Re: Misc questionning about DNS

2015-01-13 Thread Adriaan
In
https://kb.isc.org/article/AA-00874/0/Best-Practices-for-those-running-Recursive-Servers.html
one of the recommendations is to separate the two roles:

"Do not combine authoritative and recursive nameserver functions -- have
each function performed by separate server sets"

On Wed, Jan 14, 2015 at 4:10 AM, Nick Holland 
wrote:

> On 01/13/15 16:26, sven falempin wrote:
> > Dear OpenBSD users,
> >
> > Recently unbound made his way in base, pushing the complex bind/named
> > out for our own good.
> >
> > I would like to internally and externally solve some domain names
> > differently (so some service are accessible from inside and outside
> > without some fancy NAT or worse), I found out 'some' call this setup a
> > 'split-dns', often use for internal mail server.
> >
> > I also found out BIND got a feature for this and internet gossip
> >
> > <<
> > Unbound doesn't support split-horizon DNS. It's primarily meant as a
> > recursive and caching nameserver, and has only limited support for
> > serving authoritative answers.
> >>>
> >
> > Of course i imagine ran two unbound with two different IP address
> binding 
> >
> > I feel like I am missing something.
>
> yes.  you are stuck thinking like BIND.
>
> > If I want to manage my domain , shall I use bind on the 'main' server ?
>
> no. :)
>
> You are designing around a BIND "feature", then declaring other products
> unsuitable because they don't match the spec you designed around.
>
> Start with the basic rule: BIND's design is bad.  Almost everything
> about it is wrong -- file formats, zone transfers, etc.  Once you
> realize that, things get much easier.  If you find an alternative
> "lacks" a "feature" of BIND, it's probably best you don't use that
> feature.  Really.
>
> Read Dan Bernstein's writeups on DNS, in addition to the BIND fanboy
> stuff.  Having managed a lot of DNS for a lot of domains for a few
> employers, I'm quite satisfied that Bernstein's much more right than
> wrong on DNS.
>
> There are two roles for DNS servers -- finding answers about a random
> domain, and providing answers about SPECIFIC domains.  The first is
> sometimes called "Resolvers", the second is sometimes called an
> authoritative server.  BIND mushed those two roles together stupidly,
> and people have been stuck thinking like that for decades now.  Separate
> them in your head.
>
> unbound is the resolver, nsd is the authoritative server.
>
> Want to find answers for your user's DNS queries?  That's unbound, the
> resolver.  That's the only thing users talk to.  Resolution is pretty
> complicated, not the kind of code you want to trust too blindly.
>
> Want to answer authoritatively about a domain?  That's the authoritative
> server...but you should never ask an authoritative server about anything
> other than what they are authoritative for.  Authoritative servers are
> relatively simple -- you ask a question, they either have the answer
> right there ready to give you, or they don't, but it all boils down to
> question, a single lookup, respond.  No need to talk elsewhere for info.
>
> Keep in mind, one computer can have LOTS of separate IP addresses to
> connect server processes to (don't forget you got all of 127.0.0.0/8!).
>  You also have lots of ports you can connect services to, and on an
> OpenBSD box, you have PF which can direct traffic from exposed ports and
> IP addresses to internal ones.  You seem to be uncomfortable with the
> idea of running multiple servers...why?  Your box is quite capable of
> multi-tasking!
>
> You can also have one BIG cache on a resolving server, and a bunch of
> minimal resolvers that act as message routers to either the big caching
> resolver or authoritative servers.
>
> So...assuming you really want to put internal and external DNS on the
> same box (not a really good idea), you can put NSD with your internal
> info on 127.0.0.2, NSD with external info on 127.0.0.1, and unbound on
> your internal facing NIC, configured to refer your internally hosted
> domains to 127.0.0.2.  External queries for your authoritative server
> get redirected to 127.0.0.1...and the outside world never touches your
> resolver.
>
> Why would you want the outside world touching your internal DNS servers
> anyway?  Talk about an unneeded hole in the firewall.  If you are doing
> enough with DNS that you need to host your own external authoritative
> server, you can justify a couple old computers for that.  Otherwise, I'd
> suggest letting your registrar handle your dns for you.
>
> Design your network properly, it gets really easy -- all my internal
> systems are in the zone "in.nickh.org", my local DNS resolver knows to
> pass *.in.nickh.org to my local authoritative server, the rest is
> resolved as "normal".
>
> Nick.



Re: Load PF after all networks are ready

2015-01-13 Thread Claudio Jeker
On Wed, Jan 14, 2015 at 02:19:57PM +0800, Zhi-Qiang Lei wrote:
> My router powered by OpenBSD 5.6 is connecting to a WAN via PPPoE. After boot
> I have to run ???pf -f /etc/pf.conf??? to get NAT work. Is PF loaded before
> the PPPoE is ready? How can I fix it? Thanks.
> 
> #   $OpenBSD: pf.conf,v 1.53 2014/01/25 10:28:36 dtucker Exp $
> #
> # See pf.conf(5) for syntax and examples.
> # Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1
> # in /etc/sysctl.conf if packets are to be forwarded between interfaces.
> 
> # increase default state limit from 10'000 states on busy systems
> #set limit states 10
> 
> set skip on lo
> 
> # filter rules and anchor for ftp-proxy(8)
> #anchor "ftp-proxy/*"
> #pass in quick inet proto tcp to port ftp divert-to 127.0.0.1 port 8021
> 
> # anchor for relayd(8)
> #anchor "relayd/*"
> 
> block return# block stateless traffic
> pass# establish keep-state
> 
> # rules for spamd(8)
> #table  persist
> #table  persist file "/etc/mail/nospamd"
> #pass in on egress proto tcp from any to any port smtp \
> #rdr-to 127.0.0.1 port spamd
> #pass in on egress proto tcp from  to any port smtp
> #pass in log on egress proto tcp from  to any port smtp
> #pass out log on egress proto tcp to any port smtp
> 
> 
> #block in quick from urpf-failed to any # use with care
> 
> # By default, do not permit remote connections to X11
> block return in on ! lo0 proto tcp to port 6000:6010
> 
> ext_if=pppoe0
> int_if=vether0
> lan=$int_if:network
> 
> pass out on $ext_if from $lan to any nat-to $ext_if
> 

Use

pass out on $ext_if from $lan to any nat-to ($ext_if)

which will update the nat-to address based on the address assigned to the
interface. Then you no longer need to update pf.conf when the IP changes.

-- 
:wq Claudio



Re: Load PF after all networks are ready

2015-01-13 Thread Cosmo Wu

So the PPPoE is up when the Box boots ? if not , the PF won't load .

please refer to the /etc/rc  , if you set your PPPoE on the hostname.if 
,the PF would load after the network initiates. but if you are using 
other tools to configure PPPoE ,PF will precede , I think.



thanks.


On 14.01.2015 14:19, Zhi-Qiang Lei wrote:
My router powered by OpenBSD 5.6 is connecting to a WAN via PPPoE. 
After boot
I have to run ‘pf -f /etc/pf.conf’ to get NAT work. Is PF loaded 
before

the PPPoE is ready? How can I fix it? Thanks.

#   $OpenBSD: pf.conf,v 1.53 2014/01/25 10:28:36 dtucker Exp $
#
# See pf.conf(5) for syntax and examples.
# Remember to set net.inet.ip.forwarding=1 and/or 
net.inet6.ip6.forwarding=1
# in /etc/sysctl.conf if packets are to be forwarded between 
interfaces.


# increase default state limit from 10'000 states on busy systems
#set limit states 10

set skip on lo

# filter rules and anchor for ftp-proxy(8)
#anchor "ftp-proxy/*"
#pass in quick inet proto tcp to port ftp divert-to 127.0.0.1 port 
8021


# anchor for relayd(8)
#anchor "relayd/*"

block return# block stateless traffic
pass# establish keep-state

# rules for spamd(8)
#table  persist
#table  persist file "/etc/mail/nospamd"
#pass in on egress proto tcp from any to any port smtp \
#rdr-to 127.0.0.1 port spamd
#pass in on egress proto tcp from  to any port smtp
#pass in log on egress proto tcp from  to any port smtp
#pass out log on egress proto tcp to any port smtp


#block in quick from urpf-failed to any # use with care

# By default, do not permit remote connections to X11
block return in on ! lo0 proto tcp to port 6000:6010

ext_if=pppoe0
int_if=vether0
lan=$int_if:network

pass out on $ext_if from $lan to any nat-to $ext_if

Best regards,
Zhi-Qiang Lei


--


Best Regards,

Cosmo Wu



Load PF after all networks are ready

2015-01-13 Thread Zhi-Qiang Lei
My router powered by OpenBSD 5.6 is connecting to a WAN via PPPoE. After boot
I have to run ‘pf -f /etc/pf.conf’ to get NAT work. Is PF loaded before
the PPPoE is ready? How can I fix it? Thanks.

#   $OpenBSD: pf.conf,v 1.53 2014/01/25 10:28:36 dtucker Exp $
#
# See pf.conf(5) for syntax and examples.
# Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1
# in /etc/sysctl.conf if packets are to be forwarded between interfaces.

