opensoekris-users Mailing List for OpenSoekris

Hi all

Just got my soekris 4801 c/w crypto mini pci
card.

I've tried to build OpenSoekris but it fails with the following:

Saving to /var/SOEKRIS/OpenSoekris/conf/hamsoekris
Checking for existing kernel
Do you have a kernel already built? [n]
NET4801:65: bios0: must specify apid
NET4801:66: pcibios0 at bios0 is orphaned
  (no bios0 declared)
*** Stop.
make: don't know how to make clean. Stop in 
/usr/src/sys/arch/i386/compile/NET4801.
cp: bsd: No such file or directory
Saving this kernel to /var/SOEKRIS/OpenSoekris/conf/hamsoekris/ also
cp: bsd: No such file or directory

I'm building this on an existing OpenBSD 3.6 install on a standard PC 
and have the latest firmware update from Soekris installed on the box.

Can anyone suggest how to fix this?

Also, I noticed in other posts about the lack of USB support.  Is this 
just a case of adding the usual lines with USB stuf from the GENERIC kernel?

My plan is to buld an image to move onto a CF at a later date.

Ultimately I'd like an image that I could grab over PXE and run in RAM. 
  I've looked at flashboot but there is no support there and a lack of 
docs, and it fails miserably for me unfortunately...ah well!

Thanks for any help!

-- 
Simon H

On 11/1/04 at 1:48 AM -0000, Manuel Pata wrote:
> Is this project still alive?

lets say its been on a hiatus..

On 11/1/04 at 2:08 AM -0000, Manuel Pata wrote:
> I don't think it takes much time to update two or three text files :(
> No need for new features, just keep the project working with the current=
=20
> OpenBSD version.

*nod* i currently do not have a working soekris to test on (other than my
firewall, that is in use at the moment..) i'll update it and commit asap..

--ben

Manuel Pata wrote:

> I don't think it takes much time to update two or three text files :(
> No need for new features, just keep the project working with the 
> current OpenBSD version.

I haven't seen traffic on this list in a very long time, I thought I was 
unsubscribed. Guess it's time to do that now.

Good luck getting someone to change it.


-- 
--------------------------------------------------------------------------------
Zach Lowry                                                 http://www.netbsd.org
MTSU, Murfreesboro, TN                              Owner of 20 NetBSD Platforms
za...@za...

I don't think it takes much time to update two or three text files :(
No need for new features, just keep the project working with the current 
OpenBSD version.

Zach Lowry wrote:

> Manuel Pata wrote:
>
>> Is this project still alive?
>>
> Nope, I don't think so.
>

-- 
Manuel Pata
pata (ate) alface (dote) de

Is this project still alive?

Some changes to 'rc' and 'flashsmall.txt'
rc: Use absolute path to sshd (/usr/sbin/sshd)
flashsmall.txt:
72,87c72,87
< ./usr/lib/libwrap.so.3.0
< ./usr/lib/libz.so.3.0
< ./usr/lib/libutil.so.9.0
< ./usr/lib/libdes.so.8.0
< ./usr/lib/libedit.so.2.0
< ./usr/lib/libcrypto.so.10.3
< ./usr/lib/libkvm.so.7.1
< ./usr/lib/libc.so.30.3
< ./usr/lib/libcurses.so.9.0
< ./usr/lib/libtermcap.so.9.0
< ./usr/lib/libm.so.1.0
< ./usr/lib/libpcap.so.2.1
< ./usr/lib/libkrb5.so.13.0
< ./usr/lib/libkafs.so.13.0
< ./usr/lib/libasn1.so.13.0
< ./usr/lib/libgssapi.so.2.1
---
 > ./usr/lib/libwrap.so.4.0
 > ./usr/lib/libz.so.4.0
 > ./usr/lib/libutil.so.11.0
 > ./usr/lib/libdes.so.9.0
 > ./usr/lib/libedit.so.3.0
 > ./usr/lib/libcrypto.so.11.0
 > ./usr/lib/libkvm.so.8.0
 > ./usr/lib/libc.so.34.1
 > ./usr/lib/libcurses.so.10.0
 > ./usr/lib/libtermcap.so.10.0
 > ./usr/lib/libm.so.2.0
 > ./usr/lib/libpcap.so.3.0
 > ./usr/lib/libkrb5.so.14.0
 > ./usr/lib/libkafs.so.14.0
 > ./usr/lib/libasn1.so.14.0
 > ./usr/lib/libgssapi.so.3.0


-- 
Manuel Pata
pata (ate) alface (dote) de

I happened upon http://opensoekris.sourceforge.net/want.html and saw the
information about the logos. I crafted these couple of badge-style logos
(88x31 px) and liked what I came up with. Have a look and see if
you like them yourself -- if so, feel free to use them for whatever
purpose, if not send them to the trash. ;)

   http://www.sancho2k.net/images/articles/20040828000117986_1.png
   http://www.sancho2k.net/images/articles/20040828000117986_2.png

I tried to get these directly to Ron, but his address bounced. :(

DS

It's just an idea for the project, adding cron.
What I've done in my installation:

