FVWM2 and alternatives [was Re: When will be created a great desktop experience for OpenBSD?]
On 29/10/19 7:43 pm, Walter Alejandro Iglesias wrote: > Another long term fvwm2 user here. > > I move my hands off the keyboard (to reach arrows, Pg*, Home, End, keys > or the mouse) only when I'm forced to. That's why the first feature I > test in a window manager is its switch focus behavior from keyboard. I > usually bind this function to the popular Alt-Tab. > > I tested and used lots of window managers for X, the only one that let > me do what I want is fvwm2, this is why I've got stuck with it (13 > years ago and still counting) even when I don't agree with the insanity > that means to have to learn a whole programming language to configure a > window manager. This seems to be a recurring theme. I was a long-time KDE user, until about version 4… V3 was usable on the PII 300MHz laptop I was using for uni studies at the time (yes, in 2006-2008 I was poor). Notably, I was using its multi-key key binding features so that common operations could be performed using combinations of keys hit in sequence. I was able to move windows around, switch applications, launch applications, etc, without having to resort to using the "joystick mouse" that the laptop featured, and could do it one-handed whilst on the move back when the battery was working. KDE4 broke that… coupled with bloated memory requirements which soon filled the 160MB of RAM (which was all the SD-RAM my laptop could take), soon had me on the move. FVWM2 was the only one that could pull off such flexibility -- and in the end, could do it far better. Biggest gripe today is the removal of `FVWMTaskBar`, which so far I've gotten `fbpanel` to largely replace (and in some ways, its systray integration is better), but I'm not completely happy with this: with current FVWM it seems to have problems positioning itself at the top-border of the screen, and on the Raspberry Pi 3, I've seen it chew significant CPU cycles, and configuring it is a pain. I'm experimenting with Fluxbox at the moment on the Pi, not sure if it has the keyboard handling functionality that FVWM2 does yet. Others have raised concerns about the license of FVWM2 (GPLv2), which is I understand a contributing factor as to why it's not in base. So I guess this is the question… what features of FVWM2 are we aiming for and what would an "ideal" window manager for OpenBSD look like? - Flexible input binding handling: FVWM2 supports combination of keyboard and mouse bindings, including gestures -- it'd be worth trying to mimic as much of this functionality as possible. - Scripting: FVWM2 has its own scripting language, do we use that approach, or maybe embed another, if so what? Perl5 perhaps (since that's in base)? - Presumably this would be BSD licensed? Or maybe MIT? - Do we care what it "looks" like? (I have FVWM2 to more-or-less look like MWM.) - What UI library is preferred here? Not a fan of GTK+ myself, I'm more familiar with Qt. FVWM2 uses libxcb. Regards, -- Stuart Longland (aka Redhatter, VK4MSL) I haven't lost my mind... ...it's backed up on a tape somewhere.
Re: Disable ftp in pkg_add syspatch sysupgrade
On 2019-10-29 20:19, PJ wrote:
> Am 28.10.19 um 23:52 schrieb Stuart Henderson:
>> On 2019-10-28, Andy Lemin wrote:
>>> Hi guys,
>>>
>>> Does anyone know if it is possible to completely disable ftp in the package
>>> management utilities; pkg_add, syspatch, sysupgrade etc?
>>>
>>> My PKG_PATH references http:// urls, as does /etc/install. But I cannot
>>> stop these tools trying to use ftp which does not work! :(
>> Can you show some example URLs, for example from "pgrep -lf ftp" while
>> trying to use one of these utilities?
>>
>> The only place I would expect to see ftp:// URLs used
>
>
> grep ftp /usr/sbin/sysupgrade
$ grep -ne ftp -e URL -e MIRROR /usr/sbin/sysupgrade
102:0) MIRROR=$(sed 's/#.*//;/^$/d' /etc/installurl) 2>/dev/null ||
103:MIRROR=https://cdn.openbsd.org/pub/OpenBSD
105:1) MIRROR=$1
117:URL=${MIRROR}/snapshots/${ARCH}/
119:URL=${MIRROR}/${NEXT_VERSION}/${ARCH}/
136:unpriv -f SHA256.sig ftp -Vmo SHA256.sig ${URL}SHA256.sig
176:unpriv -f $f ftp -Vmo ${f} ${URL}${f}
Your point?
>
>> is when fetching
>> certain distfiles while building some things from ports (and they would
>> usually fallback to http://ftp.openbsd.org/pub/OpenBSD/distfiles if
>> the ftp fetch failed)..
>>
>>
>>
>
Re: Disable ftp in pkg_add syspatch sysupgrade
Am 30.10.19 um 07:32 schrieb tom ryan:
> On 2019-10-29 20:19, PJ wrote:
>> Am 28.10.19 um 23:52 schrieb Stuart Henderson:
>>> On 2019-10-28, Andy Lemin wrote:
Hi guys,
Does anyone know if it is possible to completely disable ftp in the
package management utilities; pkg_add, syspatch, sysupgrade etc?
My PKG_PATH references http:// urls, as does /etc/install. But I cannot
stop these tools trying to use ftp which does not work! :(
>>> Can you show some example URLs, for example from "pgrep -lf ftp" while
>>> trying to use one of these utilities?
