Iked, ca_getreq: no valid local certificate found

2015-11-04 Thread Toyam Cox
Ho misc@,

I have been (loosely) following the guide at
http://puffysecurity.com/wiki/openikedoffshore.html and have run into
a roadblock.

I have packets going between my two hosts on different networks, the
configuration files on both are good, and both have the ca installed.

However on my remote host, I get (ips and hostnames redacted):
Nov  5 01:38:14 hostname iked[7047]: ikev2_msg_send: IKE_SA_INIT
request from $local_wan:500 to $remote.168:500 msgid 0, 534 bytes
Nov  5 01:38:14 hostname iked[7047]: ikev2_recv: IKE_SA_INIT response
from responder $remote8:500 to $local:500 policy 'policy1' id 0, 471
bytes
Nov  5 01:38:14 hostname iked[12679]: ca_getreq: no valid local
certificate found

This is coupled with, as I create the ca key...
# ikectl ca vpn1 create
CA passphrase:
Retype CA passphrase:
[stuff-happens-and-inputs]
Getting Private key
Using configuration from /etc/ssl/openssl.cnf
variable lookup failed for ca::default_ca
24387713617796:error:0E06D06C:configuration file
routines:NCONF_get_string:no
value:/usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/conf/conf_lib.c:323:group=ca
name=default_ca

I've checked the mail logs for misc@ and found a person in August with
this problem, http://marc.info/?l=openbsd-misc&m=133675466519976&w=2

Unfortunately, editing /etc/ssl/x509v3.cnf didn't work for me.
Variable lookup still failed.

Thank you for any help.



Re: how to transfer the image of qemu to real machine

2015-11-04 Thread Tuyosi Takesima
hi all

i  write  **only tentative ** plan .
it perhaps  has  imcompleteness .


URL is
http://openbsd-akita.blogspot.jp/2015/11/export-kvms-image-to-real-machine.html
.

-
regards



Re: em(4) watchdog timeouts

2015-11-04 Thread Sonic
On Wed, Nov 4, 2015 at 2:51 PM, Sonic  wrote:
> Is there anything else I can provide to assist in finding a cure for this 
> issue?

Not sure this helps at all but the specific error I get is "em0:
watchdog timeout -- resetting". In this case em0 is the nic on the
internal network. I do not see the errors on the external network nic
(em1) which connects to the cable modem. The internal network nic
(em0) connects directly to an HP 2520 switch.

# dmesg |grep em1
em1 at pci3 dev 0 function 0 "Intel 82574L" rev 0x00: msi, address
00:25:90:92:d4:f9
spdmem1 at iic0 addr 0x51: 2GB DDR3 SDRAM PC3-10600 SO-DIMM
# dmesg |grep em0
em0 at pci2 dev 0 function 0 "Intel 82574L" rev 0x00: msi, address
00:25:90:92:d4:f8
spdmem0 at iic0 addr 0x50: 2GB DDR3 SDRAM PC3-10600 SO-DIMM
em0: watchdog timeout -- resetting
em0: watchdog timeout -- resetting
em0: watchdog timeout -- resetting
em0: watchdog timeout -- resetting
em0: watchdog timeout -- resetting
em0: watchdog timeout -- resetting

Chris



odd and even weeks in calendar(1)?

2015-11-04 Thread Jiri Navratil
Hello,

Exist a way (and how please) to add something like

WeekOdd\todd week
WeekEven\teven week

to calendar(1)?

(Week starts on Monday, ends on Sunday, week number is same
as from command cal -wm)

Thank you,
Jiri

-- 
Jiri Navratil, http://kouc.navratil.cz, +420 222 767 131



Re: em(4) watchdog timeouts

2015-11-04 Thread Sonic
On Mon, Nov 2, 2015 at 11:19 PM, Sonic  wrote:
> Sorry to report that the diff does not solve the timeout problem here.
>
> All was working fine with the if_em* versions from 2015/09/29 (I
> downgraded to this version per Stuarts post on 10-14):
> "try backing out the last commits to
> if_em.c and if_em.h ("cd /sys/dev/pci; cvs up -D 2015/09/29 if_em*") to
> see if it makes a difference."
>
> However, that version no longer compiles with -current and the
> watchdog timeouts are back (even with the diff).

Is there anything else I can provide to assist in finding a cure for this issue?
I get sporadic timeouts even under normal usage, but starting a
bittorrent on a client brings the firewall to its knees. And as all
the firewalls I manage use the em driver I cannot take a chance on
upgrading any of them to -current.

Thank you,

Chris



Re: 5.8-release building mutt from ports fails

2015-11-04 Thread patrick keshishian
On 11/4/15, Tati Chevron  wrote:
> On Wed, Nov 04, 2015 at 07:21:39AM -0800, Chris Cappuccio wrote:
>>Tati Chevron [chev...@swabsit.com] wrote:
>>> Hi,
>>>
>>> On a freshly installed 5.8-release, I am unable to build mutt from source
>>> using the ports tree.
>>>
>>> I've never had any difficulty building the mutt port since at least
>>> 5.0-release.
>>>
>>> systrace: deny user: root, prog: /bin/cp, pid: 24101(0)[7002], policy:
>>> /usr/bin/env, filters: 248, syscall: native-chflagsat(107), filename:
>>> /usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/share/doc/db4/articles/inmemory,
>>> flags: cp: chflags:
>>> /usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/share/doc/db4/articles/inmemory:
>>> Operation not permitted
>>
>>Unfortunately you'll have to turn off systrace to build this port. Are you
>>using any custom systrace rules?
>
> No, no custom rules on this machine, just a standard installation.  But
> what's changed to cause this new behaviour?

does this patch help your case:

http://marc.info/?l=openbsd-ports&m=143346045720505&w=2

--patrick



Re: CTRL+O "supress output behavior" - weird shell output if program ends meanwhile - bug or feature?

2015-11-04 Thread Jan Vlach
Duh ... for the record:

man stty ...

$ stty -flusho 

restores output. Thank you for your attention :-)

Jan

-- 
Be the change you want to see in the world.



