Re: Zabbix: Support for PSK was not compiled in

2023-02-08 Thread Stuart Henderson
On 2023-02-08, Lars Bonnesen  wrote:
> Installed zabbix-agent
>
> but when doing "./zabbix_agentd -d start", I get:
>
> ERROR: value of parameter "TLSConnect" requires support of encrypted
> connection with PSK but support for PSK was not compiled in
>
> How do I add support for Preshared key?

LibreSSL has intentionally removed support for psk.

Zabbix pulls in various libraries that will make it difficult to build
against OpenSSL instead of LibreSSL.

Preferred option is to use certs instead. Otherwise you might also
be able to build it against gnutls.


-- 
Please keep replies on the mailing list.



Re: stuck on configuring netboot raspberry pi from an openbsd VM : RPC time for server 192.168.0.255

2023-02-08 Thread j

I have configured "/etc/dnsmasq", "/etc/ethers", "/etc/hosts", and
"/etc/exports" and "/etc/bootparams".
The PXE boot in UEFI boot is able to  contact the tftp/dhcp server and
download the bsd kernel and boot up
However, just before (or while) mounting nfs shares as root I get the 
RPC

timeout error.

```
nfs_boot: using interface bse0 with revarp & bootparams
RPC timeout for server 192.168.0.255
```


You didn't say if you did this but you also need to change

 /etc/dhcpd.conf

and enable rarpd, dhcpd, bootparamd, nfs_server, and finally portmap
on your boot server.

Use tcp not udp for NFS.  Add to the fstab for the mount point.

Add a swapfile for the client; ideally a local disk but NFS will do. It
doesn't need to be large.

My notes on diskless date back to OpenBSD 4.x but I'm pretty sure you
need these even now.


J



Re: DBeaver or similar db tool

2023-02-08 Thread Daniele Bonini



Daniele Bonini  wrote:

> Thanks, I'm just coming from trying to build it

I forgot to say that I succeeded to build it by running the process 
from root. Indeed I managed to overcome my environment problems by some
ln to free space..

> NetBeans Ide and the plugins

The build created a dir with probably an "indipendent platform" 
version of plugins (but without eclipse plugin dependencies) + a build
version for the three supported platforms (with the eclipse plugin
dependencies, but not all!)

> I'm going to try out PDT (Eclipse IDE for PHP) and I will update you
> soon.

Sorry to be so fast with my update.. 

Damn, where is the source code of Eclipse!? If anyone is able to
drive me in to somehow start I could appreciate it..


-- Daniele Bonini
‎‎



Re: Suggestion for improving FAQ14: UUIDs

2023-02-08 Thread Ashlen
On 23/02/06 09:35, Thomas Dettbarn wrote:
> Hello!
>
> tl;dr: I would like to suggest adding a line about the virtues of UUID to the
> FAQ14. Something along the lines of "Remember to set up the UUID in your
> /etc/fstab afterwards." or something.

It does outline this problem here.
https://www.openbsd.org/faq/faq14.html#DUID

OpenBSD creates an fstab(5) using DUIDs during installation if I'm not mistaken.
So in order for this to happen, a user would likely open /etc/fstab in an editor
and see those entries post-install, and then after they notice them they would
have to ignore whatever doubts cropped up and add in a /dev/* entry anyway.



Re: stuck on configuring netboot raspberry pi from an openbsd VM : RPC time for server 192.168.0.255

2023-02-08 Thread Sandeep Gupta
Yes we do need those. The only change is that instead of dhcpd, I am using
dnsmasq which takes care of tftp and dhcp services.
I figured out the error was because I had not started the bootparamd. Once
I started the bootparamd, the client boots passed that
error and panics with nfs mount. I am  investigating that error currently.



On Thu, Feb 9, 2023 at 1:17 AM  wrote:

> > I have configured "/etc/dnsmasq", "/etc/ethers", "/etc/hosts", and
> > "/etc/exports" and "/etc/bootparams".
> > The PXE boot in UEFI boot is able to  contact the tftp/dhcp server and
> > download the bsd kernel and boot up
> > However, just before (or while) mounting nfs shares as root I get the
> > RPC
> > timeout error.
> >
> > ```
> > nfs_boot: using interface bse0 with revarp & bootparams
> > RPC timeout for server 192.168.0.255
> > ```
>
> You didn't say if you did this but you also need to change
>
>   /etc/dhcpd.conf
>
> and enable rarpd, dhcpd, bootparamd, nfs_server, and finally portmap
> on your boot server.
>
> Use tcp not udp for NFS.  Add to the fstab for the mount point.
>
> Add a swapfile for the client; ideally a local disk but NFS will do. It
> doesn't need to be large.
>
> My notes on diskless date back to OpenBSD 4.x but I'm pretty sure you
> need these even now.
>
>
> J
>
>


Re: How to announce over OSPF only one IP address

2023-02-08 Thread Bradley Latus
Hi,
I see a small mistake

You need to add that route to vr3 interface when you bring it up,  vr0 will
most likely be up before vr3 so that is why your route adding in the
hostname.vr0 is wrong.

Cheers

On Thu, 9 Feb 2023, 01:36 Radek,  wrote:

> Hello Bradley,
> thank you, your setup works the way I need.
>
> I can't deal with adding the static route permanently. I have to add the
> static route by hand (route add 10.1.111.11/32 10.1.111.1) after reboot.
> Did I missed something?
>
> [10.109.3.15] $ cat /etc/hostname.vr0
> -inet
> dhcp
> #inet 10.109.3.15 255.255.255.0
> !sleep 60
> !route add 10.1.111.11/32 10.1.111.1
>
> After reboot it looks like this:
>
> [10.109.3.15] $ route -n show
> Routing tables
>
> Internet:
> DestinationGatewayFlags   Refs  Use   Mtu  Prio
> Iface
> default10.109.3.254   UGS5   15 - 8 vr0
> 224/4  127.0.0.1  URS0   59 32768 8 lo0
> 10.1.100/2410.1.100.1 Cn 00 - 4 vr1
> 10.1.100.1 00:00:24:cb:4f:cd  UHLl   00 - 1 vr1
> 10.1.100.255   10.1.100.1 Hb 00 - 1 vr1
> 10.1.111/2410.1.111.1 UCn10 - 4 vr3
> 10.1.111.1 00:00:24:cb:4f:cf  UHLl   03 - 1 vr3
> 10.1.111.1100:00:24:cb:4f:d0  UHLc   02 - 3 vr3
> 10.1.111.255   10.1.111.1 UHb00 - 1 vr3
> 10.1.222/2410.109.3.16UG 00 -32 vr0
> 10.109.3/2410.109.3.15UCn3   40 - 4 vr0
> 10.109.3.10a4:bb:6d:d6:5a:a4  UHLc   1   29 - 3 vr0
> 10.109.3.1500:00:24:cb:4f:cc  UHLl   0   13 - 1 vr0
> 10.109.3.1600:00:24:cd:90:10  UHLch  1   26 - 3 vr0
> 10.109.3.254   00:0d:b9:35:39:29  UHLch  1   31 - 3 vr0
> 10.109.3.255   10.109.3.15UHb00 - 1 vr0
> 127/8  127.0.0.1  UGRS   00 32768 8 lo0
> 127.0.0.1  127.0.0.1  UHhl   12 32768 1 lo0
>
>
> On Tue, 7 Feb 2023 17:54:27 +1100
> Bradley Latus  wrote:
>
> > Hi all,
> >
> > I have done an experiment.
> >
> > If your interface is part of an area, it will be advertised always.
> >
> > If you wanted to advertise only /32 this is how I got mine to work.
> > Ensure your interface vr3 is not in your ospf area
> >
> > Add a static route to the one you wish to advertise, it appears that
> unless
> > a route exists on the machine you cannot redistribute a random ip.
> >
> > So  route add 10.1.111.11/32 10.1.111.1
> >
> > Then you can redistribute your /32
> >
> >
> >
> > router-id 10.109.3.15
> > redistribute 10.1.111.11/32
> >
> > area 0.0.0.0 {
> >   interface vr0
> > }
> >
> >
> >
> > On Tue, 7 Feb 2023, 02:46 Radek,  wrote:
> >
> > > Hello,
> > > > I’d check the databases on both sides.
> > > > And flush/reload the config and fibs.
> > > I reloaded and restarted OSPFd on both sides - nothing changes. Then, I
> > > rebooted routers on both sides - nothing changes.
> > > I still can see/ping the whole 10.1.111.0/24 subnet from the far end.
> > >
> > > [10.109.3.15]$ ospfctl show database router
> > >
> > > Router Link States (Area 0.0.0.0)
> > >
> > > LS age: 238
> > > Options: -|-|-|-|-|-|E|-
> > > LS Type: Router
> > > Link State ID: 10.109.3.15
> > > Advertising Router: 10.109.3.15
> > > LS Seq Number: 0x8016
> > > Checksum: 0x6d0a
> > > Length: 48
> > > Flags: *|*|*|*|*|-|E|-
> > > Number of Links: 2
> > >
> > > Link connected to: Stub Network
> > > Link ID (Network ID): 10.1.111.0
> > > Link Data (Network Mask): 255.255.255.0
> > > Metric: 10
> > >
> > > Link connected to: Transit Network
> > > Link ID (Designated Router address): 10.109.3.16
> > > Link Data (Router Interface address): 10.109.3.15
> > > Metric: 10
> > >
> > > LS age: 239
> > > Options: -|-|-|-|-|-|E|-
> > > LS Type: Router
> > > Link State ID: 10.109.3.16
> > > Advertising Router: 10.109.3.16
> > > LS Seq Number: 0x8016
> > > Checksum: 0xb058
> > > Length: 36
> > > Flags: *|*|*|*|*|-|E|-
> > > Number of Links: 1
> > >
> > > Link connected to: Transit Network
> > > Link ID (Designated Router address): 10.109.3.16
> > > Link Data (Router Interface address): 10.109.3.16
> > > Metric: 10
> > >
> > >
> > > [10.109.3.16]$ ospfctl show fib
> > > flags: * = valid, O = OSPF, C = Connected, S = Static
> > > Flags  Prio Destination  Nexthop
> > > *S8 0.0.0.0/010.109.3.254
> > > *O   32 10.1.111.0/2410.109.3.15
> > >
> > >
> > > On Sun, 5 Feb 2023 22:20:07 +0100
> > > Diederik Schouten  wrote:
> > >
> > > > Hello,
> > > >
> > > > I’d check the databases on both sides.
> > > > And flush/reload the config and fibs.
> > > > Then check again which link state 

Re: permission denied when writing to mounted directory exported by NFS server

2023-02-08 Thread carsten . reith
On Wed, Feb 08, 2023 at 10:30:17PM +0100, cre...@macbeth.creith.de wrote:
> On Wed, Feb 08, 2023 at 09:27:34PM +0530, Sandeep Gupta wrote:
> > I have a default installation of openbsd, with portmap, mountd, nfsd
> > services started via rcctl. I have following entry in /etc/exports
> > 
> > /nfs/testdir -alldirs  -maproot=root -network=192.168.0 -mask=255.255.255.0
> > 
> > I am able to mount the exported share on client (centos) as follows:
> > 
> > sudo mount -t nfs -o rw,noauto -v 192.168.0.122:/nfs/testdir mntpt3
> > 
> > From the client, I can read the contents. But writing inside the mounted
> > directory yields permission denied error. Looking at the docs I am not able
> > to find any otherconfig options for access control on the client side.
> > There is nothing in the logs on the server side as well. Any pointers to
> > debug/fix would be of great help.
> 
> Is /var/log/daemon happy, when you start the mountd ?
> 



athn on a bridge

2023-02-08 Thread Martin Kjær Jørgensen


Hi,

I'm experimenting with turning an OpenBSD 7.2 box into a wireless access point
(hostap) using a athn, em, bridge, vether devices and dhcpd.

Configuring the athn0 interface with IP, hostap and SSID works fine. Other 
clients
connects to it and obtains IP over DHCP.

When configuring the athn0 with no IP address, and adding the interface to a
bridge0 interface along with the em1 device and a vether0 device, clients
still connects fine to athn0 SSID but when clients ask for IP over DHCP,
ethernet frames does not propagate to vether0 where the dhcpd listens.

pf is disabled (pf=NO)

dmesg:
em1 at pci6 dev 0 function 0 "Intel 82574L" rev 0x00: msi, address 
00:1b:21:3a:78:80
athn0 at pci16 dev 0 function 0 "Atheros AR928X" rev 0x01: apic 130 int 8
athn0: AR9280 rev 2 (2T2R), ROM rev 11, address 00:26:82:61:87:c9

ifconfig:

em1: flags=8b43 mtu 
1500
lladdr 00:1b:21:3a:78:80
index 2 priority 0 llprio 3
media: Ethernet autoselect (none)
status: no carrier
vether0: flags=8943 mtu 1500
lladdr fe:e1:ba:d0:cd:4a
index 9 priority 0 llprio 3
groups: vether
media: Ethernet autoselect
status: active
inet 192.168.1.1 netmask 0xff80 broadcast 192.168.1.127
athn0: flags=8943 mtu 1500
lladdr 00:26:82:61:87:c9
index 5 priority 4 llprio 3
groups: wlan
media: IEEE802.11 autoselect mode 11g hostap
status: active
ieee80211: nwid TEST chan 2 bssid 00:26:82:61:87:c9 -58dBm wpakey 
wpaprotos wpa2 wpaakms psk wpaciphers ccmp wpagroupcipher ccmp
bridge0: flags=0<> mtu 1500
index 8 llprio 3
groups: bridge
priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp
designated: id 00:00:00:00:00:00 priority 0
athn0 flags=3
port 5 ifpriority 0 ifcost 0
em1 flags=3
port 2 ifpriority 0 ifcost 0
vether0 flags=3
port 9 ifpriority 0 ifcost 0
Addresses (max cache: 100, timeout: 240):


Have I configured something wrong or is a feature missing?


/Martin



Re: Safely remove USB drive

2023-02-08 Thread NilsOla Nilsson
On Wed, Feb 08, 2023 at 07:15:27PM +0100, Paul de Weerd wrote:
> On Wed, Feb 08, 2023 at 04:50:32PM +0100, Jan Stary wrote:
> | On Feb 08 13:56:18, pe...@bsdly.net wrote:
> | > 1) close any open files stored there
> | > 2) make sure no process has the media as $PWD (as in, cd away from there,
> | >and really a variation on the first)
> | > 3) issue at least one sync command (some folklore will insist on three)
> | > 4) umount the media from wherever it was mounted
> | 
> | 4 takes care of 1,2,3, right?
> 
> Not if the kernel has a file open on it (e.g. a swap file [1]) or if
> there's another mount somewhere in the filesystem you're trying to
> unmount (a special case of the first condition, I guess).
> 
> [weerd@kale] $ doas mount /dev/sd3a /mnt
> [weerd@kale] $ doas mkdir /mnt/deeper
> [weerd@kale] $ doas mount /dev/sd3d /mnt/deeper
> [weerd@kale] $ doas dd if=/dev/zero of=/mnt/swap bs=1M count=4096
> [weerd@kale] $ doas swapon /mnt/swap
> 
> The kernel is not going to let you `umount /mnt`, and forcibly
> removing the device is very likely going to lead to amazing new
> learning opportunities.
> 
> So, yeah, as people have stated .. the way to safely remove a USB
> drive from your system depends on what you were using the USB drive
> for.  For the generic case, where we have no clue what OP was doing:
> shut down your machine first and remove the device then.
> 
Does shut down save you from the case above?
Shut down is the same as umount -f ?

Nola

-- 
Nils Ola Nilsson,  nils...@abc.se



Re: Safely remove USB drive

2023-02-08 Thread Daniele B.
Just to keep the discussion and clarificarions in the mailing list.

I'm sorry for all the typos of my my previous post.

Paul de Weerd  wrote:  
> and forcibly removing the device is very likely going to lead to 
> amazing new learning opportunities.  
I can confirm these statement and I invite you to double check all the 
"learning opportunities":
knowing the situation an attacker can easily point to deattach all your 
devices, even the huband that's te magic..

> [1]: Putting swap on removable media is a tremendously bad idea - 
> don't do it, unless you're keen on those learning opportunities.  
I can confirm also this one for what I saw a tremendous improvement of 
performances looking at mfs,
given that I create an msf more big than the swap partition, forcing msf to 
move on ram with, I
believe with the save pros of msf.

However, let me confirm I'm getting the thing right.

-- Daniele Bonini



DBeaver ... and OpenBSD ?

2023-02-08 Thread carsten . reith
> 
> Damn, where is the source code of Eclipse!? If anyone is able to
> drive me in to somehow start I could appreciate it..
> 
> 
> -- Daniele Bonini
> ??

Would anybody enlighten me ? How is all this related to OpenBSD ?

:wq

Carsten



Re: athn on a bridge

2023-02-08 Thread Crystal Kolipe
On Wed, Feb 08, 2023 at 08:28:50PM +0100, Martin Kjr Jrgensen wrote:
> I'm experimenting with turning an OpenBSD 7.2 box into a wireless access point
> (hostap) using a athn, em, bridge, vether devices and dhcpd.

You obviously enjoy pain :).

Seriously, if this is for anything other than educational purposes, you'll
probably be disappointed with the results.  The athn driver does support
hostap mode, but just like most other wifi cards on OpenBSD the support is
somewhat lacking.  You won't get good performance out of it.



Re: keyboad left ALT not working on console - thinkpad t410

2023-02-08 Thread Digua Dong
On Tue, Feb 07, 2023 at 10:54:15AM +, Luca Ferrari wrote:
> Hi all,
> running 7.2, I don't understand how to configure wscons because my
> left alt key does not work on console.
> wsconsctl reports keyboard.type=pc-xt
> When I press ALT it seems it turns UTF-8 on to print a codepoint.
> I'm using a lenovo thinkpad t410.
> Any idea?
> 
> Thanks,
> Luca

Hey! I found the solution:
wsconsctl keyboard.encoding=us.metaesc

An interesting story about how I found it:
I searched something like "openbsd console alt key", but nothing.
Then I thought, who uses ALT key most? Emacs user!
So I searched "emacs console alt key", and found the solution by EmacsWiki.
https://www.emacswiki.org/emacs/MetaKeyProblems

digua



Re: permission denied when writing to mounted directory exported by NFS server

2023-02-08 Thread Otto Moerbeek
On Thu, Feb 09, 2023 at 11:41:12AM +0530, Sandeep Gupta wrote:

> Following up on this. I looked into the /var/log/messages/ and
> /var/log/daemon. Both are quite after starting the portmap, mountd, and
> nfsd services.
> 
> Here is verbose output from the client side when mounting the share:
> ```
> [adming@cluster-node2]~% sudo mount -t nfs -o rw,noauto -v
> 192.168.0.122:/nfs/testdir
>  /home/adming/mntpt2
> mount.nfs: timeout set for Thu Feb  9 11:34:52 2023
> 
> mount.nfs: trying text-based options
> 'vers=4.2,addr=192.168.0.122,clientaddr=192.168.0.187'
> mount.nfs: mount(2): Protocol not supported
> mount.nfs: trying text-based options
> 'vers=4,minorversion=1,addr=192.168.0.122,clientaddr=192.168.0.187'
> mount.nfs: mount(2): Protocol not supported
> mount.nfs: trying text-based options
> 'vers=4,addr=192.168.0.122,clientaddr=192.168.0.187'
> mount.nfs: mount(2): Protocol not supported
> Created symlink
> /run/systemd/system/remote-fs.target.wants/rpc-statd.service →
> /usr/lib/systemd/system/rpc-statd.service.
> mount.nfs: trying text-based options 'addr=192.168.0.122'
> mount.nfs: prog 13, trying vers=3, prot=6
> mount.nfs: trying 192.168.0.122 prog 13 vers 3 prot TCP port 2049
> mount.nfs: prog 15, trying vers=3, prot=17
> mount.nfs: trying 192.168.0.122 prog 15 vers 3 prot UDP port 724
> [adming@cluster-node2]~% cd mntpt2
> [adming@cluster-node2]~/mntpt2% ls
> alfpha  testfile
> [adming@cluster-node2]~/mntpt2% touch y
> touch: cannot touch 'y': Permission denied
> ```
> 
> Am out of ideas as what to test/debug.

run the commands
$ ls -ld 
$ id

to see what the permissions are on te dir and what user you are running as.

-Otto

> 
> 
> 
> On Wed, Feb 8, 2023 at 9:27 PM Sandeep Gupta 
> wrote:
> 
> > I have a default installation of openbsd, with portmap, mountd, nfsd
> > services started via rcctl. I have following entry in /etc/exports
> >
> > /nfs/testdir -alldirs  -maproot=root -network=192.168.0 -mask=255.255.255.0
> >
> > I am able to mount the exported share on client (centos) as follows:
> >
> > sudo mount -t nfs -o rw,noauto -v 192.168.0.122:/nfs/testdir mntpt3
> >
> > From the client, I can read the contents. But writing inside the mounted
> > directory yields permission denied error. Looking at the docs I am not able
> > to find any otherconfig options for access control on the client side.
> > There is nothing in the logs on the server side as well. Any pointers to
> > debug/fix would be of great help.
> >



Re: permission denied when writing to mounted directory exported by NFS server

2023-02-08 Thread Sandeep Gupta
Following up on this. I looked into the /var/log/messages/ and
/var/log/daemon. Both are quite after starting the portmap, mountd, and
nfsd services.

Here is verbose output from the client side when mounting the share:
```
[adming@cluster-node2]~% sudo mount -t nfs -o rw,noauto -v
192.168.0.122:/nfs/testdir
 /home/adming/mntpt2
mount.nfs: timeout set for Thu Feb  9 11:34:52 2023

mount.nfs: trying text-based options
'vers=4.2,addr=192.168.0.122,clientaddr=192.168.0.187'
mount.nfs: mount(2): Protocol not supported
mount.nfs: trying text-based options
'vers=4,minorversion=1,addr=192.168.0.122,clientaddr=192.168.0.187'
mount.nfs: mount(2): Protocol not supported
mount.nfs: trying text-based options
'vers=4,addr=192.168.0.122,clientaddr=192.168.0.187'
mount.nfs: mount(2): Protocol not supported
Created symlink
/run/systemd/system/remote-fs.target.wants/rpc-statd.service →
/usr/lib/systemd/system/rpc-statd.service.
mount.nfs: trying text-based options 'addr=192.168.0.122'
mount.nfs: prog 13, trying vers=3, prot=6
mount.nfs: trying 192.168.0.122 prog 13 vers 3 prot TCP port 2049
mount.nfs: prog 15, trying vers=3, prot=17
mount.nfs: trying 192.168.0.122 prog 15 vers 3 prot UDP port 724
[adming@cluster-node2]~% cd mntpt2
[adming@cluster-node2]~/mntpt2% ls
alfpha  testfile
[adming@cluster-node2]~/mntpt2% touch y
touch: cannot touch 'y': Permission denied
```

Am out of ideas as what to test/debug.



On Wed, Feb 8, 2023 at 9:27 PM Sandeep Gupta 
wrote:

> I have a default installation of openbsd, with portmap, mountd, nfsd
> services started via rcctl. I have following entry in /etc/exports
>
> /nfs/testdir -alldirs  -maproot=root -network=192.168.0 -mask=255.255.255.0
>
> I am able to mount the exported share on client (centos) as follows:
>
> sudo mount -t nfs -o rw,noauto -v 192.168.0.122:/nfs/testdir mntpt3
>
> From the client, I can read the contents. But writing inside the mounted
> directory yields permission denied error. Looking at the docs I am not able
> to find any otherconfig options for access control on the client side.
> There is nothing in the logs on the server side as well. Any pointers to
> debug/fix would be of great help.
>


Re: athn on a bridge

2023-02-08 Thread Martin Kjær Jørgensen


On Wed, Feb 08 2023, Crystal Kolipe  wrote:

> On Wed, Feb 08, 2023 at 08:28:50PM +0100, Martin Kjr Jrgensen wrote:
>> I'm experimenting with turning an OpenBSD 7.2 box into a wireless access 
>> point
>> (hostap) using a athn, em, bridge, vether devices and dhcpd.
>
> You obviously enjoy pain :).

He he, actually no :) I was just curious about it.

>
> Seriously, if this is for anything other than educational purposes, you'll
> probably be disappointed with the results.  The athn driver does support
> hostap mode, but just like most other wifi cards on OpenBSD the support is
> somewhat lacking.  You won't get good performance out of it.

That's what I gathered so far, but I could have been wrong or not
up-to-date. There have been some work on the ieee80211(9) lately.



permission denied when writing to mounted directory exported by NFS server

2023-02-08 Thread Daniele B.
Unfortunately - personal experience - NFS is not the best offering from 
OpenBSD: it is enough
combersome to setup and easy to lose grip: something unsafe to keep me away 
from it.

However, for your testing purposes, I can suggest you there is a specific tool 
to test, server and client
status. looking to the man I guess it should be nfsstat pointed to one or the 
other host same time.
Probably some other people could be more detailed.

-- Daniele Bonini

Feb 8, 2023 17:00:09 Sandeep Gupta :

> Looking at the docs I am not able
> to find any otherconfig options for access control on the client side.
> There is nothing in the logs on the server side as well. Any pointers to
> debug/fix would be of great help.



Re: DBeaver or similar db tool

2023-02-08 Thread Michael Hekeler
Am 07.02.23 15:27 schrieb Daniele B.:
> Hello,
> 
> I'm looking around a new "work environment" offering what in terms
> of software and I came across a list of appealing software
> suggested in the category 'db tools' to manage my
> databases.
> 
> Among those I notice DBeaver (https://dbeaver.io/).
> 
> Any chance to have a rich db tool like DBeaver ported to
> OpenBSD soon or later?


As others said before DBeaver is written using Java 17 and maybe you can
compile it whith OpenJDK 17 and Maven.
DBeaver is based on Eclipse and it is also available as eclipse plugin.

Many of these Database GUI's are based on java and so maybe you can find
something you like.

There is also HeiSQL which is written in pascal. Many years ago i
compiled that beast with lazarus and it runs fine ;-)

There are PHP based database GUI's.
E.g. there is Adminer. Just one single php file to drop in your
webserver.

But in the end it all depends on what you expect from such a tool.

>From my experience (which you can safely ignore for sure) i can suggest:
if you really want to use a database then you have to use the tools
provided by this database.
The time learning such all-purpose database management tools is better
invested in learning the quirks of the specific DBMS you want to use.
I find this is true for postgresql, oracle and sql-server.



Re: DBeaver or similar db tool

2023-02-08 Thread Omar Polo
Hello,

On 2023/02/08 08:42:40 +0100, Daniele Bonini  wrote:
> 
> Just coming from trying DBeaver intall..
> 
> cd dbeaver 
> launching `mvn package`:
> 
> [[ERROR] The build could not read 1 project -> [Help 1]
> [ERROR]   
> [ERROR]   The project org.jkiss.dbeaver:dbeaver:1.0.0-SNAPSHOT 
> (/usr/local/dbeaver/pom.xml) has 1 error
> [ERROR] Invalid artifact repository: Unable to provision, see the 
> following errors:
> [ERROR] 
> [ERROR] 1) Error in custom provider, java.lang.TypeNotPresentException: 
> Type org.eclipse.tycho.p2maven.repository.P2ArtifactRepositoryLayout not 
> present
> [ERROR]   at 
> ClassRealm[extension>org.eclipse.tycho:tycho-maven-plugin:3.0.1, parent: 
> jdk.internal.loader.ClassLoaders$AppClassLoader@277050dc] (via modules: 
> org.eclipse.sisu.wire.WireModule -> 
> org.eclipse.sisu.plexus.PlexusBindingModule)
> [ERROR]   while locating 
> org.apache.maven.artifact.repository.layout.ArtifactRepositoryLayout 
> annotated with @com.google.inject.name.Named(value="p2")
> [ERROR] 
> [ERROR] 1 error: 
> org/eclipse/tycho/p2maven/repository/P2ArtifactRepositoryLayout has been 
> compiled by a more recent version of the Java Runtime (class file version 
> 61.0), this version of the Java Runtime only recognizes class file versions 
> up to 55.0

you need to use a newever version of java.  The readme is confusing,
first says jdk 11 and later 17, but is 17 the one really needed.

I have 17 selected by default since i've added it to my PATH.  another
way would be to set JAVA_HOME=/usr/local/jdk-17/ (and don't forget to
install the package too.)

with that, maven finishes to build.  I don't have any clue on how to
run this stuff though, so haven't tested.  I think (based on some
github comment) that you need to install eclipse and run dbeaver as a
plugin?

HTH


Omar Polo




Re: DBeaver or similar db tool

2023-02-08 Thread Stuart Henderson
On 2023-02-08, Michael Hekeler  wrote:
> Am 07.02.23 15:27 schrieb Daniele B.:
>> Hello,
>> 
>> I'm looking around a new "work environment" offering what in terms
>> of software and I came across a list of appealing software
>> suggested in the category 'db tools' to manage my
>> databases.
>> 
>> Among those I notice DBeaver (https://dbeaver.io/).
>> 
>> Any chance to have a rich db tool like DBeaver ported to
>> OpenBSD soon or later?
>
>
> As others said before DBeaver is written using Java 17 and maybe you can
> compile it whith OpenJDK 17 and Maven.

It is, but it's not pure Java, inside some .jars are compiled .so
files (OS-specific "native code"), and there are native binaries

product/community/target/products/org.jkiss.dbeaver.core.product/linux/gtk/x86_64/dbeaver/dbeaver
product/community/target/products/org.jkiss.dbeaver.core.product/win32/win32/x86_64/dbeaver/dbeaver.exe
product/community/target/products/org.jkiss.dbeaver.core.product/win32/win32/x86_64/dbeaver/dbeaverc.exe
product/community/target/products/org.jkiss.dbeaver.core.product/macosx/cocoa/x86_64/DBeaver.app

As well as build system changes needed to build OpenBSD binaries, there
are checks inside the code itself for OS type as well as it does some
things slightly differently on Linux which would likely need patching
to also handle OpenBSD.

I think it's unlikely you are going to run this on OpenBSD without a
fair bit of pain.

>From release notes:

| ChatGPT integration for smart completion and code generation 

kill me now

> From my experience (which you can safely ignore for sure) i can suggest:
> if you really want to use a database then you have to use the tools
> provided by this database.
> The time learning such all-purpose database management tools is better
> invested in learning the quirks of the specific DBMS you want to use.
> I find this is true for postgresql, oracle and sql-server.
>
>


-- 
Please keep replies on the mailing list.



Re: DBeaver or similar db tool

2023-02-08 Thread Omar Polo
On 2023/02/08 10:27:00 +, Stuart Henderson  
wrote:
> On 2023-02-08, Michael Hekeler  wrote:
> > Am 07.02.23 15:27 schrieb Daniele B.:
> >> Hello,
> >> 
> >> I'm looking around a new "work environment" offering what in terms
> >> of software and I came across a list of appealing software
> >> suggested in the category 'db tools' to manage my
> >> databases.
> >> 
> >> Among those I notice DBeaver (https://dbeaver.io/).
> >> 
> >> Any chance to have a rich db tool like DBeaver ported to
> >> OpenBSD soon or later?
> >
> >
> > As others said before DBeaver is written using Java 17 and maybe you can
> > compile it whith OpenJDK 17 and Maven.
> 
> It is, but it's not pure Java, inside some .jars are compiled .so
> files (OS-specific "native code"), and there are native binaries
> 
> product/community/target/products/org.jkiss.dbeaver.core.product/linux/gtk/x86_64/dbeaver/dbeaver
> product/community/target/products/org.jkiss.dbeaver.core.product/win32/win32/x86_64/dbeaver/dbeaver.exe
> product/community/target/products/org.jkiss.dbeaver.core.product/win32/win32/x86_64/dbeaver/dbeaverc.exe
> product/community/target/products/org.jkiss.dbeaver.core.product/macosx/cocoa/x86_64/DBeaver.app
> 
> As well as build system changes needed to build OpenBSD binaries, there
> are checks inside the code itself for OS type as well as it does some
> things slightly differently on Linux which would likely need patching
> to also handle OpenBSD.

there are some issues on github that hints that it should run on
FreeBSD as eclipse plugin.  I assume that then it doesn't need the
native bits.

> I think it's unlikely you are going to run this on OpenBSD without a
> fair bit of pain.
>
> From release notes:
> 
> | ChatGPT integration for smart completion and code generation 
> 
> kill me now

LOL

i completely lost the interest when seeing it.  (joking, the idea of
running eclipse alone made me loose interest)

> > From my experience (which you can safely ignore for sure) i can suggest:
> > if you really want to use a database then you have to use the tools
> > provided by this database.
> > The time learning such all-purpose database management tools is better
> > invested in learning the quirks of the specific DBMS you want to use.
> > I find this is true for postgresql, oracle and sql-server.
> >
> >




Re: DBeaver or similar db tool

2023-02-08 Thread Umgeher Torgersen
On Wed, Feb 08, 2023 at 11:46:42AM +0100, Omar Polo wrote:
> > | ChatGPT integration for smart completion and code generation 
> > 
> > kill me now
> 
> LOL
> 
> i completely lost the interest when seeing it.  (joking, the idea of
> running eclipse alone made me loose interest)
> 

\ o / 



Re: Cannot use Intel Tearfree on Lenovo V15 G2 laptop

2023-02-08 Thread Digua Dong
On Wed, Feb 08, 2023 at 03:51:01AM -0700, Ashlen wrote:
> > And can I do something to reduce scroll tearing?
> If it was anything like my issue, it could be a vsync problem. Desktop
> environments will typically take care of this for you (and usually also 
> expose a
> setting for it somewhere). Window managers usually don't. I'm guessing that
> since you're talking about st that you're using a window manager, but correct 
> me
> if I'm wrong.
You are right, I'm using dwm + st :)

> Anyway, OpenBSD does have a compositor in the base system, xcompmgr(1), but it
> doesn't handle vsync. I use spectrwm and I dealt with screen tearing by
> installing and configuring picom.
> 
> # pkg_add picom
> 
> There's a lot you can do with picom, but this is all that should be needed for
> now.
> 
> $ cat ~/.config/picom/picom.conf
> # Resolve screen tearing.
> vsync = true;
> 
> Go ahead and test picom with that config file interactively first. If it
> addresses your issue, you can add `picom -b` to your ~/.xsession. 
For me, `--vsync` is not enough, I need to also add `--backend glx`,
and screen tearing is gone, yeah!

> Here's a video to test screen tearing.
> https://www.youtube.com/watch?v=MfL_JkcEFbE
good

Thanks a lot! Your advice really saved my eyes.



Re: DBeaver or similar db tool

2023-02-08 Thread Daniele B.
Umgeher:
>On Wed, Feb 08, 2023 at 11:46:42AM +0100, Omar Polo wrote: 
> > | ChatGPT integration for smart completion and code generation 
 > >  > > kill me now 
>  > LOL 
>  
> i completely lost the interest when seeing it.  (joking, the idea of 
> running eclipse alone made me loose interest) 
>   \ o /   

bots!

-- Daniele Bonini



Re: Cannot use Intel Tearfree on Lenovo V15 G2 laptop

2023-02-08 Thread Ashlen
On 23/02/07 19:57, Digua Dong wrote:
> On Tue, Feb 07, 2023 at 07:09:48PM +1100, Jonathan Gray wrote:
> > 
> > You should be using the default modesetting driver with this hardware.
> > Not opting into an old driver that hasn't had a release in years.
> > 
> I looked at the log with my configure disabled,
> uhh, it is actually not using intel driver.
> 
> (II) modesetting: Driver for Modesetting Kernel Drivers: kms
> (II) modeset(0): [DRI2]   DRI driver: iris
Right, OpenBSD defaults to modesetting(4) unless you specifically tell it to do
otherwise. As jsg said, the modesetting driver is what you should use.

> So the intel driver is no longer developed?
You should avoid intel(4), yes.

> And can I do something to reduce scroll tearing?
If it was anything like my issue, it could be a vsync problem. Desktop
environments will typically take care of this for you (and usually also expose a
setting for it somewhere). Window managers usually don't. I'm guessing that
since you're talking about st that you're using a window manager, but correct me
if I'm wrong.

Anyway, OpenBSD does have a compositor in the base system, xcompmgr(1), but it
doesn't handle vsync. I use spectrwm and I dealt with screen tearing by
installing and configuring picom.

# pkg_add picom

There's a lot you can do with picom, but this is all that should be needed for
now.

$ cat ~/.config/picom/picom.conf
# Resolve screen tearing.
vsync = true;

Go ahead and test picom with that config file interactively first. If it
addresses your issue, you can add `picom -b` to your ~/.xsession. 

Here's a video to test screen tearing.
https://www.youtube.com/watch?v=MfL_JkcEFbE

P.S. When you'd like to learn more about picom, here's how you can do so. I
found the sample config file with `pkg_info -L picom`.
$ man picom
$ less /usr/local/share/examples/picom/picom.sample.conf



Re: DBeaver or similar db tool

2023-02-08 Thread Daniele Bonini


Michael Hekeler  wrote:

>As others said before DBeaver is written using Java 17 and maybe you
>cancompile it whith OpenJDK 17 and Maven.
>DBeaver is based on Eclipse and it is also available as eclipse plugin.
>
>Many of these Database GUI's are based on java and so maybe you can
>find something you like.

Yes, I will probably end to try out PDT and see how is running.

>There is also HeiSQL which is written in pascal. Many years ago i
>compiled that beast with lazarus and it runs fine ;-)

Well, strictly for oldies.. Pascal merit a /myown/postmortem with all
the respect due for it userland and what was its educational purpose
addressed to me. Talking about the 1986.. 

>There are PHP based database GUI's.
>E.g. there is Adminer. Just one single php file to drop in your
>webserver.

This is the due tip for everyone. 

If, frankly speaking.. you are in the need to go mainstream from any
prospective that is the way, despite any Java and installation issue.

I am curious to come back to the desktop application with
reminiscences from SQL Server to see what is the gain in terms
"beautiful security" doing this backward physical passage.. from
the web, I mean.

>But in the end it all depends on what you expect from such a tool.
>
>From my experience (which you can safely ignore for sure) i can
>suggest:
>if you really want to use a database then you have to use the tools
>provided by this database.
>The time learning such all-purpose database management tools is better
>invested in learning the quirks of the specific DBMS you want to use.
>I find this is true for postgresql, oracle and sql-server.

You just mentioned an other important tip for everyone.

But for what is my web development principle at time sometimes I neither
want to mind that gap..the sufferance between DBMS. In fact one more
safe (no driver, no clasess. etc ) solution exists than dbs although not
scaling a lot.. at time and it depends from your infrastructure..

Omar Polo  wrote:

> you need to use a newever version of java.  The readme is confusing,
> first says jdk 11 and later 17, but is 17 the one really needed.
> 
> I have 17 selected by default since i've added it to my PATH.  another
> way would be to set JAVA_HOME=/usr/local/jdk-17/ (and don't forget to
> install the package too.)
> 
> with that, maven finishes to build.  I don't have any clue on how to
> run this stuff though, so haven't tested.  I think (based on some
> github comment) that you need to install eclipse and run dbeaver as a
> plugin?
 
Thank you Omar for the all the hints.

Because my system constraints I switched to my user to compile all
DBeavel and finally the installation terminates with this:

[INFO] DBeaver CE Standalone 22.3.1-SNAPSHOT .. SKIPPED
[INFO] DBeaver P2 Repositories 1.0.0-SNAPSHOT . SKIPPED
[INFO] DBeaver CE Repository 1.0.0-SNAPSHOT ... SKIPPED
[INFO] DBeaver - Debug support 1.0.0-SNAPSHOT . SKIPPED
[INFO] DBeaver - Office support 1.0.0-SNAPSHOT  SKIPPED
[INFO] DBeaver - SVG support 1.0.0-SNAPSHOT ... SKIPPED
[INFO] DBeaver - Git support 1.0.0-SNAPSHOT ... SKIPPED
[INFO]

[INFO] BUILD FAILURE [INFO]

[INFO] Total time:  16:42 min [INFO] Finished at:
2023-02-08T11:08:17+01:00 [INFO]

[ERROR] Failed to execute goal
org.eclipse.tycho:tycho-packaging-plugin:3.0.1:package-plugin
(default-package-plugin) on project org.jkiss.utils: Error assembling
JAR: /usr/local/dbeaver/bundles/org.jkiss.utils/target/classes isn't a
directory. -> [Help 1] [ERROR] [ERROR] To see the full stack trace of
the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using
the -X switch to enable full debug logging. [ERROR] [ERROR] For more
information about the errors and possible solutions, please read the
following articles: [ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR] [ERROR] After correcting the problems, you can resume the build
with the command [ERROR]   mvn  -rf :org.jkiss.utils

I checked the dir /usr/local/dbeaver/bundles/org.jkiss.utils/target/
and in fact doesn't exist.

Thanks!

-- Daniele Bonini



Re: DBeaver or similar db tool

2023-02-08 Thread Umgeher Torgersen
never!

On Wed, Feb 08, 2023 at 12:52:08PM +0100, Daniele B. wrote:
> Umgeher:
> >On Wed, Feb 08, 2023 at 11:46:42AM +0100, Omar Polo wrote: 
> > > | ChatGPT integration for smart completion and code generation 
>  > >  > > kill me now 
> >  > LOL 
> >  
> > i completely lost the interest when seeing it.  (joking, the idea of 
> > running eclipse alone made me loose interest) 
> >   \ o /   
> 
> bots!
> 
> -- Daniele Bonini



Re: Live stick / cd from official sources

2023-02-08 Thread Michael Hekeler
Am 04.02.23 17:48 schrieb Daniele B.:
> Sorry if I bother you again with the thread.
> 
> The minipc will be on business from tomorrow and I will use it
> together with a little student of mine: it is enough critical that the
> "not configured" hello! doesn't reppresent anything "risky".
> Eg: I tried to tweak the custom bios of Fujitsu for a more perfomant
> fan/cpu but the machine started litterally to fly while booting. Precautially
> I hanged manually the booting process.
> 
> The part of dmesg I'm wondering about is the following:
> 
> "FUJ02E3" at acpi0 not configured
> 
> "PNP0C14" at acpi0 not configured
> "PNP0C32" at acpi0 not configured
> "PNP0C14" at acpi0 not configured
> 
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> 
> acpicpu0 at acpi0: C1(@1 halt!), PSS
> acpicpu1 at acpi0: C1(@1 halt!), PSS
> acpicpu2 at acpi0: C1(@1 halt!), PSS
> acpicpu3 at acpi0: C1(@1 halt!), PSS

If you just want to stop these messages from filling your logs you can
boot into UKC mode by entering -c at the boot prompt:
UKC> disable acpi
UKC> quit


...(not a real solution but more a quick fix)



Re: Safely remove USB drive

2023-02-08 Thread Crystal Kolipe
Hi,

On Wed, Feb 08, 2023 at 10:13:59AM -0300, vitmau...@gmail.com wrote:
> thank you all for the replies. Crystal, what command would I use to
> detach a USB drive? I tried eject, but it doesn't seem to work with
> the kind of devices I have.

Can you explain exactly what you are trying to do, and what devices
you are using?

If you are just writing files to a usb flash drive from the command line,
then you mount it, copy the files, and umount, nothing more.

(Actually, umount automatically does a sync as soon as you invoke it.)

If you are doing something more complicated or using a usb device
other than a flash drive or external HD, then let us know so that we
can give you accurate advice.



Re: Live stick / cd from official sources

2023-02-08 Thread Daniele B.
Thanks for the tip, I'm going to check it out.
-- Daniele Bonini

Feb 8, 2023 13:36:31 Michael Hekeler :

> If you just want to stop these messages from filling your logs you can
> boot into UKC mode by entering -c at the boot prompt:
> UKC> disable acpi
> UKC> quit
> 
> 
> ...(not a real solution but more a quick fix)



Re: Safely remove USB drive

2023-02-08 Thread vitmau...@gmail.com
Hi,

thank you Crystal for the explanation.

Best,
Vito

Em qua., 8 de fev. de 2023 às 10:44, Crystal Kolipe
 escreveu:
>
> On Wed, Feb 08, 2023 at 10:34:07AM -0300, vitmau...@gmail.com wrote:
> > I'm not using my drives for anything more than copying files, dd etc.
> > I just got curious because you mentioned the act of detaching a device
> > after umounting it and I don't know how to do that on OpenBSD.
>
> If and only if you are using it with softraid, (usually as an encrypted
> volume), then you would need to detach the softraid device using bioctl -d.
>
> But you are almost certainly not doing that.
>
> If you are just copying files, and/or using dd to, for example, overwrite
> a device with zeros or random data, then you don't need to do anything
> special to use usb storage devices on OpenBSD.



Re: Safely remove USB drive

2023-02-08 Thread Peter N. M. Hansteen
On Wed, Feb 08, 2023 at 10:44:20AM -0300, Crystal Kolipe wrote:
> If you are just copying files, and/or using dd to, for example, overwrite
> a device with zeros or random data, then you don't need to do anything
> special to use usb storage devices on OpenBSD.

In the case of dd-ing to a usb stick I'd say only to wait until you get
the shell prompt back before you unplug it. Then you'll be fine.

- P

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: Safely remove USB drive

2023-02-08 Thread Crystal Kolipe
On Wed, Feb 08, 2023 at 09:27:08AM -0300, vitmau...@gmail.com wrote:
> quick and very basic question: is syncing and umounting a USB drive
> enough to safely remove it or should I execute other commands before
> unplugging these devices?

Unless you are doing something 'unusual' (*), then just unmounting
it is fine, you don't even need to run sync.

(*) Such as having it encrypted as a softraid device, in which case
you'd need to detach that after unmounting it.  Or writing to
the raw device directly with tar, for example.



Re: Safely remove USB drive

2023-02-08 Thread Peter N. M. Hansteen
On Wed, Feb 08, 2023 at 09:27:08AM -0300, vitmau...@gmail.com wrote:
> quick and very basic question: is syncing and umounting a USB drive
> enough to safely remove it or should I execute other commands before
> unplugging these devices?

My personal check list for safely removing removable media after use would be

1) close any open files stored there
2) make sure no process has the media as $PWD (as in, cd away from there,
   and really a variation on the first)
3) issue at least one sync command (some folklore will insist on three)
4) umount the media from wherever it was mounted

then you can go ahead and unplug.

- Peter

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: Live stick / cd from official sources

2023-02-08 Thread Stuart Henderson
On 2023-02-08, Michael Hekeler  wrote:
> Am 04.02.23 17:48 schrieb Daniele B.:
>> Sorry if I bother you again with the thread.
>> 
>> The minipc will be on business from tomorrow and I will use it
>> together with a little student of mine: it is enough critical that the
>> "not configured" hello! doesn't reppresent anything "risky".
>> Eg: I tried to tweak the custom bios of Fujitsu for a more perfomant
>> fan/cpu but the machine started litterally to fly while booting. Precautially
>> I hanged manually the booting process.
>> 
>> The part of dmesg I'm wondering about is the following:
>> 
>> "FUJ02E3" at acpi0 not configured
>> 
>> "PNP0C14" at acpi0 not configured
>> "PNP0C32" at acpi0 not configured
>> "PNP0C14" at acpi0 not configured
>> 
>> "PNP0C0B" at acpi0 not configured
>> "PNP0C0B" at acpi0 not configured
>> "PNP0C0B" at acpi0 not configured
>> "PNP0C0B" at acpi0 not configured
>> "PNP0C0B" at acpi0 not configured
>> 
>> acpicpu0 at acpi0: C1(@1 halt!), PSS
>> acpicpu1 at acpi0: C1(@1 halt!), PSS
>> acpicpu2 at acpi0: C1(@1 halt!), PSS
>> acpicpu3 at acpi0: C1(@1 halt!), PSS
>
> If you just want to stop these messages from filling your logs you can
> boot into UKC mode by entering -c at the boot prompt:
> UKC> disable acpi
> UKC> quit
>
>
> ...(not a real solution but more a quick fix)
>
>

This is bad advice. ACPI may be needed for thermal management,interrupt 
routing, and maybe other things. These "not configured"
devices are unlikely to be a problem.

-- 
Please keep replies on the mailing list.



Re: Safely remove USB drive

2023-02-08 Thread vitmau...@gmail.com
Hi,

thank you all for the replies. Crystal, what command would I use to
detach a USB drive? I tried eject, but it doesn't seem to work with
the kind of devices I have.

Best,
Vitor

Em qua., 8 de fev. de 2023 às 09:55, Crystal Kolipe
 escreveu:
>
> On Wed, Feb 08, 2023 at 09:27:08AM -0300, vitmau...@gmail.com wrote:
> > quick and very basic question: is syncing and umounting a USB drive
> > enough to safely remove it or should I execute other commands before
> > unplugging these devices?
>
> Unless you are doing something 'unusual' (*), then just unmounting
> it is fine, you don't even need to run sync.
>
> (*) Such as having it encrypted as a softraid device, in which case
> you'd need to detach that after unmounting it.  Or writing to
> the raw device directly with tar, for example.



Re: Safely remove USB drive

2023-02-08 Thread Daniele B.
In facts, there are people around who play very "nasty" with these sticks
like booting from them, etc... I suggest to reach one of them and
ask for a "safe unmounting"

Indeed, sorry for this joke too! (time for "safe break")




Re: Safely remove USB drive

2023-02-08 Thread Crystal Kolipe
On Wed, Feb 08, 2023 at 10:34:07AM -0300, vitmau...@gmail.com wrote:
> I'm not using my drives for anything more than copying files, dd etc.
> I just got curious because you mentioned the act of detaching a device
> after umounting it and I don't know how to do that on OpenBSD.

If and only if you are using it with softraid, (usually as an encrypted
volume), then you would need to detach the softraid device using bioctl -d.

But you are almost certainly not doing that.

If you are just copying files, and/or using dd to, for example, overwrite
a device with zeros or random data, then you don't need to do anything
special to use usb storage devices on OpenBSD.



Safely remove USB drive

2023-02-08 Thread vitmau...@gmail.com
Hi,

quick and very basic question: is syncing and umounting a USB drive
enough to safely remove it or should I execute other commands before
unplugging these devices?

Best,
Vitor



Re: Safely remove USB drive

2023-02-08 Thread vitmau...@gmail.com
Hi,

I'm not using my drives for anything more than copying files, dd etc.
I just got curious because you mentioned the act of detaching a device
after umounting it and I don't know how to do that on OpenBSD. On
Fedora I would issue "udisks --detach /dev/sdX" (older versions) or
"udisksctl poweroff -b /dev/sdX" (newer versions).

Best,
Vitor

Em qua., 8 de fev. de 2023 às 10:24, Crystal Kolipe
 escreveu:
>
> Hi,
>
> On Wed, Feb 08, 2023 at 10:13:59AM -0300, vitmau...@gmail.com wrote:
> > thank you all for the replies. Crystal, what command would I use to
> > detach a USB drive? I tried eject, but it doesn't seem to work with
> > the kind of devices I have.
>
> Can you explain exactly what you are trying to do, and what devices
> you are using?
>
> If you are just writing files to a usb flash drive from the command line,
> then you mount it, copy the files, and umount, nothing more.
>
> (Actually, umount automatically does a sync as soon as you invoke it.)
>
> If you are doing something more complicated or using a usb device
> other than a flash drive or external HD, then let us know so that we
> can give you accurate advice.



Re: How to announce over OSPF only one IP address

2023-02-08 Thread Radek
Hello Bradley,
thank you, your setup works the way I need.

I can't deal with adding the static route permanently. I have to add the static 
route by hand (route add 10.1.111.11/32 10.1.111.1) after reboot. 
Did I missed something?

[10.109.3.15] $ cat /etc/hostname.vr0
-inet
dhcp
#inet 10.109.3.15 255.255.255.0
!sleep 60
!route add 10.1.111.11/32 10.1.111.1

After reboot it looks like this:

[10.109.3.15] $ route -n show
Routing tables

Internet:
DestinationGatewayFlags   Refs  Use   Mtu  Prio Iface
default10.109.3.254   UGS5   15 - 8 vr0
224/4  127.0.0.1  URS0   59 32768 8 lo0
10.1.100/2410.1.100.1 Cn 00 - 4 vr1
10.1.100.1 00:00:24:cb:4f:cd  UHLl   00 - 1 vr1
10.1.100.255   10.1.100.1 Hb 00 - 1 vr1
10.1.111/2410.1.111.1 UCn10 - 4 vr3
10.1.111.1 00:00:24:cb:4f:cf  UHLl   03 - 1 vr3
10.1.111.1100:00:24:cb:4f:d0  UHLc   02 - 3 vr3
10.1.111.255   10.1.111.1 UHb00 - 1 vr3
10.1.222/2410.109.3.16UG 00 -32 vr0
10.109.3/2410.109.3.15UCn3   40 - 4 vr0
10.109.3.10a4:bb:6d:d6:5a:a4  UHLc   1   29 - 3 vr0
10.109.3.1500:00:24:cb:4f:cc  UHLl   0   13 - 1 vr0
10.109.3.1600:00:24:cd:90:10  UHLch  1   26 - 3 vr0
10.109.3.254   00:0d:b9:35:39:29  UHLch  1   31 - 3 vr0
10.109.3.255   10.109.3.15UHb00 - 1 vr0
127/8  127.0.0.1  UGRS   00 32768 8 lo0
127.0.0.1  127.0.0.1  UHhl   12 32768 1 lo0


On Tue, 7 Feb 2023 17:54:27 +1100
Bradley Latus  wrote:

> Hi all,
> 
> I have done an experiment.
> 
> If your interface is part of an area, it will be advertised always.
> 
> If you wanted to advertise only /32 this is how I got mine to work.
> Ensure your interface vr3 is not in your ospf area
> 
> Add a static route to the one you wish to advertise, it appears that unless
> a route exists on the machine you cannot redistribute a random ip.
> 
> So  route add 10.1.111.11/32 10.1.111.1
> 
> Then you can redistribute your /32
> 
> 
> 
> router-id 10.109.3.15
> redistribute 10.1.111.11/32
> 
> area 0.0.0.0 {
>   interface vr0
> }
> 
> 
> 
> On Tue, 7 Feb 2023, 02:46 Radek,  wrote:
> 
> > Hello,
> > > I’d check the databases on both sides.
> > > And flush/reload the config and fibs.
> > I reloaded and restarted OSPFd on both sides - nothing changes. Then, I
> > rebooted routers on both sides - nothing changes.
> > I still can see/ping the whole 10.1.111.0/24 subnet from the far end.
> >
> > [10.109.3.15]$ ospfctl show database router
> >
> > Router Link States (Area 0.0.0.0)
> >
> > LS age: 238
> > Options: -|-|-|-|-|-|E|-
> > LS Type: Router
> > Link State ID: 10.109.3.15
> > Advertising Router: 10.109.3.15
> > LS Seq Number: 0x8016
> > Checksum: 0x6d0a
> > Length: 48
> > Flags: *|*|*|*|*|-|E|-
> > Number of Links: 2
> >
> > Link connected to: Stub Network
> > Link ID (Network ID): 10.1.111.0
> > Link Data (Network Mask): 255.255.255.0
> > Metric: 10
> >
> > Link connected to: Transit Network
> > Link ID (Designated Router address): 10.109.3.16
> > Link Data (Router Interface address): 10.109.3.15
> > Metric: 10
> >
> > LS age: 239
> > Options: -|-|-|-|-|-|E|-
> > LS Type: Router
> > Link State ID: 10.109.3.16
> > Advertising Router: 10.109.3.16
> > LS Seq Number: 0x8016
> > Checksum: 0xb058
> > Length: 36
> > Flags: *|*|*|*|*|-|E|-
> > Number of Links: 1
> >
> > Link connected to: Transit Network
> > Link ID (Designated Router address): 10.109.3.16
> > Link Data (Router Interface address): 10.109.3.16
> > Metric: 10
> >
> >
> > [10.109.3.16]$ ospfctl show fib
> > flags: * = valid, O = OSPF, C = Connected, S = Static
> > Flags  Prio Destination  Nexthop
> > *S8 0.0.0.0/010.109.3.254
> > *O   32 10.1.111.0/2410.109.3.15
> >
> >
> > On Sun, 5 Feb 2023 22:20:07 +0100
> > Diederik Schouten  wrote:
> >
> > > Hello,
> > >
> > > I’d check the databases on both sides.
> > > And flush/reload the config and fibs.
> > > Then check again which link state advertisements are in the database.
> > > To make sure you now get the /32 advertised.
> > >
> > > Sent from my iPhone
> > >
> > > > On 5 Feb 2023, at 21:15, Radek  wrote:
> > > >
> > > > Hello Diederik, hello Tom,
> > > > this is a simple lab/testing configuration, that's why there is no
> > "passive" and other...
> > > > The purpose of this configuration is to allow access to certain IP
> > address and restrict access to the rest of the subnet.
> > > > I can use PF to block/pass what I 

Re: Debugging system failure as per crash(8)

2023-02-08 Thread Stuart Henderson
On 2023-02-07, pulsed...@tutanota.com  wrote:
> Hello,
>
> How would I solve debugging a kernel issue when ddb(4) will freeze running 
> "boot crash" and using gdb(1) with "target kvm" will not write to the disk? 
> Is taking photographs of my computer screen the only option to record trace 
> information? The system messagebuffer is not large enough to contain the 
> data on warm reboot.

Other than serial console, if you have a machine which keeps the message
buffer between boots then you can try raising the message buffer size
(CONSBUFSIZE in sys/msgbuf.h)




Re: DBeaver or similar db tool

2023-02-08 Thread Daniele Bonini


Stuart Henderson  wrote:

> On 2023-02-08, Michael Hekeler  wrote:

> > As others said before DBeaver is written using Java 17 and maybe
> > you can compile it whith OpenJDK 17 and Maven.
> 
> It is, but it's not pure Java, inside some .jars are compiled .so
> files (OS-specific "native code"), and there are native binaries
> 
> product/community/target/products/org.jkiss.dbeaver.core.product/linux/gtk/x86_64/dbeaver/dbeaver
> product/community/target/products/org.jkiss.dbeaver.core.product/win32/win32/x86_64/dbeaver/dbeaver.exe
> product/community/target/products/org.jkiss.dbeaver.core.product/win32/win32/x86_64/dbeaver/dbeaverc.exe
> product/community/target/products/org.jkiss.dbeaver.core.product/macosx/cocoa/x86_64/DBeaver.app
> 
> As well as build system changes needed to build OpenBSD binaries,
> there are checks inside the code itself for OS type as well as it
> does some things slightly differently on Linux which would likely
> need patching to also handle OpenBSD.
> 
> I think it's unlikely you are going to run this on OpenBSD without a
> fair bit of pain.

Thanks, I'm just coming from trying to build it and indeed I obtained
some nice binaries for Windowz, Linuz and Big Mac.. and the Plugins for
Eclipse.

As Omar Polo suggested, the remaining solution is to install it 
like a plugin. And also here I started from the more difficult road:
installing the plugin within Netbeans IDE but I ended unsuccessfully, it
depends from a lot of Eclipse plugins itself.

I'm going to try out PDT (Eclipse IDE for PHP) and I will update you
soon.

Meanwhile if you are in the need.. I pass you the binary for Windows.



-- Daniele Bonini
‎‎



Re: Safely remove USB drive

2023-02-08 Thread Jan Stary
On Feb 08 13:56:18, pe...@bsdly.net wrote:
> 1) close any open files stored there
> 2) make sure no process has the media as $PWD (as in, cd away from there,
>and really a variation on the first)
> 3) issue at least one sync command (some folklore will insist on three)
> 4) umount the media from wherever it was mounted

4 takes care of 1,2,3, right?



permission denied when writing to mounted directory exported by NFS server

2023-02-08 Thread Sandeep Gupta
I have a default installation of openbsd, with portmap, mountd, nfsd
services started via rcctl. I have following entry in /etc/exports

/nfs/testdir -alldirs  -maproot=root -network=192.168.0 -mask=255.255.255.0

I am able to mount the exported share on client (centos) as follows:

sudo mount -t nfs -o rw,noauto -v 192.168.0.122:/nfs/testdir mntpt3

>From the client, I can read the contents. But writing inside the mounted
directory yields permission denied error. Looking at the docs I am not able
to find any otherconfig options for access control on the client side.
There is nothing in the logs on the server side as well. Any pointers to
debug/fix would be of great help.


Re: Safely remove USB drive

2023-02-08 Thread Peter N. M. Hansteen
On Wed, Feb 08, 2023 at 04:50:32PM +0100, Jan Stary wrote:
> On Feb 08 13:56:18, pe...@bsdly.net wrote:
> > 1) close any open files stored there
> > 2) make sure no process has the media as $PWD (as in, cd away from there,
> >and really a variation on the first)
> > 3) issue at least one sync command (some folklore will insist on three)
> > 4) umount the media from wherever it was mounted
> 
> 4 takes care of 1,2,3, right?

It is a common assumption it does, but I have seen time and again applications
either coredumping and hanging while doing so or just getting terribly confused
when their presumed current directory disappeared from under them. 

Depending on how much force you put behind the umount (as in doas, sudo) it 
is not entirely certain you would be able to umount a file system that has 
open files. 

Then again, your mileage may vary. And the OP asked for safe removal.

- P


-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: Safely remove USB drive

2023-02-08 Thread Paul de Weerd
On Wed, Feb 08, 2023 at 04:50:32PM +0100, Jan Stary wrote:
| On Feb 08 13:56:18, pe...@bsdly.net wrote:
| > 1) close any open files stored there
| > 2) make sure no process has the media as $PWD (as in, cd away from there,
| >and really a variation on the first)
| > 3) issue at least one sync command (some folklore will insist on three)
| > 4) umount the media from wherever it was mounted
| 
| 4 takes care of 1,2,3, right?

Not if the kernel has a file open on it (e.g. a swap file [1]) or if
there's another mount somewhere in the filesystem you're trying to
unmount (a special case of the first condition, I guess).

[weerd@kale] $ doas mount /dev/sd3a /mnt
[weerd@kale] $ doas mkdir /mnt/deeper
[weerd@kale] $ doas mount /dev/sd3d /mnt/deeper
[weerd@kale] $ doas dd if=/dev/zero of=/mnt/swap bs=1M count=4096
[weerd@kale] $ doas swapon /mnt/swap

The kernel is not going to let you `umount /mnt`, and forcibly
removing the device is very likely going to lead to amazing new
learning opportunities.

So, yeah, as people have stated .. the way to safely remove a USB
drive from your system depends on what you were using the USB drive
for.  For the generic case, where we have no clue what OP was doing:
shut down your machine first and remove the device then.

Paul

[1]: Putting swap on removable media is a tremendously bad idea -
don't do it, unless you're keen on those learning opportunities.

-- 
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/ 



Re: Safely remove USB drive

2023-02-08 Thread Daniele Bonini


Paul de Weerd  wrote:

> and forcibly removing the device is very likely going to lead to
> amazing new learning opportunities.

I can confirm these statement and I invite you to double check all the
"learning opportunities": taken that, by "chance", they are not great
happenings brr..than the magic become to attack you there

> [1]: Putting swap on removable media is a tremendously bad idea -
> don't do it, unless you're keen on those learning opportunities.

I can confirm also this one for what I saw a tremendous improvement of
performances looking at mfs, if I have taken the goon one..


-- Daniele Bonini
‎‎



Zabbix: Support for PSK was not compiled in

2023-02-08 Thread Lars Bonnesen
Installed zabbix-agent

but when doing "./zabbix_agentd -d start", I get:

ERROR: value of parameter "TLSConnect" requires support of encrypted
connection with PSK but support for PSK was not compiled in

How do I add support for Preshared key?

Regards, Lars.


Re: Safely remove USB drive

2023-02-08 Thread Crystal Kolipe
On Wed, Feb 08, 2023 at 05:59:12PM +0100, Peter N. M. Hansteen wrote:
> On Wed, Feb 08, 2023 at 04:50:32PM +0100, Jan Stary wrote:
> > On Feb 08 13:56:18, pe...@bsdly.net wrote:
> > > 1) close any open files stored there
> > > 2) make sure no process has the media as $PWD (as in, cd away from there,
> > >and really a variation on the first)
> > > 3) issue at least one sync command (some folklore will insist on three)
> > > 4) umount the media from wherever it was mounted
> > 
> > 4 takes care of 1,2,3, right?
> 
> It is a common assumption it does,

It certainly does the sync, from /src/sbin/umount/umount.c:

int
main(int argc, char *argv[])
{
int all, ch, errs;

/* Start disks transferring immediately. */
sync();

> but I have seen time and again applications
> either coredumping and hanging while doing so or just getting terribly 
> confused
> when their presumed current directory disappeared from under them. 
> 
> Depending on how much force you put behind the umount (as in doas, sudo) it 
> is not entirely certain you would be able to umount a file system that has 
> open files.
> 
> Then again, your mileage may vary. And the OP asked for safe removal.

I interpreted 'safe removal' as meaning that the data on the removable storage 
is
kept intact.

If a userland program crashes or mis-behaves when a device is removed, then that
is really an issue specific to that program, and a somewhat different 
discussion.

If unmounting a device, (and detaching any associated softraid device if there 
is
one), is not enough to ensure that it's contents matches what the system 
believed
it had written to it, then there is surely a kernel bug somewhere, (or a 
hardware
issue).