Re: Chicken and egg, encrypted root FS on remote server

2013-02-20 Thread Paul Schenkeveld
On Wed, Feb 20, 2013 at 07:58:10AM +0100, Paul Schenkeveld wrote: Hi, I've been trying to find a solution for this chicken and egg problem, how to have an encrypted root filesystem on a remote server. Geli can ask for a root password at the console to unlock the root fs but that of course

Re: Chicken and egg, encrypted root FS on remote server

2013-02-20 Thread Wojciech Puchar
Geli can ask for a root password at the console to unlock the root fs but that of course won't work for a remote server. Ideally I'd like the server to start, do minimal network config, run a minimal ssh client (dropbear?) and wait for someone to log in, provide the passphrase to unlock the root

Re: Chicken and egg, encrypted root FS on remote server

2013-02-20 Thread Damien Fleuriot
On 20 Feb 2013, at 08:46, Paul Schenkeveld free...@psconsult.nl wrote: On Wed, Feb 20, 2013 at 02:42:57AM -0500, Jason Hellenthal wrote: Just a thought with no working example but… bootp / tftp - from a remote secured management frame to TX a key filesytem to unlock your rootfs. Could

gpart autofill

2013-02-20 Thread rank1seeker
On target provider I had 20971440 free sectors, each of 512 B. That would be 10485720 kB, for a last slice. This number is valid, as it is splitable with 63, 8, 4 and 2, without any residue. So, upon attempt to add that slice, I get: -- gpart: autofill: No space left on device -- Tried both

Re: Chicken and egg, encrypted root FS on remote server

2013-02-20 Thread Paul Schenkeveld
On Wed, Feb 20, 2013 at 09:47:36AM +0100, Damien Fleuriot wrote: On 20 Feb 2013, at 08:46, Paul Schenkeveld free...@psconsult.nl wrote: On Wed, Feb 20, 2013 at 02:42:57AM -0500, Jason Hellenthal wrote: Just a thought with no working example but… bootp / tftp - from a remote secured

Re: Chicken and egg, encrypted root FS on remote server

2013-02-20 Thread Daniel O'Connor
On 20/02/2013, at 21:43, Paul Schenkeveld free...@psconsult.nl wrote: What about getting a remote console like HP's ILO or Dell's DRAC ? You get to login remotely, you can use some degree of access control... you can even remote boot. For new hardware I could indeed use this, the current

[patch] Wine DLL base address patches

2013-02-20 Thread Damjan Jovanovic
Hi Wine needs some of its libraries to be loaded at specific base addresses (https://wiki.freebsd.org/Wine), something FreeBSD currently lacks. I've written a patch to the dynamic loader (/libexec/ld-elf.so.1) that loads libraries at their preferred base addresses

Re: [patch] Wine DLL base address patches

2013-02-20 Thread Konstantin Belousov
On Wed, Feb 20, 2013 at 05:29:01PM +0200, Damjan Jovanovic wrote: Hi Wine needs some of its libraries to be loaded at specific base addresses (https://wiki.freebsd.org/Wine), something FreeBSD currently lacks. I've written a patch to the dynamic loader (/libexec/ld-elf.so.1) that loads

Re: Looking for reviewers for patch that adds foreign disk support mfiutil

2013-02-20 Thread John Baldwin
On Tuesday, February 19, 2013 6:49:52 pm Steven Hartland wrote: - Original Message - From: John Baldwin Thanks for the feedback John appreciated, a couple of questions inline below if you would be so kind. Certainly. - Is dump_config() really the right choice for 'foreign

Re: libprocstat(3): retrieve process command line args and environment

2013-02-20 Thread John Baldwin
On Tuesday, February 12, 2013 4:50:54 pm Mikolaj Golub wrote: On Fri, Jan 25, 2013 at 03:31:43PM -0500, John Baldwin wrote: BTW, one off-ball thought I have is that I would like to have a mode where libprocstat operates on a core file (of a process, not a kernel crash dump), so it

SA-13:02/libc and FreeBSD 6

2013-02-20 Thread Mark Saad
All I was wondering if anyone knows, off hand if SA-13:02/libc applies to FreeBSD 6-STABLE and if it would be committed to the 6-STABLE branch ? -- mark saad | nones...@longcount.org ___ freebsd-hackers@freebsd.org mailing list

Re: SA-13:02/libc and FreeBSD 6

2013-02-20 Thread Fleuriot Damien
http://www.freebsd.org/security/#sup 6 has been EOL for a looong time. So hmmm, guessing you won't see a patch. On Feb 20, 2013, at 6:29 PM, Mark Saad nones...@longcount.org wrote: All I was wondering if anyone knows, off hand if SA-13:02/libc applies to FreeBSD 6-STABLE and if it would

Re: SA-13:02/libc and FreeBSD 6

2013-02-20 Thread Mark Saad
I am aware its EOL'd but there are still a number of us stuck with 6-STABLE . On Wed, Feb 20, 2013 at 12:31 PM, Fleuriot Damien m...@my.gd wrote: http://www.freebsd.org/security/#sup 6 has been EOL for a looong time. So hmmm, guessing you won't see a patch. On Feb 20, 2013, at 6:29 PM,