Re: how to transfer the image of qemu to real machine

2015-11-04 Thread Tuyosi Takesima
Hi all .
a little progress was made .

from FAQ8
boot> boot -s
# fsck -p / && mount -uw /<--- ok
# fsck -p /usr && mount /usr  <--- fail

touch /etc/spwd.db
and then
i can login  by root .

but login by tuyosi is not possible
so i create user TUYOSI .
then
i can login by TUYOSI .
but i cannot start xfce4 .

i report now state .

regards



Re: Networking Menu option during boot

2015-11-04 Thread Raf Czlonka
On Wed, Nov 04, 2015 at 05:12:48PM GMT, J. Scott Heppler wrote:
> On Nov 04, 2015: 11:35, Jiri B wrote:
> >On Wed, Nov 04, 2015 at 07:08:54AM -0800, J. Scott Heppler wrote:
> >>[...]
> >>The bsd.rd install option already pauses the kernel and displays a
> >>network configuration script.  Would it be possible to provide a
> >>similiar option in OpenBSD?
> >
> >bsd.rd doesn't pause the kernel, installer is called from init,
> >iiuc it is dot.profile and then based on users input or if there's
> >autoinstall mode it starts particular mode.
> >
> >you can put in rc.local whatever you want.
> >
> >j.
> 
> You are right, the bsd.rd install options pauses the boot process.
> Still, I think it would be cleaner for those with mobile devices, to
> establish their desired connection directly as opposed to establishing
> the default, taking it down, clearing keys in the case of wireless, and
> bringing it back up.

Scott, why would you want to do that?

Search the list or OpenBSD Journal - there are plethora of scripts for
managing wireless networks to choose from or you can write your own.

Regards,

Raf



CTRL+O "supress output behavior" - weird shell output if program ends meanwhile - bug or feature?

2015-11-04 Thread Jan Vlach
Hello misc@,

I'm little bit into "unix archeology" ;) and I came across "Unix is a Four 
Letter Word...
and Vi is a Two Letter Abbreviation" by Christopher C. Taylor 
(http://unix.t-a-y-l-o-r.com/4ltrwrd.pdf)

In chapter 2.1.5 I've found:

2.1.5 Controlling your terminal output

If output scrolls up on your terminal screen faster than you can read it, you 
can
suspend it by typing ctrl-S . To resume the display, type ctrl-S . Again
section 2.4.6 will discuss how to pass output through a paging program that will
automatically display only one screen at a time. While I'm at it, ctrl-C will
abort a process, and ctrl-O will discard the output until another ctrl-O is
entered. Be sure to note that although the output doesn't appear, the process
is still running. ctrl-Z suspends the current program. You can see its job
number by typing jobs. You can resume the suspended program by giving the
fg foreground command, or resume it in the background with bg.


I have a question  about ^O behavior - everything works fine if I press ^O to 
supress and resume afterwards (enter works too) and the program producing 
output still works. (test case `yes' binary)

I'm not sure if I came across bug or a feature, if the program output is 
supressed and the program ends meanwhile, output is not restored fully (see 
OUTPUT section below).  Apparently, shell is still there doing it's work, but 
output behavior is unexpected. 

Is there a way to get back normal terminal processing? using `reset` does not 
help. Is this bug or feature? 

Thank you for cluestick,
Jan



#I'm running test script and pressing ^O immediately. (I'm using i3 WM and 
uxterm, rendering the output takes close to 3s on my HW)
### test script ###
#!/bin/sh
i=0
while [[ i -lt 4000 ]] ; do
i=$(($i+1))
echo $i
done

### OUTPUT ### 
...
1188
1189^O
<-- enters pressed here after 10s




ls  <-- trying command, no output


I-search:   <-- CTRL+R pressed, have shell
[19:22][janus@maya:~]$  <-- my prompt
df  <-- another command, no output

[19:22][janus@maya:~]$ 

[19:22][janus@maya:~]$ touch /tmp/x <-- produces /tmp/x as seen from different 
terminal

CTRL+D  <-- ends the session as expected

### DMESG ### current, updated couple of minutes ago
# last out of three. uname -a matches
#
OpenBSD 5.8-current (GENERIC.MP) #1350: Tue Nov  3 23:43:54 MST 2015
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Atom(TM) CPU N270 @ 1.60GHz ("GenuineIntel" 686-class) 1.61 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,xTPR,PDCM,MOVBE,LAHF,PERF,SENSOR
real mem  = 2138193920 (2039MB)
avail mem = 2084675584 (1988MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 06/11/09, BIOS32 rev. 0 @ 0xf0010, SMBIOS rev. 2.5 @ 
0xf0710 (30 entries)
bios0: vendor American Megatrends Inc. version "2103" date 06/11/2009
bios0: ASUSTeK Computer INC. 901
acpi0 at bios0: rev 0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC MCFG OEMB HPET SSDT
acpi0: wakeup devices P0P2(S4) P0P1(S4) P0P4(S4) P0P6(S4) P0P7(S4) P0P8(S4) 
P0P9(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 133MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.0.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Atom(TM) CPU N270 @ 1.60GHz ("GenuineIntel" 686-class) 1.60 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,xTPR,PDCM,MOVBE,LAHF,PERF,SENSOR
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 1, remapped to apid 2
acpimcfg0 at acpi0 addr 0xe000, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 5 (P0P4)
acpiprt2 at acpi0: bus 3 (P0P6)
acpiprt3 at acpi0: bus 1 (P0P7)
acpiprt4 at acpi0: bus -1 (P0P8)
acpiprt5 at acpi0: bus -1 (P0P9)
acpiprt6 at acpi0: bus 4 (P0P5)
acpiec0 at acpi0
acpicpu0 at acpi0: !C2(500@1 mwait.1@0x10), C1(1000@1 mwait.1), PSS
acpicpu1 at acpi0: !C2(500@1 mwait.1@0x10), C1(1000@1 mwait.1), PSS
acpitz0 at acpi0: critical temperature is 85 degC
acpibat0 at acpi0: BAT0 model "901" serial   type LION oem "ASUS"
acpiac0 at acpi0: AC unit online
acpiasus0 at acpi0
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibtn2 at acpi0: PWRB
bios0: ROM list: 0xc/0xec00!
cpu0: Enhanced SpeedStep 1600 MHz: speeds: 1600, 1333, 1067, 800 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82945GME Host" rev 0x03
inteldrm0 at pci0 dev 2 function 0 "Intel 82945GME Video"

Re: how to transfer the image of qemu to real machine

2015-11-04 Thread Tuyosi Takesima
thanks for kind advices .

i do
1) ssh root@192.168.100.101 "tar czpf - /  | tar xzpf - -C /MNT
and
2) installboot -r /MNT sd1 (on openbsd5.8 = sd0a)
and then
3) boot by grub

perhaps sd1a's current openbsd comes up
because [ /dev/sd1a(655d3964e75dc0cc.a): file system is clean ; not
checking ] apear .

but login passwd is changed .

how to cope with this ?
a little more effort is neeeded .


if completed , i follow current by openbsd of linux's KVM (sd0i),
and i export it via openbsd of openbsd's QEMU (sd0a) to real hard disk
(sd1a) .


