is at least in part due to not wanting to surprise users.  Only 
> certain workloads
> do well with polling enabled, and so it's considered a tuning nob for experts 
> not something
> to be automagically turned on.
> 
> Best,
> George


 --
Mark Saad
mark.saad at ymail.com


From george at ceetonetechnology.com  Mon Oct 19 13:18:06 2009
From: george at ceetonetechnology.com (George Rosamond)
Date: Mon, 19 Oct 2009 13:18:06 -0400
Subject: [nycbug-talk] [Fwd: [announce] NYC*BUG Upcoming Meetings and more]
Message-ID: <4ADC9F4E.9090606@ceetonetechnology.com>

This went out to announce.

If you're not subscribed, you should here:

http://lists.nycbug.org/mailman/listinfo/announce

g
-------------- next part --------------
An embedded message was scrubbed...
From: NYC*BUG Announcements <announce at lists.nycbug.org>
Subject: [announce] NYC*BUG Upcoming Meetings and more
Date: Mon, 19 Oct 2009 12:57:05 -0400
Size: 5192
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20091019/2fb5654d/attachment.eml>

From pete at nomadlogic.org  Mon Oct 19 17:22:57 2009
From: pete at nomadlogic.org (Pete Wright)
Date: Mon, 19 Oct 2009 21:22:57 +0000
Subject: [nycbug-talk] NIC Device Polling in FreeBSD
In-Reply-To: <768261.41225.qm@web43411.mail.sp1.yahoo.com>
References: <27998.75234.qm@web43412.mail.sp1.yahoo.com>
	<ADAEBEE7-8396-43B8-BE01-1A3E032517AB@neville-neil.com>
	<768261.41225.qm@web43411.mail.sp1.yahoo.com>
Message-ID: <20091019212254.GA13870@pv.nomadlogic.org>

On Mon, Oct 19, 2009 at 08:10:52AM -0700, Mark Saad wrote:
> 
> George 
>   Thanks for the info, can you elaborate more on what a good or bad work load
> would be. Is there any rule of thumb like a SQL server is a bad place to use polling,
> and a high traffic nfs server is a good place , or is this more complicated. 
> Also is there any harm in deploying a kernel with Polling enabled but 
> the nic not configured to use it? 
> 

Hi Mark - 

this page may help provide some background though:

http://info.iet.unipi.it/~luigi/polling/

specifically:
""Device polling" (polling for brevity) refers to a technique for
handling devices which does not rely on the latter to generate
interrupts when they need attention, but rather lets the CPU poll
devices to service their needs. "

What this imples though is that you have to make sure your devices
supports polling for it be effective.  In this case you have to make
sure that your network interface supports hardware polling.  If it does
then I believe it would be worth turning on.  Esp for high-throughput
situations.  As I understand it, if you enable polling on an interface
that is not supported then you could potentially introduce a small
amount of network latency, depending upon your polling interval you have
set.

HTH
-p


> 
> 
> 
> ----- Original Message ----
> > From: George Neville-Neil <gnn at neville-neil.com>
> > To: Mark Saad <mark.saad at ymail.com>
> > Cc: nycbug <talk at lists.nycbug.org>
> > Sent: Sat, October 17, 2009 3:51:36 PM
> > Subject: Re: [nycbug-talk] NIC Device Polling in FreeBSD
> > 
> > 
> > On Oct 15, 2009, at 17:44 , Mark Saad wrote:
> > 
> > > Hello Talk
> > >  Does anyone know off hand why "options DEVICE_POLLING" is still not in the 
> > GENERIC FreeBSD kernel ?
> > > I understand that it does not work with every card, but is there any issue 
> > with a kernel having polling enabled and the device not using it ?
> > 
> > I believe this is at least in part due to not wanting to surprise users.  Only 
> > certain workloads
> > do well with polling enabled, and so it's considered a tuning nob for experts 
> > not something
> > to be automagically turned on.
> > 
> > Best,
> > George
> 
> 
>  --
> Mark Saad
> mark.saad at ymail.com
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk


From max at neuropunks.org  Wed Oct 21 12:54:24 2009
From: max at neuropunks.org (Max Gribov)
Date: Wed, 21 Oct 2009 12:54:24 -0400
Subject: [nycbug-talk] [Fwd: [FreeBSD-Announce] HAST Project Announcement]
Message-ID: <1256144064.3279.12.camel@max-laptop>

this sounds pretty awesome

-------------- next part --------------
An embedded message was scrubbed...
From: Deb Goodkin <deb at freebsdfoundation.org>
Subject: [FreeBSD-Announce] HAST Project Announcement
Date: Wed, 21 Oct 2009 07:30:01 -0600
Size: 5495
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20091021/1a20af09/attachment.eml>

From george at ceetonetechnology.com  Wed Oct 21 13:01:44 2009
From: george at ceetonetechnology.com (George Rosamond)
Date: Wed, 21 Oct 2009 13:01:44 -0400
Subject: [nycbug-talk] [Fwd: [FreeBSD-Announce] HAST Project
	Announcement]
In-Reply-To: <1256144064.3279.12.camel@max-laptop>
References: <1256144064.3279.12.camel@max-laptop>
Message-ID: <4ADF3E78.50207@ceetonetechnology.com>

Max Gribov wrote:
> this sounds pretty awesome
> 

Very awesome.

