pdftotext

[soko.tica]

Hallo list,

There used to be pdftotext package, but I couldn't have found him now. I am
running OpenBSD -stable 7.4 amd64.

I guess it is located in some other package, but can't find it.

Please let me now which package I should install. Thanks in advance.

Re: OpenBSD_one_site_web_hosting_software_recommendation

[soko.tica]

Many thanks to everyone who responded. I mean it, really.


On Thu, Nov 9, 2023 at 8:57 PM Todd  wrote:

> https://www.tiltedwindmillpress.com/product/httpd-and-relayd-mastery/
>
> An older book, but it has detailed setup of php applications on OpenBSD
>
> On Thu, Nov 9, 2023 at 5:40 AM soko.tica  wrote:
>
> > Hello,
> >
> > I have a task to launch from scratch one site web hosting google cloud
> > instance.
> >
> > I know OpenBSD does have httpd web server, but I couldn't have found
> > neither wordpress nor joomla software neither in packages nor in ports
> (7.4
> > -stable).
> >
> > Is there a possibility to launch wordpress or joomla on such an instance
> on
> > OpenBSD? Which manpages should I read?
> > Thanks in advance,
> >
>

OpenBSD_one_site_web_hosting_software_recommendation

[soko.tica]

Hello,

I have a task to launch from scratch one site web hosting google cloud
instance.

I know OpenBSD does have httpd web server, but I couldn't have found
neither wordpress nor joomla software neither in packages nor in ports (7.4
-stable).

Is there a possibility to launch wordpress or joomla on such an instance on
OpenBSD? Which manpages should I read?
Thanks in advance,

Re: encrypted_hdd_data_recovery(OpenBSD_7.3)

[soko.tica]

Thanks to all
# bioctl -c C -l /dev/sd0a softraid0
did solve the problem.

On Sat, Jul 1, 2023 at 11:54 PM Nick Holland 
wrote:

> On 6/30/23 08:30, soko.tica wrote:
> > Thanks NIck,
> >
> > How do I exactly try to unlock the disk with bioctl command?
> >
> > I do not have the appropriate disk to try to rebuild it.
> >
> > I am trying it from openbsd 6.9 bootable usb. The encrypted hdd was 7.3.
>
> don't do that.
> I'm not aware of any incompatibilities between 7.3 and 6.9, but I'm not
> going to look, it just isn't a good idea.  Bring your 6.9 box up to 7.3,
> then do it.
>
>
> But ... after you upgrade your recovery machine to 7.3, let's assume
> your drive you are after is sd2, and the encrypted drive is partition d
> (note there are two assumptions there, hopefully my example is wrong,
> and you have to understand what I'm suggesting here before blindly
> doing it!) :
>
>#  bioctl -c C -l /dev/sd2d softraid0
>
> at that point, it will prompt you for your passphrase, and if you enter
> that correctly and the disk is intact, it will create a new "drive",
> which will have its own disklabel, and you can mount those partitions.
>
> Nick.
>
> >
> > Please.
> >
> > Thanks in advance
> >
> >
> > On Sat, Jun 17, 2023 at 4:33 PM Nick Holland <
> n...@holland-consulting.net>
> > wrote:
> >
> >> On 6/17/23 08:40, soko.tica wrote:
> >> > Hello list,
> >> >
> >> > I have managed to screw by
> >> > #fsck_ffs /dev/sd1a
> >> >
> >> > the root partition of my unmounted HDD (OpenBSD 7.3 stable, possibly
> not
> >> > fully updated). It crashed during boot due to the power outage, than
> it
> >> was
> >> > unable to boot and required fsck_ffs, and I answered 'F' to the 'Fyn'
> >> > prompt.
> >> >
> >> > Here is the present status of it (it is sd0 in this sequence).
> >> > ===
> >> > Script started on Sat Jun 17 12:26:43 2023
> >> > think# disklabel sd0
> >> >
> >> > # /dev/rsd0c:
> >> > type: SCSI
> >> > disk: SCSI disk
> >> > label: HGST HTS725050A7
> >> > duid: 35e70751b7e36f98
> >> > flags:
> >> > bytes/sector: 512
> >> > sectors/track: 63
> >> > tracks/cylinder: 255
> >> > sectors/cylinder: 16065
> >> > cylinders: 60801
> >> > total sectors: 976773168
> >> > boundstart: 64
> >> > boundend: 976768065
> >> > drivedata: 0
> >> >
> >> > 16 partitions:
> >> > #size   offset  fstype [fsize bsize   cpg]
> >> >a:976768001   64RAID
> >> >c:9767731680  unused
> >> > think# ^D
> >> >
> >> >
> >> > Script done on Sat Jun 17 12:26:54 2023
> >> > ===
> >>
> >> this is as I'd expect.  but you aren't showing what happens
> >> when you try to unlock it   I understand you have a problem,
> >> but you haven't told us what it is.
>
> I was corrected off-list here.  You told us the problem, the
> problem is "no backup"
>
> >>
> >> If you have a problem when unlocking the disk with the bioctl
> >> command, you probably aren't going to get your data back.
> >>
> >> If you can get the drive unlocked and available as another
> >> logical drive, you will probably have to fsck each partition
> >> within it.  Hopefully any horrible problems here would be
> >> contained to individual partitions, and you can pull data off
> >> the rest.
> >> ...
> >>
> >> > Naturally, there is data there, and naturally, I have no backup of
> it. Of
> >> > course I do know the passphrase, it is my hdd.
> >>
> >> this is what we call a learning experience.
> >>
> >> > If there is any chance to recover it, please let me know.
> >>
> >> chance, maybe.  But almost by design, encrypted storage is more
> >> fragile than unencrypted storage.
> >>
> >> Nick.
> >>
> >>
>
>

Re: encrypted_hdd_data_recovery(OpenBSD_7.3)

[soko.tica]

Thanks NIck,

How do I exactly try to unlock the disk with bioctl command?

I do not have the appropriate disk to try to rebuild it.

I am trying it from openbsd 6.9 bootable usb. The encrypted hdd was 7.3.

Please.

Thanks in advance


On Sat, Jun 17, 2023 at 4:33 PM Nick Holland 
wrote:

> On 6/17/23 08:40, soko.tica wrote:
> > Hello list,
> >
> > I have managed to screw by
> > #fsck_ffs /dev/sd1a
> >
> > the root partition of my unmounted HDD (OpenBSD 7.3 stable, possibly not
> > fully updated). It crashed during boot due to the power outage, than it
> was
> > unable to boot and required fsck_ffs, and I answered 'F' to the 'Fyn'
> > prompt.
> >
> > Here is the present status of it (it is sd0 in this sequence).
> > ===
> > Script started on Sat Jun 17 12:26:43 2023
> > think# disklabel sd0
> >
> > # /dev/rsd0c:
> > type: SCSI
> > disk: SCSI disk
> > label: HGST HTS725050A7
> > duid: 35e70751b7e36f98
> > flags:
> > bytes/sector: 512
> > sectors/track: 63
> > tracks/cylinder: 255
> > sectors/cylinder: 16065
> > cylinders: 60801
> > total sectors: 976773168
> > boundstart: 64
> > boundend: 976768065
> > drivedata: 0
> >
> > 16 partitions:
> > #size   offset  fstype [fsize bsize   cpg]
> >a:976768001   64RAID
> >c:9767731680  unused
> > think# ^D
> >
> >
> > Script done on Sat Jun 17 12:26:54 2023
> > ===
>
> this is as I'd expect.  but you aren't showing what happens
> when you try to unlock it   I understand you have a problem,
> but you haven't told us what it is.
>
> If you have a problem when unlocking the disk with the bioctl
> command, you probably aren't going to get your data back.
>
> If you can get the drive unlocked and available as another
> logical drive, you will probably have to fsck each partition
> within it.  Hopefully any horrible problems here would be
> contained to individual partitions, and you can pull data off
> the rest.
> ...
>
> > Naturally, there is data there, and naturally, I have no backup of it. Of
> > course I do know the passphrase, it is my hdd.
>
> this is what we call a learning experience.
>
> > If there is any chance to recover it, please let me know.
>
> chance, maybe.  But almost by design, encrypted storage is more
> fragile than unencrypted storage.
>
> Nick.
>
>

encrypted_hdd_data_recovery(OpenBSD_7.3)

[soko.tica]

Hello list,

I have managed to screw by
#fsck_ffs /dev/sd1a

the root partition of my unmounted HDD (OpenBSD 7.3 stable, possibly not
fully updated). It crashed during boot due to the power outage, than it was
unable to boot and required fsck_ffs, and I answered 'F' to the 'Fyn'
prompt.

Here is the present status of it (it is sd0 in this sequence).
===
Script started on Sat Jun 17 12:26:43 2023
think# disklabel sd0

# /dev/rsd0c:
type: SCSI
disk: SCSI disk
label: HGST HTS725050A7
duid: 35e70751b7e36f98
flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 255
sectors/cylinder: 16065
cylinders: 60801
total sectors: 976773168
boundstart: 64
boundend: 976768065
drivedata: 0

16 partitions:
#size   offset  fstype [fsize bsize   cpg]
  a:976768001   64RAID
  c:9767731680  unused
think# ^D


Script done on Sat Jun 17 12:26:54 2023
===

It was created as per the instructions here
https://www.openbsd.org/faq/faq14.html#softraidFDE possibly during 6.9, or
7.0.

Naturally, there is data there, and naturally, I have no backup of it. Of
course I do know the passphrase, it is my hdd.

If there is any chance to recover it, please let me know.

Regards,

a seasoned noob user

Soko Tica

Re: Question how to delete somewhat encrypted partisions / softraid?

[soko.tica]

Thanks to all who responded. It was accurate, dd solved the problem.

On Fri, Mar 25, 2022 at 7:13 PM pascal  wrote:

>
> did you try to encrypt and install with MBR boot?
>
> Mar 25, 2022, 09:28 by soko.t...@gmail.com:
>
> > Hello list,
> >
> > I have tried to encrypt disk before the installation of OpenBSD 7.0
> > according to the instructions here
> > https://www.openbsd.org/faq/faq14.html#softraid and managed to mess it.
> >
> > I have performed
> >
> > # cd /dev && sh MAKEDEV sd0
> > # fdisk -iy -g -b 960 sd0
> > # disklabel -E sd0
> > Label editor (enter '?' for help at any prompt)
> > sd0> a a
> > offset: [64]
> > size: [39825135] *
> > FS type: [4.2BSD] RAID
> > sd0*> w
> > sd0> q
> > No label changes.
> > # bioctl -c C -l sd0a softraid0
> >
> > But I have failed to proceed before the installation with
> >
> > # cd /dev && sh MAKEDEV sd1
> > # dd if=/dev/zero of=/dev/rsd1c bs=1m count=1
> >
> > So i ended up with unbootable install.
> >
> > The disk is shown
> >
> > # disklabel sd0
> > # /dev/rsd0c:
> > type: SCSI
> > disk: SCSI disk
> > label: HGST HTS725050A7
> > duid: f62d9ae29f67d326
> > flags:
> > bytes/sector: 512
> > sectors/track: 63
> > tracks/cylinder: 255
> > sectors/cylinder: 16065
> > cylinders: 60801
> > total sectors: 976773168
> > boundstart: 1024
> > boundend: 976773135
> > drivedata: 0
> >
> > 16 partitions:
> > #size   offset  fstype [fsize bsize   cpg]
> >  a:976772111 1024RAID
> >  c:9767731680  unused
> >  i:  960   64   MSDOS
> >
> > #fdisk sd0
> > Disk: sd0   Usable LBA: 34 to 976773134 [976773168 Sectors]
> >  #: type [   start: size ]
> > 
> >  0: EFI Sys  [  64:  960 ]
> >  1: OpenBSD  [1024:976772111 ]
> >
> >
> > Is it safe to delete all somewhat encrypted partitions by
> > # fdisk -iy sd0
> > ?
> >
> > Should I perhaps first delete somewhat encrypted partitions by
> >
> > # disklabel -E sd0
> >
> > d a
> > d i
> >
> > ?
> >
> > Thank you in advance for your answers.
> >
>
>

Question how to delete somewhat encrypted partisions / softraid?

