Re: How to use randon outgoing network aliases?

2024-03-12 Thread Joel Carnat
Le 3/12/24 à 15:40, Stuart Henderson a écrit : On 2024-03-12, Joel Carnat wrote: Hi, I have a server with a single NIC but several IPs configured: # cat /etc/hostname.vio0 inet 192.0.2.10 255.255.255.0 inet alias 192.0.2.11 255.255.255.0 inet alias 192.0.2.12 255.255.255.0 The default

How to use randon outgoing network aliases?

2024-03-12 Thread Joel Carnat
and have several daemon instances run in those domains? Thanks, Joel C.

Re: Need advice on “tcp proxy”

2024-03-03 Thread Joel Wirāmu Pauling
Maybe look at Meshcentral as an alternative to Rustdesk. It allows proxying over https OOTB. On Sun, 3 Mar 2024 at 19:30, Kasak wrote: > > > > 3 марта 2024 г., в 00:46, Joel Wirāmu Pauling > написал(а): > > > > ssh can work in tap VPN mode (ssh -w) and will tunnel

Re: Need advice on “tcp proxy”

2024-03-02 Thread Joel Wirāmu Pauling
ssh can work in tap VPN mode (ssh -w) and will tunnel udp fine ; I'm not sure what you are trying to achieve but perhaps ssh tunnels might be an option for your use case. You are probably better off setting up something like wireguard, but in a pinch if the target and host already have ssh.

Re: relayd fallback when using tag/tagged

2024-02-16 Thread Joel Carnat
Removing tags and using a simple "pass" directive in protocol (as described in the man page) does work as expected regarding the fallback server. Is there a way to use both tags and fallback with relayd(8) to mimic Apache's Failover[1] configuration with "ProxyPass" and "B

Re: Improve support of Go

2024-02-15 Thread Joel Sing
On 24-02-13 08:17:20, Theo de Raadt wrote: > Stuart Henderson wrote: > > > On 2024/02/13 07:36, Theo de Raadt wrote: > > > Stuart Henderson wrote: > > > > > > > On 2024-02-13, Kirill A Korinsky wrote: > > > > > Good day, > > > > > > > > > > I'm updating go's syscall table to modern OpenBSD

Re: relayd fallback when using tag/tagged

2024-02-13 Thread Joel Carnat
Le 13/02/2024 à 10:07, Manuel Giraud a écrit : Joel Carnat writes: Hello, I'm trying to configure relayd(8) to use tags, to allow legit host names only and modify HTTP headers, and fallback. But I can't have it working properly. Using such a configuration: #-8<--- table { 192.0.

Re: relayd fallback when using tag/tagged

2024-02-13 Thread Joel Carnat
.0] GET Le 13/02/2024 à 04:29, l...@trungnguyen.me a écrit : Hi On February 13, 2024 12:20:26 AM UTC, Joel Carnat wrote: Hello, I'm trying to configure relayd(8) to use tags, to allow legit host names only and modify HTTP headers, and fallback. But I can't have it working p

relayd fallback when using tag/tagged

2024-02-12 Thread Joel Carnat
e fallback server. Is there a way to use both tags and fallback with relayd(8) to mimic Apache's Failover[1] configuration with "ProxyPass" and "BalancerMember (...) status=+H" ? Thank you, Joel C. [1] https://httpd.apache.org/docs/trunk/howto/reverse_proxy.html#failover

Re: Donations

2023-10-26 Thread Joel Carnat
ecurring" for the Fondation coming first made me assume this was the preferred way to donate. But if I understand you properly, using the other PayPal links should rather be used, right? Thanks, Joel C.

Require host-name from DHCP clients

2023-09-26 Thread Joel Carnat
to send a client-hostname information in their DHCP request? And if so, can this information be used by dhcpd(8) to apply a fixed-address to those device? Thank you, Joel C.

Re: Ryzen 9 (7x000) users: do you experience hangs?

2023-07-18 Thread Joel Wirāmu Pauling
and compatibility with AMD Chipsets - which is not a thing I was expecting to find. -Joel On Wed, 19 Jul 2023 at 09:27, Kastus Shchuka wrote: > On Tue, Jul 18, 2023 at 08:09:11PM +0100, cho...@jtan.com wrote: > > Not really. But. > > > > I have an APU2 which runs two VMs that d

Usage of pf(4) with tap(4) and veb(4)

2023-05-24 Thread Joel Carnat
rt1 pass in on tap2 Second question: is this the proper way to configure veb0 and pf or is there a "better" way of doing the filtering? Thanks for feedback, Joel C.

