Re: sshd failure following errata 007 for 5.8

[Stuart Henderson]

Olivier Debré  
free.fr> writes:

> 
> Hello everyone.
> 
> Following Ted's advice regarding 
the use of cd-src.tar.gz
> 
(http://article.gmane.org/gmane.os.op
enbsd.misc/226175), for all 5.8
> patches, I did so.
> I first had an error during 004 
smtpd security fix. Never mind, I use
> Postfix.
> I then applied 007 libcrypto 
reliability fix. No error visible 
during
> the process, but now sshd barks:
> 
> 
/usr/sbin/sshd:/usr/lib/libcrypto.so.
35.0: undefined symbol 'EVP_mdc2'
> lazy binding failed!
> Segmentation fault (core dumped)
> 
> Libcrypto-linked applications are 
quite numerous, to say the least. I
> found 45 in /usr/sbin, 15 in 
/usr/local/sbin/.
> Any idea as to what went wrong?
> I consider putting back the 
libcrypto-linked applications from 
base58
> file set, but I'm sure there's 
someting better to do!

I'm not sure what happened here, 
there's no way that patch 007 would 
do this, and in any event EVP_mdc2 
was removed before 5.8 so shouldn't 
be referenced by that sshd binary. 

Where did your base58 file come from?

OpenBSD installer info prohibit-password > without-password ?

[S]

when installing OpenBSD 
Alow root ssh login? (yes, no, prohibit-password) [no] prohibit-password

after install , in /etc/sshd_config 
PermitRootLogin without-password 

so, why not using "without-password" at installation procedure for consistency?

[no subject]

[ANSHUMAN BISWAL]

*REPLY REQUIRED: Very Very Funny Jokes Subscription Verify*

Re: OpenBSD installer info prohibit-password > without-password ?

[ludovic coues]

2015-11-01 8:56 GMT+01:00 S :
> when installing OpenBSD
> Alow root ssh login? (yes, no, prohibit-password) [no] prohibit-password
>
> after install , in /etc/sshd_config
> PermitRootLogin without-password
>
> so, why not using "without-password" at installation procedure for 
> consistency?
>

http://www.openbsd.org/errata58.html

-- 

Cordialement, Coues Ludovic
+336 148 743 42

Re: PF rules block some websites (?)

[Piotr Kubaj]

On 11/01/15 11:51, Marco Prause wrote:
> Hi Piotr,
>
> just a guess, but you might hit some path mtu discovery issue.
> On customer paths with e.g. mtu less than 1500 it should help to
> discover the minimal mtu and while blocking the don't fragment bit,
> which is used for pmtud, pmtud won't work.
>
> In your case the redirect answer would fit in the maybe decreased mtu,
> but the "website" won't.
>
> Hope my guess was right. But it sounds like an often seen issue - often
> in conjunction with vpns.
>
>
> Regards,
> Marco
>
> Am 31. Oktober 2015 22:50:31 MEZ, schrieb Piotr Kubaj :
>
> Hi,
>
> I'm using OpenBSD 5.8 on a Ubiquiti Edgerouter Lite. It works great,
> apart from my customers reported that some websites don't work for them
> (I've verified that it's true).
>
> My /etc/pf.conf is:
> int_if="{ vether0 cnmac1 cnmac2 }"
> broken="224.0.0.22  127.0.0.0/8 
192.168.0.0/16  172.16.0.0/12  \
> 10.0.0.0/8  169.254.0.0/16
 192.0.2.0/24  \
> 198.51.100.0/24 , 203.0.113.0/24
, \
> 169.254.0.0/16  0.0.0.0/8 240.0.0.0/4
 255.255.255.255/32 "
> set block-policy drop
> set loginterface
> egress
> set skip on lo0
> match in all scrub (no-df random-id max-mss 1440)
> match out on egress inet from !(egress:network) to any nat-to
(egress:0)
> antispoof quick for (egress)
> block in quick on egress from { $broken no-route urpf-failed } to any
> block in quick inet6 all
> block return out quick inet6 all
> block return out quick log on egress proto { tcp udp } from any to any
> port 53
> block return out quick log on egress from any to { no-route $broken }
> block in all
> pass out quick inet keep state
> pass in on $int_if inet keep state
> pass on $int_if from any to { 224.0.0.2 , 239.0.0.0/8
 }
> pass in on $int_if inet proto { tcp udp } from any to ! 192.168.1.1
 port
> 53 rdr-to 192.168.1.1 
> pass in quick on $int_if proto udp from any to ! 192.168.1.1
 port
> 123
> rdr-to 192.168.1.1 
> pass in on egress inet proto tcp to (egress) port 2501 rdr-to
> 192.168.1.2  port 22
> pass in on egress inet proto tcp from any to (egress) port 2500
> pass in on egress inet proto tcp from any to (egress) port 9001
> pass in on egress inet proto tcp from any to (egress) port 9030
>
>
>
>
>
>
> The sites in question are nk.pl  (loads once in a while),
cyberbaba.pl 
> and phoronix.com . They all send 301 redirection
and that's it.
> Any ideas what might cause it?
>
> [demime 1.01d removed an attachment of type application/pgp-signature
which had a name of signature.asc]
>
>
> --
> Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail
> gesendet.
Thanks, but I guess it's not caused by blocking DF fragment. I've
cleared the whole /etc/pf.conf and left only. Since you've mentioned
MTU, I've read a bit about it and PPPoE (I need it for WAN) and found
that I need to add:
match on pppoe0 scrub (max-mss 1440)
to /etc/pf.conf. Thanks!

