Re: [OpenIndiana-discuss] timeouts with pkg update

2019-05-13 Thread Tim Mooney

In regard to: Re: [OpenIndiana-discuss] timeouts with pkg update, Michal...:

I recently had a problem with just one particular server (not OI related), 
which reset HTTP connection. I eventually fixed it by restarting home router. 
Worth a try.


Do you get 503 via HTTPS as well?

I was able to fetch the file on OI desktop via HTTP & HTTPS.


With confirmation from Tony & Michal that they could download the file,
I knew the issue had to be with my connection, and that also gave me
a strong guess where the issue was.

The state-run higher education network that my workstation is part of
uses an "intrusion prevention system" from Palo Alto Networks to scan
incoming network traffic, including content downloaded over unencrypted
connections.

Once I suspected it was the Palo Alto mis-identifying the file as
malware, I switched the publisher from HTTP to HTTPS.  I was then able
to download it without issue.

I now have confirmation from our network engineers that these devices
mis-identified part of the file that was failing (part of SUNWcs) as
malware, tagging it as

Virus/Linux.WGeneric.aayiws(268993110)

I can find no information about that signature anywhere, but either way
it was the Palo Alto device that was breaking connection.

I think HTTPS is a much better delivery method for package content than
HTTP anyway, so I'm happy to just use HTTPS from now on.

Tim
--
Tim Mooney tim.moo...@ndsu.edu
Enterprise Computing & Infrastructure  701-231-1076 (Voice)
Room 242-J6, Quentin Burdick Building  701-231-8541 (Fax)
North Dakota State University, Fargo, ND 58105-5164

___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
https://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Distribution of installation media

2019-05-13 Thread Tim Mooney

In regard to: Re: [OpenIndiana-discuss] Distribution of installation media,...:


It's gmake REQUIRED_PACKAGES to make that list. But it will only catch
runtime dependencies not build time dependencies. And it was part of the
instructions in the wiki but now those instructions need a new Home.


That place would be here:

http://docs.openindiana.org/dev/userland

I've contributed a bit to that document in the past, but it's missing
some information that the wiki has.

One of the reasons why I originally asked about the status of the wiki
was because of the differences between the wiki and that article.  I
wanted to compare that two docs.

If someone doesn't beat me to it, I'll see if I can add a note about
REQUIRED_PACKAGES to the docs page, and perhaps backport other information
that's relevant.

Tim
--
Tim Mooney tim.moo...@ndsu.edu
Enterprise Computing & Infrastructure  701-231-1076 (Voice)
Room 242-J6, Quentin Burdick Building  701-231-8541 (Fax)
North Dakota State University, Fargo, ND 58105-5164

___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
https://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Distribution of installation media

2019-05-13 Thread Till Wegmüller
Hi Sebastian

It's gmake REQUIRED_PACKAGES to make that list. But it will only catch
runtime dependencies not build time dependencies. And it was part of the
instructions in the wiki but now those instructions need a new Home.

Greetings
Till

On 13.05.19 16:35, Sebastian wrote:
> Hi all,
> 
> after downloading the new install media, I thought about creating
> BitTorrents for it.
> 
> The question is : Would it be more useful to have a separate one for
> each variant, gui, text and minimal, including the .sha256sum- and
> .sig-files, or one for everything ?
> 
> What I think could be improved are the instructions for creating ports
> in oi-userland, e.g. with the auto-generation of the REQUIRED_PACKAGES
> section, because I tried to write a Makefile but didn't really find
> information about creating that section automatically with gmake. Or did
> I maybe oversee something ?
> 
> Regards,
> 
> Sebastian
> 
> 
> ___
> openindiana-discuss mailing list
> openindiana-discuss@openindiana.org
> https://openindiana.org/mailman/listinfo/openindiana-discuss
> 

___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
https://openindiana.org/mailman/listinfo/openindiana-discuss


[OpenIndiana-discuss] Distribution of installation media

2019-05-13 Thread Sebastian
Hi all,

after downloading the new install media, I thought about creating
BitTorrents for it.

The question is : Would it be more useful to have a separate one for
each variant, gui, text and minimal, including the .sha256sum- and
.sig-files, or one for everything ?