(pasted in attached email)

> Dear FreeBSD Community,
> 
> The FreeBSD Foundation is pleased to announce a new funded project!
> 
> Pawel Jakub Dawidek has been awarded a grant to implement storage
> replication software that will enable users to use the FreeBSD operating
> system for highly available configurations where data has to be shared
> across the cluster nodes. The project is partly being funded by OMCnet
> Internet Service (GmbH www.omc.net) and TransIP BV (www.transip.nl).
> 
> The software will allow for synchronous block-level replication of any
> storage media (GEOM providers, using FreeBSD nomenclature) over the
> TCP/IP network and for fast failure recovery. HAST will provide storage
> using GEOM infrastructure, which means it will be file system and
> application independent and could be combined with any existing GEOM
> class. In case of a master node failure, the cluster will be able to
> switch to the slave node, check and mount UFS file system or import ZFS
> pool and continue to work without missing a single bit of data.
> 
> "High-availability is the number one requirement for any serious use of
> any operating system," said Pawel Jakub Dawidek, FreeBSD Developer.
> "Highly available storage is one of the key components in such
> environments. I strongly believe there are many FreeBSD users that have
> been waiting a long time for this functionality. I'll do my best to
> deliver software that matches FreeBSD quality and that will satisfy the
> needs of our users."
> 
> Pawel has been an active FreeBSD committer since 2003. During this
> period, he has touched almost every part of the kernel. But, his main
> interest in FreeBSD is storage and security related topics. Pawel is the
> author of various GEOM classes (eli, mirror, gate, label, journal, hsec,
> etc.), geom(8) utility, various opencrypto improvements as well as port
> of the ZFS file system from OpenSolaris to FreeBSD.
> 
> The project will complete by February 2010.
> 
> Sincerely,
> 
> The FreeBSD Foundation
> 
> _______________________________________________
> freebsd-announce at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-announce
> To unsubscribe, send any mail to "freebsd-announce-unsubscribe at freebsd.org"


From cwolsen at ubixos.com  Wed Oct 21 17:05:25 2009
From: cwolsen at ubixos.com (Christopher Olsen)
Date: Wed, 21 Oct 2009 17:05:25 -0400
Subject: [nycbug-talk] [Fwd: [FreeBSD-Announce] HAST
	Project	Announcement]
Message-ID: <200910212105.n9LL5D6l029728@fulton.nycbug.org>

Wow... 

-Christopher

Ubix Technologies
T: 212-514-6270
C: 516-903-2889
32 Broadway Suite 204
New York, NY 10004
http://www.tuve.tv/mrolsen

-----Original Message-----
From: George Rosamond <george at ceetonetechnology.com>
Sent: Wednesday, October 21, 2009 1:01 PM
To: Max Gribov <max at neuropunks.org>
Cc: nycbug <talk at lists.nycbug.org>
Subject: Re: [nycbug-talk] [Fwd: [FreeBSD-Announce] HAST Project	Announcement]

Max Gribov wrote:
> this sounds pretty awesome
> 

Very awesome.

(pasted in attached email)

> Dear FreeBSD Community,
> 
> The FreeBSD Foundation is pleased to announce a new funded project!
> 
> Pawel Jakub Dawidek has been awarded a grant to implement storage
> replication software that will enable users to use the FreeBSD operating
> system for highly available configurations where data has to be shared
> across the cluster nodes. The project is partly being funded by OMCnet
> Internet Service (GmbH www.omc.net) and TransIP BV (www.transip.nl).
> 
> The software will allow for synchronous block-level replication of any
> storage media (GEOM providers, using FreeBSD nomenclature) over the
> TCP/IP network and for fast failure recovery. HAST will provide storage
> using GEOM infrastructure, which means it will be file system and
> application independent and could be combined with any existing GEOM
> class. In case of a master node failure, the cluster will be able to
> switch to the slave node, check and mount UFS file system or import ZFS
> pool and continue to work without missing a single bit of data.
> 
> "High-availability is the number one requirement for any serious use of
> any operating system," said Pawel Jakub Dawidek, FreeBSD Developer.
> "Highly available storage is one of the key components in such
> environments. I strongly believe there are many FreeBSD users that have
> been waiting a long time for this functionality. I'll do my best to
> deliver software that matches FreeBSD quality and that will satisfy the
> needs of our users."
> 
> Pawel has been an active FreeBSD committer since 2003. During this
> period, he has touched almost every part of the kernel. But, his main
> interest in FreeBSD is storage and security related topics. Pawel is the
> author of various GEOM classes (eli, mirror, gate, label, journal, hsec,
> etc.), geom(8) utility, various opencrypto improvements as well as port
> of the ZFS file system from OpenSolaris to FreeBSD.
> 
> The project will complete by February 2010.
> 
> Sincerely,
> 
> The FreeBSD Foundation
> 
> _______________________________________________
> freebsd-announce at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-announce
> To unsubscribe, send any mail to "freebsd-announce-unsubscribe at freebsd.org"
_______________________________________________
talk mailing list
talk at lists.nycbug.org
http://lists.nycbug.org/mailman/listinfo/talk



