Re: Donations (was, sadly, European orders)

2009-04-02 Thread Lars Noodén
Theo de Raadt wrote:
> When you buy a CD from the Computer shop, 100% ends up in the Computer
> Shop accounts.

Which is an option likely to make most everyone all around happy, but
maybe not so practical for outside of North America.

Setting up a branch inside the Euro zone might be worth considering to
reduce the entropy for donations/CD sales to AT, BE, CY, FI, FR, DE, GR,
IE, IT, LU, MT, NL, PT, SK, SI, and ES.

Even though the pound is weak,  today 1 GBP = 1.09366 EUR, it does not
officially accept Euro.  Border areas in other countries often accept as
well, though sometimes only unofficially.

Regards,
-Lars



Re: Donations (was, sadly, European orders)

2009-04-02 Thread Theo de Raadt
> On Thu, Apr 2, 2009 at 12:57 PM, Theo de Raadt 
> wrote:
> > I don't know how big people think the donations are, but sure, it is
> > substantial.  Yet it is not as much as these amounts above.  The
> > remaining is paid out of my salary, and yes, my salary is CD sales
> > dependent.  And yes, everyone including Nadine thinks that is a
> > ridiculous situation, but so it is.
> 
> OK, this gives me more impetus to buy CDs (I buy it off and on), but
> quick question - when we buy CDs, and we donate - does that go
> straight to you (ie, is part/whole of that your salary too, or is it
> pigeon holed for something else?)

When you buy a CD from a reseller like Wim, we apparently lose a lot
because his previous debt is still unserviced.

When you buy a CD from a reseller serviced by Wim, we also used to
lose, but more recently we don't lose, and it comes out to around 60%.

When you buy a CD from any other reseller who buys direct from the
Computer Shop, 60% goes to the Computer Shop.

When you buy a CD from the Computer shop, 100% ends up in the Computer
Shop accounts.

OK, so what happens after that.  The Computer Shop deducts the costs
of making the production, which includes the artwork, music, the
actual disk prodution cost, and other parts of the building the
package.  Then they subtract a service fee, shall we say, for
fullfillment of orders and all that kind of stuff.

After that, they pay me a salary, and I suppose, save a bit more in
some other way for the rainy days when CD sales are lower.  Or as they
had to do over the last few years -- they pay extra from a previous
rainy day fund because a distributor has not paid his bills on time.

> I work for a living, and would hate to see my income drop.  I would
> much prefer to be able to help send things along the right way.

Yup.  Definately.



Re: Donations (was, sadly, European orders)

2009-04-02 Thread Neal Hogan
On Thu, Apr 2, 2009 at 9:21 PM, bofh  wrote:

> On Thu, Apr 2, 2009 at 12:57 PM, Theo de Raadt 
> wrote:
> > I don't know how big people think the donations are, but sure, it is
> > substantial.  Yet it is not as much as these amounts above.  The
> > remaining is paid out of my salary, and yes, my salary is CD sales
> > dependent.  And yes, everyone including Nadine thinks that is a
> > ridiculous situation, but so it is.
>
> OK, this gives me more impetus to buy CDs (I buy it off and on), but
> quick question - when we buy CDs, and we donate - does that go
> straight to you (ie, is part/whole of that your salary too, or is it
> pigeon holed for something else?)
>
> I work for a living, and would hate to see my income drop.  I would
> much prefer to be able to help send things along the right way.
>
> Thanks.


I think if you look through the 140 or so posts of this thread (i.e., the
"European orders" thread) you'll find your answer, rather than asking Theo
to divulge even more private info.



>
>
>
> --
> http://www.glumbert.com/media/shift
> http://www.youtube.com/watch?v=tGvHNNOLnCk
> "This officer's men seem to follow him merely out of idle curiosity."
> -- Sandhurst officer cadet evaluation.
> "Securing an environment of Windows platforms from abuse - external or
> internal - is akin to trying to install sprinklers in a fireworks
> factory where smoking on the job is permitted."  -- Gene Spafford
> learn french:  http://www.youtube.com/watch?v=j1G-3laJJP0&feature=related
>
>


-- 
www.nealhogan.net  www.lambdaserver.com



Re: Donations (was, sadly, European orders)

2009-04-02 Thread bofh
On Thu, Apr 2, 2009 at 12:57 PM, Theo de Raadt 
wrote:
> I don't know how big people think the donations are, but sure, it is
> substantial.  Yet it is not as much as these amounts above.  The
> remaining is paid out of my salary, and yes, my salary is CD sales
> dependent.  And yes, everyone including Nadine thinks that is a
> ridiculous situation, but so it is.

OK, this gives me more impetus to buy CDs (I buy it off and on), but
quick question - when we buy CDs, and we donate - does that go
straight to you (ie, is part/whole of that your salary too, or is it
pigeon holed for something else?)

I work for a living, and would hate to see my income drop.  I would
much prefer to be able to help send things along the right way.

Thanks.


--
http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
"This officer's men seem to follow him merely out of idle curiosity."
-- Sandhurst officer cadet evaluation.
"Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks
factory where smoking on the job is permitted."  -- Gene Spafford
learn french:  http://www.youtube.com/watch?v=j1G-3laJJP0&feature=related



Re: where to order now ?

2009-04-02 Thread Mark Mathias
>> Is there another way to buy those cool wireframe-puffy stickers, than from
>> kd85?
>> I need something to cover my 'new' laptop. :-(
>
>
This is something I am curious about as well, new laptops look bare
without Puffy on the lid


-- 
Mark Mathias



Re: dvd-rw as user?

2009-04-02 Thread OpenBSD
El miC), 01-04-2009 a las 06:18 -0500, Josh Grosse escribiC3:
> On Tue, 31 Mar 2009 21:52:04 -0700, OpenBSD wrote
> 
> > i do not have any problem mounting the dvd, as root or at user desktop;
> > the problem is when i do $ qemu -hda slackware.img -cdrom /dev/cd0a
> > -boot d -m 128, at this time the dvd has been mounted by root, and it
> > fails accessing the dvd.
> > 
> > PS:
> > I can read files at the mounted dvd, when qemu fails.
> 
> You cannot use the block device node of a mounted device.  Either use the raw
> device, or, unmount it before using qemu. 

Yes, it was the problem, as member of operator group, i had to
umount /dev/cd0a, and then qemu worked correctly.

During the installation, the laptop stop, because of high temperature,
it happened 3 single times. I could not determine which is the cause.
Logs just show high temperature. Compaq V3019US amd64x2 Turion.

Thanks to all of you who help me.



Anyone using munin?

2009-04-02 Thread Marc Runkel
Trying to set up munin work with OpenBSD and was wondering if anyone had some
plugins pre-written?  In particular interface statistics but I'll take just
about anything.

Thanks,

Marc



Re: Donations (was, sadly, European orders)

2009-04-02 Thread Greg Thomas
"Work hard, play harder. Oh what, just because you are you, you dont
get to have a life? Fuck that. No need to justify anything in that
regard."

+1, as others have done already.

I regret not having been able to donate the last 18 months or so,
maybe longer.  But it's only because of my personal financial issues.
Hopefully I'll get back to buying multiple sets and donating cash.

On Wed, Apr 1, 2009 at 10:32 PM, David Schulz 
wrote:
> Work hard, play harder. Oh what, just because you are you, you dont get to
> have a life? Fuck that. No need to justify anything in that regard.
>
> Hopefull even after all this you and other Devs still have all the
motivation
> it takes to keep making the OpenBSD Project better and better;
>
> Having some sort of Report once a year about Donation Money or even also
the
> CD and Shirt Sales money and where it goes would help to shut up even the
> most ignorant. Reports possibly ala' FreeBSD Foundation; but if not, not; i
> personally have no doubt that you are the last Guy how would enrich himself
> on Money donated to OpenBSD, screw that.
>
> regards,
> David
>
> On Wed, Apr 01, 2009 at 10:11:07PM -0600, Theo de Raadt wrote:
>> > So what if it's founder lives a mountain biking/hiking lifestyle?
>>
>> There are people being misled that I pay for this extravagant
>> lifestyle out of donations.  Hah.  Shame on those people who spread
>> that rumour, and also shame on those who are so easily deceived.
>>
>> I hike near conferences that I am invited to; flights paid for.  I
>> hike near hackathons that I must attend with developers -- hackathons
>> tend to be near hiking areas but I am not alone in preferring this
>> (our hackathon locations are otherwise chosen for "cheap accomodation
>> with free internet2"... perhaps internet2 usage is correleted to good
>> terrain..).  Once a year I pay with my hard earned salary for a trip
>> to hike somewhere.  Then one further time a year I use the reward
>> points -- from all my other flights and hackathon hotel bills and
>> developer flights paid with donation money -- to get to another hiking
>> destination.
>>
>> Yes... I have to take time off to do this, but as many of you know
>> when I get back from a trip I go through all the thousands of mails I
>> received and the project moves on.  And between hikes in a foreign
>> country I find insecure ways to partially get in touch a bit and some
>> developers really hate that.  I work hard.  When I don't hike, and
>> especially during pre-release times, I sometimes don't get outside for
>> days at a time except on forced 10km runs.
>>
>> Extravagant?  No.  Just a life choice.
>>
>> I have had people accuse me privately of this.  I hope others are not
>> so easily deceived.
>>
>> Trust me, with the OpenBSD donations are a loss.  Just look at this
>> page, and estimate the hotel bills:
>>
>>   http://www.openbsd.org/hackathons.html
>>
>> After you estimate those numbers, where would I find money to spend on
>> even a slurpee?  Gimme a fucking break...  Donations help a lot, but
>> they are not the whole picture.  That is why we are so eager -- as a
>> project -- get the money that Wim has taken from us, because it will
>> help OpenBSD run more hackathons.  The systems code you are running,
>> almost half of it came from hackathons.
>>
>> > If I can give him that and he can continue to provide this wonderful
>> > product for "free," I'm happy to help him live his lifestyle (even if
>> > he doesn't play well with others at times).
>>
>> It's a deal.
>>
>> > It's too bad the project
>> > doesn't have greater financial backing to allow more development of
>> > the OS goodness we enjoy--and also allow more "OpenBSD people" to live
>> > a Theo-like lifestyle, if they so choose.
>>
>> Others are trying to do it too, but they are just more quiet about it.
>
>



--
2nd Annual R2 Poker Ride
http://lodesertprotosites.org/sites.html

Dethink to survive - Mclusky



Re: where to order now ?

2009-04-02 Thread openbsd misc
On Thu, Apr 2, 2009 at 11:48 PM, Theo de Raadt  wrote:
>> I see OpenBSDEurope appear to advertise the CDs for about 30 euro a
>> pop: http://www.openbsdeurope.com/45.htm
>>
>> Other sellers offer the CDs for the usual 50 euro.
>> Does the lower price @ openbsdeurope mean they have smaller margins or
>> OpenBSD.org gets less money, or both?
>
> It means they intend to operate with smaller margins.
>
> I never did understands Wim's math.
>
>
Well I'm glad we can easily order CD's again - I've just placed my
order and as well as the lower CD set price, I thought for once the
international shipping was very reasonable at eur 1.75.



Re: Webserver frozen - OpenBSD 4.4

2009-04-02 Thread Jean-Gérard Pailloncy
Hi,

I had a webserver with mod_perl and mysql on OpenBSD 4.4
Under heavy load or long running load, the box randomly freezes.
The problem was a bug in the uvm.
The fix is a uvm patch from Ariane in 01/2009.

Hope that will help you.

JG



Re: Where did the donation money go, Wim?

2009-04-02 Thread Pedro la Peu
> (Linux Expo Live, held in london last october)

Fun times... though that was a dead, unattended event. At other events 
there were eager punters who wanted OpenSSH/OpenBSD t-shirts, posters, 
cds, lanyards, soft toys, etc. Lots of 'em.

There was no indication the proceeds were going anywhere other than to 
OpenBSD. Not for the buyers or the volunteer sellers.

Sadly said. 



Re: Wim

2009-04-02 Thread Hannah Schroeter
Hi!

On Thu, Apr 02, 2009 at 06:48:48PM -0400, Ted Unangst wrote:
>On Thu, Apr 2, 2009 at 6:31 PM, Hannah Schroeter  wrote:
>> On Thu, Apr 02, 2009 at 10:15:13PM +0200, Matthias Kilian wrote:
>>>Wim *does* filter traffic from cvs.openbsd.org. At least on ports
>>>25 and 80:

>> Port 80 works from a private dialup as well as a private rented server.

>The problem is a man in the middle attack stealing all the ARP packets from 
>cvs.

That must be it. That I haven't thought of that... *rolls eyes* The
gaping security hole in OpenBSD... *rolls eyes more* I can't sleep
anymore as long as I keep running any OpenBSD host...

SCNR,

Hannah.



Re: where to order now ?

2009-04-02 Thread Martin Schröder
2009/4/3, ropers :
>  Other sellers offer the CDs for the usual 50 euro.
>  Does the lower price @ openbsdeurope mean they have smaller margins or
>  OpenBSD.org gets less money, or both?

30 is 60% of 50. :-)

I seriously doubt that other european resellers donate the 20 profit
they make.

Best
   Martin



Re: Wim

2009-04-02 Thread Ted Unangst
On Thu, Apr 2, 2009 at 6:31 PM, Hannah Schroeter  wrote:
> On Thu, Apr 02, 2009 at 10:15:13PM +0200, Matthias Kilian wrote:
>>Wim *does* filter traffic from cvs.openbsd.org. At least on ports
>>25 and 80:

> Port 80 works from a private dialup as well as a private rented server.

The problem is a man in the middle attack stealing all the ARP packets from cvs.



Re: where to order now ?

2009-04-02 Thread ropers
I see OpenBSDEurope appear to advertise the CDs for about 30 euro a
pop: http://www.openbsdeurope.com/45.htm

Other sellers offer the CDs for the usual 50 euro.
Does the lower price @ openbsdeurope mean they have smaller margins or
OpenBSD.org gets less money, or both?

Thanks and regards,
--ropers



Re: Wim

2009-04-02 Thread ropers
2009/4/2 Matthias Kilian :
>
> Wim *does* filter traffic from cvs.openbsd.org. At least on ports
> 25 and 80:
>
> $ telnet  www.kd85.com 25
> Trying 62.116.6.182...
>
> [nothing]

By way of comparison -- this is from an Ubuntu PC NOT at cvs.openbsd.org:

$ netstat -ie | grep inet\ addr
  inet addr:95.***.***.***  Bcast:95.***.***.***
Mask:255.***.***.***
  inet addr:127.0.0.1  Mask:255.0.0.0

$ telnet  www.kd85.com 25
Trying 62.116.6.182...
Connected to spargel.kd85.com.
Escape character is '^]'.
220 spargel.kd85.com ESMTP Sendmail 8.13.8/8.13.6; Fri, 3 Apr 2009
00:26:06 +0200 (CEST)
HELO podgeandrodge.ballydung.com
250 spargel.kd85.com Hello 95-***-***-***-***.***.*** [95.***.***.***]
(may be forged), pleased to meet you
MAIL FROM:
250 2.1.0 ... Sender ok
^]

telnet> quit
Connection closed.

> $ telnet  www.kd85.com 80
> Trying 62.116.6.182...
>
> [nothing]

Also from here:

$ telnet www.kd85.com 80
Trying 62.116.6.182...
Connected to spargel.kd85.com.
Escape character is '^]'.
GET / HTTP/1.1
Host: www.kd85.com

HTTP/1.1 200 OK
Date: Thu, 02 Apr 2009 22:11:41 GMT
Server: Apache/1.3.29 (Unix) mod_ssl/2.8.16 OpenSSL/0.9.7j
Transfer-Encoding: chunked
Content-Type: text/html

1000

mailto:w...@kd85.com>
(...)

$ date
Fri Apr  3 00:30:35 CEST 2009

Any questions?