-
regards



Re: Networking Menu option during boot

2015-11-04 Thread J. Scott Heppler

On Nov 04, 2015: 11:35, Jiri B wrote:

On Wed, Nov 04, 2015 at 07:08:54AM -0800, J. Scott Heppler wrote:

[...]
The bsd.rd install option already pauses the kernel and displays a
network configuration script.  Would it be possible to provide a
similiar option in OpenBSD?


bsd.rd doesn't pause the kernel, installer is called from init,
iiuc it is dot.profile and then based on users input or if there's
autoinstall mode it starts particular mode.

you can put in rc.local whatever you want.

j.


You are right, the bsd.rd install options pauses the boot process.
Still, I think it would be cleaner for those with mobile devices, to
establish their desired connection directly as opposed to establishing
the default, taking it down, clearing keys in the case of wireless, and
bringing it back up.



--
J. Scott Heppler

Penguin Innovations

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 



NOTICE: This e-mail message and any attachments may
contain legally privileged and confidential information intended
solely for the use of the intended recipients. If you are not an
intended recipient, you are hereby notified that you have
received this message in error and any review, dissemination,
distribution, copying, or other unauthorized use of this email
and any attachment is strictly prohibited. If you have received
this email in error, please notify the sender immediately and
delete the message and any attachments from your system.



misc@openbsd.org

2015-11-04 Thread Toyam Cox
The default setting for "do-not-query-localhost" is "yes".
You may want to add "do-not-query-localhost: no" to your config in the
"server" section.

On Wed, Nov 4, 2015 at 11:25 AM, Gregory Edigarov  wrote:
> Hello,
>
> Trying to make unbound and nsd co-exist on one server, the goal is to have
> unbound listen for all requests redirecting requests for local zones to nsd:
> nsd.conf
>
> server:
> server-count: 1
> database: "/var/lib/nsd3/nsd.db"
> username: nsd
> ip-address:  127.0.0.1@9053
> logfile: "/var/log/nsd.log"
> pidfile: "/var/run/nsd.pid"
> xfrdfile: "/var/lib/nsd3/xfrd.state"
>
> zone:
> name:   somezone.org
> zonefile: /etc/nsd/zones/somezone.org
>
> dig -p9053 somezone.org soa @127.0.0.1 works as expected.
>
> now unbound's turn:
>
> server:
> auto-trust-anchor-file: "/var/lib/unbound/root.key"
> interface: 0.0.0.0
> logfile: /var/log/unbound.log
>
> stub-zone:
> name:  somezone.org. # also tried without point with the same
> result...
> stub-addr: 127.0.0.1@9053
>
> dig somezone.org soa @127.0.0.1 yields SERVFAIL.
> also tried with forward-zone: - with the same result.
>
> is that at all possible? Where am I wrong?



Re: Networking Menu option during boot

2015-11-04 Thread Jiri B
On Wed, Nov 04, 2015 at 07:08:54AM -0800, J. Scott Heppler wrote:
> [...]
> The bsd.rd install option already pauses the kernel and displays a
> network configuration script.  Would it be possible to provide a
> similiar option in OpenBSD?

bsd.rd doesn't pause the kernel, installer is called from init,
iiuc it is dot.profile and then based on users input or if there's
autoinstall mode it starts particular mode.

you can put in rc.local whatever you want.

j.



Re: Networking Menu option during boot

2015-11-04 Thread Matej Nanut
I also miss network profiles from Arch.

Currently, I have shell scripts for the various networks I need, and
run them manually.

I don't use hostname.if(5) with trunk or similar, because I simply
don't know in advance which network I'll connect to.

There's probably a better way of doing this that I'm not aware of.

Matej



misc@openbsd.org

2015-11-04 Thread Gregory Edigarov

Hello,

Trying to make unbound and nsd co-exist on one server, the goal is to 
have unbound listen for all requests redirecting requests for local 
zones to nsd:

nsd.conf

server:
server-count: 1
database: "/var/lib/nsd3/nsd.db"
username: nsd
ip-address:  127.0.0.1@9053
logfile: "/var/log/nsd.log"
pidfile: "/var/run/nsd.pid"
xfrdfile: "/var/lib/nsd3/xfrd.state"

zone:
name:   somezone.org
zonefile: /etc/nsd/zones/somezone.org

dig -p9053 somezone.org soa @127.0.0.1 works as expected.

now unbound's turn:

server:
auto-trust-anchor-file: "/var/lib/unbound/root.key"
interface: 0.0.0.0
logfile: /var/log/unbound.log

stub-zone:
name:  somezone.org. # also tried without point with the same 
result...

stub-addr: 127.0.0.1@9053

dig somezone.org soa @127.0.0.1 yields SERVFAIL.
also tried with forward-zone: - with the same result.

is that at all possible? Where am I wrong?



Detroit-area BSD user group

2015-11-04 Thread Michael W. Lucas
Hi,

Nick Holland and I live about three miles apart, so this was pretty
inevitable.

Working on starting a Detroit-area BSD user group.

If you're interested, join the mailing list and help us figure out
where & when to meet.

www.semibug.org.

Followups to... uh... not this list.

==ml

-- 
Michael W. Lucas  -  mwlu...@michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/



Networking Menu option during boot

2015-11-04 Thread J. Scott Heppler

Prior to selling its soul to systemd, Arch Linux used an /etc/rc.local
entry to configure networking.  One of the options was a "menu" that
would pause booting and display some pre-configured networking options.
In Arch, the networking options were placed in an /etc/ directory.