Re: access rdomain0 localhost from rdomainN

2023-05-15 Thread Joel Carnat
On Mon, May 15, 2023 at 10:21:55AM -, Stuart Henderson wrote: > > I think your options are 1) run a second copy (I suggest symlinking > rc.d/unbound -> e.g. rc.d/unbound1, and setting unbound1_rtable=1), > or 2) leak the traffic between tables using a PF rule, I have this > on my laptop: >

Re: access rdomain0 localhost from rdomainN

2023-05-15 Thread Joel Carnat
On Sun, May 14, 2023 at 10:32:15PM -0600, Zack Newman wrote: > On 2023-05-14, Joel Carnat wrote: > > I have unbound listening on lo0 (127.0.0.1, rdomain0) and resolv.conf > > configured with "nameserver 127.0.0.1". > > You can also have unbound(8)

access rdomain0 localhost from rdomainN

2023-05-14 Thread Joel Carnat
tl=58 time=0.453 ms I have tried using the "reject" and "pf" examples from the rdomain manpage but it doesn't solve my issue. I'm not even sure I understood what it was supposed to do :) Is it possible to access lo0 from other rdomains? Thanks, Joel C.

Re: hardware

2023-04-18 Thread Joel Carnat
> Le 18 avr. 2023 à 11:30, Stuart Henderson a écrit > : > > On 2023-04-18, Mischa wrote: >>> On 2023-04-17 23:37, Mike Larkin wrote: >>> On Mon, Apr 17, 2023 at 02:21:14PM -0600, Theo de Raadt wrote: Gustavo Rios wrote: > What is the best supported servers by OpenBSD ?

Re: Using gzip-static with httpd location

2023-03-23 Thread Joel Carnat
Le 23/03/2023 à 22:22, Jared Harper a écrit : On Thursday, March 23rd, 2023 at 2:15 PM, Jordan Geoghegan wrote: On 3/9/23 17:31, Joel Carnat wrote: Hi, I just tried applying gzip compression on a simple test web site using httpd and the gzip-static option ; using OpenBSD 7.2/amd64. As I

Re: Using gzip-static with httpd location

2023-03-10 Thread Joel Carnat
Le 10/03/2023 à 16:41, Marcus MERIGHI a écrit : Hello, j...@carnat.net (Joel Carnat), 2023.03.10 (Fri) 02:31 (CET): I just tried applying gzip compression on a simple test web site using httpd and the gzip-static option ; using OpenBSD 7.2/amd64. As I understood the man page, gzip-static

Using gzip-static with httpd location

2023-03-09 Thread Joel Carnat
de compressed resources. Here's an example of the curl command I used: # curl -I --compressed http://localhost:80/www/index.html HTTP/1.1 200 OK Connection: keep-alive Content-Encoding: gzip Content-Length: 1083 Content-Type: text/html Date: Fri, 10 Mar 2023 01:27:53 GMT Last-Modified: Fri, 10 Mar 2023 00:53:26 GMT Server: OpenBSD httpd Is this an expected behaviour? Regards, Joel C.

devel/bamf bamfdaemon segmentation fault

2023-01-08 Thread Joel Carnat
4MB full ktrace.out if needed. Kernel is: OpenBSD 7.2-current (GENERIC.MP) #925: Sun Jan 8 09:12:38 MST 2023 Any idea what happens / how to solve this? Thanks, Joel C.

Re: Xorg freeze with ThinkPad A485 / ATI Radeon Vega

2022-12-03 Thread Joel Carnat
Le 03/12/2022 à 21:51, Adriano Barbosa a écrit : On Sat, Dec 03, 2022 at 06:01:38PM +0100, Joel Carnat wrote: Le 02/12/2022 à 10:21, Bodie a écrit : On Fri Dec 2, 2022 at 12:14 AM CET, Joel Carnat wrote: Hi, About once a week, Xorg freezes while I'm using my ThinkPad A485 with OpenBSD 7.2

Re: Xorg freeze with ThinkPad A485 / ATI Radeon Vega

2022-12-03 Thread Joel Carnat
Le 02/12/2022 à 10:21, Bodie a écrit : On Fri Dec 2, 2022 at 12:14 AM CET, Joel Carnat wrote: Hi, About once a week, Xorg freezes while I'm using my ThinkPad A485 with OpenBSD 7.2. I've tried switching the window manager (XFCE, Gnome, WindowMaker, cwm) but it still happens. I only have

Xorg freeze with ThinkPad A485 / ATI Radeon Vega

2022-12-01 Thread Joel Carnat
[drm] *ERROR* Process information: process pid 0 thread pid I've attached the full dmesg and Xorg logs. Is there something I can do to debug further? Thanks, Joel C. OpenBSD 7.2 (GENERIC.MP) #0: Wed Oct 26 12:01:47 MDT 2022 r...@syspatch-72-amd64.openbsd.org:/usr/src/sys/arch/amd64/compile

Re: Troubleshooting a spinning fork(2)

