Slashdot Mirror


OpenBSD 4.9 Released

An anonymous reader writes "The release of OpenBSD 4.9 has been announced. New highlights included since 4.8: enabled NTFS by default (read-only), the vmt(4) driver by default for VMWare tools, SMP kernels can now boot on machines with up to 64 cores, support for AES-NI instructions found in recent Intel processors, improvements in suspend and resume, OpenSSH 5.8, MySQL 5.1.54, LibreOffice 3.3.0.4, and bug fixes." Also in BSD news, an anonymous reader writes "DragonFly BSD 2.10 has been released! The latest release brings data deduplication (online and at garbage-collection time) to the HAMMER file system. Capping off years of work, the MP lock is no longer the main point of contention in multiprocessor systems. It also brings a new version of the pf packet filter, support for 63 CPUs and 512 GB of RAM and switches the system compiler to gcc 4.4."

30 of 137 comments (clear)

  1. Why is NTFS read only. by jack2000 · · Score: 4, Funny

    Why is NTFS always read only. It shouldn't be so hard to make a proper file system driver what the hell?

    1. Re:Why is NTFS read only. by Anonymous Coward · · Score: 2, Insightful

      If it's so easy, and you seem to care, can we expect your diff on misc@ in the next few days?

    2. Re:Why is NTFS read only. by Phibz · · Score: 3, Informative

      You do realize that NTFS is completely closed source right? All the work on it has been done through reverse engineering.

    3. Re:Why is NTFS read only. by DarkOx · · Score: 4, Informative

      Add to that a few other fun things

      1.Multiple versions of NTFS with subtle changes
      2.Its a complex file system with lots of features, some of which are not even used by windows but you still have to take care of the on disk data correctly.
      3.The security scheme does not cleanly map onto UNIX style rules even with ACL support and such.

      NTFS is by no means avant guard but its by any means simple and without documentation figuring out its internals completely and correctly is a BIG job. Now why they can't gleen allot of that from the Linux source I don't know. I know they can't use the Linux source because of the GPL being incompatible with BSD maybe there is a contamination concern.

      --
      Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    4. Re:Why is NTFS read only. by hedwards · · Score: 3, Insightful

      Contamination isn't normally an issue for kernel code, they can always cram it in its own corner of the code and not include it in binaries by default.

      Without being involved with the discussions its hard to say, but I've personally found Linux filesystem code to be less than reliable. But there's also the issue of that it would have to pass their auditing to be included in the base install, there's a reason why they have so few base exploirts.

    5. Re:Why is NTFS read only. by DaMattster · · Score: 2

      This is done so that there is no risk of corrupting the NTFS File System. If you ask me, this is a good idea. What is so bad about simply copying the data you need onto your BSD4.4 File system?

    6. Re:Why is NTFS read only. by Hognoxious · · Score: 4, Funny

      NTFS is by no means avant guard

      Just like your knowledge of French, it would seem.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    7. Re:Why is NTFS read only. by JamesP · · Score: 2, Insightful

      They can post, but TDR will never accept it. NEVER!!11 (insert maniac laughter)

      OpenBSD is knows for things like throwing away wireless drivers, for example.

      --
      how long until /. fixes commenting on Chrome?
    8. Re:Why is NTFS read only. by phantomcircuit · · Score: 3, Informative

      NTFS is only writable on linux though NTFS-3G, the write support in the kernel only works if the file size doesn't change.

    9. Re:Why is NTFS read only. by drolli · · Score: 2

      a) yes it is hard to make a proper (*) file system "driver"

      b) its not getting easier by the file-system being closed source

      (*) proper here means: will under no circumstances behave in a way that you loose data trough silent corruption, as opposed to: will not normally loose data obviously after using if for a few hours.

    10. Re:Why is NTFS read only. by mlts · · Score: 5, Informative

      Those are important items, especially #1. There are a lot more which make life hell for someone trying to get NTFS to work fully as a supported filesystem for a UNIX based OS. A few more:

      4: Alternate data streams. It is common for malware to add an ADS onto a file, a directory, a junction point, or even the C: drive object itself. Without a dedicated utility that snorts out these, they are essentially invisible.

      5: Like #1 above, NTFS changes in undocumented [1] ways. For example, EFS changed to add different encryption algorithms between Windows XP and Windows XP Service Pack 3. So, not knowing that may bring someone a world of hurt.

      6: Similar to #3, NTFS's ACLs are hard to reimplement in the UNIX world. U/G/O permissions can be mapped (Cygwin does this).

