Re: Why is tmpfs not working on OpenBSD?

2021-09-05 Thread iio7
On Sunday, September 5th, 2021 at 10:41 PM, Theo de Raadt  
wrote:

> iio7 i...@protonmail.com wrote:
>
> > > On 2021-09-05, iio7 <
> > >
> > > i...@protonmail.com
> > >
> > > wrote:
> > >
> > > > mount -t tmpfs tmpfs /home/foo/tmp/
> > > > ===
> > > >
> > > > mount_tmpfs: tmpfs on /home/foo/tmp: Operation not supported
> >
> > > It isn't built into the standard kernels, disabled with this commit::
> >
> > > revision 1.229
> > >
> > > date: 2016/07/25 19:52:56
> > >
> > > disable tmpfs because it receives zero maintainance.
> >
> > Why isn't it removed? It is kinda "misguiding".
>
> Shucks, you must feel terrible about our decision.

Well, compared to the fact that you, back in 2016, wrote that,
"We don't spend hours of our time adding unimportant notes to that file.", 
concerning updating the FAQ about this, maybe
instead of giving these useless comments, that you apparently
have got plenty of time to do, you should actually provide some
kind of useful information somewhere!



Re: Why is tmpfs not working on OpenBSD?

2021-09-05 Thread iio7
> On 2021-09-05, iio7 <
i...@protonmail.com
> wrote:
>> # mount -t tmpfs tmpfs /home/foo/tmp/
>> mount_tmpfs: tmpfs on /home/foo/tmp: Operation not supported

> It isn't built into the standard kernels, disabled with this commit::

> revision 1.229
> date: 2016/07/25 19:52:56
> disable tmpfs because it receives zero maintainance.

Why isn't it removed? It is kinda "misguiding".


Re: Why is tmpfs not working on OpenBSD?

2021-09-05 Thread Theo de Raadt
iio7  wrote:

> On Sunday, September 5th, 2021 at 10:41 PM, Theo de Raadt 
>  wrote:
> 
> > iio7 i...@protonmail.com wrote:
> >
> > > > On 2021-09-05, iio7 <
> > > >
> > > > i...@protonmail.com
> > > >
> > > > wrote:
> > > >
> > > > > mount -t tmpfs tmpfs /home/foo/tmp/
> > > > > ===
> > > > >
> > > > > mount_tmpfs: tmpfs on /home/foo/tmp: Operation not supported
> > >
> > > > It isn't built into the standard kernels, disabled with this commit::
> > >
> > > > revision 1.229
> > > >
> > > > date: 2016/07/25 19:52:56
> > > >
> > > > disable tmpfs because it receives zero maintainance.
> > >
> > > Why isn't it removed? It is kinda "misguiding".
> >
> > Shucks, you must feel terrible about our decision.
> 
> Well, compared to the fact that you, back in 2016, wrote that,
> "We don't spend hours of our time adding unimportant notes to that file.", 
> concerning updating the FAQ about this, maybe
> instead of giving these useless comments, that you apparently
> have got plenty of time to do, you should actually provide some
> kind of useful information somewhere!
> 

or we could decide we don't owe whiners like you anything
and continue to focus only on what we want to do





Re: Bridging OpenVPN and LAN

2021-09-05 Thread Andrei



> On 05.09.2021., at 21:11, Kasak  wrote:
> I made a typo. Mask should be 255.255.255.0
> I highly recomend not just copying what i say but correcting it to match your 
> configuration

Agreed! Fix'd the typo and the config works but yeah - I still can't get the 
router to do DHCP.
Bummer.

Thanks for the help!



