7.1 on Toshiba Satellite
Finally running OpenBSD 7.1 on a mobile Toshiba / Dynabook Satellite Pro L50-G-11J, very happy. Got XFCE though I might work quite a bit from the console, I really like the old ways too. Required GPT, does'nt support MBR. Regards Jean-François
Atom code environment
Good day, I usually code with Atom, it's elegant and very efficient with for instance multiple line selection, though I could really find an alternative to it, are there similar editors in package ? Specifically the multiline work is very helpful that ought to be enough. Have I missed other editors with this ? Regards Jean-François
Re: OpenBSD 7.0 released, Oct 14
Hi, Very much impressed about all the news in 7.0, I was'nt aware such work was going on. Regards Jean-François
Re: USB devices power control
Ok thank both, I might develop such device then, if other people interested I'd share the product. I'll be used to have backup / spare drives online for the work time only; Jean-François Le 06/10/2021 à 16:36, m...@josuah.net a écrit : If nothing can be found software-side, a dedicated hardware could possibly do it. If it exists driver side, some tool like this could give a hint for finding it on other operating system, and then comparing with OpenBSD as well as getting the actual standard names for that feature: https://github.com/mvp/uhubctl Not really a solution, but rather a way to get a little closer.
USB devices power control
Hello, I'm looking for a way to turn on/off the usb power, does one know which command helps with this ? Regards, Jean-Frnaçois
Re: Sunday presentaion on OpenBSD
Hello, I must have missed the time, wrong time zone. No record, only slides ? Thanks & regards JeanFrançois Le 30/08/2021 à 05:33, Jonathan Drews a écrit : On Sun, Aug 29, 2021 at 11:52:57PM +0100, Chris Narkiewicz wrote: On Sat, Aug 21, 2021 at 07:12:41PM -0600, Jonathan Drews wrote: This Sunday Peter Hansteen will give a presentaion on OpenBSD: "Recent and not so recent changes in OpenBSD that make life better" Any recording available? I am afraid not. However peter has posted a writeup: The Slides https://home.nuug.no/~peter/openbsd_moments/#1 The Writeup https://bsdly.blogspot.com/2021/08/recent-and-not-so-recent-changes-in.html
Re: An OpenBSD Consumer Gateway Launch
Hi Stuart, As far as I understand, this means if the person writes to you, you were intended recipient, and if it was forwarded by someone else you should delete it and then flash yourself with the MIB pencil afterwards. Regards Jean-François Le 14/06/2021 à 08:15, Stuart Longland a écrit : On Fri, 11 Jun 2021 16:15:50 + fern.tje...@aiyja.com wrote: Disclaimer: This e-mail communication and any attachments to it, are confidential and privileged to Etheria Services and Etheria Group, within the European Union, and this includes its sister companies, and to the correct recipients of this email, which are directly applicable to GDPR regulations, and only confidential use of that designated recipient(s) named above in this email may receive the contents herein. If you are not the intended recipient of this message, you are hereby notified that any review, dissemination, distribution or copying of this message is strictly prohibited and may be unlawful and can result in heavy fines relative to your company's income. Please notify the sender immediately and destroy all copies of this message along with all attachments. We give no rights to any reader of this email, to sell or forward our employee or company details on, to any third party, without specific written request Stupid question, but _why_ are we sending this to a public mailing list if it's confidential? I can guarantee the email _will_ be seen by people _not_ listed as "correct recipients" because it can be seen by theoretically **anyone**. Secondly, isn't it a bit late to tell me _now_ that your email is confidential _after_ I have read the body in full? I don't know how people read emails in the European Union, but here in Australia, I start at the top and read to the bottom, not bottom to top (maybe that explains the business world's like for top-posting). That is how I was taught to read when I was learning to read in primary school back in the early 90s, and how I continue to read English text today: I know the law is an ass best ridden backwards, but I didn't think "backwards" is how I was meant to read legal documents too! Thirdly, how I am I meant to "destroy" the copies, assuming I am not a "correct recipient" (which, by the way, is not defined). If this means destruction of the physical storage devices, do I get compensated by Etheria Group for the 5× 2TB HDDs and 4× 2TB SSDs, any of which "may" be "storing" in part or in full, the very email they want "destroyed"? And what comes of all the _other_ data I have sharing those storage volumes that your footer so forcefully asserts should be cast to the bit bucket? It's a nice gesture publicly thanking the OpenBSD authors for their hard efforts, but legal fashion be damned, I strongly object to the demands made in your email's footer.
Re: An OpenBSD Consumer Gateway Launch
Hi, I hope there are many uses of OpenBSD, recently, I put it in my company as host for Samba filesharing, unfortunately the guys tripped out when I left the company, 3 weeks afterwards, and disassembled the box, saying it had no security, yet this was sitted on a private Lan alongside with MS servers. Nevertheless, after many years OpenBSD has never had any issue on all applications I use it. I even noticed the software packages are quite recent, and there are a lot. I'll be moving to electrical engineering in few weeks yet I've seen Qelectrotech and other software I'd like to use are available and even more recent than one Debian based I use. Chances are I'll be able to migrate to OpenBSD for general purpose electrical engineer works. Regards Jean-François Le 14/06/2021 à 15:14, fern.tje...@aiyja.com a écrit : Tommy, dear, I am female. And generally, my apologies for the disclaimer, we work mostly in LE, and are required by legal to put it at the end of emails, as most of you will know. I personally do not see the point but as we deal with multi-national companies that do the same it has become somewhat of a standard. I should have removed it before sending. Cheers Nan June 14, 2021 12:05 PM, "Tommy Nevtelen" wrote: On 14/06/2021 08.15, Stuart Longland wrote: Secondly, isn't it a bit late to tell me _now_ that your email is confidential _after_ I have read the body in full? I don't know how people read emails in the European Union, but here in Australia, I start at the top and read to the bottom, not bottom to top (maybe that explains the business world's like for top-posting). Maybe you were the intended recipient and he assumed you read emails upside down. Being in Australia and all. :) (I'm sorry about this email but I just had to :) /T
Re: Encrypted disk and altoor.
