is there a protocol that carries IPv4 packets over an IPv6 network, kind of like the reverse of a he.net ipv6 tunnel?
at least on *bsd the "gif" tunnel interface supports both
nathani: yes, a couple in fact. https://en.m.wikipedia.org/wiki/4in6
Error in Wikipedia's response:
http://www.internetsociety.org/deploy360/resources/case-study-t-mobile-us-goes-ipv6-only-using-464xlat/ -- T-Mobile (and now other carriers in the US) use 464XLAT on IPv6 only phones.
the supermicro ipmi kvm is terrible
it's a java application that uses JNI to run native code
except the native code crashes on systems with too new of a libc
I've been trying various configurations of Ubuntu for the last hour trying to get it working..
that seems odd, i use archlinux and can access supermicro ipmi
you could try using IPMIView as well
IPMIView is the right answer, if you need GUI keyboard+mouse or mounting of remote ISOs. If all you need is a serial console to get to the BIOS menus or drive your PXE booting installer, ipmitool is handy
yeah, I've been trying to use ipmiview
ipmitool is great if that'sall you need
ipmiview itself starts, but "iKVM" (the kvm part) crashes
OpenJDK Runtime Environment (IcedTea 2.6.7) (Arch Linux build 7.u111_2.6.7-1-x86_64)
i'm using that java
I think the java part starts fine
but it tries to load iKVM64.so
and the native code seems to explode on new systems
it seems stupid to have java with native code
yeah. I think the native code is tightvnc or something
yeah the java is ick.  do you think you can get away with serial console?
I don't really want to chance it :/
you can do bios, linux etc
the only real issue can be boot loaders that want to do fancy graphical screens
will most live linux disks give me a console over serial automatically?
you can force linux to disable that stuff
some will
if they keep using the bios, and the bios has serial console enabled
sometimes you have to press escape or such
yeah it isn't as clean as i'd like it to be
hmm.. maybe I'll give that a shot then
ipmitool -I lanplus -H <ip> -U <username> -P <password> sol activate
should do it
oh cool
that's not even some supermicro software
yeh it's a standard
there's also power sub command
and sensor
acf_: I've had some success with this noVNC branch/fork and SM's iKVM: https://github.com/kelleyk/noVNC/tree/bmc-support
oh, interesting
discussions: https://github.com/novnc/noVNC/pull/408 and https://github.com/novnc/noVNC/pull/614
woah
that looks awesome
I looked for a bit, but couldn't find anything like that
it certainly beats the java junk (if you can get it to work with your board)
support matrix: https://docs.google.com/spreadsheets/d/1wVrwOpebTn43ncEBY9dfn1SMVM205NEMwy1W8q_kR3s/edit?usp=sharing
(might not be up-to-date)
I'm pretty sure it uses iKVM / VNC at least
ATEN only not AMI seems to be it
supermicro are so inconsistent
"the only real issue can be boot loaders that want to do fancy graphical screens"
SM's recent firmware has native html5 support too
I do not understand why supposed server oses do fancy graphics
 dmidecode | grep -i product
if you want to check model
mkb: openbsd doesn't
openbsd works perfectly with serial alone
yes openbsd is the best operating system
unfortunately we don't use it at work :(
updating openbsd is a PITA, imo
especially en masse
dne: do you just launch with ./utils/launch.sh --vnc [host]:5900 ?
acf_: yes, I believe so (it's been a while)
and enter USERNAME:PASSWORD as password
(maybe they've improved that now?)
hmm
I'm getting "Unsupported server"
:/
oh :(
do you know what motherboard it is?
it's an ARP box
it mostly looks to be the AMI unsupportable, although the ATEN sometimes have issues
does it have OS on it?
I imagine I can find out somehow through ipmi or the web interface?
yea
oh right..
dmidecode | grep -i product
dmidecode -s baseboard-product-name
heh dne is more specific
(gleaned from the source)
X9SCD
that works for me too
that's not on the list of working or not working
> https://docs.google.com/spreadsheets/d/1wVrwOpebTn43ncEBY9dfn1SMVM205NEMwy1W8q_kR3s/edit#gid=0
there are some "X9SC..." in there
but X9SRD has some issues
true
it should be ATEN at least
i suspect it's fixable
acf_: sorry for getting your hopes up
I'm probably just not using this novnc thing right
hm I can't find the string "unsupported server" in the source
(or I don't know how to search properly on github)
aah "Sorry, forked repositories are not currently searchable"
yes it does exist in the source
oops
forgot to check out the "bmc-support" branch
sweet
i'm just trying it too
where do you set username?
