#arpnetworks 2016-08-31,Wed

up_the_irons

sorressean: people do have Monumental's

sorressean

ouch. okay.

mercutio

hmm that could be bad /etc/fstab

sorressean

Is there any way to get an IPMI console in text or something or am I stuck with vnc?

mercutio

nope fstab looks fine

up_the_irons

sorressean: have you configured your OS to output to the serial port?

sorressean

I have not.

mercutio

umm yeah there is a way, but it involves changing some stuff in the freebsd loader iirc

up_the_irons

b/c then you could get a text-based console with ipmitool

mercutio

it looks like it's pretty simple

[17:43]

sorressean

up_the_irons: I'll send a csr from littlefieldt@wit.edu, I can bribe more eyeballs with beer if you wouldn't mind signing and I can IPMI in with his help.
Yeah probably isn't hard, I just have no way of doing that/seeing the error currently.

[17:43]

mercutio

yeah i mean to enable it

[17:44]

up_the_irons

sorressean: I'll sign the CSR as soon as I get it

[17:44]

mercutio

as long as ipmi is on com1

[17:44]

up_the_irons

I think it's simply: echo 'console="comconsole"' >> /boot/loader.conf

mercutio

yeah, if it's on com1

sorressean

oh that would be easy.

up_the_irons

mercutio: yeah

mercutio

i think it's on com2
wtf
using a port other than com2 requires recompiling

sorressean

up_the_irons: sent

[17:47]

mercutio

i suspect that in bios can disable hardware com1
or set it to com2, then have ipmi set to com1

[17:47]

sorressean

up_the_irons: mercutio : thanks a lot for the help, really appreciate it. was hoping it was something simple.
up_the_irons: also your arpnetworks.com is incredibly hard to read with a screen reader.
not that it matters, but I like to point people at arpnetworks when I get the chance. :p
mercutio: probably going to be a weekend project to figure that out, or at least a couple hours.

[17:47]

up_the_irons

mercutio: Yeah in the BIOS i think you can set the port number for virtual serial
sorressean: Sorry it's hard to read, I never knew that

[17:49]

mercutio

shall i reboot and go into bios and try to setup serial port

[17:49]

sorressean

up_the_irons: I didn't think you did, I can send a list of stuff that might help this weekend if that helps. I didn't need anything from it, I was just looking at it and seen it had changed.
mercutio: if you wouldn't mind I'd appreciate it. then I only need to echo that line into loader.conf

up_the_irons

sorressean: yeah that'd be great

mercutio

for some erason my java froze now

sorressean

the reason is java

up_the_irons

hahaha
mercutio: I actually connected to serial with ipmitool, maybe that did something. I've quit now.

[17:51]

mercutio

who knows
it's still not working for input
but i see ltters that werne't there before
oh si saw a space just now
i wonder if i go in with ipmitool sol it'll let me type

[17:51]

up_the_irons

I didn't get any output with ipmitool

[17:52]

mercutio

did you type anything into it?

up_the_irons

yeah probalby "lkajdsf"

mercutio

it's changed again wtf
i se aasdas

up_the_irons

might have been me, but i've disconnected

mercutio

yeah and i hadn't typed anything i was trying to do the serial
and it changed :)
woot it's working again

[17:54]

up_the_irons

i'm not going to guess what's causing that
;)

I just created: https://trello.com/c/iThnvyyo/29-arp-metal-connect-serial-port-of-a-server-to-console-cust-for-easy-console-access

[17:54]

mercutio

the sol is enabled for bios
but the keyboard stopped working again

[17:58]

up_the_irons

sorressean: ^ vote if that is something you'd like to see ;)
mercutio: maybe your VPN is going in/out ? (Happens when you're connected from a different computer)

[17:58]

sorressean

up_the_irons: will do. that would be useful.

[17:59]

mercutio

the time is updating
and that's working continuously

[17:59]

up_the_irons

ah OK
mercutio: there's an option in the web UI to reset video/keyboard. That usually "un-sticks" it.