      7: For a filesystem to be usable as a production one, it needs a filesystem checking utility that can go through the whole filesystem and check/repair integrity on every part of it, be it mostly unimplemented/unused items (transactional-NTFS), features off the filesystem (NTFS compressed files, EFS), and many other items.. Yes, there are ways to run Windows's chkdsk.exe utility, but that is a hack at best.

      One of the biggest problems with operating systems today is that there are no compatible filesystems beyond FAT and FAT32. Perhaps UFS. Either one filesystem has too much patent encumbrance to be used, or its license.

      I wonder how easy life would be if we had a standard filesystem that could replace the LVM (similar to ZFS), offer modern features (deduplication, encryption, 64-bit checksumming [2], encryption, compression (various levels), snapshotting [3]. On an LVM level, it would be nice to have mountable disk images similar to OS X's sparse bundles. If something changes on the encrypted drive, only a few bands change, as opposed to having to back up the whole file.

      Life would be easier if every OS out there had a common filesystem with modern features. A good example about how useful this would be would be antivirus scanning. Unpresent a LUN from a Windows server, scan it on a Solaris box for malware, then re-present it, for example.

      [1]: Undocumented unless you are elite enough to have the MS source code handed to you, all work on the filesystem is all reverse engineering.

      [2]: Backup programs would have it easy and not rely on dates or archive bits... just look for files where the checksum has changed and back those up just like the -c option in rsync.

    11. Re:Why is NTFS read only. by rubycodez · · Score: 2

      you do realize NTFS-3G had horrible bugs until this month, look at the fixed list of the april 11, 2011 release. I wouldn't have touched that shit with a ten foot pole until two weeks ago. And it might still have some major problems.

    12. Re:Why is NTFS read only. by fuzzyfuzzyfungus · · Score: 5, Insightful

      The specifications for NTFS are completely closed. If it's what Windows produces when told to format a volume as NTFS, it is NTFS. There are reverse-engineered attempts(NTFS-3G being the most practical, if rather slow); but they aren't entirely to the point where you'd want to trust vital data to them.

      In the specific case of OpenBSD, I suspect that the read-only support is because the OpenBSD team has very low tolerance for what they see as crap. If they can't support something the way that they want to, they can and will just toss it(see the Adaptec RAID driver case, or some wireless chipsets). They don't do binaries, they don't do NDAs, they don't do blobs. They also don't like software they consider to be of inadequate quality. Thus, since the state of full NTFS support is a bit dodgy, it is entirely in character for them to drop it.

      More broadly, NTFS read/write isn't really something that there is a strong incentive in the OSS world to polish to a high sheen. NTFS-3G is pretty much good enough for dual booters and rescue disks. NTFS doesn't have any points of superiority strong enough that building top-notch reverse-engineered support would be competitive with spending the same effort implementing a non-secret design. Also, for the sorts of purposes that pay the bills for a lot of Linux development, NTFS support is largely irrelevant. You don't dual-boot servers, and any halfway serious network setup is going to either use SMB/NFS(which makes the local filesystem irrelevant to all other hosts), or some filesystem with concurrent access support or other esoteric features that isn't NTFS.

      NTFS R/W is really just a convenience feature for sneakernet and dual-boot scenarios. Neither of those really pay for enough development to get a fully baked reverse engineering of a (quite complex) filesystem.

    13. Re:Why is NTFS read only. by grub · · Score: 2


      Why is it read only by default? To frustrate users is the only reason I can come up with.

      If a driver is known to be potentially flaky and may put data at risk, I think the user having to knowingly enable RW with that caveat is a safe and decent.

      --
      Trolling is a art,
    14. Re:Why is NTFS read only. by billstewart · · Score: 2

      Those crafty French persons not only provide cliche'd phrases that we're expected to adopt as binary blobs, they deliberately obfuscate them by using letters that aren't supported in normal open-source ASCII.

      --

      Bill Stewart
      New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
    15. Re:Why is NTFS read only. by the_B0fh · · Score: 3, Informative

      eh? The last wireless fiasco I remembered was one of the linux wireless guys stealing openbsd's reversed engineered code, and re-releasing it as their own. I guess you can say they threw away encumbered code as they reverse engineered and re-wrote it.

    16. Re:Why is NTFS read only. by Tarlus · · Score: 2

      And even still, writing with NTFS-3G isn't 100% perfect. It is progressing very nicely but it's far from being bulletproof.

      --
      /* No Comment */
    17. Re:Why is NTFS read only. by Galactic+Dominator · · Score: 2
      --
      brandelf -t FreeBSD /brain
  2. Re:missing some key features... by snowgirl · · Score: 5, Informative

    wake me when they have:

    1) start/stop scripts, so I don't have to ps|grep|kill|...crap, what were those flags for the daemon again... to manage running processes or daemons

    Well, for this one:

    New rc.d(8) for starting, stopping and reconfiguring package daemons:
    The rc.subr(8) framework allows for easy creation of rc scripts. This framework is still evolving.
    Only a handful of packages have migrated for now.
    rc.local can still be used instead of or in addition to rc.d(8).