Re: Bridging OpenVPN and LAN

2021-09-05 Thread Andrei


> On 05.09.2021., at 15:58, kasak  wrote:
> I've should correct myself in last message. You actually may try to proxy 
> dhcp answers to vpn, adding option
> 
> server-bridge
> 
> to server config without pool definition. Please respond if it works. I'm 
> really curious about it.
> 
> I use similar configuration, but with manual pool definition in server-bridge
> 

This results in the same behaviour - the client gets no IP. When I do however 
make it say:

server-bridge 10.70.0.1 255.225.255.0 10.70.0.100 10.70.0.110

as you said this works but the DHCP is not issuing that IP (+ I'm having some 
weird errors saying

2021-09-05 20:44:45 /sbin/ifconfig tap0 10.70.0.100 netmask 255.225.255.0 mtu 
1500
ifconfig: 255.225.255.0: non-contiguous mask

but that's another topic :).



Re: Why is tmpfs not working on OpenBSD?

2021-09-05 Thread Theo de Raadt
iio7  wrote:

> > On 2021-09-05, iio7 <
> i...@protonmail.com
> > wrote:
> >> # mount -t tmpfs tmpfs /home/foo/tmp/
> >> mount_tmpfs: tmpfs on /home/foo/tmp: Operation not supported
> 
> > It isn't built into the standard kernels, disabled with this commit::
> 
> > revision 1.229
> > date: 2016/07/25 19:52:56
> > disable tmpfs because it receives zero maintainance.
> 
> Why isn't it removed? It is kinda "misguiding".

Shucks, you must feel terrible about our decision.



Network stops working after suspend/resume on netbook

2021-09-05 Thread Clinton Reddekop
Hi, I'm trying OpenBSD 6.9 on an Acer Aspire AOA150 netbook, which has
an Atom N270 32-bit x86 processor.

The wired network works fine after the computer is turned on, but stops
working after closing the lid to suspend, then pressing the power
button to resume.  After resume, one of the blue-background text
messages that appears on the screen is:
're0: reset never completed!'

I'm using only the console.  I haven't tried the graphical interface
because I probably won't be using that anyway.

The hardware is unmodified except:
1. I have removed the wifi card, which never worked anyway;
2. I replaced the RTC battery about a week and a half ago, since there
is an error in dmesg about RTC.  The message is still there with
the new battery.

Also, in case it's relevant: sometimes the keyboard won't work after
the machine is turned on and boots up.  I understand this is a long-
standing problem with OpenBSD on this model.  I can work around it,
I'm just mentioning it in case it might be related to the network
problem.

Below is the output of dmesg, after I turned on the computer, logged
in, suspended it and resumed.  After capturing the dmesg output, I
verified that the network was not working by trying to ping a computer
on my network.

Thank you for any help you can give me.

