Apache1.3.27 + ModSSL2.8.12 + OpenSSL 0.9.6g + WLS 6.1SP2 doesn't work

Hi,
I intend to use SSL on Apache, and not within the application tier.
I've configured and make'd the above using the following:
In the ModSSL directory:
./configure \
--with-apache=../apache_1.3.27
In the Apache directory:
SSL_BASE=../openssl-0.9.6g \
./configure \
--enable-module=ssl \
--enable-module=so \
--enable-rule=SHARED_CORE \
--prefix=/usr/local/apache
I do a httpd -l and confirm the mod_so.c is installed, EAPI and DSO support is
also enabled.
Since WLS is located in another server, I copy the mod_wl_ssl.so file into the
webserver /tmp directory. From there I run the script:
perl /usr/local/bin/apxs -i -a -n weblogic mod_wl_ssl.so
According to the documentation this should add:
AddModule mod_so.c
LoadModule weblogic_module libexec/mod_wl.so
AddModule mod_weblogic.c
to the httpd.conf
What I get is an httpd.conf that only has:
LoadModule weblogic_module libexec/mod_wl.so
So I try it "as is". When I start Apache with "apachectl startssl", the following
appears:
Syntax error on line 205 of /usr/local/apache/conf/httpd.conf:
Cannot load /usr/local/apache/libexec/mod_wl_ssl.so into server: ld.so.1: /usr/local/apache/bin/httpd:
fatal: relocation error: file /usr/local/apache/libexec/mod_wl_ssl.so: symbol
ap_make_table: referenced symbol not found
.//apachectl start: httpd could not be started
The mod_wl_ssl.so file is defintely in the libexec directory and has adequate
permissions assigned.
Adding the two other entries that were supposed to be in the httpd.conf in the
first place makes no difference.
Appending the Apache libexec directory to $LD_LIBRARY_PATH doesn't help either.
BTW, configuring Apache with:
SSL_BASE=../openssl-0.9.6g \
./configure \
--enable-module=ssl \
--enable-module=so \
--enable-rule=SHARED_CORE \
--prefix=/usr/local/apache
And subsequently running:
perl /usr/local/bin/apxs -i -a -n weblogic mod_wl_ssl.so
gives an error message saying DSO is not enabled - strange given that --enable-rule=SHARED_CORE
is a build prerequisite as stated in the documentation.
Would greatly appreciate (grovel) any feedback on how to get this working.
Thanks,
Ivan

Just wondering if you ever figured this out.  Having the exact same issue all of a sudden after it was working for months.  Currently on 10.9.5 but it was working before.  My logs look exactly like yours.

Similar Messages

  • Installing openssl on solaris 10

    I am trying to install openssl-1.0.0g.tar.gz on solaris 10 but I got this error;
    root@sun1 # cd /usr/local/openssl-1.0.0f
    root@sun1 # make
    making all in crypto...
    cc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFC
    N_H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DI
    V2W -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -c cr
    yptlib.c
    sh: cc: not found
    *** Error code 1
    make: Fatal error: Command failed for target `cryptlib.o'
    Current working directory /usr/local/openssl-1.0.0f/crypto
    *** Error code 1
    The following command caused the error:
    dir=crypto; target=all; if expr " crypto ssl engines apps test tools " : ".* $di
    r " >/dev/null 2>&1; then if [ -d "$dir" ]; then ( cd $dir && echo "making
    $target in $dir..." && TOP= && unset TOP ${LIB+LIB} ${LIBS+LIBS} ${INCLU
    DE+INCLUDE} ${INCLUDES+INCLUDES} ${DIR+DIR} ${DIRS+DIRS} ${SRC+SRC}
    ${LIBSRC+LIBSRC} ${LIBOBJ+LIBOBJ} ${ALL+ALL} ${EXHEADER+EXHEADER} ${
    HEADER+HEADER} ${GENERAL+GENERAL} ${CFLAGS+CFLAGS} ${ASFLA
    GS+ASFLAGS} ${AFLAGS+AFLAGS} ${LDCMD+LDCMD} ${LDFLAGS+LDFLAGS}
    ${SHAREDCMD+SHAREDCMD} ${SHAREDFLAGS+SHAREDFLAGS} ${SHARED_LIB+SH
    ARED_LIB} ${LIBEXTRAS+LIBEXTRAS} && make -e PLATFORM='solaris-sparcv9-cc' PROCES
    SOR='' CC='cc' CFLAG='-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H
    -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W
    -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM'
    AS='cc' ASFLAG='-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN
    H -xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DBENDIAN -DBN_DIV
    2W -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -c'
    AR='ar r' NM='nm' RANLIB='/usr/ccs/bin/ranlib' CROSS_C
    OMPILE='' PERL='/usr/bin/perl' ENGDIRS='ccgost' SDIRS='objects
    md4 md5 sha mdc2 hmac ripemd whrlpool des aes rc2 rc4 idea bf cast camellia se
    ed modes bn ec rsa dsa ecdsa dh ecdh dso engine buffer bio stack lhash rand er
    r evp asn1 pem x509 x509v3 conf txt_db pkcs7 pkcs12 comp ocsp ui krb5 cms pque
    ue ts' LIBRPATH='/usr/local/ssl/lib' INSTALL_PREFIX='' INSTALL
    TOP='/usr/local/ssl' OPENSSLDIR='/usr/local/ssl' LIBDIR='lib'
    MAKEDEPEND='$${TOP}/util/domd $${TOP} -MD makedepend' DEPFLAG=
    '-DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MD2 -D
    OPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_STORE' MAKEDEPPROG='makedepend
    ' SHARED_LDFLAGS='-G -dy -z text' KRB5_IN
    CLUDES='' LIBKRB5='' ZLIB_INCLUDE='' LIBZLIB='' EXE_EXT='' SHARED_LIBS=
    '' SHLIB_EXT='.so.1.0.0' SHLIB_TARGET='solaris-shared' PEX_LIBS='' EX_
    LIBS='-lsocket -lnsl -ldl' CPUID_OBJ='sparcv9cap.o sparccpuid.o'
    BN_ASM='bn-sparcv9.o sparcv9-mont.o sparcv9a-mont.o' DES_ENC='des_enc-s
    parc.o fcrypt_b.o' AES_ENC='aes_core.o aes_cbc.o aes-sparcv9.o' CMLL_ENC='
    camellia.o cmll_misc.o cmll_cbc.o' BF_ENC='bf_enc.o' CAST_ENC='c_enc.o'
    RC4_ENC='rc4_enc.o rc4_skey.o' RC5_ENC='rc5_enc.o' SHA1_ASM_OBJ='sha1-spar
    cv9.o sha256-sparcv9.o sha512-sparcv9.o' MD5_ASM_OBJ=''
    RMD160_ASM_OBJ='' WP_ASM_OBJ='wp_block.o'
    PERLASM_SCHEME='void' THIS=${THIS:-build_crypto} MAKE
    FILE=Makefile MAKEOVERRIDES= TOP=.. DIR=$dir $target ) || exit 1; fi; fi
    make: Fatal error: Command failed for target `build_crypto'
    root@sun1 #
    I run make report and got the following:
    root@sun1 # make report
    Use of uninitialized value in pattern match (m//) at util/selftest.pl line 52.
    Use of uninitialized value in pattern match (m//) at util/selftest.pl line 53.
    Use of uninitialized value in string eq at util/selftest.pl line 54.
    Can't exec "cc": No such file or directory at util/selftest.pl line 54.
    Use of uninitialized value in substitution (s///) at util/selftest.pl line 55.
    Use of uninitialized value in substitution (s///) at util/selftest.pl line 56.
    Use of uninitialized value in scalar chomp at util/selftest.pl line 57.
    Use of uninitialized value in concatenation (.) or string at util/selftest.pl li
    ne 76.
    Checking compiler...
    Can't exec "cc": No such file or directory at util/selftest.pl line 83.
    Can't exec "./cctest": No such file or directory at util/selftest.pl line 84.
    Use of uninitialized value in pattern match (m//) at util/selftest.pl line 84.
    OpenSSL self-test report:
    OpenSSL version: 1.0.0f
    Last change: Nadhem Alfardan and Kenny Paterson have discovered an e...
    Options: no-gmp no-jpake no-krb5 no-md2 no-rc5 no-rfc3779 no-shared no
    -store no-zlib no-zlib-dynamic static-engine
    OS (uname): SunOS bio1 5.10 Generic_144488-01 sun4v sparc SUNW,SPARC-Enter
    prise-T5120
    OS (config): sun4v-whatever-solaris2
    Target (default): solaris-sparcv9-cc
    Target: solaris-sparcv9-cc
    Compiler:
    Compiler doesn't work.
    Please ask your system administrator/vendor for more information.
    [Problems with your operating system setup should not be reported
    to the OpenSSL project.]
    Test report in file testlog
    when I run gcc -version I got the command not found but I check with pkginfo -i gcc and it is installed . I also add /usr/local/bin to the ./profile path but same problem.
    any idea please.
    Edited by: Hani on Jan 20, 2012 11:37 AM

    I have installed openssl-1.0.0e-sol10-sparc-local in my hosts and it is working, this can be installed with pkgadd.

  • [Solved] Deluge et OpenSSL

    Hi,
    I have a new problem with deluged when i start it on my server, it doesn't find OpenSSL module but it is already installed (and deluge work fine before).
    [ERROR ] 19:19:35 main:221 No module named OpenSSL
    Traceback (most recent call last):
    File "/usr/lib/python2.7/site-packages/deluge/main.py", line 213, in start_daemon
    from deluge.core.daemon import Daemon
    File "/usr/lib/python2.7/site-packages/deluge/core/daemon.py", line 45, in <module>
    from deluge.core.rpcserver import RPCServer, export
    File "/usr/lib/python2.7/site-packages/deluge/core/rpcserver.py", line 45, in <module>
    from twisted.internet import ssl, reactor, defer
    File "/usr/lib/python2.7/site-packages/twisted/internet/ssl.py", line 46, in <module>
    from OpenSSL import SSL
    ImportError: No module named OpenSSL
    any idea ?
    thanks
    Last edited by LdK (2011-02-15 20:53:35)

    I had the same issue.  I recently (fri night) upgraded my headless server after about a month.  Deluge used to work, then after the upgrade - nada.  Same thing happened to my media PC (upgrade at the same time).  I messed around with it for quite a while.  And yes, pacman -Q showed me having python2-pyopenssl installed on both systems.  I was actually about to post on here, but decided to remove deluge (pacman -Rns deluge) completely and reinstall I also deleted the ~/.config/deluge folder on both PC's to start completely fresh (I didn't have any torrents mid-download so didn't mind starting fresh).  .  That fixed this error on both systems.  Of course I had to redo all my settings, so this may not be the best way to fix it.  Funny thing is my office PC (which i upgrade more regularly... on a weekly basis) never had this issue.  All PC's are up to date as of this weekend, but only 2 of them had this issue (one running as a headless server, and one connecting to it as a thin client..).

  • Openssl trust list

    [cross posted from Mac OS X > Mac OS X v10.4 Tiger > Administration, Accounts & Login]
    Browsing a website over ssl using safari, i discovered a specific verisign certificate authority does not appear to be in the safari trust list.
    specifically, the certificate authority in question is:
    VeriSign International Server CA - Class 3
    this may be related to the fact that this CA's has (somewhat) recently expired and a new certificate needs to replace the old in the openssl trust list (who's location does not seem to be documented anywhere).
    FWIW, this CA is NOT trusted presently by either safari or firefox on Tiger.
    It is trusted by IE/XP (not that this is neccesarily a proof)
    openssl s_client complains abt CA validity as well.

    HI 
    can you do the following :-
    1- On the phone Security Settings > Trust List, and delete all ITL files. If it doesn't work go to step 2.
    2-do factory reset. Push # on plugin then 123456789*0# 
    Thanks
    please rate all useful infromation

  • OpenSSL vulnerability 6 Aug 2014

    Is RTMPS affected by following vulnerabilitys?
    I use AMS 5.0.3 on CentOS 6.4.
    CVE-2014-3508,CVE-2014-5139,CVE-2014-3509,CVE-2014-3505,
    CVE-2014-3506,CVE-2014-3507,CVE-2014-3510,CVE-2014-3511,
    CVE-2014-3512
    Thanks.

    > http://www.openssl.org/news/secadv_20140605.txt
    secadv_20140605.txt doesn't mention about vulnerabilities below.
    CVE-2014-3508,CVE-2014-5139,CVE-2014-3509,CVE-2014-3505,
    CVE-2014-3506,CVE-2014-3507,CVE-2014-3510,CVE-2014-3511,
    CVE-2014-3512
    As far as I know,  we need to use openssl-1.0.1i  to cope with them.
    Is AMS 5.0.6 coped with them?

  • Activate SSL with OpenSSL Self-Signed Cert

    Dear Expert,
    Anyone can give me guidance on how to activate and create ssl cert in Java IM using openssl self-signed cert.
    thanks

    Here how I make it work. Some of the tips is from jay in this forum
    Instant Messaging with SSL
    Let say I have Messaging, Directory, IM server in 1 box.
    Let's create a cert
    # cd /etc/opt/SUNWiim/default/config/
    a) Sun [TM] ONE Messaging Server 6.1 and Sun [TM] ONE Directory Server 5.2 were installed from JES2 on the same box
    b) The server_root directory for Directory Server is the default: /var/opt/mps/serverroot
    c) The server_root directory for Messaging Server is also the default: /opt/SUNWmsgsr
    1. Login to the console and do a Certificate Request
    a) cd /var/opt/mps/serverroot
    b) ./startconsole &
    c) Login to the main console as "cn=Directory Manager"
    d) Select and open the "Messaging Server" console
    e) Highlight the tab called "Tasks" at the top
    f) Select "Manage Certificates"
    g) Console will ask for a password for the security database. Please enter a password twice and make sure that you remember it. This will create the following two files under "/var/opt/mps/serverroot/alias" directory:
    -rw------- 1 mailsrv other 65536 Aug 12 13:57 msg-config-cert8.db
    -rw------- 1 mailsrv other 32768 Aug 12 13:57 msg-config-key3.db
    NOTE: Please make sure that:
    - either the owner of the files is the messaging server user ( mailsrv in this case ),
    -or the permission is appropriate for the mail server user to at least read it.
    h) Once you reach the "Manage Certificate" window, please make a "Certificate Request" by filing up the appropriate questions
    i) Once you are done, you get a CSR , which looks something like this:
    -----BEGIN NEW CERTIFICATE REQUEST-----
    MIIBszCCARwCAQAwczELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWE x
    DzANBgNVBAcTBm5ld2FyazEMMAoGA1UEChMDc21pMQ0wCwYDVQQLEwRhdGFjMSEw
    HwYDVQQ DExhwb3BleWUuYXRhYy5lYmF5LnN1bi5jb20wgZ8wDQYJKoZIhvcNAQEB
    BQADgY0AMIGJAoGBALF eXVTFDj/1eONPzV/dAZ0dBKdstl+u+L/DTdw1sCXXOdNG
    MzYeTUu9g/g0dXL/bniF31M0OkoW+6O 5mshySv/KXS9QcoPngSKS6wuL8kNlYKQR
    Dw97WCS1uaqubAK/kir4hDmL7X9Rf29EFHDSFOWjeOJ /M7aqFWCfR5sTeSIFAgMB
    AAGgADANBgkqhkiG9w0BAQQFAAOBgQCeYwptiL/j7Bcs0DtGYiOlMMs utezF1COC
    4+wHt/p+LtQkvQWBoXisqN6YlGfZPXOCdUyA+RwU7BxjX9IQLP+9HLHfQyLzvCKb
    boKKpjIc8Ci+tmibM5QkgTxu4L7yeCR/PiplgVPttHNT2Qr9cxHLLBvIO6N1GOE8
    VBoq0pC5SA= =
    -----END NEW CERTIFICATE REQUEST-----
    Please maintain and preserve this CSR , since you will be sending it to the Certificate Authority ( CA ) so they can issue you a Certificate
    # openssl genrsa -des3 -out ca.key 4096
    # openssl req -new -x509 -days 3650 -key ca.key -out ca.crt
    # openssl x509 -req -days 3650 -in file.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server-cert.crt
    # cp -p /var/opt/mps/serverroot/alias/msg-config-key3.db key3.db
    # cp -p /var/opt/mps/serverroot/alias/msg-config-cert8.db cert8.db
    # cp -p /var/opt/mps/serverroot/alias/secmod.db .
    # cat sslpassword.conf
    Internal (Software) Token:password
    # cat /etc/opt/SUNWiim/default/config/iim.conf
    iim.comm.modules = "iim_server,iim_mux,iim_wd"
    iim.smtpserver = "www.esuria.com.bn"
    iim.instancedir = "/opt/SUNWiim"
    iim.instancevardir = "/var/opt/SUNWiim/default"
    iim.user = "root"
    iim.group = "root"
    iim.config.version = "1.1"
    iim_ldap.host = "www.esuria.com.bn:389"
    iim_ldap.searchbase = "o=esuria.com.bn,dc=esuria,dc=com,dc=bn"
    iim_ldap.loginfilter = "(&(objectclass=inetorgperson)(uid={0}))"
    iim_ldap.usergroupbyidsearchfilter = "(|(&(objectclass=groupofuniquenames)(dn={0
    }))(&(objectclass=inetorgperson)(uid={0})))"
    iim_ldap.usergroupbynamesearchfilter = "(|(&(objectclass=groupofuniquenames)(cn=
    {0}))(&(objectclass=inetorgperson)(cn={0})))"
    iim_ldap.allowwildcardinuid = "False"
    iim_ldap.userclass = "inetOrgPerson"
    iim_ldap.groupclass = "groupOfUniqueNames"
    iim_ldap.groupbrowsefilter = "(objectclass=groupofuniquenames)"
    iim_ldap.searchlimit = "40"
    iim_ldap.userdisplay = "cn"
    iim_ldap.groupdisplay = "cn"
    iim_ldap.useruidattr = "uid"
    iim_ldap.groupmemberattr = "uniquemember"
    iim_ldap.usermailattr = "mail"
    iim_ldap.resynctime = "720"
    iim_ldap.usergroupbinddn = "cn=Directory Manager"
    iim_ldap.usergroupbindcred = "password"
    iim_ldap.useidentityadmin = "false"
    iim.log.iim_server.severity = "INFO"
    iim.log.iim_mux.severity = "ERROR"
    iim.log.iim_wd.severity = "ERROR"
    iim_server.domainname = "esuria.com.bn"
    iim_server.useport = "True"
    iim_server.port = "5269"
    iim_server.usesslport = "False"
    iim_server.sslport = "5223"
    iim_server.enable = "True"
    iim_server.clienttimeout = "15"
    iim_server.usesso = "0"
    iim.policy.modules = "iim_ldap"
    iim.userprops.store = "file"
    iim_mux.listenport = "www.esuria.com.bn:5222"
    iim_mux.serverport = "www.esuria.com.bn:45222"
    iim_mux.enable = "true"
    iim_mux.numinstances = "2"
    iim_mux.maxthreads = "10"
    iim_mux.maxsessions = "1000"
    iim_mux.usessl = "on"
    iim_mux.secconfigdir = "/etc/opt/SUNWiim/default/config"
    iim_mux.keydbprefix =
    iim_mux.certdbprefix =
    iim_mux.secmodfile = "secmod.db"
    iim_mux.certnickname = "server-cert"
    iim_mux.keystorepasswordfile = "sslpassword.conf"
    iim_wd.enable = "true"
    iim_wd.period = "300"
    iim_wd.maxRetries = "10"
    -open http://www.esuria.com.bn/im/en/im.jnlp
    -click More Detail and enable Use SSL

  • Openssl 0.9.8 brings problems

    Yesterday I did pacman -Syu and openssl has been upgraded and ssh gives the following err:
    ssh: error while loading shared libraries: libcrypto.so.0.9.7: cannot open shared object file: No such file or directory
    Now gdm doesn't work because it uses ssh, d4x and wget use libssl.so.0.9.7 and they don't work, too.
    I have debian on another partion and there are both 0.9.7 and 0.9.8 and copied 0.9.7 and now everything is working.

    tomk wrote:If I understand you correctly, this is a bad solution. You copied individual 0.9.7 libs from Debian to Arch, but pacman still thinks you have 0.9.8 installed, and doesn't know anything about the copied files.The right thing to do is downgrade to 0.9.7 - using pacman, of course.
    The first think I checked was if I have openssl 0.9.7 but no luck(I recently have deleted all cached packages)
    I know that is not good solution but I needed ssh running.
    I had removed openssh-CHROOT and installed openssh and now everythning is OK.
    Thanks for the help

  • Exporting an encrypted key using DESede that is compatible with openssl

    I have been banging my head against this wall for a week now. I need to take an existing PrivateKey and store it in a PKCS#8 container using Triple DES. The only "successful" attempt I have had so far creates a container using pbeWithSHA1And3-KeyTripleDES-CBC wich is not even close to the same thing as des-ede3-cbc. I have a before/after dump using "openssl asn1parse ..." as a reference:
    Non-working one:
        0:d=0  hl=4 l= 682 cons: SEQUENCE
        4:d=1  hl=2 l=  36 cons:  SEQUENCE
        6:d=2  hl=2 l=  10 prim:   OBJECT            :pbeWithSHA1And3-KeyTripleDES-CBC
       18:d=2  hl=2 l=  22 cons:   SEQUENCE
       20:d=3  hl=2 l=  16 prim:    OCTET STRING      [HEX DUMP]:9950B90483C58D10807A8A4BEE7E6199
       38:d=3  hl=2 l=   2 prim:    INTEGER           :0800
       42:d=1  hl=4 l= 640 prim:  OCTET STRING      [HEX DUMP]:FB5130BAA93B217C3D9CC157B48A3A470CExisting one (made using "openssl pkcs8 -topk8 -in temp.key -v2 des3"):
        0:d=0  hl=4 l= 710 cons: SEQUENCE
        4:d=1  hl=2 l=  64 cons:  SEQUENCE
        6:d=2  hl=2 l=   9 prim:   OBJECT            :PBES2
       17:d=2  hl=2 l=  51 cons:   SEQUENCE
       19:d=3  hl=2 l=  27 cons:    SEQUENCE
       21:d=4  hl=2 l=   9 prim:     OBJECT            :PBKDF2
       32:d=4  hl=2 l=  14 cons:     SEQUENCE
       34:d=5  hl=2 l=   8 prim:      OCTET STRING      [HEX DUMP]:56E20E2561891C26
       44:d=5  hl=2 l=   2 prim:      INTEGER           :0800
       48:d=3  hl=2 l=  20 cons:    SEQUENCE
       50:d=4  hl=2 l=   8 prim:     OBJECT            :des-ede3-cbc
       60:d=4  hl=2 l=   8 prim:     OCTET STRING      [HEX DUMP]:903C92209EBA0B3A
       70:d=1  hl=4 l= 640 prim:  OCTET STRING      [HEX DUMP]:0C6033115F1AEF6724E1I just need some basic help on getting from the PrivateKey to the output that will work with openssl.

    The only "successful" attempt I have had so far creates a container using pbeWithSHA1And3-KeyTripleDES-CBC wich is not even close to the same thing as des-ede3-cbc.What do you mean "not even close"? They certainly have different numbers of letters in their names, but cryptographically they are very similar.
    Non-working one:What doesn't work about it?
    I just need some basic help on getting from the PrivateKey to the output that will work with openssl.The example I provided in the earlier thread works just fine with openssl.