[soko.tica]

Hello list,

I have tried to encrypt disk before the installation of OpenBSD 7.0
according to the instructions here
https://www.openbsd.org/faq/faq14.html#softraid and managed to mess it.

I have performed

# cd /dev && sh MAKEDEV sd0
# fdisk -iy -g -b 960 sd0
# disklabel -E sd0
Label editor (enter '?' for help at any prompt)
sd0> a a
offset: [64]
size: [39825135] *
FS type: [4.2BSD] RAID
sd0*> w
sd0> q
No label changes.
# bioctl -c C -l sd0a softraid0

But I have failed to proceed before the installation with

# cd /dev && sh MAKEDEV sd1
# dd if=/dev/zero of=/dev/rsd1c bs=1m count=1

So i ended up with unbootable install.

The disk is shown

# disklabel sd0
# /dev/rsd0c:
type: SCSI
disk: SCSI disk
label: HGST HTS725050A7
duid: f62d9ae29f67d326
flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 255
sectors/cylinder: 16065
cylinders: 60801
total sectors: 976773168
boundstart: 1024
boundend: 976773135
drivedata: 0

16 partitions:
#size   offset  fstype [fsize bsize   cpg]
  a:976772111 1024RAID
  c:9767731680  unused
  i:  960   64   MSDOS

#fdisk sd0
Disk: sd0   Usable LBA: 34 to 976773134 [976773168 Sectors]
   #: type [   start: size ]

   0: EFI Sys  [  64:  960 ]
   1: OpenBSD  [1024:976772111 ]


Is it safe to delete all somewhat encrypted partitions by
# fdisk -iy sd0
?

Should I perhaps first delete somewhat encrypted partitions by

# disklabel -E sd0

d a
d i

?

Thank you in advance for your answers.

Re: Question about cryptography software compatibility on OpenBSD

[soko.tica]

Thank you Janne.

On Fri, Oct 15, 2021 at 3:57 PM Janne Johansson  wrote:

> > > > 3) Providers of public digital signatures offer software (a
> > > > one-size-fits-all Java “blob”) that should add cryptography
> capabilities
> > > to
> > > > the operating system.
>
> > >
> > > This is important. Thank you. Let me rephrase my wild guess:
> >
> > 3.1) An OS (OpenBSD or other) may have cryptography capabilities included
> > in the kernel.
>
> Yes.
>
> > 3.2) An OS that doesn't have cryptography capabilities included in the
> > kernel may provide cryptography software, not being included in the
> kernel,
> > fit and apt for use on the specific OS.
>
> This is where you seem to be missing that LOTS AND LOTS of programs use
> crypto from external libraries.
> They call openssl, they use NSS/NSPR, programs link against
> gnutls, java code use java libs, go code use go crypto and so on.
>
> > 3.3) Forcing the blind use of proprietary
> > java-crypto-one_size_fits_all-blob is technically possible, but it is a
> bad
> > practice since:
> > 3.3.1) it may downgrade crypto functionality existing in an OS as
> described
> > under 3.1 and 3.2
> > 3.3.2) it may compromise and expose to the attacks not only the digital
> > signature, but the operating system itself
> > 3.3.3) for a number of other reasons (updates, licensing issues, etc.)
>
> Those last subpoints work both ways.
>
> A brought-along crypto primitive can be controlled by
> the person installing the program in ways you can't with the OS,
> so it is, like so much else, a tradeoff. If you don't control the OS and
> what
> crypto primitives it has, bringing along your own might be "safer" than to
> trust some OS to have a stable interface forever and ever.
>
>
> --
> May the most significant bit of your life be positive.
>

Re: Question about cryptography software compatibility on OpenBSD

[soko.tica]

Please don't add my e-mail address in replying, I am subscribed to @misc
(for more than a decade).

On Fri, Oct 15, 2021 at 11:14 AM Janne Johansson 
wrote:

> Den fre 15 okt. 2021 kl 11:01 skrev soko.tica :
> > Hello list,
> > I have a question about cryptography software compatibility on OpenBSD.
> > I have a wild guess about the answer, but I need it to be more reliable.
> > The target audience are lawyers, since I want to launch a legal battle in
>
> Then you need lawyer-speak, not answers from technical people.
> Those two overlap very little.
>
> Please let me worry about the lawyer-speak. All I need is to properly
understand what I am telling to other lawyers (more precisely, to Judges of
Constitutional Court of Serbia).


> > My wild guess is as follows:
> > 1) OpenBSD includes cryptography capabilities/software in its kernel.
>
> yes, some.
>
> > 2) Most other operating systems had not included cryptography
> > capabilities/software in its kernel.
>
> Depends on when "had" is in time. Nowadays, they probably all do.
>

Thanks, but it is not of essential importance. Consider this "historical"
part closed.


> > 3) Providers of public digital signatures offer software (a
> > one-size-fits-all Java “blob”) that should add cryptography capabilities
> to
> > the operating system.
>
> No, they don't add it to the OS, they expose crypto functionality to
> other programs. Big difference.
>
> I know of no OS that would reach out to java in order to get crypto
> inside the kernel, and if it's not in the kernel, then any other
> random program would not necessarily pick up that there is a bad/evil
> blob installed somewhere that gives you poor crypto unless it actively
> looks for it, so just by adding java-crypto-something in a folder it
> might not be used by anything else that doesn't specifically ask for
> exactly this.
>
> This is important. Thank you. Let me rephrase my wild guess:

3.1) An OS (OpenBSD or other) may have cryptography capabilities included
in the kernel.
3.2) An OS that doesn't have cryptography capabilities included in the
kernel may provide cryptography software, not being included in the kernel,
fit and apt for use on the specific OS.
3.3) Forcing the blind use of proprietary
java-crypto-one_size_fits_all-blob is technically possible, but it is a bad
practice since:
3.3.1) it may downgrade crypto functionality existing in an OS as described
under 3.1 and 3.2
3.3.2) it may compromise and expose to the attacks not only the digital
signature, but the operating system itself
3.3.3) for a number of other reasons (updates, licensing issues, etc.)





> > 4) OpenBSD doesn’t allow such technically inferior software to meddle
> with
> > its superior cryptography capabilities included in kernel.
>
> Value added statement, and mostly irrelevant to court cases I guess.
>

Again, let me worry about the lawyer-speak. Please.

>
> > 5) The proper technical solution would be that providers of public
> digital
> > signatures offer digital signatures adjusted to OpenBSD technical
> > solutions, including offering software not being under the minimal
> > cryptography standards of OpenBSD. (A side note, hash function of all
> > offered public digital signatures in Serbia are SHA-1.)
> > Am I somewhere wrong in my wild guess?
>
> Yes, you are assuming too much in the last part.
>
> It is not impossible for other OSes to have
> better,faster,more-formally-verified,more-legal-where-I-am-located
> crypto routines in their OSes which might be a preferred solution
> somewhere.
> While openbsd has the crypto it requires for its needs, those needs
> are not guaranteed to (always) overlap with all the other requirements
> that are set in different places around the world. One example could
> be russian computers wanting certain algorithms like GOST in various
> forms, or US computers needing FIPS-140 validation even if that in
> certain cases lowers the overall security (hard to get fixes and
> patches into such a setup)
>

Many thanks for this.

How should I define that there is a need for completely inter-operable
digital signatures? The ones that comply with the applicable standards, but
completely free from imposition of any particular software of any specific
software-producer?


> --
> May the most significant bit of your life be positive.
>

Re: Question about cryptography software compatibility on OpenBSD

[soko.tica]

Thanks infoomatic,

I am not trying to certify a specific platform for the use for digital
signatures in Serbia.

I am trying to legally challenge the restrictions existing and occurring in
Serbia, effectively directly imposing the use of Adobe Software (which I
cannot use on OpenBSD) and indirectly imposing the use of OSes that Adobe
software supports.

I want to make the legislators clearly state the standards and offer
completely inter-operable solutions. I want to be able to use digital
signatures/certificates/digital_seal both as an individual and as a law
office on OpenBSD.

I need help to properly define my petition.

On Fri, Oct 15, 2021 at 12:10 PM infoomatic  wrote:

> I agree with Janne. Almost always it is more of a compliance topic than
> a technical topic.
>
> I did work for  where we provided crypto/digital signature
> stuff to government and institutions I won't name, and e.g. the
> constraint for choosing an operating system for a platform was almost
> always certification, e.g. at least EAL4 ... certified hardware to
> certified software, everything in a chain. So if you are ready to take a
> bunch of cash approach a hardware manufacturer and a certification
> authority and get your whole platform certified, then you can sell it to
> big corps and govs - thats sad, but the way you have to go.
>
> Good luck!
>
>
> On 15.10.21 11:14, Janne Johansson wrote:
> > Den fre 15 okt. 2021 kl 11:01 skrev soko.tica :
> >> Hello list,
> >> I have a question about cryptography software compatibility on OpenBSD.
> >> I have a wild guess about the answer, but I need it to be more reliable.
> >> The target audience are lawyers, since I want to launch a legal battle
> in
> > Then you need lawyer-speak, not answers from technical people.
> > Those two overlap very little.
> >
> >> My wild guess is as follows:
> >> 1) OpenBSD includes cryptography capabilities/software in its kernel.
> > yes, some.
> >
> >> 2) Most other operating systems had not included cryptography
> >> capabilities/software in its kernel.
> > Depends on when "had" is in time. Nowadays, they probably all do.
> >
> >> 3) Providers of public digital signatures offer software (a
> >> one-size-fits-all Java “blob”) that should add cryptography
> capabilities to
> >> the operating system.
> > No, they don't add it to the OS, they expose crypto functionality to
> > other programs. Big difference.
> >
> > I know of no OS that would reach out to java in order to get crypto
> > inside the kernel, and if it's not in the kernel, then any other
> > random program would not necessarily pick up that there is a bad/evil
> > blob installed somewhere that gives you poor crypto unless it actively
> > looks for it, so just by adding java-crypto-something in a folder it
> > might not be used by anything else that doesn't specifically ask for
> > exactly this.
> >
> >> 4) OpenBSD doesn’t allow such technically inferior software to meddle
> with
> >> its superior cryptography capabilities included in kernel.
> > Value added statement, and mostly irrelevant to court cases I guess.
> >
> >> 5) The proper technical solution would be that providers of public
> digital
> >> signatures offer digital signatures adjusted to OpenBSD technical
> >> solutions, including offering software not being under the minimal
> >> cryptography standards of OpenBSD. (A side note, hash function of all
> >> offered public digital signatures in Serbia are SHA-1.)
> >> Am I somewhere wrong in my wild guess?
> > Yes, you are assuming too much in the last part.
> >
> > It is not impossible for other OSes to have
> > better,faster,more-formally-verified,more-legal-where-I-am-located
> > crypto routines in their OSes which might be a preferred solution
> > somewhere.
> > While openbsd has the crypto it requires for its needs, those needs
> > are not guaranteed to (always) overlap with all the other requirements
> > that are set in different places around the world. One example could
> > be russian computers wanting certain algorithms like GOST in various
> > forms, or US computers needing FIPS-140 validation even if that in
> > certain cases lowers the overall security (hard to get fixes and
> > patches into such a setup)
> >
>
>

Question about cryptography software compatibility on OpenBSD

[soko.tica]

Hello list,


I have a question about cryptography software compatibility on OpenBSD.


