johnny121b Posted March 11, 2016 Share Posted March 11, 2016 HOPEFULLY this only will apply to the beta and evaluation versions. If I can't start my server because my internet happens to be down... > Agreed. That would be a deal-breaker for me as well. The ability to use my server (without internet connectivity) is not negotiable. Link to comment
BRiT Posted March 11, 2016 Share Posted March 11, 2016 I'm very concerned about the total lack of security in the unRAID GUI boot mode, specifically the ability to use the launched FireFox application to browse the internet. Link to comment
JonathanM Posted March 11, 2016 Share Posted March 11, 2016 I'm very concerned about the total lack of security in the unRAID GUI boot mode, specifically the ability to use the launched FireFox application to browse the internet. Is a root password login not enforced? Link to comment
jonp Posted March 11, 2016 Share Posted March 11, 2016 I'm very concerned about the total lack of security in the unRAID GUI boot mode, specifically the ability to use the launched FireFox application to browse the internet. Um, then don't boot in that boot mode? Better yet, what do you suggest? Link to comment
jonp Posted March 11, 2016 Share Posted March 11, 2016 I'm very concerned about the total lack of security in the unRAID GUI boot mode, specifically the ability to use the launched FireFox application to browse the internet. Is a root password login not enforced? We've never had a root password for unRAID by default. If you have one set already and boot into GUI boot mode, you do have to authenticate before you can get to the desktop. Link to comment
BRiT Posted March 11, 2016 Share Posted March 11, 2016 I'm very concerned about the total lack of security in the unRAID GUI boot mode, specifically the ability to use the launched FireFox application to browse the internet. Um, then don't boot in that boot mode? Better yet, what do you suggest? This isn't for me, this is for your basic user who doesn't know about security and best practices or the pitfalls of browsing the internet as super-user on a server. I can already see the horror support threads about unknowing consumers' systems being pwned. Link to comment
jonp Posted March 11, 2016 Share Posted March 11, 2016 I'm very concerned about the total lack of security in the unRAID GUI boot mode, specifically the ability to use the launched FireFox application to browse the internet. Um, then don't boot in that boot mode? Better yet, what do you suggest? This isn't for me, this is for your basic user who doesn't know about security and best practices or the pitfalls of browsing the internet as super-user on a server. I can already see the horror support threads about unknowing consumers' systems being pwned. So is the suggestion to simply block access to the internet from the browser aside from a connection to the local web interface? Link to comment
CHBMB Posted March 11, 2016 Share Posted March 11, 2016 Jon, I'm just playing with this in a virtual machine. To further what BRiT is saying, not sure it's a great idea to be able to install plugins in FireFox either. We're aiming at a whole new crowd nowadays that is starting to be a little more divergent from the core users of old... But on the whole I think it's a great idea to have access locally and can see the benefits. I'm no great browser expert, but was wondering if Chromium may be a better choice as it's sandboxed by design isn't it? Link to comment
JonathanM Posted March 11, 2016 Share Posted March 11, 2016 So is the suggestion to simply block access to the internet from the browser aside from a connection to the local web interface? How about limit access to only the local network unless you manually go in and change a text file to remove the WAN firewall? Said text file would be automatically reset on reboot. It would be too restrictive IMHO to limit it to the localhost, I can see the need to access other hosts on the local lan. Router configurations to set static DHCP reservations, for instance. Link to comment
