Re: Softraid question

2015-05-21 Thread Jiri B
bioctl sd3 ? j. # bioctl sd3 Volume Status Size Device softraid0 0 Degraded2000396018176 sd3 RAID1 0 Offline 0 0:0.0 noencl 1 Online 2000396018176 0:1.0 noencl sd1a So you got the answer, full dmesg would

Re: Softraid question

2015-05-21 Thread Jiri B
On Wed, May 20, 2015 at 09:58:30PM -0600, Duncan Patton a Campbell wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I appear to have a disk failure of some kind. softraid0 at root scsibus4 at softraid0: 256 targets softraid0: not all chunks were provided; attempting to bring

Re: report:intranet PXE network install (by nginx...)

2015-05-07 Thread Jiri B
On Thu, May 07, 2015 at 05:24:14PM +0900, Tuyosi Takesima wrote: hi all . i install 5.7 using intranet (internet is unnesesary) i expense some time . for covinience i report it. No need for such report, man 8 pxeboot is sufficient. j.

[httpd] how to specify fallback mime type

2015-04-15 Thread Jiri B
Hi, I can't figure out two things: 1. how to define text/plain for files which do not have extension, following does not work: types { # include /usr/share/misc/mime.types text/plain * } 2. how to define types only for specific location Thanks for help.

Re: [httpd] how to specify fallback mime type

2015-04-15 Thread Jiri B
On Wed, Apr 15, 2015 at 05:00:29AM -0400, Jiri B wrote: Hi, I can't figure out two things: 1. how to define text/plain for files which do not have extension, following does not work: types { # include /usr/share/misc/mime.types text/plain * } FYI

[softraid] how to debug system lock?

2015-04-06 Thread Jiri B
I have an old softraid crypto image (huge file). While accessing its files (vnd-softraid crypto-ffs) the OS locks = I can't get output of any command and I can't kill a process touching the softraid crypto filesystem. Hard power reset is only way. The kernel doesn't panic, I can access ddb but no

Re: Secure PDF viewer

2015-04-02 Thread Jiri B
On Thu, Apr 02, 2015 at 12:33:25AM -0400, Eric Furman wrote: I sometimes have to deal with PDF files (ugh) and all I need is the ability to view and print them, nothing fancy. With security in mind I would like to get opinions on the best one to use. Thanks. Run it chrooted under non-default

Re: OpenBSD as base OS for Virtualization

2015-03-18 Thread Jiri B
On Tue, Mar 17, 2015 at 10:22:10PM -0700, pixelfairy wrote: You might want xen and run openbsd as dom0 So port it, otherwise have nice (wet) dreams :P j.

virtio-scsi broken, any virtio-scsi users?

2015-03-16 Thread Jiri B
Hi, it seems virtio-scsi driver is broken, at least on our openstack env (RH OpenCompute). I was told it is related to CDB... pbonzini who wrote virtio-scsi on Linux told me: http://devio.us/~jirib/shot1.png http://devio.us/~jirib/shot2.png This is invalid field in CDB. I'm not programmer

Re: OpenBSD as base OS for Virtualization

2015-03-15 Thread Jiri B
On Sun, Mar 15, 2015 at 10:28:15AM +0200, Ruslanas Gžibovskis wrote: You mentioned QEMU, for example, so is there some more examples? I don't want to be ugly but have you tried to do your homework at least? Check qemu in ports, there's README file as an example. Solaris Containers, have

Re: OpenBSD as base OS for Virtualization

2015-03-14 Thread Jiri B
On Sat, Mar 14, 2015 at 01:44:47PM +0200, Ruslanas Gžibovskis wrote: So question is: What Virtualization solutions OpenBSD support? OpenBSD supports SPARC ldomains, but you have to have SPARC hw :P There is support of some virtio devices (vio, vioblock, broken vioscsi, vio balloon...) which

Re: Quick OpenBSD/thinkpad question

2015-03-06 Thread Jiri B
On Fri, Mar 06, 2015 at 09:17:41AM -0500, m...@jeremiahford.com wrote: In browsing through misc@ I am seeing many openbsd users running obsd on thinkpads. I had heard quite a bit of rhetoric claiming that Lenovo has been building backdoors into their products, yet I could never find evidence

Re: disabled voice and video in Pidgin?

2015-03-05 Thread Jiri B
On Thu, Mar 05, 2015 at 03:49:33AM -0500, Alan Corey wrote: This is under OpenBSD 5.2. I built pidgin from ports, it worked, I decided I want sound so I removed it and libpurple, set FLAVOR to audio. It built libpurple-audio and pidgin-audio and installed them but when I go into Help - Build

Re: How to run a GUI app without X?

