Re: What software to debugging and analyzing C?

2024-05-14 Thread Chris Bennett
On Tue, May 14, 2024 at 05:19:43AM -0300, Crystal Kolipe wrote:
> On Sun, May 12, 2024 at 10:26:55PM +0200, Tomasz Rola wrote:
> > I am sure gdb has some merits but for whatever C programs I wrote so
> > far, a much more useful debugging technique was putting printf in
> > right places and isolate the problem, and after that doing some mental
> > work to actually understand why this seemingly correct line does
> > something so wrong.
> 
> Exactly.  What you describe is likely the best method to fully understand the
> code, what it's supposed to do and what it actually does, and by extension
> avoid making the same coding mistakes in the future.  Finding and fixing a
> single error with gdb doesn't have the same educational benefit, nor in
> many cases such a guarantee that other nearby bugs have also been noticed.
> 
> > Besides, all debuggers introduce their own perturbation and thus
> > certain classes of error will be very hard to catch with them, if
> > ever.
> 
> But you do realise that adding printf() calls to the code can also change,
> for example, the memory layout that the compiler uses, so certain memory
> allocation bugs might become more or less easily triggerable?

Yes, I do realize that printf has that flaw.
I also program some in Perl. print, warn, die, etc. can sometimes help,
but often they don't. Carefully studying or just trying to rewrite a
section of code from scratch is the only solution. Many years ago I
wrote a trivial Perl script wrong. It very slowly grabbed more and more
memory until it crashed the server about every two days. After very
carefully watching, I figured out it was my script and I fixed a rather
silly bug. I'll never forget that experience.

-- 
Regards,
Chris Bennett

"Who controls the past controls the future. Who controls the present controls 
the past."
 George Orwell - 1984



Re: What software to debugging and analyzing C?

2024-05-13 Thread Chris Bennett
On Mon, May 13, 2024 at 08:24:38AM +0200, Janne Johansson wrote:
> pkg_add llvm and run "scan-build" on your code, then you get a quite
> thorough analysis on what potential error code paths it detects, with
> fancy webpages to go along with the explanations for each found issue:
> 
> http://c66.it.su.se:8080/obsd/scan-build-2019-10-10-202112-79522-1/report-3f2f00.html#EndPath
> 
> It's not 100% perfect of course, but it still is a neat way to point
> out where in the code you may need to make an extra effort to cover
> corner cases.
> 
> > I also wouldn't mind any other useful tips that might not be software.
> > Any help very appreciated.
> 
> Perhaps this fuzzing guide helps a bit getting programs to run better?
> https://undeadly.org/cgi?action=article=20150121093259

Thank you and to the others replying.
-- 
Regards,
Chris Bennett

"Who controls the past controls the future. Who controls the present controls 
the past."
 George Orwell - 1984



What software to debugging and analyzing C?

2024-05-12 Thread Chris Bennett
I found a YouTube channel LowLevelLearning that covers various
programming languages in a manner that I find particularly helpful and
clear. For example comparing C and assembly on the same code is superb.

In a short, he recommended valgrind to help finding memory leaks.
Other than splint and gdb, what other software is useful for working
with C?
I also wouldn't mind any other useful tips that might not be software.
Any help very appreciated.
-- 
Regards,
Chris Bennett

"Who controls the past controls the future. Who controls the present controls 
the past."
 George Orwell - 1984



Re: https://twitter.com/openbsd

2024-05-12 Thread Chris Bennett
On Sun, May 12, 2024 at 09:53:00AM +, Rubén Llorente wrote:
> 
> I think it is worth mentioning I know of a number of small operations that
> have announced their complete withdrawal from social media - Twitter,
> Facebook, Instagram, the Fediverse - because the benefit they get from
> social media presence is not worth the labor time required to sustain social
> media presence.
> 
> That said, when those operations ceased social media activity, they took
> care of making it widely known among their audience rather than just let
> their social media accounts rot...
> 

I saw a news bit yesterday that in one town, all of the school children
are buying old fashioned typewriters to break their link to computers
and do things the old fashioned way. +1 to them.
I prefer real text on paper myself. I learn things much better that way.
-- 
Regards,
Chris Bennett

"Who controls the past controls the future. Who controls the present controls 
the past."
 George Orwell - 1984



Re: Favorite configuration and system replication tools?

2024-05-12 Thread Chris Bennett
On Sun, May 12, 2024 at 01:40:25PM +0200, Walter Alejandro Iglesias wrote:
> > Unix development. Given that i've been using computers for a few 
> > decades, i still instinctively don't use spaces in filenames, even 
> > though they're very much allowed. But of course, that's not what 
> > most of the world does, and this is an example of trying to work 
> > out what the best tradeoffs might be when dealing with the 
> > messiness of the real world.
> 
> I overlooked this in my example because I *never* use spaces, UTF-8 or
> any special characters to name my file names.  Lately, I finally
> persuaded my wife to use Linux, after decades of having to use Windows.
> Even when I educated her in this matter she has clients who send her
> files named with any kind of crap, so taking care of this issue is still
> convenient.
> 

I download a lot of files with a hideous mess of characters. I wrote a
small script to substitute in acceptable characters. I can enter a
regex, select to just use a directory or go down recursively. Also I can
select to only change filenames or directories or both.
After reading this thread I see I need to update the script.
-- 
Regards,
Chris Bennett

"Who controls the past controls the future. Who controls the present controls 
the past."
 George Orwell - 1984



Re: Desktop performance

2024-05-04 Thread Chris Bennett
On Sat, May 04, 2024 at 06:19:54PM +0200, Peter N. M. Hansteen wrote:
> Hm. Back in the day I did some conference tutorials on "transition to the most
> recent OpenBSD release", with some desktop/laptop oriented tweaks I had found
> useful myself. Some of those tweaks may still apply, but some are likely to
> be outdated or just plain wrong to start with. But perhaps an updated version
> would be useful to somebody?
> 

I wouldn't mind that. I adjusted some stuff a long time ago for some
specific need, but it was so long ago that I can't remember why.
I was really new to OpenBSD (4.7 or 4.9, I can't remember which.

I have two servers, both need extra PostgreSQL connections because of a
few pages, for example. Not relevant, but just mentioning it.

I have a desktop at home. That's where I have some really old changes. I
will go read some man pages, but that isn't always helpful for specific
uses. I also have a mailbox where I keep posts that I don't want to lose
track of with good info.

My luck with web searches is about zero. Even swapping to different
search engines just gives me crap that's too old or ridiculously wrong.
But if there isn't anyone with the time or desire to do it, no
problem.

-- 
Regards,
Chris Bennett

"Who controls the past controls the future. Who controls the present controls 
the past."
 George Orwell - 1984



Re: No coloring with colorls

2024-03-26 Thread Chris Bennett
On Mon, Mar 25, 2024 at 11:40:52PM +0100, Karel Lucas wrote:
> Hi all,
> 
> LSCOLORS=exfxcxdxbxegedabagacad
> 

I just use TERM=xterm
If you use a black background (or some other dark colors), you will want
to change LSCOLORS to not use a dark blue. I find that color combo
unreadable. I just use alias ls='colorls -Gla'. You can either have other
aliases or just type colorls with the same arguments as ls to get other
options.

-- 
Regards,
Chris Bennett

"Who controls the past controls the future.
Who controls the present controls the past."
 George Orwell - 1984



Re: USB peripherals hang, nothing in messages

2024-03-15 Thread Chris Bennett
On Fri, Mar 15, 2024 at 01:40:56PM +0100, Dan via misc wrote:
> 
> Interesting..
> 
> Laurence Tratt via misc :
> 
> > This sounds to me like it might be due to USB stack performance problems,
> > though you'll at least want to give `dmesg` output so that those who better
> > understand this have a chance of helping.
> >
> > FWIW, there seem to be notable differences in USB performance on nominally
> > similar hardware with OpenBSD.
> 
> Do you suggest to phisically (hub) separate peripherals from
> eg. storage devices for who is working in this kind of fashion?
> 
> -Dan
> 

I used a powered USB hub on a laptop that somehow solved a bunch of
connectivity problems to the laptop's USB3 port.
I needed a powered hub to run both the wifi dongle and a spinning USB
hard drive. No idea why it worked, but it did.

-- 
Regards,
Chris Bennett

"Who controls the past controls the future. Who controls the present controls 
the past."
 George Orwell - 1984



Re: disk not found after first reboot

2024-01-18 Thread Chris Bennett
On Fri, Jan 19, 2024 at 12:38:03AM +, Isak Lyberth wrote:
> Hello guys, I am sorry to bother you with such a basic question.
> After many years of only using my favorite OS on my firewall, I have
> decided to install OpenBSD 7.4 on my Dell Latitude 7490 laptop, fitted with
> a 500 GB Samsung 980 (non pro) nvme disk i use the entire disk with auto
> partitioning).
> it had Windows on it when iÍ got it, I removed it and used Linux Mint for
> about a week and now i have installed OpenBSD 7.4. i have tried it a lot of

Did you read the FAQ carefully?
Did you read the message in the directory about installing?
When you say that you installed it, how?
Which OS did you install? i386 or amd64? Usually amd64 is the correct
answer.

What does disk not found mean? What did you see during the failed boot
process? ERR M?
Are you trying to multi-boot with another OS too?
Have you tried installing to a USB drive? This will, if successful, make
you able to submit a dmesg. That's very helpful.
You do not need to use a regular hard drive of any kind to get it up and
running.

Why are you using dd?


> times, clearing the disk with the dd if=/dev/zero of=/dev/sd0 command and
> also dd'd to sd0a, rsd0 and anything i could think of, i also tried exiting
> to shell and done some fdisk -iy sd0 (suggested on reddit)

Following advice from the general Internet is rarely useful. Usually out
of date or just plain wrong.

-- 
Regards,
Chris Bennett

"Who controls the past controls the future. Who controls the present controls 
the past."
 George Orwell - 1984



Re: my first patch

2023-11-04 Thread Chris Bennett
On Wed, Oct 25, 2023 at 10:10:32AM +0600, Maria Morisot wrote:
> 
> > that you're using correct lengths though, it is possible to get things
> > wrong and break programs.
> 
> I was careful to look at the buffer lengths being written and to match them 
> in strlcpy and snprintf. I peeked at the source for instances of strcpy and 
> found a lot in xenocara; less in the main source tree.
> 
> I'm willing to change these but I need to know how to submit the altered 
> files and since it's my first time contributing, I'd love if someone could 
> double check a bit of my work.
> 

I think that the explanation of what you are doing and trying to
accomplish was a little bit unclear from the responses you got.

Upstream means sending your work "up" to the programmers elsewhere who
are creating and developing the program.

This can allow, if they want to and it doesn't cause problems with other
OS's, your changes to be incorporated into the software. This doesn't
have anything to do with OpenBSD, except that it will make porting the
program into being usable with OpenBSD different. (See ports on the
website and the po...@openbsd.org mailing list).

So, there is a big difference between changing the original program to
work better with OpenBSD or porting it in.
Porting in a program means adapting it, possibly with patches that make
the changes *only* for OpenBSD.

So, Libreoffice isn't an OpenBSD program. Certain patches or changes
shouldn't be done locally unless upstream refuses your change.
Then, that program will be ported in officially, just marked as broken
or dropped as a program for OpenBSD.

A really good and simple example is an error in a man page. That sort of
change should always be sent upstream first. If they refuse to accept
that change, then patch it here.

If some flags for our compiler are different, then that is a local
adaptation *for OpenBSD*. Do that here and don't bother upstream unless
you have questions.

Updating programs that are ported in can sometimes be quite difficult
when the version changes. That is what Stuart meant about having a
nightmare when changing the local copy for us in the way you are doing
it.

Also, even if everything you have done is 100% perfect, don't be
disappointed if your work isn't accepted. Just learn from it and start a
new project. OpenBSD has extremely picky and overworked developers.
Which is probably why I sleep well at night knowing I have an excellent
and secure OS. They do amazingly good work!

So even if your first ten tries at different things fail, by the time of
your eleventh, you will probably be getting it right by then.

Enjoy!
-- 
Chris Bennett



Re: sed and tab

2023-08-22 Thread Chris Bennett
On Tue, Aug 22, 2023 at 04:03:57PM +0300, kasak wrote:
> > 
> Oh, thanks! I didn't know about that ctrl+v tab feature!
> 

Just so you know, ctrl+ other stuff also works.
I'll let you experiment and discover those.

-- 
Chris Bennett



Re: Mouse not working via KVM switch

2023-08-18 Thread Chris Bennett
On Fri, Aug 18, 2023 at 07:58:03PM +0200, Karel Lucas wrote:
> 
> Dear Nick,
> 
> For more than ten years I have been working with an ATEN brand KVM switch
> together with several computers, including linux and openBSD (version 4.1).
> In all these years I have had no problems, not with my KVM switch, nor with
> any degree of disconnection. The keyboard works flawlessly via the switch,
> it's only the mouse that I have a problem with, and only with openBSD.
> 

This is not very clear at all. 
You have used the same KVM switch for ten years, but haven't considered
it having hardware degradation over that time? Capacitors are well known
for having limited lifetimes and are *usually* the first item looked at
in repairs. Switches also fail due to dirty contacts.

Or, are you saying that everything worked fine for OpenBSD 4.1, but not
for OpenBSD 7.3? The changes over that time have been enormous.

> Op 17-08-2023 om 13:56 schreef Nick Holland:
> > 
> > First of all, does your mouse work directly plugged into the OpenBSD
> > computer?
> Yes, it does.
> > If so, it's your KVM switch.
> As I mentioned above I have been working with my KVM switch and openBSD for
> over ten years with very good results.
> 
> > Second...if you boot the OpenBSD machine with the KVM pointed at the
> > OpenBSD machine, does it work?

> No, even then it won't work.

Have you swapped ports on the KVM switch to rule out a partial hardware
failure on the switch?
Have you also disconnected the other hardware and OS inputs to rule out
them as the source of the problem?
Have you checked that the other machines are producing the correct
supply voltages? Power supply failures are a consistent problem with
computers. High or low voltages don't mix well.
Have you checked with your switch manufacturer to make sure there wasn't
a problem with your switches model? It happens a lot.

After ten years of service, if you insist that the switch isn't the
problem, (Prove it) then you need to also prove that the other hardware
is functioning properly. Do not believe what the BIOS or sensors say
that the voltage is. A bad voltage will cause those readings to fail.
Get a good voltmeter with excellent probes for this kind of work and
check *everything*.
Please use a great deal of care. You will need to measure voltages on
the motherboards in addition to what the power supply puts out.
Everything is running and you will need to check in many spots.
Also, there are high voltages inside the power supply. Don't get
electrocuted. Drain the voltages off the capacitors in there with a
suitable tool for that purpose if you go inside there. Yes, even with
the power off and power cable disconnected.

And it's tricky. I have a power supply cable for two hard drives. Two
connectors crimped across the same cable. One of the crimps is bad.
Recognizing that saved me a trip to hell after about an hour. Easy to
fix, damned hard to locate.

Chris Bennett


> > You
> > might be able to improve how OpenBSD deals with KVM switched mice,
> > because yes, it does seem to be a little more touchy than some other
> > OSs, but someone with good programming and HW trouble shooting
> > skills AND a cheap-*** POS KVM switch would have to care.  Most people
> > that skilled generally just buy a better KVM switch and move on.
> That more than ten years of loyal service proves that my KVM is of good
> quality.
> > What does the dmesg show as you switch the KVM around?  That would tell
> > us how the KVM works.  Some are equiv. of plugging and unplugging the
> > mouse/keyboard/monitor, some do some kind of "keep alive" so the
> > computer thinks the mouse is still there.  Both can cause problems of
> > different types (my "good" one seems to plug/unplug the mouse/keyboard,
> > but has a great keep-alive for the monitor).
> What I've learned about my KVM switch over the past ten years is that both
> the mouse and keyboard are emulated when they are switched to another
> computer. Never have I had any problems with my computers when switching
> with my KVM switch.
> 
> 
> 



Re: I would like help matching my outgoing domains to the right IP for smtpd

2023-08-16 Thread Chris Bennett
On Wed, Aug 16, 2023 at 10:21:34AM +0200, Bruno Flückiger wrote:
> How about something like this?
> 
> match from mail-from regex "@example.net" action send_example_net
> match from mail-from regex "@example.com" action send_example_com
> 
> Cheers,
> Bruno
> 

Thank you very much.
I just had to add for any and it works perfectly.

My dad and I ate some bad food at a restaurant, so this is a happy
moment.

-- 
Chris Bennett



Re: My /usr cleaning campaign..

2023-08-15 Thread Chris Bennett
On Tue, Aug 15, 2023 at 01:19:06PM +0200, Daniele B. wrote:
> Thanks for the help,
> 
> Unfortuately I have no clean system nor knowledge about these files..
> Do you mind to point me out almost the direction how to fix things correctly?
> 

Read these manpages:

ls
ln

I strongly suggest that you take this a bit further and learn how to
pull out the information in a better way.

Possibilities include sh scripts, awk, grep, sed, perl, uniq, sort and
maybe other methods.

You *need* to be able to use these tools at a basic level in order to
get anything done in a reasonably efficient way.

Learn the versions in the base system!
There are different versions also available in ports. Sometimes they are
preferable if you already know why. Otherwise, don't use them.
mawk, gawk, gmake, etc.

You will find very, very few OpenBSD users who prefer GUI versions of
tools.

It is called the *command* line because it is yours to issue clean and
powerful *commands* with.

Feel free to panic, scream, run in circles and collapse with exhaustion.
It's a good way to relieve stress. ;-}

-- 
Chris Bennett



Re: [cpb_m...@bennettconstruction.us: I would like help matching my outgoing domains to the right IP for smtpd]

2023-08-12 Thread Chris Bennett
It's the weekend. I will see if anyone has any advice later.

I will spend my time looking at perhaps solving the problem with a
filter and using tcpdump and the debug features of smtpd to follow what
I come up with.