 - rc
mkdir /tmp/var/cron
mkdir /tmp/var/cron/tabs
mkdir /tmp/var/cron/atjobs

echo crontab: ...
crontab -u root /etc/crontab

cron -> /usr/sbin/
crontab -> /usr/bin/

-- 
Manuel Pata
pata (ate) alface (dote) de

Is the project dead?
Wake up :|

-- 
Manuel Pata
pata (ate) alface (dote) de

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thanks Ben, I've added this information to the FAQ (which will be online 
shortly.)

ben@ti... wrote:
>  Soren has released a new BIOS for the net45xx's, that makes it more 
>  forgiving about which CF's it will work properly with. I have not 
>  tested it (yet), but you might want to give it a shot.
>  
>  http://soekris.com/Software/b4501_122.bin
>  
>  I see that there is also a newer one for the net4801, but as I don't 
>  have a model to play with I'll leave it at that :)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/pg0PcpocxAsLedoRAlQVAJ0URW1PnlD7C4qCzGVcELeucaFN8QCeKxzX
BAGKUe5TDrS2faKYvJPr6PU=
=Jh2P
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Nov 2, 2003, at 9:12 AM, LittleW0lf wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> This really doesn't belong in commit, so I am forwarding to 
> opensoekris-users instead.
>
> I've gotten OpenSoekris 3.4 current to boot on a Net4501, Net4521, and 
> Net4801...it is possible.
>
> The problem is that the Soekris is particularly picky about CF chips, 
> and if you do not have the CF chip formatted properly, you'll not be 
> able to boot it.  Do you have a make and model number for the chip, 
> one of us might have seen it before and might be able to to help you 
> out?  I know for a fact that SanDisk 32, SanDisk 64, and Kingston 32 
> chips work, as well as TDM128 chips, and I can give you the settings 
> if you have any of these chips.  I have not been able to get Kingston 
> 128 or SanDisk 128  (SDCFB128) chips to work, though the script does 
> handle SanDisk 128 (SDCFA128) chips.
>
> When you boot the Soekris with the latest firmware, you should see a 
> line which describes the heads, clusters, and sectors.  You can use 
> that to fix the script to format the chip correctly.  I've had 
> moderate success using that method (which is descibed at 
> http://www.nmedia.net/~chris/soekris/install.html.)

Soren has released a new BIOS for the net45xx's, that makes it more 
forgiving about which CF's it will work properly with. I have not 
tested it (yet), but you might want to give it a shot.

http://soekris.com/Software/b4501_122.bin

I see that there is also a newer one for the net4801, but as I don't 
have a model to play with I'll leave it at that :)

// Ben
- --
"Technically, I can go and break the fingers of a sysadmin of any
operating system and get the root password.  This doesn't make it
a localhost or remote attack."   --Art Grabowski
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQE/pU8jKFNEnl68h4URAizCAKCYHLasX0a5hlMCKEFdnMQ3sgg79gCg1lIb
1q6++ExWuVau5fWey4i2EdM=
=6Wcx
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This really doesn't belong in commit, so I am forwarding to 
opensoekris-users instead.

I've gotten OpenSoekris 3.4 current to boot on a Net4501, Net4521, and 
Net4801...it is possible.

The problem is that the Soekris is particularly picky about CF chips, 
and if you do not have the CF chip formatted properly, you'll not be 
able to boot it.  Do you have a make and model number for the chip, one 
of us might have seen it before and might be able to to help you out?  I 
know for a fact that SanDisk 32, SanDisk 64, and Kingston 32 chips work, 
as well as TDM128 chips, and I can give you the settings if you have any 
of these chips.  I have not been able to get Kingston 128 or SanDisk 128 
  (SDCFB128) chips to work, though the script does handle SanDisk 128 
(SDCFA128) chips.

When you boot the Soekris with the latest firmware, you should see a 
line which describes the heads, clusters, and sectors.  You can use that 
to fix the script to format the chip correctly.  I've had moderate 
success using that method (which is descibed at 
http://www.nmedia.net/~chris/soekris/install.html.)

mi...@nt... wrote:
> I tried running the latest OpenSoekris script on a new OpenBSD 3.4-release
> installation, everything looked like it went normally
> 
> however, when I flash the CF with the image, and try to boot my net4501, it
> failed to boot "Bad Magic"
> 
> I also experienced this problem several other times trying to use
> OpenSoekris on 3.4 snapshot installations.  However if I do everything
> exactly the same on an openbsd 3.3 install, it works perfectly.
> 
> anyone got an openbsd 3.4 net4501 using OpenSoekris ?  thanks
> 
> 
> Michael
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/pTsJcpocxAsLedoRApRBAKCFRm4iyo2GceNdLpv9FF6a5wL/cgCfe5hH
WIADpvktw16/WYG8Z1+JJ/g=
=xBrl
-----END PGP SIGNATURE-----

looks useful.