I have a wild guess about the answer, but I need it to be more reliable.
The target audience are lawyers, since I want to launch a legal battle in
Serbia for equal opportunities for using open source software, specifically
OpenBSD, but other open source software as well (yes, including other
*BSDs, OpenIndiana and Linux), for creating, administering and using public
digital certificates/signatures by public authorities, against offerred
proprietary solutions, all of which are not interoperable with OpenBSD.


My wild guess is as follows:


1) OpenBSD includes cryptography capabilities/software in its kernel.


2) Most other operating systems had not included cryptography
capabilities/software in its kernel.


3) Providers of public digital signatures offer software (a
one-size-fits-all Java “blob”) that should add cryptography capabilities to
the operating system.


4) OpenBSD doesn’t allow such technically inferior software to meddle with
its superior cryptography capabilities included in kernel.


5) The proper technical solution would be that providers of public digital
signatures offer digital signatures adjusted to OpenBSD technical
solutions, including offering software not being under the minimal
cryptography standards of OpenBSD. (A side note, hash function of all
offered public digital signatures in Serbia are SHA-1.)


Am I somewhere wrong in my wild guess?


Do you have any input?


Thanks in advance.

Re: how to properly rebuild or delete crypto softraid?

[soko.tica]

Thank you for your input and sorry about the delay.

I realize now that my question was poorly documented and promise that I
will produce ddb report next time if the crash occurs.

Meanwhile, I have managed to safely remove the encrypted partition with
$doas bioctl -d sdX. That was all what I was trying to achieve at this
point.

I believe FAQ https://www.openbsd.org/faq/faq14.html#softraid would benefit
if such an explicit line about properly removing/destroying
encypted/"ordinary"RAID is added to it.

Many thanks, again

On Fri, Dec 15, 2017 at 10:30 AM, Stuart Henderson <s...@spacehopper.org>
wrote:

> On 2017-12-13, soko.tica <soko.t...@gmail.com> wrote:
> > I have successfully built an encrypted bootable usb according to the
> > instructions https://www.openbsd.org/faq/faq14.html#softraidFDE
> >
> > After booting successfully several times, the device went to ddb after I
> > installed chrome without previously adding xfonts during the install.
> > Subsuequent attempts to boot were unsuccessfull.
> >
> > I have erased partitions by disklabel and fdisk and tried to repeat the
> > installation process. However, the encrypted raid device appeared and I
> was
> > able to unlock it by the same passphrase, so I ceased the installation.
> >
> > Is it possible to delete the crypto raid properly at this stage? Should I
> > tri to rebuild it?
> >
> > Any advice is appreciated.
> >
> > Thanks in advance.
> >
>
> You can use dd to write zeroes over the start of the device to overwrite
> the partition table and disklabel, I'm not surehow far you have to go
> but would expect "dd if=/dev/zero of=/dev/rsdXc bs=1m count=8" to do
> the trick (with the correct disk number here ^ obviously).
>
> No idea why it would have gone to ddb, your report is very lacking in
> information!
>
>
>

how to properly rebuild or delete crypto softraid?

[soko.tica]

I have successfully built an encrypted bootable usb according to the
instructions https://www.openbsd.org/faq/faq14.html#softraidFDE

After booting successfully several times, the device went to ddb after I
installed chrome without previously adding xfonts during the install.
Subsuequent attempts to boot were unsuccessfull.

I have erased partitions by disklabel and fdisk and tried to repeat the
installation process. However, the encrypted raid device appeared and I was
able to unlock it by the same passphrase, so I ceased the installation.

Is it possible to delete the crypto raid properly at this stage? Should I
tri to rebuild it?

Any advice is appreciated.

Thanks in advance.

Re: question on proper ownership and permissions of /var/spool and /var/spool/output for printing

[soko.tica]

Mani thanks, Paul, it worked.

On Tue, Oct 3, 2017 at 8:00 AM, Paul de Weerd <we...@weirdnet.nl> wrote:

> Check the path in /etc/printcap and make sure it's correctly set.  You
> want the spool directory (sd) to point at /var/spool/output/lpd.  Note
> that this changed some releases ago.
>
> Permissions there should be:
>
> drwxrwxr-x  2 rootdaemon  512 Sep 15 16:19 .
> drwxr-xr-x  3 rootwheel   512 May 24 14:22 ..
> -rw-rw---x  1 daemon  daemon4 Sep 15 16:18 .seq
> -rw-r-  1 daemon  daemon   32 Sep 15 16:19 lock
> -rw-r--r--  1 daemon  daemon   31 Sep 15 16:19 status
>
> Cheers,
>
> Paul 'WEiRD' de Weerd
>
> On Mon, Oct 02, 2017 at 08:18:21PM +0200, soko.tica wrote:
> | Hello list,
> |
> | Please advise about proper ownership and permissions of /var/spool and
> | /var/spool/output. After every syspatch upgrade I need to set it again to
> | enable printing.
> |
> | Present ownership and permissions after the syspatch upgrade are:
> |
> | Script started on Mon Oct  2 20:10:21 2017
> | $ ls -lh /var/spool/
> | total 16
> | dr-xr-xr-x  5 root  wheel512B Apr  1  2017 ftp
> | drwxrwxr-t  3 root  dialer   512B Apr  1  2017 lock
> | drwxr-xr-x  3 root  wheel512B Sep 19 17:54 output
> | drwx--x--x  8 root  wheel512B Oct  2 18:53 smtpd
> | $ ls -lh /var/spool/output/
> | total 12
> | -rw-r-  1 daemon  daemon27B Sep 19 17:54 lock
> | drwxrwxr-x  2 rootdaemon   512B Apr 1  2017 lpd
> | -rw-rw  1 rootdaemon25B Sep 19 17:53 status
> | $ id branislav
> | uid=1001(branislav) gid=1001(branislav) groups=1001(branislav),
> 1(daemon),
> | 5(operator), 9(wsrc), 117(dialer), 553(_saned)
> | $ dmesg
> | OpenBSD 6.1 (GENERIC.MP) #21: Wed Aug 30 08:21:38 CEST 2017
> | rob...@syspatch-61-amd64.openbsd.org:/usr/src/sys/arch/
> amd64/compile/
> | GENERIC.MP
> | 
> | $ ^D
> |
> | Script done on Mon Oct2 20:10:51 2017
> |
> | Regards,
> |
> | Soko Tica
>
> --
> >[<++>-]<+++.>+++[<-->-]<.>+++[<+
> +++>-]<.>++[<>-]<+.--.[-]
>  http://www.weirdnet.nl/
>

question on proper ownership and permissions of /var/spool and /var/spool/output for printing

[soko.tica]

Hello list,

Please advise about proper ownership and permissions of /var/spool and
/var/spool/output. After every syspatch upgrade I need to set it again to
enable printing.

Present ownership and permissions after the syspatch upgrade are:

Script started on Mon Oct  2 20:10:21 2017
$ ls -lh /var/spool/
total 16
dr-xr-xr-x  5 root  wheel512B Apr  1  2017 ftp
drwxrwxr-t  3 root  dialer   512B Apr  1  2017 lock
drwxr-xr-x  3 root  wheel512B Sep 19 17:54 output
drwx--x--x  8 root  wheel512B Oct  2 18:53 smtpd
$ ls -lh /var/spool/output/
total 12
-rw-r-  1 daemon  daemon27B Sep 19 17:54 lock
drwxrwxr-x  2 rootdaemon   512B Apr 1  2017 lpd
-rw-rw  1 rootdaemon25B Sep 19 17:53 status
$ id branislav
uid=1001(branislav) gid=1001(branislav) groups=1001(branislav), 1(daemon),
5(operator), 9(wsrc), 117(dialer), 553(_saned)
$ dmesg
OpenBSD 6.1 (GENERIC.MP) #21: Wed Aug 30 08:21:38 CEST 2017
rob...@syspatch-61-amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/
GENERIC.MP

$ ^D

Script done on Mon Oct2 20:10:51 2017

Regards,

Soko Tica

Re: starting ssh-agent on ssh login

[soko.tica]

Hi Predrag,

I am not sure that I am getting your question right, but for starting ssh
agent on my lap, I simply uncomment (or create?) the following in my
.xinitrc
...
if [ "$SSH_AGENT_PID" ]; then
 ssh-add -D < /dev/null
 eval `ssh-agent -s -k`
fi
...

For starting (and keeping alive) a ssh agent on a remote host I use
http://www.funtoo.org/Keychain

If the keys of the remote host are password protected, the password needs
to be typed in upon any (re)start of the remote host.

I hope I was on topic.

Regards,

On Fri, Oct 7, 2016 at 10:38 PM, Predrag Punosevac 
wrote:

> Hi Misc,
>
> This is a rather trivial question. What is the recommended way of
> starting ssh-agent when upon ssh login into the remote host. Namely I
> have a remote host which is used as a gateway to a bunch of machines
> whose ssh keys are password protected. I have
>
> AddKeysToAgent yes
>
> in my ~/.ssh/config file as well as
>
> xidle -program "/usr/bin/ssh-add -D" -timeout 300  &
>
> in my .xsession file. Everything works nice and neat when I am on my
> desktop but I want to replicate functionality when I ssh to a headless
> (no X) shell gateway.
>
> Thanks,
> Predrag

Re: error building -stable 6.0/amd64 from source on qemu[SOLVED]

[soko.tica]

Many thanks. That was it.

On Tue, Sep 20, 2016 at 10:26 AM, Joel Sing <j...@sing.id.au> wrote:

> On Tuesday 20 September 2016 09:54:31 soko.tica wrote:
> > Hello,
> >
> > In trying to build -stable from source, I get an error. I have downloaded
> > and unterred sys.tar.gz and src.tar.gz according to
> > http://www.openbsd.org/faq/faq5.html#Release and updated the sources
> > through cvs, according to the instructions
> http://man.openbsd.org/release .
> > After I execute (as root, the first time doas produced the same error)
> >
> > #cd /usr/src && make build
> >
> > I get the following:
> > 
> > cc
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../..
> /../../stand/efi/inc
> > lude/amd64 -DEFIBOOT -DNEEDS_HEAP_H
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/..
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../..
> /../../stand/efi/in
> > clude
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../..
> /../../stand/boot
> > -ffreestanding -std=gnu99 -fshort-wchar -fPIC -mno-red-zone -DSOFTRAID
> > -D_STANDALONE -nostdinc -fno-builtin -Os -Wall -Werror
> -fno-stack-protector
> > -DMDRANDOM
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../..
> /../../stand/efi/inc
> > lude/amd64 -DEFIBOOT -DNEEDS_HEAP_H
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/..
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../..
> /../../stand/efi/in
> > clude
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../..
> /../../stand/boot
> > -ffreestanding -std=gnu99 -fshort-wchar -fPIC -mno-red-zone -DSOFTRAID
> > -D_STANDALONE -nostdinc -fno-builtin -Wno-pointer-sign
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../libsa -I.
> > -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64 -DSMALL -DSLOW
> -DNOBYFOUR
> > -D__INTERNAL_LIBSA_CREAD -DHEAP_LIMIT=0xc0 -c
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/soft
> > raid.c: In function 'sr_crypto_decrypt_keys':
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:155: error: dereferencing pointer to incomplete type
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:155: error: 'SR_CRYPTOKDFT_PKCS5_PBKDF2' undeclared (first use in
> this
> > function)
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/soft
> > raid.c:155: error: (Each undeclared identifier is reported only once
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:155: error: for each function it appears in.)
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:156: error: dereferencing pointer to incomplete type
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:156: error: 'SR_CRYPTOKDFT_BCRYPT_PBKDF' undeclared (first use in
> this
> > function)
>
> I'm not sure what you've done (since the actual commands you ran are not
> specified), however this is -current source, not -stable. Further more
> you've
> ended up with a mix - sys/dev/softraidvar.h is older than
> sys/lib/libsa/softraid.c.
>
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/soft
> > raid.c:157: error: dereferencing pointer to incomplete type
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:180: error: dereferencing pointer to incomplete type
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:183: error: dereferencing pointer to incomplete type
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:183: error: dereferencing pointer to incomplete type
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:185: error: dereferencing pointer to incomplete type
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:191: error: dereferencing pointer to incomplete type
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:191: error: dereferencing pointer to incomplete type
> > /usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
> /lib/libsa/softr
> > aid.c:193: 

error building -stable 6.0/amd64 from source on qemu

[soko.tica]