Thanks and regards,
--ropers



Re: where to order now ?

2009-04-02 Thread Marius

Sorry, I actually wanted to mail to misc@

Marius wrote:

Theo de Raadt wrote:

i) print other things they were not granted the rights to
   do and then keep the profits
  
Is there another way to buy those cool wireframe-puffy stickers, than 
from kd85?

I need something to cover my 'new' laptop. :-(




Re: Wim

2009-04-02 Thread Hannah Schroeter
Hi!

On Thu, Apr 02, 2009 at 10:15:13PM +0200, Matthias Kilian wrote:
>Wim *does* filter traffic from cvs.openbsd.org. At least on ports
>25 and 80:

>$ telnet  www.kd85.com 25
>Trying 62.116.6.182...

>[nothing]

>$ telnet  www.kd85.com 80
>Trying 62.116.6.182...

>[nothing]

Port 80 works from a private dialup as well as a private rented server.

Do you want to send mail to x...@*www.*kd85.com? I'd rather try the MX
record of kd85.com, which is ok13.kd85.com. That worked for me too, from
the same both sources (spamd's greeting with the first few octets
stuttered).

But JFTR, www.kd85.com also responds on 25, with a Sendmail greeting.

Did you retry to double-check that it wasn't the machine being rebooted
and just coming up pre-start of the daemons?

Kind regards,

Hannah.



Re: Donations (was, sadly, European orders)

2009-04-02 Thread Bob Beck
> Others are trying to do it too, but they are just more quiet about it.
> 
> And then there's the other catagory... the breeders...
> 

No, you're forgetting the third category - the titanium clipped,
whose ungrateful spawn are now 18 and will soon be old enough to be
capable of leaving the house...

Quick marco.. snip 'em before it gets worse! 



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread (private) HKS
On Thu, Apr 2, 2009 at 4:52 AM, LeiV  wrote:
> Hi,
> I have a openbsd firewall/gateway and behind a webserver, users arrive to my
webserver via 1 domain name, I have a cable connection 12Mbps down/500Kbps
upthe down speed is OK I dont have so many incoming requests ...but the up
speed is saturated easily with those requests as my pages have images, etc...
> I would like to add another internet connection to my openbsd box so I can
increase my upstream bandwitch...it is possible? all my incoming requests will
come with the same internet connection as I only have 1 domain namecan I
send back the requested pages with both connections to use both upstream
bandwitch ? is so, how can i do it ? any howto?
>
> Thanks
>
> --
> View this message in context:
http://n2.nabble.com/Using-2-internet-connections-on-OpenBSD-Gateway-tp257407
5p2574075.html
> Sent from the OpenBSD Misc mailing list archive at Nabble.com.


In a nutshell, no you can't.

Unless your ISP can bond a pair of connections to a single IP, or load
balance incoming traffic over two IPs. Or if you want to do
round-robin DNS load balancing (bad idea) so some incoming requests
hit one IP, some hit the other. Or if you get your own AS and talk BGP
with your providers.

But you can't take requests in to one IP and send the reply out from
another (think about state). A good ISP won't let you send traffic
over their network from an IP they didn't assign you, so you can't
spoof the from-address of the reply.

So unless you're willing to do some heavy lifting on network configuration,
no.

Instead of mucking about with this, you're better off buying a decent
VPS or dedicated server somewhere with a real network connection.

-HKS



Re: FW: raidctl -vF component0 raid0

2009-04-02 Thread Alexis de BRUYN
>From raidctl(8) :
"-A root dev
[snip]
All components of the set must be of type RAID in the disklabel.
[Snip]
the RAID set must have its `a' partition (aka raid[0..n]a) set up.
"

>> raidctl -A root raid0
>>
>> At this point, everything seams as expected
>>
>> Create radi0's partitions:
>> Disklabel -E raid0
>>
[snip]
>>
>> Create the new filesystems:
>> For x in a d e f g h I; do newfs raid0${x}; done
>>
>> Seams to work fine.

Now that your components are of type RAID, you must create your
filesystems before making the RAID set auto-configurable:

raidctl -A root raid0

and then:

For x in a d e f g h I; do newfs raid0${x}; done

I also noticed:

>> Install 4.4 i386 on to sd0
[snip]
>> cd /usr/src/sys/arch/sparc64/conf/
[snip]
>> cp /usr/src/etc/etc.sparc64/MAKEDEV ./

Wrong copy/paste?

Chris Harries a icrit :
> Good call, did that, Still same problem, hangs at same place.
> 
> All seams correct now:
> 
> # disklabel -E raid0
> Initial label editor (enter '?' for help at any prompt)
>> p
> OpenBSD area: 0-1952459648; size: 1952459648; free: 719334272
> #size   offset  fstype [fsize bsize  cpg]
>   a: 104857600RAID
>   b:  4194304 10485760swap
>   c:   19524596480  unused  0 0
>   d:104857600 14680064RAID
>   e:   1048576000119537664RAID
>   f: 20971520   1168113664RAID
>   g:  2097152   1189085184RAID
>   h: 20971520   1191182336RAID
>   i: 20971520   1212153856RAID
> 
> Noticed this in dmesg, not sure if at the half way point reboot though it's
> anything to worry about.
> 
> Kernelized RAIDframe activated
> cd0(atapiscsi0:0:0): Check Condition (error 0x70) on opcode 0x0
> SENSE KEY: Not Ready
>  ASC/ASCQ: Medium Not Present
> raid0 at root: (RAID Level 1) total number of sectors is 1952459648 (953349
> MB) as root
> softraid0 at root
> softraid0: sd0d can not read metadata version 1847620201, expected 3
> softraid0: sd1d can not read metadata version 8, expected 3
> softraid0: raid0a can not read metadata version 8, expected 3
> softraid0: raid0d can not read metadata version 8, expected 3
> softraid0: raid0e can not read metadata version 8, expected 3
> softraid0: raid0f can not read metadata version 8, expected 3
> softraid0: raid0g can not read metadata version 8, expected 3
> softraid0: raid0h can not read metadata version 8, expected 3
> softraid0: raid0i can not read metadata version 8, expected 3
> root on raid0a
> filesystem type 19 not known.. assuming ffs
> WARNING: / was not properly unmounted
> swapmount: no device
> raid0: Error re-writing parity!
> 
> Chris
> 
> -Original Message-
> From: Alexis de BRUYN [mailto:ale...@de-bruyn.fr]
> Sent: 02 April 2009 14:58
> To: Chris Harries
> Cc: misc@openbsd.org
> Subject: Re: FW: raidctl -vF component0 raid0
> 
>> Create radi0's partitions:
>> Disklabel -E raid0
>>
>> A: 5G / 4.2BSD
>> B: 2048M swap
>> D: 50G /var/mysql 4.2bsd
>> E: 500G /var/vmail 4.2bsd
>> F: 10G /var  4.2bsd
>> G: 1G /tmp   4.2bsd
>> H: 10G /usr  4.2bsd
>> I: 10G /home 4.2bsd
> 
> FS Type must be "RAID" instead of "4.2BSD".
> 
> Chris Harries a icrit :
>> All typoes checked. Now correct...finally,
>>
>> Apologies
>>
>> Chris
>>
>> -Original Message-
>> From: Chris Harries [mailto:ch...@sharescope.co.uk]
>> Sent: 02 April 2009 14:07
>> To: 'Alexis de BRUYN'
>> Subject: RE: raidctl -vF component0 raid0
>>
>> Afternoon,
>>
>> Well on an i386 system with 2 x 1 TB Seagate hard drives, I generally
> follow
>> this method from what I know and have learnt:
>>
>> Install 4.4 i386 on to sd0
>> Reboot
>>
>> Patch source tree to 4.4 PATCH:
>> cd /usr/src
>> mount /dev/cd0a /mnt
>> tar -zxvpf /mnt/src.tar.gz -C /usr/src ./sys
>> umount /mnt
>> cvs -qd anon...@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_4_4 -P src
>>
>> Create new kernel with patches:
>> cd /usr/src
>> cvs -d anon...@anoncvs.uk.openbsd.org:/cvs up -Pd
>> make -k cleandir
>> rm -rf /usr/obj/*
>> make obj
>>
>>
>> cd /usr/src/etc/mtree
>> install -c -o root -g wheel -m 660 special /etc/mtree
>> install -c -o root -g wheel -m 444 4.4BSD.dist /etc/mtree
>> mtree -qdef /etc/mtree/4.4BSD.dist -p / -u
>> cd /usr/src/etc
>> env DESTDIR=/ make distrib-dirs
>>
>> cd /usr/src/sys/arch/sparc64/conf/
>> config GENERIC
>> cd ../compile/GENERIC
>> make clean && make depend && make
>> cp /bsd /bsd.old
>> cp bsd /bsd
>> chown root:wheel /bsd
>> reboot
>>
>> cd /usr/src/
>> make build
>> cd /dev
>> cp /usr/src/etc/etc.sparc64/MAKEDEV ./
>> ./MAKEDEV all
>>
>> Sysmerge
>> reboot
>>
>> Now we have a full patched system, add raidframe:
>> cd /sys/arch/i386/conf
>> cat >> GENERIC.RAID << EOF
>> include "arch/'uname -m'/conf/GENERIC
>> option RAID_AUTOCONFIG
>> pseudo-device raid 4
>> EOF
>>
>> Re-create the kernel with patches and raidframe:
>> config GENERIC.RAID
>> cd ../compile/GENERIC.RAID
>> make clean depend && make
>> cp

Re: Wim

2009-04-02 Thread Gonzalo Lionel Rodriguez
Come on!!

2009/4/2 Matthias Kilian :
> On Thu, Apr 02, 2009 at 09:59:38PM +0200, Toni Mueller wrote:
>> > This guy some of you think is so honest.  He's filtering port 25
>> > from cvs.openbsd.org.
>>
>> did you try sending from a different server thereafter?
>
> Wim *does* filter traffic from cvs.openbsd.org. At least on ports
> 25 and 80:
>
> $ telnet  www.kd85.com 25
> Trying 62.116.6.182...
>
> [nothing]
>
> $ telnet  www.kd85.com 80
> Trying 62.116.6.182...
>
> [nothing]
>
> Silly. So silly.
>
> Ciao,
>Kili



Re: Wim

2009-04-02 Thread Matthias Kilian
On Thu, Apr 02, 2009 at 09:59:38PM +0200, Toni Mueller wrote:
> > This guy some of you think is so honest.  He's filtering port 25
> > from cvs.openbsd.org.
> 
> did you try sending from a different server thereafter?

Wim *does* filter traffic from cvs.openbsd.org. At least on ports
25 and 80:

$ telnet  www.kd85.com 25
Trying 62.116.6.182...

[nothing]

$ telnet  www.kd85.com 80
Trying 62.116.6.182...

[nothing]

Silly. So silly.

Ciao,
Kili



Re: Wim

2009-04-02 Thread Theo de Raadt
> On Thu, 02.04.2009 at 00:17:35 -0600, Theo de Raadt  
> wrote:
> > This guy some of you think is so honest.  He's filtering port 25
> > from cvs.openbsd.org.
> 
> did you try sending from a different server thereafter?
> 
> 
> 
> I've seen a failure mode where a machine appears to be up, but slowly
> stops accepting ever more tcp connections over time, until the system
> comes to a grinding halt, the last thing being becoming unresponsive to
> ping and finally, console lockup, on several machines. They are all
> different hardware, but are intel or AMD CPUs. I've seen this for a
> long time (years), but have no way to reproduce it, and also no way to
> catch debug info in the actual cases (eg. "boot crash" doesn't do
> anything), and therefore not reported it, since you don't want
> incomplete bug reports. I was so far unable to detect a pattern. A
> machine usually runs fine for months, then takes a few hours or up to
> 2-3 days, to get into that state. If it happens, I can usually only
> press the reset button.

thanks for lesson in how the Internet works.



Re: Wim

2009-04-02 Thread Toni Mueller
Hi,

On Thu, 02.04.2009 at 00:17:35 -0600, Theo de Raadt  
wrote:
> This guy some of you think is so honest.  He's filtering port 25
> from cvs.openbsd.org.

did you try sending from a different server thereafter?



I've seen a failure mode where a machine appears to be up, but slowly
stops accepting ever more tcp connections over time, until the system
comes to a grinding halt, the last thing being becoming unresponsive to
ping and finally, console lockup, on several machines. They are all
different hardware, but are intel or AMD CPUs. I've seen this for a
long time (years), but have no way to reproduce it, and also no way to
catch debug info in the actual cases (eg. "boot crash" doesn't do
anything), and therefore not reported it, since you don't want
incomplete bug reports. I was so far unable to detect a pattern. A
machine usually runs fine for months, then takes a few hours or up to
2-3 days, to get into that state. If it happens, I can usually only
press the reset button.

If I may have a wish granted, then please, pretty please, try to keep
USB, and especially USB keyboards, alive for as long as possible,
because otherwise, I can't do anything in most cases of such a lockup.

> For what reason would he do that?

I don't know, either, but since he's allegedly on the road, it might be
difficult for him to fix it soonish, if it is a problem like the one
described above.


Kind regards,
--Toni++



Re: keeping the system updated

2009-04-02 Thread Alun Eyre

Hi,

Thanks for info and link.


Kind regards,

Al.


On 1 Apr 2009, at 19:24, J.C. Roberts wrote:

On Wed, 1 Apr 2009 16:40:54 +0100 Alun Eyre  


wrote:


Hi,

I have pre-ordered 4.5 on CD, and have been reading the FAQ's,
man pages, mailing list archives, etc for some background on how to
keep the system up to date once installed.

I understand I could follow stable, or current. If I follow stable,
are security updates for ports and packages released to stable, or
just updates to the core release?

I know I could get updates to both core release and ports if I follow
current, but as this is going to be a production server, I would not
feel comfortable running it in on current.

What is the best practise within OpenBSD to keep both the core
and ports/packages up to date security-wise on the 4.5 release?

Thanks,


Al.


The ports -STABLE tree is no longer supported, so what is there on
release is what you'll run. Due to the modifications to the OpenBSD
compiler and other security measures in the system even the -STABLE
ports are better protected than on other systems. If an exploit is
found in one of the ports as it is built/run on other systems, the
exploit will often fail on OpenBSD.

*outside* of the official openbsd project some ports for -STABLE are
updated by people who have an interest in doing specific security
updates to specific ports. You can find the *unoffical* patches here:

http://openbsd.rutgers.edu/

The above requires you to learn how to build your own software within
the ports tree, rather than the typical (and suggested) route for new
users to use the available packages (i.e. pre-compiled ports).

If you're starting off, just stick with following -STABLE until you
learn the system. It's the best way to keep things simple while you're
learning, and it's also a great way to keep things simple when running
production servers.

--
J.C. Roberts




Re: Where did the donation money go, Wim?

2009-04-02 Thread Owain Ainsworth
On Thu, Apr 02, 2009 at 03:13:03PM +, Christian Weisgerber wrote:
> Theo de Raadt  wrote:
>
> > I have been in commuinication with a few people who have told me
> > stories that Wim received donations, obviously meant for the OpenBSD
> > project, collected at European conference tables -- and that this
> > money has not made it to the OpenBSD project.
>
> At all the European conference tables where I've been with Wim over
> the years, all the money from T-shirt, poster, CD sales *and* cash
> donations went into the same glass jar, and at the end of the day
> Wim collected the money.
>
> I don't know what happened afterwards and if Wim's accounting ever
> led him to separate out the donations money.
>

I can't add much more. However, when I helped out at a conference (Linux
Expo Live, held in london last october), similar things happened:

There wasn't much in the way of donations (a few quid here and there for
a lanyard), OpenBSD wasn't a major feature there. On the other hand,
again the money went all went into the same jar with tshirt, cd etc
sales. I've no idea what happened to it.

-0-
--
Larkinson's Law:
All laws are basically false.



