Re: Secure PKG_PATH for doas

[Ted Unangst]

Igor Mironov wrote:
> The packages and ports' FAQ mentions that those using doas need to pass 
> keepenv { PKG_PATH } in the config file. Is there a way to instruct doas to 
> take PKG_PATH (or another variable) from the target account's environment 
> (~/.profile)?

No, but you can easily write a shell wrapper that sets things up and calls
pkg_add.

Re: Secure PKG_PATH for doas

[Stuart Henderson]

On 2016-05-18, Igor Mironov  wrote:
> The packages and ports' FAQ mentions that those using doas need to pass 
> keepenv { PKG_PATH } in the config file. Is there a way to instruct doas to 
> take PKG_PATH (or another variable) from the target account's environment 
> (~/.profile)?

Not unless you let the target account run a shell.

The simplest way is probably to avoid using PKG_PATH (don't
set it in keepenv) and put the path in /etc/pkg.conf instead.

Secure PKG_PATH for doas

[Igor Mironov]

The packages and ports' FAQ mentions that those using doas need to pass keepenv 
{ PKG_PATH } in the config file. Is there a way to instruct doas to take 
PKG_PATH (or another variable) from the target account's environment 
(~/.profile)?

Re: Suggestion: new webpage for openbsd.org

[arrowscript]

>Is this thread to be taking serious?

That's exactly my thought, Mihai. I think this thread fall
under the "Poe's Law":
https://en.wikipedia.org/wiki/Poe%27s_law

>lists () wrant ! com wrote:
>As most development is done on mobile phones these days

This doesn't mean the only sane operating system these days 
need to get inside this mobile madness too. What's the next step 
here? Put all the content under javascript? Use CloudFlare? 
Oh, get Open Sans from Google servers, sure.
Nice css from html5doctor.com , by the way.
If someone are going to implement it, at least remove the reset.css
and the google font. Serious, that's disgusting. Could also put the css
inline with 

Re: Comprehensive user's/programmer's manual for OpenBSD: Do they exist?

[David Lou]

Thanks for the response everyone. I tinkered with the system a bit
more and the manpages were indeed better than what I expected, so
in hindsight my question wasn't very informed. Based on the
responses, it seems like OpenBSD does not deviate much from any
Unix-like operating systems. I also picked up Design and
implementation of the 4.4BSD Operating System and that book really
speaks to me. It tells me what I want to hear in terms of how the
system operates, and also how the system DOESN'T operate: like how
system calls are the only interface to the kernel, and nothing else.
I hope most of the things on there is still correct in OpenBSD
though.

Anyway, I didn't want to pollute the mailing list with too much idle
chitchat but it would be nice if there is a way to close a topic that
I already feel has been answered satisfactorily because I feel
somewhat guilty having people spend their time answering a question
that I've already ``outgrown''. This community is really different...
people really go out of their way to provide good answers to people's
questions! :)

Re: Suggestion: new webpage for openbsd.org

[lists]

Wed, 18 May 2016 18:08:52 +0200 Joakim Frostegård

>
> Everybody, thanks for the constructive feedback. As for the snarky
> neo-luddite remarks, they were entertaining too [...]
> I changed the colors a bit. Now, the contrast between the links and the
> background is a lot better.

Excellent, this now looks just perfect live on [http://www.openbsd.org/].

> The site works OK in Dillo  too, though the old site still looks better.

Well, spot on, mailing you best wishes for ongoing work on fixing Dillo
to work with the new site, once it gets broadcast to all mirrors of git.

> Then, I don't think doing layout solely with tables belongs in 2016, and
> browsers should support floating elements.

Large planetary body of spreadsheets cried in a silent EMP ripple in time.

> The site works fine in links, elinks and w3m too, except that the header is
> shown twice. I think it's more important to have good mobile support than
> perfect console browser support. Actually, bad mobile support is one of the
> biggest problems with the current site.

As most development is done on mobile phones these days, have you
considered a colour slider and automatic font sizing at all PPIs?

> I think it's OK that the menu doesn't have a different background color, it
> still stands out IMO.

It was already mentioned as one very critical
area of special interest, please revisit this.

> There's a LICENSE file in the repo now, and I'll be having a look at
> generating diffs against the www module.

It's probable some emails are not responded to, please don't take it
personal if only people with much free time decide to dedicate some.

> I'm not sure if I'm qualified to do any translations,

Well you sure are qualified to do web sights, this means translations
and technical expertise in all areas discussed on these web documents.

> I'm not a native English speaker. And about $ whois 'we', I can to
> it, but I wanted to post to the list first.

Oh, never-mind, anon is just fine for hosting content on free sites.

> > > I do not see how this is improving the life of the developers who are
> > > doing a fantastic job building a great operating system.
> >
> > What about improving the life of admins and users who are doing a
> > fantastic job with help of a great operating system?
> >
> > That being said, i like current page better :)
> > --
> > Before enlightenment - chop wood, draw water.
> > After  enlightenment - chop wood, draw water.