  • Apple's App Store + Flash + PC Only --Info here! ;)

    *I do not own a MAC at all and used Flash CS5 + Air 2.6 SDK to make APPs  for the iOS and then upload them to the APP Store to try and make  money!*
    Hey guys, I just want to say first that if you  have a PC and you have Flash CS5, and you have a developers license, you  can make a game and upload it to the app store.  I just pulled my hair  out for a month trying to get this to work but I did it all on just a  PC. Now I will share what I did, because nobody else cares.
    0. Ok before you do anything you should goto the  APPLE Provisioning Portal after you login on Itunes Connect, make an APP  and fill out everything needed, including the bundle IDs and the  certificates.
    1. Program your game in AS3.
    2. Get a developers license.
    3. Change the CPU value in your apps .xml file to GPU.
    4.   Now in apples provisioning portal, which is in the dev center after you  login you must follow the steps to create your provisioning profile.   It will involve downloading certain certficates to create a .p12 file  and a .mobileprovision file.  Usually to do this you could use a PC and a  program called OpenSSL and the command prompt.  HOWEVER, uploading the  app REQUIRES A MAC OPERATING SYSTEM to do so, so you might as well just  use the MAC method to make your .p12 and .mobileprovision. You need  these files when you compile to tell the IPOD/iphone/ipad that this is a  legitimate file.
    5. DOWNLOAD Mac OSX Snow Leopard from wherever you can or buy it .
    5.  MAC? I thought this was PC only!? Well it is, but in order to do this,  you have to run MAC software on your PC.  Normally this is very hard to  do...well not really.  YOU MUST have the program VMware. DOWNLOAD Vmware  from wherever you can or buy it .   In VMware you can make a fake harddrive, make a FreeBSD hard drive with  2 cores, and SCSI.  After it is created you must mount the Snow Leopard  DVD to one of the cd-rom drives inside of VMWARE for your fake  harddrive you just created.  Now when you boot vmware you will need to  go into BIOS by pressing F2.  When in bios set the CD-rom to boot first.  Save and boot.
    6.  The MAC OS install screen will pop up, you must go  to the top menu and choose drive editor(or something like that) and  then find your "fake" hard drive you just made, you must select it and  format it as MAC.  It happens fast.  Then return to the install screen  by closing the drive editor.
    7. Choose install, now if  you have a hacker version of snow leopard (which is what I had) you will  have many settings to change in the preferences tab. The most important  things to change would be the KERNEL.  There is a chocolate kernel and  one above it I cant remember, the chocolate kernel didnt work for me so  maybe try the one that is above it.  If you have Nvidia or ATI card  choose ATI in the video section the info will state it works for both  card types.  Choose whatever for sound...probably wont work anyway. You  must also choose a certain driver in the network section, I think it is  called RL8589 or somehting like that.   And finally click install.   (NOTE: Everyone has a different system and these setting will need to be  tuned to your PC, I do not know what your pc is so I cannot tell you  exactly what to choose, you should be able to figure it out, and if it  doesn't work, be prepared to try this ALL over again, I seriously had to  reinstall MAC OS 4 times to get it right, but then it worked.
    8.  Now it will begin installing MAC OS on your fake  drive inside VMware.  After it is done installing it probably won't  boot. You will need to download a boot disk to boot the MAC OS.  My  favorite (because it works) is a disc called Nawcom/OSX86 ModCD 0.3.1.   You DL it here:  http://blog.nawcom.com/ModCD/OSX86_ModCD-032311-151021.iso.zip
    9. Set the CD-rom from the Snow Leopard DVD to the Nawcom ModCD.
    10.  Boot up and you will see the Nawcom screen asking you to press any  button, do so. It will start loading white text like crazy....until  hopefully you will see the MAC welcome screen asking you to press the  keys next to you shift keys, do this and set up the MAC with your  developer information.
    11.  You can now login to Itunes connect using Safari we browser.
    (REMEMBER  the Bundle ID in the provisioning portal for your app must match the  one in your .xml file.  It will look something like  com.Mycompany.Myapp.)
    12. Download your certificates and use  the Key Assist in Apps>Utilities and the provisioning portal on  itunes connect(There is in depth docs on this) to create your .p12 and  .mobileprovision files.
    13.BACK ON YOUR PC, move the  files from the "MAC" to the PC, I did this by plugging in a USB drive  and loading the files on using the MAC OS, if you must, you can upload  the .p12 and .mobileprovision files to a file host, like  www.fileden.com. Put these files in WINDOWS somehow. (Remember that there are 2 certificates, one is the developer  certificate, one is the distributer, for the app store you need the  distributor certificate to be used when creating the .p12 file, not the developer  certificate.(This final compiled file will not run on your iphone after for testing, it  will however work after people download it from the app store. Compile your game using AIR 2.6 using the command prompt to run this line from Air2.6/bin folder:
    adt   -package -target ipa-app-store -storetype pkcs12 -keystore   YOURKEYFILE.p12 -storepass YOURPASSWORD  -provisioning-profile  YOURCOMPANY.mobileprovision YOURAPP.ipa  YOURAPP-app.xml YOURAPP.swf  icon2929.png icon5757.png icon7272.png
    14. Now you will have the .ipa file you need to upload to APPLE.
    15.  Now you can either put this on a USB drive, upload this to fileden, or  create an .iso file with the .ipa file inside of it, then mount that as a  second cd rom inside VMware, you may have to change the nawcom and iso  file's positions in vmware so that nawcom is always number 0 and the iso  with your APP is number 1.
    16. Boot up MAC and "transfer" your APP.ipa to the MAC.
    17.  Download Application Loader from APPLE in Safari.
    18.  Install Application Loader.
    19. Start Application Loader and then fill in your Itunes Connect login information and login.
    20. Do whatever it asks and upload your APP, hit upload.
    21.  It will say verifying, if it gives an error, you have done something  wrong in making your files...it is ok, it took me countless tries to  create the file properly, your main concern is making sure the Bundle  IDs match and that you use a distributor certificate to create the .p12  file not a developer one.
    22. If the file fails, keep trying, there is a lot of info out there for trouble shooting but it is your fault it is happening.
    So  there is it, I used WINDOWS XP PRO for this.  Yes Windows XP Pro was  running, while MAC OS was running beside it in a window. The MAC may run  a little slow but it is bearable to upload a game(not to use as a MAC  for daily things).
    *I do not own a MAC at all and used  Flash CS5 + Air 2.6 SDK to make APPs for the iOS and then upload them  to the APP Store to try and make money!*
    To prove that  flash can do the job, here is proof with my app iBomb! and 8-bit game  that is pretty fun and has a cool little story!:  http://itunes.apple.com/us/app/ibomb/id434765925?mt=8&ls=1
    If I helped you out you could help me out by buying my app, it's ok if you can't.
    I  hope this post is HOPE for many of you flash devs out there like me  that wondered if this was even possible.  Take it easy guys!
    -Nineteen95

    You credit or debit card credentials must be associated with same country where you purchase iTunes media.
    "Although you can browse the iTunes Store in any country without being signed in, you can only purchase content from the iTunes Store for your own country. This is enforced via the billing address associated with your credit card or other payment method that you use with the iTunes Store, rather than your actual geographic location. You can use the iTunes Store in all countries of which you’re a resident, but you’ll either need a separate iTunes Store account for each one, or you’ll need to continually be switching the billing information on your single account. Generally, it’s simpler just to set up an alternative account for these situations, although it’s worth nothing that features like iTunes in the CLoud and iTunes Match are designed to work best when using a single iTunes Store account, as you can only switch accounts with these services every 90 days."
    From here >  The Complete Guide to Using the iTunes Store | iLounge Article

  • Problems installing CF 10 with Apache 2.2.24 (or 2.4) on RHEL 6.4

    Built Apache using openssl 1.0.1e (updated LD_LIBRARY_PATH to reflect the correct openssl libs) and pcre. Configure for build was:
    configure --enable-ssl=shared --with-ssl=/usr/local/ssl  --enable-so --with-included-apr --with-pcre  --with-perl
    Also downloaded and built the connector from http://helpx.adobe.com/coldfusion/kb/rhel-connector-configuration.html after the vanilla CF install didn't work. I get the following when I try to start up CF:
    [root@web01 logs]# /etc/rc.d/init.d/coldfusion_10 start
    Starting ColdFusion 10 server instance named cfusion ...
    The ColdFusion 10 server instance named cfusion is starting up and will be available shortly.
    nohup: appending output to `nohup.out'
    ======================================================================
    Running the ColdFusion 10 connector wizard
    ======================================================================
    Configuring the web server connector (Launched on the first run of the ColdFusion 10 start script)
    Running /usr/local/apache2/conf connector wizard...
    =======================================
    There was an error while running the connector wizard
    Connector installation was not successful
    =======================================
    ======================================================================
    ColdFusion 10 server instance named cfusion has been started.
    ColdFusion 10 will write logs to /opt/coldfusion10/cfusion/logs/coldfusion-out.log
    ======================================================================
    The wsconfig.log contains the following:
    [root@web01 wsconfig]# cat wsconfig.log
    # Created by ColdFusion on 05/28 15:15:23
    05/28 15:15:23 info Tomcat Connector
    05/28 15:15:23 debug command line: -ws Apache -bin /usr/local/apache2/bin/httpd -script /usr/local/apache2/bin/apachectl -dir /usr/local/apache2/conf -v
    05/28 15:15:23 info Red Hat Enterprise Linux Server release 6.4 (Santiago)
    05/28 15:15:23 debug Using Apache binary /usr/local/apache2/bin/httpd
    05/28 15:15:23 info Server's Module Magic Number: 20051115:31.  Supported major magic numbers on this platform are 20020628 and 20020903.
    05/28 15:15:23 info Attempting to build connector from sources
    05/28 15:15:23 info Server version: Apache/2.2.24 (Unix)
    05/28 15:15:23 debug Using Apache control script /usr/local/apache2/bin/apachectl
    05/28 15:15:23 debug Parsing Apache configuration file /usr/local/apache2/conf/httpd.conf
    05/28 15:15:23 debug Exec'ing chmod 777 /opt/coldfusion10/config/wsconfig/1
    05/28 15:15:23 debug Set permission to 777 on /opt/coldfusion10/config/wsconfig/1
    05/28 15:15:23 debug Exec'ing chmod +x /opt/coldfusion10/config/wsconfig/1/mod_jk.so
    05/28 15:15:23 debug Set permission to execute on /opt/coldfusion10/config/wsconfig/1/mod_jk.so
    05/28 15:15:23 debug Created file /opt/coldfusion10/config/wsconfig/1/mod_jk.so
    05/28 15:15:23 debug Wrote file /usr/local/apache2/conf/httpd.conf
    05/28 15:15:23 debug Added ColdFusion configuration to Apache configuration file /usr/local/apache2/conf/httpd.conf
    05/28 15:15:23 debug Created file /opt/coldfusion10/config/wsconfig/1/README.txt
    05/28 15:15:23 debug Wrote file /opt/coldfusion10/config/wsconfig/wsconfig.properties
    05/28 15:15:23 debug Exec'ing /usr/local/apache2/bin/apachectl restart
    05/28 15:15:23 error Error running "/usr/local/apache2/bin/apachectl restart": exit code was 1
    05/28 15:15:23 error Error restarting Apache server.  The web server must be restarted to complete this operation.
    com.adobe.coldfusion.connector.connectorinstaller.WebServerException: Error restarting Apache server.  The web server must be restarted to complete this operation.
        at com.adobe.coldfusion.connector.connectorinstaller.ApacheInstaller.restartWS(ApacheInstall er.java:480)
        at com.adobe.coldfusion.connector.connectorinstaller.ApacheInstaller.installConnector(Apache Installer.java:269)
        at com.adobe.coldfusion.connector.connectorinstaller.ConnectorInstaller.installConnector(Con nectorInstaller.java:340)
        at com.adobe.coldfusion.connector.connectorinstaller.ConnectorInstaller.doIt(ConnectorInstal ler.java:284)
        at com.adobe.coldfusion.connector.connectorinstaller.ConnectorInstaller.main(ConnectorInstal ler.java:741)
    05/28 15:16:37 info Tomcat Connector
    05/28 15:16:37 debug command line: -ws Apache -dir /usr/local/apache2/conf -bin /usr/local/apache2/bin/httpd -script /usr/local/apache2/bin/apachectl -cfide /opt/coldfusion10/cfusion/wwwroot/CFIDE -v
    05/28 15:16:37 error This web server is already configured for ColdFusion.
    com.adobe.coldfusion.connector.connectorinstaller.ConnectorInstallerException: This web server is already configured for ColdFusion.
        at com.adobe.coldfusion.connector.connectorinstaller.ApacheInstaller.installConnector(Apache Installer.java:187)
        at com.adobe.coldfusion.connector.connectorinstaller.ConnectorInstaller.installConnector(Con nectorInstaller.java:340)
        at com.adobe.coldfusion.connector.connectorinstaller.ConnectorInstaller.doIt(ConnectorInstal ler.java:284)
        at com.adobe.coldfusion.connector.connectorinstaller.ConnectorInstaller.main(ConnectorInstal ler.java:741)
    I've searched and tried just about everything I could find relating to the error info.

    Hi,
    RHEL 6.4 is not the supported version of RHEL, Supported version are 5.6 and 6.1. We published an article you can try if that helps.
    http://helpx.adobe.com/coldfusion/kb/rhel-connector-configuration.html
    However if that doesn't work please try this in Supported environment.
    Regards,
    Priyank

  • Problems with SSH: Connection Refused

    Greetings fellow Arch users,
    I have hit a bit of a snag that I could really use some extra help getting around. I've tried everything I can think of (and everything that Google thought might work) and I have my back rather against a wall, so I thought I'd come here to see if anyone can offer some advice.
    To make a long story short, I am a college student and am attempting to set up an ssh server on a desktop at my house so I can access it remotely from the college. I have the computer set up and the server running, however I am having difficulty making connections to it from my laptop. I know that the server is running, because I can log into it both from the server itself (sshing into local host) and from my laptop when I use the internal IP address.
    The server is on a static IP address within the network(192.168.0.75), and my router is configured to forward TCP port 1500 to it (I'm using 1500 as the port for my ssh server). However, when I attempt to log into the ssh server using my network's external IP address, the connection is refused. I used nmap to scan my network and found that, even though the proper ports are forwarded to the proper place as far as my Router's configuration interface is concerned, port 1500 is not listed as one of the open TCP ports. I also, to test it, temporarily disabled the firewalls on both the server and the client. That didn't help. The command that I am running is:
    ssh -p 1500 douglas@[external ip address
    As I am really not sure what is causing this problem, I don't know what information to provide. So here is everything that my inexperienced mind sees as likely being important. If you need anything more, let me know and I will do my best to provide it.
    Here is the sshd_config file from my server.
    # This is the sshd server system-wide configuration file. See
    # sshd_config(5) for more information.
    # This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
    # The strategy used for options in the default sshd_config shipped with
    # OpenSSH is to specify options with their default value where
    # possible, but leave them commented. Uncommented options override the
    # default value.
    Port 1500
    #AddressFamily any
    #ListenAddress 0.0.0.0
    #ListenAddress ::
    # The default requires explicit activation of protocol 1
    #Protocol 2
    # HostKey for protocol version 1
    #HostKey /etc/ssh/ssh_host_key
    # HostKeys for protocol version 2
    #HostKey /etc/ssh/ssh_host_rsa_key
    #HostKey /etc/ssh/ssh_host_dsa_key
    #HostKey /etc/ssh/ssh_host_ecdsa_key
    # Lifetime and size of ephemeral version 1 server key
    #KeyRegenerationInterval 1h
    #ServerKeyBits 1024
    # Ciphers and keying
    #RekeyLimit default none
    # Logging
    # obsoletes QuietMode and FascistLogging
    #SyslogFacility AUTH
    #LogLevel INFO
    # Authentication:
    #LoginGraceTime 2m
    PermitRootLogin no
    #StrictModes yes
    #MaxAuthTries 6
    #MaxSessions 10
    #RSAAuthentication yes
    #PubkeyAuthentication yes
    # The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
    # but this is overridden so installations will only check .ssh/authorized_keys
    AuthorizedKeysFile .ssh/authorized_keys
    #AuthorizedPrincipalsFile none
    #AuthorizedKeysCommand none
    #AuthorizedKeysCommandUser nobody
    # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
    #RhostsRSAAuthentication no
    # similar for protocol version 2
    #HostbasedAuthentication no
    # Change to yes if you don't trust ~/.ssh/known_hosts for
    # RhostsRSAAuthentication and HostbasedAuthentication
    #IgnoreUserKnownHosts no
    # Don't read the user's ~/.rhosts and ~/.shosts files
    #IgnoreRhosts yes
    # To disable tunneled clear text passwords, change to no here!
    #PasswordAuthentication yes
    #PermitEmptyPasswords no
    # Change to no to disable s/key passwords
    ChallengeResponseAuthentication no
    # Kerberos options
    #KerberosAuthentication no
    #KerberosOrLocalPasswd yes
    #KerberosTicketCleanup yes
    #KerberosGetAFSToken no
    # GSSAPI options
    #GSSAPIAuthentication no
    #GSSAPICleanupCredentials yes
    # Set this to 'yes' to enable PAM authentication, account processing,
    # and session processing. If this is enabled, PAM authentication will
    # be allowed through the ChallengeResponseAuthentication and
    # PasswordAuthentication. Depending on your PAM configuration,
    # PAM authentication via ChallengeResponseAuthentication may bypass
    # the setting of "PermitRootLogin without-password".
    # If you just want the PAM account and session checks to run without
    # PAM authentication, then enable this but set PasswordAuthentication
    # and ChallengeResponseAuthentication to 'no'.
    UsePAM yes
    #AllowAgentForwarding yes
    #AllowTcpForwarding yes
    #GatewayPorts no
    #X11Forwarding no
    #X11DisplayOffset 10
    #X11UseLocalhost yes
    PrintMotd no # pam does that
    #PrintLastLog yes
    #TCPKeepAlive yes
    #UseLogin no
    UsePrivilegeSeparation sandbox # Default for new installations.
    #PermitUserEnvironment no
    #Compression delayed
    #ClientAliveInterval 0
    #ClientAliveCountMax 3
    #UseDNS yes
    #PidFile /run/sshd.pid
    #MaxStartups 10:30:100
    #PermitTunnel no
    #ChrootDirectory none
    #VersionAddendum none
    # no default banner path
    #Banner none
    # override default of no subsystems
    Subsystem sftp /usr/lib/ssh/sftp-server
    # Example of overriding settings on a per-user basis
    #Match User anoncvs
    # X11Forwarding no
    # AllowTcpForwarding no
    # ForceCommand cvs server
    The ouptut of ip addr when run on the server:
    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
    valid_lft forever preferred_lft forever
    2: enp8s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
    link/ether 00:21:9b:3a:be:94 brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.75/24 brd 192.168.255.0 scope global enp8s0
    valid_lft forever preferred_lft forever
    inet6 fe80::221:9bff:fe3a:be94/64 scope link
    valid_lft forever preferred_lft forever
    Here is the output from running nmap on the network:
    Starting Nmap 6.40 ( http://nmap.org ) at 2013-09-28 21:05 EDT
    Initiating Ping Scan at 21:05
    Scanning address [2 ports]
    Completed Ping Scan at 21:05, 0.01s elapsed (1 total hosts)
    Initiating Parallel DNS resolution of 1 host. at 21:05
    Completed Parallel DNS resolution of 1 host. at 21:05, 0.05s elapsed
    Initiating Connect Scan at 21:05
    Scanning pa-addresss.dhcp.embarqhsd.net (address) [1000 ports]
    Discovered open port 80/tcp on address
    Discovered open port 443/tcp on address
    Discovered open port 23/tcp on address
    Discovered open port 21/tcp on address
    Completed Connect Scan at 21:05, 4.08s elapsed (1000 total ports)
    Nmap scan report for pa-address.dhcp.embarqhsd.net (address)
    Host is up (0.036s latency).
    Not shown: 995 closed ports
    PORT STATE SERVICE
    21/tcp open ftp
    23/tcp open telnet
    80/tcp open http
    443/tcp open https
    8080/tcp filtered http-proxy
    Read data files from: /usr/bin/../share/nmap
    Nmap done: 1 IP address (1 host up) scanned in 4.19 seconds
    Here is the ssh_config client-side:
    # $OpenBSD: ssh_config,v 1.27 2013/05/16 02:00:34 dtucker Exp $
    # This is the ssh client system-wide configuration file. See
    # ssh_config(5) for more information. This file provides defaults for
    # users, and the values can be changed in per-user configuration files
    # or on the command line.
    # Configuration data is parsed as follows:
    # 1. command line options
    # 2. user-specific file
    # 3. system-wide file
    # Any configuration value is only changed the first time it is set.
    # Thus, host-specific definitions should be at the beginning of the
    # configuration file, and defaults at the end.
    # Site-wide defaults for some commonly used options. For a comprehensive
    # list of available options, their meanings and defaults, please see the
    # ssh_config(5) man page.
    # Host *
    # ForwardAgent no
    # ForwardX11 no
    # RhostsRSAAuthentication no
    # RSAAuthentication yes
    # PasswordAuthentication yes
    # HostbasedAuthentication no
    # GSSAPIAuthentication no
    # GSSAPIDelegateCredentials no
    # BatchMode no
    # CheckHostIP yes
    # AddressFamily any
    # ConnectTimeout 0
    # StrictHostKeyChecking ask
    # IdentityFile ~/.ssh/identity
    # IdentityFile ~/.ssh/id_rsa
    # IdentityFile ~/.ssh/id_dsa
    # Port 22
    Protocol 2
    # Cipher 3des
    # Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc
    # MACs hmac-md5,hmac-sha1,[email protected],hmac-ripemd160
    # EscapeChar ~
    # Tunnel no
    # TunnelDevice any:any
    # PermitLocalCommand no
    # VisualHostKey no
    # ProxyCommand ssh -q -W %h:%p gateway.example.com
    # RekeyLimit 1G 1h
    Output of ssh -v during connection attempt:
    OpenSSH_6.3, OpenSSL 1.0.1e 11 Feb 2013
    debug1: Reading configuration data /home/douglas/.ssh/config
    debug1: Reading configuration data /etc/ssh/ssh_config
    debug2: ssh_connect: needpriv 0
    debug1: Connecting to address [address] port 1500.
    debug1: connect to address address port 1500: Connection refused
    ssh: connect to host address port 1500: Connection refused
    Thank you guys ahead of time. Getting this server operational is hardly critical, it is just a side project of mine, but I would really like to see it working.
    Douglas Bahr Rumbaugh
    Last edited by douglasr (2013-09-29 02:58:56)

    Okay, so I finally have the opportunity to try and log in from a remote network. And. . .  it doesn't work. Which is just my luck because I now need to wait an entire week, at least, before I can touch the server again. Anyway, running ssh with the maximum verbosity I get this output:
    douglas ~ $ ssh -vvv -p 2000 address
    OpenSSH_6.3, OpenSSL 1.0.1e 11 Feb 2013
    debug1: Reading configuration data /home/douglas/.ssh/config
    debug1: Reading configuration data /etc/ssh/ssh_config
    debug2: ssh_connect: needpriv 0
    debug1: Connecting to address [address] port 2000.
    debug1: connect to address address port 2000: Connection timed out
    ssh: connect to host address port 2000: Connection timed out
    It takes a minute or two for the command to finish with the connection timeout, as one would expect. And yes, I am reasonably sure that the address that I am using is my home network's external IP. It is dynamic, but I checked it before I left which was just over an hour ago. I guess that it may have changed. I'll know that for sure in the morning, when my server sends me an automatic email with the network's current address. In the meantime I am operating under the assumption that the address I am using is correct. What else could be the problem?

