Jump to content
funtoo forums

erikr

Members
  • Content Count

    73
  • Joined

  • Last visited

  • Days Won

    2

erikr last won the day on December 1 2016

erikr had the most liked content!

1 Follower

About erikr

  • Rank
    Advanced Member

Recent Profile Visitors

428 profile views
  1. erikr

    Networking concept help

    Thanks for some good hands on tips lazlo.vii and the area is both as full of different advices as it is lacking good resources. When it comes to files systems I do BTRFS mostly but on the server I do ZFS. I once had problems with ZFS where I removal of a zfs from the pool messed things up. I solved it with a FreeBSD live-cd where I imported the pool, removed the zfs and exported the pool. It worked like a charm and since long the bug is fixed. I still have a "thing" for ZFS though and decided to go for it some time ago (I participated in another forum post here about ZFS some time ago). I already have the pools setup on my current installation and will reuse them in the new server. The current network setup plan is as follows: AppServer on DMZ FileServer on HomeNetwork An intermediate physical network between AppServer and FileServer with fixed IPs and just a switch. This way I can make a really narrow IP-filter on the FileServer side for this particular network and I will rely on ZFS export mechanism to export the right stuff. I will try to block unexpected IPs from on the FileServer preventing the AppServer acquire access the nfs-exports meant for the home-network ( nfs will use the IP to determine export rules - faked IP meaning wrong nfs access). Most likely I will look into SELinux, a new area for me. Containers are new for me (from hosting point of view) as well but I will learn eventually 🙂 Cheers, Erik
  2. erikr

    Networking concept help

    Hi, I have just purchased two second hand servers building my own Funtoo server cluster here at home. This was actually easier and not particular more expensive than locating motherboards and CPUs with working support for ECC for my ZFS file server. But I also found a second hand server suitable for application server and as the optical fibre is on its way pretty soon, I moved the servers to the basement, and Funtoo is now more suitable for server usage than before, there was just no reason why not to purchase 🙂 I will come back to the specs in other posts. Right now it is about planning the network. Both servers have several (4+) network interfaces. What I think I am trying to do (well I am open for proposals) is this: Fileserver will be the ZFS file server. I will need this for the home network. Eth0 is connected to the home network. Appserver will be the applications server. I will create a post for this as well, but plan is to run docker images for stuff. I see no reason to start with LXD containers but we save this for another thread. I imagine that the Appserver shall to be on the DMZ-netowork and with a properly and stringent configured firewall. The thing is that I suppose that the Appserver will need to access the Fileserver. How do I set this up in a secure manner and how do other do? My plan that needs to be scrutinised: Appserver:eth1 will be connected to the DMZ and accessible to the internet. I will most likely purchase a Firewall with DMZ from Zyxell dealing with the routing. Applications will run in containers. I would like to restrict eth0 for container usage (i.e. only open for the ports used by the containers and rout stuff directly there using nginx or Docker Registry (more study need to be done), no other access to the device but perhaps ssh, not decided yet. Ssh into a docker first? Fileserver:eth0 will be connected to the home network. Appserver:eth0 will be connected to the home network allowing me to access the server from home network and allow Appserver to access Fileserver. I imagine this setup can be vastly improved. Please help me out here! Also, if the recommendation is to not use the Fileserver but instead add some disks locally please met me know. Appserver does not have that many diskslots, while Fileserver have suffucient (12 or so). Also I prefere letting ZFS Arc on the Fileserver (with 32GB ram) consume most of the memory (this is the only task) while the Appserver (with 128GB ram) can use this for the containers instead. I will most likely have some containers on the Appserver that need to interact with storage that is available on the local network. Regards, Erik
  3. erikr

    Server with ECC

    So after some struggle I decided to repurpose the above configuration to something else. Major problems has been instability during load (i.e. mostly emerge) with the AMD-cpu and that although there is ECC-memory installed it will not utilize the ECC-function with this motherboard (verified with Asus support-tech). The answer is that ECC is not supported with this configuration. Instead I have purchased a second hand Supermicro 6027R-E1R12L based on Intel, with working ECC-functionality and hot-swap-slots for all my disks in the front. My first rack-server - a small step for mankind, an huge leap for Erik. There are 32GB RAM and a single Xeon E5-2660 8 Core cpu. It will basically only serve as a ZFS host on the network.
  4. Well, I though of Nike and just did it :) It wasn't even than hard (I think). Then I ran into the EAPI=7 problem instead and verified that it's not related to the python upgrade and it isn't. Now I have the upgrade on hold until portage is upgraded. Words will not express how much I adore the possibility to do upgrades in snapshots along side the live system!
  5. Gentoo have an upgrade guide: https://wiki.gentoo.org/wiki/Python#Version_upgrade. Doesn't seem that hard. Just recall having some trouble with portage failing at some point and then one are on trouble :) I will try that one. The entire upgrade is in a separate snapshot anyway so I am prepared if it fails. I will upgrade python 3 to python 3.6.
  6. dev-lang/python| slot| repo ----------------+---------+--------------------- 2.7.13-r1| 2.7| python-kit/3.4-prime * 2.7.14-r2| | python-kit/3.4-prime ----------------+---------+--------------------- * 3.4.6-r1| 3.4/3.4m| python-kit/3.4-prime ----------------+---------+--------------------- 3.5.3| 3.5/3.5m| python-kit/3.4-prime 3.5.3-r1| | python-kit/3.4-prime ----------------+---------+--------------------- 3.6.1-r2| 3.6/3.6m| python-kit/3.4-prime 3.6.5-r1| | python-kit/3.4-prime I am using 1.2 in general but made no change to the python-kits. Is there an upgrade procedure to be aware of? I am a newbie when it comes to python - besides all kind of hell from gentoo upgrades over the year. Been happy that I didn't need to upgrade for quite a while :) // Erik
  7. Hi, I am using the 1.2 kit but stumbled onto a problem when building www-client/firefox-61.0; 0:03.20 checking for Python 3... : python_wrapper_setup: python3 is not supported by python2.7 (PYTHON_COMPAT) 0:03.20 no 0:03.20 ERROR: Python 3.5 or newer is required to build. Ensure a `python3.x` executable is in your PATH or define PYTHON3 to point to a Python 3.5 executable. 0:03.22 *** Fix above errors and then restart with\ 0:03.22 "/usr/bin/gmake -f client.mk build" 0:03.22 gmake: *** [client.mk:149: configure] Error 1 While Firefox upgrade will have to wait for now I'm curious what to do when it's time to deal with this? Is Python 3.5 "just" a matter of a python upgrade and a kit-change that I should have done or what? I am not using python myself, it is only there for the system so I am open for changes :) // Erik
  8. erikr