-- 
Chris Bennett



Re: Feedback on redesigned OpenBSD.org

2023-08-12 Thread Chris Bennett
On Sat, Aug 12, 2023 at 06:23:07PM +0200, Wolfgang Pfeiffer wrote:
> 
> On Fri, Aug 11, 2023 at 10:38:46PM -0400, Amelia A Lewis wrote:
> > On Fri, 11 Aug 2023 20:11:02 -0600, Theo de Raadt wrote:
> > > When did it become an assumption that we would adopt any of these
> > > changes?
> > 
> > I don't think that it did become an assumption, but as a number of
> > people have responded to the initial design, to the point that the
> > designer offered a revision, I thought I might add to the discussion. I
> > apologize if it was out place to do so.
> 
> The debate - since three days now - strongly suggests, that at least
> some of those contributing to the debate were assuming that a change
> of the looks of openbsd.org might be accepted. Otherwise: what sense
> would it make to debate it here?
> 
> The point tho seems: there were at least two threads over the last 11
> years on that topic:
> 
> 2012:
> "OpenBSD's webpage desing"
> https://marc.info/?l=openbsd-misc=2=4=desing+webpage=b
> 
> 2016:
> "Suggestion: new webpage for openbsd.org"
> https://marc.info/?t=14634695033=2=2
> 
> Result:
> Just compare the archived version of the site from 2011 to the
> present one:
> https://web.archive.org/web/20111223000626/http://www.openbsd.org/
> 
> So to make sure my effort is making sense: what I most certainly would
> have done before working on a redesign of the current page would have
> been to ask its maintainers, whether they wanted the change. And if
> yes: what sort of change. Because obviously it's, well: their page.
> Not mine. Plus: they probably have specific needs that I don't know
> about for the coding of it, to make it compatible with the frequent
> changes of it: updates, announcement of patches etc. - Meaning: Before
> doing any attempt to rewrite the code, I would have asked the
> current maintainers about the constraints for a change.
> 
> Theo de Raadt about a rewrite of openbsd.org in 2016:
> 
> --
> https://marc.info/?l=openbsd-misc=146378604413389=2
> 
> "We rarely do whole-scale replacements of anything in OpenBSD, unless
> there is compelling reason the old should be discarded.  I have
> probably received 500+ proposals for website rewrites, a handful with
> the effort already expended.  This is another offer which will be
> rejected.  It is kind of sad.
> 
> I think the site is fine. [ ... ]  I agree there would be value in
> small tweaks to improve the view for narrow displays.
> 
> This is a project that does rapid incremental changes.  This entire
> concept of throw-it-away, you-want-the-new-warts; I don't get where
> it comes from."
> 
> --
> 
> Nice weekend, everyone!
> 

>From what I am reading in this thread, nobody seems to agree about what
they really want. I think that that is a pretty good sign that a
consensus is not going to happen.

openbsd.org is on CVS.
OpenBSD comes with a built-in httpd.
As long as it's not publicly available, anyone can run a copy and insert
whatever CSS meets their needs.
The current website version can be updated from CVS.
Just change the stylesheet link to whatever your favorite styling looks
like and you are good.
If you don't know how to write CSS, learn it. What doesn't require
learning something new to use or contribute to OpenBSD? Nothing.

That is my opinion. I definitely do not get a vote, especially since I
have never even submitted a diff for the website.

Unless I am using my phone, I give it a 50% chance that I will be using
a text browser to view the site. I use lynx 100% to look at the packages
and installation files. It just works.

-- 
Chris Bennett



Re: Feedback on redesigned OpenBSD.org

2023-08-12 Thread Chris Bennett
On Sat, Aug 12, 2023 at 07:21:24PM +0900, Pontus Stenetorp wrote:
> On Sat 12 Aug 2023, Stuart Henderson wrote:
> >
> > To me, it looks just "different" rather than particularly better
> > (except on mobile browsers, where I find the redesigned one a bit worse
> > by having the links hidden away down the bottom. Scrolling to read the
> > text on mobile browsers with the existing version is a bit of a
> > nuisance, but so is scrolling to access the links in this rework).
> > 
> > And "different" is a bit of a problem, there are at least 7 associated
> > websites which intentionally have the same basic design, which now
> > no longer match up.
> > 
> > (I found v1 a lot worse than the existing one, mostly due to overriding
> > browser default font/colour choices and disabling underlining for links).
> 
> As someone using the current website both on desktop and phone, the
> only thing that has ever sprung to mind as a possible improvement would
> be to constrain the line length, as I often have to tighten the window a
> bit (interestingly, a good line length tends to be around 80
> characters [1] and where have we heard that number before?). On
> man.openbsd.org there is a fixed line length, just that it is a tiny
> bit too wide for reading comfort.
> 

I have always found that 72 characters is a bit better than 80.
In CSS, that would be 72ch. Versus 80ch.

I often adjust the width of the window my browser is in to control that
width, assuming the website doesn't fight me and force horizontal
scrolling. I have key bindings on fvwm2/3 to do that.

But definitely add the viewport to the head. Nothing bad can happen with
that and FWIW, it bumps up OpenBSD in many searching algorithms
(assuming that that is desirable).

-- 
Chris Bennett



Re: I would like help matching my outgoing domains to the right IP for smtpd

2023-08-11 Thread Chris Bennett
On Sat, Aug 12, 2023 at 03:49:12AM +, Philipp Buehler wrote:
> Am 12.08.2023 03:13 schrieb Chris Bennett:
> > I can't figure out how to match the outgoing mails to the correct IP/mx
> > they are coming from. Just one server, different A records for the mx
> > versus domain name.
> 
> Difficult to understand what you're trying there...
> I kinda understand that you have multiple IP-addresses on that smtpd
> machine and need to send from a "correct" one?
> If so, check back that 'action' with a relay delivery has a 'src' option.
> 
> HTH,
> -- 
> pb
> 
action "benn_to_outbound" relay src 108.181.26.184 helo 
mx.bennettconstruction.us

If this is correct, it works fine.
However, right now, I am forcing a match with

match from local for anyaction "benn_to_outbound"

I haven't been able to think of a way to match each individual one.

-- 
Chris Bennett



Re: I would like help matching my outgoing domains to the right IP for smtpd

2023-08-11 Thread Chris Bennett
On Sat, Aug 12, 2023 at 03:49:12AM +, Philipp Buehler wrote:
> Am 12.08.2023 03:13 schrieb Chris Bennett:
> > I can't figure out how to match the outgoing mails to the correct IP/mx
> > they are coming from. Just one server, different A records for the mx
> > versus domain name.
> 
> Difficult to understand what you're trying there...
> I kinda understand that you have multiple IP-addresses on that smtpd
> machine and need to send from a "correct" one?
> If so, check back that 'action' with a relay delivery has a 'src' option.
> 
> HTH,
> -- 
> pb
> 

I have one server with multiple IP addresses.
For example, bennettconstruction.us at one IP, with A record
mx.bennettconstruction.us at the same machine, different IP with it's
own A record.

Plus, several other website and mail domains on the same server.
In each case, each has it's own A record and IP, one for a domain name,
the other for it's mail domain.

bennettconstruction.us 1.2.3.4
mx.bennettconstruction.us 1.2.3.5
moron.org 1.2.3.6
mail.moron.org 1.2.3.7
wisecracker.com 1.2.3.8
mx.wisecracker.com 1.2.3.9

I'm trying to get the proper mail server to match the sent From: domain.

Also, with this switch changing the hostname, root now comes through
bennettconstruction.us instead of the other one that was the hostname
before. The change in hostname was planned.

In case it's relevant, I always use ssh and neomutt to the server for
reading and sending.
I only use K9 on my phone to read or click a link.

Thank you for putting up with my hard to understand posts. It's not
deliberate, but a lifelong problem.

-- 
Chris Bennett





I would like help matching my outgoing domains to the right IP for smtpd

2023-08-11 Thread Chris Bennett
Hello,
as I was updating to the new IP ranges, I changed ~all to -all
(My old IP's were crap filled with spam, so I just didn't send mails to
the big guys.)

I tried sending to gmail.com and got smacked that the spf was referring
to an unexpected address on the server.
I found that I was getting "random" choices from the tables I had setup.

Reading the manpage carefully, I saw that this was the correct
behaviour.

If the headers in this email are correct, then I have the right action.

I can't figure out how to match the outgoing mails to the correct IP/mx
they are coming from. Just one server, different A records for the mx
versus domain name.
Right now, I'm just forcing all local to this action.
After several hours trying different options and testing sending to my
other server, I'm coming up blank.
Except that I now understand much more from the manpages that confused
me previously.
I've been reading a lot of other manpages lately, too.
Time well spent.

Any advice would be nice.

-- 
Chris Bennett



[cpb_m...@bennettconstruction.us: I would like help matching my outgoing domains to the right IP for smtpd]

2023-08-11 Thread Chris Bennett
- Forwarded message from Chris Bennett  
-

To: misc@openbsd.org
From: Chris Bennett 
Subject: I would like help matching my outgoing domains to the right IP for
 smtpd
Date: Fri, 11 Aug 2023 18:13:59 -0700

Hello,
as I was updating to the new IP ranges, I changed ~all to -all
(My old IP's were crap filled with spam, so I just didn't send mails to
the big guys.)

I tried sending to gmail.com and got smacked that the spf was referring
to an unexpected address on the server.
I found that I was getting "random" choices from the tables I had setup.

Reading the manpage carefully, I saw that this was the correct
behaviour.

If the headers in this email are correct, then I have the right action.

I can't figure out how to match the outgoing mails to the correct IP/mx
they are coming from. Just one server, different A records for the mx
versus domain name.
Right now, I'm just forcing all local to this action.
After several hours trying different options and testing sending to my
other server, I'm coming up blank.
Except that I now understand much more from the manpages that confused
me previously.
I've been reading a lot of other manpages lately, too.
Time well spent.

Any advice would be nice.

-- 
Chris Bennett


- End forwarded message -

-- 



Re: Feedback on redesigned OpenBSD.org

2023-08-09 Thread Chris Bennett
I haven't even looked at these changes, yet.

But I have a terrible time reading text on mobile devices.
There doesn't seem to be any way (that I know of), to change text size
without either using the phones settings for text size (Yuck) or
changing the default size or accessibility settings in the browser.

I always grab a tablet for sites that really screw up text sizing.
My phone is just too small for sites with tiny text or huge text.

That's just my opinion and experience with bad eyesight.

--
Chris Bennett



Re: Two problems

2023-08-06 Thread Chris Bennett
On Fri, Aug 04, 2023 at 04:12:49PM +0200, Karel Lucas wrote:
> 
> Hi all,
> 
> On a desktop PC on which I have openBSD, I installed KDE. When I start the
> X-window system, I still see Fvwm, and no KDE. I also want to start the X
> window system when I start this PC, and that is not yet the case. How can I
> solve both problems?
> 
> 

As some others have already commented, there are significant security
issues with a big desktop like KDE or Gnome.

FVWM in base is setup just enough to let you have an X gui.
It is highly customizable to almost whatever you can come up with.

FVWM2 is available in ports. It is no longer being developed. It has
configuration like the built-in version. Many use it.

FVWM3 is under active development and has a very similar configuration,
but some notable changes.

I use FVWM3 (or 2 from ports if I want to since I already am happy with
the configuration I came up with.)

If you want to use FVWM and you don't know how to configure it, consider
using FVWM3. There is an active forum which provides lots of help.
It also has a default configuration that works nicely, but I personally don't
like it. It has a menu that will pull up most programs you have
installed from KDE, Gnome and others like GIMP, etc.

Spectrwm is also nice, small and easy to configure.

There are tons of window managers, feel free to try out many until you
find what you need and like.

I originally came to OpenBSD from Windows, so I used KDE3 a long time
ago. Easy switch. But I wouldn't use something like it ever again.

xenodm is a good choice. The login screen can be easily customized and
you can add functions like shutdown, reboot and a choice of different
window managers to start.

-- 
Chris Bennett



Re: Mouse does not work

2023-08-05 Thread Chris Bennett
On Fri, Aug 04, 2023 at 05:33:48PM +0200, Karel Lucas wrote:
> dmesg:
> ...
> uhub5 at uhub0 port 1 configuration 1 interface 0 "NEC hub" rev 2.00/1.00
> addr 2
> uhidev0 at uhub5 port 1 configuration 1 interface 0 "Logitech HID compliant
> keyboard" rev 1.10/1.80 addr 3
> uhidev0: iclass 3/1
> ukbd0 at uhidev0: 8 variable keys, 6 key codes
> wskbd0 at ukbd0: console keyboard
> uhidev1 at uhub5 port 1 configuration 1 interface 1 "Logitech HID compliant
> keyboard" rev 1.10/1.80 addr 3
> uhidev1: iclass 3/0, 2 report ids
> ...
> uhub6 at uhub5 port 4 configuration 1 interface 0 "ATEN International
> product 0x8021" rev 1.10/1.00 addr 4
> uhidev2 at uhub6 port 1 configuration 1 interface 0 "Logitech USB Receiver"
> rev 2.00/12.11 addr 5
> uhidev2: iclass 3/1
> ukbd1 at uhidev2: 8 variable keys, 6 key codes
> wskbd2 at ukbd1 mux 1
> uhidev3 at uhub6 port 1 configuration 1 interface 1 "Logitech USB Receiver"
> rev 2.00/12.11 addr 5
> uhidev3: iclass 3/1, 8 report ids
> ums0 at uhidev3 reportid 2: 16 buttons, Z and W dir
> wsmouse0 at ums0 mux 0
> ...
> 
  ^
This is not a dmesg.

People are helping you. People want to help you. People are busy.
People might stop wanting to help you. Don't let that happen.

Please do the following, without delay.
Read the entire FAQ page on the website.

man afterboot
man intro. It also suggests additional intro pages.
If you don't know how to access those or otherwise need to `man man`
Read all of those.
Look through all of the default installed directories `man hier`
See which ones you know, which ones you don't 

Every entry on the dmesg refers to a driver (remove the number at the
end) run man on each of those too. Don't worry if you don't understand
everything right now.

Search for existing answers at marc.info. It has many mailing lists for
many OS's. It is traditional to refer to existing previous mailing-list
posts using that URL for that message from marc.info

Etc.

When you get a response here: RTFM
It means you have not done your homework first.

If you don't like reading plain text for manual pages, you can convert
those to many different outputs. HTML, pdf, etc. I leave that for you to
discover how either through the manual pages or from searching the
mailing lists.

Subscribe to all of the mailing lists ports@, misc@, tech@.
Read tech@. Do not post there until you understand what it is for.

Personality and mood come through strong here.
Sometimes dogs ignore you, bark happily at you, bark menacingly 
at you, slobber all over you or bite you with the whole pack.

These mailing lists reflect real life and real people.
IMHO, I think that that is a good thing.

OK I just woke up. Coffee will help greatly.
Then I myself have many manpages to read and cogitate.
Enjoy.

-- 
Chris Bennett



Re: Installing openBSD

2023-07-31 Thread Chris Bennett
On Mon, Jul 31, 2023 at 04:08:49PM +0200, Karel Lucas wrote:
> 
> Hi,
> 
> Multi-boot is not an option here. The intention is to replace the entire
> PfSense installation with openBSD. Eventually this computer becomes a
> firewall with PF, so the current installation is unnecessary. But my
> question remains whether I need the (U)EFI partition for that or not. Can
> anyone give me some helpful advice?
> 

Also, give some serious thought about the partition sizes AND order that
you create them.

The order matters if you ever suspect that you will need to make a
partition bigger. Read the growfs man page. You can only make a
partition bigger by sacrificing the immediate partition after it.

So if you have /home then /usr/local and you need /home bigger. Bad
ordering of the partitions.
But if you have /home followed by /usr/kittens and you can get rid of having
/usr/kittens as a partition (but back it up!) and just add it to the /usr
directory afterwards 

Also, don't create "useless" partitions. If you will never use /usr/src
as a separate partition, don't put it in it's own partition. Developers
or people wanting to play around with source code like having it.
Please read the entire FAQ page.

growfs can only make a partition bigger ( and you keep existing files as
a bonus ). There isn't a tool to make them smaller and keep data on it.

Also, the partitions that are normally created has a big effect on
security.
nodev, nosuid, wxallowed are important.

Most important is to not get freaked out. Just do it and see what
happens. Screwing up is half the fun! Cleaning up isn't fun, but a good
way to learn. ;-}

-- 
Chris Bennett



Re: Installing openBSD

2023-07-30 Thread Chris Bennett
On Sun, Jul 30, 2023 at 07:30:27PM +0200, Karel Lucas wrote:
> 
> Hi all,
> 
> I'm going to install openBSD on a small PC that currently has PfSense on it.
> This PC boots this OS via (U)EFI, and therefore has an EFI partition on the
> existing SSD. The current partition table looks like, as shown by openBSD
> fdisk:
> 
>  0: efiboot0
>  1: gptboot0
>  2: swap0
>  3: zfs0.
> 
> Should I keep the (U)EFI partition? And if so, how do I mount the future
> openBSD root partition to this (U)EFI installation? Are there any other
> things I should watch out for? I look forward to receiving responses from
> this community. Sincerely, Karel.
> 

If you can afford a 2nd hard drive, that makes life very easy. Just have
a partition that is MSDOS if you need exchange files between all OS's

If you can't install a 2nd hard drive, OpenBSD runs fantastic on USB
sticks. (Assuming that the BIOS allows it.)

Plus, you can put it in your pocket and boot other computers somewhere
else. 
Plus, you can get USB SSD or spinning hard drives.

However, if you are doing disk intensive work, USB is slow.

-- 
Chris Bennett



Re: I need help to see if I can reboot new network OK. Wild misadventures with non-OpenBSD support and bad IPMI

2023-07-29 Thread Chris Bennett
On Sat, Jul 29, 2023 at 07:41:18PM +, Philipp Buehler wrote:
> Am 29.07.2023 21:29 schrieb Chris Bennett:
> > The other IP's are randomly missing or give this:
> > 
> > link#2 UHLc   0  450 - 3 em1
> > 

Hi,
I'm happy. I practiced on the other server until I was sure, then I
changed the first server over to the new way. I got one link#2 on the
last IP, so I aliased that one in too and rebooted. Everything is great.

What does link#2 mean in a more literal sense?

Tomorrow all I have to do is new DNS records and swap the IP addresses
for the other server.
Tell them to switch me over to the new IP's and I'm done.

I have no idea what the network problem was, but I leave my desktop on
24/7.
It crashed for the first time ever. Most likely it was the problem.

Thank you for the education. I fully approve of getting little pieces at
a time. Change this. Doesn't work. Study it carefully. Post again. More
problems. Then more help.
I have always liked OpenBSD's policy of not giving information to just
copy/paste.

Now I need to go make a donation.
Have a great day.