>>>
>>> The only place I would expect to see ftp:// URLs used
>> grep ftp /usr/sbin/sysupgrade
> $ grep -ne ftp -e URL -e MIRROR /usr/sbin/sysupgrade
> 102:0) MIRROR=$(sed 's/#.*//;/^$/d' /etc/installurl) 2>/dev/null ||
> 103:MIRROR=https://cdn.openbsd.org/pub/OpenBSD
> 105:1) MIRROR=$1
> 117:URL=${MIRROR}/snapshots/${ARCH}/
> 119:URL=${MIRROR}/${NEXT_VERSION}/${ARCH}/
> 136:unpriv -f SHA256.sig ftp -Vmo SHA256.sig ${URL}SHA256.sig
> 176:unpriv -f $f ftp -Vmo ${f} ${URL}${f}
>
> Your point?
I understand that I misread the question, sorry.
>>> is when fetching
>>> certain distfiles while building some things from ports (and they would
>>> usually fallback to http://ftp.openbsd.org/pub/OpenBSD/distfiles if
>>> the ftp fetch failed)..
Re: OpenBSD VM on ESXi: uvn_flush: obj=0xfffffd813ee78298, offset=0x33f000. error during pageout.
On Tue, Oct 29, 2019 at 01:25:10PM -0700, Mike Larkin wrote: > On Tue, Oct 29, 2019 at 09:16:42PM +0100, Jurjen Oskam wrote: [...] > > uvn_flush: obj=0xfd813ee78298, offset=0x33f. error during pageout. > > uvn_flush: WARNING: changes to page may be lost! > > uvn_flush: obj=0x0, offset=0x33f. error during pageout. > > uvn_flush: WARNING: changes to page may be lost! > > [ repeat last two lines many times ] [...] > > nvme0 at pci19 dev 0 function 0 "VMware NVMe" rev 0x00: apic 1 int 16, NVMe > > 1.0 > > nvme0: VMware Virtual NVMe Disk, firmware 1.0, serial VMWare NVME- > > Why did you assign this non-default disk type to the guest VM? > > Try assigning mpi(4) (LSI Logic SAS) instead. I've been using that with my > ESXi 6.7U3 box here without problems for weeks. > > If that works, it's either an error in our nvme(4) driver or ESXi's emulation > of the NVMe hardware. I forgot to mention that I tried using different controller types, and nvme(4) happened to be the one I took the dmesg of. The ones I tried were LSI Logic SAS, LSI Logic Parallel and VMware Paravirtual (the latter after working around the lost first write problem). All showed the same symptom. I have been trying old snapshots (thanks to the snapshot archive at ftp.hostserver.de), and found the point where the problem started to occur: All snapshots I tried up to and including this point did not show the problem: OpenBSD 6.6-beta (GENERIC.MP) #202: Mon Aug 12 11:01:21 MDT 2019 All snapshots I tried starting from this point show the problem: OpenBSD 6.6-beta (GENERIC.MP) #207: Tue Aug 13 11:32:34 MDT 2019 Would it be helpful to start a binary search for the exact commit that introduced the problem? I've been looking at the commit history around that time but haven't been able to spot an obvious candidate; but that's probably because I'm not a programmer. Regards, Jurjen Oskam
Re: Will future programmers probably warn people not to use high-level programming languages just as most programmers today warn people not to use assembler?
On 30/10/19 3:17 am, Nathan Hartman wrote: > On Tue, Oct 29, 2019 at 7:41 AM Clark Block wrote: > >> Just as most programmers today warn people not to use assembler, probably >> future programmers will warn people not to use high-level programming >> languages. > > In the future, computers will program programmers. "Man must be master" is the phrase that comes to mind. Electronic computers exist to do the low-level dull data drudgery under the guidance of their human operators, not the other way around. -- Stuart Longland (aka Redhatter, VK4MSL) I haven't lost my mind... ...it's backed up on a tape somewhere.
Re: Will Theo de Raadt and other OpenBSD developer answer this topic (https://marc.info/?l=openbsd-misc=157234932505571=2)?