Hello,

In trying to build -stable from source, I get an error. I have downloaded
and unterred sys.tar.gz and src.tar.gz according to
http://www.openbsd.org/faq/faq5.html#Release and updated the sources
through cvs, according to the instructions http://man.openbsd.org/release .
After I execute (as root, the first time doas produced the same error)

#cd /usr/src && make build

I get the following:

cc
-I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../stand/efi/include/amd64
-DEFIBOOT -DNEEDS_HEAP_H -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/..
-I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../stand/efi/include
-I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../stand/boot
-ffreestanding -std=gnu99 -fshort-wchar -fPIC -mno-red-zone -DSOFTRAID
-D_STANDALONE -nostdinc -fno-builtin -Os -Wall -Werror -fno-stack-protector
-DMDRANDOM
-I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../stand/efi/include/amd64
-DEFIBOOT -DNEEDS_HEAP_H -I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/..
-I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../stand/efi/include
-I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../stand/boot
-ffreestanding -std=gnu99 -fshort-wchar -fPIC -mno-red-zone -DSOFTRAID
-D_STANDALONE -nostdinc -fno-builtin -Wno-pointer-sign
-I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../..
-I/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../libsa -I.
-I/usr/src/sys/arch/amd64/stand/efiboot/bootx64 -DSMALL -DSLOW -DNOBYFOUR
-D__INTERNAL_LIBSA_CREAD -DHEAP_LIMIT=0xc0 -c
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:
In function 'sr_crypto_decrypt_keys':
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:155:
error: dereferencing pointer to incomplete type
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:155:
error: 'SR_CRYPTOKDFT_PKCS5_PBKDF2' undeclared (first use in this function)
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:155:
error: (Each undeclared identifier is reported only once
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:155:
error: for each function it appears in.)
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:156:
error: dereferencing pointer to incomplete type
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:156:
error: 'SR_CRYPTOKDFT_BCRYPT_PBKDF' undeclared (first use in this function)
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:157:
error: dereferencing pointer to incomplete type
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:180:
error: dereferencing pointer to incomplete type
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:183:
error: dereferencing pointer to incomplete type
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:183:
error: dereferencing pointer to incomplete type
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:185:
error: dereferencing pointer to incomplete type
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:191:
error: dereferencing pointer to incomplete type
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:191:
error: dereferencing pointer to incomplete type
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:193:
error: dereferencing pointer to incomplete type
/usr/src/sys/arch/amd64/stand/efiboot/bootx64/../../../../../lib/libsa/softraid.c:198:
error: dereferencing pointer to incomplete type
*** Error 1 in sys/arch/amd64/stand/efiboot/bootx64 (:87
'softraid.o')
*** Error 1 in sys/arch/amd64/stand/efiboot (:48 'all')
*** Error 1 in sys/arch/amd64/stand (:48 'all')
*** Error 1 in sys/arch/amd64 (:48 'all')
*** Error 1 in sys (:48 'all')
*** Error 1 in . (:48 'all')
*** Error 1 in /usr/src (Makefile:82 'build')
# ^D

Script done on Tue Sep 20 07:16:08 2016
==

Thanks in advance for your input.

Re: Install octeon on Qemu question(s)

[soko.tica]

Just to drop a note for someone who might search for this topic in future.

I was wrong from the start. Instead of looking for emulation and/or
cross-compiling that is far beyond my reach, I should be simply following
-current on octeon. I believe it should be possible to keep the main/only
firewall router behind the ADSL modem/router working in bridge mode updated.

On Sat, Sep 17, 2016 at 7:50 PM, soko.tica <soko.t...@gmail.com> wrote:

> Many thanks for your reply that it isn't possible, I was about to spend
> many more hours banging the head against the wall.
>
> I guess the only solution for my goal is to learn cross-compiling and
> build -stable sets for octeon on amd64.
>
> On Fri, Sep 16, 2016 at 12:09 PM, <mail+li...@m.jwh.me.uk> wrote:
>
>> > -Original Message-
>> > From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On
>> > Behalf Of soko.tica
>> > Sent: 09 September 2016 11:09
>> > To: misc <misc@openbsd.org>
>> > Subject: Install octeon on Qemu question(s)
>> >
>> > Hello,
>> >
>> > I am unsucesfully trying to install octeon on Qemu (I have managed to
>> > install it on Ubiquity edge router Lite, but I need a qemu guest for
>> > updating the router as needed).
>> >
>> > After much trouble, i have managed to alter miniroot for booting via
>> > serial, if that was needed at all.
>> > ===
>> > # vnconfig vnd0
>> > miniroot60.fs
>> > # mount /dev/vnd0i /mnt
>> > # ls -lh /mnt
>> > total 16672
>> > -rw-r--r--  1 root  wheel   8.1M Jul 29 08:32 bsd.rd
>> > # mkdir /mnt/etc
>> > # echo 'set tty
>> > com0'>/mnt/etc/boot.conf
>> > # umount /mnt
>> > # vnconfig -u vnd0
>> > ===
>> > I'm trying to install miniroot.fs according to the instructions from
>> > /usr/local/share/doc/pkg-readmes/qemu, but I am always getting the
>> errors
>> > I
>> > don't understand, e.g.:
>> > ===
>> > $ qemu-system-mips64 -m 512 -serial stdio -hda octeon.img -hdb
>> > miniroot60.fs ->
>> > WARNING: Image format was not specified for 'miniroot60.fs' and probing
>> > guessed raw.
>> >  Automatically detecting the format is dangerous for raw images,
>> > write operations on block 0 will be restricted.
>> >  Specify the 'raw' format explicitly to remove the restrictions.
>> > qemu-system-mips64: Could not load MIPS bios 'mips_bios.bin', and no
>> > -kernel argument was specified
>> > $ qemu-system-mips64 -m 512 -serial stdio -hda octeon.img format=raw -
>> > hdb
>> > miniroot60<
>> > qemu-system-mips64: -hda octeon.img: drive with bus=0, unit=0 (index=0)
>> > exists
>> > ===
>> >
>> > Please point to what should I do to accomplish it, I have already wasted
>> > too much time on it.
>> >
>> > Thanks in advance.
>>
>> You can't emulate Octeon with QEMU.  You also need more than that to
>> emulate
>> a MIPS64 board, it isn't x86.

Re: Install octeon on Qemu question(s)

[soko.tica]

Many thanks for your reply that it isn't possible, I was about to spend
many more hours banging the head against the wall.

I guess the only solution for my goal is to learn cross-compiling and build
-stable sets for octeon on amd64.

On Fri, Sep 16, 2016 at 12:09 PM, <mail+li...@m.jwh.me.uk> wrote:

> > -Original Message-
> > From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On
> > Behalf Of soko.tica
> > Sent: 09 September 2016 11:09
> > To: misc <misc@openbsd.org>
> > Subject: Install octeon on Qemu question(s)
> >
> > Hello,
> >
> > I am unsucesfully trying to install octeon on Qemu (I have managed to
> > install it on Ubiquity edge router Lite, but I need a qemu guest for
> > updating the router as needed).
> >
> > After much trouble, i have managed to alter miniroot for booting via
> > serial, if that was needed at all.
> > ===
> > # vnconfig vnd0
> > miniroot60.fs
> > # mount /dev/vnd0i /mnt
> > # ls -lh /mnt
> > total 16672
> > -rw-r--r--  1 root  wheel   8.1M Jul 29 08:32 bsd.rd
> > # mkdir /mnt/etc
> > # echo 'set tty
> > com0'>/mnt/etc/boot.conf
> > # umount /mnt
> > # vnconfig -u vnd0
> > ===
> > I'm trying to install miniroot.fs according to the instructions from
> > /usr/local/share/doc/pkg-readmes/qemu, but I am always getting the
> errors
> > I
> > don't understand, e.g.:
> > ===
> > $ qemu-system-mips64 -m 512 -serial stdio -hda octeon.img -hdb
> > miniroot60.fs ->
> > WARNING: Image format was not specified for 'miniroot60.fs' and probing
> > guessed raw.
> >  Automatically detecting the format is dangerous for raw images,
> > write operations on block 0 will be restricted.
> >  Specify the 'raw' format explicitly to remove the restrictions.
> > qemu-system-mips64: Could not load MIPS bios 'mips_bios.bin', and no
> > -kernel argument was specified
> > $ qemu-system-mips64 -m 512 -serial stdio -hda octeon.img format=raw -
> > hdb
> > miniroot60<
> > qemu-system-mips64: -hda octeon.img: drive with bus=0, unit=0 (index=0)
> > exists
> > ===
> >
> > Please point to what should I do to accomplish it, I have already wasted
> > too much time on it.
> >
> > Thanks in advance.
>
> You can't emulate Octeon with QEMU.  You also need more than that to
> emulate
> a MIPS64 board, it isn't x86.

Re: Install octeon on Qemu question(s)

[soko.tica]

I've got offlist three e-mail messages from the people having the same
problem as myself. I am still stuck with it.

If that matters I am not young and I have various health issues. I am
unable to start installation on qemu mips, e.g.

$ qemu-system-mips -m 512 -serial pty -hda IMAGEFORMIPS.img -hdb
MINIROOT60.fs -boot d

starts qemu, and on serial

#cu -l cua /dev/ttyp6
Connected to /dev/ttyp6 (speed 9600)

What should I do from there? Please, let someone give me a clue.

Thanks in advance.

On Fri, Sep 9, 2016 at 12:08 PM, soko.tica <soko.t...@gmail.com> wrote:

> Hello,
>
> I am unsucesfully trying to install octeon on Qemu (I have managed to
> install it on Ubiquity edge router Lite, but I need a qemu guest for
> updating the router as needed).
>
> After much trouble, i have managed to alter miniroot for booting via
> serial, if that was needed at all.
> ===
> # vnconfig vnd0 miniroot60.fs
>
> # mount /dev/vnd0i /mnt
> # ls -lh /mnt
> total 16672
> -rw-r--r--  1 root  wheel   8.1M Jul 29 08:32 bsd.rd
> # mkdir /mnt/etc
> # echo 'set tty com0'>/mnt/etc/boot.conf
>
> # umount /mnt
> # vnconfig -u vnd0
> ===
> I'm trying to install miniroot.fs according to the instructions from
> /usr/local/share/doc/pkg-readmes/qemu, but I am always getting the errors
> I don't understand, e.g.:
> ===
> $ qemu-system-mips64 -m 512 -serial stdio -hda octeon.img -hdb
> miniroot60.fs ->
> WARNING: Image format was not specified for 'miniroot60.fs' and probing
> guessed raw.
>  Automatically detecting the format is dangerous for raw images,
> write operations on block 0 will be restricted.
>  Specify the 'raw' format explicitly to remove the restrictions.
> qemu-system-mips64: Could not load MIPS bios 'mips_bios.bin', and no
> -kernel argument was specified
> $ qemu-system-mips64 -m 512 -serial stdio -hda octeon.img format=raw -hdb
> miniroot60<
> qemu-system-mips64: -hda octeon.img: drive with bus=0, unit=0 (index=0)
> exists
> ===
>
> Please point to what should I do to accomplish it, I have already wasted
> too much time on it.
>
> Thanks in advance.

