Server Help Latest Questionshttps://forums.funtoo.org/forum/8-server-help/Server Help Latest Questionsensshd connection reset somewhere during KEX phasehttps://forums.funtoo.org/topic/4983-sshd-connection-reset-somewhere-during-kex-phase/ Hi, sshd does not accept connections, even from the local system. Once the computer was powered up last time months ago, it worked fine. Unfortunately, I cannot remember for sure if there ran package update or it happened out of blue. sshd_config was not touched since the last time sshd worked, I started playing with config only after sshd already broke apart.

arch: x86-32bit subarch: atom_32

OpenSSH_8.4p1, OpenSSL 1.1.1l  24 Aug 2021

Any ssh attempt drops connection immediately. 

Server command and log: 

/usr/sbin/sshd -dddDe -o PidFile=/run/sshd.pid
Quote

debug2: load_server_config: filename /etc/ssh/sshd_config
debug2: load_server_config: done config len = 553
debug2: parse_server_config_depth: config /etc/ssh/sshd_config len 553
debug3: /etc/ssh/sshd_config:15 setting AddressFamily inet
debug3: /etc/ssh/sshd_config:21 setting HostKey /etc/ssh/ssh_host_ed25519_key
debug3: /etc/ssh/sshd_config:26 setting RekeyLimit default none
debug3: /etc/ssh/sshd_config:40 setting PubkeyAuthentication no
debug3: /etc/ssh/sshd_config:52 setting HostbasedAuthentication no
debug3: /etc/ssh/sshd_config:60 setting PasswordAuthentication yes
debug3: /etc/ssh/sshd_config:65 setting ChallengeResponseAuthentication no
debug3: /etc/ssh/sshd_config:86 setting UsePAM no
debug3: /etc/ssh/sshd_config:95 setting PrintMotd no
debug3: /etc/ssh/sshd_config:96 setting PrintLastLog no
debug3: /etc/ssh/sshd_config:123 setting AcceptEnv LANG LC_ALL LC_COLLATE LC_CTYPE LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LANGUAGE LC_ADDRESS LC_IDENTIFICATION LC_MEASUREMENT LC_NAME LC_PAPER LC_TELEPHONE
debug3: /etc/ssh/sshd_config:125 setting AcceptEnv COLORTERM
debug1: sshd version OpenSSH_8.4, OpenSSL 1.1.1l  24 Aug 2021
debug1: private host key #0: ssh-ed25519 SHA256:uSzM72qmxWdv7Wl3L4bGj5NMBpd0x9VxAwNibIXdP6k
debug1: rexec_argv[0]='/usr/sbin/sshd'
debug1: rexec_argv[1]='-dddDe'
debug1: rexec_argv[2]='-o'
debug1: rexec_argv[3]='PidFile=/run/sshd.pid'
debug3: oom_adjust_setup
debug1: Set /proc/self/oom_score_adj from 0 to -1000
debug2: fd 3 setting O_NONBLOCK
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
debug3: fd 4 is not O_NONBLOCK
debug1: Server will not fork when running in debugging mode.
debug3: send_rexec_state: entering fd = 7 config len 553
debug3: ssh_msg_send: type 0
debug3: send_rexec_state: done
debug1: rexec start in 4 out 4 newsock 4 pipe -1 sock 7
debug3: recv_rexec_state: entering fd = 5
debug3: ssh_msg_recv entering
debug3: recv_rexec_state: done
debug2: parse_server_config_depth: config rexec len 553
debug3: rexec:15 setting AddressFamily inet
debug3: rexec:21 setting HostKey /etc/ssh/ssh_host_ed25519_key
debug3: rexec:26 setting RekeyLimit default none
debug3: rexec:40 setting PubkeyAuthentication no
debug3: rexec:52 setting HostbasedAuthentication no
debug3: rexec:60 setting PasswordAuthentication yes
debug3: rexec:65 setting ChallengeResponseAuthentication no
debug3: rexec:86 setting UsePAM no
debug3: rexec:95 setting PrintMotd no
debug3: rexec:96 setting PrintLastLog no
debug3: rexec:123 setting AcceptEnv LANG LC_ALL LC_COLLATE LC_CTYPE LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LANGUAGE LC_ADDRESS LC_IDENTIFICATION LC_MEASUREMENT LC_NAME LC_PAPER LC_TELEPHONE
debug3: rexec:125 setting AcceptEnv COLORTERM
debug1: sshd version OpenSSH_8.4, OpenSSL 1.1.1l  24 Aug 2021
debug1: private host key #0: ssh-ed25519 SHA256:uSzM72qmxWdv7Wl3L4bGj5NMBpd0x9VxAwNibIXdP6k
debug1: inetd sockets after dupping: 3, 3
Connection from 127.0.0.1 port 59658 on 127.0.0.1 port 22 rdomain ""
ebug1: Local version string SSH-2.0-OpenSSH_8.4
debug1: Remote protocol version 2.0, remote software version OpenSSH_8.4
debug1: match: OpenSSH_8.4 pat OpenSSH* compat 0x04000000
debug2: fd 3 setting O_NONBLOCK
debug3: ssh_sandbox_init: preparing seccomp filter sandbox
debug2: Network child is on pid 8608
debug3: preauth child monitor started
debug3: privsep user:group 22:22 [preauth]
debug1: permanently_set_uid: 22/22 [preauth]
debug3: ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth]
debug3: ssh_sandbox_child: attaching seccomp filter program [preauth]
debug1: list_hostkey_types: ssh-ed25519 [preauth]
debug3: send packet: type 20 [preauth]
debug1: SSH2_MSG_KEXINIT sent [preauth]
debug1: monitor_read_log: child log fd closed
debug3: mm_request_receive entering
debug1: do_cleanup
debug1: Killing privsep child 8608

Client command and log: 

ssh -vvv localhost
Quote

OpenSSH_8.4p1, OpenSSL 1.1.1l  24 Aug 2021
debug1: Reading configuration data /home/prof/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/home/prof/.ssh/known_hosts'
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/home/prof/.ssh/known_hosts2'
debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling
debug2: resolving "localhost" port 22
debug2: ssh_connect_direct
debug1: Connecting to localhost [::1] port 22.
debug1: connect to address ::1 port 22: Connection refused
debug1: Connecting to localhost [127.0.0.1] port 22.
debug1: Connection established.
debug1: identity file /home/prof/.ssh/id_ed25519 type 3
debug1: identity file /home/prof/.ssh/id_ed25519-cert type 7
debug1: Local version string SSH-2.0-OpenSSH_8.4
debug1: Remote protocol version 2.0, remote software version OpenSSH_8.4
debug1: match: OpenSSH_8.4 pat OpenSSH* compat 0x04000000
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to localhost:22 as 'prof'
debug3: hostkeys_foreach: reading file "/home/prof/.ssh/known_hosts"
debug3: hostkeys_foreach: reading file "/etc/ssh/ssh_known_hosts"
debug3: record_hostkey: found ca key type ED25519 in file /etc/ssh/ssh_known_hosts:1
debug3: load_hostkeys: loaded 1 keys from localhost
debug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c
debug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com,ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib@openssh.com,zlib
debug2: compression stoc: none,zlib@openssh.com,zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256
debug2: host key algorithms: ssh-ed25519
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib@openssh.com
debug2: compression stoc: none,zlib@openssh.com
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ssh-ed25519
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
Connection reset by 127.0.0.1 port 22

Tried different things found on google, such as network MTU, various ciphers/MACs/KexAlgorithms settings, nothing sheds any light. Getting kind of desperate now.

