upgrades no longer allow ftp for sets

2014-03-25 Thread NOC
Since the 23 March snapshot I've no longer been able to get the sets via ftp during upgrade, is this intentional or is this an error on my end? This worked on the snapshot form 19 March and earlier using the amd64-snapshot bsd.rd indirectly from ftp3.usa.openbsd.org (Local ftp mirror with rsync da

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread Shawn K. Quinn
On Tue, Mar 25, 2014, at 06:58 PM, n...@leviacomm.net wrote: > Since the 23 March snapshot I've no longer been able to get the sets via > ftp during upgrade, is this intentional or is this an error on my end? > This worked on the snapshot form 19 March and earlier using the > amd64-snapshot bsd.rd

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread Theo de Raadt
>Since the 23 March snapshot I've no longer been able to get the sets via >ftp during upgrade, is this intentional or is this an error on my end? >This worked on the snapshot form 19 March and earlier using the >amd64-snapshot bsd.rd indirectly from ftp3.usa.openbsd.org (Local ftp >mirror with rsy

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread NOC
Thanks and I understand the reasoning. The current ftp server won't be able to do http and use of siteXX files prevents using an external source. Will nfs be supported or am I going to need more hardware? Original Message Subject: Re: upgrades no longer allow ftp for

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread Shawn K. Quinn
On Tue, Mar 25, 2014, at 08:10 PM, n...@leviacomm.net wrote: > Thanks and I understand the reasoning. The current ftp server won't be > able to do http and use of siteXX files prevents using an external > source. Will nfs be supported or am I going to need more hardware? What is preventing you f

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread Theo de Raadt
> On Tue, Mar 25, 2014, at 08:10 PM, n...@leviacomm.net wrote: > > Thanks and I understand the reasoning. The current ftp server won't be > > able to do http and use of siteXX files prevents using an external > > source. Will nfs be supported or am I going to need more hardware? > > What is prev

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread Adriaan
On Wed, Mar 26, 2014 at 2:10 AM, wrote: > Thanks and I understand the reasoning. The current ftp server won't be > able to do http and use of siteXX files prevents using an external > source. Will nfs be supported or am I going to need more hardware? > For more than 7 years, I have been using

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread Theo de Raadt
> > Thanks and I understand the reasoning. The current ftp server won't be > > able to do http and use of siteXX files prevents using an external > > source. Will nfs be supported or am I going to need more hardware? > > > > For more than 7 years, I have been using installation file sets as well

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread NOC
be planning for that to go away too at some point. Original Message Subject: Re: upgrades no longer allow ftp for sets From: "Shawn K. Quinn" Date: Tue, March 25, 2014 6:38 pm To: misc@openbsd.org On Tue, Mar 25, 2014, at 08:10 PM, n...@leviacomm.net wrote: >

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread Theo de Raadt
- > Subject: Re: upgrades no longer allow ftp for sets > From: "Shawn K. Quinn" > Date: Tue, March 25, 2014 6:38 pm > To: misc@openbsd.org > > On Tue, Mar 25, 2014, at 08:10 PM, n...@leviacomm.net wrote: > > Thanks and I understand the reasoning. The curre

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread Ted Unangst
On Tue, Mar 25, 2014 at 18:10, n...@leviacomm.net wrote: > Thanks and I understand the reasoning. The current ftp server won't be > able to do http and use of siteXX files prevents using an external > source. Will nfs be supported or am I going to need more hardware? nfs is supported, though fin

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Peter Hessler
On 2014 Mar 25 (Tue) at 20:38:08 -0500 (-0500), Shawn K. Quinn wrote: :On Tue, Mar 25, 2014, at 08:10 PM, n...@leviacomm.net wrote: :> Thanks and I understand the reasoning. The current ftp server won't be :> able to do http and use of siteXX files prevents using an external :> source. Will nfs b

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Marc Espie
One other reason is that our ftp *client* is a pile of crud. Almost anyone who approaches it runs away screaming (or becomes berserk, grabs an axe, and starts cutting madly at the rest of the tree)

