Re: Ansible install Re: Reboot and re-link (ignore previously sent message)

2019-06-22 Thread U'll Be King Of The Stars
[Please ignore the previous message I sent on this topic. I accidentally pressed 'Send' before my message was complete.] On 22/06/2019 19:52, cho...@jtan.com wrote: > Lyndon Nerenberg writes: >> We are looking forward to that. *However*, there is a lot to be >> said for regularly re-installing

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread U'll Be King Of The Stars
On 22/06/2019 19:52, cho...@jtan.com wrote: > Lyndon Nerenberg writes: >> We are looking forward to that. *However*, there is a lot to be >> said for regularly re-installing your hosts from scratch. This >> ensures your installer scripts don't rot as host system "features" >> accrete over time.

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread Brian Brombacher
Using Ansible to reinstall the operating system is like trying to turn a four door sedan into a monster truck with a hammer. Wrong tool for the job. > On Jun 22, 2019, at 6:46 PM, Frank Beuth wrote: > >> On Sat, Jun 22, 2019 at 03:06:30AM +0100, Andrew Luke Nesbit wrote: >>> On 21/06/2019

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread Frank Beuth
On Sat, Jun 22, 2019 at 03:06:30AM +0100, Andrew Luke Nesbit wrote: On 21/06/2019 19:02, Frank Beuth wrote: I don't want to re-open the hostilities, but installing OpenBSD via Ansible is very relevant to my interests. I feel exactly the same way and am surprised that Ansible caused

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread chohag
Frank Beuth writes: > That's the interesting thing in my case (at least)... the system *IS* already > extant! And how have you introduced it to your command-and-control system? That is, ultimately, the key. > It has a nice shiny new Ubuntu/Debian/Fedora/centOS install that has just > been >

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread Frank Beuth
On Sat, Jun 22, 2019 at 10:29:22PM +0300, cho...@jtan.com wrote: Ansible is not the correct tool for this job; it can only configure and maintain an _extant_ system. None of the recent plethora of configuration management tools have considered the scenario *before* an operating system has been

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread Andrew Luke Nesbit
On 21/06/2019 19:02, Frank Beuth wrote: > I don't want to re-open the hostilities, but installing OpenBSD via > Ansible is very relevant to my interests. I feel exactly the same way and am surprised that Ansible caused hostilities. Can you send me a link to the thread where this happened please?

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread chohag
Frank Beuth writes: > Yes, and being able to Ansible-manage even the re-installation would make the > whole process that much nicer :) Ansible is not the correct tool for this job; it can only configure and maintain an _extant_ system. None of the recent plethora of configuration management

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread Lyndon Nerenberg
Frank Beuth writes: > Yes, and being able to Ansible-manage even the re-installation would make the > whole process that much nicer :) I started writing a rebuttal to this, but it quickly turned into writing our design document for how we handle this internally across he data- centre. That's

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread chohag
Lyndon Nerenberg writes: > We are looking forward to that. *However*, there is a lot to be > said for regularly re-installing your hosts from scratch. This > ensures your installer scripts don't rot as host system "features" > accrete over time. This is prone to happen when you Ansible- or Or

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread Frank Beuth
On Sat, Jun 22, 2019 at 10:28:53AM -0700, Lyndon Nerenberg wrote: We are looking forward to that. *However*, there is a lot to be said for regularly re-installing your hosts from scratch. This ensures your installer scripts don't rot as host system "features" accrete over time. This is prone

Re: Correct pexp variable for a shell script

2019-06-22 Thread Jacob Adams
On 6/22/19 12:43 PM, Antoine Jacoutot wrote: > On Sat, Jun 22, 2019 at 10:42:39AM -0400, Jacob Adams wrote: >> On 6/22/19 7:05 AM, Antoine Jacoutot wrote: >>> On Fri, Jun 21, 2019 at 03:57:41PM -0400, Jacob Adams wrote: I've got a shell script I'd like to run as a system service. Due to the