Thank you for all your help!

]]>4983Thu, 07 Oct 2021 16:26:34 +0000Fiber Channel and LSI FC949ES 7204EP-LC (mptfc?)https://forums.funtoo.org/topic/4957-fiber-channel-and-lsi-fc949es-7204ep-lc-mptfc/ I'm very new to fiber channel and storage arrays. While trying to set up an old JBOD (4G fiber channel SFP) and the HBA mentioned in the title of this post, I have been unable to figure it out on my own thus far. I'm using funtoo, with the cinnamon stage tarball as a base and debian-sources for my kernel source. The card shows up in lspci output, but the expected driver (mptfc, at least according to https://wiki.debian.org/DeviceDatabase/PCI) doesn't load, and doesn't even seem to be present on my system. Nothing in dmesg. I found mpt3sas, but that module doesn't seem to help. Is there someone on here with some expertise in this area that could point me in the right direction to get this working? I look forward to being able to test this JBOD--hopefully it works.

 

UPDATE:

I found the module source in debian-sources, and it looks like the default is to compile it as a module, but modprobe doesn't pick it up on my system. I'm running `make modules` now to see if I can load the module from there. My kernel-fu is a little rusty...too much relying on genkernel lately. I haven't even had to touch genkernel (beyond tweaking genkernel.conf for a few things) on this system.

]]>4957Thu, 03 Jun 2021 06:04:35 +0000LXD containers can be created, but not startedhttps://forums.funtoo.org/topic/4933-lxd-containers-can-be-created-but-not-started/ Managed to install lxd and everything that comes with it on my AMD k10 system (Phenom II X4 965 proc, 16GB RAM, 120GB SSD). Then I proceeded by getting the lxd image for k10 arch and set up lxd following the Wiki by DRobbins. but launching the testcontainer as per the instructions failed with an error. After some trial and continues errors I managed to get both the lxd-generic_64 and intel westmere images installed and associated with a testcontainer: 

# lxc list
+---------------+---------+------+------+-----------+-----------+
|     NAME      |  STATE  | IPV4 | IPV6 |   TYPE    | SNAPSHOTS |
+---------------+---------+------+------+-----------+-----------+
| testcon2      | STOPPED |      |      | CONTAINER | 0         |
+---------------+---------+------+------+-----------+-----------+
| testcontainer | STOPPED |      |      | CONTAINER | 0         |
+---------------+---------+------+------+-----------+-----------+

testcontainer is associated with the generic_64 image, testcon2 has the intel westmere image as its base. Attempts to launch these fail with an "error: not found" message.

The logs for both are identical (except of course for the name) and show this: 

lxc info --show-log testcontainer
Name: testcontainer
Location: none
Remote: unix://
Architecture: x86_64
Created: 2021/02/28 20:51 UTC
Status: Stopped
Type: container
Profiles: default

Log:

The "location: none" instance is suspicious, so I had a look in /var/lib/lxd/containers: 

ls -l /var/lib/lxd/containers/
total 0
lrwxrwxrwx 1 root root 54 Feb 28 21:53 testcon2 -> /var/lib/lxd/storage-pools/default/containers/testcon2
lrwxrwxrwx 1 root root 59 Feb 28 21:52 testcontainer -> /var/lib/lxd/storage-pools/default/containers/testcontainer

And a look inside /var/lib/lxd/storage-pools/default/containers/ resulted in: 

ls -l
total 0
d--x------ 1 root root 78 Feb 28 21:53 testcon2
d--x------ 1 root root 78 Feb 28 21:52 testcontainer

I see a distinct lack of permissions, is that the root (sic ? ) cause of the issue?

 

Anything else I missed or went wrong?

 

TIA!

 

[edit: I forgot to mention that during lxd init I choose btrfs as storage backend, the relevant btrfs packages have been installed (including the maintenance package) /edit]

]]>4933Sun, 28 Feb 2021 21:22:04 +0000Starting a qemu virtual machine at boothttps://forums.funtoo.org/topic/4469-starting-a-qemu-virtual-machine-at-boot/ I created a virtual machine using qemu.  What's the proper way to automatically start it at boot time, and stop it at shutdown?  Do I need to use libvirt for this?  If so, how do I make libvirt aware of my existing qemu image?

]]>4469Wed, 29 Jan 2020 02:42:54 +0000Samba crashes on boot, works if restartedhttps://forums.funtoo.org/topic/429-samba-crashes-on-boot-works-if-restarted/I have a problem with samba on a file server that's been happening for a while, but just now having a closer look.  When I boot the server, about the only feedback I find is in /var/log/samba/log.smbd:

[2015/03/16 13:31:49,  0] smbd/server.c:1072(main)
  smbd version 3.6.25 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2011

So, everything seems fine, but the shares are unresponsive.  So I check status:

# /etc/init.d/samba status
 * status: crashed

And then this shows up in /var/log/messages:

Mar 16 13:33:04 wolfie /etc/init.d/samba[3616]: status: crashed

But there are actually smbd processes running:

# ps u -C smbd
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root      3216  0.0  0.1  49376  7172 ?        Ss   13:31   0:00 /usr/sbin/smbd -D
root      3235  0.0  0.1  49376  4452 ?        S    13:31   0:00 /usr/sbin/smbd -D

So I restart:

# /etc/init.d/samba restart
 * samba -> stop: smbd ...                                                                                                                     [ ok ]
 * samba -> stop: nmbd ...
 * start-stop-daemon: no matching processes found                                                                                              [ ok ]
 * samba -> start: smbd ...                                                                                                                    [ ok ]
 * samba -> start: nmbd ...
# /etc/init.d/samba status
 * status: started
# ps u -C smbd
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root      3761  0.0  0.1  49376  7308 ?        Ss   13:41   0:00 /usr/sbin/smbd -D
root      3764  0.0  0.1  49376  4348 ?        S    13:41   0:00 /usr/sbin/smbd -D

At this point, everything works.  Any thoughts on how to get this working on boot?

 

The box is funtoo-stable running in a VirtualBox VM using a virtio-net bridged adapter and dhcpcd (static reservation), samba 3.6.25, gentoo-sources-3.18.7.

 

Thanks.

]]>429Mon, 16 Mar 2015 21:11:39 +0000Containers not working after LXC 3.2.1 updatehttps://forums.funtoo.org/topic/4060-containers-not-working-after-lxc-321-update/  

Hi,

I've just updated to the latest LXC version, 3.2.1.20191211, and two of my LXC containers stopped working. Both of them have systemd, one is a Centos 7.5 and the other one is an Ubuntu 16.04. I'm also running some Alpine Linux containers which work without any problem. Reverting to LXC 3.0.4 solved the issue. 

The error I'm getting in the container's console: 

Failed to insert module 'autofs4'
Failed to mount cgroup at /sys/fs/cgroup/systemd: Operation not permitted
systemd 219 running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 -SECCOMP +BLKID +ELFUTILS +KMOD +IDN)
Detected virtualization lxc.
Detected architecture x86-64.

