Hi, when I use arping in local zone like "arping -c 3 -I net0 10.9.10.5", it returns an error "arping: libnet_init(LIBNET_LINK, net0): libnet_open_link(): open(): /dev/net: Is a directory"

Does anyone known why ?

Output of the whole process is pastebin.com/MRPQXkax

mkluo_: I'll take a look in a bit

Thank you

libpcap was fixed back in 2013 (perkin.org.uk/posts/whats-new-in-pkgsrc-2013Q1.html) so just need to check there weren't any regressions there

mkluo: so this appears to be specific to arping

it has an obnoxious comment at github.com/ThomasHabets/arping/blob/arping-2.x/src/arping.c#L581-L590 and then has some special handling that clearly isn't working right

Yes I see that comment, but in smartos , net0 in under /dev/net/ ,just like linux

It is different from Solaris I think

though the handling appears to be done in libnet

anyway, will take a look and get it fixed

Thanks and looking forword

heh, probably doesn't help that our libnet11 is from 2005 ;)

jperkin: I have fixed gpsd failed issue in pkgsrc, but since Joyent use NetBSD’s pkgsrc as source, so I have submitted the fix in here NetBSD/pkgsrc #80 not sure if need re-submit for smartos’s pkgsrc ?

tozhu: no that's fine, upstream is better, I'll try to get to that one shortly

thanks for the PR, just got missed due to the freeze

thank you for your help

mkluo: ok it works against the latest libnet release, so I'm going to import that and switch arping to use it. I'd prefer not to backport to 2019Q4 as it should only be security fixes, I might go to 2020Q4 just because it's relatively recent though

OK

jperkin: By the way, when will this fix be merged into 2020Q4?

possibly later today

I'm just committing the fixes to pkgsrc trunk now

Great!

teutat3s[m]: thanks for your work keeping up with upstream boringtun

You're welcome ( :

Did a small force push, should be ready to go now

I wonder how many people use my branch. Maybe it should live somewhere else other than my github.

Or we should work toward merging with upstream

I noticed at least one blog entry where your branch is mentioned blog.shalman.org/tailscale-for-illumos

oh that's nahamu's blog :)

Getting the illumos support upstreamed would be nice - what's missing before we could do that?

Probably just some cleanup for the event ports changes and the tun stuff.

`fmadm faulty` shows a faulty DIMM in one of our Compute Nodes, is there a way to see verbose system information about the installed memory? E.g. frequency, size of each DIMM?

`prtdiag -v` is pretty cool, but lacks that info

teutat3s[m]: /usr/lib/fm/fmd/fmtopo -V

thanks!

there's probably a way to filter out just the dimms

It appears that CVE-2021-3156 applies to SmartOS, based on Qualys' description of the affected versions of sudo and a confirmation test as described in their blog: blog.qualys.com/vulnerabilities-res…ffer-overflow-in-sudo-baron-samedit

I just committed the update to pkgsrc, I'll be backporting it as soon as it hits github

Awesome news

Was there any preemptive notification from Qualys or was this morning as much a surprise for you as it was everyone else?

according to twitter they notified the oss list which should include netbsd, but I'm not on that, and nobody else beat me to the commit, so.. not really sure to be honest

Joyent's security team didn't get anything specific about it.

I found out about it via an RT from one of the FreeBSD folks I follow, who was a pissed as I was about not finding out early.

uh sweet, buffer overflow in sudo, 1.9.5p2 fixes, CVE-2021-3156

"exploitable by any local user (normal users and system users, sudoers and non-sudoers), without authentication (i.e., the attacker does not need to know the user's password)"

Sadly a lot of people thing FreeBSD, OpenBSD, NetBSD, illumos... if they ahve heard of them, are kust linux distros

I still remember talking to a docent in the kitchen that some of his latest batch pre-covid had there minds blown that these had different roots and some trace back to pre-linux.

I felt sad then

docent? lecturer?

Yes

teacher at university basically

I don't know the nglish for it

I thoight docent wsa valid

I don't think it is commonly used, but I'm not a native speaker

merriam-webster seems to list it though

Might just not be common yeah

"docent" in the US usually refers to a museum or art-gallery employee who's knowledgable about what's on display, and sometimes does tours.

Non-tenure-track Unversity teacher is either lecturer or sometimes professor if they're senior/experienced enough. And it's professor for tenure-track.

(In the US...)

So lecturer would be better then

Sample sentence: "Larry Peterson was my Networking professor in grad. school, and also my advisor."

and I've never heard of "docent" over here in England, just for completness

Webster has this though: The title of docent is used in many countries for what Americans would call an associate professor

#2: "I had a lecturer for my undergrad Pascal class at Michigan, but that was okay because he was a good teacher."

Pascal... oh boy, I used to be able to write that a bit

My HS didn't have official Advanced Placement classes for Pascal, but had I learned linked-lists and binary-trees in HS, I'd have been able to just test-out of that Pascal class.

(HS Pascal class was early 1986, college one was early 1988.)

The stuff I had in collage was all modernish stuff like vb.net, C# and java

Oh and php, lots of php :(

You're like 15yrs younger than me, no?

(I'm 51)

(Maybe more?)

they still do Pascal at some universities in Germany

danmcd Be happy you're still so young ;-)

Heh heh.

My first program was in "Focal", and I wrote it in Fall 1978 8-P

It was actually close to you if you lived in MA at that time.

Wikipedia tells me it's spelled FOCAL.

I did not live in MA at that time.

danmcd: Wait, you Joyent guys aren't hoarding the fountain of youth in the office? That always seemed like the most logical explanation of Bryan Cantrill.

Bryan is younger than me, beyond that, you'll have to ask him (and he's at Oxide Computer now).

Yeah, been keeping an eye on that.

re oxide, didn't they post a pic of a pcb with SN 001 on it recently?

Yeah

Would be nice to see more tangible things from them.

v_a_b: twitter.com/bcantrill/status/1342294298692206593/photo/1

Yes, it would.

arai Yep, that was it, thanks.