-- 
Chris



Re: I need help to see if I can reboot new network OK. Wild misadventures with non-OpenBSD support and bad IPMI

2023-07-29 Thread Chris Bennett
On Sat, Jul 29, 2023 at 07:41:18PM +, Philipp Buehler wrote:
> Oh, you need an alias for each IP that should be bound on em1
> so, like:
> # cat /etc/hostname.em1
> inet 103.103.103.170/29
> inet alias 103.103.103.171/32
> inet alias 103.103.103.172/32
> inet alias 103.103.103.173/32
> inet alias 103.103.103.174/32
> 

This seemed to work.
The network is very strange for me.
Not sure if my hotspot is bad or if they are having network problems at
the company. New network, new problems?

I will get back later if this is a real problem or not.

I was reading route manpage. Next is netstart script and manpage.

Thanks. I really appreciate it.

Chris Bennett

> 
> mygate and netstart has a manpage, as there is 'hostname.if' to read :)
> 
> PS: pointless to use '-x'; just a lot of debug noise
> 
> -- 
> pb
> 

-- 



Re: I need help to see if I can reboot new network OK. Wild misadventures with non-OpenBSD support and bad IPMI

2023-07-29 Thread Chris Bennett
On Sat, Jul 29, 2023 at 06:18:40PM +, Philipp Buehler wrote:
> Am 29.07.2023 20:04 schrieb Chris Bennett:
> > inet 103.103.103.168/29
> 
> That's wrong, you put the "first" IP-address you want to
> use/have on em1. So that would be 170/29
> 

Well, that half-worked. 
Always get ...170, works.
ssh works. autossh with -M no longer works except with autossh -M 0
...169 is the gateway. ...175 is broadcast.

The other IP's are randomly missing or give this:

link#2 UHLc   0  450 - 3 em1

Each route flush;sh -x /etc/nestart   or a reboot changes the result.

I just tried mygate at ...174. No good.

> (168 is this network's BSD-broadcast or "net address")
> 
> 
> > /etc/mygate is
> > 103.103.103.169
> Cannot forsee what your ISP provides as the gateway, but
> likely that's correct.
> 

Feel free to offer me a good man page to start with. Coffee is working.

-- 
Chris Bennett



Re: I need help to see if I can reboot new network OK. Wild misadventures with non-OpenBSD support and bad IPMI

2023-07-29 Thread Chris Bennett
On Sat, Jul 29, 2023 at 04:34:17AM +, Philipp Buehler wrote:
> 
> To save mindboggling counting of 'f' or similar, just write this to
> /etc/hostname.em1
> inet 108.181.26.178/28
> The ifconfig called from netstart will figure it out ;-) That's a headups
> for everybody, so cc misc@.
> 

Hmm, I also have a newer server with the same company that does have a
usable IPMI. I also have to change IP's with it too.
It is running -current from a few weeks ago, so this is a fictional
address except for the last three digits (168)

103.103.103.168/29

Right now, I have my first IP I'm using at 103.103.103.170

I put into /etc/hostname.em1:

inet 103.103.103.168/29

/etc/mygate is
103.103.103.169

/etc/myname is
network-moron.com

I did not change /etc/hosts which just has the addresses from
103.103.103.170 to 103.103.103.175 added.

I rebooted, but couldn't ping the server at any address.

In IPMI, there were no network problems on the boot screen, but apache2
failed to start.

ifconfig gave 103.103.103.168 as the IP address
route -n show gave 103.103.103.168 as the gateway.

For the heck of it, I changed /etc/mygate to 103.103.103.168,
just to see if that provided any useful information.
Same failed outcome, as I expected.

.later

I tried every obvious variation I could think of.
Nothing works except what I used on the other server.

A couple of years ago I tried to do what you suggested with a script to
swap back in the old hostname and reboot. I couldn't ever get it to work
Since what I had worked (not what I really wanted to use with the
aliases), I just blew it off.

I took a good while with my brain in sludge mode last night to change
some essential passwords and shut off imap, etc.
I still lacking enough sleep. Having coffee, going to eat and probably
go back to bed. I just wanted to try this out while I could.
I wanted to post about this and then RTFM's later with a clear head.

I did not change or remove what's in /etc/hostname which is at
103.103.103.170. Does that matter?


-- 
Chris Bennett



Re: I need help to see if I can reboot new network OK. Wild misadventures with non-OpenBSD support and bad IPMI 11 Perhaps they just don't have a proper setup or are not using it.

2023-07-29 Thread Chris Bennett
On Sat, Jul 29, 2023 at 04:34:17AM +, Philipp Buehler wrote:
> Moin Chris,
> 
> Am 29.07.2023 04:17 schrieb Chris Bennett:
> > The network is 108.181.26.176/28.
> > 
> > Right now,the first IP is 108.181.26.178 and the last regular address is
> > 108.181.26.190, which might be wrong. I'm too tired to read any more
> > man pages or web pages. I needed more than 2hrs of sleep.
> > I'm super worn out, so forgive my mistakes.
> > 
> > Any help appreciated. I don't want the next syspatch reboot to fail.
> 
> To save mindboggling counting of 'f' or similar, just write this to
> /etc/hostname.em1
> inet 108.181.26.178/28
> The ifconfig called from netstart will figure it out ;-) That's a headups
> for everybody, so cc misc@.
> 

Yes, there was a big delay when he put in one f too few.

Besides changing IP ranges, they also just started pushing a single IP
address that serves as everything, but also a different checkbox for the
same thing for Linux only.
I know essentially nothing about Linux besides the fact that I quickly
tried several, but I didn't like them. I then ran into something
mentioning OpenBSD. After reading the website, I saw that OpenBSD was
and has been an excellent choice. No regrets.
I already know from experience that if I asked them for any details
about that networking change, I would NOT get a useful answer.

After I got to multiple days, my goal had to be getting able to ssh in
and start fixing things.
Security through obscurity does not work. So I think it is well worth it
to show and get help. I am so tired right now, that my Dad had a problem
with sound using YouTube on a Firestick. I couldn't tell him even the
simplest step, so I just had him reboot it.

I'm going to kill everything that has outside access, get a good night's
sleep and then change every password for inside stuff and all emails.
Then I'm going to carefully read every man page, etc. until I understand
everything fully. Now is the right time for this. Until recently, I only
had a laptop stuck at 6.6 and a lousy phone hotspot or an even crappier
access to almost useless wifi in places like libraries. Two used
computers and a really great phone hotspot make everything good now.

Thank you very much.

> The current ifconfig em1 shows a bit wild setup for 108.181.26.179; but that
> 
> is likely unintended and the wrong mask/bc will be gone with the above
> setting.
> 
> The route output shows several hosts in 108.136/108.137 ranges where there
> is no corresponding setup given.
> 
> But to reach the system via 108.181.26.178 again, this looks sound.
> 
> HTH,
> -- 
> pb
> 
> PS:
> tyo# cat /etc/hostname.vlan1
> vlandev vio0
> inet 108.181.26.178/28
> tyo# sh /etc/netstart vlan1
> tyo# ifconfig vlan1
> vlan1: flags=8843 mtu 1500
>   lladdr fe:e1:bb:6e:63:36
>   index 7 priority 0 llprio 3
>   encap: vnetid none parent vio0 txprio packet rxprio outer
>   groups: vlan
>   media: Ethernet autoselect
>   status: active
>   inet 108.181.26.178 netmask 0xfff0 broadcast 108.181.26.191
> PPS: to check quickly on reachability of a gateway directly:
> ping -I 108.181.26.178 -t 1 108.181.26.177
> and check arp table accordingly

I will try this right now and save this email in the mailbox for
important things to keep long term.

-- 
Chris Bennett



Re: I need help to see if I can reboot new network OK. Wild misadventures with non-OpenBSD support and bad IPMI

2023-07-28 Thread Chris Bennett
On Sat, Jul 29, 2023 at 03:45:36AM +, All wrote:
> Your network has first usable IP address 108.181.26.177, not
> 108.181.26.178. Also, your broadcast address is 108.181.26.191 and not
> 108.181.26.190
> 

Yes, I had things setup with 108.181.26.177 as the first IP, but they
changed it. It was extremely frustrating to watch someone making changes
that I did not request. They also don't seem to have the capability to
read the support messages I sent them while actually making incorrect
changes.
Perhaps they just don't have a proper setup or are not using it.
I could see what they were doing by refreshing the IPMI preview screen.
But that really is just a poor set of images. It did let me see the
contents of files if I refreshed the image at just the right moment.
Getting them to type sh -x /etc/netstart or reboot despite giving them
detailed instructions beforehand. It took about 1 1/2hrs to get someone
to finally type sh /etc/netstart after doing all of the above.

But I have never worked in that field, so I really don't know what goes
on in their server farms.
There was another issue that I did not know how to deal with. I will
mention that in replying to another in this thread.

-- 
Chris Bennett



I need help to see if I can reboot new network OK. Wild misadventures with non-OpenBSD support and bad IPMI

2023-07-28 Thread Chris Bennett
Hi.

My server company either was bought by another company or just hooked up
new IP ranges.
I have a super cheap server with 13 IP addresses. This only has ancient
Java KVM which I can't hook up to, but I can use the console preview
only as single refreshable images.

So I had to coach them along. I had to really rush due to the cutoff
date. I made a few mistakes, inet isn't spelled ine, etc.
A power screwup, my fault. Watching someone trying to use ed was
amusing. I had to get /home commented out since it needed manual fsck.

It was a long day and all night and morning today.

Everything is apparently working fine, but a little different than my
previous setup.
I would like some help to know if this setup will work after a reboot.
I really don't want to ask for more help from support.

The network is 108.181.26.176/28.

Right now,the first IP is 108.181.26.178 and the last regular address is
108.181.26.190, which might be wrong. I'm too tired to read any more
man pages or web pages. I needed more than 2hrs of sleep.
I'm super worn out, so forgive my mistakes.

Any help appreciated. I don't want the next syspatch reboot to fail.

Chris Bennett


cat /etc/hostname.em1

inet 108.181.26.178 0xfff0 108.181.26.190
inet alias 108.181.26.179 255.255.255.255
inet alias 108.181.26.180 255.255.255.255
inet alias 108.181.26.181 255.255.255.255
inet alias 108.181.26.182 255.255.255.255
inet alias 108.181.26.183 255.255.255.255
inet alias 108.181.26.184 255.255.255.255
inet alias 108.181.26.185 255.255.255.255
inet alias 108.181.26.186 255.255.255.255
inet alias 108.181.26.187 255.255.255.255
inet alias 108.181.26.188 255.255.255.255
inet alias 108.181.26.189 255.255.255.255
#inet alias 108.181.26.190 255.255.255.255

cat /etc/hosts

127.0.0.1   localhost
::1 localhost

#108.181.26.177   gateway
108.181.26.178bennettconstruction.us
108.181.26.179strengthcouragewisdom.rocks
108.181.26.180mail.strengthcouragewisdom.rocks
108.181.26.181freedomforlife.rocks
108.181.26.182mx.freedomforlife.rocks
108.181.26.183bsd-sec.dev
108.181.26.184mx.bennettconstruction.us
108.181.26.185bsd-sec.com
108.181.26.186mail.bsd-sec.com
108.181.26.187cowboyup.xyz
108.181.26.188mail.cowboyup.xyz
108.181.26.189capuchado.com
108.181.26.190# Using for development, unassigned

cat /etc/myname

bennettconstruction.us

cat /etc/mygate

108.181.26.177
route -n show
Routing tables

Internet:
DestinationGatewayFlags   Refs  Use   Mtu  Prio Iface
default108.181.26.177 UGS   1125504 - 8 em1  
108/8  108.181.26.179 UCn   110 - 4 em1  
108.136.59.3   00:1f:6d:eb:60:00  UHLc   04 - 3 em1  
108.136.125.13700:1f:6d:eb:60:00  UHLc   02 - 3 em1  
108.136.179.19100:1f:6d:eb:60:00  UHLc   09 - 3 em1  
108.136.182.16100:1f:6d:eb:60:00  UHLc   09 - 3 em1  
108.136.235.20600:1f:6d:eb:60:00  UHLc   08 - 3 em1  
108.136.238.23200:1f:6d:eb:60:00  UHLc   0   10 - 3 em1  
108.136.248.92 00:1f:6d:eb:60:00  UHLc   09 - 3 em1  
108.137.2.300:1f:6d:eb:60:00  UHLc   03 - 3 em1  
108.137.73.28  00:1f:6d:eb:60:00  UHLc   0   15 - 3 em1  
108.137.74.160 00:1f:6d:eb:60:00  UHLc   04 - 3 em1  
108.137.155.20900:1f:6d:eb:60:00  UHLc   03 - 3 em1  
108.181.26.176/28  108.181.26.178 UCn12 - 4 em1  
108.181.26.177 00:1f:6d:eb:60:00  UHLch  1   44 - 3 em1  
108.181.26.178 00:25:90:6c:43:43  UHLl   0 4741 - 1 em1  
108.181.26.179 00:25:90:6c:43:43  UHLl   0 3443 - 1 em1  
108.181.26.180 00:25:90:6c:43:43  UHLl   0 4510 - 1 em1  
108.181.26.180/32  108.181.26.180 UCn00 - 4 em1  
108.181.26.181 00:25:90:6c:43:43  UHLl   0 3004 - 1 em1  
108.181.26.181/32  108.181.26.181 UCn00 - 4 em1  
108.181.26.182 00:25:90:6c:43:43  UHLl   0 4192 - 1 em1  
108.181.26.182/32  108.181.26.182 UCn00 - 4 em1  
108.181.26.183 00:25:90:6c:43:43  UHLl   0 4767 - 1 em1  
108.181.26.183/32  108.181.26.183 UCn00 - 4 em1  
108.181.26.184 00:25:90:6c:43:43  UHLl   0 8119 - 1 em1  
108.181.26.184/32  108.181.26.184 UCn00 - 4 em1  
108.181.26.185 00:25:90:6c:43:43  UHLl   0 4902 - 1 em1  
108.181.26.185/32  108.181.26.185 UCn00 - 4 em1  
108.181.26.186 00:25:90:6c:43:43  UHLl   0 3049 - 1 em1  
108.181.26.186/32  108.181.26.186 UCn00 - 4 em1  
108.181.26.187 00:25:90:6c:43:43  UHLl

Re: Audio issue: noise/interference

2023-07-07 Thread Chris Bennett
On Fri, Jul 07, 2023 at 06:23:26PM -0400, Ricky Cintron wrote:
> I recently resolved an audio issue where I could hear a constant, light
> static noise in my earphones. It wasn't loud or distracting, but it was
> always there. The solution was to remove 'mix' as a source for mix2 and
> mix3.
> 

I wouldn't call this resolved. This is just a useful step in
troubleshooting. You now have more information towards a resolution.
That's a good thing, but not enough.
"My toaster shocks me every time I touch the metal case. I resolved it by
not touching the metal part of the toaster."

> However, once I got rid of that static, I noticed some additional noise
> that was apparently hidden behind the original static. Compared to the
> first issue, this noise is quieter and not constant.

Don't assume that there are actually two issues here. It may all have
one cause or be two (or more) different problems.


> Anyway, it
> manifests itself in the following ways:
> 
> 1) Very light static noise that never increases, but I've noticed that
> when I load a web page (YouTube, for example), the noise is silenced
> until the page finishes loading. This also sometimes happens when I
> move the mouse cursor around the web browser window, but very briefly.
> It's easier to notice when loading a page since it lasts longer.
> 
> 2) Moving the mouse generates a barely audible buzzing sound, but this
> either doesn't occur or is barely noticeable when moving the cursor on
> a web browser window.
> 
> To troubleshoot, I inspected all the cables in the back of the
> computer (power, DP, ethernet, USB keyboard, USB mouse, speakers/line),
> and unplugged them (except the power cable) one at a time. I didn't
> hear a difference, good or bad. I also turned some mixerctl knobs with
> no noticeable effects.
> 

Did you troubleshoot your earphones? It is very reasonable that they
could now have bad wires or other problems. Do you still hear these
noises with other earphones or speakers?

> Does anyone have any ideas? This isn't a big deal since I can't notice
> it while listening to audio, and it's pretty easy to tune out even
> without audio, but I'd still like to remove it if possible. I'm
> considering buying a USB audio interface, so if that even works, that
> could be a solution.
>

I advise finding out what the problem is before buying anything new. You
might find the same problem getting passed through another audio device.
I suspect that you will need to fix a hardware problem.
Don't assume that audio noise is in software.
You are surrounded by 50/60Hz noise caused by the power in your
house/office/workshop.

Electrolytic capacitors can go bad (Even brand new capacitors can be
defective). Look up bad motherboard capacitors and you can find some
pretty good pictures and information. You can find some good YouTube
videos on it too.

I would also suspect grounding problems as a possibility.
Which can mean bad connections with cables even if they look good.
You can be having a power supply problem too.
Check for loose motherboard screws.

Are you using the computer with the cover off?
Do you get these noises with the computer on, but then turning off the
monitor and moving the mouse around?

Is your electrical wiring done properly? Do you have any other equipment
hooked up that might be causing ground loops? Excellent videos on
YouTube about ground loops and audio problems. Do you have any OLD radio
or TV equipment that could be latching onto the computer noise and
amplifying it?

Also, if you can, go unplug (not turn off) things around that could be
defective. For example, I have to throw away 3-4 USB chargers every
year. Nowadays, hardly anything is actually turned off anymore.

I used to hear noises like these too, but that was a long time ago...
I could hear them in my memory while reading your email.

Good luck,
Chris Bennett


> $ dmesg
> OpenBSD 7.3-current (GENERIC.MP) #1269: Sun Jul  2 12:21:03 MDT 2023
> dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> real mem = 16934760448 (16150MB)
> avail mem = 16401862656 (15642MB)
> random: good seed from bootblocks
> mpath0 at root
> scsibus0 at mpath0: 256 targets
> mainbus0 at root
> bios0 at mainbus0: SMBIOS rev. 3.1 @ 0xe (99 entries)
> bios0: vendor Dell Inc. version "1.20.0" date 12/15/2022
> bios0: Dell Inc. OptiPlex 5070
> efi0 at bios0: UEFI 2.7
> efi0: American Megatrends rev 0x5000d
> acpi0 at bios0: ACPI 6.1
> acpi0: sleep states S0 S3 S4 S5
> acpi0: tables DSDT FACP APIC FPDT FIDT MCFG SSDT BOOT SSDT SSDT HPET SSDT
> SSDT UEFI LPIT SSDT SSDT DBGP DBG2 MSDM SLIC DMAR SSDT VFCT BGRT TPM2 ASF!
> WSMT
> acpi0: wakeup devices PEG1(S4) PEGP(S4) PEG2(S4) PEGP(S4) RP01(S4) PXSX(S4)
> RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4) PXSX(S4) RP05(S4) PXSX(S4)
> RP06(S4) PXSX(

Re: Intel DRM error on T 440

2023-07-07 Thread Chris Bennett
I am also getting this (or a similar) error on a different computer.
Please note that this might be a longer story. I'll put some details
before the dmesg.

drm:pid96852:intel_dp_aux_wait_done *ERROR* [drm] *ERROR* AUX C/DDI C/PHY C: 
did not complete or timeout within 10ms (status 0xa023003f)

I don't know quite what to make of the overall story with this box.
It cannot boot even to the BIOS or anything at all on the screen unless
the DP is converted to a working HDMI port at the monitor.
I truly mean nothing at all shows up. DP directly to DP fails. Not
below. Then it works fine.

