Re: amdgpu: AMD 5700XT (NAVI10) misreported and non-working

2020-07-18 Thread Jonathan Gray
On Sun, Jul 19, 2020 at 01:13:51AM -0400, jcm...@gmail.com wrote:
> I saw that much of the amdgpu related drm code had been updated against
> linux 5.7 and decided to try it out using a recent snapshot.  While the
> amdgpu module loads and is able to mirror to both of my displays when in
> a tty, attempting to use startx or starting xenodm results in both
> displays showing a blank black screen.  When this occurs I am unable to
> switch to another tty though I am able to SSH into the system and poke
> around.

Userland support for navi10/gfx1010 requires at least llvm 9.
Currently llvm 8 is in the tree.  We stopped updating when the license
changed for the worse.  With llvm versions being tied to amd hardware
support and newer c++ standards, not updating is becoming increasingly
painful as time goes by so this may have to change in the near future.

I would expect the modesetting driver to be able to run even if amdgpu
with acceleration does not.  I'm not sure why it does not fallback.

> 
> 
> /etc/sysctl.conf
> 
> > machdep.allowaperture=1
> 
> 
> dmesg
> 
> > OpenBSD 6.7-current (GENERIC.MP) #358: Sat Jul 18 11:25:13 MDT 2020
> > dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> > real mem = 17111711744 (16319MB)
> > avail mem = 16578068480 (15810MB)
> > random: good seed from bootblocks
> > mpath0 at root
> > scsibus0 at mpath0: 256 targets
> > mainbus0 at root
> > bios0 at mainbus0: SMBIOS rev. 2.8 @ 0xdcecf000 (59 entries)
> > bios0: vendor American Megatrends Inc. version "1.C0" date 09/06/2019
> > bios0: Micro-Star International Co., Ltd. MS-7B79
> > acpi0 at bios0: ACPI 6.0
> > acpi0: sleep states S0 S3 S4 S5
> > acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT SSDT MCFG HPET SSDT UEFI 
> > VFCT IVRS SSDT CRAT CDIT BGRT SSDT SSDT WSMT
> > acpi0: wakeup devices GPP0(S4) GPP1(S4) GPP3(S4) GPP4(S4) GPP5(S4) GPP6(S4) 
> > GPP7(S4) GPP8(S4) GPP9(S4) GPPA(S4) GPPB(S4) GPPC(S4) GPPD(S4) GPPE(S4) 
> > GPPF(S4) GP17(S4) [...]
> > acpitimer0 at acpi0: 3579545 Hz, 32 bits
> > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> > cpu0 at mainbus0: apid 0 (boot processor)
> > cpu0: AMD Ryzen 5 2600 Six-Core Processor, 3400.52 MHz, 17-08-02
> > cpu0: 
> > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,FMA3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,SKINIT,TCE,TOPEXT,CPCTR,DBKP,PCTRL3,MWAITX,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,RDSEED,ADX,SMAP,CLFLUSHOPT,SHA,IBPB,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
> > cpu0: 64KB 64b/line 4-way I-cache, 32KB 64b/line 8-way D-cache, 512KB 
> > 64b/line 8-way L2 cache, 16MB 64b/line 16-way L3 cache
> > cpu0: ITLB 64 4KB entries fully associative, 64 4MB entries fully 
> > associative
> > cpu0: DTLB 64 4KB entries fully associative, 64 4MB entries fully 
> > associative
> > cpu0: smt 0, core 0, package 0
> > mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
> > cpu0: apic clock running at 99MHz
> > cpu0: mwait min=64, max=64, C-substates=1.1, IBE
> > cpu1 at mainbus0: apid 2 (application processor)
> > cpu1: AMD Ryzen 5 2600 Six-Core Processor, 3400.00 MHz, 17-08-02
> > cpu1: 
> > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,FMA3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,SKINIT,TCE,TOPEXT,CPCTR,DBKP,PCTRL3,MWAITX,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,RDSEED,ADX,SMAP,CLFLUSHOPT,SHA,IBPB,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
> > cpu1: 64KB 64b/line 4-way I-cache, 32KB 64b/line 8-way D-cache, 512KB 
> > 64b/line 8-way L2 cache, 16MB 64b/line 16-way L3 cache
> > cpu1: ITLB 64 4KB entries fully associative, 64 4MB entries fully 
> > associative
> > cpu1: DTLB 64 4KB entries fully associative, 64 4MB entries fully 
> > associative
> > cpu1: disabling user TSC (skew=102)
> > cpu1: smt 0, core 1, package 0
> > cpu2 at mainbus0: apid 4 (application processor)
> > cpu2: AMD Ryzen 5 2600 Six-Core Processor, 3400.00 MHz, 17-08-02
> > cpu2: 
> > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,FMA3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,SKINIT,TCE,TOPEXT,CPCTR,DBKP,PCTRL3,MWAITX,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,RDSEED,ADX,SMAP,CLFLUSHOPT,SHA,IBPB,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
> > cpu2: 64KB 64b/line 4-way I-cache, 32KB 64b/line 8-way D-cache, 512KB 
> > 64b/line 8-way L2 cache, 16MB 64b/line 16-way L3 cache
> > cpu2: ITLB 64 4KB entries fully associative, 64 4MB entries fully 
> > associative
> > cpu2: DTLB 64 4KB entries fully associative, 64 4MB entries fully 
> > associative
> > cpu2: smt 0, core 2, package 0
> > cpu3 at

