3 very different commits

Here’s 3 recent and different commits to DragonFly that I’m commenting on all at once:

  1. Peter Avalos upgraded libarchive in DragonFly to 3.1.2, with a note of the changes.  An ordinary and appreciated update.
  2. Sascha Wildner updated the ISO639 file to include the newest update: “Standard Moroccan Tamazight”.  There’s no particular utility to that; I just like saying “Standard Moroccan Tamazight” out loud.
  3. Work on poudriere, the utility for bulk-building DPorts packages, has caused some nice speedups for DragonFly in extremely stressful situations.  See one of Matthew Dillon’s recent commits.

I really wish the other BSD projects would include commit lines in the mail message subjects, so it was easier to catch things like these.

Lazy Reading for 2013/02/24

A calm week, for once.

  • Via Michael W. Lucas: Absolut OpenBSD.
  •  Another ‘How I customize Vim’ style post.  These things always sound great, but I worry that it’s not something that can be duplicated.  If you had to rebuild or duplicate your Vim environment elsewhere, you’d have to write out your own instructions.  Not impossible, but I don’t have to do that for anything else.  (via)
  • Twine, a game creation tool that really requires only writing.  (via)
  • The Oxford Comma, or how it doesn’t matter.  (via)
  • The Story of the PING Program.  I could have sworn I linked to this before.  I remember having someone explain ping to me when I was young and had little experience of IP networking; it seemed like magic where the computers would actually talk.  (via vsrinivas on EFNet #dragonflybsd)
  • ARPANet, 1971, as a tattoo.  (via)

Your unrelated comics link of the week: Reid Fleming, World’s Toughest Milkman.  All the early issues, available in electronic form, for pay-what-you-want.  (And I advise paying; it’s a fun comic)  Look at a sample page if you are curious.

Read shortcut, buffer cache improvements

The new vm.read_shortcut option has been turned on by default by Matthew Dillon, which should lead to some performance improvements.  That improvement has been measured for tmpfs, at least.  There’s also some buffer cache improvments that help on x86_64 systems, too.

Update: As Venkatesh Srinivas pointed out, tmpfs also no longer uses the mplock, so it’ll take better advantage of multiple processors.

Lazy Reading for 2013/02/17

This week I will both post this on the correct day AND get the date in the title correct.

Your unrelated tea link of the week: Epic Tea House Server.  Interesting just because of what he does and because I’ve never encountered tea from a samovar, though I’ve read of it.  (via)

Wait, this is better!  That previous link led to this film from an English chemistry professor about tea chemistry.  At first I was just entertained by his hair and his accent, but when he put tea in a NMR spectrometer, I decided this was the best tea thing ever.  Even better than Elemental!

Pulling authorized_keys from LDAP

Michael W. Lucas has put together a script for pulling a user’s authorized_keys file for SSH out of LDAP.  It’s a very good idea, though he hints pretty clearly that he could use feedback/feedback – there’s already some in the comments.

Updates: from discussion in IRC about this sort of distributed authentication (maybe ‘authentication distribution’ is a better phrase): Tools like puppet or FreeIPA may also be useful.  From seeing other conversations about this, it looks like there’s a lot of solutions to pick from, of varying difficulty, and none canonical.  That’s both good and bad.

a pf question on VoIP

I have a pf question for anyone who is interested.  I have this setup in my /etc/pf.conf, to prioritize my VoIP link.  (this system also does NAT.)

extif="em0"
intif="nfe0"
ipphone = "192.168.0.101"
altq on $extif cbq bandwidth 768Kb queue { std, voip }
queue voip bandwidth 168Kb priority 7 cbq(borrow)
queue std bandwidth 600Kb priority 1 cbq(default)
nat on $extif from $intif:network to any -> ($extif)
pass in quick on $intif proto udp from $ipphone to any tag VOIP_OUT keep state
pass in on $intif from $intif:network to any keep state
pass out on $intif from any to $intif:network keep state

pass out on $extif tagged VOIP_OUT keep state queue(voip)
pass out on $extif inet proto tcp all modulate state flags S/SA queue(std)
pass out on $extif inet proto { udp, icmp, gre } all keep state

When I run this, ‘pfctl -s queue’ shows most of the data getting run through the ‘voip’ queue.  I unplug the ATA, I still see the number of packets going up.  It seems packets are getting tagged that shouldn’t be, but I’m not sure why.  Anyone else have a similar – but working – setup?

Update: it was the underscore character in the tag.  Everything matched it, it seems.  Removing that made it work as expected.