Hello All!

i only needed 630 ebuild to be rebuilded :=)


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.12.12-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hey Benny!

i only needed 630 ebuild to be rebuilded

----- "<Esc>:read !ls /mnt/archives/medevil/scripts/ | wc -l" starts
144
----- "<Esc>:read !ls /mnt/archives/medevil/scripts/ | wc -l" ends

That includes configuration files generation as well as a script to create the directories on the targetted partition. Everything needed, as well as wanted, is there.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice!

01 Dec 2017 05:27, Maurice Kinal wrote to Benny Pedersen:

144

its gentoo ?

That includes configuration files generation as well as a script to create the directories on the targetted partition. Everything needed,
as well as wanted, is there.

note i found bugs in gentoo ?, python use flags is depricated, it should be using python targets as replacements

and now gcc 6.4 is minimal compiler, so its now more hard to run gentoo on amiga hardware with gcc 2.95.3_r10 :)


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.12.12-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hey Benny!

its gentoo ?

its medevil. I used to have one called minevil until gcc-4.7.x became abandonware. That was the last version where g++ wasn't a requirement.

python use flags is depricated

python as a dependency should be avoided methinks.

and now gcc 6.4 is minimal compiler

I think you still can get away with gcc-5 but I doubt for very long. Maybe another year or two. Which gcc version are you currently using?

---- "<Esc>:read !gcc --version" starts
gcc (GCC) 7.2.0
Copyright (C) 2017 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. ----- "<Esc>:read !gcc --version" ends

I notice that glibc-2.26 breaks a few things. Nothing that I am using at the moment.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice!

01 Dec 2017 07:20, Maurice Kinal wrote to Benny Pedersen:

its gentoo ?

its medevil. I used to have one called minevil until gcc-4.7.x became abandonware. That was the last version where g++ wasn't a
requirement.

old cat :)

python use flags is depricated

python as a dependency should be avoided methinks.

no, if no python there is no gentoo

and now gcc 6.4 is minimal compiler

I think you still can get away with gcc-5 but I doubt for very long. Maybe another year or two. Which gcc version are you currently using?

gentoo need --std=c++14 now

---- "<Esc>:read !gcc --version" starts
gcc (GCC) 7.2.0
Copyright (C) 2017 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There
is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
----- "<Esc>:read !gcc --version" ends

thats still unstable on gentoo

I notice that glibc-2.26 breaks a few things. Nothing that I am using
at the moment.

thats still masked on gentoo :=)


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.12.12-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hey Benny!

old cat

For sure. Seems to me that prior to gcc-2.95.x I was using egcs-1.1.2 on the first PC (486) I had booting an early version of Slackware way back when. Before that it was whatever version of gcc on Solaris where I first learned C.
Before that it was F77 (FORTRAN) on VAX/VMS which had nothing to do with gcc.

no, if no python there is no gentoo

That is why I don't use it. I do have python since newer glib needs it but once that is compiled it isn't required on the targetted system. I need glib for mc and if it weren't for that then glib would get the heave-ho. :::evil grin::: I find mc too handy for browsing archives and other such activities.

gentoo need --std=c++14 now

I have stumbled across a few sources that use c++14. Not much though.

thats still unstable on gentoo

Not really too surprising. So which version of gcc are you using?

thats still masked on gentoo

Again not really surprising, especially if xorg and friends are required. At the moment I notice mesa has issues but they may have fixed it since I last looked. I imagine it is fixed given that the glibc-2.27 release isn't too far off. Usually the end of December. Then of course will be the release of gcc-8
which I am guessing will be sometime in the spring.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Benny,

On Fri Dec 01 2017 06:01:46, Benny Pedersen wrote to All:

i only needed 630 ebuild to be rebuilded :=)

And that took what, about 8-12 hours? ;)

--- Msged/LNX 6.2.0 (Linux/4.12.12-gentoo (i686))

$ uname -a
Linux flakjacket 4.13.12-1-ARCH #1 SMP PREEMPT Wed Nov 8 11:54:06 CET 2017 x86_64 GNU/Linux

Gentoo behind on kernels now or are you running the stable arch?

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hello Maurice,

On Fri Dec 01 2017 05:27:06, Maurice Kinal wrote to Benny Pedersen:

i only needed 630 ebuild to be rebuilded

----- "<Esc>:read !ls /mnt/archives/medevil/scripts/ | wc -l" starts
144
----- "<Esc>:read !ls /mnt/archives/medevil/scripts/ | wc -l" ends

That includes configuration files generation as well as a script to
create the directories on the targetted partition. Everything needed,
as well as wanted, is there.

LOL! That's what I meant in a previous message about Gentoo and it's dependencies. Even when you upgrade things you already have new dependencies keep getting added. ;)

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hey Nicholas!

Even when you upgrade things you already have new dependencies
keep getting added. ;)

Not that I know for sure about gentoo, there are dependencies that can be dropped without any harm to the total end result. Case in point is the addition of python3 and a couple of it's offshoots to a basic LFS build. Those
can be safely skipped over but I get the impression that it might cause some grief later on if the more needy xorg and the ilk are of interest.

In my case 144 'packages' is all I will be using in the immediate future. One of them is python2 which glib, and hence mc, require. I could learn to live without mc and that would rid me of those two dependencies given nothing else absolutely needs them.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice,

On Fri Dec 01 2017 17:41:24, Maurice Kinal wrote to Nicholas Boel:

Not that I know for sure about gentoo, there are dependencies that can
be dropped without any harm to the total end result. Case in point is
the addition of python3 and a couple of it's offshoots to a basic LFS build. Those can be safely skipped over but I get the impression that
it might cause some grief later on if the more needy xorg and the ilk
are of interest.

Fore sure.

In my case 144 'packages' is all I will be using in the immediate
future. One of them is python2 which glib, and hence mc, require. I could learn to live without mc and that would rid me of those two dependencies given nothing else absolutely needs them.

Lean and mean, with a little sugar for oneself never hurt anyone. ;)

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hey Nicholas!

Lean and mean, with a little sugar for oneself never hurt anyone.

That is the general idea, but with the addition that the sugar doesn't leak into other things where they aren't a requirement. I know glib can and does leak into other packages if one is not careful.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Nicholas!

01 Dec 2017 10:59, Nicholas Boel wrote to Benny Pedersen:

On Fri Dec 01 2017 06:01:46, Benny Pedersen wrote to All:

i only needed 630 ebuild to be rebuilded :=)

And that took what, about 8-12 hours? ;)

or days ?

$ uname -a
Linux flakjacket 4.13.12-1-ARCH #1 SMP PREEMPT Wed Nov 8 11:54:06 CET 2017 x86_64 GNU/Linux

Gentoo behind on kernels now or are you running the stable arch?