2015-03-04 Thread Jiri B
On Tue, Mar 03, 2015 at 08:16:11PM +0100, someone wrote: If X security is so bad, how can one run a GUI app, ex.: Firefox without it? Using framebuffer? How can then someone use a GUI password manager to copy the pwd to the Firefox in the fb? google doesn't gives too many answers, to be more

Re: Xen PV DomU with OpenBSD?

2015-02-26 Thread Jiri B
On Wed, Feb 25, 2015 at 03:17:09PM -0600, Andrew Daugherity wrote: [...] the VM config files. I did have to use model=e1000 for OpenBSD, as the rtl8139 (re0 on openbsd) didn't work properly; I just now tested rtl8139 emulation is from qemu, you would get same issue with qemu, KVM... Thus, qemu

Re: Installing OpenBSD 5.6 using a USB Flash drive

2015-02-17 Thread Jiri B
On Tue, Feb 17, 2015 at 10:36:20AM +, A Y wrote: The boot process from the USB was done. However, when we came to installing file sets, the following prompt was displayed: Location of sets? (disk http or 'done') [http] Now, what can I do to direct the installation process to look for the

Re: YP Alternative

2015-01-04 Thread Jiri B
On Sun, Jan 04, 2015 at 06:40:09PM +1000, David Gwynne wrote: i dunno. ideally i would just do basic auth over https against something that just returns 200 or 403. bsdauth on openbsd means i could probably implement that with a crappy script. linux probably has a crazy pam module i could use

Re: Former Yugoslavia in countrycodes

2015-01-04 Thread Jiri B
On Sun, Jan 04, 2015 at 12:58:05PM +0100, Jan Stary wrote: -MK:MACEDONIA, THE FORMER YUGOSLAV REPUBLIC OF +MK:MACEDONIA Not all Greeks will raise their voices :D j.

free ipv6 KVM-based - cloudspin.me [was - Re: DigitalOcean's BSD debut is FreeBSD only]

2014-12-21 Thread Jiri B
On Sun, Dec 21, 2014 at 01:54:50AM +, Some Developer wrote: Vultr already support OpenBSD on their servers (you upload the OpenBSD install ISO and install it yourself) and their servers cost the same as Digital Ocean. Performance is good. They support IPv6 and they have more locations

Re: About special configs to do in OpenBSD for KVM environments

2014-12-19 Thread Jiri B
On Fri, Dec 19, 2014 at 11:57:19AM +0400, Vadim Zhukov wrote: I have few 5.5/amd64 in production under CentOS 6.2, without either direct or indirect access to Internet. No problems so far, no adjustments on OpenBSD side. Time to upgrade hosts? It's time of 6.6 now :) j.

Lenovo T500 doesn't boot [Was: Re: Can't boot Nov 21 amd64/bsd.rd - finishes at 'entry point'...]

2014-11-26 Thread Jiri B
Does anybody have an archive for each amd64 snapshot? I'd like to check what is the latest amd64 kernel which can boot on T500. Nov 7 snapshot works OK but recent ones do not. I updated bios, ran memtest86+, still same problem. But... I see I don't have any getty, strange, I haven't observe it

Re: Lenovo T500 doesn't boot [Was: Re: Can't boot Nov 21 amd64/bsd.rd - finishes at 'entry point'...]

2014-11-26 Thread Jiri B
On Wed, Nov 26, 2014 at 12:45:18PM -0800, Mike Larkin wrote: On Wed, Nov 26, 2014 at 02:48:33PM -0500, Jiri B wrote: Does anybody have an archive for each amd64 snapshot? I'd like to check what is the latest amd64 kernel which can boot on T500. Nov 7 snapshot works OK but recent ones do

Re: making firefox less insecure

2014-11-24 Thread Jiri B
On Sun, Nov 23, 2014 at 02:41:10PM -0500, Jonathan Thornburg wrote: I can see several possible forms of exploit-mitigation: (a) use the noscript firefox extension to block javascript (b) use capsicum to sandbox forefox and any plugin processes (c) run firefox in a chroot jail (d) have

Re: Can't boot Nov 21 amd64/bsd.rd - finishes at 'entry point'...

2014-11-24 Thread Jiri B
On Sat, Nov 22, 2014 at 12:40:22PM -0700, Theo de Raadt wrote: I can't boot bsd.rd (amd64) from Nov 21 2014. I've tried to upgrade my FDE-based amd64 installation. I entered passphrase for crypto softraid in boot loader, typed 'bsd.rd' and after one line it finished: entry point at

Can't boot Nov 21 amd64/bsd.rd - finishes at 'entry point'...

2014-11-22 Thread Jiri B
I can't boot bsd.rd (amd64) from Nov 21 2014. I've tried to upgrade my FDE-based amd64 installation. I entered passphrase for crypto softraid in boot loader, typed 'bsd.rd' and after one line it finished: entry point at 0x1000160 [7205c768, 3404, 24448b12, 6670a304] (I hope I wrote it down

Re: Postfix compilation error.