Welcome to CentOS Linux 7 (Core)

Set hostname to <fever-backend>.
Failed to read AF_UNIX datagram queue length, ignoring: No such file or directory
Cannot determine cgroup we are running in: No such file or directory
Failed to allocate manager object: No such file or directory
!!!!!!Failed to allocate manager object, freezing.

Can anyone shed some light on the issue?

Thx

]]>4060Thu, 26 Dec 2019 11:29:16 +0000MongoDB in 1.3https://forums.funtoo.org/topic/2162-mongodb-in-13/ I thought I would post a quick fix that I did for mongodb in 1.3.

The 4.0.4 ebuild in 1.3 is broken.

I posted a local overlay here that works with manual ebuild commands.

https://code.funtoo.org/bitbucket/users/johnwiki/repos/mongodb-for-funtoo1.3/browse

Feel free to use if you like.

If I get time, I'll try to submit an official pull request (even though I've never done one, so I may not be successful my first time)

Instructions to use it should be here:

https://www.funtoo.org/Creating_Your_Own_Overlay

 

 

]]>2162Sun, 02 Jun 2019 11:45:43 +0000Server with ECChttps://forums.funtoo.org/topic/1683-server-with-ecc/ I am planning to upgrade my good old server that has been around for some time now. Mostly it is a NAS with 4*4TB disks in a BTRFS RAID 10 array for now. I have since logn used both ZFS and BTRFS and regardless of choice it seems to be a consensus that one shall use ECC memory to prevent that the calculated check sums are faulty.

I have non-ecc today and I have experienced degradation of the content.

ECC is new territory for me and I have a few questions;

1. On my desk is a ASUS Prime X370-PRO mother board. The specs say "DDR4 ECC or NON-ECC memory, unbufferd". While check out some other gaming boards it is more clear that "sure, use ECC or non-ECC as you please - we will not use the ECC-function anyway". Are there anyone that can confirm if ECC will be enabled given that I use compatible ECC me memories?

2. Is there anything particular I need to know to get ECC working? Kernel, use-flags, tools that is to be installed?

3. Is there a way to verify that ECC in fact is in use and operative?

 

Cheers,
Erik

 

]]>1683Tue, 12 Jun 2018 16:31:43 +0000LXD Network Setuphttps://forums.funtoo.org/topic/2131-lxd-network-setup/ Hi.

I need some help setting up networking for my LXD containers. I have followed drobins guides on the wiki and they cover most everything except for networking. When I search and try the thing I find it goes wrong.

The setup:

On my server I have a physical interface eth0 with ip 192.168.1.2. I like to create a LXD container that uses an own static IP on eth0 (.3) so that I can use it for SSH and web server accessible from inside the LAN. Naturally I want the container to be able to network out. I do NOT want NAT (I think). I do not intend to have a rproxy - I will map a unique hostname to the IP.

 

I have tried to many ways I no longer can describe them but mostly I like the concept for this one as it seems simple enough: https://stgraber.org/2016/10/27/network-management-with-lxd-2-3/

Problem is that even though there seems to be an IP it does not pass through.

Also, do I have to configure the static IP using normal networking inside the container? I have tried and it still does not fall through.

Anyone that knows a guide for the LXD beginner?

There need to be a setup for the Funtoo Computing that does this or similar, it's jut missing in the guide.

Cheers,

Erik

]]>2131Tue, 28 May 2019 05:00:13 +0000Networking concept helphttps://forums.funtoo.org/topic/1969-networking-concept-help/ Hi,

 

I have just purchased two second hand servers building my own Funtoo server cluster here at home. This was actually easier and not particular more expensive than locating motherboards and CPUs with working support for ECC for my ZFS file server. But I also found a second hand server suitable for application server and as the optical fibre is on its way pretty soon, I moved the servers to the basement, and Funtoo is now more suitable for server usage than before, there was just no reason why not to purchase ?

I will come back to the specs in other posts. Right now it is about planning the network. Both servers have several (4+) network interfaces.

 

What I think I am trying to do (well I am open for proposals) is this:

Fileserver will be the ZFS file server. I will need this for the home network. Eth0 is connected to the home network.

Appserver will be the applications server. I will create a post for this as well, but plan is to run docker images for stuff. I see no reason to start with LXD containers but we save this for another thread.

I imagine that the Appserver shall to be on the DMZ-netowork and with a properly and stringent configured firewall.

The thing is that I suppose that the Appserver will need to access the Fileserver. How do I set this up in a secure manner and how do other do?

 

My plan that needs to be scrutinised:

Appserver:eth1 will be connected to the DMZ and accessible to the internet. I will most likely purchase a Firewall with DMZ from Zyxell dealing with the routing. Applications will run in containers. I would like to restrict eth0 for container usage (i.e. only open for the ports used by the containers and rout stuff directly there using nginx or Docker Registry (more study need to be done), no other access to the device but perhaps ssh, not decided yet. Ssh into a docker first?

Fileserver:eth0 will be connected to the home network.

Appserver:eth0 will be connected to the home network allowing me to access the server from home network and allow Appserver to access Fileserver.

I imagine this setup can be vastly improved. Please help me out here!

Also, if the recommendation is to not use the Fileserver but instead add some disks locally please met me know. Appserver does not have that many diskslots, while Fileserver have suffucient (12 or so). Also I prefere letting ZFS Arc on the Fileserver (with 32GB ram) consume most of the memory (this is the only task) while the Appserver (with 128GB ram) can use this for the containers instead.  I will most likely have some containers on the Appserver that need to interact with storage that is available on the local network.

Regards,

Erik

 

 

 

]]>1969Fri, 05 Apr 2019 06:06:59 +0000LXD no longer starting via openrc, issue with /usr/libexec/lxdhttps://forums.funtoo.org/topic/1823-lxd-no-longer-starting-via-openrc-issue-with-usrlibexeclxd/ I don't know what I did, but what ever it was it wasn't good.  I had to shut it down my server and move it to clean the floor and after booting it back up I noticed my containers were not running.

 

Running /etc/init.d/lxd start: 

* Starting lxd service ...
 * start-stop-daemon: /usr/libexec/lxd does not exist                                     [ !! ]
 * ERROR: lxd failed to start

I tried "rc-update del lxd default" and rebooted then "rc-update add lxd default && openrc"

Still had the same issue.

So then I tried "mkdir /usr/libexec/lxd && openrc"  and I got:

  

* Starting lxd service ...                                                               [ ok ]
	lxc list
Error: Get http://unix.socket/1.0: dial unix /var/lib/lxd/unix.socket: connect: no such file or directory

tail -f /var/log/syslog showed me this: 

/etc/init.d/lxd[21723]: ERROR: lxd failed to start
/etc/init.d/lxd[21771]: start-stop-daemon: failed to exec `/usr/libexec/lxd': Permission denied

 

If I start lxd as root with "lxd --group lxd" I can get my containers but I have to do it in a tmux session so I can leave it running after logging out of ssh.  Doing this I am unable to tell any difference from the way my server used to start lxd via openrc.

What ever I did wrong was done days or maybe weeks ago.  Did I miss configure something?  Did I use the wrong option in etc-update?  I have tried recompiling lxd, lxc, lxcfs, and cgmanager but it didn't change anything.  I am at a loss.  What should I look at next?