Hi, I'm not sure why that would not work, there's a few hints about backing up on altroos in Absolute Openbsd book. Are you using softraid for disk encryption ? Jean-François Le 24/06/2021 à 09:49, luis...@tin.it a écrit : Hi, It's possible backup the system on altroot disk if the disks are create encrypted? Thanks Luciano.
Re: Machine age and OpenBSD - Thinkpad R51e
Hi, For other reason I'm not comfortable pushing that way, capacitors can give up after quite long time thus I'd probably check for 3-6 years old. Though I don't apply this to myself, I got a 20+ years Toshiba and very happy. Except the graphic card gave up so I it runs console, but I'm still happy with it for it woks well for purposes I need it. I found out OpenBSD is about the only universally running os, hardly found hw it could'nt support though as you mentionned peripherals could be missing. NB heat is aging faster, so consider underclocking, might not be popular but I usually do that for this purpose. Laptops can get quite warm. J.-François Le 16/06/2021 à 02:14, Thomas Vetere a écrit : Hello everyone, I was looking to get a laptop to run OpenBSD. The one I am looking at in particular is the Thinkpad R51e (2005). I like this particular model because it does not come with any extra hardware that OpenBSD does not support in the first place (bluetooth, camera, etc.) My main concern is the longevity that this model would have going forward. I already have a '94 Thinkpad that cannot run the latest OpenBSD well because hardware support was gradually dropped during code cleanups, etc (i.e. newer versions of X11 removed support for my ancient graphics chip because it just wasn't worth the time to maintain the code). Does anyone know, given the age of that model, how many years I might get out of it with OpenBSD and its packaged software before hardware support starts to drop? What is a good rule of thumb for selecting a machine to run OpenBSD with respect to its age? Thank you for your help!
Re: Lenovo Thinkstation Intel Xeon DDB upon boot - AMD64 build works
Hi, Solved with the AMD64 build, which is also for Intel eg Xeon proc in this case, which I wasn't aware, thanks for a person who highlighed this on bugs mailing list. Regards, Jean-François Le 29/04/2021 à 15:33, jeanfrancois a écrit : Hi, DDB is not active (stalled), I couldn't get more info, attached picture is the ending fault. The type of server is a Levono Thinkstation P720 fit with Intel Silver Xeon Silver 4110 processor. I do not have ideas how to get through this. Thank you Jean-François Le 29/04/2021 à 11:51, jeanfrancois a écrit : Good day, I'm trying to install OpenBSD on an old Inter Xeon Lenovo Thinkstation, but it will properly install, on reboot fails on PCI8 enumeration (or PCI6 when I enable only PCIE with the graphic card). I checked internally, nothing fancy seems installed, I disabled most bios features if not all, still the same error at the same point inside the kernel. DDB doesn't allow to do anything, the keyboard is non responsive. I'll try get more informations, meanwhile has some of you information on compatibility issue and how to deal with this for the Thinkstation or Xeon processors ? I installed the i386 OpenBSD 6.8. I can have a shell from finishing the install process, that works. Thanks Jean-François
Re: OpenBSD 6.9
Love song and theme, no lyrics for this one. Jean-François Le 01/05/2021 à 12:49, Oliver Marugg a écrit : Hi @Developers: Many thanks for this new release. @all others and me: Before upgrading your boxes, this is a good moment to donate some bucks to this project again. Have a smooth upgrade. -oliver
Lenovo Thinkstation Intel Xeon DDB upon boot
Good day, I'm trying to install OpenBSD on an old Inter Xeon Lenovo Thinkstation, but it will properly install, on reboot fails on PCI8 enumeration (or PCI6 when I enable only PCIE with the graphic card). I checked internally, nothing fancy seems installed, I disabled most bios features if not all, still the same error at the same point inside the kernel. DDB doesn't allow to do anything, the keyboard is non responsive. I'll try get more informations, meanwhile has some of you information on compatibility issue and how to deal with this for the Thinkstation or Xeon processors ? I installed the i386 OpenBSD 6.8. I can have a shell from finishing the install process, that works. Thanks Jean-François
When to ask a question
Hi Olive, People in here are interested with OpenBSD. Except my mistake there was little questions of yours and a lot other stuff. It's most probable no one will reply to other stuff and get tired of reading. So please if you have some questions be serious, post them and wait. This is not a very large community so you may have 1 or a few answers if you're lucky. Dealing with OpenBSD is quite easy so you should have little issues. There is a good resource website with properly documented Faq and manual. https://www.openbsd.org/faq/index.html https://man.openbsd.org/ https://www.openbsd.org/report.html For chat there an IRC at #openbsd if this is appropriate for you have a look. Jean-François Le 24/04/2021 à 21:40, powerdjet...@protonmail.com a écrit : [...]
