FreeBSD: PPPoE client setup

January 18th, 2010

Append the provider configuration to /etc/ppp/ppp.conf:

provider:
set device PPPoE:<interface>
set authname <PPPoE username>
set authkey <PPPoE password>
set dial
set login
add default HISADDR
enable lqr echo
enable dns
nat enable yes
set redial 2

Replace <interface> with your network interface towards the PPPoE server. Start the PPPoE client, as root: /etc/rc.d/ppp start

Enable PPPoE client at startup, append to /etc/rc.conf:

ifconfig_<interface>="up"
ppp_enable="YES"
ppp_profile="provider"
ppp_mode="ddial"

Start the PPPoE client with /etc/rc.d/ppp start as root. The PPPoE interface is usually tun0.

(Open)Solaris, Linux and FreeBSD tunnelbroker.net IPv6 setup

December 1st, 2009

After you create a Regular Tunnel at Hurricane Electric’s tunnelbroker.net you will receive the following informations:

Server IPv4 Address
Server IPv6 Address
Client IPv4 Address
Client IPv6 Address
Routed /64

Solaris and OpenSolaris IPv6 tunnel setup

Create /etc/hostname6.ip.tun0 file:
tsrc Client_IPv4_Address tdst Server_IPv4_Address up
addif Client_IPv6_Address Server_IPv6_Address up

Add the permanent IPv6 default gateway:
route -p add -inet6 default Server_IPv6_Address

(Tested on Solaris 10 5/09 and 10/09, OpenSolaris 2009.06 and 2010.02 preview snv_127)

Linux (RHEL / Fedora / CentOS) IPv6 tunnel setup

Create /etc/sysconfig/network-scripts/ifcfg-sit1 file:

DEVICE=sit1
BOOTPROTO=none
ONBOOT=yes
IPV6INIT=yes
IPV6TUNNELIPV4=Server_IPv4_Address
IPV6TUNNELIPV4LOCAL=Client_IPv4_Address
IPV6ADDR=Client_IPv6_Address/64

Add the following to /etc/sysconfig/network file:

NETWORKING_IPV6=yes
IPV6_DEFAULTDEV=sit1

(Tested with Fedora 11 and 12, CentOS 5.3 and 5.4)

FreeBSD IPv6 tunnel setup

Add the following lines to /etc/rc.conf file:

gif_interfaces="gif0"
gifconfig_gif0="Client_IPv4_Address Server_IPv4_Address"
ipv6_enable="YES"
ipv6_network_interfaces="lo0 gif0"
ipv6_ifconfig_gif0="Client_IPv6_Address prefixlen 128"
ipv6_defaultrouter="Server_IPv6_Address"

(Tested with FreeBSD 6.4)

Installing Fedora 12 PV domU guest on xVM dom0 OpenSolaris

November 20th, 2009

Create a 10 GB ZVOL for storage:
pfexec zfs create -V 10g rpool/f12d0

Install Fedora 12 domU:
pfexec virt-install -n f12 -r 512 --vcpus=4 -f /dev/zvol/dsk/rpool/f12d0 -b e1000g0 --os-type=linux -p --nographics --os-variant=fedora11 -l http://fedora-12-mirror/fedora/linux/releases/12/Fedora/i386/os/

-n f12 – domU’s name
-r 512 – allocate 512 MB memory
–vcpus=4 – number of virtual CPUs allocated (make sure this number is lower or equal to the number of CPUs available)
-f /dev/zvol/dsk/rpool/f12d0 – ZVOL block device
-b e1000g0 – bridged networking to e1000g0 interface
-p – paravirtualized guest
–os-variant=fedora11 – “hack” until fedora12 OS-Variant will be integrated into xVM
-l http://fedora-12-mirror/fedora/linux/releases/12/Fedora/i386/os/ – replace fedora-12-mirror with a near Fedora 12 mirror, replace i386 with x86_64 for 64-bit domU

After you bring up the network, do a VNC installation.
Until xVM supports ext4 boot, make sure to create an ext3 /boot partition (or just a big ext3 / filesystem)

After installation, start the domU:
pfexec xm start -c f12
You will be presented the pygrub menu, just press Enter to boot.

Log into the domU and change the default timeout=0 to a different value (e.g. 5 seconds) in /boot/grub/grub.conf. Now you can use virsh start / shutdown commands.

To auto-start the guest on host boot:
virsh autostart f12

Tested on OpenSolaris 2010.02 preview snv_127.

Fedora 12 PPTP server

November 20th, 2009

I’ve build a Fedora 12 Poptop rpm:

pptpd-1.3.4-1.fc12.i386.rpm MD5 bdab201d70e78abe40f873d71880f718
pptpd-1.3.4-1.fc12.src.rpm MD5 ebd64f47b0a40a7585e22a11cc4e2890

If you get this error message:
Plugin /usr/lib/pptpd/pptpd-logwtmp.so is for pppd version 2.4.3, this is 2.4.4
just comment out logwtmp option in /etc/pptpd.conf and restart pptpd with service pptpd restart.

Username/password pairs used for pptp authentication should be placed in /etc/ppp/chap-secrets
# client server secret IP addresses
username * password

To supply a DNS server to PPTP clients, just add them to /etc/ppp/options.pptpd like ms-dns A.B.C.D.

To configure local and remote PPTP client’s IP address modify localip and remoteip options in /etc/pptpd.conf.

To enable pptp server at startup run chkconfig pptpd on.

