Re: sysupgrade fails firmware fetch

2024-02-18 Thread Kirill A . Korinsky 
On Sun, 18 Feb 2024 10:57:27 +0100,
Stuart Henderson wrote:
> 
> It's not too bad as long as the person building firmware tgz gets a
> heads-up before the version number is updated.
> 

Specially that right now it still can be run as:

  env VERSION=74 fw_update -p http://firmware.openbsd.org/firmware/snapshots

I do not say that is good, but it isn't a disaster.

Special for guys who runs on development snapshots.

-- 
wbr, Kirill

Re: sysupgrade fails firmware fetch

2024-02-18 Thread Stuart Henderson 
On 2024-02-18, Theo de Raadt  wrote:
> Kirill A. Korinsky  wrote:
>
>> On Sat, 17 Feb 2024 22:27:52 +0100,
>> Sonic wrote:
>> > 
>> > Seems it's looking for a 7.5 directory (-current apparently just moved
>> > to 7.5-beta) instead of the snapshot directory.
>> > 
>> 
>> And using snapshot directory fails because wrong signature:
>> 
>>   ~ $ doas fw_update -p http://firmware.openbsd.org/firmware/snapshots 
>>   fw_update: failed.
>>   signify: verification failed: checked against wrong key
>>   Signature check of SHA256.sig failed
>>   ~ $ 
>
> The heuristic in fw_update is weak.  Every 6 months there is a chance
> for someone to dig in and see if there is a better heuristic.

It's not too bad as long as the person building firmware tgz gets a
heads-up before the version number is updated.

Re: sysupgrade fails firmware fetch

2024-02-17 Thread Theo de Raadt 
Kirill A. Korinsky  wrote:

> On Sat, 17 Feb 2024 22:27:52 +0100,
> Sonic wrote:
> > 
> > Seems it's looking for a 7.5 directory (-current apparently just moved
> > to 7.5-beta) instead of the snapshot directory.
> > 
> 
> And using snapshot directory fails because wrong signature:
> 
>   ~ $ doas fw_update -p http://firmware.openbsd.org/firmware/snapshots 
>   fw_update: failed.
>   signify: verification failed: checked against wrong key
>   Signature check of SHA256.sig failed
>   ~ $ 

The heuristic in fw_update is weak.  Every 6 months there is a chance
for someone to dig in and see if there is a better heuristic.

But be careful.  If the other side of the heuristic is broken for the
real release cycle it will be very uncomfortable.

Re: sysupgrade fails firmware fetch

2024-02-17 Thread Kirill A . Korinsky 
On Sat, 17 Feb 2024 22:27:52 +0100,
Sonic wrote:
> 
> Seems it's looking for a 7.5 directory (-current apparently just moved
> to 7.5-beta) instead of the snapshot directory.
> 

And using snapshot directory fails because wrong signature:

  ~ $ doas fw_update -p http://firmware.openbsd.org/firmware/snapshots 
  fw_update: failed.
  signify: verification failed: checked against wrong key
  Signature check of SHA256.sig failed
  ~ $ 

-- 
wbr, Kirill

sysupgrade fails firmware fetch

2024-02-17 Thread Sonic 
Today "sysupgrade -s" failed to fetch updated firmware:
=
Verifying sets.
Fetching updated firmware.
fw_update: failed.
Cannot fetch http://firmware.openbsd.org/firmware/7.5//SHA256.sig (404
Not Found)
Upgrading.
=

Seems it's looking for a 7.5 directory (-current apparently just moved
to 7.5-beta) instead of the snapshot directory.