Re: Toshiba Satellite A30 : panic
Hi,
No bother it might be a hardware fault,
Sry,
Jean-François
Le 10/04/2021 à 18:00, jeanfrancois a écrit :
Good afternoon,
After installing on an old Toshiba Satellite A30 with 1 Gb of Ram and
128 Mo of graphic shared memory, there is a panic on startup of
X-desktop, it sometimes goes up to showing fvwm but panics at starting
firefox.
It seems to me the issue comes from graphic card.
I tested with fw_update uninstall Radeon firmware, then the graphics
environment won't work at all.
Does this kernel error popup an idea where this comes from, what to do
about it ?
Appart from X environment it works well. Also started under fvwm but
unstable under XFCE4. Always crashes when starting starting firefox.
Probably Radeon driver issue as shown in attached kernel error message
(panic) and trace:
Attached jpeg
dmesg:
OpenBSD 6.8 (GENERIC) #5: Mon Feb 22 03:42:30 MST 2021
Welcome to OpenBSD: The proactively secure Unix-like operating system.
Please use the sendbug(1) utility to report bugs in the system.
Before reporting a bug, please try to reproduce it with the latest
version of the code. With bug reports, please try to ensure that
enough information to reproduce the problem is enclosed, and if a
known fix for it exists, include that as well.
portable$ dmesg
OpenBSD 6.8 (GENERIC) #5: Mon Feb 22 03:42:30 MST 2021
r...@syspatch-68-i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
real mem = 938360832 (894MB)
avail mem = 904957952 (863MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 01/16/04, BIOS32 rev. 0 @ 0xfd700, SMBIOS rev.
2.31 @ 0xd6010 (31 entries)
bios0: vendor TOSHIBA version "V1.30" date 01/16/2004
bios0: TOSHIBA Satellite A30
acpi0 at bios0: ACPI 1.0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC SSDT SSDT SSDT
acpi0: wakeup devices ELAN(S3) OHC1(S3) OHC2(S3) EHCI(S3) MODM(S3)
acpitimer0 at acpi0: 3579545 Hz, 32 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Mobile Intel(R) Pentium(R) 4 CPU 2.66GHz ("GenuineIntel"
686-class) 2.67 GHz, 0f-02-09
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,CNXT-ID,xTPR,PERF,MELTDOWN
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 133MHz
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 11, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (P2P_)
acpiprt2 at acpi0: bus 1 (AGP_)
acpiec0 at acpi0
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: PWRB
"CMP0101" at acpi0 not configured
"PNP0A03" at acpi0 not configured
acpicmos0 at acpi0
"PNP0A05" at acpi0 not configured
acpiac0 at acpi0: AC unit online
acpibat0 at acpi0: BAT1 model "PA3250U " serial 3658Q type Li-Ion oem
"TOSHIBA"
acpicpu0 at acpi0: !C2(500@1 io@0x8014), C1(1000@1 halt), FVS, 2660,
1596 MHz
acpivideo0 at acpi0: VGA_
bios0: ROM list: 0xc/0xf000 0xd/0x6000! 0xd6000/0x800!
0xd8000/0x1000
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "ATI RS300_133 Host" rev 0x02
agp at pchb0 not configured
ppb0 at pci0 dev 1 function 0 "ATI Radeon IGP 9100 AGP" rev 0x00
pci1 at ppb0 bus 1
radeondrm0 at pci1 dev 5 function 0 "ATI Radeon Mobility IGP 9100" rev
0x00
drm0 at radeondrm0
radeondrm0: apic 1 int 16
ohci0 at pci0 dev 19 function 0 "ATI SB200 USB" rev 0x01: apic 1 int
19, version 1.0, legacy support
ohci1 at pci0 dev 19 function 1 "ATI SB200 USB" rev 0x01: apic 1 int
19, version 1.0, legacy support
ehci0 at pci0 dev 19 function 2 "ATI SB200 USB2" rev 0x01: apic 1 int 19
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "ATI EHCI root hub" rev
2.00/1.00 addr 1
piixpm0 at pci0 dev 20 function 0 "ATI SB200 SMBus" rev 0x17: SMI
iic0 at piixpm0
spdmem0 at iic0 addr 0x50: 512MB DDR SDRAM non-parity PC2700CL2.5
spdmem1 at iic0 addr 0x51: 512MB DDR SDRAM non-parity PC2700CL2.5
pciide0 at pci0 dev 20 function 1 "ATI SB200 IDE" rev 0x00: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 0:
wd0: 16-sector PIO, LBA48, 38154MB, 78140160 sectors
wd0(pciide0:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0: removable
cd0(pciide0:1:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 2
pcib0 at pci0 dev 20 function 3 "ATI SB200 ISA" rev 0x00
ppb1 at pci0 dev 20 function 4 "ATI SB200 PCI" rev 0x00
pci2 at ppb1 bus 2
"TI TSB43AB21 FireWire" rev 0x00 at pci2 dev 0 function 0 not configured
rl0 at pci2 dev 3 function 0 "Realtek 8139" rev 0x10: apic 1 int 19,
address 00:02
Re: Samba server issue with Windows file properties
Correct fix, thank you for spotting this.