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]

Re: The OpenBSD developers approve “optimizing assembler” and compilers?

[Stuart Henderson]

On 2015-10-30, français  wrote:
> Mel didn't approve of compilers.
>
> “If a program can't rewrite its own code”,
> he asked, “what good is it?”

Mel didn't have to deal with attackers from 2015, though he would probably
approve of some of their techniques.

Re: Downgrade from 5.8-current to 5.8 release

[mxb]

You could do an “Update” of existing installation via bsd.rd.
This will not be easy and you definitely will need access to console.
You need to remove any installed ports and pay attention to /usr/lib ans
shared libs in it.
After your update via bsd.rd you’ll need to remove those libs from
-current.

Also it depends on how far from -release your -current is.
As far you are then more is not compatible any more and more problems you’ll
get while reverting.

Most easiest way is to collect all configs and to install from scratch.

//mxb

> On 1 nov. 2015, at 14:38, Adam Wysocki  wrote:
>
> Hi,
>
> I have a problem. I mistakenly installed OpenBSD 5.8-current (I thought it
> was 5.8 release). Everything is set up, configured and live, but now
> pkg_add fails, because libc version has changed.
>
> 
> Can't install p5-Crypt-OpenSSL-Random-0.10 because of libraries
> |library c.84.0 not found
> | /usr/lib/libc.so.83.0 (system): bad major
> -
>
> As I don't want to use snapshots and follow -current, is there an easy way
> to downgrade my installation to 5.8 release without losing my
> configuration? I thought about just untaring appropriate tgz packages
> (base58.tgz, copying /bsd etc.) and recompiling one program that I
> installed manually (because it now uses libs from my installed snapshot),
> but I am almost certain I would lose my configuration this way...
>
> --
> "qui hic minxerit aut cacaverit, habeat deos superos et inferos iratos"
> http://www.chmurka.net/

Downgrade from 5.8-current to 5.8 release

[Adam Wysocki]

Hi,

I have a problem. I mistakenly installed OpenBSD 5.8-current (I thought it 
was 5.8 release). Everything is set up, configured and live, but now 
pkg_add fails, because libc version has changed.


Can't install p5-Crypt-OpenSSL-Random-0.10 because of libraries
|library c.84.0 not found
| /usr/lib/libc.so.83.0 (system): bad major
-

As I don't want to use snapshots and follow -current, is there an easy way 
to downgrade my installation to 5.8 release without losing my 
configuration? I thought about just untaring appropriate tgz packages 
(base58.tgz, copying /bsd etc.) and recompiling one program that I 
installed manually (because it now uses libs from my installed snapshot), 
but I am almost certain I would lose my configuration this way...

-- 
"qui hic minxerit aut cacaverit, habeat deos superos et inferos iratos"
http://www.chmurka.net/

Kinesis Advantage not working with USB 3 in OpenBSD 5.8

[John Wilkes]

Hi misc,
 
I use a Kinesis Advantage keyboard. It stopped working when I upgraded to
5.8.
 
It was not a great setback, as I had a similar problem on another machine with
Win 7. If I disable USB 3 in the BIOS, it works again. It just means that I
don't have USB 3, which is not a show-stopper for me. But maybe this is an
issue that would interest one of the devs.

The Kinesis page says:
"Advantage keyboard’s currently do not work on most Windows 7 computers
which have USB 3.0 ports, even if they also have USB 2.0. This problem does
not exist in other operating systems, including Windows 8, Mac & Linux.
Possible work-around: If your Windows 7 computer only has USB 3.0 ports
available, enter the BIOS of your computer during bootup. Look for “USB
Configuration” section in which there may be a checkbox or option for
“Enable USB 3.0 Controller”. Uncheck the box or disable USB 3.0,
reboot,and test keyboard."

I guess we can add OpenBSD to the OS's that do not work.

Cheers,

John

My dmesg below.