2022-11-23 Thread Joel Knight
On Fri, Nov 18, 2022 at 7:42 AM Joel Knight wrote: > > Hi. > > I'm looking for guidance on how to troubleshoot a piece of software > which is spinning after calling fork(2). Hi. I've been digging into this more and think I've found a bug in the threading code. Consider: - Pr

Troubleshooting a spinning fork(2)

2022-11-18 Thread Joel Knight
ps://github.com/knightjoel/s2n-tls/blob/fix/build-on-openbsd/tests/unit/s2n_fork_generation_number_test.c [4] https://www.packetmischief.ca/files/fork_test2.txt.gz .joel

Re: rrdtool fails to install on 7.2 due to freetype.30.2 not found for cairo

2022-10-24 Thread Joel Carnat
Did you install x* packages? > Le 24 oct. 2022 à 05:12, Jim Anderson a écrit : > > Installed 7.2 and rrdtool will not install due to an error > installing freetype for cairo. > > # pkg_add rrdtool > quirks-6.42 signed on 2022-10-23T09:59:17Z > rrdtool-1.7.2p1:pcre-8.44: ok >

Question on using !!prog with syslogd(8)

2022-09-24 Thread Joel Carnat
actions inside a !!prog block? Thank you, Joel C.

Issue with FDE and bootblocks on 7.2 snapshots ?

2022-09-14 Thread Joel Carnat
gpt) and it also failed. I’ve just run the FDE installation using install71.img and everything went ok. Then I « sysupgrade -s » and everything went ok too. Just saying in case it is a bug in install72.img. Regards, Joel

Re: Trouble using keepassxc-proxy with iridium/chromium

2022-05-22 Thread Joel Carnat
On Sun, 22 May 2022 19:27:19 +0200 Antoine Jacoutot wrote: > On Sun, May 22, 2022 at 07:17:49PM +0200, Joel Carnat wrote: > > Hello, > > > > From a brand new 7.1/amd64 installation, I'm trying to use > > keepassxc-proxy with Iridium. As I did for Firefox-ESR,

Trouble using keepassxc-proxy with iridium/chromium

2022-05-22 Thread Joel Carnat
RET 0). Anyone knows what to add to unveil.main to have keepassxc-proxy? What should I be looking for in kdump to identify what fails? ktrace.out is a bit more 100MB but I can make it available online if it helps. Thanks, Joel C.

Strange relayd(8) logs meaning?

2022-05-18 Thread Joel Carnat
ogs (the HTTP commands pipelined with ;) indicating something weird happening on relayd or isn't it a clue for anything ; and I must dig somewhere else? Thank you, Joel C.

Values from wsconsctl(8) and xbacklight(1) may differ

2022-02-16 Thread Joel Carnat
lamor X acceleration enabled on Mesa Intel(R) HD Graphics 520 (SKL GT2)" Regards, Joel C.

Re: Either intel nor glamor drivers do not work for Samsung NC215S

2022-02-03 Thread Joel Carnat
/) it seems I used the vesa driver to have X running. You may give it a try. Regards, Joel C. > Le 3 févr. 2022 à 22:01, Sven Wolf a écrit : > >  > >> On 2/3/22 21:33, Sergey Andrianov wrote: >> Yes, it did not help. Just noticed that in README for xf86-vid

Re: Edimax EW-7612UAN V2 appears as "generic" Realtek WLAN Adapter

2022-01-25 Thread Joel Carnat
Le 25/01/2022 à 01:32, Jonathan Gray a écrit : On Tue, Jan 25, 2022 at 01:08:16AM +0100, Joel Carnat wrote: Hello, Because my Internet Box has just died, I plugged a spare Edimax EW-7612UAN V2 on my OpenBSD 7.0 router and connected it to my iPhone WiFi connection sharing. I've tested

Edimax EW-7612UAN V2 appears as "generic" Realtek WLAN Adapter

2022-01-24 Thread Joel Carnat
about what to modify and propose a diff. Sorry. Regards, Joel C.

Re: Using Connection:keep-alive with relayd

2021-11-16 Thread Joel Carnat
creases > > the networking overhead, but puts all the load on a single back-end > > server. > > Closing the connection with every request increases the networking > > overhead but > > spreads it between all of the servers in the farm. Test your application > > with

Using Connection:keep-alive with relayd

2021-11-12 Thread Joel Carnat
Wed, 24 Mar 2021 22:34:18 GMT < Server: OpenBSD httpd Server: OpenBSD httpd < * Closing connection 1 If I use telnet(1) and send the HTTP commands "by hand", I could see that the HTTP connection was left up and that I could grab several resources ; so the connection is not really closed by relayd(8). Is there a way to tell relayd(8) to not send that extra "Connection: close" header? Thank you, Joel C.