From akosela at andykosela.com  Thu Oct 22 03:06:45 2009
From: akosela at andykosela.com (Andy Kosela)
Date: Thu, 22 Oct 2009 09:06:45 +0200
Subject: [nycbug-talk] [Fwd: [FreeBSD-Announce] HAST Project
	Announcement]
In-Reply-To: <4ADF3E78.50207@ceetonetechnology.com>
References: <1256144064.3279.12.camel@max-laptop>
	<4ADF3E78.50207@ceetonetechnology.com>
Message-ID: <4ae00485.SgIEmMZ84tJ1/KQx%akosela@andykosela.com>

George Rosamond <george at ceetonetechnology.com> wrote:

> Max Gribov wrote:
> > this sounds pretty awesome
> > 
>
> Very awesome.
>
> (pasted in attached email)
>
> > Dear FreeBSD Community,
> > 
> > The FreeBSD Foundation is pleased to announce a new funded project!
> > 
> > Pawel Jakub Dawidek has been awarded a grant to implement storage
> > replication software that will enable users to use the FreeBSD operating
> > system for highly available configurations where data has to be shared
> > across the cluster nodes. The project is partly being funded by OMCnet
> > Internet Service (GmbH www.omc.net) and TransIP BV (www.transip.nl).
> > 
> > The software will allow for synchronous block-level replication of any
> > storage media (GEOM providers, using FreeBSD nomenclature) over the
> > TCP/IP network and for fast failure recovery. HAST will provide storage
> > using GEOM infrastructure, which means it will be file system and
> > application independent and could be combined with any existing GEOM
> > class. In case of a master node failure, the cluster will be able to
> > switch to the slave node, check and mount UFS file system or import ZFS
> > pool and continue to work without missing a single bit of data.
> > 
> > "High-availability is the number one requirement for any serious use of
> > any operating system," said Pawel Jakub Dawidek, FreeBSD Developer.
> > "Highly available storage is one of the key components in such
> > environments. I strongly believe there are many FreeBSD users that have
> > been waiting a long time for this functionality. I'll do my best to
> > deliver software that matches FreeBSD quality and that will satisfy the
> > needs of our users."
> > 
> > Pawel has been an active FreeBSD committer since 2003. During this
> > period, he has touched almost every part of the kernel. But, his main
> > interest in FreeBSD is storage and security related topics. Pawel is the
> > author of various GEOM classes (eli, mirror, gate, label, journal, hsec,
> > etc.), geom(8) utility, various opencrypto improvements as well as port
> > of the ZFS file system from OpenSolaris to FreeBSD.
> > 
> > The project will complete by February 2010.
> > 
> > Sincerely,
> > 
> > The FreeBSD Foundation

Yes, this one along with already beautiful CARP will push FreeBSD more
in the HA area.  Definetly something to look for in the future.  It's
very nice it's gonna work not only with ZFS but also UFS, as many
production sites still use it.

--Andy


From spork at bway.net  Wed Oct 28 19:08:45 2009
From: spork at bway.net (Charles Sprickman)
Date: Wed, 28 Oct 2009 19:08:45 -0400 (EDT)
Subject: [nycbug-talk] cheap way to add drives to a 1U?
Message-ID: <alpine.OSX.2.00.0910281905070.37046@hotlap.local>

Any ideas?

I've got a 1U server available that has two SATA drive bays.  I need at 
least four drives...

Any cheap way to bundle 2-4 drives in some kind of external case and bring 
them back via eSATA or an SATA multilane cable?

I'm also on the fence about hw vs. sw RAID for this one.  In the past I've 
noticed many folks running ZFS over a bunch of SATA drives tend to use a 
decent HW RAID controller since historically some of the cheap 4+ port 
add-on SATA cards are either buggy or not well supported.  If anyone has 
input there regarding FBSD 8.0, that would be welcome...

