Re: Install process: couple of comments

2017-10-19 Thread Stuart Henderson
On 2017-10-19, trondd  wrote:
> Why does everyone always go straight to google? (Yeah, I know, silly
> question.)  And then give up?
>
> Looking at the code might be a better start.  Line 163 is particularly
> interesting...
>
> http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/etc/rc?annotate=1.519

Or even the documentation, rc.conf(5):

 library_aslr  rc reorders some libraries for improved protection against
   ROP.

Kernel reordering can't be disabled like this, but at least it runs at the
end of startup, in the background.




Re: PostgREST post in OpenBSD

2017-10-19 Thread Karel Gardas
Looks like Haskell code. if you are familiar with Haskell app built
using cabal just give it a try. Haskell itself, i.e. posgrest should
not be issue here probably. What you may hit are various possible
issues in GHC's runtime. But honestly, GHC runs very nicely on OpenBSD
so well, good luck and give it a try and report back...

On Thu, Oct 19, 2017 at 6:26 AM, Tito Mari Francis Escaño
 wrote:
> Hi everyone! I'd like to ask if somebody already tried or is working
> on a port of PostgREST (https://github.com/begriffs/postgrest) in
> OpenBSD. It has a working FreeBSD port but of course I prefer it
> running on arguably the most secure OS on the planet.
> I'm not confident I can make a port on my VM hosting OBSD, anybody
> tried this approach before?
> Thanks in advance.
>



macpro boot openbsd 6.2 , but ,,,

2017-10-19 Thread Tuyosi T
hi

i have not touched  to  MAC till now .
the other day i got  macpro(mid 2006) under $80 at auction .

manjarolinux(64bit)’s grub boots openbsd .

the result is

1)
$ uname -ar
OpenBSD mac.my.domain 6.2 GENERIC.MP#134 amd64

2)
top
load averages:  0.10,  0.13,  0.06   mac.my.domain
17:08:07
33 processes: 32 idle, 1 on processor  up
0:11
CPU0 states:  0.6% user,  0.0% nice,  0.3% system,  0.1% interrupt, 99.1%
idle
CPU1 states:  0.3% user,  0.0% nice,  0.4% system,  0.0% interrupt, 99.3%
idle
CPU2 states:  0.1% user,  0.0% nice,  0.2% system,  0.0% interrupt, 99.7% id
CPU3 states:  0.0% user,  0.0% nice,  0.1% system,  0.0% interrupt, 99.8%
idle
Memory: Real: 23M/291M act/tot Free: 683M Cache: 194M Swap: 0K/5120M


3) the problem is that i can not reproduce tripleboot state (manjarolinux,
windows10 and openbsd) .

any way the previous openbsd is 6.1 .
i use legacy PC and CD(install62.fs ) and install OpenBSD area .
[ don’t touch msdos aea (wd0i)]

then openbsd 6.2 can be booted by manjarolinux’s grub .

4) failure
cd(install62.iso) can boot macpro and end all the installation process
include [cp /mnt/user/mdec/BOOT* /mnt2/efi/boot] .
but booting this hard disk , [entry point 0xf000158 ] error occurs .


5)failure
i could not install openbsd to  macpro by install62.fs burned USB memory
(power botton +c did not go well ).

i want to know the right way to install openbsd into macpro .
i hear macpro has many cores , 12 core

---
regards


Re: vmd: alpine-virt guest, clock synchronization issue

2017-10-19 Thread David Coppa
On Wed, Oct 18, 2017 at 10:03 PM, Mike Larkin  wrote:
> On Wed, Oct 18, 2017 at 12:07:16PM -0700, Mike Larkin wrote:
>> On Sat, Oct 14, 2017 at 01:31:28PM -0600, Shane Harbour wrote:
>> > On 10/14/2017 13:01, x9p wrote:
>> > > Hi,
>> > >
>> > > While running Alpine-virt 3.6.2 VM guest under OpenBSD 6.1 host, i 
>> > > noticed
>> > > the clock frequency is 2x slower on the guest machine. This can be a
>> > > problem for applications that relies on accurate time.
>> > >
>> > > Even after sync clock with ntpd inside alpine-virt guest, it gets
>> > > out-of-sync a few seconds later. I get on the guest about half the clock
>> > > frequency of the host.
>> > >
>> > > Anyone having similar problems?
>> > >
>> > > cheers.
>> > >
>> > > x9p
>> > >
>> >
>> > I've noticed the same thing on my laptop running an amd64 6.2 install. It
>> > was really very slow to install and slow via console and ssh now that I've
>> > got it running.  I just thought it was something I had done/was doing.  
>> > Even
>> > with ntpd running, it's now way behind.
>> >
>> > Regards,
>> > Shane
>> >
>>
>> You should be able to set the timecounter source to 'tsc' in VMs running in
>> -current. It is not the default choice (so set it in sysctl.conf if you want
>> that). That should greatly help reduce time drifts.
>>
>> You will really need -current though as the fix for this went in today.
>>
>> -ml
>
> To be super clear - you need -current on both the host and VM.

For linux guests, add "clocksource=tsc" to the kernel cmdline, but I
suspect it's the default...

Ciao!
David



Re: PostgREST post in OpenBSD

2017-10-19 Thread Christoph R. Murauer
Have a look at https://hackage.haskell.org/package/postgrest

I have not trieb but could do that later but a cabal install ...
should make it.

> Looks like Haskell code. if you are familiar with Haskell app built
> using cabal just give it a try. Haskell itself, i.e. posgrest should
> not be issue here probably. What you may hit are various possible
> issues in GHC's runtime. But honestly, GHC runs very nicely on OpenBSD
> so well, good luck and give it a try and report back...
>
> On Thu, Oct 19, 2017 at 6:26 AM, Tito Mari Francis Escaño
>  wrote:
>> Hi everyone! I'd like to ask if somebody already tried or is working
>> on a port of PostgREST (https://github.com/begriffs/postgrest) in
>> OpenBSD. It has a working FreeBSD port but of course I prefer it
>> running on arguably the most secure OS on the planet.
>> I'm not confident I can make a port on my VM hosting OBSD, anybody
>> tried this approach before?
>> Thanks in advance.
>>
>
>




Re: Flask app as UWSGI returning 500 when accessed through OpenBSD HTTPD

2017-10-19 Thread Kamil Cholewiński
I Am Not A uWSGI Expert, but the way we've been usually setting it up is
via plain HTTP reverse proxying, never CGI/FastCGI. I would try that
approach first.



Re: Openbsd 6.1 and Current Console Freezes and lockup Proxmox PVE5.0

2017-10-19 Thread Michał Koc



On Fri, Oct 13, 2017 at 11:05:12PM +0200, Michał Koc wrote:

On Thu, Oct 12, 2017 at 03:11:31PM -0700, Mike Larkin wrote:

On Thu, Oct 12, 2017 at 10:36:42PM +0200, Michał Koc wrote:

On Thu, Oct 12, 2017 at 01:23:36PM +0200, Michał Koc wrote:

On Sun, Oct 08, 2017 at 11:59:52PM +0200, Oliver Marugg wrote:

On 7 Oct 2017, at 22:01, Mike Larkin wrote:


On Sat, Oct 07, 2017 at 02:19:58PM +0200, Oliver Marugg wrote:

Just to add a 4th situation of hangs: Login via proxmox (pve)/kvm
serial
console (via noVNC), login successful: Vm guest in pve hangs, cpu
usage at
above 102%. Only way is to hard stop the Vm guest. -oliver


sounds like a kvm bug. Ask your provider to investigate the host side
when this
happens.

Thanks Mike, will do so. The proxmox guys have also the idea that it could
be a bug in kvm hypervisor (which is the hypervisor part for proxmox) and
will affect OpenBSD since 4.9, they wrote me in their public forum. As far
as I understood they do not know what OpenBSD needs in kvm or what/where
should be fixed in kvm run OpenBSD without that freezes.

-oliver

>From what I read, the cpu spins to 100%, which means somewhere on the host it's
likely spinning also. Start with systrace/ptrace/ktrace/whatever on the host
qemu-kvm and go from there...

-ml




Hi,

it looks like the cpu process of kvm (CPU 0/KVM) is issuing 1500+ of
ioctl(15, KVM_RUN, 0)  per second while running OpenBSD 6.2 guest.


What CPU profile is being presented to the OpenBSD guest?

I've seen things like this happen when a vCPU is claimed to have monitor/mwait
support, but the hypervisor implements those as NOPs, which just results in
spinning like this.

In short - try changing the type of CPU presented to the guest and see if that
changes behaviour. At least then you'll have more data points to work with.

-ml

Okey,
How would You disable monitor/mwait support in KVM to be presented to guest
?