I think you type "username:password" into the password field
mine is stuck on "Connecting..." now
well it says connecting
but i can't see anything happening
unsupported server
but i think it's just having trouble talking to it
"Failed to connect to server" here
I can telnet to [ip]:5900
maybe you have to initiate remote connection first
oh so can i
> RFB 003.008
so the TCP connection does go through
there is nothign useful under ast2100 settings
video quality and subsampling mode
but does suggest i have the right branch
maybe password is done diff
there is a little popup at the top of the page for a second when you click "Connect"
that says something about "user:password"
so that's where I got that rom
you are right
i missed that bit hah
oh, here are some instructions https://basraayman.com/2016/12/03/using-a-novnc-branch-to-connect-to-your-supermicro-ikvm/
i saw the left bit
weird, when i click connect it seems to only talk on port 80 not 5900
and that maybe having the other web interafce open
what does?
i'm tcpdumping on tun09
tun0
I see traffic to 5900 on tun0
when i enter my password it's like no communication seems to happen
after password?
i see it before password
ohhh
it just says "Connecting..."  normally
except it failed before
haha "HTTP: GET /cgi/ipmi.cgi?SENSOR_INFO_FOR_SYS_HEALTH.XML"
tcpdump is auto checking content it seems
oh well
my computer crashed while I was trying to install Ubuntu 14.04 in a VM..
so I guess I should go start that again
typically should I file a ticket if I need an iso image attached that isn't available in the library?
yeah
if you want it added to library
I mean, I just need to use it for maintainance
but I think it has to be in the library for that
yeah
you can attach your own iso
but to get it added to list yeah
the supermicro http interface indicates that the iso is loaded from a Windows share
I guess I could run a Windows share locally and try to use the iso over the VPN
but that sounds like a major PITA
you can't
it's a restricted network
no internet
yeah, but I'm connected to it over VPN, yeah?
to access the interface?
just send an email with link to ISO you want added
so I could use a share on my VPN IP?
oh that may work
but the last time i tried doing something like that it was extremely slow
yeah, I imagine so..
it may be ok if you have say 20msec ping
well.. I'll try to get this stupid supermicro software working first and then worry about all that
but with 60 msec ping it'd probably be past the point of irritation a lot :)
it's a live linux cdf
so I think it will load the whole image into RAM?
i use arch linux as live cd
I basically just need access to the lvm2 tools
there's otehr live ones in there i think though
and preferrably cfdisk
hmm.. ok. maybe I'll try one
i use gdisk, arch linux would have lvm2, at lesat
and it has zsh :)
I did a dry run of this operation in a VM earlier with the Debian live CD
so I was going to try to just use the same one
hmm i haven't checked out debian in a while
ubuntu's installer is brain dead
I run Debian testing on lots of stuff
yeah Ubuntu has some issues
i did before shifting to ubuntu
now i do arch for personal stuff ubuntu for other stuff
but installing ubuntu with arch is nicer than usign their installer imo
mercutio: any ideas on how to define multiple smokeping probes with different arguments?
create more smokeping probes?
but the name of the probe is the module it loads right?
i don'tk now if you can change arguments per target
nope
the binary =
isn't it?
oh hmm
i dunno now :)
nah the name tells it which module (e.g. Smokeping::probes::FPing) to load
it's really annoying me
I'll try define it per host
Yeah I think you're right
hangon i think you can overload
urlformat = http://%host%/
i've got lines like that
per host i'm tracking
can you do an if statement though
i doubt it
basically I have an expensive server to query with ICMP
but i use that for filename
and I want to do it 5 times instead of 20
urlformat = http://%host%/ at = http://%host%/200k
of what to curlk
you should be able to change it
you may have to delete the old rrd though
or change it
yeah but I want everything else to be queried 20 times
try just setting pings = 5
under the ++
on the Target?
and host etc
yeh
the web interface will show how many it is
but you may have to remove the old rrd
ERROR: /etc/smokeping/config.d/Targets, line 43: unknown variable 'pings'
:(
oh
maybe this isn't actually possible...
it should be
Oh!