Re: Donations (was, sadly, European orders)

2009-04-02 Thread Marti Martinez
Does anybody here remember the sound and fury quite a few years back
when Theo (or someone) posted a picture of his new bike shortly after
a release -- I can't seem to find it in the archives. Anyhow, it's not
all that important. The point is that suckers like me -- I've made a
couple of paltry donations, but mostly I've just taken years of
awesome code from Theo and the other developers -- really don't have
any say in how the project operates. Giving money to OpenBSD doesn't
put you on the board of directors -- hell, it doesn't even make you a
share holder.

You give your *donations* to Theo and expect -- in good faith -- that
he'll spend them wisely to further OpenBSD development; this doesn't
entitle you to demand reporting on exactly how they're spent. If you
don't like it, then stop donating. When it comes to his *salary*, Theo
is entitled to spend his money however he damned well pleases -- being
an open source developer does not condemn one to a life of asceticism
(not that hiking/backpacking/mountain biking is exactly an extravagant
lifestyle anyhow).

It's a shame that there's a rift between Wim and Theo -- I've never
dealt with Wim on any level, but like pretty much everyone else here
has had good impressions about him over the years. I could hope that
this issue will be resolved to everyone's satisfaction, but I'm
realistic about Theo's abrasive nature, so I'm not holding my breath
;) Regardless, the project will no doubt move forward, and beer-loving
Europeans (and Americans)* will no doubt still be able to get the
software one way or another and give their money to the project in
some form or fashion.

*Canadians apparently fall in this group too.

On Wed, Apr 1, 2009 at 9:11 PM, Theo de Raadt 
wrote:
>> So what if it's founder lives a mountain biking/hiking lifestyle?
>
> There are people being misled that I pay for this extravagant
> lifestyle out of donations.  Hah.  Shame on those people who spread
> that rumour, and also shame on those who are so easily deceived.
>
> I hike near conferences that I am invited to; flights paid for.  I
> hike near hackathons that I must attend with developers -- hackathons
> tend to be near hiking areas but I am not alone in preferring this
> (our hackathon locations are otherwise chosen for "cheap accomodation
> with free internet2"... perhaps internet2 usage is correleted to good
> terrain..).  Once a year I pay with my hard earned salary for a trip
> to hike somewhere.  Then one further time a year I use the reward
> points -- from all my other flights and hackathon hotel bills and
> developer flights paid with donation money -- to get to another hiking
> destination.
>
> Yes... I have to take time off to do this, but as many of you know
> when I get back from a trip I go through all the thousands of mails I
> received and the project moves on.  And between hikes in a foreign
> country I find insecure ways to partially get in touch a bit and some
> developers really hate that.  I work hard.  When I don't hike, and
> especially during pre-release times, I sometimes don't get outside for
> days at a time except on forced 10km runs.
>
> Extravagant?  No.  Just a life choice.
>
> I have had people accuse me privately of this.  I hope others are not
> so easily deceived.
>
> Trust me, with the OpenBSD donations are a loss.  Just look at this
> page, and estimate the hotel bills:
>
>http://www.openbsd.org/hackathons.html
>
> After you estimate those numbers, where would I find money to spend on
> even a slurpee?  Gimme a fucking break...  Donations help a lot, but
> they are not the whole picture.  That is why we are so eager -- as a
> project -- get the money that Wim has taken from us, because it will
> help OpenBSD run more hackathons.  The systems code you are running,
> almost half of it came from hackathons.
>
>> If I can give him that and he can continue to provide this wonderful
>> product for "free," I'm happy to help him live his lifestyle (even if
>> he doesn't play well with others at times).
>
> It's a deal.
>
>> It's too bad the project
>> doesn't have greater financial backing to allow more development of
>> the OS goodness we enjoy--and also allow more "OpenBSD people" to live
>> a Theo-like lifestyle, if they so choose.
>
> Others are trying to do it too, but they are just more quiet about it.
>
> And then there's the other catagory... the breeders...
>
>



--
Systems Programmer, Principal
Electrical & Computer Engineering
The University of Arizona
ma...@arizona.edu



Re: where to order now ?

2009-04-02 Thread Theo de Raadt
>Liam J. Foy wrote:
>
>> Yes, we are pleased to be a new reseller based in the UK (we serve
>> Europe too of course! - the 'we' bit is a close friend who is involved
>> in distribution in the UK (which is what we're also setting up)).
>>
>> We are not associated with the OpenBSD project, but Theo has kindly let
>> us use this domain.
>>
>> And of course, yes, money flows right back into the OpenBSD Project.
>
>All with a written contract this time, I hope?  :-|

There is no need to do such contracts with resellers who --

a) pre-pay their bulk orders,
or
b) pay on standard net-30 or such terms

but more importantly
c) don't get trusted to take donations for the project
d) don't get to do double accounting for things they spend
   "for us", and then charge back to us as a bill, and then
   also deduct the receipt against their taxes
e) don't get to withhold payment for many years
f) don't get to do VAT fraud on import
g) don't get rights to print posters and keep the profits
   because we think it helps us all
h) don't get rights to print tshirts and keep the profits
   because we think it helps us all
i) print other things they were not granted the rights to
   do and then keep the profits
j) then _transfer_ the artwork to other people for making
   their own tshirts, in direct violation of copyright law

The situation is less favorable for these new resellers but it also
means noone can be taken advantage of.  They also cannot do what Wim
did to us.

Don't worry.  These are regular resellers.  And I am very happy to
see them show up!  Welcome, Liam!



Re: where to order now ?

2009-04-02 Thread Theo de Raadt
>> You should be able to find a suitable order site at
>> http://www.openbsd.org/orders.html
>> 
>> 
>Being in the UK I think I have two options on there.  One is always 
>lagging behind (their website currently lists 4.3!) and the other is 
>OpenBSDEurope - is this a new seller covering Europe now Wim has been 
>dropped as supplier?  If I buy from this seller will the money be going 
>to the project?

OpenBSDEurope is a new UK-based seller who has showed up; keen to do
business now that there is space for new seller.  They are not
associated with OpenBSD directly, except I gave permission for the
word OpenBSD to be used by them in that way.  Almost all resellers we
are talk to are actually offering or insisting on pre-payment for
shipments to them, which stands in stark contrast to the way Wim did
business (requesting payment on just the actual production cost of the
CD, to avoid paying VAT on the real price, and then retaining the
payments for roughly 5 years).

Some of the existing European distributors will still get their
product from Wim this time around, since Austin convinced me that we
should still give Wim a quantity.  This is to avoid shock to the
buyers at the end of the chain, ie you.  To me, that's like feeding 
a dog who just bit your leg, but we also feel for you customers who's
credit cards Wim charged before we even have manufacturing done.

Same as with any other reseller who does clean business, 60% of the CD
sales will go to the Computer Shop.  Then Computer Shop will then
support the project out of the proceeds on very clear terms that we
have come to agree with over the years.  This part works very well,
thanks to Austin's dilligent attention to detail.

All the other resellers have been legit and good (well, there was one
other smaller one that caused trouble for a bit).  Buying from Wim,
much less than 60% per CD has made it back to the project over the last
decade.  I shudder to think of the value.  Austin is still calculating
the full losses we have encountered.

So go ahead, buy from OpenBSDEurope.  They're new, keen, and best way
for me to be here in a year saying "they are legit" is for people to
find out.

Those of you who cancel orders with Wim and move to another seller
who they know is not ordering from Wim?  Well, it is your call :-)



Re: where to order now ?

2009-04-02 Thread dtalk

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Liam J. Foy wrote:


Yes, we are pleased to be a new reseller based in the UK (we serve
Europe too of course! - the 'we' bit is a close friend who is involved
in distribution in the UK (which is what we're also setting up)).

We are not associated with the OpenBSD project, but Theo has kindly let
us use this domain.

And of course, yes, money flows right back into the OpenBSD Project.


All with a written contract this time, I hope?  :-|

- --
David Talkington
dt...@drizzle.com
- --
PGP key: http://www.flyingjoke.org/keys/801E3976.asc
(What's this?  http://en.wikipedia.org/wiki/Digital_signature)
iQEcBAEBAgAGBQJJ1QYUAAoJEO7jL1CAHjl2xH0IAIhjLfNjXm1QzaqT1VOiwHnf
kbGFz11nNqeeOeMwFw4e/gmDKR844phRcoYabn9ZHup9zmNhNCjzIyX0AKE7jaEi
b7zz7LCUvojsfawaiiDjre42RMHFzESHOU9snYfQN3SJqJIkQLago3Mz0FdLfj0m
/Z3XdvfEI+7IqwFDN6WZUNTH8OG6UZwkLKLdj3cwzJTtHNONi4ZmUQDbXVF8UMmW
4cee14W2uY4Ok9EQ6XwbhnRVrnLb9VztTnK+s8Vb/AG/PyNIrA38bCBd6EXUAJrD
BC8r9gBkfCuxpIaQ01OMKDf9dNajlQ5wmFYlf/AIV+I7x0W5ZwqMCcSoi5lk2+Y=
=Jb6E
-END PGP SIGNATURE-



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Stuart Henderson
On 2009-04-02, Matthew Dempsky  wrote:
> On Thu, Apr 2, 2009 at 5:05 AM, Stefan Sperling  wrote:
>> man 8 route
>> /mpath
>
> I was under the impression that to use multipath routing, you need to
> also use BGP (which probably isn't a possibility for the OP since he
> said he's using a cable modem).  Am I mistaken?

we don't support ECMP via bgp, only with OSPF or static routes.



Re: where to order now ?

2009-04-02 Thread Liam J. Foy
Jon Tibble wrote:
> Thomas Pfaff wrote:
>> On Thu, 02 Apr 2009 18:20:49 +0200
>> secucatc...@free.fr wrote:
>>> i buy cd since 2.8 on  kd85 shop (all the one) without probleme
>>> but i'm not confident anymore.
>>> and i order a 2.7 a fews months
>>> for this
>>> http://undeadly.org/cgi?action=article&sid=20081220001856
>>> but never received it.
>>> where i can order the new one and hope to receive it?
>>
>> You should be able to find a suitable order site at
>> http://www.openbsd.org/orders.html
>>
>>
> Being in the UK I think I have two options on there.  One is always
> lagging behind (their website currently lists 4.3!) and the other is
> OpenBSDEurope - is this a new seller covering Europe now Wim has been
> dropped as supplier?  If I buy from this seller will the money be going
> to the project?
> 

Yes, we are pleased to be a new reseller based in the UK (we serve
Europe too of course! - the 'we' bit is a close friend who is involved
in distribution in the UK (which is what we're also setting up)).

We are not associated with the OpenBSD project, but Theo has kindly let
us use this domain.

And of course, yes, money flows right back into the OpenBSD Project.

-- 
Liam J. Foy
NetBSD Developer 



Vreme je za popust

2009-04-02 Thread Top Shop
Budi fit

Vreme je!

Xenia Fitness

Pozivamo Vas da se brzo i lako, nakon duge,
zime vratite u top formu!

Prijavom za fitnes e-savete dobijate i kupon za popust na SVE fitnes
sprave! A E!to je najbolje b popustom moE>ete obradovati i prijatelje!

Neka se ovog proleDa i leta svi okreDu za vama! Prijavite se, pozovite
prijatelje...

Kliknite ovde!

Prijavom dobijate:

Kupon

Xenija Fitnes

b"

Kupon uz koji imate 5% popusta na sve proizvode iz BUDI FIT kategorije
b u okviru 1 porudE>bine, u roku od 30 dana od dana prijave.

b"

E-savete liD
nog trenera Ksenije Horvat na
svakih 7 dana u naredna 2 meseca.

b"

Priliku da i  prijatelje obradujete kuponom od 5% popusta i e-savetima.

b"

ViE!e informacija o tome kako treniraju holivudske zvezde, kako da
zategnete trbuE!njake, izbegnete povrede pri treningu

b"

MoguDnost da pogledate video demonstracije najpopularnijih sprava iz
BUDI FIT ponude sa Ksenijom i Markom b vaE!im vodiD
ima kroz pravilan
trening.

Vreme je da se pokrenete i uD
inite neE!to za sebe!

PoD
nite odmah... Kliknite ovde

Ovaj e-mail Vam je poslat, jer ste se svojevoljno prijavili za e-novosti,
poruD
ivali na sajtu ili uD
estvovali u igri "Poklon za znanje...",
ili"Moj favorit - Euro 2008" ili drugim kvizovima ili igrama na
www.e-topshop.tv ili drugih brendova Studio Moderne.

Ukoliko viE!e ne E>elite da primate e-mailove od nas , odjavite se sa
naE!e mailing liste klikom ovde.

Studio Moderna d.o.o., Bulevar vojvode Stepe 30, 21000 Novi Sad, Tel: 021
489 26 60, Fax: 021 489 29 08, E-mail: i...@news.e-topshop.tv

[IMAGE]



Re: Donations (was, sadly, European orders)

2009-04-02 Thread Thomas Pfaff
On Thu, 2 Apr 2009 10:16:31 -0700
"J.C. Roberts"  wrote:
> On Wed, 01 Apr 2009 22:11:07 -0600 Theo de Raadt
>  wrote:
> 
> > I work hard.
> 
> I know you do! -- I look at your work every day.

I use said work every day.  The results I see and the work being
put into this project is more than enough for me to want to donate.
I don't care what the project does with my money; it was a gift, a
thank you for your hard work (and a hope that it will continue).

However, when I buy a CD-set it is not for the product (that's
available online anyway) but in the belief that OpenBSD will
benefit from my purchase.  When that seems to have not been the
case with KD85, I really appreciate Theo taking the time to
explain the situation.  He does not have to, but doing so is,
IMO, being respectful and patient towards the people donating.

At any rate, this whole thing does not change anything for me.
I just feel sad for the OpenBSD project that they did not get
what they expected from CD sales in Europe.



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Steven Surdock
You  sort of can on the outbond side by using the route-to option and using
multiple matching interface/gateways.

Route-to { if1 gw1, if1 gw1, if2 gw2 } round-robin...

This would prefer if1 over if2 for 2/3 the traffic.

Sorry if the syntax isn't quite right as I sent this from my phone.  Also be
aware that this can break some web-sites, like YouTube.  You can try the
sticky option, but last I tried (4.1 days) it didn't quite work.

-Steve S.

-Original Message-
From: Fernando Alvarez 
Sent: Thursday, April 02, 2009 9:42 AM
To: Stefan Sperling 
Cc: LeiV ; misc@openbsd.org 
Subject: Re: Using 2 internet connections on OpenBSD Gateway

And... What if both connections doesn't have the same upstream
bandwidth? Would it be possible to load-balance both Internet
connections considering the upload/donwload capacity of each one, and
not using a round-robin load balancing, which assigns a nearly to 50/50
load?

Fernando

El jue, 02-04-2009 a las 13:08 +0100, Stefan Sperling escribiC3:
> On Thu, Apr 02, 2009 at 01:05:53PM +0100, Stefan Sperling wrote:
> > On Thu, Apr 02, 2009 at 01:52:20AM -0700, LeiV wrote:
> > > Hi,
> > > I have a openbsd firewall/gateway and behind a webserver, users arrive
to my webserver via 1 domain name, I have a cable connection 12Mbps
down/500Kbps upthe down speed is OK I dont have so many incoming requests
...but the up speed is saturated easily with those requests as my pages have
images, etc...
> > > I would like to add another internet connection to my openbsd box so I
can increase my upstream bandwitch...it is possible? all my incoming requests
will come with the same internet connection as I only have 1 domain
namecan I send back the requested pages with both connections to use both
upstream bandwitch ? is so, how can i do it ? any howto?
> > >
> >
> > man 8 route
> > /mpath
>
> And also http://www.openbsd.org/faq/faq6.html#Multipath
>
> Stefan



Re: where to order now ?