4.14.3 is in portage tree masked unstable


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.12.12-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hello Benny,

On Sun Dec 03 2017 07:20:24, Benny Pedersen wrote to Nicholas Boel:

On Fri Dec 01 2017 06:01:46, Benny Pedersen wrote to All:

i only needed 630 ebuild to be rebuilded :=)

And that took what, about 8-12 hours? ;)

or days ?

All those hours and days you could have actually been doing productive with your system, rather than rebuilding it! ;)

$ uname -a
Linux flakjacket 4.13.12-1-ARCH #1 SMP PREEMPT Wed Nov 8 11:54:06
CET 2017 x86_64 GNU/Linux

Gentoo behind on kernels now or are you running the stable arch?

4.14.3 is in portage tree masked unstable

That's unstable. I noted I'm using 4.13.12 to your 4.12.x. I was just asking if
you haven't upgraded yet?

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hey Nicholas!

$ uname -a
Linux flakjacket 4.13.12-1-ARCH #1 SMP PREEMPT Wed Nov 8 11:54:06
CET 2017 x86_64 GNU/Linux

-----"<Esc>:read !uname -a" starts
Linux mikey 4.13.16 #1 SMP Thu Nov 30 01:38:46 UTC 2017 x86_64 Intel(R) Atom(TM) CPU C2758 @ 2.40GHz GenuineIntel GNU/Linux
-----"<Esc>:read !uname -a" ends

That is the last 4.13.x kernel since it is marked as EOL by the good people at kernel.org.

4.14.3 is in portage tree masked unstable

That's unstable.

-----"<Esc>:read !ssh fidonet@lmbrain 'uname -a'" starts
Linux lilmikey 4.14.3 #1 SMP Mon Dec 4 05:36:50 UTC 2017 x86_64 Intel(R) Atom(TM) CPU N2800 @ 1.86GHz GenuineIntel GNU/Linux
-----"<Esc>:read !ssh fidonet@lmbrain 'uname -a'" ends

Yes it is. The machine the above kernel is running on is an unstable machine (usb issues mostly but also gpu) and it appears the machine's flakiness cancels
out the kernel's flakiness ... more or less. :::evil grin:::

I am noting that 4.14.3 isn't running on the C2758 due to GPU issues at the moment with 4.14.x (ast driver) and the onboard "VGA compatible controller: ASPEED Technology, Inc. ASPEED Graphics Family (rev 30) (prog-if 00 [VGA controller])" as reported by lspci.

I noted I'm using 4.13.12 to your 4.12.x.

4.13.x kernels are better than 4.12.x kernels methinks, but both are EOL. Howver 4.13.16 is definetly better than 4.9.x kernels, which is the latest longterm kernel, or at least the last one I compared 4.13.16 to which was 4.9.65.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Nicholas!

03 Dec 2017 21:22, Nicholas Boel wrote to Benny Pedersen:

All those hours and days you could have actually been doing productive with your system, rather than rebuilding it! ;)

lol, gentoo sources unpacked to around 900 MB on harddrive to give a binarie of
running kernel

That's unstable. I noted I'm using 4.13.12 to your 4.12.x. I was just asking if you haven't upgraded yet?

so why not try it ? :=)


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.3-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hello Maurice!

04 Dec 2017 06:08, Maurice Kinal wrote to Nicholas Boel:

4.13.x kernels are better than 4.12.x kernels methinks, but both are
EOL. Howver 4.13.16 is definetly better than 4.9.x kernels, which is
the latest longterm kernel, or at least the last one I compared
4.13.16 to which was 4.9.65.

so lets help me getting nftables to work :=)

----- ipv4-filter begins -----
#! /sbin/nft -f

table filter {
chain input {
type filter hook input priority 0;
ct state established accept
ct state related accept
meta iif lo accept
tcp dport ssh counter packets 0 bytes 0 accept
tcp dport binkp counter packets 0 bytes 0 accept
tcp dport tfido counter packets 0 bytes 0 accept
tcp dport fido counter packets 0 bytes 0 accept
counter packets 5 bytes 5 log drop
}
chain forward { type filter hook forward priority 0; }
chain output {
type filter hook output priority 0;
ct state established accept
ct state related accept
meta iif lo accept
ct state new counter packets 0 bytes 0 accept
}
}
----- ipv4-filter ends -----

i dont know if its works or not :(

current is not enabled yet, can some help me make it better ?

or even working ? :=)

one error i have with it is that tfido is a unknown service to nft ?


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.3-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hey Benny!

so lets help me getting nftables to work

You're asking the wrong person. Although I do have the kernel nftables stuff modularized in both kernels here I don't have the tools at present. I have thought about trying it out though. Perhaps you can persuade me?

current is not enabled yet, can some help me make it better ?

Like I said, I have all that modularized and was thinking about trying NAT using nftables on the wireless hostapd machine;

----- "<Esc>:read !ssh fidonet@lmbrain 'uname -a'" starts
Linux lilmikey 4.14.3 #1 SMP Mon Dec 4 05:36:50 UTC 2017 x86_64 Intel(R) Atom(TM) CPU N2800 @ 1.86GHz GenuineIntel GNU/Linux
----- "<Esc>:read !ssh fidonet@lmbrain 'uname -a'" ends

Which version of nftables do you have? I see the current version is nftables-0.8 dated Oct 12 23:43 which is fairly recent. Also I notice I am lacking a couple dependencies I'll have to take care of first.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

On 2017 Dec 04 09:00:30, you wrote to Nicholas Boel:

That's unstable. I noted I'm using 4.13.12 to your 4.12.x. I was just
asking if you haven't upgraded yet?

so why not try it ? :=)

why would he want to backlevel? why don't you uprade? he is ahead of you and seems to be running fine...

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
... We are GWI of Borg. We assimilated G&W, R&S, B&P, A&E, W&P and L&D.
---
* Origin: (1:3634/12.73)

Hello Maurice,

On Mon Dec 04 2017 06:08:36, Maurice Kinal wrote to Nicholas Boel:

$ uname -a
Linux flakjacket 4.13.12-1-ARCH #1 SMP PREEMPT Wed Nov 8
11:54:06 CET 2017 x86_64 GNU/Linux

-----"<Esc>:read !uname -a" starts
Linux mikey 4.13.16 #1 SMP Thu Nov 30 01:38:46 UTC 2017 x86_64
Intel(R) Atom(TM) CPU C2758 @ 2.40GHz GenuineIntel GNU/Linux -----"<Esc>:read !uname -a" ends

And now it reads:

$ uname -a
Linux flakjacket 4.14.3-1-ARCH #1 SMP PREEMPT Thu Nov 30 18:33:13 UTC 2017 x86_64 GNU/Linux.