Re: Suggestion: new webpage for openbsd.org

[Mihai Popescu]

Is this thread to be taking serious?

Re: Two athn devices acting weird

[Mihai Popescu]

> I don't know why I was stuck with the one-option-per-line configuration.. :-/

More readable. But you have to use the \
mark. I was using it a lot in hostanem.pppoe0, but never figured out
it can mess things so badly.

Re: Suggestion: new webpage for openbsd.org

[Adam Wolk]

On Wed, 18 May 2016 18:08:52 +0200
Joakim Frostegård  wrote:

> Everybody, thanks for the constructive feedback. As for the snarky
> neo-luddite remarks, they were entertaining too ;-) No, I'm not a
> product of new-age college professors wanting to demolish the
> Colosseum., though HTML5 and mobile support is nice.
>
> When it comes to searching the archives, I did have a look but not a
> very long one. Sorry about that.
>
> I changed the colors a bit. Now, the contrast between the links and
> the background is a lot better.
>

The colors look better now.

> The site works OK in Dillo  too, though the old site still looks
> better. Then, I don't think doing layout solely with tables belongs
> in 2016, and browsers should support floating elements.
>
> The site works fine in links, elinks and w3m too, except that the
> header is shown twice. I think it's more important to have good
> mobile support than perfect console browser support. Actually, bad
> mobile support is one of the biggest problems with the current site.
>

I personally like the suggested redesign overall. It still feels light
and minimalistic. Thank you for spending time on it and not being
afraid to hit misc@ for feedback :)

In general, what I feel is missing is a place to have the server rack
photo there (see lower left on current website) and a way to
integrate the current release theme (main site sports a 5.9 banner now).

Regards,
Adam

Re: libcrypto errata

[Jorge Luiz Silva Peixoto]

Hello folks!

I applied 005_crypto patch on OpenBSD 5.9 -release.

After that, I get an error if I run:
$ openssl crl -in acserprorfbv3.crl -inform DER
unable to load CRL
19710855970772:error:0D07809F:asn1 encoding
routines:ASN1_ITEM_EX_D2I:unexpected
eoc:/usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/asn1/tasn_dec.c:368:Type=X509_REVOKED
19710855970772:error:0D08303A:asn1 encoding
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1
error:/usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/asn1/tasn_dec.c:621:Field=revoked,
Type=X509_CRL_INFO
19710855970772:error:0D08303A:asn1 encoding
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1
error:/usr/src/lib/libcrypto/crypto/../../libssl/src/crypto/asn1/tasn_dec.c:653:Field=crl,
Type=X509_CRL

OpenBSD 5.9 is shipped with LibreSSL 2.3.2. The error above also
happens with the lastest version (2.3.4).

The command runs nicely when using OpenSSL 1.0.2h.

All tests were done on the same system: OpenBSD 5.9 GENERIC.MP amd64.

The certificate revocation list used in this test can be fetched here
-> http://ccd.serpro.gov.br/lcr/acserprorfbv3.crl

Regards,
Jorge Peixoto


2016-05-03 11:32 GMT-03:00 Ted Unangst :
> OpenSSL announced several issues today that also affect LibreSSL.
>
> - Memory corruption in the ASN.1 encoder (CVE-2016-2108)
> - Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
> - EVP_EncodeUpdate overflow (CVE-2016-2105)
> - EVP_EncryptUpdate overflow (CVE-2016-2106)
> - ASN.1 BIO excessive memory allocation (CVE-2016-2109)
>
> Thanks to OpenSSL for providing information and patches.
>
> Refer to https://www.openssl.org/news/secadv/20160503.txt
>
> Patches for OpenBSD are available:
>
> http://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/005_crypto.patch.sig
>
> http://ftp.openbsd.org/pub/OpenBSD/patches/5.8/common/013_crypto.patch.sig

Re: Suggestion: new webpage for openbsd.org

[Gilles Chehade]

On Wed, May 18, 2016 at 06:08:52PM +0200, Joakim Frosteg??rd wrote:
>
> [...]
> 
> @Gilles Chehade:
> If you're not being sarcastic, I would be happy to contribute to that
> project as well.
> 

Didn't know I came off sarcastic naturally, achievement unlocked !

I wasn't sarcastic, nope ;-)


-- 
Gilles Chehade

https://www.poolp.org  @poolpOrg

rdomains, isakmpd, keep state (if-bound)

[utob]

hi,

i'm using a carp+vlan+trunk setup and isakmpd.
after migrating to rdomains, i've planned to have $ext_if
and isakmpd+enc0 in different rdomains, but that didn't
work out, as nothing would listen on $ext_if:500 then.

the main thing is, that communication via enc0 is only
possible if i drop the (if-bound) option.