OpenBSD 5.8 (GENERIC.MP) #1236: Sun Aug 16 02:31:04 MDT 2015
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 4158898176 (3966MB)
avail mem = 4028960768 (3842MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.8 @ 0xed750 (86 entries)
bios0: vendor Intel Corporation version "RYBDWi35.86A.0249.2015.0529.1640"
date 05/29/2015
bios0: Intel Corporation NUC5i3RYB
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG HPET SSDT UEFI SSDT ASF! SSDT SSDT
SSDT DMAR
acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4)
PS2K(S3) PS2M(S3) PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4)
PXSX(S4) RP04(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i3-5010U CPU @ 2.10GHz, 2095.47 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEA
DLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FS
GSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,RDSEED,ADX,SMAP,SENSOR,ARAT
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Core(TM) i3-5010U CPU @ 2.10GHz, 2095.15 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEA
DLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FS
GSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,RDSEED,ADX,SMAP,SENSOR,ARAT
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 1 (application processor)
cpu2: Intel(R) Core(TM) i3-5010U CPU @ 2.10GHz, 2095.15 MHz
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEA
DLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FS
GSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,RDSEED,ADX,SMAP,SENSOR,ARAT
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 1, core 0, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Core(TM) i3-5010U CPU @ 2.10GHz, 2095.15 MHz
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEA
DLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FS
GSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,RDSEED,ADX,SMAP,SENSOR,ARAT
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 1, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 40 pins
acpimadt0: bogus nmi for apid 0
acpimcfg0 at acpi0 addr 0xf800, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG0)
acpiprt2 at acpi0: bus -1 (PEG1)
acpiprt3 at acpi0: bus -1 (PEG2)
acpiprt4 at acpi0: bus 1 (RP01)
acpiprt5 at acpi0: bus -1 (RP02)
acpiprt6 at acpi0: bus -1 (RP03)
acpiprt7 at acpi0: bus -1 (RP04)
acpiprt8 at acpi0: bus 2 (RP05)
acpiprt9 at acpi0: bus -1 (RP06)
acpiprt10 at acpi0: bus -1 (RP07)
acpiprt11 at acpi0: bus -1 (RP08)
acpiec0 at acpi0: not present
acpicpu0 at acpi0: !C3(200@506 mwait.1@0x60), C2(200@148 mwait.1@0x31),
C1(1000@1 mwait.1), PSS
acpicpu1 at acpi0: !C3(200@506 mwait.1@0x60), 

Watchdog timeouts with em on recent snapshots

[Gregor Best]

Hi people,

I just upgraded one of my routers to todays snapshot and I'm seeing

em0: watchdog timeout -- resetting

in the dmesg. How can I debug this properly? Full dmesg and the output
of ifconfig are below the signature.

-- 
Gregor

$ dmesg
OpenBSD 5.8-current (GENERIC.MP) #1341: Sun Nov  1 01:06:18 MDT 2015
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Atom(TM) CPU D2550 @ 1.86GHz ("GenuineIntel" 686-class) 1.87 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3,xTPR,PDCM,MOVBE,LAHF,PERF,ITSC,SENSOR,ARAT
real mem  = 2135064576 (2036MB)
avail mem = 2081611776 (1985MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 10/11/11, SMBIOS rev. 2.7 @ 0xe9380 (50 entries)
bios0: vendor American Megatrends Inc. version "4.6.5" date 06/21/2012
bios0: INTEL Corporation Tiger Hill
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S3 S4 S5
acpi0: tables DSDT FACP APIC MCFG HPET SSDT SSDT SSDT IFEU
acpi0: wakeup devices P0P8(S4) PS2K(S3) PS2M(S3) USB0(S3) USB1(S3) USB2(S3) 
USB3(S3) USB7(S3) PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) 
PXSX(S4) RP04(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
mtrr: Pentium Pro MTRR support, 7 var ranges, 88 fixed ranges
cpu0: apic clock running at 133MHz
cpu0: mwait min=64, max=64, C-substates=0.1, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Atom(TM) CPU D2550 @ 1.86GHz ("GenuineIntel" 686-class) 1.87 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3,xTPR,PDCM,MOVBE,LAHF,PERF,ITSC,SENSOR,ARAT
cpu2 at mainbus0: apid 2 (application processor)
cpu2: Intel(R) Atom(TM) CPU D2550 @ 1.86GHz ("GenuineIntel" 686-class) 1.87 GHz
cpu2: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3,xTPR,PDCM,MOVBE,LAHF,PERF,ITSC,SENSOR,ARAT
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Atom(TM) CPU D2550 @ 1.86GHz ("GenuineIntel" 686-class) 1.87 GHz
cpu3: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3,xTPR,PDCM,MOVBE,LAHF,PERF,ITSC,SENSOR,ARAT
ioapic0 at mainbus0: apid 4 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 5 (P0P8)
acpiprt2 at acpi0: bus 1 (RP01)
acpiprt3 at acpi0: bus 2 (RP02)
acpiprt4 at acpi0: bus 3 (RP03)
acpiprt5 at acpi0: bus 4 (RP04)
acpiec0 at acpi0: not present
acpicpu0 at acpi0: C1(@1 halt!)
acpicpu1 at acpi0: C1(@1 halt!)
acpicpu2 at acpi0: C1(@1 halt!)
acpicpu3 at acpi0: C1(@1 halt!)
acpitz0 at acpi0: critical temperature is 140 degC
acpipwrres0 at acpi0: FN00, resource for FAN0
acpitz1 at acpi0: critical temperature is 100 degC
acpibat0 at acpi0: BAT0 not present
acpibat1 at acpi0: BAT1 not present
acpibtn0 at acpi0: PWRB
acpiac0 at acpi0: AC unit offline
acpibtn1 at acpi0: SLPB
acpibtn2 at acpi0: LID0
acpivideo0 at acpi0: GFX0
acpivout0 at acpivideo0: DD02
bios0: ROM list: 0xc/0xf400! 0xcf800/0x1000 0xd0800/0x1000 0xd1800/0x1000 
0xd2800/0x1000
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 vendor "Intel", unknown product 0x0bf3 rev 0x04
vga1 at pci0 dev 2 function 0 "Intel GMA 3600" rev 0x0b
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x02: apic 4 int 16
pci1 at ppb0 bus 1
em0 at pci1 dev 0 function 0 "Intel 82583V" rev 0x00: msi, address 
00:03:2d:20:cf:84
ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x02: apic 4 int 17
pci2 at ppb1 bus 2
em1 at pci2 dev 0 function 0 "Intel 82583V" rev 0x00: msi, address 
00:03:2d:20:cf:85
ppb2 at pci0 dev 28 function 2 "Intel 82801GB PCIE" rev 0x02: apic 4 int 18
pci3 at ppb2 bus 3
em2 at pci3 dev 0 function 0 "Intel 82583V" rev 0x00: msi, address 
00:03:2d:20:cf:86
ppb3 at pci0 dev 28 function 3 "Intel 82801GB PCIE" rev 0x02: apic 4 int 19
pci4 at ppb3 bus 4
em3 at pci4 dev 0 function 0 "Intel 82583V" rev 0x00: msi, address 
00:03:2d:20:cf:87
uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x02: apic 4 int 23
uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x02: apic 4 int 19
uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x02: apic 4 int 18
uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x02: apic 4 int 16
ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x02: apic 4 int 23
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 