The options could include open wireless access points and 
static/dynamic NICs.


The bsd.rd install option already pauses the kernel and displays a
network configuration script.  Would it be possible to provide a
similiar option in OpenBSD?

--
J. Scott Heppler



Re: 5.8-release building mutt from ports fails

2015-11-04 Thread Tati Chevron

On Wed, Nov 04, 2015 at 07:21:39AM -0800, Chris Cappuccio wrote:

Tati Chevron [chev...@swabsit.com] wrote:

Hi,

On a freshly installed 5.8-release, I am unable to build mutt from source using 
the ports tree.

I've never had any difficulty building the mutt port since at least 5.0-release.

systrace: deny user: root, prog: /bin/cp, pid: 24101(0)[7002], policy:
/usr/bin/env, filters: 248, syscall: native-chflagsat(107), filename: 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/share/doc/db4/articles/inmemory,
flags: cp: chflags: 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/share/doc/db4/articles/inmemory:
Operation not permitted


Unfortunately you'll have to turn off systrace to build this port. Are you
using any custom systrace rules?


No, no custom rules on this machine, just a standard installation.  But what's 
changed to cause this new behaviour?

--
Tati Chevron
Perl and FORTRAN specialist.
SWABSIT development and migration department.
http://www.swabsit.com



Re: 5.8-release building mutt from ports fails

2015-11-04 Thread Chris Cappuccio
Tati Chevron [chev...@swabsit.com] wrote:
> Hi,
> 
> On a freshly installed 5.8-release, I am unable to build mutt from source 
> using the ports tree.
> 
> I've never had any difficulty building the mutt port since at least 
> 5.0-release.
>
> systrace: deny user: root, prog: /bin/cp, pid: 24101(0)[7002], policy:
> /usr/bin/env, filters: 248, syscall: native-chflagsat(107), filename: 
> /usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/share/doc/db4/articles/inmemory,
> flags: cp: chflags: 
> /usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/share/doc/db4/articles/inmemory:
> Operation not permitted

Unfortunately you'll have to turn off systrace to build this port. Are you
using any custom systrace rules?



Lenovo x250 with current

2015-11-04 Thread lists
Hi Misc,

Is anyone running the Lenovo x250 with current? If so, I have some
question about screen brightness adjustment.

Thanks,

Jim



Re: Anyone experienced with 4G/LTE modems?

2015-11-04 Thread Michael Seyfert
AT&T doesn't have 4g USB devices you can use?

I use a usb modem for my 4g LTE internet (verizon) connected to
an OpenBSD router. It shows up as cdce0:
cdce – USB Communication Device Class Ethernet device
Works just like any ethernet connection.

Also you might want to consider an amplifier and antenna setup
depending how far the cell tower is.



Re: ipsec via iked

2015-11-04 Thread trondd
> I do have read the puffysecurity website

Did you?  I struggled with this for a while, too, and found the
puffysecurity example, when followed, works.

>
> For example, the laptop is connected to internet through a network
> 192.168.100.0/24 (ip 192.168.100.37)
>
> The working configuration is (using now ca, no more psk) :
>
> On the gateway :
> distantnet="192.168.100.0/24"
> ikev2 "qcvpn" passive ipcomp esp \
> from 192.168.0.0/24 to $distantnet \
> peer any \
> srcid ets.qualitycenter.fr
>

> I've tried other configurations like this :
>
> On the gateway :
> distantnet="192.168.33.0/24"
> ikev2 "qcvpn" passive ipcomp esp \
> from 192.168.0.0/24 to $distantnet \
> peer any \
> srcid ets.qualitycenter.fr \
> config address 192.168.33.2 \
> config name-server 192.168.0.190
>

Why do you keep configuring a specific network if that is not what you
want to do?  Did you try 0.0.0.0/0?

> I got the flows from peer 196.207.241.154 to 192.168.33.0 in both sens and
> SAD ok (same as in the working configuration but 192.168.100 is replaced
> by
> 192.168.33 which looks like fine to me), but I'm not able to get access to
> any distant computer. The laptop pf is as simple as possible :
> pass in
> match out on enc0 nat-to 192.168.33.2
>

I don't think you're supposed to NAT on the enc0 interface.  That's a
special internal interface.  If you're going out to the internet you have
to NAT on the egress interface.  Why are you doing NAT on the laptop at
all, actually?  If you're trying to get the laptop to talk over the VPN
tunnel, that's what iked does, you only need to allow VPN ports and
protocols through the laptop firewall.

I can't get to my working config from where I am now, if I remember, I'll
send it along this evening.

Tim.



Re: ipsec via iked

2015-11-04 Thread Sébastien Morand
> While not an endorsed FAQ or man page from the project, this:
>> http://puffysecurity.com/wiki/openikedoffshore.html should give you a
>> few tips on how to achieve this.  The man page (iked.conf) and the
>> references for pf within it should be enough to work it out.  But from my
>> observations of your ikev2 configs, you are making it a little more complex
>> than it needs to.
>>
>
>
Hi,

I do have read the puffysecurity website, man pages and all the docs I have
found here and there, still the same problem. I make a more simple example :

I'm able to make it works but the gateway configuration has to know the
laptop network.

For example, the laptop is connected to internet through a network
192.168.100.0/24 (ip 192.168.100.37)

The working configuration is (using now ca, no more psk) :

On the gateway :
distantnet="192.168.100.0/24"
ikev2 "qcvpn" passive ipcomp esp \
from 192.168.0.0/24 to $distantnet \
peer any \
srcid ets.qualitycenter.fr

On the laptop (xxx.xxx.xxx.xxx is my real company external IP) :
localip=egress
ikev2 "qcvpn" active esp \
from $localip to 192.168.0.0/24 \
peer xxx.xxx.xxx.xxx \
srcid boutxy

That's working (can ping 192.168.0.190 for instance or get ssh access) but
the gateway knows I'm using a 192.168.100.0/24 network which is not really
acceptable.

