Re: I need to get a Russian keyboard

[Chris Bennett]

On Sat, May 28, 2016 at 12:48:52AM +0200, ropers wrote:
> On 27 May 2016 at 22:16, Chris Bennett wrote:
> 
> > Can I borrow someone's 3D printer so that I can make my own identical
> > keys except with Cyrillic letters only?
> > There is no rush, after all, I'm not going to actually use it, it's just
> > going to be a decorative piece in the living room
> 

The above was just a joke ;-) Hope I didn't offend anyone.

> 
> Despite the single-alphabet layout picture on the JCUKEN Wikipedia page,
> I've never seen an actual Russian keyboard that didn't have both Cyrillic
> and Western letters on its keycaps. At least *most* authentic present-day
> Russian keyboards have both. Of course I don't know if authenticity is a
> factor for what you have in mind...
> 

No, I intend to use it.
Even on Russian sites, I only found keyboards with both.
Not a problem. This is the first time I've looked for anything with a
totally different alphabet, so this works.

And it's interesting. Computer programming started in English and works
just fine using that small set of letters and symbols. I can't see that
any more characters would ever be needed, so maybe that set should be
looked at as programming language derived from English but not English.

Chris Bennett

Re: I need to get a Russian keyboard

[Brandon Vincent]

On Fri, May 27, 2016 at 3:48 PM, ropers  wrote:
> Despite the single-alphabet layout picture on the JCUKEN Wikipedia page,
> I've never seen an actual Russian keyboard that didn't have both Cyrillic
> and Western letters on its keycaps. At least *most* authentic present-day
> Russian keyboards have both. Of course I don't know if authenticity is a
> factor for what you have in mind...

When I saw this thread, I was reminded of my attempts to get a
keyboard as cool (although inaccurate) as the one in Tomorrow Never
Dies (1997).

https://youtu.be/6L2BxAWOscQ?t=20s

Brandon Vincent

Re: I need to get a Russian keyboard

[ropers]

On 27 May 2016 at 22:16, Chris Bennett wrote:

> Can I borrow someone's 3D printer so that I can make my own identical
> keys except with Cyrillic letters only?
> There is no rush, after all, I'm not going to actually use it, it's just
> going to be a decorative piece in the living room


Despite the single-alphabet layout picture on the JCUKEN Wikipedia page,
I've never seen an actual Russian keyboard that didn't have both Cyrillic
and Western letters on its keycaps. At least *most* authentic present-day
Russian keyboards have both. Of course I don't know if authenticity is a
factor for what you have in mind...

regards,
--роперс

Re: hardware recommendation for openbsd-based thin client?

[Stuart Henderson]

On 2016-05-27, Marko Cupać  wrote:
> Hi,
>
> I have just noticed that pcengines has alix models with VGA ports:
>
> http://www.pcengines.ch/alix3d3.htm
> http://www.pcengines.ch/alix1e.htm
>
> Anyone tried OpenBSD on them?

Yep. It worked, including X - I used one with autologin to a browser to
display a job schedule on a wallscreen. This was some years ago though,
I wouldn't buy one for that job now.

Re: I need to get a Russian keyboard

[Chris Bennett]

On Fri, May 27, 2016 at 11:14:53AM -0700, Constantine Aleksandrovich Murenin 
wrote:
> On 27 May 2016 at 06:36, Joseph Fierro  wrote:
> > On 05/27/2016 12:27 AM, Chris Bennett wrote:
> >> Any advice on what to be sure to find or not find on a keyboard?
> 
> I'm quite surprised it hasn't been mentioned yet in this rather long
> thread -- why do you actually need labels on your keys?
> 
> Do you actually look at your keyboard whilst you type?!  /Ain't nobody
> got time for that?/
> 
> My advice is to use a quality keyboard without Cyrillic letters on it!
>  Because, sadly, we haven't actually reached a stage in globalisation
> yet where products aren't localised only to the particular markets in
> which they are sold, and aren't available for sale (over the internet,
> no less!) in the other non-native markets.  Ironically, this applies
> even if they're all custom-order made in China (if you ever ordered
> any laptop directly from Apple or IBM/Lenovo), and are drop-shipped to
> the U.S. consumers directly from Shenzhen!
> 

You are so right! This is just unacceptable! But I now have the answer!

Can I borrow someone's 3D printer so that I can make my own identical
keys except with Cyrillic letters only?
There is no rush, after all, I'm not going to actually use it, it's just
going to be a decorative piece in the living room along with the drink
coasters with the little platforms made on top of mice.

This long thread has not only shown two excellent keyboard supplier's,
one in the US and one in Europe, which should be helpful to anyone
wanting to buy any type of keyboard. The off-list mails I have had made
some other methods I would not have thought of for a quicker solution
that is excellent, cheap but a little bit of work.

Laters Dude,
Christofor Eduardovich

Re: Suspend / hibernate does not work

[Mike Larkin]

On Fri, May 27, 2016 at 04:09:21PM +, Martin Oppegaard wrote:
> Hi,
> 
> I can't get suspend or hibernate to work with this computer.  It has
> encrypted root hdd and apmd is running (-A).  When I suspend the screen
> goes into standby and the power LED starts blinking, but nothing spins
> down (same amount of power is drawn from the UPS), and it will not
> resume.  In this state if I press the restart button the CPU fan calms
> down and less power is drawn from the UPS, but I have to hold the power
> button to shut it down.
> 
> With hibernate, it restarts immediately.
> 
> Any tips?
> 
> Regards,
> 
> Martin Oppegaard

When I was first starting the initial hibernate coding, I used this exact
same machine (P6T Deluxe V2), and ran into the exact same problems you did.
I even had a similar radeon (I think mine was a 5950). It worked occasionally,
but was never stable.

I was never able to track down what was failing. This MB was one of
the first ones to support the core-i* series and had a fair number of BIOS
bugs. I upgraded the BIOS, and things got worse (random reboots and hangs)
and when I downgraded the BIOS, I bricked the machine. After that, it got
tossed in the trash.

Sorry I don't have better news for you.