Re: Shell account service providers

2020-07-18 Thread Chris Cappuccio
ibs...@ripsbusker.no.eu.org [ibs...@ripsbusker.no.eu.org] wrote:
> Aaron Mason writes:
> > What are you looking for in such a service?
> 
> Minimally, SSH login, 100GB disk space, and build tools
> 
> It's easy enough to find something like this, but it is usually bundled
> with other stuff and priced accordingly.
> 
> I'll mostly use it for nmh and mairix.

Why not just buy a cheap vhost?



Re: IPSec heavy traffic slows down all network traffic

2020-07-18 Thread Chris Cappuccio
jean-yves boisiaud [jean-yves.boisi...@alcor-consulting.fr] wrote:
> Last week, I upgraded a couple of firewalls using carp/pfsync and sasyncd
> from 6.0 to 6.7 (yes, big jump !).
> 
> I also applied all the 6.7 published patches.
> 
> When some heavy traffic takes one of the IPSec tunnel, I noticed that :
> - all network connections are slowed down
> - unused network bandwidth increase instead of decrease
> - idle CPU move towards 0, and spinning increase to take about 50% of the
> CPU
> 
> When I stop the IPSec traffic :
> - network connections increase immediatly
> - unused network bandwidth cecreases immediately
> - spinning CPU is low.
> 

This is basically a performance regression that could be due to the MP
work. You are seemingly running into contention that wasn't possible before.
The question is, where is this happening? I don't know if the dynamic tracer 
can help here. 



amdgpu: AMD 5700XT (NAVI10) misreported and non-working

2020-07-18 Thread jcmdln
I saw that much of the amdgpu related drm code had been updated against
linux 5.7 and decided to try it out using a recent snapshot.  While the
amdgpu module loads and is able to mirror to both of my displays when in
a tty, attempting to use startx or starting xenodm results in both
displays showing a blank black screen.  When this occurs I am unable to
switch to another tty though I am able to SSH into the system and poke
around.