Right now, I am booting into HDMI. When it gets to the xenodm screen, I
have xenodm kill that DP->HDMI connection and switch over to the other DP
port on the computer and into a DP port on my 4k monitor instead.
I have to manually change to that port from my monitor. Annoying, but it
works 97% of the time.

I briefly used Windows 10 that came with the computer to verify a few
things. The display port does carry sound. Not on OpenBSD.
Back to just OpenBSD use.
The beep speaker carries real audio. I cannot find a way to turn
this off other than just using the headphone jack to grab the audio.
However, the actual beep by itself sticks around no matter what.

At some point I would like to add a video card that will let me run
programs like chrome or iridium. Any recommendations? I am clueless how
to figure out that question.

Thanks for any help. Sorry if I missed making anything clear. Just ask
for any clarifications.

-- 
Chris Bennett

OpenBSD 7.3 (GENERIC.MP) #1125: Sat Mar 25 10:36:29 MDT 2023
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 34179473408 (32596MB)
avail mem = 33124184064 (31589MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec410 (93 entries)
bios0: vendor Dell Inc. version "A23" date 06/25/2018
bios0: Dell Inc. OptiPlex 9020
efi0 at bios0: UEFI 2.3.1
efi0: American Megatrends rev 0x4028d
acpi0 at bios0: ACPI 5.0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC FPDT SLIC LPIT SSDT SSDT SSDT HPET SSDT MCFG SSDT 
ASF! MSDM DMAR
acpi0: wakeup devices UAR1(S3) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) 
PXSX(S4) PXSX(S4) PXSX(S4) PXSX(S4) PXSX(S4) GLAN(S4) EHC1(S3) EHC2(S3) 
XHC_(S4) HDEF(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz, 3791.34 MHz, 06-3c-03
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,SRBDS_CTRL,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu0: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB 64b/line 
8-way L2 cache, 8MB 64b/line 16-way L3 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz, 3791.45 MHz, 06-3c-03
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,SRBDS_CTRL,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu1: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB 64b/line 
8-way L2 cache, 8MB 64b/line 16-way L3 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz, 3791.49 MHz, 06-3c-03
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,SRBDS_CTRL,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu2: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB 64b/line 
8-way L2 cache, 8MB 64b/line 16-way L3 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz, 3791.54 MHz, 06-3c-03
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS

Re: OpenBSD Hackathons

2023-05-13 Thread Chris Bennett
On Fri, May 12, 2023 at 08:18:45PM +, Katherine Mcmillan wrote:
> Hi all,
> 
> Thank you for the helpful responses, this definitely explains some things!
> 
> I'm looking at organizing an OpenBSD Hackathon in the National Capital Region 
> in Canada (could potentially be on the Gatineau, Quebec side) but having 
> never been to an OpenBSD Hackathon, my interpretation might be quite 
> different from the other Hackathons! That's fine, and I'm going to seek 
> inspiration from attending a FreeBSD Hackathon, as that project makes their 
> upcoming Hackathons public:  https://wiki.freebsd.org/Hackathon/202305
> 
> Thank you very much for the help and please feel free to contact me privately 
> if you're interested in attending (either as a volunteer or developer) or 
> otherwise supporting an OpenBSD Hackathon in the National Capital Region in 
> Canada.
> 
> Sincerely,
> Katie
> 

Hi Katie,

I hope that your Hackathon works out.

OpenBSD uses C, sh and Perl in base.
That is three different skill sets.

I would recommend that you ask the developers what sort of projects they
would like to see get done at a hackathon.

Then you could post here and elsewhere about those possibilities and see
who would like to do which ones.

Also, I wouldn't judge the "success" based on what get finished, but
more so on if the hackers learn thoroughly about the code worked on.

I see plenty of emails mentioning how the work started on during a
hackathon was later completed and then submitted.

Have fun!

-- 
Chris Bennett



Using fvwm2 or fvwm3 and another using gnome. Need advice on best setup. startx/xenodm/gdm both users wheel

2023-01-26 Thread Chris Bennett
Hi,
I have finally been able to get a decent desktop and a new 4k monitor.

I use fvwm2 right now (probably fvwm3 soon).
Another new user will be using gnome.
Both of us are in wheel group.

First, do I need to use xenodm with either fvwm? Or will startx do the
trick?

Second, it sounds like using gdm is best with gnome.

So I was thinking that the gnome user could login and type:
doas rcctl -f start gdm

Then login again.

-

fvwm user could either do the same to start xenodm or would startx be
better?


Lastly, is there any way to automate that upon login? Or just make
aliases?

-- 
Thanks,
Chris Bennett



Re: Mutt smtp configuration

2022-09-19 Thread Chris Bennett
I am assuming that mutt can use a debug file like neomutt.
That can be very helpful.

-- 
Chris Bennett



Re: A minimal browser in base

2022-09-12 Thread Chris Bennett
I would instead recommend a new package with the critical newbie
information included in text form.
FAQ, anoncvs and ftp addresses, etc.

The first afterboot man page could suggest something like
pkg_add newuser_docs.

If you need or want it, just install it.

Sure, I install Lynx to look at the packages list to see what's new.
But honestly, who is really going to take the time to audit the code
before using it? What are you really going to be getting given all of
the DNS attacks and other risks (some new, never before seen threat
could appear at any time).
I really don't feel that recommending a browser from outside to a first
time user is appropriate. That really does require a lot of effort
better spent elsewhere.

My 2 cents.

-- 
Chris Bennett



Re: necessity to specify CVSROOT each time cvs is run?

2022-07-28 Thread Chris Bennett
On Thu, Jul 28, 2022 at 08:13:46AM -, Stuart Henderson wrote:
> Either use -d, or set CVSROOT, or replace CVS/Root files with ones
> containing the path to the repo (cvschroot from the cvsutils package
> makes this easy). If your original checkout had been done via anoncvs
> you wouldn't have needed to do this. (Also ports.tar.gz misses some
> files - run "cvs up -Pd" across the whole tree to fetch them).
> 

I already use a script to do cvs for ports.
Right now, it downloads a copy of ports.tar.gz for "just in case cvs
checkout fails".

Which method would be preferable for the other end (the cvs server)?

ports.tar.gz then cvs up
or
cvs checkout

Either method is fine for me, but which method would be preferable?
I don't get ports.tar.gz from the same server as cvs.

Does a checkout put less load on the cvs server than running a
comparison with cvs up? Or is the increased data with checkout more
important to eliminate?

-- 
Thanks,
Chris Bennett



Re: Keyboard input problems after disk corruption in crashes. Both in console and xterm.

2022-01-20 Thread Chris Bennett
On January 20, 2022 4:10:28 PM PST, Stuart Henderson 
 wrote:
>On 2022-01-20, lumidify  wrote:
>> On Thu, Jan 20, 2022 at 10:45:27AM -0800, Chris Bennett wrote:
>>> I had several accidental crashes which left lost+found in home folder.
>>> up arrow fails in terminals and left arrow erases to the left instead of
>>> moving.
>>
>> Exactly this behavior happens in vi mode ('set -o vi' in ~/.profile
>> or ~/.kshrc),
>
>or by setting EDITOR=vi thanks to an annoying ksh feature.
>
>>   but that seems somewhat unrealistic since I have no idea
>> how it could be caused by the crashes.
>
>some config file could have been corrupted.
>
>

OMG! I was fiddling with some dotfiles suggested in a git repository for a 
bunch of things. Some were really good.
I left exactly that by accident when I was experimenting.

Thanks! Saved from disaster.

Chris



Keyboard input problems after disk corruption in crashes. Both in console and xterm.

2022-01-20 Thread Chris Bennett
I had several accidental crashes which left lost+found in home folder.
up arrow fails in terminals and left arrow erases to the left instead of
moving.

I have an older version of the home folder that does not have the
problem.

Since it is both inside and outside of X, what files should I consider?

I am using 6.6 amd64 and FVWM2 from ports.
I can't update past 6.6.

Any help really appreciated!

-- 
Thanks,
Chris Bennett



Re: Error on xenocara.tar.gz extraction

2022-01-13 Thread Chris Bennett
On Thu, Jan 13, 2022 at 06:40:17PM -, Stuart Henderson wrote:
> 
> I recommend you use cvs to fetch the ports tree.
> 
> ports.tar.gz does not quite contain all the files because
> some have names which are too long for the format used
> by tar(1).
> 

I have always used dump/restore to duplicate file systems because of
that problem with tar.

But if ports.tar.gz is incomplete, why is it available under
snapshots?

Does using it followed by cvs up fix the problem?
If so, I will modify the program I use for updating to a -current ports
tree.

I don't use src or xenocara anymore, but if I remember correctly (I
might not), I was told that cvs up didn't always bring in a good tree
with an existing tree. That was a long time ago.

Is there a reason that tar isn't changed to deal with the name length
problem?
I can guess some possible reasons, but I have no idea if they are true.

--
Chris Bennett




Re: Problems with a fresh install not finding SSD drive over floppy img HTML5/KVM

2021-12-01 Thread Chris Bennett
On Tue, Nov 30, 2021 at 11:11:03PM -0700, Theo de Raadt wrote:
> I am dissapointed to see "long answers" to "short spurious claims".
> 
> Nick, your long mail didn't help anything.
> 
> Chris, your report sucks.  Use sendbug and file a bug report with no
> details missing.  Not one user has reported a drive missing on a ahci
> controller before you, and suddenly you say (paraphasing) "oh i hear this
> is very common!"). The intentionally vague way you approach this looks like
> you want to make us look bad.
> 

My apologies. The company does not allow cdrom images except from
Windows.
I used the floppy image.
It turns out that the floppy img does not support this type of drive.

After asking the company to mount the cdrom image from their side, no
problems.

FWIW, if I did not see this information, sorry.
If this is worth the effort, it would be helpful to have this noted.

I mentioned my Samsung drive because my really quick search on the
mailing list only mentioned problems for this brand of drive having
interface problems. It was not a detailed search.

Happy to now have amd64 -current.

-- 
Thank all of you for the help,
Chris Bennett




Re: Problems with a fresh install not finding SSD drive over floppy img HTML5/KVM

2021-11-30 Thread Chris Bennett
On Tue, Nov 30, 2021 at 03:25:30PM -0700, Theo de Raadt wrote:
> Chris Bennett  wrote:
> 
> > After looking over the list, it looks like many SSD's have compatibility
> > problems, so I'm just going to switch over to a spinning drive.
> 
> That is news to us.
> 

I am also more than a little shocked by this.

>From amd64 7.0 -current floppy img:

OpenBSD 7.0-current Ramdisk #129 Tue Nov 30 11:03
Supermicro X11SSD-F
cpu0 Intel Xeon E3-1270 v6 3.80Ghz


>From an auto-installed FreeBSD 12.x by the company:

Samsung SSD 860 Pro 256GB RVM01B6Q ACS-4 ATA SATA 3.x device



Back to OpenBSD, amd64 shows sd0 as the floppy img
i386 (7.0 release) does not mention sd0 at all

I could not get network up at all under either OpenBSD or FreeBSD (zero
experience with FreeBSD).

However, I did get an error I have never seen before.
When they (supposedly) changed boxes, I kept the same /29 IP block.
I accidentally assigned the static IP addresses to em0 instead of em1.
Then I added it correctly to em1.

STDERR constantly repeated that I had assigned the same IP to both.
Bringing both down stopped the error.

However, I did not touch igb0 (em0) under FreeBSD. After changing igb1
(em1) to the correct address, I got the same error in FreeBSD.
Huh?

The company refuses to change the SSD to the spinning drive, but I can
add it as a second drive. This was a special offer, so I can't complain.
I looked at the specials again. All are only with this drive.

I am at a complete loss here about what's going on. I specifically
grabbed this to be able to run -current OpenBSD.
I previously ran this exact type of box with this company before with a
1TB drive. So I have used this IPMI before.

-- 
Frustrated,
Chris Bennett



Re: Problems with a fresh install not finding SSD drive over floppy img HTML5/KVM

2021-11-30 Thread Chris Bennett
After looking over the list, it looks like many SSD's have compatibility
problems, so I'm just going to switch over to a spinning drive.

Sorry for the noise.
-- 
Chris Bennett



Problems with a fresh install not finding SSD drive over floppy img HTML5/KVM

2021-11-30 Thread Chris Bennett
Hi.
I have never done an install to a SSD drive.
The first server they gave me was a bust, so they swapped out boxes.
That has not helped. BIOS shows a Samsung SSD drive, but the settings
were at hard drive instead of SSD drive. I changed that.
Drive does not show up with either setting.
There were also weird networking problems with em0 and em1.

For both boxes, the KVM has been very wonky. Sometimes it works,
sometimes it doesn't, sometimes it disconnects.

I have used this type of server with this company before.
I had zero problems.
I have tried 7.0 and 6.9 amd64. floppy image shows up as sd0 and rd0a
I also tried 7.0 i386. With this one, no drive except rd0a

Shell does not show any drive.

I just did an automated FreeBSD 12 and that installed, but doesn't
manage ssh or pings. It shows up in KVM, but I can't get my keyboard or
virtual keyboard to work.

This server shows up with a status of up. The new one has a status of
NA.
Any help deeply appreciated.

I will probably end up requesting a spinning 1TB drive.
But I have some doubts at this point if I am getting junk boxes.
This was with a Black Friday discount.

--
Chris Bennett



Re: Default window manager

2021-11-28 Thread Chris Bennett
On Sun, Nov 28, 2021 at 04:36:58AM -0500, Steve Litt wrote:
> jwinnie@tilde.institute said on Sat, 27 Nov 2021 16:34:48 -0500
> 
> >Hello OpenBSD users and devs,
> >
> >I am wondering if there are plans to change the
> >default window manager in OpenBSD.
> >
> >Currently, the default WM is fvwm, 
> 
> The only thing wrong with fvwm is it ships with such tiny fonts I can't
> read enough to change the font size. But only people with bad vision
> have this problem. And if I really wanted fvwm, I'd just have a person
> with good vision change the font, then I'd do the rest.
> 

For those with vision problems for tiny fonts, like me, Ctrl Right-Click
brings up font sizes. After changing to a bigger font, I open a new
xterm and all is fine.
First step I do on a new install.
Best to open a new xterm rather than the first one, which overflows with
the bigger font.

Ctrl plus Right-Click or middle-click or left-click of the mouse offers
a lot of handy features before making permanent configuration changes.
Hopefully useful for those that didn't know about this.

I happen to like fvwm quite a bit after configuration to my needs.
I install the fvwm2 version from ports, but base version works great.
fvwm3 is also available now, so it is an actively developed software.
Not sure when/if that will get ported in.

--
Chris Bennett




Re: use pfctl to reread /etc/mail/spamd-white table

2021-10-29 Thread Chris Bennett
On Fri, Oct 29, 2021 at 09:49:43AM +0200, Peter N. M. Hansteen wrote:
> 
> How do you maintain the contents of the /etc/mail/spamd-white file?
> 
> As in, do you have a cron job or similar that dumps the contents of the
> table there?
> 

This little tidbit of necessary information is not really mentioned
anywhere.
(Forgive the noise if that has changed)

My assumption years ago was that pf would update the files itself.
Obviously, I didn't realize that for a while. Neither did my files.

--
Chris Bennett



Re: pkg_add still reporting incorrect actions

2021-10-09 Thread Chris Bennett
On Sat, Oct 09, 2021 at 09:53:46PM +0300, Mihai Popescu wrote:
> I am running amd64-current from snapshots. I am installing a lot of
> packages using pkg_add -vV pkg1 pkg2 ...
> 
> I got some strange reports, see below. This is the third email about this,
> maybe isn't it a big deal.
> 

pkg_add -Dsnap  is needed when snapshots and release are next to each
other
.
Chris




Re: Server certs expired higher up the chain, imaps and https

2021-10-02 Thread Chris Bennett
On Sat, Oct 02, 2021 at 05:25:17PM +0200, Marcus MERIGHI wrote:
> 
> I've nominated you for the "most helpful person around" award. 
> 

There just have to be clones! I don't see how he has enough time.
So +1 or +2 or +3..

Chris




Server certs expired higher up the chain, imaps and https

2021-09-30 Thread Chris Bennett
Hi,

I'm getting that the certs are expired, but https works fine in Firefox,
including when looking at the full chain.


openssl s_client -servername mail.strengthcouragewisdom.rocks -connect 
mail.strengthcouragewisdom.rocks:imaps

openssl s_client -servername mail.strengthcouragewisdom.rocks -connect 
mail.strengthcouragewisdom.rocks:https

However are not happy. I force updated my ssl certs, syspatch, pkg_add
-u and rebooted.

I didn't rebuild dh.pem for dovecot.

Is this just a DNS propagation issue?
Or should I do something further myself?

Thanks
Chris Bennett



Re: Determining the number of CPU cores and hyperthreads from userspace

2021-09-19 Thread Chris Bennett
On Sun, Sep 19, 2021 at 01:37:05PM -0400, Daniel Wilkins wrote:
> Hyperthreads are easy: they've been disabled for years (unless they got 
> flipped on and I didn't notice.)
> 

Does the setting in the BIOS need to be turned off also?
Or is it irrelevant? I had a server for a while where the company
insisted that it be left on in the BIOS.

Thanks,
Chris



Re: Why is tmpfs not working on OpenBSD?

2021-09-09 Thread Chris Bennett
On Mon, Sep 06, 2021 at 12:44:59AM +, iio7 wrote:
> > > Why isn't it removed? It is kinda "misguiding".
> >
> > Shucks, you must feel terrible about our decision.
> 
> Well, compared to the fact that you, back in 2016, wrote that,
> "We don't spend hours of our time adding unimportant notes to that file.", 
> concerning updating the FAQ about this, maybe
> instead of giving these useless comments, that you apparently
> have got plenty of time to do, you should actually provide some
> kind of useful information somewhere!
> 

Wow. I guess a 2500 page FAQ would be much better.