-ml

> 
> OpenBSD 5.9 (GENERIC.MP) #4: Thu May 19 08:22:39 CEST 2016
> 
> jas...@stable-59-amd64.mtier.org:/binpatchng/work-binpatch59-amd64/src/sys/arch/amd64/compile/GENERIC.MP
> real mem = 6416760832 (6119MB)
> avail mem = 6218088448 (5930MB)
> mpath0 at root
> scsibus0 at mpath0: 256 targets
> mainbus0 at root
> bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xf0700 (81 entries)
> bios0: vendor American Megatrends Inc. version "1202" date 12/22/2010
> bios0: ASUSTeK Computer INC. P6T DELUXE V2
> acpi0 at bios0: rev 0
> acpi0: sleep states S0 S1 S3 S4 S5
> acpi0: tables DSDT FACP APIC MCFG OEMB HPET OSFR SSDT
> acpi0: wakeup devices NPE2(S4) NPE4(S4) NPE5(S4) NPE6(S4) NPE8(S4) NPE9(S4) 
> NPEA(S4) P0P1(S4) PS2K(S4) PS2M(S4) USB0(S4) USB1(S4) USB2(S4) USB5(S4) 
> EUSB(S4) USB3(S4) [...]
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2673.08 MHz
> cpu0: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> cpu0: 256KB 64b/line 8-way L2 cache
> cpu0: smt 0, core 0, package 0
> mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
> cpu0: apic clock running at 133MHz
> cpu0: mwait min=64, max=64, C-substates=0.2.1.1, IBE
> cpu1 at mainbus0: apid 2 (application processor)
> cpu1: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
> cpu1: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> cpu1: 256KB 64b/line 8-way L2 cache
> cpu1: smt 0, core 1, package 0
> cpu2 at mainbus0: apid 4 (application processor)
> cpu2: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
> cpu2: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> cpu2: 256KB 64b/line 8-way L2 cache
> cpu2: smt 0, core 2, package 0
> cpu3 at mainbus0: apid 6 (application processor)
> cpu3: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
> cpu3: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> cpu3: 256KB 64b/line 8-way L2 cache
> cpu3: smt 0, core 3, package 0
> cpu4 at mainbus0: apid 1 (application processor)
> cpu4: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
> cpu4: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> cpu4: 256KB 64b/line 8-way L2 cache
> cpu4: smt 1, core 0, package 0
> cpu5 at mainbus0: apid 3 (application processor)
> cpu5: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
> cpu5: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
> cpu5: 256KB 64b/line 8-way L2 cache
> cpu5: smt 1, core 1, package 0
> cpu6 at mainbus0: apid 5 (application processor)
> cpu6: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
> cpu6: 
> 

Re: JDK and W^X violation

[Scott Vanderbilt]

On 5/27/2016 11:25 AM, Theo de Raadt wrote:

I just upgraded an amd64 host from one snapshot (~20 April) to the
latest (26 May).

Upon rebooting, a rapid succession of the following error messages start
to appear:

/bsd: java(81240): mprotect W^X violation

This is even after updating to the latest snapshot build of the JDK port
(jdk-1.8.0.72v0).

The only Java app running on this host is an older version of
apache-solr, v 4.8.1, I believe. Would upgrading solr to a more recent
version clear this up?


We are working on some system features which will constrain W^X
executables to specific mountpoints, and specifically linked executables
(an ELF flag).

In the newest snapshots, you can put ",wxallowed" as a flag in your
/etc/fstab entry for /usr/local to get around this.



That worked a treat. Thanks!

Re: JDK and W^X violation

[Theo de Raadt]

> I just upgraded an amd64 host from one snapshot (~20 April) to the 
> latest (26 May).
> 
> Upon rebooting, a rapid succession of the following error messages start 
> to appear:
> 
> /bsd: java(81240): mprotect W^X violation
> 
> This is even after updating to the latest snapshot build of the JDK port 
> (jdk-1.8.0.72v0).
> 
> The only Java app running on this host is an older version of 
> apache-solr, v 4.8.1, I believe. Would upgrading solr to a more recent 
> version clear this up?

We are working on some system features which will constrain W^X
executables to specific mountpoints, and specifically linked executables
(an ELF flag).

In the newest snapshots, you can put ",wxallowed" as a flag in your
/etc/fstab entry for /usr/local to get around this.

Re: I need to get a Russian keyboard

[Constantine Aleksandrovich Murenin]

On 27 May 2016 at 06:36, Joseph Fierro  wrote:
> On 05/27/2016 12:27 AM, Chris Bennett wrote:
>> Any advice on what to be sure to find or not find on a keyboard?

I'm quite surprised it hasn't been mentioned yet in this rather long
thread -- why do you actually need labels on your keys?

Do you actually look at your keyboard whilst you type?!  /Ain't nobody
got time for that?/

My advice is to use a quality keyboard without Cyrillic letters on it!
 Because, sadly, we haven't actually reached a stage in globalisation
yet where products aren't localised only to the particular markets in
which they are sold, and aren't available for sale (over the internet,
no less!) in the other non-native markets.  Ironically, this applies
even if they're all custom-order made in China (if you ever ordered
any laptop directly from Apple or IBM/Lenovo), and are drop-shipped to
the U.S. consumers directly from Shenzhen!

Cheers,
Constantine.SU.

JDK and W^X violation

[Scott Vanderbilt]

Hello.

I just upgraded an amd64 host from one snapshot (~20 April) to the 
latest (26 May).


Upon rebooting, a rapid succession of the following error messages start 
to appear:


   /bsd: java(81240): mprotect W^X violation

This is even after updating to the latest snapshot build of the JDK port 
(jdk-1.8.0.72v0).


The only Java app running on this host is an older version of 
apache-solr, v 4.8.1, I believe. Would upgrading solr to a more recent 
version clear this up?


Many thanks in advance.