Why should they answer ? It is philosophy and not related to OpenBSD. On Wed, Oct 30, 2019 at 5:52 AM Clark Block wrote: > Will Theo de Raadt and other OpenBSD developer answer this topic ( > https://marc.info/?l=openbsd-misc=157234932505571=2)? >
Re: Display flickers after upgrade to 6.6
On Sat, 19 Oct 2019 17:59:41 +0200 Federico Giannici wrote: > On 2019-10-19 16:17, Andre Stoebe wrote: > > Hi, > > > > I ran into the same issue this morning. Disabling the compositor > > worked for me, but I noticed later that this is also documented in > > the package readme: > > > > Screen compositor > > = > > If you're using the modesetting X driver and experience window > > flickering when > > the compositor is enabled, you should force the window manager to > > use the XPresent method for vblank: > > > > $xfwm4 --vblank=xpresent --replace & > > I tried that command but it screwed all my windows (no more window > decorations and buttons, I cannot operate on windows)! > Now I had to came back to KDE... > :-( > > Regards > > > > This is documented upstream at > > https://git.xfce.org/xfce/xfwm4/tree/COMPOSITOR#n114 > > > > Haven't tested that yet and left the compositor disabled, but I > > guess this will fix your issues. If it does, that's probably a good > > reminder to first look in the readme next time (me included). ;) > > > > Regards, > > André > > Hi, I thought I'd relate my experience: I also experienced this issue on a machine recently upgraded to OpenBSD 6.6 which uses the aruba chipset and also running xfce. My workaround (which was based on 'try stuff to see what works') involved turning off compositing and (via xorg.conf.d): ... Option "AccelMethod" "EXA" Option "ShadowPrimary" "on" Option "SwapbuffersWait" "off" Option "EnablePageFlip" "off" ... This resolved issues with flickering, the mouse pointer vanishing and re-appearing depending on which window is below the pointer (enabling software mouse pointer for this was worse as garbage was rendered in a rect surrounding the pointer), and also *some* issues with logging in-out of an X session via xenodm. I still experience problems with the machine going to sleep and waking up, as sometimes, upon wake-up, the graphics go wonky, or don't update at all, or the mouse pointer goes wonky. Beyond the aforementioned, this set-up seems to allow me to use the machine as before, however, I am not an X11 expert nor a radeondrm driver expert; your mileage may very. If I ever try Andre's hint in the future (thank-you), I might report on success/failure. regards, Jeff
Re: Will future programmers probably warn people not to use high-level programming languages just as most programmers today warn people not to use assembler?
On Tue, 29 Oct 2019 14:12:12 -0400 Mike wrote: > On 10/29/2019 1:17 PM, Nathan Hartman wrote: > > On Tue, Oct 29, 2019 at 7:41 AM Clark Block > > wrote: > >> Just as most programmers today warn people not to use assembler, > >> probably future programmers will warn people not to use high-level > >> programming languages. > > > > > > In the future, computers will program programmers. > > > > I remember programming back when it was the programmer, and not the > compiler, that did the optimizations. > > :) I also remember :-) I think compiler optimisations are great, but programmers must also optimise (examples: by using an algorithm with lower complexity, by being aware of locality of reference issues, etc.) Also, assembly language is, in my opinion, still useful for: - programming micro-controllers with scarce resources - programming graphics cards (shader code) - using processor features for which there exists no intrinsic function in a high level language. - proving to yourself that the compiler is actually doing the wrong thing with it's input when you suspect it (rare) With regards to assembly language (or any language for that matter), my opinion is this: use the right tool for the job; if the right tool is assembler, then use assembler, if the right tool is logo, use logo. A large part of programming is: 1) Knowing what you are trying to achieve 2) Having the ability to choose a good tool, that is, one of the right tools, to achieve what you want to achieve In my opinion, some sub-optimal things a programmer can do (and I know this because I also have these propensities) are: - cleaving only to tools one is comfortable and familiar with - doing something fancy, or using a fancy language/environment when a simpler choice is better - trading ease of code-maintenance/extendability/portability for small gains in performance I guess what I'm trying to say is that I think the issue doesn't really lie with high-level vs low-level; I think it's more about the programmer and the programmer's ability to make the (or one of the many) correct choices. regards, Jeff
Re: Will Theo de Raadt and other OpenBSD developer answer this topic (https://marc.info/?l=openbsd-misc=157234932505571=2)?
On 2019-10-29 23:50, Clark Block wrote: > Will Theo de Raadt and other OpenBSD developer answer this topic ( [...link to drivel deleted...] What, are you looking for someone to provide comments on your term paper? Ok, You did cite a reference, not proper bibliography format. It's been a long time, but I thought they did teach proper citing of references in sixth grade. Bonus points for reading a book. Lost points for only one source. But nothing you have said qualifies as profound for anything above primary school level. Nothing indicates you actually KNOW anything about the topics you write. Dude. You post meaningless crap on this list and yet show no evidence of actually being an OpenBSD user. You think you have great ideas about how things should be done? Prove it. DO something. Don't talk about it. If your desire in life is to argue about the number of angels that can dance on the head of a pin or "best programming languages" or "desktop experience", please, go elsewhere. Nick.
Re: rspamd stop rc script doesn't work in OpenBSD 6.6
* List le [29-10-2019 21:44:43 +0100]:
> On Sun, 27 Oct 2019 21:29:41 -0700
> Jordan Geoghegan wrote:
>
> > On 2019-10-27 17:29, Chris Narkiewicz wrote:
> > > Rspamd stop rc script doesn't work in OpenBSD 6.6.
> > >
> > > 1. Fresh OpenBSD 6.6 installation
> > > 2. pkg_add rspamd
> > > 3. rcctl start rspamd
> > >
> > > Works.
> > >
> > > 4. rcctl stop rspamd timeouts
> > >
> > > Looking at rspamd logs, it looks like it doesn not work
> > > well with SIGTERM. It waits for workers.
