Re: VMM 6.9amd64 host video acceleration

[BergenBergen BergenBergen]

* mindless

On Wed, May 12, 2021 at 11:30 PM BergenBergen BergenBergen
 wrote:
>
> I just have to say this hatred and twisting of facts could be due to
> my mindness promotion of our operating system.
>
> I've hurt a lot of people. Jealousy is a m*.
>
> --Murk
>
>
>
> On Wed, May 12, 2021 at 8:09 PM Theo de Raadt  wrote:
> >
> > Have you considered using a real computer?
> >
> > Martin  wrote:
> >
> > > Hi Dave,
> > >
> > > Can you recommend any way to see online videos without shuttering? Modern 
> > > CPUs can't smoothly play it in software emulation, unfortunately.
> > >
> > > Martin
> > >
> > > ‐‐‐ Original Message ‐‐‐
> > > On Wednesday, May 12, 2021 1:43 PM, Dave Voutila  wrote:
> > >
> > > > Martin writes:
> > > >
> > > > > Hi list,
> > > > > Just wonder how to enable video acceleration on VMM guest's side 
> > > > > (Debian) if it was possible. Maybe PCIe passthru should be present 
> > > > > for that purpose?
> > > >
> > > > There is nothing to accelerate: vmd(8) doesn't emulate a display or
> > > > video device. vmm(4) doesn't support pass-through to host hardware
> > > > either.
> > > >
> > > > -dv
> > >
> > >
> >

Re: VMM 6.9amd64 host video acceleration

[BergenBergen BergenBergen]

I just have to say this hatred and twisting of facts could be due to
my mindness promotion of our operating system.

I've hurt a lot of people. Jealousy is a m*.

--Murk



On Wed, May 12, 2021 at 8:09 PM Theo de Raadt  wrote:
>
> Have you considered using a real computer?
>
> Martin  wrote:
>
> > Hi Dave,
> >
> > Can you recommend any way to see online videos without shuttering? Modern 
> > CPUs can't smoothly play it in software emulation, unfortunately.
> >
> > Martin
> >
> > ‐‐‐ Original Message ‐‐‐
> > On Wednesday, May 12, 2021 1:43 PM, Dave Voutila  wrote:
> >
> > > Martin writes:
> > >
> > > > Hi list,
> > > > Just wonder how to enable video acceleration on VMM guest's side 
> > > > (Debian) if it was possible. Maybe PCIe passthru should be present for 
> > > > that purpose?
> > >
> > > There is nothing to accelerate: vmd(8) doesn't emulate a display or
> > > video device. vmm(4) doesn't support pass-through to host hardware
> > > either.
> > >
> > > -dv
> >
> >
>

Using httpd to add ACME Challenge support to existing relayd setup

[BergenBergen BergenBergen]

Hi!

I have some webapps that need Let's Encrypt certificates. I currently
use relayd to forward matching hostnames to my Ruby on Rails ports
(https://puma.io/), and was wondering what would be the ideal way of
adding ACME Challenge support to this setup?

So far I've added an ACME challenge table, a port and a forward rule.
I've also enabled httpd, and attempted to set up a catch-all directive
listening on port 5000. Unfortunately though it doesn't work, so any
feedback or criticism would be greatly appreciated!

Thanks!

Regards,
Murk

--

% acme-client -v mysite.com
acme-client: Fetching http://mysite.com/.well-known/acme-challenge
/TgxaQYLZ0iwwH4VR-Ss5Zf6sBGxlKvn8ra8V-o4SpLs: Connection refused