    --
    WARNING! This girl exceeds the MAXIMUM SAFE standards established by the FDA for BRATTINESS
  3. Re:NETCRAFT just confirms it by Hognoxious · · Score: 2

    BSD.ru confirms Netcraft is dead!!!!!

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  4. Re:missing some key features... by rubycodez · · Score: 2

    as for #2, you build the patched release files on another server and deploy on production, procedure 5.4 Building a Release is in the (very nicely done) docs http://www.openbsd.org/faq/faq5.html#Release

  5. Re:missing some key features... by rubycodez · · Score: 3, Insightful

    why, they're not necessary. The flags for starting a daemon are in /etc/rc.conf and /etc/rc.conf.local, and the pid of running daemons are in /var/run or use ps ea for them. Simple and clean with no cruft is why I like OpenBSD for applicances and routers so much.

  6. Re:Major disrespect by shutdown+-p+now · · Score: 2

    Couldn't it be said that OpenBSD and DragonflyBSD are just different distributions of BSD?

    It couldn't, because they have very different kernel and base system (source code wise). They have descended from the same codebase, yes, but it was a very long time ago.

    Slack and Ubuntu use the same Linux kernel, albeit with a certain combination of patches in case of Ubuntu.

  7. Re:At the risk of being modded flamebait, etc by Impeesa · · Score: 4, Funny

    Netcraft confirms it, BSD jokes are dead.

  8. Re:63 CPUs? by m.dillon · · Score: 2

    Atomic ops are limited to 64-bits for the most part (though maybe 128 bits w/fp insns we can't really depend on that). There are several subsystems in the kernel which rely on atomic ops to test and manipulate cpu masks which would have to be reformulated.

    The main issue there is one of performance. We don't want to have to use a spinlock for cases where cmpxchg solves the problem because spinlock collisions can get VERY expensive once you have more than 8 cpus in contention.

    Similarly the stolen bit for the pmap spinlock (reducing the limit from 64 to 63) is there to deal with a race where one thread needs to do a SMP invtlb style operation just as a new cpu tries to switch-in a thread using the same pmap (adding another cpu to the mask of cpus that need their TLBs to be invalidated). It's a fairly rare race but it has to be dealt with properly. Also fixable with some work.

    The 512GB memory limit only exists because we still populate the DMAP entries manually and it is currently hard coded for 512G (one DMAP pte). A good programmer could fix that issue in about 2 hours but we're not going to worry about it unless we actually get hardware to test with with > 512G of dram populated. That much dynamic ram is a bit beyond our budget, not to mention the 1000W+ (~8A) of power it would eat.

    -Matt

  9. Re:63 CPUs? by m.dillon · · Score: 3, Interesting

    The basic mobo support for large N-way configurations has gotten cheap. Power management still has a long ways to go on these beasts, though. Our monster.dragonflybsd.org box is using the quad-socket supermicro mobo with four 12-core opterons (48 cores) and 64G of ram, and I think all told cost around $8000 or so.

    The limitation for for these sorts of boxes is basically just power now. The 12-core opterons are effectively limited to 2GHz due to power issues, and these big beasts are really only high performers in environments where all the cores can be used concurrently with very little conflict.

    By comparison, a PhenomII x 6 or an Intel I7 runs 6 cores for the PhenomII and 4 x 2 cores for the I7 but automatically boosts the base ~3.2GHz clock to almost 4 GHz when some of the cores are idle. These single chip solutions also have a MUCH faster path to memory than multi-chip solutions, particularly the Intel Sandybridge cpus, and much faster bus locked instructions. So if your application is only effectively using ~4-6 cores concurrently it will tend to run at least twice as fast as it would on a high-core-count monster.

    That means that for most general server use a single-chip multi-core solution is what you want. The latest single-chip mobos for Intel and AMD support 16G-32G of ram and 5 or more SATA-III (6GHz) ports. Throw in a small SSD and you are suddenly able to push 400MBytes/sec+ in random-accessed file bandwidth out your network using just ONE of those SATA-III ports. That's in a desktop configuration! So today's modern desktop mobos is equivalent to last year's server mobos at 30-50% the power cost.

    A modern high-end configuration as above eats ~60W idle where as the absolute minimum power draw on a 48-core Supermicro box w/ 64G of ram (the ram eating most of the power) is ~250-300W. Big difference.