2009-04-02 Thread Jon Tibble

Thomas Pfaff wrote:

On Thu, 02 Apr 2009 18:20:49 +0200
secucatc...@free.fr wrote:

i buy cd since 2.8 on  kd85 shop (all the one) without probleme
but i'm not confident anymore.
and i order a 2.7 a fews months
for this
http://undeadly.org/cgi?action=article&sid=20081220001856
but never received it.
where i can order the new one and hope to receive it?


You should be able to find a suitable order site at
http://www.openbsd.org/orders.html


Being in the UK I think I have two options on there.  One is always 
lagging behind (their website currently lists 4.3!) and the other is 
OpenBSDEurope - is this a new seller covering Europe now Wim has been 
dropped as supplier?  If I buy from this seller will the money be going 
to the project?




Re: shell history and page-up

2009-04-02 Thread Alexander Hall
Chris wrote:
> I am trying to get the shell history with page-up but looks like it's
> not working. I'm running -current with the default ksh and added
> HISTSIZE=50 and export HISTSIZE to ~/.profile.
> 
> Does anyone know how to get it?
> 
> Thanks.

$ grep HIST .profile

HISTFILE=$HOME/.history
HISTSIZE=1024

works. Arrow-up though, not page-up.

/Alexander



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Fernando Alvarez
I'm afraid I can't figure out how to achieve this :-\

With ALTQ, one can assign priorities to outbound packets using pass or
rdr rules, but I think that's not a solution when it's needed to route
packets to one of the two gateways (using the same external interface or
not). Packet priorization works re-arranging the queue for a outbound
interface, but the packets do know which gateway they're going to use.

Am I right or it's possible to do it with priorization in pf's rules? 

Fernando


El jue, 02-04-2009 a las 15:47 +0200, Kamil Monticolo escribiC3:
> On Thu, 02 Apr 2009 14:36:30 +0200
> Fernando Alvarez  wrote:
> 
> > And... What if both connections doesn't have the same upstream
> > bandwidth? Would it be possible to load-balance both Internet
> > connections considering the upload/donwload capacity of each one, and
> > not using a round-robin load balancing, which assigns a nearly to 50/50
> > load?
> > 
> > Fernando
> > 
> Then, you have bandwidth management called ALTQ QoS in pf.conf.
> http://www.openbsd.org/faq/pf/queueing.html



Re: Donations (was, sadly, European orders)

2009-04-02 Thread J.C. Roberts
On Wed, 01 Apr 2009 22:11:07 -0600 Theo de Raadt
 wrote:

> I work hard.

I know you do! -- I look at your work every day.

As promised, I won't comment publicly on the situation but I hope you
won't be offended if a no-code nobody like me gives you a reminder;
You have absolutely no reason to let either the ignorance or malice 
of others troll you into divulging or defending any details of your
personal life.

Your private life is your own choice, and no one deserves to be told
anything about it. What you decide to share about your life, is also
your choice, but I *hate* seeing you provoked into both revealing your
life to correct misinformation and trying to defend your life choices.

Liars will lie, and fools think they're smart; publicly correcting their
technical mistakes is one thing, but publicly correcting their mistakes
regarding your personal life is a completely different matter. You do
not owe anything to anyone, particularly about your personal life, so
please don't let the fools and liars goad you into giving more than you
already give.

Kind Regards,
J.C. Roberts



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Stuart Henderson
On 2009-04-02, LeiV  wrote:
> I would like to add another internet connection to my openbsd box
> so I can increase my upstream bandwitch...it is possible? all my
> incoming requests will come with the same internet connection as I
> only have 1 domain namecan I send back the requested pages with
> both connections to use both upstream bandwitch ? is so, how can i
> do it ? any howto?

If your ISPs follow best practices and filter the traffic you send
(to prevent attempts to spoof packets), you won't be able to do this.
If they don't, then maybe they will start doing this sometime and
cause you problems in the future.

But you can have a separate hostname pointing at the address of
the second line, or just use the ip address in the URL, and punt
off certain traffic to the other line that way.

For this you'll want to use "reply-to" PF rules so that requests
arriving on one line have the replies sent out the same line rather
than to wherever the default route points. It's something like the
"load balance outgoing traffic" example in the PF FAQ in reverse.



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Matthew Dempsky
On Thu, Apr 2, 2009 at 5:05 AM, Stefan Sperling  wrote:
> man 8 route
> /mpath

I was under the impression that to use multipath routing, you need to
also use BGP (which probably isn't a possibility for the OP since he
said he's using a cable modem).  Am I mistaken?



Re: Donations (was, sadly, European orders)

2009-04-02 Thread Theo de Raadt
> Having some sort of Report once a year about Donation Money or even also the
> CD and Shirt Sales money and where it goes would help to shut up even the
> most ignorant. Reports possibly ala' FreeBSD Foundation; but if not, not; i
> personally have no doubt that you are the last Guy how would enrich himself
> on Money donated to OpenBSD, screw that.

Out of donations received by me, a rough accounting. I am estimating
parts of it because I cannot make time to dig through the file.

c2k8
[the foundation paid for the hackspace/sleepspace]
~7 developers had their travel paid, $11,000

p2k8
11 developers paid their own travel
2 had their travel paid from donations - $1800
hotel - a bit less than $5000, if I recall

h2k8
11 developers paid their own travel
5 had their travel paid from donations - $4000
hotel - a bit less than $8000

n2k9
16 developers paid their own travel
3 had their travel paid from donations - $3000
hotel - a bit more than $8000, if I recall right

c2k9
[the foundation will pay for the hackspace/sleepspace]
6 developers flights already paid - $10,000

Anyone upset about their donations being spent that way?  If you want
to know how we all benefited from the spending donnation money on the
hackathons please look at http://www.openbsd.org/plus.html and follow
the release links at the top to; bracket the hackathons before the
release, and you can guess what happened at a particular hackathon.

I don't know how big people think the donations are, but sure, it is
substantial.  Yet it is not as much as these amounts above.  The
remaining is paid out of my salary, and yes, my salary is CD sales
dependent.  And yes, everyone including Nadine thinks that is a
ridiculous situation, but so it is.

As can be seen above, other expenses are handled by the OpenBSD
Foundation, which is financially entirely independent of me.  I have
no say over what they do.  Like you all, I can simply thank them for
accepting contributions in the way they are fiscally permitted to, and
then helping to pay for the things which they deem worthy.  For
instance, the big hackathons are run by them.  Hopefully some smaller
ones eventually, too.

When you see me in another thread mentioning that Wim only
transferring 1000+2402 EUR donation money to the project for the last
5 years or so, you can get a clearer picture.  Since all the other
things he bought for OpenBSD over the the last 5+ years have now been
charged back to the Computer Shop, it is just not plausible that this
is the sum of donations from Europe.  Is Europe that cheap, or is
there another explanation?

A note -- this money is received as gifts.  Then it is spent against
project things, and each expenditure of course it generates a receipt.
But that receipt cannot be written off against anyone's taxes.  And it
isn't.  Doing so would be fraud.  It isn't an expense since there is
no income.

It is a zero sum game, except for the Aeroplan points :)



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Kamil Monticolo
On Thu, 02 Apr 2009 18:15:22 +0200
Fernando Alvarez  wrote:

> 
> I'm afraid I can't figure out how to achieve this :-\
> 
> With ALTQ, one can assign priorities to outbound packets using pass or
> rdr rules, but I think that's not a solution when it's needed to route
> packets to one of the two gateways (using the same external interface or
> not). Packet priorization works re-arranging the queue for a outbound
> interface, but the packets do know which gateway they're going to use.
> 
> Am I right or it's possible to do it with priorization in pf's rules? 
> 
> Fernando
> 
You can assign priorities and also assign queues using bandwidth keyword for
example:
altq on fxp0 cbq bandwidth 2Mb queue

You can find more examples on PF FAQ page.
-- 
Kamil Monticolo 



Re: where to order now ?

2009-04-02 Thread Thomas Pfaff
On Thu, 02 Apr 2009 18:20:49 +0200
secucatc...@free.fr wrote:
> i buy cd since 2.8 on  kd85 shop (all the one) without probleme
> but i'm not confident anymore.
> and i order a 2.7 a fews months
> for this
> http://undeadly.org/cgi?action=article&sid=20081220001856
> but never received it.
> where i can order the new one and hope to receive it?

You should be able to find a suitable order site at
http://www.openbsd.org/orders.html



where to order now ?

2009-04-02 Thread secucatcher
i buy cd since 2.8 on  kd85 shop (all the one) without probleme
but i'm not confident anymore.
and i order a 2.7 a fews months
for this
http://undeadly.org/cgi?action=article&sid=20081220001856
but never received it.
where i can order the new one and hope to receive it ?
sad story for openbsd all this shit.



Re: Ruby 1.9

2009-04-02 Thread Stuart Henderson
On 2009-04-02, Aapo Lehtinen  wrote:
> Hi
>
> Has anyone successfully compiled ruby 1.9 (stable snapshot or 1.9.1-p0) 
> on OpenBSD? Compiling fails with:

It's almost always easier to update the port than it is to build from
scratch, and you don't end up with so much mess in random places on your
system.



Re: FW: raidctl -vF component0 raid0

2009-04-02 Thread Chris Harries
Good call, did that, Still same problem, hangs at same place.

All seams correct now:

# disklabel -E raid0
Initial label editor (enter '?' for help at any prompt)
> p
OpenBSD area: 0-1952459648; size: 1952459648; free: 719334272
#size   offset  fstype [fsize bsize  cpg]
  a: 104857600RAID
  b:  4194304 10485760swap
  c:   19524596480  unused  0 0
  d:104857600 14680064RAID
  e:   1048576000119537664RAID
  f: 20971520   1168113664RAID
  g:  2097152   1189085184RAID
  h: 20971520   1191182336RAID
  i: 20971520   1212153856RAID

Noticed this in dmesg, not sure if at the half way point reboot though it's
anything to worry about.

Kernelized RAIDframe activated
cd0(atapiscsi0:0:0): Check Condition (error 0x70) on opcode 0x0
SENSE KEY: Not Ready
 ASC/ASCQ: Medium Not Present
raid0 at root: (RAID Level 1) total number of sectors is 1952459648 (953349
MB) as root
softraid0 at root
softraid0: sd0d can not read metadata version 1847620201, expected 3
softraid0: sd1d can not read metadata version 8, expected 3
softraid0: raid0a can not read metadata version 8, expected 3
softraid0: raid0d can not read metadata version 8, expected 3
softraid0: raid0e can not read metadata version 8, expected 3
softraid0: raid0f can not read metadata version 8, expected 3
softraid0: raid0g can not read metadata version 8, expected 3
softraid0: raid0h can not read metadata version 8, expected 3
softraid0: raid0i can not read metadata version 8, expected 3
root on raid0a
filesystem type 19 not known.. assuming ffs
WARNING: / was not properly unmounted
swapmount: no device
raid0: Error re-writing parity!

Chris

-Original Message-
From: Alexis de BRUYN [mailto:ale...@de-bruyn.fr]
Sent: 02 April 2009 14:58
To: Chris Harries
Cc: misc@openbsd.org
Subject: Re: FW: raidctl -vF component0 raid0

> Create radi0's partitions:
> Disklabel -E raid0
>
> A: 5G / 4.2BSD
> B: 2048M swap
> D: 50G /var/mysql 4.2bsd
> E: 500G /var/vmail 4.2bsd
> F: 10G /var   4.2bsd
> G: 1G /tmp4.2bsd
> H: 10G /usr   4.2bsd
> I: 10G /home 4.2bsd

FS Type must be "RAID" instead of "4.2BSD".

Chris Harries a icrit :
> All typoes checked. Now correct...finally,
>
> Apologies
>
> Chris
>
> -Original Message-
> From: Chris Harries [mailto:ch...@sharescope.co.uk]
> Sent: 02 April 2009 14:07
> To: 'Alexis de BRUYN'
> Subject: RE: raidctl -vF component0 raid0
>
> Afternoon,
>
> Well on an i386 system with 2 x 1 TB Seagate hard drives, I generally
follow
> this method from what I know and have learnt:
>
> Install 4.4 i386 on to sd0
> Reboot
>
> Patch source tree to 4.4 PATCH:
> cd /usr/src
> mount /dev/cd0a /mnt
> tar -zxvpf /mnt/src.tar.gz -C /usr/src ./sys
> umount /mnt
> cvs -qd anon...@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_4_4 -P src
>
> Create new kernel with patches:
> cd /usr/src
> cvs -d anon...@anoncvs.uk.openbsd.org:/cvs up -Pd
> make -k cleandir
> rm -rf /usr/obj/*
> make obj
>
>
> cd /usr/src/etc/mtree
> install -c -o root -g wheel -m 660 special /etc/mtree
> install -c -o root -g wheel -m 444 4.4BSD.dist /etc/mtree
> mtree -qdef /etc/mtree/4.4BSD.dist -p / -u
> cd /usr/src/etc
> env DESTDIR=/ make distrib-dirs
>
> cd /usr/src/sys/arch/sparc64/conf/
> config GENERIC
> cd ../compile/GENERIC
> make clean && make depend && make
> cp /bsd /bsd.old
> cp bsd /bsd
> chown root:wheel /bsd
> reboot
>
> cd /usr/src/
> make build
> cd /dev
> cp /usr/src/etc/etc.sparc64/MAKEDEV ./
> ./MAKEDEV all
>
> Sysmerge
> reboot
>
> Now we have a full patched system, add raidframe:
> cd /sys/arch/i386/conf
> cat >> GENERIC.RAID << EOF
> include "arch/'uname -m'/conf/GENERIC
> option RAID_AUTOCONFIG
> pseudo-device raid 4
> EOF
>
> Re-create the kernel with patches and raidframe:
> config GENERIC.RAID
> cd ../compile/GENERIC.RAID
> make clean depend && make
> cp /bsd /bsd.noraid
> install -o root -g wheel -m 644 bsd /
>
> Test it boots ok, no problems. Now on to raidframe:
> fdisk -i sd1
> (Yes to the MBR question)
>
> disklabel -E sd1
> Create 512mb A: 4.2BSD
> Create *(rest of space) D: RAID
>
> Create new filesystem and mount:
> newfs sd1a
> mount /dev/sd1a /mnt
> cp /bsd /usr/mdec/boot /mnt
> /usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot sd1
> umount /mnt
>
> Create raid0.conf
> cat >> /root/raid0.conf << EOF
> START array
> 1 2 0
>
> START disks
> /dev/sd2d
> /dev/sd1d
>
> START layout
> 128 1 1 1
>
> START queue
> fifo 100
> EOF
>
> raidctl -C /root/raid0.conf raid0
> raidctl -I 0904020 (the date) raid0
>
> Check and add arrays:
> raidctl -s raid0
> raidctl -A root raid0
>
> At this point, everything seams as expected
>
> Create radi0's partitions:
> Disklabel -E raid0
>
> A: 5G / 4.2BSD
> B: 2048M swap
> D: 50G /var/mysql 4.2bsd
> E: 500G /var/vmail 4.2bsd
> F: 10G /var   4.2bsd
> G: 1G /tmp4.2bsd
> H: 10G /usr   4.2bsd
> I: 10G /home 4.2bsd
>
>

Re: Where did the donation money go, Wim?

2009-04-02 Thread Christian Weisgerber
Theo de Raadt  wrote:

> I have been in commuinication with a few people who have told me
> stories that Wim received donations, obviously meant for the OpenBSD
> project, collected at European conference tables -- and that this
> money has not made it to the OpenBSD project.

At all the European conference tables where I've been with Wim over
the years, all the money from T-shirt, poster, CD sales *and* cash
donations went into the same glass jar, and at the end of the day
Wim collected the money.

I don't know what happened afterwards and if Wim's accounting ever
led him to separate out the donations money.