___________________________
jose nazario, ph....@mo...
=09=09=09=09=09http://monkey.org/~jose/

---------- Forwarded message ----------
Date: Thu, 30 Oct 2003 02:31:17 +0100
From: Mikael Olsson <mik...@cl...>
To: "log...@li..." <log...@li...>
Subject: [logs] minirsyslogd v1.02 available


Paul Robertson wrote:
> I don't know if syslog-ng is the paragon of syslog performance, but
> I'd doubt it.  I don't know if someone on this list has put their
> really fast UDP over the network syslog daemon up publicly yet, but
> if they have (*cough*) it'll probably run circles around syslog-ng.

Okay, okay, I recognize a sharp stick when I see it, mkay? :)

In summary, I run a fairly beefy log server, tried and ended up
throwing syslogd away, tried and threw syslog-ng[1] away after many
hours of performance tweaking, and finally ended up rolling my own
that suited my purposes.

Minirsyslogd is minimalistic, remote-only, and suitable for central
log receivers that receive heaploads of syslog data from hundreds
of hosts (in my case: firewalls, set in full audit mode).
It should work under "any" unix dialect.  It is public domain.


Basically, its only major "feature" is splitting the output based
on IP address (directories) and date/hour (file names).

Minor features include RFC3339 time stamps, zero mangling of
the received events (yes, the facility/severity tag is left in
the events), and some other bits and pieces.  Read the man page;
it's full of useful information and explanations.


Homepage (as it is):
http://www.clueby4.org/minirsyslogd/

Download:
http://www.clueby4.org/minirsyslogd/minirsyslogd-1.02.tar.gz  (25 KB)


Enjoy,
/Mikael

--=20
Mikael Olsson, Clavister AB
Storgatan 12, Box 393, SE-891 28 =D6RNSK=D6LDSVIK, Sweden
Phone: +46 (0)660 29 92 00   Mobile: +46 (0)70 26 222 05
Fax: +46 (0)660 122 50       WWW: http://www.clavister.com

[1] Note to Balazs: I'm not out to slam syslog-ng. I happily use it
    for local events on many boxes. I just report facts the way I see
    them and think that I've written something that is better for my
    specific scenario. If you think I'm wrong, I'm definitely game
    for a more "official" speed comparison.
_______________________________________________
LogAnalysis mailing list
Log...@li...
http://lists.shmoo.com/mailman/listinfo/loganalysis

Hi all,

I have a net4521 and I'm working on a project very similar to the "Put a 
Sump Pump on the Web" Linux Journal article project:
<http://www.linuxjournal.com/article.php?sid=6827>

I need to write to, and read from, the JP3 (GPIO) header pins as is done 
in the article.  However, I am only able to find a user manual for the 
net4511, not the net4521.

Someon, please, point me to a matrix/mapping of net4521 JP3 pin numbers 
to Elan SC520 pins and Functions.  This would be similar to what's in 
the net4511 user manual, section 4.6.

Perhaps the table/matrix I'm looking for is identical to the net4511, 
but I don't want to break my net4521 because of a bad assumption.

Many thanks in advance!

Eric.

On Oct 7, 2003, at 1:00 PM, civ wrote:
> Hi all!
>
> Had fun tracking this one down..
> OpenBSD 3.3 -STABLE
> OpenSoekris-1.0.11
>
> Problem:
> ftp-proxy would not start once copied to the Soekris, no error 
> messages were displayed
>
> Solution:
> start syslogd with -p /dev/log
> ifconfig lo0 inet 127.0.0.1 netmask 0xff000000
>
> Here's why:
> (on the Soekris)
> 'ktrace /usr/libexec/ftp-proxy' and 'kdump ktrace.out' told me more 
> than once that /dev/log did not exist. It was right. googled to find 
> what creates /dev/log, found that syslogd does. looked in /etc/rc and 
> saw that syslogd was started with -p /tmp/log. started 'syslogd -p 
> /dev/log' and /dev/log existed.. started /usr/libexec/ftp-proxy and I 
> see error messages now (bind: Can't assign requested address).. 
> progress, yeay. so I start ftp-proxy as it is meant to be started from 
> inetd.. inetd.conf has '127.0.0.1:8021 stream tcp       nowait  root   
>  /usr/libexec/ftp-proxy ftp-proxy'. still get the bind error above.. 
> check if lo0 is up, it is not, so 'ifconfig lo0 inet 127.0.0.1 netmask 
> 0xff000000' brings it up and inetd starts without complaints.
>
> one further thing, once the pf rules were set, the proxy did not work 
> as advertised. I am doing NAT on the outside interface, so a quick 
> look at man ftp-proxy tells me to start it with the -n option. so the 
> inetd.conf line becomes:'127.0.0.1:8021 stream tcp       nowait  root  
>   /usr/libexec/ftp-proxy ftp-proxy -n' and all is well.
>
> enjoy,
> --Civ
> www.8thdaytech.com

In the next release (don't have a definite date yet, but "soon") we 
will have a ftp-proxy that does not require inetd. If you want to play 
with it, you can grab it from CVS.