=== dmesg output =
OpenBSD 6.9 (GENERIC.MP) #797: Sat Apr 17 22:17:09 MDT 2021
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
RTC BIOS diagnostic error 80
real mem  = 1060085760 (1010MB)
avail mem = 1024319488 (976MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 10/06/08, SMBIOS rev. 2.4 @ 0xe9180 (32 entries)
bios0: vendor Acer version "v0.3310" date 10/06/2008
bios0: Acer AOA150
acpi0 at bios0: ACPI 4.0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SSDT HPET APIC MCFG ASF! SLIC BOOT
acpi0: wakeup devices P32_(S4) UHC1(S3) UHC2(S3) UHC3(S3) UHC4(S3)
ECHI(S3) EXP1(S4) EXP2(S4) EXP3(S4) EXP4(S4) AZAL(S0) MODM(S0)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Atom(TM) CPU N270 @ 1.60GHz ("GenuineIntel" 686-class)
1.60 GHz, 06-1c-02
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,xTPR,PDCM,MOVBE,LAHF,PERF,SENSOR,MELTDOWN
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 133MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.0.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Atom(TM) CPU N270 @ 1.60GHz ("GenuineIntel" 686-class)
1.60 GHz, 06-1c-02
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,xTPR,PDCM,MOVBE,LAHF,PERF,SENSOR,MELTDOWN
ioapic0 at mainbus0: apid 4 pa 0xfec0, version 20, 24 pins, remapped
acpimcfg0 at acpi0
acpimcfg0: addr 0xe000, bus 0-255
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 4 (P32_)
acpiprt2 at acpi0: bus 1 (EXP1)
acpiprt3 at acpi0: bus 2 (EXP2)
acpiprt4 at acpi0: bus -1 (EXP3)
acpiprt5 at acpi0: bus 3 (EXP4)
acpiec0 at acpi0
acpibtn0 at acpi0: PWRB
acpibtn1 at acpi0: LID0
acpibtn2 at acpi0: SLPB
acpibat0 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit online
"PNP0A08" at acpi0 not configured
acpicmos0 at acpi0
"PNP0C14" at acpi0 not configured
acpicpu0 at acpi0: !C3(100@57 io@0x416), !C2(500@1 io@0x414),
C1(1000@1 halt), PSS
acpicpu1 at acpi0: !C3(100@57 io@0x416), !C2(500@1 io@0x414),
C1(1000@1 halt), PSS
acpivideo0 at acpi0: OVGA
bios0: ROM list: 0xc/0xec00!
cpu0: Enhanced SpeedStep 1597 MHz: speeds: 1600, 1333, 1066, 800 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82945GME Host" rev 0x03
inteldrm0 at pci0 dev 2 function 0 "Intel 82945GME Video" rev 0x03
drm0 at inteldrm0
intagp0 at inteldrm0
agp0 at intagp0: aperture at 0x4000, size 0x1000
inteldrm0: apic 4 int 16, I945GM, gen 3
"Intel 82945GM Video" rev 0x03 at pci0 dev 2 function 1 not configured
azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x02: msi
azalia0: codecs: Realtek ALC268
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x02: apic 4 int 16
pci1 at ppb0 bus 1
ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x02: apic 4 int 17
pci2 at ppb1 bus 2
2:0:0: rom address conflict 0xfffe/0x2
re0 at pci2 dev 0 function 0 "Realtek 8101E" rev 0x02: RTL8102EL
(0x2480), msi, address 00:1e:68:c4:b2:d8
rlphy0 at re0 phy 7: RTL8201L 10/100 PHY, rev. 1
ppb2 at pci0 dev 28 function 3 "Intel 82801GB PCIE" rev 0x02: apic 4 int 19
pci3 at ppb2 bus 3
uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x02: apic 4 int 16
uhci1 at pci0 dev 29 function 

Re: xterm not opening on latest snapshot?

2021-09-05 Thread Theo de Raadt
It is setgid (privdrop) for utmp support, so ktrace stops reporting on
what the program is doing.  If you temporarily chmod your utmp file a+w,
remove the setgid bit from the xterm binary, then you will likely be
able to ktrace further to get closer to identifying the issue.

henkjan gersen  wrote:

> Assuming I should run "ktrace -di xterm"  it doesn't show any failure
> condition at the end, i.e. the last lines from the kdump are
> --
> 90075 ktrace NAMI "/usr/X11R6/bin/xterm"
> 90075 ktrace ARGS
>  [0] = "xterm"
> --
> To me that last line looks like the process launches successfully, yet
> no xterm window shows. All errors that are shown before these lines
> are because it tries to locate xterm in various system-folders until
> it finds it in /usr/X11R6/bin
> 
> @Dave: I'm running using snapshots, so it will take me some time to
> get to the stage where I can try your diff. I haven't gone through
> building xenocara before (aware that the FAQ describes how to do it).
> 
> On Sun, 5 Sept 2021 at 15:12, Theo de Raadt  wrote:
> >
> > henkjan gersen  wrote:
> >
> > > On this mornings snapshot that I just upgraded to I can no longer open
> > > an xterm window. Based on the .xsession-error this must be related to
> > > the unveil capabilities that got added last week as I see "xterm:
> > > unveil" appearing in that file.
> > >
> > > Can someone give a hint on what I'm missing to be able to open an
> > > xterm window again?
> >
> > ktrace -di, and kdump
> >
> > The idea is to spot a failure condition near the end.
> >
> 



how handle freeze ?