/etc/sysctl.conf

> machdep.allowaperture=1


dmesg

> OpenBSD 6.7-current (GENERIC.MP) #358: Sat Jul 18 11:25:13 MDT 2020
> dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> real mem = 17111711744 (16319MB)
> avail mem = 16578068480 (15810MB)
> random: good seed from bootblocks
> mpath0 at root
> scsibus0 at mpath0: 256 targets
> mainbus0 at root
> bios0 at mainbus0: SMBIOS rev. 2.8 @ 0xdcecf000 (59 entries)
> bios0: vendor American Megatrends Inc. version "1.C0" date 09/06/2019
> bios0: Micro-Star International Co., Ltd. MS-7B79
> acpi0 at bios0: ACPI 6.0
> acpi0: sleep states S0 S3 S4 S5
> acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT SSDT MCFG HPET SSDT UEFI 
> VFCT IVRS SSDT CRAT CDIT BGRT SSDT SSDT WSMT
> acpi0: wakeup devices GPP0(S4) GPP1(S4) GPP3(S4) GPP4(S4) GPP5(S4) GPP6(S4) 
> GPP7(S4) GPP8(S4) GPP9(S4) GPPA(S4) GPPB(S4) GPPC(S4) GPPD(S4) GPPE(S4) 
> GPPF(S4) GP17(S4) [...]
> acpitimer0 at acpi0: 3579545 Hz, 32 bits
> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: AMD Ryzen 5 2600 Six-Core Processor, 3400.52 MHz, 17-08-02
> cpu0: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,FMA3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,SKINIT,TCE,TOPEXT,CPCTR,DBKP,PCTRL3,MWAITX,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,RDSEED,ADX,SMAP,CLFLUSHOPT,SHA,IBPB,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
> cpu0: 64KB 64b/line 4-way I-cache, 32KB 64b/line 8-way D-cache, 512KB 
> 64b/line 8-way L2 cache, 16MB 64b/line 16-way L3 cache
> cpu0: ITLB 64 4KB entries fully associative, 64 4MB entries fully associative
> cpu0: DTLB 64 4KB entries fully associative, 64 4MB entries fully associative
> cpu0: smt 0, core 0, package 0
> mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
> cpu0: apic clock running at 99MHz
> cpu0: mwait min=64, max=64, C-substates=1.1, IBE
> cpu1 at mainbus0: apid 2 (application processor)
> cpu1: AMD Ryzen 5 2600 Six-Core Processor, 3400.00 MHz, 17-08-02
> cpu1: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,FMA3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,SKINIT,TCE,TOPEXT,CPCTR,DBKP,PCTRL3,MWAITX,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,RDSEED,ADX,SMAP,CLFLUSHOPT,SHA,IBPB,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
> cpu1: 64KB 64b/line 4-way I-cache, 32KB 64b/line 8-way D-cache, 512KB 
> 64b/line 8-way L2 cache, 16MB 64b/line 16-way L3 cache
> cpu1: ITLB 64 4KB entries fully associative, 64 4MB entries fully associative
> cpu1: DTLB 64 4KB entries fully associative, 64 4MB entries fully associative
> cpu1: disabling user TSC (skew=102)
> cpu1: smt 0, core 1, package 0
> cpu2 at mainbus0: apid 4 (application processor)
> cpu2: AMD Ryzen 5 2600 Six-Core Processor, 3400.00 MHz, 17-08-02
> cpu2: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,FMA3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,SKINIT,TCE,TOPEXT,CPCTR,DBKP,PCTRL3,MWAITX,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,RDSEED,ADX,SMAP,CLFLUSHOPT,SHA,IBPB,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
> cpu2: 64KB 64b/line 4-way I-cache, 32KB 64b/line 8-way D-cache, 512KB 
> 64b/line 8-way L2 cache, 16MB 64b/line 16-way L3 cache
> cpu2: ITLB 64 4KB entries fully associative, 64 4MB entries fully associative
> cpu2: DTLB 64 4KB entries fully associative, 64 4MB entries fully associative
> cpu2: smt 0, core 2, package 0
> cpu3 at mainbus0: apid 8 (application processor)
> cpu3: AMD Ryzen 5 2600 Six-Core Processor, 3400.01 MHz, 17-08-02
> cpu3: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,FMA3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,SKINIT,TCE,TOPEXT,CPCTR,DBKP,PCTRL3,MWAITX,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,RDSEED,ADX,SMAP,CLFLUSHOPT,SHA,IBPB,XSAVEOPT,XSAVEC,XGETBV1,XSAVES
> cpu3: 64KB 64b/line 4-way I-cache, 32KB 64b/line 8-way D-cache, 512KB 
> 64b/line 8-way L2 cache, 16MB 64b/line 16-way L3 cache
> cpu3: ITLB 64 4KB entries fully associativ

Re: TLS stall ftp or pkg_add

2020-07-18 Thread Ottavio Caruso
On Sat, 18 Jul 2020 at 20:01, Kevin Chadwick  wrote:
>
> Has anyone else noticed stalls when using a https link in /etc/installurl.


In a qemu guest in user mode networking, which is notoriously not very
efficient:

oc@OpenBSD:~$ uname -sr
OpenBSD 6.6
oc@OpenBSD:~$ cat /etc/installurl
https://cdn.openbsd.org/pub/OpenBSD
oc@OpenBSD:~$ doas pkg_add bzip2
quirks-3.187 signed on 2020-05-19T14:41:48Z
bzip2-1.0.8: ok

No stalls here.