OpenSolaris 2009.06 to OpenSolaris preview 2010.02 (build 124)

October 7th, 2009

Create a new Boot Environment:
pfexec beadm create devel

Mount the new Boot Environment:
pfexec mkdir /mnt/devel
pfexec beadm mount devel /mnt/devel

Use the dev publisher:
pfexec pkg -R /mnt/devel set-publisher -O http://pkg.opensolaris.org/dev opensolaris.org

Update to the latest bits:
pfexec pkg -R /mnt/devel image-update -v

If everything went fine (after you read the Release Notes), activate the new BE:
pfexec beadm activate devel

Reboot:
pfexec shutdown -y -g1 -i6

Did this remotely. After reboot, system was up and running, including all xVM domU autostarted.

libima should get over pkginfo love

September 18th, 2009

From Solaris Patch 119091-34

Problem Description:

6801126 libima should get over pkginfo love

I sure hope libima got over pkginfo love!

$20 Xen VPS Gandi vs. Linode vs. Slicehost

September 17th, 2009
Gandi Linode Slicehost
Plan 1 Share Linode 360 256 slice
Price 14.35 EUR
(~20 USD)
19.95 USD 20 USD
RAM 256MB 360MB 256MB
Storage 8GB
(3 OS + 5 Data)
16GB 10GB
Bandwidth 5 Mbit 200GB 100GB
My VPS Location Paris, France
Europe
Dallas, TX
USA
St. Louis, MI
USA
My VPS CPU Quad-Core AMD Opteron(tm) Processor 8346 HE Intel(R) Xeon(R) CPU L5420 @ 2.50GHz Dual Core AMD Opteron(tm) Processor 270
My VPS vCPUs 1 4 4
My VPS OS CentOS 5.3 CentOS 5.3 CentOS 5.3
My VPS Buffered disk reads 10.48 MB/sec 73.77 MB/sec 60.86 MB/sec
My VPS OGR-NG Benchmark 23,608,069 nodes/sec 40,910,174 nodes/sec 17,593,557 nodes/sec
My VPS RC5-72 Benchmark 7,703,097 keys/sec 9,297,850 keys/sec 8,585,510 keys/sec

Linux /proc/cpuinfo flags

July 20th, 2009

fpu – Onboard FPU
vme – Virtual Mode Extensions
de – Debugging Extensions
pse – Page Size Extensions
tsc – Time Stamp Counter
msr – Model-Specific Registers
pae – Physical Address Extensions
mce – Machine Check Architecture
cx8 – CMPXCHG8 instruction
apic – Onboard APIC
sep – SYSENTER/SYSEXIT
mtrr – Memory Type Range Registers
pge – Page Global Enable
mca – Machine Check Architecture
cmov – CMOV instructions (plus FCMOVcc, FCOMI with FPU)
pat – Page Attribute Table
pse36 – 36-bit PSEs
pn – Processor serial number
clflush – CLFLUSH instruction
dts – Debug Store
acpi – ACPI via MSR
mmx – Multimedia Extensions
fxsr – FXSAVE/FXRSTOR, CR4.OSFXSR
sse – SSE
sse2 – SSE2
ss – CPU self snoop
ht – Hyper-Threading
tm – Automatic clock control
ia64 – IA-64 processor
pbe – Pending Break Enable

syscall – SYSCALL/SYSRET
mp – MP Capable
nx – Execute Disable
mmxext – AMD MMX extensions
fxsr_opt – FXSAVE/FXRSTOR optimizations
pdpe1gb – GB pages
rdtscp – RDTSCP
lm – Long Mode (x86-64)
3dnowext – AMD 3DNow! extensions
3dnow – 3DNow!
k8 – Opteron, Athlon64
k7 – Athlon
constant_tsc – TSC ticks at a constant rate
up – smp kernel running on up
pebs – Precise-Event Based Sampling
bts – Branch Trace Store
nonstop_tsc – TSC does not stop in C states
pni – SSE-3
pclmulqdq – PCLMULQDQ instruction
dtes64 – 64-bit Debug Store
monitor – Monitor/Mwait support
ds_cpl – CPL Qual. Debug Store
vmx – Hardware virtualization
smx – Safer mode
est – Enhanced SpeedStep
tm2 – Thermal Monitor 2
ssse3 – Supplemental SSE-3
cid – Context ID
fma – Fused multiply-add
cx16 – CMPXCHG16B
xptr – Send Task Priority Messages
pdcm – Performance Capabilities
dca – Direct Cache Access
sse4_1 – SSE-4.1
sse4_2 – SSE-4.2
x2apic – x2APIC
aes – AES instructions
xsave – XSAVE/XRSTOR/XSETBV/XGETBV
avx – Advanced Vector Extensions
hypervisor – Running on a hypervisor
lahf_lm – LAHF/SAHF in long mode
cmp_legacy – If yes HyperThreading not valid
svm – Secure virtual machine
extapic – Extended APIC space
cr8legacy – CR8 in 32-bit mode
abm – Advanced bit manipulation
sse4a – SSE-4A
ibs – Instruction Based Sampling
sse5 – SSE-5
skinit – SKINIT/STGI instructions
wdt – Watchdog timer

Happy Fish

July 16th, 2009

Another Middle East undersea fiber cut

December 19th, 2008

Internet service in Egypt, the UAE, India and other counties in the region was interrupted today when submarine cables in the Mediterranean Sea failed. 

Cause of the failure is not known at this time, says operator Reliance GlobalCom. A total of three cables linking Italy and Egypt went down. A ship has been sent out to fix the problems.

Currently, services are being rerouted to backup cables and satellites. As rerouting measures fully kick in, services are expected to improve by early Saturday morning.

This isn’t the first time that cable service to the region has failed. Earlier this year, five separate undersea cables were cut between late January and early February, interrupting service to a number of countries.  

There’s likely to be some serious failure analysis involved if we see some more pipes go off-line in the next week.

(quoted from here).

SANS Internet Storm Center page about this event.