--

# relayd.conf

localhost="lo0"
ext_if="vio0"

table  { $localhost }
acme_challenge_port="5000"

table  { $localhost }
mysite_port="8080"

table  { $localhost }
mysite2_port="8081"

http protocol "http" {
  pass request quick path "/.well-known/acme-challenge/*" forward to


  pass request header "Host" value "mysite.com" forward to 
  pass request header "Host" value "www.mysite.com" forward to 

  pass request header "Host" value "mysite2.com" forward to 
  pass request header "Host" value "www.mysite2.com" forward to 
}

http protocol "https" {
  pass request header "Host" value "mysite.com" forward to 
  pass request header "Host" value "www.mysite.com" forward to 
  tls keypair "mysite"

  pass request header "Host" value "mysite2.com" forward to 
  pass request header "Host" value "www.mysite2.com" forward to 
  tls keypair "mysite2"

  # Preserve address headers
  match header set "X-Client-IP" value "$REMOTE_ADDR:$REMOTE_PORT"
  match header set "X-Forwarded-For" value "$REMOTE_ADDR"
  match header set "X-Forwarded-By" value "$SERVER_ADDR:$SERVER_PORT"

  # Best practice security headers
  # https://securityheaders.com/
  match response header remove "Server"
  match response header set "X-Frame-Options" value "SAMEORIGIN"
  match response header set "X-XSS-Protection" value "1; mode=block"
  match response header set "Referrer-Policy" value "strict-origin"
  match response header set "Feature-Policy" value "accelerometer
'none'; ambient-light-sensor 'none'; battery 'none'; camera 'none';
geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone
'none'; midi 'none'; payment 'none'; usb 'none';"

  # Log extras
  match header log "Host"
  match header log "X-Forwarded-For"
  match header log "User-Agent"
  match header log "Referer"
  match url log
}

relay "http" {
  listen on $ext_if port http

  protocol "http"

  forward to  port $acme_challenge_port
  forward to  port $mysite_port
  forward to  port $mysite2_port
}

relay "https" {
  listen on $ext_if port https tls

  protocol "https"

  # Assumes that Rails has force HTTPS enabled
  # https://api.rubyonrails.org/classes/ActionDispatch/SSL.html
  forward to  port $mysite_port
  forward to  port $mysite2_port
}

--

# httpd.conf

types {
  include "/usr/share/misc/mime.types"
}

localhost="lo0"
acme_challenge_port="5000"

server "*" {
  listen on $localhost port $acme_challenge_port
  root "/"
  location "/.well-known/acme-challenge/*" {
root "/acme"
request strip 2
  }
}

--

# acme-client.conf

authority letsencrypt {
  api url "https://acme-v02.api.letsencrypt.org/directory;
  account key "/etc/ssl/private/letsencrypt.key"
}

domain mysite.com {
  alternative names { www.mysite.com }
  domain key "/etc/ssl/private/mysite.key"
  domain full chain certificate "/etc/ssl/mysite.crt"
  sign with letsencrypt
}

domain mysite2.com {
  alternative names { www.mysite2.com }
  domain key "/etc/ssl/private/mysite2.key"
  domain full chain certificate "/etc/ssl/mysite2.crt"
  sign with letsencrypt
}

Re: phonetic alphabet on OpenBSD

[BergenBergen BergenBergen]

Slightly off topic, but:

http://www.phonelosers.org/2017/12/confusing-phonetic-alphabet/

All the best,
Murk

On Sun, Oct 14, 2018 at 11:29 PM Christian Weisgerber 
wrote:

> On 2018-10-14, Jan Stary  wrote:
>
> > Are there any phoneticians running on OpenBSD?
>
> I still haven't read Ladefoged yet, but I use IPA somewhat regularly.
>
> > How do you type the phonetic alphabet in vim?
> > Is there a standard keyboard layout for the English part of IPA?
>
> I don't use vim, but the sad answer is that I copy and paste,
> principally from Wikipedia's IPA page.  If you're only dealing with
> English, the Help:IPA/English page is more convenient.
>
> In general, I use the X11 compose key to enter special characters.
> See /usr/X11R6/share/X11/locale/en_US.UTF-8/Compose for the available
> combinations.  That's sufficient for entering the letters and
> diacritics used in all European languages that use the Latin alphabet.
> However, it does not cover IPA.
>
> Vim comes with its own "digraph" system, which uses the RFC1345
> digraphs by default.  They cover a wide range, including Greek and
> Cyrillic, but alas, there's another big hole in the Unicode range
> where the IPA block (U+0250..02AF) is.
>
> > but I am looking for a "standard" way.
>
> I suspect people use an on-screen keyboard / character picker.
>
> In fact, googling for  immediately finds a
> bunch of web-based ones.
>
> --
> Christian "naddy" Weisgerber  na...@mips.inka.de
>
>