Re: OpenBSD installer info prohibit-password > without-password ?

[Stuart Henderson]

On 2015-11-01, Adam Van Ymeren  wrote:
> On 1 Nov 2015 7:06 a.m., "ludovic coues"  wrote:
>>
>> 2015-11-01 8:56 GMT+01:00 S :
>> > when installing OpenBSD
>> > Alow root ssh login? (yes, no, prohibit-password) [no] prohibit-password
>> >
>> > after install , in /etc/sshd_config
>> > PermitRootLogin without-password
>> >
>> > so, why not using "without-password" at installation procedure for
>> > consistency?
>> >

Because it was changed very late in the release process. It probably should
be changed in the installer now.

>> http://www.openbsd.org/errata58.html
>
> That doesn't really answer the question.

It doesn't answer it at all, but it's something to watch out for if you're
using this setting.

Re: OpenBSD installer info prohibit-password > without-password ?

[Robert Peichaer]

On Sun, Nov 01, 2015 at 11:18:41AM -0500, Adam Van Ymeren wrote:
> On 1 Nov 2015 7:06 a.m., "ludovic coues"  wrote:
> >
> > 2015-11-01 8:56 GMT+01:00 S :
> > > when installing OpenBSD
> > > Alow root ssh login? (yes, no, prohibit-password) [no] prohibit-password
> > >
> > > after install , in /etc/sshd_config
> > > PermitRootLogin without-password
> > >
> > > so, why not using "without-password" at installation procedure for
> consistency?
> > >
> >
> > http://www.openbsd.org/errata58.html
> 
> That doesn't really answer the question.

Maybe the actual commit message from deraadt@ explains it a bit better?
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshd_config?rev=1.97=text/x-cvsweb-markup

(U)EFI install and boot not finding hd0a:/bsd

[Bryan Vyhmeister]

Perhaps this is related to something else but on my 2013 MacBook Air
with an OpenBSD-only EFI install, boot fails to attempt booting from
hd0a:/bsd but instead tries fd0a:/bsd several times. I tried adding
/etc/boot.conf with boot hd0a:/bsd in both sd0i (the EFI boot partition)
and sd0a. Is this something unique to Apple hardware or is this
something that all (U)EFI installs have trouble with?

Bryan

Re: OpenBSD installer info prohibit-password > without-password ?

[Adam Van Ymeren]

On 1 Nov 2015 7:06 a.m., "ludovic coues"  wrote:
>
> 2015-11-01 8:56 GMT+01:00 S :
> > when installing OpenBSD
> > Alow root ssh login? (yes, no, prohibit-password) [no] prohibit-password
> >
> > after install , in /etc/sshd_config
> > PermitRootLogin without-password
> >
> > so, why not using "without-password" at installation procedure for
consistency?
> >
>
> http://www.openbsd.org/errata58.html

That doesn't really answer the question.