Jean-François
Le 07/04/2021 à 11:14, kasak a écrit :
hello.
You should look the option "store dos attributes"
quote: When this parameter is set it will override the parameters map
hidden, map system, map archive and map readonly and they will behave
as if they were set to off.
this option is by default ENABLED in samba 4.9. And when it is
enabled, samba will try to store dos attributes in
extended attributes of filesystem.
OpenBSD ffs does not have support or extended attributes.
And your "map" options does not work, because "store dos attributes"
is set.
Try to add "store dos attributes = no" to share definition.
07.04.2021 11:39, jeanfrancois пишет:
Good day,
Sorry to bother with this issue, if someone has a few minutes to
check for hint that'd be very helpful.
Thank you.
After trying everything I could think of, still samba doesn't seem to
properly work with windows special properties:
map archive
map ...
From windows's properties, the Unix properties don't map the archive,
... states, now can we change them.
Changing for example a file or folder to "hidden" from windows
results in error request not supported.
Changing the Unix property in the OpenBSD file system don't result in
showing proper states in Windows.
Do you have hints, does enable the samba map need something else be
setup in samba configuration or specific to OpenBSD ?
I note the "Archive" should be on by default but don't work, I think
the issue may not be in samba configuration.
Here are few configuration files:
fstab
/dev/wd1a /home/pub/ ffs rw 1 2
smb.conf
[global]
workgroup = WORKGROUP
server string = %h server
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
SO_RCVBUF=8192 SO_SNDBUF=8192
log file = /var/log/samba/smbd.%m
max log size = 1024
syslog = 1
log level = 3
dns proxy = no
domain master = yes
netbios name = sambaserver
local master = yes
map to guest = Bad User
invalid users = root
unix password sync = yes
domain logons = no
usershare allow guests = yes
#== Share Definitions
[localshare]
browseable = yes
path = /home/pub
writeable = yes
guest ok = yes
valid users = localshare
create mask = 0755
directory mask = 0755
map readonly = yes
map archive = yes
map hidden = yes
map system = yes
Le 24/03/2021 à 17:00, Kenneth Gober a écrit :
On Mon, Mar 22, 2021 at 9:11 AM jeanfrancois <mailto:jfsimon1...@gmail.com>> wrote:
It has sometimes error messages when copy which I tracked to being
from
Windows network to the Samba server where source files or folders's
properties are not supported (like archiving option).
Has someone a fix for this, or can point out what I may have
missed ?
Consult the smb.conf man page ("man smb.conf") and read about the
"map readonly", "map archive", "map hidden" and "map system" options.
These may help you.
-ken
Re: Samba server issue with Windows file properties
Good day,
Sorry to bother with this issue, if someone has a few minutes to check
for hint that'd be very helpful.
Thank you.
After trying everything I could think of, still samba doesn't seem to
properly work with windows special properties:
map archive
map ...
From windows's properties, the Unix properties don't map the archive,
... states, now can we change them.
Changing for example a file or folder to "hidden" from windows results
in error request not supported.
Changing the Unix property in the OpenBSD file system don't result in
showing proper states in Windows.
Do you have hints, does enable the samba map need something else be
setup in samba configuration or specific to OpenBSD ?
I note the "Archive" should be on by default but don't work, I think the
issue may not be in samba configuration.
Here are few configuration files:
fstab
/dev/wd1a /home/pub/ ffs rw 1 2
smb.conf
[global]
workgroup = WORKGROUP
server string = %h server
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=8192
SO_SNDBUF=8192
log file = /var/log/samba/smbd.%m
max log size = 1024
syslog = 1
log level = 3
dns proxy = no
domain master = yes
netbios name = sambaserver
local master = yes
map to guest = Bad User
invalid users = root
unix password sync = yes
domain logons = no
usershare allow guests = yes
#== Share Definitions
[localshare]
browseable = yes
path = /home/pub
writeable = yes
guest ok = yes
valid users = localshare
create mask = 0755
directory mask = 0755
map readonly = yes
map archive = yes
map hidden = yes
map system = yes
Le 24/03/2021 à 17:00, Kenneth Gober a écrit :
On Mon, Mar 22, 2021 at 9:11 AM jeanfrancois <mailto:jfsimon1...@gmail.com>> wrote:
It has sometimes error messages when copy which I tracked to being
from
Windows network to the Samba server where source files or folders's
properties are not supported (like archiving option).
Has someone a fix for this, or can point out what I may have missed ?
Consult the smb.conf man page ("man smb.conf") and read about the
"map readonly", "map archive", "map hidden" and "map system" options.
These may help you.
-ken
Re: Samba server : issue with file transfer from Windows network with share special properties
Thanks
Le 24/03/2021 à 17:00, Kenneth Gober a écrit :
On Mon, Mar 22, 2021 at 9:11 AM jeanfrancois <mailto:jfsimon1...@gmail.com>> wrote:
It has sometimes error messages when copy which I tracked to being
from
Windows network to the Samba server where source files or folders's
properties are not supported (like archiving option).
Has someone a fix for this, or can point out what I may have missed ?
Consult the smb.conf man page ("man smb.conf") and read about the
"map readonly", "map archive", "map hidden" and "map system" options.
These may help you.