// Ben
--
"Technically, I can go and break the fingers of a sysadmin of any
operating system and get the root password.  This doesn't make it
a localhost or remote attack."   --Art Grabowski

Hey!

Been trying to prove / disprove the kernel use of the vpn1211 for the last 
few hours on a Soekris net4511 box. Found the openssl test below in some 
archives. If anyone can suggest a better test, please offer it.

OpenBSD 3.3 -STABLE
OpenSoekris-1.0.11
OpenSSL 0.9.7-beta3 30 Jul 2002
Soekris net4511
Soekris vpn1211

Here's what I've found:
-I needed to copy the openssl executable, libssl, and libcrypto(maybe) to 
the Soekris host to test.
-/dev/crypto is necessary! The stock rc script did not create the 
/dev/crypto device, so you need to make it yourself and mod rc to create it 
(since /dev is mfs and created each boot).

without /dev/crypto
# openssl engine  -c -t
(dynamic) Dynamic engine loading support
      [ unavailable ]
# openssl speed -elapsed -evp des|des3
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
des-cbc            336.04k      357.32k      362.66k      363.26k      360.36k
des-ede3-cbc       140.42k      144.27k      146.71k      144.85k      143.42k


after /dev/crypto!
# cd /dev
# MAKEDEV crypto
# openssl engine -c -t
(cryptodev) OpenBSD cryptodev engine
  [RSA, DSA, DH, DES-CBC, DES-EDE3-CBC]
      [ available ]
(dynamic) Dynamic engine loading support
      [ unavailable ]
# openssl speed -elapsed -engine cryptodev -evp des|des3
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
des-cbc             29.31k      115.88k      438.99k     1443.55k     4022.96k
des-ede3-cbc        29.33k      115.99k      440.02k     1430.70k     4014.17k


If anyone has suggestions on how to test isakmpd/IPSec's use of the hifn 
card, please offer them as well.

Enjoy,
--Civ
www.8thdaytech.com

Hi all!

Had fun tracking this one down..
OpenBSD 3.3 -STABLE
OpenSoekris-1.0.11

Problem:
ftp-proxy would not start once copied to the Soekris, no error messages 
were displayed

Solution:
start syslogd with -p /dev/log
ifconfig lo0 inet 127.0.0.1 netmask 0xff000000

Here's why:
(on the Soekris)
'ktrace /usr/libexec/ftp-proxy' and 'kdump ktrace.out' told me more than 
once that /dev/log did not exist. It was right. googled to find what 
creates /dev/log, found that syslogd does. looked in /etc/rc and saw that 
syslogd was started with -p /tmp/log. started 'syslogd -p /dev/log' and 
/dev/log existed.. started /usr/libexec/ftp-proxy and I see error messages 
now (bind: Can't assign requested address).. progress, yeay. so I start 
ftp-proxy as it is meant to be started from inetd.. inetd.conf has 
'127.0.0.1:8021 stream tcp       nowait  root    /usr/libexec/ftp-proxy 
ftp-proxy'. still get the bind error above.. check if lo0 is up, it is not, 
so 'ifconfig lo0 inet 127.0.0.1 netmask 0xff000000' brings it up and inetd 
starts without complaints.

one further thing, once the pf rules were set, the proxy did not work as 
advertised. I am doing NAT on the outside interface, so a quick look at man 
ftp-proxy tells me to start it with the -n option. so the inetd.conf line 
becomes:'127.0.0.1:8021 stream 
tcp       nowait  root    /usr/libexec/ftp-proxy ftp-proxy -n' and all is 
well.

enjoy,
--Civ
www.8thdaytech.com

On Wed, 24 Sep 2003, Michael wrote:

> Great, I added bpf2 and it worked, then I found I needed a bpf3, now a
> bpf4, is there a limit to how many I can make of these, and is it a
> problem I keep needing to add more ?  I am very appreciative of all the
> help from this mailing list because I've been able to add a few binaries
> quite easily and its made my life using my soekris so much easier

default kernel supports 8, as do the NET45x1 kernel configs.

___________________________
jose nazario, ph.d.			jo...@mo...
					http://monkey.org/~jose/

-
>/dev/bpf2 doesn't exist, create it.. (Hint: its probably something like
/sbin/MAKEDEV bpf2)
> .. You may also want to edit /etc/rc and add that in the appropriate
location.


Great, I added bpf2 and it worked, then I found I needed a bpf3, now a =
bpf4,
is there a limit to how many I can make of these, and is it a problem I =
keep
needing to add more ?  I am very appreciative of all the help from this
mailing list because I've been able to add a few binaries quite easily =
and
its made my life using my soekris so much easier

>There currently is no framework for adding extra 'modules' to a system
built using OpenSoekris. This is something that is on my=20
>private todo list, but a lack of time has made it difficult.. The =
easiest
way to do it right now is to just copy the binaries over=20
>to the system, along with the required libraries..

Okay, I can do this, but I'm coming from the windows world, where you =
cant
just copy the binary .exe file over and expect a program to work, so I'm
looking for those of you more expierenced to cofirm to me that all I =
need to
do is dump the 1 binary file into the /bin or whatever directory for =
nano,
and for iftop, need the iftop binary and the libraries it needs too


>Can't just copy a updated sshd to the system?