What I think could be improved are the instructions for creating ports
in oi-userland, e.g. with the auto-generation of the REQUIRED_PACKAGES
section, because I tried to write a Makefile but didn't really find
information about creating that section automatically with gmake. Or did
I maybe oversee something ?

Regards,

Sebastian


___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
https://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Firefox 60 ESR available

2019-05-13 Thread Predrag Zečević - Technical Support Analyst

We had this suggestion recently:

On 04/28/19 18:30, Michal Nowak wrote:

   $ zfs get volsize rpool/swap
   $ pfexec zfs set volsize=24g rpool/swap
   $ pfexec reboot


I have had strange case this morning, when my rpool (SSD 256GB) was 
occupying 120GB and / partition was 100% full (there are some user 
directories there, few Zones, log etc).


I saw that rpool/swap "eat" whole 24GB of space I have assigned it 
earlier...
(as dirty fix, I have reduced size of volume to small number, and then 
rebooted - which has left 20+ GB free!). Right now:


:; zfs list -o 
compression,compressratio,used,avail,refer,canmount,mountpoint,name -r 
rpool/ROOT rpool/swap

COMPRESS  RATIO   USED  AVAIL  REFER  CANMOUNT  MOUNTPOINT NAME
 off  1.00x  96,0G  37,8G19K   off  legacy 
rpool/ROOT
 off  1.00x  8,17G  37,8G  8,17G -  - 
rpool/swap


:; zfs get volsize rpool/swap
NAMEPROPERTY  VALUESOURCE
rpool/swap  volsize   24G  local

Is there any better way to free space on rpool/swap volume (before, for 
example, I start FF)?


Is it safe to enable compression of rpool?

With best regards.
Predrag Zečević
--
Predrag Zečević
Technical Support Analyst
2e Systems GmbH

tel: +49 - 6196 - 95058 - 15
mob: +49 - 174 - 3109288
fax: +49 - 6196 - 95058 - 94
e-mail: predrag.zece...@2e-systems.com

headquarter: 2e Systems GmbH, Koenigsteiner Str. 87, 65812 Bad Soden am 
Taunus, Germany

registration: Amtsgericht Koenigstein (Germany), HRB 7303
managing director: Phil Douglas

http://www.2e-systems.com/ - Making your business fly!

___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
https://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Firefox 60 ESR available

2019-05-13 Thread Udo Grabowski (IMK)

On 06/05/2019 20:36, Alan Coopersmith wrote:

On 5/6/19 9:06 AM, Udo Grabowski (IMK) wrote:

After the addons certificate desaster, a followup hotfix build of the
fixed ESR 60.x should be released in the repo. It's yet to be awaited,
they just pushed the 66.0.4 regular version.


Mozilla has released ESR 60.6.2 upstream:
https://www.mozilla.org/en-US/firefox/60.6.2/releasenotes/

but:
https://bugzilla.mozilla.org/show_bug.cgi?id=1549310



Firefox ESR 60.6.3 has a fix for 


5 bugs left, see 
--
Dr.Udo Grabowski   Inst.f.Meteorology & Climate Research IMK-ASF-SAT
http://www.imk-asf.kit.edu/english/sat.php
KIT - Karlsruhe Institute of Technology   http://www.kit.edu
Postfach 3640,76021 Karlsruhe,Germany T:(+49)721 608-26026 F:-926026

___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
https://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenIndiana Confluence security incident

2019-05-13 Thread Till Wegmüller
As someone who works alsmost daily with Mediawiki as a user.

It can prevent anonymous Postings but it is terrible at it and has even
more Exploits wirtten against it than Confluence.

If possible we try to put it behind http basic auth whenever we can.

Also I do not see why a docs site would be to slow?
We have a Continous integration instance that can deploy the Site on
change and have enough people commit to the project daily. SUrely
somebody will be able to pick your additions withion the day and press
the merge button.

The WebEditor of Github is not as extensive as a IDE but it is certainly
enough to write Markdown pages.

