avsm changed the topic of #mirage to: Good news everyone! Mirage 3.0 released!
_whitelogger has joined #mirage
dobson` has joined #mirage
dobson has quit [Quit: Leaving]
philtor has quit [Ping timeout: 272 seconds]
philtor has joined #mirage
mk[] has joined #mirage
mort___ has joined #mirage
argent_smith has joined #mirage
<mato> hannes: Hmm. Wondering about the memory leaks you saw. Take a look at this:
<mato> hannes: eh, ignore that
<mato> My misunderstanding.
<mato> hannes: Some data on ukvm memory usage: I've been hammering a non-TLS mirage http server with "siege -t120s -b http://10.0.0.2:8080".
<mato> hannes: On Linux RSS starts at ~9MB, grows fairly rapidly to ~270MB and stays around there.
<mato> hannes: On FreeBSD RSS starts at ~6MB and grows much slower, currently after several runs I've seen it go up to ~40M.
<mato> This may be a leak, or it may just be normal GC behaviour. Both running with OCaml 4.04.
<mato> The difference in behaviour between Linux and FreeBSD is... interesting. No idea right now what might be causing it.
mort___ has quit [Ping timeout: 240 seconds]
<mk[]> does Mirage support SCTP, DCCP, or RUDP?
<mato> not that I know of
<mk[]> I searched OPAM and found no results. is OCaml a bad choice for "low" level networking?
reynir is now known as cmV5bmly
<kensan> mk[]: There is an implementation of DHCP.
<mk[]> kensan: I'm looking for Datagram Congestion Control Protocol support
<mk[]> transport layer, but can be tunneled over UDP
<kensan> mk[]: Ok, I just wanted to mention that there are "lower"* level protocols implemented in OCaml (* for some meaning of "lower").
<mk[]> kensan: I'm new to OCaml, where should I look for SCTP or RUDP implemenations?
<kensan> mk[]: Sorry, I am new to this community as well ;)
<mk[]> kensan: what's your interest in unikernels?
<mk[]> I've found LingVM (erlangonxen.org) a couple of days ago, but the project seems dead. no updates since 2015
<mk[]> running bytecode VMs on Xen seems awesome, but C interop and kernel calls kinda kill the possibility (at least for Erlang)
<kensan> mk[]: I ported MirageOS to the Muen Separation Kernel by implementing support in Solo5.
<kensan> mk[]: So more on the platform-level, "below" OCaml.
<mk[]> kensan: I see. High assurance is hard to achieve with Intel's Management Engine
mort___ has joined #mirage
mort___ has quit [Quit: Leaving.]
mort___ has joined #mirage
<kensan> mk[]: That is true but it does not mean we shouldn't try and work on x86 ;)
<mk[]> nah, let's just wait for RISC-V to take off :)
<apache2> when the xen mirage logs say "Attempt to open(/dev/urandom)!", what's the best way to debug where it's coming from?
<mk[]> the sooner the reign of x86 and von Neuman architecture ends, the better
<kensan> mk[]: Unfortunately, Intel x86 will be around for quite a while... My bet is that in a few years the ISA spec will surpass 5k pages.
<dstolfa> kensan: It will be around for about 10-15 more years I'd say
<dstolfa> We need to move on eventually :P
<mk[]> I guess 10-15 more years of having 1960s designs isn't too bad
mort___ has quit [Quit: Leaving.]
mort___ has joined #mirage
<kensan> mato: I found a small ukvm_module_net issue a while back: https://github.com/codelabs-ch/solo5/commit/0a74a46
<kensan> mato: Not sure if that is the right fix. Alternatively one could declare the strings as constants and us strlen.
copy` has joined #mirage
gameredan has joined #mirage
mort___ has quit [Quit: Leaving.]
argent_smith has quit [Quit: Leaving.]
mort___ has joined #mirage
mort___ has quit [Quit: Leaving.]
<dudelson> I got a tls cert from let's encrypt and I'm trying to use it in the static site example from mirage-skeleton instead of the default cert. I made privkey.pem -> server.key, chain.pem -> ca-roots.crt, and cert.pem server.pem
<dudelson> the unikernel fails when I start it with "ERR [application] main: Unix.Unix_error(Unix.EACCES, "bind", "")"
<dudelson> does anyone know what I'm doing wrong?
<lobo> dudelson: just out of the blue. if it is using port 443, you'll have to start it as root or with sudo
mort___ has joined #mirage
argent_smith has joined #mirage
argent_smith has quit [Quit: Leaving.]
<dudelson> lobo: why's that? It's been working fine for me without sudo so far.
<Drup> 443 is usually reserved, you need superuser rights to bind to it
<dstolfa> Drup: In typical UNIX access control, yes. If you have a MAC policy that allows you to bind to privileged ports as a certain user or group, then you don't need to be superuser
<dstolfa> FreeBSD's portacl lets you do something like that, I'm sure that Linux has something similar
<dstolfa> dudelson: You might want to make sure that you weren't running on a machine that had a policy like that running
<dudelson> I changed the port back to 4433 and it works like I was expecting. I forgot I had previously
<dudelson> set the port to 443 to try deploying the unikernel
<dudelson> but I didn't know that that port was privileged, thanks for clarifying!
mort___ has quit [Quit: Leaving.]
<lobo> dstolfa: right. seems like it is possible on linux with capabilities. https://gist.github.com/verbosemode/6844daa4db4a7add7d3429d379f9831a#file-gistfile1-txt-L12
<dstolfa> lobo: Yeah, it's a nifty little thing
<lobo> dudelson: all ports < 1024 are priviledge ports. they need some special treatment :-)
cmV5bmly is now known as reynir
philtor has quit [Excess Flood]
philtor has joined #mirage