Take that for unstable! ;)

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hello Benny,

On Mon Dec 04 2017 09:00:30, Benny Pedersen wrote to Nicholas Boel:

All those hours and days you could have actually been doing
productive with your system, rather than rebuilding it! ;)

lol, gentoo sources unpacked to around 900 MB on harddrive to give a binarie of running kernel

And?

That's unstable. I noted I'm using 4.13.12 to your 4.12.x. I was
just asking if you haven't upgraded yet?

so why not try it ? :=)

Try what? See my previous message to Maurice. ;)

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hello mark,

On Mon Dec 04 2017 07:45:44, mark lewis wrote to Benny Pedersen:

That's unstable. I noted I'm using 4.13.12 to your 4.12.x. I was
just asking if you haven't upgraded yet?

so why not try it ? :=)

why would he want to backlevel? why don't you uprade? he is ahead of
you and seems to be running fine...

It seems Gentoo stable is falling behind in the times. Just upgraded again yesterday. <shrug>

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hej Nicholas!

Take that for unstable! ;)

Back atcha!

----- "<Esc>:read !uname -a" begins
Linux lilmikey 4.14.4 #1 SMP Tue Dec 5 18:53:20 UTC 2017 x86_64 Intel(R) Atom(TM) CPU N2800 @ 1.86GHz GenuineIntel GNU/Linux
----- "<Esc>:read !uname -a" ends

Livet er godt,
Maurice

... Gr|ad ikke for mig, jeg har vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-bonnell-linux-gnu)
* Origin: Lille Mikey's Hjerne - Ladysmith BC, Canada (1:153/7001)

Hello Maurice,

On Wed Dec 06 2017 01:32:04, Maurice Kinal wrote to Nicholas Boel:

Hej Nicholas!

Take that for unstable! ;)

Back atcha!

----- "<Esc>:read !uname -a" begins
Linux lilmikey 4.14.4 #1 SMP Tue Dec 5 18:53:20 UTC 2017 x86_64
Intel(R) Atom(TM) CPU N2800 @ 1.86GHz GenuineIntel GNU/Linux
----- "<Esc>:read !uname -a" ends

Bet it took me a lot less time for mine to be installed and working though! ;)

(that's all I had, haha)

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hey Nicholas!

Bet it took me a lot less time for mine to be installed and
working though!

If it is on your e3 system I should think so. I notice your uname doesn't say.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice,

On Thu Dec 07 2017 00:17:00, Maurice Kinal wrote to Nicholas Boel:

Bet it took me a lot less time for mine to be installed and
working though!

If it is on your e3 system I should think so. I notice your uname
doesn't say.

Yeah. It's an Archlinux VM on my server machine. I'm guessing Archlinux kernel builds go a little more generic than compiling one on your own, which is probably why my uname doesn't say much for specifics.

My point was that it took me about 10 seconds to install, as I didn't have to compile. ;)

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hej Nicholas!

My point was that it took me about 10 seconds to install, as I
didn't have to compile.

I suppose my point would have to be that it might take longer for the installation process but it is at least a step ahead of a far more capable machine. However I do have to compile but then again that is why I chose Linux
over other any other OS decades ago.

Livet er godt,
Maurice

... Gr|ad ikke for mig, jeg har vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-bonnell-linux-gnu)
* Origin: Lille Mikey's Hjerne - Ladysmith BC, Canada (1:153/7001)

Hello Maurice,

On Thu Dec 07 2017 03:09:02, Maurice Kinal wrote to Nicholas Boel:

My point was that it took me about 10 seconds to install, as I
didn't have to compile.

I suppose my point would have to be that it might take longer for the installation process but it is at least a step ahead of a far more
capable machine. However I do have to compile but then again that is
why I chose Linux over other any other OS decades ago.

Your point is definitely noted. At this point I'm going for ease of use until I
can create my own Linux. One nobody else has. ;)

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hey Nicholas!

At this point I'm going for ease of use until I can create my own
Linux.

Understood. Back when I started it was Slackware. I still have the first 4 CD
boxed set from Walnut Creek that became the basis for the first custom build on
an Acer laptop (Pentium MMX - 150MHz) and then later on a 486 Toshiba laptop, both of which nobody could get to work and thus were abandoned back in ~1996-ish. Once I got them working the respective owners wanted them back. Go
figure eh? After that it was zip disk installs and then pcmcia flash disks that caught my attention and definetly required custom root/boots. Same with usb flash disks later on that I customized a ttylinux that I called "Flash ttylinux of the 21st Century". That would have been ~2001. After that pure 64-bit systems grabbed my attention which brings me up to today.

One nobody else has.

Right. Been there, done that. ;-)

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice!

04 Dec 2017 12:30, Maurice Kinal wrote to Benny Pedersen:

so lets help me getting nftables to work

You're asking the wrong person.

bah :=)

Although I do have the kernel
nftables stuff modularized in both kernels here I don't have the
tools at present.

i cant get shorewall to play anymore on my fidobox, that was why i liked to try
move to nftables replament

I have thought about trying it out though.

shorewall author say he will not make nftable support, so sadly many that way loose if none take the job after Tom ....

Perhaps you can persuade me?

only if you know more then i do :=)

current is not enabled yet, can some help me make it better ?

Like I said, I have all that modularized and was thinking about
trying NAT using nftables on the wireless hostapd machine;

its a start imho

----- "<Esc>:read !ssh fidonet@lmbrain 'uname -a'" starts
Linux lilmikey 4.14.3 #1 SMP Mon Dec 4 05:36:50 UTC 2017 x86_64
Intel(R) Atom(TM) CPU N2800 @ 1.86GHz GenuineIntel GNU/Linux
----- "<Esc>:read !ssh fidonet@lmbrain 'uname -a'" ends

good enough for fidonet imho

Which version of nftables do you have? I see the current version is nftables-0.8 dated Oct 12 23:43 which is fairly recent. Also I
notice I am lacking a couple dependencies I'll have to take care of first.

same version on gentoo, docs are just not very verbose on how to migrade iptables to nftables, with google i found tools to migrade it, but not any binarie tools to help with it :(


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.4-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hello mark!

04 Dec 2017 07:45, mark lewis wrote to Benny Pedersen:

That's unstable. I noted I'm using 4.13.12 to your 4.12.x. I was
just asking if you haven't upgraded yet?

so why not try it ? :=)

why would he want to backlevel? why don't you uprade? he is ahead of
you and seems to be running fine...

back ?, i am on 4.14.4, what upgrade do i miss ?


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.4-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hello Nicholas!