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Stuart Henderson
On 2014-03-26, wrote: > I am upgrading hundreds of boxes a day with only have serial access to > them. Installing from an external source would bring any server I use > to its knees (I end up using 4-5 Gbps of bandwidth during upgrades. Sounds like an excellent reason to setup a new infrastruct

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Giancarlo Razzolini
ages will still be able to grabbed over ftp, although I > suspect I should be planning for that to go away too at some point. > > > Original Message ---- > Subject: Re: upgrades no longer allow ftp for sets > From: "Shawn K. Quinn" > Date: Tue, March 25,

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Nick Holland
On 03/25/14 21:09, n...@leviacomm.net wrote: > Thanks and I understand the reasoning. The current ftp server won't be > able to do http and use of siteXX files prevents using an external > source. Will nfs be supported or am I going to need more hardware? I'm not understanding something here, an

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Craig R. Skinner
On 2014-03-25 Tue 18:34 PM |, Theo de Raadt wrote: > > The 5.5 release will support FTP releases, but after that we are > disabling FTP and thus pushing people to use HTTP installs. > > In this day and age, it is somewhat irresponsible for us to put > people into a situation where they might inst

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Ted Unangst
On Wed, Mar 26, 2014 at 10:41, Marc Espie wrote: > One other reason is that our ftp *client* is a pile of crud. > > Almost anyone who approaches it runs away screaming (or becomes berserk, > grabs an axe, and starts cutting madly at the rest of the tree) I have seen no evidence of this ever happ

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Kenneth Westerback
On 26 March 2014 13:46, Ted Unangst wrote: > On Wed, Mar 26, 2014 at 10:41, Marc Espie wrote: >> One other reason is that our ftp *client* is a pile of crud. >> >> Almost anyone who approaches it runs away screaming (or becomes berserk, >> grabs an axe, and starts cutting madly at the rest of the

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Stuart Henderson
On 2014-03-26, Giancarlo Razzolini wrote: > If your siteXX has > sensible information you can use ssl with authentication. The installer doesn't include openssl.

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Theo de Raadt
> On 2014-03-26, Giancarlo Razzolini wrote: > > If your siteXX has > > sensible information you can use ssl with authentication. > > The installer doesn't include openssl. Funny, Stuart. My processs is to always look at the size of a statically linked binary to make a guess as to whether it cou

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Giancarlo Razzolini
Em 26-03-2014 16:48, Stuart Henderson escreveu: > On 2014-03-26, Giancarlo Razzolini wrote: >> If your siteXX has >> sensible information you can use ssl with authentication. > The installer doesn't include openssl. > I forgot this. I'm so used to ssl webservers, that I forget that the bsd.rd kern

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Giancarlo Razzolini
Em 26-03-2014 16:59, Theo de Raadt escreveu: >> On 2014-03-26, Giancarlo Razzolini wrote: >>> If your siteXX has >>> sensible information you can use ssl with authentication. >> The installer doesn't include openssl. > Funny, Stuart. > > My processs is to always look at the size of a statically li

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Theo de Raadt
> Em 26-03-2014 16:59, Theo de Raadt escreveu: > >> On 2014-03-26, Giancarlo Razzolini wrote: > >>> If your siteXX has > >>> sensible information you can use ssl with authentication. > >> The installer doesn't include openssl. > > Funny, Stuart. > > > > My processs is to always look at the size of

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Giancarlo Razzolini
Em 26-03-2014 17:18, Theo de Raadt escreveu: >> >> Theo, >> >> I agree with you that the installer must be as small as possible, >> and still offer a good mix of ways to install the software. With >> signify, the security of the underlying security of the protocol being >> used in the installat

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread NOC
ssage Subject: Re: upgrades no longer allow ftp for sets From: Ted Unangst Date: Tue, March 25, 2014 9:11 pm To: n...@leviacomm.net Cc: misc@openbsd.org On Tue, Mar 25, 2014 at 18:10, n...@leviacomm.net wrote: > Thanks and I understand the reasoning. The current ftp server won't be > able to