# increase default state limit from 10'000 states on busy systems
#set limit states 10

set skip on lo

# filter rules and anchor for ftp-proxy(8)
#anchor "ftp-proxy/*"
#pass in quick inet proto tcp to port ftp divert-to 127.0.0.1 port 8021

# anchor for relayd(8)
#anchor "relayd/*"

block return# block stateless traffic
pass# establish keep-state

# rules for spamd(8)
#table  persist
#table  persist file "/etc/mail/nospamd"
#pass in on egress proto tcp from any to any port smtp \
#rdr-to 127.0.0.1 port spamd
#pass in on egress proto tcp from  to any port smtp
#pass in log on egress proto tcp from  to any port smtp
#pass out log on egress proto tcp to any port smtp


#block in quick from urpf-failed to any # use with care

# By default, do not permit remote connections to X11
block return in on ! lo0 proto tcp to port 6000:6010

ext_if=pppoe0
int_if=vether0
lan=$int_if:network

pass out on $ext_if from $lan to any nat-to $ext_if

Best regards,
Zhi-Qiang Lei



How to Selectively route DESTINATIONS via wan1_gw and via wan2_gw

2015-01-13 Thread Indunil Jayasooriya
Hi misc,

I have /etc/ip_list1 file containing some destinations.

 format of /etc/ip_list1 is given below.

1.2.3.4
1.6.3.0/24


I want to route ALL DESTINATIONS listed in /etc/ip_list1 via wan1_gw.  The
rest of trafficc , I want to route via wan2_gw .

I have enabled below things in sysctl.conf file (including multipath
routing)

net.inet.ip.forwarding=1# 1=Permit forwarding (routing) of IPv4
packets
#net.inet.ip.mforwarding=1  # 1=Permit forwarding (routing) of IPv4
multicast packets
net.inet.ip.multipath=1 # 1=Enable IP multipath routing
net.inet.icmp.rediraccept=1 # 1=Accept ICMP redirects


my 2 gatewys

wan1_gw= "192.168.2.100"
wan2_gw= "192.168.1.1"


my hostname.xxx files like these.

my wan1 interface

# cat /etc/hostname.rl0
inet 192.168.2.35 255.255.255.0
!route add -mpath default 192.168.2.100

my wan2 interface

# cat /etc/hostname.rl1
inet 192.168.1.11 255.255.255.0
!route add -mpath default 192.168.1.1

my lan interface

# cat /etc/hostname.bge0
inet 192.168.100.208 255.255.255.0


my pf.conf file looks like this.

# macros

int_if="bge0"
wan1_if="rl0"
wan2_if="rl1"

lan_net="192.168.100.0/24"
#lan_net="192.168.101.0/24"

wan1_gw= "192.168.2.100"
wan2_gw= "192.168.1.1"

table  persist file "/etc/ip_list1"

# options

set block-policy return
set loginterface $wan1_if
set skip on lo

#THIS IS THE RULE TO ROUTE VIA WAN1_GW
pass out quick log from any to  route-to ($wan1_if $wan1_gw)

# match rules

match out on $wan1_if from $lan_net nat-to ($wan1_if)
match out on $wan2_if from $lan_net nat-to ($wan2_if)

# filter rules

block in log
#block out log
pass out quick log

antispoof quick for { lo $int_if }

pass in log inet proto icmp all icmp-type $icmp_types



I still can NOT traceroute to destinations in /etc/ip_list1 via wan1_gw and
the rest via wan2_gw

How to achive this goal?






-- 
cat /etc/motd

Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html   -  Download Sinhala
Fonts



Symon on 5.6

2015-01-13 Thread Steve Shockley
I've installed Symon/Symux/Syweb on a 5.6 machine for testing. 
Symon+Symux are up and running.  I installed apache-httpd-openbsd (at 
least until I'm familiar with httpd), set up the virtual host, and I ran 
the chroot enable script from rrdtool.


When I view configtest.php, I get the error:
apache or php setup faulty: cannot execute /usr/local/bin/rrdtool

For testing, I temporarily copied /bin/sh to /var/www/bin/sh, and it 
started working.  Removing it breaks it again.


Should I need to copy sh to the chroot, or am I doing something else wrong?

Thanks.



Re: Misc questionning about DNS

2015-01-13 Thread Nick Holland
On 01/13/15 16:26, sven falempin wrote:
> Dear OpenBSD users,
> 
> Recently unbound made his way in base, pushing the complex bind/named
> out for our own good.
> 
> I would like to internally and externally solve some domain names
> differently (so some service are accessible from inside and outside
> without some fancy NAT or worse), I found out 'some' call this setup a
> 'split-dns', often use for internal mail server.
> 
> I also found out BIND got a feature for this and internet gossip
> 
> <<
> Unbound doesn't support split-horizon DNS. It's primarily meant as a
> recursive and caching nameserver, and has only limited support for
> serving authoritative answers.
>>>
> 
> Of course i imagine ran two unbound with two different IP address binding 
> 
> I feel like I am missing something.

yes.  you are stuck thinking like BIND.

> If I want to manage my domain , shall I use bind on the 'main' server ?

no. :)

You are designing around a BIND "feature", then declaring other products
unsuitable because they don't match the spec you designed around.

Start with the basic rule: BIND's design is bad.  Almost everything
about it is wrong -- file formats, zone transfers, etc.  Once you
realize that, things get much easier.  If you find an alternative
"lacks" a "feature" of BIND, it's probably best you don't use that
feature.  Really.

Read Dan Bernstein's writeups on DNS, in addition to the BIND fanboy
stuff.  Having managed a lot of DNS for a lot of domains for a few
employers, I'm quite satisfied that Bernstein's much more right than
wrong on DNS.

There are two roles for DNS servers -- finding answers about a random
domain, and providing answers about SPECIFIC domains.  The first is
sometimes called "Resolvers", the second is sometimes called an
authoritative server.  BIND mushed those two roles together stupidly,
and people have been stuck thinking like that for decades now.  Separate
them in your head.

unbound is the resolver, nsd is the authoritative server.

Want to find answers for your user's DNS queries?  That's unbound, the
resolver.  That's the only thing users talk to.  Resolution is pretty
complicated, not the kind of code you want to trust too blindly.

Want to answer authoritatively about a domain?  That's the authoritative
server...but you should never ask an authoritative server about anything
other than what they are authoritative for.  Authoritative servers are
relatively simple -- you ask a question, they either have the answer
right there ready to give you, or they don't, but it all boils down to
question, a single lookup, respond.  No need to talk elsewhere for info.

Keep in mind, one computer can have LOTS of separate IP addresses to
connect server processes to (don't forget you got all of 127.0.0.0/8!).
 You also have lots of ports you can connect services to, and on an
OpenBSD box, you have PF which can direct traffic from exposed ports and
IP addresses to internal ones.  You seem to be uncomfortable with the
idea of running multiple servers...why?  Your box is quite capable of
multi-tasking!

You can also have one BIG cache on a resolving server, and a bunch of
minimal resolvers that act as message routers to either the big caching
resolver or authoritative servers.

So...assuming you really want to put internal and external DNS on the
same box (not a really good idea), you can put NSD with your internal
info on 127.0.0.2, NSD with external info on 127.0.0.1, and unbound on
your internal facing NIC, configured to refer your internally hosted
domains to 127.0.0.2.  External queries for your authoritative server
get redirected to 127.0.0.1...and the outside world never touches your
resolver.

Why would you want the outside world touching your internal DNS servers
anyway?  Talk about an unneeded hole in the firewall.  If you are doing
enough with DNS that you need to host your own external authoritative
server, you can justify a couple old computers for that.  Otherwise, I'd
suggest letting your registrar handle your dns for you.

Design your network properly, it gets really easy -- all my internal
systems are in the zone "in.nickh.org", my local DNS resolver knows to
pass *.in.nickh.org to my local authoritative server, the rest is
resolved as "normal".

Nick.



Re: Misc questionning about DNS

2015-01-13 Thread Jonathon Sisson
On Tue, Jan 13, 2015 at 04:33:56PM -0800, Jason Adams wrote:
> Split DNS is a very good reason for using bind, and its not that hard to set 
> up.
> I could private email you an example.
> 
> If unbound doesn't do this, it is missing one of the main reasons people and 
> institutions
> run their own dns servers (whether or not they are behind nat). 
> 

I think there's a serious amount of confusion going on about the goal of
unbound.  It's *not* an authoritative name server.  It doesn't try to be
(aside from very, very simple configurations).  It's a recursive caching
resolver.

Saying unbound is broken because it doesn't have split DNS is like saying
lighttpd is garbage because it doesn't handle imap like nginx.



Problems setting screen brightness on Elitebook 8470w

2015-01-13 Thread Brendan Desmond

Hello all,

This is my very first OpenBSD install on "bare metal", on an HP
EliteBook 8470w, OpenBSD 5.6 to be exact. Everything is going quite 
nicely except for the machine's backlight which I can't seem to 
adjust.


Here are the specifics:

1) The brightness keys (Fn-F9 and Fn-F8) do not work.

2) Using xbacklight (example: $ xbacklight -dec 10) returns the message
"No outputs have backlight property".

3) 'wsconsctl display.brightness=xx' does not work.

4) A suspend/resume cycle, which I've read temporarily fixes this issue
with many machines, does not work.

5) I have seen some folks suggest something like 'xrandr --output LVDS 
--brightness xx', which seems to only alter the
colors of my screen to appear brighter, but not actually adjust the 
brightness.