Well, monitor/mwait was just what I recall contributing to something *like*
this.


PS, IIRC qemu -cpu ? will show you a list of recognized cpuid flags, from
which you can subtract off things you don't want.

Hi Mike,

Guest OpenBSD has those flags presented:
cpu0: FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,APIC,MMX,HV,PERF

What else should I switch off to get desired effect ?


Those flags are completely bizarre. Compare to vmm(4):

cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,PCLMUL,SSSE3,CX16,SSE4.1,SSE4.2,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,HV,NXE,RDTSCP,LONG,LAHF,ITSC,FSGSBASE,SMEP,ERMS

This is KVM on Debian 9 cripled to pentium

BR
M.K.


>From what you said above, proxmox doesn't even expose PAE or PGE, which means
it's emulating something like a 1990s era 80486 CPU. It doesn't even claim to
support LONG, which means no 64 bit mode either.

It sounds like whatever hypervisor you are using is completely messed up. You
need to take this up with the proxmox or KVM people.

-ml






Re: macppc netboot

2017-10-19 Thread Solène Rapenne

Je 2017-10-18 23:11, Christian Weisgerber skribis:

On 2017-10-18, Solène Rapenne  wrote:


Are you able to fetch /bsd.rd if you use tftp in command line ?


How is this relevant?

Netbooting is inherently machine-dependent.  Firmware aside, there
are also at least two OpenBSD bootloader flavors:
* pxeboot (amd64, i386) uses TFTP to load the kernel.
* netboot (alpha) and ofwboot.net (sparc64) load the kernel from
  an NFS server.

Looking at INSTALL.macppc, I see that macppc's ofwboot works along
the lines of alpha and sparc64.  If you are trying to give advice
based on amd64/i386, then this will be bogus and misleading.


Indeed, in this case the ofwboot is already retrieved so it's not a
tftp issue.

About the problem for booting on the nfs, I would try starting
tcpdump on the nfs server and see what happens when the client boots.



Re: Guess what today is

2017-10-19 Thread Craig Skinner
On Wed, 18 Oct 2017 06:16:09 -0400 STeve Andre' wrote:
> Happy birthday to OpenBSD--22 years old!

Congratulations to all the contributors - what proud parents you are!



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread x9p
nice to know. i had seen 5.9 and 6.1 only.

cheers.

x9p

> Sorry for the noise but I thought not, that they process my E-Mail so
> fast. Now also 6.2 is available.
>
>> FYI : 1984.is provides in the settings of the VPS OpenBSD 5.9 and 6.1.
>>
>>> Thanks Ajitabh, Christoph
>>>
>>> will give a try with the small island.
>>>
>>> cheers.
>>>
>>> x9p
>>>
>>>
 As already recommanded in another post www.1984.is They are located
 in
 Reykjavík / Iceland. I had in the past a OpenBSD VPS there (now
 shared
 hosting but maybe again a VPS). They provide by default Ubuntu /
 Debian but you also could use .ISO's. Drop them a mail about the
 .ISO's, they are friendly but thats are Debian people and they are
 unexperienced about OpenBSD - as they host using Debian / KVM.

 Remember, it is a island and sometimes they are not reachable  or
 slow
 (based on my location).

>>>
>>>
>>
>>
>>
>
>
>




Re: OpenBGPd Templates for IXP Manager

2017-10-19 Thread Stuart Henderson
On 2017-10-16, Mike Hammett  wrote:
> Here's a quick summary for those outside of the IX community. 
>
> OpenBGPd used to be the spine of the IX route server community. Once IXes 
> like AMS-IX and DE-CIX ran into scaling issues with the number of prefix 
> filters, a ton of IXes moved with them over to BIRD. Most IXes will never see 
> the scale that the previously mentioned do. This was around the 2012 
> time-frame. Also around the 2012 time-frame INEX released v3 of IXP Manager, 
> which took off among IXes. It automated many aspects of the IX. 
>
> Despite IXP Manager being fairly open and templated, INEX uses BIRD and 
> therefore only produces BIRD templates. We went OpenBGPd on OpenBSD for our 
> IXes due to OpenBSD's reputation for stability and security. Things have been 
> manual thus far. 
>
> We started a new IX earlier this year, which took advantage of the about to 
> be released IXP Manager v4. Still only BIRD templates, however Barry 
> O'Donovan (of INEX) mentioned that Peter Hessler had expressed interest in 
> working on OpenBGPd templates for IXP Manager. I had reached out to him, but 
> he's a busy guy and hasn't been able to follow up much. 
>
> I figured with OpenBGPd largely resolving the prefix filter performance 
> issues that getting templates for IXP Manager would allow IXes to find some 
> parity in OpenBGPd with BIRD and hopefully win back market share. However, 
> I'm not a programmer. I Google for what others have done and mash it 
> together, at least sometimes successfully. I attempted to forge through the 
> IXP Manager BIRD templates to convert them myself, but once I got to the meat 
> and potatoes of the config, I was in way over my head. There's PHP logic, 
> some template system logic, BIRD logic and no understanding from me. 
>
> I came here hoping to come across someone with more time than Peter who can 
> help me out with this. 
>
>
> https://www.inex.ie/pipermail/ixpmanager/2017-January/000905.html 
> http://ixp-manager.readthedocs.io/en/latest/features/router-configuration.html
>  
> http://ixp-manager.readthedocs.io/en/latest/features/looking-glass.html 
> https://github.com/inex/IXP-Manager/tree/17b5d36a57f40569c0da4fbb8e4f666d5e62921c/resources/views/api/v4/router
>  
> https://github.com/inex/IXP-Manager/tree/50c3781711ed38e773f86a8f3017d669d18e464d/resources/skins/inex/api/v4/router
>  

I'm unlikely to have any more time than phessler to look at it, but
my 2c: there are two separate parts to this work. One is supporting
openbgpd in templates, the other is changing things so that IXP Manager
has framework in place to work with _any_ non-BIRD daemon.

If you don't care about supporting BIRD as well initially, it might be
simpler to hack on the existing BIRD templates/scripts (there are some
parts in /tools/runtime as well) so they work with openbgpd instead.
This makes the task a bit easier than supporting both, and upstream
probably have ideas about how to do that integration anyway (but
there's not much point in them doing that unless there's some code
existing for a non-BIRD route server to make it worthwhile).

The following isn't going to help directly with IXP Manager changes
(and obviously IXP Manager has a much wider scope than just being
a route daemon config generator), but might be of interest to the
same people who read this - there's another IXP config generator
that *does* handle both BIRD and openbgpd:
https://arouteserver.readthedocs.io/




Re: Openbsd 6.1 and Current Console Freezes and lockup Proxmox PVE5.0

2017-10-19 Thread Michał Koc

-- Wiadomość oryginalna --
*Temat: *Re: Openbsd 6.1 and Current Console Freezes and lockup Proxmox 
PVE5.0

*Nadawca: *Mike Larkin 
*Adresat: *Michał Koc 
*Kopia: *misc@openbsd.org
*Data: *19.10.2017 08:36

On Fri, Oct 13, 2017 at 11:05:12PM +0200, Michał Koc wrote:

On Thu, Oct 12, 2017 at 03:11:31PM -0700, Mike Larkin wrote:

On Thu, Oct 12, 2017 at 10:36:42PM +0200, Michał Koc wrote:

On Thu, Oct 12, 2017 at 01:23:36PM +0200, Michał Koc wrote:

On Sun, Oct 08, 2017 at 11:59:52PM +0200, Oliver Marugg wrote:

On 7 Oct 2017, at 22:01, Mike Larkin wrote:


On Sat, Oct 07, 2017 at 02:19:58PM +0200, Oliver Marugg wrote:

Just to add a 4th situation of hangs: Login via proxmox (pve)/kvm
serial
console (via noVNC), login successful: Vm guest in pve hangs, cpu
usage at
above 102%. Only way is to hard stop the Vm guest. -oliver


sounds like a kvm bug. Ask your provider to investigate the host side
when this
happens.

Thanks Mike, will do so. The proxmox guys have also the idea that it could
be a bug in kvm hypervisor (which is the hypervisor part for proxmox) and
will affect OpenBSD since 4.9, they wrote me in their public forum. As far
as I understood they do not know what OpenBSD needs in kvm or what/where
should be fixed in kvm run OpenBSD without that freezes.

-oliver

>From what I read, the cpu spins to 100%, which means somewhere on the host it's
likely spinning also. Start with systrace/ptrace/ktrace/whatever on the host
qemu-kvm and go from there...

-ml




Hi,

it looks like the cpu process of kvm (CPU 0/KVM) is issuing 1500+ of
ioctl(15, KVM_RUN, 0)  per second while running OpenBSD 6.2 guest.


What CPU profile is being presented to the OpenBSD guest?