A probe can have subsections
so:
+ FPing
++ FPingGentle
pings = 5
yeah
i did say ++
did that help?
i didn't even realise you didn't know you could do that
I didn't know a Probe could have a subsection
mine have all been using that forever
I know Targets can
i dunno why you can't just put pings = 5 in the target
it doesn't recognise it
braindead
Which is odd, because that's how the DNS probe and Curl probes work
yeah
it's only curl i've changed
by expensive do you mean it's on 3g or such?
Nah. There's a piece of slow software that handles ICMP
ahh
i want to know why this novnc doesn't work
mmm?
the novnc that works to supermicro servers apparently
can you update the IPMI on the supermicro to a version that does HTML?
but after putting in a password (any passwrod) it doesn't seem to communicate further
I wonder if the branch is just broken right now
Or is that what you've done
and just stays "connecting..."
acf: yaeh that's what i'm thinking
I tried reverting to a couple of commits ago
gizmoguy: not on the old gear
but the history is probably complicated
gizmoguy: you can use vnc to connect direclty using this git version of novnc in a separate branch
haha
sounds lovely
makes me appreciate my Dell machines even more
it's nicer than java
it works with dell too
idrac7 and idrac8
On idrac8 you get VNC over WebSockets
well that's what novnc is basically
and the DRAC web interface comes with an HTML5 vnc viewer bundled
that's basically what this is
it possibly is novnc
i haven't picked it apart
but it comes stock which is nice
gave up on the ubuntu installer.. trying debian jessie now
supermicro are doing html on recent stuff too with recent firmware
yeah some of my supermicros do HTML5
It's not as pretty as the dell stuff
but works
oh nice. the Arch install iso has all of the tools I need
mercutio: do you know if it does serial console automatically?
nah it doesn't
you need to tell it console=ttyS0,115200
you can do another console=tty0 too
hmm
also if you want to ssh into it
which you probably do
so I'll get the bootloader over the serial console?
set your ip, passwd, then systemctl start sshd
i have actually been wondering if it's possible to fix the arch linux cd to automatically go to serial
i think with more recent archlinux it was better, i think i'm going to have to test it again
hangon
it's hp rather than supermicro, but i'll boot my home server and test
testing in a VM now
hp are cool in that you can ssh into them and tell them what cd to boot
oh that's the other way of going duh
it at least shows the bootloader over serial
<tab><space>console=ttyS0,115200<enter>
should work even if you can't get out of the gui crap
ie typing that blind in serial console
yeah, it seems to work
okay.. well I think I'll try this then
cool
thanks for all the help
all good
i know how annoying java can be :)
java works for me but it still does annoying things, liek come up on my screen that's turned off
having trouble getting it to boot from cdrom..
dammit
well.. serial console worked in the VM
> ISOLINUX 6.03 6.03* ETCD Copyright (C) 1994-2014 H. Peter Anvin et al
but the actual menu is only displayed on the monitor
(I can see it in the "remote console preview" image over http)
mm type what i said above
  @mercutio ? <tab><space>console=ttyS0,115200<enter>
oh it may be two enters
yeah. I tried that
that's at the menu
it takes a while
because the cd is slow on virtual media
even on lan
I'm refreshing the preview image
it doesn't show that it's doing anything
does it show in menu?
it usually clears the screen
it shows the menu
has some grey text saying some loading thing
oh
maybe it needs another enter?
hmm
if I power cycle, and press only enter a bunch of times
should it at least try to boot something?
yeah if you press enter from arch it'll boot 64 bit
this is strange because in the VM, it displayed the menu over serial
was it the same archlinux version?
i think it improved
yeah. it was acutally a passthrough of the virtual CD
oh
i wonder if there's a way to force that menu to behave
without remaking the iso
well my jessie vm just finished installing
hmm
a friend is looking for a Windows-friendly VPS host.
i wonder if serial port isn't ttyS0
I checked that it is
stupid iKVM won't work under jessie either..
did it used to work?