Thanks,

Charles


From pete at nomadlogic.org  Wed Oct 28 19:40:57 2009
From: pete at nomadlogic.org (Pete Wright)
Date: Wed, 28 Oct 2009 23:40:57 +0000
Subject: [nycbug-talk] cheap way to add drives to a 1U?
In-Reply-To: <alpine.OSX.2.00.0910281905070.37046@hotlap.local>
References: <alpine.OSX.2.00.0910281905070.37046@hotlap.local>
Message-ID: <20091028234053.GA96564@pv.nomadlogic.org>

On Wed, Oct 28, 2009 at 07:08:45PM -0400, Charles Sprickman wrote:
> Any ideas?
> 
> I've got a 1U server available that has two SATA drive bays.  I need at 
> least four drives...
> 
> Any cheap way to bundle 2-4 drives in some kind of external case and bring 
> them back via eSATA or an SATA multilane cable?
> 

hey charles - i've used these guys in the past to build some relativly
cheap fast storage for some video playback systems:
http://www.pc-pitstop.com/sata_enclosures/

they have a 1U 4 disk external controller, as well as "shoebox" systems
depending on what form factor suits you.  we also used the Internal SATA
to External adapters which worked pretty well.  The cables are actually
compatible with infiBand - so if you got an IB system laying around you
are all set :)

> I'm also on the fence about hw vs. sw RAID for this one.  In the past I've 
> noticed many folks running ZFS over a bunch of SATA drives tend to use a 
> decent HW RAID controller since historically some of the cheap 4+ port 
> add-on SATA cards are either buggy or not well supported.  If anyone has 
> input there regarding FBSD 8.0, that would be welcome...
>

i've been a fan of building raidz pools using ZFS lately.  except for
super high performance workloads it works quite well and you can config
it to have double parity drives in your pool plus hot spares.

sun just released a patch to solaris 10 that allows you to drop in SSD
drives into your zpool config which can be used as caches which
in theory should give similar benefits of RAID controllers with BBU's.
but thats solaris not in fbsd yet...soon hopefully though :)

-p



From mark.saad at ymail.com  Wed Oct 28 22:14:51 2009
From: mark.saad at ymail.com (Mark Saad)
Date: Wed, 28 Oct 2009 19:14:51 -0700 (PDT)
Subject: [nycbug-talk] NetApp issue
Message-ID: <460042.12380.qm@web43407.mail.sp1.yahoo.com>

Does anyone know how to off-line a volume at boot up on a netapp with on 7.x

 --
Mark Saad
mark.saad at ymail.com



From riegersteve at gmail.com  Wed Oct 28 22:48:02 2009
From: riegersteve at gmail.com (riegersteve at gmail.com)
Date: Thu, 29 Oct 2009 02:48:02 +0000
Subject: [nycbug-talk] NetApp issue
Message-ID: <1967528330-1256784492-cardhu_decombobulator_blackberry.rim.net-855596504-@bda630.bisx.prod.on.blackberry>

Vol offline
Or I am not understanding your question

Sent via BlackBerry from T-Mobile


From riegersteve at gmail.com  Wed Oct 28 22:58:44 2009
From: riegersteve at gmail.com (riegersteve at gmail.com)
Date: Thu, 29 Oct 2009 02:58:44 +0000
Subject: [nycbug-talk] NetApp issue
Message-ID: <2064127120-1256785130-cardhu_decombobulator_blackberry.rim.net-526138265-@bda630.bisx.prod.on.blackberry>

Cfe command ?

------Original Message------
From: Mark Saad
To: steve.rieger
Cc: nycbug talk
Subject: Re: [nycbug-talk] NetApp issue
Sent: Oct 28, 2009 19:55

I was looking more about how to do this from the cfe prompt on boot up ? that or how I can destroy it from the cfe prompt that would rock. 

 --
Mark Saad
mark.saad at ymail.com



----- Original Message ----
> From: "riegersteve at gmail.com" <riegersteve at gmail.com>
> To: Mark Saad <mark.saad at ymail.com>
> Sent: Wed, October 28, 2009 10:46:42 PM
> Subject: Re: [nycbug-talk] NetApp issue
> 
> Vol offline
> Or I am not understanding your question
> 
> ------Original Message------
> From: Mark Saad
> Sender: talk-bounces at lists.nycbug.org
> To: nycbug talk
> Subject: [nycbug-talk] NetApp issue
> Sent: Oct 28, 2009 19:14
> 
> Does anyone know how to off-line a volume at boot up on a netapp with on 7.x
> 
> --
> Mark Saad
> mark.saad at ymail.com
> 
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
> 
> 
> Sent via BlackBerry from T-Mobile



Sent via BlackBerry from T-Mobile

From mark.saad at ymail.com  Wed Oct 28 23:10:56 2009
From: mark.saad at ymail.com (Mark Saad)
Date: Wed, 28 Oct 2009 20:10:56 -0700 (PDT)
Subject: [nycbug-talk] NetApp issue
In-Reply-To: <2064127120-1256785130-cardhu_decombobulator_blackberry.rim.net-526138265-@bda630.bisx.prod.on.blackberry>
References: <2064127120-1256785130-cardhu_decombobulator_blackberry.rim.net-526138265-@bda630.bisx.prod.on.blackberry>
Message-ID: <667764.42561.qm@web43407.mail.sp1.yahoo.com>

Steve
  I found it, it took some digging. When you boot up a NetApp can you hit ctr-c to get to a special boot menu.
>From there you can do a "vol_ofline volname aggratename "  and then boot as normal. This will make the netapp ignore that volume on a wafl check and then I can kill the volume from a standard prompt. 