2021-09-05 Thread Cord
Hello,
I have a stable openbsd69 installed on a raspberry 3b+. It freezes often 
especially when I'm connected to internet through a 4g usb modem.
I'm connected to the rpi from linux by serial and ethernet ssh.
There is not any log, kernel panic or message in console.
thanks
cord



Re: Bridging OpenVPN and LAN

2021-09-05 Thread Kasak



> 5 сент. 2021 г., в 21:53, Andrei  написал(а):
> 
> 
>> On 05.09.2021., at 15:58, kasak  wrote:
>> I've should correct myself in last message. You actually may try to proxy 
>> dhcp answers to vpn, adding option
>> 
>> server-bridge
>> 
>> to server config without pool definition. Please respond if it works. I'm 
>> really curious about it.
>> 
>> I use similar configuration, but with manual pool definition in server-bridge
>> 
> 
> This results in the same behaviour - the client gets no IP. When I do however 
> make it say:
> 
> server-bridge 10.70.0.1 255.225.255.0 10.70.0.100 10.70.0.110
> 
I made a typo. Mask should be 255.255.255.0
I highly recomend not just copying what i say but correcting it to match your 
configuration
> as you said this works but the DHCP is not issuing that IP (+ I'm having some 
> weird errors saying
> 
> 2021-09-05 20:44:45 /sbin/ifconfig tap0 10.70.0.100 netmask 255.225.255.0 mtu 
> 1500
> ifconfig: 255.225.255.0: non-contiguous mask
> 
> but that's another topic :).



Re: vi: count occurrences of a substring

2021-09-05 Thread Reuben ua Bríġ
sed is so wonderfully versatile!

need to type up ``the rattlin bog'' as fast as it is sung?

do it in n ^ 0.5 time with

sed H\;g

slick as quick-silver!



Re: xterm not opening on latest snapshot?

2021-09-05 Thread henkjan gersen
Assuming I should run "ktrace -di xterm"  it doesn't show any failure
condition at the end, i.e. the last lines from the kdump are
--
90075 ktrace NAMI "/usr/X11R6/bin/xterm"
90075 ktrace ARGS
 [0] = "xterm"
--
To me that last line looks like the process launches successfully, yet
no xterm window shows. All errors that are shown before these lines
are because it tries to locate xterm in various system-folders until
it finds it in /usr/X11R6/bin

@Dave: I'm running using snapshots, so it will take me some time to
get to the stage where I can try your diff. I haven't gone through
building xenocara before (aware that the FAQ describes how to do it).

On Sun, 5 Sept 2021 at 15:12, Theo de Raadt  wrote:
>
> henkjan gersen  wrote:
>
> > On this mornings snapshot that I just upgraded to I can no longer open
> > an xterm window. Based on the .xsession-error this must be related to
> > the unveil capabilities that got added last week as I see "xterm:
> > unveil" appearing in that file.
> >
> > Can someone give a hint on what I'm missing to be able to open an
> > xterm window again?
>
> ktrace -di, and kdump
>
> The idea is to spot a failure condition near the end.
>



Bridging OpenVPN and LAN

2021-09-05 Thread Andrei
Hello,

I am trying to setup an OpenVPN server on OpenBSD 6.9 that's bridged to my LAN.
The topology looks like this: 10.70.0.1 (gateway) - 10.70.0.118 (server, on 
em1).

I've set-up the em1 interface as DHCP and it get's the expected address. Next 
up I
created a tap0 and bridge0 devices like this:

ifconfig tap0 create
ifconfig bridge0 create
ifconfig bridge0 add em1
ifconfig bridge0 add tap0

