Re: OpenBSD 6.1-snapshot boot issues in bhyve

On 5 April 2017 at 13:07, Theo de Raadt wrote: > > > cpu0: Intel(R) Xeon(R) CPU E5-1620 v3 @ 3.50GHz, 3491.87 MHz > > cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA, > CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SS,HTT,PBE,SSE3, >

Re: 802.11n hostap - latency and timeouts

On Thu, Mar 23, 2017 at 09:30:43AM +0900, Stefan Sperling wrote: > On Wed, Mar 22, 2017 at 02:42:19PM +, Kevin Chadwick wrote: > > In case it is of any help to anyone. I tried 11n on a ar9271 a few weeks > > ago and also an ar2133. Both would give athn0: device timeouts but the usb > > ar9271

Re: Topics for revised PF and networking tutorial

Without hijacking this thread completely, but touching on some of the elements discussed above (and I think these are great inclusions for the tutorial). We have implemented a variety of queues to manage our internet links and ikev2 VPNs tunnels to remote offices. We have also done something

Re: Topics for revised PF and networking tutorial

On Wed, 5 Apr 2017 22:44:54 + (UTC) Stuart Henderson wrote: > On 2017-04-05, > wrote: > > I've been using a trick to emulate scheduled rules using IP > > tables. > > Nice trick. Anchors are also good for this. >

Re: OpenBSD 6.1-snapshot boot issues in bhyve

On Wed, Apr 05, 2017 at 12:46:27PM +1000, Jason Tubnor wrote: > Just wondering if anyone else is seeing the same issue I am booting a > 6.1-snapshot in bhyve? In preparation for the 6.1 pending release, I > have tried to spin up 6.1-snap to iron out any issues in bhyve but I > don't get very far

Re: Why isn't OpenBSD in Google Summer of Code 2017?...

I suspect that unless you really know what you are doing, you'll never satisfy the OpenBSD gods. I suspect that there is a good reason that pkg_add was rewritten in perl. I suspect because it may have been written in perl. And just like that a good idea wasn't completely done in another way. On

Re: Why isn't OpenBSD in Google Summer of Code 2017?...

Bring on the Flaming Theo! On Wed, Apr 5, 2017 at 3:55 PM Flipchan wrote: > Ping Theo, couldnt someone create a needs improvments list n put it on > like OpenBSD.org? > > Luke Small skrev: (2 april 2017 16:54:39 CEST) > > > -- > Sincerly flipchan -

Re: Topics for revised PF and networking tutorial

On 2017-04-05, wrote: > I've been using a trick to emulate scheduled rules using IP tables. Nice trick. Anchors are also good for this. But don't forget that active connections won't be dropped unless you also flush the relevant states.

Re: Topics for revised PF and networking tutorial

I've been using a trick to emulate scheduled rules using IP tables. It would be nice to have something like this covered. I have even seen it in the silliest of home router firewalls. First, create a rule with a table like so: # Schedule Table table persist # Scheduled access to HTTP pass in

Re: Topics for revised PF and networking tutorial

On Sat, Apr 1, 2017 at 10:52 AM, Peter N. M. Hansteen wrote: > Hi, > > I thought I'd like to give you a heads up that there will be a "PF and > networking" tutorial at BSDCan 2017 in Ottawa this June. > > The session will however not be the Nth rerun of the old one, we're >

Re: Why isn't OpenBSD in Google Summer of Code 2017?...

2017-04-05 22:55 GMT+02:00 Flipchan : > Ping Theo, couldnt someone create a needs improvments list n put it on like > OpenBSD.org? No. You've got an itch to scratch, fix that. Best Martin

Re: Why isn't OpenBSD in Google Summer of Code 2017?...