 The background was I had a huge volume on my netapp puke all over the place. The box panicked and would not reboot w/o checking the volume. Since the volume was useless I needed to offline it and then kill it to make the box boot. 

This is why I advocate using FreeBSD and ZFS and not crappy expensive netapps. 



 --
Mark Saad
mark.saad at ymail.com



----- Original Message ----
> From: "riegersteve at gmail.com" <riegersteve at gmail.com>
> To: Mark Saad <mark.saad at ymail.com>
> Cc: nycbug talk <talk at lists.nycbug.org>
> Sent: Wed, October 28, 2009 10:58:44 PM
> Subject: Re: [nycbug-talk] NetApp issue
> 
> Cfe command ?
> 
> ------Original Message------
> From: Mark Saad
> To: steve.rieger
> Cc: nycbug talk
> Subject: Re: [nycbug-talk] NetApp issue
> Sent: Oct 28, 2009 19:55
> 
> I was looking more about how to do this from the cfe prompt on boot up ? that or 
> how I can destroy it from the cfe prompt that would rock. 
> 
> --
> Mark Saad
> mark.saad at ymail.com
> 
> 
> 
> ----- Original Message ----
> > From: "riegersteve at gmail.com" 
> > To: Mark Saad 
> > Sent: Wed, October 28, 2009 10:46:42 PM
> > Subject: Re: [nycbug-talk] NetApp issue
> > 
> > Vol offline
> > Or I am not understanding your question
> > 
> > ------Original Message------
> > From: Mark Saad
> > Sender: talk-bounces at lists.nycbug.org
> > To: nycbug talk
> > Subject: [nycbug-talk] NetApp issue
> > Sent: Oct 28, 2009 19:14
> > 
> > Does anyone know how to off-line a volume at boot up on a netapp with on 7.x
> > 
> > --
> > Mark Saad
> > mark.saad at ymail.com
> > 
> > _______________________________________________
> > talk mailing list
> > talk at lists.nycbug.org
> > http://lists.nycbug.org/mailman/listinfo/talk 
> > 
> > 
> > Sent via BlackBerry from T-Mobile
> 
> 
> 
> Sent via BlackBerry from T-Mobile



From spork at bway.net  Wed Oct 28 23:15:36 2009
From: spork at bway.net (Charles Sprickman)
Date: Wed, 28 Oct 2009 23:15:36 -0400 (EDT)
Subject: [nycbug-talk] cheap way to add drives to a 1U?
In-Reply-To: <20091028234053.GA96564@pv.nomadlogic.org>
References: <alpine.OSX.2.00.0910281905070.37046@hotlap.local>
	<20091028234053.GA96564@pv.nomadlogic.org>
Message-ID: <alpine.OSX.2.00.0910282310330.323@freemac.nat.fasttrackmonkey.com>

On Wed, 28 Oct 2009, Pete Wright wrote:

> On Wed, Oct 28, 2009 at 07:08:45PM -0400, Charles Sprickman wrote:
>> Any ideas?
>>
>> I've got a 1U server available that has two SATA drive bays.  I need at
>> least four drives...
>>
>> Any cheap way to bundle 2-4 drives in some kind of external case and bring
>> them back via eSATA or an SATA multilane cable?
>>
>
> hey charles - i've used these guys in the past to build some relativly
> cheap fast storage for some video playback systems:
> http://www.pc-pitstop.com/sata_enclosures/

Wow.  One-stop shopping.  This seems like a decent enough deal:

http://www.pc-pitstop.com/sata_enclosures/scsat44xb.asp

Their drive prices are really good, actually a bit lower than NewEgg on 
the WD RE3s.

> they have a 1U 4 disk external controller, as well as "shoebox" systems
> depending on what form factor suits you.  we also used the Internal SATA
> to External adapters which worked pretty well.  The cables are actually
> compatible with infiBand - so if you got an IB system laying around you
> are all set :)

At this particular place we have nothing useful laying around.  Lots of 
things that catch your eye at first, but on closer examination it's all 
useless junk and/or requires more money to work than a new widget that 
surpasses the old widget in some major way.

>> I'm also on the fence about hw vs. sw RAID for this one.  In the past I've
>> noticed many folks running ZFS over a bunch of SATA drives tend to use a
>> decent HW RAID controller since historically some of the cheap 4+ port
>> add-on SATA cards are either buggy or not well supported.  If anyone has
>> input there regarding FBSD 8.0, that would be welcome...
>>
>
> i've been a fan of building raidz pools using ZFS lately.  except for
> super high performance workloads it works quite well and you can config
> it to have double parity drives in your pool plus hot spares.
>
> sun just released a patch to solaris 10 that allows you to drop in SSD
> drives into your zpool config which can be used as caches which
> in theory should give similar benefits of RAID controllers with BBU's.
> but thats solaris not in fbsd yet...soon hopefully though :)

What host adapters are you using on the FBSD boxes?  Some time ago I was 
cautioned against basically all Highpoint and SIIS cards on -stable.  It's 
pretty slim pickings once you take those brands out of the mix.