2014-11-12 Thread Jiri B
On Wed, Nov 12, 2014 at 01:57:43PM +0100, giacomo wrote: I see and I remove the file indicated in the guide (and run all another command) but the compilation end with errors: : warning: sprintf() is often misused, please use snprintf() /usr/bin/ld: warning: libgssapi.so.7.1, needed by

Re: Apache 1.3 vs. nginx vs. base httpd

2014-11-06 Thread Jiri B
On Thu, Nov 06, 2014 at 09:24:24AM +, Bogdan Andu wrote: Hi, There are some confusing info about which won the base-webserver in OpenBSD: In 5.6 it seems to be nginx 1.6.0 (http://www.openbsd.org/plus56.html) : Unhooked httpd(8) from build: use of nginx(8) is encouraged now. Removed

Re: syslog level and files

2014-10-03 Thread Jiri B
On Fri, Oct 03, 2014 at 04:37:06PM -0400, sven falempin wrote: Dear list, Why the level information of logs are not present in log files (and yes i could put a certain level in a certain file but then i have to sort it all..) ? Because classic syslog format is very free-form. Sorry but is

Re: Question re dhclient.conf

2014-09-29 Thread Jiri B
On Mon, Sep 29, 2014 at 05:28:27AM -0600, Duncan Patton a Campbell wrote: /etc/dhclient.conf used to contain a script tosomfile ; option that could, amongst other things, be used to set a dynamic assigned dns address to a named server. This functionality has been removed and I am

Re: Question re dhclient.conf

2014-09-29 Thread Jiri B
On Mon, Sep 29, 2014 at 08:03:14AM -0600, Duncan Patton a Campbell wrote: My purpose here is to allow dynamic dns updates via nsupdate from a dhcp clients where addresses are subject to change. I have a solution that will remain stable so long as the !command hook in hostname.if remains

Re: Signing siteXX.tgz files?

2014-09-04 Thread Jiri B
On Wed, Sep 03, 2014 at 08:10:10PM +0100, Craig R. Skinner wrote: I found a couple of threads related to signing the siteXX.tgz install files, and was wondering what the future (5.6) of this might look like. If I understand the present (5.5) situtation correctly, if site*.tgz are created

Re: mplayer full screen problems

2014-09-02 Thread Jiri B
On Mon, Sep 01, 2014 at 12:51:17PM +0200, somelooser3...@hushmail.com wrote: Hello, If I put an OpenBSD 5.5 (FVWM) box on a display via VGA cable mplayer does strange things: The -geometry=50%:50% doesn't work (doesn't put the videos in center). The -fs doesn't work. I can only

Re: Automated PXE install with Serva (updated)

2014-08-30 Thread Jiri B
On Sat, Aug 30, 2014 at 01:06:11AM -0700, Patrick Masotta wrote: Hi, I'm installing install55.iso with Serva. Serva is an automated PXE server that let us install many OSs (including OpenBSD) from a menu. It is interesting to know that even when there are some rough edges OpenBSD is today

[www/faq/current.html] rm -f /etc/rc.d/named

2014-08-26 Thread Jiri B
Isn't there forgotten named's rcscript? j. Index: current.html === RCS file: /cvs/www/faq/current.html,v retrieving revision 1.539 diff -u -p -u -p -r1.539 current.html --- current.html25 Aug 2014 07:40:35 - 1.539

Re: Cloning an OpenBSD system (and potential FAQ (4.15) error?)

2014-08-22 Thread Jiri B
On Fri, Aug 22, 2014 at 10:04:28AM -0400, Alan McKay wrote: Hi folks, I've done this a (n exaggerated) million times on Linux but I'm new at OpenBSD. Google found me a few options and I just want to see whether there are any more that I missed. FAQ 4.15 addresses this matter and says :

Re: PXE auto_install

2014-06-24 Thread Jiri B
On Tue, Jun 24, 2014 at 08:10:59AM -0700, ML mail wrote: Hi, The new OpenBSD auto_install with PXE works like a charm and just have 2 questions regarding the install.conf file I did not manage to find out yet: 1) how can I install the bsd.mp instead of the standard bsd image? 2) how can

Re: signing release files

2014-06-17 Thread Jiri B
On Mon, Jun 16, 2014 at 05:47:03PM -0400, Nick Holland wrote: [diff to easily allow different keys] I think focus has been lost. What's the point of signing releases? To say This came from the OpenBSD project. Why? To make sure your release is a pure, untampered with version.