> > >
> > > Currently I work around it by adding custom rc_stop():
> > >
> > > rc_stop() {
> > > pkill -KILL -T "${daemon_rtable}" -xf "${pexp}"
> > > pkill -KILL -u _rspamd
> > > }
> > >
> > >
> > > Anybody can confirm if this is a problem?
> > >
> >
Confirm, I had this issue too and must kill rspamd manually.
--
prx
Re: Disable ftp in pkg_add syspatch sysupgrade
Hi gents,
Sorry for the slow reply, and thank you for all your responses! :D
Raf, you are correct. It seems that the ftp client is performing an http(s)
downloads.
To me this seems unusual (was expecting 'curl' or 'wget' etc to avoid code
duplication) and confusing? What do you think?
Stuart, thanks for your suggestion. This confirmed the ftp client is using
http(s);
[HOME]root@testbsd1:/local#pgrep -lf ftp
40379 /usr/bin/ftp -o -
http://mirror.bytemark.co.uk/pub/OpenBSD/6.5/packages-stable/amd64/quirks-3.124.tgz
Tom/PJ, Understood. Was just very confused why ftp was getting involved..
Anyway, I have tested this some more, and it looks like the issue is
related to when using "flavors", and looks like maybe their is some sort of
timeout occuring maybe.
- We can see that pkg_add is working fine when specifying packages
explicitly;
[HOME]root@testbsd1:/local#pkg_add sudo--gettext bash htop
quirks-3.124 signed on 2019-10-16T20:27:45Z
[HOME]root@testbsd1:/local#pkg_add vim--no_x11-perl-python3-ruby
unzip--iconv bzip2 git fzf
quirks-3.124 signed on 2019-10-16T20:27:45Z
- But throws errors when I try and use flavours which is critical for
installing python for example (NB; This is a different error to before,
where I was getting 'timeout' instead of 'Invalid argument');
[HOME]root@testbsd1:/local#pkg_add python%2 py-pip python%3 py3-pip
py3-setuptools
quirks-3.124 signed on 2019-10-16T20:27:45Z
http://mirror.bytemark.co.uk/pub/OpenBSD/6.5/packages/amd64/py3-setuptools-40.0.0v0.tgz:
ftp: Receiving HTTP reply: Invalid argument
signify: gzheader truncated
Couldn't install py3-setuptools-40.0.0v0
- This package is accessible as seen here;
[HOME]root@testbsd1:/local#wget
http://mirror.bytemark.co.uk/pub/OpenBSD/6.5/packages/amd64/py3-setuptools-40.0.0v0.tgz
/tmp/
--2019-10-30 14:29:28--
http://mirror.bytemark.co.uk/pub/OpenBSD/6.5/packages/amd64/py3-setuptools-40.0.0v0.tgz
Resolving mirror.bytemark.co.uk (mirror.bytemark.co.uk)... 80.68.83.150,
212.110.163.12, 2001:41c8:20:5e6::150, ...
Connecting to mirror.bytemark.co.uk (mirror.bytemark.co.uk)|80.68.83.150|:80...
connected.
HTTP request sent, awaiting response... 200 OK
Length: 731604 (714K) [application/x-gzip]
Saving to: ‘py3-setuptools-40.0.0v0.tgz’
py3-setuptools-40.0.0v0.tgz
100%[===>]
714.46K 270KB/sin 2.6s
- And works if specified on its own;
[HOME]root@testbsd1:/local#pkg_add py3-setuptools
quirks-3.124 signed on 2019-10-16T20:27:45Z
If I try the line with flavors again "pkg_add python%2 py-pip python%3
py3-pip py3-setuptools" it works..
As others would be crying about this too if it were a wide issue, I thought
this was maybe a bad mirror...
So I have now tried every mirror in the UK, and they all do the same thing
- intermittent issues accessing packages when using flavours..
I am not running squid or any kind of web proxy, http and https are being
passed out with nothing more than standard NAT and a pass rule.
I will try and figure out what is going on. Leave this with me. If I find
anything meanful and useful I will let you know. For now, consider this an
issue with my setup..
PS; has anyone managed to get ftpproxy working in an rdomain?
Thanks for your time and responses.. :)
Andy.
On Wed, Oct 30, 2019 at 9:17 AM PJ wrote:
> Am 30.10.19 um 07:32 schrieb tom ryan:
> > On 2019-10-29 20:19, PJ wrote:
> >> Am 28.10.19 um 23:52 schrieb Stuart Henderson:
> >>> On 2019-10-28, Andy Lemin wrote:
> Hi guys,
>
> Does anyone know if it is possible to completely disable ftp in the
> package management utilities; pkg_add, syspatch, sysupgrade etc?
>
> My PKG_PATH references http:// urls, as does /etc/install. But I
> cannot stop these tools trying to use ftp which does not work! :(
> >>> Can you show some example URLs, for example from "pgrep -lf ftp" while
> >>> trying to use one of these utilities?