05 Dec 2017 18:16, Nicholas Boel wrote to Benny Pedersen:

lol, gentoo sources unpacked to around 900 MB on harddrive to give a
binarie of running kernel

And?

it did not compile on my oldest microsd at 128MB


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.4-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

On 2017 Dec 14 17:30:22, you wrote to me:

That's unstable. I noted I'm using 4.13.12 to your 4.12.x. I was
just asking if you haven't upgraded yet?

so why not try it ? :=)

why would he want to backlevel? why don't you uprade? he is ahead of
you and seems to be running fine...

back ?, i am on 4.14.4, what upgrade do i miss ?

look up top where NB said you were using 4.12.x and he has 4.13.12... if he went to your 4.12.x, he would have been backleveling...

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
... ZAPPPP...<Sizzle>...<THUD>
---
* Origin: (1:3634/12.73)

Hey Benny!

i cant get shorewall to play anymore on my fidobox, that was why
i liked to try move to nftables replament

Okay. From what I've read thus far it looks like nftables will replace iptables soon so it seems like a good time to make the switch.

only if you know more then i do

In this case, probably not.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello mark!

14 Dec 2017 12:46, mark lewis wrote to Benny Pedersen:

look up top where NB said you were using 4.12.x and he has 4.13.12...
if he went to your 4.12.x, he would have been backleveling...

now i updated :=)

but 4.12.12 is still latest stable


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.6-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hello Maurice!

14 Dec 2017 18:59, Maurice Kinal wrote to Benny Pedersen:

i cant get shorewall to play anymore on my fidobox, that was why
i liked to try move to nftables replament

Okay. From what I've read thus far it looks like nftables will
replace iptables soon so it seems like a good time to make the switch.

yes depending on kernel .config

only if you know more then i do

In this case, probably not.

i just like to convert this below to nftable

----- rules-save begins -----
# Generated by iptables-save v1.4.21 on Sat Dec 16 10:02:33 2017
*mangle
:PREROUTING ACCEPT [62190:54783976]
:INPUT ACCEPT [62190:54783976]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [49555:3751838]
:POSTROUTING ACCEPT [49555:3751838]
[0:0] -A FORWARD -j MARK --set-xmark 0x0/0xff
COMMIT
# Completed on Sat Dec 16 10:02:33 2017
# Generated by iptables-save v1.4.21 on Sat Dec 16 10:02:33 2017
*nat
:PREROUTING ACCEPT [382:15480]
:INPUT ACCEPT [86:4696]
:OUTPUT ACCEPT [1545:124577]
:POSTROUTING ACCEPT [1545:124577]
COMMIT
# Completed on Sat Dec 16 10:02:33 2017
# Generated by iptables-save v1.4.21 on Sat Dec 16 10:02:33 2017
*raw
:PREROUTING ACCEPT [62190:54783976]
:OUTPUT ACCEPT [49555:3751838]
COMMIT
# Completed on Sat Dec 16 10:02:33 2017
# Generated by iptables-save v1.4.21 on Sat Dec 16 10:02:33 2017
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
:NET-fw - [0:0]
:logflags - [0:0]
:reject - [0:0]
:sha-lh-ad7c3899204ae152301e - [0:0]
:sha-rh-20dc886819828aae726a - [0:0]
:shorewall - [0:0]
:tcpflags - [0:0]
[54566:54134736] -A INPUT -i eth1 -j NET-fw
[7624:649240] -A INPUT -i lo -j ACCEPT
[0:0] -A INPUT -m addrtype --dst-type BROADCAST -j DROP
[0:0] -A INPUT -m addrtype --dst-type ANYCAST -j DROP
[0:0] -A INPUT -m addrtype --dst-type MULTICAST -j DROP
[0:0] -A INPUT -g reject
[0:0] -A FORWARD -m addrtype --dst-type BROADCAST -j DROP
[0:0] -A FORWARD -m addrtype --dst-type ANYCAST -j DROP
[0:0] -A FORWARD -m addrtype --dst-type MULTICAST -j DROP
[0:0] -A FORWARD -g reject
[41930:3102522] -A OUTPUT -o eth1 -j ACCEPT
[7624:649240] -A OUTPUT -o lo -j ACCEPT
[0:0] -A OUTPUT -m addrtype --dst-type BROADCAST -j DROP
[0:0] -A OUTPUT -m addrtype --dst-type ANYCAST -j DROP
[0:0] -A OUTPUT -m addrtype --dst-type MULTICAST -j DROP
[0:0] -A OUTPUT -g reject
[53442:53924218] -A NET-fw -p tcp -j tcpflags
[54181:54119136] -A NET-fw -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT [86:4696] -A NET-fw -p tcp -m tcp --dport 24554 -j ACCEPT
[299:10904] -A NET-fw -j DROP
[0:0] -A logflags -m hashlimit --hashlimit-upto 1/sec --hashlimit-burst 10 --hashlimit-mode srcip --hashlimit-name lograte -j LOG --log-prefix "logflags DROP " --log-level 6 --log-ip-options
[0:0] -A logflags -j DROP
[0:0] -A reject -m addrtype --src-type BROADCAST -j DROP
[0:0] -A reject -s 224.0.0.0/4 -j DROP
[0:0] -A reject -p igmp -j DROP
[0:0] -A reject -p tcp -j REJECT --reject-with tcp-reset
[0:0] -A reject -p udp -j REJECT --reject-with icmp-port-unreachable
[0:0] -A reject -p icmp -j REJECT --reject-with icmp-host-unreachable
[0:0] -A reject -j REJECT --reject-with icmp-host-prohibited
[0:0] -A shorewall -m recent --set --name %CURRENTTIME --mask 255.255.255.255 --rsource
[0:0] -A tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG
-g logflags
[0:0] -A tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -g logflags
[0:0] -A tcpflags -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -g logflags
[0:0] -A tcpflags -p tcp -m tcp --tcp-flags FIN,RST FIN,RST -g logflags
[0:0] -A tcpflags -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -g logflags
[0:0] -A tcpflags -p tcp -m tcp --tcp-flags FIN,PSH,ACK FIN,PSH -g logflags [0:0] -A tcpflags -p tcp -m tcp --sport 0 --tcp-flags FIN,SYN,RST,ACK SYN -g logflags
COMMIT
# Completed on Sat Dec 16 10:02:33 2017
----- rules-save ends -----

very basic config for iptables


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.6-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hey Benny!

yes depending on kernel .config

----- "<Esc>:read !uname -a" starts
Linux mikey 4.14.6 #1 SMP Fri Dec 15 09:49:29 UTC 2017 x86_64 Intel(R) Atom(TM)
CPU C2758 @ 2.40GHz GenuineIntel GNU/Linux
----- "<Esc>:read !uname -a" ends