I've seen things like this happen when a vCPU is claimed to have monitor/mwait
support, but the hypervisor implements those as NOPs, which just results in
spinning like this.

In short - try changing the type of CPU presented to the guest and see if that
changes behaviour. At least then you'll have more data points to work with.

-ml

Okey,
How would You disable monitor/mwait support in KVM to be presented to guest
?


Well, monitor/mwait was just what I recall contributing to something *like*
this.


PS, IIRC qemu -cpu ? will show you a list of recognized cpuid flags, from
which you can subtract off things you don't want.

Hi Mike,

Guest OpenBSD has those flags presented:
cpu0: FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,APIC,MMX,HV,PERF

What else should I switch off to get desired effect ?


Those flags are completely bizarre. Compare to vmm(4):

cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,PCLMUL,SSSE3,CX16,SSE4.1,SSE4.2,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,HV,NXE,RDTSCP,LONG,LAHF,ITSC,FSGSBASE,SMEP,ERMS

>From what you said above, proxmox doesn't even expose PAE or PGE, which means
it's emulating something like a 1990s era 80486 CPU. It doesn't even claim to
support LONG, which means no 64 bit mode either.

It sounds like whatever hypervisor you are using is completely messed up. You
need to take this up with the proxmox or KVM people.

-ml



Hi Mike,

after some fiddling around with various setting it looks like setting 
machine in hvm to q35 
solves the problem at least partially.


The host cpu consumption in below 2% and I cannot see any hangs. Even 
under heavy cpu load.


BR
M.K.




Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Michael Hekeler
On Sun, Oct 15, 2017 at 11:45:40PM -0200, x9p wrote:
> > Try Hetzner CX series of servers in Germany. They are not actually
> > friendly, but have ISO mount so that you can install.
> 
> Could not find DMCA-related info on the pages of company. Being Germany, I
> expect the worst in torrent-related matters.

Wouldn´t it be strange to find information related to a United States 
Law on a german company´s homepage ;-)


> > Other one is https://www.1984.is in Iceland. I am planning to try one from
> > them in near future.
> Also could not find anything related, but being in Iceland it is worth a
> try :)

Please see my thought above and replace "german" with "iceland"

In analogy to the US Digital Millennium Copyright Act (DMCA) you can 
find Directive 2001/29/EC ("Copyright Directive") in the European Union.

Because Germany is part of the European Union maybe the hoster in 
germany can be seen as "not DMCA free" like in your question

Iceland is not a member of the European Union but proud to be a member 
of WIPO (World Intellectual Property Organization) and a signee of the
"WIPO Copyright Treaty"

But in the end and I don´t know your use case for the hosting...



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread x9p

I believe it already got a bit off-topic, sorry if its the case, but will
try to answer.

>> Could not find DMCA-related info on the pages of company. Being Germany,
>> I
>> expect the worst in torrent-related matters.
>
> Wouldn´t it be strange to find information related to a United States
> Law on a german company´s homepage ;-)
>
>

Not at all. Some hosting companies specific mention it. In this case a
Dutch company, which do not act(terminate) your hosting upon receiving
automatic email threats from DMCA lawyers, but require a written subpoena
to do so.

From:

https://abelohost.com/acceptable-use-policy/

"...Copyright related content and materials: Customer is responsible of
all content hosted in our servers and network. DMCA is not a Dutch
regulation so immediate suspension or termination WILL NOT be executed..."

>> > Other one is https://www.1984.is in Iceland. I am planning to try one
>> from
>> > them in near future.
>> Also could not find anything related, but being in Iceland it is worth a
>> try :)
>
> Please see my thought above and replace "german" with "iceland"
>
> In analogy to the US Digital Millennium Copyright Act (DMCA) you can
> find Directive 2001/29/EC ("Copyright Directive") in the European Union.
>

The company I mention above is also part of EU, I believe.

> Because Germany is part of the European Union maybe the hoster in
> germany can be seen as "not DMCA free" like in your question
>
> Iceland is not a member of the European Union but proud to be a member
> of WIPO (World Intellectual Property Organization) and a signee of the
> "WIPO Copyright Treaty"
>

as stated above, it depends on how company acts, not just on treaties.

> But in the end and I don´t know your use case for the hosting...

quoting myself, the answer is in the beginning of this email:

" >> expect the worst in torrent-related matters."

cheers.

x9p




Re: OpenBGPd Templates for IXP Manager

2017-10-19 Thread Mike Hammett
I believe IXP Manager has the pieces in place to work with non-BIRD route 
servers, but not having implemented an alternative, I can't be confident 
they're complete. However, a lot of IXP Manager is based on customizable 
templates, so I would be surprised if it didn't work here too. 

Thanks for the referral to ARouteServer. It has a lot of features and could be 
quite useful. It doesn't quite replace IXP Manager doing it natively, but it 
certainly advances me to my end goal. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 

- Original Message -

From: "Stuart Henderson"  
To: misc@openbsd.org 
Sent: Thursday, October 19, 2017 6:19:55 AM 
Subject: Re: OpenBGPd Templates for IXP Manager 

On 2017-10-16, Mike Hammett  wrote: 
> Here's a quick summary for those outside of the IX community. 
> 
> OpenBGPd used to be the spine of the IX route server community. Once IXes 
> like AMS-IX and DE-CIX ran into scaling issues with the number of prefix 
> filters, a ton of IXes moved with them over to BIRD. Most IXes will never see 
> the scale that the previously mentioned do. This was around the 2012 
> time-frame. Also around the 2012 time-frame INEX released v3 of IXP Manager, 
> which took off among IXes. It automated many aspects of the IX. 
> 
> Despite IXP Manager being fairly open and templated, INEX uses BIRD and 
> therefore only produces BIRD templates. We went OpenBGPd on OpenBSD for our 
> IXes due to OpenBSD's reputation for stability and security. Things have been 
> manual thus far. 
> 
> We started a new IX earlier this year, which took advantage of the about to 
> be released IXP Manager v4. Still only BIRD templates, however Barry 
> O'Donovan (of INEX) mentioned that Peter Hessler had expressed interest in 
> working on OpenBGPd templates for IXP Manager. I had reached out to him, but 
> he's a busy guy and hasn't been able to follow up much. 
> 
> I figured with OpenBGPd largely resolving the prefix filter performance 
> issues that getting templates for IXP Manager would allow IXes to find some 
> parity in OpenBGPd with BIRD and hopefully win back market share. However, 
> I'm not a programmer. I Google for what others have done and mash it 
> together, at least sometimes successfully. I attempted to forge through the 
> IXP Manager BIRD templates to convert them myself, but once I got to the meat 
> and potatoes of the config, I was in way over my head. There's PHP logic, 
> some template system logic, BIRD logic and no understanding from me. 
> 
> I came here hoping to come across someone with more time than Peter who can 
> help me out with this. 
> 
> 
> https://www.inex.ie/pipermail/ixpmanager/2017-January/000905.html 
> http://ixp-manager.readthedocs.io/en/latest/features/router-configuration.html
>  
> http://ixp-manager.readthedocs.io/en/latest/features/looking-glass.html 
> https://github.com/inex/IXP-Manager/tree/17b5d36a57f40569c0da4fbb8e4f666d5e62921c/resources/views/api/v4/router
>  
> https://github.com/inex/IXP-Manager/tree/50c3781711ed38e773f86a8f3017d669d18e464d/resources/skins/inex/api/v4/router
>  

I'm unlikely to have any more time than phessler to look at it, but 
my 2c: there are two separate parts to this work. One is supporting 
openbgpd in templates, the other is changing things so that IXP Manager 
has framework in place to work with _any_ non-BIRD daemon. 

If you don't care about supporting BIRD as well initially, it might be 
simpler to hack on the existing BIRD templates/scripts (there are some 
parts in /tools/runtime as well) so they work with openbgpd instead. 
This makes the task a bit easier than supporting both, and upstream 
probably have ideas about how to do that integration anyway (but 
there's not much point in them doing that unless there's some code 
existing for a non-BIRD route server to make it worthwhile). 

The following isn't going to help directly with IXP Manager changes 
(and obviously IXP Manager has a much wider scope than just being 
a route daemon config generator), but might be of interest to the 
same people who read this - there's another IXP config generator 
that *does* handle both BIRD and openbgpd: 
https://arouteserver.readthedocs.io/ 





Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Erik van Westen
Op 19-10-2017 om 14:51 schreef x9p:
> I believe it already got a bit off-topic, sorry if its the case, but will
> try to answer.
>
>>> Could not find DMCA-related info on the pages of company. Being Germany,
>>> I
>>> expect the worst in torrent-related matters.
>> Wouldn´t it be strange to find information related to a United States
>> Law on a german company´s homepage ;-)
>>
>>
> Not at all. Some hosting companies specific mention it. In this case a
> Dutch company, which do not act(terminate) your hosting upon receiving
> automatic email threats from DMCA lawyers, but require a written subpoena
> to do so.
>
[snip]

> quoting myself, the answer is in the beginning of this email:
>
> " >> expect the worst in torrent-related matters."
>
> cheers.
>
> x9p
>
>

But they WILL terminate your contract. Do not host in The Netherlands,
but in Switzerland or Iceland. Illegal torrents are forbidden in The
Netherlands, and actively chased nowadays.