But, I do believe I have found an important issue to add to the porting
section of the FAQ.
Although it covers submitting a single port, it does not cover how to
deal with submitting a larger project with 20+ submissions.

I learned the hard way that the methods I was using to submit ports for
a larger project just didn't work for getting these looked at and getting
the two OK's needed for new ports. Oops.

However, bit by bit, I was kindly informed on how to do that correctly.
I intend to work out a diff to add that to the porting section of the
FAQ. Perhaps it will be accepted, but at least it will bring the topic
into a single, searchable thread.

For the moment, due to financial reasons, I cannot continue that
project. Hopefully, others will at least find some value from my
experience with that project. I would like to see others motivated to
doing medium sized projects with less confusion. Reviewers too.

As far as to leaving certain unmaintained src and broken ports in the
tree, I have no problem with that. Many broken ports eventually get
fixed. We all benefit from that.

Chris Bennett



Re: Extremely bizarre using sysupgrade from May 6 -current

2021-05-07 Thread Chris Bennett
Ha! Sorry for the noise.
I needed to check a file from etc with the latest -current.
I untarred base69.tgz in the _sysupgrade directory.

Script choked on the existing wrong files.

+1 for good work on sysupgrade!
-1/2 for me not cleaning up!

ROFL at myself,
Chris Bennett




Extremely bizarre using sysupgrade from May 6 -current

2021-05-07 Thread Chris Bennett
I just ran sysupgrade -snk and got this:

CX ~ # sysupgrade -snk  
  
Fetching from https://ftp.openbsd.org/pub/OpenBSD/snapshots/amd64/
SHA256.sig   100% 
||  2144
   00:00
Signature Verified
Verifying old sets.
rm: altroot: is a directory
rm: bin: is a directory
rm: dev: is a directory
rm: etc: is a directory
rm: home: is a directory
rm: mnt: is a directory
rm: root: is a directory
rm: sbin: is a directory
rm: tmp: is a directory
rm: usr: is a directory
rm: var: is a directory

CX ~ # ls /home/_sysupgrade/
  
total 200
drwxr-xr-x  13 root  wheel512 May  7 19:47 .
drwxr-xr-x  30 root  wheel   2560 May  6 07:09 ..
-rw-r--r--   1 root  wheel  43523 Feb 16 11:10 INSTALL.amd64
-rw-r--r--   1 root  wheel   1992 May  7 19:47 SHA256
drwxr-xr-x   2 root  wheel512 May  6 03:29 altroot
drwxr-xr-x   2 root  wheel   1024 May  6 03:29 bin
drwxr-xr-x   2 root  wheel512 May  6 03:29 dev
drwxr-xr-x  21 root  wheel   1024 May  6 03:30 etc
drwxr-xr-x   2 root  wheel512 May  6 03:29 home
drwxr-xr-x   2 root  wheel512 May  6 03:29 mnt
drwx--   3 root  wheel512 May  6 03:29 root
drwxr-xr-x   2 root  wheel   1536 May  6 03:29 sbin
drwxr-xr-x   2 root  wheel512 May  6 03:29 tmp
drwxr-xr-x  12 root  wheel512 May  6 03:29 usr
drwxr-xr-x  23 root  wheel512 May  6 03:29 var
CX ~ # ls /home/_sysupgrade/bin
total 20328
drwxr-xr-x   2 root  wheel1024 May  6 03:29 .
drwxr-xr-x  13 root  wheel 512 May  7 19:47 ..
-r-xr-xr-x   2 root  wheel  128232 May  6 03:29 [
-r-xr-xr-x   1 root  wheel  130680 May  6 03:29 cat
-r-xr-xr-x   3 root  wheel  281992 May  6 03:29 chgrp
-r-xr-xr-x   1 root  wheel  149304 May  6 03:29 chio
-r-xr-xr-x   3 root  wheel  281992 May  6 03:29 chmod
-r-xr-xr-x   5 root  wheel  184632 May  6 03:29 cksum
-r-xr-xr-x   1 root  wheel  159872 May  6 03:29 cp
[snip]

All mounts are correct and nothing unexpected from last.
After all of the "fun" about sysupgrade, I can almost believe this
is a joke. ROFL if it is!

Either way, I'll check out a fresh src.

Chris Bennett

OpenBSD 6.9-current (GENERIC.MP) #5: Thu May  6 02:53:29 MDT 2021
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 34289893376 (32701MB)
avail mem = 33235222528 (31695MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x8f676000 (36 entries)
bios0: vendor American Megatrends Inc. version "2.2" date 05/23/2018
bios0: Supermicro X11SSD-F
acpi0 at bios0: ACPI 5.0
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT SPMI MCFG HPET LPIT SSDT SSDT SSDT DBGP 
DBG2 SSDT PRAD SSDT UEFI SSDT DMAR EINJ ERST BERT HEST
acpi0: wakeup devices PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4) PEGP(S4) 
RP09(S4) PXSX(S4) RP10(S4) PXSX(S4) RP11(S4) PXSX(S4) RP12(S4) PXSX(S4) 
RP13(S4) PXSX(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E3-1270 v6 @ 3.80GHz, 3801.19 MHz, 06-9e-09
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,SRBDS_CTRL,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 24MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E3-1270 v6 @ 3.80GHz, 3800.01 MHz, 06-9e-09
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,SRBDS_CTRL,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E3-1270 v6 @ 3.80GHz, 3800.01 MHz, 06-9e-09
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFL

Re: Can I do 4-26 snapshot to 6.9-stable safely?

2021-05-02 Thread Chris Bennett
FWIW, I run a server with -current. That always has some small risks
(which I haven't run into at all for a long time! +1 developers!!!)

Because of those possibilities, I added a second bootable backup disk.
I intend to keep running -current. I will now put 6.9-stable on the
second disk. This gives me both worlds. The -current I need and the
6.9-stable for safety.

If you add a second disk, do a fresh install on it and copy over your
files from the original disk.

Now you have a working setup, no complications and a backup disk on the
same machine. Sure, the machine can brick and possibly take out both
disks, but a cron job can do backups to the old disk.

Why do you need to use the sysupgrade utility at all?
Sure, it's a handy-dandy helper, but you really shouldn't need to use it
for anything.
I have no doubt that you can figure out everything you need to do to
avoid using it. 

Buy a cheap USB stick and figure out how to break it and fix it every
possible way. I have little doubt that you can ask for help with that
process and get answers. After you make your best effort to figure
things out yourself.

$ man [lots and lots of commands]

Enjoy,
Chris Bennett




Re: sysupgrade failure logs

2021-02-15 Thread Chris Bennett
On Mon, Feb 15, 2021 at 12:21:11PM -0500, Judah Kocher wrote:
> Hello Theo,
> 
> I never for a moment intended to convey that anyone "owed" me support of any
> kind for my outside-the-box use of this tool.

You couldn't be bothered to even send a dmesg or a copy of the script
with the first email. OK, say you forgot. I do sometimes. Where was your
immediate reply with those missing and always required items?

>While I don't understand your
> vitriolic response to someone else's application of your software for their
> own personal use in a way you do not condone, you are certainly entitled to
> be as outraged as you please.

Read the tech@ archives. Such a simple script is constantly being
criticized, give it new features, etc...
This script was a gift. I ran systems for years without it. Don't like
the default script? Open it up and modify to meet your special needs.
Don't know how to write the code? Learn it.
If you don't understand what this script does, you REALLY need to learn
more about installs and upgrades.

> I remain grateful for the work you and others
> put into the OpenBSD operating system. It has been made clear on multiple
> occasions that use of sysupgrade with anything other than default responses
> is heretical and cancel-culture worthy

You appreciate the work, but you already know the default responses?
Then you are being rude. 

> but I don't mind breaking things
> while experimenting and do not blame anyone else when this happens, nor do I
> particularly care if anyone else is bothered by it as long as no actual harm
> is being done.

This is part of learning and a good attitude.

> 
> If anyone cares to read my original query from an intellectually honest
> perspective I think they would be hard pressed to respond as you have. I
> never claimed my "sysupgrade use was completely normal" nor did I blame the
> sysupgrade tool for the issue I am attempting to diagnose. I did not mention
> my usage of it because logically it does not seem to be relevant and I was
> concerned it would become an excuse for people to fly off the handle. I only
> had and still only have one question.
> 
> Does sysupgrade leave any kind of logging behind which could help me to
> pinpoint why it is failing on one system while working on another apparently
> identical system?

Read the script before posting the questions about logging.

> 
> If the answer is no, that's easy enough to say. If the answer is yes, that's
> also easy enough if anyone is willing to share where those logs would be
> found. If the answer is, "Maybe, but no one owes you that information" that
> is also perfectly true while kind of pointless to even bother saying,
> although a world where people only offer help to others when there is a
> financial obligation would be a dismal place indeed.
> 

Much of the world is indeed a dismal place. It's part of human nature.

> I did not and do not expect anyone else to solve my problem for me. If you
> have reason to believe that my "mis-"usage of sysupgrade has anything at all
> to do with this issue, I'd be curious to know how you would explain it
> working on 4 out of 6 systems. Since it seems unlikely that the exact same
> tool would work two different ways on two identical systems then logically I
> would assume that some subtle difference exists between them and was hopeful
> that any records of the sysupgrade process would help me identify that
> difference. I have been using this script on these and other less similar
> systems ever since the sysupgrade tool was released with no issues, and
> therefore I think it's reasonable to to conclude that using it this way,
> while not officially sanctioned, has nothing to do with what's going on in
> this particular case.

I really find your method puzzling. I ran into financial troubles and
had to drop a server running -current. So I added a second hard drive to
boot onto in case a new snapshot broke the system on the server running
-current.

I also do not understand while you are running -current and automating
installation on 6 systems. Does your script verify functionality on the
first system before moving on to the others? Are you caching both the
snapshot and package files on the first server? Then using those files
only to update the other 5 systems.
If not, then you are pretty much guaranteeing at some point that you
will have 6 different systems running different snapshots and packages.
That seems like a bad idea.
If all 6 systems go down, how will you fix that mess?

Please, please, please, format your messages to be readable!
Use some newlines.

Please leave the politically correct responses for elsewhere.
Read the different lists. Everyone gets told on or off list when they do
something stupid. Learn from it. When you know a helpful answer to
someone'

Failing to get installboot to work, cross-device install -> ERR M amd64 6.6-stable

2021-01-31 Thread Chris Bennett
Hi,

I'm stuck at 6.6-stable, trying many times in the past to use newer
-currents is partially to blame for how I'm in a bad situation.

I'll try to be clear as I can.
After the error below, booting gives ERR M.

What I'm using.

One USB2 flash drive. Booting / off of it. It works fine, but old.
One USB2/3 spinning hard drive. 2TB. Never setup to boot from. Using for
storage. The a partition has the files to get a boot started.
One Laptop spinning HD. The a partition used to boot, has the files but
won't boot.

I also have a powered USB hub to get enough power for the spinning HD.

I have tried using fdisk on laptop and USB2/3 HD. Not helpful.
I have tried using installboot on both of those two, but I get cross
device install error, which I see is only in i386 installboot in src.
I am following installboot manual page. I also read all of the
recommended see also man pages.
I also burned an install CD and took it just far enough into install to
get access to laptop HD, mount /mnt/usr and try installboot from there.
Same cross device install error.

I'm unsure if I should try a fresh install (backing everything up is a
little weird the way I'm running off of three disks. I can do that.)
I would like to understand what is causing me to end up at ERR M.
I read what causes that error, but I don't know how to fix that.

Any advice appreciated.
Chris Bennett




Re: relay email from users to per-user smtp servers

2021-01-24 Thread Chris Bennett
On Sun, Jan 24, 2021 at 04:52:13PM +0100, Rudolf Sykora wrote:
> 
> 
> In my case, my computer gathers mail from various mail services using
> mbsync. I want to be able to reply the mail, but have the reply use the
> mail server that is most suited for the reply. E.g., if I get an email
> from school (downloaded from the school service), I need that my answer
> is as if sent using the school service; similarly with my work mail,
> etc. (The people at work want me to use their address when dealing with
> work-related matters; it's then easily recognizable.) I thought the
> program used to create a message does not have to know how to send email
> (speak SMTP) but would just pass it to something that can (smtpd), to
> relay the mail further. But for this I'd need that the server to be used
> for sending be easily modified by user, as well as have some easy means
> to supply the needed credentials.
> 

It sounds to me that need to configure your email clients to do the
switcheroo about from addresses, etc.
I use neomutt, which might not be suitable since it's a text only.
But I login to my shell. Then I start neomutt and bind keys within my
neomuttrc, to then login to another IMAP server
(from a list I have setup) and then reply with the correct From address,
using either the local smtpd or one on another server.

Using smtpd to send really just means sending the right email
and credentials, so there is no real problem having many email addresses
for one user. I use Dovecot for IMAP and base smtpd.

This is assuming that I have understood your problem correctly.

Chris Bennett




Re: phonetics on OpenBSD: IPA transcription

2021-01-08 Thread Chris Bennett
On Fri, Jan 08, 2021 at 08:42:20PM +0100, Jan Stary wrote:
> Is there anyone doing phonetics on OpenBSD?
> 
> I suppose the first thing to figure out is transcription.
> I mostly use macOS for that now, having installed an IPA keyboard
> and the Charis and Doulos fonts (as recommended on the Praat page).
> Now I'm looking to do that on OpenBSD.
> 
> As far as I understand, I need a XKB keymap that describes a layout
> of the IPA symbols, and a font that has the glyphs for those symbols.
> Please bare with my ignorance of XKB internals.
> 

I am also interested in this. Fell in love with IPA once I saw it.
Nope, I don't have the skills. But I'd be happy to help.
Feel free to contact me off-list. I didn't know there were IPA
keyboards. My interests are personal and not professional.

Chris Bennett




Re: pf.conf parser/lint

2020-12-21 Thread Chris Bennett
On Mon, Dec 21, 2020 at 07:28:54PM -0800, Sean Kamath wrote:
> > On Dec 21, 2020, at 14:24, Aham Brahmasmi  wrote:
> > For the defaults, I try to explicitly write some of them sometimes. I
> > find this helpful because it is difficult for me to remember what the
> > defaults are. However, I do understand that I run the risk of being
> > caught unawares if the defaults are changed for some good reason.
> > Trade-offs :)
> 
> That is what I use comments for. ;-)
> 
> a) Tells me what I *think* the defaults are
> b) Reminds me I’m *using* the defaults
> c) When the defaults change, makes it easy to find out why things break (if 
> they break, which they haven’t in recent memory)
> 
> Sean

Which raises the question of knowing when the defaults change.
Waiting until things *obviously* break doesn't address the time that
things *silently* break.
Silent breakage seems like a pretty serious security problem.
Having the syntax pass OK is not the same thing as having what you need
or want.
I really don't see how any linter can accomplish such a complex question.
Is my conf REALLY doing the right thing? Seems to. But maybe not.

For a good example, a small mistake in smtpd.conf will run just fine,
but with truly disastrous results.

Chris Bennett




Re: Enhancing Privacy in 2020 attached screenshot

2020-12-16 Thread Chris Bennett
On Wed, Dec 16, 2020 at 09:04:30PM +, pipus wrote:
> Ah cool
> 
> Yes I have seen it in action it is real and apparently coming out in less 
> than a month.
> 
> But I hope that those on this list realise what it means.
> A commercial revolution for OpenBSD.
> It should not be for only us.
> 
> But then I am not their marketing team so will let them announce when it 
> comes.
> 

Whatever. please go away.
But read the website. You can sell OpenBSD freely. You can modify it,
release that as long as the copyright notices are kept.
We could care less what anyone else is doing. Go troll on some mailing
list for toilet innovations, because you are full of shit.



Re: How to whitelist a good IP coming in with a senderscore of 0?

2020-12-13 Thread Chris Bennett
On Sun, Dec 13, 2020 at 08:45:53PM +, gil...@poolp.org wrote:
> You should probably look into the bypass keyword, it lets you create a
> filter rule that will bypass a phase (ie: in phase connect, if ip addr
> is X, then bypass the phase).
> 
> Gilles
> 

Thanks!

Chris




How to whitelist a good IP coming in with a senderscore of 0?

2020-12-13 Thread Chris Bennett
I have run into a problem with an organization getting a senderscore of
0.
This is not at all a spam source, but a political organization which is
the kiss of death these days.

What's the right method to deal with this? I certainly don't want to
stop senderscore filtering, but I do want to receive emails from them.

Thanks,
Chris Bennett




Re: Default installurl and Package Source

2020-12-10 Thread Chris Bennett
On Thu, Dec 10, 2020 at 10:24:27PM -, Stuart Henderson wrote:
> > Please use https. Some ISP's insert crap into http.
> 
> Sounds a good reason to use a better ISP :)
> 

You're right about that and the CPU waste.
I had an ISP a few years ago at home that tampered with http.
Once burned, twice shy.

Chris

> Packages packing-lists are verified using signify signatures, and files
> inside the package using sha256 from the (signed) plist, so it will be
> very obvious if those files are changed.
> 
> And because pkg_add doesn't use persistent connections, https really
> slows it down as it has to make a new TLS handshake for every package
> you have installed (even if no update is needed).
> 
> > Certs are free, why doesn't a trusted source not have one?
> 
> Some mirror servers are not on especially new hardware and may not have
> loads of cpu to spare to encrypt everything. Also some may consider it a
> waste of cpu time if the files are signed anyway. (For file distribution
> where signature checks are not done automatically, I have a feeling
> that seeing something fetched over https might suggest to the user that
> things are safe and they don't need to bother to do a check manually -
> this is of course not the case as https does nothing to help if a server
> has been compromised, it only deals with the transport layer).
> 
> > IMHO, you really should run stable. Although you might look at the
> 
> Or -current :-)
> 
> > patches and decide not to. packages-stable may or may not have security
> > fixes you need. syspatch often, but not always, needs a reboot.
> >
> > But it's your system, do as you please. A security patch might not be
> > relevant to you.
> >
> > Chris Bennett
> >
> >
> >
> 



Re: Default installurl and Package Source

2020-12-09 Thread Chris Bennett
On Wed, Dec 09, 2020 at 11:22:58AM +0800, Tito Mari Francis Escaño wrote:
> Hi misc,
> I recently installed 6.8 on VM then applied errata patches.
> When I tried to install git, it complained that git is not in the
> packages-stable folder, I was pleasantly surprised. The
> /etc/installurl by default is http://cdn.openbsd.org/pub/OpenBSD, and
> I got error 503 on the site. Checking the default URL indicates it may
> be down, same goes for Cloudflare CDN, Verizon seems working alright.
> When I changed /etc/installurl to where I used to get packages:
> http://ftp.jaist.ac.jp/pub/OpenBSD, it worked as expected.
> This raised the following questions:
> Does this mean when we apply errata patches, we're now automatically
> using stable release and need to use stable packages?
> Is it advisable to keep the /etc/installurl automatically default to
> http://cdn.openbsd.org/pub/OpenBSD or should users be advised to
> select packages from package sources geographically near them?
> Please advise. Thanks and keep up the great work.
> 

There are two packages that might help.
dbip-city-lite
dbip-country-lite

If you find a good mirror, you can hard code the PKG_PATH
export PKG_PATH=...
it can use multiple servers separated by :
Be sure to change it to 6.9 later!