Re: chromium and firefox - myths and facts?

[BergenBergen BergenBergen]

> Answered it in the long, the short version is: Chrome/Iridium is safer
code.

Chrome is also way more comfortable to develop y'all web/mobile apps in.
Win-win!

All the best,
Murk


On Mon, Jun 11, 2018 at 4:29 PM, Theo de Raadt  wrote:

> > In that case, are the Chromium updates in current worth attempting to
> > backport to stable?
>
> the team does not do significant backports like that.
>
> > Or are the stable builds safer than the backported Firefox builds
> > throughout the six months or so that they remain frozen?
>
> Answered it in the long, the short version is: Chrome/Iridium is safer
> code.
>
>

Re: Limit CPU usage of a process?

[BergenBergen BergenBergen]

Are these commandline options or stuff you have to program into your apps?
They also seem to be more geared towards giving different processes
different priorities of which gets to use the highest CPU.

This doesn't seem to be very helpful for us who are looking for a simple
commandline option which lets you set max CPU usage in percentage for any
given process.

https://github.com/opsengine/cpulimit did this, which is the closest thing
I've found so far.

All the best,
Murk



On Tue, May 29, 2018 at 8:48 PM, Raul Miller  wrote:

> There's https://man.openbsd.org/nice.1
>
> You might be describing https://man.openbsd.org/setrlimit.2 or the
> ulimit shell builtin (ulimit -t). But you might not want what you are
> describing, if that is the case.
>
> --
> Raul
>
>
> On Tue, May 29, 2018 at 2:35 PM, BergenBergen BergenBergen
>  wrote:
> > Browser or not, how *does* one cap CPU resources though? I think it's a
> > very interesting question, and I'm sorta baffled by the fact that the
> > demand for this kinda thing hasn't been any higher.
> >
> > All the best,
> > Murk
> >
> > On Tue, May 29, 2018 at 8:10 PM, Dumitru Mișu Moldovan 
> > wrote:
> >
> >> On 05/27/18 13:07, Maximilian Pichler wrote:
> >>
> >>> Is it possible to limit the CPU usage of a given process to, say, 20%?
> >>>
> >>> I'd like to slow down the web browser since it is draining my laptop's
> >>> battery. With enough tabs open it's often consuming ~50% of CPU but
> >>> not doing anything productive. Apparently with RLIMIT_CPU in
> >>> setrlimit(2) the total CPU time of a process can be limited. Can a
> >>> similar limit be set for the percentage?
> >>>
> >>
> >> Honest question…  Have you tried blocking ads with something like uBlock
> >> Origin?  I use several approaches to make web browsing palatable on old
> >> hardware, and blocking ads is what makes the biggest difference for me.
> >> (Using NoScript or equivalents to selectively enable JavaScript for
> sites
> >> where I actually need it is a distant second.)
> >>
> >> Capping CPU resources is not the way to go on a laptop in my opinion,
> >> unless you have some demanding job that always runs in the background in
> >> your browser, and that's a problem by itself in your scenario.  Capping
> >> will not change the fact that you'll still spend the same resources on
> >> loading web pages, however it will slow you down and annoy you.
> >>
> >>
>

Re: Limit CPU usage of a process?