Install octeon on Qemu question(s)

[soko.tica]

Hello,

I am unsucesfully trying to install octeon on Qemu (I have managed to
install it on Ubiquity edge router Lite, but I need a qemu guest for
updating the router as needed).

After much trouble, i have managed to alter miniroot for booting via
serial, if that was needed at all.
===
# vnconfig vnd0
miniroot60.fs
# mount /dev/vnd0i /mnt
# ls -lh /mnt
total 16672
-rw-r--r--  1 root  wheel   8.1M Jul 29 08:32 bsd.rd
# mkdir /mnt/etc
# echo 'set tty
com0'>/mnt/etc/boot.conf
# umount /mnt
# vnconfig -u vnd0
===
I'm trying to install miniroot.fs according to the instructions from
/usr/local/share/doc/pkg-readmes/qemu, but I am always getting the errors I
don't understand, e.g.:
===
$ qemu-system-mips64 -m 512 -serial stdio -hda octeon.img -hdb
miniroot60.fs ->
WARNING: Image format was not specified for 'miniroot60.fs' and probing
guessed raw.
 Automatically detecting the format is dangerous for raw images,
write operations on block 0 will be restricted.
 Specify the 'raw' format explicitly to remove the restrictions.
qemu-system-mips64: Could not load MIPS bios 'mips_bios.bin', and no
-kernel argument was specified
$ qemu-system-mips64 -m 512 -serial stdio -hda octeon.img format=raw -hdb
miniroot60<
qemu-system-mips64: -hda octeon.img: drive with bus=0, unit=0 (index=0)
exists
===

Please point to what should I do to accomplish it, I have already wasted
too much time on it.

Thanks in advance.

Re: codepage and iocharset in fat32 aka msdos filesystem

[soko.tica]

Not necessarily. OpenBSD does have pl locale and pl keyboard, while it does
not have rs/hr locale nor kbd.

See:

$ locale -a
$ kbd -l (may require doas/sudo)

It isn't Linux (nor, for that matter, FreeBSD or DragonflyBSD).

On Mon, Jan 18, 2016 at 2:26 AM, Zeljko Jovanovic <
zelj...@tesla.rcub.bg.ac.rs> wrote:

> On 17.01.2016. 16:12, Lampshade wrote:
>
> I am using Windows 8.1 64-bit and OpenBSD-current amd64.
>> When I used Gnu/Linux I mounted fat32 partitions
>> with these options:
>> iocharset=iso8859-2,codepage=852
>> However OpenBSD's mount tells me:
>> mount -t msdos  -o codepage=852 /dev/sd0f /mnt/partycjaFat/
>> mount_msdos: -o codepage: option not supported
>>
>> and
>> mount -t msdos  -o iocharset=iso8859-2 /dev/sd0f /mnt/partycjaFat/
>> mount_msdos: -o iocharset: option not supported
>>
>> 1. What codepage is used by default in FAT32 filesystem created
>> and mounted in OpenBSD?
>>
>
> I mount FAT32 filesystems in Linux with:
>
> mount -t vfat -o iocharset=utf8
>
> and then read/write them normally in Linux as well as Windows. Most
> filenames are in Serbian Latin (contain letters šŠ čČ ćĆ žŽ đĐ in
addition
> to ASCII), others are in Serbian Cyrillic, and everything work well.
>
> Just use UTF8, and I bet you will have no problem in OpenBSD too.

Re: i386 packages - snapshot 23/12/2015

[soko.tica]

Thank you guys.

My box updated on the same -current is running with no hasle (it has been
like that for years). The problem just appeared with the new usb stick
installs, amed at presents to introduce OpenBSD/UNIX to elementary and high
school kids.

Happy holidays to all and wishing you a healthy, happy and succesfull
forthcomming year. To those celebrating today, I also politically
incorrectly wish a Merry Christmas.

Regards,

On Fri, Dec 25, 2015 at 9:06 AM, Alexander Hall <alexan...@beard.se> wrote:

>
>
> On December 24, 2015 4:45:06 PM GMT+01:00, "soko.tica" <
> soko.t...@gmail.com> wrote:
> >Hello,
> >
> >I've succesfully installed today the latest i386 snapshot on a usb
> >flash
> >disk (on amd64 box), but the packages (e.g. links+, xfe ) report
> >unresolved
> >dependencies and bad major. This is strange, since it is supposed that
> >older packages run on fresh -current install.
>
> Already installed packages should work fine after an upgrade, assuming you
> don't remove the old libs, but you cannot install new packages without the
> matching libs. When base and packages snapshots are slightly out of sync,
> that can happen.
>
> /Alexander
>
> >
> >Either I messed something or there is something wrong with the
> >snapshot.
> >
> >Regards

i386 packages - snapshot 23/12/2015

[soko.tica]

Hello,

I've succesfully installed today the latest i386 snapshot on a usb flash
disk (on amd64 box), but the packages (e.g. links+, xfe ) report unresolved
dependencies and bad major. This is strange, since it is supposed that
older packages run on fresh -current install.

Either I messed something or there is something wrong with the snapshot.

Regards

is -current broken?

[soko.tica]

Hello.

I've upgraded -current (i386, dated april 6th, 2014), and a few things
(e.g. pkg_mgr and libreoffice4.1) won't start.

Is it intentionally broken, or the packages are just out of sync?

Thanks in advance for your answer.

Re: is -current broken?

[soko.tica]

I've upgraded from a previous -current, also tagged 5.5, a month or two old.

But it seems it's not broken, pkg_mgr works, it just had to have the
database initialized. Regarding libreoffice, I've also pkg_deleted
4.1.3.2p3v0 and pkg_add 4.1.5.3v0 and it started.

I can't remember if I started running -current on my dekstop during 4.9 or
5.1. This is the first time I've run into troubles, and it was my mistake.

Sorry for the noise.


On Mon, Apr 7, 2014 at 6:35 PM, Miod Vallat m...@online.fr wrote:

  I've upgraded -current (i386, dated april 6th, 2014), and a few things
  (e.g. pkg_mgr and libreoffice4.1) won't start.
 
  Is it intentionally broken, or the packages are just out of sync?

 You did not say what state you were upgrading from. Your question can't
 be answered without this information.

 Miod

Re: is -current broken?

[soko.tica]

Of course I run sysmerge :)

pkg_add -u (immediately after sysmerge) didn't do the trick this time for
this particular package (libreoffice), but pkg_delete and pkg_add
thereafter did.

BTW, I saw some new groups added after the upgrade: _smtpq, _nds and
_unbound. Is it wrong if i say AWESOME (I'm almost 50)?


On Mon, Apr 7, 2014 at 7:21 PM, Philip Guenther guent...@gmail.com wrote:

 On Mon, Apr 7, 2014 at 9:52 AM, soko.tica soko.t...@gmail.com wrote:
  But it seems it's not broken, pkg_mgr works, it just had to have the
  database initialized. Regarding libreoffice, I've also pkg_deleted
  4.1.3.2p3v0 and pkg_add 4.1.5.3v0 and it started.

 pkg_add -u, to bring all your packages up to date, is your friend.

 (Also, you're remembering to run sysmerge when updating, right?)

Re: is -current broken?

[soko.tica]

I do apologize for continuing offtopic. Although jggimi is right, and one
should  have read first, I'm simply used to -current working FLAWLESSLY on
my home desktop, as well as -stable on my small home network.

:)


On Mon, Apr 7, 2014 at 7:35 PM, Josh Grosse j...@jggimi.homeip.net wrote:

 On 2014-04-07 13:30, soko.tica wrote:

  BTW, I saw some new groups added after the upgrade: _smtpq, _nds and
 _unbound. Is it wrong if i say AWESOME (I'm almost 50)?


 It's great that you noticed, however these were already described in
 http://www.openbsd.org/faq/current.html -- this is a document you should
 be reading *before* you begin any -current upgrades. :)

UEFI secure boot and dual boot question

[soko.tica]

Hello list,

Has anyone managed to set dual boot on an UEFI box with secure boot left
enabled? If the answer is yes, are there some instructions how to achieve
that?

I am trying to install -current on a Lenovo Y400 notebook, leaving
pre-installed windows 8 intact, as per the wishes of the owner of the box.

Thanks in advance for your responses

4.3BSD_Line_Printer_Spooler_manual location on current?

[soko.tica]

Hello, list

Would someone be so kind to point the location of
4.3BSD_Line_Printer_Spooler_manual on the system running -current?

Sorry for the noise, many thanks in advance.

How to paste links from browser into xterm on OpenBSD?

[soko.tica]

Hello, list

The question is in the subject line. I've discovered get_flash_videos, so I
need the answer. I expect RTFMs but please point which ones.

Sorry for the noise.

question_about_OpenBSD_on_ADSL_modems/routers

[soko.tica]

Hallo list,

I ask for information about ADSL modems/routers (preferably low-cost)
on which OpenBSD can run.

I know there was a possibility to get Traverse Technologies Viking PCI
ADSL card on any box, but I have learned recently it is out of
production.

Thanking you in advance.

Re: question_about_OpenBSD_on_ADSL_modems/routers

[soko.tica]

Thanks for your replies Tomas and Kaya.

I am looking for a device that will be used as an ADSLmodem/router on
which I want to build OpenBSD. I have been being connected from
OpenBSD boxes through an ordinary ADSL modem since 4.3.

I am not sure if the RockSolid cards are supported by OpenBSD. Can
anyone confirm they are?

Yes, I am in Europe (non-EU).

Thanks in advance for your replies.

On 6/25/12, Tomas Bodzar tomas.bod...@gmail.com wrote:
 On Mon, Jun 25, 2012 at 10:47 AM, soko.tica soko.t...@gmail.com wrote:
 Hallo list,

 I ask for information about ADSL modems/routers (preferably low-cost)
 on which OpenBSD can run.


 Are you looking for ADSL modem/router to which you want to connect
 OpenBSD system or do you want to build ADSL modem on OpenBSD?

 I know there was a possibility to get Traverse Technologies Viking PCI
 ADSL card on any box, but I have learned recently it is out of
 production.

 Thanking you in advance.

yt_execution_fails_due_to_lua_error-[4.9-stable]

[soko.tica]

Hello,

I was trying to download a youtube video from a box running 4.9
stable, but got the following error:
=
Getting http://www.youtube.com/watch?v=i7pkyDUX5uM ...
/usr/local/bin/lua: /usr/local/share/lua/5.1/base.lua:433:
stack traceback:
[C]: in function 'error'
/usr/local/share/lua/5.1/base.lua:433: in function 'assert'
/usr/local/bin/yt:158: in main chunk
[C]: ?