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Giancarlo Razzolini
t hardware for the web server. Good luck. Cheers, > > Original Message -------- > Subject: Re: upgrades no longer allow ftp for sets > From: Ted Unangst > Date: Tue, March 25, 2014 9:11 pm > To: n...@leviacomm.net > Cc: misc@openbsd.org > > On Tue, Mar 25, 2014

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Theo de Raadt
> TdR> ... placing openssl there is not part of any solution that would work. > TdR> What are other possible solutions? > > Do you think sftp would fit? Can you replace ftp with sftp? > I'd prefer to maintain a limited access sftp server rather than a http > one. > Wow. No.

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Theo de Raadt
> On Thu, Mar 27, 2014 at 08:10:05AM -0600, Theo de Raadt wrote: > > > TdR> ... placing openssl there is not part of any solution that would > > > work. > > > TdR> What are other possible solutions? > > > > > > Do you think sftp would fit? Can you replace ftp with sftp? > > > I'd prefer to ma

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Boris Goldberg
Hello Theo, Wednesday, March 26, 2014, 3:18:59 PM, you wrote: TdR> ... placing openssl there is not part of any solution that would work. TdR> What are other possible solutions? Do you think sftp would fit? Can you replace ftp with sftp? I'd prefer to maintain a limited access sftp server ra

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Jiri B
On Thu, Mar 27, 2014 at 08:10:05AM -0600, Theo de Raadt wrote: > > TdR> ... placing openssl there is not part of any solution that would work. > > TdR> What are other possible solutions? > > > > Do you think sftp would fit? Can you replace ftp with sftp? > > I'd prefer to maintain a limited ac

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Shawn K. Quinn
On Thu, Mar 27, 2014, at 09:14 AM, Jiri B wrote: > On Thu, Mar 27, 2014 at 08:10:05AM -0600, Theo de Raadt wrote: > > > TdR> ... placing openssl there is not part of any solution that would > > > work. > > > TdR> What are other possible solutions? > > > > > > Do you think sftp would fit? Can yo

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Jiri B
> So I sent a long mail yesterday explaining this, and that's the best you > two can do? How do you even retain jobs?? Dramatic arts class on elementary school :D j.

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Giancarlo Razzolini
Em 27-03-2014 11:28, Shawn K. Quinn escreveu: > On Thu, Mar 27, 2014, at 09:14 AM, Jiri B wrote: >> On Thu, Mar 27, 2014 at 08:10:05AM -0600, Theo de Raadt wrote: TdR> ... placing openssl there is not part of any solution that would work. TdR> What are other possible solutions?

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Boris Goldberg
Hello misc, Thursday, March 27, 2014, 9:14:00 AM, Jiri wrote: JB> Could you please elaborate why not sftp for sets (and/or JB> for pkg_add)? I'll rephrase: can someone besides Theo elaborate? It was an obvious mistake to reply to his email (to be fair, I've addressed it to misc, not to him).

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Kenneth Westerback
On 27 March 2014 11:30, Boris Goldberg wrote: > Hello misc, > > Thursday, March 27, 2014, 9:14:00 AM, Jiri wrote: > > JB> Could you please elaborate why not sftp for sets (and/or > JB> for pkg_add)? > > I'll rephrase: can someone besides Theo elaborate? It was an obvious > mistake to reply to hi

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Theo de Raadt
> JB> Could you please elaborate why not sftp for sets (and/or > JB> for pkg_add)? > > I'll rephrase: can someone besides Theo elaborate? It was an obvious > mistake to reply to his email (to be fair, I've addressed it to misc, not > to him). > In his "long email" Theo was talking about openss

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Giancarlo Razzolini
Em 27-03-2014 12:43, Theo de Raadt escreveu: >> JB> Could you please elaborate why not sftp for sets (and/or >> JB> for pkg_add)? >> >> I'll rephrase: can someone besides Theo elaborate? It was an obvious >> mistake to reply to his email (to be fair, I've addressed it to misc, not >> to him). >>

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Diana Eichert
Geez, all you complainers and/or suggesters get over it. The OpenBSD project makes decisions, sometimes you like them, some times you don't. Get used to it. If you feel that strongly about it quit using OpenBSD or code something really good and efficient then present it. FWIW, Anyone who is

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Kevin Chadwick
previously on this list Kenneth Westerback contributed: > 1) It's not useful. > 2) It's too complicated. > 3) It's impossible to fit on the install media. 4) With the advent of signify and one of it's goals being efficiency it would be a solution that needlessly wastes resources of many types.

