Re: OT: hardware war with manufacturers (espionage claims)

2019-07-05 Thread Theo de Raadt
Stuart Longland wrote: > On 2/7/19 5:43 pm, John Long wrote: > >> What do you think and do when using OpenBSD on this kind of hardware? > > Lemote boxes are kinda neat but they're not the fastest in the world. > > It beats the hell out of the alternatives if you can live with the > >

Re: 4GB RAM too little for Firefox?

2019-07-05 Thread maillists . rulmer
> OpenBSD derives some security by confining processes and web browsing > with firefox is notorious for memory leaks. > > If you mobo supports it, more ram will also improve performance with > firefox and other memory intensive tasks. Firefox is pretty much my only memory intensive task. Thanks

Re: 4GB RAM too little for Firefox?

2019-07-05 Thread maillists . rulmer
> OpenBSD derives some security by confining processes and web browsing > with firefox is notorious for memory leaks. > > If you mobo supports it, more ram will also improve performance with > firefox and other memory intensive tasks. Firefox is pretty much my only memory intensive task. Thanks

Re: OT: hardware war with manufacturers (espionage claims)

2019-07-05 Thread Stuart Longland
On 2/7/19 5:43 pm, John Long wrote: >> What do you think and do when using OpenBSD on this kind of hardware? > Lemote boxes are kinda neat but they're not the fastest in the world. > It beats the hell out of the alternatives if you can live with the > limitations. Gentoo was donated two Lemote

intel ixl driver running Proxmox(kvm) Guest SR-IOV unable to map interrupt

2019-07-05 Thread Tom Smyth
Hello all, im running SR-IOV on Proxmox and im trying to present 40G intel PCI-E NICs direct to the Guest using SR-IOV, XL710 QSFP+ In openBSD during the boot up we get an unable to map interrupt as shown below virtio1: msix shared ixl0 at pci0 dev 16 function 0 "Intel XL710 QSFP+" rev 0x02:

IKEv2 Multiple NAT'd Clients

2019-07-05 Thread David Anthony
Hello, I have an IKEv2 VPN server setup with OpenBSD + IKED + PF. Everything is working properly - a single client device will properly route all traffic through the VPN and exit from the VPN server via PF + NAT. However, I experience errors with two clients simultaneously connecting. Both

Re: ed(1) man page doesn't mention use of single / and ?

2019-07-05 Thread Vincent Waciuk
Wonderful is perhaps too strong, but I chuckled many times while reading it.

Re: ed(1) man page doesn't mention use of single / and ?

2019-07-05 Thread Mohamed Fouad
I wouldn't say it is particularly wonderful but it is whats out there! However, Michael W. Lucas(the author) do have awesome books. On Fri, Jul 5, 2019 at 8:26 PM Vincent Waciuk wrote: > Ed Mastery is a wonderful read. Highly recommended. >

Re: ed(1) man page doesn't mention use of single / and ?

2019-07-05 Thread Vincent Waciuk
Ed Mastery is a wonderful read. Highly recommended.

Re: Autostart of ssh-agent in root's .profile prevents startup

2019-07-05 Thread Antoine Jacoutot
On Fri, Jul 05, 2019 at 08:52:55AM +0200, Rosselur Rossen wrote: > Hi! > > I have the following added to root's .profile: > > --snip-- > env=~/.ssh/agent.env > agent_load_env () { test -f "$env" && . "$env" >| /dev/null ; } > agent_start () { > (umask 077; ssh-agent >| "$env") >

Re: ed(1) man page doesn't mention use of single / and ?

2019-07-05 Thread Jason McIntyre
On Thu, Jul 04, 2019 at 11:47:50PM +0200, ropers wrote: > Do I understand correctly that this is in reference to these parts of man 1 > ed: > > > /re/ > >The next line containing the regular expression re. The search wraps to > > the beginning of the buffer and continues down to the current

Re: 4GB RAM too little for Firefox?

2019-07-05 Thread lists
Fri, 5 Jul 2019 08:09:26 -0700 "Heppler, J. Scott" > Richard Ulmer wrote: > > Hi all, > > after having Firefox running for some time (ca. 30min to 2h) my > > system seems to become slow. I get frequent freezes for several > > seconds, mpv instances start crashing and things like switching tabs >

Re: 4GB RAM too little for Firefox?

2019-07-05 Thread Heppler, J. Scott
Richard Ulmer wrote: Hi all, after having Firefox running for some time (ca. 30min to 2h) my system seems to become slow. I get frequent freezes for several seconds, mpv instances start crashing and things like switching tabs in Firefox become a pain. I've got 4GB of RAM installed and when I

Re: how to update remote bind zone from pppoe client?