    ZFS Mountpoints

    A bite late but thanx! New server (the one with ECC) installed, just booted into ZFS for the first time using this post. It solves quite a few hesitations I used to have :) Boot args I use is; root=ZFS=rootpool/funtoo/root ro boot=zfs net.ifnames=0 I prefer not to import all pools at boot time, if the pool contains an exported FS it must be imported after networking and nsf is started or it fails to share correctly (or rather; this used to be a problem). As of now this is only the server. Pools is to created tomorrow, 8TB is to moved to backup before it is restored into a new 4*4TB disk that most likely will be a 5 or 6 *4TB disk with raidz2.
  9. erikr

    Server with ECC

    I am planning to upgrade my good old server that has been around for some time now. Mostly it is a NAS with 4*4TB disks in a BTRFS RAID 10 array for now. I have since logn used both ZFS and BTRFS and regardless of choice it seems to be a consensus that one shall use ECC memory to prevent that the calculated check sums are faulty. I have non-ecc today and I have experienced degradation of the content. ECC is new territory for me and I have a few questions; 1. On my desk is a ASUS Prime X370-PRO mother board. The specs say "DDR4 ECC or NON-ECC memory, unbufferd". While check out some other gaming boards it is more clear that "sure, use ECC or non-ECC as you please - we will not use the ECC-function anyway". Are there anyone that can confirm if ECC will be enabled given that I use compatible ECC me memories? 2. Is there anything particular I need to know to get ECC working? Kernel, use-flags, tools that is to be installed? 3. Is there a way to verify that ECC in fact is in use and operative? Cheers, Erik
  10. Perhaps linux-firmware ought to be a runtime dependency to those packages that needs it to work properly. I figure the radeon drivers in this case. // Erik
  11. erikr

    Nvidia problems after upgrade to 1.2

    A while ago, around the upgrade, I also had to replace the cpu water cooler and moved my graphics card to the other PCI slot. I now took down the computer and moved it back and things are back to normal. Don't have a clue why this works but hey, it works. I have a Asus Prime Z370-P motherboard and a fan-less Pallit GTX 1050 Ti graphics card. Anyhow, case closed :)
  12. Hi, After the upgrade to 1.2 I have trouble recovering from sleep. It seems related to the nvidia-drivers but I am not sure. I run KDE and use sleep during nights. It have worked pretty well for quite some time. I have a GeForce GTX 1050 Ti graphics-card and are using nvidia-drivers. I have tried recovering from sleep with and without xdm started and I never seems to be able to recover, the screen is blank and unresponsive. Even without X the terminal is blank. When X is started during sleep-wakeup the X process runs on 100% CPU but nothing happens. I can login via ssh but it fails to restart xdm. I have tried downgrade to nvidia-390.48 with no noticeable difference. At first I didn't rebuild the kernel during upgrade to 1.2 so it was troublesome both before and after kernel was rebuilt with gcc 7.
  13. I have always had strangularities with Clementine. One thing is that it has never been possible to terminate it properly as it have always left an orphan icon in the docking bar. I recall having experienced the same problem as you mention here, have to start it twice but I am not sure and I donät have that problem right now. I also think that it worked properly with a new user (I started to use a second logged in work user instead of kde-activity) where I recall this never happened. Try creating a new user and see what happens. I never started clementine in a shell but firefox is quite loud and I get all kind of outputs there, mostly related to javascript problems on some webbpages. My setup is fairly well updated to 1.2 and I am running the latest official debian-kernel that by the way is also rebuilt for gcc 7.2. // Erik
  14. Cool, I am always hesitant to get started with updated unless there is a snapshot available to role back to. Or even better a snapshot to make the upgrade in until it is successful.
  15. Just to clarify, will I be able to make snapshots of / from within my container or the management console?
×