Re: relayd and snmp agentx

2021-11-06 Thread Joel Carnat
On Sat, Nov 06, 2021 at 09:24:47AM +0100, Martijn van Duren wrote: > On Fri, 2021-11-05 at 15:59 +, Stuart Henderson wrote: > > On 2021-11-05, Joel Carnat wrote: > > > Hello, > > > > > > I read in relayd.conf(5) that there is an SNMP agentx feature.

relayd and snmp agentx

2021-11-05 Thread Joel Carnat
from snmpd(8) around Jun 30, 2020. Is there a way to query relayd MIB on OpenBSD 7.0? Either by using snmpd(8) or ports/net/net-snmpd. Thank you, Joel C.

Multiple SSID when operating in Host AP mode?

2021-10-18 Thread Joel Carnat
k than 11g when computers and phones would support up to 11n/11ac. Thank you, Joel C.

Re: Server certs expired higher up the chain, imaps and https

2021-10-01 Thread Joel Sing
On 21-09-30 19:45:38, James Cook wrote: > On Thu, Sep 30, 2021 at 10:02:17AM -0700, Chris Bennett wrote: > > Hi, > > > > I'm getting that the certs are expired, but https works fine in Firefox, > > including when looking at the full chain. > > > > > > openssl s_client -servername

Re: USB-C monitors

2021-09-19 Thread Joel Wirāmu Pauling
Just be aware that if you are looking at 4k monitors ; you will be likely be limited to 30hz refresh rate via most adaptors using DP mode over USBC. Thunderbolt3 and 4 can do 4kp60 as can DP 1.4 - but there are various factors involved including the adaptors SoC, your GPU/Motherboard output.

start_timeout not found on sysupgrade

2021-09-07 Thread Joel Carnat
though. Regards, Joel

Run a command on "last day of month"

2021-09-01 Thread Joel Carnat
a simpler/better way to configure crontab(1) to run a command on "the last day of month" only ? Thank you, Joel C.

Re: 50Gbe

2021-08-06 Thread Joel Wirāmu Pauling
Also SFP28 ports are backwards compatible with SFP+ optics. On Fri, Aug 6, 2021 at 9:12 PM Joel Wirāmu Pauling wrote: > SFP28 (25gbit) is the way to go for density on x86 as it matches CPU > bound bus architecture well. QSFP28 to 4*SFP28 offers the best price per > port den

Re: 50Gbe

2021-08-06 Thread Joel Wirāmu Pauling
SFP28 (25gbit) is the way to go for density on x86 as it matches CPU bound bus architecture well. QSFP28 to 4*SFP28 offers the best price per port density both for interconnects (the DAC TwinAX 'squid' cables are cheap as chips) Network Stack Throughput through CPU on modern Intel x86 _64 even

Re: Using relayd as a reverse proxy for multiple local servers

2021-05-27 Thread Joel Carnat
, Joel Envoyé de mon iPad > Le 27 mai 2021 à 11:03, Philip Kaludercic a écrit : > listen on * port https tls

Bugs running 6.9-CURRENT on MacBook Pro Touchbar 2017

2021-05-21 Thread Joel Carnat
Hi, I went back on testing OpenBSD on my MacBookPro14,3. I just installed 6.9-CURRENT and here's a list of non-working stuff. - keyboard and touchpad don't work. I have to use a USB keyboard/mouse. internal keyboard does work in the boot loader. but stops working after the kernel is loaded.

Re: periodic network access failure when accessing nextcloud via relayd

2021-04-01 Thread Joel Carnat
On Thu, Apr 01, 2021 at 01:47:11PM -0600, Ashlen wrote: > On 21/03/31 23:50, Joel Carnat wrote: > > Hello, > > > > I have Nextcloud 21 running with php-7.4, httpd(8) and relayd(8). > > On my laptop, a script regularly runs nextcloudcmd to synchonize the files >

periodic network access failure when accessing nextcloud via relayd

2021-03-31 Thread Joel Carnat
Hello, I have Nextcloud 21 running with php-7.4, httpd(8) and relayd(8). On my laptop, a script regularly runs nextcloudcmd to synchonize the files with the nextcloud instance. And quite often, nextcloudcmd returns such error: 03-31 23:28:56:089 [ info nextcloud.sync.networkjob.lscol ]:

Huawei E3372 loops detaching

2021-02-04 Thread Joel Carnat
Hi, I got a Huawei E3372 LTE USB Stick and plugged it on my T460s running OpenBSD 6.8-stable/amd64. I tried all 3 USB ports and they all act the same way : the stick loops attaching/detaching forever. I also tried current (OpenBSD 6.8-current (GENERIC.MP) #308: Wed Feb 3 20:49:28 MST 2021)