I've tried other configurations like this :

On the gateway :
distantnet="192.168.33.0/24"
ikev2 "qcvpn" passive ipcomp esp \
from 192.168.0.0/24 to $distantnet \
peer any \
srcid ets.qualitycenter.fr \
config address 192.168.33.2 \
config name-server 192.168.0.190

On the laptop :
localip="192.168.33.2 (192.168.100.37)"
ikev2 "qcvpn" active esp \
from $localip to 192.168.0.0/24 \
peer xxx.xxx.xxx.xxx \
srcid boutxy

I got the flows from peer 196.207.241.154 to 192.168.33.0 in both sens and
SAD ok (same as in the working configuration but 192.168.100 is replaced by
192.168.33 which looks like fine to me), but I'm not able to get access to
any distant computer. The laptop pf is as simple as possible :
pass in
match out on enc0 nat-to 192.168.33.2
pass out

on the gateway the same :
pass in quick on enc0
pass out quick on enc0

Any idea?

Regards,
Sebastien



Re: Ethernet not working

2015-11-04 Thread Atanas Vladimirov

On 04.11.2015 11:44, Jonathan Gray wrote:

On Wed, Nov 04, 2015 at 10:15:11AM +0100, Stefan Sperling wrote:

On Wed, Nov 04, 2015 at 01:53:33PM +0530, Jay Patel wrote:
> "Attansic Technology AR8172" rev 0x10 at pci1 dev 0 function 0 not configured

That's your ethernet device. The 'not configured' message means
there is no driver support in OpenBSD for this device yet.

It looks like Linux has a driver for it, called alx.

FreeBSD does not have a driver for this device either.


FreeBSD and NetBSD had sizable patches to alc(4) to support
that and related variants.  Anyone interested in making
these parts work should look at those patches.


Someone with good skills in programming can make better patch (as 
Jonathan

suggested from the following thread [0]).

[0] http://marc.info/?l=openbsd-tech&m=142774177502625&w=2



VGA memory size

2015-11-04 Thread Mohammad BadieZadegan
Hi everybody,
I have searched more time to find a command to show the current VGA memory
size but nothing found for OpenBSD.
Is that a way to find it?
Thanks.



upd(4) wrong reads

2015-11-04 Thread Martijn van Duren

Hello misc@,

I've installed a UPS (eaton ellipse 600) at a customer of mine, which 
attaches as a upd(4) device without problems. When monitoring this 
device with sensorsd it sporadically sends out emails about power 
problems, even when there are no problems at that moment location.


When taking a closer look at the logs it appears that sensorsd regularly 
reads wrong data from the device.


Is there a way to detect whether this issue is in the UPS or with the 
driver?


I've placed an extra check on indicator0 with the shutdown command, so 
there haven't been any untimely shutdowns yet, but it might be just a 
matter of star and moon alignment before both percent0 and indicator0 
are read wrong simultaniously.


Sincerely,

Martijn van Duren

$ sysctl hw.sensors.upd0
hw.sensors.upd0.indicator0=On (Charging), OK
hw.sensors.upd0.indicator1=Off (Discharging), OK
hw.sensors.upd0.indicator2=Off (NeedReplacement), OK
hw.sensors.upd0.indicator3=Off (ShutdownImminent), OK
hw.sensors.upd0.indicator4=On (ACPresent), OK
hw.sensors.upd0.indicator5=Off (Overload), OK
hw.sensors.upd0.percent0=100.00% (RemainingCapacity), OK
hw.sensors.upd0.percent1=100.00% (FullChargeCapacity), OK
hw.sensors.upd0.timedelta0=0.00 secs (RunTimeToEmpty), OK
$ zgrep sensorsd /var/log/daemon*
/var/log/daemon:Nov  4 07:00:20 server sensorsd[5]: upd0.percent0: 
within limits: 100.00%
/var/log/daemon:Nov  4 08:58:24 server sensorsd[5]: upd0.percent0: 
exceeds limits: 19.00% is below 20.00%
/var/log/daemon:Nov  4 08:58:44 server sensorsd[5]: upd0.percent0: 
within limits: 100.00%
/var/log/daemon:Nov  4 09:31:37 server sensorsd[1790]: startup, system 
has 40 sensors
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: upd0.indicator0: 
On, OK
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: upd0.indicator1: 
Off, OK
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: upd0.indicator2: 
Off, OK
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: upd0.indicator3: 
Off, OK
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: upd0.indicator4: 
On, OK
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: upd0.indicator5: 
Off, OK
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: upd0.percent0: 
100.00%, OK
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: upd0.percent0: 
within limits: 100.00%
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: upd0.percent1: 
100.00%, OK
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: upd0.timedelta0: 
0.00 secs, OK
/var/log/daemon:Nov  4 09:31:52 server sensorsd[10211]: 
softraid0.drive0: online, OK
/var/log/daemon:Nov  4 09:32:31 server sensorsd[15990]: startup, system 
has 40 sensors
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: upd0.indicator0: 
On, OK
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: upd0.indicator1: 
Off, OK
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: upd0.indicator2: 
Off, OK
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: upd0.indicator3: 
Off, OK
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: upd0.indicator4: 
On, OK
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: upd0.indicator5: 
Off, OK
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: upd0.percent0: 
100.00%, OK
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: upd0.percent0: 
within limits: 100.00%
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: upd0.percent1: 
100.00%, OK
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: upd0.timedelta0: 
0.00 secs, OK
/var/log/daemon:Nov  4 09:32:46 server sensorsd[15230]: 
softraid0.drive0: online, OK
/var/log/daemon.0.gz:Nov  3 21:47:35 server sensorsd[5]: upd0.percent0: 
exceeds limits: 19.00% is below 20.00%
/var/log/daemon.0.gz:Nov  3 21:47:55 server sensorsd[5]: upd0.percent0: 
within limits: 100.00%
/var/log/daemon.0.gz:Nov  3 22:48:57 server sensorsd[5]: 
upd0.indicator0: On, UNKNOWN
/var/log/daemon.0.gz:Nov  3 22:48:57 server sensorsd[5]: 
upd0.indicator1: Off, UNKNOWN
/var/log/daemon.0.gz:Nov  3 22:48:57 server sensorsd[5]: 
upd0.indicator2: Off, UNKNOWN
/var/log/daemon.0.gz:Nov  3 22:48:57 server sensorsd[5]: 
upd0.indicator3: Off, UNKNOWN
/var/log/daemon.0.gz:Nov  3 22:48:57 server sensorsd[5]: 
upd0.indicator4: On, UNKNOWN
/var/log/daemon.0.gz:Nov  3 22:48:57 server sensorsd[5]: 
upd0.indicator5: Off, UNKNOWN
/var/log/daemon.0.gz:Nov  3 22:49:17 server sensorsd[5]: 
upd0.indicator0: On, OK
/var/log/daemon.0.gz:Nov  3 22:49:17 server sensorsd[5]: 
upd0.indicator1: Off, OK
/var/log/daemon.0.gz:Nov  3 22:49:17 server sensorsd[5]: 
upd0.indicator2: Off, OK
/var/log/daemon.0.gz:Nov  3 22:49:17 server sensorsd[5]: 
upd0.indicator3: Off, OK
/var/log/daemon.0.gz:Nov  3 22:49:17 server sensorsd[5]: 
upd0.indicator4: On, OK
/var/log/daemon.0.gz:Nov  3 22:49:17 server sensorsd[5]: 
upd0.indicator5: Off, OK
/var/log/daemon.0.gz:Nov  3 23:49:24 server sensorsd[5]: upd0.percent0: 
exceeds limits: 19.00% is below 20.00%
/var/log/daemon.0.gz:Nov  3 23:49:44 server