-- 
Christian "naddy" Weisgerber  na...@mips.inka.de



Re: raidctl -vF component0 raid0

2009-04-02 Thread Alexis de BRUYN
>> raidctl -a /dev/wd0b raid0

Same previous swap between 'b' and 'd' partitions. If it is not a
copy/paste issue while writing your email, try:

raidctl -a /dev/wd0d raid0

or

raidctl -a /dev/sd0d raid0

Chris Harries a C)crit :
> Ah, my appolgiest, stress is kicking in. They should all be sd's, they where
> wd but I changed my BIOS to have AHCI or something, and they changed to sd,
> the motherboard has onboard RAID but with it turned on OPENBSD doesnbt work,
> so its either off or AHCI, it doesn't seam to effect it with it on other
> then changing device letters so I left it on. But I get the same results
> weather I use AHCI or not just using sd0 sd1 or wd0 wd1.
> 
> So, sorry, just a typo there!
> 
> Chris
> 
> -Original Message-
> From: Alexis de BRUYN [mailto:ale...@de-bruyn.fr] 
> Sent: 02 April 2009 14:24
> To: Chris Harries
> Cc: misc@openbsd.org
> Subject: Re: raidctl -vF component0 raid0
> 
>> Install 4.4 i386 on to sd0
> [...]
>> fdisk -i sd1
> [...]
>> newfs sd1a
> ...
> 
> Your 2 x 1 TB Seagate hard drives seem to be sd0 and sd1.
> 
> But in your configuration, you refer several times to other devices:
> 
>> disklabel -E wd1
> [...]
>> /usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot wd1
> [...]
>> disklabel wd1 > /root/disklabel.wd1
>> disklabel -R wd0 /root/disklabel.wd1
>> raidctl -a /dev/wd0b raid0
> [...]
> ...
> 
> I guess that your problem is here. Replace every 'wd' devices with 'sd'.
> 
> 
> Chris Harries a C)crit :
>> Afternoon,
>>
>> Well on an i386 system with 2 x 1 TB Seagate hard drives, I generally
> follow
>> this method from what I know and have learnt:
>>
>> Install 4.4 i386 on to sd0
>> Reboot
>>
>> Patch source tree to 4.4 PATCH:
>> cd /usr/src
>> mount /dev/cd0a /mnt
>> tar -zxvpf /mnt/src.tar.gz -C /usr/src ./sys
>> umount /mnt
>> cvs -qd anon...@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_4_4 -P src
>>
>> Create new kernel with patches:
>> cd /usr/src
>> cvs -d anon...@anoncvs.uk.openbsd.org:/cvs up -Pd
>> make -k cleandir
>> rm -rf /usr/obj/*
>> make obj
>>
>>
>> cd /usr/src/etc/mtree
>> install -c -o root -g wheel -m 660 special /etc/mtree
>> install -c -o root -g wheel -m 444 4.4BSD.dist /etc/mtree
>> mtree -qdef /etc/mtree/4.4BSD.dist -p / -u
>> cd /usr/src/etc
>> env DESTDIR=/ make distrib-dirs
>>
>> cd /usr/src/sys/arch/sparc64/conf/
>> config GENERIC
>> cd ../compile/GENERIC
>> make clean && make depend && make
>> cp /bsd /bsd.old
>> cp bsd /bsd
>> chown root:wheel /bsd
>> reboot
>>
>> cd /usr/src/
>> make build
>> cd /dev
>> cp /usr/src/etc/etc.sparc64/MAKEDEV ./
>> ./MAKEDEV all
>>
>> Sysmerge
>> reboot
>>
>> Now we have a full patched system, add raidframe:
>> cd /sys/arch/i386/conf
>> cat >> GENERIC.RAID << EOF
>> include "arch/'uname -m'/conf/GENERIC # include GENERIC configuration
>> option RAID_AUTOCONFIG # automatically configure RAIDframe arrays on boot
>> pseudo-device raid 4 # RAIDframe disk driver
>> EOF
>>
>> Re-create the kernel with patches and raidframe:
>> config GENERIC.RAID
>> cd ../compile/GENERIC.RAID
>> make clean depend && make
>> cp /bsd /bsd.noraid
>> install -o root -g wheel -m 644 bsd /
>>
>> Test it boots ok, no problems. Now on to raidframe:
>> fdisk -i sd1
>> Yes to the MBR question
>>
>> disklabel -E wd1
>> Create 512mb A: 4.2BSD
>> Create *(rest of space) d: RAID
>>
>> Create new filesystem and mount:
>> newfs sd1a
>> mount /dev/sd1a /mnt
>> cp /bsd /usr/mdec/boot /mnt
>> /usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot wd1
>> umount /mnt
>>
>> Create raid0.conf
>> cat >> /root/raid0.conf << EOF
>> START array
>> 1 2 0
>>
>> START disks
>> /dev/sd2d
>> /dev/sd1d
>>
>> START layout
>> 128 1 1 1
>>
>> START queue
>> fifo 100
>> EOF
>>
>> raidctl -C /root/raid0.conf raid0
>> raidctl -I 0904020 (the date) raid0
>>
>> Check and add arrays:
>> raidctl -s raid0
>> raidctl -A root raid0
>>
>> At this point, everything seams as expected
>>
>> Create radi0's partitions:
>> Disklabel -E raid0
>>
>> A: 5G / 4.2BSD
>> B: 2048M swap
>> D: 50G /var/mysql 4.2bsd
>> E: 500G /var/vmail 4.2bsd
>> F: 10G /var  4.2bsd
>> G: 1G /tmp   4.2bsd
>> H: 10G /usr  4.2bsd
>> I: 10G /home 4.2bsd
>>
>> Create the new filesystems:
>> For x in a d e f g h I; do newfs raid0${x}; done
>>
>> Seams to work fine.
>>
>> Mount and copy RAID:
>> mount /dev/raid0a /mnt
>> cd /mnt
>> mkdir usr tmp home var var/mysql var/vmail
>> mount /dev/raid0d /mnt/var.mysql
>> mount /dev/raid0e /mnt/var/vmail
>> mount /dev/raid0f /mnt/var
>> mount /dev/raid0g /mnt/tmp
>> mount /dev/raid0h /mnt/usr
>> mount /dev/raid0i /mnt/home
>>
>> Transfer raid:
>> d /mnt
>> tar -Xcpf - / | tar -xvpf -
>> rm /mnt/etc/fstab
>> cat >> /mnt/etc/fstab << EOF
>> /dev/raid0a / ffs rw 1 1
>> /dev/raid0d /var/mysql ffs rw 1 2
>> /dev/raid0e /var/vmail ffs rw 1 2
>> /dev/raid0f /var ffs rw 1 2
>> /dev/raid0g /tmp ffs rw 1 2
>> /dev/raid0h /usr ffs rw 1 2
>> /dev/raid0i /home ffs rw 1 2
>> EOF
>>
>> Umount partitions and reboot:
>> umount /mnt/*; umount /mnt
>> halt (reboot)
>>
>> boot> boot 

Re: FW: raidctl -vF component0 raid0

2009-04-02 Thread Alexis de BRUYN
> Create radi0's partitions:
> Disklabel -E raid0
>
> A: 5G / 4.2BSD
> B: 2048M swap
> D: 50G /var/mysql 4.2bsd
> E: 500G /var/vmail 4.2bsd
> F: 10G /var   4.2bsd
> G: 1G /tmp4.2bsd
> H: 10G /usr   4.2bsd
> I: 10G /home 4.2bsd

FS Type must be "RAID" instead of "4.2BSD".

Chris Harries a icrit :
> All typoes checked. Now correct...finally, 
> 
> Apologies
> 
> Chris
> 
> -Original Message-
> From: Chris Harries [mailto:ch...@sharescope.co.uk] 
> Sent: 02 April 2009 14:07
> To: 'Alexis de BRUYN'
> Subject: RE: raidctl -vF component0 raid0
> 
> Afternoon,
> 
> Well on an i386 system with 2 x 1 TB Seagate hard drives, I generally follow
> this method from what I know and have learnt:
> 
> Install 4.4 i386 on to sd0
> Reboot
> 
> Patch source tree to 4.4 PATCH:
> cd /usr/src
> mount /dev/cd0a /mnt
> tar -zxvpf /mnt/src.tar.gz -C /usr/src ./sys
> umount /mnt
> cvs -qd anon...@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_4_4 -P src
> 
> Create new kernel with patches:
> cd /usr/src
> cvs -d anon...@anoncvs.uk.openbsd.org:/cvs up -Pd
> make -k cleandir
> rm -rf /usr/obj/*
> make obj
> 
> 
> cd /usr/src/etc/mtree
> install -c -o root -g wheel -m 660 special /etc/mtree
> install -c -o root -g wheel -m 444 4.4BSD.dist /etc/mtree
> mtree -qdef /etc/mtree/4.4BSD.dist -p / -u
> cd /usr/src/etc
> env DESTDIR=/ make distrib-dirs
> 
> cd /usr/src/sys/arch/sparc64/conf/
> config GENERIC
> cd ../compile/GENERIC
> make clean && make depend && make
> cp /bsd /bsd.old
> cp bsd /bsd
> chown root:wheel /bsd
> reboot
> 
> cd /usr/src/
> make build
> cd /dev
> cp /usr/src/etc/etc.sparc64/MAKEDEV ./
> ./MAKEDEV all
> 
> Sysmerge
> reboot
> 
> Now we have a full patched system, add raidframe:
> cd /sys/arch/i386/conf
> cat >> GENERIC.RAID << EOF
> include "arch/'uname -m'/conf/GENERIC
> option RAID_AUTOCONFIG
> pseudo-device raid 4
> EOF
> 
> Re-create the kernel with patches and raidframe:
> config GENERIC.RAID
> cd ../compile/GENERIC.RAID
> make clean depend && make
> cp /bsd /bsd.noraid
> install -o root -g wheel -m 644 bsd /
> 
> Test it boots ok, no problems. Now on to raidframe:
> fdisk -i sd1
> (Yes to the MBR question)
> 
> disklabel -E sd1
> Create 512mb A: 4.2BSD
> Create *(rest of space) D: RAID
> 
> Create new filesystem and mount:
> newfs sd1a
> mount /dev/sd1a /mnt
> cp /bsd /usr/mdec/boot /mnt
> /usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot sd1
> umount /mnt
> 
> Create raid0.conf
> cat >> /root/raid0.conf << EOF
> START array
> 1 2 0
> 
> START disks
> /dev/sd2d
> /dev/sd1d
> 
> START layout
> 128 1 1 1
> 
> START queue
> fifo 100
> EOF
> 
> raidctl -C /root/raid0.conf raid0
> raidctl -I 0904020 (the date) raid0
> 
> Check and add arrays:
> raidctl -s raid0
> raidctl -A root raid0
> 
> At this point, everything seams as expected
> 
> Create radi0's partitions:
> Disklabel -E raid0
> 
> A: 5G / 4.2BSD
> B: 2048M swap
> D: 50G /var/mysql 4.2bsd
> E: 500G /var/vmail 4.2bsd
> F: 10G /var   4.2bsd
> G: 1G /tmp4.2bsd
> H: 10G /usr   4.2bsd
> I: 10G /home 4.2bsd
> 
> Create the new filesystems:
> For x in a d e f g h I; do newfs raid0${x}; done
> 
> Seams to work fine.
> 
> Mount and copy RAID:
> mount /dev/raid0a /mnt
> cd /mnt
> mkdir usr tmp home var var/mysql var/vmail
> mount /dev/raid0d /mnt/var/mysql
> mount /dev/raid0e /mnt/var/vmail
> mount /dev/raid0f /mnt/var
> mount /dev/raid0g /mnt/tmp
> mount /dev/raid0h /mnt/usr
> mount /dev/raid0i /mnt/home
> 
> Transfer raid:
> cd /mnt
> tar -Xcpf - / | tar -xvpf -
> rm /mnt/etc/fstab
> cat >> /mnt/etc/fstab << EOF
> /dev/raid0a / ffs rw 1 1
> /dev/raid0d /var/mysql ffs rw 1 2
> /dev/raid0e /var/vmail ffs rw 1 2
> /dev/raid0f /var ffs rw 1 2
> /dev/raid0g /tmp ffs rw 1 2
> /dev/raid0h /usr ffs rw 1 2
> /dev/raid0i /home ffs rw 1 2
> EOF
> 
> Umount partitions and reboot:
> umount /mnt/*; umount /mnt
> halt (reboot)
> 
> boot> boot sd1a:/bsd to boot to 2nd hard disk
> 
> Check, mirror, hot add, reconstruct:
> mount && uname -v && raidctl -s raid0
> disklabel sd1 > /root/disklabel.sd1
> disklabel -R sd0 /root/disklabel.sd1
> raidctl -a /dev/sd0d raid0
> raidctl -vF component0 raid0
> 
> And there is hangs, and displays
> 
>> RECON: initiating reconstruction on row - col 0 -> spare at row 0 col 2.
>> Quiescence reached...
> 
> How does this differ from what you do?
> 
> Many thanks, again
> Chris
> 
> -Original Message-
> From: Alexis de BRUYN [mailto:ale...@de-bruyn.fr] 
> Sent: 02 April 2009 13:39
> To: Chris Harries
> Cc: misc@openbsd.org
> Subject: Re: raidctl -vF component0 raid0
> 
> Hello Chris,
> 
> Before setting up your mirror, I recommanded you to read "RAID options
> for OpenBSD" from the OpenBSD FAQ
> (http://www.openbsd.org/faq/faq14.html#RAID) and then the following
> manuals (which I did when I teached myself making a RAIDFRAME mirror on
> 4.2) :
> 
> * raid(4),
> * raidctl(8),
> * newfs(8),
> * disklabel(8),
> * fdisk(8),
> * boot(8),
> * installboot(8),
> * dd(1),
> 
> With the same steps, my config

Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Stefan Sperling
On Thu, Apr 02, 2009 at 02:26:42PM +0200, Fernando Alvarez wrote:
> And... What if both connections doesn't have the same upstream
> bandwidth? Would it be possible to load-balance both Internet
> connections considering the upload/donwload capacity of each one, and
> not using a round-robin load balancing, which assigns a nearly to 50/50
> load?

The only thing I can think of is that you could get what you
want using altq in pf to do the load balancing. See the QUEUEING
section in the pf.conf man page.

But I'm not sure if that's the right answer so I am Cc'ing misc@
again (which you dropped from Cc, I presume accidentally).
Maybe someone there knows a better answer.