]]>1823Sat, 03 Nov 2018 23:04:23 +0000How do I go about setting up KVM virtualization on Funtoo?https://forums.funtoo.org/topic/1542-how-do-i-go-about-setting-up-kvm-virtualization-on-funtoo/ Hello all

I recently installed Funtoo on my desktop computer and I would like to install and configure KVM so I can host VMs.  I installed Qemu and libvirt. What else do I have to do in terms of networking, and package installations, configurations etc, to be able to create, and host VMs on my Funtoo? 

 

Thanks!

]]>1542Wed, 07 Mar 2018 03:05:53 +0000ZFS Mountpointshttps://forums.funtoo.org/topic/1505-zfs-mountpoints/ Hi,

I have been using btrfs on my rootfs for quite a while and one of the ways I am using it is that I always do upgrades in a snapshot of root and when upgrade is done I use that as new root. In btrfs this is very simple.

I have my root in /mnt/btrfs/root

I make the snapshot as /mnt/btrfs/root-upgrade, I chroot into this an perform the upgrade.

When I am done I simple rename the dirs;

mv root root-fallback

mv root-upgrade root

Nothing is changes on my system and as mount with -o subvol=root applies to the subvolume named root at the specific point in time when mount runs I will simply enter the upgraded system.

 

Question is; can I do something similar in zfs?

Is there a way to make zfs use another name or mountpoint next time I boot but not directly?

 

Regards,

Erik

 

]]>1505Mon, 12 Feb 2018 09:50:47 +0000Building for another target architecturehttps://forums.funtoo.org/topic/1676-building-for-another-target-architecture/ I am building funtoo root images for a different target architecture than the build system and wondering if that is causing some packages to fail to run.

 

I am starting with a generic subarch: https://www.funtoo.org/Generic_64

And, I modify /etc/make.conf to:

 

CHOST="x86_64-pc-linux-gnu"
CFLAGS="-march=x86-64 -O2 -pipe"
CXXFLAGS="-march=x86-64 -O2 -pipe"
CPU_FLAGS_X86="mmx mmxext sse sse2"
 

I do that to hopefully ensure that gcc won't build for my system which is an i7 and the target systems are a 64-bit Intel Atom and a 64-bit AMD netbook processor.  However, I still am unable to run a select few applications as I get invalid opcode during execution (they do run just fine on the system on which I built them).

Am I missing a step to build for a different target architecture?  I don't believe distcc is required here, but all I really want to do is tell gcc not to use march=native which it prefers to do by default.

]]>1676Thu, 07 Jun 2018 10:31:05 +0000Multiple Nics Configurationhttps://forums.funtoo.org/topic/1572-multiple-nics-configuration/ Hello all,

I have a server running Funtoo with two NICS. I want to be able to connect to my Dell MD3600i backup server.

This is the IP Info: 

Internal
eth0---> IP: 192.168.20.100 ---> Gateway: 192.168.20.1

External
eth1---> IP: 192.168.3.40 ---> Gateway: 192.168.3.1

Dell MD3600i Backup Server---> 192.168.3.113

I want to be able to connect to my Dell MD3600i backup server at address 192.168.3.113

Can anyone give me some pointers to get this setup?

Thanks,

Tony

netif.eth0 

template="interface"
ipaddr="192.168.20.100/24"
gateway="192.168.20.1"
nameservers="192.168.20.1"
domain="xxxxxx.com"

netif.eth1 

template="interface"
ipaddr="192.168.3.40/24"
nameservers="192.168.2.10 192.168.2.11"
domain="xxxxx.com"

netstat 

# netstat -rn
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
0.0.0.0         192.168.20.1    0.0.0.0         UG        0 0          0 eth0
127.0.0.0       0.0.0.0         255.0.0.0       U         0 0          0 lo
192.168.3.0     0.0.0.0         255.255.255.0   U         0 0          0 eth1
192.168.20.0    0.0.0.0         255.255.255.0   U         0 0          0 eth0

 

]]>1572Sat, 24 Mar 2018 22:57:40 +0000Advanced usage of CPU's and Memoryhttps://forums.funtoo.org/topic/1541-advanced-usage-of-cpus-and-memory/ Hello Funtoo Community!

 

I have subscribed to an 'large' Funtoo container, and i have some questions about CPU and Memory allocation for certain applications.

I'm planning to run a couple of game Servers in the container and i would like to know if there is any way to force certain applications use only one exact group (node) of CPU cores?

So i would like to allocate 8 cores per 1 application. (there will be 2-3 applications)

 

The second question is about RAM and tmpfs. Can i make an tmpfs boot persistant?

I would like to load some server data (ca. 1GB) completely in tmpfs for faster I/O.

If no, can i use an script to load data on startup in tmpfs, and move data back if SIGTERM/SIGKILL catched, replicating changes every 'n' minutes?

 

Sorry for my English.

Thank you!

]]>1541Tue, 06 Mar 2018 12:03:08 +0000revdep-rebuild; causes net-fs/samba-4.7.1 rebuildhttps://forums.funtoo.org/topic/1335-revdep-rebuild-causes-net-fssamba-471-rebuild/ Each time I run revdep-rebuild it wants to rebuild  samba-4.7.1 as a 'one shot'. I've allowed it to do the rebuild a few times and let it go over serveral days to see if any furture syncs make it just go away. Not sure where to start to understand what is triggering this rebuild.

Thank you!

root@opti390:~# revdep-rebuild --ignore --pretend -i

 * This is the new python coded version
 * Please report any bugs found using it.
 * The original revdep-rebuild script is installed as revdep-rebuild.sh
 * Please file bugs at: https://bugs.gentoo.org/
 * Collecting system binaries and libraries
 * Checking dynamic linking consistency
 * Assign files to packages

emerge  --pretend --oneshot --complete-graph=y net-fs/samba:0

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] net-fs/samba-4.7.1
root@opti390:~#

(adding more now that I discovered the -v flag) 

root@opti390:~# revdep-rebuild -p -v
 * This is the new python coded version
 * Please report any bugs found using it.
 * The original revdep-rebuild script is installed as revdep-rebuild.sh
 * Please file bugs at: https://bugs.gentoo.org/
 * Collecting system binaries and libraries
 * Collecting dynamic linking informations
 * Scanning files
 * Checking dynamic linking consistency
 * Broken files that require: libdnsserver-common-samba4.so (64 bits)
        * /usr/lib64/python2.7/site-packages/samba/dsdb_dns.so
 * Assign files to packages
        * /usr/lib64/python2.7/site-packages/samba/dsdb_dns.so -> net-fs/samba-4.7.1

emerge  --pretend --verbose --oneshot --complete-graph=y net-fs/samba:0

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] net-fs/samba-4.7.1::net-kit  USE="pam python system-mitkrb5 -acl -addc -addns -ads -ceph -client -cluster -cups -debug -dmapi -fam -gnutls -gpg -iprint -ldap -quota (-selinux) -syslog (-system-heimdal) -systemd {-test} -winbind -zeroconf" ABI_X86="(64) -32 (-x32)" PYTHON_TARGETS="python2_7" 0 KiB

Total: 1 package (1 reinstall), Size of downloads: 0 KiB
root@opti390:~#

And I see that there is already a bug report filed on the Gentoo side for this https://bugs.gentoo.org/633728

 

 

 

 

 

 

 

 

]]>1335Mon, 13 Nov 2017 16:44:19 +0000Dell Dimension 2400 buggy BIOS / ACPI issueshttps://forums.funtoo.org/topic/904-dell-dimension-2400-buggy-bios-acpi-issues/I got a secondhand Dell Dimension 2400 that apparently has a buggy BIOS. I can't complain too much because I got it for free. It only has 256 MB RAM, but it'll support up to 2 GB RAM, and PC2700 is dirt cheap these days. My plan was to upgrade the RAM and use it as a transparent web filtering proxy with a Squid/e2guardian setup. The only functional problem I've encountered is that sometimes it seems a little slow. I've got Funtoo installed, and I thought perhaps the low 256 MB RAM was the problem (it may be), but even when RAM usage reported by top is only around 20% by a process and disk usage is normal, it takes longer for this Pentium 4 at 2.4 GHz to do the same thing as an AMD Sempron at 2 GHz (which has 768 MB RAM). I'm wondering if the slowness is due to the timer bug reported by dmesg. In any case, I'll post below the dmesg output that contains error messages. Does anyone know if this is something I can work around? I'm currently running the Debian sources 4.2.6-3. I upgraded the kernel thinking a newer version would fix the issues reported under kernel 3.19.3, but they remained. Maybe someone knows some fixes?