5.8-release building mutt from ports fails

2015-11-04 Thread Tati Chevron

Hi,

On a freshly installed 5.8-release, I am unable to build mutt from source using 
the ports tree.

I've never had any difficulty building the mutt port since at least 5.0-release.

After the first failiure, I did a make distclean in /usr/ports, before trying 
to build mutt again, and seeing the same error.

Seems like some kind of circular dependency between databases/db/v4 and Python 
2.7.10 which are required by the mutt build.

I've tried building the "no_java" flavour of db-4.6.21 instead of the regular 
version, to eliminate some dependencies, but that failed too.

Is this a known issue in 5.8-release?

Stdout and stderr from the build follow:

===> mutt-1.5.23p9v0 depends on: docbook-xsl-* - not found
===>  Verifying install for docbook-xsl-* in textproc/docbook-xsl
===>  Checking files for docbook-xsl-1.68.1p5
`/usr/ports/distfiles/docbook-xsl-1.68.1.tar.gz' is up to date.

(SHA256) docbook-xsl-1.68.1.tar.gz: OK

===> docbook-xsl-1.68.1p5 depends on: libxml-* - not found
===>  Verifying install for libxml-* in textproc/libxml
===>  Checking files for libxml2-2.9.2
`/usr/ports/distfiles/libxml2-2.9.2.tar.gz' is up to date.

(SHA256) libxml2-2.9.2.tar.gz: OK

===> libxml-2.9.2p1 depends on: python->=2.7,<2.8 - not found
===>  Verifying install for python->=2.7,<2.8 in lang/python/2.7
===>  Checking files for Python-2.7.10
`/usr/ports/distfiles/Python-2.7.10.tgz' is up to date.

(SHA256) Python-2.7.10.tgz: OK

===> python-2.7.10 depends on: db->=4,<5|db->=4v0,<5v0 - not found
===>  Verifying install for db->=4,<5|db->=4v0,<5v0 in databases/db/v4
===>  Faking installation for db-4.6.21
install -d -m 755 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl
test -d 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local
 ||  (mkdir -p 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local
 &&  chmod 755 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local)
Installing DB include files: 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/include/db4
 ...
test -d 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/include/db4
 ||  (mkdir -p 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/include/db4
 &&  chmod 755 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/include/db4)
cd /usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/include/db4 
&& rm -f db.h db_cxx.h db_185.h 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/bin/install -c  -m 644 -p 
db.h db_cxx.h db_185.h  /usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/include/db4
cd /usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/include/db4 
&& chmod 444 db.h db_cxx.h db_185.h Installing DB library: /usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/lib/db4 
...

test -d 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/lib/db4
 ||  (mkdir -p 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/lib/db4
 &&  chmod 755 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/lib/db4)
cd 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/lib/db4
 && rm -f libdb.a  libdb.so.5.0  libdb.so  libdb.so.4  libdb.a  libdb.la  
libdb_cxx.a  libdb_cxx.so.6.0  libdb_cxx.so  libdb_cxx.so.4  libdb_cxx.a  libdb_cxx.la  
libdb_tcl.so.6.0  libdb_tcl.so  libdb_tcl.so.4  libdb_tcl.a  libdb_tcl.la  
libdb_java.so.  libdb_java.so  libdb_java_g.so  libdb_java.so.4  libdb_java.a  
libdb_java.la  dbexamples.jar  db.jar
/usr/bin/libtool --mode=install 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/bin/install -c -s  -m 755 -p 
libdb.la libdb_cxx.la 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/lib/db4
libtool: install: 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/bin/install -c -m 755 -p -m 
644 ./.libs/libdb.a 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/lib/db4/libdb.a
libtool: install: strip --strip-debug 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/lib/db4/libdb.a
libtool: install: 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/bin/install -c -s -m 755 -p 
-m 644 ./.libs/libdb.so.5.0 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/fake-amd64-no_java-bootstrap-no_tcl/usr/local/lib/db4/libdb.so.5.0
libtool: install: 
/usr/ports/pobj/db-4.6.21-no_java-bootstrap-no_tcl/bin/install -c -m 7

Re: Ethernet not working

2015-11-04 Thread Jonathan Gray
On Wed, Nov 04, 2015 at 10:15:11AM +0100, Stefan Sperling wrote:
> On Wed, Nov 04, 2015 at 01:53:33PM +0530, Jay Patel wrote:
> > "Attansic Technology AR8172" rev 0x10 at pci1 dev 0 function 0 not 
> > configured
> 
> That's your ethernet device. The 'not configured' message means
> there is no driver support in OpenBSD for this device yet.
> 
> It looks like Linux has a driver for it, called alx.
> 
> FreeBSD does not have a driver for this device either.

FreeBSD and NetBSD had sizable patches to alc(4) to support
that and related variants.  Anyone interested in making
these parts work should look at those patches.



Re: queueing example on pf.conf man page

2015-11-04 Thread David Dahlberg
Am Mittwoch, den 04.11.2015, 10:09 +0800 schrieb Glenn Faustino:


> I notice that under queueing section of the pf.conf man page the total
> child queues bandwidth exceed what's defined in the parent.