I've done quite a bit of searching around but can't seem to come up
with anything. I'm very new to *BSD and am a hardware newbie so please
forgive me for missing something obvious. 


Attached below is my dmesg output.
Any bits of guidance would be greatly appreciated.

-Brendan


OpenBSD 5.6 (GENERIC.MP) #333: Fri Aug  8 00:20:21 MDT 2014
   dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
   real mem = 4208975872 (4013MB)
   avail mem = 4088147968 (3898MB)
   mpath0 at root
   scsibus0 at mpath0: 256 targets
   mainbus0 at root
   bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xbecfe000 (32 entries)
   bios0: vendor Hewlett-Packard version "68ICF Ver. F.46" date
   01/17/2014
   bios0: Hewlett-Packard HP EliteBook 8470w
   acpi0 at bios0: rev 2
   acpi0: sleep states S0 S3 S4 S5
   acpi0: tables DSDT FACP HPET APIC MCFG TCPA SSDT SSDT SLIC MSDM FPDT
   BGRT SSDT SSDT ASF!
   acpi0: wakeup devices LANC(S0) EHC1(S3) EHC2(S3) XHC_(S3) PCIB(S5)
   RP02(S4) ECF0(S4) RP03(S4) RP04(S5) WNIC(S5) RP06(S0) NIC_(S0)
   RP07(S4) RP08(S4) HST1(S5)
   acpitimer0 at acpi0: 3579545 Hz, 24 bits
   acpihpet0 at acpi0: 14318179 Hz
   acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
   cpu0 at mainbus0: apid 0 (boot processor)
   cpu0: Intel(R) Core(TM) i5-3360M CPU @ 2.80GHz, 2794.05 MHz
   cpu0:
   
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
   cpu0: 256KB 64b/line 8-way L2 cache
   cpu0: smt 0, core 0, package 0
   mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
   cpu0: apic clock running at 99MHz
   cpu0: mwait min=64, max=64, C-substates=0.2.1.1.2, IBE
   cpu1 at mainbus0: apid 1 (application processor)
   cpu1: Intel(R) Core(TM) i5-3360M CPU @ 2.80GHz, 2793.65 MHz
   cpu1:
   
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
   cpu1: 256KB 64b/line 8-way L2 cache
   cpu1: smt 1, core 0, package 0
   cpu2 at mainbus0: apid 2 (application processor)
   cpu2: Intel(R) Core(TM) i5-3360M CPU @ 2.80GHz, 2793.65 MHz
   cpu2:
   
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
   cpu2: 256KB 64b/line 8-way L2 cache
   cpu2: smt 0, core 1, package 0
   cpu3 at mainbus0: apid 3 (application processor)
   cpu3: Intel(R) Core(TM) i5-3360M CPU @ 2.80GHz, 2793.65 MHz
   cpu3:
   
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
   cpu3: 256KB 64b/line 8-way L2 cache
   cpu3: smt 1, core 1, package 0
   ioapic0 at mainbus0: apid 0 pa 0xfec0, version 20, 24 pins
   acpimcfg0 at acpi0 addr 0xe000, bus 0-255
   acpiprt0 at acpi0: bus 1 (PEGP)
   acpiprt1 at acpi0: bus -1 (PCIB)
   acpiprt2 at acpi0: bus 2 (RP01)
   acpiprt3 at acpi0: bus 3 (RP02)
   acpiprt4 at acpi0: bus 36 (RP03)
   acpiprt5 at acpi0: bus 37 (RP04)
   acpiprt6 at acpi0: bus 0 (PCI0)
   acpiec0 at acpi0
   acpicpu0 at acpi0: C2, C1, PSS
   acpicpu1 at acpi0: C2, C1, PSS
   acpicpu2 at acpi0: C2, C1, PSS
   acpicpu3 at acpi0: C2, C1, PSS
   acpipwrres0 at acpi0: APPR, resource for HDEF
   acpipwrres1 at acpi0: COMP, resource for COM1
   acpipwrres2 at acpi0: LPP_, resource for LPT0
   acpitz0 at acpi0: critical temperature is 128 degC
   acpitz1 at acpi0: critical temperature is 128 degC
   acpitz2 at acpi0: critical temperature is 128 degC
   acpitz3 at acpi0: critical temperature is 1

Re: Misc questionning about DNS

2015-01-13 Thread Jason Adams
On 01/13/2015 01:26 PM, sven falempin wrote:
> Dear OpenBSD users,
>
> Recently unbound made his way in base, pushing the complex bind/named
> out for our own good.
>
> I would like to internally and externally solve some domain names
> differently (so some service are accessible from inside and outside
> without some fancy NAT or worse), I found out 'some' call this setup a
> 'split-dns', often use for internal mail server.
>
> I also found out BIND got a feature for this and internet gossip
>
> <<
> Unbound doesn't support split-horizon DNS. It's primarily meant as a
> recursive and caching nameserver, and has only limited support for
> serving authoritative answers.
> Of course i imagine ran two unbound with two different IP address binding 
>
> I feel like I am missing something.
>
> If I want to manage my domain , shall I use bind on the 'main' server ?
>
> Best regards.
>
>

Split DNS is a very good reason for using bind, and its not that hard to set up.
I could private email you an example.

If unbound doesn't do this, it is missing one of the main reasons people and 
institutions
run their own dns servers (whether or not they are behind nat). 





-- 
Those who do not understand Unix are condemned to reinvent it, poorly.



Re: vim+YouCompleteMe: basic .ycm_extra_conf.py for /usr/src and bsd.*.mk Makefiles

2015-01-13 Thread Fabian Raetz
On Tue, Jan 13, 2015 at 10:33:56PM +0100, Fabian Raetz wrote:
> Hi,
> 
> i've been using vim + YouCompleteMe [0] for some time know and it works
> pretty well with OpenBSD's src tree.  I want to share my
> .ycm_extra_conf.py ([1] and below) with you.  Maybe someone will
> find it usefull.
> 
> This configuration will gather compiler flags (CFLAGS  / CPPFLAGS)
> from the appropriate Makefiles and should work for userland as well as
> the kernel.
> 
> Just put .ycm_extra_conf.py under your SRCDIR (/usr/src) and follow the
> HOWTO instructions which you can find in the .ycm_extra_conf.py file.
> 
> This .ycm_extra_conf.py will probably work for other projects as long as
> all relevant flags are in CFLAGS / CPPFLAGS.
> 
> 
> 
> If someone knows a better solution to read variables from Makefiles,
> let me know!  :)
> 
> Cheers,
> Fabian
> 
> 
> [0] - https://github.com/Valloric/YouCompleteMe
> [1] - https://gist.github.com/Mischi/b8d57f8732b27239469a
> 
> .ycm_extra_conf.py
> --
> 
> # Based on
> # https://github.com/Valloric/ycmd/blob/master/cpp/ycm/.ycm_extra_conf.py
> 
> #
> # HOWTO
> #
> #
> # === Step 1 
> #
> # For kernel .c files, CFLAGS / CPPFLAGS from
> # the actual kernel configuration are used.
> # These are gathered via uname(1).
> #
> # If you want a specific arch/config, override
> # them with 'default_arch' / 'default_config'
> #
> # NOTE: The choosen kernel configuration must
> #   exist.
> #
> # === Step 2 
> #
> # The following target mimics 'make show'
> # from bsd.port.mk(5) and is used to retrieve
> # CFLAGS / CPPFLAGS variables from Makefiles.
> #
> # Copy & Paste the folloing make target
> # into your /etc/mk.conf:
> #
> # myshow:
> # .for v in ${myshowvar}
> # @echo ${$v}
> # .endfor
> #
> #
> # .PHONY: myshow

Hmmpf, this breaks normal kernel/port builds.
i'm not sure why .. needs some more work -_-


> #
> 
> import os
> import ycm_core
> 
> default_arch = None
> default_config = None
> 
> # You can add additional CFLAGS / CPPFLAGS here.
> additional_userland_flags = [
> #  "-Weverything"
> ]
> 
> additional_kernel_flags = [
> #  "-Weverything"
> ]
> 
> srcdir = os.path.dirname( os.path.abspath( __file__ ) )
> sysdir = os.path.join(srcdir, "sys")
> 
> def MakeRelativePathsInFlagsAbsolute( flags, working_directory ):
>   if not working_directory:
> return list( flags )
>   new_flags = []
>   make_next_absolute = False
>   path_flags = [ '-isystem', '-I', '-iquote', '--sysroot=' ]
>   for flag in flags:
> new_flag = flag
> 
> if make_next_absolute:
>   make_next_absolute = False
>   if not flag.startswith( '/' ):
> new_flag = os.path.join( working_directory, flag )
> 
> for path_flag in path_flags:
>   if flag == path_flag:
> make_next_absolute = True
> break
> 
>   if flag.startswith( path_flag ):
> path = flag[ len( path_flag ): ]
> new_flag = path_flag + os.path.join( working_directory, path )
> break
> 
> if new_flag:
>   new_flags.append( new_flag )
>   return new_flags
> 
> 
> def GetKernelFlags( darch, dconfig ):
>   if darch != None:
> arch = darch
>   else:
> arch = os.popen("uname -m").read().rstrip()
> 
>   if dconfig != None:
> config = dconfig
>   else:
> config = os.popen("uname -v").read().split('#')[0]
> 
>   makefiledir = "arch/%s/compile/%s" % ( arch, config )
>   makefiledir = os.path.join(sysdir, makefiledir)
>   return GetFlags( makefiledir )
> 
> 
> def GetUserlandFlags( filename ):
>   makefiledir = os.path.dirname( filename )
>   while not "Makefile" in os.listdir( makefiledir ):
> makefiledir = os.path.join(makefiledir, "..")
> 
>   return GetFlags( makefiledir )
> 
> 
> def GetFlags( makefiledir ):
>   cd_cmd = "cd %s" % makefiledir
>   make_cmd = "make myshowvar=\"CFLAGS CPPFLAGS\" myshow"
>   make_flags = os.popen("%s && %s" % (cd_cmd, make_cmd)).read().split()
>   return MakeRelativePathsInFlagsAbsolute( make_flags, makefiledir )
> 
> 
> 
> 
> def FlagsForFile( filename ):
>   if filename.startswith( sysdir ):
> final_flags = GetKernelFlags( default_arch , default_config )
> final_flags.extend( additional_kernel_flags )
> 
>   elif filename.startswith( srcdir ):
> final_flags = GetUserlandFlags( filename )
> final_flags.extend( additional_userland_flags )
> 
>   return {
> 'flags': final_flags,
> 'do_cache': True
>   }