OpenBSD 6.0-beta (GENERIC.MP) #2128: Thu May 26 23:46:33 MDT 2016
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 1020133376 (972MB)
avail mem = 984678400 (939MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xf0100 (38 entries)
bios0: vendor Award Software International, Inc. version "F3" date 
04/09/2009

bios0: Gigabyte Technology Co., Ltd. G41M-ES2L
acpi0 at bios0: rev 0
acpi0: TAMG checksum error
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP HPET MCFG TAMG APIC SSDT
acpi0: wakeup devices PEX0(S5) PEX1(S5) PEX2(S5) PEX3(S5) PEX4(S5) 
PEX5(S5) HUB0(S5) UAR1(S3) UAR2(S3) USB0(S3) USB1(S3) USB2(S3) USB3(S3) 
USBE(S3) AZAL(S5) PCI0(S5)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimcfg0 at acpi0 addr 0xc000, bus 0-255
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Celeron(R) CPU E3200 @ 2.40GHz, 1700.22 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,XSAVE,NXE,LONG,LAHF,PERF,SENSOR

cpu0: 1MB 64b/line 4-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 199MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Celeron(R) CPU E3200 @ 2.40GHz, 1699.96 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,XSAVE,NXE,LONG,LAHF,PERF,SENSOR

cpu1: 1MB 64b/line 4-way L2 cache
cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PEX0)
acpiprt2 at acpi0: bus 2 (PEX1)
acpiprt3 at acpi0: bus -1 (PEX2)
acpiprt4 at acpi0: bus -1 (PEX3)
acpiprt5 at acpi0: bus -1 (PEX4)
acpiprt6 at acpi0: bus -1 (PEX5)
acpiprt7 at acpi0: bus 3 (HUB0)
acpicpu0 at acpi0: C1(@1 halt!), FVS, 1600, 1200 MHz
acpicpu1 at acpi0: C1(@1 halt!), FVS, 1600, 1200 MHz
acpibtn0 at acpi0: PWRB
"PNP0700" at acpi0 not configured
"PNP0501" at acpi0 not configured
"PNP0501" at acpi0 not configured
"PNP0400" at acpi0 not configured
"PNP0F13" at acpi0 not configured
"PNP0303" at acpi0 not configured
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel G41 Host" rev 0x03
inteldrm0 at pci0 dev 2 function 0 "Intel G41 Video" rev 0x03
drm0 at inteldrm0
intagp0 at inteldrm0
agp0 at intagp0: aperture at 0xd000, size 0x1000
inteldrm0: msi
inteldrm0: 1024x768
wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x01: msi
azalia0: codecs: Realtek/0x0887
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x01: msi
pci1 at ppb0 bus 1
ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x01: msi
pci2 at ppb1 bus 2
re0 at pci2 dev 0 function 0 "Realtek 8168" rev 0x02: RTL8168C/8111C 
(0x3c00), msi, address 00:24:1d:86:28:95

rgephy0 at re0 phy 7: RTL8169S/8110S/8211 PHY, rev. 2
uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x01: apic 2 int 23
uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x01: apic 2 int 19
uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x01: apic 2 int 18
uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x01: apic 2 int 16
ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x01: apic 2 int 23
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb2 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xe1
pci3 at ppb2 bus 3
pcib0 at pci0 dev 31 function 0 "Intel 82801GB LPC" rev 0x01
pciide0 at pci0 dev 31 function 2 "Intel 82801GB SATA" rev 0x01: DMA, 
channel 0 wired to compatibility, channel 1 wired to compatibility

wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA48, 476938MB, 976771055 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 6
atapiscsi0 at pciide0 channel 1 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0:  ATAPI 5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
ichiic0 at pci0 dev 31 function 3 "Intel 

Re: I need to get a Russian keyboard

[Joseph Fierro]

On 05/27/2016 12:27 AM, Chris Bennett wrote:

This question has probably been asked before, but a lot has changed
since then.

I want to buy a new one, sent to the USA. Looked at Amazon briefly. Not
sure if there may be a better place to order from.
I don't want keyboard stickers that I saw.
Right now I do almost everything in English and either grab a Spanish
keyboard or use setxkbmap es and just remember what key is what.

Is setxkbmap ru going to do the trick or will I need to do something
else also or instead?

Any advice on what to be sure to find or not find on a keyboard?

Thanks,
Chris Bennett




I have written a lot of essays using the phonetic keyboard
provided by "setxkbmap ru phonetic" and find it works well
if you don't have a proper Russian keyboard. There are some
irritations though, most of which you'll get used to quickly.

Not every Russian character has a direct English counterpart, so
you may have to hunt around a bit to find what you want.
The "sh" and "shsh" characters are the bracket keys, for example.

Some Russian letters are very similar in sound to an English one, but 
aren't

mapped that way. The Russian "v" is mapped to the English "w" key, rather
than just using the English "v".

You'll spend a lot of time hitting the English "H" when you want a 
Russian "n". ;)


Still, I have found this to be better than either trying to remember the 
Russian
Windows layout mentally or dealing with stickers that never stay on the 
keys.

Re: We have a problem here

[jsg]

   Dr. Phil is at another I.P. address 
   Pleee
   :)

Suspend / hibernate does not work

[Martin Oppegaard]

Hi,

I can't get suspend or hibernate to work with this computer.  It has
encrypted root hdd and apmd is running (-A).  When I suspend the screen
goes into standby and the power LED starts blinking, but nothing spins
down (same amount of power is drawn from the UPS), and it will not
resume.  In this state if I press the restart button the CPU fan calms
down and less power is drawn from the UPS, but I have to hold the power
button to shut it down.

With hibernate, it restarts immediately.

Any tips?

Regards,

Martin Oppegaard

OpenBSD 5.9 (GENERIC.MP) #4: Thu May 19 08:22:39 CEST 2016

jas...@stable-59-amd64.mtier.org:/binpatchng/work-binpatch59-amd64/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 6416760832 (6119MB)
avail mem = 6218088448 (5930MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xf0700 (81 entries)
bios0: vendor American Megatrends Inc. version "1202" date 12/22/2010
bios0: ASUSTeK Computer INC. P6T DELUXE V2
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S3 S4 S5
acpi0: tables DSDT FACP APIC MCFG OEMB HPET OSFR SSDT
acpi0: wakeup devices NPE2(S4) NPE4(S4) NPE5(S4) NPE6(S4) NPE8(S4) NPE9(S4) 
NPEA(S4) P0P1(S4) PS2K(S4) PS2M(S4) USB0(S4) USB1(S4) USB2(S4) USB5(S4) 
EUSB(S4) USB3(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2673.08 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 133MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 3, package 0
cpu4 at mainbus0: apid 1 (application processor)
cpu4: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
cpu4: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu4: 256KB 64b/line 8-way L2 cache
cpu4: smt 1, core 0, package 0
cpu5 at mainbus0: apid 3 (application processor)
cpu5: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
cpu5: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu5: 256KB 64b/line 8-way L2 cache
cpu5: smt 1, core 1, package 0
cpu6 at mainbus0: apid 5 (application processor)
cpu6: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
cpu6: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu6: 256KB 64b/line 8-way L2 cache
cpu6: smt 1, core 2, package 0
cpu7 at mainbus0: apid 7 (application processor)
cpu7: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, 2672.73 MHz
cpu7: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG,LAHF,PERF,ITSC,SENSOR
cpu7: 256KB 64b/line 8-way L2 cache
cpu7: smt 1, core 3, package 0
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
ioapic1 at mainbus0: apid 9 pa 0xfec8a000, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318179 

Re: hardware recommendation for openbsd-based thin client?