Stefan



FW: raidctl -vF component0 raid0

2009-04-02 Thread Chris Harries
All typoes checked. Now correct...finally,

Apologies

Chris

-Original Message-
From: Chris Harries [mailto:ch...@sharescope.co.uk]
Sent: 02 April 2009 14:07
To: 'Alexis de BRUYN'
Subject: RE: raidctl -vF component0 raid0

Afternoon,

Well on an i386 system with 2 x 1 TB Seagate hard drives, I generally follow
this method from what I know and have learnt:

Install 4.4 i386 on to sd0
Reboot

Patch source tree to 4.4 PATCH:
cd /usr/src
mount /dev/cd0a /mnt
tar -zxvpf /mnt/src.tar.gz -C /usr/src ./sys
umount /mnt
cvs -qd anon...@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_4_4 -P src

Create new kernel with patches:
cd /usr/src
cvs -d anon...@anoncvs.uk.openbsd.org:/cvs up -Pd
make -k cleandir
rm -rf /usr/obj/*
make obj


cd /usr/src/etc/mtree
install -c -o root -g wheel -m 660 special /etc/mtree
install -c -o root -g wheel -m 444 4.4BSD.dist /etc/mtree
mtree -qdef /etc/mtree/4.4BSD.dist -p / -u
cd /usr/src/etc
env DESTDIR=/ make distrib-dirs

cd /usr/src/sys/arch/sparc64/conf/
config GENERIC
cd ../compile/GENERIC
make clean && make depend && make
cp /bsd /bsd.old
cp bsd /bsd
chown root:wheel /bsd
reboot

cd /usr/src/
make build
cd /dev
cp /usr/src/etc/etc.sparc64/MAKEDEV ./
./MAKEDEV all

Sysmerge
reboot

Now we have a full patched system, add raidframe:
cd /sys/arch/i386/conf
cat >> GENERIC.RAID << EOF
include "arch/'uname -m'/conf/GENERIC
option RAID_AUTOCONFIG
pseudo-device raid 4
EOF

Re-create the kernel with patches and raidframe:
config GENERIC.RAID
cd ../compile/GENERIC.RAID
make clean depend && make
cp /bsd /bsd.noraid
install -o root -g wheel -m 644 bsd /

Test it boots ok, no problems. Now on to raidframe:
fdisk -i sd1
(Yes to the MBR question)

disklabel -E sd1
Create 512mb A: 4.2BSD
Create *(rest of space) D: RAID

Create new filesystem and mount:
newfs sd1a
mount /dev/sd1a /mnt
cp /bsd /usr/mdec/boot /mnt
/usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot sd1
umount /mnt

Create raid0.conf
cat >> /root/raid0.conf << EOF
START array
1 2 0

START disks
/dev/sd2d
/dev/sd1d

START layout
128 1 1 1

START queue
fifo 100
EOF

raidctl -C /root/raid0.conf raid0
raidctl -I 0904020 (the date) raid0

Check and add arrays:
raidctl -s raid0
raidctl -A root raid0

At this point, everything seams as expected

Create radi0's partitions:
Disklabel -E raid0

A: 5G / 4.2BSD
B: 2048M swap
D: 50G /var/mysql 4.2bsd
E: 500G /var/vmail 4.2bsd
F: 10G /var 4.2bsd
G: 1G /tmp  4.2bsd
H: 10G /usr 4.2bsd
I: 10G /home 4.2bsd

Create the new filesystems:
For x in a d e f g h I; do newfs raid0${x}; done

Seams to work fine.

Mount and copy RAID:
mount /dev/raid0a /mnt
cd /mnt
mkdir usr tmp home var var/mysql var/vmail
mount /dev/raid0d /mnt/var/mysql
mount /dev/raid0e /mnt/var/vmail
mount /dev/raid0f /mnt/var
mount /dev/raid0g /mnt/tmp
mount /dev/raid0h /mnt/usr
mount /dev/raid0i /mnt/home

Transfer raid:
cd /mnt
tar -Xcpf - / | tar -xvpf -
rm /mnt/etc/fstab
cat >> /mnt/etc/fstab << EOF
/dev/raid0a / ffs rw 1 1
/dev/raid0d /var/mysql ffs rw 1 2
/dev/raid0e /var/vmail ffs rw 1 2
/dev/raid0f /var ffs rw 1 2
/dev/raid0g /tmp ffs rw 1 2
/dev/raid0h /usr ffs rw 1 2
/dev/raid0i /home ffs rw 1 2
EOF

Umount partitions and reboot:
umount /mnt/*; umount /mnt
halt (reboot)

boot> boot sd1a:/bsd to boot to 2nd hard disk

Check, mirror, hot add, reconstruct:
mount && uname -v && raidctl -s raid0
disklabel sd1 > /root/disklabel.sd1
disklabel -R sd0 /root/disklabel.sd1
raidctl -a /dev/sd0d raid0
raidctl -vF component0 raid0

And there is hangs, and displays

> RECON: initiating reconstruction on row - col 0 -> spare at row 0 col 2.
> Quiescence reached...

How does this differ from what you do?

Many thanks, again
Chris

-Original Message-
From: Alexis de BRUYN [mailto:ale...@de-bruyn.fr]
Sent: 02 April 2009 13:39
To: Chris Harries
Cc: misc@openbsd.org
Subject: Re: raidctl -vF component0 raid0

Hello Chris,

Before setting up your mirror, I recommanded you to read "RAID options
for OpenBSD" from the OpenBSD FAQ
(http://www.openbsd.org/faq/faq14.html#RAID) and then the following
manuals (which I did when I teached myself making a RAIDFRAME mirror on
4.2) :

* raid(4),
* raidctl(8),
* newfs(8),
* disklabel(8),
* fdisk(8),
* boot(8),
* installboot(8),
* dd(1),

With the same steps, my configuration is working on 4.3 & 4.4 (amd64).

You can also *precisely* describe your steps (commands and traces), and
in this case, I could easely help you.

Best regards,

Chris Harries a icrit :
> Thank you for your advice Alexis, I have now tried to do this using wd2d
and
> it does indeed make sense. I am still having problems however. Everything
> seams to go fine, to what the 2 guides I am following suggest, but when
> reconstructing the data is where I get stuck!
>
> When running raidctl -vF component0 raid0 I see
>
> RECON: initiating reconstruction on row - col 0 -> spare at row 0 col 2.
> Quiescence reached...
>
> And that is where it stops, just sitting there. I am guessing when you do
> the

Re: shell history and page-up

2009-04-02 Thread Christian Weisgerber
Chris  wrote:

> I am trying to get the shell history with page-up but looks like it's
> not working.

Do you really mean page-up, not cursor-up?

-- 
Christian "naddy" Weisgerber  na...@mips.inka.de



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Kamil Monticolo
On Thu, 02 Apr 2009 14:36:30 +0200
Fernando Alvarez  wrote:

> And... What if both connections doesn't have the same upstream
> bandwidth? Would it be possible to load-balance both Internet
> connections considering the upload/donwload capacity of each one, and
> not using a round-robin load balancing, which assigns a nearly to 50/50
> load?
> 
> Fernando
> 
Then, you have bandwidth management called ALTQ QoS in pf.conf.
http://www.openbsd.org/faq/pf/queueing.html

-- 
Kamil Monticolo 



Re: raidctl -vF component0 raid0

2009-04-02 Thread Alexis de BRUYN
Hello Chris,

Before setting up your mirror, I recommanded you to read "RAID options
for OpenBSD" from the OpenBSD FAQ
(http://www.openbsd.org/faq/faq14.html#RAID) and then the following
manuals (which I did when I teached myself making a RAIDFRAME mirror on
4.2) :

* raid(4),
* raidctl(8),
* newfs(8),
* disklabel(8),
* fdisk(8),
* boot(8),
* installboot(8),
* dd(1),

With the same steps, my configuration is working on 4.3 & 4.4 (amd64).

You can also *precisely* describe your steps (commands and traces), and
in this case, I could easely help you.

Best regards,

Chris Harries a icrit :
> Thank you for your advice Alexis, I have now tried to do this using wd2d and
> it does indeed make sense. I am still having problems however. Everything
> seams to go fine, to what the 2 guides I am following suggest, but when
> reconstructing the data is where I get stuck!
> 
> When running raidctl -vF component0 raid0 I see
> 
> RECON: initiating reconstruction on row - col 0 -> spare at row 0 col 2.
> Quiescence reached...
> 
> And that is where it stops, just sitting there. I am guessing when you do
> the command it brings up a bar of how much it has reconstructed with maybe
> an ETA, but I don't see this, no hard drive light flashing.
> 
> Befor that command I do
> 
> disklabel wd1 > /root/disklabel.wd1
> disklabel -R wd0 /root/disklabel.wd1
> raidctl -a /dev/wd0b raid0
> 
> Which seams fine with me. Did you following a guide to teach your self this?
> I have tried reading over man raidctl but it's now showing me anything more
> then I know already and what I am not doing correct to cause this
> reconstruction to just hang...? Any ideas
> 
> Many Thanks
> Chris
> -Original Message-
> From: Alexis de BRUYN [mailto:ale...@de-bruyn.fr]
> Sent: 31 March 2009 12:33
> To: Chris Harries
> Cc: misc@openbsd.org
> Subject: Re: raidctl -vF component0 raid0
> 
>>> A: 144522 4.2BSD (this is the 64MB drive to boot off
>>> B: 1953375480 RAID (this is the RAID data partition
>>> C: 1953523055 UNUSED
> 
> Using 'b' (even 'c') is not a good idea for me too.
> 
> Try on your second disk (mirror), before configuring RAID, with the two
> following partitions:
> 
>  a:512M  4.2BSD   Boot partition
>  c:   -  unused   Entire drive
>  d:   *  RAID Everything except boot kernel
> 
> 
> START disks
> /dev/wd2b # the fake device
> /dev/wd1b
>
> 
> And then:
> 
> START disks
> /dev/wd2d
> /dev/wd1d
> 
> It works for my several configurations all the times.
> 
> Chris Harries a icrit :
>> Thank you for your time.
>>
>> This I did find weird, wondering why on this guide, it is setting B to
> RAID
>> and not swap...on boot it does say it cannot find swap but this guide did
>> come recommended...
>>
>> It says
>>
>> A: 144522 4.2BSD (this is the 64MB drive to boot off
>> B: 1953375480 RAID (this is the RAID data partition
>> C: 1953523055 UNUSED
>>
>> I am guessing you meant wd0 and wd1, the guide suggested making wd2 as the
>> fake device as I am creating the install on wd0, putting over to wd1 then
>> booting to wd1 and initializing wd0 again and create the raid, in a very
> cut
>> way to explain it
>>
>> Chris
>>
>> -Original Message-
>> From: J.C. Roberts [mailto:list-...@designtools.org]
>> Sent: 30 March 2009 13:16
>> To: Chris Harries
>> Cc: misc@openbsd.org
>> Subject: Re: raidctl -vF component0 raid0
>>
>> On Mon, 30 Mar 2009 09:43:31 +0100 "Chris Harries"
>>  wrote:
>>
>>> START disks
>>> /dev/wd2b # the fake device
>>> /dev/wd1b
>>>
>> The above looks weird. The 'b' partition is typically swap.
>>
>> What do the following commands tell you?
>>
>>  $ sudo disklabel -n wd1
>>
>>  $ sudo disklabel -n wd2
>>
>>
> 
> --
> Alexis de BRUYN
> email : ale...@de-bruyn.fr
> 

-- 
Alexis de BRUYN
email : ale...@de-bruyn.fr



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Fernando Alvarez
And... What if both connections doesn't have the same upstream
bandwidth? Would it be possible to load-balance both Internet
connections considering the upload/donwload capacity of each one, and
not using a round-robin load balancing, which assigns a nearly to 50/50
load?

Fernando

El jue, 02-04-2009 a las 13:08 +0100, Stefan Sperling escribiC3:
> On Thu, Apr 02, 2009 at 01:05:53PM +0100, Stefan Sperling wrote:
> > On Thu, Apr 02, 2009 at 01:52:20AM -0700, LeiV wrote:
> > > Hi,
> > > I have a openbsd firewall/gateway and behind a webserver, users arrive to 
> > > my webserver via 1 domain name, I have a cable connection 12Mbps 
> > > down/500Kbps upthe down speed is OK I dont have so many incoming 
> > > requests ...but the up speed is saturated easily with those requests as 
> > > my pages have images, etc...
> > > I would like to add another internet connection to my openbsd box so I 
> > > can increase my upstream bandwitch...it is possible? all my incoming 
> > > requests will come with the same internet connection as I only have 1 
> > > domain namecan I send back the requested pages with both connections 
> > > to use both upstream bandwitch ? is so, how can i do it ? any howto?
> > > 
> > 
> > man 8 route
> > /mpath
> 
> And also http://www.openbsd.org/faq/faq6.html#Multipath
> 
> Stefan



Re: raidctl -vF component0 raid0

2009-04-02 Thread Alexis de BRUYN
> Install 4.4 i386 on to sd0
[...]
> fdisk -i sd1
[...]
> newfs sd1a
...

Your 2 x 1 TB Seagate hard drives seem to be sd0 and sd1.

But in your configuration, you refer several times to other devices:

> disklabel -E wd1
[...]
> /usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot wd1
[...]
> disklabel wd1 > /root/disklabel.wd1
> disklabel -R wd0 /root/disklabel.wd1
> raidctl -a /dev/wd0b raid0
[...]
...

I guess that your problem is here. Replace every 'wd' devices with 'sd'.


Chris Harries a icrit :
> Afternoon,
> 
> Well on an i386 system with 2 x 1 TB Seagate hard drives, I generally follow
> this method from what I know and have learnt:
> 
> Install 4.4 i386 on to sd0
> Reboot
> 
> Patch source tree to 4.4 PATCH:
> cd /usr/src
> mount /dev/cd0a /mnt
> tar -zxvpf /mnt/src.tar.gz -C /usr/src ./sys
> umount /mnt
> cvs -qd anon...@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_4_4 -P src
> 
> Create new kernel with patches:
> cd /usr/src
> cvs -d anon...@anoncvs.uk.openbsd.org:/cvs up -Pd
> make -k cleandir
> rm -rf /usr/obj/*
> make obj
> 
> 
> cd /usr/src/etc/mtree
> install -c -o root -g wheel -m 660 special /etc/mtree
> install -c -o root -g wheel -m 444 4.4BSD.dist /etc/mtree
> mtree -qdef /etc/mtree/4.4BSD.dist -p / -u
> cd /usr/src/etc
> env DESTDIR=/ make distrib-dirs
> 
> cd /usr/src/sys/arch/sparc64/conf/
> config GENERIC
> cd ../compile/GENERIC
> make clean && make depend && make
> cp /bsd /bsd.old
> cp bsd /bsd
> chown root:wheel /bsd
> reboot
> 
> cd /usr/src/
> make build
> cd /dev
> cp /usr/src/etc/etc.sparc64/MAKEDEV ./
> ./MAKEDEV all
> 
> Sysmerge
> reboot
> 
> Now we have a full patched system, add raidframe:
> cd /sys/arch/i386/conf
> cat >> GENERIC.RAID << EOF
> include "arch/'uname -m'/conf/GENERIC # include GENERIC configuration
> option RAID_AUTOCONFIG # automatically configure RAIDframe arrays on boot
> pseudo-device raid 4 # RAIDframe disk driver
> EOF
> 
> Re-create the kernel with patches and raidframe:
> config GENERIC.RAID
> cd ../compile/GENERIC.RAID
> make clean depend && make
> cp /bsd /bsd.noraid
> install -o root -g wheel -m 644 bsd /
> 
> Test it boots ok, no problems. Now on to raidframe:
> fdisk -i sd1
> Yes to the MBR question
> 
> disklabel -E wd1
> Create 512mb A: 4.2BSD
> Create *(rest of space) d: RAID
> 
> Create new filesystem and mount:
> newfs sd1a
> mount /dev/sd1a /mnt
> cp /bsd /usr/mdec/boot /mnt
> /usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot wd1
> umount /mnt
> 
> Create raid0.conf
> cat >> /root/raid0.conf << EOF
> START array
> 1 2 0
> 
> START disks
> /dev/sd2d
> /dev/sd1d
> 
> START layout
> 128 1 1 1
> 
> START queue
> fifo 100
> EOF
> 
> raidctl -C /root/raid0.conf raid0
> raidctl -I 0904020 (the date) raid0
> 
> Check and add arrays:
> raidctl -s raid0
> raidctl -A root raid0
> 
> At this point, everything seams as expected
> 
> Create radi0's partitions:
> Disklabel -E raid0
> 
> A: 5G / 4.2BSD
> B: 2048M swap
> D: 50G /var/mysql 4.2bsd
> E: 500G /var/vmail 4.2bsd
> F: 10G /var   4.2bsd
> G: 1G /tmp4.2bsd
> H: 10G /usr   4.2bsd
> I: 10G /home 4.2bsd
> 
> Create the new filesystems:
> For x in a d e f g h I; do newfs raid0${x}; done
> 
> Seams to work fine.
> 
> Mount and copy RAID:
> mount /dev/raid0a /mnt
> cd /mnt
> mkdir usr tmp home var var/mysql var/vmail
> mount /dev/raid0d /mnt/var.mysql
> mount /dev/raid0e /mnt/var/vmail
> mount /dev/raid0f /mnt/var
> mount /dev/raid0g /mnt/tmp
> mount /dev/raid0h /mnt/usr
> mount /dev/raid0i /mnt/home
> 
> Transfer raid:
> d /mnt
> tar -Xcpf - / | tar -xvpf -
> rm /mnt/etc/fstab
> cat >> /mnt/etc/fstab << EOF
> /dev/raid0a / ffs rw 1 1
> /dev/raid0d /var/mysql ffs rw 1 2
> /dev/raid0e /var/vmail ffs rw 1 2
> /dev/raid0f /var ffs rw 1 2
> /dev/raid0g /tmp ffs rw 1 2
> /dev/raid0h /usr ffs rw 1 2
> /dev/raid0i /home ffs rw 1 2
> EOF
> 
> Umount partitions and reboot:
> umount /mnt/*; umount /mnt
> halt (reboot)
> 
> boot> boot sd1a:/bsd to boot to 2nd hard disk
> 
> Check, mirror, hot add, reconstruct:
> mount && uname -v && raidctl -s raid0
> disklabel wd1 > /root/disklabel.wd1
> disklabel -R wd0 /root/disklabel.wd1
> raidctl -a /dev/wd0b raid0
> raidctl -vF component0 raid0
> 
> And there is hangs, and displays
> 
>> RECON: initiating reconstruction on row - col 0 -> spare at row 0 col 2.
>> Quiescence reached...
> 
> How does this differ from what you do?
> 
> Many thanks, again
> Chris
> 
> -Original Message-
> From: Alexis de BRUYN [mailto:ale...@de-bruyn.fr] 
> Sent: 02 April 2009 13:39
> To: Chris Harries
> Cc: misc@openbsd.org
> Subject: Re: raidctl -vF component0 raid0
> 
> Hello Chris,
> 
> Before setting up your mirror, I recommanded you to read "RAID options
> for OpenBSD" from the OpenBSD FAQ
> (http://www.openbsd.org/faq/faq14.html#RAID) and then the following
> manuals (which I did when I teached myself making a RAIDFRAME mirror on
> 4.2) :
> 
> * raid(4),
> * raidctl(8),
> * newfs(8),
> * disklabel(8),
> * fdisk(8),
> * boot(8),
> * installboot