The ifconfig output looks like this now:

lo0: flags=8049 mtu 32768
index 4 priority 0 llprio 3
groups: lo
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet 127.0.0.1 netmask 0xff00
em0: flags=8843 mtu 1500
lladdr 00:0c:29:0f:74:62
index 1 priority 0 llprio 3
groups: egress
media: Ethernet autoselect (1000baseT full-duplex,master)
status: active
inet 10.20.0.108 netmask 0xff00 broadcast 10.20.0.255
em1: flags=8b43 mtu 
1500
lladdr 00:0c:29:0f:74:6c
index 2 priority 0 llprio 3
media: Ethernet autoselect (1000baseT full-duplex,master)
status: active
inet 10.70.0.118 netmask 0xff00 broadcast 10.70.0.255
enc0: flags=0<>
index 3 priority 0 llprio 3
groups: enc
status: active
pflog0: flags=141 mtu 33136
index 5 priority 0 llprio 3
groups: pflog
tap0: flags=8902 mtu 1500
lladdr fe:e1:ba:d0:6a:1c
index 6 priority 0 llprio 3
groups: tap
status: no carrier
bridge0: flags=0<>
index 7 llprio 3
groups: bridge
priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp
em1 flags=3
port 2 ifpriority 0 ifcost 0
tap0 flags=3
port 6 ifpriority 0 ifcost 0

In my OpenVPN config I have:

port 1194
proto udp
dev tap0
dev-type tap
ca /etc/openvpn/ca.crt
cert /etc/openvpn/vpnserver.crt
key /etc/openvpn/vpnserver.key
dh /etc/openvpn/dh.pem
tls-server
tls-auth /etc/openvpn/vpn-ta.key 0
push "route 10.70.0.0 255.255.255.0 10.70.0.1"
cipher AES-256-CBC
comp-lzo
ping-timer-rem
keepalive 10 60
user _openvpn
group _openvpn
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1

And the client has:

client
dev tap
proto udp
remote example.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-256-CBC
comp-lzo
verb 3

The client connects OK, but it never gets a DHCP address from the router that's 
in
charge for 10.70.0.0/24 and running the DHCP server.

Is the issue in my OpenBSD configuration, OpenVPN, or on my router? I'm having
trouble debugging this...

Thank you,
Andrei



Re: Bridging OpenVPN and LAN

2021-09-05 Thread Stuart Henderson
On 2021-09-05, Andrei  wrote:
> tap0: flags=8902 mtu 1500
> lladdr fe:e1:ba:d0:6a:1c
> index 6 priority 0 llprio 3
> groups: tap
> status: no carrier
> bridge0: flags=0<>
> index 7 llprio 3
> groups: bridge
> priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp
> em1 flags=3
> port 2 ifpriority 0 ifcost 0
> tap0 flags=3
> port 6 ifpriority 0 ifcost 0

For starters your bridge is not configured "up". Neither is the tap but but
I guess the vpn wasn't connected when you captured ifconfig output?

-- 
Please keep replies on the mailing list.



Re: Bridging OpenVPN and LAN

2021-09-05 Thread kasak

05.09.2021 16:31, Andrei пишет:

Hello,

I am trying to setup an OpenVPN server on OpenBSD 6.9 that's bridged to my LAN.
The topology looks like this: 10.70.0.1 (gateway) - 10.70.0.118 (server, on 
em1).

I've set-up the em1 interface as DHCP and it get's the expected address. Next 
up I
created a tap0 and bridge0 devices like this:

ifconfig tap0 create
ifconfig bridge0 create
ifconfig bridge0 add em1
ifconfig bridge0 add tap0

The ifconfig output looks like this now:

lo0: flags=8049 mtu 32768
 index 4 priority 0 llprio 3
 groups: lo
 inet6 ::1 prefixlen 128
 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
 inet 127.0.0.1 netmask 0xff00
em0: flags=8843 mtu 1500
 lladdr 00:0c:29:0f:74:62
 index 1 priority 0 llprio 3
 groups: egress
 media: Ethernet autoselect (1000baseT full-duplex,master)
 status: active
 inet 10.20.0.108 netmask 0xff00 broadcast 10.20.0.255
em1: flags=8b43 mtu 
1500
 lladdr 00:0c:29:0f:74:6c
 index 2 priority 0 llprio 3
 media: Ethernet autoselect (1000baseT full-duplex,master)
 status: active
 inet 10.70.0.118 netmask 0xff00 broadcast 10.70.0.255
enc0: flags=0<>
 index 3 priority 0 llprio 3
 groups: enc
 status: active
pflog0: flags=141 mtu 33136
 index 5 priority 0 llprio 3
 groups: pflog
tap0: flags=8902 mtu 1500
 lladdr fe:e1:ba:d0:6a:1c
 index 6 priority 0 llprio 3
 groups: tap
 status: no carrier
bridge0: flags=0<>
 index 7 llprio 3
 groups: bridge
 priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp
 em1 flags=3
 port 2 ifpriority 0 ifcost 0
 tap0 flags=3
 port 6 ifpriority 0 ifcost 0