Re: fuse - bindfs, fuse-zip, strange issues

2014-06-16 Thread Jiri B
On Sat, Jun 14, 2014 at 01:33:24PM +0100, Stuart Henderson wrote: what is implemented - sure, see /sys/miscfs/fuse and /usr/src/lib/libfuse ;) These in particular: fuse.c: FUSE_OPT_KEY(-h, KEY_HELP), fuse.c: FUSE_OPT_KEY(--help, KEY_HELP),

Re: signing release files

2014-06-16 Thread Jiri B
On Sun, Jun 15, 2014 at 05:09:20PM -0400, Ted Unangst wrote: On Sun, Jun 15, 2014 at 14:12, Aaron Gomez wrote: I looked at the signify command but I can't figure out how to check all the files and then create the SHA256.sig. I tried signify -S -s myprivatekey.sec -m SHA256 -x SHA256.sig

Re: fuse - bindfs, fuse-zip, strange issues

2014-06-14 Thread Jiri B
On Sat, Jun 14, 2014 at 09:17:19AM +, Stuart Henderson wrote: On 2014-06-14, Jiri B ji...@devio.us wrote: Huh, is this fuse really ready to use? I'm running this It's working fairly well for programs that only use the implemented features, but some newly ported programs need extra

Re: fuse - bindfs, fuse-zip, strange issues

2014-06-14 Thread Jiri B
Attaching my _ugly_ (WIP) port of bindfs :) j. [demime 1.01d removed an attachment of type application/x-tar-gz] https://github.com/jirib/openbsd-mystuff/tree/master/sysutils/bindfs j.

pxeboot reading boot.conf and MAC address-boot.conf

2014-06-13 Thread Jiri B
Hi, is there a plan to make pxeboot load additional config like installer does it while prefixing path with MAC address? - installer: MAC address-install.conf install.conf - pxeboot: /etc/boot.conf There's old diff[1] which adds support for pxeboot loading additional config which could

fuse - bindfs, fuse-zip, strange issues

2014-06-13 Thread Jiri B
Hi, I'm trying fuse for first time in my life and I see strange things: 1. no source in mount output, thus it's confusing 2. fuse-zip refers to fusermount, is it needed? 3. some options for fuse bindfs[1] do not work and output is strange 1. # fuse-zip

up-to-date extattr diffs?

2014-05-31 Thread Jiri B
Hi, extattr used to be part of OpenBSD but it was removed. Does anybody have up-to-date diffs to enable this? I'd like to play with glusterfs/ceph on OpenBSD but they both depend on extattr to work. jirib

wildcards for principals when generating ssh certificate

2014-05-14 Thread Jiri B
Hi, is it possible to have a wildcard in principals when generating user certificate? ssh-keygen(1) states: ssh-keygen -s ca_key -I key_id -h -n host.domain user_key.pub I mean something like this: ssh-keygen -s ca_key -I key_id -h -n webapp*.domain user_key.pub Thanks for clarification.

Re: who develops NIC drivers?

2014-05-12 Thread Jiri B
On Mon, May 12, 2014 at 06:03:28AM -0600, Wylie Bayes wrote: Figured i'd piggy back on this thread since it's related Any plans to fix the iwn(4) firmware for: # dmesg |grep iwn iwn0 at pci1 dev 0 function 0 Intel WiFi Link 1030 rev 0x34: msi, MIMO 1T2R, BGN, address bc:77:37:6e:d8:90

Re: Linux Foundation raising money for Core Infrastructure

2014-04-24 Thread Jiri B
On Thu, Apr 24, 2014 at 10:51:53AM -0300, Alejandro wrote: So, i was just reading this article[1] on wired where they mention the Linux Foundation raising money for projects like OpenSSL after Heartbleed hit and for other crucial software on the Internet... What are the chances of things like

Re: antiviruses executable on OpenBSD

2014-04-04 Thread Jiri B
Unfortunatelly both Czech/Slovak antiviruses - Eset, AVG, support Linux or FreeBSD. Maybe m:tier could propose to antivirus companies some kind of cooperation (testing, troubleshooting, boxes for development). If so, it would be great. Maybe just OpenBSD mail server admins should just push

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Jiri B
On Thu, Mar 27, 2014 at 08:10:05AM -0600, Theo de Raadt wrote: TdR ... placing openssl there is not part of any solution that would work. TdR What are other possible solutions? Do you think sftp would fit? Can you replace ftp with sftp? I'd prefer to maintain a limited access sftp

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Jiri B
So I sent a long mail yesterday explaining this, and that's the best you two can do? How do you even retain jobs?? Dramatic arts class on elementary school :D j.

Re: OpenBSD on T61/T500

2014-02-24 Thread Jiri B
On Sun, Feb 23, 2014 at 07:27:31PM +, Dennis den Brok wrote: Hello misc@, I am considering getting a ThinkPad T61 or T500 to run OpenBSD on. My main concern is the noise level: I'd prefer the fan not to run at all during text editing and web browsing. Can anyone comment on that? Are

Re: mounting CVS tree read-only?