Can I just copy the newly updated single sshd file over or does this =
also
need libraries etc?

I think opensoekris is great, I have it working now on my net4501, but =
there
are a few things I would like to add, namely
Nano, and iftop.  How would I go about doing this?  Iftop needs =
libcurses
and libpcap btw, could I make a static linked binary or something on the
host system and dump the binaries onto my existing opensoekris =
installation
?

 Also I need to do the same to update the openssh due to the new =
exploit/bug

Dear All,

What do you think to add  a small read-write partition for storing the
configuration and the various keys  instead of the whole 'a' partition
? The write  access will be limited to his  minimum as OpenBSD doesn't
have a JFFS2 like filesystem. 

The next  step could  be a nvram  in the  Soekris but this  is another
story... 

thanks a lot,

adulau
-- 
-- 	  	     Alexandre Dulaunoy (adulau) -- http://www.foo.be/
-- 	   http://pgp.ael.be:11371/pks/lookup?op=get&search=0x44E6CBCD
-- 	   "Knowledge can create problems, it is not through ignorance
-- 				  that we can solve them" Isaac Asimov

"Michael C. Cambria" wrote:
> 
> Hi,
> 
> I'm using a fresh CD install of 3.2-Release to try OpenSoekris 1.0.9.
> 
> Regardless of having the script build an image, which I then dd to the
> SanDisk 64MB CF, or if the script builds the flash directly, I end up
> with "Bad magic":
> 
>  1 Seconds to automatic boot.   Press Ctrl-P for entering Monitor.
> SRLLLLBCGreading boot....
> Bad magic

FIXED!  Things now work.  I had a problem with opensoekris.sh that I'm
curious if anyone else had.  Specifics inline...

> To use the script on 3.2-release, I had to update flashdist.txt and
> LIBFILES in the opensoekris.sh to use different shared libs.  I also had
> to modify the CF from sd0 to wd1.  I have an IDE->CF adapter from
> pcengines, which plugs in where the CDROM usually is.
> 
> I also made sure that usr/mdec had mbr in it built just prior to running
> the script (if this even matters for 3.2 release).  I built from
> /usr/src/mdec.  From searching the archives, I thought this was the
> solution.  (Perhaps it is on -current?)

Note:  Just a correction to the above:   I built from
/usr/src/sys/arch/i386/stand/mbr.

> Other details, followed by a log of running the script follow.  Any help
> appriciated.
> 
> ls -al /usr/OpenSoekris-1.0.9/builds/soekris5/usr/mdec^M
> total 116^M
> drwxr-xr-x  2 root  wheel    512 Jan  4 05:06 .^M
> drwxr-xr-x  8 root  wheel    512 Jan  4 05:51 ..^M
> -r-xr-xr-x  1 root  bin      671 Jan  1 08:53 biosboot^M
> -r-xr-xr-x  1 root  bin    53248 Jan  1 08:53 boot^M
> -r-xr-xr-x  1 root  bin    61440 Jan  1 08:53 installboot^M
> -r-xr-xr-x  1 root  bin      512 Jan  4 05:06 mbr^M
> 
> When running the script, I see an error regarding the MBR:
> 
> Updating MBR and partition table...^M
> mbr temlate is /usr/OpenSoekris-1.0.9/builds/soekris5/bsd/usr/mdec/mbr^M
> fdisk: Can not open MBR file: Not a directory^M
> fdisk: using builtin MBR^M
> Note, you may ignore "sysctl(machdep.bios.diskinfo)" errors if present.

This line in the script generated the above error:

fdisk -c $cylinders -h $trackscylinder -s $sectorstrack -f
$4/usr/mdec/mbr -e $2 << __EOC >/dev/null
reinit
update
write
quit
__EOC



I did this command manually, to the CF built from the prior run of the
script, as shown here:


ipsec# fdisk -f /usr/OpenSoekris-1.0.9/builds/soekris5/usr/mdec/mbr -e
wd1
Enter 'help' for information
fdisk: 1> reinit
In memory copy is initialized to:
Offset: 0       Signature: 0xAA55
         Starting       Ending       LBA Info:
 #: id    C   H  S -    C   H  S [       start:      size   ]
------------------------------------------------------------------------
 0: 00    0   0  0 -    0   0  0 [           0:           0 ] unused
 1: 00    0   0  0 -    0   0  0 [           0:           0 ] unused
 2: 00    0   0  0 -    0   0  0 [           0:           0 ] unused
*3: A6    0   1  1 -  487   7 32 [          32:      124896 ] OpenBSD
Use 'write' to update disk.
fdisk:*1> update
Machine code updated.
fdisk:*1> write
Writing MBR at offset 0.
fdisk: 1> quit


I put the CF in the NET4521 and viola!  OpenBSD 3.2-Release in now on
running.