$dmesg
OpenBSD 4.9-stable (GENERIC) #3: Sun Aug 28 13:35:42 CEST 2011
p...@zdera.lan.internal:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Celeron(R) CPU 2.80GHz (GenuineIntel 686-class) 2.82 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,xTPR
real mem  = 804810752 (767MB)
avail mem = 781512704 (745MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 09/09/04, BIOS32 rev. 0 @
0xfae70, SMBIOS rev. 2.3 @ 0xf0100 (39 entries)
bios0: vendor Award Software International, Inc. version F3 date 09/09/2004
bios0: Gigabyte Technology Co., Ltd. 8I845PE Pro
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP APIC
acpi0: wakeup devices HUB0(S4) USB0(S1) USB1(S1) USB2(S1) USB3(S1)
USBE(S1) PCI0(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 133MHz
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (HUB0)
acpicpu0 at acpi0
acpitz0 at acpi0: critical temperature 75 degC
acpibtn0 at acpi0: PWRB
bios0: ROM list: 0xc/0xf400
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82865G Host rev 0x02
intelagp0 at pchb0
agp0 at intelagp0: aperture at 0xe800, size 0x800
ppb0 at pci0 dev 1 function 0 Intel 82865G AGP rev 0x02
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 NVIDIA GeForce FX 5500 rev 0xa1
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
uhci0 at pci0 dev 29 function 0 Intel 82801EB/ER USB rev 0x02: apic
2 int 16 (irq 10)
uhci1 at pci0 dev 29 function 1 Intel 82801EB/ER USB rev 0x02: apic
2 int 19 (irq 10)
uhci2 at pci0 dev 29 function 2 Intel 82801EB/ER USB rev 0x02: apic
2 int 18 (irq 11)
uhci3 at pci0 dev 29 function 3 Intel 82801EB/ER USB rev 0x02: apic
2 int 16 (irq 10)
ehci0 at pci0 dev 29 function 7 Intel 82801EB/ER USB2 rev 0x02: apic
2 int 23 (irq 9)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb1 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0xc2
pci2 at ppb1 bus 2
skc0 at pci2 dev 9 function 0 Marvell Yukon 88E8001/8003/8010 rev
0x13, Yukon Lite (0x9): apic 2 int 20 (irq 11)
sk0 at skc0 port A: address 00:0f:ea:77:e0:94
eephy0 at sk0 phy 0: 88E1011 Gigabit PHY, rev. 5
ichpcib0 at pci0 dev 31 function 0 Intel 82801EB/ER LPC rev 0x02
pciide0 at pci0 dev 31 function 1 Intel 82801EB/ER IDE rev 0x02:
DMA, channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 0: WDC WD800BB-00FJA0
wd0: 16-sector PIO, LBA, 76319MB, 156301488 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: PIONEER, DVD-RW DVR-115D, 1.13 ATAPI
5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
ichiic0 at pci0 dev 31 function 3 Intel 82801EB/ER SMBus rev 0x02:
apic 2 int 17 (irq 5)
iic0 at ichiic0
spdmem0 at iic0 addr 0x50: 256MB DDR SDRAM non-parity PC3200CL2.5
spdmem1 at iic0 addr 0x51: 256MB DDR SDRAM non-parity PC3200CL3.0
spdmem2 at iic0 addr 0x52: 256MB DDR SDRAM non-parity PC3200CL2.5
auich0 at pci0 dev 31 function 5 Intel 82801EB/ER AC97 rev 0x02:
apic 2 int 17 (irq 5), ICH5 AC97
ac97: codec id 0x414c4790 (Avance Logic ALC850 rev 0)
audio0 at auich0
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 Intel UHCI root hub rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 Intel UHCI root hub rev 1.00/1.00 addr 1
usb3 at uhci2: USB revision 1.0
uhub3 at usb3 Intel UHCI root hub rev 1.00/1.00 addr 1
usb4 at uhci3: USB revision 1.0
uhub4 at usb4 Intel UHCI root hub rev 1.00/1.00 addr 1
isa0 at ichpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
it0 at isa0 port 0x2e/2: IT8712F rev 5, EC port 0x290
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
mtrr: Pentium Pro MTRR 

MIPS-BE_architecture_(RouterBoard_RB_750_GL)

[soko.tica]

Hello,

I was wondering is it possible to run OpenBSD (5.0-stable) on
RouterBoard RB750GL.

I've searched for the supported hardware on OpenBSD and are aware that
only RouterBoard 600A is supported (and was discontinued by the
manufacturer about a week after it's been included into the supported
hardware). But it was socppc port and the manufacturer says 750GL is
MIPS-BE architecture. Which of OpenBSD's ports would that be?

Moreover, are there any known low-cost router/firewall devices with
gigabyte NICs capable running OpenBSD?

Thanks in advance for your responses

Re: How to trace a process?

[soko.tica]

On 12/9/09, Samiuela LV Taufa samtw...@gmail.com wrote:
 e.g. http://www.nomoa.com/bsd/postfix.htm#4.1telnet
 http://www.nomoa.com/bsd/dovecot.htm

Many, many thanks, that was just what I need.

How to trace a process?

[soko.tica]

Hello list,

How to trace a process for debugging (4.6-stable, if that matters)?
I'm stuck with postfix+dovecot and need to discover why mail server
doesn't accept mail from my desktop.

RTFM's are fine, just point which one I should read. ;)

Thanks in advance.

Re: How to trace a process?

[soko.tica]

On 12/8/09, Ted Unangst ted.unan...@gmail.com wrote:
 more is the program for looking at log files to discover the problem.
 :)

Well, not that I didn't deserve it with my phrasing. :)

Re: OT: Have you hugged your local OpenBSD dev lately?

[soko.tica]

On 11/20/09, rhubbell rhubb...@ihubbell.com wrote:
 Definitely not missing the point. Maybe you missed mine. Not worrying
 because you trust everything about OpenBSD and everyone that's worked on
 it and every package you've installed and every piece of hardware you've
 installed, etc., etc.  It's naive to point elsewhere and say see, they're
 not secure. For example should I trust you and the other tooters just
 because you insist OpenBSD's secure?

OpenBSD's security isn't affected at all if we, as users, insist on it.

It's the proven record.

While others get new GUIs with each new release of their OS of choice,
we get tmux, and security fix of a remote vulnerability of a non-base
package within 2 hours since it became known.

We, non-technical users, see the no-nonsense attitude of devs on this very list.

I haven't seen any tooting here, devs are busy with more important
work than to campaign that our OS of choice is of different league
from any other.

We already know that.

mount foreign filesystem returns input/output error

[soko.tica]

Hello list!

I am trying to mount a second HDD on my 4.5-stable box, to copy the
data from ext2 and ntfs partitions on it to my A6 partitioned disc.

However, fdisk reports two partition tables (offset 0 and offset
16065) and mount returns input/output error.

I assume I shouldn't do neither fsck_ffs nor newfs on foreing
filesystems with the data on it. Am I wrong here? What would be the
proper way to get around the issue?

Any suggestion is greatly appreciated, and thank you in advance for
your help. Below is the output of disklabel, fdisk and mount. In case
of RTFM, just please point me to the appropriate man.

$ sudo disklabel -E wd1
Password:
# Extended partition 0: type 0F start 16065 size 80341065
disklabel: warning, DOS partition table with no valid OpenBSD partition
Treating sectors 63-160084415 as the OpenBSD portion of the disk.
You can use the 'b' command to change this.

Initial label editor (enter '?' for help at any prompt)
 p m
OpenBSD area: 0.0M-78166.2M; size: 78166.2M; free: 38937.2M
#size   offset  fstype [fsize bsize  cpg]
  c: 78166.2M 0.0M  unused
  j: 39229.0M 7.9MNTFS
 x
$ sudo fdisk wd1
Disk: wd1   geometry: 9964/255/63 [160084415 Sectors]
Offset: 0   Signature: 0xAA55
Starting Ending LBA Info:
 #: id  C   H   S -  C   H   S [   start:size ]
---
 0: 0F  1   0   1 -   5001 254  63 [   16065:80341065 ] Extended LBA
 1: 83   5002   0   1 -   9963 254  63 [80357130:79714530 ] Linux files*
 2: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
 3: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
Offset: 16065   Signature: 0xAA55
Starting Ending LBA Info:
 #: id  C   H   S -  C   H   S [   start:size ]
---
 0: 07  1   1   1 -   5001 254  63 [   16128:80341002 ] HPFS/QNX/AUX
 1: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
 2: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
 3: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
$ sudo mount -t ext2fs /dev/wd1j /mnt/disk2
Password:
mount_ext2fs: /dev/wd1j on /mnt/disk2: Input/output error
$

Re: mount foreign filesystem returns input/output error

[soko.tica]

On 10/24/09, Mauro Rezzonico l...@ch23.org wrote:
 soko.tica wrote:
   j: 39229.0M 7.9MNTFS
   ...
 $ sudo mount -t ext2fs /dev/wd1j /mnt/disk2

 It appears that wd1j is of type NTFS, not ext2

You are right, but:

$ sudo mount -t ntfs -o ro /dev/wd1j /mnt/disk2
mount_ntfs: /dev/wd1j on /mnt/disk2: Operation not supported
$ sudo mount -t ntfs -o ro /dev/wd1c /mnt/disk2
mount_ntfs: /dev/wd1c on /mnt/disk2: Operation not supported
$ sudo mount -t ntfs -o ro /dev/wd1 /mnt/disk2
mount_ntfs: /dev/wd1 on /mnt/disk2: Operation not supported
$ sudo mount -t ntfs /dev/wd1j /mnt/disk2
mount_ntfs: /dev/wd1j on /mnt/disk2: Operation not supported
$


What is strange is that fdisk reports two partition tables, showing
Linux files in first and HPFS/QNX/AUX in second, while disklabel shows
only ntfs.

Live Systemrescuecd Linux shows both ntfs and ext2, but I can't mount
A6 from it.

It would be nice if I could get the data before I wipe hdd to upgrade to 4.6

Re: mount foreign filesystem returns input/output error

[soko.tica]

On 10/24/09, Alexander Hall ha...@openbsd.org wrote:
 soko.tica wrote:
 On 10/24/09, Mauro Rezzonico l...@ch23.org wrote:
 soko.tica wrote:
   j: 39229.0M 7.9MNTFS
   ...
 $ sudo mount -t ext2fs /dev/wd1j /mnt/disk2
 It appears that wd1j is of type NTFS, not ext2

 You are right, but:
 
 $ sudo mount -t ntfs -o ro /dev/wd1j /mnt/disk2
 mount_ntfs: /dev/wd1j on /mnt/disk2: Operation not supported
 $ sudo mount -t ntfs -o ro /dev/wd1c /mnt/disk2
 mount_ntfs: /dev/wd1c on /mnt/disk2: Operation not supported
 $ sudo mount -t ntfs -o ro /dev/wd1 /mnt/disk2
 mount_ntfs: /dev/wd1 on /mnt/disk2: Operation not supported
 $ sudo mount -t ntfs /dev/wd1j /mnt/disk2
 mount_ntfs: /dev/wd1j on /mnt/disk2: Operation not supported
 $
 

 GENERIC does not have NTFS support. You need to build an NTFS capable
 kernel, as per step (1 and) 2 of 'man release'.


 What is strange is that fdisk reports two partition tables, showing
 Linux files in first and HPFS/QNX/AUX in second, while disklabel shows
 only ntfs.

 Live Systemrescuecd Linux shows both ntfs and ext2, but I can't mount
 A6 from it.

 It would be nice if I could get the data before I wipe hdd to upgrade to
 4.6



Thank you all for your support, both here and offlist.

It really was helphfull to tell me that I should not bang my head
against the wall since there is no ntfs support in GENERIC.

I've found a non-OpenBSD workaround, from a live CD.

Cheers!

Re: Cyrillic fonts in X Window. (fwd)

[soko.tica]

Those of us using keymaps not being listed in base have similar problem.