Re: Issues with Teclast F7 Plus

2020-12-25 Thread Joel Carnat
On Fri, 2020-12-25 at 00:34 -0500, James Hastings wrote: > On 13 Dec 2020, 13:27:48 +0000, Joel Carnat wrote: > > Hello, > > > > I just got a Teclast F7 Plus laptop and installed OpenBSD 6.8- > > current on > > it. Most things works except apm and touchpad &g

Issues with Teclast F7 Plus

2020-12-13 Thread Joel Carnat
dump, sysctl, usbdevs in case it helps. Thanks for help, Joel OpenBSD 6.8-current (GENERIC.MP) #222: Sat Dec 12 10:30:51 MST 2020 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 8385544192 (7997MB) avail mem = 8116105216 (7740MB) random: good seed from bootbl

dhcpd and pf table with fixed-address

2020-11-15 Thread Joel Carnat
Hello, I have linked dhcpd(8) and pf(4) using -A, -C and -L dhcpd flags. It seems dhcpd only adds IP for dynamic leases and not for leases configured using fixed-address. Is this expected or is there something I misconfigured? Thanks, Jo PS: configuration extracts rc.conf.local:

Re: Issues with TP-Link UE300

2020-09-28 Thread Joel Carnat
Mbits/sec sender [ 5] 0.00-10.13 sec 618 MBytes 512 Mbits/sec receiver Thank you very much. On Mon, Sep 28, 2020 at 10:30:16AM +0800, Kevin Lo wrote: > On Sun, Sep 27, 2020 at 11:43:13PM +0200, Joel Carnat wrote: > > > > Hi, > > > > I have p

Re: Issues with TP-Link UE300

2020-09-27 Thread Joel Carnat
-Original Message- > From: owner-m...@openbsd.org On Behalf Of Joel Carnat > Sent: 27 September 2020 22:43 > To: misc@openbsd.org > Subject: Issues with TP-Link UE300 > > Hi, > > I have plugged a TP-Link UE300 on my ThinkPad X260 running OpenBSD -snapshot >

Issues with TP-Link UE300

2020-09-27 Thread Joel Carnat
Hi, I have plugged a TP-Link UE300 on my ThinkPad X260 running OpenBSD -snapshot and it seems I can't get more than 100Mbps. The dongle attaches and get an IP address. But the speed seems limited. Same behaviour when attached to the USB3 port of my APU4D4 (running 6.7). When plugged in a MacBook

Re: match two conditions in relayd(8)

2020-01-28 Thread Joel Carnat
On Mon, Jan 27, 2020 at 09:22:40PM +0100, Sebastian Benoit wrote: > Joel Carnat(j...@carnat.net) on 2020.01.27 18:21:43 +0100: > > Hi, > > > > I'm setting up an HTTP(S) Reverse Proxy with relayd(8). > > > > I have one listener with multiple FQDN allowed.

match two conditions in relayd(8)

2020-01-27 Thread Joel Carnat
Hi, I'm setting up an HTTP(S) Reverse Proxy with relayd(8). I have one listener with multiple FQDN allowed. But I also have a common path that must be treated separately. As for now, I have: http protocol "https" { match request header "Host" value "one.domain.local" forward to match

snmpd(8) custom OID names

2019-11-27 Thread Joel Carnat
Hello, I have set custom OIDs in my snmpd.conf(5). When I walk or get those values, using snmp(1) or snmpget(1), the "name" parameters is not listed. I only get values described as OPENBSD-BASE-MIB::localTest.* Is there a straight way to get the configured names from snmp clients? Or do I have

How to specify "device" option in vm.conf to always boot PXE

2019-06-21 Thread Joel Carnat
Hi, I need a VM to always boot from the network. I could do it using vmctl(8): # doas vmctl start test -c -B net -b /bsd -n vswitch0 (...) PXE boot MAC address fe:e1:bb:d1:c5:d8, interface vio0 nfs_boot: using interface vio0, with revarp & bootparams But I can't find the syntax to be used in

Re: relayd shows ssh sessions as idle

2019-06-18 Thread Joel Carnat
On Mon, Jun 17, 2019 at 11:56:08PM +0200, Sebastian Benoit wrote: > Joel Carnat(j...@carnat.net) on 2019.06.12 16:10:25 +0200: > > Hi, > > > > I have configured relayd(8) on my vmd(8) host so that I can connect to > > the running VMs using SSH. > > > >

relayd shows ssh sessions as idle

2019-06-12 Thread Joel Carnat
Hi, I have configured relayd(8) on my vmd(8) host so that I can connect to the running VMs using SSH. Using relayctl(8), I can see that those sessions have the same value for age and idle ; even when something happens in the SSH sessions. Is this expected or an error in my relayd.conf ?

