is there a protocol that carries IPv4 packets over an IPv6 network, kind of like the reverse of a he.net ipv6 tunnel? at least on *bsd the "gif" tunnel interface supports both nathani: yes, a couple in fact. https://en.m.wikipedia.org/wiki/4in6 Error in Wikipedia's response: http://www.internetsociety.org/deploy360/resources/case-study-t-mobile-us-goes-ipv6-only-using-464xlat/ -- T-Mobile (and now other carriers in the US) use 464XLAT on IPv6 only phones. the supermicro ipmi kvm is terrible it's a java application that uses JNI to run native code except the native code crashes on systems with too new of a libc I've been trying various configurations of Ubuntu for the last hour trying to get it working.. that seems odd, i use archlinux and can access supermicro ipmi you could try using IPMIView as well IPMIView is the right answer, if you need GUI keyboard+mouse or mounting of remote ISOs. If all you need is a serial console to get to the BIOS menus or drive your PXE booting installer, ipmitool is handy yeah, I've been trying to use ipmiview ipmitool is great if that'sall you need ipmiview itself starts, but "iKVM" (the kvm part) crashes OpenJDK Runtime Environment (IcedTea 2.6.7) (Arch Linux build 7.u111_2.6.7-1-x86_64) i'm using that java I think the java part starts fine but it tries to load iKVM64.so and the native code seems to explode on new systems it seems stupid to have java with native code yeah. I think the native code is tightvnc or something yeah the java is ick. do you think you can get away with serial console? I don't really want to chance it :/ you can do bios, linux etc the only real issue can be boot loaders that want to do fancy graphical screens will most live linux disks give me a console over serial automatically? you can force linux to disable that stuff some will if they keep using the bios, and the bios has serial console enabled sometimes you have to press escape or such yeah it isn't as clean as i'd like it to be hmm.. maybe I'll give that a shot then ipmitool -I lanplus -H -U -P sol activate should do it oh cool that's not even some supermicro software yeh it's a standard there's also power sub command and sensor acf_: I've had some success with this noVNC branch/fork and SM's iKVM: https://github.com/kelleyk/noVNC/tree/bmc-support oh, interesting discussions: https://github.com/novnc/noVNC/pull/408 and https://github.com/novnc/noVNC/pull/614 woah that looks awesome I looked for a bit, but couldn't find anything like that it certainly beats the java junk (if you can get it to work with your board) support matrix: https://docs.google.com/spreadsheets/d/1wVrwOpebTn43ncEBY9dfn1SMVM205NEMwy1W8q_kR3s/edit?usp=sharing (might not be up-to-date) I'm pretty sure it uses iKVM / VNC at least ATEN only not AMI seems to be it supermicro are so inconsistent "the only real issue can be boot loaders that want to do fancy graphical screens" SM's recent firmware has native html5 support too I do not understand why supposed server oses do fancy graphics dmidecode | grep -i product if you want to check model mkb: openbsd doesn't openbsd works perfectly with serial alone yes openbsd is the best operating system unfortunately we don't use it at work :( updating openbsd is a PITA, imo especially en masse dne: do you just launch with ./utils/launch.sh --vnc [host]:5900 ? acf_: yes, I believe so (it's been a while) and enter USERNAME:PASSWORD as password (maybe they've improved that now?) hmm I'm getting "Unsupported server" :/ oh :( do you know what motherboard it is? it's an ARP box it mostly looks to be the AMI unsupportable, although the ATEN sometimes have issues does it have OS on it? I imagine I can find out somehow through ipmi or the web interface? yea oh right.. dmidecode | grep -i product dmidecode -s baseboard-product-name heh dne is more specific (gleaned from the source) X9SCD that works for me too that's not on the list of working or not working > https://docs.google.com/spreadsheets/d/1wVrwOpebTn43ncEBY9dfn1SMVM205NEMwy1W8q_kR3s/edit#gid=0 there are some "X9SC..." in there but X9SRD has some issues true it should be ATEN at least i suspect it's fixable acf_: sorry for getting your hopes up I'm probably just not using this novnc thing right hm I can't find the string "unsupported server" in the source (or I don't know how to search properly on github) aah "Sorry, forked repositories are not currently searchable" yes it does exist in the source oops forgot to check out the "bmc-support" branch sweet i'm just trying it too where do you set username? I think you type "username:password" into the password field mine is stuck on "Connecting..." now well it says connecting but i can't see anything happening unsupported server but i think it's just having trouble talking to it "Failed to connect to server" here I can telnet to [ip]:5900 maybe you have to initiate remote connection first oh so can i > RFB 003.008 so the TCP connection does go through there is nothign useful under ast2100 settings video quality and subsampling mode but does suggest i have the right branch maybe password is done diff there is a little popup at the top of the page for a second when you click "Connect" that says something about "user:password" so that's where I got that rom you are right i missed that bit hah oh, here are some instructions https://basraayman.com/2016/12/03/using-a-novnc-branch-to-connect-to-your-supermicro-ikvm/ i saw the left bit weird, when i click connect it seems to only talk on port 80 not 5900 and that maybe having the other web