NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: NetBSD and ECC RAM?



I've been running ECC in the Windows box for years, it seems like a 'no brainer' for servers. Servers usually run for years, and Stuff Happens over the years [1].

Most of the computing industry has been hell-bent on performance, yielding impressive gains (albeit with occasional setbacks:  https://cachewarpattack.com/ )

But I'd prefer a reliable, unhackable, trustable compute fabric.  ECC is part of the 'reliable' part.

I would also like to see per /dev entry ACLs.  I would like to see better security than owner-group-everbody permissions.  I would like to see almost no normal system operations requiring root privs - and I would like to see root privs made much more narrow and fine-grained in scope - only large enough to do the specific job (e.g. change file permission, with a separate capability to change file ownership; etc).

I'm certainly no computer security guru, or have any valid opinions except as a luser.

Still --- I would like to see some performance gains "wasted" in order to gain better reliable, unhackable, trustable systems.


Thanks for tolerating my mini-soapbox.
-Mike

[1] I recently had a NetBSD server's computer start to have random crashes until I tried to boot it one more time, and it wouldn't come up at all.   Then after cleaning everything, making sure disks were OK, and trying again with no luck did I stare at the MB and saw  the electrolytic caps' tops bulging out!   My rule: Never trust HW completely.  It will fail.  Eventually.


On Fri, Feb 16, 2024 at 7:09 AM Hauke Fath (SPG) <hf%spg.tu-darmstadt.de@localhost> wrote:
On 2024-02-16 01:14, Michael van Elst wrote:
> We should have EDAC drivers that should at least report events,
> but so far there is nothing...

Sounds like a SoC project?

Cheerio,
Hauke


(FreeBSD appears to be no better off:
<https://forums.freebsd.org/threads/how-to-find-out-if-ecc-is-enabled.72839/>)

--
      The ASCII Ribbon Campaign                    Hauke Fath
()     No HTML/RTF in email             Institut für Nachrichtentechnik
/\     No Word docs in email                     TU Darmstadt
      Respect for open standards              Ruf +49-6151-16-21344


Home | Main Index | Thread Index | Old Index