Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-28 Thread bytevolcano
I was thinking more of having a Javascript implementation of OpenBSD so
that you could type the 'man' command to get the page you are after.

It will only increase the size of the page by about 400MB, and hard
disk and CPU space is cheap.

And everyone has infinite bandwidth internet.

On Fri, 25 Mar 2016 09:24:29 -0600
Bob Beck  wrote:

> Now now, we can be more hipster than that.. a docker image that runs
> the man command for you after downloading
> all the openbsd man pages as a dependency - you can just deploy it
> automatically with vagrant and run it in AWS.. etc.
> 
> After all, isn't there no simple command that can't be made better by
> installing an os image someone else built to run?
> 
> 
> 
> 
> On Fri, Mar 25, 2016 at 8:45 AM, Ingo Schwarze 
> wrote:
> > Hi Gilles,
> >
> > Gilles Chehade wrote on Fri, Mar 25, 2016 at 03:34:02PM +0100:
> >  
> >> maybe we could provide MaaS (man as a service, copyright eric@)
> >>
> >> if user issues `man` and the man page is not found locally, man
> >> would transparently ssh to gu...@man.openbsd.org ?  
> >
> > Hilarious on so many levels...  :-D
> >   Ingo
> >  
> 



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-25 Thread Miod Vallat

> maybe we could provide MaaS (man as a service, copyright eric@)
>
> if user issues `man` and the man page is not found locally, man
> would transparently ssh to gu...@man.openbsd.org ? 

Doesn't Canonical own a patent on this?



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-25 Thread Alexander Hall
Am I the only one that didn't take the proposal seriously?

/Alexander 

On March 25, 2016 5:13:52 PM GMT+01:00, Theo de Raadt  
wrote:
>> > $ ssh gu...@man.openbsd.org
>> > 
>> > Welcome guest user to OpenBSD's online manual library.
>> > 
>> > The only command available is 'man'.
>> > 
>> > (For help; type 'man man[ENTER]'.)
>> > 
>> > $
>
>So Craig, you think someone should take this risk?



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-25 Thread Theo de Raadt
> Am I the only one that didn't take the proposal seriously?

Craig's bank hands out anonymous unix shell accounts so that people
can read various public documents rather than using a web browser; I
am guessing that is where this proposal comes from.



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-25 Thread Theo de Raadt
> > $ ssh gu...@man.openbsd.org
> > 
> > Welcome guest user to OpenBSD's online manual library.
> > 
> > The only command available is 'man'.
> > 
> > (For help; type 'man man[ENTER]'.)
> > 
> > $

So Craig, you think someone should take this risk?



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-25 Thread Bob Beck
Now now, we can be more hipster than that.. a docker image that runs
the man command for you after downloading
all the openbsd man pages as a dependency - you can just deploy it
automatically with vagrant and run it in AWS.. etc.

After all, isn't there no simple command that can't be made better by
installing an os image someone else built to run?




On Fri, Mar 25, 2016 at 8:45 AM, Ingo Schwarze  wrote:
> Hi Gilles,
>
> Gilles Chehade wrote on Fri, Mar 25, 2016 at 03:34:02PM +0100:
>
>> maybe we could provide MaaS (man as a service, copyright eric@)
>>
>> if user issues `man` and the man page is not found locally, man
>> would transparently ssh to gu...@man.openbsd.org ?
>
> Hilarious on so many levels...  :-D
>   Ingo
>



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-25 Thread Ingo Schwarze
Hi Gilles,

Gilles Chehade wrote on Fri, Mar 25, 2016 at 03:34:02PM +0100:

> maybe we could provide MaaS (man as a service, copyright eric@)
> 
> if user issues `man` and the man page is not found locally, man
> would transparently ssh to gu...@man.openbsd.org ? 