# not able to reach ntp
pass in on enc0 proto udp from $remote to $ntp \
port 123 keep state (if-bound) rtable 15

# works
pass in on enc0 proto udp from $remote to $ntp \
port 123 rtable 15

i'd like to understand the technical reason (or what
to change if needed) why you cannot use if-bound with
rdomains.

thanks

Re: vi vs emacs, which one makes me look more smart in front of my friends?

[john o goyo]

On 18/05/2016 06:11, Roderick wrote:

It seems, the troll was successfull by generating a discussion. :)

You cannot compare sam with ed. The first is not a line editor.


Methinks that Joel was referring to the ed joke: 
http://www.gnu.org/fun/jokes/ed-msg.html


jog


Plan9 has a lot of conceptual improvements over Unix/BSD.
See: http://doc.cat-v.org/plan_9/4th_edition/papers/sam/

Rodrigo.


On Wed, 18 May 2016, Joel Wir�mu Pauling wrote:


ed()

QED.


On 18 May 2016 at 14:33, Lyndon Nerenberg  wrote:


acme(1)


Or sam(1) if you are a purist.

Re: Suggestion: new webpage for openbsd.org

[Pavan Maddamsetti]

On May 18, 2016 1:49 PM,  wrote:
>
> this is not a community for Iphone hipsters.
> Stop trying to push your user centered design bullshit.

Ouch. I wouldn't put it in those words, but you are sure to encounter
resistance when "fixing" things that are not broken. Perhaps you could
create your own fan site dedicated to OpenBSD, and not only use your own
graphical layout, but create your own unique content as well.

panic: root device not found, SD card boot issue

[Robert Campbell]

I have a clean 5.9 install on a new PC Engines apu2c4. I've installed to a
new SDHC 32GB SanDisk card which acts as my boot disk. The majority of the
time it boots fine, whlie other times it fails. I've copied below first the
failure sequence, followed by a successful sequence to compare. The key
seems to be that in the cases of failure sd/scsibus is not attached to
sdmmc, with the following error:

sdmmc0: can't identify card
sdmmc0: no functions

which I've seen before when booting with the SD card unformatted, new from
the manufacturer. Once I formatted it with ExFAT it properly picked up
sd/scsibus, and I was able to install and (usually) boot + operate fine.
This is what is shown during good boots:

scsibus2 at sdmmc0: 2 targets, initiator 0
sd1 at scsibus2 targ 1 lun 0:  SCSI2 0/direct fixed
sd1: 30436MB, 512 bytes/sector, 62333952 sectors

where sd1 is my SD boot drive where OpenBSD is installed. I wasn't able to
"mach ddbcpu 0/1/2/3" as the ddb bug submission guide recommends despite
having a quad core processor. Trying 1, for example, simply stopped all
serial console I/O.


BAD BOOT:


PCEngines apu2
coreboot build 20160307
4080 MB ECC DRAM

SeaBIOS (version ?-20160307_153453-michael-desktop64)
Found mainboard PC Engines PCEngines apu2
multiboot: eax=0, ebx=0
boot order:
1: /pci@i0cf8/usb@10/usb-*@1
2: /pci@i0cf8/usb@10/usb-*@2
3: /pci@i0cf8/usb@10/usb-*@3
4: /pci@i0cf8/usb@10/usb-*@4
5: /pci@i0cf8/*@14,7
6: /pci@i0cf8/*@11/drive@0/disk@0
7: /pci@i0cf8/*@11/drive@1/disk@0
8: /rom@genroms/pxe.rom
9: pxen0
10: scon1
11:
Found 23 PCI devices (max PCI bus is 04)
Copying SMBIOS entry point from 0xdffb7000 to 0x000f3110
Copying ACPI RSDP from 0xdffb8000 to 0x000f30e0
Copying MPTABLE from 0xdffdc000/dffdc010 to 0x000f2f30
Copying PIR from 0xdffdd000 to 0x000f2f00
Using pmtimer, ioport 0x818
Scan for VGA option rom
Running option rom at c000:0003