[John]

On Thu, May 26, 2016 at 02:40:09PM +0200, Marko Cupać wrote:
> Hi,
> 
> I need to implement a few dozen boxes whose only purpose will be
> connecting to RDP servers. I have figured out the software part -
> OpenBSD + slim + openbox + freerdp, but I haven't yet decided about the
> hardware part. It needs to be of amd64 architecture, and it needs to
> run OpenBSD. Local storage is not a concern, SD card would be enough.
> In fact, I'd go for diskless zero client if OpenBSD's implementation
> supported CIDR.
> 
> Something like PCengines' APU, but in monitor+mouse+keyboard world.

Depending on budget a barebone Fitlet might work. 

http://www.fit-pc.com/web/purchasing/order-fitlet/

I've used one as a portable desktop though now it's in use as a
temporary router/firewall/VPN.  The case is a heatsink and gets hot to
the touch but it's been running 24/7 for months and survived multiple
electrical storms.



OpenBSD 5.8 (GENERIC.MP) #1236: Sun Aug 16 02:31:04 MDT 2015
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 7961124864 (7592MB)
avail mem = 7715954688 (7358MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.8 @ 0xecbf0 (62 entries)
bios0: vendor American Megatrends Inc. version "SBCFLT_0.08.04" date 06/27/2015
bios0: CompuLab fitlet
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG ASF! HPET WDRT SSDT SSDT SSDT SSDT 
SSDT SSDT SSDT SSDT
acpi0: wakeup devices LOM_(S4) SBAZ(S4) EHC1(S4) EHC2(S4) EHC3(S4) XHC0(S4) 
ODD8(S3)
acpitimer0 at acpi0: 3579545 Hz, 32 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: AMD A10 Micro-6700T APU+AMD Radeon R6 Graphics, 1197.90 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,IBS,SKINIT,TOPEXT,ITSC,BMI1
cpu0: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 2MB 64b/line 
16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 40 4KB entries fully associative, 8 4MB entries fully associative
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: AMD A10 Micro-6700T APU+AMD Radeon R6 Graphics, 1197.75 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,IBS,SKINIT,TOPEXT,ITSC,BMI1
cpu1: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 2MB 64b/line 
16-way L2 cache
cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu1: DTLB 40 4KB entries fully associative, 8 4MB entries fully associative
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 2 (application processor)
cpu2: AMD A10 Micro-6700T APU+AMD Radeon R6 Graphics, 1197.76 MHz
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,IBS,SKINIT,TOPEXT,ITSC,BMI1
cpu2: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 2MB 64b/line 
16-way L2 cache
cpu2: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu2: DTLB 40 4KB entries fully associative, 8 4MB entries fully associative
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: AMD A10 Micro-6700T APU+AMD Radeon R6 Graphics, 1197.76 MHz
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,IBS,SKINIT,TOPEXT,ITSC,BMI1
cpu3: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 2MB 64b/line 
16-way L2 cache
cpu3: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu3: DTLB 40 4KB entries fully associative, 8 4MB entries fully associative
cpu3: smt 0, core 3, package 0
ioapic0 at mainbus0: apid 5 pa 0xfec0, version 21, 24 pins
ioapic1 at mainbus0: apid 6 pa 0xfec01000, version 21, 32 pins
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318180 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (GFX_)
acpiprt2 at acpi0: bus 1 (GPP0)
acpiprt3 at acpi0: bus 2 (GPP1)
acpiprt4 at acpi0: bus 3 (GPP2)
acpiprt5 at acpi0: bus 4 (GPP3)
acpicpu0 at acpi0: 

5.9 is the best release yet, very excited for 6.0 - but worried some things will be missing that will ruin the fanfare

[Andy Lemin]

Not to say previous releases haven't been as great (they all are), but I
must say that 5.9 really does feel like a huge step towards a massive
milestone (well done), and 6.0 will hopefully be the release that kills the
GIANT lock for OpenBSD as a firewall. So really thank you..


For ourselves, the biggest anticlimax for OpenBSD 6.0 would be, still no
64bit support for the Queue size.. :(
OpenBSD can shift traffic at well above 4.2Gbps now, so it's such a shame
to be superficially limited to 4Gbps still :(


And a small, but "nice to have" would be; Bandwidth defined as percentages
of the parent queue.


Just wishing, nothing else ;)

Humbly yours, Andy.

Re: contributing to open source

[Joe Nosay]

You are human and I appreciate that. I had to see it.
My apologies, I mean you no disrespect.
I appreciate that you only quoted what was necessary.
Again, my apologies, Warren, you are considerate of others.

We do need some code of conduct on both sides here. I'm willing to talk
things through.
I'll accept my "banishment" for the mean time.
It should be that the other party involved also have to pay "restitution
and fees" for this debacle.
I need some software built on PowerPC 32 bit. Perhaps one could convince
Tyler and a few others to make the packages.
I would consider that an apology for his foolishness.
I also need ardour, mixx, ffmpeg, lamemp3, sox, OSS, and a few others built
for sound on PowerPC/POWER 32/64.

They only have experience on the AMD64/i386 architectures. A few more POWER
and ARM hackers could be used and would be appreciated.
Finding the audience for the hardware/software combination is much easier
than you think. I'll give you a working example.

You'll need an omnidirectional microphone and four unidirectional
microphones set up together. The design is to have a central/unified part
and the standard four channel - left bass, left treble, right bass, right
treble - input for stereo. Attach the microphone to an ARM device running
Audacity on Debian or NetBSD for input and have an - or two if possible -
XFi card attached to record the raw sound.
Next, you would play the sound through a card on a PowerPC 64 and 32 setup
with Ardour. There would be a card and the OS would be FreeBSD. The kernel
hertz would need to be about 5000 for a dedicated sound system. Quick
response.
I would go for NetBSD on AMD64 for conversion with ffmpeg, lame mp3, sox,
and what ever else is available.
It would be finished with SPARC64 with OpenBSD for database.