Re: "switching console to com0"

2017-10-19 Thread Justin Mayes
Thanks for the replies all. This was very helpful. To clarify I was building 
some firewalls and didn’t have ssh running, a monitor/keyboard onsite, or 
install media. Disabling the serial port in the bios works though.

J

-Original Message-
From: Dahlberg, David [mailto:david.dahlb...@fkie.fraunhofer.de]
Sent: Tuesday, October 17, 2017 3:30 AM
To: Justin Mayes 
Subject: Re: [misc] "switching console to com0"

Am Dienstag, den 17.10.2017, 04:03 + schrieb Justin Mayes:
> Greetings all - what does one do when during the install you set the 
> default console to com0 and now your serial cable is not working?

Many possibilities:

- You ssh into the machine
- You just wait until booting has ended and the other ttys are started
- You boot the system from an external medium and edit boot.conf
- You type blindly (hoping that sending characters still works)
- You remove the serial port from your box (BIOS/EFI, PCI-Card)
  so that it is not discovered and /boot wont switch to it
  ... Or add an IMPI/iLO/etc "serial" port and make it become com0
- You reinstall the system
  ... from your backups (I guess you have them at hand, right? ;-)


And finally there is one possibility left. But you probably don't want to go 
into that. It is not for the faint hearted.

- Go buy yourself a new serial cable

Cheers
David




Re: macpro boot openbsd 6.2 , but ,,,

2017-10-19 Thread Tuyosi T
sorry correction

(wrong)
any way the previous openbsd is 6.1 .
i use legacy PC and CD(install62.fs ) and install OpenBSD area .
[ don’t touch msdos aea (wd0i)]

(right)
any way the previous openbsd is 6.1 .
i use legacy PC and CD(install62.iso ) and install OpenBSD area .
[ don’t touch msdos aea (wd0i)]


and the interesting is the following

http://blog.goo.ne.jp/kazuhirospd/e/a5cc783017c1ff2a699fce129fc72921
says that

The screen got dark, and  SSD began to access .
What began?
 I was watching the display ...,
 scared out of one's wits .
It came out on the screen with a light blue Windows flag.
It is the start screen of Windows 8.1.
By the way, this SSD was what I used on the main PC until this time.
i thought  it stopped with an error on the way .
but   it  washed up as it was.
Windows was running natively on MacPRO !
MacOSX could not be installed with my all efforts.
but MacPRO run  Windows 8.1  with no problem .
what a sarcasm it was !
---
but this is not the case for openbsd .


and
https://everymac.com/mac-answers/snow-leopard-mac-os-x-faq/mac-os-x-snow-leopard-64-bit-macs-64-bit-efi-boot-in-64-bit-mode.html
says that
--
Intel Core 2 Duo and Xeon processors are 64-bit. However, based on reader
reports received, as well as hands-on observation, it is believed that all
Macs with 64-bit processors released in 2006 only have a 32-bit EFI, and
consequently, only are capable of booting in 32-bit mode. This is of
particular disappointment to owners of the first Mac Pro, which despite
having a powerful 64-bit processor no doubt has had its "working life" cut
short by a 32-bit EFI.
-


---
regards


Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Christoph R. Murauer
To the other things spoken here (which I don't quote to keep it more
short). Hetzner is a German company, which is part of the EU. There
are not so many OpenBSD friendly hoster outside the USA and the EU.

See 1984s TERMS OF SERVICE at https://www.1984.is/tos/

The torrents and illegal topic will also maybe depend on the content
of the torrents. If you share something highly illegal - every
provider on this planet will give you a kick (earlier or later).

> nice to know. i had seen 5.9 and 6.1 only.
>
> cheers.
>
> x9p

They add the image today in the morning (European time).




Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Michael Hekeler
> Not at all. Some hosting companies specific mention it.

Interesting.
I didn´t knew..


> The company I mention above is also part of EU, I believe.

Germany (Hetzner) is
Iceland (1984) is not 

 
> quoting myself, the answer is in the beginning of this email:
> " >> expect the worst in torrent-related matters."

Ah, okay - I have not seen this.

Torrents are not basically illegal. So no problem with the hosters.

But of course you should not host something like pirate bay in EU. And
also better to stay away from the non-EU-members in europe (like swiss,
monaco, moldova...) 



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Michael Hekeler
Am Thu, 19 Oct 2017 16:32:34 +0200
schrieb "Christoph R. Murauer" :

> To the other things spoken here (which I don't quote to keep it more
> short). Hetzner is a German company, which is part of the EU. There
> are not so many OpenBSD friendly hoster outside the USA and the EU.

At the risk of sounding stupid, what is an "OpenBSD friendly hoster"?

When th admins of the company are able to give telephone support
regarding openBSD?



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Christoph R. Murauer

> At the risk of sounding stupid, what is an "OpenBSD friendly hoster"?

This question is better answered by the OP (it was part of the
original question IIRC). For me a OpenBSD .iso to use with their VPS.

>
> When th admins of the company are able to give telephone support
> regarding openBSD?

For me not. At 1984 they had no idea of OpenBSD related things. As I
wrote in a post before, that are Debian people.

But on the other hand, they are open minded to provide OpenBSD .iso's.





Re: cyrus imapd in 6.2 ports

2017-10-19 Thread Antoine Jacoutot
On Mon, Oct 16, 2017 at 12:27:59PM +, Peter J. Philipp wrote:
> Hi,
> 
> I got these messages with the new 6.2 cyrus imapd:
> 
> Oct 14 11:03:26 mercury imaps[55561]: client id sessionid=:
> "name" "Thunderbird" "version" "52.2.1"
> Oct 14 11:03:26 mercury imaps[55561]: Fatal error: Internal error:
> assertion failed: imap/message.c: 4286: !message_need(m, M_RECORD)
> Oct 14 11:03:26 mercury master[70566]: process type:SERVICE name:imaps
> path:/usr/local/cyrus/libexec/imapd age:0.542s pid:55561 exited, status 75
> 
> 
> I didnt know what to do with this, so I ran "reconstruct -O -V max" as
> _cyrus user, but that had the same failure in an assert failure.
> 
> So I decided to downgrade after upgrading to a new version wasn't
> possible.  I put the 6.1 /usr/ports/mail/cyrus_imapd in the 6.2 tree
> (after backign up the 6.2 cyrus_imapd) and made install after
> pkg_delete'ing the 6.2 cyrus_imapd.  It worked I, I made sure that that
> I ran the reconstruct again and it did mention there was a diff version
> and probably fixed it.  Either way I have my important mail running
> again and wanted to share.
> 
> If I want to go back to cyrus imapd version 3.x.x what should I look
> for?  or wait for?
> 
> If anyone has had the same problems perhaps they took greater care than
> me to get this going otherwise the downgrade seems to have worked for me.

Hi.

I can't reproduce the issue.
Did you properly convert your old DBs in case they were of type Berkeley?
https://cyrusimap.org/imap/download/upgrade.html

-- 
Antoine



How do I unsubscribe

2017-10-19 Thread Arnkjell Eriksen
How do I unsubscribe? 



Re: cyrus imapd in 6.2 ports

2017-10-19 Thread Peter J. Philipp
Hi!

Thanks, I won't lie.  I did look at that page, but I was in a panic and
didn't look at it carefully enough.  I did run the commands to lint the
config files but there was no output.  But I should have been trying to
convert my databases from berkeley db but I realise now they aren't even
in bdb format:

mercury$ for i in *.db; do hexdump -C $i | head -1; done
  a1 02 8b 0d 74 77 6f 73  6b 69 70 20 66 69 6c 65  |twoskip
file|
  a1 02 8b 0d 74 77 6f 73  6b 69 70 20 66 69 6c 65  |twoskip
file|
  a1 02 8b 0d 74 77 6f 73  6b 69 70 20 66 69 6c 65  |twoskip
file|
  a1 02 8b 0d 74 77 6f 73  6b 69 70 20 66 69 6c 65  |twoskip
file|
  a1 02 8b 0d 74 77 6f 73  6b 69 70 20 66 69 6c 65  |twoskip
file|

What I'm going to do what I had planned, was, to copy my imap stuff over
to another computer and upgrade that in all peace and taking my time. 
Then perhaps I can go back to the major version 3.

