Re: Internal Logging?

2022-04-04 Thread Michael Hekeler
Am 04.04.22 08:22 schrieb Eric Thomas: > I'd like to understand more about how OpenBSD logs internal events such as: > > - pkg_add/delete events > - user logins > - X session start/stops > etc. > > Is there "one big log" where all of these types of events are stored? > Or are they logged in

Re: sysupgrade from -stable (was: error rebuilding binaries after 6.9->7.0 sysupgrade)

2022-04-04 Thread Matthew Ernisse
On Mon, Apr 04, 2022 at 08:37:57PM +0100, Steve Fairhead said: > To put it another way, what is the recommended way of upgrading a production > system with patches applied (so -stable)? Historically I used the manual method to upgrade releases but have been using sysupgrade(8) since it became The

Re: How to track system changes?

2022-04-04 Thread Eric Thomas
Very valuable insights. That’s a great idea. The rysnc script was ksh/bash or cron? Ideally I’d like to use Python to tackle something like this but I’m not against learning shell. > On Apr 4, 2022, at 2:02 PM, Nick Holland wrote: > > On 4/4/22 11:32 AM, Eric Thomas wrote: >> I want to

Re: OpenBSD benchmarks

2022-04-04 Thread infoomatic
imho benchmarking only makes sense for your scenario, so I recommend benchmarking the ruleset you intend to use on that device. Also: what are you benchmarking against, and what is your setup (nat, bridge etc.)? On 04.04.22 21:50, Nicolas Goy wrote: Hello, I'd like to make some 10gbit/s

Re: sysupgrade from -stable (was: error rebuilding binaries after 6.9->7.0 sysupgrade)

2022-04-04 Thread Stuart Henderson
On 2022/04/04 20:37, Steve Fairhead wrote: > On 04/04/2022 13:10, owner-m...@openbsd.org wrote: > > sysupgrade only copes with what look like release versions (no version > > suffix, upgrades to release+0.1 with no arguments, or snapshot with -s) > > or snapshots (-current or -beta suffix, by

Re: How to track system changes?

2022-04-04 Thread Nick Holland
On 4/4/22 11:32 AM, Eric Thomas wrote: I want to have a high degree of confidence in my system's state (packages that have been added, configs that have changed, permissions changed, etc). I've read about "read only filesystems" and the pro's/con's

OpenBSD benchmarks

2022-04-04 Thread Nicolas Goy
Hello, I'd like to make some 10gbit/s benchmarks for an OpenBSD based router. I was wondering if there was some "standard" pf ruleset I could use to have a meaningful metric. Also, I'm curious if anymody is aware of such existing benchmarks. Regards -- Nicolas Goy https://www.kuon.ch

sysupgrade from -stable (was: error rebuilding binaries after 6.9->7.0 sysupgrade)

2022-04-04 Thread Steve Fairhead
On 04/04/2022 13:10, owner-m...@openbsd.org wrote: sysupgrade only copes with what look like release versions (no version suffix, upgrades to release+0.1 with no arguments, or snapshot with -s) or snapshots (-current or -beta suffix, by default -current upgrades to release+0.1 or -beta upgrades

Serial console output stalls

2022-04-04 Thread Ivo van der Sangen
Hi, I am using the vmctl application on a 7.0 stable host with a -current guest. The guest was busy building some port. During this build on the guest I started another build on the host. I was following the build of the guest using vmctl console. After this I noticed a couple of times that

Re: How to track system changes?

2022-04-04 Thread Michael Hekeler
Am 04.04.22 08:32 schrieb Eric Thomas: > I want to have a high degree of confidence in my system's state > (packages that have been added, configs that have changed, permissions > changed, etc). I've read about "read only filesystems" and the > pro's/con's

Re: Internal Logging?

2022-04-04 Thread Stuart Henderson
On 2022-04-04, Eric Thomas wrote: > I'd like to understand more about how OpenBSD logs internal events such as: > > - pkg_add/delete events > - user logins > - X session start/stops > etc. > > Is there "one big log" where all of these types of events are stored? > Or are they logged in specific

Re: How to track system changes?

2022-04-04 Thread Stuart Henderson
On 2022-04-04, Eric Thomas wrote: > I want to have a high degree of confidence in my system's state > (packages that have been added, configs that have changed, permissions > changed, etc). I've read about "read only filesystems" and the > pro's/con's

Re: How to track system changes?

2022-04-04 Thread Martin Schröder
Am Mo., 4. Apr. 2022 um 17:50 Uhr schrieb Ian Darwin : > Yes, in fact, *everyone* else is. /etc/changelist lists files that are > monitored. > You will get an email if they change, e.g., if a program surprisingly becomes > setuid. > > I imagine that this is documented someplace. man security

Re: How to track system changes?