Other issues someone might want to take a look at will be shown inline
below:

> I assume the message below re DOS partition can be ignored?
> 
> Setting up disklabel...^M
> disklabel: warning, DOS partition table with no valid OpenBSD partition
> 
> The output of running the script is appended next.
> 
> $ cat soekris-script-wd1-5x.out
> Script started on Sat Jan  4 06:19:06 2003
> ipsec# ls -al /usr/OpenSoekris-1.0.9/builds/soekris5/usr/mdec
> total 116
> drwxr-xr-x  2 root  wheel    512 Jan  4 05:06 .
> drwxr-xr-x  8 root  wheel    512 Jan  4 05:51 ..
> -r-xr-xr-x  1 root  bin      671 Jan  1 08:53 biosboot
> -r-xr-xr-x  1 root  bin    53248 Jan  1 08:53 boot
> -r-xr-xr-x  1 root  bin    61440 Jan  1 08:53 installboot
> -r-xr-xr-x  1 root  bin      512 Jan  4 05:06 mbr
> ipsec# pwd
> /usr/OpenSoekris-1.0.9
> ipsec# ./opensoekris.sh soekris5
> soekris5 already exists. Do you want to use it? [Y/n]: y
> Do you have a pf.conf you want to use? [Y/n]: n
> Do you want to edit the pf.conf? [Y/n]: n
> Do you have an authpf.conf you want to use? [Y/n]: n
> Do you want to edit the authpf.conf? [Y/n]: n
> Do you have an authpf.rules you want to use? [Y/n]: n
> Do you want to edit the authpf.rules? [Y/n]: n
> Keys already exist, do you want to keep them? [Y/n]: y
> Do you have a rc script that you want to use? [Y/n]: n
> 
> What devive are we building for? (NET4501|NET4511|NET4521) NET4521
> Enter Hostname: soekris5
> 
> Enter IP address for sis0. (If you get your IP from a DHCPserver enter
> 'DHCP'. If this interface is acting with otherinterfaces as a
> transparent bridge enter 'BRIDGE'.) :dhcp
> 
> Enter IP address for sis1.(Enter BRIDGE if this interfaceis the other
> participant in a transparent bridge) :172.16.4.1
> Enter netmask. :255.255.255.0
> 
> Are we going to act as an Access point? (Y/n):y
> Enter IP Address for wi0: 172.16.2.1
> Enter netmask for wi0: 255.255.255.0
> Enter SSID for Access Point: Soekris-SSID
> Are we using WEP? [Y/n]: y
> Enter WEP key: Cambria123456789
> 
> You Set Your WEP Key to: Cambria123456789
> ./opensoekris.sh[302]: [: 1: unexpected operator/operand

What is this error?  

I don't have my PCMCIA WiFi cards yet, so I don't know if this "broke"
anything or not.

> Do we want to use rdate? (Y/n): n
> Are going to run DHCPD? (Y/n): y
> On What interface(s)? : sis1 wi0
> Are we going to run syslog? (Y/n): y
> Would you like the timezone to be configured for you? (Defaults to UTC)
> [Y/N]: y
> Do you want to save these configs/keys for posterity? [Y/n]: y
> Saving to /usr/OpenSoekris-1.0.9/conf/soekris5
> Checking for existing kernel
> Installing PFTOP
> ./opensoekris.sh[385]: cd: /usr/ports/sysutils/pftop - No such file or
> directory

Is this something to worry about?

> pftop built and installed in the
> /usr/OpenSoekris-1.0.9/builds/soekris5...
> Installing NSH
> What size CF are we using? (in megs): 64
> Do you want to write this to an image or CF? [I/C]:C
> Creating the System on the CFflashdist.sh 20021125 ch...@nm...
> modded by in...@on...
> Using disk device: wd1
> Using distfile: flashsmall.txt
> Copying kernel from: /usr/OpenSoekris-1.0.9/builds/soekris5/bsd
> 
> Please pay attention to any error messages that you may
> receive from the commands this script it using. If you
> end up having problems, they could explain why.
> 
> WARNING: This will erase ALL DATA on the wd1 disk device!
> Press enter key to continue or Control-C to abort...
> 
> Setting up disklabel...
> disklabel: warning, DOS partition table with no valid OpenBSD partition
> 
> The install script is using the following parameters:
> Total size of media: 124928 sectors (63963136 bytes)
> Bytes/Sector: 512
> Sectors/Track: 32
> Sectors/Cylinder: 2048
> Tracks/Cylinder (heads): 64
> Cylinders: 61
> 
> Press enter key to continue or Control-C to abort...
> 
> Updating MBR and partition table...
> mbr temlate is /usr/OpenSoekris-1.0.9/builds/soekris5/bsd/usr/mdec/mbr
> fdisk: Can not open MBR file: Not a directory
> fdisk: using builtin MBR

Already addressed above.