What I foolishly did was I did a pkg_add -u and expected everything to
still function without informing myself earlier.

Thanks Antoine for the link again,

-peter


On 10/19/17 17:55, Antoine Jacoutot wrote:
> On Mon, Oct 16, 2017 at 12:27:59PM +, Peter J. Philipp wrote:
>> Hi,
>>
>> I got these messages with the new 6.2 cyrus imapd:
>>
>> Oct 14 11:03:26 mercury imaps[55561]: client id sessionid=:
>> "name" "Thunderbird" "version" "52.2.1"
>> Oct 14 11:03:26 mercury imaps[55561]: Fatal error: Internal error:
>> assertion failed: imap/message.c: 4286: !message_need(m, M_RECORD)
>> Oct 14 11:03:26 mercury master[70566]: process type:SERVICE name:imaps
>> path:/usr/local/cyrus/libexec/imapd age:0.542s pid:55561 exited, status 75
>>
>>
>> I didnt know what to do with this, so I ran "reconstruct -O -V max" as
>> _cyrus user, but that had the same failure in an assert failure.
>>
>> So I decided to downgrade after upgrading to a new version wasn't
>> possible.  I put the 6.1 /usr/ports/mail/cyrus_imapd in the 6.2 tree
>> (after backign up the 6.2 cyrus_imapd) and made install after
>> pkg_delete'ing the 6.2 cyrus_imapd.  It worked I, I made sure that that
>> I ran the reconstruct again and it did mention there was a diff version
>> and probably fixed it.  Either way I have my important mail running
>> again and wanted to share.
>>
>> If I want to go back to cyrus imapd version 3.x.x what should I look
>> for?  or wait for?
>>
>> If anyone has had the same problems perhaps they took greater care than
>> me to get this going otherwise the downgrade seems to have worked for me.
> Hi.
>
> I can't reproduce the issue.
> Did you properly convert your old DBs in case they were of type Berkeley?
> https://cyrusimap.org/imap/download/upgrade.html
>



Re: cyrus imapd in 6.2 ports

2017-10-19 Thread Antoine Jacoutot
On Thu, Oct 19, 2017 at 04:15:43PM +, Peter J. Philipp wrote:
> Hi!
> 
> Thanks, I won't lie.  I did look at that page, but I was in a panic and
> didn't look at it carefully enough.  I did run the commands to lint the
> config files but there was no output.  But I should have been trying to
> convert my databases from berkeley db but I realise now they aren't even
> in bdb format:
> 
> mercury$ for i in *.db; do hexdump -C $i | head -1; done
>   a1 02 8b 0d 74 77 6f 73  6b 69 70 20 66 69 6c 65  |twoskip
> file|
>   a1 02 8b 0d 74 77 6f 73  6b 69 70 20 66 69 6c 65  |twoskip
> file|
>   a1 02 8b 0d 74 77 6f 73  6b 69 70 20 66 69 6c 65  |twoskip
> file|
>   a1 02 8b 0d 74 77 6f 73  6b 69 70 20 66 69 6c 65  |twoskip
> file|
>   a1 02 8b 0d 74 77 6f 73  6b 69 70 20 66 69 6c 65  |twoskip
> file|
> 
> What I'm going to do what I had planned, was, to copy my imap stuff over
> to another computer and upgrade that in all peace and taking my time. 
> Then perhaps I can go back to the major version 3.
> 
> What I foolishly did was I did a pkg_add -u and expected everything to
> still function without informing myself earlier.
> 
> Thanks Antoine for the link again,

No problem.
Keep me posted :-)



> 
> -peter
> 
> 
> On 10/19/17 17:55, Antoine Jacoutot wrote:
> > On Mon, Oct 16, 2017 at 12:27:59PM +, Peter J. Philipp wrote:
> >> Hi,
> >>
> >> I got these messages with the new 6.2 cyrus imapd:
> >>
> >> Oct 14 11:03:26 mercury imaps[55561]: client id sessionid=:
> >> "name" "Thunderbird" "version" "52.2.1"
> >> Oct 14 11:03:26 mercury imaps[55561]: Fatal error: Internal error:
> >> assertion failed: imap/message.c: 4286: !message_need(m, M_RECORD)
> >> Oct 14 11:03:26 mercury master[70566]: process type:SERVICE name:imaps
> >> path:/usr/local/cyrus/libexec/imapd age:0.542s pid:55561 exited, status 75
> >>
> >>
> >> I didnt know what to do with this, so I ran "reconstruct -O -V max" as
> >> _cyrus user, but that had the same failure in an assert failure.
> >>
> >> So I decided to downgrade after upgrading to a new version wasn't
> >> possible.  I put the 6.1 /usr/ports/mail/cyrus_imapd in the 6.2 tree
> >> (after backign up the 6.2 cyrus_imapd) and made install after
> >> pkg_delete'ing the 6.2 cyrus_imapd.  It worked I, I made sure that that
> >> I ran the reconstruct again and it did mention there was a diff version
> >> and probably fixed it.  Either way I have my important mail running
> >> again and wanted to share.
> >>
> >> If I want to go back to cyrus imapd version 3.x.x what should I look
> >> for?  or wait for?
> >>
> >> If anyone has had the same problems perhaps they took greater care than
> >> me to get this going otherwise the downgrade seems to have worked for me.
> > Hi.
> >
> > I can't reproduce the issue.
> > Did you properly convert your old DBs in case they were of type Berkeley?
> > https://cyrusimap.org/imap/download/upgrade.html
> >
> 

-- 
Antoine



while awaiting the 6.2 release song...

2017-10-19 Thread Ingo Schwarze
Hi,

now that OpenBSD 6.2 has been out for a bit but there are still
some weeks of anticipation for the 6.2 release song, and now that
CD sets are no longer being made in order to avoid the overhead and
instead focus on ongoing development, here is a small distraction
for the time being:

  OpenBSD songs 3.0-6.2 potpourri with artwork and release history 

  https://youtu.be/tuWadwmXCys

Don't forget that "no more CDs" doesn't imply no more need for
infrastructure, electricity, hackathons, and funding of special
development projects.  It's already October and

  http://www.openbsdfoundation.org/campaign2017.html

is still a bit short of the target, so have a look at:

  https://www.openbsd.org/donations.html

Thanks and enjoy,
  Ingo



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Erik van Westen


Op 19-10-2017 om 17:28 schreef Michael Hekeler:
>> Not at all. Some hosting companies specific mention it.
> Interesting.
> I didn´t knew..
>
>
>> The company I mention above is also part of EU, I believe.
> Germany (Hetzner) is
> Iceland (1984) is not 
>
>  
>> quoting myself, the answer is in the beginning of this email:
>> " >> expect the worst in torrent-related matters."
> Ah, okay - I have not seen this.
>
> Torrents are not basically illegal. So no problem with the hosters.
>
> But of course you should not host something like pirate bay in EU. And
> also better to stay away from the non-EU-members in europe (like swiss,
> monaco, moldova...) 

Given the mention of DMCA, chances are very high that illegal torrents
are being referred to. That means that one is only really safe in
Switzerland (where privacy laws really protects the (torrent) users) or
Iceland. The EU countries, and more specifically Germany, The
Netherlands and France follow a strict policy. I have no reason to
assume that matters are different in the other EU countries, although
there are a lot of bullet proof hosters in Romania and Bulgaria, but one
really does not want to be associated with that. Bullet proof hosting is
associated with criminal activities.

Especially Switzerland is probably the best choice (good
interconnections, low latency). Prices for VPS's are high though, and I
do not know the situation with OpenBSD hosting.



Re: macpro boot openbsd 6.2 , but ,,,

2017-10-19 Thread Dave Voutila
Have you tried using rEFInd for dual or triple-booting?

http://www.rodsbooks.com/refind/index.html

I use it to dual-boot macOS and OpenBSD on multiple systems. The order
I follow during upgrades or installs:

1) Install or upgrade macOS first because it will overwrite rEFInd if present
2) Boot into macOS Recovery Mode and install rEFInd
3) Boot OpenBSD installation media using rEFInd and perform install or upgrade
4) Reboot and OpenBSD should be selectable in rEFInd (you can
customize to make it have an icon, etc. see rEFInd docs.)

That's basically it at a high level. I won't go into detail about disk
partitions because that's a thoroughly documented topic.