2019-07-05 Thread Stuart Henderson
On 2019-07-05, Paco Esteban wrote: > On Fri, 05 Jul 2019, Marko Cupać wrote: > >> Hi, >> >> I have a bunch of branch offices whose gateways (OpenBSD on APU) connect >> to 'net via PPPoE and obtain their dynamic public IP addresses from >> ISPs. Is there a way for them to update remote bind zone

Re: AESGCM supported in IKEv1 phase 2 but not in phase 1

2019-07-05 Thread Stuart Henderson
On 2019-07-05, Daniel Polak wrote: > Stuart Henderson wrote on 4-7-2019 17:14: >> On 2019-07-04, Daniel Polak wrote: >>> Just tried to configure an IKEv1 VPN connection with AESGCM but isakmpd >>> only supports that in phase 2 but not in phase 1. >>> See

Re: how to update remote bind zone from pppoe client?

2019-07-05 Thread Paco Esteban
On Fri, 05 Jul 2019, Marko Cupać wrote: > Hi, > > I have a bunch of branch offices whose gateways (OpenBSD on APU) connect > to 'net via PPPoE and obtain their dynamic public IP addresses from > ISPs. Is there a way for them to update remote bind zone every time IP > changes so I have their

4GB RAM too little for Firefox?

2019-07-05 Thread Richard Ulmer
Hi all, after having Firefox running for some time (ca. 30min to 2h) my system seems to become slow. I get frequent freezes for several seconds, mpv instances start crashing and things like switching tabs in Firefox become a pain. I've got 4GB of RAM installed and when I look at htop after my

how to update remote bind zone from pppoe client?

2019-07-05 Thread Marko Cupać
Hi, I have a bunch of branch offices whose gateways (OpenBSD on APU) connect to 'net via PPPoE and obtain their dynamic public IP addresses from ISPs. Is there a way for them to update remote bind zone every time IP changes so I have their current public IP in DNS? Thank you in advance, --

Re: Autostart of ssh-agent in root's .profile prevents startup

2019-07-05 Thread Raf Czlonka
On Fri, Jul 05, 2019 at 07:52:55AM BST, Rosselur Rossen wrote: > Hi! > > I have the following added to root's .profile: > > --snip-- > env=~/.ssh/agent.env > agent_load_env () { test -f "$env" && . "$env" >| /dev/null ; } > agent_start () { > (umask 077; ssh-agent >| "$env") >

Re: Autostart of ssh-agent in root's .profile prevents startup

2019-07-05 Thread Robert Klein
Hi, On Fri, 5 Jul 2019 08:52:55 +0200 Rosselur Rossen wrote: > Hi! > > I have the following added to root's .profile: > > --snip-- > env=~/.ssh/agent.env > agent_load_env () { test -f "$env" && . "$env" >| /dev/null ; } > agent_start () { > (umask 077; ssh-agent >| "$env") >

Re: AESGCM supported in IKEv1 phase 2 but not in phase 1

2019-07-05 Thread Daniel Polak
Stuart Henderson wrote on 4-7-2019 17:14: On 2019-07-04, Daniel Polak wrote: Just tried to configure an IKEv1 VPN connection with AESGCM but isakmpd only supports that in phase 2 but not in phase 1. See https://marc.info/?l=openbsd-cvs=128516335103833=2 for the commit. Is there any special

an alias switch in doas

2019-07-05 Thread Joseph A Borg
may I humbly suggest the addition of an alias switch in the doas command. It would serve to shorten the command into something shorter and perhaps more memorable. I don’t think there are security implications as such but I’m no expert on security. I think it’s neater to have this functoinality

Autostart of ssh-agent in root's .profile prevents startup

2019-07-05 Thread Rosselur Rossen
Hi! I have the following added to root's .profile: --snip-- env=~/.ssh/agent.env agent_load_env () { test -f "$env" && . "$env" >| /dev/null ; } agent_start () { (umask 077; ssh-agent >| "$env") . "$env" >| /dev/null ; } agent_load_env # agent_run_state: 0=agent running w/

Re: umsm0: this device is not using CDC notify message in intr pipe. HP Compaq dc5750

2019-07-05 Thread Roderick
On Fri, 5 Jul 2019, Kihaguru Gathura wrote: This was working up and until OpenBSD 6.4 amd64. With OpenBSD 6.5 i386 release on a Samsung nc10 nettop and with a Huawei E372 modem umsm is working. I do not know what is happening in current. For me it would be a catastrophe if it stops

Re: How to clear the screen correctly in ksh

2019-07-05 Thread Максим
Hello, Thanks for the hint, it really works out of the box on 6.5 I did not notice it because I use vi mode in ksh which does not seem to know about this key combination. In man ksh there is no option for the vi mode. --  Maksim Rodin 04.07.2019, 12:59, "Stuart Henderson" : > On 2019-07-04,