  • Remote Desktop Connection With Custom Certificate on Windows 8.1 fails

    I'm trying to establish a secured remote desktop connection without success.
    The setting
    There are some local pcs with windows 8.1 Pro and windows 7 Pro, no server-edition. I've created a self signed ca-certificate with openssl for Windows. I used this to sign custom certs for the local windows-pcs, which are installed at mmc -> certificate
    snap-in for local computer -> My Certificates -> Certificates. The networkdriver has the right to read the key. The sha1-fingerprint of the custom signed certs are registered at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp
    -> SSLCertificateSHA1Hash = sha-1 hash of the custom local cert. Additionally the revocation-list is restrained to the local list by setting HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Credssp -> UseCachedCRLOnlyAndIgnoreRevocationUnknownErrors
    = 1.
    The results
    The connection form win 8.1 to win 7 works. The connection info confirms that it is a veryfied connection. The connection to windows 8.1 fails after entering the credentials with error: No connection possible. Network Level Authentication is set, but other
    level don't work as well. The log (Event Views -> Applications and Services Logs -> Microsoft -> Windows -> TerminalServices-RemoteConnectionManager -> Admin) says "Remote Desktop Services has taken too long to load the user configuration
    from server" and "The Local Security Authority Cannot Be Contacted" (error 0x80090304)
    Aditional information
    The connection via linux (remmina) works for win 7 and win 8.1, but I have no information about the encryption. It is the same with the Microsoft Remote Desktop Tool for Android.
    Maybe it is accociatet with a different cert handling by Windows 8.1 but I couldn't find further information or a solution in the internet.
    Best regards
    abditus

    I solved the problem!
    The default openssl certificate signature algorithm is md5RSA but it doesn't work with windows 8.1.
    It is at least sha1RSA needed.
    By adding "default_md = sha1" to the openssl.cnf you create certs with sha1RSA and it works fine.
    Beste Gegards
    abditus

  • [SOLVED] No prompt after update to 3.3.6-1-ARCH

    After doing an upgrade and a reboot (fail save, the otherone doesn't work) my arch stopped working (booting)
    Linux janus 3.3.6-1-ARCH #1 SMP PREEMPT Sun May 13 10:52:32 CEST 2012 x86_64 GNU/Linux
    /boot/grub/menu.lst:
    # Config file for GRUB - The GNU GRand Unified Bootloader
    # /boot/grub/menu.lst
    # DEVICE NAME CONVERSIONS
    # Linux Grub
    # /dev/fd0 (fd0)
    # /dev/sda (hd0)
    # /dev/sdb2 (hd1,1)
    # /dev/sda3 (hd0,2)
    # FRAMEBUFFER RESOLUTION SETTINGS
    # +-------------------------------------------------+
    # | 640x480 800x600 1024x768 1280x1024
    # ----+--------------------------------------------
    # 256 | 0x301=769 0x303=771 0x305=773 0x307=775
    # 32K | 0x310=784 0x313=787 0x316=790 0x319=793
    # 64K | 0x311=785 0x314=788 0x317=791 0x31A=794
    # 16M | 0x312=786 0x315=789 0x318=792 0x31B=795
    # +-------------------------------------------------+
    # for more details and different resolutions see
    # http://wiki.archlinux.org/index.php/GRUB#Framebuffer_Resolution
    # general configuration:
    timeout 5
    default 0
    color light-blue/black light-cyan/blue
    # boot sections follow
    # each is implicitly numbered from 0 in the order of appearance below
    # TIP: If you want a 1024x768 framebuffer, add "vga=773" to your kernel line.
    # (0) Arch Linux
    title Arch Linux
    root (hd0,0)
    kernel /vmlinuz26 root=/dev/disk/by-label/root ro
    initrd /kernel26.img
    # (1) Arch Linux
    title Arch Linux Fallback
    root (hd0,0)
    kernel /vmlinuz26 root=/dev/disk/by-label/root ro
    initrd /kernel26-fallback.img
    # (2) Windows
    #title Windows
    #rootnoverify (hd0,0)
    #makeactive
    #chainloader +1
    /etc/rc.conf
    # /etc/rc.conf - Main Configuration for Arch Linux
    # See 'man 5 rc.conf' for more details
    # LOCALIZATION
    LOCALE="en_US.UTF-8"
    DAEMON_LOCALE="yes"
    HARDWARECLOCK=""
    TIMEZONE=""
    KEYMAP="de_CH-latin1"
    CONSOLEFONT="Lat2-Terminus16"
    CONSOLEMAP=
    USECOLOR="yes"
    # HARDWARE
    MODULES=()
    USEDMRAID="no"
    USEBTRFS="no"
    USELVM="yes"
    # NETWORKING
    HOSTNAME="janus"
    interface=eth0
    address=172.16.0.8
    netmask=255.255.0.0
    gateway=172.16.0.1
    NETWORK_PERSIST="yes"
    # DAEMONS
    #DAEMONS=( syslog-ng crond network nfs-common dnsmasq sshd ntpd @httpd !netfs @samba @nfs-server @munin-node @minidlna @logitechmediaserver @transmissiond @randomsound )
    DAEMONS=( syslog-ng crond network dnsmasq sshd )
    dmesg
    [ 0.907376] msgmni has been set to 3989
    [ 0.908073] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253)
    [ 0.908205] io scheduler noop registered
    [ 0.908216] io scheduler deadline registered
    [ 0.908403] io scheduler cfq registered (default)
    [ 0.908722] pcieport 0000:00:1c.0: irq 40 for MSI/MSI-X
    [ 0.908919] pcieport 0000:00:1c.2: irq 41 for MSI/MSI-X
    [ 0.909085] pcieport 0000:00:1c.3: irq 42 for MSI/MSI-X
    [ 0.909487] intel_idle: MWAIT substates: 0x10
    [ 0.909523] intel_idle: v0.4 model 0x1C
    [ 0.909530] intel_idle: lapic_timer_reliable_states 0x2
    [ 0.909674] GHES: HEST is not enabled!
    [ 0.909882] Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
    [ 0.911088] Linux agpgart interface v0.103
    [ 0.911316] i8042: PNP: No PS/2 controller found. Probing ports directly.
    [ 0.914487] serio: i8042 KBD port at 0x60,0x64 irq 1
    [ 0.914596] serio: i8042 AUX port at 0x60,0x64 irq 12
    [ 0.915020] mousedev: PS/2 mouse device common for all mice
    [ 0.915192] rtc_cmos 00:03: RTC can wake from S4
    [ 0.915505] rtc_cmos 00:03: rtc core: registered rtc_cmos as rtc0
    [ 0.915549] rtc0: alarms up to one month, 114 bytes nvram, hpet irqs
    [ 0.915691] cpuidle: using governor ladder
    [ 0.915842] cpuidle: using governor menu
    [ 0.916378] TCP cubic registered
    [ 0.916798] NET: Registered protocol family 10
    [ 0.918019] NET: Registered protocol family 17
    [ 0.918035] Registering the dns_resolver key type
    [ 0.918552] PM: Hibernation image not present or could not be loaded.
    [ 0.918576] registered taskstats version 1
    [ 0.919485] rtc_cmos 00:03: setting system clock to 2012-05-22 20:49:54 UTC (1337719794)
    [ 0.919617] Initializing network drop monitor service
    [ 0.923155] Freeing unused kernel memory: 732k freed
    [ 0.923689] Write protecting the kernel read-only data: 8192k
    [ 0.937719] Freeing unused kernel memory: 1632k freed
    [ 0.944939] Freeing unused kernel memory: 656k freed
    [ 0.972274] udevd[47]: starting version 182
    [ 1.081877] SCSI subsystem initialized
    [ 1.087149] libata version 3.00 loaded.
    [ 1.090150] ata_piix 0000:00:1f.1: version 2.13
    [ 1.090166] sata_promise 0000:04:00.0: version 2.12
    [ 1.090320] ata_piix 0000:00:1f.1: setting latency timer to 64
    [ 1.096448] scsi0 : sata_promise
    [ 1.098921] scsi1 : sata_promise
    [ 1.101399] scsi2 : sata_promise
    [ 1.101689] scsi3 : ata_piix
    [ 1.101855] scsi4 : sata_promise
    [ 1.102566] ata3: SATA max UDMA/133 mmio m4096@0x88120000 ata 0x88120380 irq 21
    [ 1.102582] ata4: SATA max UDMA/133 mmio m4096@0x88120000 ata 0x88120280 irq 21
    [ 1.102594] ata5: SATA max UDMA/133 mmio m4096@0x88120000 ata 0x88120200 irq 21
    [ 1.102608] ata6: SATA max UDMA/133 mmio m4096@0x88120000 ata 0x88120300 irq 21
    [ 1.103448] scsi5 : ata_piix
    [ 1.105045] ata1: PATA max UDMA/100 cmd 0x1f0 ctl 0x3f6 bmdma 0x30b0 irq 14
    [ 1.105061] ata2: PATA max UDMA/100 cmd 0x170 ctl 0x376 bmdma 0x30b8 irq 15
    [ 1.105184] ata_piix 0000:00:1f.2: MAP [ P0 P2 P1 P3 ]
    [ 1.105857] ata2: port disabled--ignoring
    [ 1.256766] ata_piix 0000:00:1f.2: setting latency timer to 64
    [ 1.257277] ata1.00: ATAPI: DVDRW IDE 16X, VER A187, max UDMA/66
    [ 1.258236] scsi6 : ata_piix
    [ 1.258557] scsi7 : ata_piix
    [ 1.259078] ata7: SATA max UDMA/133 cmd 0x30c8 ctl 0x30ec bmdma 0x30a0 irq 19
    [ 1.259088] ata8: SATA max UDMA/133 cmd 0x30c0 ctl 0x30e8 bmdma 0x30a8 irq 19
    [ 1.263788] ata1.00: configured for UDMA/66
    [ 1.426964] ata8.00: ATA-7: SAMSUNG MMCRE64G5MXP-0VB, VBM1801Q, max UDMA/100
    [ 1.426973] ata8.00: 125045424 sectors, multi 16: LBA48 NCQ (depth 0/32)
    [ 1.433610] ata8.00: configured for UDMA/100
    [ 1.573416] ata3: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
    [ 1.590528] ata3.00: ATA-8: WDC WD10EADS-00P8B0, 01.00A01, max UDMA/133
    [ 1.590536] ata3.00: 1953525168 sectors, multi 0: LBA48 NCQ (depth 0/32)
    [ 1.597178] ata3.00: configured for UDMA/133
    [ 1.597532] scsi 0:0:0:0: Direct-Access ATA WDC WD10EADS-00P 01.0 PQ: 0 ANSI: 5
    [ 2.070084] ata4: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
    [ 2.080650] ata4.00: ATA-8: WDC WD10EADS-00P8B0, 01.00A01, max UDMA/133
    [ 2.080660] ata4.00: 1953525168 sectors, multi 0: LBA48 NCQ (depth 0/32)
    [ 2.087660] ata4.00: configured for UDMA/133
    [ 2.088031] scsi 1:0:0:0: Direct-Access ATA WDC WD10EADS-00P 01.0 PQ: 0 ANSI: 5
    [ 2.560084] ata5: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
    [ 2.580228] ata5.00: ATA-8: WDC WD10EADS-00P8B0, 01.00A01, max UDMA/133
    [ 2.580238] ata5.00: 1953525168 sectors, multi 0: LBA48 NCQ (depth 0/32)
    [ 2.587208] ata5.00: configured for UDMA/133
    [ 2.587512] scsi 2:0:0:0: Direct-Access ATA WDC WD10EADS-00P 01.0 PQ: 0 ANSI: 5
    [ 3.060083] ata6: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
    [ 3.073646] ata6.00: ATA-8: WDC WD10EADS-00P8B0, 01.00A01, max UDMA/133
    [ 3.073655] ata6.00: 1953525168 sectors, multi 0: LBA48 NCQ (depth 0/32)
    [ 3.080536] ata6.00: configured for UDMA/133
    [ 3.080840] scsi 4:0:0:0: Direct-Access ATA WDC WD10EADS-00P 01.0 PQ: 0 ANSI: 5
    [ 3.081826] scsi 3:0:0:0: CD-ROM DVDRW IDE 16X A187 PQ: 0 ANSI: 5
    [ 3.082680] scsi 7:0:0:0: Direct-Access ATA SAMSUNG MMCRE64G VBM1 PQ: 0 ANSI: 5
    [ 3.118717] sd 0:0:0:0: [sda] 1953525168 512-byte logical blocks: (1.00 TB/931 GiB)
    [ 3.118994] sd 1:0:0:0: [sdb] 1953525168 512-byte logical blocks: (1.00 TB/931 GiB)
    [ 3.119057] sd 0:0:0:0: [sda] Write Protect is off
    [ 3.119069] sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
    [ 3.119083] sd 2:0:0:0: [sdc] 1953525168 512-byte logical blocks: (1.00 TB/931 GiB)
    [ 3.119315] sd 4:0:0:0: [sdd] 1953525168 512-byte logical blocks: (1.00 TB/931 GiB)
    [ 3.119341] sd 1:0:0:0: [sdb] Write Protect is off
    [ 3.119365] sd 1:0:0:0: [sdb] Mode Sense: 00 3a 00 00
    [ 3.119402] sd 2:0:0:0: [sdc] Write Protect is off
    [ 3.119415] sd 7:0:0:0: [sde] 125045424 512-byte logical blocks: (64.0 GB/59.6 GiB)
    [ 3.119440] sd 2:0:0:0: [sdc] Mode Sense: 00 3a 00 00
    [ 3.119506] sd 1:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
    [ 3.119590] sd 2:0:0:0: [sdc] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
    [ 3.119688] sd 4:0:0:0: [sdd] Write Protect is off
    [ 3.119701] sd 4:0:0:0: [sdd] Mode Sense: 00 3a 00 00
    [ 3.119745] sd 7:0:0:0: [sde] Write Protect is off
    [ 3.119755] sd 7:0:0:0: [sde] Mode Sense: 00 3a 00 00
    [ 3.119838] sd 4:0:0:0: [sdd] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
    [ 3.119861] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
    [ 3.119886] sd 7:0:0:0: [sde] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
    [ 3.125924] sde: sde1 sde2 sde3 sde4
    [ 3.128350] sda: unknown partition table
    [ 3.131954] sd 0:0:0:0: [sda] Attached SCSI disk
    [ 3.133210] sd 7:0:0:0: [sde] Attached SCSI disk
    [ 3.134133] sdc: unknown partition table
    [ 3.135456] sdd: unknown partition table
    [ 3.135487] sd 2:0:0:0: [sdc] Attached SCSI disk
    [ 3.136456] sd 4:0:0:0: [sdd] Attached SCSI disk
    [ 3.138525] sdb: unknown partition table
    [ 3.139382] sd 1:0:0:0: [sdb] Attached SCSI disk
    [ 3.143991] sr0: scsi3-mmc drive: 1x/48x writer cd/rw xa/form2 cdda tray
    [ 3.144009] cdrom: Uniform CD-ROM driver Revision: 3.20
    [ 3.145875] sr 3:0:0:0: Attached scsi CD-ROM sr0
    [ 3.283989] device-mapper: uevent: version 1.0.3
    [ 3.284363] device-mapper: ioctl: 4.22.0-ioctl (2011-10-19) initialised: [email protected]
    [ 3.360761] EXT4-fs (sde3): INFO: recovery required on readonly filesystem
    [ 3.360771] EXT4-fs (sde3): write access will be enabled during recovery
    [ 3.703310] EXT4-fs (sde3): recovery complete
    [ 3.703711] EXT4-fs (sde3): mounted filesystem with ordered data mode. Opts: (null)
    [ 5.872439] udevd[356]: starting version 182
    [ 5.987333] input: Sleep Button as /devices/LNXSYSTM:00/device:00/PNP0C0E:00/input/input0
    [ 5.987361] ACPI: Sleep Button [SLPB]
    [ 5.987585] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input1
    [ 5.987600] ACPI: Power Button [PWRF]
    [ 6.015516] FDC 0 is a post-1991 82077
    [ 6.039298] agpgart-intel 0000:00:00.0: Intel 945G Chipset
    [ 6.039565] agpgart-intel 0000:00:00.0: detected gtt size: 131072K total, 131072K mappable
    [ 6.039806] agpgart-intel 0000:00:00.0: detected 8192K stolen memory
    [ 6.045341] r8169 Gigabit Ethernet driver 2.3LK-NAPI loaded
    [ 6.045543] r8169 0000:01:00.0: irq 43 for MSI/MSI-X
    [ 6.047332] r8169 0000:01:00.0: eth0: RTL8168c/8111c at 0xffffc90000350000, 00:27:0e:08:17:26, XID 1c4000c0 IRQ 43
    [ 6.047347] r8169 0000:01:00.0: eth0: jumbo features [frames: 6128 bytes, tx checksumming: ko]
    [ 6.047517] agpgart-intel 0000:00:00.0: AGP aperture is 128M @ 0x80000000
    [ 6.064277] usbcore: registered new interface driver usbfs
    [ 6.064399] usbcore: registered new interface driver hub
    [ 6.074606] usbcore: registered new device driver usb
    [ 6.093710] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
    [ 6.093975] ehci_hcd 0000:00:1d.7: setting latency timer to 64
    [ 6.093990] ehci_hcd 0000:00:1d.7: EHCI Host Controller
    [ 6.094157] ehci_hcd 0000:00:1d.7: new USB bus registered, assigned bus number 1
    [ 6.094233] ehci_hcd 0000:00:1d.7: using broken periodic workaround
    [ 6.094258] ehci_hcd 0000:00:1d.7: debug port 1
    [ 6.096239] intel_rng: Firmware space is locked read-only. If you can't or
    [ 6.096246] intel_rng: don't want to disable this in firmware setup, and if
    [ 6.096250] intel_rng: you are certain that your system has a functional
    [ 6.096254] intel_rng: RNG, try using the 'no_fwh_detect' option.
    [ 6.098182] ehci_hcd 0000:00:1d.7: cache line size of 64 is not supported
    [ 6.098251] ehci_hcd 0000:00:1d.7: irq 23, io mem 0x883a4000
    [ 6.106891] ehci_hcd 0000:00:1d.7: USB 2.0 started, EHCI 1.00
    [ 6.108800] hub 1-0:1.0: USB hub found
    [ 6.108829] hub 1-0:1.0: 8 ports detected
    [ 6.114693] uhci_hcd: USB Universal Host Controller Interface driver
    [ 6.114930] uhci_hcd 0000:00:1d.0: setting latency timer to 64
    [ 6.114943] uhci_hcd 0000:00:1d.0: UHCI Host Controller
    [ 6.115013] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2
    [ 6.115073] uhci_hcd 0000:00:1d.0: irq 23, io base 0x00003080
    [ 6.116010] md: bind<sdb>
    [ 6.116313] leds_ss4200: no LED devices found
    [ 6.121149] [drm] Initialized drm 1.1.0 20060810
    [ 6.129071] hub 2-0:1.0: USB hub found
    [ 6.129105] hub 2-0:1.0: 2 ports detected
    [ 6.129668] uhci_hcd 0000:00:1d.1: setting latency timer to 64
    [ 6.129682] uhci_hcd 0000:00:1d.1: UHCI Host Controller
    [ 6.129728] uhci_hcd 0000:00:1d.1: new USB bus registered, assigned bus number 3
    [ 6.129801] uhci_hcd 0000:00:1d.1: irq 19, io base 0x00003060
    [ 6.130542] hub 3-0:1.0: USB hub found
    [ 6.130566] hub 3-0:1.0: 2 ports detected
    [ 6.130984] uhci_hcd 0000:00:1d.2: setting latency timer to 64
    [ 6.130998] uhci_hcd 0000:00:1d.2: UHCI Host Controller
    [ 6.131046] uhci_hcd 0000:00:1d.2: new USB bus registered, assigned bus number 4
    [ 6.131152] uhci_hcd 0000:00:1d.2: irq 18, io base 0x00003040
    [ 6.135543] hub 4-0:1.0: USB hub found
    [ 6.135576] hub 4-0:1.0: 2 ports detected
    [ 6.138604] md: bind<sda>
    [ 6.141980] iTCO_vendor_support: vendor-support=0
    [ 6.143676] uhci_hcd 0000:00:1d.3: setting latency timer to 64
    [ 6.143688] uhci_hcd 0000:00:1d.3: UHCI Host Controller
    [ 6.143728] uhci_hcd 0000:00:1d.3: new USB bus registered, assigned bus number 5
    [ 6.143799] uhci_hcd 0000:00:1d.3: irq 16, io base 0x00003020
    [ 6.144926] iTCO_wdt: Intel TCO WatchDog Timer Driver v1.07
    [ 6.145255] iTCO_wdt: Found a ICH7 or ICH7R TCO device (Version=2, TCOBASE=0x0460)
    [ 6.145488] iTCO_wdt: initialized. heartbeat=30 sec (nowayout=0)
    [ 6.146421] hub 5-0:1.0: USB hub found
    [ 6.146443] hub 5-0:1.0: 2 ports detected
    [ 6.147012] snd_hda_intel 0000:00:1b.0: irq 44 for MSI/MSI-X
    [ 6.179903] input: PC Speaker as /devices/platform/pcspkr/input/input2
    [ 6.183546] md: bind<sdc>
    [ 6.197452] input: HDA Digital PCBeep as /devices/pci0000:00/0000:00:1b.0/input/input3
    [ 6.215986] md: bind<sdd>
    [ 6.234886] input: HDA Intel Line as /devices/pci0000:00/0000:00:1b.0/sound/card0/input4
    [ 6.237154] input: HDA Intel Front Mic as /devices/pci0000:00/0000:00:1b.0/sound/card0/input5
    [ 6.242659] input: HDA Intel Rear Mic as /devices/pci0000:00/0000:00:1b.0/sound/card0/input6
    [ 6.247410] input: HDA Intel Front Headphone as /devices/pci0000:00/0000:00:1b.0/sound/card0/input7
    [ 6.247627] input: HDA Intel Line Out as /devices/pci0000:00/0000:00:1b.0/sound/card0/input8
    [ 6.252088] i915 0000:00:02.0: setting latency timer to 64
    [ 6.296941] raid6: int64x1 269 MB/s
    [ 6.354237] raid6: int64x2 416 MB/s
    [ 6.357354] [drm] Supports vblank timestamp caching Rev 1 (10.10.2010).
    [ 6.357365] [drm] Driver supports precise vblank timestamp query.
    [ 6.357537] vgaarb: device changed decodes: PCI:0000:00:02.0,olddecodes=io+mem,decodes=io+mem:owns=io+mem
    [ 6.410098] raid6: int64x4 430 MB/s
    [ 6.466761] raid6: int64x8 472 MB/s
    [ 6.523430] raid6: sse2x1 596 MB/s
    [ 6.580084] raid6: sse2x2 1096 MB/s
    [ 6.586778] usb 3-2: new low-speed USB device number 2 using uhci_hcd
    [ 6.636699] raid6: sse2x4 1543 MB/s
    [ 6.636707] raid6: using algorithm sse2x4 (1543 MB/s)
    [ 6.638081] async_tx: api initialized (async)
    [ 6.639298] xor: automatically using best checksumming function: generic_sse
    [ 6.653360] generic_sse: 4777.200 MB/sec
    [ 6.653369] xor: using function: generic_sse (4777.200 MB/sec)
    [ 6.662829] md: raid6 personality registered for level 6
    [ 6.662838] md: raid5 personality registered for level 5
    [ 6.662843] md: raid4 personality registered for level 4
    [ 6.663610] bio: create slab <bio-1> at 1
    [ 6.663631] md/raid:md127: not clean -- starting background reconstruction
    [ 6.663682] md/raid:md127: device sdd operational as raid disk 3
    [ 6.663692] md/raid:md127: device sdc operational as raid disk 2
    [ 6.663701] md/raid:md127: device sda operational as raid disk 0
    [ 6.663709] md/raid:md127: device sdb operational as raid disk 1
    [ 6.664617] md/raid:md127: allocated 4300kB
    [ 6.664832] md/raid:md127: raid level 5 active with 4 out of 4 devices, algorithm 2
    [ 6.664839] RAID conf printout:
    [ 6.664843] --- level:5 rd:4 wd:4
    [ 6.664849] disk 0, o:1, dev:sda
    [ 6.664854] disk 1, o:1, dev:sdb
    [ 6.664858] disk 2, o:1, dev:sdc
    [ 6.664863] disk 3, o:1, dev:sdd
    [ 6.664967] md127: detected capacity change from 0 to 3000614387712
    [ 6.669170] md127: unknown partition table
    [ 6.797420] input: Microsoft Comfort Curve Keyboard 2000 as /devices/pci0000:00/0000:00:1d.1/usb3/3-2/3-2:1.0/input/input9
    [ 6.797905] generic-usb 0003:045E:00DD.0001: input,hidraw0: USB HID v1.11 Keyboard [Microsoft Comfort Curve Keyboard 2000] on usb-0000:00:1d.1-2/input0
    [ 6.821245] input: Microsoft Comfort Curve Keyboard 2000 as /devices/pci0000:00/0000:00:1d.1/usb3/3-2/3-2:1.1/input/input10
    [ 6.821839] generic-usb 0003:045E:00DD.0002: input,hidraw1: USB HID v1.11 Device [Microsoft Comfort Curve Keyboard 2000] on usb-0000:00:1d.1-2/input1
    [ 6.821926] usbcore: registered new interface driver usbhid
    [ 6.821934] usbhid: USB HID core driver
    [ 7.139480] [drm] initialized overlay support
    [ 7.359988] fbcon: inteldrmfb (fb0) is primary device
    [ 7.444647] Console: switching to colour frame buffer device 210x65
    [ 7.464949] fb0: inteldrmfb frame buffer device
    [ 7.464954] drm: registered panic notifier
    [ 7.465069] [drm] Initialized i915 1.6.0 20080730 for 0000:00:02.0 on minor 0
    [ 8.257757] EXT4-fs (sde3): re-mounted. Opts: discard
    [ 8.331371] EXT4-fs (sde1): mounted filesystem with ordered data mode. Opts: discard
    [ 8.359096] EXT4-fs (sde4): mounted filesystem with ordered data mode. Opts: discard
    [ 9.337971] r8169 0000:01:00.0: eth0: link down
    [ 9.337993] r8169 0000:01:00.0: eth0: link down
    [ 9.338818] ADDRCONF(NETDEV_UP): eth0: link is not ready
    [ 11.264950] r8169 0000:01:00.0: eth0: link up
    [ 11.265995] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
    [ 21.936743] eth0: no IPv6 routers present
    this machine has run for five years now. but here I'm stuck. The last message is from the SSHd being started. I can logon to it on a SSH but the machine itself won't start a shell..
    what's up?
    Last edited by theking2 (2012-05-23 09:36:02)