interafce open what does? i'm tcpdumping on tun09 tun0 I see traffic to 5900 on tun0 when i enter my password it's like no communication seems to happen after password? i see it before password ohhh it just says "Connecting..." normally except it failed before haha "HTTP: GET /cgi/ipmi.cgi?SENSOR_INFO_FOR_SYS_HEALTH.XML" tcpdump is auto checking content it seems oh well my computer crashed while I was trying to install Ubuntu 14.04 in a VM.. so I guess I should go start that again typically should I file a ticket if I need an iso image attached that isn't available in the library? yeah if you want it added to library I mean, I just need to use it for maintainance but I think it has to be in the library for that yeah you can attach your own iso but to get it added to list yeah the supermicro http interface indicates that the iso is loaded from a Windows share I guess I could run a Windows share locally and try to use the iso over the VPN but that sounds like a major PITA you can't it's a restricted network no internet yeah, but I'm connected to it over VPN, yeah? to access the interface? just send an email with link to ISO you want added so I could use a share on my VPN IP? oh that may work but the last time i tried doing something like that it was extremely slow yeah, I imagine so.. it may be ok if you have say 20msec ping well.. I'll try to get this stupid supermicro software working first and then worry about all that but with 60 msec ping it'd probably be past the point of irritation a lot :) it's a live linux cdf so I think it will load the whole image into RAM? i use arch linux as live cd I basically just need access to the lvm2 tools there's otehr live ones in there i think though and preferrably cfdisk hmm.. ok. maybe I'll try one i use gdisk, arch linux would have lvm2, at lesat and it has zsh :) I did a dry run of this operation in a VM earlier with the Debian live CD so I was going to try to just use the same one hmm i haven't checked out debian in a while ubuntu's installer is brain dead I run Debian testing on lots of stuff yeah Ubuntu has some issues i did before shifting to ubuntu now i do arch for personal stuff ubuntu for other stuff but installing ubuntu with arch is nicer than usign their installer imo mercutio: any ideas on how to define multiple smokeping probes with different arguments? create more smokeping probes? but the name of the probe is the module it loads right? i don'tk now if you can change arguments per target nope the binary = isn't it? oh hmm i dunno now :) nah the name tells it which module (e.g. Smokeping::probes::FPing) to load it's really annoying me I'll try define it per host Yeah I think you're right hangon i think you can overload urlformat = http://%host%/ i've got lines like that per host i'm tracking can you do an if statement though i doubt it basically I have an expensive server to query with ICMP but i use that for filename and I want to do it 5 times instead of 20 urlformat = http://%host%/ at = http://%host%/200k of what to curlk you should be able to change it you may have to delete the old rrd though or change it yeah but I want everything else to be queried 20 times try just setting pings = 5 under the ++ on the Target? and host etc yeh the web interface will show how many it is but you may have to remove the old rrd ERROR: /etc/smokeping/config.d/Targets, line 43: unknown variable 'pings' :( oh maybe this isn't actually possible... it should be Oh! A probe can have subsections so: + FPing ++ FPingGentle pings = 5 yeah i did say ++ did that help? i didn't even realise you didn't know you could do that I didn't know a Probe could have a subsection mine have all been using that forever I know Targets can i dunno why you can't just put pings = 5 in the target it doesn't recognise it braindead Which is odd, because that's how the DNS probe and Curl probes work yeah it's only curl i've changed by expensive do you mean it's on 3g or such? Nah. There's a piece of slow software that handles ICMP ahh i want to know why this novnc doesn't work mmm? the novnc that works to supermicro servers apparently can you update the IPMI on the supermicro to a version that does HTML? but after putting in a password (any passwrod) it doesn't seem to communicate further I wonder if the branch is just broken right now Or is that what you've done and just stays "connecting..." acf: yaeh that's what i'm thinking I tried reverting to a couple of commits ago gizmoguy: not on the old gear but the history is probably complicated gizmoguy: you can use vnc to connect direclty using this git version of novnc in a separate branch haha sounds lovely makes me appreciate my Dell machines even more it's nicer than java it works with dell too idrac7 and idrac8 On idrac8 you get VNC over WebSockets well that's what novnc is basically and the DRAC web interface comes with an HTML5 vnc viewer bundled that's basically what this is it possibly is novnc i haven't picked it apart but it comes stock which is nice gave up on the ubuntu installer.. trying debian jessie now supermicro are doing html on recent stuff too with recent firmware yeah some of my supermicros do HTML5 It's not as pretty as the dell stuff but works oh nice. the Arch install iso has all of the tools I need mercutio: do you know if it does serial console automatically? nah it doesn't you need to tell it console=ttyS0,115200 you can do another console=tty0 too hmm also if you want to ssh into it which you probably do so I'll get the bootloader over the serial console? set your