I use setxkbmap command for X, namely:

$setxkbmap us
$setxkbmap hr
$setxkbmap sr

So I can switch back from Serbian / Croatian to US keyboard once I
need to type the command that should be understood by the system.
On 9/7/09, shweg...@gmail.com shweg...@gmail.com wrote:
 Actually I cannot get it to work also with xterm*locale: true. But never
 mind, because having solved the cyrillic input I would have to solve the
 chinese input, which I also need, and in xterm seems to be quite
 problematic to have all of this together (scim input does seem to work
 only with gtk or qt apps, or course there is uim...). This is why I use
 roxterm instead, where everything works out of the box.
 Thank you anyway

 On Sun, 6 Sep 2009, 4625 wrote:

 On Sun, 06 Sep 2009 13:00:04 +0400
 Kaltashkin Eugene zhe...@gmail.com wrote:

 try run xterm -fn koi9x15 -rv
 As I told before (see my reply to shweg...@...), 'XTerm*locale: true'
 in ~.Xdefaults will be enough to solve the problem with cyrillic in
 xterm.
 Anyway, thanks for reply.


 -- xorg.conf --

 Section InputDevice
 Identifier  keyboard
 Driver  kbd
 ...
 -- xorg.conf --


 I have add string 'FontPath /usr/X11R6/lib/X11/fonts/cyrillic/'
 into xorg.conf, then I execute fc-cache. However, these fonts
 unavailable in X. What is going wrong?

 fc-cache -v
 Fontconfig error: Cannot load default config file
 /usr/X11R6/lib/X11/fonts/TTF: skipping, 23 fonts, 0 dirs
 /usr/X11R6/lib/X11/fonts/Type1: skipping, 29 fonts, 0 dirs
 /usr/X11R6/lib/X11/fonts/cyrillic: skipping, 0 fonts, 0 dirs

 -
 4625

Re: CPU RAM viz Squid Kerberos (network setup)

[soko.tica]

On 9/5/09, Edho P Arief edhopr...@gmail.com wrote:

3Mhz was a typo. Should have been Ghz.

In my world it's not a big deal even for healthy in informal writing.

Re: CPU RAM viz Squid Kerberos (network setup)

[soko.tica]

On 9/4/09, Joachim Schipper joac...@joachimschipper.nl wrote:

 I'm inclined to question your should,

My intention is just to give a try to Kerberos. If a few lines of
elaboration is not too inconvenient to you, It would be great to read
it.

 Do note that FTP is pretty much a relic.

The single reason of trying ftp/tftp is to make available -stable
filesets to all local -stable running boxes. I am nor aware of any
other possibility. Or did I miss something?

Thanks to all responses.

CPU RAM viz Squid Kerberos (network setup)

[soko.tica]

Hello list,

I am setting up a mini network for myself, but trying to imitate a
full-fledged network with all servers required, everything on i386
architecture. Everything will run on 4.5 stable.

Since Squid and Kerberos should be deployed, and I haven't worked with
any of them, could anyone tell me which of them consumes more CPU
power? I have two i386 boxes available, 3.00Mhz 512 Mb RAM and celeron
2.88Mhz 750Mb RAM.

Also, if anyone can tell me that placing ftp/tftp private server on
inet alias of kerberos machine is stupid (since I figured out it would
be stupid on squid machine), please don't hesitate to say it.

Many thanks in advance.

cvs diff question[DUMMIE]

[soko.tica]

Hello list,

## Those wanting to respond by RTFM, please just ignore me /

I need to check the difference between sources in anoncvs and the
source I fetched to apply the latest patch in -stable. However:

# cvs -nt diff -c -rOPENBSD_4_5
...
cvs server: Diffing usr.sbin/ztsscale
==

produces the output too large for one screen, and I can't see any line
ending with + while

==
# cvs -nt diff -c -rOPENBSD_4_5 | 21 /somewhere/diff.txt
 - main loop with cvsroot=anon...@anoncvs.de.openbsd.org:/cvs
 - Starting server: ssh anoncvs.de.openbsd.org -l anoncvs cvs server
ksh: /somewhere/diff.txt: cannot execute - Permission denied
==

How should I properly check it? How would a line showing difference look like?

Many thanks in advance to anyone bothering to respond.

4.5-stable - berkwdt unkown device while config GENERIC

[soko.tica]

Hello list,

While trying to build base from source on 4.5-stable, I've encountered
the following message

GENERIC:107: berkwdt0: unknown device 'berkwdt'
***Stop.

# cd /dev/
# MAKEDEV all

didn't remove the problem.

I've seen berkwdt has been added to -current.

Did I mess the sources, or perhaps something else is the issue?

Many thanks in advance for any hint (preferrably written for DUMMIES).

4.5 - stable/ports/gcc-4.2/Error code 1

[soko.tica]

Hello list,

I am trying to install gnome-session from ports on 4.5 - stable, and I
am facing the following error in gcc-4.2
..
===  Configuring for gcc-4.2.20070307
loading site script /usr/ports/infrastructure/db/config.site
loading cache ./config.cache
checking host system type... i386-unknown-openbsd4.5
checking target system type... i386-unknown-openbsd4.5
checking build system type... i386-unknown-openbsd4.5
checking for a BSD compatible install... /usr/bin/install -c -o root -g bin
checking whether ln works... yes
checking whether ln -s works... yes
checking for gcc... /usr/ports/lang/gcc/4.2/w-gcc-4.2.20070307/bin/egcc
checking whether the C compiler
(/usr/ports/lang/gcc/4.2/w-gcc-4.2.20070307/bin/egcc -O2 -g ) works...
no
*** Error code 1

Stop in /usr/ports/lang/gcc/4.2 (line 2147 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/lang/gcc/4.2 (line 1427 of
/usr/ports/infrastructure/mk/bsd.port.mk).
==

The ports are NOT configured according to
http://openbsd.org/faq/faq15.html#PortsConfig . I don't know how to do
it.
Particularly, there is no /etc/mk.conf (and I don't know how to create
it other than touch command). Moreover, there are NO directories
/usr/obj/ports
/usr/distfiles /usr/packages where WRKOBJDIR=/usr/obj/ports
DISTDIR=/usr/distfiles PACKAGE_REPOSITORY=/usr/packages are supposed
to be configured, according
tohttp://openbsd.org/faq/faq15.html#PortsConfig

Thanks in advance for any suggestion. Dmesg below.

Apart from that, 4.5 rocks! Great work!

==
dmesg
OpenBSD 4.5-stable (GENERIC) #0: Sun May 24 19:03:08 CEST 2009
ad...@ljubinko.zderic.my6net:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Celeron(R) CPU 2.80GHz (GenuineIntel 686-class) 2.82 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,xTPR
real mem  = 804810752 (767MB)
avail mem = 769404928 (733MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 09/09/04, BIOS32 rev. 0 @
0xfae70, SMBIOS rev. 2.3 @ 0xf0100 (39 entries)
bios0: vendor Award Software International, Inc. version F3 date 09/09/2004
bios0: Gigabyte Technology Co., Ltd. 8I845PE Pro
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC
acpi0: wakeup devices HUB0(S4) USB0(S1) USB1(S1) USB2(S1) USB3(S1)
USBE(S1) PCI0(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 133MHz
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (HUB0)
acpicpu0 at acpi0
acpitz0 at acpi0: critical temperature 75 degC
acpibtn0 at acpi0: PWRB
bios0: ROM list: 0xc/0xc000
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82865G Host rev 0x02
intelagp0 at pchb0
agp0 at intelagp0: aperture at 0xe000, size 0x800
ppb0 at pci0 dev 1 function 0 Intel 82865G AGP rev 0x02
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 ATI Radeon 9200 SE Sec rev 0x01
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
radeondrm0 at vga1: apic 2 int 16 (irq 10)
drm0 at radeondrm0
ATI Radeon 9200 SE rev 0x01 at pci1 dev 0 function 1 not configured
uhci0 at pci0 dev 29 function 0 Intel 82801EB/ER USB rev 0x02: apic
2 int 16 (irq 10)
uhci1 at pci0 dev 29 function 1 Intel 82801EB/ER USB rev 0x02: apic
2 int 19 (irq 11)
uhci2 at pci0 dev 29 function 2 Intel 82801EB/ER USB rev 0x02: apic
2 int 18 (irq 9)
uhci3 at pci0 dev 29 function 3 Intel 82801EB/ER USB rev 0x02: apic
2 int 16 (irq 10)
ehci0 at pci0 dev 29 function 7 Intel 82801EB/ER USB2 rev 0x02: apic
2 int 23 (irq 5)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb1 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0xc2
pci2 at ppb1 bus 2
skc0 at pci2 dev 9 function 0 Marvell Yukon 88E8001/8003/8010 rev
0x13, Yukon Lite (0x9): apic 2 int 20 (irq 11)
sk0 at skc0 port A: address 00:0f:ea:77:e0:94
eephy0 at sk0 phy 0: 88E1011 Gigabit PHY, rev. 5
ichpcib0 at pci0 dev 31 function 0 Intel 82801EB/ER LPC rev 0x02
pciide0 at pci0 dev 31 function 1 Intel 82801EB/ER IDE rev 0x02:
DMA, channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 0: WDC WD800BB-00FJA0
wd0: 16-sector PIO, LBA, 76319MB, 156301488 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: PIONEER, DVD-RW DVR-115D, 1.13 ATAPI
5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
ichiic0 at pci0 dev 31 function 3 Intel 82801EB/ER SMBus rev 0x02:
apic 2 int 17 (irq 12)
iic0 at ichiic0
spdmem0 at iic0 addr 0x50: 256MB DDR SDRAM non-parity PC3200CL2.5
spdmem1 at iic0 addr 0x51: 256MB DDR SDRAM non-parity PC3200CL3.0
spdmem2 at iic0 

Re: 4.5 - stable/ports/gcc-4.2/Error code 1

[soko.tica]

On 5/29/09, Dennis Davis d.h.da...@bath.ac.uk wrote:
 Seriously consider installing gcc-4.2 from a pre-built package.

I've already tried it, prior to maling the list, it didn't work -
package gcc-4.2 was installed, but gnome-session would still fail from
ports.


 Alternatively add the soft link libc.so.42.0 in /usr/lib:

 (root) ?// pwd
 /usr/lib
 (root) ?// ls -l libc.so.42.0
 lrwxr-xr-x  1 root  wheel  12 May  7 12:35 libc.so.42.0 - libc.so.50.1

 Can't remember how I found this out.  Seems the bootstrap compiler
 wants it:

 (root) ?// ldd /usr/ports/lang/gcc/4.2/w-gcc-4.2.20070307/bootstrap/bin/egcc
 /usr/ports/lang/gcc/4.2/w-gcc-4.2.20070307/bootstrap/bin/egcc:
 StartEnd  Type Open Ref GrpRef Name
 1c00 3c008000 exe  10   0
 /usr/ports/lang/gcc/4.2/w-gcc-4.2.20070307/bootstrap/bin/egcc
 04402000 2443b000 rlib 01   0  /usr/lib/libc.so.42.0
 09b3d000 09b3d000 rtld 01   0  /usr/libexec/ld.so


#pwd
/usr/lib
#ls -l libc.so.42.0
ls: libc.so.42.0 : No such file or directory

If possible, instruction for DUMMIES how to create the soft link would
be appreciated very much.

Re: 4.5 - stable/ports/gcc-4.2/Error code 1

[soko.tica]

On 5/29/09, Dennis Davis d.h.da...@bath.ac.uk wrote:
...
# pwd
/usr/lib
# ln -s libc.so.50.1 libc.so.42.0

solved the problem (in case anyone in future search the archive after
the key words).

Re: 4.5 - stable/ports/gcc-4.2/Error code 1[solved]

[soko.tica]

On 5/29/09, Antoine Jacoutot ajacou...@bsdfrog.org wrote:
 On Fri, 29 May 2009, soko.tica wrote:

 On 5/29/09, Dennis Davis d.h.da...@bath.ac.uk wrote:
 ...
 # pwd
 /usr/lib
 # ln -s libc.so.50.1 libc.so.42.0

 solved the problem (in case anyone in future search the archive after
 the key words).

