Unbound on Solaris 10 (Sparc) learning curves

Unbound
1

Hi

I am trying out unbound on a couple of our servers. I compiled it onto a RHEL 5.5 running on a Dell 2970 without difficulties.

I also have a fair number of Solaris 10 (Sparc) servers running on Netra 240s.

This compiles fine using the options of:

./configure --prefix=/opt/unbound --libexecdir=/opt/unbound/lib --sysconfdir=/var/unbound/etc --sharedstatedir=/var/unbound --localstatedir=/var/unbound --with-conf-file=/var/unbound/etc/unbound.conf --with-run-dir=/var/unbound --with-chroot-dir=/var/unbound --with-pidfile=/var/unbound/run/unbound.pid --with-username=unbound --with-ssl=/usr/local/ssl/ --without-pthreads --with-solaris-threads

  1. Can you point me to the best ./configure options for Solaris 10?

a. – as I sure would like to get the best I can out of these aging Sun servers – Thanks on that

  1. Also anything that explains the various ./configure options in general

Bruce

Is it really necessary to print this email?

MTS ALLSTREAM INC. CONFIDENTIALITY WARNING: This email message is confidential and intended only for the named recipient(s). If you are not the intended recipient, or an agent responsible for delivering it to the intended recipient, or if this message has been sent to you in error, you are hereby notified that any review, use, dissemination, distribution or copying of this message or its contents is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete the original message. If there is an agreement attached with this message, such agreement will not be binding until it is signed by all parties named therein.

2

You know that there are unbound package precompiled for RHEL-5 in the EPEL repository?

Paul

3

Hello Bruce,

Hi

I am trying out unbound on a couple of our servers. I compiled it
onto a RHEL 5.5 running on a Dell 2970 without difficulties.

I also have a fair number of Solaris 10 (Sparc) servers running on
Netra 240s.

we have precompiled packages for Solaris 10 Sparc that you can use at

http://support.menandmice.com/download/unbound/solaris/sparc/

There are different "flavors", Package Flags:
e - compiled against LibEvent in /usr/local/libevent
f - compiled in forked mode (non-threaded)
t - compiled from trunk sources (non-stable, non-release)
v - compiled against LibEv in /usr/local/libev

These packages install into "/usr/local/unbound-<version>", you need to
symlink to "/usr/local/unbound"

With this scheme, you can have multiple versions and flavors of unbound
installed and you can switch them by changing the symlink.

This compiles fine using the options of:

./configure --prefix=/opt/unbound --libexecdir=/opt/unbound/lib
--sysconfdir=/var/unbound/etc --sharedstatedir=/var/unbound
--localstatedir=/var/unbound
--with-conf-file=/var/unbound/etc/unbound.conf
--with-run-dir=/var/unbound --with-chroot-dir=/var/unbound
--with-pidfile=/var/unbound/run/unbound.pid --with-username=unbound
--with-ssl=/usr/local/ssl/ --without-pthreads --with-solaris-threads

1) Can you point me to the best ./configure options for Solaris 10?

a. – as I sure would like to get the best I can out of these
aging Sun servers – Thanks on that

There is no universal "best" option, wether threaded or forked, with our
without Libev or Libevent depends on your traffic patterns. We have seen
best results in the large provider space with the "e" (libevent,
threaded) and "ef" (libevent, forked) versions.

2) Also anything that explains the various ./configure options in
general

-prefix=/opt/unbound --libexecdir=/opt/unbound/lib
--sysconfdir=/var/unbound/etc --sharedstatedir=/var/unbound
--localstatedir=/var/unbound
--with-conf-file=/var/unbound/etc/unbound.conf
--with-run-dir=/var/unbound --with-chroot-dir=/var/unbound
--with-pidfile=/var/unbound/run/unbound.pid

This options all sets the directory and file-locations

--with-username=unbound

This sets the username to use by the unbound process when it gives up
superuser (root) rights.

--with-ssl=/usr/local/ssl/

This is where the configure will find the OpenSSL installation

--without-pthreads --with-solaris-threads

This will disable the Posix Threads and will enable the Solaris own threads.

Best regards

Carsten Strotmann
Men & Mice

4

Thanks All

Bruce

Bruce Hayward, MTS Allstream Inc., (c) 204-792-9174 (p) 204-958-1983 (e)
bruce.hayward@mtsallstream.com

[mailto:unbound-users-bounces@NLnetLabs.nl] On Behalf Of Carsten
Strotmann

5

Still learning:

I have now configured unbound with several options successfully with and
without threads (solaris et al). (gmake and gmake install ...)