> >>>
> >>> The only place I would expect to see ftp:// URLs used
> >> grep ftp /usr/sbin/sysupgrade
> > $ grep -ne ftp -e URL -e MIRROR /usr/sbin/sysupgrade
> > 102:0) MIRROR=$(sed 's/#.*//;/^$/d' /etc/installurl) 2>/dev/null ||
> > 103:MIRROR=https://cdn.openbsd.org/pub/OpenBSD
> > 105:1) MIRROR=$1
> > 117:URL=${MIRROR}/snapshots/${ARCH}/
> > 119:URL=${MIRROR}/${NEXT_VERSION}/${ARCH}/
> > 136:unpriv -f SHA256.sig ftp -Vmo SHA256.sig ${URL}SHA256.sig
> > 176:unpriv -f $f ftp -Vmo ${f} ${URL}${f}
> >
> > Your point?
>
> I understand that I misread the question, sorry.
>
>
> >>> is when fetching
> >>> certain distfiles while building some things from ports (and they would
> >>> usually fallback to http://ftp.openbsd.org/pub/OpenBSD/distfiles if
> >>> the ftp fetch failed)..
>
>
[6.6] PostgreSQL server: fail to auth
Hi, On my OpenBSD server, run with 6.6, I installed Postgresql server. I have a problem with auth. solene@ is informed of this problem; but I'll tell you about it. Perhaps you have a solution? FYI: I start completely with Postgresql. Usually I use MySQL* Postgresql has just been installed. The error message: psql: FATAL: password authentication failed for user "***" Demo: # su - _postgresql arrakiss$ psql -U postgres Password for user postgres: psql (11.5) Type "help" for help. postgres=# CREATE USER ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 WITH PASSWORD '6TsrKeqq93KyVtc5yVjU9dfZsJkPPtKKdSyEnjypZDkVdgtW4aVN3YNQd5vKoFNx'; CREATE ROLE postgres=# \connect template1 You are now connected to database "template1" as user "postgres". template1=# CREATE DATABASE "A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2" WITH ENCODING 'UTF-8';" CREATE DATABASE template1"# GRANT ALL PRIVILEGES ON DATABASE "A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2" TO ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2; template1"# ALTER DATABASE "A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2" OWNER TO ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2; template1"# \q Use control-D to quit. template1"# \q arrakiss$ exit In fact, I have one created user, named ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 His password: 6TsrKeqq93KyVtc5yVjU9dfZsJkPPtKKdSyEnjypZDkVdgtW4aVN3YNQd5vKoFNx One created DB, named: A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 And the user ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 has all rights on DB A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 Right?! But, when I attempt to connect to DB with user, I have the above the error message: # psql -U ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 Password for user ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2: psql: FATAL: password authentication failed for user "ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2" # psql -U ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 -d A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 Password for user ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2: psql: FATAL: password authentication failed for user "ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2" Ok I found it's necessary to change informations into file 'pg_hba.conf'. I set as: # grep A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 /var/postgresql/data/pg_hba.conf local A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 alltrust And restart the service/daemon postgresql. Despite, I cant connect on! --- Any idea, please?! -- ~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<< Stephane HUC as PengouinBSD or CIOTBSD b...@stephane-huc.net
Re: How can I contribute code to openbsd
On Mon, 30 Sep 2019 08:32:57 -0400.449998863 Nick Holland wrote: > while ! dead; do > DoSomething. > submission="sucks" # Accept this. It's probably true. > while [[ $submission == "sucks" ]]; do > SubmitIt > AcceptCriticism > learn > if [[ $criticism == "no way" ]]; do > break # not everything is appropriate. > fi > reviseBasedOnCriticism > done # Congrats, your submission was accepted! > done # not dead yet. ... > Nick. Respect Nick. If this is the official algorithm for helping the openbsd project, I think it's near to perfect. I've been thinking of the same question the OP asked; I don't think the value of having an expert critique one's work can be over-valued. regards, Jeff. P.S. Are there any urgent areas where the OpenBSD operating system project is short-handed?
Re: Strong Host Model in OpenBSD network stack
Hello all,
thank you very much for your insights. Indeed I did not intend to start
discussions whether the OpenBSD default makes sense or not.
Actually I'd agree that using the Weak Model is beneficial since it
wouldn't break routing functionality. My question was mainly about what
the default is, but this question was answered now.
@Theo: I agree, there's probably only a tiny subset of people actually
setting check_interfaces to 1.
During some further research I found that only Windows versions from
Vista and newer are following the Strong Model in a strict way. However
this makes sense, since I can't think of any Routers running Windows.
Again, thank you call.
Cheers,
Bastian
Am 18.10.19 um 08:56 schrieb Claudio Jeker:
> On Thu, Oct 17, 2019 at 09:50:28PM +0200, Bastian Kanbach wrote:
>> Hello,
>>
>> recently I was performing some checks that relate to the "Strong Host
>> Model" and "Weak Host Model", and I noticed that OpenBSD was behaving
>> different than I expected. I always assumed that the network stack of
>> OpenBSD was following the "Strong Host Model", but I might be wrong with
>> that:
> OpenBSD does follow the "Weak Host Model". Has always been like that.
>
>> Basically the Strong Host Model means that the network stack "accepts
>> locally destined packets if the destination IP address in the packet
>> matches an IP address assigned to the network interface on which the
>> packet was received."