JC_Denton: and no-one knows :)
I know it worked under some Debian at some point
i think lots of people using windows tend to use vmware
with some hacking
but kvm does work with windows
yeah
there are some hoops
he's in a pickle because he wants to do Office (not 365 or the web versions) and he needs the Windows-specific stuff
he only has a Chromebook though
hmm
and not enough space to just have a tiny windows box i assume
trying to use office on a vps sounds painful
what about kvm under linux on the chromebook hah
linux worked quite well on my chromebook
oh maybe not technically inclined
how much ram does the chromebook have?
i'm guessing 2gb
that's not the kind of platform I'd typically run VMs on
so in the "not really pretty, but probably ok for office" category
tried to run Windows 10 under kvm the other day
that went terribly
hmm my chromebook is 2gb, and is old and discotinued
discontinued even
acf: how much ram did you give it?
I think 3GB
it was enough I think
should be enough
task manager didn't seem unhappy about it
did you install the proper storage drivers
I also used virtio for all the devices
i wish starcraft would work on linux
so yeah, loaded the virtio drivers during installation
okay new plan.. start a Windows VM on AWS
and install the shitty supermicro software on that
i ran windows and linux on the same computer with hardware passthrough of video card for a while
one monitor with onboard video, one with video card
you really shouldn't need windows acf
4 gb on the chromebook
crouton is not really feasible
4gb wow
4gb should be heaps to give 2gb to windows?
when it's running
yeah I know.. but I've tried as much linux as I can
and none of it has worked
I would hope that it would at least work out of the box on Windows
what the hell
it crashes on Windows too
all I need to know is what platform this software runs on
this is completely ridiculous
alright.. well I installed Java on my AWS Windows VM
and added the IPMI URL to the site exception list so that it would run unsigned applets
the KVM viewer works through the web browser now
maybe that's what you need on linux too
yeah. I guess I could try using the applet in Linux
it seems like kvm through ipmiview doesn't work at all
it normally should
hmm
I'm using this: ftp://ftp.supermicro.com/utility/ipmiview
it's not working for me hah
it has in the past
it says Cannot run program "./jre/bin/java" error=13, Permission denied
oh. that's a different one
I'll probably keep the disk for this Amazon VM around and just use it whenever I need to access the console
the whole thing is a piece of crap anyway
wtf
it looks like fs corruption
fun..
oh it's mixing executable access
and behaves strangely
everything was coming up ???????? etc
ipmiview includes it's own java it seems
yeah
it's segfaulting though
ipmiview itself?
or the kvm thing?
kvm inside ipmiview
yeah
that's what I was getting
going to try using normal java on it
if you look at the log, it says it's segfaulting inside of native code
ie, JNI
how do you run iKVM.jar?
i have he parmas
java -jar iKVM.jar
maybe?
oh
i was missing the -jar
there is some "iKVM" file in there too
not sure if it's just a script to run that command or not
I didn't look
core dump
yea
# C  [libiKVM64.so+0x19194]  RFBScreen::ScreenDecode()+0x104
is that what you had?
yeah
libiKVM64.so
exactly?
that's the native code
pretty close
I've nuked all of those VMs now
but it was crashing in that function
ahh
wow
lemme check the Windows log
just going to check it still works from browser :)
the Windows log isn't very specific
I guess it doesn't have debugging symbols in the dll
it just shows that it's crashing somewhere in iKVM32.dll
hmm i got in
yeah
the browser version works
yeah
I didn't expect that
I imagine it's pretty much the same thing
i have a jnlp
but I definitely don't want Java installed in the normal browser that I use
you can do it using javaws
to just launch the jnlp directly?
in fact, I don't really want this sketchy supermicro stuff anywhere on my computer
but maybe in a Linux VM :P
heh
it does something weird to the password
it's not rot13
but it looks to be about as bad
maybe base64?