> Note, you may ignore "sysctl(machdep.bios.diskinfo)" errors if present.
> 
> Installing disklabel...
> # using MBR partition 3: type A6 off 32 (0x20) size 124896 (0x1e7e0)
> 
> Creating new filesystem...
> Warning: 32 sector(s) in last cylinder unallocated
> /dev/rwd1a:     122848 sectors in 60 cylinders of 64 tracks, 32 sectors
>         60.0MB in 4 cyl groups (16 c/g, 16.00MB/g, 3840 i/g)
> 
> Copying OpenBSD distribution to media...tar: Unable to access
> ./sbin/pftop <No such file or directory>
> tar: Unable to access ./sbin/pftop <No such file or directory>
> tar: WARNING! These file names were not selected:
> ./sbin/pftop
> ./sbin/pftop
> done
> Copying bsd kernel, boot blocks, /etc/resolv.conf...
> Installing boot blocks...
> installboot: disklabel type unknown
> Running MAKEDEV...done
> Setting up ttys...
> Setting up directories and links...
> Changing any instance of /bin/csh in /tmp/_bhhv17891/etc/master.passwd
> to /bin/ksh
> 
> Please assign a root password...
> Password:
> Verify:
> 
> Add user for authpf
> Username :cambria
> Full Name :Michael C. Cambria
> Please assign a password for cambria...
> Password:
> Verify:
> 

FYI - This username doesn't seem to exist on my soekris.

> Unmounting filesystem...done!
> ipsec#
> ipsec#
> ipsec# exit
> 
> Script done on Sat Jan  4 06:22:24 2003
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Opensoekris-users mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/opensoekris-users

Hi,

I'm using a fresh CD install of 3.2-Release to try OpenSoekris 1.0.9.

Regardless of having the script build an image, which I then dd to the
SanDisk 64MB CF, or if the script builds the flash directly, I end up
with "Bad magic":  

 1 Seconds to automatic boot.   Press Ctrl-P for entering Monitor.
SRLLLLBCGreading boot....
Bad magic

To use the script on 3.2-release, I had to update flashdist.txt and
LIBFILES in the opensoekris.sh to use different shared libs.  I also had
to modify the CF from sd0 to wd1.  I have an IDE->CF adapter from
pcengines, which plugs in where the CDROM usually is.

I also made sure that usr/mdec had mbr in it built just prior to running
the script (if this even matters for 3.2 release).  I built from
/usr/src/mdec.  From searching the archives, I thought this was the
solution.  (Perhaps it is on -current?)

Other details, followed by a log of running the script follow.  Any help
appriciated.


ls -al /usr/OpenSoekris-1.0.9/builds/soekris5/usr/mdec^M
total 116^M
drwxr-xr-x  2 root  wheel    512 Jan  4 05:06 .^M
drwxr-xr-x  8 root  wheel    512 Jan  4 05:51 ..^M
-r-xr-xr-x  1 root  bin      671 Jan  1 08:53 biosboot^M
-r-xr-xr-x  1 root  bin    53248 Jan  1 08:53 boot^M
-r-xr-xr-x  1 root  bin    61440 Jan  1 08:53 installboot^M
-r-xr-xr-x  1 root  bin      512 Jan  4 05:06 mbr^M


When running the script, I see an error regarding the MBR:

Updating MBR and partition table...^M
mbr temlate is /usr/OpenSoekris-1.0.9/builds/soekris5/bsd/usr/mdec/mbr^M
fdisk: Can not open MBR file: Not a directory^M
fdisk: using builtin MBR^M
Note, you may ignore "sysctl(machdep.bios.diskinfo)" errors if present.


I assume the message below re DOS partition can be ignored?

Setting up disklabel...^M
disklabel: warning, DOS partition table with no valid OpenBSD partition

The output of running the script is appended next.

$ cat soekris-script-wd1-5x.out
Script started on Sat Jan  4 06:19:06 2003
ipsec# ls -al /usr/OpenSoekris-1.0.9/builds/soekris5/usr/mdec
total 116
drwxr-xr-x  2 root  wheel    512 Jan  4 05:06 .
drwxr-xr-x  8 root  wheel    512 Jan  4 05:51 ..
-r-xr-xr-x  1 root  bin      671 Jan  1 08:53 biosboot
-r-xr-xr-x  1 root  bin    53248 Jan  1 08:53 boot
-r-xr-xr-x  1 root  bin    61440 Jan  1 08:53 installboot
-r-xr-xr-x  1 root  bin      512 Jan  4 05:06 mbr
ipsec# pwd
/usr/OpenSoekris-1.0.9
ipsec# ./opensoekris.sh soekris5
soekris5 already exists. Do you want to use it? [Y/n]: y
Do you have a pf.conf you want to use? [Y/n]: n
Do you want to edit the pf.conf? [Y/n]: n
Do you have an authpf.conf you want to use? [Y/n]: n
Do you want to edit the authpf.conf? [Y/n]: n
Do you have an authpf.rules you want to use? [Y/n]: n
Do you want to edit the authpf.rules? [Y/n]: n
Keys already exist, do you want to keep them? [Y/n]: y
Do you have a rc script that you want to use? [Y/n]: n

What devive are we building for? (NET4501|NET4511|NET4521) NET4521
Enter Hostname: soekris5