Re: missing packages for SPARC

2015-01-13 Thread Jeremy Evans
On Tue, Jan 13, 2015 at 12:58 PM, Riccardo Mottola <
riccardo.mott...@libero.it> wrote:

> do we really need bash to build ruby? and... why ruby for subversion?  not
> counting shells one ends up having perl, python, tcl and ruby! what a mess.


You do need bash to build ruby 2.0, but not any earlier or later version.
There were bugs in ruby 2.0's configure script, and they were unable to
backport the necessary fixes to it.

ruby is needed to build subversion for the ruby-subversion subpackage, but
you can build with the no_ruby PSUEDO_FLAVOR to not require ruby or build
that subpackage.

Thanks,
Jeremy



About HD Graphics

2015-01-13 Thread Leonardo Santagostini
Hello @misc,

Sorry for bother you, is there any report that my graphics card can work
again on -current ?

OpenBSD 5.6 (RAMDISK_CD) #303: Fri Aug  8 00:25:26 MDT 2014
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/RAMDISK_CD
RTC BIOS diagnostic error 80
real mem = 4138713088 (3946MB)
avail mem = 4023148544 (3836MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xe6fd0 (59 entries)
bios0: vendor LENOVO version "5ECN95WW(V9.00)" date 12/19/2012
bios0: LENOVO 20150
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SLIC UEFI ASF! HPET APIC MCFG SSDT BOOT ASPT DBGP
FPDT MSDM SSDT SSDT
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Pentium(R) CPU B980 @ 2.40GHz, 2203.97 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE,NXE,LONG,LAHF,PERF,ITSC
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: apic clock running at 99MHz
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 0 pa 0xfec0, version 20, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (P0P1)
acpiprt2 at acpi0: bus 1 (RP01)
acpiprt3 at acpi0: bus 2 (RP02)
acpiprt4 at acpi0: bus -1 (RP03)
acpiprt5 at acpi0: bus -1 (RP04)
acpiprt6 at acpi0: bus -1 (RP05)
acpiprt7 at acpi0: bus -1 (RP06)
acpiprt8 at acpi0: bus -1 (RP07)
acpiprt9 at acpi0: bus -1 (RP08)
acpiprt10 at acpi0: bus -1 (PEG0)
acpiprt11 at acpi0: bus -1 (PEG1)
acpiprt12 at acpi0: bus -1 (PEG2)
acpiprt13 at acpi0: bus -1 (PEG3)
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Core 2G Host" rev 0x09
vga1 at pci0 dev 2 function 0 "Intel HD Graphics 2000" rev 0x09
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
"Intel 7 Series xHCI" rev 0x04 at pci0 dev 20 function 0 not configured
"Intel 7 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured
ehci0 at pci0 dev 26 function 0 "Intel 7 Series USB" rev 0x04: apic 0 int 16
ehci0: timed out waiting for BIOS
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
"Intel 7 Series HD Audio" rev 0x04 at pci0 dev 27 function 0 not configured
ppb0 at pci0 dev 28 function 0 "Intel 7 Series PCIE" rev 0xc4: msi
pci1 at ppb0 bus 1
"Attansic Technology AR8162" rev 0x10 at pci1 dev 0 function 0 not
configured
ppb1 at pci0 dev 28 function 1 "Intel 7 Series PCIE" rev 0xc4: msi
pci2 at ppb1 bus 2
"Atheros AR9485" rev 0x01 at pci2 dev 0 function 0 not configured
ehci1 at pci0 dev 29 function 0 "Intel 7 Series USB" rev 0x04: apic 0 int 23
ehci1: timed out waiting for BIOS
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 "Intel EHCI root hub" rev 2.00/1.00 addr 1
"Intel HM76 LPC" rev 0x04 at pci0 dev 31 function 0 not configured
ahci0 at pci0 dev 31 function 2 "Intel 7 Series AHCI" rev 0x04: msi, AHCI
1.3
scsibus0 at ahci0: 32 targets
sd0 at scsibus0 targ 0 lun 0:  SCSI3 0/direct
fixed naa.50004cf20a2e7a39
sd0: 953869MB, 512 bytes/sector, 1953525168 sectors
cd0 at scsibus0 targ 2 lun 0:  ATAPI 5/cdrom
removable
"Intel 7 Series SMBus" rev 0x04 at pci0 dev 31 function 3 not configured
isa0 at mainbus0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
uhub2 at uhub0 port 1 "vendor 0x8087 product 0x0024" rev 2.00/0.00 addr 2
umass0 at uhub2 port 2 configuration 1 interface 0 "Kingston DataTraveler
2.0" rev 2.00/1.00 addr 3
umass0: using SCSI over Bulk-Only
scsibus1 at umass0: 2 targets, initiator 0
sd1 at scsibus1 targ 1 lun 0:  SCSI2
0/direct removable serial.09306544CE51C98D948F
sd1: 7396MB, 512 bytes/sector, 15148608 sectors
"Atheros Communications Bluetooth USB Host Controller" rev 1.10/0.01 addr 4
at uhub2 port 3 not configured
"Generic USB2.0-CRW" rev 2.00/39.60 addr 5 at uhub2 port 4 not configured
uhub3 at uhub1 port 1 "vendor 0x8087 product 0x0024" rev 2.00/0.00 addr 2
uhidev0 at uhub3 port 3 configuration 1 interface 0 "vendor 0x0461 USB
Optical Mouse" rev 2.00/2.00 addr 3
uhidev0: iclass 3/1
uhid at uhidev0 not configured
run0 at uhub3 port 4 "Linksys Linksys WUSB600N Wireless-N USB Network
Adapter with Dual-Band ver. 2" rev 2.00/1.01 addr 4
run0: MAC/BBP RT3572 (rev 0x0223), RF RT3052 (MIMO 2T2R), address
98:fc:11:e0:59:0a
"Vimicro Corp. Lenovo EasyCamera" rev 2.00/39.55 addr 5 at uhub3 port 6 not
configured
softraid0 at root
scsibus2 at softraid0: 256 targets
root on rd0a swap on rd0b dump on rd0b
syncing disks... done
rebooting...
OpenBSD 5.6 (GENERIC.MP) #333: Fri Aug  8 00:20:21 MDT 2014
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
RTC BIOS diagnostic error 80
real mem = 4138713088 (3946MB)
avail mem = 4019757056 (3833MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xe6fd0 (59 entries)
bios0: vendor LENOVO version "5ECN

vim+YouCompleteMe: basic .ycm_extra_conf.py for /usr/src and bsd.*.mk Makefiles

2015-01-13 Thread Fabian Raetz
Hi,

i've been using vim + YouCompleteMe [0] for some time know and it works
pretty well with OpenBSD's src tree.  I want to share my
.ycm_extra_conf.py ([1] and below) with you.  Maybe someone will
find it usefull.

This configuration will gather compiler flags (CFLAGS  / CPPFLAGS)
from the appropriate Makefiles and should work for userland as well as
the kernel.

Just put .ycm_extra_conf.py under your SRCDIR (/usr/src) and follow the
HOWTO instructions which you can find in the .ycm_extra_conf.py file.

This .ycm_extra_conf.py will probably work for other projects as long as
all relevant flags are in CFLAGS / CPPFLAGS.