Oops, now I found the /other/ example #|

> Can the bandwidth on the child queues exceed what's defined in the
> parent?

Yes, it can. But probably it shouldn't be like this in the example.

Index: pf.conf.5
===
RCS file: /cvs/src/share/man/man5/pf.conf.5,v
retrieving revision 1.545
diff -u -p -u -r1.545 pf.conf.5
--- pf.conf.5   16 Feb 2015 21:43:10 -  1.545
+++ pf.conf.5   4 Nov 2015 09:23:59 -
@@ -1547,8 +1547,8 @@ The queues are then referenced by filter
 above).
 .Bd -literal -offset 4n
 queue rootq on em0 bandwidth 100M max 100M
-queue http parent rootq bandwidth 60M burst 90M for 100ms
-queue  developers parent http bandwidth 45M
+queue http parent rootq bandwidth 50M burst 75M for 100ms
+queue  developers parent http bandwidth 35M
 queue  employees parent http bandwidth 15M
 queue mail parent rootq bandwidth 10M
 queue ssh parent rootq bandwidth 20M



Re: how to transfer the image of qemu to real machine

2015-11-04 Thread Jan Vlach
Hello Tuyosi,

> 4)/MNT/usr/sbin/installboot sd1

try:
/MNT/usr/sbin/installboot -r /MNT sd1

I've always transferred systems using dump & restore to be on the safe side 
though.



Re: Ethernet not working

2015-11-04 Thread Jay Patel
Okay.. Thanks ..

On Wed, Nov 4, 2015 at 2:45 PM, Stefan Sperling  wrote:

> On Wed, Nov 04, 2015 at 01:53:33PM +0530, Jay Patel wrote:
> > "Attansic Technology AR8172" rev 0x10 at pci1 dev 0 function 0 not
> configured
>
> That's your ethernet device. The 'not configured' message means
> there is no driver support in OpenBSD for this device yet.
>
> It looks like Linux has a driver for it, called alx.
>
> FreeBSD does not have a driver for this device either.
>
> It's possible that an entirely new driver must be written to make
> this device work with OpenBSD. So this will take time and more
> importantly someone who has the skill and motivation to write it.
>
> For now, you'll be happier using a supported USB ethernet adapter.
> The axen(4) driver supports models currently being sold.
> Some model names are listed here:
>
> http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/axen.4?query=axen
>
> Or perhaps you can still find an older model supported by axe(4):
> http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/axe.4?query=axe
>
> Another option are devices supported by the generic USB Ethernet device
> driver cdce(4). These devices use a standard USB interface so a custom
> driver is not required. Apart from devices listed at
>
> http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/cdce.4?query=cdce
> the "Lenovo Thinkpad USB 3.0 Ethernet adapter" will also work with this.



Re: Ethernet not working

2015-11-04 Thread Stefan Sperling
On Wed, Nov 04, 2015 at 01:53:33PM +0530, Jay Patel wrote:
> "Attansic Technology AR8172" rev 0x10 at pci1 dev 0 function 0 not configured

That's your ethernet device. The 'not configured' message means
there is no driver support in OpenBSD for this device yet.

It looks like Linux has a driver for it, called alx.

FreeBSD does not have a driver for this device either.

It's possible that an entirely new driver must be written to make
this device work with OpenBSD. So this will take time and more
importantly someone who has the skill and motivation to write it.

For now, you'll be happier using a supported USB ethernet adapter.
The axen(4) driver supports models currently being sold.
Some model names are listed here:
http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/axen.4?query=axen

Or perhaps you can still find an older model supported by axe(4):
http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/axe.4?query=axe

Another option are devices supported by the generic USB Ethernet device
driver cdce(4). These devices use a standard USB interface so a custom
driver is not required. Apart from devices listed at
http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/cdce.4?query=cdce
the "Lenovo Thinkpad USB 3.0 Ethernet adapter" will also work with this.



Re: Ethernet not working

2015-11-04 Thread Jay Patel
okay...

OpenBSD 5.7 (GENERIC.MP) #881: Sun Mar  8 11:04:17 MDT 2015

   dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

RTC BIOS diagnostic error 80

real mem = 2026876928 (1932MB)

avail mem = 1968992256 (1877MB)

mpath0 at root

scsibus0 at mpath0: 256 targets

mainbus0 at root

bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xe6fd0 (59 entries)

bios0: vendor LENOVO version "78CN24WW(V2.02)" date 09/23/2013

bios0: LENOVO 20236

acpi0 at bios0: rev 2

acpi0: sleep states S0 S3 S4 S5

acpi0: tables DSDT FACP SLIC UEFI ASF! HPET APIC MCFG SSDT BOOT ASPT DBGP
FPDT SSDT SSDT

acpi0: wakeup devices P0P1(S0) EHC1(S3) EHC2(S3) XHC_(S3) HDEF(S0) PXSX(S3)
PXSX(S3) PXSX(S3) PXSX(S3) PXSX(S3) RP05(S0) PXSX(S3) RP06(S0) PXSX(S3)
RP07(S0) PXSX(S3) [...]

acpitimer0 at acpi0: 3579545 Hz, 24 bits

acpihpet0 at acpi0: 14318179 Hz

acpimadt0 at acpi0 addr 0xfee0: PC-AT compat

cpu0 at mainbus0: apid 0 (boot processor)

cpu0: Intel(R) Pentium(R) CPU 2020M @ 2.40GHz, 2394.88 MHz

cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE
,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS

cpu0: 256KB 64b/line 8-way L2 cache

cpu0: smt 0, core 0, package 0

mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges

cpu0: apic clock running at 99MHz

cpu0: mwait min=64, max=64, C-substates=0.2.1.1.2, IBE

cpu1 at mainbus0: apid 2 (application processor)

cpu1: Intel(R) Pentium(R) CPU 2020M @ 2.40GHz, 2394.56 MHz

cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE
,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS

cpu1: 256KB 64b/line 8-way L2 cache

cpu1: smt 0, core 1, package 0

ioapic0 at mainbus0: apid 0 pa 0xfec0, version 20, 24 pins

acpimcfg0 at acpi0 addr 0xf000, bus 0-63

acpiprt0 at acpi0: bus 0 (PCI0)