2014-02-22 Thread Jiri B
On Fri, Feb 21, 2014 at 11:59:41AM -0800, Fred Snurd wrote: On Friday, February 21, 2014 11:14 AM, Theo de Raadt dera...@cvs.openbsd.org wrote: After studying FAQ 5.3, I am contemplating mounting /usr/src and /usr/xenocara read-only through NFS so I can maintain a centralized tree for

Re: power failure resistance

2014-02-19 Thread Jiri B
On Wed, Feb 19, 2014 at 12:38:53PM +0100, Marko Cupa�? wrote: Hi, I need to deploy a number of openbsd firewalls based on alix2d13 hardware. The goal is to separate industrial network from LAN, in order to protect unpatched systems on industrial network from potential malware on LAN, while

ssh 'tokens' like smtpd tokens

2014-02-12 Thread Jiri B
Hi, I was just doing some chrooted sftp work and I've thought it would be nice if sshd_config's 'ChrootDirectory' and sftp-server '-d - start directory' would support more sofisticated token format like smtpd.conf states. I could imagine following would be useful for sftp hosting providers:

Re: Yaifo WIP

2014-02-11 Thread Jiri B
On Tue, Feb 11, 2014 at 11:07:08AM +, Jona Joachim wrote: On 2014-02-09, Stuart Henderson s...@spacehopper.org wrote: On 2014-02-08, Jona Joachim j...@joachim.cc wrote: Hello, I've been in need for yaifo for quite some time now, so I decided to bring up some patches to make it work

calendar.birthday - fathers of full-beard look (Marx, Engels)

2014-02-10 Thread Jiri B
I saw some calendar.birthday diff, so what about this one? :) Index: calendar.birthday === RCS file: /cvs/src/usr.bin/calendar/calendars/calendar.birthday,v retrieving revision 1.55 diff -u -p -r1.55 calendar.birthday ---

Re: Upgrade path from 4.1?

2014-02-06 Thread Jiri B
Back to reality... Let's suppose I have very old OpenBSD box like it was written. Usually data should be OK (ftp data, web data, DB data dump??...), but can I just copy for example /etc/master.passwd to a new fresh installed 5.5-current? I'm asking because one had to regenerate /etc/{pwd,spwd}.db

Re: `xclock -geometry 250x24-0+0' keeps 1px -XOFF space

2014-01-30 Thread Jiri B
On Wed, Jan 29, 2014 at 05:39:31PM -0500, Okan Demirmen wrote: On Wed 2014.01.29 at 16:33 -0500, Jiri B wrote: Hi, not sure if this is my PEBKAC but I see 1px space in -XOFF (right edge of the window) when I start xclock with following options: xclock -geometry 250x24-0+0

`xclock -geometry 250x24-0+0' keeps 1px -XOFF space

2014-01-29 Thread Jiri B
Hi, not sure if this is my PEBKAC but I see 1px space in -XOFF (right edge of the window) when I start xclock with following options: xclock -geometry 250x24-0+0 I discovered this after cwm got updates for tray icons apps and after I started stalonetray with '-geometry 1x1-0+0' and it

Re: Cannot make state when using 'user' option in pf.conf

2014-01-26 Thread Jiri B
On Sun, Jan 26, 2014 at 04:03:59AM +0400, Vadim Zhukov wrote: 2014/1/26 Jiri B ji...@devio.us: Hello, I'm trying to understand why there's no PF state for a outgoing rule dedicated to dnscrypt-proxy (668) daemon. pf.conf says 'user' option needs effective ID... # ps -axo uid,ruid

Cannot make state when using 'user' option in pf.conf

2014-01-25 Thread Jiri B
Hello, I'm trying to understand why there's no PF state for a outgoing rule dedicated to dnscrypt-proxy (668) daemon. pf.conf says 'user' option needs effective ID... # ps -axo uid,ruid,gid,rgid,pid,args | grep dnscrypt 688 688 688 688 16665 /usr/local/sbin/dnscrypt-proxy -d

Re: Security

2014-01-10 Thread Jiri B
On Fri, Jan 10, 2014 at 01:37:36PM +, Craig R. Skinner wrote: On another box/laptop, try exporting STATIC .html pages from your wiki copying them to a chrooted .html only public web server. Personally, I use Perl's Template Toolkit to generate static pages.

[cwm] menusearch/exec bind problem

2014-01-10 Thread Jiri B
Hi, I have following configuration: $ egrep search|exec .cwmrc bind 4-p menusearch bind C-/ exec But even after restart, C-/ shows me menusearch (application) search, instead of search for command. I tried even this but same situation: bind 4-p menusearch bind C-/ unbind bind C-/ exec Any

Re: [cwm] menusearch/exec bind problem

2014-01-10 Thread Jiri B
On Fri, Jan 10, 2014 at 05:55:11PM -0500, Okan Demirmen wrote: There's no keysym /, but there is one called slash. Yes, thank you (both). So... literally - cwmrc syntax: C-/ - C-slash C-? - C-question C-? - SC-slash jirib On Fri, Jan 10, 2014 at 5:35 PM, Jiri B ji...@devio.us wrote: Hi

Re: Pseudo video device webcam emulation

2014-01-08 Thread Jiri B
On Wed, Jan 08, 2014 at 09:53:57PM +0100, Jan Lambertz wrote: Hi misc, for some time i am trying to get a easy videochat working with openbsd. For testing different aproaches,frameworks,protocols and daemons i need some clients. Problem is that i dont want to run through my whole cellar from

Re: popa3d removed from base - what do people recommend?