There, you are using multiple architectures as they were meant to be used.

I have already shared this system design with a few people.

On Tue, May 24, 2016 at 6:35 PM, Warren Block  wrote:

> On Tue, 24 May 2016, Joe Nosay wrote:
>
> You see his reaction to me. That was disrespectful.
>>
>
> So what?  That does not justify threats.  Be an adult.
>
> If we were face to face in nature, would you treat me with such disdain
>> and disrespect?
>> And, Warren, would you want me to be as rude to you as Tyler was to me?
>> I do not make any assumptions about what a person's character is.
>>
>
> You have accused me and others of many things.  Some would take that as
> disrespect.  Yet nobody threatened you.
>
> Tyler, you may present your point of view from here, if you wish.
>>
>
> Or he can ignore you.  As you should have ignored him.  I am asking you to
> have the self-control to stop before this escalates further.  Please stop.
> Let this matter drop, and reconsider the way you see the world.

Possible SNMPD Bug - IF-MIB::ifInDiscards (and maybe ifOutDiscards) report the same value for every single interface :(

[Andy Lemin]

Hi list :)

We have noticed our monitoring systems are reporting and alerting the wrong
data for OpenBSD Interface Discards since adding all the OpenBSD firewalls
to our new Monitoring system.

And we have proven that it is SNMPD which is returning the same value for
every single interface with;

root@intermap:/opt/observium# snmpwalk -v2c -c  10.10.4.3
IF-MIB::ifInDiscards
IF-MIB::ifInDiscards.1 = Counter32: 10837445
IF-MIB::ifInDiscards.2 = Counter32: 10837445
IF-MIB::ifInDiscards.3 = Counter32: 10837445
IF-MIB::ifInDiscards.4 = Counter32: 10837468
IF-MIB::ifInDiscards.5 = Counter32: 10837468
IF-MIB::ifInDiscards.6 = Counter32: 10837468
IF-MIB::ifInDiscards.7 = Counter32: 10837468
IF-MIB::ifInDiscards.8 = Counter32: 10837468
IF-MIB::ifInDiscards.9 = Counter32: 10837468
IF-MIB::ifInDiscards.10 = Counter32: 10837468
IF-MIB::ifInDiscards.11 = Counter32: 10837468
IF-MIB::ifInDiscards.12 = Counter32: 10837468
IF-MIB::ifInDiscards.13 = Counter32: 10837468
IF-MIB::ifInDiscards.14 = Counter32: 10837468
IF-MIB::ifInDiscards.15 = Counter32: 10837468
IF-MIB::ifInDiscards.16 = Counter32: 10837468
IF-MIB::ifInDiscards.17 = Counter32: 10837468
IF-MIB::ifInDiscards.18 = Counter32: 10837468
IF-MIB::ifInDiscards.19 = Counter32: 10837468

So it seems impossible to track down which interface is discarding packets?


We have a few firewalls which experience a _lot_ of Discards. This in
itself is not terrible, but we would really like to know on which interface
they are occurring, and ideally why so many, and resolve if possible. Other
firewalls are low figures and so just normal network traffic.

"netstat -s" is great, but that is system wide and only shows a single
discard counter. Is there a command that will show me a summary (like
netstat -s) of the individual reasons for Discarded packets etc, even
globally? (Buffer full, Queue Drops, Unknown VLAN etc..).


Example from our monitoring;

​
As always, Humbly thank you for your time and great efforts :)
Cheers, Andy.

[demime 1.01d removed an attachment of type image/png which had a name of 
OpenBSD Packet Discards.png]

We have a problem here

[outro pessoa]

It seems that some of you are willing to accuse one of speaking and writing
falsehoods.
A man comes on her being honest and the first reaction you give him is that
he is a liar. When his reaction is one that you do not expect, you become
defensive and start setting down standards.
Every single time that I am honest, one of you comes out and insults me to
no end, expecting me just to suck up your bullshit as if nothing occurred.
You speak to me and of me as if I were a piece of shit on your shoe.
You disrespect me.
And when I react and warn you, you start crying and you try to muscle up
like the bullies that you are.
All of you are behind your computers picking on the homeless guy who is
trying to do something right.
And you go from there to insult me and my family to no end.
It is libel and slander for any of you to call me a liar about what is on
my birth certificate.
It is harassment for you people to continuously use me as your scapegoat
for whatever reasons that make you ill.
All of you are aware of my sensitivity; yet, you still go out of your way
to harass me.
If I had done the same to you, I would have been arrested and put in jail.
And yet, you people are still free to annoy and harass me again.

I am homeless.
I was given equipment and I want to use it as an animation station for
children.
You will go out of your way -as you already have - to degrade me just for
being humble, considerate and kind.
You laugh at me when I try to aid others.



What right do any of you have to judge me when you have broken your own
laws many times?
I am able to present documentation that will state none of you have the
right to put me in any stressful situation. If doing such does occur, I
have the right to file charges.


Go through the mailing list.
And read how Mr Sorrenson harassed me to no end.
And then you will support him
after he has broken state laws.

You see, I want all of you to come here and meet me.
I want all of you to bring your accusations against me in a court of law.
Theo de Raadt also went beyond what was normal and insulted me to the point
of harassment.
And then he cried about my reaction.


Unlike you - plural - I do not deny anything that I have said or done.
I also do not admit to such until the time is right.

I sit here and watch your conversations in person, overhearing - ear
hustling, and reading the mailing lists and forums.
You go back in your everyday lives with no regard of what you say or do...
Until you fuck up and anger someone that did you no harm and no wrong.


You called me a liar about my own mother and my birth when I told you the
truth.
What in the hell is wrong with all of you?
Seriously,
what do you have between your ears? Bullshit?

I hear someone muttering "Wait a minute, man, and let us explain."

Explain what?
That you are all evil and selfish?
That you care only for yourselves?

Who do you think you are talking to right now, huh?

My personality is the same no matter where I go.

I don't put on faces.

I am me.
On the forums.
In the streets.
On the mailing lists.
In the woods.

Yeah, I said it.



And you find it humorous that a man in my position would go out of his way
to aid and assist others before taking care of himself.

I have this equipment and it will go to aiding and assisting children and
students.

I have nothing. I am homeless. I look out for others.
And,
All that you people do is treat me like shit because I refuse to be as
twisted as you.