Re: productivity/khard (or python) seem slow

2019-05-18 Thread Joel Carnat
On Sat 18/05 19:15, Strahil wrote: > I run vanilla openBSD 6.5 on oVirt (KVM) with gluster as storage and it seems > OK for my needs but I never used khard. > What kind of slowness do you experience? > Maybe I can run some tests and see if the situation is the same on KVM. > Well, it takes

Re: productivity/khard (or python) seem slow

2019-05-18 Thread Joel Carnat
On Sat 18/05 11:39, David Mimms wrote: > On 2019.05.17 11:41, Paco Esteban wrote: > > On Thu, 16 May 2019, Joel Carnat wrote: > > > > > On Thu 16/05 08:55, Paco Esteban wrote: > > > > Can't say about your VM. On my desktop: > > > > > >

Re: productivity/khard (or python) seem slow

2019-05-16 Thread Joel Carnat
On Thu 16/05 08:55, Paco Esteban wrote: > Hi Joel, > > On Wed, 15 May 2019, Joel Carnat wrote: > > > Hello, > > > > I've just setup vdirsync and khard to sync my addressbook from > > nextcloud. It works but querying the local vcf is damm slow. I also >

productivity/khard (or python) seem slow

2019-05-15 Thread Joel Carnat
Hello, I've just setup vdirsync and khard to sync my addressbook from nextcloud. It works but querying the local vcf is damm slow. I also noticed that ranger felt a bit slow to start but thought it was the software ; so I switched to nnn. # time (khard list | wc -l) 112 0m07.10s real

Re: Running php cli when php-fpm uses chroot

2019-04-14 Thread Joel Carnat
On Fri 12/04 15:37, Éric Jacquot wrote: > Hi, > > Le Friday 12 April 2019 à 11:53 +0200, Joel Carnat a écrit : > > Hi, > > > > Is there a better way to handle chroot environnement when running php > > scripts from the cli? > > > > According to

Running php cli when php-fpm uses chroot

2019-04-12 Thread Joel Carnat
Hi, When php-fpm is configured to use chroot, it seems the php(1) cli still tries to work unchrooted. So when running maintenance php scripts (like occ from Nextcloud), errors raises for not finding resources (like mysql socket etc). I couldn't find a option for the php(1) command to "run as

Re: influxdb goes "panic:runtime error: index out of range"

2019-04-08 Thread Joel Carnat
On Mon 08/04 09:00, Daniel Jakots wrote: > On Mon, 8 Apr 2019 13:58:27 +0200, Joel Carnat wrote: > > > On a fresh influxdb instance in an OpenBSD VM: same issue. On a > > fresh influxdb instance in a Linux Ubuntu VM: the error disappears and > > the query gets the corre

influxdb goes "panic:runtime error: index out of range"

2019-04-08 Thread Joel Carnat
Hi, On InfluxDB, I'm getting "panic:runtime error: index out of range" every time I run the "SHOW TAG VALUES FROM unbound WITH KEY = clientip WHERE sysName =~ /$hostname/" query from Grafana. And I also get it using the influx shell. I've tried various things, like giving more resources (via

Re: Touchpad - how to enable two-finger scrolling

2019-03-31 Thread Joel Carnat
Hi, On Sun 31/03 03:56, Brogan wrote: > Hello, > > I recently installed OpenBSD 6.4 on a Dell Latitude 6430u and am trying to > get touchpad two-finger scrolling working in X11. As far as I can tell the > touchpad is being loaded via wsmouse but I'm not sure how or where to > properly

Broadcom BCM4356, bwfm0: could not read io type

2019-03-26 Thread Joel Carnat
Hi, I took my working 6.5-BETA disk out of a ThinkPad X230i and pluggued it in a ThinkPad X260. The system boots ok and I can get an X session. But the wireless card doesn't seem to work. # dmesg bwfm0 at pci2 dev 0 function 0 "Broadcom BCM4356" rev 0x02: msi bwfm_pci_intr: handle MB data

Re: FDE with keydrive imponderabilities

2019-03-25 Thread Joel Carnat
Hi, I wonder if you’re not using fdisk for an MBR setup and disklabel for GPT. Why won’t you use 64 as the starting offset of the RAID partition ? -- Envoyé de mon iPhone > Le 22 mars 2019 à 23:26, Normen Wohner a écrit : > > I thought you might be able to help me with a setup concerning >

Re: How to monitor class usage/limits?

2019-03-15 Thread Joel Carnat
On Fri 15/03 15:47, Stuart Henderson wrote: > On 2019-03-14, Joel Carnat wrote: > > Hi, > > > > The Internet is full of "OpenBSD desktop works better when rising > > datasize/maxproc/openfiles/stacksize in login.conf". One thing I can't > > manage

How to monitor class usage/limits?

2019-03-14 Thread Joel Carnat
Hi, The Internet is full of "OpenBSD desktop works better when rising datasize/maxproc/openfiles/stacksize in login.conf". One thing I can't manage to find is how you can monitor those values? I'm Ok to set arbitrary recommended values depending on system configuration and general usecases (like

Are there real mountpoints for gvfs/gio shares ?