    @Gcool: no nothing happens it is the last line on the console. As it is normally a headless I don't have X11 active.
    I not always scrutinize the packets that are updated and do a pacman -Syu on a monthly basis.
    It boots to runlevel 3 which it does but than is stuck when the last daemon (successfully) loads
    It is a file server and I do use md and lvm2 though. My guess is that for some reason the system wasn't shutdown correctly causing the RAID5 to become instable and being resyncd as we speak. But I'm happy to already have the sshd working and could start repairs.
    the last bit of pacman.log:
    [2012-05-17 13:57] ==> Image generation successful
    [2012-05-17 13:57] upgraded linux (3.3.4-2 -> 3.3.6-1)
    [2012-05-17 13:57] upgraded linux-headers (3.3.4-2 -> 3.3.6-1)
    [2012-05-17 13:57] upgraded man-pages (3.39-1 -> 3.41-1)
    [2012-05-17 13:57] upgraded sqlite (3.7.11-2 -> 3.7.12-1)
    [2012-05-17 13:57] upgraded minidlna (1.0.24-3 -> 1.0.24-4)
    [2012-05-17 13:57] upgraded mpfr (3.1.0.p7-1 -> 3.1.0.p10-1)
    [2012-05-17 13:57] upgraded mpg123 (1.14.0-1 -> 1.14.2-1)
    [2012-05-17 13:57] upgraded perl-log-log4perl (1.35-1 -> 1.36-1)
    [2012-05-17 13:57] upgraded munin-node (1.4.6-2 -> 1.4.7-1)
    [2012-05-17 13:57] upgraded munin (1.4.6-2 -> 1.4.7-1)
    [2012-05-17 13:57] upgraded ntfs-3g (2012.1.15-2 -> 2012.1.15-3)
    [2012-05-17 13:58] upgraded openssl (1.0.1.b-1 -> 1.0.1.c-1)
    [2012-05-17 13:58] upgraded php (5.3.12-1 -> 5.4.3-1)
    [2012-05-17 13:58] upgraded php-apache (5.3.12-1 -> 5.4.3-1)
    [2012-05-17 13:58] upgraded powertop (1.13-3 -> 2.0-1)
    [2012-05-17 13:58] upgraded vim-runtime (7.3.495-3 -> 7.3.515-1)
    [2012-05-17 13:58] upgraded vim (7.3.495-3 -> 7.3.515-1)
    [2012-05-17 13:58] upgraded xterm (278-1 -> 279-1)
    [2012-05-17 15:06] Running 'pacman -S upower'
    [2012-05-17 15:06] installed polkit (0.105-1)
    [2012-05-17 15:06] installed pm-quirks (0.20100619-2)
    [2012-05-17 15:06] installed pm-utils (1.4.1-4)
    [2012-05-17 15:06] installed dbus-glib (0.98-1)
    [2012-05-17 15:06] installed usbmuxd (1.0.7-3)
    [2012-05-17 15:06] installed libplist (1.8-2)
    [2012-05-17 15:06] installed libimobiledevice (1.1.1-3)
    [2012-05-17 15:06] installed upower (0.9.16-1)
    [2012-05-17 16:11] Running 'pacman -S --asdeps perl-config-general libxslt'
    [2012-05-17 16:12] Running 'pacman -U /home/j/dev/tgt/perl_conig_general/perl-config-general/perl-config-general-2.50-2-x86_64.pkg.tar.xz'
    [2012-05-17 16:12] installed perl-config-general (2.50-2)
    [2012-05-17 16:12] Running 'pacman -S --asdeps libxslt'
    [2012-05-17 16:12] installed libxslt (1.1.26-3)
    [2012-05-17 16:21] Running 'pacman -U /home/j/dev/tgt/tgt/tgt-1.0.26-2-x86_64.pkg.tar.xz'
    [2012-05-17 16:22] installed tgt (1.0.26-2)
    [2012-05-17 16:38] Running 'pacman -S sg_inq'
    [2012-05-17 16:49] Running 'pacman -R iscsi-tgt'
    [2012-05-17 16:49] Running 'pacman -R tgt'
    [2012-05-17 16:49] warning: /etc/tgt/targets.conf saved as /etc/tgt/targets.conf.pacsave
    [2012-05-17 16:49] removed tgt (1.0.26-2)
    [2012-05-17 16:50] Running 'pacman -R perl-config-general libxslt'
    [2012-05-17 16:50] removed libxslt (1.1.26-3)
    [2012-05-17 16:50] removed perl-config-general (2.50-2)
    [2012-05-22 23:26] Running 'pacman -Syu'
    [2012-05-22 23:26] synchronizing package lists
    [2012-05-22 23:26] starting full system upgrade
    [2012-05-22 23:29] upgraded libcups (1.5.2-2 -> 1.5.3-1)
    [2012-05-22 23:29] upgraded libglapi (8.0.2-1 -> 8.0.3-1)
    [2012-05-22 23:29] upgraded libgl (8.0.2-1 -> 8.0.3-1)
    [2012-05-22 23:29] upgraded libnl (3.2.7-1 -> 3.2.9-1)
    [2012-05-22 23:29] upgraded mdadm (3.2.3-3 -> 3.2.4-1)
    [2012-05-22 23:29] upgraded sqlite (3.7.12-1 -> 3.7.12-2)
    [2012-05-22 23:30] upgraded subversion (1.7.4-3 -> 1.7.5-1)
    [2012-05-22 23:30] upgraded sudo (1.8.4.p4-1 -> 1.8.5.p1-1)