acpiprt1 at acpi0: bus -1 (P0P1)

acpiprt2 at acpi0: bus 1 (RP01)

acpiprt3 at acpi0: bus 2 (RP02)

acpiprt4 at acpi0: bus -1 (RP03)

acpiprt5 at acpi0: bus -1 (RP04)

acpiprt6 at acpi0: bus -1 (RP05)

acpiprt7 at acpi0: bus -1 (RP06)

acpiprt8 at acpi0: bus -1 (RP07)

acpiprt9 at acpi0: bus -1 (RP08)

acpiprt10 at acpi0: bus -1 (PEG0)

acpiprt11 at acpi0: bus -1 (PEG1)

acpiprt12 at acpi0: bus -1 (PEG2)

acpiprt13 at acpi0: bus -1 (PEG3)

acpiec0 at acpi0

acpicpu0 at acpi0: C3, C2, C1, PSS

acpicpu1 at acpi0: C3, C2, C1, PSS

acpitz0 at acpi0: critical temperature is 127 degC

acpibtn0 at acpi0: PWRB

acpibat0 at acpi0: BAT1 model "PABAS0241231" serial 41167 type Li-Ion oem
"LENOVO "

acpiac0 at acpi0: AC unit offline

acpibtn1 at acpi0: LID0

acpivideo0 at acpi0: VGA_

acpivideo1 at acpi0: VGA_

acpivideo2 at acpi0: GFX0

acpivout0 at acpivideo2: DD02

cpu0: Enhanced SpeedStep 2394 MHz: speeds: 2400, 2300, 2200, 2100, 2000,
1900, 1800, 1700, 1600, 1500, 1400, 1300, 1200 MHz

pci0 at mainbus0 bus 0

pchb0 at pci0 dev 0 function 0 "Intel Core 3G Host" rev 0x09

vga1 at pci0 dev 2 function 0 "Intel HD Graphics 2500" rev 0x09

intagp at vga1 not configured

inteldrm0 at vga1

drm0 at inteldrm0

inteldrm0: 1366x768

wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)

wsdisplay0: screen 1-5 added (std, vt100 emulation)

xhci0 at pci0 dev 20 function 0 "Intel 7 Series xHCI" rev 0x04: msi

usb0 at xhci0: USB revision 3.0

uhub0 at usb0 "Intel xHCI root hub" rev 3.00/1.00 addr 1

"Intel 7 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured

ehci0 at pci0 dev 26 function 0 "Intel 7 Series USB" rev 0x04: apic 0 int 16

ehci0: timed out waiting for BIOS

usb1 at ehci0: USB revision 2.0

uhub1 at usb1 "Intel EHCI root hub" rev 2.00/1.00 addr 1

azalia0 at pci0 dev 27 function 0 "Intel 7 Series HD Audio" rev 0x04: msi

azalia0: codecs: Conexant/0x5115, Intel/0x2806, using Conexant/0x5115

audio0 at azalia0

ppb0 at pci0 dev 28 function 0 "Intel 7 Series PCIE" rev 0xc4: msi

pci1 at ppb0 bus 1

"Attansic Technology AR8172" rev 0x10 at pci1 dev 0 function 0 not
configured

ppb1 at pci0 dev 28 function 1 "Intel 7 Series PCIE" rev 0xc4: msi

pci2 at ppb1 bus 2

iwn0 at pci2 dev 0 function 0 "Intel Centrino Wireless-N 135" rev 0xc4:
msi, MIMO 1T1R, BGN, address 0c:d2:92:72:f5:65

ehci1 at pci0 dev 29 function 0 "Intel 7 Series USB" rev 0x04: apic 0 int 23

ehci1: timed out waiting for BIOS

usb2 at ehci1: USB revision 2.0

uhub2 at usb2 "Intel EHCI root hub" rev 2.00/1.00 addr 1

pcib0 at pci0 dev 31 function 0 "Intel HM70 LPC" rev 0x04

ahci0 at pci0 dev 31 function 2 "Intel 7 Series AHCI" rev 0x04: msi, AHCI
1.3

scsibus1 at ahci0: 32 targets

sd0 at scsibus1 targ 0 lun 0:  SCSI3 0/direct
fixed naa.5000c5006dfc1397

sd0: 476940MB, 512 bytes/sector, 976773168 sectors

cd0 at scsibus1 targ 2 lun 0:  ATAPI 5/cdrom
removable

ichiic0 at 

Re: how to transfer the image of qemu to real machine

2015-11-04 Thread Stuart Henderson
On 2015-11-04, Tuyosi Takesima  wrote:
> Hi all .
>
> i  use only one PC which is dual boot and has USB HDD(sd1) .
> i  write down my procedures .
>
> 1)on linux machine , i boot openbsd by kvm and follow current .
>   and so the qcow2 image of OpenBSD-current.img was made .
>   and then i copy OpenBSD-current.img to ext2 area .

Can you use qemu-img to convert it to a raw image to dd to the disk?



Re: queueing example on pf.conf man page

2015-11-04 Thread David Dahlberg
Am Mittwoch, den 04.11.2015, 13:37 +1100 schrieb Jason Tubnor:

> While pf(4) will let you define and load queues that exceed the parent
> (top
> level) queue, when you start to load up your queues, you'll get
> congestion
> defeating the purpose of queuing.  To what point, depends on your
> environment.

As long as you do not get congestion, you do not get queuing.

If I understood henning@ correctly, what you get is an H-FSC-like queue.
What is being defined width "bandwidth" is the "link-share service
curve".

pf.conf(5) let's you specify an absolute "bandwidth" parameter, because
this format is more convenient and fits the typical workflow, rather
than a "m2" parameter. Basically it determines in which ratio the
bandwidth is shared between the flows (if and only iff there happens to
be congestion).

So 10M/10M/80M (that is what my pf.conf(5) says by the way) is exactly
the same as 1M/1M/8M or 20M/20M/160M.

> "All bandwidth values must be specified as an absolute value.  The
> suffixes K, M, and G are used to represent bits, kilobits, megabits,
> and
> gigabits per second, respectively.  The value must not exceed the
> interface bandwidth."

That is what is says, indeed. But AFAIK, this is only true for the
"root" queue because otherwise it won't have any effect.

    -dd