Google, Inc.
Serial Graphics Adapter 08/22/15
SGABIOS $Id: sgabios.S 8 2010-04-22 00:03:40Z nlaredo $
(wiv@coreboot-Virtual-Machine) Sat Aug 22 09:25:30 UTC 2015
Term: 158x44
IO4 0
Turning on vga text mode console
SeaBIOS (version ?-20160307_153453-michael-desktop64)
XHCI init on dev 00:10.0: regs @ 0xfea22000, 4 ports, 32 slots, 32 byte
contexts
XHCIextcap 0x1 @ fea22500
XHCIprotocol USB  3.00, 2 ports (offset 1), def 0
XHCIprotocol USB  2.00, 2 ports (offset 3), def 10
XHCIextcap 0xa @ fea22540
Found 2 serial ports
ATA controller 1 at 4010/4020/0 (irq 0 dev 88)
EHCI init on dev 00:13.0 (regs=0xfea25420)
ATA controller 2 at 4018/4024/0 (irq 0 dev 88)
Searching bootorder for: /pci@i0cf8/*@14,7
Searching bootorder for: /rom@img/memtest
Searching bootorder for: /rom@img/setup
ata0-0: Samsung SSD 850 EVO mSATA 120GB ATA-9 Hard-Disk (111 GiBytes)
Searching bootorder for: /pci@i0cf8/*@11/drive@0/disk@0
Found sdcard at 0xfea25500: SD card SL32G 30436MiB
XHCI no devices found
Initialized USB HUB (0 ports used)
All threads complete.
Scan for option roms
PCengines Press F10 key now for boot menu:
Searching bootorder for: HALT
drive 0x000f2e60: PCHS=0/0/0 translation=lba LCHS=1024/255/63 s=62333952
drive 0x000f2e90: PCHS=16383/16/63 translation=lba LCHS=1024/255/63
s=234441648
Space available for UMB: c1000-ef000, f-f2e60
Returned 262144 bytes of ZoneHigh
e820 map has 7 items:
  0:  - 0009f800 = 1 RAM
  1: 0009f800 - 000a = 2 RESERVED
  2: 000f - 0010 = 2 RESERVED
  3: 0010 - dffae000 = 1 RAM
  4: dffae000 - e000 = 2 RESERVED
  5: f800 - fc00 = 2 RESERVED
  6: 0001 - 00011f00 = 1 RAM
enter handle_19:
  NULL
Booting from Hard Disk...
Booting from :7c00
Using drive 0, partition 3.
Loading.
probing: pc0 com0 com1 mem[638K 3582M 496M a20=on]
disk: hd0+ hd1+*
>> OpenBSD/amd64 BOOT 3.30
|/-\|/-switching console to com0
>> OpenBSD/amd64 BOOT 3.30
boot>
\|/-\|/booting hd0a:/bsd:
-\|/-6882804\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|
/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\
|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/
-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|
/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-
\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/
-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\
|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-
\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|
/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\
|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/
-\|/-\+2174256|/-\|/-\|/-\|/-\|/-\|/-\|/-\|

Re: Suggestion: new webpage for openbsd.org

[arrowscript]

>I think it's more important to have good mobile support than
perfect console browser support.

I agree with Kamil, this is not a community for Iphone hipsters.
Stop trying to push your user centered design bullshit. Also, no
requests for outside servers should be done, and your template uses
google font.
Many people here use text-based browsers daily. There's many reasons
to do that: speed, security, don't require Xenocara, etc.

Re: Suggestion: new webpage for openbsd.org

[Kamil Cholewiński]

On Wed, 18 May 2016, Joakim Frostegård  wrote:
> I think it's more important to have good mobile support than perfect
> console browser support. Actually, bad mobile support is one of the
> biggest problems with the current site.

You have to cater to your audience... I'm quite sure there are many
people in OpenBSD's user base that would appreciate decent support for
"low-fi" browsers much more than being mobile-friendly. That is, there
is value in the latter, as long as the former is not hurt in the
process.

Cheers!
K.

Re: Suggestion: new webpage for openbsd.org

[Joakim Frostegård]

Everybody, thanks for the constructive feedback. As for the snarky
neo-luddite remarks, they were entertaining too ;-) No, I'm not a product
of new-age college professors wanting to demolish the Colosseum., though
HTML5 and mobile support is nice.

When it comes to searching the archives, I did have a look but not a very
long one. Sorry about that.

I changed the colors a bit. Now, the contrast between the links and the
background is a lot better.

The site works OK in Dillo  too, though the old site still looks better.
Then, I don't think doing layout solely with tables belongs in 2016, and
browsers should support floating elements.

The site works fine in links, elinks and w3m too, except that the header is
shown twice. I think it's more important to have good mobile support than
perfect console browser support. Actually, bad mobile support is one of the
biggest problems with the current site.

I think it's OK that the menu doesn't have a different background color, it
still stands out IMO.

There's a LICENSE file in the repo now, and I'll be having a look at
generating diffs against the www module.

@Gilles Chehade:
If you're not being sarcastic, I would be happy to contribute to that
project as well.

@li...@wrant.com
I'm not sure if I'm qualified to do any translations, I'm not a native
English speaker. And about  $ whois whe, I can to it, but I wanted to post
to the list first.




2016-05-17 11:02 GMT+02:00 Marko Cupać :

> On Tue, 17 May 2016 09:23:26 +0100
> Fred  wrote:
>
> > I do not see how this is improving the life of the developers who are
> > doing a fantastic job building a great operating system.
>
> What about improving the life of admins and users who are doing a
> fantastic job with help of a great operating system?
>
> That being said, i like current page better :)
> --
> Before enlightenment - chop wood, draw water.
> After  enlightenment - chop wood, draw water.
>
> Marko Cupać
> https://www.mimar.rs/

Re: Is loss of read-only /usr permanent?