2014-01-06 Thread Jiri B
On Sat, Jan 04, 2014 at 09:04:27PM -0500, John Smith wrote: I'm a fan of simple setups and try to stick with the base programs if possible. I've been using an SSL relayd wrapper around popa3d for a simple and base-supported mail setup with opensmtpd. What would people recommend for a simple

[OT] CCC 2013 Videos: X Security (It's worse than it looks)

2014-01-03 Thread Jiri B
Hi, As we (all) use X, I think following video would be interesting for you :) http://media.ccc.de/browse/congress/2013/30C3_-_5499_-_en_-_saal_1_-_201312291830_-_x_security_-_ilja_van_sprundel.html Big thanks to Ilja for making X better for everybody. jirib

Re: OpenBSD and Compute Engine

2013-12-04 Thread Jiri B
On Tue, Dec 03, 2013 at 01:44:45PM -0800, Matthew Dempsky wrote: On Tue, Dec 3, 2013 at 1:35 PM, Jiri B ji...@devio.us wrote: Aha, big brother grows up :-) I will try to test virtio-scsi on RHEVM which also exposes this to VMs. Cool, let me know if you run into any issues. I'm sure

Re: OpenBSD and Compute Engine

2013-12-04 Thread Jiri B
On Wed, Dec 04, 2013 at 09:33:18AM -0800, Matthew Dempsky wrote: On Wed, Dec 4, 2013 at 9:19 AM, Jiri B ji...@devio.us wrote: I have problem to compile it :/ Are you sure you applied the patch cleanly? I'd recommend running cd /usr/src/sys ftp https://codereview.appspot.com

Re: OpenBSD and Compute Engine

2013-12-03 Thread Jiri B
On Tue, Dec 03, 2013 at 12:12:09PM -0800, Matthew Dempsky wrote: Compute Engine now supports custom OSes [1], so I've been working on getting OpenBSD working on it. I thought I'd share a status update. [1]

Re: OpenBSD and Compute Engine

2013-12-03 Thread Jiri B
On Tue, Dec 03, 2013 at 04:45:28PM -0500, Bryan Horstmann-Allen wrote: I used OpenBSD on SmartOS a couple years ago. There was a bug in KVM that would kill the host, but that's been fixed for a while... I saw when a VM with virtio devices killed RHEL host too. Funny :) Baf, it was secured

Re: PXE boot RHEL 6.3 or OL 6.3 from OpenBSD 5.4

2013-12-01 Thread Jiri B
On Sun, Dec 01, 2013 at 10:20:55PM +1100, mufurcz wrote: Greetings, It is possible to PXE boot other OSs (like RHEL 6.3 and/or OL 6.3) with pxeboot. If so, can somebody point me to a valid PXE configuration. No because pxeboot is a modified version of the i386 second-stage bootstrap

Re: PXE boot RHEL 6.3 or OL 6.3 from OpenBSD 5.4

2013-12-01 Thread Jiri B
On Sun, Dec 01, 2013 at 11:49:08PM +1100, mufurcz wrote: Uhm, got it, I read the boot(8) man, however, I am curious, in the `Hitchhiker's Guide to OpenBSD` reads Can I boot other kinds of kernels using PXE other than bsd.rd? Yes, although with the tools currently in OpenBSD, PXE booting is

Re: mongodb

2013-11-26 Thread Jiri B
On Fri, Nov 22, 2013 at 04:20:39PM -0600, Amit Kulkarni wrote: On Fri, Nov 22, 2013 at 4:18 PM, Chris Smith obsd_m...@chrissmith.orgwrote: Mentioned previously: On Tue, Oct 22, 2013 at 12:29 PM, Stuart Henderson s...@spacehopper.org wrote: Note that the mongodb port is currently

Re: IPMI SOL serial console wedges

2013-11-24 Thread Jiri B
On Sun, Nov 24, 2013 at 12:40:31PM -0800, Paul B. Henson wrote: On Sun, Nov 24, 2013 at 09:54:41AM +0100, Sebastian Benoit wrote: in the bios, you can set the onboard serial ports irq to some higher value. that way, the ipmi console will become com0. (not tried on that board, only on

Re: QEMU CPU cores not showing up

2013-11-13 Thread Jiri B
On Wed, Nov 13, 2013 at 10:29:34PM +0100, Peter J. Philipp wrote: He took the advice from me on IRC. I had googled and found a similar mail from someone who could not see 2 cpu's but only 1, people told that person to disable apm, but granted the mails were a little dated. So I was giving

Re: VPN suggestions

2013-11-08 Thread Jiri B
On Fri, Nov 08, 2013 at 02:38:33PM +0200, Kapetanakis Giannis wrote: Hi, I would like to discuss some suggestions about VPN to multiple road warriors. So far we're using OpenVPN, but I want to change that or at maybe offer L2TP/IPsec in addition to OpenVPN. Playing around with npppd

Re: Blocking facebook.com: PF or squid?