 

 

[    0.000000] ACPI: Early table checksum verification disabled
[    0.000000] ACPI: RSDP 0x00000000000FEB80 000014 (v00 DELL  )
[    0.000000] ACPI: RSDT 0x00000000000FD22A 000034 (v01 DELL   2400     00000007 ASL  00000061)
[    0.000000] ACPI: FACP 0x00000000000FD25E 000074 (v01 DELL   2400     00000007 ASL  00000061)
[    0.000000] ACPI: DSDT 0x00000000FFFCC0F1 002404 (v01 DELL   dt_ex    00001000 MSFT 0100000D)
[    0.000000] ACPI: FACS 0x000000000FE74000 000040
[    0.000000] ACPI: SSDT 0x00000000FFFCE632 0000BA (v01 DELL   st_ex    00001000 MSFT 0100000D)
[    0.000000] ACPI: APIC 0x00000000000FD2D2 00006C (v01 DELL   2400     00000007 ASL  00000061)
[    0.000000] ACPI: BOOT 0x00000000000FD33E 000028 (v01 DELL   2400     00000007 ASL  00000061)
[    0.000000] ACPI: Local APIC address 0xfee00000

 

 

[    0.105736] Simple Boot Flag value 0x87 read from CMOS RAM was invalid
[    0.105792] Simple Boot Flag at 0x7a set to 0x1

 

 

[    0.128197] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150619/hwxface-580)
[    0.128355] ACPI: (supports S0 S1 S3 S4 S5)
[    0.128407] ACPI: Using IOAPIC for interrupt routing
[    0.128585] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
[    0.173283] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[    0.173362] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI]
[    0.173428] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM
[    0.175058] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge.
[    0.175517] PCI host bridge to bus 0000:00
[    0.175582] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.175636] pci_bus 0000:00: root bus resource [io  0x0000-0x0cf7 window]
[    0.175691] pci_bus 0000:00: root bus resource [io  0x0d00-0xffff window]
[    0.175745] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
[    0.175807] pci_bus 0000:00: root bus resource [mem 0x80860000-0xfebfffff window]
[    0.175891] pci 0000:00:00.0: [8086:2560] type 00 class 0x060000
[    0.175917] pci 0000:00:00.0: reg 0x10: [mem 0xf8000000-0xfbffffff pref]
[    0.176266] pci 0000:00:02.0: [8086:2562] type 00 class 0x030000
[    0.176304] pci 0000:00:02.0: reg 0x10: [mem 0xf0000000-0xf7ffffff pref]
[    0.176316] pci 0000:00:02.0: reg 0x14: [mem 0xfeb80000-0xfebfffff]
[    0.176651] pci 0000:00:1d.0: [8086:24c2] type 00 class 0x0c0300
[    0.176716] pci 0000:00:1d.0: reg 0x20: [io  0xff80-0xff9f]
[    0.176907] pci 0000:00:1d.0: System wakeup disabled by ACPI
[    0.177087] pci 0000:00:1d.1: [8086:24c4] type 00 class 0x0c0300
[    0.177150] pci 0000:00:1d.1: reg 0x20: [io  0xff60-0xff7f]
[    0.177366] pci 0000:00:1d.1: System wakeup disabled by ACPI
[    0.177541] pci 0000:00:1d.2: [8086:24c7] type 00 class 0x0c0300
[    0.177606] pci 0000:00:1d.2: reg 0x20: [io  0xff40-0xff5f]
[    0.177801] pci 0000:00:1d.2: System wakeup disabled by ACPI
[    0.177997] pci 0000:00:1d.7: [8086:24cd] type 00 class 0x0c0320
[    0.178041] pci 0000:00:1d.7: reg 0x10: [mem 0xffa80800-0xffa80bff]
[    0.178150] pci 0000:00:1d.7: PME# supported from D0 D3hot D3cold
[    0.178394] pci 0000:00:1e.0: [8086:244e] type 01 class 0x060400
[    0.178608] pci 0000:00:1e.0: System wakeup disabled by ACPI
[    0.178798] pci 0000:00:1f.0: [8086:24c0] type 00 class 0x060100
[    0.178812] * The chipset may have PM-Timer Bug. Due to workarounds for a bug,
               * this clock source is slow. If you are sure your timer does not have
               * this bug, please use "acpi_pm_good" to disable the workaround
[    0.179020] pci 0000:00:1f.0: can't claim BAR 13 [io  0x0800-0x087f]: address conflict with ACPI CPU throttle [io  0x0810-0x0815]

 

 

[    0.201975] pci 0000:00:1d.7: can't claim BAR 0 [mem 0xffa80800-0xffa80bff]: no compatible bridge window

 

 

[    0.242275] pnp 00:04: [dma 0 disabled]
[    0.242887] pnp 00:04: Plug and Play ACPI device, IDs PNP0401 (active)
[    0.244947] system 00:05: [io  0x0800-0x085f] could not be reserved
[    0.245012] system 00:05: [io  0x0c00-0x0c7f] has been reserved
[    0.245067] system 00:05: [io  0x0860-0x08ff] could not be reserved
[    0.245131] system 00:05: Plug and Play ACPI device, IDs PNP0c01 (active)
[    0.245968] pnp: PnP ACPI: found 6 devices
[    0.246036] PnPBIOS: Disabled by ACPI PNP
[    0.289731] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
[    0.289845] clocksource: Switched to clocksource acpi_pm
[    0.289925] pci 0000:01:09.0: can't claim BAR 6 [mem 0xfea00000-0xfea03fff pref]: address conflict with 0000:01:04.0 [mem 0xfea00000-0xfea1ffff pref]
[    0.290025] pci 0000:00:1f.0: BAR 13: [io  size 0x0080] has bogus alignment

 

 

[   12.710629] [drm:intel_parse_bios [i915]] *ERROR* General definiton block child device size is too small.

 

NOTE: The above drm error is the only message that appears in red text in dmesg output.