This last time I tried without threads, but with libevents using:
./configure --prefix=/opt/unbound --libexecdir=/opt/unbound/lib
--sysconfdir=/var/unbound/etc --sharedstatedir=/var/unbound
--localstatedir=/var/unbound
--with-conf-file=/var/unbound/etc/unbound.conf
--with-run-dir=/var/unbound --with-chroot-dir=/var/unbound
--with-pidfile=/var/unbound/run/unbound.pid --with-username=unbound
--with-ssl=/usr/local/ssl/ --without-pthreads --without-solaris-threads
--with-libevent=/usr/local/libevent-1.4.13-stable/

This seems to work though I see:
libtool: link: warning: library
`/usr/local/libevent-1.4.13-stable//lib/libevent.la' was moved.
libtool: link: warning: library
`/usr/local/libevent-1.4.13-stable//lib/libevent.la' was moved.

Along with the gmake output.

Afterwhich I run a gmake install without incident.

I have also created a Solaris manifest (SMF), and are using that to
start/stop unbound, again successfully.

Unbound resolves correctly at this point.

Also for generating the remote keys:

root@wnpgmb024rw-ns05# unbound-control-setup
setup in directory /var/unbound
unbound_server.key exists
unbound_control.key exists
create unbound_server.pem (self signed certificate)
create unbound_control.pem (signed client certificate)
Signature ok
subject=/CN=unbound-control
Getting CA Private Key
Setup success. Certificates created. Enable in unbound.conf file to use

However when running:
root@wnpgmb024rw-ns05# unbound-checkconf
ld.so.1: unbound-checkconf: fatal: libgcc_s.so.1: open failed: No such
file or directory
Killed
root@wnpgmb024rw-ns05

I have:
root@wnpgmb024rw-ns05# find / -name libgcc_s.so.1
/usr/lib/AdobeReader/Adobe/Reader8/Reader/sparcsolaris/lib/libgcc_s.so.1
/usr/sfw/lib/sparcv9/libgcc_s.so.1
/usr/sfw/lib/libgcc_s.so.1
/usr/local/lib/libgcc_s.so.1
/usr/local/lib/sparcv9/libgcc_s.so.1
/export/home/explorer/10_Recommended/121104-06/SUNWacroread/reloc/lib/Ad
obeReader/Adobe/Reader8/Reader/sparcsolaris/lib/libgcc_s.so.1

Thoughts on the open failed? (I also get the same results using the MnM
pre-compiled version)

Thanks

Bruce

Bruce Hayward, MTS Allstream Inc., (c) 204-792-9174 (p) 204-958-1983 (e)
bruce.hayward@mtsallstream.com

Is it really necessary to print this email?

MTS ALLSTREAM INC. CONFIDENTIALITY WARNING: This email message is confidential and intended only for the named recipient(s). If you are not the intended recipient, or an agent responsible for delivering it to the intended recipient, or if this message has been sent to you in error, you are hereby notified that any review, use, dissemination, distribution or copying of this message or its contents is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete the original message. If there is an agreement attached with this message, such agreement will not be binding until it is signed by all parties named therein.

6

Note that I am aware of setting the LD_LIBRARY_PATH via say a .profile,
but was looking for a way to keep the compile separate from OS variables
- more looking to see if it can be added via a ./configure parameter.

Bruce

Bruce Hayward, MTS Allstream Inc., (c) 204-792-9174 (p) 204-958-1983 (e)
bruce.hayward@mtsallstream.com

7

See crle(1).

-Dustin

8

I think that it is a more nice way to configure the dynamic linker with the crle
command, then you don't need workarounds like setting env.variables.

in my case:

lgb@hydra:~$ uname -a
SunOS hydra 5.10 Generic_141444-09 sun4v sparc SUNW,Sun-Fire-T200
lgb@hydra:~$ crle

Configuration file [version 4]: /var/ld/ld.config
  Default Library Path (ELF): /lib:/usr/lib:/usr/sfw/lib
  Trusted Directories (ELF): /lib/secure:/usr/lib/secure (system
default)

Command line:
  crle -c /var/ld/ld.config -l /lib:/usr/lib:/usr/sfw/lib

lgb@hydra:~$

9

Hi,

Dustin Marquess píše v út 20. 07. 2010 v 13:47 -0500:

See crle(1).

no, do not touch crle(1) if you like your system.