----- "<Esc>:read !zgrep '^CONFIG_NF_\|^CONFIG_NFT' /proc/config.gz" starts CONFIG_NF_CONNTRACK=m
CONFIG_NF_LOG_COMMON=m
CONFIG_NF_LOG_NETDEV=m
CONFIG_NF_CONNTRACK_SECMARK=y
CONFIG_NF_CONNTRACK_PROCFS=y
CONFIG_NF_CONNTRACK_FTP=m
CONFIG_NF_CONNTRACK_IRC=m
CONFIG_NF_CONNTRACK_BROADCAST=m
CONFIG_NF_CONNTRACK_NETBIOS_NS=m
CONFIG_NF_CONNTRACK_SIP=m
CONFIG_NF_CT_NETLINK=m
CONFIG_NF_NAT=m
CONFIG_NF_NAT_NEEDED=y
CONFIG_NF_NAT_FTP=m
CONFIG_NF_NAT_IRC=m
CONFIG_NF_NAT_SIP=m
CONFIG_NF_NAT_REDIRECT=m
CONFIG_NF_TABLES=m
CONFIG_NF_TABLES_INET=m
CONFIG_NF_TABLES_NETDEV=m
CONFIG_NFT_EXTHDR=m
CONFIG_NFT_META=m
CONFIG_NFT_RT=m
CONFIG_NFT_NUMGEN=m
CONFIG_NFT_CT=m
CONFIG_NFT_SET_RBTREE=m
CONFIG_NFT_SET_HASH=m
CONFIG_NFT_SET_BITMAP=m
CONFIG_NFT_COUNTER=m
CONFIG_NFT_LOG=m
CONFIG_NFT_LIMIT=m
CONFIG_NFT_MASQ=m
CONFIG_NFT_REDIR=m
CONFIG_NFT_NAT=m
CONFIG_NFT_OBJREF=m
CONFIG_NFT_QUOTA=m
CONFIG_NFT_REJECT=m
CONFIG_NFT_REJECT_INET=m
CONFIG_NFT_HASH=m
CONFIG_NFT_FIB=m
CONFIG_NFT_FIB_INET=m
CONFIG_NF_DUP_NETDEV=m
CONFIG_NFT_DUP_NETDEV=m
CONFIG_NFT_FWD_NETDEV=m
CONFIG_NFT_FIB_NETDEV=m
CONFIG_NF_DEFRAG_IPV4=m
CONFIG_NF_CONNTRACK_IPV4=m
CONFIG_NF_SOCKET_IPV4=m
CONFIG_NF_TABLES_IPV4=m
CONFIG_NFT_CHAIN_ROUTE_IPV4=m
CONFIG_NFT_REJECT_IPV4=m
CONFIG_NFT_DUP_IPV4=m
CONFIG_NFT_FIB_IPV4=m
CONFIG_NF_TABLES_ARP=m
CONFIG_NF_DUP_IPV4=m
CONFIG_NF_LOG_ARP=m
CONFIG_NF_LOG_IPV4=m
CONFIG_NF_REJECT_IPV4=m
CONFIG_NF_NAT_IPV4=m
CONFIG_NFT_CHAIN_NAT_IPV4=m
CONFIG_NF_NAT_MASQUERADE_IPV4=m
CONFIG_NFT_MASQ_IPV4=m
CONFIG_NFT_REDIR_IPV4=m
CONFIG_NF_DEFRAG_IPV6=m
CONFIG_NF_CONNTRACK_IPV6=m
CONFIG_NF_SOCKET_IPV6=m
CONFIG_NF_TABLES_IPV6=m
CONFIG_NFT_CHAIN_ROUTE_IPV6=m
CONFIG_NFT_REJECT_IPV6=m
CONFIG_NFT_DUP_IPV6=m
CONFIG_NFT_FIB_IPV6=m
CONFIG_NF_DUP_IPV6=m
CONFIG_NF_REJECT_IPV6=m
CONFIG_NF_LOG_IPV6=m
----- "<Esc>:read !zgrep '^CONFIG_NF_\|^CONFIG_NFT' /proc/config.gz" ends

I believe that covers it all.

i just like to convert this below to nftable

I can't help you there. However I have run across Gentoo howto's on the subject that will be more helpful than I can be.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Benny,

On Sat Dec 16 2017 09:51:30, Benny Pedersen wrote to mark lewis:

look up top where NB said you were using 4.12.x and he has
4.13.12... if he went to your 4.12.x, he would have been
backleveling...

now i updated :=)

but 4.12.12 is still latest stable

Atta boy! Way to take a risk!

However, just because Gentoo says 4.12.12 is the latest stable, kernel.org and other OSes (like mine) have 4.14.5 going strong. <shrug>

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

On 12/16/17, Nicholas Boel said the following...

However, just because Gentoo says 4.12.12 is the latest stable,
kernel.org and other OSes (like mine) have 4.14.5 going strong. <shrug>

The latest releases are usually in the Portage tree immediately but stable/ unstable masking on Gentoo is hit or miss whether it's aged between "0-day"
and "Debian Stable."

--- Mystic BBS v1.12 A36 2017/12/03 (Linux/64)
* Origin: Subcarrier BBS (1:249/400)

Hello Static,

On Sun Dec 17 2017 04:17:36, Static wrote to Nicholas Boel:

However, just because Gentoo says 4.12.12 is the latest stable,
kernel.org and other OSes (like mine) have 4.14.5 going strong.
<shrug>

The latest releases are usually in the Portage tree immediately but stable/ unstable masking on Gentoo is hit or miss whether it's aged between "0-day" and "Debian Stable."

I know. And I definitely know what it's like to run the ~arch side of Gentoo. It's not much fun unless you like fixing a broken system on a fairly regular basis. ;)

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hey Nicholas!

It's not much fun unless you like fixing a broken system on a
fairly regular basis. ;)

Dammit, Jim! I'm a doctor, not a Linux kernel compiling guy!

For the record;

----- "<Esc>:read !uname -a" starts
Linux mikey 4.14.7 #1 SMP Sun Dec 17 17:06:22 UTC 2017 x86_64 Intel(R) Atom(TM)
CPU C2758 @ 2.40GHz GenuineIntel GNU/Linux
----- "<Esc>:read !uname -a" ends

The madness never stops.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice!