>>
>> FreeBSD and NetBSD have a sysctl property for this, called
>> "net.inet.ip.check_interface", which defaults to 0 (Weak Host Model).
>> However for OpenBSD I haven't seen such a property at all.
>>
>>
>> Basically my setup consisted of the following virtual machines and
>> network interfaces (IP-Forwarding disabled):
>>
>>
>> VM 1 (OpenBSD 6.5):
>>
>> em0: 192.168.100.1/24 ("Internal Network")
>>
>> em1: 10.0.0.97/24 ("NAT")
>>
>>
>> VM 2 (Ubuntu Server 18.10):
>>
>> ens33: 192.168.100.2/24 ("Internal Network")
>>
>>
>>
>>
>>
>> As expected, ens33 of VM2 can communicate with em0 of VM1, since both
>> interfaces are associated with the same Virtualbox network, and both IP
>> addresses are part of the same /24 subnet.
>>
>> ens33 of VM2 can't directly communicate with em1 of VM1, since the IP
>> addresses are part of different subnets and no routes were configured.
>>
>>
>> Then I performed 2 tests:
>>
>>
>> Test 1:
>>
>> Perform an arping from ens33/VM2 (192.168.100.2) to 10.0.0.97 (VM1). The
>> packet was NOT answered by VM1.
>>
> This is a Layer 2 ARP test. Since 10.0.0.97 is not on that interface arp
> will not answer. The host model only matters for Layer 3.
>
>> Test 2:
>>
>> Set the following route on VM2: ip r add 10.0.0.0/24 via 192.168.100.1.
>> Then send an ICMP echo request to 10.0.0.97 (VM1), originating from
>> 192.168.100.2 (VM2). VM1 replied with an ICMP echo reply (with a source
>> MAC address of interface em0).
>>
>>
>> While the behaviour of Test 1 indicates that the Strong Host Model is
>> followed, Test 2 shows the behaviour of a "Weak Host Model".
>
> No, Test 1 is not the right test for the host model.
>
>> What of both is actually supposed to be the default for OpenBSD? Is
>> there any kernel parameter to control these behaviours, like
>> net.inet.ip.check_interface for FreeBSD or NetBSD?
> We don't have a button and just follow the "Weak Host Model".
> You can enforce a strong model per interface with pf(4):
>
> block in on !em0 inet to (em0)
>
> or
>
> block in
> pass in on em0 to (em0)
> pass in on em1 to (em1)
>
Re: Disable ftp in pkg_add syspatch sysupgrade
Andrew Lemin wrote: > To me this seems unusual (was expecting 'curl' or 'wget' etc to avoid code > duplication) and confusing? What do you think? curl is not in openbsd wget is not in openbsd Maybe we should rename our downloading software to lemin, which is obviously a randomly chosen name with some obscure acronym we'll invent to back the name, being a name noone recognizes we can probably avoid assumptions as to what it does, whether it does ftp, or http, or https, or who knows what. Of course such a strange name would also lead people to not discovering it, and make them install some monster software package off the internet with another strange name. In summary I think it's turning into a shitty world with selection by meme.
Re: How can I contribute code to openbsd
On Wed, Oct 30, 2019 at 12:28:35PM -0400, Jeff wrote: > P.S. Are there any urgent areas where the OpenBSD operating system > project is short-handed? > Yes! Just look under /usr/src, /usr/xenocara and /usr/ports Can't go wrong with that plan. :-) Chris Bennett
Re: [6.6] PostgreSQL server: fail to auth
Hi, and thanks. With your reply and lower letter is better. it seems not necessary to set at 'trust', just 'md5' into file pg_hba.conf. (gitea need 'md5') :D Le 30/10/2019 à 21:25, ch...@qatland.com a écrit : >> Hi, >> >> On my OpenBSD server, run with 6.6, I installed Postgresql server. >> >> I have a problem with auth. solene@ is informed of this problem; but >> I'll tell you about it. Perhaps you have a solution? >> >> FYI: I start completely with Postgresql. Usually I use MySQL* >> Postgresql has just been installed. >> >> >> >> The error message: >> >> psql: FATAL: password authentication failed for user "***" >> >> >> >> Demo: >> >> # su - _postgresql >> arrakiss$ psql -U postgres >> Password for user postgres: >> psql (11.5) >> Type "help" for help. >> >> postgres=# CREATE USER ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 WITH PASSWORD >> '6TsrKeqq93KyVtc5yVjU9dfZsJkPPtKKdSyEnjypZDkVdgtW4aVN3YNQd5vKoFNx'; >> CREATE ROLE >> postgres=# \connect template1 >> You are now connected to database "template1" as user "postgres". >> template1=# CREATE DATABASE "A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2" WITH >> ENCODING 'UTF-8';" >> CREATE DATABASE >> template1"# GRANT ALL PRIVILEGES ON DATABASE >> "A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2" TO ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2; >> template1"# ALTER DATABASE "A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2" OWNER TO >> ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2; >> template1"# \q >> Use control-D to quit. >> template1"# \q >> arrakiss$ exit >> >> In fact, I have one created user, named ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 >> His password: >> 6TsrKeqq93KyVtc5yVjU9dfZsJkPPtKKdSyEnjypZDkVdgtW4aVN3YNQd5vKoFNx >> One created DB, named: >> A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 >> >> And the user ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 has all rights on