ip, passwd, then systemctl start sshd i have actually been wondering if it's possible to fix the arch linux cd to automatically go to serial i think with more recent archlinux it was better, i think i'm going to have to test it again hangon it's hp rather than supermicro, but i'll boot my home server and test testing in a VM now hp are cool in that you can ssh into them and tell them what cd to boot oh that's the other way of going duh it at least shows the bootloader over serial console=ttyS0,115200 should work even if you can't get out of the gui crap ie typing that blind in serial console yeah, it seems to work okay.. well I think I'll try this then cool thanks for all the help all good i know how annoying java can be :) java works for me but it still does annoying things, liek come up on my screen that's turned off having trouble getting it to boot from cdrom.. dammit well.. serial console worked in the VM > ISOLINUX 6.03 6.03* ETCD Copyright (C) 1994-2014 H. Peter Anvin et al but the actual menu is only displayed on the monitor (I can see it in the "remote console preview" image over http) mm type what i said above @mercutio ? console=ttyS0,115200 oh it may be two enters yeah. I tried that that's at the menu it takes a while because the cd is slow on virtual media even on lan I'm refreshing the preview image it doesn't show that it's doing anything does it show in menu? it usually clears the screen it shows the menu has some grey text saying some loading thing oh maybe it needs another enter? hmm if I power cycle, and press only enter a bunch of times should it at least try to boot something? yeah if you press enter from arch it'll boot 64 bit this is strange because in the VM, it displayed the menu over serial was it the same archlinux version? i think it improved yeah. it was acutally a passthrough of the virtual CD oh i wonder if there's a way to force that menu to behave without remaking the iso well my jessie vm just finished installing hmm a friend is looking for a Windows-friendly VPS host. i wonder if serial port isn't ttyS0 I checked that it is stupid iKVM won't work under jessie either.. did it used to work? JC_Denton: and no-one knows :) I know it worked under some Debian at some point i think lots of people using windows tend to use vmware with some hacking but kvm does work with windows yeah there are some hoops he's in a pickle because he wants to do Office (not 365 or the web versions) and he needs the Windows-specific stuff he only has a Chromebook though hmm and not enough space to just have a tiny windows box i assume trying to use office on a vps sounds painful what about kvm under linux on the chromebook hah linux worked quite well on my chromebook oh maybe not technically inclined how much ram does the chromebook have? i'm guessing 2gb that's not the kind of platform I'd typically run VMs on so in the "not really pretty, but probably ok for office" category tried to run Windows 10 under kvm the other day that went terribly hmm my chromebook is 2gb, and is old and discotinued discontinued even acf: how much ram did you give it? I think 3GB it was enough I think should be enough task manager didn't seem unhappy about it did you install the proper storage drivers I also used virtio for all the devices i wish starcraft would work on linux so yeah, loaded the virtio drivers during installation okay new plan.. start a Windows VM on AWS and install the shitty supermicro software on that i ran windows and linux on the same computer with hardware passthrough of video card for a while one monitor with onboard video, one with video card you really shouldn't need windows acf 4 gb on the chromebook crouton is not really feasible 4gb wow 4gb should be heaps to give 2gb to windows? when it's running yeah I know.. but I've tried as much linux as I can and none of it has worked I would hope that it would at least work out of the box on Windows what the hell it crashes on Windows too all I need to know is what platform this software runs on this is completely ridiculous alright.. well I installed Java on my AWS Windows VM and added the IPMI URL to the site exception list so that it would run unsigned applets the KVM viewer works through the web browser now maybe that's what you need on linux too yeah. I guess I could try using the applet in Linux it seems like kvm through ipmiview doesn't work at all it normally should hmm I'm using this: ftp://ftp.supermicro.com/utility/ipmiview it's not working for me hah it has in the past it says Cannot run program "./jre/bin/java" error=13, Permission denied oh. that's a different one I'll probably keep the disk for this Amazon VM around and just use it whenever I need to access the console the whole thing is a piece of crap anyway wtf it looks like fs corruption fun.. oh it's mixing executable access and behaves strangely everything was coming up ???????? etc ipmiview includes it's own java it seems yeah it's segfaulting though ipmiview itself? or the kvm thing? kvm inside ipmiview yeah that's what I was getting going to try using normal java on it if you look at the log, it says it's segfaulting inside of native code ie, JNI how do you run iKVM.jar? i have he parmas java -jar iKVM.jar maybe? oh i was missing the -jar there is some "iKVM" file in there too not sure if it's just a script to run that command or not I didn't look core dump yea # C [libiKVM64.so+0x19194] RFBScreen::ScreenDecode()+0x104 is that what you had? yeah libiKVM64.so exactly? that's the native code pretty close I've nuked all