[17:59]

sorressean

up_the_irons: I didn't get a support response (there's usually automated isn't there)? my school can never manage to get email right, so it could be something else.

[18:00]

mercutio

the macro ctrl-alt-delete worked though
i'm not sure what's with it
i can press del to get into bios
then can't move in bios

[18:00]

up_the_irons

sorressean: I haven't received anything yet
mercutio: does the virtual keyboard work? I wonder if arrow keys are somehow not mapping right

[18:01]

mercutio

yaeh just trying that
escape should still work to exit though?

[18:02]

up_the_irons

yes

[18:02]

mercutio

i've tried many keys
it's most bizzare

[18:02]

sorressean

resent in case that matters.
I hope it does because my other email addresses are tied up on the down box

[18:06]

up_the_irons

sorressean: nothing yet. you could just copy & paste the CSR into a private gist

[18:09]

sorressean

up_the_irons: doing that now

[18:11]

mercutio

it seems it's not easy to change serial port
it may be possible to run manual getty once booted

[18:17]

sorressean

mercutio: if it's a lot of trouble I don't mind recompiling once I get things up and running.
oh I didn't think about doing getty

[18:18]

mercutio

yeah that was mostly about getting you up and running :)
getty -h runs a getty locally :)

[18:18]

up_the_irons

mercutio: there's also "/usr/libexec/getty std.9600 ttyu0"
mercutio: that's how you put it on the serial port

[18:19]

mercutio

ok cool

[18:19]

up_the_irons

might need to change speed and/or port (u0, u1, ...)

[18:19]

mercutio

yeah it's u2 i think

[18:20]

up_the_irons

[18:20]

mercutio

hmm that's not working

[18:21]

up_the_irons

is it in single-user mode still?

[18:21]

mercutio

yeh
but a getty should still work
could just fsck it manually

[18:21]

up_the_irons

thought gettys didn't work in single user mode...

mercutio

that's why i'm starting it manually

sorressean

mercutio: if you don't mind doing that, I'm cool with whatever works.

up_the_irons

mercutio: sorressean has a new VPN cert. You could let him have serial control now.

mercutio

serial's not showing anything once it loads freebsd is the issue
it shows the freebsd loader...

up_the_irons

aah ok

mercutio

that's why was trying to get a getty

up_the_irons

so you're still doing it over Java

mercutio

yeah

up_the_irons

mercutio

well both are open

up_the_irons

roger that

mercutio

uhh
i think i got it but i have black on black text? :)
yeah restart ipmitool and it's there
ok i have /usr/libexec/getty std.115200 cuau2 &
but it needs l/p, so sorressean can test it out
so serial is all yours sorressean. do you know how to use ipmitool?

[18:25]

BryceBot

That's what she said!!

[18:27]

sorressean

mercutio: was just reading manpage/getting everything going.

[18:27]

mercutio

ipmitool -I lanplus -H <ip> -U <username> -P <password> sol activate

[18:28]

sorressean

Oh. sweet, thanks

[18:28]

mercutio

while vpn is connected.
brb

[18:28]

sorressean

got it. thanks a lot, really appreciate it. getting everything set up and I'll connect. does that persist over a reboot?

[18:29]

up_the_irons

i just connected, got a getty!

[18:29]

sorressean

sweet. thanks!
I screwed up and overwrote the CA. Is that publically available?

[18:30]

mercutio

it won't persist over reboot with the manual getty

[18:32]

up_the_irons

sorressean: you mean ARP_Networks_Server_CA.crt ?

[18:32]

mercutio

oh wow
i think i found a better solution

sorressean

up_the_irons: yeah.

mercutio

apparently you can set the comconsole port now
but the freebsd thing i was reading didn't mention that

up_the_irons

o'rly?

http://serverfault.com/questions/574351/serial-over-lan-on-freebsd-10-0-with-supermicro-x9-scm-f

mercutio

[18:34]

up_the_irons

touche
sorressean: I added it to your gist

[18:34]

sorressean

up_the_irons: heh, thanks. appreciate it

[18:34]

up_the_irons

mercutio: oh damn, there's "comconsole_port"

mercutio

Despite what the FreeBSD handbook seems to say, you should not need to compile a custom kernel.
yeah

up_the_irons

mercutio: that's a great answer that guy gave
great find!!

mercutio

i'm too used to openbsd's docs that actually are authorative

up_the_irons

haha yeah

[18:36]

sorressean

mercutio: that's bad ass, thanks
also openbsd is to cool for me.