  • [SOLVED] X11 hid support broken on fresh macbook install

    Hi!
    The solution was elementary indeed, I was missing xf86-input-keyboard and xf86-input-mouse. (looooooooooool)
    What bugs me though, is how this could happen to an already working system. From what I remember I didn't touch those drivers on my previuos system, I guess I installed them and forgot about them, but why would they break from a system update? Anyway, I guess that's nobody's concern by now. Thread solved.
    Old title: X11 hid support completely broken after system update. Now, I've completely reinstalled the system but the error remains. Please read the post below.
    I've a problem with X11 support for input devices since running pacman -Syu 2 days ago. This post contains error logs and a description of my attempts to counter the problem. The hardware is a MacBook, first generation. I'm a novice linux user but seasoned with GNU and a quick learner. The solution to this might be simple, but google didn't give me anything usable. All forum threads I found were either unsolved or irrelevant. 
    This is what has passed. (long story short, may or may not be relevant, my current problem is explained below)
    * After the first reboot since the system update, X11 didn't give me anything except a movable cursor. The screen was completely black using the xmonad wm, and when using twm, it was completely distorted with blue patterns. I start searching for sources of the trouble.
    * ALSA and pommed complain about driver errors during boot. I can't read the messages because they skip by too quickly. I remove them from rc.conf because I prefer dealing with one problem at a time.
    * modprobe complained about framebuffer_blacklist.pacsave having an erroneous extension in /etc/modprobe.d. It actually loaded both the .conf and the .pacsave. I tried swapping between this .pacsave (is it the same or opposite of a .pacorig, btw?) and the .conf. Obviously modprobe stopped complaining when there was no erroneous extension, but I didn't notice it fixing anything else. I'm unsure whether the framebuffer is even relevant.
    * I decide that the problem didn't have anything to do with modprobe. I don't know what happened exactly during this phase, but for some strange reason, the graphics cease to be jumbled. twm starts the default programs, but is not interactive. I could move the mouse, but no mouse buttons were working. Keyboard not working at all.
    * I decide to wipe X11 and hal. I also rm -rf:ed /usr/share/hal, /etc/hal, /usr/share/X11 and /etc/X11 (yeah, I got angry).
    * Reinstalled X11 and hal. Also rm -rf:ed /usr/share/hal, /etc/X11 and /usr/share/X11 (I got really angry). Stuff works now! However, setxkbmap made everything break again, both mouse and keyboard. I read the output of startx and realise evdev hasn't been loaded, since /usr/share/X11/xkb/rules/evdev is missing. The whole folder structure /usr/share/X11/xkb is actually missing. I randomly hit the target and run pacman -S xkeyboard-configure, which creates the folder structure along with the evdev ruleset.
    * The keyboard does not work when using evdev. Temporarily renaming it so that it doesn't get loaded fixes the problem. If I'm not mistaken this makes X11 revert to not-hotplugged keyboard and mouse preferences in xorg.conf (which is auto-generated). The keyboard and mouse then works again (but, obviously, not setxkbmap, and I really need input hotplugging as a laptop user).
    * It's getting late, so I shutdown and go to bed.
    Waking up today, neither keyboard nor mouse is working - also when not using evdev! I've really no idea where to go from here. I've some output for you to analyze:
    xorg.conf (auto-generated except for some commented lines I tried)
    Section "ServerLayout"
    Identifier "X.org Configured"
    Screen 0 "Screen0" 0 0
    InputDevice "Mouse0" "CorePointer"
    InputDevice "Keyboard0" "CoreKeyboard"
    EndSection
    # Section "ServerFlags"
    # Option "AutoAddDevices" "True"
    # Option "AllowEmptyInput" "False"
    # EndSection
    Section "Files"
    ModulePath "/usr/lib/xorg/modules"
    FontPath "/usr/share/fonts/misc"
    FontPath "/usr/share/fonts/100dpi:unscaled"
    FontPath "/usr/share/fonts/75dpi:unscaled"
    FontPath "/usr/share/fonts/TTF"
    FontPath "/usr/share/fonts/Type1"
    EndSection
    Section "Module"
    Load "dbe"
    Load "glx"
    Load "extmod"
    Load "dri2"
    Load "dri"
    Load "record"
    EndSection
    Section "InputDevice"
    Identifier "Keyboard0"
    Driver "kbd"
    # Option "XkbOptions" "terminate:ctrl_alt_bksp" (this didn't work)
    EndSection
    Section "InputDevice"
    Identifier "Mouse0"
    Driver "mouse"
    Option "Protocol" "auto"
    Option "Device" "/dev/input/mice"
    Option "ZAxisMapping" "4 5 6 7"
    EndSection
    Section "Monitor"
    Identifier "Monitor0"
    VendorName "Monitor Vendor"
    ModelName "Monitor Model"
    EndSection
    Section "Device"
    ### Available Driver options are:-
    ### Values: <i>: integer, <f>: float, <bool>: "True"/"False",
    ### <string>: "String", <freq>: "<f> Hz/kHz/MHz"
    ### [arg]: arg optional
    #Option "NoAccel" # [<bool>]
    #Option "SWcursor" # [<bool>]
    #Option "ColorKey" # <i>
    #Option "CacheLines" # <i>
    #Option "Dac6Bit" # [<bool>]
    #Option "DRI" # [<bool>]
    #Option "NoDDC" # [<bool>]
    #Option "ShowCache" # [<bool>]
    #Option "XvMCSurfaces" # <i>
    #Option "PageFlip" # [<bool>]
    Identifier "Card0"
    Driver "intel"
    VendorName "Intel Corporation"
    BoardName "Mobile 945GM/GMS, 943/940GML Express Integrated Graphics Controller"
    BusID "PCI:0:2:0"
    EndSection
    Section "Screen"
    Identifier "Screen0"
    Device "Card0"
    Monitor "Monitor0"
    SubSection "Display"
    Viewport 0 0
    Depth 1
    EndSubSection
    SubSection "Display"
    Viewport 0 0
    Depth 4
    EndSubSection
    SubSection "Display"
    Viewport 0 0
    Depth 8
    EndSubSection
    SubSection "Display"
    Viewport 0 0
    Depth 15
    EndSubSection
    SubSection "Display"
    Viewport 0 0
    Depth 16
    EndSubSection
    SubSection "Display"
    Viewport 0 0
    Depth 24
    EndSubSection
    EndSection
    Xorg.0.log
    X.Org X Server 1.6.2
    Release Date: 2009-7-7
    X Protocol Version 11, Revision 0
    Build Operating System: Linux 2.6.30-ARCH i686
    Current Operating System: Linux robban 2.6.30-ARCH #1 SMP PREEMPT Sat Jul 4 11:13:08 UTC 2009 i686
    Build Date: 18 July 2009 08:27:13PM
    Before reporting problems, check http://wiki.x.org
    to make sure that you have the latest version.
    Markers: (--) probed, (**) from config file, (==) default setting,
    (++) from command line, (!!) notice, (II) informational,
    (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
    (==) Log file: "/var/log/Xorg.0.log", Time: Wed Jul 22 18:07:42 2009
    (==) Using config file: "/etc/X11/xorg.conf"
    (==) ServerLayout "X.org Configured"
    (**) |-->Screen "Screen0" (0)
    (**) | |-->Monitor "Monitor0"
    (**) | |-->Device "Card0"
    (**) |-->Input Device "Mouse0"
    (**) |-->Input Device "Keyboard0"
    (==) Automatically adding devices
    (==) Automatically enabling devices
    (**) FontPath set to:
    /usr/share/fonts/misc,
    /usr/share/fonts/100dpi:unscaled,
    /usr/share/fonts/75dpi:unscaled,
    /usr/share/fonts/TTF,
    /usr/share/fonts/Type1,
    /usr/share/fonts/misc,
    /usr/share/fonts/100dpi:unscaled,
    /usr/share/fonts/75dpi:unscaled,
    /usr/share/fonts/TTF,
    /usr/share/fonts/Type1,
    built-ins
    (**) ModulePath set to "/usr/lib/xorg/modules"
    (WW) AllowEmptyInput is on, devices using drivers 'kbd', 'mouse' or 'vmmouse' will be disabled.
    (WW) Disabling Mouse0
    (WW) Disabling Keyboard0
    (II) Loader magic: 0x7a40
    (II) Module ABI versions:
    X.Org ANSI C Emulation: 0.4
    X.Org Video Driver: 5.0
    X.Org XInput driver : 4.0
    X.Org Server Extension : 2.0
    (II) Loader running on linux
    (--) using VT number 7
    (--) PCI:*(0:0:2:0) 8086:27a2:8086:7270 Intel Corporation Mobile 945GM/GMS, 943/940GML Express Integrated Graphics Controller rev 3, Mem @ 0x90380000/524288, 0x80000000/268435456, 0x90400000/262144, I/O @ 0x000020f0/8
    (--) PCI: (0:0:2:1) 8086:27a6:8086:7270 Intel Corporation Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller rev 3, Mem @ 0x90300000/524288
    (WW) Open ACPI failed (/var/run/acpid.socket) (No such file or directory)
    (II) No APM support in BIOS or kernel
    (II) System resource ranges:
    [0] -1 0 0xffffffff - 0xffffffff (0x1) MX[b]
    [1] -1 0 0x000f0000 - 0x000fffff (0x10000) MX[b]
    [2] -1 0 0x000c0000 - 0x000effff (0x30000) MX[b]
    [3] -1 0 0x00000000 - 0x0009ffff (0xa0000) MX[b]
    [4] -1 0 0x0000ffff - 0x0000ffff (0x1) IX[b]
    [5] -1 0 0x00000000 - 0x00000000 (0x1) IX[b]
    (II) "extmod" will be loaded. This was enabled by default and also specified in the config file.
    (II) "dbe" will be loaded. This was enabled by default and also specified in the config file.
    (II) "glx" will be loaded. This was enabled by default and also specified in the config file.
    (II) "record" will be loaded. This was enabled by default and also specified in the config file.
    (II) "dri" will be loaded. This was enabled by default and also specified in the config file.
    (II) "dri2" will be loaded. This was enabled by default and also specified in the config file.
    (II) LoadModule: "dbe"
    (II) Loading /usr/lib/xorg/modules/extensions//libdbe.so
    (II) Module dbe: vendor="X.Org Foundation"
    compiled for 1.6.2, module version = 1.0.0
    Module class: X.Org Server Extension
    ABI class: X.Org Server Extension, version 2.0
    (II) Loading extension DOUBLE-BUFFER
    (II) LoadModule: "glx"
    (II) Loading /usr/lib/xorg/modules/extensions//libglx.so
    (II) Module glx: vendor="X.Org Foundation"
    compiled for 1.6.2, module version = 1.0.0
    ABI class: X.Org Server Extension, version 2.0
    (==) AIGLX enabled
    (II) Loading extension GLX
    (II) LoadModule: "extmod"
    (II) Loading /usr/lib/xorg/modules/extensions//libextmod.so
    (II) Module extmod: vendor="X.Org Foundation"
    compiled for 1.6.2, module version = 1.0.0
    Module class: X.Org Server Extension
    ABI class: X.Org Server Extension, version 2.0
    (II) Loading extension MIT-SCREEN-SAVER
    (II) Loading extension XFree86-VidModeExtension
    (II) Loading extension XFree86-DGA
    (II) Loading extension DPMS
    (II) Loading extension XVideo
    (II) Loading extension XVideo-MotionCompensation
    (II) Loading extension X-Resource
    (II) LoadModule: "dri2"
    (II) Loading /usr/lib/xorg/modules/extensions//libdri2.so
    (II) Module dri2: vendor="X.Org Foundation"
    compiled for 1.6.2, module version = 1.1.0
    ABI class: X.Org Server Extension, version 2.0
    (II) Loading extension DRI2
    (II) LoadModule: "dri"
    (II) Loading /usr/lib/xorg/modules/extensions//libdri.so
    (II) Module dri: vendor="X.Org Foundation"
    compiled for 1.6.2, module version = 1.0.0
    ABI class: X.Org Server Extension, version 2.0
    (II) Loading extension XFree86-DRI
    (II) LoadModule: "record"
    (II) Loading /usr/lib/xorg/modules/extensions//librecord.so
    (II) Module record: vendor="X.Org Foundation"
    compiled for 1.6.2, module version = 1.13.0
    Module class: X.Org Server Extension
    ABI class: X.Org Server Extension, version 2.0
    (II) Loading extension RECORD
    (II) LoadModule: "intel"
    (II) Loading /usr/lib/xorg/modules/drivers//intel_drv.so
    (II) Module intel: vendor="X.Org Foundation"
    compiled for 1.6.2, module version = 2.7.99
    Module class: X.Org Video Driver
    ABI class: X.Org Video Driver, version 5.0
    (II) intel: Driver for Intel Integrated Graphics Chipsets: i810,
    i810-dc100, i810e, i815, i830M, 845G, 852GM/855GM, 865G, 915G,
    E7221 (i915), 915GM, 945G, 945GM, 945GME, IGD_GM, IGD_G, 965G, G35,
    965Q, 946GZ, 965GM, 965GME/GLE, G33, Q35, Q33,
    Mobile Intel® GM45 Express Chipset,
    Intel Integrated Graphics Device, G45/G43, Q45/Q43, G41, IGDNG_D,
    IGDNG_M
    (II) Primary Device is: PCI 00@00:02:0
    (II) resource ranges after xf86ClaimFixedResources() call:
    [0] -1 0 0xffffffff - 0xffffffff (0x1) MX[b]
    [1] -1 0 0x000f0000 - 0x000fffff (0x10000) MX[b]
    [2] -1 0 0x000c0000 - 0x000effff (0x30000) MX[b]
    [3] -1 0 0x00000000 - 0x0009ffff (0xa0000) MX[b]
    [4] -1 0 0x0000ffff - 0x0000ffff (0x1) IX[b]
    [5] -1 0 0x00000000 - 0x00000000 (0x1) IX[b]
    (II) resource ranges after probing:
    [0] -1 0 0xffffffff - 0xffffffff (0x1) MX[b]
    [1] -1 0 0x000f0000 - 0x000fffff (0x10000) MX[b]
    [2] -1 0 0x000c0000 - 0x000effff (0x30000) MX[b]
    [3] -1 0 0x00000000 - 0x0009ffff (0xa0000) MX[b]
    [4] 0 0 0x000a0000 - 0x000affff (0x10000) MS[b]
    [5] 0 0 0x000b0000 - 0x000b7fff (0x8000) MS[b]
    [6] 0 0 0x000b8000 - 0x000bffff (0x8000) MS[b]
    [7] -1 0 0x0000ffff - 0x0000ffff (0x1) IX[b]
    [8] -1 0 0x00000000 - 0x00000000 (0x1) IX[b]
    [9] 0 0 0x000003b0 - 0x000003bb (0xc) IS[b]
    [10] 0 0 0x000003c0 - 0x000003df (0x20) IS[b]
    (II) Loading sub module "vgahw"
    (II) LoadModule: "vgahw"
    (II) Loading /usr/lib/xorg/modules//libvgahw.so
    (II) Module vgahw: vendor="X.Org Foundation"
    compiled for 1.6.2, module version = 0.1.0
    ABI class: X.Org Video Driver, version 5.0
    (II) Loading sub module "ramdac"
    (II) LoadModule: "ramdac"
    (II) Module "ramdac" already built-in
    drmOpenDevice: node name is /dev/dri/card0
    drmOpenDevice: open result is 7, (OK)
    drmOpenByBusid: Searching for BusID pci:0000:00:02.0
    drmOpenDevice: node name is /dev/dri/card0
    drmOpenDevice: open result is 7, (OK)
    drmOpenByBusid: drmOpenMinor returns 7
    drmOpenByBusid: drmGetBusid reports pci:0000:00:02.0
    (==) intel(0): Depth 24, (--) framebuffer bpp 32
    (==) intel(0): RGB weight 888
    (==) intel(0): Default visual is TrueColor
    (II) intel(0): Integrated Graphics Chipset: Intel(R) 945GM
    (--) intel(0): Chipset: "945GM"
    (--) intel(0): Linear framebuffer at 0x80000000
    (--) intel(0): IO registers at addr 0x90380000 size 524288
    (WW) intel(0): libpciaccess reported 0 rom size, guessing 64kB
    (II) intel(0): the SDVO device with slave addr 70 is found on DVO 1 port
    (II) intel(0): 2 display pipes available.
    (II) Loading sub module "ddc"
    (II) LoadModule: "ddc"
    (II) Module "ddc" already built-in
    (II) Loading sub module "i2c"
    (II) LoadModule: "i2c"
    (II) Module "i2c" already built-in
    (II) intel(0): Output VGA using monitor section Monitor0
    (II) intel(0): Output LVDS has no monitor section
    (II) intel(0): I2C bus "LVDSDDC_C" initialized.
    (II) intel(0): Attempting to determine panel fixed mode.
    (II) intel(0): I2C device "LVDSDDC_C:E-EDID segment register" registered at address 0x60.
    (II) intel(0): I2C device "LVDSDDC_C:ddc2" registered at address 0xA0.
    (II) intel(0): EDID vendor "APP", prod id 40028
    (II) intel(0): I2C bus "SDVOCTRL_E for SDVOB" initialized.
    (II) intel(0): I2C device "SDVOCTRL_E for SDVOB:SDVO Controller B" registered at address 0x70.
    (II) intel(0): I2C bus "SDVOB DDC Bus" initialized.
    (II) intel(0): Output TMDS-1 has no monitor section
    (II) intel(0): SDVOB: device VID/DID: 04:AA.03, clock range 25.0MHz - 165.0MHz
    (II) intel(0): SDVOB: 1 input channel
    (II) intel(0): SDVOB: TMDS0 output reported
    (II) intel(0): I2C bus "SDVOCTRL_E for SDVOC" initialized.
    (II) intel(0): I2C device "SDVOCTRL_E for SDVOC:SDVO Controller C" registered at address 0x72.
    (II) intel(0): No SDVO device found on SDVOC
    (II) intel(0): I2C device "SDVOCTRL_E for SDVOC:SDVO Controller C" removed.
    (II) intel(0): I2C bus "SDVOCTRL_E for SDVOC" removed.
    (II) intel(0): Output TV has no monitor section
    (II) intel(0): Current clock rate multiplier: 1
    (II) intel(0): EDID vendor "APP", prod id 40028
    (II) intel(0): Output VGA disconnected
    (II) intel(0): Output LVDS connected
    (II) intel(0): Output TMDS-1 disconnected
    (II) intel(0): Output TV disconnected
    (II) intel(0): Using exact sizes for initial modes
    (II) intel(0): Output LVDS using initial mode 1280x800
    (II) intel(0): detected 256 kB GTT.
    (II) intel(0): detected 16124 kB stolen memory.
    (==) intel(0): video overlay key set to 0x101fe
    (==) intel(0): Using gamma correction (1.0, 1.0, 1.0)
    (==) intel(0): DPI set to (96, 96)
    (II) Loading sub module "fb"
    (II) LoadModule: "fb"
    (II) Loading /usr/lib/xorg/modules//libfb.so
    (II) Module fb: vendor="X.Org Foundation"
    compiled for 1.6.2, module version = 1.0.0
    ABI class: X.Org ANSI C Emulation, version 0.4
    (II) intel(0): Comparing regs from server start up to After PreInit
    (WW) intel(0): Register 0x61200 (PP_STATUS) changed from 0xc0000008 to 0xd0000009
    (WW) intel(0): PP_STATUS before: on, ready, sequencing idle
    (WW) intel(0): PP_STATUS after: on, ready, sequencing on
    (WW) intel(0): Register 0x61110 (PORT_HOTPLUG_EN) changed from 0x00000000 to 0x00000020
    (WW) intel(0): Register 0x61114 (PORT_HOTPLUG_STAT) changed from 0x00000000 to 0x00000400
    (WW) intel(0): Register 0x70024 (PIPEASTAT) changed from 0x00000000 to 0x00000203
    (WW) intel(0): PIPEASTAT before: status:
    (WW) intel(0): PIPEASTAT after: status: VSYNC_INT_STATUS VBLANK_INT_STATUS OREG_UPDATE_STATUS
    (WW) intel(0): Register 0x71024 (PIPEBSTAT) changed from 0x00000202 to 0x80000202
    (WW) intel(0): PIPEBSTAT before: status: VSYNC_INT_STATUS VBLANK_INT_STATUS
    (WW) intel(0): PIPEBSTAT after: status: FIFO_UNDERRUN VSYNC_INT_STATUS VBLANK_INT_STATUS
    (==) Depth 24 pixmap format is 32 bpp
    (II) do I need RAC? No, I don't.
    (II) resource ranges after preInit:
    [0] -1 0 0xffffffff - 0xffffffff (0x1) MX[b]
    [1] -1 0 0x000f0000 - 0x000fffff (0x10000) MX[b]
    [2] -1 0 0x000c0000 - 0x000effff (0x30000) MX[b]
    [3] -1 0 0x00000000 - 0x0009ffff (0xa0000) MX[b]
    [4] 0 0 0x000a0000 - 0x000affff (0x10000) MS[b](OprD)
    [5] 0 0 0x000b0000 - 0x000b7fff (0x8000) MS[b](OprD)
    [6] 0 0 0x000b8000 - 0x000bffff (0x8000) MS[b](OprD)
    [7] -1 0 0x0000ffff - 0x0000ffff (0x1) IX[b]
    [8] -1 0 0x00000000 - 0x00000000 (0x1) IX[b]
    [9] 0 0 0x000003b0 - 0x000003bb (0xc) IS[b](OprU)
    [10] 0 0 0x000003c0 - 0x000003df (0x20) IS[b](OprU)
    (II) intel(0): Kernel reported 483584 total, 1 used
    (II) intel(0): I830CheckAvailableMemory: 1934332 kB available
    (II) intel(0): [DRI2] Setup complete
    (**) intel(0): Framebuffer compression enabled
    (**) intel(0): Tiling enabled
    (**) intel(0): SwapBuffers wait enabled
    (==) intel(0): VideoRam: 262144 KB
    (II) intel(0): Attempting memory allocation with tiled buffers.
    (II) intel(0): Tiled allocation successful.
    (II) intel(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0, hwp->PIOOffset is 0x0000
    (II) UXA(0): Driver registered support for the following operations:
    (II) solid
    (II) copy
    (II) composite (RENDER acceleration)
    (==) intel(0): Backing store disabled
    (==) intel(0): Silken mouse enabled
    (II) intel(0): Initializing HW Cursor
    (II) intel(0): Current clock rate multiplier: 1
    (II) intel(0): adjusting plane->pipe mappings to allow for framebuffer compression
    (II) intel(0): Fixed memory allocation layout:
    (II) intel(0): 0x00000000-0x005fffff: compressed frame buffer (6144 kB, 0x000000007f000000 physical
    (II) intel(0): 0x00600000-0x00600fff: compressed ll buffer (4 kB, 0x000000007f600000 physical
    (II) intel(0): 0x00601000-0x0060afff: HW cursors (40 kB, 0x000000007f601000 physical
    (II) intel(0): 0x0060b000-0x0060bfff: overlay registers (4 kB, 0x000000007f60b000 physical
    (II) intel(0): 0x00fbf000: end of stolen memory
    (II) intel(0): 0x00fbf000-0x0f9f3fff: DRI memory manager (239828 kB)
    (II) intel(0): 0x10000000: end of aperture
    (II) intel(0): BO memory allocation layout:
    (II) intel(0): 0x00fbf000: start of memory manager
    (II) intel(0): 0x01000000-0x017fffff: front buffer (8192 kB) X tiled
    (II) intel(0): 0x0f9f4000: end of memory manager
    (WW) intel(0): ESR is 0x00000010, page table error
    (WW) intel(0): PGTBL_ER is 0x00000102, host pte data, display B pte
    (WW) intel(0): Existing errors found in hardware state.
    (II) intel(0): Selecting standard 18 bit TMDS pixel format.
    (II) intel(0): Output configuration:
    (II) intel(0): Pipe A is off
    (II) intel(0): Display plane B is now disabled and connected to pipe A.
    (II) intel(0): Pipe B is on
    (II) intel(0): Display plane A is now enabled and connected to pipe B.
    (II) intel(0): Output VGA is connected to pipe none
    (II) intel(0): Output LVDS is connected to pipe B
    (II) intel(0): Output TMDS-1 is connected to pipe none
    (II) intel(0): Output TV is connected to pipe none
    (II) intel(0): RandR 1.2 enabled, ignore the following RandR disabled message.
    (II) intel(0): DPMS enabled
    (==) intel(0): Intel XvMC decoder disabled
    (II) intel(0): Set up textured video
    (II) intel(0): Set up overlay video
    (II) intel(0): direct rendering: DRI2 Enabled
    (--) RandR disabled
    (II) Initializing built-in extension Generic Event Extension
    (II) Initializing built-in extension SHAPE
    (II) Initializing built-in extension MIT-SHM
    (II) Initializing built-in extension XInputExtension
    (II) Initializing built-in extension XTEST
    (II) Initializing built-in extension BIG-REQUESTS
    (II) Initializing built-in extension SYNC
    (II) Initializing built-in extension XKEYBOARD
    (II) Initializing built-in extension XC-MISC
    (II) Initializing built-in extension SECURITY
    (II) Initializing built-in extension XINERAMA
    (II) Initializing built-in extension XFIXES
    (II) Initializing built-in extension RENDER
    (II) Initializing built-in extension RANDR
    (II) Initializing built-in extension COMPOSITE
    (II) Initializing built-in extension DAMAGE
    (II) AIGLX: enabled GLX_MESA_copy_sub_buffer
    (II) AIGLX: enabled GLX_SGI_swap_control and GLX_MESA_swap_control
    (II) AIGLX: GLX_EXT_texture_from_pixmap backed by buffer objects
    (II) AIGLX: Loaded and initialized /usr/lib/xorg/modules/dri/i915_dri.so
    (II) GLX: Initialized DRI2 GL provider for screen 0
    (II) intel(0): Setting screen physical size to 286 x 179
    (II) config/hal: Adding input device Macintosh mouse button emulation
    (II) LoadModule: "evdev"
    (II) Loading /usr/lib/xorg/modules/input//evdev_drv.so
    (II) Module evdev: vendor="X.Org Foundation"
    compiled for 1.6.1, module version = 2.2.2
    Module class: X.Org XInput Driver
    ABI class: X.Org XInput driver, version 4.0
    (**) Macintosh mouse button emulation: always reports core events
    (**) Macintosh mouse button emulation: Device: "/dev/input/event0"
    (II) Macintosh mouse button emulation: Found 3 mouse buttons
    (II) Macintosh mouse button emulation: Found x and y relative axes
    (II) Macintosh mouse button emulation: Configuring as mouse
    (**) Macintosh mouse button emulation: YAxisMapping: buttons 4 and 5
    (**) Macintosh mouse button emulation: EmulateWheelButton: 4, EmulateWheelInertia: 10, EmulateWheelTimeout: 200
    (II) XINPUT: Adding extended input device "Macintosh mouse button emulation" (type: MOUSE)
    (**) Macintosh mouse button emulation: (accel) keeping acceleration scheme 1
    (**) Macintosh mouse button emulation: (accel) filter chain progression: 2.00
    (**) Macintosh mouse button emulation: (accel) filter stage 0: 20.00 ms
    (**) Macintosh mouse button emulation: (accel) set acceleration profile 0
    (II) config/hal: Adding input device HID 05ac:1000
    (**) HID 05ac:1000: always reports core events
    (**) HID 05ac:1000: Device: "/dev/input/event2"
    (II) HID 05ac:1000: Found 5 mouse buttons
    (II) HID 05ac:1000: Found x and y relative axes
    (II) HID 05ac:1000: Configuring as mouse
    (**) HID 05ac:1000: YAxisMapping: buttons 4 and 5
    (**) HID 05ac:1000: EmulateWheelButton: 4, EmulateWheelInertia: 10, EmulateWheelTimeout: 200
    (II) XINPUT: Adding extended input device "HID 05ac:1000" (type: MOUSE)
    (**) HID 05ac:1000: (accel) keeping acceleration scheme 1
    (**) HID 05ac:1000: (accel) filter chain progression: 2.00
    (**) HID 05ac:1000: (accel) filter stage 0: 20.00 ms
    (**) HID 05ac:1000: (accel) set acceleration profile 0
    (II) config/hal: Adding input device HID 05ac:1000
    (**) HID 05ac:1000: always reports core events
    (**) HID 05ac:1000: Device: "/dev/input/event1"
    (II) HID 05ac:1000: Found keys
    (II) HID 05ac:1000: Configuring as keyboard
    (II) XINPUT: Adding extended input device "HID 05ac:1000" (type: KEYBOARD)
    (**) Option "xkb_rules" "evdev"
    (**) Option "xkb_model" "evdev"
    (**) Option "xkb_layout" "us"
    (II) config/hal: Adding input device Apple Computer Apple Internal Keyboard / Trackpad
    (**) Apple Computer Apple Internal Keyboard / Trackpad: always reports core events
    (**) Apple Computer Apple Internal Keyboard / Trackpad: Device: "/dev/input/event3"
    (II) Apple Computer Apple Internal Keyboard / Trackpad: Found keys
    (II) Apple Computer Apple Internal Keyboard / Trackpad: Configuring as keyboard
    (II) XINPUT: Adding extended input device "Apple Computer Apple Internal Keyboard / Trackpad" (type: KEYBOARD)
    (**) Option "xkb_rules" "evdev"
    (**) Option "xkb_model" "evdev"
    (**) Option "xkb_layout" "us"
    (II) config/hal: Adding input device Video Bus
    (**) Video Bus: always reports core events
    (**) Video Bus: Device: "/dev/input/event15"
    (II) Video Bus: Found keys
    (II) Video Bus: Configuring as keyboard
    (II) XINPUT: Adding extended input device "Video Bus" (type: KEYBOARD)
    (**) Option "xkb_rules" "evdev"
    (**) Option "xkb_model" "evdev"
    (**) Option "xkb_layout" "us"
    (WW) Apple Computer Apple Internal Keyboard / Trackpad: unable to handle keycode 464
    (II) Macintosh mouse button emulation: Close
    (II) UnloadModule: "evdev"
    (II) HID 05ac:1000: Close
    (II) UnloadModule: "evdev"
    (II) HID 05ac:1000: Close
    (II) UnloadModule: "evdev"
    (II) Apple Computer Apple Internal Keyboard / Trackpad: Close
    (II) UnloadModule: "evdev"
    (II) Video Bus: Close
    (II) UnloadModule: "evdev"
    startx_output.log (generated from startx &> startx_output.log)
    hostname: Host name lookup failure
    xauth: creating new authority file /root/.serverauth.5083
    X.Org X Server 1.6.2
    Release Date: 2009-7-7
    X Protocol Version 11, Revision 0
    Build Operating System: Linux 2.6.30-ARCH i686
    Current Operating System: Linux robban 2.6.30-ARCH #1 SMP PREEMPT Sat Jul 4 11:13:08 UTC 2009 i686
    Build Date: 18 July 2009 08:27:13PM
    Before reporting problems, check http://wiki.x.org
    to make sure that you have the latest version.
    Markers: (--) probed, (**) from config file, (==) default setting,
    (++) from command line, (!!) notice, (II) informational,
    (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
    (==) Log file: "/var/log/Xorg.0.log", Time: Wed Jul 22 18:07:42 2009
    (==) Using config file: "/etc/X11/xorg.conf"
    Setting master
    expected keysym, got XF86_Switch_VT_1: line 8 of xfree86
    expected keysym, got XF86_Switch_VT_2: line 11 of xfree86
    expected keysym, got XF86_Switch_VT_3: line 14 of xfree86
    expected keysym, got XF86_Switch_VT_4: line 17 of xfree86
    expected keysym, got XF86_Switch_VT_5: line 20 of xfree86
    / ... (There are literally hundreds of lines like this, so I'm cutting most of them) ... /
    The XKEYBOARD keymap compiler (xkbcomp) reports:
    > Warning: Multiple interpretations of "NoSymbol+AnyOfOrNone(all)"
    > Using last definition for duplicate fields
    / ... (The above two lines repeated about 20 times) .../
    expected keysym, got XF86Display: line 68 of pc
    expected keysym, got XF86KbdLightOnOff: line 69 of pc
    expected keysym, got XF86KbdBrightnessDown: line 70 of pc
    expected keysym, got XF86_Ungrab: line 90 of keypad
    expected keysym, got XF86_ClearGrab: line 96 of keypad
    expected keysym, got XF86AudioMedia: line 26 of inet
    expected keysym, got XF86AudioPrev: line 27 of inet
    expected keysym, got XF86MonBrightnessUp: line 1806 of inet
    expected keysym, got XF86MonBrightnessDown: line 1807 of inet
    Errors from xkbcomp are not fatal to the X server
    expected keysym, got XF86_Switch_VT_1: line 8 of xfree86
    expected keysym, got XF86_Switch_VT_2: line 11 of xfree86
    expected keysym, got XF86_Prev_VMode: line 54 of xfree86
    The XKEYBOARD keymap compiler (xkbcomp) reports:
    > Warning: Multiple interpretations of "NoSymbol+AnyOfOrNone(all)"
    > Using last definition for duplicate fields
    / ... (Above two lines repeated alot again) ... /
    / ... (What looks like everything above repeated once) ... /
    expected keysym, got XF86MonBrightnessUp: line 1806 of inet
    expected keysym, got XF86MonBrightnessDown: line 1807 of inet
    Errors from xkbcomp are not fatal to the X server
    /root/.xmonad/xmonad-i386-linux: executeFile: does not exist (No such file or directory)
    [i](Yeah, I know this is bad, but twm doesn't work either. I'm quite sure it has nothing to do with xmonad)[/i]
    Warning: locale not supported by Xlib, locale set to C
    Warning: X locale modifiers not supported, using default
    Failed to open input method
    Warning: locale not supported by Xlib, locale set to C
    Warning: X locale modifiers not supported, using default
    Failed to open input method
    XIO: fatal IO error 11 (Resource temporarily unavailable) on X server ":0.0"
    after 662 requests (662 known processed) with 5 events remaining.
    [i](This is from "killall X". My xinitrc has "sleep 8;killall X" appended since these problems started appearing)[/i]
    xterm: fatal IO error 11 (Resource temporarily unavailable) or KillClient on X server ":0.0"
    xinit: connection to X server lost.
    waiting for X server to shut down .Dropping master
    error setting MTRR (base = 0x80000000, size = 0x10000000, type = 1) Invalid argument (22)
    Output of pacman -Q: (maybe there are some conflicting drivers or something?)
    a52dec 0.7.4-4
    aalib 1.4rc5-6
    acl 2.2.47-2
    alsa-lib 1.0.20-1
    alsa-oss 1.0.17-1
    alsa-utils 1.0.20-2
    apache 2.2.11-3
    apr 1.3.5-1
    apr-util 1.3.7-1
    aspell 0.60.6-4
    at-spi 1.26.0-1
    atk 1.26.0-1
    attr 2.4.43-1
    aubio 0.3.2-3
    audiofile 0.2.6-4
    autoconf 2.63-1
    automake 1.11-1
    avahi 0.6.25-1
    bash 4.0.024-1
    bin86 0.16.17-4
    binutils 2.19.1-5
    bison 2.4.1-1
    blas 20070405-2
    bluez 4.39-1
    bzip2 1.0.5-4
    ca-certificates 20090709-1
    cabextract 1.2-2
    cairo 1.8.8-1
    cairomm 1.8.2-1
    cdargs 1.35-2
    cdparanoia 10.2-2
    chmlib 0.40-1
    cloog-ppl 0.15.3-1
    compositeproto 0.4-2
    confuse 2.6-1
    consolekit 0.3.0-5
    coreutils 7.4-1
    cpio 2.9-5
    cpufrequtils 005-2
    cracklib 2.8.13-2
    cryptsetup 1.0.6-3
    csup 20060318-5
    curl 7.19.5-2
    damageproto 1.1.0-2
    dash 0.5.5.1-2
    db 4.7.25.4-1
    db4.1 4.1.25-2
    dbus 1.2.14-1
    dbus-core 1.2.14-1
    dbus-glib 0.80-1
    dcron 3.2-4
    desktop-file-utils 0.15-1
    device-mapper 1.02.33-1
    dhcpcd 5.0.6-1
    dialog 1.1_20080819-2
    diffutils 2.8.1-6
    dmapi 2.2.10-1
    dmenu 4.0-1
    dmidecode 2.10-1
    dmxproto 2.2.2-2
    docbook-xml 4.5-2
    doxygen 1.5.9-1
    dri2proto 2.1-1
    dwm 5.6-1
    dzen2 0.8.5-4
    e2fsprogs 1.41.8-1
    ed 1.3-1
    eject 2.1.5-4
    emacs 22.3-2
    enca 1.9-4
    enchant 1.4.2-1
    esound 0.2.41-1
    eventlog 0.2.9-1
    exempi 2.1.0-1
    exiv2 0.18-1
    expat 2.0.1-2
    faac 1.28-1
    faad2 2.7-1
    fakeroot 1.12.4-1
    fam 2.7.0-14
    feh 1.3.4-5
    ffmpeg 0.5-1
    fftw 3.2.1-1
    file 5.03-2
    filesystem 2009.01-2
    findutils 4.4.2-1
    firefox 3.5.1-1
    fixesproto 4.0-3
    flac 1.2.1-1
    flashplugin 10.0.22.87-1
    flex 2.5.35-3
    fluidsynth 1.0.9-1
    fontcacheproto 0.1.2-2
    fontconfig 2.6.0-2
    fontsproto 2.0.2-2
    fox 1.6.36-1
    freetype2 2.3.9-2
    fribidi 0.19.2-1
    fuse 2.7.4-3
    gawk 3.1.6-3
    gc 7.1-1
    gcc 4.4.0-5.1
    gcc-libs 4.4.0-5
    gconf 2.26.2-2
    gdbm 1.8.3-6
    gen-init-cpio 2.6.17-3
    gettext 0.17-3
    ghc 6.10.3-1
    giblib 1.2.4-4
    giflib 4.1.6-3
    glib 1.2.10-7
    glib2 2.20.4-1
    glibc 2.10.1-3
    glibmm 2.20.1-1
    gmp 4.3.1-2
    gmrun 0.9.2-2
    gnutls 2.8.1-1
    gpm 1.20.6-1
    grep 2.5.4-3
    groff 1.20.1-2
    grub 0.97-15
    gsfonts 8.11-5
    gstreamer0.10 0.10.23-1
    gstreamer0.10-base 0.10.23-1
    gstreamer0.10-base-plugins 0.10.23-2
    gstreamer0.10-ffmpeg 0.10.7-1
    gstreamer0.10-good 0.10.15-1
    gtk 1.2.10-9
    gtk-engines 2.18.2-1
    gtk2 2.16.5-1
    gtkmm 2.16.0-1
    gvim 7.2.65-1
    gzip 1.3.12-6
    hal 0.5.12git20090421.4fc367-2
    hal-info 0.20090414-1
    haskell-utf8-string 0.3.5-1
    haskell-x11 1.4.5-1.2
    haskell-x11-xft 0.3-5
    hdparm 9.15-1
    heimdal 1.2.1-5
    herrie 2.2-2
    hicolor-icon-theme 0.10-2
    hunspell 1.2.8-1
    hwdetect 2009.07-1
    imlib2 1.4.2-3
    initscripts 2009.03-2
    inputproto 1.5.0-1
    intel-dri 7.5-1
    iputils 20071127-2
    irssi 0.8.13-1
    iso-codes 3.10.1-1
    jack-audio-connection-kit 0.116.2-2
    jdk 6u14-1
    jfsutils 1.1.14-1
    jre 6u14-1
    kbd 1.15-1
    kbproto 1.0.3-2
    kernel-headers 2.6.30.1-1
    kernel26 2.6.30.1-1
    kernel26-firmware 2.6.30-1
    klibc 1.5.15-3
    klibc-extras 2.5-4
    klibc-kbd 1.15.20080312-10
    klibc-module-init-tools 3.8-1
    klibc-udev 141-3
    ladspa 1.13-2
    lame 3.98.2-2
    lapack 3.2.1-1
    lcms 1.18-2
    less 429-1
    lesstif 0.95.0-3
    libao 0.8.8-2
    libarchive 2.7.0-2
    libart-lgpl 2.3.20-1
    libass 0.9.6-2
    libavc1394 0.5.3-3
    libbeagle 0.3.9-1
    libbonobo 2.24.1-1
    libcaca 0.99.beta16-1
    libcanberra 0.14-1
    libcap 2.16-3
    libcddb 1.3.2-1
    libcdio 0.81-2
    libcups 1.3.11-1
    libdaemon 0.13-2
    libdatrie 0.2.2-1
    libdca 0.0.5-1
    libdmx 1.0.2-2
    libdownload 1.3-3
    libdrm 2.4.12-1
    libdv 1.0.0-2
    libdvbpsi 0.1.6-3
    libdvdnav 4.1.3-1
    libdvdread 4.1.3-1
    libebml 0.7.8-1
    libexif 0.6.17-1
    libfontenc 1.0.4-2
    libftdi 0.15-3
    libgcrypt 1.4.4-2
    libgl 7.5-1
    libglade 2.6.4-1
    libgpg-error 1.6-1
    libgtop 2.26.1-1
    libical 0.43-1
    libice 1.0.5-1
    libid3tag 0.15.1b-3
    libidl2 0.8.13-1
    libiec61883 1.2.0-1
    libjpeg 7-1
    libldap 2.3.43-3
    liblo 0.25-1
    liblrdf 0.4.0-6
    libmad 0.15.1b-4
    libmatroska 0.8.1-2
    libmikmod 3.1.12-2
    libmng 1.0.10-2
    libmodplug 0.8.7-1
    libmp4v2 1.6-1
    libmpcdec 1.2.6-1
    libmpd 0.18.0-1
    libmpeg2 0.5.1-1
    libmtp 0.3.7-1
    libmysqlclient 5.1.36-1
    libnl 1.1-1
    libnotify 0.4.5-1.1
    libogg 1.1.3-2
    liboil 0.3.16-1
    libpcap 1.0.0-1
    libpciaccess 0.10.6-1
    libpng 1.2.38-1
    libproxy 0.2.3-1
    libraw1394 2.0.2-1
    libsamplerate 0.1.7-1
    libsasl 2.1.23-1
    libsexy 0.1.11-1
    libshout 2.2.2-3
    libsigc++2.0 2.2.3-1
    libsm 1.1.0-1
    libsndfile 1.0.20-3
    libtasn1 2.2-1
    libthai 0.1.12-1
    libtheora 1.0-1
    libtiff 3.8.2-5
    libtirpc 0.2.0-1
    libtool 2.2.6a-2
    libtorrent 0.12.2-2
    libtracker 0.6.95-1
    libunique 1.0.8-1
    libusb 0.1.12-3
    libv4l 0.5.99-1
    libvisual 0.4.0-2
    libvorbis 1.2.1rc1-2
    libwnck 2.26.2-1
    libx11 1.2.1-1
    libx86 1.1-2
    libxau 1.0.4-1
    libxaw 1.0.6-1
    libxcb 1.2-1
    libxcomposite 0.4.0-2
    libxcursor 1.1.9-2
    libxdamage 1.1.1-2
    libxdmcp 1.0.2-2
    libxext 1.0.5-2
    libxfce4util 4.6.1-1
    libxfcegui4 4.6.1-1
    libxfixes 4.0.3-2
    libxfont 1.4.0-1
    libxfontcache 1.0.4-2
    libxft 2.1.13-1
    libxi 1.2.1-1
    libxinerama 1.0.3-2
    libxkbfile 1.0.5-1
    libxklavier 3.9-2
    libxml2 2.7.3-2
    libxmu 1.0.4-2
    libxp 1.0.0-2
    libxpm 3.5.7-1
    libxrandr 1.3.0-1
    libxrender 0.9.4-2
    libxres 1.0.3-2
    libxslt 1.1.24-2
    libxspf 1.2.0-1
    libxss 1.1.3-1
    libxt 1.0.6-1
    libxtst 1.0.3-2
    libxv 1.0.4-1
    libxvmc 1.0.4-2
    libxxf86dga 1.0.2-2
    libxxf86misc 1.0.1-2
    libxxf86vm 1.0.2-1
    licenses 2.4-1
    links 2.2-2
    lirc-utils 0.8.5-1
    lm_sensors 3.1.1-1
    logrotate 3.7.8-1
    lrmi 0.10-1
    lua 5.1.4-4
    lvm2 2.02.48-1
    lzo2 2.03-1
    m4 1.4.13-1
    madwifi 0.9.4.3952-5
    madwifi-utils 0.9.4.3952-1
    mailx 8.1.1-7
    make 3.81-4
    man-db 2.5.5-2
    man-pages 3.21-1
    mcpp 2.7.2-2
    mdadm 2.6.9-1
    mesa 7.5-1
    mime-types 1.0-2
    mkinitcpio 0.5.25-1
    mlocate 0.22-1
    module-init-tools 3.8-1
    mozilla-common 1.4-1
    mozplugger 1.12.1-1
    mpd 0.14.2-1
    mpfr 2.4.1-1
    mysql 5.1.36-1
    mysql-clients 5.1.36-1
    nano 2.0.9-2
    ncurses 5.7-2
    net-tools 1.60-14
    netbeans 6.7-1
    nspr 4.8-1
    nss 3.12.3-1
    openssl 0.9.8k-4
    orbit2 2.14.17-1
    pacman 3.2.2-1
    pacman-mirrorlist 20090616-1
    pam 1.0.4-1
    pango 1.24.5-1
    pangomm 2.24.0-1
    patch 2.5.9-2
    pciutils 3.1.2-1
    pcmciautils 015-2
    pcre 7.9-1
    perl 5.10.0-6
    perl-xml-simple 2.18-2
    perlxml 2.36-1
    php 5.2.10-3
    pixman 0.14.0-2
    pkgconfig 0.23-1
    pm-utils 1.2.5-1
    policykit 0.9-9
    pommed 1.26-3
    popt 1.14-1
    ppl 0.10.2-2
    ppp 2.4.4-9
    printproto 1.0.4-1
    procinfo 19-3
    procps 3.2.8-1
    psmisc 22.7-1
    pycairo 1.8.6-1
    pygobject 2.18.0-1
    pygtk 2.14.1-4
    python 2.6.2-5
    python-gdata 1.3.1-1
    python-numpy 1.3.0-2
    qt 4.5.2-3
    rake 0.8.6-1
    randrproto 1.3.0-1
    raptor 1.4.18-1
    rarian 0.8.1-1
    readline 6.0.003-1
    recode 3.6-3
    recordproto 1.13.2-2
    reiserfsprogs 3.6.21-1
    renderproto 0.9.3-2
    rp-pppoe 3.10-1
    rpcbind 0.2.0-1
    rtorrent 0.8.2-3
    ruby 1.8.7_p174-1
    rubygems 1.3.3-1
    run-parts 3.1.3-1
    rxvt-unicode 9.06-2
    schismtracker 0.5rc1-1
    screen 4.0.3-8
    scrnsaverproto 1.1.0-2
    sdl 1.2.13-3
    sdl_image 1.2.7-2
    sdparm 1.03-2
    sed 4.2.1-1
    shadow 4.1.4.1-1
    shaman 1.0.9-1
    shared-mime-info 0.60-1
    smbclient 3.3.6-2
    sound-theme-freedesktop 0.2-1
    speex 1.2rc1-1.1
    sqlite3 3.6.15-2
    startup-notification 0.10-1
    sudo 1.7.2-1
    sysfsutils 2.1.0-5
    syslog-ng 3.0.3-1
    sysvinit 2.86-5
    t1lib 5.1.2-2
    taglib 1.5-1
    tar 1.22-1
    tcp_wrappers 7.6-10
    tdb 3.3.6-1
    terminus-font 4.28-1
    texinfo 4.13a-3
    ttf-dejavu 2.29-1
    tzdata 2009j-1
    udev 141-3
    unixodbc 2.2.14-2
    unrar 3.9.4-1
    unzip 6.0-4
    uriparser 0.7.5-1
    usbutils 0.84-1
    util-linux-ng 2.14.2-1
    vbetool 1.1-1
    vi 7.2.65-1
    videoproto 2.2.2-2
    vim 7.2.65-1.1
    vim-minibufexpl 6.3.2-4
    w3m 0.5.2-3
    wavpack 4.50.1-1
    wget 1.11.4-1
    which 2.20-1
    wireless_tools 29-3
    wpa_supplicant 0.6.9-2
    x264 20090416-1
    xbitmaps 1.0.1-2
    xcb-proto 1.4-1
    xcb-util 0.3.4-2
    xcursor-themes 1.0.1-2
    xextproto 7.0.5-1
    xf86-input-evdev 2.2.2-1
    xf86-input-synaptics 1.1.2-1
    xf86-video-intel 2.7.99.902-1
    xf86dgaproto 2.0.3-2
    xf86miscproto 0.9.2-2
    xf86vidmodeproto 2.2.2-2
    xfconf 4.6.1-1
    xfe 1.19.2-1
    xfsprogs 3.0.1-1
    xineramaproto 1.1.2-2
    xkeyboard-config 1.6-1
    xmlrpc-c 1.06.35-1
    xmobar 0.9.2-1
    xmonad 0.8.1-1.2
    xmonad-contrib 0.8.1-1.2
    xorg-apps 7.4-2
    xorg-font-utils 7.4-2
    xorg-fonts-100dpi 1.0.1-2
    xorg-fonts-75dpi 1.0.1-2
    xorg-fonts-alias 1.0.1-2
    xorg-fonts-encodings 1.0.2-3
    xorg-fonts-misc 1.0.0-4
    xorg-res-utils 1.0.3-3
    xorg-server 1.6.2-1
    xorg-server-utils 7.4-6
    xorg-twm 1.0.4-3
    xorg-utils 7.4-4
    xorg-xauth 1.0.3-1
    xorg-xinit 1.1.1-1
    xorg-xkb-utils 7.4-2
    xpacman 0.11-4
    xpdf 3.02_pl3-1
    xproto 7.0.15-1
    xterm 243-2
    xulrunner 1.9.1.1-1
    xvidcore 1.2.1-1
    xz-utils 4.999.8beta-4
    zenity 2.26.0-2
    zip 3.0-1.1
    zlib 1.2.3.3-3
    zsh 4.3.10-1
    zvbi 0.2.26-1
    Any help would be greatly appreciated! This is too much for me to handle by myself. I'm thinking of trying debian if I can't sort this out, so be a patriot!
    Love,
    sapht
    Last edited by sapht (2009-07-23 17:45:07)