On Thu, Oct 19, 2017 at 10:16 AM, Tuyosi T  wrote:
> sorry correction
>
> (wrong)
> any way the previous openbsd is 6.1 .
> i use legacy PC and CD(install62.fs ) and install OpenBSD area .
> [ don’t touch msdos aea (wd0i)]
>
> (right)
> any way the previous openbsd is 6.1 .
> i use legacy PC and CD(install62.iso ) and install OpenBSD area .
> [ don’t touch msdos aea (wd0i)]
>
>
> and the interesting is the following
>
> http://blog.goo.ne.jp/kazuhirospd/e/a5cc783017c1ff2a699fce129fc72921
> says that
> 
> The screen got dark, and  SSD began to access .
> What began?
>  I was watching the display ...,
>  scared out of one's wits .
> It came out on the screen with a light blue Windows flag.
> It is the start screen of Windows 8.1.
> By the way, this SSD was what I used on the main PC until this time.
> i thought  it stopped with an error on the way .
> but   it  washed up as it was.
> Windows was running natively on MacPRO !
> MacOSX could not be installed with my all efforts.
> but MacPRO run  Windows 8.1  with no problem .
> what a sarcasm it was !
> ---
> but this is not the case for openbsd .
>
>
> and
> https://everymac.com/mac-answers/snow-leopard-mac-os-x-faq/mac-os-x-snow-leopard-64-bit-macs-64-bit-efi-boot-in-64-bit-mode.html
> says that
> --
> Intel Core 2 Duo and Xeon processors are 64-bit. However, based on reader
> reports received, as well as hands-on observation, it is believed that all
> Macs with 64-bit processors released in 2006 only have a 32-bit EFI, and
> consequently, only are capable of booting in 32-bit mode. This is of
> particular disappointment to owners of the first Mac Pro, which despite
> having a powerful 64-bit processor no doubt has had its "working life" cut
> short by a 32-bit EFI.
> -
>
>
> ---
> regards



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Michael Hekeler
Am Thu, 19 Oct 2017 17:50:42 +0200
schrieb "Christoph R. Murauer" :

> 
> > At the risk of sounding stupid, what is an "OpenBSD friendly
> > hoster"?
> 
> This question is better answered by the OP (it was part of the
> original question IIRC). For me a OpenBSD .iso to use with their VPS.

Thank you.
In the past I only chose hosters where I was able to install from
uploaded iso. I thought this was standard.
But I think some hosters don´t let their customers istall what they
want.



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Christoph R. Murauer
> Thank you.
> In the past I only chose hosters where I was able to install from
> uploaded iso. I thought this was standard.
> But I think some hosters don´t let their customers istall what they
> want.
>
>

At 1984 you have also only a given list of .iso's but they write
explicit, if you don't see your prefered OS, talk to them - but no,
Windows will never happen.



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread x9p

>
> But they WILL terminate your contract. Do not host in The Netherlands,
> but in Switzerland or Iceland. Illegal torrents are forbidden in The
> Netherlands, and actively chased nowadays.
>
>

This is the tricky part for Netherlands. They will only terminate your
contract upon receiving a WRITTEN court order to do so. Lawyers are not
cheap. A lawsuit will not be brought against each and everyone using Pop
Corn Time to watch Hitman's Bodyguard, but it is really easy and cheap to
write an script, collect IPs via torrent, and send DMCA takedown notices.
DMCA free ignores this automatic scripts, but of course need to act upon
receiving a court order.

If you are Pirate Bay, ok, you should worry. If you are a John Nobody like
me, that will not happen anytime soon.

cheers.

x9p



Syntax Highlight for Atom

2017-10-19 Thread Andreas Krüger
Hi all,

If anybody wants then I just made a syntax highlighter available for
the Atom editor. The package is called language-pf
(https://atom.io/packages/language-pf)

Feel free to do any contributions to it

Andreas



Re: Openbsd 6.1 and Current Console Freezes and lockup Proxmox PVE5.0

2017-10-19 Thread Mike Larkin
On Thu, Oct 19, 2017 at 01:29:40PM +0200, Michał Koc wrote:
> -- Wiadomość oryginalna --
> *Temat: *Re: Openbsd 6.1 and Current Console Freezes and lockup Proxmox
> PVE5.0
> *Nadawca: *Mike Larkin 
> *Adresat: *Michał Koc 
> *Kopia: *misc@openbsd.org
> *Data: *19.10.2017 08:36
> > On Fri, Oct 13, 2017 at 11:05:12PM +0200, Michał Koc wrote:
> > > > On Thu, Oct 12, 2017 at 03:11:31PM -0700, Mike Larkin wrote:
> > > > > On Thu, Oct 12, 2017 at 10:36:42PM +0200, Michał Koc wrote:
> > > > > > > On Thu, Oct 12, 2017 at 01:23:36PM +0200, Michał Koc wrote:
> > > > > > > > On Sun, Oct 08, 2017 at 11:59:52PM +0200, Oliver Marugg wrote:
> > > > > > > > > > On 7 Oct 2017, at 22:01, Mike Larkin wrote:
> > > > > > > > > > 
> > > > > > > > > > > On Sat, Oct 07, 2017 at 02:19:58PM +0200, Oliver Marugg 
> > > > > > > > > > > wrote:
> > > > > > > > > > > > Just to add a 4th situation of hangs: Login via proxmox 
> > > > > > > > > > > > (pve)/kvm
> > > > > > > > > > > > serial
> > > > > > > > > > > > console (via noVNC), login successful: Vm guest in pve 
> > > > > > > > > > > > hangs, cpu
> > > > > > > > > > > > usage at
> > > > > > > > > > > > above 102%. Only way is to hard stop the Vm guest. 
> > > > > > > > > > > > -oliver
> > > > > > > > > > > > 
> > > > > > > > > > > sounds like a kvm bug. Ask your provider to investigate 
> > > > > > > > > > > the host side
> > > > > > > > > > > when this
> > > > > > > > > > > happens.
> > > > > > > > > > Thanks Mike, will do so. The proxmox guys have also the 
> > > > > > > > > > idea that it could
> > > > > > > > > > be a bug in kvm hypervisor (which is the hypervisor part 
> > > > > > > > > > for proxmox) and
> > > > > > > > > > will affect OpenBSD since 4.9, they wrote me in their 
> > > > > > > > > > public forum. As far
> > > > > > > > > > as I understood they do not know what OpenBSD needs in kvm 
> > > > > > > > > > or what/where
> > > > > > > > > > should be fixed in kvm run OpenBSD without that freezes.
> > > > > > > > > > 
> > > > > > > > > > -oliver
> > > > > > > > > >From what I read, the cpu spins to 100%, which means 
> > > > > > > > > >somewhere on the host it's
> > > > > > > > > likely spinning also. Start with 
> > > > > > > > > systrace/ptrace/ktrace/whatever on the host
> > > > > > > > > qemu-kvm and go from there...
> > > > > > > > > 
> > > > > > > > > -ml
> > > > > > > > > 
> > > > > > > > > 
> > > > > > > > > 
> > > > > > > > Hi,
> > > > > > > > 
> > > > > > > > it looks like the cpu process of kvm (CPU 0/KVM) is issuing 
> > > > > > > > 1500+ of
> > > > > > > > ioctl(15, KVM_RUN, 0)  per second while running OpenBSD 6.2 
> > > > > > > > guest.
> > > > > > > > 
> > > > > > > What CPU profile is being presented to the OpenBSD guest?
> > > > > > > 
> > > > > > > I've seen things like this happen when a vCPU is claimed to have 
> > > > > > > monitor/mwait
> > > > > > > support, but the hypervisor implements those as NOPs, which just 
> > > > > > > results in
> > > > > > > spinning like this.
> > > > > > > 
> > > > > > > In short - try changing the type of CPU presented to the guest 
> > > > > > > and see if that
> > > > > > > changes behaviour. At least then you'll have more data points to 
> > > > > > > work with.
> > > > > > > 
> > > > > > > -ml
> > > > > > Okey,
> > > > > > How would You disable monitor/mwait support in KVM to be presented 
> > > > > > to guest
> > > > > > ?
> > > > > > 
> > > > > Well, monitor/mwait was just what I recall contributing to something 
> > > > > *like*
> > > > > this.
> > > > > 
> > > > PS, IIRC qemu -cpu ? will show you a list of recognized cpuid flags, 
> > > > from
> > > > which you can subtract off things you don't want.
> > > Hi Mike,
> > > 
> > > Guest OpenBSD has those flags presented:
> > > cpu0: FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,APIC,MMX,HV,PERF
> > > 
> > > What else should I switch off to get desired effect ?
> > > 
> > Those flags are completely bizarre. Compare to vmm(4):
> > 
> > cpu0: 
> > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,PCLMUL,SSSE3,CX16,SSE4.1,SSE4.2,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,HV,NXE,RDTSCP,LONG,LAHF,ITSC,FSGSBASE,SMEP,ERMS
> > 
> > >From what you said above, proxmox doesn't even expose PAE or PGE, which 
> > >means
> > it's emulating something like a 1990s era 80486 CPU. It doesn't even claim 
> > to
> > support LONG, which means no 64 bit mode either.
> > 
> > It sounds like whatever hypervisor you are using is completely messed up. 
> > You
> > need to take this up with the proxmox or KVM people.
> > 
> > -ml
> > 
> > 
> Hi Mike,
> 
> after some fiddling around with various setting it looks like setting
> machine in hvm to q35 solves
> the problem at least partially.
> 
> The host cpu consumption in below 2% and I cannot see any hangs. Even under
> heavy cpu load.
> 
> BR
> M.K.
> 
> 

That's good to know. Thanks.