[18:36]

up_the_irons

openbsd has the best serial port support on the planet

[18:38]

mercutio

are you set sorressean ?

[18:41]

sorressean

mercutio: I believe so, yes. thanks again, I really appreciate the help... and I owe you a beer if you ever end up in boston. :p

[18:42]

up_the_irons

mercutio: thanks!!

[18:43]

sorressean

up_the_irons: is there a separate openvpn password from that of key?

[18:45]

up_the_irons

sorressean: no

[18:45]

sorressean

that's odd. I can use openssl openssl rsa -in mycert-arpnetworks.key -check and decrypt the key fine, but can not authenticate to vpn.

[18:49]

up_the_irons

sorressean: let me check
sorressean: try again, I think it was an issue with the CN (was different than your last cert)

[18:57]

sorressean

up_the_irons: trying again. sorry, smoke alarms started going off.
had to afk a sec. haha

[19:05]

up_the_irons

I'm going to be relocating soon myself; driving home

[19:06]

sorressean

up_the_irons: sorry for the confusion, we're good to go.
thanks again for the help!

[19:06]

up_the_irons

sorressean: OK so all good?

sorressean

up_the_irons: yeah. good to go.

up_the_irons

ok great!

sorressean

thanks!

..... (idle for 22mn)

mercutio: I have ipmitool -I lanplus -H ... -P ... -U ... sol (I can't scroll far enough to see your command). Is that what you were using?
I'm used to my server having irclogs and it saves me from scrollback

[19:29]

mercutio

activate at the end

[19:30]

sorressean

oh gotcha. thanks

[19:31]

.... (idle for 18mn)

mercutio

did you get in ok sorressean ?

[19:49]

JC_Denton

didn't realize arp had a trello
i like the block storage idea

[19:58]

mercutio

it's recent

[19:58]

.............. (idle for 1h8mn)

sorressean

mercutio: sorry, was afw figuring stuff out. yeah, got everything booted back up. I thinki my drive is going bad.

[21:06]

mercutio

smartctl it

[21:06]

sorressean

yeah. that's my second goal
there was a clean boot, so nothing to make fs break but fsck had a really hard time recovering

[21:07]

mercutio

freebsd's ufs isn't actually very good for data integrity

[21:08]

sorressean

been thinking of switching email to googl eapps though so I don't have to manage it, so a rebuild would be pretty quick and easy

[21:09]

mercutio

i reckon zfs is better

[21:09]

sorressean

mercutio: journaling was enabled
Yeah. it probably is

[21:09]

mercutio

i went off freebsd originally due to data corruption :)
it's how i ended up with openbsd
'cos when i was new apparently freebsd was better for desktops

[21:10]

sorressean

I've been considering openbsd, but I love jails and the reinventing the wheel for funzies doesn't seem all that great to me.
opensmtpd openhttpd for example

[21:10]

mercutio

yeah jails is kind of nifty feature to have
i dunno i always used postfix with openbsd :)
i'm not even sure what freebsd uses by default

[21:10]

sorressean

sendmail :(
postfix isn't hard to set up, but tuning it for spam is really really hard.

[21:11]

mercutio

it is?

BryceBot

That's what she said!!

sorressean

I've got clamav plus spamassassin plus postfix and ack.

mercutio

you can kill a lot with spamhaus rbl

sorressean

I don't know, never really managed to find the happy medium to block out all the phishing emails and allow good stuff.
yeah, that gets blocked at the edge.

mercutio

my e-mail /was/ pretty good
recently it's been getting wors e:)
very low false positive though
which is what's important to me :)
i had a spam somewhere, now i can't find it. maybe it is pretty good :)