-- 
Ottavio Caruso



Re: dhcpd synchronization: leases recovery after downtime

2020-07-18 Thread edgar
On Jul 18, 2020 3:25 PM, Guy Godfroy  wrote:

  Hello,

  I am using two routers on OpenBSD (called mulder and scully), and I
  wish
  to make dhcpd listen on a carp interface between both of them. I am
  using the synchronization mechanism:

  mulder# rcctl get dhcpd flags
  -y em2 -Y em2 carp0

  scully# rcctl get dhcpd flags
  -y em2 -Y em2 carp0

  I tested it and it works great when both routers are up.

  But what is explained in the man page is that it is only a realtime
  sync. So if I understand correctly, when one of the hosts is down,
  there
  is no way for it to get the new leases when it gets back up. My
  thought
  about that is that it defeats the original purpose of the feature. My
  concerns are confirmed by the test:

  1. Make sure that carp0 master is mulder.
  2. Stop dhcpd on scully.
  3. Plug a new machine using a dhcp client on the network of carp0.
  4. Observe that the lease is present in /etc/dhcpd.leases on mulder.
  5. Start dhcpd on scully.
  6. Observe that the lease is missing in /etc/dhcpd.leases on scully.

  I have found no information about leases synchronization other than
  the
  one given in dhcpd man page, but I guess there is no possible leases
  recovery from other routers after a downtime, or when a new router is
  inserted in the stack.

  What is the correct solution to manage this case? Is there a
  possibility
  for a router to ask for its missing leases when it gets up? Something
  like this:

  0. mulder is up, scully is down.
  1. scully gets up and asks on multicast:
  "My last lease was created on date d, what's up since that date?"
  2. mulder answers:
  "Here is the leases created since d: ..."

  Thanks.

  Guy

Not sure how to integrate it properly but this sounds like a job for
ifstated(8).
Edgar 


Re: IPSec heavy traffic slows down all network traffic

2020-07-18 Thread Hrvoje Popovski
On 17.7.2020. 20:17, jean-yves boisiaud wrote:
> hello,
> 
> Last week, I upgraded a couple of firewalls using carp/pfsync and sasyncd
> from 6.0 to 6.7 (yes, big jump !).
> 
> I also applied all the 6.7 published patches.
> 
> When some heavy traffic takes one of the IPSec tunnel, I noticed that :
> - all network connections are slowed down
> - unused network bandwidth increase instead of decrease
> - idle CPU move towards 0, and spinning increase to take about 50% of the
> CPU
> 
> When I stop the IPSec traffic :
> - network connections increase immediatly
> - unused network bandwidth cecreases immediately
> - spinning CPU is low.
> 
> Yes I know, my hardware is a bit old. I understand that CPU raises due to
> IPSec crypto, but I do not understand why network performance decrease.


maybe intel mitigation stuff decreased your performance. it in from
openbsd 6.3 ...
don't know if you are using aes for ipsec, but you cpu doesn't have
aes-ni... maybe to try wireguard ? :)



Bug? having no monitor plugged in causes a reboot in bsd.rd

2020-07-18 Thread Alfred Morgan
OpenBSD upgrade.lan 6.7 GENERIC.MP#182 amd64

If I set tty com0 then bsd.rd boots fine. If I have a monitor plugged in
bsd.rd boots fine. If I don't have a monitor and I don't direct tty to com0
then bsd.rd reboots my machine after a few seconds.
Any tips on how I can inspect what is going on here?

-alfred


dhcpd synchronization: leases recovery after downtime

2020-07-18 Thread Guy Godfroy
Hello,

I am using two routers on OpenBSD (called mulder and scully), and I wish
to make dhcpd listen on a carp interface between both of them. I am
using the synchronization mechanism:

mulder# rcctl get dhcpd flags
-y em2 -Y em2 carp0

scully# rcctl get dhcpd flags
-y em2 -Y em2 carp0

I tested it and it works great when both routers are up.

But what is explained in the man page is that it is only a realtime
sync. So if I understand correctly, when one of the hosts is down, there
is no way for it to get the new leases when it gets back up. My thought
about that is that it defeats the original purpose of the feature. My
concerns are confirmed by the test:

  1. Make sure that carp0 master is mulder.
  2. Stop dhcpd on scully.
  3. Plug a new machine using a dhcp client on the network of carp0.
  4. Observe that the lease is present in /etc/dhcpd.leases on mulder.
  5. Start dhcpd on scully.
  6. Observe that the lease is missing in /etc/dhcpd.leases on scully.