[bytevolcano]

li...@wrant.com wrote:
> Defending read only file systems on a writable medium is pointless, but
> your option, which does not qualify as a bug report.  Now read one book.

Wrant, calm down and curb the attitude please.
You often come up with good stuff here, and there are even things you have said 
in this thread which I agree with, but show this attitude the door.
Snide remarks and associated rudeness (eg. "Now read one book"), 
unsubstantiated blanket statements (eg. "X is pointless"), and baseless 
accusations (eg. while discussing UPS issues) do not add anything of value to 
this discussion.
This wasn't a bug report either. This was mainly asking for clarification about 
what's going on; that's what was given.

Just because people come up with reasoning that you don't agree with, doesn't 
automatically make it dumb or pointless.

Re: Is loss of read-only /usr permanent?

[lists]

Tue, 17 May 2016 19:45:55 +0100 Kevin Chadwick 
> > > UPS do fail too btw. I had to rip some cheap APC ones out because
> > > they caused more downtime than they saved!
> > 
> > Did you just copy paste this line from somewhere?  You can't handle a
> > battery replacement, and you're advising read only file system mounts.  
> 
> I sometimes agree with some things you say but boy are you way too hot
> headed.

Defending read only file systems on a writable medium is pointless, but
your option, which does not qualify as a bug report.  Now read one book.

Re: Comprehensive user's/programmer's manual for OpenBSD: Do they exist?

[Pavan Maddamsetti]

There's a nice book for absolute beginners called "The Unix Programming
Environment" by Kernighan and Pike.

Re: Static webpages with OpenBSD - success stories

[lists]

Wed, 18 May 2016 01:34:24 +0200 Ingo Schwarze 
> Hi Predrag,
> 
> Predrag Punosevac wrote on Tue, May 17, 2016 at 06:59:15PM -0400:
> 
> > OpenBSD is shipped with the static webpage generator (sort of).
> > It is called mandoc.  man mandoc and check out -T html switch.  

Not in the sense web site publishers understand it, without mid layer.

> That one is a bit specialized: for manual pages.  =:c)

Because the main application directs semantics derivation from many
years of improvements.  This is why slapping an extra application
results in mere rarely used features or rather changes that deviate
and possibly interfere with the main original semantics application.

> True, i once heard of one developer who used it for creating a small
> static website that had nothing to do with manuals.  But i must
> admit it's not really intended as a general-purpose tool.

But there are exports from mandoc(1) that look stunningly beautiful.

mandoc - format and display UNIX manuals: Output Formats
[http://man.openbsd.org/OpenBSD-current/man1/mandoc.1#Output_Formats]

Check the -T option with html and pdf output, this is incredibly good.

mandoc_char - mandoc special characters
[http://man.openbsd.org/OpenBSD-current/man7/mandoc_char.7]

NB: I think http://man.openbsd.org/mandoc ought to work, magic touch?

Would be nice to see how people make it work for them anyway still ;-)

> > If you ask me this 
> >   http://mdocml.bsd.lv/
> > and this 
> >   http://manpages.bsd.lv/history.html
> > are pretty darn good looking static websites.
> > They are generated with mandoc.  
> 
> Sorry, no, they aren't, they were written by hand, mostly by Kristaps.
> They are merely using a stylesheet that slightly resembles the
> mandoc.css stylesheet.
> 
> But here are a few static webpages generated by mandoc(1) -Thtml:
> 
>   http://mdocml.bsd.lv/man/
> 
> Basically, all the links of the form "name(section)" on that
> page, and on the pages you can reach from there.
> 
> Ironically, the same pages on
> 
>   http://man.openbsd.org/
> 
> are not statically pregenerated, but dynamically generated
> on demand.  But the user will hardly care.
> 
> Yours,
>   Ingo

Thanks for bringing this up, hopefully someday org-mode
[http://orgmode.org/] gets an output export for mandoc.

Org-mode manual - Exporting
[http://orgmode.org/manual/Exporting.html]

P.S. Does Emacs have a well functioning mandoc mode, or similar?

Re: vi vs emacs, which one makes me look more smart in front of my friends?

[sid77]

- Original Message -
> In all seriousness, Richard Stallman incurred a repetitive stress injury
> from using emacs commands. Holding down Ctrl or Alt can be bad for your
> health. That's why I generally use vi even though there are things I don't
> like and wish there were a better choice by default.

For your use case, might be worth exploring http://spacemacs.org/ then.
I'm personally sticking to Vi[m] and never tried that hybrid editor but
some friend of mine is enthusiastic about it as it allegedly combines the
best of both worlds (Emacs engine, Vi key bindings).

Cheers,
Marco

-- 
Marco Bonetti

Re: hostname.carp - CARP Bootup Woes Correct layout / format for >=5.9 - man page for hostname.carp

[Andy Lemin]

Hi Martin,

Thanks for your suggestion.