>
> --
>
> Cordialement, Coues Ludovic
> +336 148 743 42

Re: Downgrade from 5.8-current to 5.8 release

[Nick Holland]

On 11/01/15 08:38, Adam Wysocki wrote:
> Hi,
> 
> I have a problem. I mistakenly installed OpenBSD 5.8-current (I thought it 
> was 5.8 release). Everything is set up, configured and live, but now 
> pkg_add fails, because libc version has changed.
> 
> 
> Can't install p5-Crypt-OpenSSL-Random-0.10 because of libraries
> |library c.84.0 not found
> | /usr/lib/libc.so.83.0 (system): bad major
> -
> 
> As I don't want to use snapshots and follow -current, is there an easy way 
> to downgrade my installation to 5.8 release without losing my 
> configuration? I thought about just untaring appropriate tgz packages 
> (base58.tgz, copying /bsd etc.) and recompiling one program that I 
> installed manually (because it now uses libs from my installed snapshot), 
> but I am almost certain I would lose my configuration this way...

Only supported way (i.e., devs and I won't laugh at you when you
complain about the results) is to wipe and reload.

Recover your configuration files from your backups and/or your
installation notes, this will test them in a casual setting, rather than
an emergency, which will be your next opportunity to test.  Really, if
you have good backups and good notes (or good understanding of the
products you are using), this should not be difficult at all.  If it is
difficult, you have problems far bigger than -current.  This is a
wonderful time to fix those problems.

Nick.

Re: APU.1D RealtekRTL8111E

[Theo de Raadt]

> "...push 1 Gigabit of packets..."
> 
> Here is the logic that to me doesn't make sense. It' ok for you to
> disagree with me, but think about it for 2 minutes.

oh come on daniel, your logic is all wrong.

obviously the OP has bought a full 1G of bandwidth from HE at some
datacenter that is fitted with 7" x 7" x 2" racks, and he wants to use
it all.

unfortunately, this device is the wrong fit for his needs.  he'll need
to buy more rackspace also.

Re: APU.1D RealtekRTL8111E

[Daniel Ouellet]

dmesg in the archive already.

APU.1D4

http://marc.info/?l=openbsd-misc=144531661519455=2

Works well so far and the box is somewhat hot as it is the heat sink for
the board.

But in your concern I have one question that really puzzle me about it.

"...push 1 Gigabit of packets..."

Here is the logic that to me doesn't make sense. It' ok for you to
disagree with me, but think about it for 2 minutes.

If your customer have that kind of bandwidth, their internet access cost
most likely is not small. They must have more then a handful employees
and if they actually use that 1Gb, then they must be doing serious work,
well one would hope so anyway.

So, if you are concern for the capacity of this small router, and I may
be mistaken, but as far as I know, Soekris doesn't pass 1Gb I wouldn't
assume this box would either. Disclosure, I haven't tested that far to
be right or wrong... So, assumption only...

But the logic here is, if all the points above are true, that business
or customer of yours really have the resources to do something better.

Then put a few more $ it and do it right! I am not talking 2K, but you
sure can get something more powerful under 1K for sure!

If they can't justify that, then how serious are they about their
business...

It's not like they can't afford it right?

Why go sooo cheap on what may be very critical for them???

Anyway, that's the logic, it is sure great for home, or small office, or
even some what bigger for sure.

But thinking to use this and push it to it's limit for a company that
actually would push 1Gb, well, the logic appear to be broken here to me.

And if you start to add pf, filtering, and what not to that box, what's
left...

It's ONE time expense, not like their monthly recurring cost for the
current 1Gb access is it?

Hope this help some, put thing back in perspective and give you some
food for thought...

It's not because you can get away with something that it make sense to
do it...

Good luck.

Daniel

On 11/1/15 7:51 PM, Predrag Punosevac wrote:
> I am looking to build a firewall for a customer using APU.1D
> 
> http://www.mini-box.com/APU-1D-AMD-G-Series-T40E-APU?sc=8=754
> 
> I have two major concerns. The first one is RealtekRTL8111E. Does that
> thing really work on OpenBSD and can really push 1 Gigabit of packets?
> This thread 
> 
> http://marc.info/?l=openbsd-misc=2=1=APU1D=b
> 
> indicate that it works?
> 
> My second concern is the heat. How hot does APU-1D-AMD run on OpenBSD?
> Is it too hot?  What are recommended ways to deal with the heat. Could
> anybody post a dmesg for APU1D or APU.1D4?
> 
> Personally I really like Soekris net6501 but the price difference is
> substantial.
> 
> Cheers,
> Predrag

Re: APU.1D RealtekRTL8111E

[Daniel Ouellet]

On 11/1/15 10:28 PM, Theo de Raadt wrote:
>> "...push 1 Gigabit of packets..."
>>
>> Here is the logic that to me doesn't make sense. It' ok for you to
>> disagree with me, but think about it for 2 minutes.
> 
> oh come on daniel, your logic is all wrong.
> 
> obviously the OP has bought a full 1G of bandwidth from HE at some
> datacenter that is fitted with 7" x 7" x 2" racks, and he wants to use
> it all.
> 
> unfortunately, this device is the wrong fit for his needs.  he'll need
> to buy more rackspace also.

Well your right again. If he got 7" x 7" x 2", I am totally wrong!!!

Shame on me!

He can get two and CARP them! (P>

The box is actually, 6 1/2" X 6 1/8" x 1" (:>

I just measured it...