If someone knows a better solution to read variables from Makefiles,
let me know!  :)

Cheers,
Fabian


[0] - https://github.com/Valloric/YouCompleteMe
[1] - https://gist.github.com/Mischi/b8d57f8732b27239469a

.ycm_extra_conf.py
--

# Based on
# https://github.com/Valloric/ycmd/blob/master/cpp/ycm/.ycm_extra_conf.py

#
# HOWTO
#
#
# === Step 1 
#
# For kernel .c files, CFLAGS / CPPFLAGS from
# the actual kernel configuration are used.
# These are gathered via uname(1).
#
# If you want a specific arch/config, override
# them with 'default_arch' / 'default_config'
#
# NOTE: The choosen kernel configuration must
#   exist.
#
# === Step 2 
#
# The following target mimics 'make show'
# from bsd.port.mk(5) and is used to retrieve
# CFLAGS / CPPFLAGS variables from Makefiles.
#
# Copy & Paste the folloing make target
# into your /etc/mk.conf:
#
# myshow:
# .for v in ${myshowvar}
#   @echo ${$v}
# .endfor
#
#
# .PHONY: myshow
#

import os
import ycm_core

default_arch = None
default_config = None

# You can add additional CFLAGS / CPPFLAGS here.
additional_userland_flags = [
#  "-Weverything"
]

additional_kernel_flags = [
#  "-Weverything"
]

srcdir = os.path.dirname( os.path.abspath( __file__ ) )
sysdir = os.path.join(srcdir, "sys")

def MakeRelativePathsInFlagsAbsolute( flags, working_directory ):
  if not working_directory:
return list( flags )
  new_flags = []
  make_next_absolute = False
  path_flags = [ '-isystem', '-I', '-iquote', '--sysroot=' ]
  for flag in flags:
new_flag = flag

if make_next_absolute:
  make_next_absolute = False
  if not flag.startswith( '/' ):
new_flag = os.path.join( working_directory, flag )

for path_flag in path_flags:
  if flag == path_flag:
make_next_absolute = True
break

  if flag.startswith( path_flag ):
path = flag[ len( path_flag ): ]
new_flag = path_flag + os.path.join( working_directory, path )
break

if new_flag:
  new_flags.append( new_flag )
  return new_flags


def GetKernelFlags( darch, dconfig ):
  if darch != None:
arch = darch
  else:
arch = os.popen("uname -m").read().rstrip()

  if dconfig != None:
config = dconfig
  else:
config = os.popen("uname -v").read().split('#')[0]

  makefiledir = "arch/%s/compile/%s" % ( arch, config )
  makefiledir = os.path.join(sysdir, makefiledir)
  return GetFlags( makefiledir )


def GetUserlandFlags( filename ):
  makefiledir = os.path.dirname( filename )
  while not "Makefile" in os.listdir( makefiledir ):
makefiledir = os.path.join(makefiledir, "..")

  return GetFlags( makefiledir )


def GetFlags( makefiledir ):
  cd_cmd = "cd %s" % makefiledir
  make_cmd = "make myshowvar=\"CFLAGS CPPFLAGS\" myshow"
  make_flags = os.popen("%s && %s" % (cd_cmd, make_cmd)).read().split()
  return MakeRelativePathsInFlagsAbsolute( make_flags, makefiledir )




def FlagsForFile( filename ):
  if filename.startswith( sysdir ):
final_flags = GetKernelFlags( default_arch , default_config )
final_flags.extend( additional_kernel_flags )

  elif filename.startswith( srcdir ):
final_flags = GetUserlandFlags( filename )
final_flags.extend( additional_userland_flags )

  return {
'flags': final_flags,
'do_cache': True
  }



Re: missing packages for SPARC

2015-01-13 Thread Riccardo Mottola

Hi Hugo,


Hugo Villeneuve wrote:

Yeah, I got blocked with "bash" dependent ports (ruby-2.0 for subversion).


what is happening for you?

I have temporarily given up building on my SS20: all modules I have are 
indeed unstable, both the 50Mhz and 40Mhz SuperSparcs just segfault at 
will, as Miod has too.


I fixed and upgraded my SS5, MicroSparc II 110Mhz, which was running 
OpenBSD reliably for years untill the gcc 2.95 switch, when I gave it up 
for the moment.


I have a fresh install of 5.6 on it and started building several base 
packages, which worked fine. It seems stable even if it compiles for days.


When I try compiling subversion (make package bulk=Yes) I get this:
`/usr/ports/distfiles/swig-2.0.11.tar.gz' is up to date.

(SHA256) swig-2.0.11.tar.gz: OK

===> swig-2.0.11p0 depends on: ruby->=2.0,<2.1 - not found
===>  Verifying install for ruby->=2.0,<2.1 in lang/ruby/2.0
===>  Configuring for ruby-2.0.0-p481
Using /usr/ports/pobj/ruby-2.0.0-p481-no_ri_docs/config.site (generated)
Bus error (core dumped)
*** Error 138 in /usr/ports/lang/ruby/2.0 
(/usr/ports/infrastructure/mk/bsd.port.mk:2704 
'/usr/ports/pobj/ruby-2.0.0-p481-no_ri_docs/.configure_done')


checking for core files, I see this:
$ find . -name \*.core
./pobj/ruby-2.0.0-p481-no_ri_docs/ruby-2.0.0-p481/bash.core
./tests/portcheck/t5/some.core

Is this what you get too?

do we really need bash to build ruby? and... why ruby for subversion? 
not counting shells one ends up having perl, python, tcl and ruby! what 
a mess.


Riccardo



Misc questionning about DNS

2015-01-13 Thread sven falempin
Dear OpenBSD users,

Recently unbound made his way in base, pushing the complex bind/named
out for our own good.

I would like to internally and externally solve some domain names
differently (so some service are accessible from inside and outside
without some fancy NAT or worse), I found out 'some' call this setup a
'split-dns', often use for internal mail server.

I also found out BIND got a feature for this and internet gossip

<<
Unbound doesn't support split-horizon DNS. It's primarily meant as a
recursive and caching nameserver, and has only limited support for
serving authoritative answers.
>>

Of course i imagine ran two unbound with two different IP address binding 

I feel like I am missing something.

If I want to manage my domain , shall I use bind on the 'main' server ?

Best regards.


-- 
-
() ascii ribbon campaign - against html e-mail
/\



Re: missing packages for SPARC

2015-01-13 Thread Riccardo Mottola

Hi Hugo,


Hugo Villeneuve wrote:

Yeah, I got blocked with "bash" dependent ports (ruby-2.0 for subversion).

what is happening for you?

I have temporarily given up building on my SS20: all modules I have are 
indeed unstable, both the 50Mhz and 40Mhz SuperSparcs just segfault at 
will, as Miod has too.


I fixed and upgraded my SS5, MicroSparc II 110Mhz, which was running 
OpenBSD reliably for years untill the gcc 2.95 switch, when I gave it up 
for the moment.


I have a fresh install of 5.6 on it and started building several base 
packages, which worked fine. It seems stable even if it compiles for days.


When I try compiling subversion (make package bulk=Yes) I get this:
`/usr/ports/distfiles/swig-2.0.11.tar.gz' is up to date.
>> (SHA256) swig-2.0.11.tar.gz: OK
===> swig-2.0.11p0 depends on: ruby->=2.0,<2.1 - not found
===>  Verifying install for ruby->=2.0,<2.1 in lang/ruby/2.0
===>  Configuring for ruby-2.0.0-p481
Using /usr/ports/pobj/ruby-2.0.0-p481-no_ri_docs/config.site (generated)
Bus error (core dumped)
*** Error 138 in /usr/ports/lang/ruby/2.0 
(/usr/ports/infrastructure/mk/bsd.port.mk:2704 
'/usr/ports/pobj/ruby-2.0.0-p481-no_ri_docs/.configure_done')


checking for core files, I see this:
$ find . -name \*.core
./pobj/ruby-2.0.0-p481-no_ri_docs/ruby-2.0.0-p481/bash.core
./tests/portcheck/t5/some.core

Is this what you get too?

do we really need bash to build ruby? and... why ruby for subversion?  
not counting shells one ends up having perl, python, tcl and ruby! what 
a mess.


Riccardo



Re: ntpd.drift values?

2015-01-13 Thread Jan Vlach
KVM VM1 (wedos.cz):
$ cat /var/db/ntpd.drift
-7.373786e-07

KVM VM2 (wedos.cz): 
$ cat /var/db/ntpd.drift
6.413769e-08

Jan

On Tue, Jan 13, 2015 at 08:07:44PM +0100, Maurice Janssen wrote:
> On 01/13/15 19:54, Christian Weisgerber wrote:
> >On 2015-01-13, Stuart Henderson  wrote:
> >>2x e-08 (esxi)
> >
> >Oooh, interesting.  I hadn't considered VMs that actually keep time.
> 
> 4.560218e-09 (VM at Transip.nl, don't know what kind of host OS they use)
> 
> Maurice



Re: ntpd.drift values?

2015-01-13 Thread Jorge Gabriel Lopez Paramount

Quoting Christian Weisgerber :


2x e-08 (esxi)


Oooh, interesting.  I hadn't considered VMs that actually keep time.


Indeed:

# cat /var/db/ntpd.drift
3.970778e-09

OpenBSD 5.5/i386 with qemu on Linux host, worked fine so far.   =)

--
Best regards,
Jorge Lopez.




This message was sent using IMP, the Internet Messaging Program.



Re: ntpd.drift values?

2015-01-13 Thread Maurice Janssen

On 01/13/15 19:54, Christian Weisgerber wrote:

On 2015-01-13, Stuart Henderson  wrote:

2x e-08 (esxi)


Oooh, interesting.  I hadn't considered VMs that actually keep time.


4.560218e-09 (VM at Transip.nl, don't know what kind of host OS they use)

Maurice



Re: ntpd.drift values?

2015-01-13 Thread Theo de Raadt
> > 2x e-08 (esxi)
> 
> Oooh, interesting.  I hadn't considered VMs that actually keep time.
> 
> Anyway, I was asking because we want, for compatibility reasons,
> to switch OpenNTPD's drift file format from an unscaled frequency
> offset to ppm, and it would be nice if we could just tell from the
> magnitude of the number what unit it's in.  See the patch on tech@.