Re: Ruby 1.9

2009-04-02 Thread Stephane LAPIE
Aapo Lehtinen wrote:
> Hi
>
> Has anyone successfully compiled ruby 1.9 (stable snapshot or 1.9.1-p0)
> on OpenBSD? Compiling fails with:
>
> $ make
> compiling Win32API
> compiling bigdecimal
> compiling curses
> compiling dbm
> gcc -shared  -fPIC -o ../../.ext/x86_64-openbsd4.5/dbm.so dbm.o -L.
> -L../.. -L.  -Wl,-E-ldb  -lm   -lc
> /usr/bin/ld: cannot find -ldb
> collect2: ld returned 1 exit status
> *** Error code 1

<..>

> Current, but I don't think that is the issue.
> So, can I get advice to work this out?
>
> Aapo Lehtinen

Hello,

You didn't specify -L/usr/local/lib in your compilation flags (which is
where libdb.so.* resides, and which is why you can't find it). You
should add /usr/local/include as extra include directory, and
/usr/local/lib as extra library directory when running the ./configure
script.

Cheers,
--
Stephane LAPIE, EPITA SRS, Promo 2005
"Even when they have digital readouts, I can't understand them."
--MegaTokyo

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: Donations (was, sadly, European orders)

2009-04-02 Thread Marco Peereboom
> Others are trying to do it too, but they are just more quiet about it.
> 
> And then there's the other catagory... the breeders...

I swear it was by accident!!



Re: Donations (was, sadly, European orders)

2009-04-02 Thread Jordi Espasa Clofent
The product (OpenBSD) speeks for itself. 


+1

--
Thanks,
Jordi Espasa Clofent



Ruby 1.9

2009-04-02 Thread Aapo Lehtinen

Hi

Has anyone successfully compiled ruby 1.9 (stable snapshot or 1.9.1-p0) 
on OpenBSD? Compiling fails with:


$ make
compiling Win32API
compiling bigdecimal
compiling curses
compiling dbm
gcc -shared  -fPIC -o ../../.ext/x86_64-openbsd4.5/dbm.so dbm.o -L. 
-L../.. -L.  -Wl,-E-ldb  -lm   -lc

/usr/bin/ld: cannot find -ldb
collect2: ld returned 1 exit status
*** Error code 1

Stop in /home/aapo/ruby/ext/dbm (line 158 of Makefile).
*** Error code 1

Stop in /home/aapo/ruby (line 309 of Makefile).

DB is installed

$ pkg_info |grep db
db-4.6.21   Berkeley DB package, revision 4

System is OpenBSD/amd64

$ uname -a
OpenBSD asterix 4.5 GENERIC#3 amd64

OpenBSD 4.5-current (GENERIC) #3: Mon Mar 30 22:14:01 EEST 2009
r...@asterix:/usr/src/sys/arch/amd64/compile/GENERIC

Current, but I don't think that is the issue.
So, can I get advice to work this out?

Aapo Lehtinen
--
http://zenitisti.dy.fi



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Stefan Sperling
On Thu, Apr 02, 2009 at 01:05:53PM +0100, Stefan Sperling wrote:
> On Thu, Apr 02, 2009 at 01:52:20AM -0700, LeiV wrote:
> > Hi,
> > I have a openbsd firewall/gateway and behind a webserver, users arrive to 
> > my webserver via 1 domain name, I have a cable connection 12Mbps 
> > down/500Kbps upthe down speed is OK I dont have so many incoming 
> > requests ...but the up speed is saturated easily with those requests as my 
> > pages have images, etc...
> > I would like to add another internet connection to my openbsd box so I can 
> > increase my upstream bandwitch...it is possible? all my incoming requests 
> > will come with the same internet connection as I only have 1 domain 
> > namecan I send back the requested pages with both connections to use 
> > both upstream bandwitch ? is so, how can i do it ? any howto?
> > 
> 
> man 8 route
> /mpath

And also http://www.openbsd.org/faq/faq6.html#Multipath

Stefan



Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Stefan Sperling
On Thu, Apr 02, 2009 at 01:52:20AM -0700, LeiV wrote:
> Hi,
> I have a openbsd firewall/gateway and behind a webserver, users arrive to my 
> webserver via 1 domain name, I have a cable connection 12Mbps down/500Kbps 
> upthe down speed is OK I dont have so many incoming requests ...but the 
> up speed is saturated easily with those requests as my pages have images, 
> etc...
> I would like to add another internet connection to my openbsd box so I can 
> increase my upstream bandwitch...it is possible? all my incoming requests 
> will come with the same internet connection as I only have 1 domain 
> namecan I send back the requested pages with both connections to use both 
> upstream bandwitch ? is so, how can i do it ? any howto?
> 

man 8 route
/mpath

Stefan



Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread LeiV
Hi,
I have a openbsd firewall/gateway and behind a webserver, users arrive to my 
webserver via 1 domain name, I have a cable connection 12Mbps down/500Kbps 
upthe down speed is OK I dont have so many incoming requests ...but the up 
speed is saturated easily with those requests as my pages have images, etc...
I would like to add another internet connection to my openbsd box so I can 
increase my upstream bandwitch...it is possible? all my incoming requests will 
come with the same internet connection as I only have 1 domain namecan I 
send back the requested pages with both connections to use both upstream 
bandwitch ? is so, how can i do it ? any howto?

Thanks
 
-- 
View this message in context: 
http://n2.nabble.com/Using-2-internet-connections-on-OpenBSD-Gateway-tp2574075p2574075.html
Sent from the OpenBSD Misc mailing list archive at Nabble.com.



Re: raidctl -vF component0 raid0

2009-04-02 Thread Chris Harries
Mr Roberts,

I just wanted to verify something which you stated in this e-mail

If you *only* want to do RAID 1 (mirroring), and you are not booting
to the volume, you might be better off looking at `man softraid`

I am looking at softraid, and can make a mirroed raid of 2 HDD's with a 3rd
holding the OS, but I am guessing you meant I cannot have 2 drives in
mirror, built with softraid and bioctl, that the OS is on?

Many Thanks
Chris

-Original Message-
From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of
J.C. Roberts
Sent: 30 March 2009 14:01
To: Chris Harries
Cc: misc@openbsd.org
Subject: Re: raidctl -vF component0 raid0

On Mon, 30 Mar 2009 13:32:41 +0100 "Chris Harries"
 wrote:

> Thank you for your time.
> 
> This I did find weird, wondering why on this guide, it is setting B
> to RAID and not swap...on boot it does say it cannot find swap but
> this guide did come recommended...
> 
> It says
> 
> A: 144522 4.2BSD (this is the 64MB drive to boot off
> B: 1953375480 RAID (this is the RAID data partition
> C: 1953523055 UNUSED
> 
> I am guessing you meant wd0 and wd1, the guide suggested making wd2
> as the fake device as I am creating the install on wd0, putting over
> to wd1 then booting to wd1 and initializing wd0 again and create the
> raid, in a very cut way to explain it
> 
> Chris
> 
> > -Original Message-
> > From: J.C. Roberts [mailto:list-...@designtools.org] 
> > Sent: 30 March 2009 13:16
> > To: Chris Harries
> > Cc: misc@openbsd.org
> > Subject: Re: raidctl -vF component0 raid0
> > 
> > On Mon, 30 Mar 2009 09:43:31 +0100 "Chris Harries"
> >  wrote:
> > 
> > START disks
> > /dev/wd2b # the fake device
> > /dev/wd1b
> >  
> > 
> > The above looks weird. The 'b' partition is typically swap.
> > 
> > What do the following commands tell you?
> > 
> > $ sudo disklabel -n wd1
> > 
> > $ sudo disklabel -n wd2
> > 
> > 
> > -- 
> > J.C. Roberts
> > 


No. I meant what I said. You have wd1b and wd2b clearly stated in your
config file, "/root/raid0.conf". Unless you've already disklabel'd
the wd1 and wd2 disks to have a 'b' partition, then something is
terribly wrong.

There is a very good reason why many people around here have a bad view
of "how-to" documents. Theses supposed "how-to" documents you find on
the web are often completely wrong. OpenBSD strives to have accurate and
useful documentation in it's manuals. You should always start by reading
the OpenBSD manuals first.

$ man raidctl

If you *only* want to do RAID 1 (mirroring), and you are not booting
to the volume, you might be better off looking at `man softraid` --This
is the new RAID functionality being built into OpenBSD. Using softraid
will save you from building a custom kernel with RAIDframe support,
but be sure to read the CAVEATS section of the softraid man page to make
sure softraid fits your needs.

-- 
J.C. Roberts



Re: the fdisk man page and the fdisk behaviour

2009-04-02 Thread Nick Holland
J.C. Roberts wrote:
...
> On a the lower and fundamental levels, solid state storage does not have
> the limitations or organization of rotating storage (disks), but none
> the less, in current products the new tech has been (intentionally)
> impaired and implemented with the old ideas to provide ass-backwards
> compatibility. At present, the Solid State (storage) Disks/Devices
> (SSD's) currently available have been designed for the sake of selling
> into existing markets where being ass-backwards compatibility is,
> unfortunately, a requirement.

eh, that's just this generation.
They've been available in some seriously kick-butt (for the day)
formats for literally decades on various platforms...but the price
was high, the issues were complex, and therefore, sales were low
and prices stayed high.

(back in the mid 1980s, I used a mainframe at school with a Solid
State Disk system for swap, as a way around limited physical RAM
capabilities in the system.  I hate to say this, but I think it was
a whopping 16M in size (though there may have been several of them).)

(side trip: anyone under 40 remember bubble memory?  don't answer
that on list, please...)

The new generation of stuff is mindless and simple...and sells like
hotcakes, and the price has therefore dropped to the point where it
sells like hotcakes...on sale.

YES, it loses much of the point to have a disk with no moving parts
that interfaces like a disk with moving parts.  But then, it makes
no sense to have a disk with variable geometry being treated as a
drive with fixed geometry.  But we've had it for 25 years...and
don't wait up for the change...If it greases the wheels and lets
things happen, greatit beats not happening at all.

> Though my employers would shoot me for violating an NDA, and Theo
> would shoot me for signing an NDA in the first place, for me it's tough
> to make a living with out them, so I have to be vague and leave out
> important details.
> 
> There are efforts afoot to abandon the limitations and organization of
> rotational storage, so both existing "disk layout" tools such as fdisk
> and disklabel, and even file systems, will eventually need to change to
> benefit from new technology.

actually, more file systems and boot loaders than disk layout tools.
The disk tools are pretty much a "bunch of sectors" thing, and have
been for quite some time now.

> The whole concept of sectors, 512 byte or otherwise, on solid state
> storage systems/devices is really just a sad kludge. The concept of a
> "disk controller" is already out dated and will soon be abandoned.

well..flash memory still has pages or similar that have to be cleared
and rewritten, at least according to my (non-ECC) memory...So, kinda
sector-ish.

Really, I'd think the idea of "sectors" has been more of an OS construct
than a hardware construct for a long time.  Back in the Amiga days
(again from non-ECC personal memory), they were loading entire tracks
from the floppy into RAM at a time, rather than sector-by-sector, in
large parts because once you got over 100k of RAM or so..you could.

I don't think you will see OSs allocating disk space on one-byte
boundaries any time soon.  I could be wrong...but I've seen some OSs
that managed to handle data on subdivided blocks...and eventually
they decided it wasn't worth the effort.  As disk size has grown,
trying to save a few K here and there through added complexity
is highly questionable...

> The following is publicly available information, is nearly two years
> old, is still using ass-backwards compatibility, and is obviously quite
> a few redesign revisions behind reality, but it should give you
> an idea of where the storage world is headed:
> http://www.tgdaily.com/index.php?option=com_content&task=view&id=34065

Former employer could have used some of those for a poorly written
app they seemed to be stuck with.  At one point, we were looking
at some $250,000 battery-backed RAM disks.  Cost was the killer, but
it wasn't a "quarter million? HAHAHHAA!  NO FREAKING WAY", much more
"hm.  don't think we can justify that now".  However, the guy who
fired me sunk many times that into some very bad solutions to the
problem.

Another problem all there will be with going in a "new direction"
is that it is a multi-prong problem -- storage HW, computer HW and
OS all have to support whatever is done.  The fact that you are
signing NDAs causes me to believe it is going to be a specialty
combination of HW and SW for some time...

'course, I spent about 20 years hoping that One Day the IBM XT/AT
abomination that we've been stuck with would be replaced.  I think
I've given up.

Nick.



Re: Wim

2009-04-02 Thread Humberto Pérez Romero
2009/4/2 Theo de Raadt :
> This guy some of you think is so honest.  He's filtering port 25
> from cvs.openbsd.org.
>
> For what reason would he do that?
>
> Today was the first time I tried to mail him, cc'd to misc@openbsd.org,
> in a couple of months.
>
> So what's that all about?  He's so honest, some of you think, because
> he bought you a beer.

> in a couple of months.
>
> So what's that all about?  He's so honest, some of you think, because
> he bought you a beer.

Hi Teo:

Did you try to mail him to wim.vandepu...@gmail.com?

This message appear in his web.

"Important: Email is working fine but because I use greylisting, if
it's urgent, don't just email me at w...@kd85.com but also put
wim.vandepu...@gmail.com in cc:.
Greylisting inserts a 30 to 60 minute latency"

Humberto Pirez



Re: Donations (was, sadly, European orders)

2009-04-02 Thread William Chivers
+ 1 here

Not only the product speaks for itself, but the fact that you develop it so 
openly and allow free downloads.

Thanks Alf, that is what I tried to say in my long-winded message a couple of 
days ago.