[BergenBergen BergenBergen]

Browser or not, how *does* one cap CPU resources though? I think it's a
very interesting question, and I'm sorta baffled by the fact that the
demand for this kinda thing hasn't been any higher.

All the best,
Murk

On Tue, May 29, 2018 at 8:10 PM, Dumitru Mișu Moldovan 
wrote:

> On 05/27/18 13:07, Maximilian Pichler wrote:
>
>> Is it possible to limit the CPU usage of a given process to, say, 20%?
>>
>> I'd like to slow down the web browser since it is draining my laptop's
>> battery. With enough tabs open it's often consuming ~50% of CPU but
>> not doing anything productive. Apparently with RLIMIT_CPU in
>> setrlimit(2) the total CPU time of a process can be limited. Can a
>> similar limit be set for the percentage?
>>
>
> Honest question…  Have you tried blocking ads with something like uBlock
> Origin?  I use several approaches to make web browsing palatable on old
> hardware, and blocking ads is what makes the biggest difference for me.
> (Using NoScript or equivalents to selectively enable JavaScript for sites
> where I actually need it is a distant second.)
>
> Capping CPU resources is not the way to go on a laptop in my opinion,
> unless you have some demanding job that always runs in the background in
> your browser, and that's a problem by itself in your scenario.  Capping
> will not change the fact that you'll still spend the same resources on
> loading web pages, however it will slow you down and annoy you.
>
>

Re: Limit CPU usage of a process?

[BergenBergen BergenBergen]

 I'd much rather prefer a generic tool that could limit any process, rather
than trying to come up with ways to strip down ones browser.

FreeBSD has a cpulimit (https://github.com/opsengine/cpulimit/) port, and
it would be nice if OpenBSD could too. I'm not skilled enough to make one,
but I'd gladly make a donation to whomever could.

Regards,
Murk


On Sun, May 27, 2018 at 10:34 PM, Consus  wrote:

> On 20:02 Sun 27 May, Kevin Chadwick wrote:
> > Umatrix is a good javascript control extension. Some websites are even
> > running bitcoin mining without asking your permission. Theft of
> > electricity in my book.
>
> Hell, javascript itself is a theft of electricity.
>
>

Re: Limit CPU usage of a process?

[BergenBergen BergenBergen]

Have a look at
http://openbsd-archive.7691.n7.nabble.com/Port-request-cpulimit-td267083.html
and please let me know how it went!

All the best,
Murk



On Sun, May 27, 2018 at 12:07 PM, Maximilian Pichler <
maxim.pich...@gmail.com> wrote:

> Is it possible to limit the CPU usage of a given process to, say, 20%?
>
> I'd like to slow down the web browser since it is draining my laptop's
> battery. With enough tabs open it's often consuming ~50% of CPU but
> not doing anything productive. Apparently with RLIMIT_CPU in
> setrlimit(2) the total CPU time of a process can be limited. Can a
> similar limit be set for the percentage?
>
> Thanks
>
>

Re: Hellos from the Lands of Norway.

[BergenBergen BergenBergen]

Your name is not Norwegian. What's going on here?

On Tue, Nov 7, 2017 at 2:37 PM, Stuart Henderson 
wrote:

> On 2017-11-07, Ywe Cærlyn  wrote:
>
> I hate replying to a post about licenses, but you're missing something
> fundamental here...
>
> >The real song
> > of the GNU licence is this. And "thou shall make no money".
>
> Not at all. It is perfectly allowed to charge money for GPL software.
> You just have to provide an offer of the source code *to people who you
> have given the binaries to*. (Sure, they can then pass this on to other
> people. But you can also have e.g. copyrighted documentation without
> which the code is not really very useful. Or maybe those people won't
> want to hand it out for free anyway).
>
> GPL is also used by some as some kind of "free trial" of commercial
> libraries (especially happens with crypto, it seems). You're allowed to
> use them as part of your software, but if you want to distribute as
> closed-source, you'll then need to arrange a commercial license instead.
>
> The complexity of it is also a good way for copyright/license lawyers
> to make money too, of course.
>
>
>

Re: Forum software

[BergenBergen BergenBergen]

Hi,

I'd recommend http://thredded.org/ as it's both Ruby and Rails and
developed by Google developers.