    So lots of cores is not necessarily going to be the best solution. In fact, probably the only really good fit for a 48+ core box is going to be for virtualization purposes.

    -Matt

  10. Re:Using 1000 watts of power for DRAM? by m.dillon · · Score: 2

    Well, you don't run your toaster 24x7. In fact, most residental homes use less than 1000W of power averaged 24x7 for the entire home.

    Running 1000W 24x7 is ~$180-$240/month in electricty depending on where you live. Commercial power isn't much cheaper (and due to improvements in density most colo facilities now also charge for power or include only a few amps in the lowest-tier of service).

    It adds up fairly quickly. The DragonFly project has 7 core production machines. Six of those in my machine room together eat around ~3.4A of power 24x7 (idle), and a lot more when they are busy. The last one is colocated and eats ~2A. There are another 2-3 essentially dedicated colocated boxes which are donated and another ~12 boxes on the third tier which donate mirroring and bandwidth. And DragonFly is a very small project.

    For small projects... and here I'm not talking just about BSD projects but also many Linux projects, running your own machines requires either a fat purse somewhere or a sponser. FreeBSD gets a lot of sponsorship to help cover continuing costs.

    For DragonFly we get some sponsership in the form of a few remote colocated boxes with reasonable bandwidth but mostly there are just two of us funding ongoing operations. I also fund getting ~4 new almost-bleeding-edge single-socket machines every year to keep us up-to-date on hardware and post the old boxes to various developers in need as they get replaced by new boxes, in a sort of pipeline. But it's taken 3 years to build that pipeline. New boxes come in and operate as test machines for ~1 year, then production machines for ~1-2 years, then get rotated out.

    This situation has gotten a little better over the years as small projects can now run their boxes on real machines at home with a reasonable amount of upstream bandwidth, then drill a VPN through to a colocated IP service to route the IPs without having to deal with ISP filters (ISP-allocated static IPs tend not to work very well because AT&T and COMCAST's stateful filters can mess up your TCP connections when you have a lot of concurrency).

    Even so it seems to me that a lot of projects don't even have that... they either rent time on a virtual machines or depend on sharing space with other larger projects. It's possible to do a lot with virtualized resources, up to a point, but rented virtualized resources tend to have very non-deterministic resources and you can wind up in trouble if you get a demand spike.

    -Matt

  11. Re:missing some key features... by rubycodez · · Score: 2

    actually, various unofficial rc.d projects by various people have been available for openbsd for at least 10 years including port of the netbsd one. Most OpenBSD users say "ick" because of the normal use of OpenBSD...

    OpenBSD primarily gets used on boxes with very focused purpose, so just a few daemons to manage and I'd rather have single file to control them than runlevels and rc.d

  12. Re:At the risk of being modded flamebait, etc by m.dillon · · Score: 5, Informative

    ZFS has a large team of people behind it and resources that I don't have. That said HAMMER wasn't really designed to try to compete against it. HAMMER was designed to solve similar problems, but it wasn't designed to replace RAID as ZFS was. But ZFS is no panacea, and anyone who uses it can tell you that. The IP is now owned by Oracle, the license isn't truly open-source. ZFS itself is an extremely heavy-weight filesystem and essentially requires its ARC cache and relatively compatible workloads to work efficiently... and a veritable ton of memory.

    HAMMER has a tiny footprint by comparison, gives you fine-grained automatic snapshots, and most importantly gives you near real-time queueless mirroring streams that makes creating backup topologies painless. Among many other features. Frankly ZFS might be the filesystem of choice if you are running dozens of disks but HAMMER is a much better fit otherwise.

    People scream the RAID mantra all the time but the vast majority of people in the open-source world don't actually need massive RAID arrays to put together a reliable service. Often it takes just one 2TB HD and one 80G SSD x a few servers and in DragonFly HAMMER + swapcache fits that bill extremely well.

    Our ultimate goal is real-time multi-master clustering. HAMMER doesn't get us quite there, primarily owing to the topology mismatch between HAMMER's B-Tree and OS filesystem cache topologies (mostly the namecache), but as the work progresses it will eventually achieve that.

    In anycase, there's a huge difference between the people who do the actual design and implementation of these filesystems and the people who merely use them. Our goals as designers and programmers are not necessarily going to match the goals of the typical end-user who wants a magical black box that does everything under the sun with maximal performance in all respects and works without having to life a finger. ZFS can't even achieve that!

    -Matt

  13. Re:What's the point of dragonfly again? by rubycodez · · Score: 2

    DragonFly is still being designed, but the stated end goals are 1. Single system image clustering 2. providing multiple isolated environments in userland, 3. providing highly available clustered filesystem with multi-mastered mirroring/backup, de-duplication, snapshots