Hilarious on so many levels...  :-D
  Ingo



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-25 Thread Gilles Chehade
On Fri, Mar 25, 2016 at 03:20:05PM +0100, Ingo Schwarze wrote:
> Hi Craig,
> 
> Craig Skinner wrote on Wed, Mar 23, 2016 at 10:07:10AM +:
> > On 2016-03-22 Tue 22:49 PM |, Bob Beck wrote:
> 
> >> A few years back, Ingo moved it to the new mandoc based man.cgi, and
> >> now we've actually moved this to a dedicated place - "man.openbsd.org"
> 
> > Superb.
> > 
> > What's next?
> > 
> > $ ssh gu...@man.openbsd.org
> > 
> > Welcome guest user to OpenBSD's online manual library.
> > 
> > The only command available is 'man'.
> > 
> > (For help; type 'man man[ENTER]'.)
> > 
> > $
> 
> Sounds like a bad idea to me.  The man(1) utility spawns less(1),
> and less can spawn editors and shells.  So that is hard to secure.
> 
> Even if it could be secured, i don't like the idea of handing out
> SSH access to an OpenBSD web server to the general public.  A web
> server is always a fragile beast, and attack surface ought to be
> minimized.
> 
> Even if it could the secured and even if there weren't concerns
> about expanding attack surface, it doesn't look like it could be
> worth the effort.  I don't think there are many people out there
> expecting to find public information on the Internet on anonymous
> SSH servers rather than on WWW servers, so it's not likely the
> service would see much real-world use.
> 
> And even if there were a few people who would use it, i don't
> quite see how it would be better for them than what we already
> have.  I mean, http://man.openbsd.org/ works with text browsers
> on text-only terminals.
> 

maybe we could provide MaaS (man as a service, copyright eric@)

if user issues `man` and the man page is not found locally, man
would transparently ssh to gu...@man.openbsd.org ? 


-- 
Gilles Chehade

https://www.poolp.org  @poolpOrg



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-25 Thread Ingo Schwarze
Hi Craig,

Craig Skinner wrote on Wed, Mar 23, 2016 at 10:07:10AM +:
> On 2016-03-22 Tue 22:49 PM |, Bob Beck wrote:

>> A few years back, Ingo moved it to the new mandoc based man.cgi, and
>> now we've actually moved this to a dedicated place - "man.openbsd.org"

> Superb.
> 
> What's next?
> 
> $ ssh gu...@man.openbsd.org
> 
> Welcome guest user to OpenBSD's online manual library.
> 
> The only command available is 'man'.
> 
> (For help; type 'man man[ENTER]'.)
> 
> $

Sounds like a bad idea to me.  The man(1) utility spawns less(1),
and less can spawn editors and shells.  So that is hard to secure.

Even if it could be secured, i don't like the idea of handing out
SSH access to an OpenBSD web server to the general public.  A web
server is always a fragile beast, and attack surface ought to be
minimized.

Even if it could the secured and even if there weren't concerns
about expanding attack surface, it doesn't look like it could be
worth the effort.  I don't think there are many people out there
expecting to find public information on the Internet on anonymous
SSH servers rather than on WWW servers, so it's not likely the
service would see much real-world use.

And even if there were a few people who would use it, i don't
quite see how it would be better for them than what we already
have.  I mean, http://man.openbsd.org/ works with text browsers
on text-only terminals.

Yours,
  Ingo



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-23 Thread lists
Wed, 23 Mar 2016 10:07:10 + skin...@britvault.co.uk (Craig Skinner)
> On 2016-03-22 Tue 22:49 PM |, Bob Beck wrote:
> > 
> > A few years back, Ingo moved it to the new mandoc based man.cgi, and
> > now we've actually moved this to a dedicated place - "man.openbsd.org"
> 
> Superb. What's next?

You could fix your bookmarks and search URLs for online manuals, i.e.