I am here waiting for any of you to approach me in person. Since you were
warned, you should know now how to act accordingly.
You will approach me with respect because I gave it to you when you did not
give it to me.
What do I mean?
When you attack another without consideration, that is a sign of disrespect.
You made an assumption of my character.
Did any of you ever think that if it is not written or spoken, then I did
not mean or want you to see such?
I thought about the whole process before and decided that it would be
better to say, "Write legibly," instead of accusing someone of wanting
ignorance.
Get it?
And then Mr. Sorrenson - and before Mr. deRaadt - went out of their way to
insult me, thinking it was cute and funny.

Do any of you remember the youtube piece about the tiger that attacked the
two idiots who were harassing it to no end?
You do.
Ah, yes.
Well.
You have annoyed the tiger.





If you are so willing to harass me and my family, then you should be
willing to go to court for what you do.

Re: libtorrent build fail

[Thuban]

* David Coppa  le [27-05-2016 15:39:00 +0200]:
> On Fri, May 27, 2016 at 3:02 PM, Thuban  wrote:
> > Tah was too beautiful, now it's``make`` that give me errors I can't
> > understand :
> >
> >
> > In file included from ../include/libtorrent/parse_url.hpp:40,
> > from web_connection_base.cpp:53:
> > ../include/libtorrent/aux_/disable_warnings_pop.hpp:42: warning:
expected
> > [error|warning|ignored] after '#pragma GCC diagnostic'
> > *** Error 1 in src (Makefile:972 'web_connection_base.lo': @echo "
CXX
> > " web_connection_base.lo;depbase=`echo web_connection_base.lo | ...)
> > *** Error 1 in
/home/xavier/geek/libtorrent/libtorrent-rasterbar-1.1.0
> > (Makefile:645 'all-recursive')
> >
> > See full warnings here : https://clbin.com/uPgvb
> >
> > Do you have any advice on this?
>
> Please give me some time...
> I'm trying to cook a proper port, but there's a lot of stuff that
> needs to be fixed.

woah, thank you very much!
I stop filling the list with my useless messages then.
good luck.

Regards,

--
/Thuban/

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]

Re: libtorrent build fail

[David Coppa]

On Fri, May 27, 2016 at 3:02 PM, Thuban  wrote:
> Tah was too beautiful, now it's``make`` that give me errors I can't
> understand :
>
>
> In file included from ../include/libtorrent/parse_url.hpp:40,
> from web_connection_base.cpp:53:
> ../include/libtorrent/aux_/disable_warnings_pop.hpp:42: warning: expected
> [error|warning|ignored] after '#pragma GCC diagnostic'
> *** Error 1 in src (Makefile:972 'web_connection_base.lo': @echo "  CXX
> " web_connection_base.lo;depbase=`echo web_connection_base.lo | ...)
> *** Error 1 in /home/xavier/geek/libtorrent/libtorrent-rasterbar-1.1.0
> (Makefile:645 'all-recursive')
>
> See full warnings here : https://clbin.com/uPgvb
>
> Do you have any advice on this?

Please give me some time...
I'm trying to cook a proper port, but there's a lot of stuff that
needs to be fixed.

Re: libtorrent build fail

[Thuban]

Tah was too beautiful, now it's``make`` that give me errors I can't
understand :


In file included from ../include/libtorrent/parse_url.hpp:40,
from web_connection_base.cpp:53:
../include/libtorrent/aux_/disable_warnings_pop.hpp:42: warning: expected
[error|warning|ignored] after '#pragma GCC diagnostic'
*** Error 1 in src (Makefile:972 'web_connection_base.lo': @echo "  CXX
" web_connection_base.lo;depbase=`echo web_connection_base.lo | ...)
*** Error 1 in /home/xavier/geek/libtorrent/libtorrent-rasterbar-1.1.0
(Makefile:645 'all-recursive')

See full warnings here : https://clbin.com/uPgvb

Do you have any advice on this?

Thanks.

Re: I need to get a Russian keyboard

[Dmitrij D. Czarkoff]

Chris Bennett said:
> Is setxkbmap ru going to do the trick or will I need to do something
> else also or instead?

"setxkbmap ru" will set standard "Windows" Russian layout which is
printed on keyboards in Russia.

FYI there is a set of "phonetic" layouts that map Russian Cyrillic
glyphs to similarly looking or sounding native keys.  These are readily
available for several layouts:

  $ sed -En '/Russian.+phonetic/s/.+: //p' 
/usr/X11R6/share/X11/xkb/rules/base.lst
  Russian (US, phonetic)
  Russian (Czech, phonetic)
  Russian (Germany, phonetic)
  Russian (Poland, phonetic Dvorak)
  Russian (phonetic)
  Russian (phonetic WinKeys)
  Russian (phonetic azerty)
  Russian (phonetic French)
  Russian (Sweden, phonetic)
  Russian (Sweden, phonetic, eliminate dead keys)

I personally use Yugoslav keyboard with my custom layout based on
standard Yugoslav Cyrillic rules.  Having same keys for punctuation make
typing in several languages much less painful.

> Any advice on what to be sure to find or not find on a keyboard?

All keyboards produced for Russia in last 15 to 20 years are identical
in terms of layout.  Be aware that some keyboards come with Russian
glyphs as pre-applied labels.  These don't last long.

-- 
Dmitrij D. Czarkoff

Re: Flaw in ipsec.conf(5)?

[Bruno Flueckiger]

After discussing this with Philipp Buehler off list I have reworked my
diff to make things easier in the example.

The paragraph which contains set skip on enc0 just before the ruleset
is removed. All filtering in the rule set is done on sk0, skipping enc0
entirely.