as long as you can replay it
but yeah if you just get the jnlp once
you should be able to execute it later i suspect
yeah
I recall trying that last time I was messing with this
I can't recall if that's what ended up working
it's kind of messy
twss
Okay! twss! 'it's kind of messy'
mercutio: mike-burns : it's a child process that has ended but not reaped by the parent
acf__: FYI, I use mercutio's ipmitool "sol activate" snippet all the time.  I can get into BIOS, etc... usually without trouble.  Boot loaders that don't output to serial, well, that can still be an issue, unfortunately.
the "not outputingto serial" boot loader issue is way worse on linux than it should be
mercutio: acf__ : indeed, we had a customer that mounted an ISO from their local machine at home to an ARP Metal box, over the VPN.  I thought he was crazy but he got the whole thing installed. :)
up_the_irons: how come this customer didnt juet provide you with a wget URL to add the ISO to the SMB share?
s/juet/just
<nathani> up_the_irons: how come this customer didnt just provide you with a wget URL to add the ISO to the SMB share?
gizmoguy: acf__ mercutio : that's nice that idrac8 is basically doing noVNC; i didn't know that
acf__: the Arch install ISO is what we use for all our new systems; it has everything you need.  From there, debootstrap turns the box into Ubuntu for us.  and it works great over serial doing what mercutio said
acf__: you were able to type blind from serial?  (like, it works with input but not output?)
yeah, this Arch install ISO is pretty great
when I was doing this with the Debian live CD, I had to actually install the packages for lvm2 into the live cd first
it also has things like smartmontools
I never got it to respond to input over the serial console. it might be me doing something stupid though of course
I'll try again after this operation is complete when  Ireboot
maybe see if you can get into bios first
just to make sure keyboard is working
yeah. I got into BIOS over the serial console to change the boot order
so I know that works
ahh
(apparently it doesn't honor the ipmi boot order setting?)
i didn't know ipmi has boot order
maybe that's why it wasn't working :P
there was some setting in ipmitool that claimed to get it to boot from cdrom
when mounting new cd sometimes you have to full reset
rather than reboot
> bootdev <device> [<clear-cmos=yes|no>] [<options=help,...>]
> Request the system to boot from an alternate boot device on next reboot
hmm
hmm that sounds good
hp has something like that, which does work
I was fully powering off each time if that's what you mean
but you still do a reset
hmm, amybe reset is better than power off
dunno
yeah idk
but changing it in the bios worked
so that was fine
i change cd with hp with ssh normally now, rather than load up web ui
okay.. so I wait for isolinux to load
then I blindly type "<tab><space>console=ttyS0,115200<enter>"
type it at the menu yeh
oh and an extra enter
cos i forgot to select the item after changing it
i think you need it twice,
well, I don't get a menu
the only output I get is a single line
> ISOLINUX 6.03 6.03* ETCD Copyright (C) 1994-2014 H. Peter Anvin et al
of course that works if I do it on the graphical console, but not on the serial console
oh so it's not acceping serial input either
i think what's happening is that syslinux is trying to use the serial port at the same time as ipmi
hmm?
ipmi tries to use the serial port?
well the menu came up fine on serial port with kvm
yeah the bios uses ipmi
I thought what happened was the serial port was just a normal serial port
thats' why you can see the bios
and the BIOS uses it, until it transfers control away to something else
yeah i think the transfering control is being screwy i mean
oh hmm
yeah that could be it
I wonder if there are BIOS options I can tweak that would fix it
you can probably change the assigned serial port
and syslinux is probably using ttyS0
or 0 serial port
or com1 in legacy terms
nathani: I'm not sure... guess he wanted full control ;)
I mean, if you just can't wait for a support ticket :P
i've used remote media over dsl actually
it depends what you're booting, some stuff is a lot easier than other
up_the_irons: you probably noticed the spike in traffic over your vpn interface if it was being graphed
i didn't look
nathani is remote booting iso's? :)
I would probably try it to see if I could get it to work
:-)
I recall that I've tried in the past. I don't remember if I was successful, however. :P
But I have definitely run the iKVM viewer under a modern Arch Linux install
My only hiccup has ever been that icedtea/java use Firefox's proxy settings which aren't my own (I usually use Firefox to switch between socks/https proxies for tunneling). Besides that, `javaws $jnlp_file` and off it goes.
heh i used to use firefox for alternative proxy as well hah