That's what I do when I have cdn problems.
Avoid the OpenBSD source, if possible.
Please use https. Some ISP's insert crap into http.
Certs are free, why doesn't a trusted source not have one?

IMHO, you really should run stable. Although you might look at the
patches and decide not to. packages-stable may or may not have security
fixes you need. syspatch often, but not always, needs a reboot.

But it's your system, do as you please. A security patch might not be
relevant to you.

Chris Bennett




Re: CIDR vs aliases with ifconfig/hostname.if

2020-12-02 Thread Chris Bennett
On Wed, Dec 02, 2020 at 10:51:34PM -0800, Greg Thomas wrote:
> Nope, as mentioned it's the network address, for every subnet you're going
> to get a network address and a broadcast address, and your usable IPs in
> between.
> 
OK, that's very clear the way you just said it. That explains really
well why CIDR is so important - clarity.

Thanks,
Chris



Re: CIDR vs aliases with ifconfig/hostname.if

2020-12-02 Thread Chris Bennett
On Wed, Dec 02, 2020 at 11:26:15PM -0500, Allan Streib wrote:
> Mike Coddington  writes:
> 
> > There was a useful tool that someone posted on misc a while back called
> > netcalc. I think this is its website:
> > https://jamsek.dev/posts/2019/Sep/21/ipv4-and-ipv6-cidr-subnet-calculator/
> > Check it out if you want to get a better grasp on CIDR notation.
> 
> There is also ipcalc in packages and that is one I use frequently,
> though it's only for IPv4.
> 
> $ ipcalc 104.149.1.112/28
> address   : 104.149.1.112
> netmask   : 255.255.255.240 (0xfff0)
> network   : 104.149.1.112   /28
> broadcast : 104.149.1.127
> host min  : 104.149.1.113
> host max  : 104.149.1.126
> 
> Allan
> 

So, what happens with 104.149.1.112? Does anybody get to actually use
it? Or is it just a placeholder?

I never really paid a lot of attention to CIDR until I started to need a
lot of IP addresses for websites, email, etc. for TLS/SSL certs.

I stumbled upon this server where I have my other two and I couldn't
pass up $31 a month. I can't reasonably backup properly at home, too
slow a connection.

Chris




CIDR vs aliases with ifconfig/hostname.if

2020-12-02 Thread Chris Bennett
Hi,
after seeing a post here using CIDR, I re-read some manual pages.
I have been using aliases, but it looks like using CIDR is the preferred
method.
Could someone explain that a little better than the manual pages do?
An example might help better to explain why aliases are used when
changing network numbers. Is it a short term fix?
Is there a downside to using aliases vs CIDR?

My other question is what to put for the address.
I have 104.149.1.112/28. Should I just put this?
113 is the gateway. What is 112? It doesn't ping.
113 pings even if the rest is inaccessible.
There was a mysterious problem that I had to get tech support to fix.
Signal not present. Whatever that meant.

This is a cheap clearance bare metal, so IPMI/KVM is Java based and I
can't work with that. I have an old version of OpenBSD that worked
somewhere for that, but it doesn't work here.
So I don't want to have tech support login.

I know, simple questions, but my search engine skills really don't work.

Thanks,
Chris Bennett




Re: Reinstall to upgrade

2020-11-27 Thread Chris Bennett
On Wed, Nov 25, 2020 at 10:10:03PM -, Stuart Henderson wrote:
> > It's not right. Use pkg_delete -cX first. There are package files in
> > many other places that need to go away.
> 
> Be very careful with -c! It may remove configuration files that you
> actually want to keep.
> 

You're right. Here be dragons!
I think you told me to use -c a good while back. But I
really did want to zap everything that time!

Chris Bennett




Re: Reinstall to upgrade

2020-11-25 Thread Chris Bennett
On Wed, Nov 25, 2020 at 02:26:42PM +0100, Manuel Giraud wrote:
> Hi,
> 
> I'd like to upgrade (on -current) and, in the process, remove some cruft
> accumulated over the years. I usually do sysupgrade and sysclean for
> system.
> 
> But for packages, I think I would be better to reinstall everything
> since "pkg_check -F" does not seems to complain and I can see I have,
> for example, some firefox-57 files left.
> 
> I think I could do the following but I don't know if it is safe:
> - sysupgrade (+ sysclean)
> - pkg_info -mz > mypkg
> - umount /usr/local
> - newfs partition_of_usr_local
> - mount /usr/local
> - pkg_add -l mypkg
> 

It's not right. Use pkg_delete -cX first. There are package files in
many other places that need to go away.
Then look in /usr/local. See if anything is leftover that shouldn't be
there. Look in /etc and /var/db/pkg and 

But I think that what you might want to do is a fresh install.
dump is a bit slow and will probably carry over some cruft.

I tar all of the pieces regularly.
tar ... /etc
tar ... /root
tar ... /home
etc.

Then you have copies of the new and old files to work with.
tar xzf .. into another place such as home. compare new and old files in
the necessary places and you are good.

Sometimes you just have to do tedious. upgrade vs install does not give
you the same system. I almost never do a fresh install, but every once
in a while, it's a good choice.
Hope this is helpful. Others may give different or better advice.
sysupgrade is a tool of convenience. I like it, but never had any
problems doing things manually.

Useful advice: Learn to use ed. It will save your butt during disasters!

Chris Bennett


> Or maybe, I should dump, do a complete reinstall, pkg_add -l mypkg,
> restore /home and, tediously, restore some /etc files.
> How would you do this?
> -- 
> Manuel Giraud
> 



Re: Conditions that can trigger a package upgrade?

2020-11-04 Thread Chris Bennett
On Mon, Nov 02, 2020 at 07:03:27AM -0500, Jeremy O'Brien wrote:
> Hey misc,
> 
> I'm trying to understand the various scenarios that can trigger a package 
> update in 'pkg_add -u'. I thought package updates were triggered only through 
> explicit version bumps, or signature changes. I'm seeing that that isn't 
> always the case however, as shown here:
> 
> 
> x1$ pkg_info -S colord ../colord/colord-1.3.5p2.tgz  
> Information for inst:colord-1.3.5p2
>  
> Signature: 
> colord-1.3.5p2,6,@consolekit2-1.2.1p9,@dbus-daemon-launch-helper-1.12.20,@dconf-0.36.0p0,@glib2-2.64.6,@lcms2-2.9p0,@polkit-0.118,@sqlite3-3.31.1p0,c.96.0,ffi.1.2,gio-2.0.4200.11,glib-2.0.4201.4,gmodule-2.0.4200.11,gobject-2.0.4200.11,gthread-2.0.4200.11,iconv.7.0,intl.7.0,lcms2.1.2,m.10.1,pcre.3.0,polkit-gobject-1.2.0,pthread.26.1,sqlite3.37.10,z.5.0
>  
> Information for file:../colord/colord-1.3.5p2.tgz
>  
> Signature: 
> colord-1.3.5p2,6,@consolekit2-1.2.1p9,@dbus-daemon-launch-helper-1.12.20,@dconf-0.36.0p0,@glib2-2.64.6,@lcms2-2.9p0,@polkit-0.118,@sqlite3-3.31.1p0,c.96.0,ffi.1.2,gio-2.0.4200.11,glib-2.0.4201.4,gmodule-2.0.4200.11,gobject-2.0.4200.11,gthread-2.0.4200.11,iconv.7.0,intl.7.0,lcms2.1.2,m.10.1,pcre.3.0,polkit-gobject-1.2.0,pthread.26.1,sqlite3.37.10,z.5.0
>  
> x1$ pkg_add -un colord
> quirks-3.471 signed on 2020-10-31T22:51:51Z
> colord-1.3.5p2->1.3.5p2: ok
> Running tags: ok
> --- -colord-1.3.5p2 ---
> You should also run rm -f /var/db/colord/mapping.db
> You should also run rm -f /var/db/colord/storage.db
> 
> 
> In the above example, I've downloaded the colord tarball from my chosen 
> mirror, and compared its signature to my currently installed version. The 
> signatures and version match exactly, however pkg_add still updates the 
> package. Does anyone know what scenario is triggering this update?
> 
> Thanks,
> Jeremy
> 

You haven't supplied any information for answering this question well.
Are you running -current and updating to a new snapshot?

Easy answer. System libraries that these packages were built with have
changed. Package is the same except for being rebuilt with newer
libraries.

Are you upgrading to a newer stable/release?
Same answer.

Are you getting this problem running pkg_add -u multiple times on the
same system without changing to a newer version or snapshot?

Then something is wrong. (Assumimg you are actually running the actual
pkg_add -u)
Check to make sure that you do not have any packages that have been
since dropped. gettext caused me problems a good while back

Please supply a little more info. That helps people to decide whether
they want to answer or not. Most likely you don't have any problem.
Have you read all of the relevant man pages? pkg_*
What is your PKG_PATH (if using). unset PKG_PATH is a quickie, temp fix
if it's wrong.
Have you changed /etc/installurl?

Look for relevant threads previously on the ports@ mailing list
especially.

Enjoy!
Chris Bennett




Re: Issue updating spidermonkey

2020-10-21 Thread Chris Bennett
On Tue, Oct 20, 2020 at 08:26:05PM -0400, Brennan Vincent wrote:
> Updated yesterday from 6.7 to a snapshot, and now:
> 
> $ doas pkg_add -u

doas pkg_add -u -Dsnap

You need to do some things different once you change to -current
snapshots.
Might also have to wait for -current packages to match the -current
snapshot sometimes.

Chris Bennett


> quirks-3.458 signed on 2020-10-18T13:56:14Z
> Can't update spidermonkey-60.9.0v1->spidermonkey78-78.3.1v1: no update found
> for spidermonkey-60.9.0v1
> Can't install polkit-0.116p1->0.118: can't resolve spidermonkey78-78.3.1v1
> 
> Is this expected soon after updating? Do I just need to wait for some
> inconsistency in the pkg repo to be resolved?
> 
> Thanks
> 
> 



Re: filters in OpenBSD in printing

2020-10-19 Thread Chris Bennett
On Mon, Oct 19, 2020 at 09:19:26PM -0600, Raymond, David wrote:
> Questions about lpr printing:
> 
> I tried putting a filter that drives an HP Deskjet printer (works with
> lprng on linux) as an output filter in printcap and it didn't work.

LPRng was removed a good while back.
What software besides the base lpr system are you using?
What commands are you using exactly?
Does it speak Postscript? That can be really helpful as a lot of
software speaks Postscript. I stopped getting printers that didn't speak
it.

apsfilter is pretty helpful for getting things working. You might give
it a try. Some of it's filters were astoundingly slow. But it helps fill
out printcap.

I haven't used lpr for a few years because my printer is in Mexico and
I'm in Washington state.

> Would it be more proper to put it as an input filter?  I am still on
> version 6.7 of the OS.  (I saw a recent post indicating that changes
> were made to the lpr system in 6.8.)

Someone else will probably be able to explain those changes.
Moving to 6.8 might be well worth it.

> 
> One of the problems was that I couldn't get rid of the banner page
> even though the appropriate flags were set.
> 
> I have looked for lpr documentation more informative than the
> lpr/lpd/printcap man pages, but I haven't found anything.  The
> printcap page describes some really archaic filters, but not much that
> is helpful in today's world.

I haven't looked at the code recently, but I think I know what filters
you are refering to. Super archaic.

> 
> I am currently using cups but would like to get rid of it, because if
> their set of filters doesn't do the job, you are stuck.  (Plus other
> hair-pulling frustrations.)
> 

Can't agree more!

--
Regards,
Chris Bennett



Re: fresh install

2020-10-19 Thread Chris Bennett
On Mon, Oct 19, 2020 at 05:55:59PM -0500, Hakan E. Duran wrote:
> Dear all,
> 
> Having been a linux user for quite a while, I am used to doing a fresh 
> install every few years, following a few upgrades. I usually set a separate 
> partition for the /home directory to be able to inherit my settings to the 
> fresh installation. This is the first time I did an upgrade in OpenBSD from 
> 6.7 to 6.8, which actually went flawless, but being a skeptical linux user, I 
> am wondering how I can do a fresh install if need be, by preserving my user 
> directory. I chose the auto-partitioning during the installation of OpenBSD 
> 6.7 but I don't know if that would be possible in a scenario like this, since 
> I am not sure if the installation algorithm would recognize the /home 
> directory or not. Your guidance will be greatly appreciated.
> 
> Hakan
> 

You can do a fresh install and preserve existing partitions with great
care and NOT using auto partition. Just don't add /home to the
partitions to be created and make absolutely sure that the area on the
disklabel doesn't include the space allocated for /home.
But only if this fresh install is after having done a fresh install
previously. Use Custom for the disklabel step, which will reflect the
already existing disklabel, except without the mount points. You will
need to delete the /home partition, finish the install, then use
disklabel to add the home partition, fsck -fp it, and mount it manually.
If OK, add to fstab if desired.

Be sure to backup the /home partition before doing this.
Since this is a bit complicated, practice this many times, read the
manual pages very well. Buy a USB drive to practice this on.
Be sure to do something wrong. Understanding this will really help you
if you somehow have a disaster, like a sudden power failure that messes
up a critical partition hopelessly.

This is not Linux. The rules are totally different. If you ask yourself
what you would do in Linux, you have failed in this task.

Auto-partition is really helpful for someone new to OpenBSD.
But I rarely partition across only a single disk and always partition
some special partitions like /var/postgresql, /home/vip-user, /var/www,
etc. /usr/src, /usr/obj are not needed by every user now that we have
syspatch.

Have fun,
Chris Bennett




Re: OpenSMTP - Wrong user for Dovecot LMTP

2020-10-19 Thread Chris Bennett
On Mon, Oct 19, 2020 at 06:24:47AM -0400, Aisha Tammy wrote:
> On 10/19/20 12:20 AM, Kastus Shchuka wrote:
> > On Sun, Oct 18, 2020 at 08:55:16PM -0400, Aisha Tammy wrote:
> > > Hi,
> > > 
> > >   I just upgraded to 6.8 and the upgrade process has been super cool and 
> > > simple :)
> > > 
> > > Unfortunately I seem to have hit some weird issue in OpenSMTPD where it 
> > > has stopped
> > > delivering the mail using Dovecots LMTP due to sending as wrong user.
> > > 
> > > osmtpd tries to send the mail as *_smtpd* even when configured to send as 
> > > a
> > > different user *excision*
> > 
> > 
> > Could it be this change: https://marc.info/?t=15878902902=1=2 ?
> > 
> 
> Well damn... That would indeed cause this error.
> I guess a simple fix would be to add _smtpd to the socket group or change 
> socket
> group to _smtpd.
> 
> Another fix would be to have the whole virtual user system also be done using
> _smtpd but I feel that keeping things with separate users is better.
> 
> Thanks a lot for the answer!
> 
> Aisha
> 

Are you using Maildir and IMAP from dovecot? I am.
I've setup using vmail as the user for dovecot. Something similar to
your virtual user files, except that I have three files:
vdomains, vaddr and vusers.

vusers has the table you are using, except moving to user vmail instead
of excision, which doesn't matter. vdomains are the domains getting
mail.
vaddr are just the plain addresses used.

action a01 lmtp "/var/dovecot/lmtp" rcpt-to alias 
action a02 lmtp "/var/dovecot/lmtp" rcpt-to virtual 

match from any for local action a01 
match from any for domain  rcpt-to  action a02

This works really well. I'm also using PostgreSQL for the users,
passwords and home folders for dovecot, which solves the upcoming
removal of bsdauth in dovecot.

However, unrelated I'm having trouble setting up auth for sending. There
are many conflicting examples which I can't sort out. I'll look over
what you've posted to see if that can work for me. I have four mail
domains on this server and I'm definitely missing some small piece of
the puzzle.

Regards,
Chris Bennett




Re: Microsoft's war on plain text email in open source

2020-08-26 Thread Chris Bennett
On Wed, Aug 26, 2020 at 09:47:24PM +0200, Pierre-Philipp Braun wrote:
> > Can't get your email to go plain text, attachments work.
> > If they don't, why not change providers?
> > It's a bit of work, but almost anyone can setup their own email server
> > for next to nearly free.
> 
> That is not as easy as it was, mainly because of IP reputation.  If you have
> your own MX and outbound MTA/MSA you will have to go through painful
> processes of getting out of blacklists, and even then your outgoing messages
> might end-up in users' spambox.  The game has changed, and it's for us
> old-timers that life is rough, already.

Bare metal servers often have cheap lower end servers. Yes, if it's not
in the cloud, some people think they aren't in the latest fad.

I've yet to end up on any blacklist except SpamRats which dropping a
message on their form page instantly clears up the problem. That is
usually because of some little thing that hasn't propagated yet thorugh
DNS.

Spam boxes are no longer very useful. Censorship is in full swing.
If I were to mention the last name of the founder of Windows, this email
would immediately go into the spam box of places like gmail.
If I were to send you an HTML email with that word in the text, same
thing.

Right now, us oldtimers are the only ones with much fundamental
knowledge and experience.

I was recently told by a youngster that I was a total idiot for working
my way through the new CSS to understand it well. I needed to go
straight over to some Framework that assumes I am stupid, which I
would be if I didn't take the time to understand what I'm really
accomplishing.

Setting up an email server for strictly personal use is not that big a
deal. For many users in a commercial setting, much harder.