Have fun!

On Tue, Oct 24, 2017 at 8:30 PM, flipchan  wrote:

> Grtz *!
> Sry for going alittle bit off topic , me and a friend are trying to
> rebuild a swedish openbsd forum (openbsd.se) it's been live since 2005 ,
> and been running punbb.
> But punbb is not actively​ being developed and we wonder if anyone can
> suggest a good forum software , we don't have time to write one from
> scratch (both have full time jobs and kids and other stuff , but we want a
> swedish openbsd forum to flurish)
>
>
> Could anyone suggest some forum software that we can run?
>
> We are also thinking about posting tutorials on the site to help more ppl
> find openbsd throw search engines.
>
> Take care all!
> And thanks in advance
> --
> Take Care Sincerely flipchan layerprox dev

Re: Moving a Web site from IIS to httpd

[BergenBergen BergenBergen]

I wish migrating from Rails Nginx to Rails httpd would be that easy. Seems
now I have to pay the uwsgi team hundreds of dollars to come up with a
config for me.

If anybody wishes to join me in paying for this config so we can create an
online tut do feel free to let me know.

All the best,
Murk


On Thu, Aug 31, 2017 at 11:04 PM, Jesper Wallin  wrote:

> On Thu, Aug 31, 2017 at 07:20:16PM +, Peter Fraser wrote:
> >
> > It would be nice if httpd could be used to convert or ignore case in
> URL's.
>
> Hi Peter,
>
> First of all, from an SEO standpoint, you shouldn't ignore the case in
> URL's, as you end up with duplicate content. Pick a certain naming style
> and use it everywhere on your site.
>
> Your best luck is to check your logs for incorrect links. Then simply
> add a "location" block for every link and redirect it to the correct one
> using a "block return 301". Be sure to use the 301 (Permanently moved)
> to tell clients not to use the old URL anymore.
>
> server "domain.tld" {
> listen on * port 80
>
> location "/FOOBAR.HTML" {
> block return 301 "http://domain.tld/foobar.html;
> }
> }
>
> You can probably make this a bit more universal using patterns(7) for
> the locations block. Also, the example above is more or less copied from
> httpd.conf(5).
>
>
> Another alternative, like you said, is to create a copy of the page. To
> prevent duplicate content and let clients know where your "real" page
> is, use a link canonical tag. E.g,
>
> http://domain.tld/foobar.html;>
>
> However, this won't solve the issue with others linking to the wrong
> pages and it will probably be a real pain to maintain your site.
>
>
> Jesper Wallin
>
>

Re: maybe misc can help even it's not openbsd related

[BergenBergen BergenBergen]

* StackOverflow = Server Fault

On Thu, Aug 24, 2017 at 12:50 PM, BergenBergen BergenBergen <
murk.fletc...@gmail.com> wrote:

> OpenBSD uses OpenSMTPD, which is much better than Postfix. You're much
> more likely to get help with that.
>
> As for Postfix, have you tried StackOverflow or Freenode?
>
> On Thu, Aug 24, 2017 at 11:49 AM, Markus Rosjat <ros...@ghweb.de> wrote:
>
>> Hi there,
>>
>> since I know ppl on this list are always willing to help even it's not a
>> real openbsd problem I will give it a try.
>> I tried to ask this on the postfix list but after a week without any
>> response and resending the  mail I gave up.
>>
>> so here is my problem, I konfigured postfix and dkimproxy to work
>> together. So far so good because it works for outgoing mail. The problem i
>> face is with local mails. Postfix somehow rewrites the reciepent from the
>> mail adress to u...@domain.tld and then the lookup im my ldap directory
>> fails.
>>
>> So the real question is, can I configure postfix to ignore the forwarding
>> to dkimproxy for local delivery ?
>>
>> regards
>> --
>> Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de
>>
>> G+H Webservice GbR Gorzolla, Herrmann
>> Königsbrücker Str. 70, 01099 Dresden
>>
>> http://www.ghweb.de
>> fon: +49 351 8107220   fax: +49 351 8107227
>>
>> Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before
>> you print it, think about your responsibility and commitment to the
>> ENVIRONMENT
>>
>>
>