Thanks,

Charles

> -p
>
>


From mark.saad at ymail.com  Wed Oct 28 22:55:12 2009
From: mark.saad at ymail.com (Mark Saad)
Date: Wed, 28 Oct 2009 19:55:12 -0700 (PDT)
Subject: [nycbug-talk] NetApp issue
In-Reply-To: <342603713-1256784408-cardhu_decombobulator_blackberry.rim.net-131958224-@bda630.bisx.prod.on.blackberry>
References: <342603713-1256784408-cardhu_decombobulator_blackberry.rim.net-131958224-@bda630.bisx.prod.on.blackberry>
Message-ID: <959795.67724.qm@web43401.mail.sp1.yahoo.com>

I was looking more about how to do this from the cfe prompt on boot up ? that or how I can destroy it from the cfe prompt that would rock. 

 --
Mark Saad
mark.saad at ymail.com



----- Original Message ----
> From: "riegersteve at gmail.com" <riegersteve at gmail.com>
> To: Mark Saad <mark.saad at ymail.com>
> Sent: Wed, October 28, 2009 10:46:42 PM
> Subject: Re: [nycbug-talk] NetApp issue
> 
> Vol offline
> Or I am not understanding your question
> 
> ------Original Message------
> From: Mark Saad
> Sender: talk-bounces at lists.nycbug.org
> To: nycbug talk
> Subject: [nycbug-talk] NetApp issue
> Sent: Oct 28, 2009 19:14
> 
> Does anyone know how to off-line a volume at boot up on a netapp with on 7.x
> 
> --
> Mark Saad
> mark.saad at ymail.com
> 
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
> 
> 
> Sent via BlackBerry from T-Mobile



From jonathan at kc8onw.net  Thu Oct 29 00:46:54 2009
From: jonathan at kc8onw.net (Jonathan)
Date: Thu, 29 Oct 2009 00:46:54 -0400
Subject: [nycbug-talk] cheap way to add drives to a 1U?
In-Reply-To: <alpine.OSX.2.00.0910282310330.323@freemac.nat.fasttrackmonkey.com>
References: <alpine.OSX.2.00.0910281905070.37046@hotlap.local>	<20091028234053.GA96564@pv.nomadlogic.org>
	<alpine.OSX.2.00.0910282310330.323@freemac.nat.fasttrackmonkey.com>
Message-ID: <4AE91E3E.5070001@kc8onw.net>

On 10/28/2009 11:15 PM, Charles Sprickman wrote:
> On Wed, 28 Oct 2009, Pete Wright wrote:
>
>> sun just released a patch to solaris 10 that allows you to drop in SSD
>> drives into your zpool config which can be used as caches which
>> in theory should give similar benefits of RAID controllers with BBU's.
>> but thats solaris not in fbsd yet...soon hopefully though :)
>
> What host adapters are you using on the FBSD boxes?  Some time ago I was
> cautioned against basically all Highpoint and SIIS cards on -stable.  It's
> pretty slim pickings once you take those brands out of the mix.

I've had good luck with my LSI SAS controller [1] even with standard 
SATA consumer drives.  I believe I saw something about a new management 
tool for FreeBSD recently but I haven't had to change anything for a 
couple of years so I haven't looked into it.  I know having to go into 
the card BIOS to make changes was a major blocking point for a long 
while for some people.

On a related note does anyone know of SAS or SATA port multipliers that 
work with FBSD for <$10 dollars/port?

I can't speak for SIIS but I bought a 2 port highpoint SATA controller 
years ago that gave me silent data corruption, thankfully  I still had 
alternate copies of my data.  I haven't gone near highpoint hardware since.

Jonathan

[1] 
http://www.lsi.com/storage_home/products_home/host_bus_adapters/sas_hbas/internal/sas3081e-r/index.html


From spork at bway.net  Thu Oct 29 01:24:32 2009
From: spork at bway.net (Charles Sprickman)
Date: Thu, 29 Oct 2009 01:24:32 -0400 (EDT)
Subject: [nycbug-talk] cheap way to add drives to a 1U?
In-Reply-To: <4AE91E3E.5070001@kc8onw.net>
References: <alpine.OSX.2.00.0910281905070.37046@hotlap.local>
	<20091028234053.GA96564@pv.nomadlogic.org>
	<alpine.OSX.2.00.0910282310330.323@freemac.nat.fasttrackmonkey.com>
	<4AE91E3E.5070001@kc8onw.net>
Message-ID: <alpine.OSX.2.00.0910290118440.43956@hotlap.local>

On Thu, 29 Oct 2009, Jonathan wrote:

> On 10/28/2009 11:15 PM, Charles Sprickman wrote:
>> On Wed, 28 Oct 2009, Pete Wright wrote:
>>
>>> sun just released a patch to solaris 10 that allows you to drop in SSD
>>> drives into your zpool config which can be used as caches which
>>> in theory should give similar benefits of RAID controllers with BBU's.
>>> but thats solaris not in fbsd yet...soon hopefully though :)
>>
>> What host adapters are you using on the FBSD boxes?  Some time ago I was
>> cautioned against basically all Highpoint and SIIS cards on -stable.  It's
>> pretty slim pickings once you take those brands out of the mix.
>
> I've had good luck with my LSI SAS controller [1] even with standard
> SATA consumer drives.