I hope he bought power too for HE as this take a HUGE amount. May be
could run it on a small ups with no AC for it for a week before it die.

But I haven't tested that either, so I really don't know what I am
talking about other then the unit they sale for it, can only provide 24
watts max and I know it's not close to what the unit take.

But hey, if he squeeze them real good in that hole the rack will also
serve as heat sink so his concern about heat are resolved!

Anyway, back to more serious things...

Re: (U)EFI install and boot not finding hd0a:/bsd

[Bryan Vyhmeister]

On Sun, Nov 1, 2015, at 04:18 PM, Sevan / Venture37 wrote:
> On 1 November 2015 at 18:09, Bryan Vyhmeister 
> wrote:
> > Perhaps this is related to something else but on my 2013 MacBook Air
> > with an OpenBSD-only EFI install, boot fails to attempt booting from
> > hd0a:/bsd but instead tries fd0a:/bsd several times. I tried adding
> > /etc/boot.conf with boot hd0a:/bsd in both sd0i (the EFI boot partition)
> > and sd0a. Is this something unique to Apple hardware or is this
> > something that all (U)EFI installs have trouble with?
> 
> Same issue on the mid-2012 Air
> https://pbs.twimg.com/media/CSvkrgcWEAAF0xI.jpg

Do you have the same issues with inteldrm(4) attaching to pci(4) and
then the display getting garbled?

Bryan

Re: APU.1D RealtekRTL8111E

[Darren Tucker]

On Mon, Nov 2, 2015 at 11:51 AM, Predrag Punosevac
 wrote:
> I am looking to build a firewall for a customer using APU.1D
>
> http://www.mini-box.com/APU-1D-AMD-G-Series-T40E-APU?sc=8=754
>
> I have two major concerns. The first one is RealtekRTL8111E. Does that
> thing really work on OpenBSD

Yes.

> and can really push 1 Gigabit of packets?

Not that I have seen, but I don't know what the limiting factor is.
iperf will push ~500Mbit/s from userspace (mtu 1500) but the cpus are
maxed out, mostly on interrupts.  I have not tested routing
performance for it (my experience with ALIX leads me to believe the
routing throughput will be better) nor have I tried to tune it.

I have a WIP diff that enables hardware interrupt mitigation on those
realtek chips but I don't have any performance numbers for it.

I also notice dlg just made the following change to sys/dev/ic/re.c
which will probably make a difference (this change is not on the
device I tested):

revision 1.182
date: 2015/11/02 00:08:50;  author: dlg;  state: Exp;  lines: +31 -25;
 commitid: 3h4FftdbNE7umRAE;
later variants of these chips can support bigger rx and tx rings. this
diff expands them so devices that need more packets per interrupt can
use them.

> This thread
>
> http://marc.info/?l=openbsd-misc=2=1=APU1D=b
>
> indicate that it works?
>
> My second concern is the heat. How hot does APU-1D-AMD run on OpenBSD?
> Is it too hot?

The case is noticeably warm, even at idle.

$ uptime
 6:26PM  up 9 days, 23:49, 1 user, load averages: 0.07, 0.08, 0.08
$ sysctl hw.sensors
hw.sensors.km0.temp0=58.00 degC

running both cores flat out:
$ uptime
 6:30PM  up 9 days, 23:54, 1 user, load averages: 2.98, 1.52, 0.69
$ sysctl hw.sensors
hw.sensors.km0.temp0=72.88 degC

I haven't had any heat-related problems, but I'm not using it for
anything serious.

> What are recommended ways to deal with the heat. Could
> anybody post a dmesg for APU1D or APU.1D4?

I think it's an APU1D (2G ram):