    Alright, I got fed up and decided to reinstall the system.
    Only installed wireless_tools, madwifi, hal, xorg and xf86-video-intel.
    Edited /etc/X11/xorg.conf to select the intel video driver.
    The mouse and keyboard are still frozen.
    Here are some much cleaner Xorg.0.log, xorg.conf and startx_output.log files, I hope it will be easier for any readers of this post to find errors here:
    Output of startx:
    hostname: Host name lookup failure
    xauth: creating new authority file /root/.serverauth.4956
    This is a pre-release version of the X server from The X.Org Foundation.
    It is not supported in any way.
    Bugs may be filed in the bugzilla at http://bugs.freedesktop.org/.
    Select the "xorg" product for bugs you find in this release.
    Before reporting bugs in pre-release versions please check the
    latest version in the X.Org Foundation git repository.
    See http://wiki.x.org/wiki/GitPage for git access instructions.
    X.Org X Server 1.6.1.901 (1.6.2 RC 1)
    Release Date: 2009-5-8
    X Protocol Version 11, Revision 0
    Build Operating System: Linux 2.6.30-ARCH i686
    Current Operating System: Linux datan 2.6.30-ARCH #1 SMP PREEMPT Sat Jul 4 11:13:08 UTC 2009 i686
    Build Date: 28 June 2009 11:20:52AM
    Before reporting problems, check http://wiki.x.org
    to make sure that you have the latest version.
    Markers: (--) probed, (**) from config file, (==) default setting,
    (++) from command line, (!!) notice, (II) informational,
    (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
    (==) Log file: "/var/log/Xorg.0.log", Time: Thu Jul 23 13:37:55 2009
    (==) Using config file: "/etc/X11/xorg.conf"
    Setting master
    (again, this is where 'killall X' from xinitrc runs)
    XIO: fatal IO error 11 (Resource temporarily unavailable) on X server ":0.0"
    after 507 requests (507 known processed) with 2 events remaining.
    xterm: fatal IO error 104 (Connection reset by peer) or KillClient on X server ":0.0"
    xinit: connection to X server lost.
    waiting for X server to shut down .Dropping master
    error setting MTRR (base = 0x80000000, size = 0x10000000, type = 1) Invalid argument (22)
    xorg.conf
    Section "Device"
    Identifier "Card0"
    Driver "intel"
    VendorName "Intel Corporation"
    BoardName "Mobile 945GM/GMS, 943/940GML Express Integrated Graphics Controller"
    BusID "PCI:0:2:0"
    EndSection
    # Section "ServerLayout"
    # Identifier "X.org Configured"
    # Screen 0 "Screen0" 0 0
    # InputDevice "Mouse0" "CorePointer"
    # InputDevice "Keyboard0" "CoreKeyboard"
    # EndSection
    # Section "Files"
    # ModulePath "/usr/lib/xorg/modules"
    # FontPath "/usr/share/fonts/misc"
    # FontPath "/usr/share/fonts/100dpi:unscaled"
    # FontPath "/usr/share/fonts/75dpi:unscaled"
    # FontPath "/usr/share/fonts/TTF"
    # FontPath "/usr/share/fonts/Type1"
    # EndSection
    # Section "Module"
    # Load "extmod"
    # Load "glx"
    # Load "record"
    # Load "dri"
    # Load "dri2"
    # Load "dbe"
    # EndSection
    And Xorg.0.log:
    This is a pre-release version of the X server from The X.Org Foundation.
    It is not supported in any way.
    Bugs may be filed in the bugzilla at http://bugs.freedesktop.org/.
    Select the "xorg" product for bugs you find in this release.
    Before reporting bugs in pre-release versions please check the
    latest version in the X.Org Foundation git repository.
    See http://wiki.x.org/wiki/GitPage for git access instructions.
    X.Org X Server 1.6.1.901 (1.6.2 RC 1)
    Release Date: 2009-5-8
    X Protocol Version 11, Revision 0
    Build Operating System: Linux 2.6.30-ARCH i686
    Current Operating System: Linux datan 2.6.30-ARCH #1 SMP PREEMPT Sat Jul 4 11:13:08 UTC 2009 i686
    Build Date: 28 June 2009 11:20:52AM
    Before reporting problems, check http://wiki.x.org
    to make sure that you have the latest version.
    Markers: (--) probed, (**) from config file, (==) default setting,
    (++) from command line, (!!) notice, (II) informational,
    (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
    (==) Log file: "/var/log/Xorg.0.log", Time: Thu Jul 23 13:33:48 2009
    (==) Using config file: "/etc/X11/xorg.conf"
    (==) No Layout section. Using the first Screen section.
    (==) No screen section available. Using defaults.
    (**) |-->Screen "Default Screen Section" (0)
    (**) | |-->Monitor "<default monitor>"
    (==) No device specified for screen "Default Screen Section".
    Using the first device section listed.
    (**) | |-->Device "Card0"
    (==) No monitor specified for screen "Default Screen Section".
    Using a default monitor configuration.
    (==) Automatically adding devices
    (==) Automatically enabling devices
    (WW) The directory "/usr/share/fonts/TTF" does not exist.
    Entry deleted from font path.
    (WW) The directory "/usr/share/fonts/Type1" does not exist.
    Entry deleted from font path.
    (==) FontPath set to:
    /usr/share/fonts/misc,
    /usr/share/fonts/100dpi:unscaled,
    /usr/share/fonts/75dpi:unscaled,
    built-ins
    (==) ModulePath set to "/usr/lib/xorg/modules"
    (II) Cannot locate a core pointer device.
    (II) Cannot locate a core keyboard device.
    (II) The server relies on HAL to provide the list of input devices.
    If no devices become available, reconfigure HAL or disable AllowEmptyInput.
    (II) Loader magic: 0x640
    (II) Module ABI versions:
    X.Org ANSI C Emulation: 0.4
    X.Org Video Driver: 5.0
    X.Org XInput driver : 4.0
    X.Org Server Extension : 2.0
    (II) Loader running on linux
    (--) using VT number 7
    (--) PCI:*(0:0:2:0) 8086:27a2:8086:7270 Intel Corporation Mobile 945GM/GMS, 943/940GML Express Integrated Graphics Controller rev 3, Mem @ 0x90380000/524288, 0x80000000/268435456, 0x90400000/262144, I/O @ 0x000020f0/8
    (--) PCI: (0:0:2:1) 8086:27a6:8086:7270 Intel Corporation Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller rev 3, Mem @ 0x90300000/524288
    (II) Open ACPI successful (/var/run/acpid.socket)
    (II) System resource ranges:
    [0] -1 0 0xffffffff - 0xffffffff (0x1) MX[b]
    [1] -1 0 0x000f0000 - 0x000fffff (0x10000) MX[b]
    [2] -1 0 0x000c0000 - 0x000effff (0x30000) MX[b]
    [3] -1 0 0x00000000 - 0x0009ffff (0xa0000) MX[b]
    [4] -1 0 0x0000ffff - 0x0000ffff (0x1) IX[b]
    [5] -1 0 0x00000000 - 0x00000000 (0x1) IX[b]
    (II) LoadModule: "extmod"
    (II) Loading /usr/lib/xorg/modules/extensions//libextmod.so
    (II) Module extmod: vendor="X.Org Foundation"
    compiled for 1.6.1.901, module version = 1.0.0
    Module class: X.Org Server Extension
    ABI class: X.Org Server Extension, version 2.0
    (II) Loading extension MIT-SCREEN-SAVER
    (II) Loading extension XFree86-VidModeExtension
    (II) Loading extension XFree86-DGA
    (II) Loading extension DPMS
    (II) Loading extension XVideo
    (II) Loading extension XVideo-MotionCompensation
    (II) Loading extension X-Resource
    (II) LoadModule: "dbe"
    (II) Loading /usr/lib/xorg/modules/extensions//libdbe.so
    (II) Module dbe: vendor="X.Org Foundation"
    compiled for 1.6.1.901, module version = 1.0.0
    Module class: X.Org Server Extension
    ABI class: X.Org Server Extension, version 2.0
    (II) Loading extension DOUBLE-BUFFER
    (II) LoadModule: "glx"
    (II) Loading /usr/lib/xorg/modules/extensions//libglx.so
    (II) Module glx: vendor="X.Org Foundation"
    compiled for 1.6.1.901, module version = 1.0.0
    ABI class: X.Org Server Extension, version 2.0
    (==) AIGLX enabled
    (II) Loading extension GLX
    (II) LoadModule: "record"
    (II) Loading /usr/lib/xorg/modules/extensions//librecord.so
    (II) Module record: vendor="X.Org Foundation"
    compiled for 1.6.1.901, module version = 1.13.0
    Module class: X.Org Server Extension
    ABI class: X.Org Server Extension, version 2.0
    (II) Loading extension RECORD
    (II) LoadModule: "dri"
    (II) Loading /usr/lib/xorg/modules/extensions//libdri.so
    (II) Module dri: vendor="X.Org Foundation"
    compiled for 1.6.1.901, module version = 1.0.0
    ABI class: X.Org Server Extension, version 2.0
    (II) Loading extension XFree86-DRI
    (II) LoadModule: "dri2"
    (II) Loading /usr/lib/xorg/modules/extensions//libdri2.so
    (II) Module dri2: vendor="X.Org Foundation"
    compiled for 1.6.1.901, module version = 1.0.0
    ABI class: X.Org Server Extension, version 2.0
    (II) Loading extension DRI2
    (II) LoadModule: "intel"
    (II) Loading /usr/lib/xorg/modules/drivers//intel_drv.so
    (II) Module intel: vendor="X.Org Foundation"
    compiled for 1.6.1.901, module version = 2.7.99
    Module class: X.Org Video Driver
    ABI class: X.Org Video Driver, version 5.0
    (II) intel: Driver for Intel Integrated Graphics Chipsets: i810,
    i810-dc100, i810e, i815, i830M, 845G, 852GM/855GM, 865G, 915G,
    E7221 (i915), 915GM, 945G, 945GM, 945GME, IGD_GM, IGD_G, 965G, G35,
    965Q, 946GZ, 965GM, 965GME/GLE, G33, Q35, Q33,
    Mobile Intel® GM45 Express Chipset,
    Intel Integrated Graphics Device, G45/G43, Q45/Q43, G41, IGDNG_D,
    IGDNG_M
    (II) Primary Device is: PCI 00@00:02:0
    (II) resource ranges after xf86ClaimFixedResources() call:
    [0] -1 0 0xffffffff - 0xffffffff (0x1) MX[b]
    [1] -1 0 0x000f0000 - 0x000fffff (0x10000) MX[b]
    [2] -1 0 0x000c0000 - 0x000effff (0x30000) MX[b]
    [3] -1 0 0x00000000 - 0x0009ffff (0xa0000) MX[b]
    [4] -1 0 0x0000ffff - 0x0000ffff (0x1) IX[b]
    [5] -1 0 0x00000000 - 0x00000000 (0x1) IX[b]
    (II) resource ranges after probing:
    [0] -1 0 0xffffffff - 0xffffffff (0x1) MX[b]
    [1] -1 0 0x000f0000 - 0x000fffff (0x10000) MX[b]
    [2] -1 0 0x000c0000 - 0x000effff (0x30000) MX[b]
    [3] -1 0 0x00000000 - 0x0009ffff (0xa0000) MX[b]
    [4] 0 0 0x000a0000 - 0x000affff (0x10000) MS[b]
    [5] 0 0 0x000b0000 - 0x000b7fff (0x8000) MS[b]
    [6] 0 0 0x000b8000 - 0x000bffff (0x8000) MS[b]
    [7] -1 0 0x0000ffff - 0x0000ffff (0x1) IX[b]
    [8] -1 0 0x00000000 - 0x00000000 (0x1) IX[b]
    [9] 0 0 0x000003b0 - 0x000003bb (0xc) IS[b]
    [10] 0 0 0x000003c0 - 0x000003df (0x20) IS[b]
    (II) Loading sub module "vgahw"
    (II) LoadModule: "vgahw"
    (II) Loading /usr/lib/xorg/modules//libvgahw.so
    (II) Module vgahw: vendor="X.Org Foundation"
    compiled for 1.6.1.901, module version = 0.1.0
    ABI class: X.Org Video Driver, version 5.0
    (II) Loading sub module "ramdac"
    (II) LoadModule: "ramdac"
    (II) Module "ramdac" already built-in
    drmOpenDevice: node name is /dev/dri/card0
    drmOpenDevice: open result is 8, (OK)
    drmOpenByBusid: Searching for BusID pci:0000:00:02.0
    drmOpenDevice: node name is /dev/dri/card0
    drmOpenDevice: open result is 8, (OK)
    drmOpenByBusid: drmOpenMinor returns 8
    drmOpenByBusid: drmGetBusid reports pci:0000:00:02.0
    (II) intel(0): Creating default Display subsection in Screen section
    "Default Screen Section" for depth/fbbpp 24/32
    (==) intel(0): Depth 24, (--) framebuffer bpp 32
    (==) intel(0): RGB weight 888
    (==) intel(0): Default visual is TrueColor
    (II) intel(0): Integrated Graphics Chipset: Intel(R) 945GM
    (--) intel(0): Chipset: "945GM"
    (--) intel(0): Linear framebuffer at 0x80000000
    (--) intel(0): IO registers at addr 0x90380000 size 524288
    (WW) intel(0): libpciaccess reported 0 rom size, guessing 64kB
    (--) intel(0): Using UXA for acceleration
    (II) intel(0): 2 display pipes available.
    (II) Loading sub module "ddc"
    (II) LoadModule: "ddc"
    (II) Module "ddc" already built-in
    (II) Loading sub module "i2c"
    (II) LoadModule: "i2c"
    (II) Module "i2c" already built-in
    (II) intel(0): Output VGA has no monitor section
    (II) intel(0): Output LVDS has no monitor section
    (II) intel(0): I2C bus "LVDSDDC_C" initialized.
    (II) intel(0): Attempting to determine panel fixed mode.
    (II) intel(0): I2C device "LVDSDDC_C:E-EDID segment register" registered at address 0x60.
    (II) intel(0): I2C device "LVDSDDC_C:ddc2" registered at address 0xA0.
    (II) intel(0): EDID vendor "APP", prod id 40028
    (II) intel(0): I2C bus "SDVOCTRL_E for SDVOB" initialized.
    (II) intel(0): I2C device "SDVOCTRL_E for SDVOB:SDVO Controller B" registered at address 0x70.
    (II) intel(0): I2C bus "SDVOB DDC Bus" initialized.
    (II) intel(0): Output TMDS-1 has no monitor section
    (II) intel(0): SDVOB: device VID/DID: 04:AA.03, clock range 25.0MHz - 165.0MHz
    (II) intel(0): SDVOB: 1 input channel
    (II) intel(0): SDVOB: TMDS0 output reported
    (II) intel(0): I2C bus "SDVOCTRL_E for SDVOC" initialized.
    (II) intel(0): I2C device "SDVOCTRL_E for SDVOC:SDVO Controller C" registered at address 0x72.
    (II) intel(0): No SDVO device found on SDVOC
    (II) intel(0): I2C device "SDVOCTRL_E for SDVOC:SDVO Controller C" removed.
    (II) intel(0): I2C bus "SDVOCTRL_E for SDVOC" removed.
    (II) intel(0): Output TV has no monitor section
    (II) intel(0): Current clock rate multiplier: 1
    (II) intel(0): EDID vendor "APP", prod id 40028
    (II) intel(0): Output VGA disconnected
    (II) intel(0): Output LVDS connected
    (II) intel(0): Output TMDS-1 disconnected
    (II) intel(0): Output TV disconnected
    (II) intel(0): Using exact sizes for initial modes
    (II) intel(0): Output LVDS using initial mode 1280x800
    (II) intel(0): detected 256 kB GTT.
    (II) intel(0): detected 16124 kB stolen memory.
    (==) intel(0): video overlay key set to 0x101fe
    (==) intel(0): Using gamma correction (1.0, 1.0, 1.0)
    (==) intel(0): DPI set to (96, 96)
    (II) Loading sub module "fb"
    (II) LoadModule: "fb"
    (II) Loading /usr/lib/xorg/modules//libfb.so
    (II) Module fb: vendor="X.Org Foundation"
    compiled for 1.6.1.901, module version = 1.0.0
    ABI class: X.Org ANSI C Emulation, version 0.4
    (II) intel(0): Comparing regs from server start up to After PreInit
    (WW) intel(0): Register 0x61200 (PP_STATUS) changed from 0xc0000008 to 0xd0000009
    (WW) intel(0): PP_STATUS before: on, ready, sequencing idle
    (WW) intel(0): PP_STATUS after: on, ready, sequencing on
    (WW) intel(0): Register 0x61110 (PORT_HOTPLUG_EN) changed from 0x00000000 to 0x00000020
    (WW) intel(0): Register 0x61114 (PORT_HOTPLUG_STAT) changed from 0x00000000 to 0x00000400
    (WW) intel(0): Register 0x70024 (PIPEASTAT) changed from 0x00000000 to 0x00000203
    (WW) intel(0): PIPEASTAT before: status:
    (WW) intel(0): PIPEASTAT after: status: VSYNC_INT_STATUS VBLANK_INT_STATUS OREG_UPDATE_STATUS
    (WW) intel(0): Register 0x71024 (PIPEBSTAT) changed from 0x00000202 to 0x80000202
    (WW) intel(0): PIPEBSTAT before: status: VSYNC_INT_STATUS VBLANK_INT_STATUS
    (WW) intel(0): PIPEBSTAT after: status: FIFO_UNDERRUN VSYNC_INT_STATUS VBLANK_INT_STATUS
    (==) Depth 24 pixmap format is 32 bpp
    (II) do I need RAC? No, I don't.
    (II) resource ranges after preInit:
    [0] -1 0 0xffffffff - 0xffffffff (0x1) MX[b]
    [1] -1 0 0x000f0000 - 0x000fffff (0x10000) MX[b]
    [2] -1 0 0x000c0000 - 0x000effff (0x30000) MX[b]
    [3] -1 0 0x00000000 - 0x0009ffff (0xa0000) MX[b]
    [4] 0 0 0x000a0000 - 0x000affff (0x10000) MS[b](OprD)
    [5] 0 0 0x000b0000 - 0x000b7fff (0x8000) MS[b](OprD)
    [6] 0 0 0x000b8000 - 0x000bffff (0x8000) MS[b](OprD)
    [7] -1 0 0x0000ffff - 0x0000ffff (0x1) IX[b]
    [8] -1 0 0x00000000 - 0x00000000 (0x1) IX[b]
    [9] 0 0 0x000003b0 - 0x000003bb (0xc) IS[b](OprU)
    [10] 0 0 0x000003c0 - 0x000003df (0x20) IS[b](OprU)
    (II) intel(0): Kernel reported 483584 total, 1 used
    (II) intel(0): I830CheckAvailableMemory: 1934332 kB available
    (II) intel(0): [DRI2] Setup complete
    (**) intel(0): Framebuffer compression enabled
    (**) intel(0): Tiling enabled
    (==) intel(0): VideoRam: 262144 KB
    (II) intel(0): Attempting memory allocation with tiled buffers.
    (II) intel(0): Tiled allocation successful.
    (II) intel(0): adjusting plane->pipe mappings to allow for framebuffer compression
    (II) intel(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0, hwp->PIOOffset is 0x0000
    (II) UXA(0): Driver registered support for the following operations:
    (II) solid
    (II) copy
    (II) composite (RENDER acceleration)
    (==) intel(0): Backing store disabled
    (==) intel(0): Silken mouse enabled
    (II) intel(0): Initializing HW Cursor
    (II) intel(0): Current clock rate multiplier: 1
    (II) intel(0): Fixed memory allocation layout:
    (II) intel(0): 0x00000000-0x005fffff: compressed frame buffer (6144 kB, 0x000000007f000000 physical
    (II) intel(0): 0x00600000-0x00600fff: compressed ll buffer (4 kB, 0x000000007f600000 physical
    (II) intel(0): 0x00601000-0x0060afff: HW cursors (40 kB, 0x000000007f601000 physical
    (II) intel(0): 0x0060b000-0x0060bfff: overlay registers (4 kB, 0x000000007f60b000 physical
    (II) intel(0): 0x00fbf000: end of stolen memory
    (II) intel(0): 0x00fbf000-0x0f9f3fff: DRI memory manager (239828 kB)
    (II) intel(0): 0x10000000: end of aperture
    (II) intel(0): BO memory allocation layout:
    (II) intel(0): 0x00fbf000: start of memory manager
    (II) intel(0): 0x01000000-0x017fffff: front buffer (8192 kB) X tiled
    (II) intel(0): 0x0f9f4000: end of memory manager
    (WW) intel(0): ESR is 0x00000010, page table error
    (WW) intel(0): PGTBL_ER is 0x00000102, host pte data, display B pte
    (WW) intel(0): Existing errors found in hardware state.
    (II) intel(0): Selecting standard 18 bit TMDS pixel format.
    (II) intel(0): Output configuration:
    (II) intel(0): Pipe A is off
    (II) intel(0): Display plane B is now disabled and connected to pipe A.
    (II) intel(0): Pipe B is on
    (II) intel(0): Display plane A is now enabled and connected to pipe B.
    (II) intel(0): Output VGA is connected to pipe none
    (II) intel(0): Output LVDS is connected to pipe B
    (II) intel(0): Output TMDS-1 is connected to pipe none
    (II) intel(0): Output TV is connected to pipe none
    (II) intel(0): RandR 1.2 enabled, ignore the following RandR disabled message.
    (II) intel(0): DPMS enabled
    (==) intel(0): Intel XvMC decoder disabled
    (II) intel(0): Set up textured video
    (II) intel(0): Set up overlay video
    (II) intel(0): direct rendering: DRI2 Enabled
    (--) RandR disabled
    (II) Initializing built-in extension Generic Event Extension
    (II) Initializing built-in extension SHAPE
    (II) Initializing built-in extension MIT-SHM
    (II) Initializing built-in extension XInputExtension
    (II) Initializing built-in extension XTEST
    (II) Initializing built-in extension BIG-REQUESTS
    (II) Initializing built-in extension SYNC
    (II) Initializing built-in extension XKEYBOARD
    (II) Initializing built-in extension XC-MISC
    (II) Initializing built-in extension SECURITY
    (II) Initializing built-in extension XINERAMA
    (II) Initializing built-in extension XFIXES
    (II) Initializing built-in extension RENDER
    (II) Initializing built-in extension RANDR
    (II) Initializing built-in extension COMPOSITE
    (II) Initializing built-in extension DAMAGE
    (II) AIGLX: enabled GLX_MESA_copy_sub_buffer
    (II) AIGLX: enabled GLX_SGI_swap_control and GLX_MESA_swap_control
    (II) AIGLX: GLX_EXT_texture_from_pixmap backed by buffer objects
    (II) AIGLX: Loaded and initialized /usr/lib/xorg/modules/dri/i915_dri.so
    (II) GLX: Initialized DRI2 GL provider for screen 0
    (II) intel(0): Setting screen physical size to 286 x 179
    (II) config/hal: Adding input device Macintosh mouse button emulation
    (II) LoadModule: "evdev"
    (II) Loading /usr/lib/xorg/modules/input//evdev_drv.so
    (II) Module evdev: vendor="X.Org Foundation"
    compiled for 1.6.1, module version = 2.2.2
    Module class: X.Org XInput Driver
    ABI class: X.Org XInput driver, version 4.0
    (**) Macintosh mouse button emulation: always reports core events
    (**) Macintosh mouse button emulation: Device: "/dev/input/event0"
    (II) Macintosh mouse button emulation: Found 3 mouse buttons
    (II) Macintosh mouse button emulation: Found x and y relative axes
    (II) Macintosh mouse button emulation: Configuring as mouse
    (**) Macintosh mouse button emulation: YAxisMapping: buttons 4 and 5
    (**) Macintosh mouse button emulation: EmulateWheelButton: 4, EmulateWheelInertia: 10, EmulateWheelTimeout: 200
    (II) XINPUT: Adding extended input device "Macintosh mouse button emulation" (type: MOUSE)
    (**) Macintosh mouse button emulation: (accel) keeping acceleration scheme 1
    (**) Macintosh mouse button emulation: (accel) filter chain progression: 2.00
    (**) Macintosh mouse button emulation: (accel) filter stage 0: 20.00 ms
    (**) Macintosh mouse button emulation: (accel) set acceleration profile 0
    (II) config/hal: Adding input device HID 05ac:1000
    (**) HID 05ac:1000: always reports core events
    (**) HID 05ac:1000: Device: "/dev/input/event2"
    (II) HID 05ac:1000: Found 5 mouse buttons
    (II) HID 05ac:1000: Found x and y relative axes
    (II) HID 05ac:1000: Configuring as mouse
    (**) HID 05ac:1000: YAxisMapping: buttons 4 and 5
    (**) HID 05ac:1000: EmulateWheelButton: 4, EmulateWheelInertia: 10, EmulateWheelTimeout: 200
    (II) XINPUT: Adding extended input device "HID 05ac:1000" (type: MOUSE)
    (**) HID 05ac:1000: (accel) keeping acceleration scheme 1
    (**) HID 05ac:1000: (accel) filter chain progression: 2.00
    (**) HID 05ac:1000: (accel) filter stage 0: 20.00 ms
    (**) HID 05ac:1000: (accel) set acceleration profile 0
    (II) config/hal: Adding input device HID 05ac:1000
    (**) HID 05ac:1000: always reports core events
    (**) HID 05ac:1000: Device: "/dev/input/event1"
    (II) HID 05ac:1000: Found keys
    (II) HID 05ac:1000: Configuring as keyboard
    (II) XINPUT: Adding extended input device "HID 05ac:1000" (type: KEYBOARD)
    (**) Option "xkb_rules" "evdev"
    (**) Option "xkb_model" "evdev"
    (**) Option "xkb_layout" "us"
    (II) config/hal: Adding input device Apple Computer Apple Internal Keyboard / Trackpad
    (**) Apple Computer Apple Internal Keyboard / Trackpad: always reports core events
    (**) Apple Computer Apple Internal Keyboard / Trackpad: Device: "/dev/input/event3"
    (II) Apple Computer Apple Internal Keyboard / Trackpad: Found keys
    (II) Apple Computer Apple Internal Keyboard / Trackpad: Configuring as keyboard
    (II) XINPUT: Adding extended input device "Apple Computer Apple Internal Keyboard / Trackpad" (type: KEYBOARD)
    (**) Option "xkb_rules" "evdev"
    (**) Option "xkb_model" "evdev"
    (**) Option "xkb_layout" "us"
    (II) config/hal: Adding input device Video Bus
    (**) Video Bus: always reports core events
    (**) Video Bus: Device: "/dev/input/event15"
    (II) Video Bus: Found keys
    (II) Video Bus: Configuring as keyboard
    (II) XINPUT: Adding extended input device "Video Bus" (type: KEYBOARD)
    (**) Option "xkb_rules" "evdev"
    (**) Option "xkb_model" "evdev"
    (**) Option "xkb_layout" "us"
    (II) Macintosh mouse button emulation: Close
    (II) UnloadModule: "evdev"
    (II) HID 05ac:1000: Close
    (II) UnloadModule: "evdev"
    (II) HID 05ac:1000: Close
    (II) UnloadModule: "evdev"
    (II) Apple Computer Apple Internal Keyboard / Trackpad: Close
    (II) UnloadModule: "evdev"
    (II) Video Bus: Close
    (II) UnloadModule: "evdev"
    Reading Xorg.0.log myself, I find nothing that would imply the input devices have been erroneosly loaded. What is going on? Surely I must have missed something?
    Best regards,
    sapht