Greetings
Till

On 13.05.19 08:21, Richard L. Hamilton wrote:
> 
> 
>> On May 13, 2019, at 01:25, Tony Brian Albers  wrote:
>>
>> On Sat, 2019-05-11 at 07:59 -0500, Gary Mills wrote:
>>> On Fri, May 10, 2019 at 09:15:34AM +, Alexander Pyhalov via
>>> openindiana-discuss wrote:

 Given that actually nobody has cared enough for this infrastructure
 server, we suggest the following steps.
 1) Moving all valuable information from wiki to
 https://docs.openindiana.org and
 http://github.com/OpenIndiana/oi-userland/ docs directory.
>>>
>>> What's going to happen to the Hardware Compatibility List?  I make
>>> regular contributions to it whenever I try OI on new hardware.  I
>>> also
>>> review the list before purchasing hardware to determine which
>>> hardware
>>> likely works with OI.  The wiki seemed to work well for those
>>> purposes.  Any facility that accepts contributions from everybody is
>>> going to require a certain amount of management.
>>>
>>>
>>
>> I agree with Gary. Although keeping a more than less static docs site
>> running is a good idea, there is still the need for some wiki-like
>> pages that can be used for rapidly changing things like the H/W
>> compatibility list.
>>
>> Maybe a simpler wiki would do?
> 
> Maybe use open source software, like MediaWiki (what Wikipedia uses) - I 
> haven't read its docs, but I gather it's capable enough to e.g. only allow 
> non-guest users to edit; maybe capable enough to designate different groups 
> of users as able to edit different pages.  (where I gather it would be weak, 
> would be if you wanted pages that were only even visible to certain users, 
> aside from the special case of hidden pages only being visible to sysops)  If 
> it can do that, it should be able to do well enough to let small groups be 
> responsible for portions of the whole; unless that group wanted it more open, 
> they could simply receive (on an open talk: page? by email?) suggested 
> changes, and apply those they approved themselves.
> 
> The one advantage that particular one has (regardless of technical qualities) 
> is that probably more end users have some familiarity with it than any other.
> 
> 
> 
> ___
> openindiana-discuss mailing list
> openindiana-discuss@openindiana.org
> https://openindiana.org/mailman/listinfo/openindiana-discuss
> 

___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
https://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenIndiana Confluence security incident

2019-05-13 Thread Richard L. Hamilton



> On May 13, 2019, at 01:25, Tony Brian Albers  wrote:
> 
> On Sat, 2019-05-11 at 07:59 -0500, Gary Mills wrote:
>> On Fri, May 10, 2019 at 09:15:34AM +, Alexander Pyhalov via
>> openindiana-discuss wrote:
>>> 
>>> Given that actually nobody has cared enough for this infrastructure
>>> server, we suggest the following steps.
>>> 1) Moving all valuable information from wiki to
>>> https://docs.openindiana.org and
>>> http://github.com/OpenIndiana/oi-userland/ docs directory.
>> 
>> What's going to happen to the Hardware Compatibility List?  I make
>> regular contributions to it whenever I try OI on new hardware.  I
>> also
>> review the list before purchasing hardware to determine which
>> hardware
>> likely works with OI.  The wiki seemed to work well for those
>> purposes.  Any facility that accepts contributions from everybody is
>> going to require a certain amount of management.
>> 
>> 
> 
> I agree with Gary. Although keeping a more than less static docs site
> running is a good idea, there is still the need for some wiki-like
> pages that can be used for rapidly changing things like the H/W
> compatibility list.
> 
> Maybe a simpler wiki would do?

Maybe use open source software, like MediaWiki (what Wikipedia uses) - I 
haven't read its docs, but I gather it's capable enough to e.g. only allow 
non-guest users to edit; maybe capable enough to designate different groups of 
users as able to edit different pages.  (where I gather it would be weak, would 
be if you wanted pages that were only even visible to certain users, aside from 
the special case of hidden pages only being visible to sysops)  If it can do 
that, it should be able to do well enough to let small groups be responsible 
for portions of the whole; unless that group wanted it more open, they could 
simply receive (on an open talk: page? by email?) suggested changes, and apply 
those they approved themselves.

The one advantage that particular one has (regardless of technical qualities) 
is that probably more end users have some familiarity with it than any other.



___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
https://openindiana.org/mailman/listinfo/openindiana-discuss