All IPs can get blacklisted. Bad IPs, change ISP's. One month to set
things up and transfer over to a new server. Once everything is working,
drop the crappy corporate email service. No big rush.

My thoughts, for whatever they are worth.

Chris Bennett




Re: Microsoft's war on plain text email in open source

2020-08-26 Thread Chris Bennett
On Wed, Aug 26, 2020 at 12:28:00PM -0500, Mike Hammett wrote:
> Text-only was great in 1985. 
> 
> 

And it's still pretty badass in 2020.
I really love the way company networks are brought down by a little
helpful Javascript in an HTML email.

Can't get your email to go plain text, attachments work.
If they don't, why not change providers?
It's a bit of work, but almost anyone can setup their own email server
for next to nearly free.

Chris Bennett

> 
> 
> - 
> Mike Hammett 
> Intelligent Computing Solutions 
> 
> Midwest Internet Exchange 
> 
> The Brothers WISP 
> 
> - Original Message -
> 
> From: "Frank Beuth"  
> To: misc@openbsd.org 
> Sent: Wednesday, August 26, 2020 3:28:50 AM 
> Subject: Microsoft's war on plain text email in open source 
> 
> "Linux kernel development which is driven by plain-text email 
> discussion needs better or alternative collaborative tooling "to bring 
> in new contributors and maintain and sustain Linux in the future," says 
> Sarah Novotny, Microsoft's representative on the Linux Foundation board. 
> 
> Said tooling could be "a text-based, email-based patch system that can 
> then also be represented in a way that developers who have grown up in 
> the last five or ten years are more familiar with," she added. 
> 
> ... 
> 
> Should it migrate toward something more like, say, issues and pull 
> requests on the Microsoft-owned GitHub? “I’m not saying that there will 
> be a move in any time that I can see my crystal ball’s broken but I do 
> think there needs to be expansions in the way people can enter that 
> workflow,” said Novotny. 
> 
> “It is a fairly specific workflow that is a challenge for some newer 
> developers to engage with. As an example, my partner submitted a patch 
> to OpenBSD a few weeks ago, and he had to set up an entirely new mail 
> client which didn’t mangle his email message to HTML-ise or do other 
> things to it, so he could even make that one patch. That’s a barrier to 
> entry that’s pretty high for somebody who may want to be a first-time 
> contributor.”" 
> 
> https://www.theregister.com/2020/08/25/linux_kernel_email/ 
> 
> 



Re: FireFox Browser 'Open File' error

2020-08-25 Thread Chris Bennett
On Tue, Aug 25, 2020 at 08:59:34PM +0300, Kihaguru Gathura wrote:
> Hi,
> 
> I have tested on a 64 bit version of the same ThinkPad T60 and error is
> consistent..
> 
> However Firefox opens files from any folder as root on these same machines
> running OpenBSD 6.5.

Please don't run such software as root, ever.
Especially on old code that isn't supported anymore.

If this is a disposable version for testing only, then nevermind.

Chris Bennett

> 
> Kind regards,
> 
> Kihaguru.
> 
> 
> 
> 
> On Sat, Aug 22, 2020 at 9:34 AM Kihaguru Gathura  wrote:
> 
> > Hi,
> >
> > Firefox fails to list files at 'File Open' with error message:
> >
> > (firefox:89328): dconf-WARNING **: 09:12:15.835: failed to commit changes
> > to dconf: The given address is empty
> >
> > Please advise
> >
> > Regards,
> >
> > Kihaguru.
> >
> >
> > #
> > OpenBSD 6.7 (GENERIC.MP) #169: Thu May  7 11:37:15 MDT 2020
> > dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
> > real mem  = 2137341952 (2038MB)
> > avail mem = 2082598912 (1986MB)
> > mpath0 at root
> > scsibus0 at mpath0: 256 targets
> > mainbus0 at root
> > bios0 at mainbus0: date 04/30/07, BIOS32 rev. 0 @ 0xfd6b0, SMBIOS rev. 2.4
> > @ 0xe0010 (68 entries)
> > bios0: vendor LENOVO version "79ETD3WW (2.13 )" date 04/30/2007
> > bios0: LENOVO 195143U
> > acpi0 at bios0: ACPI 3.0
> > acpi0: sleep states S0 S3 S4 S5
> > acpi0: tables DSDT FACP SSDT ECDT TCPA APIC MCFG HPET SLIC BOOT SSDT SSDT
> > SSDT SSDT
> > acpi0: wakeup devices LID_(S3) SLPB(S3) EXP0(S4) EXP1(S4) EXP2(S4)
> > EXP3(S4) PCI1(S4) USB0(S3) USB1(S3) USB2(S3) USB7(S3) HDEF(S4)
> > acpitimer0 at acpi0: 3579545 Hz, 24 bits
> > acpiec0 at acpi0
> > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> > cpu0 at mainbus0: apid 0 (boot processor)
> > cpu0: Genuine Intel(R) CPU T2400 @ 1.83GHz ("GenuineIntel" 686-class) 1.83
> > GHz, 06-0e-08
> > cpu0:
> > FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,MWAIT,VMX,EST,TM2,xTPR,PDCM,NXE,PERF,SENSOR,MELTDOWN
> > mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
> > cpu0: apic clock running at 166MHz
> > cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2, IBE
> > cpu1 at mainbus0: apid 1 (application processor)
> > cpu1: Genuine Intel(R) CPU T2400 @ 1.83GHz ("GenuineIntel" 686-class) 1.83
> > GHz, 06-0e-08
> > cpu1:
> > FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,MWAIT,VMX,EST,TM2,xTPR,PDCM,NXE,PERF,SENSOR,MELTDOWN
> > ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins, remapped
> > acpimcfg0 at acpi0
> > acpimcfg0: addr 0xf000, bus 0-63
> > acpihpet0 at acpi0: 14318179 Hz
> > acpiprt0 at acpi0: bus 0 (PCI0)
> > acpiprt1 at acpi0: bus -1 (AGP_)
> > acpiprt2 at acpi0: bus 2 (EXP0)
> > acpiprt3 at acpi0: bus 3 (EXP1)
> > acpiprt4 at acpi0: bus 4 (EXP2)
> > acpiprt5 at acpi0: bus 12 (EXP3)
> > acpiprt6 at acpi0: bus 21 (PCI1)
> > acpicpu0 at acpi0: !C3(250@17 io@0x1015), !C2(500@1 io@0x1014), C1(1000@1
> > halt), PSS
> > acpicpu1 at acpi0: !C3(250@17 io@0x1015), !C2(500@1 io@0x1014), C1(1000@1
> > halt), PSS
> > acpipwrres0 at acpi0: PUBS, resource for USB0, USB2, USB7
> > acpitz0 at acpi0: critical temperature is 127 degC
> > acpitz1 at acpi0: critical temperature is 99 degC
> > acpibtn0 at acpi0: LID_
> > acpibtn1 at acpi0: SLPB
> > "PNP0A08" at acpi0 not configured
> > acpicmos0 at acpi0
> > "IBM0071" at acpi0 not configured
> > "ATM1200" at acpi0 not configured
> > acpibat0 at acpi0: BAT0 model "COMPATIBLE" serial44 type LION oem
> > "SANYO"
> > acpiac0 at acpi0: AC unit online
> > acpithinkpad0 at acpi0: version 1.0
> > acpidock0 at acpi0: GDCK not docked (0)
> > acpivideo0 at acpi0: VID_
> > acpivout0 at acpivideo0: LCD0
> > acpivideo1 at acpi0: VID_
> > bios0: ROM list: 0xc/0xea00! 0xcf000/0x1000 0xd/0x1000
> > 0xdc000/0x4000! 0xe/0x1!
> > cpu0: Enhanced SpeedStep 1829 MHz: speeds: 1833, 1333, 1000 MHz
> > pci0 at mainbus0 bus 0: configuration mode 1 (bios)
> > pchb0 at pci0 dev 0 function 0 "Intel 82945GM Host" rev 0x03
> > inteldrm0 at pci0 dev 2 function 0 "Intel 82945GM Video" rev 0x03
> > drm0 at inteldrm0
> > intagp0 at inteldrm0
> > agp0 at intagp0: aperture at 0xd000, size 0x1000
> 

Re: Keyboard knocks out while using special keys

2020-08-23 Thread Chris Bennett
On Sat, Aug 22, 2020 at 08:01:43PM -, Dimitri Karamazov wrote:
> I'm using a keyboard with some multimedia keys and sleep, poweroff buttons.
> I avoid using those, but accidently hitting any of those keys renders the
> keyboard to a freezed state, where only solution is to replug to use it again.
> This is the case on both X11 and vt, but the connection is never lost, when I
> hit the special keys, it just takes no input. Is there a solution to this?
> 
If you have a second keyboard, I would suggest attaching both.
There is a program that shows which keys are producing what output.
I would see what is actually being sent out with those keys.
The second keyboard would allow you to hopefully experiment a bit more
without having to re-attach the problem keyboard.

Did you have problems before with this keyboard?
I have a keyboard that frequently fails to attach at boot. unplugging
and reattaching it is often necessary after boot, but only sometimes.

Good luck,
Chris Bennett




Re: X11 VESA Driver Config Question

2020-08-11 Thread Chris Bennett
Oh, I'm "glad" someone else is having the same problem. (Sorry)
I had gotten to the point of assuming a hardware problem.
Being able to rule that out is nice.
At least there is hope in getting a fix.
I'm really not in a position to buy another one. $$ missing.

If any developer could get me a replacement, I will gladly send mine.
This is a pretty crappy laptop, so anything used and not very powerful
fits my needs. I'm doing my porting work off of my servers anyway.

Firefox, vim and lightweight use of something like gimp occasionally are
all I need

==
Thinking about it, my servers are i386 running amd64. Would that be OK
to run a build off of and install on the laptop?
I have one that I could interrupt that way.
======


Chris Bennett




Re: X11 VESA Driver Config Question

2020-08-11 Thread Chris Bennett
On Tue, Aug 11, 2020 at 08:17:01PM -0400, Jon Fineman wrote:
> I just upgraded from 6.6 to snapshot via sysupgrade -s
> 
> After reboot I get the various emails the upgrade goes fine, no errors,
> the firmware is upgraded.
> 
> About 30 seconds after I get the login prompt the laptop powers off.
> 
> I turned in on and at the boot prompt typed boot -c and disable amdgpu 
> Subjectively I got more than 30 seconds after the boot prompt. I was
> able to log in and look around a bit and it powered off.
> 
> Same thing with booting into single user mode.
> 
> Thoughts? Suggestions on how to get any data?
> 
> Jon
> 

sysctl.conf needs
machdep.allowaperture=2

if you can't mount from another computer, burn 6.6 onto a USB stick and
mount from that. Don't even try from running -current.
You can probably get /var/run/dmesg.boot. Plus /var/log/Xorg.0.log if
you manage to get to X. (Good luck with that :-{ )

I was given advice in the past to build with a certain change, but I was
unable to build that on my laptop due to very little memory.

There is newer firmware, X, etc.. Hopefully someone will chime in with
something to try for a build

Chris Bennett

> 
> 
> On Mon, 10 Aug 2020 20:28:34 -0500
> Chris Bennett  wrote:
> 
> > On Sun, Aug 09, 2020 at 10:02:24PM -0400, Jon Fineman wrote:
> > > I have an Acer Aspire A315 laptop that freezes every once in a
> > > while. I think it is GPU related, but have not been able to get any
> > > logs. In addition a while ago (roughly when 6.7 came out) I tried
> > > to upgrade from 6.6 to 6.7 and the laptop would turn off just after
> > > getting the log in prompt. Again no logs.
> > > 
> > > One thought was in my xorg.conf file to change the driver from
> > > AMDGPU to vesa. However that is producing an error. Log and dmesg
> > > below.
> > > 
> > > Any thoughts on how to proceed?
> > >   
> > 
> > There is an excellent chance that we have the same problem.
> > I was running -current for a long while, when I had the same problem
> > with sudden unexpected shutdown. This was a good while back.
> > I have 50GB of install66.iso from current back then. They are on one
> > of my servers. Unfortunately, I just don't have access to enough
> > bandwidth or data to download them to hopefully find the date that
> > there was a change that messed things up.
> > 
> > Try boot -c then disable amdgpu
> > Might help. Also try boot -s and wait. If it shuts down there too,
> > probably have the same problem. Or not. :-)
> > 
> > I'm stuck at 6.6 -stable for now.
> > 
> > Chris Bennett
> > 
> > 
> > > Thnaks.
> > > 
> > > Jon
> > > 
> > > 
> > > xorg.conf:
> > > Section "Device"
> > > Identifier "graphicsdriver"
> > > #Driver "AMDGPU"
> > > #Option "TearFree" "true"
> > > Driver "vesa"
> > > EndSection
> > > 
> > > 
> > > 
> > > Xorg.0.log:
> > > [124569.415] (--) checkDevMem: using aperture driver /dev/xf86
> > > [124569.425] (--) Using wscons driver on /dev/ttyC4
> > > [124569.446] 
> > > X.Org X Server 1.20.5
> > > X Protocol Version 11, Revision 0
> > > [124569.446] Build Operating System: OpenBSD 6.6 amd64 
> > > [124569.446] Current Operating System: OpenBSD laptop.jonjfineman.me
> > > 6.6 GENERIC.MP#3 amd64 [124569.447] Build Date: 30 July 2020
> > > 11:25:30AM [124569.447]  
> > > [124569.447] Current version of pixman: 0.38.4
> > > [124569.447]  Before reporting problems, check
> > > http://wiki.x.org to make sure that you have the latest version.
> > > [124569.447] Markers: (--) probed, (**) from config file, (==)
> > > default setting, (++) from command line, (!!) notice, (II)
> > > informational, (WW) warning, (EE) error, (NI) not implemented, (??)
> > > unknown. [124569.447] (==) Log file: "/var/log/Xorg.0.log", Time:
> > > Sun Aug  9 05:48:55 2020 [124569.447] (==) Using config file:
> > > "/etc/X11/xorg.conf" [124569.447] (==) Using system config directory
> > > "/usr/X11R6/share/X11/xorg.conf.d" [124569.447] (==) No Layout
> > > section. Using the first Screen section. [124569.447] (==) No
> > > screen section available. Using defaults. [124569.447] (**)
> > > |-->Screen "Default Screen Section" (0) [124569.447] (**) |
> > > |-->Monitor "" [124569.448] (==) No device
> > > specified for sc

Re: X11 VESA Driver Config Question

2020-08-10 Thread Chris Bennett
On Sun, Aug 09, 2020 at 10:02:24PM -0400, Jon Fineman wrote:
> I have an Acer Aspire A315 laptop that freezes every once in a while. I
> think it is GPU related, but have not been able to get any logs. In
> addition a while ago (roughly when 6.7 came out) I tried to upgrade
> from 6.6 to 6.7 and the laptop would turn off just after getting the
> log in prompt. Again no logs.
> 
> One thought was in my xorg.conf file to change the driver from AMDGPU
> to vesa. However that is producing an error. Log and dmesg below.
> 
> Any thoughts on how to proceed?
> 

There is an excellent chance that we have the same problem.
I was running -current for a long while, when I had the same problem
with sudden unexpected shutdown. This was a good while back.
I have 50GB of install66.iso from current back then. They are on one of
my servers. Unfortunately, I just don't have access to enough bandwidth
or data to download them to hopefully find the date that there was a
change that messed things up.

Try boot -c then disable amdgpu
Might help. Also try boot -s and wait. If it shuts down there too,
probably have the same problem. Or not. :-)

I'm stuck at 6.6 -stable for now.

Chris Bennett


> Thnaks.
> 
> Jon
> 
> 
> xorg.conf:
> Section "Device"
> Identifier "graphicsdriver"
> #Driver "AMDGPU"
> #Option "TearFree" "true"
> Driver "vesa"
> EndSection
> 
> 
> 
> Xorg.0.log:
> [124569.415] (--) checkDevMem: using aperture driver /dev/xf86
> [124569.425] (--) Using wscons driver on /dev/ttyC4
> [124569.446] 
> X.Org X Server 1.20.5
> X Protocol Version 11, Revision 0
> [124569.446] Build Operating System: OpenBSD 6.6 amd64 
> [124569.446] Current Operating System: OpenBSD laptop.jonjfineman.me
> 6.6 GENERIC.MP#3 amd64 [124569.447] Build Date: 30 July 2020  11:25:30AM
> [124569.447]  
> [124569.447] Current version of pixman: 0.38.4
> [124569.447]  Before reporting problems, check http://wiki.x.org
>   to make sure that you have the latest version.
> [124569.447] Markers: (--) probed, (**) from config file, (==) default
> setting, (++) from command line, (!!) notice, (II) informational,
>   (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
> [124569.447] (==) Log file: "/var/log/Xorg.0.log", Time: Sun Aug  9
> 05:48:55 2020 [124569.447] (==) Using config file: "/etc/X11/xorg.conf"
> [124569.447] (==) Using system config directory
> "/usr/X11R6/share/X11/xorg.conf.d" [124569.447] (==) No Layout section.
>  Using the first Screen section. [124569.447] (==) No screen section
> available. Using defaults. [124569.447] (**) |-->Screen "Default Screen
> Section" (0) [124569.447] (**) |   |-->Monitor ""
> [124569.448] (==) No device specified for screen "Default Screen
> Section". Using the first device section listed.
> [124569.448] (**) |   |-->Device "graphicsdriver"
> [124569.448] (==) No monitor specified for screen "Default Screen
> Section". Using a default monitor configuration.
> [124569.448] (==) Automatically adding devices
> [124569.448] (==) Automatically enabling devices
> [124569.448] (==) Not automatically adding GPU devices
> [124569.448] (==) Max clients allowed: 256, resource mask: 0x1f
> [124569.448] (==) FontPath set to:
>   /usr/X11R6/lib/X11/fonts/misc/,
>   /usr/X11R6/lib/X11/fonts/TTF/,
>   /usr/X11R6/lib/X11/fonts/OTF/,
>   /usr/X11R6/lib/X11/fonts/Type1/,
>   /usr/X11R6/lib/X11/fonts/100dpi/,
>   /usr/X11R6/lib/X11/fonts/75dpi/
> [124569.448] (==) ModulePath set to "/usr/X11R6/lib/modules"
> [124569.448] (II) The server relies on wscons to provide the list of
> input devices. If no devices become available, reconfigure wscons or
> disable AutoAddDevices. [124569.448] (II) Loader magic: 0xc3982ca3000
> [124569.448] (II) Module ABI versions:
> [124569.448]  X.Org ANSI C Emulation: 0.4
> [124569.448]  X.Org Video Driver: 24.0
> [124569.448]  X.Org XInput driver : 24.1
> [124569.448]  X.Org Server Extension : 10.0
> [124569.448] (--) PCI:*(0@0:1:0) 1002:98e4:1025:1192 rev 218, Mem @
> 0xe000/268435456, 0xf000/8388608, 0xf0d0/262144, I/O @
> 0x3000/256, BIOS @ 0x/131072 [124569.448] (II) LoadModule:
> "glx" [124569.449] (II) Loading
> /usr/X11R6/lib/modules/extensions/libglx.so [124569.451] (II) Module
> glx: vendor="X.Org Foundation" [124569.451]   compiled for
> 1.20.5, module version = 1.0.0 [124569.451]   ABI class: X.Org
> Server Extension, version 10.0 [124569.451] (II) LoadModule: "vesa"
> [124569.452] (II) Loading /usr/X11R6/lib/modules/drivers/vesa_drv.so
> [124569.452] 

Re: Suggestions re error: "USB read failed" accessing Infinite Noise TRNG?