Re: maybe misc can help even it's not openbsd related

[BergenBergen BergenBergen]

OpenBSD uses OpenSMTPD, which is much better than Postfix. You're much more
likely to get help with that.

As for Postfix, have you tried StackOverflow or Freenode?

On Thu, Aug 24, 2017 at 11:49 AM, Markus Rosjat  wrote:

> Hi there,
>
> since I know ppl on this list are always willing to help even it's not a
> real openbsd problem I will give it a try.
> I tried to ask this on the postfix list but after a week without any
> response and resending the  mail I gave up.
>
> so here is my problem, I konfigured postfix and dkimproxy to work
> together. So far so good because it works for outgoing mail. The problem i
> face is with local mails. Postfix somehow rewrites the reciepent from the
> mail adress to u...@domain.tld and then the lookup im my ldap directory
> fails.
>
> So the real question is, can I configure postfix to ignore the forwarding
> to dkimproxy for local delivery ?
>
> regards
> --
> Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de
>
> G+H Webservice GbR Gorzolla, Herrmann
> Königsbrücker Str. 70, 01099 Dresden
>
> http://www.ghweb.de
> fon: +49 351 8107220   fax: +49 351 8107227
>
> Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before
> you print it, think about your responsibility and commitment to the
> ENVIRONMENT
>
>

Re: OT: Recommendations for a CMS?

[BergenBergen BergenBergen]

https://www.locomotivecms.com/ is great, _AND_ it's Ruby on Rails :)
Win-win. Good luck!

--Murk

On Sun, May 7, 2017 at 6:24 PM, Paul Suh  wrote:

> Folks,
>
> Completely off topic, but I'd value input from this community in
> particular. I need to recommend a (replacement) CMS for the public-facing
> web site for my day job. My wants:
>
> 1) NOT Wordpress -- I don't need the security headaches.
> 2) Allows updates by users who don't know HTML and for whom Markdown is a
> stretch. (Marketing people.)
> 3) Has commercial support and hosting available -- if it was just me I
> could run almost anything on my own. For my day job, however, I need to
> make sure that the rest of the IT department can still handle things if I
> get hit by a bus.
> 4) Minimal customization -- certainly no custom code or scripting. Again,
> if it was just me..., but it needs to be maintainable down the road.
>
> The site has very little necessary in the way of server-side processing;
> in fact, a CMS is borderline overkill. A good templating system would
> almost do the trick. A really good templating system that can automatically
> post selected news item links to Twitter, Instagram, Facebook, etc. would
> be great. The only problem is that the marketing types can't be trusted
> even with Markdown. :-P
>
> The site needs to be really flashy and eye-catching for marketing
> purposes, so whatever solution needs to support (or at least not get in the
> way of) the latest & greatest HTML5/CSS/JS. (I know that the crowd here is
> generally going to pooh-pooh that, but it's actually appropriate for
> selling to the target audience. I'm mostly the same way, and have to check
> my first instincts when dealing with this site.)
>
> I've used Plone in the past, but support seems a little thin these days
> and it's pretty heavyweight for this project.
>
> I saw the thread about "Creating a blog..." a year ago, but time has
> passed and his use case is significantly different from mine.
>
> I'm looking for actual, recent experience with a CMS, not "I know a guy
> who used to run..." kinds of things.
>
> Suggestions?
>
>
> --Paul