 

 

[   22.965671] smsc47m1: Found SMSC LPC47M10x/LPC47M112/LPC47M13x
[   22.965700] ACPI Warning: SystemIO range 0x0000000000000C04-0x0000000000000C04 conflicts with OpRegion 0x0000000000000C04-0x0000000000000C08 (\WSTX) (20150619/utaddress-254)
[   22.965714] ACPI: If an ACPI driver is available for this device, you should use it instead of the native driver
[   25.816244] b44 ssb0:0 eth1: Link is up at 100 Mbps, full duplex
[   25.816256] b44 ssb0:0 eth1: Flow control is off for TX and off for RX
[   25.816430] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[  701.073343] smsc47m1: Found SMSC LPC47M10x/LPC47M112/LPC47M13x
[  701.073376] ACPI Warning: SystemIO range 0x0000000000000C04-0x0000000000000C04 conflicts with OpRegion 0x0000000000000C04-0x0000000000000C08 (\WSTX) (20150619/utaddress-254)
[  701.073390] ACPI: If an ACPI driver is available for this device, you should use it instead of the native driver

 

Also, even though smsc47m1 is found, the kernel module is not automatically loaded. And if I attempt to load it manually with modprobe, I get the error message "modprobe: ERROR: could not insert 'smsc47m1': Device or resource busy"

]]>904Fri, 11 Mar 2016 00:53:00 +0000multiple IP addresses on one physical interface througth dhcphttps://forums.funtoo.org/topic/1022-multiple-ip-addresses-on-one-physical-interface-througth-dhcp/I have a funtoo server connected to router by ethernet cable.

Router IP is 192.168.11.1 and it have dhcp server running.

How can I configure my network on funtoo server to have multiply IP on my ethernet interface given by dhcp?

]]>1022Wed, 05 Oct 2016 22:12:04 +0000spamassassin will not bind ipv4 localhosthttps://forums.funtoo.org/topic/713-spamassassin-will-not-bind-ipv4-localhost/Hello, I'm running spamassassin, I've never used it before FYI, and I can't get it to bind ipv4 to my localhost, only ipv6, I tried passing -4 in /etc/init.d/spamd but it will not go with the init scripts, though it does work by hand. I searched the initscripts, to see if it defaults to ipv6 but I don't see anything.

]]>713Fri, 11 Sep 2015 21:13:19 +0000What's the proper way to setup two very different networks with two netcardshttps://forums.funtoo.org/topic/1233-whats-the-proper-way-to-setup-two-very-different-networks-with-two-netcards/I have installed two network cards on my system.

 

One card is connected to a switch, while the second card is connected to a bridged modem.

 

the configuration looks like this:

eth0 -> switch -> DLS modem -> internet

eth1 ->    bridge modem     -> internet

eth0 gets its IP (local) by the DSL modem, which acts as DHCP server for the whole LAN.

eth1 gets its IP (public, dynamic) from the ISP directly.

 

this is how route -n looks like:

pascal@mira ~ $ route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.1.1     0.0.0.0         UG    0      0        0 eth0
0.0.0.0         46.126.78.1     0.0.0.0         UG    202    0        0 eth1
46.126.78.0     0.0.0.0         255.255.254.0   U     202    0        0 eth1
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0

ifconfig:

pascal@mira ~ $ ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.39  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 2002:5437:f2f1:0:beae:c5ff:fedf:385e  prefixlen 64  scopeid 0x0<global>
        inet6 fe80::beae:c5ff:fedf:385e  prefixlen 64  scopeid 0x20<link>
        ether bc:ae:c5:df:38:5e  txqueuelen 1000  (Ethernet)
        RX packets 825473  bytes 77401388 (73.8 MiB)
        RX errors 0  dropped 79  overruns 0  frame 0
        TX packets 1433430  bytes 2117336429 (1.9 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth0:0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.0.39  netmask 255.255.255.0  broadcast 192.168.0.255
        ether bc:ae:c5:df:38:5e  txqueuelen 1000  (Ethernet)

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 46.126.79.24  netmask 255.255.254.0  broadcast 255.255.255.255
        inet6 fe80::41d9:9455:2d1e:97f  prefixlen 64  scopeid 0x20<link>
        ether 00:e0:4c:21:0a:01  txqueuelen 1000  (Ethernet)
        RX packets 81227  bytes 4890805 (4.6 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 2611  bytes 234196 (228.7 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 0  (Local Loopback)
        RX packets 114266  bytes 67619893 (64.4 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 114266  bytes 67619893 (64.4 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

and inxi:

pascal@mira ~ $ inxi -n
Network:   Card-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller driver: r8169
           IF: eth1 state: up speed: 1000 Mbps duplex: full mac: 00:e0:4c:21:0a:01
           Card-2: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller driver: r8169
           IF: eth0 state: up speed: 1000 Mbps duplex: full mac: bc:ae:c5:df:38:5e

pascal@mira ~ $ inxi -i
Network:   Card-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller driver: r8169
           IF: eth1 state: up speed: 1000 Mbps duplex: full mac: 00:e0:4c:21:0a:01
           Card-2: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller driver: r8169
           IF: eth0 state: up speed: 1000 Mbps duplex: full mac: bc:ae:c5:df:38:5e
           WAN IP: 84.55.242.241
           IF: eth0 ip-v4: 192.168.0.39 ip-v6-link: fe80::beae:c5ff:fedf:385e
           IF: eth1 ip-v4: 46.126.79.24 ip-v6-link: fe80::41d9:9455:2d1e:97f

The problem is that the connection on eth1 seems very unreliable.

 

Sometimes it works, I can ping it from the internet, I can access apache hosts. Sometimes it simply doesn't respond, sometims inxi hangs at the IP part, sometimes it seems not working at all.

 

From inside the machine, now I can't even use the interface.

pascal@mira /var/www/comdox.ch/comuneparadiso/mundelibere/db $ curl ifconfig.co --interface eth0
my.public.ip.here
pascal@mira /var/www/comdox.ch/comuneparadiso/mundelibere/db $ curl ifconfig.co --interface eth1
curl: (7) Failed to connect to ifconfig.co port 80: Connection timed out
]]>1233Mon, 11 Sep 2017 14:21:20 +0000PXE Network Boot Serverhttps://forums.funtoo.org/topic/1081-pxe-network-boot-server/I built a PXE server system as described at http://www.funtoo.org/PXE_network_boot_server

 

There were a few things I needed to do differently to get things to work even partially.  For example, I needed to add these additional files to my /tftproot:

ldlinux.c32
libcom32.c32
libutil.c32

There is another quirk in that the initial menu displayed on the system that is trying to boot via PXE is allowing a 1,000sec timeout versus the 10sec I was expecting via the pxelinux.cfg/default file.

 

The issue I am having now is that I get all the way through the loading of the initrd=srcd/isolinux/initram.igz loading, but then the system trying to boot can never find the  netboot=http://172.16.3.213/sysrcd.datfile.  What happens instead is that the system booting completes the network configuration via the initrd but then reports 

Searching for device with /sysrcd.dat

It fails to find it, then tries to mount all the SATA partitions (3 disks with a total of 22 partitions among them), then reports again

!! Cannot find a device with /sysrcd.dat. Retrying...

It does this several times, then gives up dumping me to a "mini shell".

 

I searched the at-large internet, and can't really find anything that helps.

 

I have tried offering the sysrcd.dat and the sysrcd.md5 files via apache and vsftp.