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread Lyndon Nerenberg
Daniel Jakots writes: > You can automate installation with autoinstall(8). You can also > automate upgrades with autoinstall(8) This works like a charm. On our load balancers we PXE install with a local rc.firsttime that installs python. After that we do all the system, haproxy, nginx,

Re: HIPPA supported ciphers

2019-06-22 Thread Lyndon Nerenberg
Kihaguru Gathura writes: [...] > TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 Non-compliant with HIPAA guidance > TLS_RSA_WITH_CAMELL TLS_RSA_WITH_CAMELLIA_128_CBC_SHA Non-compliant > with HIPAA guidance > TLS_RSA_WITH_CAMELLIA_128_CBC_SHA Non-compliant with HIPAA guidance > Under what

Re: Correct pexp variable for a shell script

2019-06-22 Thread Antoine Jacoutot
On Sat, Jun 22, 2019 at 10:42:39AM -0400, Jacob Adams wrote: > > On 6/22/19 7:05 AM, Antoine Jacoutot wrote: > > On Fri, Jun 21, 2019 at 03:57:41PM -0400, Jacob Adams wrote: > >> I've got a shell script I'd like to run as a system service. Due to the > >> 16 character limitation on pgrep and the

Re: alc0 watchdog timeout

2019-06-22 Thread Todd Mortimer
On Sat, Jun 22, 2019 at 12:25:30PM +0200, Stephane HUC "PengouinBSD" wrote: > HI > > On 6.5-current: > > As I wrote @ 1:46 AM, it seems OK! > > But, I experiment some troubles on my connexion: > > - unwanted SSH disconnections > > - on X, with Firefox, tabs crashed always in same time. > >

Re: Correct pexp variable for a shell script

2019-06-22 Thread Jacob Adams
On 6/22/19 7:05 AM, Antoine Jacoutot wrote: > On Fri, Jun 21, 2019 at 03:57:41PM -0400, Jacob Adams wrote: >> I've got a shell script I'd like to run as a system service. Due to the >> 16 character limitation on pgrep and the -x flag that rc.subr passes to >> check by default, I can't get check

Re: Correct pexp variable for a shell script

2019-06-22 Thread Antoine Jacoutot
On Fri, Jun 21, 2019 at 03:57:41PM -0400, Jacob Adams wrote: > I've got a shell script I'd like to run as a system service. Due to the > 16 character limitation on pgrep and the -x flag that rc.subr passes to > check by default, I can't get check or stop to work correctly. The > problem is that

Re: alc0 watchdog timeout

2019-06-22 Thread Stephane HUC "PengouinBSD"
HI On 6.5-current: As I wrote @ 1:46 AM, it seems OK! But, I experiment some troubles on my connexion: - unwanted SSH disconnections - on X, with Firefox, tabs crashed always in same time. Perhaps, for Firefox, it's a problem with pledge? I see thoses messages in /var/log/messages - egual

Re: How to specify "device" option in vm.conf to always boot PXE

2019-06-22 Thread Anton Lindqvist
On Fri, Jun 21, 2019 at 02:38:56PM +0200, Joel Carnat wrote: > Hi, > > I need a VM to always boot from the network. > > I could do it using vmctl(8): > # doas vmctl start test -c -B net -b /bsd -n vswitch0 > (...) > PXE boot MAC address fe:e1:bb:d1:c5:d8, interface vio0 > nfs_boot: using

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread tom ryan
On 6/22/19 7:23 AM, Frank Beuth wrote: > I wonder if there is a way to have Ansible build a custom > autoinstall.conf (using templates) and insert it into bsd.rd immediately > prior to uploading. I use elfrdsetroot from upobsd to do something along these lines $ pkg_info upobsd Information for

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread Frank Beuth
On Sat, Jun 22, 2019 at 04:41:47AM +0100, Andrew Luke Nesbit wrote: On 21/06/2019 19:02, Frank Beuth wrote: I don't want to re-open the hostilities, but installing OpenBSD via Ansible is very relevant to my interests. I feel exactly the same way and am surprised that Ansible caused