of those VMs now but it was crashing in that function ahh wow lemme check the Windows log just going to check it still works from browser :) the Windows log isn't very specific I guess it doesn't have debugging symbols in the dll it just shows that it's crashing somewhere in iKVM32.dll hmm i got in yeah the browser version works yeah I didn't expect that I imagine it's pretty much the same thing i have a jnlp but I definitely don't want Java installed in the normal browser that I use you can do it using javaws to just launch the jnlp directly? in fact, I don't really want this sketchy supermicro stuff anywhere on my computer but maybe in a Linux VM :P heh it does something weird to the password it's not rot13 but it looks to be about as bad maybe base64? as long as you can replay it but yeah if you just get the jnlp once you should be able to execute it later i suspect yeah I recall trying that last time I was messing with this I can't recall if that's what ended up working it's kind of messy twss Okay! twss! 'it's kind of messy' mercutio: mike-burns : it's a child process that has ended but not reaped by the parent acf__: FYI, I use mercutio's ipmitool "sol activate" snippet all the time. I can get into BIOS, etc... usually without trouble. Boot loaders that don't output to serial, well, that can still be an issue, unfortunately. the "not outputingto serial" boot loader issue is way worse on linux than it should be mercutio: acf__ : indeed, we had a customer that mounted an ISO from their local machine at home to an ARP Metal box, over the VPN. I thought he was crazy but he got the whole thing installed. :) up_the_irons: how come this customer didnt juet provide you with a wget URL to add the ISO to the SMB share? s/juet/just up_the_irons: how come this customer didnt just provide you with a wget URL to add the ISO to the SMB share? gizmoguy: acf__ mercutio : that's nice that idrac8 is basically doing noVNC; i didn't know that acf__: the Arch install ISO is what we use for all our new systems; it has everything you need. From there, debootstrap turns the box into Ubuntu for us. and it works great over serial doing what mercutio said acf__: you were able to type blind from serial? (like, it works with input but not output?) yeah, this Arch install ISO is pretty great when I was doing this with the Debian live CD, I had to actually install the packages for lvm2 into the live cd first it also has things like smartmontools I never got it to respond to input over the serial console. it might be me doing something stupid though of course I'll try again after this operation is complete when Ireboot maybe see if you can get into bios first just to make sure keyboard is working yeah. I got into BIOS over the serial console to change the boot order so I know that works ahh (apparently it doesn't honor the ipmi boot order setting?) i didn't know ipmi has boot order maybe that's why it wasn't working :P there was some setting in ipmitool that claimed to get it to boot from cdrom when mounting new cd sometimes you have to full reset rather than reboot > bootdev [] [] > Request the system to boot from an alternate boot device on next reboot hmm hmm that sounds good hp has something like that, which does work I was fully powering off each time if that's what you mean but you still do a reset hmm, amybe reset is better than power off dunno yeah idk but changing it in the bios worked so that was fine i change cd with hp with ssh normally now, rather than load up web ui okay.. so I wait for isolinux to load then I blindly type "console=ttyS0,115200" type it at the menu yeh oh and an extra enter cos i forgot to select the item after changing it i think you need it twice, well, I don't get a menu the only output I get is a single line > ISOLINUX 6.03 6.03* ETCD Copyright (C) 1994-2014 H. Peter Anvin et al of course that works if I do it on the graphical console, but not on the serial console oh so it's not acceping serial input either i think what's happening is that syslinux is trying to use the serial port at the same time as ipmi hmm? ipmi tries to use the serial port? well the menu came up fine on serial port with kvm yeah the bios uses ipmi I thought what happened was the serial port was just a normal serial port thats' why you can see the bios and the BIOS uses it, until it transfers control away to something else yeah i think the transfering control is being screwy i mean oh hmm yeah that could be it I wonder if there are BIOS options I can tweak that would fix it you can probably change the assigned serial port and syslinux is probably using ttyS0 or 0 serial port or com1 in legacy terms nathani: I'm not sure... guess he wanted full control ;) I mean, if you just can't wait for a support ticket :P i've used remote media over dsl actually it depends what you're booting, some stuff is a lot easier than other up_the_irons: you probably noticed the spike in traffic over your vpn interface if it was being graphed i didn't look nathani is remote booting iso's? :) I would probably try it to see if I could get it to work :-) I recall that I've tried in the past. I don't remember if I was successful, however. :P But I have definitely run the iKVM viewer under a modern Arch Linux install My only hiccup has ever been that icedtea/java use Firefox's proxy settings which aren't my own (I usually use Firefox to switch between socks/https proxies for tunneling). Besides that, `javaws $jnlp_file` and off it goes. heh i used to use firefox for alternative proxy as well hah