-ken
Samba server : issue with file transfer from Windows network with share special properties
Good afternoon, I built up a samba server which is coupled on an infrastructure with other Windows servers. It has sometimes error messages when copy which I tracked to being from Windows network to the Samba server where source files or folders's properties are not supported (like archiving option). In other words Windows client complains the host doesn't support pops an error message on each on these items. Has someone a fix for this, or can point out what I may have missed ? The configuration file is really simple: [global] workgroup = WORKGROUP server string = %h server socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=8192 SO_SNDBUF=8192 log file = /var/log/samba/smbd.%m max log size = 1024 syslog = 0 dns proxy = no domain master = yes netbios name = sambaserver preferred master = yes map to guest = Bad User invalid users = root unix password sync = yes domain logons = no [localshare] browseable = yes path = /home/pub writeable = yes guest ok = yes valid users = localshare directory mask = 0777 [public] browseable = yes path = /home/pub public = yes writeable = yes guest ok = yes force user = nobody create mask = 0777 directory mask = 0777 Thank you, Jean-François
E-commerce recommendation
Good day, Pardon me for slightly off topic question, but I would like to rely on the OpenBSD community. Do we have a recommended e-commerce from security and stability point of views ? Regards, Jean-François
Re: Hardware Random Number Generators (RNG)
Hi, An interesting video for this: https://www.youtube.com/watch?v=gp_90-3R0pE I think OpenBSD gets entropy from many sources - thisn't very much documented as far as I could see - such as time between interrupts, application memory allocation. In general a multi-threaded environment run by a clock running interrupts provides a good entropy that way. There surely is much more that feeds into the entropy. You can have a look at getentropy() and arc4random(). Further it appears a simple usb device can't have that much entropy. Further arc4random polls out chunks of random to the various applications so as long as you're not running a constrained environment there's probably no issue (as long as you have several application threads running simultaneously). Notice the random seed is regenerated at boot and shutdown so as long you've run once a certain amount of time and rebooted the computer once, it's got to a state where random generator shouldn't predictable since it bootstraps the entropy for next startup at shut-down every time. Side note, for a server the source of entropy is plenty, network data are completely asynchronous so mixing them up with internal states probably make a very job. I'd like to be able to help reading from your device, I haven't done that before sorry. Jean-François Le 10/07/2020 à 00:21, ken.hendrick...@l3harris.com a écrit : I wrote: How do I use a hardware random number generator to continuously seed /dev/random with new truly random numbers? --- Theo de Raadt wrote: We consider these devices boring, because the kernel does a good enough job creating random. randomness only has a bootstrap problem. And these devices don't solve the bootstrap problem. I'm thinking of headless servers, where randomness can ONLY come from the network. There is no keyboard, no mouse, etc. I'm also thinking of first boot after install, when keys are generated. I think that is what you mean by the bootstrap problem. Thanks, Ken PS I'm also thinking of very old hardware, without RDRAND in the CPU. Not to mention that you can't necessarily trust RDRAND! CONFIDENTIALITY NOTICE: This email and any attachments are for the sole use of the intended recipient and may contain material that is proprietary, confidential, privileged or otherwise legally protected or restricted under applicable government laws. Any review, disclosure, distributing or other use without expressed permission of the sender is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies without reading, printing, or saving.
Re: OpenBSD as a NAS
Hello, For your use case make sure from reading softraid it will fit your needs in the first place, perform some tests to make sure softraid meets what you need. Otherwise have a look at hardware raids which OpenBSD supports. As far as NAS for local, yes OpenBSD's perfect for the job, I've used it since many years and still do. Had a few hardware crashes and filesystem rebuild but all in all never had any issue. I prefer the simple volumes, I don't understand RAID so good, as you feel confident with it use it either ways. Initially I had NFS and Samba and FTP, nowadays only Samba and FTP over SSH (I think that's called SFTP). OpenBSD file systems aren't journaled (file system check after a crash). Also check how to perperly tune the filesystems, I think soft updates can be advised. If you need further advises let ask. Jean-François Le 03/12/2020 à 00:19, Ashton Fagg a écrit : Hi all, I'm currently in the process of provisioning a new NAS for home. It's replacing an older Synology unit that ticks me off in so many ways. I am looking to hear other's experiences with using OpenBSD as a NAS - specifically in terms of reliability, and for suggestions on how to provision my storage. I have an LSI card (supported by the drivers in OpenBSD) that is currently flashed to IT mode, but it can of course flashed back to the IR firmware which lets it act as a hardware RAID controller. My needs for the NAS are as follows: NFS and Samba share support, reasonable performance, some amount of tolerance to disk failure, reliable and trustworthy software and file system, ability to closely monitor disk/array health. By extension, it should also be as simple as possible. It might be nice to have it be able to host an iSCSI volume, but that's not essential. I don't care about bleeding edge performance, fancy web UIs or any other "shiny" stuff. By my estimates, OpenBSD with softraid volumes should tick all of those boxes. The box will do nothing else besides be a file server. OpenBSD is my preferred OS nowadays, but I am open to something else if it's the best tool for the job. I guess I'm trying to find out if there's any compelling reason why I *shouldn't* use OpenBSD with softraid. (ZFS also scares me, btw. Maybe unjustifiably so, but it seems very complex and I suspect much of the hype comes down to zealotry and fanboyism.) The questions I have are: a) Is softraid reliable enough to support my use-case? Does anyone have anecdotes to encourage/discourage use of softraid for this application? b) Would I be better off using the LSI RAID controller for the arrays? c) Bearing in mind that the provisioning scheme I have in mind is to provision the disks in pairs (forming RAID1 arrays), thus resulting in 3-4 separate volumes (6-8 disks), is there any reason I should *not* use OpenBSD, and look more toward something like TrueNAS or FreeBSD? (Before anyone mentions it - Yes, I have a proper backup system. I do not rely on the redundancy provided by RAID arrays in lieu of a real backup. I have both a local backup and offsite backup.) Thanks in advance.