Frank1940 Posted March 11, 2016 Share Posted March 11, 2016 So, does dual parity allow single bit error detection and correction? Ohhh, good question. I think the question(s) has to be even further expanded. Does it provide for single bit error detection as to the true location of the fault (i.e., the disk with the failure on it) and provide for correction of said error? In case of two failures, does it allow the ability to rebuilt both failures and what is the level of error identify? What is the rebuilt procedure in the case of two devices failing? (Replace one disk at a time with two rebuilds or replace both disks with a single rebuild?) Remember that the more failures there are in an array (thinking of disks here), figuring out which ones are bad is going to be much more difficult. Link to comment
CHBMB Posted March 11, 2016 Share Posted March 11, 2016 Docker version 1.10.2 though.... Link to comment
sparklyballs Posted March 11, 2016 Share Posted March 11, 2016 So is the suggestion to simply block access to the internet from the browser aside from a connection to the local web interface? How about limit access to only the local network unless you manually go in and change a text file to remove the WAN firewall? Said text file would be automatically reset on reboot. It would be too restrictive IMHO to limit it to the localhost, I can see the need to access other hosts on the local lan. Router configurations to set static DHCP reservations, for instance. use a laptop, like everyone else, lol. Link to comment
Frank1940 Posted March 11, 2016 Share Posted March 11, 2016 So is the suggestion to simply block access to the internet from the browser aside from a connection to the local web interface? How about limit access to only the local network unless you manually go in and change a text file to remove the WAN firewall? Said text file would be automatically reset on reboot. It would be too restrictive IMHO to limit it to the localhost, I can see the need to access other hosts on the local lan. Router configurations to set static DHCP reservations, for instance. Question to both jonp and jonathanm. What happens if firefox crashes (or induced to crash), do you end back at a command line prompt? If it is at a command line, is it with root privileges and where is the other end of the connection at (local or WAN)? Remember if it is on the WAN, the computer on the other end could execute any Linux command! Link to comment
Dephcon Posted March 11, 2016 Share Posted March 11, 2016 In regards to the dual parity slot, you should be able to disable it if you don't intend to use it. I started my array with parity 2 set to unassigned and it stays visible with a big red X and an alert notification that parity 2 is in error state. Link to comment
SuperW2 Posted March 11, 2016 Share Posted March 11, 2016 Had a Windows VM setup before Upgrade but was not set to autostart. After 6.20b18 upgrade now unable to even access the VM tab to review the changes made on Post 1 of this thread. In VM Manager in Settings just have a "You must reboot for changes to take effect" regardless of whatever settings have no "VM Tab". I have set to "no", rebooted, set to "yes" rebooted again an no change. Link to comment
jonp Posted March 11, 2016 Share Posted March 11, 2016 Had a Windows VM setup before Upgrade but was not set to autostart. After 6.20b18 upgrade now unable to even access the VM tab to review the changes made on Post 1 of this thread. In VM Manager in Settings just have a "You must reboot for changes to take effect" regardless of whatever settings have no "VM Tab". I have set to "no", rebooted, set to "yes" rebooted again an no change. Do you have a cache device in your system? Link to comment
DoeBoye Posted March 11, 2016 Share Posted March 11, 2016 Fantastic! Thank you for this!!! Perfect timing to play with this over the weekend!! Any chance GUI-based raid-level support for the cache pool has been added? I'd love to be able to throw a couple of old SSDs at my server and increase the size of my cache 'drive' using raid-0... Link to comment