I have found no information about leases synchronization other than the
one given in dhcpd man page, but I guess there is no possible leases
recovery from other routers after a downtime, or when a new router is
inserted in the stack.

What is the correct solution to manage this case? Is there a possibility
for a router to ask for its missing leases when it gets up? Something
like this:

  0. mulder is up, scully is down.
  1. scully gets up and asks on multicast:
"My last lease was created on date d, what's up since that date?"
  2. mulder answers:
"Here is the leases created since d: ..."

Thanks.

Guy



Re: TLS stall ftp or pkg_add

2020-07-18 Thread Theo de Raadt
I think that machine is badly filtered.  I don't think it is our
problem.


Kevin Chadwick  wrote:

> Has anyone else noticed stalls when using a https link in /etc/installurl.
> 
> I found that downloading the following file works fine in Chrome but stalls at
> 128K every time via ftp before completing a significant time later.
> 
> https://ftp.heanet.ie/pub/OpenBSD/snapshots/packages/amd64/bzip2-1.0.8.tgz
> 
> It also downloads without stalling via ftp as an http link.
> 



Re: OpenSMTPd stops after connection errors

2020-07-18 Thread
Hi again,

While working on smtpd, i realized that my openssl[0] tests were failing
too. Obviously, the cipher info is empty.

openssl s_client -connect my_IP:25 -starttls smtp -tls1_1

...
...
New, (NONE), Cipher is (NONE)
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol  : TLSv1.1
Cipher: 
Session-ID:
Session-ID-ctx:
Master-Key:
Start Time: 1595094409
Timeout   : 7200 (sec)
Verify return code: 0 (ok)
---
...

Related log lines from "/var/log/maillog"
Jul 18 21:28:42 volgograd smtpd[32258]: d680225f58ddc566 smtp connected
address=XX.YY.ZZ.QQ host=mx.domainname.com
Jul 18 21:28:42 volgograd smtpd[32258]: d680225f58ddc566 smtp disconnected
reason="io-error: error:140270C1:SSL routines:ACCEPT_SR_CLNT_HELLO_C:no
shared cipher"

As you see in the above output there is no selected cipher for this
conversation. "Cipher :  and New, (NONE), Cipher is (NONE)"
I'm trying to understand what is happening here but could not find any
clue. The smtpd.conf man page says, there is a default set of ciphers for
SSL / TLS connections.


Re: VMM Debian guest serial setup help needed

2020-07-18 Thread Aaron Miller
On Sat, 2020-07-18 at 10:46 +0200, Benjamin Baier wrote:
> On Fri, 17 Jul 2020 23:50:06 -0700
> Aaron Miller <
> aa...@iforgotmy.name
> > wrote:
> 
> > On Fri, 2020-06-12 at 17:46 -0400, George wrote:
> > > On 2020-06-12 11:17 a.m., George wrote:
> > > > [...]
> > 
> > Hey George,
> > 
> > I don't know if you resolved this, but I was able to get
> > further
> > than this loosely following Benjamin's instructions. I skipped
> > the part about the virtio-modules which doesn't seem to be
> > necessary now (and the link is 404 now anyway).
> > 
> > I was able to go through the menu (starting with Install, and
> > skipping the modprobe commands) but DHCP didn't work, and I'm
> > not sure what's broken.
> > 
> > To answer your question, you need to press Esc _after_
> > selecting Install. Maybe that's why you saw the "boot>"
> > prompt.
> > 
> > It worked for me and I just ran lsmod since I didn't have any
> > modules to insert:
> > 
> > ~ # lsmod
> > Module  Size  Used by
> > virtio_blk 20480  0
> > virtio_net 32768  0
> > virtio_pci 24576  0
> > virtio_ring24576  3
> > virtio_blk,virtio_net,virtio_pci
> > virtio 16384  3
> > virtio_blk,virtio_net,virtio_pci
> > 
> > I hope this helps, and please let me know if you or anyone
> > else
> > has an idea of why DHCP isn't working in the guest VM.
> 
> With the virtio modules now included in the installer you can
> skip my
> tutorial. You only need to change bootparameters in GRUB to pass
> vga=off console=ttyS0,115200n8 to the linux kernel.