2020-06-26 Thread Chris Bennett
On Thu, Jun 25, 2020 at 09:41:41PM +0200, Why 42? The lists account. wrote:
> 
> A quick search on the net didn't show much, apart from a suggestion that
> a USB keyboard won't work at this point because the USB subsystem hasn't
> yet been discovered (that was back in 2015 though). I'm using both a USB
> keyboard and mouse.

That is correct. Just to make sure everybody knows this. It is not
related to your problem.
Stuart's suggestion solves that problem. I have put that (for a
different problem) into my /etc/rc.shutdown. Which survives moving to a
newer snapshot or release.

Chris




Re: www unreachable

2020-06-15 Thread Chris Bennett
On Mon, Jun 15, 2020 at 12:19:09PM +0200, Anders Andersson wrote:
> 
> Are you saying it's working for you? Maybe you have a different route
> to the website because it seems to be down on the Canadian side. I
> presume you're in the US based on your domain name. :)

No, it's not working for me either.
I'm in Austin, TX and not working from my server in Chicago either.

Chris Bennett




Re: www unreachable

2020-06-15 Thread Chris Bennett
On Mon, Jun 15, 2020 at 09:43:03AM +0200, Thomas de Grivel wrote:
> Hello,
> 
> http://www.openbsd.org is unreachable.
> 
> I wanted to know what's new in the current snapshots ?
> 

I'm not sure about the website. You might have local DNS problems.
Use dig to get the IP address (from a big nameserver like 8.8.8.8)
and skip that problem.

If you mean the current -release, yes the website is simplest in
general terms only.

If you mean -current, then the mailing lists and CVS are the right
places to look. misc@ isn't very helpful, but tech@, etc. are excellent.


DNS has problems in some places in the world. Usually just for hours.
Annoying, but sites like OpenBSD have stable IP's and knowing that
solves the problem quickly.
If the site has a problem, someone else can clarify that.

Chris Bennett




Re: Why isn't src included with OpenBSD? (documentation)

2020-05-20 Thread Chris Bennett
I keep seeing people not getting the idea that OpenBSD has more of a
philosophy of users needing to put out their own special efforts at
learning, vs. other OS's.

Do you think that mentioning this on the homepage/FAQ would be useful?

It took me quite a while to understand that myself. Realizing that
brought me a great relief and no longer feeling frustrated.
I found it a bit inspiring and more enthusiastic about the whole
project.

Read the code because you MUST versus because you ought to.
I find that as a path to follow, pridefully.

Chris Bennett




Re: OpenBSD sysupgrade rocks

2020-05-20 Thread Chris Bennett
It is a great tool.

This is a good example of something that anyone witha will can come up
with.

Propose an idea that *YOU* are capable of doing.
Ask if such a thing is actually desirable, it might not be. That's OK.
Do the work, a WIP is OK and submit a diff.
Keep doing the work until usable and see what happens.
You wouldn't have to be a top-notch C or Perl, etc. programmer.

Anyone can help the project. Please do.

Please don't beg for features.
That's very irritating and wastes everyone's time.

Please don't ask for features, once again.
Really, I mean it. Don't ask for features!

:-)

Chris Bennett




Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-12 Thread Chris Bennett
On Tue, May 12, 2020 at 07:17:44AM +0200, i...@aulix.com wrote:
> I would prefer to begin from grsecurity, but it is not available up to date 
> for my budget.
> 
What exactly does your budget mean? These are all free, open source
operating system. You may sell both OpenBSD and any installations and
consulting. That could improve your income for your budget.

> I would also try HardenedBSD, but it is only amd64 now? And how many active 
> developers there are? one or two?
> 

I run two intel based servers with OpenBSD amd64. They run flawlessly.

> OpenBSD looks as the only viable option for me right now, may be one another 
> is a systemd free distro like Devuan with a hardened kernel like by @anthrax, 
> but I am too unskilled even to understand what are improvements of @anthrax 
> kernel for me without a good doc for it in the existence, and on the other 
> hand OpenBSD is famous with its very good documentation. 

Open source means that most developers work for free and fun or to
obtain something they in particular want. Convince some developers to
work on your own desires, whether with OpenBSD or elsewhere.

> 
> I guess it is a huge work to harden Linux installation to a level compared to 
> OpenBSD, there is some interesting work which is by Whonix but unfortunately 
> with systemd, and it seems someone from that community is referring to 
> isopenbsdsecu.re site, so it looks to me like a OpenBSD vs Whonix dispute, 
> excuse me if I am wrong.
>

Linus actively discourages security work. OpenBSD is thrilled to
actively work on security. A major compenent that brings security
benefits is simple auditing of code, not for security but for
correctness.
If you are seeking perfect security, YOU CAN'T HAVE IT!
It is impossible. Not even agencies such as the NSA, etc have it.
Remember Edward Snowden? All systems can be breached. Period.

My suggestion is to stop taking a confrontational attitude ( you may not
even realize you are doing it) and try to take a congenial attitude. It
will always produce more good results than confrontation.

Chris Bennett

PS. Please format your emails to 80 or 72 character width.
Your long lines are mildly irritating and non-standard in the Unix-like
world. Or just hit enter more often.




Re: pkg_add can't resolve package - bad major

2020-05-04 Thread Chris Bennett
On Mon, May 04, 2020 at 08:23:10AM +0200, Marc Espie wrote:
> On Sun, May 03, 2020 at 12:58:41PM -0400, Chris Bennett wrote:
> > I have had this exact same problem before
> > 
> > pkg_info -q > packages_installed
> > pkg_delete gettext.
> > pkg_add gettext-runtime
> > pkg_add -u
> > pkg_add -zl packages_installed
> > 
> Update your procedures, use pkg_info -z and not pkg_add -z.
> It's been there for ages.
> 

My bad. Thanks. That also gives me info I was finding hard to understand
about stems.
Time to sit down and re-read man pages again.

Chris Bennett




Re: pkg_add can't resolve package - bad major

2020-05-03 Thread Chris Bennett
.2.4 sqlite3-3.27.2p0
> Full dependency tree is libnettle-3.4.1p0 python-3.7.4 libassuan-2.5.1p0
> p11-kit-0.23.18.1 nghttp2-1.37.0 sqlite3-3.27.2p0 xz-5.2.4 npth-1.6
> libidn2-2.0.0p0 gmp-6.1.2p3 curl-7.64.1 pinentry-1.1.0p0
> libunbound-1.9.1 gnutls-3.6.7 blas-3.7.1p0 gettext-runtime-0.20.1p0
> libsecret-0.18.8p0 libgcrypt-1.8.4p0 libgpg-error-1.36p0
> libusb1-1.0.21p1 lua-5.1.5p6 p5-Error-0.17025 glib2-2.60.7p0
> libksba-1.3.5p2 gcc-libs-4.9.4p18 libiconv-1.14p3 pcre-8.41p2
> libmagic-5.35 libtasn1-4.13p0 bzip2-1.0.6p9 icu4c-63.1 lapack-3.7.1p0
> luajit-2.0.5p1 libffi-3.2.1p5 cvsps-2.1p2 libunistring-0.9.7
> Can't install w3m-0.5.3p8: can't resolve gettext-runtime-0.20.1p0
> Couldn't find updates for gettext-0.19.8.1p3 git-2.21.0 glib2-2.58.3p8
> gnupg-2.2.12 libgpg-error-1.36 libksba-1.3.5p1 p11-kit-0.23.15p0
> python-2.7.16 python-3.6.8p0 rspamd-1.9.0 vim-8.1.1048-no_x11
> Couldn't install gettext-runtime-0.20.1p0 git-2.24.2 glib2-2.60.7p0
> gnupg-2.2.12p0 libgpg-error-1.36p0 libksba-1.3.5p2 p11-kit-0.23.18.1
> python-2.7.16p1 python-3.6.9 python-3.7.4 rspamd-1.9.4
> vim-8.1.2061-no_x11 w3m-0.5.3p8
> 
> At this stage, I am not sure what should I do to fix this, any idea?
> 
> Installed package:
> dkimproxy-1.4.1p1   SMTP proxy to verify or add DKIM signatures
> dovecot-2.3.5.1 compact IMAP/POP3 server
> dovecot-pigeonhole-0.5.5v0 Sieve mail filtering for Dovecot
> git-2.21.0  GIT - Tree History Storage Tool
> gnupg-2.2.12    GNU privacy guard - a free PGP replacement
> htop-2.2.0p8    interactive process viewer
> intel-firmware-20190918v0 microcode update binaries for Intel CPUs
> mosh-1.3.2p2    mobile shell
> opensmtpd-extras-6.4.0v0 extras for smtpd
> quirks-3.185    exceptions to pkg_add rules
> rspamd-1.9.0    event-driven spam filtering system in C/Lua
> vim-8.1.1048-no_x11 vi clone, many additional features
> 
> $ cat
> /etc/installurl   
>      
> 
> https://cdn.openbsd.org/pub/OpenBSD

I have had this exact same problem before

pkg_info -q > packages_installed
pkg_delete gettext.
pkg_add gettext-runtime
pkg_add -u
pkg_add -zl packages_installed

The gettext changeover always screwed up my pkg_add -u
pkg_delete gettext will uninstall quite a few packages
That will get fixed by using the packages_installed file.
Read man pkg_add first, of course.

Chris Bennett




loading DBD-Pg under base httpd, works but it's wrong way

2020-04-30 Thread Chris Bennett
I've had a hell of a time getting Pg.so to load under base httpd.

env LD_DEBUG=1 chroot /var/www script.pl
gives errors about DynaLoader not being able to load due to a missing
library.

After looking at Postgresql libraries loaded using pg_config --libs
I moved just those libs under /var/www.

Still no luck. However I did get barely enough of a hint with searches
to figure out that it wasn't finding libpq.a and libpq.so.6.11
But those are located under /usr/local/lib. I couldn't figure out how to
push over that directory into the search paths.
So I moved a copy of those under /var/www/usr/lib/ vs
/var/www/usr/local/lib/
Works just fine.

I know that this is the wrong solution, but I'm clueless where and how
to add the right search path.
Any clues would be extremely appreciated!

Chris Bennett




Re: boot drive hide and seek on new notebook

2020-04-28 Thread Chris Bennett
Some BIOS's require you to select legacy boot and legacy boot before
UEFI in order to boot off of a USB. Also might need to turn off boot
security option, too.

A lot of BIOS's suck nowadays. Who woulda thought that examining the
BIOS would become a purchasing decision?

A future BIOS update might make things better, or impossible.
Good news is that you got it to work.

Chris Bennett




Re: UNIX crash course

2020-04-28 Thread Chris Bennett
On Tue, Apr 28, 2020 at 06:48:37PM -, Stuart Henderson wrote:
> Outside of certain network infrastructure (RIRs and DNS software
> vendors) and TLDs offering incentives (.se and .nl, maybe others) DNSSEC
> is still very rare. Do a lookup of a couple of dozen randomly chosen
> general purpose domains - I think you'll be lucky to find more than 1 or
> 2 signed.
> 

I moved my domains from Godaddy to namecheap since they offer DNSSEC.
Very happy. They have free service, no DNSSEC, and paid service with
DNSSEC. And yes, they really are cheap. :-)
You do have to transfer in your domain for DNSSEC.

Chris Bennett




Re: Comments in source code

2020-04-23 Thread Chris Bennett
On Thu, Apr 23, 2020 at 05:38:40PM -0400, Aisha Tammy wrote:
> Thanks a lot for responding, I've had some food so am feeling a lot less
> frustrated :D
> 
> > On 4/23/20 12:10 PM, Stuart Henderson wrote:
> > 
> > It's often considered better if code is clear enough to stand by itself,
> > keeping comments for the less common cases which can't be figured out
> > from reading the code. And that way you aren't at risk of assuming
> 
> But like, not all code is simple enough to understand by just reading it.
> Comments can do more than just explain api, they can help explain 
> how the code itself is working.
> I have been reading diff, sdiff diff3 and other string algorithms to 
> understand
> how to make it as fast as their GNU counterparts and they are not the 
> simplest 
> to read, even when knowing the actual string algorithms pretty well.
> 

If reading the code isn't enough and you see parts you don't understand,
then break those parts. See what happens. Find out why it was done.
You might find out that the code at that spot doesn't even work
correctly. You might figure out a way to fix it or eliminate it.
Perhaps submit a diff.
>From your work, you may be able to ask a very specific question.
Specific questions are more likely to be answered. If someone knows the
answer AND also has the time and desire to help.

You may also find that the old way was great back in older versions of
OpenBSD, but no longer the best way due to changes in the OS.

> > If you aren't already, you should be looking at commit messages from
> > where the relevant code was touched. That is often where you'll find the
> > explanations you seek.
> > 
> I have been reading them, Commit messages don't explain algorithms very 
> clearly.
> I agree this is a very specific use case but definitely something that could 
> be improved.
> Some of the things I've been considering useful (in this specific scenario 
> for diff3)
> - explanation for merge function, what it does
> - in merge function, explain how empty for loop is used, as this is a very 
> big loop
>   with a lot of cases
> 

Are you reading commit messages far enough back in time? OpenBSD is a
fork of NetBSD. Maybe you will need to go back much further in time to
find the commit message or discussion that lead up to today.

I strongly support comments, very strongly. But only when needed.
Explanations are better coming from someone who can discuss with you or
might only be available from you working it out for yourself.
This is a volunteer project. Comments don't get compiled, but they do
take up space, disk space and bandwidth space.

Have fun, work hard and enjoy yourself.
There are some excellent threads about these topics in the mailing
lists.

Chris Bennett




Re: More than 16 partitions

2020-04-23 Thread Chris Bennett
On Thu, Apr 23, 2020 at 10:29:01PM +0200, Francois Pussault wrote:
> I agree ; Using more than 10 partitions is rare  but in case of NFS or other 
> network shares of course.
> 16 is really enough in my point of view.
> 

I've got to disgree with this one. I'm doing porting work.
I yank out all of the directories except /usr/ports itself,
using mk.conf. I then also make another partition /usr/ports/mystuff

umount /usr/ports/mystuff
umount /usr/ports
newfs /usr/ports, etc.
remount /usr/ports, mkdir /usr/ports/mystuff, remount /usr/ports/mystuff
tar xzvf ports.tar.gz into /usr/ports
and I can continue on working, without having lost any work I'm still
examining.

Working with retail equipment at home for a normal desktop. 16 OK
Power often fails or hardware fails.

Working on a server. Power almost never fails, nor the hardware.

At home I run built-in HD, USB flash and USB HD. 16 is no problem with
three HD's. I can ro lots of stuff and I need to.

I'm not doing any porting at home, only on server hardware. Too tired of
reliability issues at home.

That's just what I(me)thinks. |-}

There be-is-are some very good, cheap, rugged and waterproof USB HD's out
there. Very portable(s).

Bye,
Chris




Re: X start failure - OpenGL Version

2020-04-06 Thread Chris Bennett
On Mon, Apr 06, 2020 at 02:23:20PM +0200, Riccardo Mottola wrote:
> Hi Marcus,
> 
> Marcus MERIGHI wrote:
> > Hello Riccardo, 
> >
> > startx(1) had it's setuid bit removed. I think in the timeframe you are
> > upgrading over. The canonical advice is to use xenodm(1).
> >
> > Marcus
> >
> 
> exactly, that was it... the error message wasn't that helpful.
> 
> xenodm works.. but since I prefer to run X11 "when I need it" on that
> machine, I just +s startx and it works fine too.
> 

Uh, no.

When you need it.
doas rcctl -f start xenodm
-f is to force it without enabling it in /etc/rc.conf.local

You can also turn it off when done with X, but not going to shutdown.

Chris




Re: Faking the same LAN over the Internet

2020-04-01 Thread Chris Bennett
On Wed, Apr 01, 2020 at 07:01:15AM -0600, Diana Eichert wrote:
> have you considered looking at native OpenBSD tools?
> 
> https://man.openbsd.org/egre.4
> 

Wow! I had no idea about this.
The manual page seems to be very clear, too.

I have 2 servers at different ISPs and from home I almost always connect
over my phone's hotspot.

I will definitely be learning this!

Thanks!

Chris Bennett




Re: MITM ?

2020-03-26 Thread Chris Bennett
On Wed, Mar 25, 2020 at 11:06:57PM +, Cord wrote:
> 
> > Read a LOT of man pages and misc@ tech@ ports@ bugs@
> >
> > Maybe even tell us which version of VAX your laptop runs on?
> 
> VAX ???
> 
> > Is it OpenBSD version 4.9?
> >
> 
> 4.9 ???
> 
> I'm sorry, I'm in the future.

But, my joking aside, you haven't provided much info for giving advice.

They have now found out that a huge number of commercial VPN companies
are both running tracker software and selling your data.
Worse, many are running session recording which could be making your
passwords stealable.

In the USA, ISP's like Comcast have opened up all customers rented
routers to the full public without the need for a password.
If that is your case, your private network isn't private.

If your laptop is Intel based, turn off HT/SMT.
Run syspatch and pkg_add -u.
Look at all of your logs in detail.

Use NoScript and Ghostery plugins for Firefox.
Assume that someone might be physically accessing your laptop.
The laws in the USA since 9/11 allow this to be done without you being
told.

Good luck, hopefully you are not having this problem, but paranoia is a
good thing in today's world.

Chris Bennett




  1   2   3   4   5   6   7   >