 Considering you did not even bother looking at the archives yourself, I
 find this quite amusing...

 http://www.nabble.com/openoffice3-and-gcc4.2-and-opera-flash-td23218745.html

 --
 Antoine

In fact I did, and found several threads, but none that seemed to be
the solution I need. Mind, I didn't know the specifics of the problem,
so I think the title of this thread is more comprehensive. Anyway, the
above is for DUMMIES, such as myself. I hope you don't mind ;)

Re: 4.5 - stable/ports/gcc-4.2/Error code 1[solved]

[soko.tica]

On 5/29/09, Antoine Jacoutot ajacou...@bsdfrog.org wrote:
 On Fri, 29 May 2009, soko.tica wrote:
 In fact I did, and found several threads, but none that seemed to be
 the solution I need. Mind, I didn't know the specifics of the problem,
 so I think the title of this thread is more comprehensive. Anyway, the
 above is for DUMMIES, such as myself. I hope you don't mind ;)

 No.
 But you may find http://mailman.theapt.org/listinfo/openbsd-newbies
 better for you.

 --
 Antoine

Since FAQ says ports (and following -stable) isn't for beginners, and
having in mind that I managed to build it, I think I am in the
appropriate list. Apart from kudos and respect from you for the great
work you do, you didn't spoil my mood by your remarks. And, NO, I
don't intend to change the address, so try either to accommodate
yourself to the increase of DUMMIES that try OpenBSD - it is a great
work, yours in part, it won't go unnoticed - or find a way to block us
from this list. Or simply ignore us. :D

Re: 4.5 - stable/ports/gcc-4.2/Error code 1[solved]

[soko.tica]

On 5/29/09, Antoine Jacoutot ajacou...@bsdfrog.org wrote:
 On Fri, 29 May 2009, soko.tica wrote:
 Since FAQ says ports (and following -stable) isn't for beginners, ...

 Why did you think I wanted to spoil your mood?
 Hmm ok, I though I was doing a nice thing pointing you to a newbie list.
 No offense but, not knowing how to make a symlink means your next mail
 threads in this list are going to be very fun to watch, so no I won't
 ignore you.


 --
 Antoine


No offense, and all respect and kudos from my side to you and all the
others that do such a great work. Perhaps I misread something.

I'll try to learn to make symlinks (I've already produced one!), in
spite of all difficulties (not appropriate to be elaborated here), and
do try hard not to post stupid questions too often. At least I do try
to search before posting, but, alas, as in this case, sometimes I
don't see the answer that is in front of my eyes. :)

Re: -stable 4.4 - a bunch of config problems

[soko.tica]

 You'll hate me for saying this but... dump GNOME.
 You'll hate me even more for saying this but... try cwm (in Xbase)
 and/or scrotwm (in ports/x11/scrotwm or possibly as a package?)

 After you're done hating me, you'll love all the screen space.

I will not hate you, but until present I was not able to find the way
to add keyboard layouts that I need for desktop in some of the window
managers - specifically some of the Latin
Serbian/Bosnian/Croatian/Slovenian as well as the Serbian Cyrillic.

Remapping by wscons, I guess, won't work ( I haven't tried it), since
it would probably lead me into various problems that I wouldn't be
able to solve, for instance, in creating .pdf from .odt. Besides, I
need those keyboard layouts only in desktop and don't want them
elsewhere.

If there is a way to do it that you can tell me, I'd be very grateful.
I don't mind for desktop background, at present I can't disable it in
GNOME for I get the following:
===
Unable to start the settings manager 'gnome-settings-daemon'.
Without the GNOME settings manager running, some preferences may not
take effect. This could indicate a problem with Bonobo, or a non-GNOME
(e.g. KDE) settings manager may already be active and conflicting with
the GNOME settings manager.
===

There is no .xinitrc in my /home. How can I create it?

Regarding xenocara cvs update, is there anything in the command that I
do wrong? I can't see how anoncvs.de.openbsd.org is without xenocara,
since all other servers are mirroring it.
===
# cd /usr/xenocara/
# export cvsroot=anon...@anoncvs.de.openbsd.org:/cvs
# cvs -d anon...@anoncvs.de.openbsd.org:/cvs up -Pd
^CKilled by signal 2.
cvs [update aborted]: received interrupt signal
# cvs -d anon...@anoncvs.de.openbsd.org:/cvs up -Pd xenocara
^Ccvs [update aborted]: received interrupt signal
Killed by signal 2.
# cd /usr
# cvs -d anon...@anoncvs.de.openbsd.org:/cvs up -Pd xenocara
^Ccvs [update aborted]: received interrupt signal
Killed by signal 2.
#
===
Regarding privoxy /var/log/privoxy/logvile was owned by root, group
_privoxy, permissions 644. I chowned it to owner _privoxy, but firefox
still can't use it.
==
$ ps auxww | grep privoxy
_privoxy 15523  0.0  0.2  1076  1640 ??  Is 8:22AM0:00.02
/usr/local/sbin/privoxy --user _privoxy /etc/privoxy/config
$ ps auxww | grep privoxy
_privoxy 15523  0.0  0.2  1076  1640 ??  Is 8:22AM0:00.02
/usr/local/sbin/privoxy --user _privoxy /etc/privoxy/config
$ cat /var/log/privoxy/logfile
Apr 14 08:22:37.943 Privoxy(857c1c00) Info: Privoxy version 3.0.8
Apr 14 08:22:37.943 Privoxy(857c1c00) Info: Program name:
/usr/local/sbin/privoxy
Apr 14 08:22:38.006 Privoxy(857c1c00) Info: Listening on port 8118 for
local connections only
$
===
I guess it could be something with DNS. I'm behind NAT firewall.
===
$ cat /etc/hosts
#   $OpenBSD: hosts,v 1.11 2002/09/26 23:35:51 krw Exp $
...
#
::1 localhost.mynet.my6net localhost
127.0.0.1 localhost.mynet.my6net localhost
::1 ljubinko.mynet.my6net ljubinko
127.0.0.1 ljubinko.mynet.my6net ljubinko
172.16.1.67 ljubinko.mynet.my6net
$ cat /etc/resolv.conf
search mynet.my6net
nameserver 172.16.2.111
nameserver 172.16.3.111
lookup file bind

-stable 4.4 - a bunch of config problems

[soko.tica]

Hi list,

I've build -stable 4.4 and attempt to run a full desktop box, but I'm
facing the following problems:

1) I can't update xenocara source # cvs -d$CVSROOT up -rOPENBSD_4_4
-Pd downloads nothing and shows no messages although tried from
/usr/xenocara or /usr

2) GNOME is incredibly slow, it takes minutes to load, while the
background image appears about half an hour afterward;

3) I can't make firefox3 and privoxy to get along

I tried to fix the problems under 2 and 3 above by removing packages
built from ports and installing again by pkg_add but achieved the same
result.

Even worse, I don't know where to look for debug messages. If there is
a chance to help me at least by directing me to use proper command
and/or file to look for messages, I'll be very grateful.

Thanks in advance

fetching packages from mirrors with pkg_add uses uninitialized value

[soko.tica]

Hello list,

I am encountering a strange behavior during the attempts to fetch
packages by pkg_add from ftp and http main servers and several
mirrors, both for 4.3 and 4.4 (releases).

FTP connection is refused both from main server and one second-level mirror.

HTTP connection is permitted, and the package fetched, but I've got
the following error
message:

==
Use of uninitialized value in hash element at /usr/sbin/pkg_add line 59
Use of uninitialized value in substitution (s///) at
/usr/libdata/Perl5/OpenBSD/PackageName.pm line 25
/usr/libdata/Perl5/OpenBSD/Dependencies.pm line 234
==

A clever question - what are your guesses that I've been compromised?

Thanks in advance

inet aliases and assigning various services (NTPD)

[soko.tica]

Hello list

I want to assign NTPD service to a specific inet alias, and to
separate it from other services running. While I know how to run DNS
services under specific inet alias, I can't figure how to configure
NTPD to run on inet alias, and not on major IP address.

I did make a search of archives, but wasn't able to find anything.

Many thanks in advance for any help about the issue.

tcpdump: WARNING: snaplen raised from 96 to 116

[soko.tica]

Hello, list

When I tried to see pf log of my recently installed OpenBSD 4.4
desktop box, I've got the message that snaplen has been raised from 96
to 116, even when I did give it a try with -s 96.

$ sudo tcpdump -n -e -ttt -r /var/log/pflog -s 96
Password:
tcpdump: WARNING: snaplen raised from 96 to 116

Any thoughts how to reduce it to examine the logs? Aside, could that
be a symptom of a break-in?

Many thanks in advance

Re: incorrect MD5 file on mirror

[soko.tica]

On 11/2/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
 On 11/2/08, Lars Noodin [EMAIL PROTECTED] wrote:

 Are you using anything other than /bin/md5 ?

 You mean, apart from /local/bin/md5 in some OSes?

Lars, forgive me if I offended you by the above message. Please.

I assumed everybody else knew what I used to know while struggling to
recollect it, but didn't want to share it with me.

BTW, the command

$md5 -c MD5

instead of

$md5sum -c MD5

didn't spoil the signatures of some old packages that I tested today.

Re: 4.4 sshd didn't start

[soko.tica]

On 11/3/08, elflord woods [EMAIL PROTECTED] wrote:

 and then i add enable_sshd=YES in /etc/rc.local

You should enable it in /etc/rc.conf , not in /etc/rc.local

Re: incorrect MD5 file on mirror

[soko.tica]

On 11/1/08, Mihai Popescu B.S. [EMAIL PROTECTED] wrote:
 Hello,

 I got the install44.iso and MD5 from snapshots from
 openbsd.informatik.uni-erlangen.de and the MD5 file failed the test.

I've got the similar problem with the first 4.4 .iso I downloaded from
openbsd.org , though I'm not sure if I actually compare md5sum
correctly. The second .iso was O.K.

If I'm not asking too much, what command did you use to compare MD5s?

editors in floppy44.fs (OpenBSD 4.4.) - newbee help

[soko.tica]

Hello list,

I did manage to scr... err, mess up partitioning scheme through
disklabel, so I've booted from floppy, mounted partitions to /tmp/a/,
tmp/d/, /tmp/e/, but when I attempt to edit etc/fstab by ed I get:

#chmod 766 /etc/fstab
# ed /etc/fstab
215
q
#

I've arrived there by adding new partition for /var and editing
/etc/fstab without executing newfs on new partition. When I then
attempted to clean the mess up by running disklabel again, I mixed up
/usr and old /var, so I guess I'm stuck to floppy now.

Any help (obviously written for dummies) is greatly appreciated. I've
never used ed.

Other than that, 4.4. is great (as far as I saw until now...which
isn't much as you can guess). Song rocks, too.

OpenBSD 4.3 - openldap - slaptest not found

[soko.tica]

I've been trying to set OpenBSD 4.3 (release) primary domain
controller according to howto o Danielle Mazzechio
http://www.kernel-panic.it/openbsd/pdc/ and I'm facing a strange
problem I'm not able to figure. Following the instructions, upon
configuration of /etc/openldap/slapd.conf, I'm not able to execute
slaptest -u as root, but once I'm logged as user, sudo slaptest -u
executes and config file test succeedes.

Any idea about the cause of this? Many thanks in advance.

Excerpt below:

# install -d -o _openldap /var/run/openldap
# slaptest -u
ksh: slaptest: not found
# exit
$ sudo slaptest -u
Password:
/blahblah (ignored)
config file testing succeeded