-Dustin

>
> Note that I am aware of setting the LD_LIBRARY_PATH via say a .profile,
> but was looking for a way to keep the compile separate from OS variables
> - more looking to see if it can be added via a ./configure parameter.
>
> Bruce
>
> Bruce Hayward, MTS Allstream Inc., (c) 204-792-9174 (p) 204-958-1983 (e)
> bruce.hayward@mtsallstream.com
>
> From: Hayward, Bruce
> Sent: July 20, 2010 12:47 PM
> To: 'unbound-users@unbound.net'
> Subject: RE: [Unbound-users] Unbound on Solaris 10 (Sparc) learning
> curves
>
> Still learning:
>
> I have now configured unbound with several options successfully with and
> without threads (solaris et al). (gmake and gmake install ...)
>
> This last time I tried without threads, but with libevents using:
> ./configure --prefix=/opt/unbound --libexecdir=/opt/unbound/lib
> --sysconfdir=/var/unbound/etc --sharedstatedir=/var/unbound
> --localstatedir=/var/unbound
> --with-conf-file=/var/unbound/etc/unbound.conf
> --with-run-dir=/var/unbound --with-chroot-dir=/var/unbound
> --with-pidfile=/var/unbound/run/unbound.pid --with-username=unbound
> --with-ssl=/usr/local/ssl/ --without-pthreads --without-solaris-threads
> --with-libevent=/usr/local/libevent-1.4.13-stable/
>
> This seems to work though I see:
> libtool: link: warning: library
> `/usr/local/libevent-1.4.13-stable//lib/libevent.la' was moved.
> libtool: link: warning: library
> `/usr/local/libevent-1.4.13-stable//lib/libevent.la' was moved.
>
> Along with the gmake output.
>
> Afterwhich I run a gmake install without incident.
>
> I have also created a Solaris manifest (SMF), and are using that to
> start/stop unbound, again successfully.
>
> Unbound resolves correctly at this point.
>
> Also for generating the remote keys:
>
> root@wnpgmb024rw-ns05# unbound-control-setup
> setup in directory /var/unbound
> unbound_server.key exists
> unbound_control.key exists
> create unbound_server.pem (self signed certificate)
> create unbound_control.pem (signed client certificate)
> Signature ok
> subject=/CN=unbound-control
> Getting CA Private Key
> Setup success. Certificates created. Enable in unbound.conf file to use
>
>
> However when running:
> root@wnpgmb024rw-ns05# unbound-checkconf
> ld.so.1: unbound-checkconf: fatal: libgcc_s.so.1: open failed: No such
> file or directory
> Killed
> root@wnpgmb024rw-ns05
>
> I have:
> root@wnpgmb024rw-ns05# find / -name libgcc_s.so.1
> /usr/lib/AdobeReader/Adobe/Reader8/Reader/sparcsolaris/lib/libgcc_s.so.1
> /usr/sfw/lib/sparcv9/libgcc_s.so.1
> /usr/sfw/lib/libgcc_s.so.1
> /usr/local/lib/libgcc_s.so.1
> /usr/local/lib/sparcv9/libgcc_s.so.1
> /export/home/explorer/10_Recommended/121104-06/SUNWacroread/reloc/lib/Ad
> obeReader/Adobe/Reader8/Reader/sparcsolaris/lib/libgcc_s.so.1
>
> Thoughts on the open failed? (I also get the same results using the MnM
> pre-compiled version)
>

If you used gcc from /usr/sfw/bin, then "-L/usr/sfw/lib -R/usr/sfw/lib"
in LDFLAGS will solve your problem. If you use some your local GCC,
modify the path to your local libs. Aka use rpath.

Or use Sun Studio like I am doing in SFE repository:

http://pkgbuild.svn.sourceforge.net/viewvc/pkgbuild/spec-files-extra/trunk/SFEunbound.spec?revision=2792&view=markup

Best regards,

Milan

10

Milan

Would that be the same as using
--libdir=dirname
In the ./configure options?

Bruce

Bruce Hayward, MTS Allstream Inc., (c) 204-792-9174 (p) 204-958-1983 (e) bruce.hayward@mtsallstream.com

11

Hi Bruce,

Hayward, Bruce píše v st 21. 07. 2010 v 14:08 -0500:

Milan

Would that be the same as using
--libdir=dirname
In the ./configure options?

Not really. This:

# LDFLAGS="-L<path to your gcc runtime lib> -R<the same

" ./configure

So configure script will accept it and include in LDFLAGS in Makefile,
used during linking.

Best regards,

Milan