Re: SA-13:02/libc and FreeBSD 6

2013-02-20 Thread Fleuriot Damien
My point was, unless someone ports the patch back to 6 , if 6 is indeed affected, I think you're out of luck. I hope you get your answer and, possibly, a patch. On Feb 20, 2013, at 6:32 PM, Mark Saad nones...@longcount.org wrote: I am aware its EOL'd but there are still a number of us stuck

Re: SA-13:02/libc and FreeBSD 6

2013-02-20 Thread Xin Li
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 02/20/13 09:29, Mark Saad wrote: All I was wondering if anyone knows, off hand if SA-13:02/libc applies to FreeBSD 6-STABLE and if it would be committed to the 6-STABLE branch ? The patch itself won't apply, there were many changes after the

Re: libprocstat(3): retrieve process command line args and environment

2013-02-20 Thread Mikolaj Golub
On Wed, Feb 20, 2013 at 09:04:14AM -0500, John Baldwin wrote: The process should be stopped by the time we dump a core, so running it multiple times should be ok in that the sizes should not change. I would say that you should try to implement a determine sizes pass that doesn't allocate

Re: SA-13:02/libc and FreeBSD 6

2013-02-20 Thread Mark Saad
Xin I am rebuilding now, I'll let you know how it works. On Wed, Feb 20, 2013 at 1:32 PM, Xin Li delp...@delphij.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 02/20/13 09:29, Mark Saad wrote: All I was wondering if anyone knows, off hand if SA-13:02/libc applies to

IPMI console [Re: Chicken and egg, encrypted root FS on remote server]

2013-02-20 Thread Paul Schenkeveld
Hi Daniel, On Wed, Feb 20, 2013 at 10:55:47PM +1030, Daniel O'Connor wrote: On 20/02/2013, at 21:43, Paul Schenkeveld free...@psconsult.nl wrote: What about getting a remote console like HP's ILO or Dell's DRAC ? You get to login remotely, you can use some degree of access control...

Re: [patch] Wine DLL base address patches

2013-02-20 Thread Tijl Coosemans
On 20-02-2013 16:48, Konstantin Belousov wrote: On Wed, Feb 20, 2013 at 05:29:01PM +0200, Damjan Jovanovic wrote: Hi Wine needs some of its libraries to be loaded at specific base addresses (https://wiki.freebsd.org/Wine), something FreeBSD currently lacks. I've written a patch to the

Re: [patch] Wine DLL base address patches

2013-02-20 Thread Konstantin Belousov
On Wed, Feb 20, 2013 at 09:51:37PM +0100, Tijl Coosemans wrote: On 20-02-2013 16:48, Konstantin Belousov wrote: On Wed, Feb 20, 2013 at 05:29:01PM +0200, Damjan Jovanovic wrote: Hi Wine needs some of its libraries to be loaded at specific base addresses (https://wiki.freebsd.org/Wine),

Re: IPMI console [Re: Chicken and egg, encrypted root FS on remote server]

2013-02-20 Thread Vincent Hoffman
On 20/02/2013 20:31, Paul Schenkeveld wrote: Hi Daniel, On Wed, Feb 20, 2013 at 10:55:47PM +1030, Daniel O'Connor wrote: On 20/02/2013, at 21:43, Paul Schenkeveld free...@psconsult.nl wrote: What about getting a remote console like HP's ILO or Dell's DRAC ? You get to login remotely, you

Re: IPMI console [Re: Chicken and egg, encrypted root FS on remote server]

2013-02-20 Thread Steven Hartland
- Original Message - From: Paul Schenkeveld free...@psconsult.nl To: Daniel O'Connor docon...@gsoft.com.au Cc: hack...@freebsd.org Sent: Wednesday, February 20, 2013 8:31 PM Subject: IPMI console [Re: Chicken and egg, encrypted root FS on remote server] Hi Daniel, On Wed, Feb 20,

Re: [patch] Wine DLL base address patches

2013-02-20 Thread Damjan Jovanovic
On Wed, Feb 20, 2013 at 10:51 PM, Tijl Coosemans t...@coosemans.org wrote: On 20-02-2013 16:48, Konstantin Belousov wrote: On Wed, Feb 20, 2013 at 05:29:01PM +0200, Damjan Jovanovic wrote: Hi Wine needs some of its libraries to be loaded at specific base addresses

Re: SA-13:02/libc and FreeBSD 6

2013-02-20 Thread Adrian Chadd
On 20 February 2013 12:01, Mark Saad nones...@longcount.org wrote: Xin I am rebuilding now, I'll let you know how it works. As I've said before, if someone wants to take ownership of 6.x and backport changes / push them into STABLE_6, be my guest. Yahoo was doing that for some unsupported old

Re: IPMI console [Re: Chicken and egg, encrypted root FS on remote server]

2013-02-20 Thread Daniel O'Connor
On 21/02/2013, at 9:06, Steven Hartland kill...@multiplay.co.uk wrote: If I change the console redirect to com1, my screen stays blank. Would you perhaps know how to use com1 for redirect and connect to it using ipmi-console (or ipmi-tool)? We use the following on Supermicro servers works