  • System encryption using LUKS and GPG encrypted keys for arch linux

    Update: As of 2012-03-28, arch changed from gnupg 1.4 to 2.x which uses pinentry for the password dialog. The "etwo" hook described here doesn't work with gnupg 2. Either use the openssl hook below or use a statically compiled version of gnupg 1.4.
    Update: As of 2012-12-19, the mkinitcpio is not called during boot, unless the "install" file for the hook contains "add_runscript". This resulted in an unbootable system for me. Also, the method name was changed from install () to build ().
    Update: 2013-01-13: Updated the hook files using the corrections by Deth.
    Note: This guide is a bit dated now, in particular the arch installation might be different now. But essentially, the approach stays the same. Please also take a look at the posts further down, specifically the alternative hooks that use openssl.
    I always wanted to set up a fully encrypted arch linux server that uses gpg encrypted keyfiles on an external usb stick and luks for root filesystem encryption. I already did it once in gentoo using this guide. For arch, I had to play alot with initcpio hooks and after one day of experimentation, I finally got it working. I wrote a little guide for myself which I'm going to share here for anyone that might be interested. There might be better or easier ways, like I said this is just how I did it. I hope it might help someone else. Constructive feedback is always welcome
    Intro
    Using arch linux mkinitcpio's encrypt hook, one can easily use encrypted root partitions with LUKS. It's also possible to use key files stored on an external drive, like an usb stick. However, if someone steals your usb stick, he can just copy the key and potentially access the system. I wanted to have a little extra security by additionally encrypting the key file with gpg using a symmetric cipher and a passphrase.
    Since the encrypt hook doesn't support this scenario, I created a modifed hook called “etwo” (silly name I know, it was the first thing that came to my mind). It will simply look if the key file has the extension .gpg and, if yes, use gpg to decrypt it, then pipe the result into cryptsetup.
    Conventions
    In this short guide, I use the following disk/partition names:
    /dev/sda: is the hard disk that will contain an encrypted swap (/dev/sda1), /var (/dev/sda2) and root (/dev/sda3) partition.
    /dev/sdb is the usb stick that will contain the gpg encrypted luks keys, the kernel and grub. It will have one partition /dev/sdb1 formatted with ext2.
    /dev/mapper/root, /dev/mapper/swap and /dev/mapper/var will be the encrypted devices.
    Credits
    Thanks to the authors of SECURITY_System_Encryption_DM-Crypt_with_LUKS (gentoo wiki), System Encryption with LUKS (arch wiki), mkinitcpio (arch wiki) and Early Userspace in Arch Linux (/dev/brain0 blog)!
    Guide
    1. Boot the arch live cd
    I had to use a newer testing version, because the 2010.05 cd came with a broken gpg. You can download one here: http://releng.archlinux.org/isos/. I chose the “core“ version. Go ahead and boot the live cd, but don't start the setup yet.
    2. Set keymap
    Use km to set your keymap. This is important for non-qwerty keyboards to avoid suprises with passphrases...
    3. Wipe your discs
    ATTENTION: this will DELETE everything on /dev/sda and /dev/sdb forever! Do not blame me for any lost data!
    Before encrypting the hard disc, it has to be completely wiped and overwritten with random data. I used shred for this. Others use badblocks or dd with /dev/urandom. Either way, this will take a long time, depending on the size of your disc. I also wiped my usb stick just to be sure.
    shred -v /dev/sda
    shred -v /dev/sdb
    4. Partitioning
    Fire up fdisk and create the following partitions:
    /dev/sda1, type linux swap.
    /dev/sda2: type linux
    /dev/sda3: type linux
    /dev/sdb1, type linux
    Of course you can choose a different layout, this is just how I did it. Keep in mind that only the root filesystem will be decrypted by the initcpio. The rest will be decypted during normal init boot using /etc/crypttab, the keys being somewhere on the root filesystem.
    5. Format  and mount the usb stick
    Create an ext2 filesystem on /dev/sdb1:
    mkfs.ext2 /dev/sdb1
    mkdir /root/usb
    mount /dev/sdb1 /root/usb
    cd /root/usb # this will be our working directory for now.
    Do not mount anything to /mnt, because the arch installer will use that directory later to mount the encrypted root filesystem.
    6. Configure the network (if not already done automatically)
    ifconfig eth0 192.168.0.2 netmask 255.255.255.0
    route add default gw 192.168.0.1
    echo "nameserver 192.168.0.1" >> /etc/resolv.conf
    (this is just an example, your mileage may vary)
    7. Install gnupg
    pacman -Sy
    pacman -S gnupg
    Verify that gnupg works by launching gpg.
    8. Create the keys
    Just to be sure, make sure swap is off:
    cat /proc/swaps
    should return no entries.
    Create gpg encrypted keys (remember, we're still in our working dir /root/usb):
    dd if=/dev/urandom bs=512 count=4 | gpg -v --cipher-algo aes256 --digest-algo sha512 -c -a > root.gpg
    dd if=/dev/urandom bs=512 count=4 | gpg -v --cipher-algo aes256 --digest-algo sha512 -c -a > var.gpg
    Choose a strong password!!
    Don't do this in two steps, e.g don't do dd to a file and then gpg on that file. The key should never be stored in plain text on an unencrypted device, except if that device is wiped on system restart (ramfs)!
    Note that the default cipher for gpg is cast5, I just chose to use a different one.
    9. Create the encrypted devices with cryptsetup
    Create encrypted swap:
    cryptsetup -c aes-cbc-essiv:sha256 -s 256 -h whirlpool -d /dev/urandom create swap /dev/sda1
    You should see /dev/mapper/swap now. Don't format nor turn it on for now. This will be done by the arch installer.
    Important: From the Cryptsetup 1.1.2 Release notes:
    Cryptsetup can accept passphrase on stdin (standard input). Handling of new line (\n) character is defined by input specification:
        if keyfile is specified as "-" (using --key-file=- or by positional argument in luksFormat and luksAddKey, like cat file | cryptsetup --key-file=- <action> ), input is processed
          as normal binary file and no new line is interpreted.
        if there is no key file specification (with default input from stdin pipe like echo passphrase | cryptsetup <action> ) input is processed as input from terminal, reading will
          stop after new line is detected.
    If I understand this correctly, since the randomly generated key can contain a newline early on, piping the key into cryptsetup without specifying --key-file=- could result in a big part of the key to be ignored by cryptsetup. Example: if the random key was "foo\nandsomemorebaratheendofthekey", piping it directly into cryptsetup without --key-file=- would result in cryptsetup using only "foo" as key which would have big security implications. We should therefor ALWAYS pipe the key into cryptsetup using --key-file=- which ignores newlines.
    gpg -q -d root.gpg 2>/dev/null | cryptsetup -v -–key-file=- -c aes-cbc-essiv:sha256 -s 256 -h whirlpool luksFormat /dev/sda3
    gpg -q -d var.gpg 2>/dev/null | cryptsetup -v –-key-file=- -c aes-cbc-essiv:sha256 -s 256 -h whirlpool -v luksFormat /dev/sda2
    Check for any errors.
    10. Open the luks devices
    gpg -d root.gpg 2>/dev/null | cryptsetup -v –-key-file=- luksOpen /dev/sda3 root
    gpg -d var.gpg 2>/dev/null | cryptsetup -v –-key-file=- luksOpen /dev/sda2 var
    If you see /dev/mapper/root and /dev/mapper/var now, everything is ok.
    11. Start the installer /arch/setup
    Follow steps 1 to 3.
    At step 4 (Prepare hard drive(s), select “3 – Manually Configure block devices, filesystems and mountpoints. Choose /dev/sdb1 (the usb stick) as /boot, /dev/mapper/swap for swap, /dev/mapper/root for / and /dev/mapper/var for /var.
    Format all drives (choose “yes” when asked “do you want to have this filesystem (re)created”) EXCEPT for /dev/sdb1, choose “no”. Choose the correct filesystem for /dev/sdb1, ext2 in my case. Use swap for /dev/mapper/swap. For the rest, I chose ext4.
    Select DONE to start formatting.
    At step 5 (Select packages), select grub as boot loader. Select the base group. Add mkinitcpio.
    Start step 6 (Install packages).
    Go to step 7 (Configure System).
    By sure to set the correct KEYMAP, LOCALE and TIMEZONE in /etc/rc.conf.
    Edit /etc/fstab:
    /dev/mapper/root / ext4 defaults 0 1
    /dev/mapper/swap swap swap defaults 0 0
    /dev/mapper/var /var ext4 defaults 0 1
    # /dev/sdb1 /boot ext2 defaults 0 1
    Configure the rest normally. When you're done, setup will launch mkinitcpio. We'll manually launch this again later.
    Go to step 8 (install boot loader).
    Be sure to change the kernel line in menu.lst:
    kernel /vmlinuz26 root=/dev/mapper/root cryptdevice=/dev/sda3:root cryptkey=/dev/sdb1:ext2:/root.gpg
    Don't forget the :root suffix in cryptdevice!
    Also, my root line was set to (hd1,0). Had to change that to
    root (hd0,0)
    Install grub to /dev/sdb (the usb stick).
    Now, we can exit the installer.
    12. Install mkinitcpio with the etwo hook.
    Create /mnt/lib/initcpio/hooks/etwo:
    #!/usr/bin/ash
    run_hook() {
    /sbin/modprobe -a -q dm-crypt >/dev/null 2>&1
    if [ -e "/sys/class/misc/device-mapper" ]; then
    if [ ! -e "/dev/mapper/control" ]; then
    /bin/mknod "/dev/mapper/control" c $(cat /sys/class/misc/device-mapper/dev | sed 's|:| |')
    fi
    [ "${quiet}" = "y" ] && CSQUIET=">/dev/null"
    # Get keyfile if specified
    ckeyfile="/crypto_keyfile"
    usegpg="n"
    if [ "x${cryptkey}" != "x" ]; then
    ckdev="$(echo "${cryptkey}" | cut -d: -f1)"
    ckarg1="$(echo "${cryptkey}" | cut -d: -f2)"
    ckarg2="$(echo "${cryptkey}" | cut -d: -f3)"
    if poll_device "${ckdev}" ${rootdelay}; then
    case ${ckarg1} in
    *[!0-9]*)
    # Use a file on the device
    # ckarg1 is not numeric: ckarg1=filesystem, ckarg2=path
    if [ "${ckarg2#*.}" = "gpg" ]; then
    ckeyfile="${ckeyfile}.gpg"
    usegpg="y"
    fi
    mkdir /ckey
    mount -r -t ${ckarg1} ${ckdev} /ckey
    dd if=/ckey/${ckarg2} of=${ckeyfile} >/dev/null 2>&1
    umount /ckey
    # Read raw data from the block device
    # ckarg1 is numeric: ckarg1=offset, ckarg2=length
    dd if=${ckdev} of=${ckeyfile} bs=1 skip=${ckarg1} count=${ckarg2} >/dev/null 2>&1
    esac
    fi
    [ ! -f ${ckeyfile} ] && echo "Keyfile could not be opened. Reverting to passphrase."
    fi
    if [ -n "${cryptdevice}" ]; then
    DEPRECATED_CRYPT=0
    cryptdev="$(echo "${cryptdevice}" | cut -d: -f1)"
    cryptname="$(echo "${cryptdevice}" | cut -d: -f2)"
    else
    DEPRECATED_CRYPT=1
    cryptdev="${root}"
    cryptname="root"
    fi
    warn_deprecated() {
    echo "The syntax 'root=${root}' where '${root}' is an encrypted volume is deprecated"
    echo "Use 'cryptdevice=${root}:root root=/dev/mapper/root' instead."
    if poll_device "${cryptdev}" ${rootdelay}; then
    if /sbin/cryptsetup isLuks ${cryptdev} >/dev/null 2>&1; then
    [ ${DEPRECATED_CRYPT} -eq 1 ] && warn_deprecated
    dopassphrase=1
    # If keyfile exists, try to use that
    if [ -f ${ckeyfile} ]; then
    if [ "${usegpg}" = "y" ]; then
    # gpg tty fixup
    if [ -e /dev/tty ]; then mv /dev/tty /dev/tty.backup; fi
    cp -a /dev/console /dev/tty
    while [ ! -e /dev/mapper/${cryptname} ];
    do
    sleep 2
    /usr/bin/gpg -d "${ckeyfile}" 2>/dev/null | cryptsetup --key-file=- luksOpen ${cryptdev} ${cryptname} ${CSQUIET}
    dopassphrase=0
    done
    rm /dev/tty
    if [ -e /dev/tty.backup ]; then mv /dev/tty.backup /dev/tty; fi
    else
    if eval /sbin/cryptsetup --key-file ${ckeyfile} luksOpen ${cryptdev} ${cryptname} ${CSQUIET}; then
    dopassphrase=0
    else
    echo "Invalid keyfile. Reverting to passphrase."
    fi
    fi
    fi
    # Ask for a passphrase
    if [ ${dopassphrase} -gt 0 ]; then
    echo ""
    echo "A password is required to access the ${cryptname} volume:"
    #loop until we get a real password
    while ! eval /sbin/cryptsetup luksOpen ${cryptdev} ${cryptname} ${CSQUIET}; do
    sleep 2;
    done
    fi
    if [ -e "/dev/mapper/${cryptname}" ]; then
    if [ ${DEPRECATED_CRYPT} -eq 1 ]; then
    export root="/dev/mapper/root"
    fi
    else
    err "Password succeeded, but ${cryptname} creation failed, aborting..."
    exit 1
    fi
    elif [ -n "${crypto}" ]; then
    [ ${DEPRECATED_CRYPT} -eq 1 ] && warn_deprecated
    msg "Non-LUKS encrypted device found..."
    if [ $# -ne 5 ]; then
    err "Verify parameter format: crypto=hash:cipher:keysize:offset:skip"
    err "Non-LUKS decryption not attempted..."
    return 1
    fi
    exe="/sbin/cryptsetup create ${cryptname} ${cryptdev}"
    tmp=$(echo "${crypto}" | cut -d: -f1)
    [ -n "${tmp}" ] && exe="${exe} --hash \"${tmp}\""
    tmp=$(echo "${crypto}" | cut -d: -f2)
    [ -n "${tmp}" ] && exe="${exe} --cipher \"${tmp}\""
    tmp=$(echo "${crypto}" | cut -d: -f3)
    [ -n "${tmp}" ] && exe="${exe} --key-size \"${tmp}\""
    tmp=$(echo "${crypto}" | cut -d: -f4)
    [ -n "${tmp}" ] && exe="${exe} --offset \"${tmp}\""
    tmp=$(echo "${crypto}" | cut -d: -f5)
    [ -n "${tmp}" ] && exe="${exe} --skip \"${tmp}\""
    if [ -f ${ckeyfile} ]; then
    exe="${exe} --key-file ${ckeyfile}"
    else
    exe="${exe} --verify-passphrase"
    echo ""
    echo "A password is required to access the ${cryptname} volume:"
    fi
    eval "${exe} ${CSQUIET}"
    if [ $? -ne 0 ]; then
    err "Non-LUKS device decryption failed. verify format: "
    err " crypto=hash:cipher:keysize:offset:skip"
    exit 1
    fi
    if [ -e "/dev/mapper/${cryptname}" ]; then
    if [ ${DEPRECATED_CRYPT} -eq 1 ]; then
    export root="/dev/mapper/root"
    fi
    else
    err "Password succeeded, but ${cryptname} creation failed, aborting..."
    exit 1
    fi
    else
    err "Failed to open encryption mapping: The device ${cryptdev} is not a LUKS volume and the crypto= paramater was not specified."
    fi
    fi
    rm -f ${ckeyfile}
    fi
    Create /mnt/lib/initcpio/install/etwo:
    #!/bin/bash
    build() {
    local mod
    add_module dm-crypt
    if [[ $CRYPTO_MODULES ]]; then
    for mod in $CRYPTO_MODULES; do
    add_module "$mod"
    done
    else
    add_all_modules '/crypto/'
    fi
    add_dir "/dev/mapper"
    add_binary "cryptsetup"
    add_binary "dmsetup"
    add_binary "/usr/bin/gpg"
    add_file "/usr/lib/udev/rules.d/10-dm.rules"
    add_file "/usr/lib/udev/rules.d/13-dm-disk.rules"
    add_file "/usr/lib/udev/rules.d/95-dm-notify.rules"
    add_file "/usr/lib/initcpio/udev/11-dm-initramfs.rules" "/usr/lib/udev/rules.d/11-dm-initramfs.rules"
    add_runscript
    help ()
    cat<<HELPEOF
    This hook allows for an encrypted root device with support for gpg encrypted key files.
    To use gpg, the key file must have the extension .gpg and you have to install gpg and add /usr/bin/gpg
    to your BINARIES var in /etc/mkinitcpio.conf.
    HELPEOF
    Edit /mnt/etc/mkinitcpio.conf (only relevant sections displayed):
    MODULES=”ext2 ext4” # not sure if this is really nessecary.
    BINARIES=”/usr/bin/gpg” # this could probably be done in install/etwo...
    HOOKS=”base udev usbinput keymap autodetect pata scsi sata usb etwo filesystems” # (usbinput is only needed if you have an usb keyboard)
    Copy the initcpio stuff over to the live cd:
    cp /mnt/lib/initcpio/hooks/etwo /lib/initcpio/hooks/
    cp /mnt/lib/initcpio/install/etwo /lib/initcpio/install/
    cp /mnt/etc/mkinitcpio.conf /etc/
    Verify your LOCALE, KEYMAP and TIMEZONE in /etc/rc.conf!
    Now reinstall the initcpio:
    mkinitcpio -g /mnt/boot/kernel26.img
    Make sure there were no errors and that all hooks were included.
    13. Decrypt the "var" key to the encrypted root
    mkdir /mnt/keys
    chmod 500 /mnt/keys
    gpg –output /mnt/keys/var -d /mnt/boot/var.gpg
    chmod 400 /mnt/keys/var
    14. Setup crypttab
    Edit /mnt/etc/crypttab:
    swap /dev/sda1 SWAP -c aes-cbc-essiv:sha256 -s 256 -h whirlpool
    var /dev/sda2 /keys/var
    15. Reboot
    We're done, you may reboot. Make sure you select the usb stick as the boot device in your bios and hope for the best. . If it didn't work, play with grub's settings or boot from the live cd, mount your encrypted devices and check all settings. You might also have less trouble by using uuid's instead of device names.  I chose device names to keep things as simple as possible, even though it's not the optimal way to do it.
    Make backups of your data and your usb stick and do not forget your password(s)! Or you can say goodbye to your data forever...
    Last edited by fabriceb (2013-01-15 22:36:23)