-
William J. Chivers
Lecturer in Information Technology
School of DCIT
Faculty of Science and Information Technology
University of Newcastle---Ourimbah Campus
PO Box 127, Ourimbah, NSW 2259
Australia
CRICOS Provider Number: 00109J 

phone:   +61 2 4349 4473
fax: +61 2 4349 4565
email:  william.chiv...@newcastle.edu.au
-
>>> Alf Schlichting  04/02/09 6:49 PM >>>
Theo,

as far as i am concerned (and most likely the majority of OpenBSD
users) there is no need for you to justify yourself (or any other
developer) in public.
The product (OpenBSD) speeks for itself. 

Alf

P.S.:
To me the sentence about hiking on Wim's page looks like a
silly rethoric trick that gives the rest of his text an objectionable
taste.
On Wed, Apr 01, 2009 at 10:11:07PM -0600, Theo de Raadt wrote:
> > So what if it's founder lives a mountain biking/hiking lifestyle?
> 
> There are people being misled that I pay for this extravagant
> lifestyle out of donations.  Hah.  Shame on those people who spread
> that rumour, and also shame on those who are so easily deceived.
> 
> I hike near conferences that I am invited to; flights paid for.  I
> hike near hackathons that I must attend with developers -- hackathons
> tend to be near hiking areas but I am not alone in preferring this
> (our hackathon locations are otherwise chosen for "cheap accomodation
> with free internet2"... perhaps internet2 usage is correleted to good
> terrain..).  Once a year I pay with my hard earned salary for a trip
> to hike somewhere.  Then one further time a year I use the reward
> points -- from all my other flights and hackathon hotel bills and
> developer flights paid with donation money -- to get to another hiking
> destination.
> 
> Yes... I have to take time off to do this, but as many of you know
> when I get back from a trip I go through all the thousands of mails I
> received and the project moves on.  And between hikes in a foreign
> country I find insecure ways to partially get in touch a bit and some
> developers really hate that.  I work hard.  When I don't hike, and
> especially during pre-release times, I sometimes don't get outside for
> days at a time except on forced 10km runs.
> 
> Extravagant?  No.  Just a life choice.
> 
> I have had people accuse me privately of this.  I hope others are not
> so easily deceived.
> 
> Trust me, with the OpenBSD donations are a loss.  Just look at this
> page, and estimate the hotel bills:
> 
>   http://www.openbsd.org/hackathons.html
> 
> After you estimate those numbers, where would I find money to spend on
> even a slurpee?  Gimme a fucking break...  Donations help a lot, but
> they are not the whole picture.  That is why we are so eager -- as a
> project -- get the money that Wim has taken from us, because it will
> help OpenBSD run more hackathons.  The systems code you are running,
> almost half of it came from hackathons.
> 
> > If I can give him that and he can continue to provide this wonderful
> > product for "free," I'm happy to help him live his lifestyle (even if
> > he doesn't play well with others at times).
> 
> It's a deal.
> 
> > It's too bad the project
> > doesn't have greater financial backing to allow more development of
> > the OS goodness we enjoy--and also allow more "OpenBSD people" to live
> > a Theo-like lifestyle, if they so choose.
> 
> Others are trying to do it too, but they are just more quiet about it.
> 
> And then there's the other catagory... the breeders...



Re: Donations (was, sadly, European orders)

2009-04-02 Thread ttw+bsd
On 02.04-09:49, Alf Schlichting wrote:
[ ... ]
> as far as i am concerned (and most likely the majority of OpenBSD
> users) there is no need for you to justify yourself (or any other
> developer) in public.
> The product (OpenBSD) speeks for itself. 

+1



Re: dvd-rw as user?

2009-04-02 Thread Nick Guenther
On Thu, Apr 2, 2009 at 3:06 AM, J.C. Roberts 
wrote:
> On Wed, 1 Apr 2009 21:24:16 -0400 Nick Guenther 
> wrote:
>
>> On Wed, Apr 1, 2009 at 10:48 AM, J.C. Roberts
>>  wrote:
>> > On Wed, 1 Apr 2009 04:46:10 + Jacob Meuser
>> >  wrote:
>> >
>> >> On Tue, Mar 31, 2009 at 07:13:33PM -0700, OpenBSD wrote:
>> >> > Hello
>> >> >
>> >> > Could somebody please tell me how to use a dvd-rw as user?
>> >> > I'am trying to install Slackware using qemu, and the dvd does not
>> >> > work properly, it works well as root. I've tried adding the user
>> >> > to operator group, users group, and declaring it at fstab without
>> >> > optimum results.
>> >>
>> >> by default root can read and write /dev/rcd0c.  operator group can
>> >> only read.
>> >>
>> >> you need to be able to write to /dev/rcd0c to put a filesystem on
>> >> a cd/dvd.
>> >>
>> >> you can change the permissions on /dev/rcd0c or use sudo.
>> >
>> > Using sudo is a great way to handle this situation, but this depends
>> > on how much you trust the user, and whether or not you can properly
>> > configure /etc/sudoers with visudo.
>> >
>> > NOTE: Jake only said "change the permissions" but he did not say to
>> > change them permanently on disk. Of course, changing permissions
>> > permanently on disk is an option, but in many situations it is not
>> > the best option.
>> >
>> > If as root you fumble-finger the chown/chmod command on your
>> > devices, stuff a user into the wrong group, or don't fully
>> > understand all the esoteric issues involved in device permissions,
>> > you could easily be in a world of hurt.
>> >
>> > If you really want to go the route of changing permissions on a
>> > workstation, the best way to do it is using the existing features
>> > available /etc/fbtab to change permissions on devices automatically
>> > and temporarily at user login and logout. See man fbtab for details.
>> >
>> > This exact situation of an unprivileged local user needing access to
>> > devices is the reason why fbtab exists.
>> >
>>
>> Reading fbtab(5), it seems that it changes the device permissions
>> whenever any matching user logs in. So what happens if two users log
>> in (say, one on the first virtual term, one on the second)? Does the
>> second get control of all the devices and the first is just out of
>> luck?
>
> It depends on how you configure things. It's just a chmod, so you could
> set the permissions however you want (owner/group/everyone). At times
> you would *want* the other guy to be out of luck.
>
> The tty(4) used to login, is the trigger for fbtab to the change the
> permissions. If you look at your /etc/fbtab file, you'll find you're
> already using it.
>
> If you log into the first virtual terminal (i.e. the default), you're
> on /dev/ttyC0. If you log into the second virtual terminal, you're
> on /dev/ttyC1, and so on. Though they are called "Virtual Terminals"
> and you've got a number of them, they are, in essence, device files
> associated with "hardware terminal ports." Yes, the names, hardware
> versus virtual, do seem a bit contradictory until you read `man 4 tty`
> and think about it.

When I get back to my BSD box I'll have to remember to see who owns
what if I login as one user on ttyC0 and a different one on ttyC1.

> The Virtual Terminals (normally) all use the same single of user
> interface equipment (keyboard, mouse, ...), but the equipment is only
> tied to one virtual terminal at a time. Yep, by switching virtual
> terminals, you're basically reassigning control of the equipment from
> one hardware terminal port to another.
>
> You might be doing something highly improbable, namely you are
> successfully running a "Hydra System" (i.e. multiple keyboards, mice,
> monitors, ... all connected to one system) -- If you've got that
> working, please tell me how. (; -- In this case you could have two
> different people logged in *locally* via UI equipment. Sadly, I do not
> recall how tty(4)'s and/or virtual terminals are assigned on a hydra
> system. I'm fairly certain it still involves the typicall TTY
> "dial-in" port waiting for a connection/login (via getty), but I do not
> recall (and can't find) the details on how the hardware gets assigned.
>
> In contrast, if you log in remotely via ssh, you use a "pseudo
> terminal" (pty(4)), so the local keyboard, mouse and whatever are not
> assigned. Again it might seem contradictory, but if you're running the
> X Window system, and you start an xterm window, the xterm is also
> assigned a pseudo terminal --the reason being is the keyboard, mouse
> and whatnot are *already* tied to the "Graphics Virtual
> Terminal" (/dev/X0 typically assigned to CTRL-ALT-F5) and the X Server
> is responsible for passing keystrokes to the xterm window.
>
> Yep, when you start X Windows, you actually switch virtual terminals,
> so the keyboard, mouse, monitor and whatever get reassigned to it. If
> you look at the default /etc/fbtab, you'll see it handles the
> reassignment of the your mouse device 

Re: Donations (was, sadly, European orders)

2009-04-02 Thread Alf Schlichting
Theo,

as far as i am concerned (and most likely the majority of OpenBSD
users) there is no need for you to justify yourself (or any other
developer) in public.
The product (OpenBSD) speeks for itself. 

Alf

P.S.:
To me the sentence about hiking on Wim's page looks like a
silly rethoric trick that gives the rest of his text an objectionable
taste.
On Wed, Apr 01, 2009 at 10:11:07PM -0600, Theo de Raadt wrote:
> > So what if it's founder lives a mountain biking/hiking lifestyle?
> 
> There are people being misled that I pay for this extravagant
> lifestyle out of donations.  Hah.  Shame on those people who spread
> that rumour, and also shame on those who are so easily deceived.
> 
> I hike near conferences that I am invited to; flights paid for.  I
> hike near hackathons that I must attend with developers -- hackathons
> tend to be near hiking areas but I am not alone in preferring this
> (our hackathon locations are otherwise chosen for "cheap accomodation
> with free internet2"... perhaps internet2 usage is correleted to good
> terrain..).  Once a year I pay with my hard earned salary for a trip
> to hike somewhere.  Then one further time a year I use the reward
> points -- from all my other flights and hackathon hotel bills and
> developer flights paid with donation money -- to get to another hiking
> destination.
> 
> Yes... I have to take time off to do this, but as many of you know
> when I get back from a trip I go through all the thousands of mails I
> received and the project moves on.  And between hikes in a foreign
> country I find insecure ways to partially get in touch a bit and some
> developers really hate that.  I work hard.  When I don't hike, and
> especially during pre-release times, I sometimes don't get outside for
> days at a time except on forced 10km runs.
> 
> Extravagant?  No.  Just a life choice.
> 
> I have had people accuse me privately of this.  I hope others are not
> so easily deceived.
> 
> Trust me, with the OpenBSD donations are a loss.  Just look at this
> page, and estimate the hotel bills:
> 
>   http://www.openbsd.org/hackathons.html
> 
> After you estimate those numbers, where would I find money to spend on
> even a slurpee?  Gimme a fucking break...  Donations help a lot, but
> they are not the whole picture.  That is why we are so eager -- as a
> project -- get the money that Wim has taken from us, because it will
> help OpenBSD run more hackathons.  The systems code you are running,
> almost half of it came from hackathons.
> 
> > If I can give him that and he can continue to provide this wonderful
> > product for "free," I'm happy to help him live his lifestyle (even if
> > he doesn't play well with others at times).
> 
> It's a deal.
> 
> > It's too bad the project
> > doesn't have greater financial backing to allow more development of
> > the OS goodness we enjoy--and also allow more "OpenBSD people" to live
> > a Theo-like lifestyle, if they so choose.
> 
> Others are trying to do it too, but they are just more quiet about it.
> 
> And then there's the other catagory... the breeders...



Re: dvd-rw as user?

2009-04-02 Thread J.C. Roberts
On Wed, 1 Apr 2009 21:24:16 -0400 Nick Guenther 
wrote:

> On Wed, Apr 1, 2009 at 10:48 AM, J.C. Roberts
>  wrote:
> > On Wed, 1 Apr 2009 04:46:10 + Jacob Meuser
> >  wrote:
> >
> >> On Tue, Mar 31, 2009 at 07:13:33PM -0700, OpenBSD wrote:
> >> > Hello
> >> >
> >> > Could somebody please tell me how to use a dvd-rw as user?
> >> > I'am trying to install Slackware using qemu, and the dvd does not
> >> > work properly, it works well as root. I've tried adding the user
> >> > to operator group, users group, and declaring it at fstab without
> >> > optimum results.
> >>
> >> by default root can read and write /dev/rcd0c.  operator group can
> >> only read.
> >>
> >> you need to be able to write to /dev/rcd0c to put a filesystem on
> >> a cd/dvd.
> >>
> >> you can change the permissions on /dev/rcd0c or use sudo.
> >
> > Using sudo is a great way to handle this situation, but this depends
> > on how much you trust the user, and whether or not you can properly
> > configure /etc/sudoers with visudo.
> >
> > NOTE: Jake only said "change the permissions" but he did not say to
> > change them permanently on disk. Of course, changing permissions
> > permanently on disk is an option, but in many situations it is not
> > the best option.
> >
> > If as root you fumble-finger the chown/chmod command on your
> > devices, stuff a user into the wrong group, or don't fully
> > understand all the esoteric issues involved in device permissions,
> > you could easily be in a world of hurt.
> >
> > If you really want to go the route of changing permissions on a
> > workstation, the best way to do it is using the existing features
> > available /etc/fbtab to change permissions on devices automatically
> > and temporarily at user login and logout. See man fbtab for details.
> >
> > This exact situation of an unprivileged local user needing access to
> > devices is the reason why fbtab exists.
> >
>
> Reading fbtab(5), it seems that it changes the device permissions
> whenever any matching user logs in. So what happens if two users log
> in (say, one on the first virtual term, one on the second)? Does the
> second get control of all the devices and the first is just out of
> luck?

It depends on how you configure things. It's just a chmod, so you could
set the permissions however you want (owner/group/everyone). At times
you would *want* the other guy to be out of luck.

The tty(4) used to login, is the trigger for fbtab to the change the
permissions. If you look at your /etc/fbtab file, you'll find you're
already using it.

If you log into the first virtual terminal (i.e. the default), you're
on /dev/ttyC0. If you log into the second virtual terminal, you're
on /dev/ttyC1, and so on. Though they are called "Virtual Terminals"
and you've got a number of them, they are, in essence, device files
associated with "hardware terminal ports." Yes, the names, hardware
versus virtual, do seem a bit contradictory until you read `man 4 tty`
and think about it.

The Virtual Terminals (normally) all use the same single of user
interface equipment (keyboard, mouse, ...), but the equipment is only
tied to one virtual terminal at a time. Yep, by switching virtual
terminals, you're basically reassigning control of the equipment from
one hardware terminal port to another.

You might be doing something highly improbable, namely you are
successfully running a "Hydra System" (i.e. multiple keyboards, mice,
monitors, ... all connected to one system) -- If you've got that
working, please tell me how. (; -- In this case you could have two
different people logged in *locally* via UI equipment. Sadly, I do not
recall how tty(4)'s and/or virtual terminals are assigned on a hydra
system. I'm fairly certain it still involves the typicall TTY
"dial-in" port waiting for a connection/login (via getty), but I do not
recall (and can't find) the details on how the hardware gets assigned.

In contrast, if you log in remotely via ssh, you use a "pseudo
terminal" (pty(4)), so the local keyboard, mouse and whatever are not
assigned. Again it might seem contradictory, but if you're running the
X Window system, and you start an xterm window, the xterm is also
assigned a pseudo terminal --the reason being is the keyboard, mouse
and whatnot are *already* tied to the "Graphics Virtual
Terminal" (/dev/X0 typically assigned to CTRL-ALT-F5) and the X Server
is responsible for passing keystrokes to the xterm window.

Yep, when you start X Windows, you actually switch virtual terminals,
so the keyboard, mouse, monitor and whatever get reassigned to it. If
you look at the default /etc/fbtab, you'll see it handles the
reassignment of the your mouse device (/dev/wsmous /dev/wsmouse0). I do
not personally know why only the mouse is reassigned to the X/Graphics
virtual terminal via fbtab and your keyboard and monitor are not, but
there is probably a good reason for it... ---I like to believe said
good reason is sitting quietly, waiting, in a very large pile of good
reasons that I