 

Here is the output from tcpdump:

 

bolan tftproot # tcpdump -n port 80 or port 69
dropped privs to tcpdump
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
18:58:46.837984 IP 172.16.3.229.2070 > 172.16.3.213.69:  27 RRQ "pxelinux.0" octet tsize 0
18:58:46.841925 IP 172.16.3.229.2071 > 172.16.3.213.69:  32 RRQ "pxelinux.0" octet blksize 1456
18:58:47.004463 IP 172.16.3.229.49152 > 172.16.3.213.69:  41 RRQ "ldlinux.c32" octet tsize 0 blksize 1408
18:58:47.018249 IP 172.16.3.229.49153 > 172.16.3.213.69:  63 RRQ "pxelinux.cfg/01-00-24-1d-27-ec-7f" octet tsize 0 blksize 1408
18:58:47.018995 IP 172.16.3.229.49154 > 172.16.3.213.69:  51 RRQ "pxelinux.cfg/AC1003E5" octet tsize 0 blksize 1408
18:58:47.019703 IP 172.16.3.229.49155 > 172.16.3.213.69:  50 RRQ "pxelinux.cfg/AC1003E" octet tsize 0 blksize 1408
18:58:47.020374 IP 172.16.3.229.49156 > 172.16.3.213.69:  49 RRQ "pxelinux.cfg/AC1003" octet tsize 0 blksize 1408
18:58:47.021047 IP 172.16.3.229.49157 > 172.16.3.213.69:  48 RRQ "pxelinux.cfg/AC100" octet tsize 0 blksize 1408
18:58:47.021758 IP 172.16.3.229.49158 > 172.16.3.213.69:  47 RRQ "pxelinux.cfg/AC10" octet tsize 0 blksize 1408
18:58:47.022460 IP 172.16.3.229.49159 > 172.16.3.213.69:  46 RRQ "pxelinux.cfg/AC1" octet tsize 0 blksize 1408
18:58:47.023147 IP 172.16.3.229.49160 > 172.16.3.213.69:  45 RRQ "pxelinux.cfg/AC" octet tsize 0 blksize 1408
18:58:47.023822 IP 172.16.3.229.49161 > 172.16.3.213.69:  44 RRQ "pxelinux.cfg/A" octet tsize 0 blksize 1408
18:58:47.024459 IP 172.16.3.229.49162 > 172.16.3.213.69:  50 RRQ "pxelinux.cfg/default" octet tsize 0 blksize 1408
18:58:47.025334 IP 172.16.3.229.49163 > 172.16.3.213.69:  42 RRQ "vesamenu.c32" octet tsize 0 blksize 1408
18:58:47.028685 IP 172.16.3.229.49164 > 172.16.3.213.69:  42 RRQ "libcom32.c32" octet tsize 0 blksize 1408
18:58:47.047745 IP 172.16.3.229.49165 > 172.16.3.213.69:  41 RRQ "libutil.c32" octet tsize 0 blksize 1408
18:58:47.053732 IP 172.16.3.229.49166 > 172.16.3.213.69:  50 RRQ "pxelinux.cfg/default" octet tsize 0 blksize 1408
18:58:47.283029 IP 172.16.3.229.49167 > 172.16.3.213.69:  43 RRQ "netboot-1.png" octet tsize 0 blksize 1408

And here's what happens when I wget the files directly:

 

vaughan ~ # wget 172.16.3.213/sysrcd.md5 .
--2017-01-05 23:44:04--  http://172.16.3.213/sysrcd.md5
Connecting to 172.16.3.213:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 45 [application/x-md5]
Saving to: 'sysrcd.md5'


sysrcd.md5                                                      100%[=======================================================================================================================================================>]      45  --.-KB/s    in 0s


2017-01-05 23:44:04 (11.8 MB/s) - 'sysrcd.md5' saved [45/45]


--2017-01-05 23:44:04--  http://./
Resolving .... failed: No address associated with hostname.
wget: unable to resolve host address '.'
FINISHED --2017-01-05 23:44:04--
Total wall clock time: 0.02s
Downloaded: 1 files, 45 in 0s (11.8 MB/s)

Not sure what is happening here, any help is gratefully accepted (-:

 

 
]]>1081Fri, 06 Jan 2017 04:48:54 +0000samba installation fails, due to manpage?https://forums.funtoo.org/topic/1257-samba-installation-fails-due-to-manpage/Good evening!

 

After a bit of a rocky transition to kits, I'm running into a problem while upgrading samba

[2619/2724] Generating manpages/smb.conf.5
20:46:10 runner  XML_CATALOG_FILES="file:///etc/xml/catalog file:///usr/local/share/xml/catalog file:///mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/work/samba-4.7.0-abi_x86_64.amd64/bin/default/docs-xml/build/catalog.xml"                                     export XML_CATALOG_FILES                                     /usr/bin/xsltproc --xinclude --stringparam noreference 0 -o default/docs-xml/manpages/smb.conf.5.xml --nonet /mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/work/samba-4.7.0-abi_x86_64.amd64/docs-xml/xslt/expand-sambadoc.xsl /mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/work/samba-4.7.0-abi_x86_64.amd64/docs-xml/manpages/smb.conf.5.xml                                     /usr/bin/xsltproc --nonet -o default/docs-xml/manpages/smb.conf.5 /mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/work/samba-4.7.0-abi_x86_64.amd64/docs-xml/xslt/man.xsl default/docs-xml/manpages/smb.conf.5.xml
runtime error: file file:///usr/share/sgml/docbook/xsl-stylesheets/lib/lib.xsl line 58 element choose
xsltApplySequenceConstructor: A potential infinite template recursion was detected.
You can adjust xsltMaxDepth (--maxdepth) in order to raise the maximum number of nested template calls and variables/params (currently set to 3000).
Templates:
#0 name string.subst
#1 name string.subst
#2 name string.subst
#3 name string.subst
#4 name string.subst
#5 name string.subst
#6 name string.subst
#7 name string.subst
#8 name string.subst
#9 name string.subst
#10 name string.subst
#11 name string.subst
#12 name string.subst
#13 name string.subst
#14 name string.subst
Variables:
#0
replacement
target
string
#1
target
string
#2
string
#3
replacement
target
string
#4
target
string
#5
string
#6
replacement
target
string
#7
target
string
#8
string
#9
replacement
target
string
#10
target
string
#11
string
#12
replacement
target
string
#13
target
string
#14
string
error: file default/docs-xml/manpages/smb.conf.5.xml
xsltRunStylesheet : run failed
Waf: Leaving directory `/mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/work/samba-4.7.0-abi_x86_64.amd64/bin'
Build failed:  -> task failed (err #11):
        {task: manpages/smb.conf.5 smb.conf.5.xml,parameters.all.xml -> smb.conf.5}
 * ERROR: net-fs/samba-4.7.0-r1::net-kit failed (compile phase):
 *   build failed
 *
 * Call stack:
 *     ebuild.sh, line  115:  Called src_compile
 *   environment, line 4585:  Called multilib-minimal_src_compile
 *   environment, line 2885:  Called multilib_foreach_abi 'multilib-minimal_abi_src_compile'
 *   environment, line 3116:  Called multibuild_foreach_variant '_multilib_multibuild_wrapper' 'multilib-minimal_abi_src_compile'
 *   environment, line 2751:  Called _multibuild_run '_multilib_multibuild_wrapper' 'multilib-minimal_abi_src_compile'
 *   environment, line 2749:  Called _multilib_multibuild_wrapper 'multilib-minimal_abi_src_compile'
 *   environment, line  503:  Called multilib-minimal_abi_src_compile
 *   environment, line 2879:  Called multilib_src_compile
 *   environment, line 3328:  Called waf-utils_src_compile
 *   environment, line 5569:  Called die
 * The specific snippet of code:
 *       "${WAF_BINARY}" ${_mywafconfig} ${jobs} || die "build failed"
 *
 * If you need support, post the output of `emerge --info '=net-fs/samba-4.7.0-r1::net-kit'`,
 * the complete build log and the output of `emerge -pqv '=net-fs/samba-4.7.0-r1::net-kit'`.
 * The complete build log is located at '/mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/temp/build.log'.
 * The ebuild environment file is located at '/mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/temp/environment'.
 * Working directory: '/mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/work/samba-4.7.0-abi_x86_64.amd64'
 * S: '/mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/work/samba-4.7.0'