In my OpenVPN config I have:

port 1194
proto udp
dev tap0
dev-type tap
ca /etc/openvpn/ca.crt
cert /etc/openvpn/vpnserver.crt
key /etc/openvpn/vpnserver.key
dh /etc/openvpn/dh.pem
tls-server
tls-auth /etc/openvpn/vpn-ta.key 0
push "route 10.70.0.0 255.255.255.0 10.70.0.1"
cipher AES-256-CBC
comp-lzo
ping-timer-rem
keepalive 10 60
user _openvpn
group _openvpn
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1


You should add ip pool for bridge in server config.

like this:

server-bridge 10.70.0.1 255.225.255.0 10.70.0.100 10.70.0.110

Your dhcpd will not write ip's to vpn even it is on bridge



And the client has:

client
dev tap
proto udp
remote example.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-256-CBC
comp-lzo
verb 3

The client connects OK, but it never gets a DHCP address from the router that's 
in
charge for 10.70.0.0/24 and running the DHCP server.

Is the issue in my OpenBSD configuration, OpenVPN, or on my router? I'm having
trouble debugging this...

Thank you,
Andrei





Re: Bridging OpenVPN and LAN

2021-09-05 Thread kasak



05.09.2021 16:31, Andrei пишет:

Hello,

I am trying to setup an OpenVPN server on OpenBSD 6.9 that's bridged to my LAN.
The topology looks like this: 10.70.0.1 (gateway) - 10.70.0.118 (server, on 
em1).

I've set-up the em1 interface as DHCP and it get's the expected address. Next 
up I
created a tap0 and bridge0 devices like this:

ifconfig tap0 create
ifconfig bridge0 create
ifconfig bridge0 add em1
ifconfig bridge0 add tap0

The ifconfig output looks like this now:

lo0: flags=8049 mtu 32768
 index 4 priority 0 llprio 3
 groups: lo
 inet6 ::1 prefixlen 128
 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
 inet 127.0.0.1 netmask 0xff00
em0: flags=8843 mtu 1500
 lladdr 00:0c:29:0f:74:62
 index 1 priority 0 llprio 3
 groups: egress
 media: Ethernet autoselect (1000baseT full-duplex,master)
 status: active
 inet 10.20.0.108 netmask 0xff00 broadcast 10.20.0.255
em1: flags=8b43 mtu 
1500
 lladdr 00:0c:29:0f:74:6c
 index 2 priority 0 llprio 3
 media: Ethernet autoselect (1000baseT full-duplex,master)
 status: active
 inet 10.70.0.118 netmask 0xff00 broadcast 10.70.0.255
enc0: flags=0<>
 index 3 priority 0 llprio 3
 groups: enc
 status: active
pflog0: flags=141 mtu 33136
 index 5 priority 0 llprio 3
 groups: pflog
tap0: flags=8902 mtu 1500
 lladdr fe:e1:ba:d0:6a:1c
 index 6 priority 0 llprio 3
 groups: tap
 status: no carrier
bridge0: flags=0<>
 index 7 llprio 3
 groups: bridge
 priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp
 em1 flags=3
 port 2 ifpriority 0 ifcost 0
 tap0 flags=3
 port 6 ifpriority 0 ifcost 0