17 Dec 2017 18:08, Maurice Kinal wrote to Nicholas Boel:

The madness never stops.

so take vanilla kernel.org :=)

imho there is 4.15.x now

----- git-sources begins -----
* sys-kernel/git-sources
Available versions:
(4.15_rc1) ~4.15_rc1^bs
(4.15_rc2) ~4.15_rc2^bs
(4.15_rc3) ~4.15_rc3^bs
(4.15_rc4) ~4.15_rc4^bs
{build symlink}
Homepage: https://www.kernel.org
Description: The very latest -git version of the Linux kernel

----- git-sources ends -----

only kids would not try it :=)


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.6-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hey Benny!

imho there is 4.15.x now

No there aren't. Howvever there are release candidates - four of them as of today with the mainline being 4.15-rc4 as we speak.

only kids would not try it :=)

I have no plans.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice,

On Sun Dec 17 2017 18:08:56, Maurice Kinal wrote to Nicholas Boel:

For the record;

----- "<Esc>:read !uname -a" starts
Linux mikey 4.14.7 #1 SMP Sun Dec 17 17:06:22 UTC 2017 x86_64 Intel(R) Atom(TM) CPU C2758 @ 2.40GHz GenuineIntel GNU/Linux
----- "<Esc>:read !uname -a" ends

The madness never stops.

Damn this distribution for holding me back to 4.14.6! ;)

Regards,
Nick

... "?? ????. ? ????? ?????? ???????."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

Hey Nicholas!

Damn this distribution for holding me back to 4.14.6!

That is almost a week old. Shame on them. ;-)

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice!

18 Dec 2017 16:30, Maurice Kinal wrote to Benny Pedersen:

imho there is 4.15.x now

No there aren't. Howvever there are release candidates - four of them
as of today with the mainline being 4.15-rc4 as we speak.

whats so scary in rc ?

only kids would not try it :=)

I have no plans.

----- free begins -----
total used free shared buff/cache available Mem: 1289788 22168 1146080 424 121540 1229260 Swap: 2096476 0 2096476
----- free ends -----

beat me :=)


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.7-gentoo (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hey Benny!

whats so scary in rc ?

Mothing that I'd know about. I can wait until it becomes official to find out.
I am in no rush.

----- free begins -----
total used free shared buff/cache

available

Mem: 1289788 22168 1146080 424 121540

1229260

Swap: 2096476 0 2096476
----- free ends -----

beat me :=)

----- "<Esc>:read !free -m -h" starts
total used free shared buff/cache available Mem: 31G 106M 31G 752K 59M 31G Swap: 0B 0B 0B
----- "<Esc>:read !free -m -h" ends

DDR3 1600MHz ECC.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice!

20 Dec 17 20:45, you wrote to Benny Pedersen:

beat me :=)

----- "<Esc>:read !free -m -h" starts
total used free shared buff/cache available
Mem: 31G 106M 31G 752K 59M
31G
Swap: 0B 0B 0B

xentop - 22:24:51 Xen 4.4.1
13 domains: 2 running, 11 blocked, 0 paused, 0 crashed, 0 dying, 0 shutdown Mem: 134182768k total, 70196328k used, 63986440k free CPUs: 12 @ 2394MHz

Ingo


--- GoldED+/LNX 1.1.5--b20170303
* Origin: AmigaXess - back in FidoNet after 17 years (2:2452/413)

Hey Ingo!

Mem: 134182768k total, 70196328k used, 63986440k free
CPUs: 12 @ 2394MHz

Whoa! Yeah that beats mine for sure. What CPUs if you don't mind me asking? Also where did you get the above output from? It kinkd of looks like 'top' output but I've never seen that particular line in 'top' ... or 'free' for that
matter.

----- "<Esc>:read !lscpu" starts
Architecture: x86_64
CPU op-mode(s): 32-bit, 64-bit
Byte Order: Little Endian
CPU(s): 8
On-line CPU(s) list: 0-7
Thread(s) per core: 1
Core(s) per socket: 8
Socket(s): 1
NUMA node(s): 1
Vendor ID: GenuineIntel
CPU family: 6
Model: 77
Model name: Intel(R) Atom(TM) CPU C2758 @ 2.40GHz
Stepping: 8
CPU MHz: 2400.000
CPU max MHz: 2400.0000
CPU min MHz: 1200.0000
BogoMIPS: 4800.15
Virtualization: VT-x
L1d cache: 24K
L1i cache: 32K
L2 cache: 1024K
NUMA node0 CPU(s): 0-7
Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm sse4_1 sse4_2 movbe popcnt tsc_deadline_timer aes rdrand lahf_lm 3dnowprefetch cpuid_fault epb tpr_shadow vnmi flexpriority ept vpid tsc_adjust smep erms dtherm arat
----- "<Esc>:read !lscpu" ends

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice!

20 Dec 2017 20:45, Maurice Kinal wrote to Benny Pedersen:

whats so scary in rc ?

Mothing that I'd know about. I can wait until it becomes official to find out. I am in no rush.

i did see prink msgs with 4.14, maybe just fp warnings, dont know, but if this does not happen on 4.15 i am happy its not fail of my own .config

DDR3 1600MHz ECC.

you loosed, i am not bigfoot (small memory footprint is my goal)


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.15.0-rc4 (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hey Benny!

i did see prink msgs with 4.14, maybe just fp warnings, dont
know, but if this does not happen on 4.15 i am happy its not
fail of my own .config

I can relate. On this system I have issues with the ast drm graphics which were working fine with 4.13 kernels. However I decided to disable that and go back with vesafb and a standard resolution monitor on 4.14 kernels.

To be honest I prefer standard resolution monitors so I got to use this as an excuse. :-)

you loosed, i am not bigfoot (small memory footprint is my goal)

Understood. However I don't plan to follow your lead as I like my 8 penguins and 100M out of the available 32G is a very small price to pay to see those 8 penguins on bootup.

How many penguins do you get with your small footprint 22M's?

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Good ${greeting_time}, Maurice!

20 Dec 2017 20:45:54, you wrote to Benny Pedersen:

Mem: 1289788 22168 1146080 424 121540
1229260
Swap: 2096476 0 2096476
beat me :=)

total used free shared buff/cache available
Mem: 31G 106M 31G 752K 59M
31G
Swap: 0B 0B 0B

gremlin@fido:~ > free -m
total used free shared buffers cached
Mem: 2048 26 2021 0 0 26
-/+ buffers/cache: 0 2048
Swap: 0 0 0

gremlin@fido:~ > ps wax | wc -l
26

Yes: that's where 2:5020/545 (quite a large echomail distributor with 200+ links) works. Well, the tosser wasn't running at the moment - it's launched every 10 minutes by crond and may eat up quite a large amount of memory.

And the most important: that's _not_ Gentoo.


--
Alexey V. Vissarionov aka Gremlin from Kremlin
gremlin.ru!gremlin; +vii-cmiii-cmlxxvii-mmxlviii

... GPG: 8832FE9FA791F7968AC96E4E909DAC45EF3B1FA8 @ hkp://keys.gnupg.net
--- /bin/vi
* Origin: http://openwall.com/Owl (2:5020/545)

Hello Maurice!