I know it will sound a bit crazy, but we could delete crazy drift
files during upgrade...

Prod them to learn fresh.



Re: ntpd.drift values?

2015-01-13 Thread Christian Weisgerber
On 2015-01-13, Stuart Henderson  wrote:

> 1x e-03 (macppc mac mini)

Thanks to all who replied.  Macs and Suns seem to be particularly
bad.  I counted zeroes again and just realized that the combo of
ntp.org and ntp_adjtime() can only correct offsets up to 5e-4
(500 ppm).  I wonder if our timekeeping on these archs is broken.

> 2x e-08 (esxi)

Oooh, interesting.  I hadn't considered VMs that actually keep time.

Anyway, I was asking because we want, for compatibility reasons,
to switch OpenNTPD's drift file format from an unscaled frequency
offset to ppm, and it would be nice if we could just tell from the
magnitude of the number what unit it's in.  See the patch on tech@.

-- 
Christian "naddy" Weisgerber  na...@mips.inka.de



Re: ARM Firewall Hardware

2015-01-13 Thread Christer Solskogen
On Tue, Jan 13, 2015 at 5:45 PM, Jonathan Gray  wrote:
>
> Your earlier mail had a different load address than what I'd expect.
> Try 0x1880

Same. I've tried the following staring adresses: 0x1060 -
0x1880 - 0x1080
The last one is what I use to boot bitrig.

CM-FX6 # tftp 0x1080 bsd.umg
Using FEC device
TFTP from server 192.168.0.4; our IP address is 192.168.0.9
Filename 'bsd.umg'.
Load address: 0x1080
Loading: #
 #
 #
 ###
 1.3 MiB/s
done
Bytes transferred = 3772872 (3991c8 hex)
CM-FX6 # bootm
## Booting kernel from Legacy Image at 1080 ...
   Image Name:   boot
   Created:  2015-01-13   1:37:16 UTC
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:3772808 Bytes = 3.6 MiB
   Load Address: 1080
   Entry Point:  1080
   Verifying Checksum ... OK
   Loading Kernel Image ... OK

Starting kernel ...


OpenBSD/imx booting ...
arg0 0x0 arg1 0x10b1 arg2 0x1100
atag core flags 0 pagesize 0 rootdev 0
atag serial 0x:
atag cmdline [sd0a]
atag revision 0064
atag mem start 0x1000 size 0x4000
atag mem start 0x8000 size 0x4000
bootfile: sd0a
bootargs:
Allocating page tables
freestart = 0x10b9a000, free_pages = 259174 (0x0003f466)
IRQ stack: p0x10bc8000 v0xc0bc8000
ABT stack: p0x10bc9000 v0xc0bc9000
UND stack: p0x10bca000 v0xc0bca000
SVC stack: p0x10bcb000 v0xc0bcb000
Creating L1 page table at 0x10b9c000
Mapping kernel
Constructing L2 page tables
undefined page pmap [ using 301948 bytes of bsd ELF symbol table ]
board type: Utilite
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2015 OpenBSD. All rights reserved.  http://www.OpenBSD.org



Re: ARM Firewall Hardware

2015-01-13 Thread Jonathan Gray
On Tue, Jan 13, 2015 at 04:56:22PM +0100, Christer Solskogen wrote:
> On Tue, Jan 13, 2015 at 2:42 AM, Jonathan Gray  wrote:
> > Thanks, I've added the missing case for Utilite.
> > A kernel that includes this change can be found here:
> > http://jsg.id.au/openbsd/bsd.IMX.umg
> >
> 
> Now I got a bit further:
> 
> Starting kernel ...
> 
> 
> OpenBSD/imx booting ...
> arg0 0x0 arg1 0x10b1 arg2 0x1100
> atag core flags 0 pagesize 0 rootdev 0
> atag serial 0x:
> atag cmdline [sd0a]
> atag revision 0064
> atag mem start 0x1000 size 0x4000
> atag mem start 0x8000 size 0x4000
> bootfile: sd0a
> bootargs:
> Allocating page tables
> freestart = 0x10b9a000, free_pages = 259174 (0x0003f466)
> IRQ stack: p0x10bc8000 v0xc0bc8000
> ABT stack: p0x10bc9000 v0xc0bc9000
> UND stack: p0x10bca000 v0xc0bca000
> SVC stack: p0x10bcb000 v0xc0bcb000
> Creating L1 page table at 0x10b9c000
> Mapping kernel
> Constructing L2 page tables
> undefined page pmap [ using 301948 bytes of bsd ELF symbol table ]
> board type: Utilite
> Copyright (c) 1982, 1986, 1989, 1991, 1993
> The Regents of the University of California.  All rights reserved.
> Copyright (c) 1995-2015 OpenBSD. All rights reserved.  http://www.OpenBSD.org
> 
> 
> (and then it hangs again)
> 

Your earlier mail had a different load address than what I'd expect.
Try 0x1880



Re: ARM Firewall Hardware

2015-01-13 Thread Christer Solskogen
On Tue, Jan 13, 2015 at 2:42 AM, Jonathan Gray  wrote:
> Thanks, I've added the missing case for Utilite.
> A kernel that includes this change can be found here:
> http://jsg.id.au/openbsd/bsd.IMX.umg
>

Now I got a bit further:

Starting kernel ...


OpenBSD/imx booting ...
arg0 0x0 arg1 0x10b1 arg2 0x1100
atag core flags 0 pagesize 0 rootdev 0
atag serial 0x:
atag cmdline [sd0a]
atag revision 0064
atag mem start 0x1000 size 0x4000
atag mem start 0x8000 size 0x4000
bootfile: sd0a
bootargs:
Allocating page tables
freestart = 0x10b9a000, free_pages = 259174 (0x0003f466)
IRQ stack: p0x10bc8000 v0xc0bc8000
ABT stack: p0x10bc9000 v0xc0bc9000
UND stack: p0x10bca000 v0xc0bca000
SVC stack: p0x10bcb000 v0xc0bcb000
Creating L1 page table at 0x10b9c000
Mapping kernel
Constructing L2 page tables
undefined page pmap [ using 301948 bytes of bsd ELF symbol table ]
board type: Utilite
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2015 OpenBSD. All rights reserved.  http://www.OpenBSD.org


(and then it hangs again)



Re: OpenBSD on Intel Galileo

2015-01-13 Thread Patrick Wildt
I had the machine I worked on for this was some OpenBSD VM I purged some time 
ago.

I was grepping through IRC logs and actually found a diff:

#somewhere_20140227.log:[00:23:44]  This is my galileo workaround: 
http://gbpaste.org/CfG4P

I’m glad I keep logs… Good luck!

> Am 13.01.2015 um 14:50 schrieb Amit Kulkarni :
> 
> Dude...the reason is given right there, in the message.
> 
> why not publish the hack , for education purpose ?
>> 
>>> 
>>> I fear I do not have the diffs and blobs anymore.



Re: ntpd.drift values?

2015-01-13 Thread trondd
The only system I have outside that range is my Zaurus SL-C3000 which is e-07.

Tim.

On 1/12/15, Christian Weisgerber  wrote:
> I'm interested in what values people have in their /var/db/ntpd.drift
> files.
>
> To prevent a deluge: Looking over my own machines, I see that most
> values are Xe-05, with a few Xe-04 and Xe-06.  So that's the common
> range, I don't care about that.  But if you have machines with a
> frequency accuracy outside that range, I'd like to hear about it.
>
> E.g., my Sun Blade 100 has 1.180462e-03.
>
> --
> Christian "naddy" Weisgerber  na...@mips.inka.de



Re: suspend/resume regression

2015-01-13 Thread Jan Stary
On Jan 13 12:03:31, min...@obiit.org wrote:
> is anybody else seeing regression in suspend/resume?
> i am noticing that my 100% resume ratio is starting
> to decline.  at resume time, the thinkpad half moon
> icon starts blinking and nothing else happens.
> not all resumes fail, but i cannot see a pattern.
> i suspend every night and resume every morning.
> any ideas what i could try?  this was not an issue
> in the past (started in november/december IIRC).

That's exactly what _was_ happening with my Thinkpad T400,
but happens no more. It suspends and resumes many times a day
(running between rooms) for short periods,
and almost every night/morning for many hours,
without a fail for months.