$ dmesg
OpenBSD 5.8-current (GENERIC.MP) #1537: Tue Oct 20 09:44:09 MDT 2015
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 2098511872 (2001MB)
avail mem = 2030845952 (1936MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0x7e16d820 (7 entries)
bios0: vendor coreboot version "4.0" date 09/08/2014
bios0: PC Engines APU
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S3 S4 S5
acpi0: tables DSDT FACP SPCR HPET APIC HEST SSDT SSDT SSDT
acpi0: wakeup devices AGPB(S4) HDMI(S4) PBR4(S4) PBR5(S4) PBR6(S4)
PBR7(S4) PE20(S4) PE21(S4) PE22(S4) PE23(S4) PIBR(S4) UOH1(S3)
UOH2(S3) UOH3(S3) UOH4(S3) UOH5(S3) [...]
acpitimer0 at acpi0: 3579545 Hz, 32 bits
acpihpet0 at acpi0: 14318180 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: AMD G-T40N Processor, 1000.15 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,SSSE3,CX16,POPCNT,NXE,MMXX,FFXSR,PAGE1GB,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,IBS,SKINIT,ITSC
cpu0: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 512KB
64b/line 16-way L2 cache
cpu0: 8 4MB entries fully associative
cpu0: DTLB 40 4KB entries fully associative, 8 4MB entries fully associative
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 200MHz
cpu0: mwait min=64, max=64, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: AMD G-T40N Processor, 1000.00 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,SSSE3,CX16,POPCNT,NXE,MMXX,FFXSR,PAGE1GB,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,IBS,SKINIT,ITSC
cpu1: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 512KB
64b/line 16-way L2 cache
cpu1: 8 4MB entries fully associative
cpu1: DTLB 40 4KB entries fully associative, 8 4MB entries fully associative
cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 21, 24 pins
acpiprt0 at acpi0: bus -1 (AGPB)
acpiprt1 at acpi0: bus -1 (HDMI)
acpiprt2 at acpi0: bus 1 (PBR4)
acpiprt3 at acpi0: bus 2 (PBR5)
acpiprt4 at acpi0: bus 3 (PBR6)
acpiprt5 at acpi0: bus -1 (PBR7)
acpiprt6 at acpi0: bus 5 (PE20)
acpiprt7 at acpi0: bus -1 (PE21)
acpiprt8 at acpi0: bus -1 (PE22)
acpiprt9 at acpi0: bus -1 (PE23)
acpiprt10 at acpi0: bus 0 (PCI0)
acpiprt11 at acpi0: bus 4 (PIBR)
acpicpu0 at acpi0: !C2(0@100 io@0x841), C1(@1 halt!), PSS
acpicpu1 at acpi0: !C2(0@100 io@0x841), C1(@1 halt!), PSS
acpibtn0 at acpi0: PWRB
cpu0: 1000 MHz: speeds: 1000 800 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "AMD AMD64 14h Host" rev 0x00
ppb0 at pci0 dev 4 function 0 "AMD AMD64 14h PCIE" rev 0x00: msi
pci1 at ppb0 bus 1
re0 at pci1 dev 0 function 0 "Realtek 8168" rev 0x06: RTL8168E/8111E
(0x2c00), msi, address 00:0d:b9:31:30:74
rgephy0 at re0 phy 7: 

crash with -current

[Sonic]

Upgraded -current earlier today, and system has crashed:
=
Nov  1 22:23:55 stargate /bsd: uvm_fault(0x818f9920,
0xfff7818adf60, 0, 1) -> e
Nov  1 22:23:55 stargate /bsd: fatal page fault in supervisor mode
Nov  1 22:23:55 stargate /bsd: trap type 6 code 0 rip 81329e69
cs 8 rflags 10286 cr2  fff7818adf60 cpl 7 rsp 8000221df76
0
Nov  1 22:23:55 stargate /bsd: panic: trap type 6, code=0, pc=81329e69
Nov  1 22:23:55 stargate /bsd: Starting stack trace...
Nov  1 22:23:55 stargate /bsd: panic() at panic+0x10b
Nov  1 22:23:55 stargate /bsd: trap() at trap+0x7b8
Nov  1 22:23:55 stargate /bsd: --- trap (number 6) ---
Nov  1 22:23:55 stargate /bsd: trap() at trap+0x709
Nov  1 22:23:55 stargate /bsd: --- trap (number 4) ---
Nov  1 22:23:55 stargate /bsd: trap() at trap+0x709
Nov  1 22:23:55 stargate /bsd: --- trap (number 4) ---
Nov  1 22:23:55 stargate /bsd: bpf_filter() at bpf_filter+0x19b
Nov  1 22:23:55 stargate /bsd: _bpf_mtap() at _bpf_mtap+0xf4
Nov  1 22:23:55 stargate /bsd: bpf_mtap_ether() at bpf_mtap_ether+0x39
Nov  1 22:23:55 stargate /bsd: em_start() at em_start+0xd6
Nov  1 22:23:55 stargate /bsd: nettxintr() at nettxintr+0x52
Nov  1 22:23:55 stargate /bsd: softintr_dispatch() at softintr_dispatch+0x8b
Nov  1 22:23:55 stargate /bsd: Xsoftnet() at Xsoftnet+0x1f
Nov  1 22:23:55 stargate /bsd: --- interrupt ---
Nov  1 22:23:55 stargate /bsd: end of kernel
Nov  1 22:23:55 stargate /bsd: end trace frame: 0xff8132b494, count: 246
Nov  1 22:23:55 stargate /bsd: 0x282:
Nov  1 22:23:55 stargate /bsd: End of stack trace.
=
# dmesg
OpenBSD 5.8-current (GENERIC.MP) #8: Sun Nov  1 13:10:37 EST 2015
r...@stargate.grizzly.bear:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 4277665792 (4079MB)
avail mem = 4143894528 (3951MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0x9f000 (19 entries)
bios0: vendor American Megatrends Inc. version "1.2b" date 07/19/13
bios0: Supermicro X7SPA-HF
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP APIC MCFG OEMB HPET EINJ BERT ERST HEST
acpi0: wakeup devices P0P1(S4) PS2K(S4) PS2M(S4) USB0(S4) USB1(S4)
USB2(S4) USB5(S4) EUSB(S4) USB3(S4) USB4(S4) USB6(S4) USBE(S4)
P0P4(S4) P0P5(S4) P0P6(S4) P0P7(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Atom(TM) CPU D525 @ 1.80GHz, 1800.23 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG,LAHF,PERF,SENSOR
cpu0: 512KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 200MHz
cpu0: mwait min=64, max=64, C-substates=0.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Atom(TM) CPU D525 @ 1.80GHz, 1800.01 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG,LAHF,PERF,SENSOR
cpu1: 512KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 3 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 1, remapped to apid 3
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 4 (P0P1)
acpiprt2 at acpi0: bus 1 (P0P4)
acpiprt3 at acpi0: bus 2 (P0P8)
acpiprt4 at acpi0: bus 3 (P0P9)
acpicpu0 at acpi0: C1(@1 halt!)
acpicpu1 at acpi0: C1(@1 halt!)
acpibtn0 at acpi0: SLPB
acpibtn1 at acpi0: PWRB
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Pineview DMI" rev 0x02
uhci0 at pci0 dev 26 function 0 "Intel 82801I USB" rev 0x02: apic 3 int 16
uhci1 at pci0 dev 26 function 1 "Intel 82801I USB" rev 0x02: apic 3 int 21
uhci2 at pci0 dev 26 function 2 "Intel 82801I USB" rev 0x02: apic 3 int 19
ehci0 at pci0 dev 26 function 7 "Intel 82801I USB" rev 0x02: apic 3 int 18
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb0 at pci0 dev 28 function 0 "Intel 82801I PCIE" rev 0x02: msi
pci1 at ppb0 bus 1
ppb1 at pci0 dev 28 function 4 "Intel 82801I PCIE" rev 0x02: msi
pci2 at ppb1 bus 2
em0 at pci2 dev 0 function 0 "Intel 82574L" rev 0x00: msi, address
00:25:90:92:d4:f8
ppb2 at pci0 dev 28 function 5 "Intel 82801I PCIE" rev 0x02: msi
pci3 at ppb2 bus 3
em1 at pci3 dev 0 function 0 "Intel 82574L" rev 0x00: msi, address
00:25:90:92:d4:f9
uhci3 at pci0 dev 29 function 0 "Intel 82801I USB" rev 0x02: apic 3 int 23
uhci4 at pci0 dev 29 function 1 "Intel 82801I USB" rev 0x02: apic 3 int 19
uhci5 at pci0 dev 29 function 2 "Intel 82801I USB" rev 0x02: apic 3 int 18
ehci1 