2013-11-02 Thread Jiri B
On Fri, Nov 01, 2013 at 09:16:33PM +0100, Stefan Wollny wrote: In parallel I asked conformal for advice and got this answer: ### QUOTE ### Adsuck no longer works on OpenBSD when using DHCP due to the removal of the ability to overide the target /etc/resolv.conf. ### QUOTE END ###

Unattended installation - install.conf per server

2013-10-29 Thread Jiri B
Hi, how would we define specific install.conf for specific host? We could you rewrite rules based on client's IP but what based on other attributes (hwaddr...)? I was thinking if it would be possible to pass such values as HTTP headers values but our `ftp' seems to not allow us to define own

Full disk encryption and hibernate on amd64

2013-10-24 Thread Jiri B
Hi, after I read mlarkin@'s report on Undeadly.org[1] about hibernation, I've got curious question. How does it work with full disk encryption (FDE) which OpenBSD offers? [1] http://undeadly.org/cgi?action=articlesid=20131024092852mode=expandedcount=0 jirib

Re: sshd internal-sftp umask

2013-10-23 Thread Jiri B
On Wed, Oct 23, 2013 at 10:52:51AM +0300, Lars Noodén wrote: This is on OpenSSH_6.3 from current. If I interpret the man page for sftp-server(8) correctly, the option -u should set an explicit umask. What looks like is happening instead is that the umask is OR'ed with an established

Re: Best OpenBSD cloud hosting?

2013-10-21 Thread Jiri B
On Sun, Oct 20, 2013 at 03:04:37PM -0700, Bryan Vyhmeister wrote: On Sun, Oct 20, 2013 at 11:13:51PM +0200, Antoine Jacoutot wrote: I am often unable to properly shutdown OpenBSD VMs, disks hang. Using virtio or not does not change that. I did not look into it very deeply yet so ... But I

Re: Best OpenBSD cloud hosting?

2013-10-21 Thread Jiri B
On Mon, Oct 21, 2013 at 09:29:41PM +0200, Loïc BLOT wrote: Hi Antoine. I also have a hang problem when i use a cold stop on libvirt. No problem on VMWare ESX when i click on the shutdown button. On libvirt, when i click on this button the VM hang and then i need to kill the VM.

Mandatory files in /etc for single-user check for password

2013-10-20 Thread Jiri B
Hi, first of all my setup is very non-standard. I'm playing with OpenBSD to have it as much as possible on read-only filesystem. Everything (till now) works OK but I have problem with single-user mode. I can't make password authentication working. I have following setup: * all files from /etc

Re: Mandatory files in /etc for single-user check for password

2013-10-20 Thread Jiri B
On Sun, Oct 20, 2013 at 10:56:34PM +, Stuart Henderson wrote: On 2013-10-20, Jiri B ji...@devio.us wrote: Hi, first of all my setup is very non-standard. I'm playing with OpenBSD to have it as much as possible on read-only filesystem. Everything (till now) works OK but I have

Re: crypto softraid DUID's

2013-10-17 Thread Jiri B
i also noticed that bioctl -c C -l accepts DUID's, but bioctl -d does not. it this by design? I would love a fix for this... I would love to see possible to create new crypto softraid devices while passing passphrase via stdin or keyfile :) jirib

Re: dump(8) and permissions

2013-10-11 Thread Jiri B
On Fri, Oct 11, 2013 at 01:59:33PM +0100, Rodolfo Gouveia wrote: Hi all, I've been using dump for backup a bunch of systems and I've noticed that there are some areas it can't access: DUMP: Can't fts_read /var/audit: Permission denied DUMP: Can't fts_read /var/authpf: Permission denied

Re: dump(8) and permissions

2013-10-11 Thread Jiri B
On Fri, Oct 11, 2013 at 02:38:23PM +0100, Rodolfo Gouveia wrote: On Fri, Oct 11, 2013 at 09:04:16AM -0400, Jiri B wrote: Try `su' to your user on that system and try to `ls -lR' those dirs, I suppose he won't be able to do that. j. Thanks Jiri. Indeed he can't. I've looked

Re: dump(8) and permissions

2013-10-11 Thread Jiri B
On Fri, Oct 11, 2013 at 04:56:36PM +0100, Rodolfo Gouveia wrote: On Fri, Oct 11, 2013 at 04:56:35PM +0200, Remco wrote: Possibly, yes, but I don't think you're supplying all information necessary to determine that. The exact command you run isn't clear to me. Here it is, on the machine

Re: Best OpenBSD cloud hosting?