Re: Why does OpenBSD still include Perl in its base installation?
Good morning Dawid, Have you looked at different installations methods and post install options ? Customizing the Install Process https://www.openbsd.org/faq/faq4.html#site This will certainly be worth looking at if you intend to optimize and customize installation. Regards, Jean-François Le 23/05/2020 à 17:38, Dawid Czeluśniak a écrit : An important note: If you do any of that and subsequently encounter a problem, you must 1. Assume you created that problem for yourself 2. Not file a bug report 3. Not complain to others on OpenBSD mailing lists. Fair enough. Thank you all for a detailed explanation.
Re: OpenBSD insecurity rumors from isopenbsdsecu.re
Good evening, As long as there's no material published it's worth just any other word. You can state anything you like granted this collection has value, so no there are no clear points, nothing really worthwhile can emerge. When I feel lost in any Unix system calls I just open an OpenBSD's man page and there you go, things are clear, well explained, and make sense. This above response just any other words too, but actually that's why we like it, this OS and environment just makes sense. Regards J.F. Le 07/05/2020 à 16:00, i...@aulix.com a écrit : Dear OpenBSD fans, Can you please comment negative appraisal from the following website: https://isopenbsdsecu.re/quotes/ I did not want to hurt anyone, just looking for a secure OS and OpenBSD looked very nice to me before I have found this website. Kind Regards
OpenBSD and Banana PI or armv7 in general
Good day folks, I have sucessfully installed and configured a Beagle Bone Black, and using the GPIO on it, though it has to be configures in lower userlevel ; We plan to implement a small utility using a Banana PI in the future. A few insights could be helpful, is this a work in progress or has a good support already, checked the f.a.q., is gpio function‐ al (assuming yes but not listed) ? Does "halt ‐p" function, would you recommend this soc for new projects ie mature enough or may be a more relevant choice in armv7 ? Regards, Jean‐François Simon
Re: news from my (probably not) hacked box
It used to be this pf.conf would work (possibly not on latest version): block in all pass out all keep state Pass out keeps states from pass in is not required. Packet filter is stateful and gracefully lets expected packets come trough when they match a connection initiated. Jean-François Le 02/04/2020 à 22:26, Kristjan Komlosi a écrit : [...] but aren't there supposed to be some rules that pass traffic inbound to your interface?
Re: Filesystem corruption on OpenBSD routers after power outage?
Good day, I have few questions, why are soft updates not on by default, and does they help consistency in case of failure, are they recom‐ mended to be turned on only in specific case ? Except my mis‐ take, they help keeping drive consistent, avoid the need for fsck for most hard failure cases, and only risk to have unused spare sectores which can be later recovered. Would not they help with the file system in general or some draw back with their use ? Regards, J.F.
Re: Awaiting a diff [was: Re: File systems...] Probably not gonna happen anyway
Good evening, Very good videos are available from one of the developer of EXT2/3/4 recommended to see. https://www.youtube.com/watch?v=2mYDFr5T4tY OpenBSD's FFS code looks awesome. Jean-François Le 09/01/2020 à 03:25, Theo de Raadt a écrit : Xiyue Deng wrote: It would be better to point out where to start, what hard problems to solve, what work has been done in this area that people can continue to work on. Looking at that list, noone here owes you any of those. Do your own homework. Re-reading the thread is remarkable. It's a bunch of people who won't do the work telling us that we need to tell them what work to do. A bunch of garbage is coming out of your mouths.
Re: What do you use to generate invoices on OpenBSD?
Thanks for that insight on using LaTeX (from ports).
Absolutely useful.
Regards, Jean-François
Le 22/12/2019 à 01:53, Ingo Schwarze a écrit :
Hi Mikolaj,
Mikolaj Kucharski wrote on Sat, Dec 21, 2019 at 11:57:07PM +:
Do you generate invoices on OpenBSD?
Yes.
What do you recommend? If you have
experience in more than one app, why did you chose one over the other?
If you use something open-source on other OS, let me know as well. If
you use some own written app, for generating invoices, I'm also
interested to hear, just to get an idea, which way people decide to go.
I use print/texlive with \documentclass{dinbrief}. KISS.
The textproc/groff port would work just as well, except that i'm
not sure there is an equivalent to the dinbrief class, so one
would have to set dimensions and spacing manually or with private
macros.