Jan


OpenBSD 5.7-beta (GENERIC.MP) #1: Sun Jan 11 16:17:28 CET 2015
r...@lenovo.stare.cz:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 2021330944 (1927MB)
avail mem = 1963704320 (1872MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xe0010 (80 entries)
bios0: vendor LENOVO version "7UET94WW (3.24 )" date 10/17/2012
bios0: LENOVO 64741EG
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SSDT ECDT APIC MCFG HPET SLIC BOOT ASF! SSDT TCPA SSDT 
SSDT SSDT
acpi0: wakeup devices LID_(S3) SLPB(S3) UART(S3) IGBE(S4) EXP0(S4) EXP1(S4) 
EXP2(S4) EXP3(S4) EXP4(S4) PCI1(S4) USB0(S3) USB3(S3) USB5(S3) EHC0(S3) 
EHC1(S3) HDEF(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpiec0 at acpi0
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz, 2261.30 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,NXE,LONG,LAHF,PERF
cpu0: 3MB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 7 var ranges, 88 fixed ranges
cpu0: apic clock running at 265MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz, 2261.00 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,NXE,LONG,LAHF,PERF
cpu1: 3MB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 2, remapped to apid 1
acpimcfg0 at acpi0 addr 0xe000, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (AGP_)
acpiprt2 at acpi0: bus 2 (EXP0)
acpiprt3 at acpi0: bus 3 (EXP1)
acpiprt4 at acpi0: bus -1 (EXP2)
acpiprt5 at acpi0: bus 5 (EXP3)
acpiprt6 at acpi0: bus 13 (EXP4)
acpiprt7 at acpi0: bus 21 (PCI1)
acpicpu0 at acpi0: C3, C2, C1, PSS
acpicpu1 at acpi0: C3, C2, C1, PSS
acpipwrres0 at acpi0: PUBS, resource for USB0, USB3, USB5, EHC0, EHC1
acpitz0 at acpi0: critical temperature is 127 degC
acpitz1 at acpi0: critical temperature is 100 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "93P5030" serial  1559 type LION oem "SONY"
acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
acpidock0 at acpi0: GDCK not docked (0)
cpu0: Enhanced SpeedStep 2261 MHz: speeds: 2267, 2266, 1600, 800 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel GM45 Host" rev 0x07
vga1 at pci0 dev 2 function 0 "Intel GM45 Video" rev 0x07
intagp0 at vga1
agp0 at intagp0: aperture at 0xd000, size 0x1000
inteldrm0 at vga1
drm0 at inteldrm0
inteldrm0: 1280x800
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel GM45 Video" rev 0x07 at pci0 dev 2 function 1 not configured
"Intel GM45 HECI" rev 0x07 at pci0 dev 3 function 0 not configured
pciide0 at pci0 dev 3 function 2 "Intel GM45 PT IDER" rev 0x07: DMA 
(unsupported), channel 0 wired to native-PCI, channel 1 wired to native-PCI
pciide0: using apic 1 int 18 for native-PCI interrupt
pciide0: channel 0 ignored (not responding; disabled or no drives?)
pciide0: channel 1 ignored (not responding; disabled or no drives?)
puc0 at pci0 dev 3 function 3 "Intel GM45 KT" rev 0x07: ports: 1 com
com4 at puc0 port 0 apic 1 int 17: ns16550a, 16 byte fifo
com4: probed fifo depth: 0 bytes
em0 at pci0 dev 25 function 0 "Intel ICH9 IGP M AMT" rev 0x03: msi, address 
00:1c:25:9b:0a:23
uhci0 at pci0 dev 26 function 0 "Intel 82801I USB" rev 0x03: apic 1 int 20
uhci1 at pci0 dev 26 function 1 "Intel 82801I USB" rev 0x03: apic 1 int 21
uhci2 at pci0 dev 26 function 2 "Intel 82801I USB" rev 0x03: apic 1 int 22
ehci0 at pci0 dev 26 function 7 "Intel 82801I USB" rev 0x03: apic 1 int 23
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
azalia0 at pci0 dev 27 function 0 "I

Re: OpenBSD on Intel Galileo

2015-01-13 Thread Christer Solskogen
On Tue, Jan 13, 2015 at 1:53 PM, Patrick Wildt  wrote:
> After doing a hack to make that work, I got the following output: 
> http://gbpaste.org/Pd5Vv
>


cpu0: F00F bug workaround installed


Harrharrharr

-- 
chs



Re: OpenBSD on Intel Galileo

2015-01-13 Thread Amit Kulkarni
Dude...the reason is given right there, in the message.

why not publish the hack , for education purpose ?
>
> >
> > I fear I do not have the diffs and blobs anymore.



Re: OpenBSD on Intel Galileo

2015-01-13 Thread sven falempin
On Tue, Jan 13, 2015 at 7:53 AM, Patrick Wildt  wrote:
> Hi,
>
> Yes, it’s kinda possible.  I tried that early 2014 or so. You need to have 
> some kind of EFI-Grub2 on an sdcard iirc. Then you exit the in-built grub, 
> open the EFI shell and have it boot grub2.
>
> Using kopenbsd you can try to load an OpenBSD kernel, but it doesn’t work out 
> of the box.
>
> The serial line is not in the ISA(?) space, but memory mapped somewhere else, 
> so you do not get serial output.  The grub boot options pass the actual 
> address to the linux kernel, so that’s where you can find out which one it is.
>
> After doing a hack to make that work, I got the following output: 
> http://gbpaste.org/Pd5Vv

why not publish the hack , for education purpose ?

>
> I fear I do not have the diffs and blobs anymore.
>
> \Patrick
>
>> Am 13.01.2015 um 13:10 schrieb Lampshade :
>>
>> Hello
>> Anybody tried to boot OpenBSD on Intel Galileo board?
>> Is this possible?
>> Have a good day
>



-- 
-
() ascii ribbon campaign - against html e-mail
/\



Re: suspend/resume regression

2015-01-13 Thread Edward
On Tue, Jan 13, 2015 at 12:03:31PM +0100, frantisek holop wrote:
> is anybody else seeing regression in suspend/resume?
> i am noticing that my 100% resume ratio is starting
> to decline.  at resume time, the thinkpad half moon
> icon starts blinking and nothing else happens.
> not all resumes fail, but i cannot see a pattern.
> i suspend every night and resume every morning.
> any ideas what i could try?  this was not an issue
> in the past (started in november/december IIRC).
> 

Hi,

I've having the same problem on my T430s and cannot reproduce it.  This
machine shutdowns down every night but suspend/resume if not using for
more than 15 minutes. This problem has been with me since 5.5 (-stable).
Below is my thinkpad dmesg:

OpenBSD 5.6-stable (GENERIC.MP) #3: Fri Dec 12 12:21:17 MYT 2014
root@hostname:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8255635456 (7873MB)
avail mem = 8027082752 (7655MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xdae9d000 (68 entries)
bios0: vendor LENOVO version "G7ET96WW (2.56 )" date 09/12/2013
bios0: LENOVO 2356CTO
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP TCPA SSDT SSDT SSDT HPET APIC MCFG ECDT FPDT ASF! UEFI 
UEFI POAT SSDT SSDT UEFI DBG2
acpi0: wakeup devices LID_(S4) SLPB(S3) IGBE(S4) EXP3(S4) XHCI(S3) EHC1(S3) 
EHC2(S3) HDEF(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz, 2594.54 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz, 2594.11 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 1, core 0, package 0
cpu2 at mainbus0: apid 2 (application processor)
cpu2: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz, 2594.11 MHz
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 1, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz, 2594.11 MHz
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 1, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xf800, bus 0-63
acpiec0 at acpi0
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG_)
acpiprt2 at acpi0: bus 2 (EXP1)
acpiprt3 at acpi0: bus 3 (EXP2)
acpiprt4 at acpi0: bus 4 (EXP3)
acpiprt5 at acpi0: bus -1 (EXP5)
acpiprt6 at acpi0: bus -1 (EXP6)
acpiprt7 at acpi0: bus -1 (EXP7)
acpiprt8 at acpi0: bus -1 (EXP8)
acpicpu0 at acpi0: C2, C1, PSS
acpicpu1 at acpi0: C2, C1, PSS
acpicpu2 at acpi0: C2, C1, PSS
acpicpu3 at acpi0: C2, C1, PSS
acpipwrres0 at acpi0: PUBS, resource for XHCI, EHC1, EHC2
acpitz0 at acpi0: critical temperature is 103 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "45N1143" serial   520 type LION oem "Panasonic"
acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
cpu0: Enhanced SpeedStep 2594 MHz: speeds: 2601, 2600, 2500, 2400, 2300, 2200, 
2100, 2000, 1900, 1800, 1700, 1600, 1500, 1400, 1300, 1200 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Core 3G Host" rev 0x09
vga1 at pci0 dev 2 function 0 "Intel HD Graphics 4000" rev 0x09
intagp at vga1 not configured
inteldrm0 at vga1
drm0 at inteldrm0
drm: Memory usable by graphics device = 2048M
inteldrm0: 1600x900
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel

Re: ntpd.drift values?

2015-01-13 Thread Alexey Suslikov
Christian Weisgerber  mips.inka.de> writes:

> I'm interested in what values people have in their /var/db/ntpd.drift
> files.

cpu0: Intel(R) Pentium(R) CPU 2117U @ 1.80GHz, 1796.23 MHz
5.323365e-06

cpu0: Intel(R) Xeon(R) CPU X3430 @ 2.40GHz, 2394.38 MHz
1.213260e-05

if it is important, how about adding /var/db/ntpd.drift to sendbug?



Re: OpenBSD on Intel Galileo

2015-01-13 Thread Patrick Wildt
Hi,

Yes, it’s kinda possible.  I tried that early 2014 or so. You need to have some 
kind of EFI-Grub2 on an sdcard iirc. Then you exit the in-built grub, open the 
EFI shell and have it boot grub2.

Using kopenbsd you can try to load an OpenBSD kernel, but it doesn’t work out 
of the box.

The serial line is not in the ISA(?) space, but memory mapped somewhere else, 
so you do not get serial output.  The grub boot options pass the actual address 
to the linux kernel, so that’s where you can find out which one it is.