[[http://man.openbsd.org/][OpenBSD manual pages]]

[search_url="om OpenBSD manuals 
http://man.openbsd.org/cgi-bin/man.cgi?query=%s";]

Details for the search URL construct are in the "URI interface" section:

man.cgi — CGI program to search and display manual pages
[[http://man.openbsd.org/mandoc/man8/man.cgi.8][OpenBSD man.cgi]]

Please test the web system at man.openbsd.org along normal local usage
for reference.  If you come up with a smart idea and/or find something
worth contributing, please do so.

For local use, you could obtain the OpenBSD release from the usual places:

[[http://www.openbsd.org/][OpenBSD]]
[[http://www.openbsd.org/orders.html][OpenBSD ordering]]

After install according to your preferences please read the afterboot(8)
manual page in the terminal.

$ man afterboot

Same page is available now online from the new man.openbsd.org server:

afterboot - things to check after the first complete boot
[[http://man.openbsd.org/OpenBSD-current/man8/afterboot.8][om afterboot]]

To display and author manual pages please see here:

mandoc - format and display UNIX manuals
[[http://man.openbsd.org/OpenBSD-current/man1/mandoc.1][om mandoc]]

mdoc - semantic markup language for formatting manual pages
[[http://man.openbsd.org/OpenBSD-current/man7/mdoc.7][om mdoc]]



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-23 Thread Craig Skinner
On 2016-03-22 Tue 22:49 PM |, Bob Beck wrote:
> 
> A few years back, Ingo moved it to the new mandoc based man.cgi, and
> now we've actually moved this to a dedicated place - "man.openbsd.org"
> 

Superb.

What's next?

$ ssh gu...@man.openbsd.org

Welcome guest user to OpenBSD's online manual library.

The only command available is 'man'.

(For help; type 'man man[ENTER]'.)

$



Re: www.openbsd.org/cgi-bin/man.cgi

2016-03-22 Thread Ingo Schwarze
Hi,

Bob Beck wrote on Tue, Mar 22, 2016 at 10:49:37PM -0600:

> This has been our constant friend for many many years.  I babied some
> truly horrible perl that did this, along with some nasty things to
> extract the old man pages for many years.
> 
> It is now no more.
> 
> A few years back, Ingo moved it to the new mandoc based man.cgi, and
> now we've actually moved this to a dedicated place - "man.openbsd.org"

And by the way, you can save several keystrokes when adding new links
from other web pages:

  http://man.openbsd.org/pledge
  http://man.openbsd.org/malloc.9   # same name in multiple sections

See  http://man.openbsd.org/mandoc/man8/man.cgi.8
section "URI interface" for the full syntax.
But of course, for interactive use, just rely on the HTML search form.

The list of available releases now includes 4.4BSD-Lite2 and UNIX-7,
too, just in case you are stuck with old hardware that is no longer
supported.  ;-)

The OpenBSD-5.9 manuals are already up, too, just in case you didn't
order the CD set yet and wonder whether we are still doing any
development and whether it's worth to keep the project going...

> If you have a web site that links openbsd man pages, it's easy to change
> just replace the http://www.openbsd.org/cgi-bin/man.cgi with
> http://man.openbsd.org - it takes all the same arguments.
> 
> man.openbsd.org runs Ingo's latest and gives him a nice place to host
> it that it dedicated only to that purpose. It separates it out from
> the main web site so we can separate some of this functionality
> better.
> 
> Thanks to Ingo Scharwze for setting it up, along with Nick Holland and
> Ken Westerback for support and getting the machine set up for it, The
> OpenBSD Foundation for buying the gear, and the University of Toronto
> for being so kind as to host it.

Many more people helped with the new code over the years, and i
won't attempt to list them all as i'd probably forget some even if
i tried - so i'll just mention two:  Kristaps Dzonsons originally
wrote the code, not only of mandoc(1), but also of makewhatis(8),
apropos(1), and man.cgi(8), the latter in 2011/2012, and Sebastien
Marie (semarie@) did a security audit of man.cgi(8) in 2014.

Yours,
  Ingo