Yours,
Ingo
Battery monitoring does not work properly
Hello, I have seen the battery monitoring working properly after starting apmd however it just disappeared and I'm not able to make it work again, it results in Battery state: absent, 0% remaining, unknown life estimate Any idea how to make it properly work ? Thanks. OpenBSD 4.9 (GENERIC.MP) #794: Wed Mar 2 07:19:02 MST 2011 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Genuine Intel(R) CPU T1400 @ 1.73GHz (GenuineIntel 686-class) 2.17 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM real mem = 3184750592 (3037MB) avail mem = 3122503680 (2977MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 05/22/09, BIOS32 rev. 0 @ 0xf0010, SMBIOS rev. 2.5 @ 0xfce70 (31 entries) bios0: vendor American Megatrends Inc. version 1.03 date 05/22/2009 bios0: ASRock Golden Series acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC MCFG ECDT DBGP BOOT OEMB HPET GSCI ATKG SSDT acpi0: wakeup devices USB0(S3) USB1(S3) USB2(S3) USB5(S3) EUSB(S3) USB3(S3) USB4(S3) USB6(S3) USBE(S3) HDAC(S3) P0P1(S4) GLAN(S4) P0P2(S3) WLAN(S3) P0P3(S3) P0P4(S3) P0P5(S3) P0P8(S4) P0P9(S3) SLPB(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 166MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Genuine Intel(R) CPU T1400 @ 1.73GHz (GenuineIntel 686-class) 2.17 GHz cpu1: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins acpimcfg0 at acpi0 addr 0xe000, bus 0-255 acpiec0 at acpi0 acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 1 (P0P1) acpiprt2 at acpi0: bus 2 (P0P2) acpiprt3 at acpi0: bus 3 (P0P3) acpiprt4 at acpi0: bus 5 (P0P4) acpiprt5 at acpi0: bus 6 (P0P5) acpicpu0 at acpi0: C2, C1 acpicpu1 at acpi0: C2, C1 acpitz0 at acpi0: critical temperature 112 degC acpiac0 at acpi0: AC unit in unknown state acpibat0 at acpi0: BAT0 not present acpibtn0 at acpi0: SLPB acpibtn1 at acpi0: LID_ acpivideo0 at acpi0: VGA_ acpivout0 at acpivideo0: DVID acpivout1 at acpivideo0: CRTD acpivout2 at acpivideo0: LCDD acpivout3 at acpivideo0: HDMI bios0: ROM list: 0xc/0x1! pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 Intel GM45 Host rev 0x07 vga1 at pci0 dev 2 function 0 Intel GM45 Video rev 0x07 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xd000, size 0x1000 inteldrm0 at vga1: apic 2 int 16 (irq 10) drm0 at inteldrm0 Intel GM45 Video rev 0x07 at pci0 dev 2 function 1 not configured uhci0 at pci0 dev 26 function 0 Intel 82801I USB rev 0x03: apic 2 int 16 (irq 10) uhci1 at pci0 dev 26 function 1 Intel 82801I USB rev 0x03: apic 2 int 21 (irq 7) uhci2 at pci0 dev 26 function 2 Intel 82801I USB rev 0x03: apic 2 int 19 (irq 3) ehci0 at pci0 dev 26 function 7 Intel 82801I USB rev 0x03: apic 2 int 18 (irq 6) usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 Intel 82801I HD Audio rev 0x03: apic 2 int 22 (irq 4) azalia0: codecs: Realtek ALC662, ATT/Lucent/0x1040, Intel/0x2802, using Realtek ALC662 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 Intel 82801I PCIE rev 0x03: apic 2 int 16 (irq 10) pci1 at ppb0 bus 1 re0 at pci1 dev 0 function 0 Realtek 8168 rev 0x03: RTL8168D/8111D (0x2800), apic 2 int 16 (irq 10), address 00:26:18:47:d2:f0 rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 2 ppb1 at pci0 dev 28 function 1 Intel 82801I PCIE rev 0x03: apic 2 int 17 (irq 5) pci2 at ppb1 bus 2 athn0 at pci2 dev 0 function 0 Atheros AR9285 rev 0x01: apic 2 int 17 (irq 5) athn0: AR9285 rev 2 (1T1R), ROM rev 13, address 00:25:d3:0a:c8:a4 ppb2 at pci0 dev 28 function 2 Intel 82801I PCIE rev 0x03: apic 2 int 18 (irq 6) pci3 at ppb2 bus 3 ppb3 at pci0 dev 28 function 3 Intel 82801I PCIE rev 0x03: apic 2 int 19 (irq 3) pci4 at ppb3 bus 5 ppb4 at pci0 dev 28 function 4 Intel 82801I PCIE rev 0x03: apic 2 int 16 (irq 10) pci5 at ppb4 bus 6 ppb5 at pci0 dev 28 function 5 Intel 82801I PCIE rev 0x03 pci6 at ppb5 bus 7 uhci3 at pci0 dev 29 function 0 Intel 82801I USB rev 0x03: apic 2 int 23 (irq 10) uhci4 at pci0 dev 29 function 1 Intel 82801I USB rev 0x03: apic 2 int 19 (irq 3) uhci5 at pci0 dev 29 function 2 Intel 82801I USB rev 0x03: apic 2 int 18 (irq 6) ehci1 at pci0 dev 29 function 7 Intel 82801I USB rev 0x03: apic 2 int 23 (irq 10) usb1 at ehci1: USB revision 2.0 uhub1 at usb1 Intel EHCI root hub rev 2.00/1.00 addr 1 ppb6 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x93 pci7 at ppb6 bus 8 pcib0 at pci0 dev 31 function 0