Re: upgrades no longer allow ftp for sets

2014-03-27 Thread Chris Smith
On Thu, Mar 27, 2014 at 1:37 PM, Diana Eichert wrote: > FWIW, Anyone who is responsible for border firewalls deplores FTP protocol. And its cousin, FTPS, which, although encrypted, has the same dual port problem yet not curable via a proxy. Chris

Re: upgrades no longer allow ftp for sets

2014-03-29 Thread Craig R. Skinner
On 2014-03-26 Wed 16:06 PM |, Craig R. Skinner wrote: > On 2014-03-25 Tue 18:34 PM |, Theo de Raadt wrote: > > > > The 5.5 release will support FTP releases, but after that we are > > disabling FTP and thus pushing people to use HTTP installs. > > > > In this day and age, it is somewhat irrespons

Re: upgrades no longer allow ftp for sets

2014-03-29 Thread Eric Oyen
geez! there are better technologies out here. SUre, if a technology works for 20 years, then go with it. However, there are loads faster ways (and a lot more secure too). Why not use bit torrent? Its fast, reliable and really only needs a half dozen seeds at various places across the net . THe p

Re: upgrades no longer allow ftp for sets

2014-03-29 Thread Craig R. Skinner
On 2014-03-29 Sat 02:10 AM |, Eric Oyen wrote: > > . > > > On 2014-03-26 Wed 16:06 PM |, Craig R. Skinner wrote: > > > > Eventually, will base ftpd be removed? > > *BASE*

Re: upgrades no longer allow ftp for sets

2014-03-29 Thread Andy Lemin
Couldn't agree more! :) Andy Sent from my iPhone > On 29 Mar 2014, at 09:10, Eric Oyen wrote: > > geez! there are better technologies out here. SUre, if a technology works for > 20 years, then go with it. However, there are loads faster ways (and a lot > more secure too). Why not use bit torr

Re: upgrades no longer allow ftp for sets

2014-03-29 Thread Theo de Raadt
> Eventually, will base ftpd be removed? Unlikely.

Re: upgrades no longer allow ftp for sets

2014-03-29 Thread Shawn K. Quinn
On Sat, Mar 29, 2014, at 09:44 AM, Theo de Raadt wrote: > > Eventually, will base ftpd be removed? > > Unlikely. Why not? You got rid of base telnetd a while back. -- Shawn K. Quinn skqu...@rushpost.com

Re: upgrades no longer allow ftp for sets

2014-03-29 Thread Theo de Raadt
> > > Eventually, will base ftpd be removed? > > > > Unlikely. > > Why not? You got rid of base telnetd a while back. Because telnet is a protocol that people chose to use, and actively could decide to move to the ssh server protocol. Whereas ftp is a protocol that is often used in scripts. So

Re: upgrades no longer allow ftp for sets

2014-03-29 Thread Ted Unangst
On Sat, Mar 29, 2014 at 08:47, Craig R. Skinner wrote: > > Eventually, will base ftpd be removed? The program (some might say pogrom) to delete old shit doesn't really need any more suggestions at this time. The situation is well in hand (some might say out of hand).

Re: upgrades no longer allow ftp for sets

2014-03-31 Thread Craig R. Skinner
On 2014-03-29 Sat 19:26 PM |, Ted Unangst wrote: > > > > Eventually, will base ftpd be removed? > > The program (some might say pogrom) to delete old shit doesn't really > need any more suggestions at this time. I'm happily using it & was wondering if I should plan to stop doing so.