    I'm trying to run my install script that is based on https://bbs.archlinux.org/viewtopic.php?id=129885
    Decrypting the gpg key after grub works, but then "Devce root already exists." appears every second.
    any idea ?
    #!/bin/bash
    # This script is designed to be run in conjunction with a UEFI boot using Archboot intall media.
    # prereqs:
    # EFI "BIOS" set to boot *only* from EFI
    # successful EFI boot of Archboot USB
    # mount /dev/sdb1 /src
    set -o nounset
    #set -o errexit
    # Host specific configuration
    # this whole script needs to be customized, particularly disk partitions
    # and configuration, but this section contains global variables that
    # are used during the system configuration phase for convenience
    HOSTNAME=daniel
    USERNAME=user
    # Globals
    # We don't need to set these here but they are used repeatedly throughout
    # so it makes sense to reuse them and allow an easy, one-time change if we
    # need to alter values such as the install target mount point.
    INSTALL_TARGET="/install"
    HR="--------------------------------------------------------------------------------"
    PACMAN="pacman --noconfirm --config /tmp/pacman.conf"
    TARGET_PACMAN="pacman --noconfirm --config /tmp/pacman.conf -r ${INSTALL_TARGET}"
    CHROOT_PACMAN="pacman --noconfirm --cachedir /var/cache/pacman/pkg --config /tmp/pacman.conf -r ${INSTALL_TARGET}"
    FILE_URL="file:///packages/core-$(uname -m)/pkg"
    FTP_URL='ftp://mirrors.kernel.org/archlinux/$repo/os/$arch'
    HTTP_URL='http://mirrors.kernel.org/archlinux/$repo/os/$arch'
    # Functions
    # I've avoided using functions in this script as they aren't required and
    # I think it's more of a learning tool if you see the step-by-step
    # procedures even with minor duplciations along the way, but I feel that
    # these functions clarify the particular steps of setting values in config
    # files.
    SetValue () {
    # EXAMPLE: SetValue VARIABLENAME '\"Quoted Value\"' /file/path
    VALUENAME="$1" NEWVALUE="$2" FILEPATH="$3"
    sed -i "s+^#\?\(${VALUENAME}\)=.*$+\1=${NEWVALUE}+" "${FILEPATH}"
    CommentOutValue () {
    VALUENAME="$1" FILEPATH="$2"
    sed -i "s/^\(${VALUENAME}.*\)$/#\1/" "${FILEPATH}"
    UncommentValue () {
    VALUENAME="$1" FILEPATH="$2"
    sed -i "s/^#\(${VALUENAME}.*\)$/\1/" "${FILEPATH}"
    # Initialize
    # Warn the user about impending doom, set up the network on eth0, mount
    # the squashfs images (Archboot does this normally, we're just filling in
    # the gaps resulting from the fact that we're doing a simple scripted
    # install). We also create a temporary pacman.conf that looks for packages
    # locally first before sourcing them from the network. It would be better
    # to do either *all* local or *all* network but we can't for two reasons.
    # 1. The Archboot installation image might have an out of date kernel
    # (currently the case) which results in problems when chrooting
    # into the install mount point to modprobe efivars. So we use the
    # package snapshot on the Archboot media to ensure our kernel is
    # the same as the one we booted with.
    # 2. Ideally we'd source all local then, but some critical items,
    # notably grub2-efi variants, aren't yet on the Archboot media.
    # Warn
    timer=9
    echo -e "\n\nMAC WARNING: This script is not designed for APPLE MAC installs and will potentially misconfigure boot to your existing OS X installation. STOP NOW IF YOU ARE ON A MAC.\n\n"
    echo -n "GENERAL WARNING: This procedure will completely format /dev/sda. Please cancel with ctrl-c to cancel within $timer seconds..."
    while [[ $timer -gt 0 ]]
    do
    sleep 1
    let timer-=1
    echo -en "$timer seconds..."
    done
    echo "STARTING"
    # Get Network
    echo -n "Waiting for network address.."
    #dhclient eth0
    dhcpcd -p eth0
    echo -n "Network address acquired."
    # Mount packages squashfs images
    umount "/packages/core-$(uname -m)"
    umount "/packages/core-any"
    rm -rf "/packages/core-$(uname -m)"
    rm -rf "/packages/core-any"
    mkdir -p "/packages/core-$(uname -m)"
    mkdir -p "/packages/core-any"
    modprobe -q loop
    modprobe -q squashfs
    mount -o ro,loop -t squashfs "/src/packages/archboot_packages_$(uname -m).squashfs" "/packages/core-$(uname -m)"
    mount -o ro,loop -t squashfs "/src/packages/archboot_packages_any.squashfs" "/packages/core-any"
    # Create temporary pacman.conf file
    cat << PACMANEOF > /tmp/pacman.conf
    [options]
    Architecture = auto
    CacheDir = ${INSTALL_TARGET}/var/cache/pacman/pkg
    CacheDir = /packages/core-$(uname -m)/pkg
    CacheDir = /packages/core-any/pkg
    [core]
    Server = ${FILE_URL}
    Server = ${FTP_URL}
    Server = ${HTTP_URL}
    [extra]
    Server = ${FILE_URL}
    Server = ${FTP_URL}
    Server = ${HTTP_URL}
    #Uncomment to enable pacman -Sy yaourt
    [archlinuxfr]
    Server = http://repo.archlinux.fr/\$arch
    PACMANEOF
    # Prepare pacman
    [[ ! -d "${INSTALL_TARGET}/var/cache/pacman/pkg" ]] && mkdir -m 755 -p "${INSTALL_TARGET}/var/cache/pacman/pkg"
    [[ ! -d "${INSTALL_TARGET}/var/lib/pacman" ]] && mkdir -m 755 -p "${INSTALL_TARGET}/var/lib/pacman"
    ${PACMAN} -Sy
    ${TARGET_PACMAN} -Sy
    # Install prereqs from network (not on archboot media)
    echo -e "\nInstalling prereqs...\n$HR"
    #sed -i "s/^#S/S/" /etc/pacman.d/mirrorlist # Uncomment all Server lines
    UncommentValue S /etc/pacman.d/mirrorlist # Uncomment all Server lines
    ${PACMAN} --noconfirm -Sy gptfdisk btrfs-progs-unstable libusb-compat gnupg
    # Configure Host
    # Here we create three partitions:
    # 1. efi and /boot (one partition does double duty)
    # 2. swap
    # 3. our encrypted root
    # Note that all of these are on a GUID partition table scheme. This proves
    # to be quite clean and simple since we're not doing anything with MBR
    # boot partitions and the like.
    echo -e "format\n"
    # shred -v /dev/sda
    # disk prep
    sgdisk -Z /dev/sda # zap all on disk
    #sgdisk -Z /dev/mmcb1k0 # zap all on sdcard
    sgdisk -a 2048 -o /dev/sda # new gpt disk 2048 alignment
    #sgdisk -a 2048 -o /dev/mmcb1k0
    # create partitions
    sgdisk -n 1:0:+200M /dev/sda # partition 1 (UEFI BOOT), default start block, 200MB
    sgdisk -n 2:0:+4G /dev/sda # partition 2 (SWAP), default start block, 200MB
    sgdisk -n 3:0:0 /dev/sda # partition 3, (LUKS), default start, remaining space
    #sgdisk -n 1:0:1800M /dev/mmcb1k0 # root.gpg
    # set partition types
    sgdisk -t 1:ef00 /dev/sda
    sgdisk -t 2:8200 /dev/sda
    sgdisk -t 3:8300 /dev/sda
    #sgdisk -t 1:0700 /dev/mmcb1k0
    # label partitions
    sgdisk -c 1:"UEFI Boot" /dev/sda
    sgdisk -c 2:"Swap" /dev/sda
    sgdisk -c 3:"LUKS" /dev/sda
    #sgdisk -c 1:"Key" /dev/mmcb1k0
    echo -e "create gpg file\n"
    # create gpg file
    dd if=/dev/urandom bs=512 count=4 | gpg -v --cipher-algo aes256 --digest-algo sha512 -c -a > /root/root.gpg
    echo -e "format LUKS on root\n"
    # format LUKS on root
    gpg -q -d /root/root.gpg 2>/dev/null | cryptsetup -v --key-file=- -c aes-xts-plain -s 512 --hash sha512 luksFormat /dev/sda3
    echo -e "open LUKS on root\n"
    gpg -d /root/root.gpg 2>/dev/null | cryptsetup -v --key-file=- luksOpen /dev/sda3 root
    # NOTE: make sure to add dm_crypt and aes_i586 to MODULES in rc.conf
    # NOTE2: actually this isn't required since we're mounting an encrypted root and grub2/initramfs handles this before we even get to rc.conf
    # make filesystems
    # following swap related commands not used now that we're encrypting our swap partition
    #mkswap /dev/sda2
    #swapon /dev/sda2
    #mkfs.ext4 /dev/sda3 # this is where we'd create an unencrypted root partition, but we're using luks instead
    echo -e "\nCreating Filesystems...\n$HR"
    # make filesystems
    mkfs.ext4 /dev/mapper/root
    mkfs.vfat -F32 /dev/sda1
    #mkfs.vfat -F32 /dev/mmcb1k0p1
    echo -e "mount targets\n"
    # mount target
    #mount /dev/sda3 ${INSTALL_TARGET} # this is where we'd mount the unencrypted root partition
    mount /dev/mapper/root ${INSTALL_TARGET}
    # mount target
    mkdir ${INSTALL_TARGET}
    # mkdir ${INSTALL_TARGET}/key
    # mount -t vfat /dev/mmcb1k0p1 ${INSTALL_TARGET}/key
    mkdir ${INSTALL_TARGET}/boot
    mount -t vfat /dev/sda1 ${INSTALL_TARGET}/boot
    # Install base, necessary utilities
    mkdir -p ${INSTALL_TARGET}/var/lib/pacman
    ${TARGET_PACMAN} -Sy
    ${TARGET_PACMAN} -Su base
    # curl could be installed later but we want it ready for rankmirrors
    ${TARGET_PACMAN} -S curl
    ${TARGET_PACMAN} -S libusb-compat gnupg
    ${TARGET_PACMAN} -R grub
    rm -rf ${INSTALL_TARGET}/boot/grub
    ${TARGET_PACMAN} -S grub2-efi-x86_64
    # Configure new system
    SetValue HOSTNAME ${HOSTNAME} ${INSTALL_TARGET}/etc/rc.conf
    sed -i "s/^\(127\.0\.0\.1.*\)$/\1 ${HOSTNAME}/" ${INSTALL_TARGET}/etc/hosts
    SetValue CONSOLEFONT Lat2-Terminus16 ${INSTALL_TARGET}/etc/rc.conf
    #following replaced due to netcfg
    #SetValue interface eth0 ${INSTALL_TARGET}/etc/rc.conf
    # write fstab
    # You can use UUID's or whatever you want here, of course. This is just
    # the simplest approach and as long as your drives aren't changing values
    # randomly it should work fine.
    cat > ${INSTALL_TARGET}/etc/fstab <<FSTAB_EOF
    # /etc/fstab: static file system information
    # <file system> <dir> <type> <options> <dump> <pass>
    tmpfs /tmp tmpfs nodev,nosuid 0 0
    /dev/sda1 /boot vfat defaults 0 0
    /dev/mapper/cryptswap none swap defaults 0 0
    /dev/mapper/root / ext4 defaults,noatime 0 1
    FSTAB_EOF
    # write etwo
    mkdir -p /lib/initcpio/hooks/
    mkdir -p /lib/initcpio/install/
    cp /src/etwo_hooks /lib/initcpio/hooks/etwo
    cp /src/etwo_install /lib/initcpio/install/etwo
    mkdir -p ${INSTALL_TARGET}/lib/initcpio/hooks/
    mkdir -p ${INSTALL_TARGET}/lib/initcpio/install/
    cp /src/etwo_hooks ${INSTALL_TARGET}/lib/initcpio/hooks/etwo
    cp /src/etwo_install ${INSTALL_TARGET}/lib/initcpio/install/etwo
    # write crypttab
    # encrypted swap (random passphrase on boot)
    echo cryptswap /dev/sda2 SWAP "-c aes-xts-plain -h whirlpool -s 512" >> ${INSTALL_TARGET}/etc/crypttab
    # copy configs we want to carry over to target from install environment
    mv ${INSTALL_TARGET}/etc/resolv.conf ${INSTALL_TARGET}/etc/resolv.conf.orig
    cp /etc/resolv.conf ${INSTALL_TARGET}/etc/resolv.conf
    mkdir -p ${INSTALL_TARGET}/tmp
    cp /tmp/pacman.conf ${INSTALL_TARGET}/tmp/pacman.conf
    # mount proc, sys, dev in install root
    mount -t proc proc ${INSTALL_TARGET}/proc
    mount -t sysfs sys ${INSTALL_TARGET}/sys
    mount -o bind /dev ${INSTALL_TARGET}/dev
    echo -e "umount boot\n"
    # we have to remount /boot from inside the chroot
    umount ${INSTALL_TARGET}/boot
    # Create install_efi script (to be run *after* chroot /install)
    touch ${INSTALL_TARGET}/install_efi
    chmod a+x ${INSTALL_TARGET}/install_efi
    cat > ${INSTALL_TARGET}/install_efi <<EFI_EOF
    # functions (these could be a library, but why overcomplicate things
    SetValue () { VALUENAME="\$1" NEWVALUE="\$2" FILEPATH="\$3"; sed -i "s+^#\?\(\${VALUENAME}\)=.*\$+\1=\${NEWVALUE}+" "\${FILEPATH}"; }
    CommentOutValue () { VALUENAME="\$1" FILEPATH="\$2"; sed -i "s/^\(\${VALUENAME}.*\)\$/#\1/" "\${FILEPATH}"; }
    UncommentValue () { VALUENAME="\$1" FILEPATH="\$2"; sed -i "s/^#\(\${VALUENAME}.*\)\$/\1/" "\${FILEPATH}"; }
    echo -e "mount boot\n"
    # remount here or grub et al gets confused
    mount -t vfat /dev/sda1 /boot
    # mkinitcpio
    # NOTE: intel_agp drm and i915 for intel graphics
    SetValue MODULES '\\"dm_mod dm_crypt aes_x86_64 ext2 ext4 vfat intel_agp drm i915\\"' /etc/mkinitcpio.conf
    SetValue HOOKS '\\"base udev pata scsi sata usb usbinput keymap consolefont etwo encrypt filesystems\\"' /etc/mkinitcpio.conf
    SetValue BINARIES '\\"/usr/bin/gpg\\"' /etc/mkinitcpio.conf
    mkinitcpio -p linux
    # kernel modules for EFI install
    modprobe efivars
    modprobe dm-mod
    # locale-gen
    UncommentValue de_AT /etc/locale.gen
    locale-gen
    # install and configure grub2
    # did this above
    #${CHROOT_PACMAN} -Sy
    #${CHROOT_PACMAN} -R grub
    #rm -rf /boot/grub
    #${CHROOT_PACMAN} -S grub2-efi-x86_64
    # you can be surprisingly sloppy with the root value you give grub2 as a kernel option and
    # even omit the cryptdevice altogether, though it will wag a finger at you for using
    # a deprecated syntax, so we're using the correct form here
    # NOTE: take out i915.modeset=1 unless you are on intel graphics
    SetValue GRUB_CMDLINE_LINUX '\\"cryptdevice=/dev/sda3:root cryptkey=/dev/sda1:vfat:/root.gpg add_efi_memmap i915.i915_enable_rc6=1 i915.i915_enable_fbc=1 i915.lvds_downclock=1 pcie_aspm=force quiet\\"' /etc/default/grub
    # set output to graphical
    SetValue GRUB_TERMINAL_OUTPUT gfxterm /etc/default/grub
    SetValue GRUB_GFXMODE 960x600x32,auto /etc/default/grub
    SetValue GRUB_GFXPAYLOAD_LINUX keep /etc/default/grub # comment out this value if text only mode
    # install the actual grub2. Note that despite our --boot-directory option we will still need to move
    # the grub directory to /boot/grub during grub-mkconfig operations until grub2 gets patched (see below)
    grub_efi_x86_64-install --bootloader-id=grub --no-floppy --recheck
    # create our EFI boot entry
    # bug in the HP bios firmware (F.08)
    efibootmgr --create --gpt --disk /dev/sda --part 1 --write-signature --label "ARCH LINUX" --loader "\\\\grub\\\\grub.efi"
    # copy font for grub2
    cp /usr/share/grub/unicode.pf2 /boot/grub
    # generate config file
    grub-mkconfig -o /boot/grub/grub.cfg
    exit
    EFI_EOF
    # Install EFI using script inside chroot
    chroot ${INSTALL_TARGET} /install_efi
    rm ${INSTALL_TARGET}/install_efi
    # Post install steps
    # anything you want to do post install. run the script automatically or
    # manually
    touch ${INSTALL_TARGET}/post_install
    chmod a+x ${INSTALL_TARGET}/post_install
    cat > ${INSTALL_TARGET}/post_install <<POST_EOF
    set -o errexit
    set -o nounset
    # functions (these could be a library, but why overcomplicate things
    SetValue () { VALUENAME="\$1" NEWVALUE="\$2" FILEPATH="\$3"; sed -i "s+^#\?\(\${VALUENAME}\)=.*\$+\1=\${NEWVALUE}+" "\${FILEPATH}"; }
    CommentOutValue () { VALUENAME="\$1" FILEPATH="\$2"; sed -i "s/^\(\${VALUENAME}.*\)\$/#\1/" "\${FILEPATH}"; }
    UncommentValue () { VALUENAME="\$1" FILEPATH="\$2"; sed -i "s/^#\(\${VALUENAME}.*\)\$/\1/" "\${FILEPATH}"; }
    # root password
    echo -e "${HR}\\nNew root user password\\n${HR}"
    passwd
    # add user
    echo -e "${HR}\\nNew non-root user password (username:${USERNAME})\\n${HR}"
    groupadd sudo
    useradd -m -g users -G audio,lp,optical,storage,video,games,power,scanner,network,sudo,wheel -s /bin/bash ${USERNAME}
    passwd ${USERNAME}
    # mirror ranking
    echo -e "${HR}\\nRanking Mirrors (this will take a while)\\n${HR}"
    cp /etc/pacman.d/mirrorlist /etc/pacman.d/mirrorlist.orig
    mv /etc/pacman.d/mirrorlist /etc/pacman.d/mirrorlist.all
    sed -i "s/#S/S/" /etc/pacman.d/mirrorlist.all
    rankmirrors -n 5 /etc/pacman.d/mirrorlist.all > /etc/pacman.d/mirrorlist
    # temporary fix for locale.sh update conflict
    mv /etc/profile.d/locale.sh /etc/profile.d/locale.sh.preupdate || true
    # yaourt repo (add to target pacman, not tmp pacman.conf, for ongoing use)
    echo -e "\\n[archlinuxfr]\\nServer = http://repo.archlinux.fr/\\\$arch" >> /etc/pacman.conf
    echo -e "\\n[haskell]\\nServer = http://www.kiwilight.com/\\\$repo/\\\$arch" >> /etc/pacman.conf
    # additional groups and utilities
    pacman --noconfirm -Syu
    pacman --noconfirm -S base-devel
    pacman --noconfirm -S yaourt
    # sudo
    pacman --noconfirm -S sudo
    cp /etc/sudoers /tmp/sudoers.edit
    sed -i "s/#\s*\(%wheel\s*ALL=(ALL)\s*ALL.*$\)/\1/" /tmp/sudoers.edit
    sed -i "s/#\s*\(%sudo\s*ALL=(ALL)\s*ALL.*$\)/\1/" /tmp/sudoers.edit
    visudo -qcsf /tmp/sudoers.edit && cat /tmp/sudoers.edit > /etc/sudoers
    # power
    pacman --noconfirm -S acpi acpid acpitool cpufrequtils
    yaourt --noconfirm -S powertop2
    sed -i "/^DAEMONS/ s/)/ @acpid)/" /etc/rc.conf
    sed -i "/^MODULES/ s/)/ acpi-cpufreq cpufreq_ondemand cpufreq_powersave coretemp)/" /etc/rc.conf
    # following requires my acpi handler script
    echo "/etc/acpi/handler.sh boot" > /etc/rc.local
    # time
    pacman --noconfirm -S ntp
    sed -i "/^DAEMONS/ s/hwclock /!hwclock @ntpd /" /etc/rc.conf
    # wireless (wpa supplicant should already be installed)
    pacman --noconfirm -S iw wpa_supplicant rfkill
    pacman --noconfirm -S netcfg wpa_actiond ifplugd
    mv /etc/wpa_supplicant.conf /etc/wpa_supplicant.conf.orig
    echo -e "ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=network\nupdate_config=1" > /etc/wpa_supplicant.conf
    # make sure to copy /etc/network.d/examples/wireless-wpa-config to /etc/network.d/home and edit
    sed -i "/^DAEMONS/ s/)/ @net-auto-wireless @net-auto-wired)/" /etc/rc.conf
    sed -i "/^DAEMONS/ s/ network / /" /etc/rc.conf
    echo -e "\nWIRELESS_INTERFACE=wlan0" >> /etc/rc.conf
    echo -e "WIRED_INTERFACE=eth0" >> /etc/rc.conf
    echo "options iwlagn led_mode=2" > /etc/modprobe.d/iwlagn.conf
    # sound
    pacman --noconfirm -S alsa-utils alsa-plugins
    sed -i "/^DAEMONS/ s/)/ @alsa)/" /etc/rc.conf
    mv /etc/asound.conf /etc/asound.conf.orig || true
    #if alsamixer isn't working, try alsamixer -Dhw and speaker-test -Dhw -c 2
    # video
    pacman --noconfirm -S base-devel mesa mesa-demos
    # x
    #pacman --noconfirm -S xorg xorg-xinit xorg-utils xorg-server-utils xdotool xorg-xlsfonts
    #yaourt --noconfirm -S xf86-input-wacom-git # NOT NEEDED? input-wacom-git
    #TODO: cut down the install size
    #pacman --noconfirm -S xorg-server xorg-xinit xorg-utils xorg-server-utils
    # TODO: wacom
    # environment/wm/etc.
    #pacman --noconfirm -S xfce4 compiz ccsm
    #pacman --noconfirm -S xcompmgr
    #yaourt --noconfirm -S physlock unclutter
    #pacman --noconfirm -S rxvt-unicode urxvt-url-select hsetroot
    #pacman --noconfirm -S gtk2 #gtk3 # for taffybar?
    #pacman --noconfirm -S ghc
    # note: try installing alex and happy from cabal instead
    #pacman --noconfirm -S haskell-platform haskell-hscolour
    #yaourt --noconfirm -S xmonad-darcs xmonad-contrib-darcs xcompmgr
    #yaourt --noconfirm -S xmobar-git
    # TODO: edit xfce to use compiz
    # TODO: xmonad, but deal with video tearing
    # TODO: xmonad-darcs fails to install from AUR. haskell dependency hell.
    # switching to cabal
    # fonts
    pacman --noconfirm -S terminus-font
    yaourt --noconfirm -S webcore-fonts
    yaourt --noconfirm -S fontforge libspiro
    yaourt --noconfirm -S freetype2-git-infinality
    # TODO: sed infinality and change to OSX or OSX2 mode
    # and create the sym link from /etc/fonts/conf.avail to conf.d
    # misc apps
    #pacman --noconfirm -S htop openssh keychain bash-completion git vim
    #pacman --noconfirm -S chromium flashplugin
    #pacman --noconfirm -S scrot mypaint bc
    #yaourt --noconfirm -S task-git stellarium googlecl
    # TODO: argyll
    POST_EOF
    # Post install in chroot
    #echo "chroot and run /post_install"
    chroot /install /post_install
    rm /install/post_install
    # copy grub.efi file to the default HP EFI boot manager path
    mkdir -p ${INSTALL_TARGET}/boot/EFI/Microsoft/BOOT/
    mkdir -p ${INSTALL_TARGET}/boot/EFI/BOOT/
    cp ${INSTALL_TARGET}/boot/grub/grub.efi ${INSTALL_TARGET}/boot/EFI/Microsoft/BOOT/bootmgfw.efi
    cp ${INSTALL_TARGET}/boot/grub/grub.efi ${INSTALL_TARGET}/boot/EFI/BOOT/BOOTX64.EFI
    cp /root/root.gpg ${INSTALL_TARGET}/boot/
    # NOTES/TODO

Maybe you are looking for

  • Please note original maintainer when moving pkg to community

    Hello, i maintain the package subdl in AUR. Well, at least i did before it got moved to community. Despite the fact, that subdl is a really great programm (really, have a look at it if you don't like horribly dubbed movies but are too lazy to search

  • Why are web sites blocked on safari

    why are web sites blocked on safari

  • First Kernel Panic Ever

    I turned on my MBP yesterday and noticed that the top bar did not completely load for about 2 minutes. After it loaded everything worked as normal for around 1.5 hours. Then out of nowhere the Kernel Panic dialog popped up and told me to reboot. I ha

  • New computer - what about iTunes?

    I have a new computer (iMac) and used a windows based computer before. That computer no longer works, but what to do with iTunes and my iPhone on the new computer? I do not want to loose everything I have on the iPhone when I connect my iPhone to the

  • SQL Server 2008 Certification

    Hi All, I am preparing for SQL server 2008 Certification. Can anyone advise me if taking this certification is of any value because of SQL Server 2012 Certification? Thanks, Preetha