2019-01-03 Thread Joel Carnat
Hi, I was looking at mounting CIFS shares. OpenBSD is the "client" machine. CIFS a published by a remote NAS. Using XFCE and Thunar, everything works well. But when I try to access the mountpoints from the console, I just can't find them. Things like "gio mount smb://", "gio mount -l" and

Re: net/unifi fails to start

2018-12-08 Thread Joel A . Hänel
Hello. Yes, I am running unifi-stable on OpenBSD 6.4-stable at my parents without any issues. It just works, so I cannot probably help you out. You try to access the web interface over port 8080 or 8443? Regards, Joel Hänel On December 8, 2018 8:49:04 AM GMT+01:00, Jordan Geoghegan wrote

Re: Key-based FDE /w UEFI fails

2018-11-30 Thread Joel Sing
On Thursday 29 November 2018 20:38:23 Stefan Wollny wrote: > Hi there! > > I need help / advice with a fresh install onto a Thinkpad T450s which I > recently bought on eBay. > > The system starts with UEFI enabled and was running fine with a rather > small SSD without FDE. dmesg from some recent

Re: Why stacking softraid disciplines is not supported?

2018-11-29 Thread Joel Sing
On Thursday 29 November 2018 12:05:08 Justus Hämäläinen wrote: > Hi, > > I see that stacking softraid disciplines is not supported, but why I > wonder? I was thinking about running fulldisk encryption on softraid > RAID1. > > Is it unsupported because it hasn't been tested enough that it doesn't

Re: Help with LibreSSL manpages

2018-11-28 Thread Joel Sing
On Sunday 25 November 2018 17:36:16 Ingo Schwarze wrote: > Stephen Gregoratto wrote on Mon, Nov 26, 2018 at 12:26:21AM +1100: > > > > Would I need to fully grok the code before I could write the docs? > > Absolutely not. You could spend an infinite amount of time to > understand the code if you

Re: Boot reboot issue after upgrade to 6.4 on amd64

2018-11-28 Thread Joel Sing
On Tuesday 27 November 2018 16:07:18 Riccardo Mottola wrote: > Hi Nick, > > Nick Holland wrote: > > So far, with one or two exceptions, everyone complaining about this has > > a One Big Partition disk layout. A bad idea, not suggested, and I don't > > think you will get much sympathy. > > yes

Re: Boot reboot issue after upgrade to 6.4 on amd64

2018-11-28 Thread Joel Sing
On Tuesday 27 November 2018 21:54:36 Angelo Rossi wrote: > Sorry, > > To fix this problem I changed /usr/src/sys/arch/amd64/stand/Makefile.inc > > line #45 from > > HEAP_LIMIT=0xA > > to > > HEAP_LIMIT=0xB That may work on your machine, however it is not a change that can be safely

Re: ldap search fails with Let's Encrypt certificate

2018-11-06 Thread Joel Carnat
Le 05/11/2018 17:07, Stuart Henderson a écrit : On 2018/11/05 17:02, Joel Carnat wrote: Le 05/11/2018 16:38, Stuart Henderson a écrit : > On 2018-11-05, Joel Carnat wrote: > > Le 05/11/2018 13:48, Stuart Henderson a écrit : > > > On 2018-11-05, Joel Carnat

Re: ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Joel Sing
On Monday 05 November 2018 17:02:50 Joel Carnat wrote: > Le 05/11/2018 16:38, Stuart Henderson a écrit : > > On 2018-11-05, Joel Carnat wrote: > >> Le 05/11/2018 13:48, Stuart Henderson a écrit : > >>> On 2018-11-05, Joel Carnat wrote: > >>>> TLS: >

Re: ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Joel Carnat
Le 05/11/2018 16:38, Stuart Henderson a écrit : On 2018-11-05, Joel Carnat wrote: Le 05/11/2018 13:48, Stuart Henderson a écrit : On 2018-11-05, Joel Carnat wrote: Hi, I'm using ldap(1) to query a remote Synology Directory Server (OpenLDAP 2.4.x). Unfortunately, it fails saying: TLS

Re: ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Joel Carnat
Le 05/11/2018 13:48, Stuart Henderson a écrit : On 2018-11-05, Joel Carnat wrote: Hi, I'm using ldap(1) to query a remote Synology Directory Server (OpenLDAP 2.4.x). Unfortunately, it fails saying: TLS failed: handshake failed: error:14004410:SSL routines:CONNECT_CR_SRVR_HELLO:sslv3

ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Joel Carnat
Hi, I'm using ldap(1) to query a remote Synology Directory Server (OpenLDAP 2.4.x). Unfortunately, it fails saying: TLS failed: handshake failed: error:14004410:SSL routines:CONNECT_CR_SRVR_HELLO:sslv3 alert handshake failure ldap: LDAP connection failed When I use the OpenLDAP