Not a bad price at all ($209):

http://www.newegg.com/Product/Product.aspx?Item=N82E16816118100&Tpk=LSI%20SAS%203081E-R


> I believe I saw something about a new management tool for FreeBSD 
> recently but I haven't had to change anything for a couple of years so I 
> haven't looked into it.  I know having to go into the card BIOS to make 
> changes was a major blocking point for a long while for some people.

Yeah, I think it's going to be in 8.0, but Scott Long pointed me to it 
saying it would work on 7.2, and it does.  It's in the FBSD svn repo 
somewhere, the tool is "mptutil".  I'm using it without issue on a 
Dell-badged LSI RAID controller:

mpt0: <LSILogic SAS/SATA Adapter> port 0xec00-0xecff mem 
0xfe9fc000-0xfe9fffff,0xfe9e0000-0xfe9effff irq 16 at device 8.0 on pci2
mpt0: [ITHREAD]
mpt0: MPI Version=1.5.13.0
mpt0: Capabilities: ( RAID-0 RAID-1E RAID-1 )

> On a related note does anyone know of SAS or SATA port multipliers that
> work with FBSD for <$10 dollars/port?

There was this thread on -stable recently, it looks like support is a work 
in progress...

http://lists.freebsd.org/pipermail/freebsd-stable/2009-October/052441.html

> I can't speak for SIIS but I bought a 2 port highpoint SATA controller
> years ago that gave me silent data corruption, thankfully  I still had
> alternate copies of my data.  I haven't gone near highpoint hardware since.

It's just a gut feeling, but Highpoint and SIIS seem like very low-end 
PC-modder type toys.  Thanks for the LSI tip though, I'm a bit more 
trusting of them.

C

> Jonathan
>
> [1]
> http://www.lsi.com/storage_home/products_home/host_bus_adapters/sas_hbas/internal/sas3081e-r/index.html
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
>


From pete at nomadlogic.org  Thu Oct 29 12:54:05 2009
From: pete at nomadlogic.org (Pete Wright)
Date: Thu, 29 Oct 2009 16:54:05 +0000
Subject: [nycbug-talk] cheap way to add drives to a 1U?
In-Reply-To: <alpine.OSX.2.00.0910282310330.323@freemac.nat.fasttrackmonkey.com>
References: <alpine.OSX.2.00.0910281905070.37046@hotlap.local>
	<20091028234053.GA96564@pv.nomadlogic.org>
	<alpine.OSX.2.00.0910282310330.323@freemac.nat.fasttrackmonkey.com>
Message-ID: <20091029165401.GA51681@pv.nomadlogic.org>

On Wed, Oct 28, 2009 at 11:15:36PM -0400, Charles Sprickman wrote:
> On Wed, 28 Oct 2009, Pete Wright wrote:
> 
> >On Wed, Oct 28, 2009 at 07:08:45PM -0400, Charles Sprickman wrote:
> >>Any ideas?
> >>
> >>I've got a 1U server available that has two SATA drive bays.  I need at
> >>least four drives...
> >>
> >>Any cheap way to bundle 2-4 drives in some kind of external case and bring
> >>them back via eSATA or an SATA multilane cable?
> >>
> >
> >hey charles - i've used these guys in the past to build some relativly
> >cheap fast storage for some video playback systems:
> >http://www.pc-pitstop.com/sata_enclosures/
> 
> Wow.  One-stop shopping.  This seems like a decent enough deal:
> 
> http://www.pc-pitstop.com/sata_enclosures/scsat44xb.asp
> 
> Their drive prices are really good, actually a bit lower than NewEgg on 
> the WD RE3s.
> 

yea we were pretty happy with the prices and didn't have issues with
product once we got stuff.

> 
> What host adapters are you using on the FBSD boxes?  Some time ago I was 
> cautioned against basically all Highpoint and SIIS cards on -stable.  It's 
> pretty slim pickings once you take those brands out of the mix.
> 

on my workstation I've just installed this controller:
02:08.0 Mass storage controller: Promise Technology, Inc. PDC40718 (SATA
300 TX4) (rev 02)

Its been working like a charm.  This is on a dodgy Dell XPS desktop
system which an awful Nvidia sata "raid" controller.  fbsd didn't like
that at all - once i installed the promise card everything was happy.
got it from macmall - and seems to work ok for r&d purposes:

http://www.macmall.com/p/product~dpno~564769~pdp.dabgfii

with this controller what you can do is buy one of the
internal<->external sata adapters from pc-pitstop or somewhere to
connect your shoebox or external jbod.