>>> Failed to emerge net-fs/samba-4.7.0-r1, Log file:

>>>  '/mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/temp/build.log'

 * Messages for package net-fs/samba-4.7.0-r1:

 * ERROR: net-fs/samba-4.7.0-r1::net-kit failed (compile phase):
 *   build failed
 *
 * Call stack:
 *     ebuild.sh, line  115:  Called src_compile
 *   environment, line 4585:  Called multilib-minimal_src_compile
 *   environment, line 2885:  Called multilib_foreach_abi 'multilib-minimal_abi_src_compile'
 *   environment, line 3116:  Called multibuild_foreach_variant '_multilib_multibuild_wrapper' 'multilib-minimal_abi_src_compile'
 *   environment, line 2751:  Called _multibuild_run '_multilib_multibuild_wrapper' 'multilib-minimal_abi_src_compile'
 *   environment, line 2749:  Called _multilib_multibuild_wrapper 'multilib-minimal_abi_src_compile'
 *   environment, line  503:  Called multilib-minimal_abi_src_compile
 *   environment, line 2879:  Called multilib_src_compile
 *   environment, line 3328:  Called waf-utils_src_compile
 *   environment, line 5569:  Called die
 * The specific snippet of code:
 *       "${WAF_BINARY}" ${_mywafconfig} ${jobs} || die "build failed"
 *
 * If you need support, post the output of `emerge --info '=net-fs/samba-4.7.0-r1::net-kit'`,
 * the complete build log and the output of `emerge -pqv '=net-fs/samba-4.7.0-r1::net-kit'`.
 * The complete build log is located at '/mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/temp/build.log'.
 * The ebuild environment file is located at '/mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/temp/environment'.
 * Working directory: '/mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/work/samba-4.7.0-abi_x86_64.amd64'
 * S: '/mnt/rwstorage/var/tmp/portage/net-fs/samba-4.7.0-r1/work/samba-4.7.0'

after a bit of searching, i came across this bug link:

 

https://bugzilla.redhat.com/show_bug.cgi?id=1491307

 

Should I file a bug about this, or will the fix come from upstream?

 

 

]]>1257Sat, 07 Oct 2017 03:46:30 +0000VMWARE ESX - Funtoo Server as Guesthttps://forums.funtoo.org/topic/831-vmware-esx-funtoo-server-as-guest/HI mates,

 

I was an addicted Gentoo user in (G)old DRobbins days, but I followed differente way in carreer that keep me away from linux community, so sorry for maybe stupid and n00b questions here. :)

 

I'm looking for the good practices for my Funtoo Server as guest in a VMWARE ESX Environment, since the Gentoo Wikis and Blogs Articles are outated or related to VMWARE Workstation/Player

 

I'm using the mix-ins: vmware-guest and everything is running well such X, XFCE , inputs, etc. But I missing the vmware tools. I have install the vmware-tools package, but not install from ISO, since the install request some rc.d locations and I  fear that broke something.

 

Anyone have some tricks or help with put the funtoo guest to report to hypervervisor correctly? Some best practices for custom kernel, etc? I follow some old wikis and blogs, but I'm not sure if I'm optimized.

 

Sorry by badly english, and long life to Funtoo. 

 

Regards

 

 

 

 

]]>831Mon, 30 Nov 2015 13:47:15 +0000MySQL 5.7.* install issueshttps://forums.funtoo.org/topic/1033-mysql-57-install-issues/Hi, 

Currently I am using the layman mysql, its 5.7.12 atm. But it not upped in months. 

I tried to fiddle with the ebuilds

 - copied the latest one as mysql-5.7.15.ebuild,

 - ebuild mysql-5.7.15.ebuild manifest

all went just fine, but at the end I receive :
 

-- Installing: /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/share/mysql/magic
-- Installing: /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/share/aclocal/mysql.m4
-- Installing: /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/share/mysql/mysql.server
 * Making Convenience links for mysqlcheck multi-call binary
 * Building default my.cnf (5.6)
 * Adjusting to prefix /
 *   my.cnf.ok ...                                                                                                                    [ ok ]
 * Creating initial directories
 * Including support files and sample configurations
 * Header files have changed between ABIs.
 * --- /var/tmp/portage/dev-db/mysql-5.7.15/temp/.multilib_header_cksum 2016-10-18 19:31:00.892131266 +0300
 * +++ /var/tmp/portage/dev-db/mysql-5.7.15/temp/.multilib_header_cksum.new     2016-10-18 19:31:06.632131397 +0300
 * @@ -10,6 +10,7 @@
 *  931919434 13470 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/mysql/service_command.h
 *  2987720505 1384 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/mysql/thread_type.h
 *  39760184 13897 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/mysql/plugin_audit.h.pp
 * +2782043840 1443 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/mysqlx_version.h
 *  4220503078 1489 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/mysql/service_thd_engine_lock.h
 *  1955776921 14902 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/sql_state.h
 *  1175938711 1506 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/my_list.h
 * @@ -43,6 +44,7 @@
 *  3200460594 26101 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/plugin.h
 *  819488767 2682 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/mysql/service_thread_scheduler.h
 *  3234572590 2760 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/mysql/service_mysql_alloc.h
 * +947087210 2791 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/mysqlx_error.h
 *  4221559651 2821 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/my_xml.h
 *  3848574317 2837 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/mysql/psi/mysql_sp.h
 *  1075151809 2878 /var/tmp/portage/dev-db/mysql-5.7.15/image/usr/include/mysql/sslopt-longopts.h
 * ERROR: dev-db/mysql-5.7.15::x-portage failed (install phase):
 *   Header checksum mismatch, aborting.
 *

My USE flags atm are:

[root@tangra][/usr/local/portage/dev-db/mysql]# emerge -pv mysql 

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild     U  ] dev-db/mysql-5.7.15:0/20::x-portage [5.7.11:0/20::mysql] USE="openssl perl server -debug -embedded -extraengine -jemalloc -latin1 -libressl -profiling (-selinux) -static -static-libs -systemtap -tcmalloc {-test} -yassl" ABI_X86="32 (64) (-x32)" 0 KiB

Total: 1 package (1 upgrade), Size of downloads: 0 KiB

 * IMPORTANT: 9 news items need reading for repository 'gentoo'.
 * Use eselect news read to view new items.

[root@tangra][/usr/local/portage/dev-db/mysql

emerge --info -> http://pastebin.com/d5Z0vJA8

 

I guess I am doing smth wrong /obviously/. How can I proceed from there?

Thanks.

 

 

 

]]>1033Tue, 18 Oct 2016 18:45:39 +0000