Re: Equipment for OBSD based firewall

2018-09-03 Thread Joel Wirāmu Pauling
idea. Mainly because the on-going cost of supplying power to old junkers isn't worth what you can do with a 'newish' junker. If you have free electricity, feel free to do what you like I guess. -Joel On 4 September 2018 at 15:10, Bogdan Kulbida wrote: > Ingo, > I so much enjoyed readin

Re: Need an advice: Raspberry Pi3 B+ or Pine64 ROCK64

2018-08-27 Thread Joel Wirāmu Pauling
Hi Aaron - I have a Rangely c2xxx sitting on my desk right now. It's a lanner rebadged as Nuage NSG-E. This platform is able to do around 3.6gbit through it without encryption (and around 1.3gbit total if encryption is turned on everything). This one has 4 Intel igb 345 cards and 2 i210's - it's

Re: Need an advice: Raspberry Pi3 B+ or Pine64 ROCK64

2018-08-27 Thread Joel Wirāmu Pauling
On 28 August 2018 at 05:26, Joseph Mayer wrote: > Joel, > > Are you saying you gave up on using the PCIe at all? > > There's a 4-lane PCIe connector on the Rock64 right, aren't those > dedicated lanes, and, if they'd somehow be shared with any other > hardware, then

Re: Need an advice: Raspberry Pi3 B+ or Pine64 ROCK64

2018-08-27 Thread Joel Wirāmu Pauling
as expensive. On 28 August 2018 at 00:15, Joseph Mayer wrote: > On August 26, 2018 3:16 PM, Joel Wirāmu Pauling wrote: > .. >> I have a bunch of various SBC and they all suck pretty bad for network >> tasks. Fine for random server tasks but don't put them in your network >&

Re: Need an advice: Raspberry Pi3 B+ or Pine64 ROCK64

2018-08-27 Thread Joel Wirāmu Pauling
Yeah I got excited about the MachiattoBin when I first saw it - it's possibly the first non-x86 SOHO router that can actually do 14MPPS needed for 10G in the home. BUT The Copper ethernet situation is problematic, the original design shares the PCI Bus with the SFP Slots to provide copper 10G

Re: Need an advice: Raspberry Pi3 B+ or Pine64 ROCK64

2018-08-26 Thread Joel Wirāmu Pauling
Management Engine or SMT - which at least makes them slightly less dire than more beefy SoC's from Chipzilla. On 26 August 2018 at 23:00, Stuart Henderson wrote: > On 2018-08-26, Carlos López wrote: >> >> >> On 26/08/2018 11:46, Joel Wirāmu Pauling wrote: >>> netboot

Re: Need an advice: Raspberry Pi3 B+ or Pine64 ROCK64

2018-08-26 Thread Joel Wirāmu Pauling
netboot works fine. However almost all of the Arm platforms including the Rpi3 make terrible gateways and in general l3 packet path machines. I have a bunch of various SBC and they all suck pretty bad for network tasks. Fine for random server tasks but don't put them in your network path unless

Inconsistent stats between snmpd(8) and pfctl(8) ?

2018-05-25 Thread Joel Carnat
Hi, On OpenBSD 6.3/amd64, I'm using snmpd(8) to gather pf(4) statistics. It seems that some stats are not coherent. For example, on egress and vio0 interfaces. Asking snmpd(8), I get : OPENBSD-PF-MIB::pfIfDescr.3 = STRING: "egress" OPENBSD-PF-MIB::pfIfDescr.12 = STRING: "vio0"

Re: OT: Temperature sensors suggestions?

2018-05-19 Thread Joel Wirāmu Pauling
I would suggest bme280 sensor. If you have a spare VGA port you can use the d2c bus as i2c and plug directly into it with a modified VGA cable. Other wise yeah esp8266 module + bme280 for 5$ is going to give you the best result. On Fri., 18 May 2018, 4:01 pm Base Pr1me,

Re: Installboot uses wrong device for secondary boot loader

2018-04-29 Thread Joel Sing
On Saturday 28 April 2018 22:21:08 Eric Zylstra wrote: > I’m installing 6.3 on a RAID1. Install was fine until ending with an error > message, “invalid boot record signature…”. > I manually ran installboot: > >. installboot -v -r /mnt sd4 > > Hand transcription: > > Using /mnt as root >

Re: Clarification re: rebuilding softraid mirror

2018-04-28 Thread Joel Sing
On Friday 27 April 2018 11:17:07 Jordan Geoghegan wrote: > Thanks for the reply, I have rebuilt a softraid mirror before, I was > just hoping for some clarification as the faq wording is a little > ambiguous as to whether drives can be rebuilt in multi user mode or not. Rebuild is a background

  1   2   3   4   5   6   >