-ml



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Erik van Westen
Op 19-10-2017 om 20:27 schreef x9p:
>> But they WILL terminate your contract. Do not host in The Netherlands,
>> but in Switzerland or Iceland. Illegal torrents are forbidden in The
>> Netherlands, and actively chased nowadays.
>>
>>
> This is the tricky part for Netherlands. They will only terminate your
> contract upon receiving a WRITTEN court order to do so. 
You underestimate 'Stichting Brein'. They WILL get an ex parte (no
less!) court order. So you will not know you are being investigated
until a court order is served and you server is shut off. Only then you
will be told.


> Lawyers are not
> cheap.

Yes they are for 'Stichting Brein'. Their only purpose is to uphold the
rights of the copyright holders,
and they have lawyers are working for them. The copyright holders pay
and pay well for it.

>  A lawsuit will not be brought against each and everyone using Pop
> Corn Time to watch Hitman's Bodyguard, but it is really easy and cheap to
> write an script, collect IPs via torrent, and send DMCA takedown notices.
> DMCA free ignores this automatic scripts, but of course need to act upon
> receiving a court order.
'Stichting Brein' does have similar scripts. No worries.

>
> If you are Pirate Bay, ok, you should worry. If you are a John Nobody like
> me, that will not happen anytime soon.
>
> cheers.
>
> x9p

Try it and you will see. They will take action based on DMCA requests by
the way, they already do,
on behalf of the US copyright holders.
Not to frighten you, but that is how it works. Been there, seen that.
And yes, it has been announced they will start crackown on the smaller
targets (already started).

Follow the current standard operating procedures. It has been judged
that Stichting Brein WILL get
names based on ip addresses by court order, no further actions needed,
no further courts involved.

You seem to be blissfully unaware of the 'progress' in the Dutch legal
system thus far. Full blocking (ip-, name
and DNS based) for ISPs for TPB. If 'Stichting Brein' determines a new
ip address or name, they
demand a blockade, no court order needed.

I would not take the chance, and I live in The Netherlands. I don't need
to. But if I would build a setup,
it would be with a VPS in Switzerland. Never, ever in The Netherlands.

But back on topic. This has nothing to do with OpenBSD.



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread flipchan
What I would like to c is full disk encryption supported vms , you can easily 
do fde and encrypt the vm's disk from the providers side, noone does it (as far 
as I know)

On October 16, 2017 3:19:25 AM GMT+02:00, x9p  wrote:
>Hi,
>
>Anyone know a good non-DMCA-compliant (outside US) VPS hosting,
>OpenBSD-firendly? Traffic is mostly torrent-related.
>
>Good bandwidth and Bitcoin payments also a plus.
>
>Most offshore VPS providers offers default ubuntu-debian or centos iso
>images, some even FreeBSD iso, but OpenBSD is being a bit hard to find.
>In
>the past i saw some provider offering to mount your own custom iso via
>a
>webpanel, but this contact I have no more.
>
>If have any tips, will be welcomed.
>
>cheers.
>
>x9p

-- 
Take Care Sincerely flipchan layerprox dev

Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Mike
On 10/19/2017 11:36 AM, Michael Hekeler wrote:
> Am Thu, 19 Oct 2017 16:32:34 +0200
> schrieb "Christoph R. Murauer" :
> 
>> To the other things spoken here (which I don't quote to keep it more
>> short). Hetzner is a German company, which is part of the EU. There
>> are not so many OpenBSD friendly hoster outside the USA and the EU.
> 
> At the risk of sounding stupid, what is an "OpenBSD friendly hoster"?

For me, that's an easy answer.

An "OpenBSD friendly hoster" is one who knows you are running an OpenBSD
VPS, and doesn't suggest you change iptables settings when talking about
your firewall with their support team.



DragonFly 5.0 released!

2017-10-19 Thread SOUL_OF_ROOT 55
https://marc.info/?l=dragonfly-users&m=150816781917465&w=2

This release features HAMMER2 file system as a technology preview enabled
in the default generic kernel.

Code:

dfly# uname -a
DragonFly dfly.bagdala2.net 5.0-RELEASE DragonFly v5.0.0.2.ga9d62-RELEASE
#10: Tue Oct 17 07:25:14 EDT 2017
r...@dfly.bagdala2.net:/usr/obj/usr/src/sys/X86_64_GENERIC
 x86_64



Code:

dfly# gpt -v create /dev/da3
dfly# gpt create: /dev/da3: mediasize=500107862016; sectorsize=512;
blocks=976773168
dfly# gpt add -b 34 -i 0 -s 990 /dev/da3
dfly# gpt add -b 1024 -i 1 -s * /dev/da3
dfly# gpt -v show /dev/da3
gpt show: /dev/da3: mediasize=500107862016; sectorsize=512; blocks=976773168
 start   size  index  contents
 0  1  -  PMBR
 1  1  -  Pri GPT header
 2 32  -  Pri GPT table
34990  0  GPT part - DragonFly Label64
  1024  976772111  1  GPT part - DragonFly Label64
 976773135 32  -  Sec GPT table
 976773167  1  -  Sec GPT header

dfly# disklabel64 -rw da3s1 auto
dfly# disklabel64 -e da3s1

dfly# newfs_hammer2  /dev/da3s1e
newfs_hammer2: WARNING: HAMMER2 VFS not loaded, cannot get version info.
Using version 1
Volume /dev/da3s1e size 465.76GB
-
version:  1
total-size:   465.76GB (500103643136 bytes)
boot-area-size:64.00MB
aux-area-size:256.00MB
topo-reserved:  1.82GB
free-space:   463.62GB
vol-fsid: 442a0c12-b33a-11e7-a8ce-b9aeed3cce35
sup-clid: 442a0c25-b33a-11e7-a8ce-b9aeed3cce35
sup-fsid: 442a0c30-b33a-11e7-a8ce-b9aeed3cce35
PFS "LOCAL"
   clid 4430a88b-b33a-11e7-a8ce-b9aeed3cce35
   fsid 4430a89f-b33a-11e7-a8ce-b9aeed3cce35
PFS "DATA"
   clid 4430a8da-b33a-11e7-a8ce-b9aeed3cce35
   fsid 4430a8ea-b33a-11e7-a8ce-b9aeed3cce35



Code:

dfly# mount
ROOT on / (hammer, noatime, local)
devfs on /dev (devfs, nosymfollow, local)
/dev/serno/B620550018.s1a on /boot (ufs, local)
/pfs/@@-1:1 on /var (null, local)
/pfs/@@-1:2 on /tmp (null, local)
/pfs/@@-1:3 on /home (null, local)
/pfs/@@-1:4 on /usr/obj (null, local)
/pfs/@@-1:5 on /var/crash (null, local)
/pfs/@@-1:6 on /var/tmp (null, local)
procfs on /proc (procfs, local)
DATA on /data (hammer, noatime, local)
BACKUP on /backup (hammer, noatime, local)
/data/pfs/@@-1:1 on /data/backups (null, local)
/data/pfs/@@-1:2 on /data/nfs (null, NFS exported, local)
/dev/da3s1e@DATA on /test-hammer2 (hammer2, local)


Re: macpro boot openbsd 6.2 , but ,,,

2017-10-19 Thread Tuyosi T
thans for good information .
your writing is  difficult for the MAC newbie like me .
i need some time to understand it .

by the way
i uproad the scene how manjarolinux's grub boots openbsd 6.2 .
it is https://youtu.be/VCd8-ttmq4k .

i add a commment .
it is queer that my manjarolinux's grub can boot openbsd & windows 10
but cannot boot manjarolinux itself .
perhaps something is wrong .
-
regards


Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Peter Faiman
You use OpenBSD, so why are you worried about DMCA? That is, you must care 
about security so you’re already using aggressive blocklists, encrypted peers 
only, etc etc. A well configured torrent client leaks very little info.

Unless laws have changed and you don’t need any proof of wrongdoing besides 
lots of peer to peer bandwidth to get investigated? In that case, just ignore 
me. I don’t torrent anymore so I could be out of date. Actually if anyone knows 
more about the current status quo I’d like to hear more just out of curiosity. 
The discussion about the Netherlands has been tremendously interesting to me. 
Only asking since I’ve found other OpenBSD people do tend to be more astute and 
well informed than me!