In my OpenVPN config I have:

port 1194
proto udp
dev tap0
dev-type tap
ca /etc/openvpn/ca.crt
cert /etc/openvpn/vpnserver.crt
key /etc/openvpn/vpnserver.key
dh /etc/openvpn/dh.pem
tls-server
tls-auth /etc/openvpn/vpn-ta.key 0
push "route 10.70.0.0 255.255.255.0 10.70.0.1"
cipher AES-256-CBC
comp-lzo
ping-timer-rem
keepalive 10 60
user _openvpn
group _openvpn
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1

And the client has:

client
dev tap
proto udp
remote example.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-256-CBC
comp-lzo
verb 3

The client connects OK, but it never gets a DHCP address from the router that's 
in
charge for 10.70.0.0/24 and running the DHCP server.

Is the issue in my OpenBSD configuration, OpenVPN, or on my router? I'm having
trouble debugging this...

Thank you,
Andrei



I've should correct myself in last message. You actually may try to 
proxy dhcp answers to vpn, adding option


server-bridge

to server config without pool definition. Please respond if it works. 
I'm really curious about it.


I use similar configuration, but with manual pool definition in 
server-bridge




Re: xterm not opening on latest snapshot?

2021-09-05 Thread Theo de Raadt
henkjan gersen  wrote:

> On this mornings snapshot that I just upgraded to I can no longer open
> an xterm window. Based on the .xsession-error this must be related to
> the unveil capabilities that got added last week as I see "xterm:
> unveil" appearing in that file.
> 
> Can someone give a hint on what I'm missing to be able to open an
> xterm window again?

ktrace -di, and kdump

The idea is to spot a failure condition near the end.



Re: xterm not opening on latest snapshot?

2021-09-05 Thread Dave Voutila


henkjan gersen  writes:

> On this mornings snapshot that I just upgraded to I can no longer open
> an xterm window. Based on the .xsession-error this must be related to
> the unveil capabilities that got added last week as I see "xterm:
> unveil" appearing in that file.
>
> Can someone give a hint on what I'm missing to be able to open an
> xterm window again?

Can you try again with this diff? It should add logging and specify
which unveil is failing.


Index: app/xterm/main.c
===
RCS file: /cvs/xenocara/app/xterm/main.c,v
retrieving revision 1.50
diff -u -p -r1.50 main.c
--- app/xterm/main.c2 Sep 2021 09:31:38 -   1.50
+++ app/xterm/main.c5 Sep 2021 13:58:13 -
@@ -2911,18 +2911,18 @@ main(int argc, char *argv[]ENVP_ARG)

 snprintf(homefile, sizeof homefile, "%s/.fonts", env);
 if (unveil(homefile, "r") == -1) {
-xtermWarning("unveil\n");
+xtermWarning("unveil %s\n", homefile);
 exit(1);
 }
 snprintf(homefile, sizeof homefile, "%s/.cache/fontconfig",
  env);
 if (unveil(homefile, "r") == -1) {
-xtermWarning("unveil\n");
+xtermWarning("unveil %s\n", homefile);
 exit(1);
 }
 snprintf(homefile, sizeof homefile, "%s/.icons", env);
 if (unveil(homefile, "r") == -1) {
-xtermWarning("unveil\n");
+xtermWarning("unveil %s\n", homefile);
 exit(1);
 }
 }
@@ -2931,12 +2931,12 @@ main(int argc, char *argv[]ENVP_ARG)

 snprintf(xdgfile, sizeof xdgfile, "%s/fontconfig", env);
 if (unveil(xdgfile, "r") == -1) {
-xtermWarning("unveil\n");
+xtermWarning("unveil %s\n", xdgfile);
 exit(1);
 }
 snprintf(xdgfile, sizeof xdgfile, "%s/icons", env);
 if (unveil(xdgfile, "r") == -1) {
-xtermWarning("unveil\n");
+xtermWarning("unveil %s\n", xdgfile);
 exit(1);
 }
 }
@@ -2945,12 +2945,12 @@ main(int argc, char *argv[]ENVP_ARG)