After doing a hack to make that work, I got the following output: 
http://gbpaste.org/Pd5Vv

I fear I do not have the diffs and blobs anymore.

\Patrick

> Am 13.01.2015 um 13:10 schrieb Lampshade :
> 
> Hello
> Anybody tried to boot OpenBSD on Intel Galileo board? 
> Is this possible?
> Have a good day



Re: ntpd.drift values?

2015-01-13 Thread Sebastian Reitenbach
On Tuesday, January 13, 2015 11:58 CET, Stuart Henderson  
wrote: 
 
> On 2015-01-12, Christian Weisgerber  wrote:
> > I'm interested in what values people have in their /var/db/ntpd.drift
> > files.
> >
> > To prevent a deluge: Looking over my own machines, I see that most
> > values are Xe-05, with a few Xe-04 and Xe-06.  So that's the common
> > range, I don't care about that.  But if you have machines with a
> > frequency accuracy outside that range, I'd like to hear about it.
> >
> > E.g., my Sun Blade 100 has 1.180462e-03.
> >

Here a few numbers that were easily collectable:

Dell Inc. Latitude D630 cpu0: Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz 
(amd64) 
   
2.166568e-05

VIA Eden Processor 1200MHz ("CentaurHauls" 686-class) 1.21 GHz (i386)
-2.109627e-04

Acer, inc. Aspire 3630 1.61GHz (i386)
-4.995503e-05

Soekris Geode(TM) 267Mhz (i386)
-2.438824e-05

Soekris Geode(TM) 500MHz (i386)
1.062687e-05



Re: Pf monitoring

2015-01-13 Thread Stuart Henderson
On 2015-01-12, Frédéric URBAN  wrote:
> Hi guys,
>
> I'm trying to find a way to get pf stats (ie: return of pfctl -si) 
> outside of the host to be sure that pf states count are under a certain 
> value. Usually I use snmp on other *Nix based OS but with snmpd(8) i'm 
> unable to achieve this (PF-MIB looks unpopulated).

Using snmpd from the base OS (*not* net-snmp):

$ snmpwalk [hostname] enterprises.openBSD.pfMIBObjects 
OPENBSD-PF-MIB::pfRunning.0 = INTEGER: true(1)
OPENBSD-PF-MIB::pfRuntime.0 = Timeticks: (15808100) 1 day, 19:54:41.00 1/100th 
of a Second
OPENBSD-PF-MIB::pfDebug.0 = INTEGER: err(3)
OPENBSD-PF-MIB::pfHostid.0 = STRING: "0x08fb74f1"
OPENBSD-PF-MIB::pfCntMatch.0 = Counter64: 228441
OPENBSD-PF-MIB::pfCntBadOffset.0 = Counter64: 0
OPENBSD-PF-MIB::pfCntFragment.0 = Counter64: 0
[...snip...]

The MIBo description files are in /usr/share/snmp/mibs and can be
copied to another system.

> I agree snmp is a old 
> and unsecure protocol so any other solution will fit aswell.

snmpd supports SNMPv3 which isn't so bad.



suspend/resume regression

2015-01-13 Thread frantisek holop
is anybody else seeing regression in suspend/resume?
i am noticing that my 100% resume ratio is starting
to decline.  at resume time, the thinkpad half moon
icon starts blinking and nothing else happens.
not all resumes fail, but i cannot see a pattern.
i suspend every night and resume every morning.
any ideas what i could try?  this was not an issue
in the past (started in november/december IIRC).

-f


OpenBSD 5.7-beta (GENERIC.MP) #669: Sat Jan 10 23:12:49 MST 2015
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Core(TM) Duo CPU L2400 @ 1.66GHz ("GenuineIntel" 686-class) 1.67 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,SSE3,MWAIT,VMX,EST,TM2,xTPR,PDCM,PERF
real mem  = 2137341952 (2038MB)
avail mem = 2090065920 (1993MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/31/11, BIOS32 rev. 0 @ 0xfd690, SMBIOS 
rev. 2.4 @ 0xe0010 (67 entries)
bios0: vendor LENOVO version "7BETD8WW (2.19 )" date 03/31/2011
bios0: LENOVO 1705CTO
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SSDT ECDT TCPA APIC MCFG HPET SLIC BOOT SSDT SSDT SSDT 
SSDT
acpi0: wakeup devices LID_(S3) SLPB(S3) DURT(S3) EXP0(S4) EXP1(S4) EXP2(S4) 
EXP3(S4) PCI1(S4) USB0(S3) USB1(S3) USB2(S3) USB7(S3) HDEF(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpiec0 at acpi0
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 166MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM) Duo CPU L2400 @ 1.66GHz ("GenuineIntel" 686-class) 1.67 
GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,SSE3,MWAIT,VMX,EST,TM2,xTPR,PDCM,PERF
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 2, remapped to apid 1
acpimcfg0 at acpi0 addr 0xf000, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (AGP_)
acpiprt2 at acpi0: bus 2 (EXP0)
acpiprt3 at acpi0: bus 3 (EXP1)
acpiprt4 at acpi0: bus 4 (EXP2)
acpiprt5 at acpi0: bus 12 (EXP3)
acpiprt6 at acpi0: bus 21 (PCI1)
acpicpu0 at acpi0: C3, C2, C1, PSS
acpicpu1 at acpi0: C3, C2, C1, PSS
acpipwrres0 at acpi0: PUBS, resource for USB0, USB2, USB7
acpitz0 at acpi0: critical temperature is 127 degC
acpitz1 at acpi0: critical temperature is 97 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "42T4629" serial   327 type LION oem "SANYO"
acpibat1 at acpi0: BAT1 not present
acpibat2 at acpi0: BAT2 not present
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
acpidock0 at acpi0: GDCK not docked (0)
bios0: ROM list: 0xc/0xea00! 0xcf000/0x1000 0xd/0x1000 0xdc000/0x4000! 
0xe/0x1!
cpu0: Enhanced SpeedStep 1663 MHz: speeds: 1667, 1333, 1000 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82945GM Host" rev 0x03
vga1 at pci0 dev 2 function 0 "Intel 82945GM Video" rev 0x03
intagp0 at vga1
agp0 at intagp0: aperture at 0xd000, size 0x1000
inteldrm0 at vga1
drm0 at inteldrm0
inteldrm0: 1024x768
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel 82945GM Video" rev 0x03 at pci0 dev 2 function 1 not configured
azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x02: msi
azalia0: codecs: Analog Devices AD1981HD, 0x/0x, using Analog Devices 
AD1981HD
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x02: apic 1 int 20
pci1 at ppb0 bus 2
em0 at pci1 dev 0 function 0 "Intel 82573L" rev 0x00: msi, address 
00:16:d3:b6:19:57
ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x02: apic 1 int 21
pci2 at ppb1 bus 3
ppb2 at pci0 dev 28 function 2 "Intel 82801GB PCIE" rev 0x02: apic 1 int 22
pci3 at ppb2 bus 4
ppb3 at pci0 dev 28 function 3 "Intel 82801GB PCIE" rev 0x02: apic 1 int 23
pci4 at ppb3 bus 12
uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x02: apic 1 int 16
uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x02: apic 1 int 17
uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x02: apic 1 int 18
uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x02: apic 1 int 19
ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x02: apic 1 int 19
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb4 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0xe2
pci5 at ppb4 bus 21
cbb0 at pci5 dev 0 function 0 "Ricoh 5C476 CardBus" rev 0xb4: apic 1 int 16
"Ricoh 5C552 Firewire" rev 0x09 at pci5 dev 0 function 1 not configured
sdhc0 at pci5 dev 0 function 2 "Ricoh 5C822 SD/MMC" rev 0x18: apic 1 int 18
sd

Re: ntpd.drift values?

2015-01-13 Thread Stuart Henderson
On 2015-01-12, Christian Weisgerber  wrote:
> I'm interested in what values people have in their /var/db/ntpd.drift
> files.
>
> To prevent a deluge: Looking over my own machines, I see that most
> values are Xe-05, with a few Xe-04 and Xe-06.  So that's the common
> range, I don't care about that.  But if you have machines with a
> frequency accuracy outside that range, I'd like to hear about it.
>
> E.g., my Sun Blade 100 has 1.180462e-03.
>

Taking the ones I can check easily:

1x e-03 (macppc mac mini)
1x e-04 (alix)
16x e-05
8x e-06 (various r200, r210)
5x e-07 (r210, supermicro A1SAi, KVM [arp networks], net4526)
2x e-08 (esxi)



Re: ntpd.drift values?

2015-01-13 Thread Peter Strömberg
$ cat /var/db/ntpd.drift
2.475987e-03

ASUS M3A78-T



On Mon, Jan 12, 2015 at 5:30 PM, Christian Weisgerber 
wrote:

> I'm interested in what values people have in their /var/db/ntpd.drift
> files.
>
> To prevent a deluge: Looking over my own machines, I see that most
> values are Xe-05, with a few Xe-04 and Xe-06.  So that's the common
> range, I don't care about that.  But if you have machines with a
> frequency accuracy outside that range, I'd like to hear about it.
>
> E.g., my Sun Blade 100 has 1.180462e-03.
>
> --
> Christian "naddy" Weisgerber  na...@mips.inka.de

[demime 1.01d removed an attachment of type application/octet-stream which had 
a name of dmesg.boot]