>> On Oct 19, 2017, at 13:12, Mike  wrote:
>> 
>> On 10/19/2017 11:36 AM, Michael Hekeler wrote:
>> Am Thu, 19 Oct 2017 16:32:34 +0200
>> schrieb "Christoph R. Murauer" :
>> 
>>> To the other things spoken here (which I don't quote to keep it more
>>> short). Hetzner is a German company, which is part of the EU. There
>>> are not so many OpenBSD friendly hoster outside the USA and the EU.
>> 
>> At the risk of sounding stupid, what is an "OpenBSD friendly hoster"?
> 
> For me, that's an easy answer.
> 
> An "OpenBSD friendly hoster" is one who knows you are running an OpenBSD
> VPS, and doesn't suggest you change iptables settings when talking about
> your firewall with their support team.
> 



Re: DragonFly 5.0 released!

2017-10-19 Thread SOUL_OF_ROOT 55
My inspiration for posting here is the following topic:

https://forums.freebsd.org/threads/62876/

Em quinta-feira, 19 de outubro de 2017, SOUL_OF_ROOT 55 <
soulofroo...@gmail.com> escreveu:

>
> https://marc.info/?l=dragonfly-users&m=150816781917465&w=2
>
> This release features HAMMER2 file system as a technology preview enabled
> in the default generic kernel.
>
> Code:
>
> dfly# uname -a
> DragonFly dfly.bagdala2.net 5.0-RELEASE DragonFly v5.0.0.2.ga9d62-RELEASE
> #10: Tue Oct 17 07:25:14 EDT 2017 
> r...@dfly.bagdala2.net:/usr/obj/usr/src/sys/X86_64_GENERIC
>  x86_64
>
>
>
> Code:
>
> dfly# gpt -v create /dev/da3
> dfly# gpt create: /dev/da3: mediasize=500107862016; sectorsize=512;
> blocks=976773168
> dfly# gpt add -b 34 -i 0 -s 990 /dev/da3
> dfly# gpt add -b 1024 -i 1 -s * /dev/da3
> dfly# gpt -v show /dev/da3
> gpt show: /dev/da3: mediasize=500107862016; sectorsize=512;
> blocks=976773168
>  start   size  index  contents
>  0  1  -  PMBR
>  1  1  -  Pri GPT header
>  2 32  -  Pri GPT table
> 34990  0  GPT part - DragonFly Label64
>   1024  976772111  1  GPT part - DragonFly Label64
>  976773135 32  -  Sec GPT table
>  976773167  1  -  Sec GPT header
>
> dfly# disklabel64 -rw da3s1 auto
> dfly# disklabel64 -e da3s1
>
> dfly# newfs_hammer2  /dev/da3s1e
> newfs_hammer2: WARNING: HAMMER2 VFS not loaded, cannot get version info.
> Using version 1
> Volume /dev/da3s1e size 465.76GB
> -
> version:  1
> total-size:   465.76GB (500103643136 bytes)
> boot-area-size:64.00MB
> aux-area-size:256.00MB
> topo-reserved:  1.82GB
> free-space:   463.62GB
> vol-fsid: 442a0c12-b33a-11e7-a8ce-b9aeed3cce35
> sup-clid: 442a0c25-b33a-11e7-a8ce-b9aeed3cce35
> sup-fsid: 442a0c30-b33a-11e7-a8ce-b9aeed3cce35
> PFS "LOCAL"
>clid 4430a88b-b33a-11e7-a8ce-b9aeed3cce35
>fsid 4430a89f-b33a-11e7-a8ce-b9aeed3cce35
> PFS "DATA"
>clid 4430a8da-b33a-11e7-a8ce-b9aeed3cce35
>fsid 4430a8ea-b33a-11e7-a8ce-b9aeed3cce35
>
>
>
> Code:
>
> dfly# mount
> ROOT on / (hammer, noatime, local)
> devfs on /dev (devfs, nosymfollow, local)
> /dev/serno/B620550018.s1a on /boot (ufs, local)
> /pfs/@@-1:1 on /var (null, local)
> /pfs/@@-1:2 on /tmp (null, local)
> /pfs/@@-1:3 on /home (null, local)
> /pfs/@@-1:4 on /usr/obj (null, local)
> /pfs/@@-1:5 on /var/crash (null, local)
> /pfs/@@-1:6 on /var/tmp (null, local)
> procfs on /proc (procfs, local)
> DATA on /data (hammer, noatime, local)
> BACKUP on /backup (hammer, noatime, local)
> /data/pfs/@@-1:1 on /data/backups (null, local)
> /data/pfs/@@-1:2 on /data/nfs (null, NFS exported, local)
> /dev/da3s1e@DATA on /test-hammer2 (hammer2, local)


Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Mike
On 10/19/2017 5:28 PM, Peter Faiman wrote:
> You use OpenBSD, so why are you worried about DMCA? 

Well.. I'll admit that DMCA was the main thrust of the thread.

However, I was replying to the:

   At the risk of sounding stupid, what is an "OpenBSD friendly hoster"?

question that was posed.

But I also have to admit that your reply has sent me into a google
exploratory journey, in which I learned ~stuff~.

Thanks for that.  :)



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Michael Hekeler
> contract upon receiving a WRITTEN court order to do so. Lawyers are not
> cheap. A lawsuit will not be brought against each and everyone using Pop
> Corn Time to watch Hitman's Bodyguard, ...

hehe - you don´t know the situation in germany ;-)
I have seen many of these letters for "one time users" (even those with 
only a few seconds connection)



> ...but it is really easy and cheap to write an script, collect IPs via 
> torrent, and send DMCA takedown notices.

professional software exists. So noone hacks his own scripts.



> DMCA free ignores this automatic scripts, but of course need to act upon
> receiving a court order.

Thanks for the clarification of "DCMA free".



Re: Openbsd 6.1 and Current Console Freezes and lockup Proxmox PVE5.0

2017-10-19 Thread flipchan
I run openbsd6 vm's with kvm and I have no problems 

On October 8, 2017 11:59:52 PM GMT+02:00, Oliver Marugg  
wrote:
>On 7 Oct 2017, at 22:01, Mike Larkin wrote:
>
>> On Sat, Oct 07, 2017 at 02:19:58PM +0200, Oliver Marugg wrote:
>>> Just to add a 4th situation of hangs: Login via proxmox (pve)/kvm 
>>> serial
>>> console (via noVNC), login successful: Vm guest in pve hangs, cpu 
>>> usage at
>>> above 102%. Only way is to hard stop the Vm guest. -oliver
>>>
>>
>> sounds like a kvm bug. Ask your provider to investigate the host side
>
>> when this
>> happens.
>
>Thanks Mike, will do so. The proxmox guys have also the idea that it 
>could be a bug in kvm hypervisor (which is the hypervisor part for 
>proxmox) and will affect OpenBSD since 4.9, they wrote me in their 
>public forum. As far as I understood they do not know what OpenBSD
>needs 
>in kvm or what/where should be fixed in kvm run OpenBSD without that 
>freezes.
>
>-oliver

-- 
Take Care Sincerely flipchan layerprox dev

Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Michael Hekeler
> An "OpenBSD friendly hoster" is one who knows you are running an OpenBSD
> VPS, and doesn't suggest you change iptables settings when talking about
> your firewall with their support team.

Ah I see ;-)
I´m beginning to understand...
To me the term "OpenBSD friendly hoster" was not clear because for me a 
"friendly hoster" is one that cares for the hardware and doesn´t care 
for what I run inside my container (RedHat, *BSD, Plan9, whatever)



Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread flipchan
I want to c a system that Auto encrypts it vms (can "easily" be done with some 
lines of python/whateverulike) and just forward all abuses to the customer, 
some isp's does this , however they are fucking assholes ISP that are retarded 
like dg-access in sweden who doesn't care about its customers , I am thinking 
that Switzerland would be a good way to host something in but as allways do 
allooot of research, try out acouple of different and c who works 

On October 20, 2017 7:48:42 AM GMT+02:00, Michael Hekeler  
wrote:
>> An "OpenBSD friendly hoster" is one who knows you are running an
>OpenBSD
>> VPS, and doesn't suggest you change iptables settings when talking
>about
>> your firewall with their support team.
>
>Ah I see ;-)
>I´m beginning to understand...
>To me the term "OpenBSD friendly hoster" was not clear because for me a
>
>"friendly hoster" is one that cares for the hardware and doesn´t care 
>for what I run inside my container (RedHat, *BSD, Plan9, whatever)

-- 
Take Care Sincerely flipchan layerprox dev