Enter IP address for sis0. (If you get your IP from a DHCPserver enter
'DHCP'. If this interface is acting with otherinterfaces as a
transparent bridge enter 'BRIDGE'.) :dhcp

Enter IP address for sis1.(Enter BRIDGE if this interfaceis the other
participant in a transparent bridge) :172.16.4.1
Enter netmask. :255.255.255.0

Are we going to act as an Access point? (Y/n):y
Enter IP Address for wi0: 172.16.2.1
Enter netmask for wi0: 255.255.255.0
Enter SSID for Access Point: Soekris-SSID
Are we using WEP? [Y/n]: y
Enter WEP key: Cambria123456789

You Set Your WEP Key to: Cambria123456789
./opensoekris.sh[302]: [: 1: unexpected operator/operand
Do we want to use rdate? (Y/n): n
Are going to run DHCPD? (Y/n): y
On What interface(s)? : sis1 wi0
Are we going to run syslog? (Y/n): y
Would you like the timezone to be configured for you? (Defaults to UTC)
[Y/N]: y
Do you want to save these configs/keys for posterity? [Y/n]: y
Saving to /usr/OpenSoekris-1.0.9/conf/soekris5
Checking for existing kernel
Installing PFTOP
./opensoekris.sh[385]: cd: /usr/ports/sysutils/pftop - No such file or
directory
pftop built and installed in the
/usr/OpenSoekris-1.0.9/builds/soekris5...
Installing NSH
What size CF are we using? (in megs): 64
Do you want to write this to an image or CF? [I/C]:C
Creating the System on the CFflashdist.sh 20021125 ch...@nm...
modded by in...@on...
Using disk device: wd1
Using distfile: flashsmall.txt
Copying kernel from: /usr/OpenSoekris-1.0.9/builds/soekris5/bsd

Please pay attention to any error messages that you may
receive from the commands this script it using. If you
end up having problems, they could explain why.

WARNING: This will erase ALL DATA on the wd1 disk device!
Press enter key to continue or Control-C to abort...

Setting up disklabel...
disklabel: warning, DOS partition table with no valid OpenBSD partition

The install script is using the following parameters:
Total size of media: 124928 sectors (63963136 bytes)
Bytes/Sector: 512
Sectors/Track: 32
Sectors/Cylinder: 2048
Tracks/Cylinder (heads): 64
Cylinders: 61

Press enter key to continue or Control-C to abort...

Updating MBR and partition table...
mbr temlate is /usr/OpenSoekris-1.0.9/builds/soekris5/bsd/usr/mdec/mbr
fdisk: Can not open MBR file: Not a directory
fdisk: using builtin MBR
Note, you may ignore "sysctl(machdep.bios.diskinfo)" errors if present.

Installing disklabel...
# using MBR partition 3: type A6 off 32 (0x20) size 124896 (0x1e7e0)

Creating new filesystem...
Warning: 32 sector(s) in last cylinder unallocated
/dev/rwd1a:     122848 sectors in 60 cylinders of 64 tracks, 32 sectors
        60.0MB in 4 cyl groups (16 c/g, 16.00MB/g, 3840 i/g)

Copying OpenBSD distribution to media...tar: Unable to access
./sbin/pftop <No such file or directory>
tar: Unable to access ./sbin/pftop <No such file or directory>
tar: WARNING! These file names were not selected:
./sbin/pftop
./sbin/pftop
done
Copying bsd kernel, boot blocks, /etc/resolv.conf...
Installing boot blocks...
installboot: disklabel type unknown
Running MAKEDEV...done
Setting up ttys...
Setting up directories and links...
Changing any instance of /bin/csh in /tmp/_bhhv17891/etc/master.passwd
to /bin/ksh

Please assign a root password...
Password:
Verify:

Add user for authpf
Username :cambria
Full Name :Michael C. Cambria
Please assign a password for cambria...
Password:
Verify:

Unmounting filesystem...done!
ipsec#
ipsec#
ipsec# exit

Script done on Sat Jan  4 06:22:24 2003

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello everybody!

Well, today I started banging away on the OpenSoekris script to add a
bit more functionality to it. I've added a for loop to add ports
listed in a file to the distribution, and compiling them with 486
optimizations. I want to change all the hardcoded file copy
operations into a set of questions about distributions, such as, "Do
you want to include DHCPd?" I plan to keep the distributions in text
files as lists of files to copy, and use another for-type loop to
gather all of the distributions. My main goal is to have an easy
script to create images for the soekris. After this is done to my
liking, I'm going to try and create a web-interface for pf, along
with a few other things. 

This sound good with everybody?

Thanks,

Zach Lowry || Murfreesboro, TN || www.zachlowry.net
Linux / *BSD / Irix / Solaris / Apple / Unix Network Administration

Registered Linux User #264589
13 Different NetBSD-Supported Machines

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4

iQA/AwUBPgCiLoHWQmQc5olOEQKXOgCfcJ5O6jfGUjwIHL9qQAdVVxTi0bAAoNaA
r+rE2OOOLolY5z34dP+ISkqL
=iMDM
-----END PGP SIGNATURE-----