DB >> A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 >> >> Right?! >> >> But, when I attempt to connect to DB with user, I have the above the >> error message: >> # psql -U ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 >> Password for user ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2: >> psql: FATAL: password authentication failed for user >> "ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2" >> >> # psql -U ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 -d >> A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 >> Password for user ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2: >> psql: FATAL: password authentication failed for user >> "ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2" >> >> Ok I found it's necessary to change informations into file >> 'pg_hba.conf'. I set as: >> # grep A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 >> /var/postgresql/data/pg_hba.conf >> >> >> local A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 alltrust >> >> And restart the service/daemon postgresql. >> >> Despite, I cant connect on! >> >> --- >> >> Any idea, please?! >> >> -- >> ~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<< >> >> Stephane HUC as PengouinBSD or CIOTBSD >> b...@stephane-huc.net >> >> > > The CREATE USER command is wrong, you forgot to add the LOGIN right. > > The below should work for you. > > CREATE USER ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 WITH LOGIN PASSWORD > '6TsrKeqq93KyVtc5yVjU9dfZsJkPPtKKdSyEnjypZDkVdgtW4aVN3YNQd5vKoFNx'; > > Also depending on the version of Postgresql the capital letters in the > username will be lowercase. This will affect the login ability. > > Have Fun! > Chuck Hall > -- ~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<< Stephane HUC as PengouinBSD or CIOTBSD b...@stephane-huc.net
Re: Disable ftp in pkg_add syspatch sysupgrade
On 2019-10-30, Andrew Lemin wrote: > - But throws errors when I try and use flavours which is critical for > installing python for example (NB; This is a different error to before, > where I was getting 'timeout' instead of 'Invalid argument'); > [HOME]root@testbsd1:/local#pkg_add python%2 py-pip python%3 py3-pip > py3-setuptools > quirks-3.124 signed on 2019-10-16T20:27:45Z > http://mirror.bytemark.co.uk/pub/OpenBSD/6.5/packages/amd64/py3-setuptools-40.0.0v0.tgz: > ftp: Receiving HTTP reply: Invalid argument > signify: gzheader truncated > Couldn't install py3-setuptools-40.0.0v0 Odd. Can you try replicating on 6.6? Does "pkg_add py-pip py3-pip py3-setuptools" (i.e. allow pkg_add to find the dependencies by itself) work?
Re: [6.6] PostgreSQL server: fail to auth
> Hi, > > On my OpenBSD server, run with 6.6, I installed Postgresql server. > > I have a problem with auth. solene@ is informed of this problem; but > I'll tell you about it. Perhaps you have a solution? > > FYI: I start completely with Postgresql. Usually I use MySQL* > Postgresql has just been installed. > > > > The error message: > > psql: FATAL: password authentication failed for user "***" > > > > Demo: > > # su - _postgresql > arrakiss$ psql -U postgres > Password for user postgres: > psql (11.5) > Type "help" for help. > > postgres=# CREATE USER ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 WITH PASSWORD > '6TsrKeqq93KyVtc5yVjU9dfZsJkPPtKKdSyEnjypZDkVdgtW4aVN3YNQd5vKoFNx'; > CREATE ROLE > postgres=# \connect template1 > You are now connected to database "template1" as user "postgres". > template1=# CREATE DATABASE "A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2" WITH > ENCODING 'UTF-8';" > CREATE DATABASE > template1"# GRANT ALL PRIVILEGES ON DATABASE > "A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2" TO ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2; > template1"# ALTER DATABASE "A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2" OWNER TO > ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2; > template1"# \q > Use control-D to quit. > template1"# \q > arrakiss$ exit > > In fact, I have one created user, named ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 > His password: > 6TsrKeqq93KyVtc5yVjU9dfZsJkPPtKKdSyEnjypZDkVdgtW4aVN3YNQd5vKoFNx > One created DB, named: > A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 > > And the user ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 has all rights on DB > A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 > > Right?! > > But, when I attempt to connect to DB with user, I have the above the > error message: > # psql -U ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 > Password for user ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2: > psql: FATAL: password authentication failed for user > "ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2" > > # psql -U ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 -d > A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 > Password for user ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2: > psql: FATAL: password authentication failed for user > "ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2" > > Ok I found it's necessary to change informations into file > 'pg_hba.conf'. I set as: > # grep A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 > /var/postgresql/data/pg_hba.conf > > > local A5mSHO4SamFa2OJmJC81GbDtUhj4wkyU2 alltrust > > And restart the service/daemon postgresql. > > Despite, I cant connect on! > > --- > > Any idea, please?! > > -- > ~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<< > > Stephane HUC as PengouinBSD or CIOTBSD > b...