 snprintf(xdgfile, sizeof xdgfile, "%s/fontconfig", env);
 if (unveil(xdgfile, "r") == -1) {
-xtermWarning("unveil\n");
+xtermWarning("unveil %s\n", xdgfile);
 exit(1);
 }
 snprintf(xdgfile, sizeof xdgfile, "%s/icons", env);
 if (unveil(xdgfile, "r") == -1) {
-xtermWarning("unveil\n");
+xtermWarning("unveil %s\n", xdgfile);
 exit(1);
 }
 }
@@ -2959,7 +2959,7 @@ main(int argc, char *argv[]ENVP_ARG)

 snprintf(xdgfile, sizeof xdgfile, "%s/fontconfig", env);
 if (unveil(xdgfile, "r") == -1) {
-xtermWarning("unveil\n");
+xtermWarning("unveil %s\n", xdgfile);
 exit(1);
 }
 }
@@ -2970,7 +2970,7 @@ main(int argc, char *argv[]ENVP_ARG)
 (unveil("/usr/local/lib/X11/icons", "r") == -1) ||
 (unveil(etc_utmp, "w") == -1) ||
 (unveil(etc_wtmp, "w") == -1)) {
-xtermWarning("unveil\n");
+xtermWarning("unveil many, %s, %s\n", etc_utmp, etc_wtmp);
 exit(1);
 }



Why is tmpfs not working on OpenBSD?

2021-09-05 Thread iio7
# mount -t tmpfs tmpfs /home/foo/tmp/
mount_tmpfs: tmpfs on /home/foo/tmp: Operation not supported

Sent with [ProtonMail](https://protonmail.com/) Secure Email.


xterm not opening on latest snapshot?

2021-09-05 Thread henkjan gersen
On this mornings snapshot that I just upgraded to I can no longer open
an xterm window. Based on the .xsession-error this must be related to
the unveil capabilities that got added last week as I see "xterm:
unveil" appearing in that file.

Can someone give a hint on what I'm missing to be able to open an
xterm window again?



Re: vi: count occurrences of a substring

2021-09-05 Thread ropers
On 04/09/2021, ropers  wrote:
> On 04/09/2021, Marc Chantreux  wrote:
>> Another solution is to write commands for this kind of tasks:
>>
>> <<\. cat > ~/x
>> #! /bin/ksh
>>
>> sed -r 's/a/&\
>> /g'
>> .
>
> Wait, hold up, I'm not familiar with this input redirection idiom.
> Could you explain?  Why the double <, and why does it not work with a single
>  Also, could you explain the escaped period?[0]  This is very hard to
> google.

I've realised the < ~/x)

But I still don't understand why you escaped the dot.  Is that just an
overly cautious hypercorrection, or is there some reason I should
escape periods in such cases?  An unescaped full stop works fine for
me.

Ian



Re: Why is tmpfs not working on OpenBSD?

2021-09-05 Thread Stuart Henderson
On 2021-09-05, iio7  wrote:
> # mount -t tmpfs tmpfs /home/foo/tmp/
> mount_tmpfs: tmpfs on /home/foo/tmp: Operation not supported

It isn't built into the standard kernels, disabled with this commit::

revision 1.229
date: 2016/07/25 19:52:56
disable tmpfs because it receives zero maintainance.

-- 
Please keep replies on the mailing list.



Re: Why is tmpfs not working on OpenBSD?

2021-09-05 Thread misc
just put the line 
swap/ramfs  mfs rw,nodev,nosuid,-s=300m 0   0
into /etc/fstab (-s means size) 
and run 
# mount /ramfs

On Sun, Sep 05, 2021 at 07:59:26AM +, iio7 wrote:
> # mount -t tmpfs tmpfs /home/foo/tmp/
> mount_tmpfs: tmpfs on /home/foo/tmp: Operation not supported
> 
> Sent with [ProtonMail](https://protonmail.com/) Secure Email.