2013-10-09 Thread Jiri B
On Wed, Oct 09, 2013 at 01:16:54AM +, openda...@hushmail.com wrote: Hi, Can anyone recommend a decent OpenBSD cloud hosting provider? Digital Ocean looks nice but they don't yet offer OpenBSD

Re: New OSv with BSD license

2013-09-19 Thread Jiri B
On Thu, Sep 19, 2013 at 10:50:16AM -0700, latin...@vcn.bc.ca wrote: On Wed, September 18, 2013 6:28 pm, Kapetanakis Giannis wrote: I've just came on this: http://mailman.cs.huji.ac.il/pipermail/linux-il/2013-September/010649.html Just a short quote of it: Hi, today we've made the first

Re: OpenZFS announcement

2013-09-18 Thread Jiri B
On Wed, Sep 18, 2013 at 01:37:49AM -0500, patric conant wrote: http://www.open-zfs.org/wiki/Announcement It supposed to be open-er. I didn't find a license, thought it might be of mild interest. bitrig (OpenBSD fork) has ongoing work to intergrate hammer filesystem from DragonflyBSD. If they

Re: OpenBSD not forwarding SSL, strange.

2013-09-17 Thread Jiri B
On Tue, Sep 17, 2013 at 10:42:55PM +1000, John Tate wrote: I am having trouble accessing anything which uses SSL behind my NAT, though I can access the same services from the firewall itself. There is nothing unusual in /var/log/messages, dmesg, etc. I don't know why this is happening. The

Re: Ivy Bridge-EP Xeon (E5-2637v2) and Intel C602 Patsburg-A Chipset support

2013-09-17 Thread Jiri B
On Tue, Sep 17, 2013 at 02:35:48PM +0100, Andy wrote: On Tue 17 Sep 2013 13:48:45 BST, Stuart Henderson wrote: On 2013-09-16, Andy a...@brandwatch.com wrote: Planning to test Hennings new ALTQ subsystem diff on OpenBSD 5.4 with this hardware :D pardon the pedantry, but it's not altq..

Re: More detailed information about last commands executed than lastcomm

2013-09-16 Thread Jiri B
On Mon, Sep 16, 2013 at 11:38:18AM +0200, Wies�?aw Kielas wrote: Dear misc@, Is there any way to get information about last commands executed on a OpenBSD machine? I'm interested in getting the command name along with arguments passed to it. From what I gathered so far, lastcomm can't

Re: More detailed information about last commands executed than lastcomm

2013-09-16 Thread Jiri B
On Mon, Sep 16, 2013 at 01:33:33PM +0200, Bret Lambert wrote: On Mon, Sep 16, 2013 at 01:31:58PM +0200, Bret Lambert wrote: On Mon, Sep 16, 2013 at 07:28:21AM -0400, Jiri B wrote: Usual unix process accounting does not take care about commands' args. Anyway, you probably won't care about

OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Jiri B
Hi all, I don't understand very much technical details of this topic, neither I want to troll, but my curiousity is if OpenBSD devs follow Bruce Schneier arguments and whole topic and if they have done, do or will do some re-evaluation of crypto in OpenBSD to minimalize being vulnerable to

Re: openbsd 5.3 softraid and crypto at boot

2013-09-04 Thread Jiri B
On Wed, Sep 04, 2013 at 09:33:51AM +, Aviolat Romain wrote: Dear openbsd users, I wanted to test this new feature of openbsd 5.3 softraid(4) RAID1 and crypto volumes are now bootable on i386 and amd64 (full disk encryption) In fact I wanted to have both RAID and Crypto

Re: OpenBSD pxe automated install

2013-08-13 Thread Jiri B
On Mon, Aug 12, 2013 at 03:31:44PM -0400, Kenneth R Westerback wrote: On Mon, Aug 12, 2013 at 08:59:27PM +0200, Lo?c BLOT wrote: Hello @misc. Today i'm working on automated deploy with PXE. I have successful found and made automated PXE install on Debian with pxelinux. There is no

Re: OpenBSD pxe automated install

2013-08-13 Thread Jiri B
On Tue, Aug 13, 2013 at 02:38:36PM +0200, Peter Hessler wrote: On 2013 Aug 13 (Tue) at 14:27:40 +0200 (+0200), Marian Hettwer wrote: :Looks like it's time to do this. And maybe I can sync up with some :others in this thread and we could work together. I'm looking at the diffs originally from

<    1   2   3   4   5   6   >