2022-04-04 Thread Ian Darwin
On Mon, Apr 04, 2022 at 08:32:01AM -0700, Eric Thomas wrote: > I want to have a high degree of confidence in my system's state > (packages that have been added, configs that have changed, permissions > changed, etc). I've read about "read only filesystems" and the > pro's/con's

How to track system changes?

2022-04-04 Thread Eric Thomas
I want to have a high degree of confidence in my system's state (packages that have been added, configs that have changed, permissions changed, etc). I've read about "read only filesystems" and the pro's/con's [here](http://geodsoft.com/howto/harden/OpenBSD/no_changes.htm). Aside from that, is

Internal Logging?

2022-04-04 Thread Eric Thomas
I'd like to understand more about how OpenBSD logs internal events such as: - pkg_add/delete events - user logins - X session start/stops etc. Is there "one big log" where all of these types of events are stored? Or are they logged in specific directories depending on log type? Which log

Re: Github/Bitbucket free alternative

2022-04-04 Thread Matthew Ernisse
On Mon, Apr 04, 2022 at 01:07:49PM +0800, Tito Mari Francis Escaño said: > I'm trying to develop web apps on OpenBSD but Github and even Bitbucket > seems to think that only Windows and/or Linux are the platforms so I feel > forced to use VS Code that runs only on those systems. git(1) works just

Re: OpenBGPd: fatal in RDE: aspath_get: Cannot allocate memory

2022-04-04 Thread Claudio Jeker
On Tue, Mar 29, 2022 at 09:53:56AM +0200, Laurent CARON wrote: > Hi, > > I'm happily running several OpenBGPd routers (Openbsd 7.0). > > After having applied the folloxing filters (to blackhole traffic from > certain countries): > > include "/etc/bgpd/deny-asn.ru.bgpd" > include

Re: OpenBGPd: fatal in RDE: aspath_get: Cannot allocate memory

2022-04-04 Thread Claudio Jeker
On Mon, Apr 04, 2022 at 03:14:35PM +0200, Laurent CARON wrote: > > Le 01/04/2022 à 14:38, Claudio Jeker a écrit : > > > > The numbers look reasonable with maybe the exception of prefix and BGP > > path attrs. Unless this system is pushing or pulling lots of full feeds to > > peers I would not

Re: OpenBGPd: fatal in RDE: aspath_get: Cannot allocate memory

2022-04-04 Thread Laurent CARON
Le 01/04/2022 à 14:38, Claudio Jeker a écrit : The numbers look reasonable with maybe the exception of prefix and BGP path attrs. Unless this system is pushing or pulling lots of full feeds to peers I would not expect such a high number of prefixes. Also the number of path attributes is high

Re: OpenBGPd: fatal in RDE: aspath_get: Cannot allocate memory

2022-04-04 Thread Laurent CARON
Le 29/03/2022 à 14:50, Stuart Henderson a écrit : Also: check the values for bgpd's login class (as root, "su -c bgpd -" then "ulimit -a"), and are you starting bgpd from the rc-script or by hand? Hi Stuart, # ulimit -a time(cpu-seconds)    unlimited file(blocks) unlimited

Re: vxlan(4) in endpoint mode

2022-04-04 Thread Denis Fondras
Le Mon, Apr 04, 2022 at 08:23:35PM +1000, David Gwynne a écrit : > > > > On 3 Apr 2022, at 21:46, Denis Fondras wrote: > > > > Hi, > > > > In vxlan(4) manual, we have : > > > > endpoint mode > > When configured without a tunnel destination address, vxlan operates as > > a bridge,

Re: vxlan(4) in endpoint mode

2022-04-04 Thread David Gwynne
> On 3 Apr 2022, at 21:46, Denis Fondras wrote: > > Hi, > > In vxlan(4) manual, we have : > > endpoint mode > When configured without a tunnel destination address, vxlan operates as > a bridge, but with learning disabled. > > > The question is : is it possible to set

Re: openbsd, softraid recovery (I have password)

2022-04-04 Thread Stuart Henderson
On 2022-04-03, Nick Holland wrote: > If you are going to find your data, you need to recreate the disklabel > partitions exactly as they were on the encrypted FFS from OpenBSD. > scan_ffs(8) may help. OoenBSD's scan_ffs only supports FFS1, the OS defaults to FFS2.

Re: OpenBSD as primary OS

2022-04-04 Thread Michael Hekeler
Am 11.09.16 12:45 schrieb jean-francois: > Hi, > > > I'm moving to OpenBSD for primary use, I'll have to keep a Windows OS for > some specific purposes also. > > Just thanks for the development of OpenBSD, it's very easy to use since > logical and well documented, I've been enjoying it for the

Re: openbsd, softraid recovery (I have password)

2022-04-04 Thread Michael Hekeler
Am 02.04.22 18:56 schrieb harold: > Hello, > > Today I take a little breath to try to get some help about a little problem > I have since weeks. > I lost data due to misunderstanding of formatting rdsc1 softraid partition > on openbsd. > > I tell you my little story in  the attached document,