@stephane-huc.net > > The CREATE USER command is wrong, you forgot to add the LOGIN right. The below should work for you. CREATE USER ghiMDQawgogUfFRTikPoWsUFN1xX8bgz2 WITH LOGIN PASSWORD '6TsrKeqq93KyVtc5yVjU9dfZsJkPPtKKdSyEnjypZDkVdgtW4aVN3YNQd5vKoFNx'; Also depending on the version of Postgresql the capital letters in the username will be lowercase. This will affect the login ability. Have Fun! Chuck Hall
Thinkpad E585 usage report
For those unaware, the E585 is a 2017 AMD Ryzen Thinkpad with Vega mobile graphics (similar to the A485 but cheaper). Due to its newness, I wasn't even sure if it was going to boot when I ordered it, but for the most part, everything works decently well. There are a few major problems, but nothing that make the laptop by any means unusable. Important: *Wireless card is entirely non-functional, but is recognized by the kernel. dmesg snippet: `vendor "Atheros", unknown product 0x0042 (class network subclass miscellaneous, rev 0x31) at pci4 dev 0 function 0 not configured` *CPU does not seems to boost clock, and as such cannot get close to its true effective speed; at least if the value reported by sysctl hw.cpuspeed is to be trusted. *The typical AMDGPU problems (cursor buffer is messed up without SWcursor, random hangs/freezes, some recoverable, others not) (considerably less stable than other AMD hardware I've tried on the driver, seems to be more stable with aperture enabled) Less important: *X always graphically bugs out (and occasionally freezes) after suspend/hibernation and needs to be restarted (note switching to a tty, suspending, and switching back to X does not affect this behavior in any way) suspending and hibernating while in wscons works as intended *Mute and brightness controls do not work at all (mixerctl can be used for muting still) Notes: *apm(8) and apmd(8) both work, including suspend and hibernate, as well as all battery-related functions and setperf modes *Integrated webcam works with video(1) *Increasing and decreasing the audio with the function keys works despite mute not working *Ethernet works through re(4) *Anything not listed in this section presumably works; this is just here to remove confusion from the previous parts All in all I'm very impressed. dmesg: ``` OpenBSD 6.6-current (GENERIC.MP) #413: Tue Oct 29 20:11:52 MDT 2019 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 16621588480 (15851MB) avail mem = 16105111552 (15359MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 3.1 @ 0x986ea000 (62 entries) bios0: vendor LENOVO version "R0UET74W (1.54 )" date 07/23/2019 bios0: LENOVO 20KVCTO1WW acpi0 at bios0: ACPI 5.0 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP SSDT SSDT CRAT CDIT UEFI MSDM BATB HPET APIC MCFG SBST WSMT IVRS FPDT SSDT SSDT SSDT UEFI SSDT acpi0: wakeup devices GPP0(S3) GPP1(S3) GPP2(S3) GPP3(S3) GPP4(S3) GPP5(S3) GPP6(S3) GP17(S3) XHC0(S3) XHC1(S3) GP18(S3) LID_(S3) SLPB(S3) acpitimer0 at acpi0: 3579545 Hz, 32 bits acpihpet0 at acpi0: 14318180 Hz acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: AMD Ryzen 5 2500U with Radeon Vega Mobile Gfx, 1996.54 MHz, 17-11-00 cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,FMA3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,SKINIT,TCE,TOPEXT,CPCTR,DBKP,PCTRL3,MWAITX,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,RDSEED,ADX,SMAP,CLFLUSHOPT,SHA,IBPB,XSAVEOPT,XSAVEC,XGETBV1,XSAVES cpu0: 64KB 64b/line 4-way I-cache, 32KB 64b/line 8-way D-cache, 512KB 64b/line 8-way L2 cache, 4MB 64b/line 16-way L3 cache cpu0: ITLB 64 4KB entries fully associative, 64 4MB entries fully associative cpu0: DTLB 64 4KB entries fully associative, 64 4MB entries fully associative cpu0: smt 0, core 0, package 0 mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges cpu0: apic clock running at 24MHz cpu0: mwait min=64, max=64, C-substates=1.1, IBE cpu1 at mainbus0: apid 1 (application processor) cpu1: AMD Ryzen 5 2500U with Radeon Vega Mobile Gfx, 1996.23 MHz, 17-11-00 cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,FMA3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,RDRAND,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,SKINIT,TCE,TOPEXT,CPCTR,DBKP,PCTRL3,MWAITX,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,RDSEED,ADX,SMAP,CLFLUSHOPT,SHA,IBPB,XSAVEOPT,XSAVEC,XGETBV1,XSAVES cpu1: 64KB 64b/line 4-way I-cache, 32KB 64b/line 8-way D-cache, 512KB 64b/line 8-way L2 cache, 4MB 64b/line 16-way L3 cache cpu1: ITLB 64 4KB entries fully associative, 64 4MB entries fully associative cpu1: DTLB 64 4KB entries fully associative, 64 4MB entries fully associative cpu1: smt 1, core 0, package 0 cpu2 at mainbus0: apid 2 (application processor) cpu2: AMD Ryzen 5 2500U with Radeon Vega Mobile Gfx, 1996.23 MHz, 17-11-00 cpu2:
