Re: serial console images for installing on vmd based guests

2019-03-13 Thread Claudio Jeker
On Tue, Mar 12, 2019 at 11:48:01PM -0700, Mike Larkin wrote: > On Tue, Mar 12, 2019 at 05:37:04PM -0700, Chris Cappuccio wrote: > > Is there any archive of serial console bootable images (w/virtio support) > > for Linux or other OSes to boot under vmd? > > > > You mean installer images? Like

~OT, ARM64 becoming more useful: RK3399 laptop w M2 slot & A64 phone coming

2019-03-13 Thread Tinker
This is bordering on off-topic to this list, but, the ARM64 architecture is becoming more useful: An RK3399 laptop with * magnesium chassi, * M.2 PCIe NVMe SSD slot (four-lane PCIe v3) and * 4K@60hz displayport output, * full HD IPS display, for 200 USD is coming to market. Keyboard layout

Re: serial console images for installing on vmd based guests

2019-03-13 Thread Mike Larkin
On Tue, Mar 12, 2019 at 05:37:04PM -0700, Chris Cappuccio wrote: > Is there any archive of serial console bootable images (w/virtio support) > for Linux or other OSes to boot under vmd? > You mean installer images? Like things you would install from? Tons. If you're talking about pre-installed

Re: IPsec peers allowed to inject any network to existing tunnels

2019-03-13 Thread Stuart Henderson
On 2019-03-13, Fedor Piecka wrote: > Does anybody see any misconfiguration or misunderstanding on our side? Or > is this a bug (IMHO a security bug) in OpenBSD IPsec implementation? isakmpd: it is a misconfiguration (but an incredibly common one), you should use a keynote policy to prevent this.

Re: Are there open source firewall distributions which are built on top of OpenBSD?

2019-03-13 Thread Stuart Henderson
On 2019-03-13, Mehma Sarja wrote: > My current setup is basic firewall with DHCP, NAT and routing. But there is > power in the simplicity. When something goes wrong -and it has happened > twice due to power failures, there is so much less to deal with to bring > the box back up. A standard

IPsec peers allowed to inject any network to existing tunnels

2019-03-13 Thread Fedor Piecka
Hello We've discovered a very weird behavior in OpenBSD IPsec. We run isakmpd -K and use ipsecctl with ipsec.conf to set up our IPsec tunnels. When our peer adds a new network to an existing configuration on his router, our OpenBSD box accepts the network without our intervention, SAs and flows

override pexp var in rc scripts

2019-03-13 Thread Kapetanakis Giannis
Hi, I'm trying to create a rc file for pmacctd. I've defined the pexp var but for some reason it is not working. I'm probably missing something not obvious to me. #!/bin/sh # daemon="/usr/local/sbin/pmacctd" . /etc/rc.d/rc.subr pexp="pmacctd: Core Process.*" rc_reload=NO rc_cmd $1 pexp

Re: override pexp var in rc scripts

2019-03-13 Thread Kapetanakis Giannis
Fixed it by deleting /var/run/rc.d/pmacctd G On 13/03/2019 11:24, Kapetanakis Giannis wrote: > Hi, > > I'm trying to create a rc file for pmacctd. I've defined the pexp var but for > some reason it is not working. > I'm probably missing something not obvious to me. > > #!/bin/sh > # > >

diff to FAQ17

2019-03-13 Thread Stephane HUC "PengouinBSD"
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi... a cvs diff for a little error on typo on FAQ17? Index: faq/faq17.html === RCS file: /cvs/www/faq/faq17.html,v retrieving revision 1.4 diff -u -p -r1.4 faq17.html - ---

Re: IPsec peers allowed to inject any network to existing tunnels

2019-03-13 Thread Fedor Piecka
I understood that ipsecctl and ipsec.conf are supposed to free the user from configuring keynotes manually. Doesn't the parameter "-K" of isakmpd mean it won't read keynote policy at all? man ipsec.conf: The keying daemon, isakmpd(8), can be enabled to run at boot time via the

Re: Meinberg Funkuhren DCF77 clocks

2019-03-13 Thread Christian Weisgerber
Peter J. Philipp: > Thanks for your reply. I mailed meinberg whether they give out datasheets to > their products so that I can modify the driver. If I don't manage to make the > new one working, is there interest by german or european developers to take > on the hardware or money to buy their

Re: serial console images for installing on vmd based guests

2019-03-13 Thread Dave Voutila
On Wed, Mar 13, 2019 at 4:08 AM Claudio Jeker wrote: > > On Tue, Mar 12, 2019 at 11:48:01PM -0700, Mike Larkin wrote: > > On Tue, Mar 12, 2019 at 05:37:04PM -0700, Chris Cappuccio wrote: > > > Is there any archive of serial console bootable images (w/virtio support) > > > for Linux or other OSes

Re: Meinberg Funkuhren DCF77 clocks

2019-03-13 Thread Peter J. Philipp
On Wed, Mar 13, 2019 at 04:19:48PM +0100, Christian Weisgerber wrote: > Peter J. Philipp: > > > Thanks for your reply. I mailed meinberg whether they give out datasheets > > to > > their products so that I can modify the driver. If I don't manage to make > > the > > new one working, is there

Re: OpenBSD developers, do you approve the Plain English?

2019-03-13 Thread Ingo Schwarze
Hi, Quantum Robin wrote on Wed, Mar 13, 2019 at 01:40:38PM -0300: > Do you approve the Plain English? This question is totally off-topic on . Please take the discussion elsewhere. Yours, Ingo

OpenBSD developers, do you approve the Plain English?

2019-03-13 Thread Quantum Robin
Hi OpenBSD developers and Gerry Rzeppa! OpenBSD developers, the Gerry Rzeppa is the co-creator of the Plain English programming language and the Grand Negus of the Osmosian Order of Plain English Programmers. Do you approve the Plain English? If not, why you does not approve the Plain English?

Re: Are there open source firewall distributions which are built on top of OpenBSD?

2019-03-13 Thread Paul Suh
> On Mar 13, 2019, at 6:05 AM, Stuart Henderson wrote: > > On 2019-03-13, Mehma Sarja wrote: >> My current setup is basic firewall with DHCP, NAT and routing. But there is >> power in the simplicity. When something goes wrong -and it has happened >> twice due to power failures, there is so

Re: IPsec peers allowed to inject any network to existing tunnels

2019-03-13 Thread Stuart Henderson
On 2019-03-13, Fedor Piecka wrote: > I understood that ipsecctl and ipsec.conf are supposed to free the user > from configuring keynotes manually. That's not correct. ipsec.conf can take the place of isakmpd.conf in some limited cases. It doesn't replace keynote in any way. > Doesn't the

Re: serial console images for installing on vmd based guests

2019-03-13 Thread Chris Cappuccio
Mike Larkin [mlar...@nested.page] wrote: > On Tue, Mar 12, 2019 at 05:37:04PM -0700, Chris Cappuccio wrote: > > Is there any archive of serial console bootable images (w/virtio support) > > for Linux or other OSes to boot under vmd? > > > > You mean installer images? Like things you would

Re: 63 bit certificate ID is libressl affected?

2019-03-13 Thread William Ahern
On Wed, Mar 13, 2019 at 06:53:43PM -0700, William Ahern wrote: > The real issue here is that the EJBCA specification wasn't just a failure in > language precision, but was and remains entirely ill considered on this > score. If ASN.1 INTEGERs must now be 65 bits, it's a good bet that most if >

Re: ~OT, ARM64 becoming more useful: RK3399 laptop w M2 slot & A64 phone coming

2019-03-13 Thread Aaron Mason
I like the look of the Rock64 Pro - quad core A53 + dual core A72, gigabit NIC, PCIe slot that can be used with a SATA card in the Rock64Pro NAS enclosure. Seems OpenBSD supports the Rock64Pro, it's not clear if the NIC is supported (as some rumblings on the OpenBSD subreddit suggest). That

Re: 63 bit certificate ID is libressl affected?

2019-03-13 Thread Tom Smyth
Thanks Ingo for your (as always) good attention to detail and detailed feedback I really appreciate it ... Point taken Ingo re the patch... :) and tech@ :) and discussion duly moved to misc@ it was more of a heads up Ill work on my programming skills :) cheers, Tom Smyth On Wed, 13 Mar

Re: serial console images for installing on vmd based guests

2019-03-13 Thread Chris Cappuccio
Mike Larkin [mlar...@nested.page] wrote: > > Still not sure I understand what you're after. Basically all Linux installers > can do this, you just need to add console=ttyS0,115200 to the kernel command > line. I don't think there are any installers that have this change already > made. > I

Re: serial console images for installing on vmd based guests

2019-03-13 Thread Paul Suh
> On Mar 13, 2019, at 6:30 PM, Chris Cappuccio wrote: > > I think I'm just too stupid to use Linux. I know grub-based boot loaders give > you that option, but then I went to try Alpine Linux, and from what I'm > finding, I have to setup a config file put it back into the ISO. Chris, I've

Re: 63 bit certificate ID is libressl affected?

2019-03-13 Thread William Ahern
On Wed, Mar 13, 2019 at 11:32:50PM +0100, Ingo Schwarze wrote: > Hi Tom, > > Tom Smyth wrote on Wed, Mar 13, 2019 at 08:32:20PM +: > > > Just saw the following article and i was wondering if libressl > > Might be affected by the bug also > > Top bit being set to 0 always making an effective

Re: serial console images for installing on vmd based guests

2019-03-13 Thread Mike Larkin
On Wed, Mar 13, 2019 at 09:01:26AM -0700, Chris Cappuccio wrote: > Mike Larkin [mlar...@nested.page] wrote: > > On Tue, Mar 12, 2019 at 05:37:04PM -0700, Chris Cappuccio wrote: > > > Is there any archive of serial console bootable images (w/virtio support) > > > for Linux or other OSes to boot

Re: serial console images for installing on vmd based guests

2019-03-13 Thread Tom Smyth
Hi Chris, yeah the grub loaders config files are what I have changed in the past to move the console from vga to serial (on RHEL /Centos) On Wed, 13 Mar 2019 at 22:45, Chris Cappuccio wrote: > > Mike Larkin [mlar...@nested.page] wrote: > > > > Still not sure I understand what you're after.

Re: serial console images for installing on vmd based guests

2019-03-13 Thread Mike Larkin
On Wed, Mar 13, 2019 at 03:30:12PM -0700, Chris Cappuccio wrote: > Mike Larkin [mlar...@nested.page] wrote: > > > > Still not sure I understand what you're after. Basically all Linux > > installers > > can do this, you just need to add console=ttyS0,115200 to the kernel command > > line. I don't

Re: ARP issues when using ldpd and MPLS pseudowires

2019-03-13 Thread Tom Smyth
Adrian, sorry I only saw this now ... when trying to go through old unread mails I would be very wary of vmware virtual networking and Layer 2 Forwarding I loved vmware before I discovered the ridiculous short comings in their virtual networks Vmware Virtual Switches vmxnet they are not