The new rule set looks like this:

block on sk0
set skip on enc0

pass  in on sk0 proto udp from 192.168.3.2 to 192.168.3.1 \
port {500, 4500}
pass out on sk0 proto udp from 192.168.3.1 to 192.168.3.2 \
port {500, 4500}

pass  in on sk0 proto esp from 192.168.3.2 to 192.168.3.1
pass out on sk0 proto esp from 192.168.3.1 to 192.168.3.2

pass  in on sk0 from 10.0.2.0/24 to 10.0.1.0/24 \
keep state (if-bound)
pass out on sk0 from 10.0.1.0/24 to 10.0.2.0/24 \
keep state (if-bound)


Index: sbin/ipsecctl/ipsec.conf.5
===
RCS file: /cvs/src/sbin/ipsecctl/ipsec.conf.5,v
retrieving revision 1.151
diff -u -p -r1.151 ipsec.conf.5
--- sbin/ipsecctl/ipsec.conf.5  9 Dec 2015 21:41:50 -   1.151
+++ sbin/ipsecctl/ipsec.conf.5  27 May 2016 11:07:55 -
@@ -493,20 +493,12 @@ Match traffic of phase 2 SAs using the
 keyword.
 .El
 .Pp
-If the filtering rules specify to block everything by default,
-the following rule
-would ensure that IPsec traffic never hits the packet filtering engine,
-and is therefore passed:
-.Bd -literal -offset indent
-set skip on enc0
-.Ed
-.Pp
 In the following example, all traffic is blocked by default.
 IPsec-related traffic from gateways {192.168.3.1, 192.168.3.2} and
 networks {10.0.1.0/24, 10.0.2.0/24} is permitted.
 .Bd -literal -offset indent
 block on sk0
-block on enc0
+set skip on enc0
 
 pass  in on sk0 proto udp from 192.168.3.2 to 192.168.3.1 \e
port {500, 4500}
@@ -516,13 +508,9 @@ pass out on sk0 proto udp from 192.168.3
 pass  in on sk0 proto esp from 192.168.3.2 to 192.168.3.1
 pass out on sk0 proto esp from 192.168.3.1 to 192.168.3.2
 
-pass  in on enc0 proto ipencap from 192.168.3.2 to 192.168.3.1 \e
-   keep state (if-bound)
-pass out on enc0 proto ipencap from 192.168.3.1 to 192.168.3.2 \e
-   keep state (if-bound)
-pass  in on enc0 from 10.0.2.0/24 to 10.0.1.0/24 \e
+pass  in on sk0 from 10.0.2.0/24 to 10.0.1.0/24 \e
keep state (if-bound)
-pass out on enc0 from 10.0.1.0/24 to 10.0.2.0/24 \e
+pass out on sk0 from 10.0.1.0/24 to 10.0.2.0/24 \e
keep state (if-bound)
 .Ed
 .Pp

Re: hardware recommendation for openbsd-based thin client?

[Kamil Cholewiński]

I have an alix 2d3 (no vga) running on 5.9 as a jumphost for ssh.

It's slow. It's *very* slow. Usable more or less only as a router,
firewall, jumphost, ntp, etc that sort of appliance. If you'd like, I
can run some benchmarks for common tasks like pkg_add or a compile, so
you can get an idea.

On Fri, 27 May 2016, Marko Cupać  wrote:
> Hi,
>
> I have just noticed that pcengines has alix models with VGA ports:
>
> http://www.pcengines.ch/alix3d3.htm
> http://www.pcengines.ch/alix1e.htm
>
> Anyone tried OpenBSD on them?
>
> Regards,
> --
> Before enlightenment - chop wood, draw water.
> After  enlightenment - chop wood, draw water.
>
> Marko Cupać
> https://www.mimar.rs/

Re: I need to get a Russian keyboard

[ropers]

If you're looking for the normal default ЙЦУКЕН / JTSUKEN /JCUKEN
layout*,*
that's pretty common, and you can just google/ebay/amazon search for
Russian/Cyrillic keyboards. (Exclude -stickers -sticker if there are too
many hits of those where you are.)

https://en.wikipedia.org/wiki/JCUKEN

Other layouts maybe harder to get.


On 27 May 2016 at 06:27, Chris Bennett 
wrote:

> This question has probably been asked before, but a lot has changed
> since then.
>
> I want to buy a new one, sent to the USA. Looked at Amazon briefly. Not
> sure if there may be a better place to order from.
> I don't want keyboard stickers that I saw.
> Right now I do almost everything in English and either grab a Spanish
> keyboard or use setxkbmap es and just remember what key is what.
>
> Is setxkbmap ru going to do the trick or will I need to do something
> else also or instead?
>
> Any advice on what to be sure to find or not find on a keyboard?
>
> Thanks,
> Chris Bennett

Re: I need to get a Russian keyboard

[Christoph Viethen]

Hello,

on 27.05.2016 06:27, Chris Bennett wrote:

This question has probably been asked before, but a lot has changed
since then.

I want to buy a new one, sent to the USA. Looked at Amazon briefly. Not
sure if there may be a better place to order from.


Cherry, for one of the largest manufacturers of keyboard switches, 
builds its classic G80-3000 with "US and cyrillic" layout (see 
http://www.cherry.de/cid/keyboards_G80-3000.htm?rdeLocationAttr=US=en 
, click on "Models").


Apple (in case you like those thin things where the keycaps barely 
move) sells one, too ...


http://www.apple.com/ru/shop/product/MB110RU/B

Unicomp (pckeyboard.com) of course, as somebody else suggested on this 
list, is a nice idea, too. Very solid stuff indeed ... may even be up 
to Russian military standards. ;-)



As for places to buy keyboards, I recently bought (a completely 
different, non-Cyrillic) one from "The Keyboard Company" in the UK, 
and at least their name suggests they seem to know a bit about that 
subject matter.


They also sell a "no-name" Russian-layout one 
http://www.keyboardco.com/keyboard/russian-keyboard-black-usb.asp , 
but I'm sure you could talk to them and ask them whether they can get 
ahold of the Cyrillic version of the Cherry (G80-3000LPCRB-x) in case 
you want a better one. I'm guessing they will ship world-wide.



Any advice on what to be sure to find or not find on a keyboard?


Sorry, I'm not competent to tell you about "standard" kb layouts and 
whatnot when it comes to Russia, but looking at the pictures of the 
Apple keyboard and the no-name one from that dealer, the layouts do 
seem to have a lot of similarities. (Not sure whether that really 
helps you. :) )



In any case, if you find a nice keyboard on some European site and you 
totally cannot find a way to get it shipped to the U.S., let me know 
off-list and maybe we can work something out.



Cheers,

  Christoph

--
 open...@aixplosive.net

Re: hardware recommendation for openbsd-based thin client?

[Marko Cupać]

Hi,

I have just noticed that pcengines has alix models with VGA ports:

http://www.pcengines.ch/alix3d3.htm
http://www.pcengines.ch/alix1e.htm

Anyone tried OpenBSD on them?