Indeed it does clear the SIOCAIFADDR errors, however there are new errors
and the config is more unstable :(

- New boot errors are; "carp0: master_down event in INIT state"

- Instability after the firewall has booted; CARP statuses initialise as
Backup (and don't go Master temporarily) as they should do. Great..
But, if we now run "sh /etc/netstart" to make any change, the CARP
interfaces fall into "status: invalid" and cannot be made functional again
until another reboot.


The previous config with the SIOCAIFADDR errors is more stable, because at
least we can run "sh /etc/netstart" and make changes to the firewall
without needing a reboot each time?

What do you think is going on?
And just to play devils advocate, why is there not a man page for
hostname.carp?

New hostname.carp0
carpdev ix0 advbase 2 advskew 10 carppeer 10.255.12.3 pass testpass vhid 212
inet 10.255.12.1 255.255.255.0 10.255.12.255
inet6 2a00:77e0:255:12::1 64
inet6 eui64
description "4D_CDC_VPLS"

Cheers, Andy.


On Tue, May 17, 2016 at 5:37 PM, Martin Pieuchot  wrote:

> On 17/05/16(Tue) 16:37, Andy Lemin wrote:
> > Hi Misc,
> >
> > Since 5.9 (maybe earlier), we noticed that our CARP interfaces no longer
> > behave as before, don't initialise properly on boot up, and throw errors
> at
> > boot.
> >
> > I know there has been lots of changes, especially IPv6. So hopefully this
> > is a simple question and I'm just being stupid, and unable to find a man
> > page that explains the correct format for hostname.carp ?
> >
> >
> > Otherwise if their really is no man page for hostname.carp, then could
> > someone please point us in the right direction.
> >
> > - Using the following examples;
> > hostname.ix0
> > inet 10.255.12.2 255.255.255.0 10.255.12.255
> > inet6 2a00:77e0:255:12::2 64
> > inet6 eui64
> > description "BACKHAUL"
> > !route add -net 10.1.0.0/16 10.255.12.254
> >
> > hostname.carp0
> > inet 10.255.12.1 255.255.255.0 10.255.12.255
> > inet6 2a00:77e0:255:12::1 64
> > advbase 2 advskew 10 carpdev ix0 carppeer 10.255.12.3 pass testpass vhid
> 212
> > inet6 eui64
> > description "BACKHAUL"
> >
> > - The following errors at boot are seen multiple times;
> > ifconfig: SIOCAIFADDR: Invalid argument
>
> That's because you're trying to add addresses *before* configuring
> a "carpdev" (parent) interface.

Re: Comprehensive user's/programmer's manual for OpenBSD: Do they exist?

[Luca Ferrari]

On Sat, May 7, 2016 at 1:12 PM, David Lou  wrote:
> I wasn't able to find such a thing but perhaps I just missed it. I
> am wondering if anyone in the community knows whether such manuals
> exist for OpenBSD. Manpages are nice but they're not what I'm looking
> for.

Uhm...one thing I've learn during my short developer experience is to
respect each project philosophy and culture, and learn them (or at
least know about their existence) before jumping on board.

OpenBSD is famous for the high quality of its documentation. If the
documentation they are providing is not what you are looking for,
maybe this is not the OS you are looking for.

Now the reason why you cannot get from zero to hero via manpages is
that you are kindly asked to know baby steps in Unix systems. If you
don't know what a shebang is, or what a log file is, or what a daemon
is you are better getting a unix book, that's a job for a book or a
course, not for the operating system man pages.

This is what I think.
Luca

Compilation success only with clang++

[Solène Rapenne]

Hello,

I would like to make a port for the game bastet 
https://github.com/fph/bastet


Actually, I encounter a problem when compiling the sources. On 5.9 amd64 
it fails with g++/eg++ and compiles fine with clang++.


I don't understand the failures. With g++ it seems assembly related and 
with eg++ it seems related to a problem with boost library which is 
installed from packages.


If you have any hints about those errors I would be happy to read you.

-
Output of the differents C++ compilers :

solene@cbc:~/dev/bastet% make clean && make CXX=g++
rm -f Ui.o Block.o Well.o BlockPosition.o Config.o BlockChooser.o 
BastetBlockChooser.o Test.o main.o bastet

g++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c Ui.cpp
g++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c Block.cpp
{standard input}: Assembler messages:
{standard input}:73: Error: junk `(%rip)' after expression
{standard input}:108: Error: junk `(%rip)' after expression
{standard input}:141: Error: junk `(%rip)' after expression
{standard input}:174: Error: junk `(%rip)' after expression
{standard input}:207: Error: junk `(%rip)' after expression
{standard input}:240: Error: junk `(%rip)' after expression
{standard input}:273: Error: junk `(%rip)' after expression
*** Error 1 in /home/solene/dev/bastet (:124 'Block.o')


solene@cbc:~/dev/bastet% make clean && make CXX=eg++
rm -f Ui.o Block.o Well.o BlockPosition.o Config.o BlockChooser.o 
BastetBlockChooser.o Test.o main.o bastet

eg++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c Ui.cpp
In file included from 
/usr/local/include/boost/tr1/tr1/unordered_set:9:0,

 from BastetBlockChooser.hpp:26,
 from Ui.cpp:22:
/usr/local/include/boost/tr1/detail/config_all.hpp:158:26: fatal error: 
utility: No such file or directory