OK good to know, thanks. I was unaware that the boot parameters
could be specified there rather than by editing TXT.CFG in the
boot image.

> As for DHCP, it depends on your config: is pf blocking DHCP
> traffic?

No.

> is the bridge/switch interface set up correctly?

Perhaps not. I tried a variety of things with bridge0, like
attempting to add my host's egress interface (iwm0) to it,
resulting in a "Device busy" error. I also tried creating a vether
device and attaching that, as described in the Virtualization FAQ.

Using tcpdump on tap0, I was able to see bootp and arp packets
coming from the guest. I did not see any replies from the host
though. Running tcpdump on bridge0 did not show any packets no
matter what I tried.

> is sysctl net.inet.ip.{m,}forwarding set to 1?

Yes.

> do you use vmctl -L (local interface)?
> 

I tried -L but vmctl didn't seem to like that in combination with
a VM specified in vm.conf. I also tried replacing 'interface {
switch "uplink" }' with 'local interface' but that didn't seem to
make a difference.

Thanks for the help so far!
--Aaron



TLS stall ftp or pkg_add

2020-07-18 Thread Kevin Chadwick
Has anyone else noticed stalls when using a https link in /etc/installurl.

I found that downloading the following file works fine in Chrome but stalls at
128K every time via ftp before completing a significant time later.

https://ftp.heanet.ie/pub/OpenBSD/snapshots/packages/amd64/bzip2-1.0.8.tgz

It also downloads without stalling via ftp as an http link.



PCI passthru now working for OpenBSD guests in FreeBSD bhyve

2020-07-18 Thread Anatoli
Hi All,

Just FYI, after years of PCI passthru* not working for OpenBSD guests in FreeBSD
bhyve due to 2 bugs, a week ago the fixes were made available in FreeBSD
12.1-RELEASE-p7.

Now it's possible to use a OpenBSD guest as a main firewall for a FreeBSD host,
OpenBSD guest taking full control of the internet-connected NIC, isolating this
way the host and other guests from unrestricted network flow.

The details were recently published in the FreeBSD Quarterly Status Report -
Second Quarter 2020: [1].

Regards,
Anatoli

* PCI devices passthru is a technique to pass host PCI devices to a virtual
machine for its exclusive control and use. 

[1] 
https://www.freebsd.org/news/status/report-2020-04-2020-06.html#PCI-passthrough-with-bhyve-on-Intel-and-for-OpenBSD-guests



Re: VMM Debian guest serial setup help needed

2020-07-18 Thread Benjamin Baier
On Fri, 17 Jul 2020 23:50:06 -0700
Aaron Miller  wrote:

> On Fri, 2020-06-12 at 17:46 -0400, George wrote:
> > On 2020-06-12 11:17 a.m., George wrote:
> > > On 2020-06-10 4:15 p.m., Benjamin Baier wrote:
> > > > On Wed, 10 Jun 2020 14:36:46 -0400
> > > > George <
> > > > g.lis...@nodeunit.com
> > > > > wrote:
> > > > 
> > > > > Hi guys,
> > > > > 
> > > > > I apologize if this maybe out of topic even though it is
> > > > > truly related
> > > > > to VMM than Debian.
> > > > > 
> > > > > I am trying to setup a VMM Debian based guest but I'm not
> > > > > able to 
> > > > > get it
> > > > > to work. I found some description on the web about which
> > > > > settings to
> > > > > edit in grub.cfg to enable the serial console and created
> > > > > a VM with 
> > > > > 10.3
> > > > > in qcow2 disk format in KVM. Now I am trying to start the
> > > > > same on
> > > > > OpenBSD 6.7 but keep getting the connected message and
> > > > > then just
> > > > > "Rebooting " after I hit some keyboard keys seems like
> > > > > baud rate issue
> > > > > but not sure.
> > > > 
> > > > Don't need the KVM/qemu step.
> > > 
> > > Didn't know that was possible, much better thanks :)
> > > > > After messing with it for a while now I am getting a new
> > > > > error:
> > > > > 
> > > > > vmctl: could not open disk image(s)
> > > > 
> > > > Better start over.
> > > 
> > > And so I did ...
> > > > > even thought the disk is there and readable to the user I
> > > > > have setup in
> > > > > vm.conf in fact I have another VM with the same
> > > > > configuration and disk
> > > > > with the same permissions and in the same location that
> > > > > works (it is
> > > > > OpenBSD based).
> > > > > 
> > > > > I would greatly appreciate it if someone has gone this
> > > > > path and can
> > > > > share some config info with me.
> > > > 
> > > > Here is how I got debian 9 (stretch) installed.
> > > > http://www.netzbasis.de/openbsd/vmd-debian/index.html
> > > > 
> > > > I think the virtio-modules are now included in the debian 10
> > > > (buster)
> > > > installer, but not tested.
> I believe I can confirm this. See below.
> 
> > > > 
> > > 
> > > I am trying your preped boot.img so far going through install
> > > options 
> > > most of which lead to:
> > > 
> > > Loading linux... ok
> > > Loading initrd.gz...ok
> > > Probing EDD (edd=off to disable)... ok
> > > Undefined video mode number: 314
> > > Press  to see video modes available,  to
> > > continue, or 
> > > wait 30 sec
> > > Mode: Resolution:  Type:
> > > 0 F00   80x25  CGA/MDA/HGC
> > > Enter a video mode or "scan" to scan for additional modes:
> > > 
> > > trying Install which I thought would be best (2-nd one after
> > > Graphical 
> > > Install) hangs with:
> > > 
> > > [0.00] ACPI BIOS Error (bug): A valid RSDP was not
> > > found 
> > > (20160831/tbxfroot-244)
> > > [0.806052] Initramfs unpacking failed: write error
> > > [0.814403] [Firmware Bug]: cpu 0, invalid IBS interrupt
> > > offset 0 
> > > (MSRC001103A=0x)
> > > [1.852264] mce: Unable to init device /dev/mcelog (rc: -5)
> > > 
> > > Thanks for your help and the page!
> > 
> > 
> > I tried a few more times still no luck. What is the key
> > combination I 
> > need to use to get into a shell to load the modules. Hitting Esc
> > puts me 
> > into boot> program which does not understand module handling
> > etc.. and 
> > the menu does not let me to run a shell. I am missing something
> > ...?
> > 
> > Thanks!
> > 
> 
> Hey George,
> 
> I don't know if you resolved this, but I was able to get further
> than this loosely following Benjamin's instructions. I skipped the part about 
> the virtio-modules which doesn't seem to be necessary now (and the link is 
> 404 now anyway).
> 
> I was able to go through the menu (starting with Install, and skipping the 
> modprobe commands) but DHCP didn't work, and I'm not sure what's broken.
> 
> To answer your question, you need to press Esc _after_ selecting Install. 
> Maybe that's why you saw the "boot>" prompt.
> 
> It worked for me and I just ran lsmod since I didn't have any modules to 
> insert:
> 
> ~ # lsmod
> Module  Size  Used by
> virtio_blk 20480  0
> virtio_net 32768  0
> virtio_pci 24576  0
> virtio_ring24576  3 virtio_blk,virtio_net,virtio_pci
> virtio 16384  3 virtio_blk,virtio_net,virtio_pci
> 
> I hope this helps, and please let me know if you or anyone else
> has an idea of why DHCP isn't working in the guest VM.

With the virtio modules now included in the installer you can skip my
tutorial. You only need to change bootparameters in GRUB to pass
vga=off console=ttyS0,115200n8 to the linux kernel.

As for DHCP, it depends on your config: is pf blocking DHCP traffic?
is the bridge/switch interface set up correctly?
is sysctl net.inet.ip.{m,}forwarding set to 1?
do you use vmctl -L (local interface)?



Re: I hold the ctrl key and boot still runs my boot.conf

2020-07-18 Thread Alfred Morgan
I guess this would explain it.
/usr/src/sys/arch/amd64/stand/efiboot/efiboot.c:
efi_cons_getshifts(dev_t dev)
{
/* XXX */
return (0);
}

Any reason for this?