20 Dec 17 22:58, you wrote to me:

Hey Ingo!

Mem: 134182768k total, 70196328k used, 63986440k free
CPUs: 12 @ 2394MHz

Whoa! Yeah that beats mine for sure. What CPUs if you don't mind me asking? Also where did you get the above output from? It kinkd of
looks like 'top' output but I've never seen that particular line in
'top' ... or 'free' for that matter.

It's the output of xentop, some kind of top for the virtualization stack Xen. Normal linux tools don't show the whole memory in dom0.

The CPU is a Intel(R) Xeon(R) CPU E5-2630L v2 @ 2.40GHz.

But honestly: I got those 128 GB memory from some of our old discarded servers.

Ingo


--- GoldED+/LNX 1.1.5--b20170303
* Origin: AmigaXess - back in FidoNet after 17 years (2:2452/413)

Hey Alexey!

quite a large echomail distributor with 200+ links

Lean and mean. I had something like that going on a 486 not too long ago. It had 64M total available to it but was using a fraction of that as long as it wasn't compiling for itself. I forget what version of gcc it had but definetly
gcc-4 and gcc only (no g++ etc.) which would make it pre 4.8. Slow but rock steady. I miss that machine.

And the most important: that's _not_ Gentoo.

I believe you. Neither are the current two running here as well as all past machines I've ever had the pleasure of working with. They weren't all custom jobs and of those most were stock Slackware installs although I did experiment with FreeBSD occasionally back in the mid 1990's.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hey Ingo!

It's the output of xentop

Ah! That explains why it looks exactly the same but totally different. :-)

The CPU is a Intel(R) Xeon(R) CPU E5-2630L v2 @ 2.40GHz.

Nice. Do you get 12 penguins on bootup? You could but I am uncertain if that is turned on in a Xen setup.

I got those 128 GB memory from some of our old discarded servers.

Perfect. 128 GB of ddr3 ecc would cost a small fortune in this part of the world. I am guesstimating around 2000 CAD new.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice!

20 Dec 17 20:45, you wrote to Benny Pedersen:

----- "<Esc>:read !free -m -h" starts
total used free shared buff/cache available
Mem: 31G 106M 31G 752K 59M
31G
Swap: 0B 0B 0B
----- "<Esc>:read !free -m -h" ends

DDR3 1600MHz ECC.

I'm assuming the physical RAM size is actually 32GiB, with the system eating some amount of it for use as video RAM, BIOS shadowing, etc.

In any case, it appears you have plenty available. ;-)

Andrew


--- GoldED+/LNX 1.1.5-b20170303
* Origin: Phoenix BBS * phoenix.bnbbbs.net (1:320/219)

Hey Andrew!

I'm assuming the physical RAM size is actually 32GiB

----- "<Esc>:read !free --si -h" starts
total used free shared buff/cache available Mem: 32G 110M 32G 778K 25M 32G Swap: 0B 0B 0B
----- "<Esc>:read !free --si -h" ends

I believe that is 'better' output.

with the system eating some amount of it for use as video RAM,
BIOS shadowing, etc.

Also it was/is a snapshot while the system is more or less idling. Also, also,
I used to load small development systems in 2G ramdisks so that would also have
an impact on the above numbers.

In any case, it appears you have plenty available.

Definetly overkill. I can easily live with far less. I think the optimal would be 8G and even that is overkill on most days. There have been times where 8G is ideal.

However if I were running a number of virtual development systems simultaneously I could see me wanting/using 32G without trying too hard. So far that hasn't been an issue.

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)

Hello Maurice!

21 Dec 2017 00:55, Maurice Kinal wrote to Benny Pedersen:

i did see prink msgs with 4.14, maybe just fp warnings, dont
know, but if this does not happen on 4.15 i am happy its not
fail of my own .config

I can relate. On this system I have issues with the ast drm graphics which were working fine with 4.13 kernels. However I decided to
disable that and go back with vesafb and a standard resolution monitor
on 4.14 kernels.

today tested with 4.14.8 get this:

----- kernel begins -----
Dec 24 13:28:20 themultixpoint kernel: INFO: rcu_sched detected stalls on CPUs/tasks:
Dec 24 13:28:20 themultixpoint kernel: \x090-...: (1 GPs behind) idle=8a6/1/0 softirq=205303/205304 fqs=0
Dec 24 13:28:20 themultixpoint kernel: \x09(detected by 1, t=4005 jiffies, g=45017, c=45016, q=6)
Dec 24 13:28:20 themultixpoint kernel: Sending NMI from CPU 1 to CPUs 0:
Dec 24 13:28:20 themultixpoint kernel: NMI backtrace for cpu 0
Dec 24 13:28:20 themultixpoint kernel: CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.8-gentoo-r1 #1
Dec 24 13:28:20 themultixpoint kernel: Hardware name: Dell Computer Corporation
Dimension 8300 /0M2035, BIOS A05 02/23/2004
Dec 24 13:28:20 themultixpoint kernel: task: c1700600 task.stack: c16fa000
Dec 24 13:28:20 themultixpoint kernel: EIP: _raw_spin_lock_irq+0xe/0x30
Dec 24 13:28:20 themultixpoint kernel: EFLAGS: 00000046 CPU: 0
Dec 24 13:28:20 themultixpoint kernel: EAX: 00000000 EBX: 00000000 ECX: 00000001 EDX: f69b0f80
Dec 24 13:28:20 themultixpoint kernel: ESI: f6413fa0 EDI: f69b0f80 EBP: f6413fcc ESP: f6413f8c
Dec 24 13:28:20 themultixpoint kernel: DS: 007b ES: 007b FS: 00d8 GS: 0000 SS:
0068
Dec 24 13:28:20 themultixpoint kernel: CR0: 80050033 CR2: 0055e300 CR3: 3507e000 CR4: 000006d0
Dec 24 13:28:20 themultixpoint kernel: Call Trace:
Dec 24 13:28:20 themultixpoint kernel: <SOFTIRQ>
Dec 24 13:28:20 themultixpoint kernel: ? run_timer_softirq+0x150/0x300
Dec 24 13:28:20 themultixpoint kernel: ? run_rebalance_domains+0x15f/0x170
Dec 24 13:28:20 themultixpoint kernel: ? blk_done_softirq+0x53/0x70
Dec 24 13:28:20 themultixpoint kernel: __do_softirq+0xc2/0x1a2
Dec 24 13:28:20 themultixpoint kernel: ? smp_irq_move_cleanup_interrupt+0x150/0x150
Dec 24 13:28:20 themultixpoint kernel: do_softirq_own_stack+0x1d/0x30
Dec 24 13:28:20 themultixpoint kernel: </SOFTIRQ>
Dec 24 13:28:20 themultixpoint kernel: irq_exit+0xa5/0xb0
Dec 24 13:28:20 themultixpoint kernel: smp_apic_timer_interrupt+0x4c/0x80
Dec 24 13:28:20 themultixpoint kernel: apic_timer_interrupt+0x35/0x3c
Dec 24 13:28:20 themultixpoint kernel: EIP: default_idle+0x5/0x10
Dec 24 13:28:20 themultixpoint kernel: EFLAGS: 00000246 CPU: 0
Dec 24 13:28:20 themultixpoint kernel: EAX: 80000000 EBX: 00000000 ECX: 00000001 EDX: 00000000
Dec 24 13:28:20 themultixpoint kernel: ESI: 00000000 EDI: c1700600 EBP: c16fbf50 ESP: c16fbf50
Dec 24 13:28:20 themultixpoint kernel: DS: 007b ES: 007b FS: 00d8 GS: 0000 SS:
0068
Dec 24 13:28:20 themultixpoint kernel: arch_cpu_idle+0x9/0x10
Dec 24 13:28:20 themultixpoint kernel: default_idle_call+0x19/0x30
Dec 24 13:28:20 themultixpoint kernel: do_idle+0x14d/0x170
Dec 24 13:28:20 themultixpoint kernel: cpu_startup_entry+0x1d/0x20
Dec 24 13:28:20 themultixpoint kernel: rest_init+0x8c/0x90
Dec 24 13:28:20 themultixpoint kernel: start_kernel+0x2f9/0x2fe
Dec 24 13:28:20 themultixpoint kernel: i386_start_kernel+0x95/0x99
Dec 24 13:28:20 themultixpoint kernel: startup_32_smp+0x164/0x166
Dec 24 13:28:20 themultixpoint kernel: Code: 0a 85 c0 74 08 31 c0 5d c3 8d 74 26 00 b8 01 00 00 00 5d c3 89 f6 8d bc 27 00 00 00 00 89 c2 fa 31 c0 b9 01 00 00 00 f0 0f b1 0a <85> c0 75 06 c3 90 8d 74 26 00 55 89 d1 89 c2 89 c8 89 e5 e8
9a
Dec 24 13:28:20 themultixpoint kernel: rcu_sched kthread starved for 4005 jiffies! g45017 c45016 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x402 ->cpu=1
Dec 24 13:28:20 themultixpoint kernel: rcu_sched I 0 8 2 0x80000000
Dec 24 13:28:20 themultixpoint kernel: Call Trace:
Dec 24 13:28:20 themultixpoint kernel: __schedule+0x16d/0x590
Dec 24 13:28:20 themultixpoint kernel: schedule+0x29/0x70
Dec 24 13:28:20 themultixpoint kernel: schedule_timeout+0x105/0x240
Dec 24 13:28:20 themultixpoint kernel: ? __next_timer_interrupt+0xc0/0xc0
Dec 24 13:28:20 themultixpoint kernel: rcu_gp_kthread+0x440/0x760
Dec 24 13:28:20 themultixpoint kernel: kthread+0xd1/0x100
Dec 24 13:28:20 themultixpoint kernel: ? call_rcu_sched+0x20/0x20
Dec 24 13:28:20 themultixpoint kernel: ? kthread_create_on_node+0x20/0x20
Dec 24 13:28:20 themultixpoint kernel: ret_from_fork+0x19/0x24
----- kernel ends -----

4.15 fix this

To be honest I prefer standard resolution monitors so I got to use
this as an excuse. :-)

i like to get rid of vga framebuffers in initial boot, have forgot how to make this into the boot line so it takes radeonfb always

you loosed, i am not bigfoot (small memory footprint is my goal)

Understood. However I don't plan to follow your lead as I like my 8 penguins and 100M out of the available 32G is a very small price to
pay to see those 8 penguins on bootup.

How many penguins do you get with your small footprint 22M's?

many as more then one :=)


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.8-gentoo-r1 (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Hello Alexey!

21 Dec 2017 07:23, Alexey Vissarionov wrote to Maurice Kinal:

And the most important: that's _not_ Gentoo.

funtoo ? :=)


Regards Benny

... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.14.8-gentoo-r1 (i686))
* Origin: I will always keep a PC running CPM 3.0 (2:230/0)

Good ${greeting_time}, Benny!

24 Dec 2017 14:31:06, you wrote to me:

And the most important: that's _not_ Gentoo.

funtoo ? :=)

${origin}.

However, I know how to get from it some fun, too.


--
Alexey V. Vissarionov aka Gremlin from Kremlin
gremlin.ru!gremlin; +vii-cmiii-cmlxxvii-mmxlviii

... that's why I really dislike fools.
--- /bin/vi
* Origin: http://openwall.com/Owl (2:5020/545)

Hey Benny!

today tested with 4.14.8 get this:
Hardware name: Dell Computer Corporation Dimension 8300

I looked it up and Dell claims it is a Pentium 4 2.8 GHz, which is a single core 32-bit processor. The last 32-bit processors I had were all P3's and skipped the P4's and went to x86_64's. From what I can tell it looks like 4.14.8 has smp issues with the Pentium 4 2.8 GHz.

4.15 fix this

Excellent. I just looked and see that they are up to 4.15-rc5 which is dated as today. I'd guesstimate that a 4.15 release should be out in short order.

For the record;

----- "<Esc>:read !uname -a" starts
Linux mikey 4.14.8 #1 SMP Wed Dec 20 16:28:26 UTC 2017 x86_64 Intel(R) Atom(TM)
CPU C2758 @ 2.40GHz GenuineIntel GNU/Linux
----- "<Esc>:read !uname -a" ends

I don't see any issues with the above kernel as far as the C2758 is concerned.

i like to get rid of vga framebuffers in initial boot, have
forgot how to make this into the boot line so it takes radeonfb
always

I believe that is one of the drm ones that I am currently avoiding by turning them all off, especially the ast one which is what this board has. Try looking
in the linux/Documentation/gpu/ directory as well as linux/Documentation/power/video.txt document for clues.

For vesafb I just add "vga=0x323" to the bootloader's kernel commandline which gives me a 1280x1024, 32bpp framebuffer console at bootup with 8 pure 64-bit penguins at the top of the screen. Other than more penguins, what more could you possibly want? As far as I know vesafb should work fine with a radeon but I'd highly recommend using a standard resolution monitor. I am betting it will
work as well with the 4.15 kernels once they become official releases.

many as more then one :=)

See above. Pure 64-bit ones too. :::evil grin:::

Life is good,
Maurice

... Don't cry for me I have vi.
--- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)