 #  include_next 
  ^
compilation terminated.
*** Error 1 in /home/solene/dev/bastet (:124 'Ui.o')


solene@cbc:~/dev/bastet% make clean && make CXX=clang++
rm -f Ui.o Block.o Well.o BlockPosition.o Config.o BlockChooser.o 
BastetBlockChooser.o Test.o main.o bastet

clang++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c Ui.cpp
clang++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c Block.cpp
clang++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c Well.cpp
clang++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c 
BlockPosition.cpp

clang++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c Config.cpp
clang++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c 
BlockChooser.cpp
clang++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c 
BastetBlockChooser.cpp

clang++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c main.cpp
clang++ -ggdb -o bastet Ui.o Block.o Well.o BlockPosition.o Config.o 
BlockChooser.o BastetBlockChooser.o main.o  -lncurses 
-lboost_program_options -L/usr/local/lib
BlockChooser.o: In function 
`Bastet::RandomBlockChooser::GetStartingQueue()':
BlockChooser.cpp:(.text+0xa4): warning: warning: random() may return 
deterministic values, is that what you want?

clang++ -O2 -pipe  -DNDEBUG -Wall -I/usr/local/include  -c Test.cpp
clang++ -ggdb -o Test Ui.o Block.o Well.o BlockPosition.o Config.o 
BlockChooser.o BastetBlockChooser.o Test.o  -lncurses 
-lboost_program_options -L/usr/local/lib
BlockChooser.o: In function 
`Bastet::RandomBlockChooser::GetStartingQueue()':
BlockChooser.cpp:(.text+0xa4): warning: warning: random() may return 
deterministic values, is that what you want?

Re: vi vs emacs, which one makes me look more smart in front of my friends?

[Roderick]

It seems, the troll was successfull by generating a discussion. :)

You cannot compare sam with ed. The first is not a line editor.
Plan9 has a lot of conceptual improvements over Unix/BSD.
See: http://doc.cat-v.org/plan_9/4th_edition/papers/sam/

Rodrigo.


On Wed, 18 May 2016, Joel Wirāmu Pauling wrote:

> ed()
>
> QED.
>
>
> On 18 May 2016 at 14:33, Lyndon Nerenberg  wrote:
>
>>> acme(1)
>>
>> Or sam(1) if you are a purist.

Re: Mount NTFS , Fat32 USB flash!

[Raf Czlonka]

On Wed, May 18, 2016 at 09:19:00AM BST, Mohammad BadieZadegan wrote:
> Hi everybody,
> I have a Patriot 32GB Flash USB and at first I formated it as FAT32 and it
> detected in my university PC correctly but when I mounted it by these
> commands it notified me:
> 
> # mount /dev/sd1i /mnt
> mount_msdos: /dev/sd1i on /mnt: Inappropriate file type or format
> 
> Then I reformated it by NTFS but still I could not mounted it and notified
> me:
> 
> # ntfs-3g /dev/sd1i /mnt
> Failed to read bootsector (size=0)
> Failed to mount '/dev/sd1i': Invalid argument
> The device '/dev/sd1i' doesn't seem to have a valid NTFS.
> Maybe the wrong device is used? Or the whole disk instead of a
> partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?
> 
> Also my last dmesg message is:
> 
> umass0 at uhub0 port 1 configuration 1 interface 0 " Patriot Memory" rev
> 2.10/1.00 addr 4
> umass0: using SCSI over Bulk-Only
> scsibus5 at umass0: 2 targets, initiator 0
> sd1 at scsibus5 targ 1 lun 0: <, Patriot Memory, PMAP> SCSI4 0/direct
> removable serial.13fe550044A22CCE7139
> sd1: 30160MB, 512 bytes/sector, 61767680 sectors
> 
> How can I mounted this?
> Thanks in advance..
> 

Hi Mohammad,

What does 'disklabel sd1' say?

Raf

Re: Two athn devices acting weird

[LÉVAI Dániel]

Stuart Henderson @ 2016-05-18T10:23:26 +0200:
> On 2016-05-15, Mihai Popescu  wrote:
> > The other thing is you have managed to obscure the MACs
> 
> They're in the IPv6 addresses.
> 

Allright-allright :D I messed up.