SuperW2 Posted March 11, 2016 Share Posted March 11, 2016 Had a Windows VM setup before Upgrade but was not set to autostart. After 6.20b18 upgrade now unable to even access the VM tab to review the changes made on Post 1 of this thread. In VM Manager in Settings just have a "You must reboot for changes to take effect" regardless of whatever settings have no "VM Tab". I have set to "no", rebooted, set to "yes" rebooted again an no change. Do you have a cache device in your system? Yes, and already had an "appdata" and "vm" share on the cache drive. The ISO folder is a subfolder on my "backup" user share (which is part of the main array, not cache drive) And part of my log file Mar 11 14:05:19 media emhttp: shcmd (658): /etc/rc.d/rc.libvirt start |& logger Mar 11 14:05:19 media root: no image mounted at /etc/libvirt Mar 11 14:05:21 media emhttp: shcmd (678): /etc/rc.d/rc.libvirt start |& logger Mar 11 14:05:21 media root: no image mounted at /etc/libvirt Link to comment
galways Posted March 11, 2016 Share Posted March 11, 2016 Having the same issue with the VM tab not showing. Am also using cache drives. Have 2 Openelec VMs. Log showing: Mar 11 16:56:01 Tower emhttp: shcmd (1304): /etc/rc.d/rc.libvirt start |& logger Mar 11 16:56:01 Tower root: no image mounted at /etc/libvirt Mar 11 16:57:01 Tower emhttp: shcmd (1322): /etc/rc.d/rc.libvirt start |& logger Link to comment
JorgeB Posted March 11, 2016 Share Posted March 11, 2016 Doing some tests and every time I do a new config, Unraid crashes, I then reboot and array auto starts and I can stop and start without issue, but when doing another new config same thing happens: Mar 11 21:48:02 Testv6 kernel: md1: running, size: 31266616 blocks Mar 11 21:48:02 Testv6 kernel: md2: running, size: 31266616 blocks Mar 11 21:48:02 Testv6 kernel: md3: running, size: 31266616 blocks Mar 11 21:48:02 Testv6 kernel: md4: running, size: 31266616 blocks Mar 11 21:48:02 Testv6 emhttp: shcmd (717): udevadm settle Mar 11 21:48:02 Testv6 emhttp: Mounting disks... Mar 11 21:48:02 Testv6 emhttp: shcmd (718): /sbin/btrfs device scan |& logger Mar 11 21:48:02 Testv6 kernel: BUG: unable to handle kernel paging request at 0000000700000025 Mar 11 21:48:02 Testv6 kernel: IP: [<ffffffff8134b146>] generic_make_request_checks+0x1e/0x346 Mar 11 21:48:02 Testv6 kernel: PGD 2095a8067 PUD 0 Mar 11 21:48:02 Testv6 kernel: Oops: 0000 [#1] PREEMPT SMP Mar 11 21:48:02 Testv6 kernel: Modules linked in: md_mod x86_pkg_temp_thermal coretemp kvm_intel kvm i2c_i801 ahci libahci mvsas libsas e1000e ptp pps_core mpt3sas raid_class ipmi_si scsi_transport_sas [last unloaded: md_mod] Mar 11 21:48:02 Testv6 kernel: CPU: 1 PID: 11508 Comm: btrfs Not tainted 4.4.4-unRAID #1 Mar 11 21:48:02 Testv6 kernel: Hardware name: Supermicro X9SCL/X9SCM/X9SCL/X9SCM, BIOS 2.2 02/20/2015 Mar 11 21:48:02 Testv6 kernel: task: ffff8800c97c3700 ti: ffff8802095e0000 task.ti: ffff8802095e0000 Mar 11 21:48:02 Testv6 kernel: RIP: 0010:[<ffffffff8134b146>] [<ffffffff8134b146>] generic_make_request_checks+0x1e/0x346 Mar 11 21:48:02 Testv6 kernel: RSP: 0018:ffff8802095e3938 EFLAGS: 00010202 Mar 11 21:48:02 Testv6 kernel: RAX: 0000000000000008 RBX: ffff880200d78150 RCX: 0000000000000000 Mar 11 21:48:02 Testv6 kernel: RDX: ffff880200d78150 RSI: 0000000000000000 RDI: 000000070000001d Mar 11 21:48:02 Testv6 kernel: RBP: ffff8802095e3978 R08: 0000000003ba2e70 R09: ffff880224a1cf10 Mar 11 21:48:02 Testv6 kernel: R10: 0000000000000000 R11: ffff8800b5421af0 R12: ffff880200d78150 Mar 11 21:48:02 Testv6 kernel: R13: ffff880200d781d8 R14: 00000000ffffffff R15: ffff880224a1cf10 Mar 11 21:48:02 Testv6 kernel: FS: 00002b2064cb1d40(0000) GS:ffff88022fd00000(0000) knlGS:0000000000000000 Mar 11 21:48:02 Testv6 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Mar 11 21:48:02 Testv6 kernel: CR2: 0000000700000025 CR3: 000000020961b000 CR4: 00000000001406e0 Mar 11 21:48:02 Testv6 kernel: Stack: Mar 11 21:48:02 Testv6 kernel: 0000000000000086 ffff8802095e3998 ffffffff810edbac ffff8800c9b1d4e8 Mar 11 21:48:02 Testv6 kernel: ffff880200d78150 0000000000000000 ffff880200d781d8 00000000ffffffff Mar 11 21:48:02 Testv6 kernel: ffff8802095e39c0 ffffffff8134c73f ffffffff8106b622 ffff8802095e39a0 Mar 11 21:48:02 Testv6 kernel: Call Trace: Mar 11 21:48:02 Testv6 kernel: [<ffffffff810edbac>] ? dma_pool_alloc+0x184/0x1b1 Mar 11 21:48:02 Testv6 kernel: [<ffffffff8134c73f>] generic_make_request+0x1d/0x159 Mar 11 21:48:02 Testv6 kernel: [<ffffffff8106b622>] ? set_next_entity+0x54/0x603 Mar 11 21:48:02 Testv6 kernel: [<ffffffffa03c3354>] handle_stripe+0x10c3/0x1206 [md_mod] Mar 11 21:48:02 Testv6 kernel: [<ffffffffa03c39de>] unraid_make_request+0x453/0x4d8 [md_mod] Mar 11 21:48:02 Testv6 kernel: [<ffffffffa03beb40>] md_make_request+0x92/0xa1 [md_mod] Mar 11 21:48:02 Testv6 kernel: [<ffffffff8134c7dd>] generic_make_request+0xbb/0x159 Mar 11 21:48:02 Testv6 kernel: [<ffffffff8134c97f>] submit_bio+0x104/0x10f Mar 11 21:48:02 Testv6 kernel: [<ffffffff811373db>] mpage_bio_submit+0x25/0x2c Mar 11 21:48:02 Testv6 kernel: [<ffffffff81137a21>] mpage_readpages+0x10e/0x11f Mar 11 21:48:02 Testv6 kernel: [<ffffffff81132286>] ? I_BDEV+0xd/0xd Mar 11 21:48:02 Testv6 kernel: [<ffffffff810ee9de>] ? alloc_pages_current+0xbe/0xe8 Mar 11 21:48:02 Testv6 kernel: [<ffffffff811329f3>] blkdev_readpages+0x18/0x1a Mar 11 21:48:02 Testv6 kernel: [<ffffffff810c3224>] __do_page_cache_readahead+0x157/0x1fb Mar 11 21:48:02 Testv6 kernel: [<ffffffff810c35cd>] force_page_cache_readahead+0x9d/0xb7 Mar 11 21:48:02 Testv6 kernel: [<ffffffff810c35cd>] ? force_page_cache_readahead+0x9d/0xb7 Mar 11 21:48:02 Testv6 kernel: [<ffffffff810c3613>] page_cache_sync_readahead+0x2c/0x3a Mar 11 21:48:02 Testv6 kernel: [<ffffffff810b97a2>] generic_file_read_iter+0x184/0x50b Mar 11 21:48:02 Testv6 kernel: [<ffffffff81132b7e>] blkdev_read_iter+0x33/0x38 Mar 11 21:48:02 Testv6 kernel: [<ffffffff811094f8>] __vfs_read+0x8d/0xb1 Mar 11 21:48:02 Testv6 kernel: [<ffffffff811099f0>] vfs_read+0x98/0x123 Mar 11 21:48:02 Testv6 kernel: [<ffffffff8110a200>] SyS_read+0x49/0x84 Mar 11 21:48:02 Testv6 kernel: [<ffffffff81617fee>] entry_SYSCALL_64_fastpath+0x12/0x6d Mar 11 21:48:02 Testv6 kernel: Code: f2 c8 d6 ff 48 83 c4 28 5b 41 5c 5d c3 55 48 89 e5 41 56 41 55 41 54 49 89 fc 53 48 83 ec 20 8b 47 28 48 8b 7f 08 c1 e8 09 74 29 <48> 8b 57 08 48 8b 52 48 48 c1 fa 09 74 1b 89 c1 48 39 ca 73 0a Mar 11 21:48:02 Testv6 kernel: RIP [<ffffffff8134b146>] generic_make_request_checks+0x1e/0x346 Mar 11 21:48:02 Testv6 kernel: RSP <ffff8802095e3938> Mar 11 21:48:02 Testv6 kernel: CR2: 0000000700000025 Mar 11 21:48:02 Testv6 kernel: ---[ end trace 0261b5873e61650d ]--- Link to comment
ijuarez Posted March 11, 2016 Share Posted March 11, 2016 any screenshot of this GUI mode? Link to comment
jonp Posted March 11, 2016 Share Posted March 11, 2016 Had a Windows VM setup before Upgrade but was not set to autostart. After 6.20b18 upgrade now unable to even access the VM tab to review the changes made on Post 1 of this thread. In VM Manager in Settings just have a "You must reboot for changes to take effect" regardless of whatever settings have no "VM Tab". I have set to "no", rebooted, set to "yes" rebooted again an no change. Do you have a cache device in your system? Yes, and already had an "appdata" and "vm" share on the cache drive. The ISO folder is a subfolder on my "backup" user share (which is part of the main array, not cache drive) And part of my log file Mar 11 14:05:19 media emhttp: shcmd (658): /etc/rc.d/rc.libvirt start |& logger Mar 11 14:05:19 media root: no image mounted at /etc/libvirt Mar 11 14:05:21 media emhttp: shcmd (678): /etc/rc.d/rc.libvirt start |& logger Mar 11 14:05:21 media root: no image mounted at /etc/libvirt Ok, in the VMs tab under the Libvirt storage location, type /mnt/user/system/libvirt/libvirt.img Then enable VMs and click apply. Link to comment
SuperW2 Posted March 11, 2016 Share Posted March 11, 2016 Had a Windows VM setup before Upgrade but was not set to autostart. After 6.20b18 upgrade now unable to even access the VM tab to review the changes made on Post 1 of this thread. In VM Manager in Settings just have a "You must reboot for changes to take effect" regardless of whatever settings have no "VM Tab". I have set to "no", rebooted, set to "yes" rebooted again an no change. Do you have a cache device in your system? Yes, and already had an "appdata" and "vm" share on the cache drive. The ISO folder is a subfolder on my "backup" user share (which is part of the main array, not cache drive) And part of my log file Mar 11 14:05:19 media emhttp: shcmd (658): /etc/rc.d/rc.libvirt start |& logger Mar 11 14:05:19 media root: no image mounted at /etc/libvirt Mar 11 14:05:21 media emhttp: shcmd (678): /etc/rc.d/rc.libvirt start |& logger Mar 11 14:05:21 media root: no image mounted at /etc/libvirt Ok, in the VMs tab under the Libvirt storage location, type /mnt/user/system/libvirt/libvirt.img Then enable VMs and click apply. OK, that worked! Link to comment
Recommended Posts