Ping Theo, couldnt someone create a needs improvments list n put it on like OpenBSD.org? Luke Small skrev: (2 april 2017 16:54:39 CEST) > -- Sincerly flipchan - LayerProx dev

Udoo X86

Huh, just found out that you can preorder this device right now. So ordering might come later

Udoo X86

Hi, anyone tried running OpenBSD on the udoo x86 ? Dmesg ? What works and what dosen't ? Jan

Re: Why isn't OpenBSD in Google Summer of Code 2017?...

This can all be done without GSoC, and OpenBSD is better off without it. Obviously I cannot speak on behalf of any OpenBSD developers here, this is just my thoughts based on observations of other open-source projects that did GSoC over the years. Some students were shit, letting the projects down

Re: Topics for revised PF and networking tutorial

On Sat, 1 Apr 2017 10:52:20 +0200 "Peter N. M. Hansteen" wrote: > Hi, > > I thought I'd like to give you a heads up that there will be a "PF and > networking" tutorial at BSDCan 2017 in Ottawa this June. > > The session will however not be the Nth rerun of the old one, we're >

Re: OpenBSD 6.1-snapshot boot issues in bhyve

On Tue, Apr 04, 2017 at 09:07:08PM -0600, Theo de Raadt wrote: > > cpu0: 256KB 64b/line 8-way L2 cache > > rdmsr to register 0xc80 on vcpu 0 > > fatal protection fault in supervisor mode > > trap type 4 code 0 rip 811c1d17 cs 8 rflags 202 cr2 0 cpl e rsp >

Re: Why isn't OpenBSD in Google Summer of Code 2017?...

Security and correctness should never be an after-thought. Have you done any real software development? And have you ever tried to find your way through cruddy code? 999 times out of 1000 it is less painful and much more effective to rewrite from scratch. So what's the point of having that

Re: Topics for revised PF and networking tutorial

On Sat, Apr 01, 2017 at 10:52:20AM +0200, Peter N. M. Hansteen wrote: > Hi, > > I thought I'd like to give you a heads up that there will be a "PF and > networking" tutorial at BSDCan 2017 in Ottawa this June. > > The session will however not be the Nth rerun of the old one, we're > starting

Re: Why isn't OpenBSD in Google Summer of Code 2017?...

I imagine there are some projects that need some love that are on the back burner at the moment that could use some hacking; even if it is totally redone later by someone that wants to refactor it for privsep and such. On Tue, Apr 4, 2017 at 4:21 PM Theo de Raadt wrote: >

Re: How does dpb sign packages in 6.1 ?

Ok thanks Stuart & Marc, and of course I managed to pebkac through my ports update script... G. On 05/04/17 10:43, Marc Espie wrote: dpb no longer does. Use pkg_sign(1) directly like sthen says. Before, signing directly during pkg_create(1) made some sense, since the archive was built

Httpd Concrete5 CMS index.php/install vs indes.php?=install on OpenBSD

Hi Lads Had an issue where PhP was fully functioning on the system but the concrete5 installer was not functioning basically I had the following config for php in /etc/httpd.conf root "/htdocs/www/" location "*.php" { fastcgi socket "/run/php-fpm.sock" }

Re: strange behaviour with etherip bridge over IPSEC and UDP queries

2 avril 2017 11:49 "Comète" a écrit: >> On 03/28, Comète wrote: > > Hi, > > I'm trying to build an IPSEC encrypted tunnel that works as a bridge. For > this, I use isakmpd and etherip, vether, bridge interfaces. On each VPN server > (Host A and B), I've got PF running on the

Re: How does dpb sign packages in 6.1 ?

dpb no longer does. Use pkg_sign(1) directly like sthen says. Before, signing directly during pkg_create(1) made some sense, since the archive was built just once with the signature inside. Now that the signature is outside, there is no gain to having pkg_create(1) sign directly, so that was

Re: How does dpb sign packages in 6.1 ?

On 2017-04-04, Noth wrote: >I'm trying to use dpb in 6.1-current, and my setup works till it > tries to sign the package it makes and then fails with this message: .. > I've updated my signify keys and placed them in $CHROOT/etc/signify. I > can't work out what dpb