Daniel

Re: Two athn devices acting weird

[LÉVAI Dániel]

Stefan Sperling @ 2016-05-16T11:36:58 +0200:
> On Sun, May 15, 2016 at 09:36:19PM +0200, LÉVAI Dániel wrote:
> > hostname.athn0:
> > ==8<==
> > media autoselect
> > mode 11g
> > chan 10
> > nwid daniell
> > wpakey _
> > wpaprotos wpa2
> > mediaopt hostap
> > #nwflag hidenwid
> > inet6 eui64
> > up
> 
> > ##!/sbin/ifconfig athn0 media autoselect mode auto mediaopt hostap
> > #!/sbin/ifconfig athn0 chan 10
> > #!/sbin/ifconfig athn0 media autoselect mode 11g chan 10 mediaopt hostap
> 
[...]
> So try putting all your media settings on a single line in your
> hostname.athn0 file, instead of splitting media commands across
> several lines with other commands in-between. Like this:
> 
> media autoselect mode 11g chan 10 mediaopt hostap
> 
> Does that help? It has the same effect as this line you wrote:

Thank you, perfect!

I don't know why I was stuck with the one-option-per-line
configuration.. :-/


Daniel

Re: Comprehensive user's/programmer's manual for OpenBSD: Do they exist?

[Stuart Henderson]

On 2016-05-15, Mihai Popescu  wrote:
> I was reading Illustrated TCP/IP by R.W. Stevens for example and I was
> not able to understand it fully.

There are 3 volumes. The one I mentioned (vol 2, The Implementation) is a
programmer's guide covering the historical BSD implementation. It's not
perfect for current code, but can help point the way.

> I miss some tcp/ip basic explanations and those very basic bits are
> not in that book. For me it was something like many RFCs put together.

That sounds like volume 1 which is of more general interest and applicability
but some people prefer a different approach to tgat material. Maybe try
Comer, "internetworking with tcp/ip vol 1", or there are some good online
resources like http://www.tcpipguide.com/.

Re: Two athn devices acting weird

[Stuart Henderson]

On 2016-05-15, Mihai Popescu  wrote:
> The other thing is you have managed to obscure the MACs

They're in the IPv6 addresses.

Mount NTFS , Fat32 USB flash!

[Mohammad BadieZadegan]

Hi everybody,
I have a Patriot 32GB Flash USB and at first I formated it as FAT32 and it
detected in my university PC correctly but when I mounted it by these
commands it notified me:

# mount /dev/sd1i /mnt
mount_msdos: /dev/sd1i on /mnt: Inappropriate file type or format

Then I reformated it by NTFS but still I could not mounted it and notified
me:

# ntfs-3g /dev/sd1i /mnt
Failed to read bootsector (size=0)
Failed to mount '/dev/sd1i': Invalid argument
The device '/dev/sd1i' doesn't seem to have a valid NTFS.
Maybe the wrong device is used? Or the whole disk instead of a
partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?

Also my last dmesg message is:

umass0 at uhub0 port 1 configuration 1 interface 0 " Patriot Memory" rev
2.10/1.00 addr 4
umass0: using SCSI over Bulk-Only
scsibus5 at umass0: 2 targets, initiator 0
sd1 at scsibus5 targ 1 lun 0: <, Patriot Memory, PMAP> SCSI4 0/direct
removable serial.13fe550044A22CCE7139
sd1: 30160MB, 512 bytes/sector, 61767680 sectors

How can I mounted this?
Thanks in advance..

Re: Suggestion: new webpage for openbsd.org

[bytevolcano]

I agree, we need buttons with rounded corners and ones that appear when
you hover your mouse over them. Those hyperlinks in the current OpenBSD
site are sharp and someone could poke their eyes out.

On Wed, 18 May 2016 11:00:54 +0530
Jay Patel  wrote:

> I would like to see openbsd.org in http://openbsdfoundation.org/ this
> style
>
> On Tue, May 17, 2016 at 12:41 PM, Joakim Frostegård <
> joakim.frosteg...@gmail.com> wrote:
>
> > Hi,
> >
> > I’ve made a responsive new webpage replacement for the
> > in my opinion somewhat aged openbsd.org .
> >
> > It’s available at
> > http://greatest-ape.github.io/openbsd-site/public_html/
> >  with the
> > repo at https://github.com/greatest-ape/openbsd-site
> >  .
> >
> > The idea is to replace index.html but for all other pages just
> > replace the stylesheets. In so far, I’ve included a few other
> > pages, including plat.html, goals.html and alpha.html.
> >
> > I’ve tried to keep the page without bells and whistles, that is:
> > * Just static HTML and CSS
> > * No frameworks
> > * No javascript
> > * Minimalist design
> >
> > though I have included the Apache 2-licensed Open Sans
> > from Google Fonts. If you like the page, I guess we could
> > build our own font instead of using the google repository.
> >
> > Is this the right place to post this? Are you (the openbsd devs)
> > interested in this at all?
> >
> > If yes, we would also need to make sure that the creator of
> > the nice openbsd logo included is happy with us using it for
> > the webpage. Apart from that, I would be happy to license
> > my work under BSD, MIT or whatever you want.
> >
> > Cheers
> > Joakim