tech stuff.

Archive for the ‘Unix-type stuff’ Category

OSError with duplicity 0.6.19 on OpenBSD and OS X

leave a comment »

Sometime around duplicity 0.6.15 (ish) I started running into OSError exceptions that I just didn’t have time to track down. I’ve finally made time, though, and it wasn’t too hard to track down the culprit. I didn’t realize it at the time, but this only affects non-privileged users running duplicity. tl;dr choose a different TMPDIR.

Read the rest of this entry »

Advertisements

Written by Lee Verberne

2012/11/21 at 12:17

Posted in BSD, OS X

Tagged with , , ,

Updated OpenBSD softraid install page

leave a comment »

With their 5.1 release, OpenBSD has added support for placing the root filesystem on a softraid(4) device for the i386 and amd64 architectures.  Additionally, the amd64 port supports booting the system from a kernel on the softraid device.

Previously, the way to provide system redundancy using software RAID was to use softraid for all of your filesystems except the root filesystem.  The root filesystem would be copied to an identically sized partition on the second disk every night by the /etc/daily script.  It was up to you to keep the boot blocks up-to-date.

Awesome.  I’ve updated my Installing OpenBSD using softraid page.  I’ll let you know how it goes.

Written by Lee Verberne

2012/06/25 at 14:23

Posted in BSD

Tagged with ,

OpenBSD Install via IPMI on SuperMicro Server

leave a comment »

This is a step-by-step guide for how I remotely installed OpenBSD 5.0 to my SuperMicro X8SIE-LN4F based server.  This includes setting up IPMI and remote serial console.

Read the rest of this entry »

Written by Lee Verberne

2012/01/13 at 22:07

Posted in BSD

Tagged with

Insufficient serial devices in the amd64 GENERIC kernel for SuperMicro

leave a comment »

As I was futzing around trying to get OpenBSD 5.0 (amd64) to play well with the SOL provided by the BMC on my new SuperMicro server, I noticed something unexpected about the amd64 GENERIC kernel.

I really want a reliable console on these new servers, and I’m pretty sure that if any OS is going to manage decent serial support, it’s going to be OpenBSD.  Getting OpenBSD to use a serial console is well documented and pretty easy, but installing via serial console is a little more difficult.  In my case, though, I don’t need to modify the install CD because I don’t technically need a 100% serial install.

The AMI BIOS on this server provides console redirection that — while not the best — works well enough to allow me to interrupt the VGA boot loader and change the console to the serial port via set tty com2.  After that, the ramdisk kernel booted with a console on the third serial port and my generic OpenBSD 5.0 install went very smoothly.  Until it came time to boot into the new OS, that is.

An OpenBSD install is a thing a beauty.  It’s the most well thought out installer I’ve ever used, and it’s exclusively text-based.  So it’s a great fit for a serial console install.  It even detected that I was using com2, and asked if I wanted to make that the console on the install.  When I rebooted, however, I received all the kernel messages on the SOL console, but nothing from the startup scripts or getty.

It appears to me the problem is that — while the amd64/RAMDISK_CD and the i386/GENERIC kernels both come configured with 3 COM ports — the amd64 GENERIC kernel is only configured with 2 COM ports.  If I use config -e to add a third com port and boot that modified kernel, everything works perfectly.

As soon as I understand the issue a bit better, I’ll be posting a step-by-step guide with some model numbers.

Written by Lee Verberne

2012/01/07 at 00:45

Posted in BSD

Tagged with

x509 hash changes in Ubuntu Oneiric

leave a comment »

Did your commands with custom -CApath stop working after upgrading to Oneiric? Mine did. It turns out Oneiric introduced a change (via OpenSSL 1.0.0, maybe?) that changed the subject hash algorithm used to index certificates in a -CApath directory. Look for a handy code snippet after the jump.
Read the rest of this entry »

Written by Lee Verberne

2011/11/10 at 17:27

Posted in Linux

scp and POSIX ACLs

leave a comment »

scp doesn’t play well with POSIX filesystem ACLs, and as far as I can tell there’s nothing to be done about it.

The problem is that the server side explicitly calls open(2) with the mode of the file on the client side in all cases.  Since the file’s group permissions are linked to the mask ACL, this means that — for a mode 644 file — the file gets set mask::r-- instead of inheriting the default mask from the directory.

In my opinion, the correct way to do it would be to create the file without an explicit mode unless the -p command line option was used.  In fact, I would have thought that was the point of the -p flag.

This issue isn’t exclusive to ACLs, really.  It seems like it would cause problems with standard unix permissions as well.  Anyway, the only way around it seems to be changing the mode on the client side prior to the scp.  bummer.

Note: I determined this by examining the version of OpenSSH distributed with Ubuntu Lucid, which is 5.3p1.  Please let me know if you’ve had a different experience.

Written by Lee Verberne

2011/07/07 at 13:21

Posted in Linux

Tagged with , ,

OpenBSD Embedded Router

with 4 comments

The excellent flashrd project makes easy work of installing OpenBSD as an embedded platform.  I had an excellent experience installing OpenBSD 5.0 on a PCEngines ALIX 2d13 using a 4GB CF.  A rough outline of the steps follows.

Read the rest of this entry »

Written by Lee Verberne

2011/06/12 at 10:43

Posted in BSD

Tagged with