HTH!
-pete


From bkominik at gmail.com  Fri Oct 30 11:22:54 2009
From: bkominik at gmail.com (Barry Kominik)
Date: Fri, 30 Oct 2009 11:22:54 -0400
Subject: [nycbug-talk] ATX power extension cables
Message-ID: <775C90B5-FA38-4CA1-98F8-C3DEAE852146@gmail.com>

Anyone know where to get atx power extension cables in NYC? I need one  
24-24 pin ATX and two 8-8 pin for connecting a power supply to the  
mother board. They should be about 9 inches or so. I can buy them on  
line but the shipping cost is almost as much as the cables.

Cheers,
Barry


From nycbug-list at 2xlp.com  Fri Oct 30 16:34:49 2009
From: nycbug-list at 2xlp.com (Jonathan Vanasco)
Date: Fri, 30 Oct 2009 16:34:49 -0400
Subject: [nycbug-talk] how can i limit login attempts by ip ?
In-Reply-To: <4AE91E3E.5070001@kc8onw.net>
References: <alpine.OSX.2.00.0910281905070.37046@hotlap.local>	<20091028234053.GA96564@pv.nomadlogic.org>
	<alpine.OSX.2.00.0910282310330.323@freemac.nat.fasttrackmonkey.com>
	<4AE91E3E.5070001@kc8onw.net>
Message-ID: <A8B02CBD-C0CE-4CA3-A4EF-D9EDFC55AD77@2xlp.com>

just looked at my logs, and it seems that sshd gets dictionary'd on my  
freebsd box a bit

can anyone recommend a good way to limit this ?


From matt at atopia.net  Sat Oct 31 21:01:50 2009
From: matt at atopia.net (Matt Juszczak)
Date: Sat, 31 Oct 2009 21:01:50 -0400 (EDT)
Subject: [nycbug-talk] Runaway cron server
Message-ID: <alpine.BSF.2.00.0910312052340.24305@pluto.atopia.net>

Hi all, Happy Halloween...

I've been having some issues with a runaway cron server.  We've got crons 
setup, and I'm using a locking system to make sure no cron runs 
overlapping another cron (though this problem was occuring prior to the 
locking system being put in place).  After a day or two, our server load 
spikes, the crons stop working, and top shows:

  6702 root          1  97    0 16292K  3312K RUN    3  13:50  4.79% cron
65338 root          1  96    0 16328K  3324K RUN    3 138:23  4.59% cron
69837 root          1  96    0 16328K  3324K RUN    3 116:05  4.59% cron
90642 root          1  96    0 16328K  3324K CPU2   2  37:39  4.59% cron
65729 root          1  96    0 16328K  3324K RUN    3 136:01  4.49% cron
79591 root          1  96    0 16328K  3324K RUN    0  80:51  4.49% cron
85363 root          1  96    0 16328K  3324K RUN    0  64:42  4.49% cron
90625 root          1  96    0 16328K  3324K CPU0   0  51:58  4.49% cron
82872 root          1  96    0 16328K  3324K RUN    3  50:16  4.49% cron
83551 root          1  96    0 16292K  3312K RUN    3  49:13  4.49% cron
80016 root          1  96    0 16328K  3324K RUN    1  79:37  4.39% cron
85758 root          1  96    0 16292K  3312K RUN    0  63:36  4.39% cron
90284 root          1  96    0 16328K  3324K RUN    2  52:45  4.39% cron
61636 root          1  96    0 16328K  3324K RUN    2 171:26  4.30% cron

And even more info:

s505# ps auxw | grep cron | wc
      105    1464   10026

If I try to truss or ktrace one of the processes, it returns no output. 
This behavior is reliable and occurs every single time.  I'll restart the 
cron server, and things will run fine for a little while, but will then 
get to this point again.

Any ideas?  I'm really stuck.

-Matt


From sahil at tandon.net  Sat Oct 31 21:58:34 2009
From: sahil at tandon.net (Sahil Tandon)
Date: Sat, 31 Oct 2009 21:58:34 -0400
Subject: [nycbug-talk] how can i limit login attempts by ip ?
In-Reply-To: <A8B02CBD-C0CE-4CA3-A4EF-D9EDFC55AD77@2xlp.com>
References: <alpine.OSX.2.00.0910281905070.37046@hotlap.local>
	<20091028234053.GA96564@pv.nomadlogic.org>
	<alpine.OSX.2.00.0910282310330.323@freemac.nat.fasttrackmonkey.com>
	<4AE91E3E.5070001@kc8onw.net>
	<A8B02CBD-C0CE-4CA3-A4EF-D9EDFC55AD77@2xlp.com>
Message-ID: <20091101015833.GB6798@magic.hamla.org>

On Fri, 30 Oct 2009, Jonathan Vanasco wrote:

> just looked at my logs, and it seems that sshd gets dictionary'd on my
> freebsd box a bit
> 
> can anyone recommend a good way to limit this ?

I've had success with grok: http://www.semicomplete.com/projects/grok/

BTW, please don't hijack threads.

-- 
Sahil Tandon <sahil at tandon.net>