Regards,
--
Before enlightenment - chop wood, draw water.
After  enlightenment - chop wood, draw water.

Marko Cupać
https://www.mimar.rs/

Re: Flaw in ipsec.conf(5)?

[Bruno Flueckiger]

On Thu, May 26, 2016 at 08:41:49AM +0100, Jason McIntyre wrote:
> On Tue, May 24, 2016 at 10:53:16AM +0200, Bruno Flueckiger wrote:
> > Hi,
> > 
> > I've tested IPsec connections in my lab. The setup looks like this:
> > 
> > [cli] <-- vlan10 --> [gw1] <> [inet] <> [gw2] <-- vlan20 --> [srv]
> >   IPsec=
> 
> i think you should provide more details of your setup first. for
> example, ipsec.conf(5) shows pf rules for ipencap but you only provide a
> small snippet of your pf.conf. no vlan details. none of your tcpdump
> output that leads you to this conclusion. no routing details.
> 
> then keep your fingers crossed. i think most people run for the hills
> when they see ipsec mail.
> 
> jmc
> 

The network config looks like this:

vlan10: [cli] .11 <- 10.19.1.0/24 -> .1  [gw1]
vlan20: [gw2] .1  <- 10.81.1.0/24 -> .11 [srv]

The simulated internet between the gateways is one OpenBSD box which
forwards packets between the two subnets 10.0.19.0/24 and 10.0.81.0/24:

[gw1] .2 <- 10.0.19.0/24 -> .1 [inet] .1 <- 10.0.81.0/24 -> .2 [gw2]

There are no vlans defined for the two subnets between the gateways and
the [inet] box.  All machines are running OpenBSD 5.9-release on a
VMware ESXi 5.5. All network adapters are vmx, each adapter is connected
to a vSphere standard switch. There is one vSphere switch for each
subnet. None of the switches have physical nics assigned.

This is the ipsec.conf on [gw1]:

local_ip="10.0.19.2"
remote_ip="10.0.81.2"
local_net="10.19.1.0/24"
remote_net="10.81.1.0/24"
ike esp from $local_ip to $remote_ip
ike esp from $local_ip to $remote_net
ike esp from $local_net to $remote_net

This is the pf.conf on [gw1] in the version that blocks ipsec traffic on
interface enc0:

wan_if="vmx0"
local_net="10.19.1.0/24"
remote_ip="10.0.81.2"
remote_net="10.81.1.0/24"
icmp_types="{ echoreq unreach }"
ike_ports="{ isakmp ipsec-nat-t }"

set block-policy return
set skip on lo

match in all scrub (no-df random-id reassemble tcp)

block log all
pass in from (self)
pass out on $wan_if from (self) to any keep state

pass inet proto icmp all icmp-type $icmp_types keep state

pass in on vlan10 inet proto tcp from $local_net to vlan10 port ssh \
keep state (if-bound)

# Allow traffic for IPsec tunnel setup
pass in  on $wan_if proto udp from $remote_ip to $wan_if \
port $ike_ports
pass out on $wan_if proto udp from $wan_ifto $remote_ip \
port $ike_ports

# Allow esp packets between tunnel endpoints
pass in  on $wan_if proto esp from $remote_ip to $wan_if \
keep state (if-bound)
pass out on $wan_if proto esp from $wan_ifto $remote_ip \
keep state (if-bound)

# Allow encapsulated IP packets
pass in  on enc0 proto ipencap from $remote_ip to $wan_if \
keep state (if-bound)
pass out on enc0 proto ipencap from $wan_ifto $remote_ip \
keep state (if-bound)

# Allow traffic between the subnets
pass in  on vlan10 from $local_net  to $remote_net keep state
pass out on enc0   from $local_net  to $remote_net keep state (if-bound)
pass in  on enc0   from $remote_net to $local_net  keep state (if-bound)
pass out on vlan10 from $remote_net to $local_net  keep state

I run tcpdump -nettti pflog0 on [gw1]. Then I try to connect from [cli]
to [srv] by running ssh 10.81.1.11. This is the output from tcpdump when
using the above pf.conf on [gw1]:

tcpdump: WARNING: snaplen raised from 116 to 160
tcpdump: listening on pflog0, link-type PFLOG
May 27 08:27:04.754155 rule 1/(match) block out on enc0: esp 10.0.19.2 >
10.0.81.2 spi 0x621d35d7 seq 8 len 120
May 27 08:27:10.743030 rule 1/(match) block out on enc0: esp 10.0.19.2 >
10.0.81.2 spi 0x621d35d7 seq 9 len 120
May 27 08:27:22.739668 rule 1/(match) block out on enc0: esp 10.0.19.2 >
10.0.81.2 spi 0x621d35d7 seq 10 len 120
May 27 08:27:46.732233 rule 1/(match) block out on enc0: esp 10.0.19.2 >
10.0.81.2 spi 0x621d35d7 seq 11 len 120

This made me include the interface enc0 in the two rules for esp
packets. After this the connection works as expected. That made me write
the patch.

If something is unclear in my description of even more details are
needed I'm happy to provide those.

Cheers,
Bruno

Re: pledge and code profiling

[Sebastien Marie]

On Fri, May 27, 2016 at 06:10:26AM +, Luke Small wrote:
> Pledge does something odd, that I don't understand by reading the man page.
> It trips the system-call: SYS_PROFIL (44) when it ends its run in
> codeblocks IDE when profiling is enabled. Can I enable a pledge setting
> that enables this to complete? Is there a security reason that pledge is
> disabling profiling?

Currently, profil(2) syscall isn't allowed in a pledged program. We had
a previous discussion about that before (but I don't recall if it was on
public mailing-list or not).

The reason is pledge(2) allows only a subset of syscalls to be called.

For now, as workaround, you could build the program you want to profil
with:

 cc -g -D'pledge(pr,pa)=_nopledge'

This trick *should* work: the pledge definition in unistd.h will be
"changed" to variable declaration, and the pledge call will be "changed"
to access to the variable.

I hope it helps.
-- 
Sebastien Marie

pledge and code profiling

[Luke Small]

Pledge does something odd, that I don't understand by reading the man page.
It trips the system-call: SYS_PROFIL (44) when it ends its run in
codeblocks IDE when profiling is enabled. Can I enable a pledge setting
that enables this to complete? Is there a security reason that pledge is
disabling profiling?