APU.1D RealtekRTL8111E

[Predrag Punosevac]

I am looking to build a firewall for a customer using APU.1D

http://www.mini-box.com/APU-1D-AMD-G-Series-T40E-APU?sc=8=754

I have two major concerns. The first one is RealtekRTL8111E. Does that
thing really work on OpenBSD and can really push 1 Gigabit of packets?
This thread 

http://marc.info/?l=openbsd-misc=2=1=APU1D=b

indicate that it works?

My second concern is the heat. How hot does APU-1D-AMD run on OpenBSD?
Is it too hot?  What are recommended ways to deal with the heat. Could
anybody post a dmesg for APU1D or APU.1D4?

Personally I really like Soekris net6501 but the price difference is
substantial.

Cheers,
Predrag

Re: (U)EFI install and boot not finding hd0a:/bsd

[Sevan / Venture37]

On 1 November 2015 at 18:09, Bryan Vyhmeister  wrote:
> Perhaps this is related to something else but on my 2013 MacBook Air
> with an OpenBSD-only EFI install, boot fails to attempt booting from
> hd0a:/bsd but instead tries fd0a:/bsd several times. I tried adding
> /etc/boot.conf with boot hd0a:/bsd in both sd0i (the EFI boot partition)
> and sd0a. Is this something unique to Apple hardware or is this
> something that all (U)EFI installs have trouble with?

Same issue on the mid-2012 Air
https://pbs.twimg.com/media/CSvkrgcWEAAF0xI.jpg


Sevan / Venture37

Re: openup and OpenBSD ftp and pkg_add via proxy

[Steve Shockley]

On 10/31/2015 1:46 AM, Raf Czlonka wrote:

Hi Steve,

You hadn't mentioned it and I don't have a proxy at hand to test it, but
won't either simply honour the "http_proxy" environment variable?


Thanks for the reply.  Everything does seem to honor the http_proxy 
environment variable, but I can only get /usr/bin/ftp to reliably use 
one of the three brands of proxy servers I have available (and the one 
that works is slated for decom).


(I also noticed that I copied the wrong log line for the Apache 
download.  I'll re-check that tomorrow when I'm near the machine.  I've 
been staring that this problem too long.)

Re: Downgrade from 5.8-current to 5.8 release

[Adam Wysocki]

Nick Holland  wrote:

> Only supported way (i.e., devs and I won't laugh at you when you
> complain about the results) is to wipe and reload.

I thought there is an easier way :(

Ok, so I'll wipe and reinstall. Thanks.

-- 
"qui hic minxerit aut cacaverit, habeat deos superos et inferos iratos"
http://www.chmurka.net/