-alfred


Re: VMM Debian guest serial setup help needed

2020-07-18 Thread Aaron Miller
On Fri, 2020-06-12 at 17:46 -0400, George wrote:
> On 2020-06-12 11:17 a.m., George wrote:
> > On 2020-06-10 4:15 p.m., Benjamin Baier wrote:
> > > On Wed, 10 Jun 2020 14:36:46 -0400
> > > George <
> > > g.lis...@nodeunit.com
> > > > wrote:
> > > 
> > > > Hi guys,
> > > > 
> > > > I apologize if this maybe out of topic even though it is
> > > > truly related
> > > > to VMM than Debian.
> > > > 
> > > > I am trying to setup a VMM Debian based guest but I'm not
> > > > able to 
> > > > get it
> > > > to work. I found some description on the web about which
> > > > settings to
> > > > edit in grub.cfg to enable the serial console and created
> > > > a VM with 
> > > > 10.3
> > > > in qcow2 disk format in KVM. Now I am trying to start the
> > > > same on
> > > > OpenBSD 6.7 but keep getting the connected message and
> > > > then just
> > > > "Rebooting " after I hit some keyboard keys seems like
> > > > baud rate issue
> > > > but not sure.
> > > 
> > > Don't need the KVM/qemu step.
> > 
> > Didn't know that was possible, much better thanks :)
> > > > After messing with it for a while now I am getting a new
> > > > error:
> > > > 
> > > > vmctl: could not open disk image(s)
> > > 
> > > Better start over.
> > 
> > And so I did ...
> > > > even thought the disk is there and readable to the user I
> > > > have setup in
> > > > vm.conf in fact I have another VM with the same
> > > > configuration and disk
> > > > with the same permissions and in the same location that
> > > > works (it is
> > > > OpenBSD based).
> > > > 
> > > > I would greatly appreciate it if someone has gone this
> > > > path and can
> > > > share some config info with me.
> > > 
> > > Here is how I got debian 9 (stretch) installed.
> > > http://www.netzbasis.de/openbsd/vmd-debian/index.html
> > > 
> > > I think the virtio-modules are now included in the debian 10
> > > (buster)
> > > installer, but not tested.
I believe I can confirm this. See below.

> > > 
> > 
> > I am trying your preped boot.img so far going through install
> > options 
> > most of which lead to:
> > 
> > Loading linux... ok
> > Loading initrd.gz...ok
> > Probing EDD (edd=off to disable)... ok
> > Undefined video mode number: 314
> > Press  to see video modes available,  to
> > continue, or 
> > wait 30 sec
> > Mode: Resolution:  Type:
> > 0 F00   80x25  CGA/MDA/HGC
> > Enter a video mode or "scan" to scan for additional modes:
> > 
> > trying Install which I thought would be best (2-nd one after
> > Graphical 
> > Install) hangs with:
> > 
> > [0.00] ACPI BIOS Error (bug): A valid RSDP was not
> > found 
> > (20160831/tbxfroot-244)
> > [0.806052] Initramfs unpacking failed: write error
> > [0.814403] [Firmware Bug]: cpu 0, invalid IBS interrupt
> > offset 0 
> > (MSRC001103A=0x)
> > [1.852264] mce: Unable to init device /dev/mcelog (rc: -5)
> > 
> > Thanks for your help and the page!
> 
> 
> I tried a few more times still no luck. What is the key
> combination I 
> need to use to get into a shell to load the modules. Hitting Esc
> puts me 
> into boot> program which does not understand module handling
> etc.. and 
> the menu does not let me to run a shell. I am missing something
> ...?
> 
> Thanks!
> 

Hey George,

I don't know if you resolved this, but I was able to get further
than this loosely following Benjamin's instructions. I skipped the part about 
the virtio-modules which doesn't seem to be necessary now (and the link is 404 
now anyway).

I was able to go through the menu (starting with Install, and skipping the 
modprobe commands) but DHCP didn't work, and I'm not sure what's broken.

To answer your question, you need to press Esc _after_ selecting Install. Maybe 
that's why you saw the "boot>" prompt.

It worked for me and I just ran lsmod since I didn't have any modules to insert:

~ # lsmod
Module  Size  Used by
virtio_blk 20480  0
virtio_net 32768  0
virtio_pci 24576  0
virtio_ring24576  3 virtio_blk,virtio_net,virtio_pci
virtio 16384  3 virtio_blk,virtio_net,virtio_pci

I hope this helps, and please let me know if you or anyone else
has an idea of why DHCP isn't working in the guest VM.

Thanks,
Aaron Miller