Battery monitoring does not work properly
Hello, I have seen the battery monitoring working properly after starting apmd however it just disappeared and I'm not able to make it work again, it results in Battery state: absent, 0% remaining, unknown life estimate Any idea how to make it properly work ? Thanks. OpenBSD 4.9 (GENERIC.MP) #794: Wed Mar 2 07:19:02 MST 2011 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Genuine Intel(R) CPU T1400 @ 1.73GHz (GenuineIntel 686-class) 2.17 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM real mem = 3184750592 (3037MB) avail mem = 3122503680 (2977MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 05/22/09, BIOS32 rev. 0 @ 0xf0010, SMBIOS rev. 2.5 @ 0xfce70 (31 entries) bios0: vendor American Megatrends Inc. version 1.03 date 05/22/2009 bios0: ASRock Golden Series acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC MCFG ECDT DBGP BOOT OEMB HPET GSCI ATKG SSDT acpi0: wakeup devices USB0(S3) USB1(S3) USB2(S3) USB5(S3) EUSB(S3) USB3(S3) USB4(S3) USB6(S3) USBE(S3) HDAC(S3) P0P1(S4) GLAN(S4) P0P2(S3) WLAN(S3) P0P3(S3) P0P4(S3) P0P5(S3) P0P8(S4) P0P9(S3) SLPB(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 166MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Genuine Intel(R) CPU T1400 @ 1.73GHz (GenuineIntel 686-class) 2.17 GHz cpu1: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins acpimcfg0 at acpi0 addr 0xe000, bus 0-255 acpiec0 at acpi0 acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 1 (P0P1) acpiprt2 at acpi0: bus 2 (P0P2) acpiprt3 at acpi0: bus 3 (P0P3) acpiprt4 at acpi0: bus 5 (P0P4) acpiprt5 at acpi0: bus 6 (P0P5) acpicpu0 at acpi0: C2, C1 acpicpu1 at acpi0: C2, C1 acpitz0 at acpi0: critical temperature 112 degC acpiac0 at acpi0: AC unit in unknown state acpibat0 at acpi0: BAT0 not present acpibtn0 at acpi0: SLPB acpibtn1 at acpi0: LID_ acpivideo0 at acpi0: VGA_ acpivout0 at acpivideo0: DVID acpivout1 at acpivideo0: CRTD acpivout2 at acpivideo0: LCDD acpivout3 at acpivideo0: HDMI bios0: ROM list: 0xc/0x1! pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 Intel GM45 Host rev 0x07 vga1 at pci0 dev 2 function 0 Intel GM45 Video rev 0x07 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xd000, size 0x1000 inteldrm0 at vga1: apic 2 int 16 (irq 10) drm0 at inteldrm0 Intel GM45 Video rev 0x07 at pci0 dev 2 function 1 not configured uhci0 at pci0 dev 26 function 0 Intel 82801I USB rev 0x03: apic 2 int 16 (irq 10) uhci1 at pci0 dev 26 function 1 Intel 82801I USB rev 0x03: apic 2 int 21 (irq 7) uhci2 at pci0 dev 26 function 2 Intel 82801I USB rev 0x03: apic 2 int 19 (irq 3) ehci0 at pci0 dev 26 function 7 Intel 82801I USB rev 0x03: apic 2 int 18 (irq 6) usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 Intel 82801I HD Audio rev 0x03: apic 2 int 22 (irq 4) azalia0: codecs: Realtek ALC662, ATT/Lucent/0x1040, Intel/0x2802, using Realtek ALC662 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 Intel 82801I PCIE rev 0x03: apic 2 int 16 (irq 10) pci1 at ppb0 bus 1 re0 at pci1 dev 0 function 0 Realtek 8168 rev 0x03: RTL8168D/8111D (0x2800), apic 2 int 16 (irq 10), address 00:26:18:47:d2:f0 rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 2 ppb1 at pci0 dev 28 function 1 Intel 82801I PCIE rev 0x03: apic 2 int 17 (irq 5) pci2 at ppb1 bus 2 athn0 at pci2 dev 0 function 0 Atheros AR9285 rev 0x01: apic 2 int 17 (irq 5) athn0: AR9285 rev 2 (1T1R), ROM rev 13, address 00:25:d3:0a:c8:a4 ppb2 at pci0 dev 28 function 2 Intel 82801I PCIE rev 0x03: apic 2 int 18 (irq 6) pci3 at ppb2 bus 3 ppb3 at pci0 dev 28 function 3 Intel 82801I PCIE rev 0x03: apic 2 int 19 (irq 3) pci4 at ppb3 bus 5 ppb4 at pci0 dev 28 function 4 Intel 82801I PCIE rev 0x03: apic 2 int 16 (irq 10) pci5 at ppb4 bus 6 ppb5 at pci0 dev 28 function 5 Intel 82801I PCIE rev 0x03 pci6 at ppb5 bus 7 uhci3 at pci0 dev 29 function 0 Intel 82801I USB rev 0x03: apic 2 int 23 (irq 10) uhci4 at pci0 dev 29 function 1 Intel 82801I USB rev 0x03: apic 2 int 19 (irq 3) uhci5 at pci0 dev 29 function 2 Intel 82801I USB rev 0x03: apic 2 int 18 (irq 6) ehci1 at pci0 dev 29 function 7 Intel 82801I USB rev 0x03: apic 2 int 23 (irq 10) usb1 at ehci1: USB revision 2.0 uhub1 at usb1 Intel EHCI root hub rev 2.00/1.00 addr 1 ppb6 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x93 pci7 at ppb6 bus 8 pcib0 at pci0 dev 31 function 0
