Re: Unbound root.key in insecurity output

2015-10-29 Thread Martijn Rijkeboer
>> I'm running a DNS resolver using Unbound (OpenBSD 5.8-stable AMD64) with >> the auto-trust-anchor-file option set. This results in daily updates of the >> /var/unbound/db/root.key file (only comments are changed). Unfortunately >> this file is also checked via the security(8) script, which

Re: Advices for a new laptop

2015-10-29 Thread Bryan Everly
The X series and the T series Thinkpads work really well. My x220 is outstanding. The only device that isn't supported is the fingerprint reader. Also the mSATA slot is great for a second SSD. I dual boot OpenBSD and Arch (for when I need a Virtual Machine) and just use the F12 key at boot to

Re: GPT vs. MBR

2015-10-29 Thread Black Rider
El Thu, 29 Oct 2015 10:20:51 +0500, Артур Истомин escribió: > I'm now in a upgrading process to OpenBSD 5.8 (backup etc.). I have > laptop with EFI(UEFI) capability and 500GB HDD. There are any benefits > from GPT with my configuration to migrate from MBR to GPT (I'm also > using full disk

Re: Unbound root.key in insecurity output

2015-10-29 Thread Martijn Rijkeboer
> I solved this by commenting out the file in /etc/changelist. Thanks, I will do that. >> I'm running a DNS resolver using Unbound (OpenBSD 5.8-stable AMD64) with >> the auto-trust-anchor-file option set. This results in daily updates of the >> /var/unbound/db/root.key file (only comments are

Re: Source tree

2015-10-29 Thread Olivier Debré
Ted Unangst tedunangst.com> writes: [...] > Use cd-src.tar.gz for all paches. > > Thanks a lot, Ted. Olivier Debré

Advices for a new laptop

2015-10-29 Thread Domovoy
Hi there, i'm looking for advices on a new laptop. I'd like to run a dual-boot OpenBSD/Debian linux on it. Won't play any games, but i need to do some simple 3D with Blender and FreeCAD (for 3D printing stuff). No real need for a CD/DVD/BD drive, as long as i can boot on USB. When doing

Re: GPT vs. MBR

2015-10-29 Thread Ted Unangst
Артур Истомин wrote: > I'm now in a upgrading process to OpenBSD 5.8 (backup etc.). I have laptop > with EFI(UEFI) capability and 500GB HDD. There are any benefits from GPT > with my configuration to migrate from MBR to GPT (I'm also using full disk > oencryption)? 5.8 doesn't support GPT/UEFI,

Re: Minor fix for events.html: closing a tag

2015-10-29 Thread Giovanni Bechis
On 10/28/15 23:29, li...@wrant.com wrote: >> On Wed, 28 Oct 2015 12:51:27 -0600 (MDT) Giovanni Bechis >> wrote: >> >>> CVSROOT:/cvs >>> Module name:www >>> Changes by: giova...@cvs.openbsd.org2015/10/28 12:51:27 >>> >>> Modified files: >>> .

Re: GPT vs. MBR

2015-10-29 Thread Mark Kettenis
> > I'm now in a upgrading process to OpenBSD 5.8 (backup etc.). I have laptop > > with EFI(UEFI) capability and 500GB HDD. There are any benefits from GPT > > with my configuration to migrate from MBR to GPT (I'm also using full disk > > oencryption)? > > 5.8 doesn't support GPT/UEFI, so it's

Re: Advices for a new laptop

2015-10-29 Thread Domovoy
Thinkpads are over my budget (i find them starting with the E550 at 758€ on my usual reseller). What about the B50-80 (80LT003C): i3, Intel HD 4400, wifi B/G/N/AC, Gigabit Ethernet, 2x USB3. Unfortunately i can't find for sure which wireless cards is used (probably Intel Dual Band Wireless-AC

Re: compulab fitlet, non-working intel i211 ethernet, help requested

2015-10-29 Thread Dewey Hylton
On Wed, Oct 28, 2015 at 11:35 PM, Jonathan Gray wrote: > On Wed, Oct 28, 2015 at 10:18:26PM -0400, Dewey Hylton wrote: > > i like these little boxes; they are silent and stable and perfect for > plenty > > of my projects. this new version promises to be better than the several >

Re: Advices for a new laptop

2015-10-29 Thread Bryan C. Everly
Just FYI I picked up my Thinkpad x220 off of eBay for $200 or so. OpenBSD does a great job on even "older" hardware because it is kept so lean by the developers. Thanks, Bryan On Thu, Oct 29, 2015 at 11:33 AM, Domovoy wrote: > Thinkpads are over my budget (i find them

Re: Advices for a new laptop

2015-10-29 Thread Pascal Stumpf
On Thu, 29 Oct 2015 18:47:43 +0100, Domovoy wrote: > Thanks for the advices everyone. > That would tend to send me toward a x220 then (even if i'm usually > reluctant to buy second hand laptops). > > Only question remaining: would it allow me to make a comfortable use of > FreeCad/blender?

Re: Advices for a new laptop

2015-10-29 Thread Christoph R. Murauer
> Thinkpads are over my budget (i find them starting with the E550 at > 758€ > on my usual reseller). It depends whether you want a new or a refurbished model. Here in Europe refurbished X201 with Intel i5 / i7 are available for round 300 Euro (depends on, what is in it). > What about the

Re: Advices for a new laptop

2015-10-29 Thread Andrew Gwozdziewycz
The X220 is older, so you can probably find it via ebay or other sources for way less than your budget. On Thu, Oct 29, 2015 at 8:33 AM, Domovoy wrote: > Thinkpads are over my budget (i find them starting with the E550 at 758€ > on my usual reseller). > > What about the

Re: Advices for a new laptop

2015-10-29 Thread Kim Zeitler
What about the B50-80 (80LT003C): i3, Intel HD 4400, wifi B/G/N/AC, Gigabit Ethernet, 2x USB3. Got some for testing here ( meant to run Windows actually) and had some minor issues with them and sadly not enough time to look fully into it. But first impressions weren't that 'impressive' My x220

Re: Advices for a new laptop

2015-10-29 Thread Domovoy
Thanks for the advices everyone. That would tend to send me toward a x220 then (even if i'm usually reluctant to buy second hand laptops). Only question remaining: would it allow me to make a comfortable use of FreeCad/blender? (nothing too complex, mainly last minute adjustments on models

Re: Advices for a new laptop

2015-10-29 Thread Domovoy
Le 2015-10-29 19:03, Pascal Stumpf a écrit : On Thu, 29 Oct 2015 18:47:43 +0100, Domovoy wrote: Thanks for the advices everyone. That would tend to send me toward a x220 then (even if i'm usually reluctant to buy second hand laptops). Only question remaining: would it allow me to make a

EFI Install on 2013 MacBook Air and Display Corruption

2015-10-29 Thread Bryan Vyhmeister
arrived (thank you!) but it didn’t work smoothly for me and resulted in display corruption after I installed that snapshot. I am still able to login via ssh. The dmesg with the errors related to inteldrm(4) is available here: http://www.bsdjournal.net/files/macbookair/dmesg.20151029.txt I also have

ASMedia USB 3.0

2015-10-29 Thread Maurice McCarthy
Hi, Got 5.8-stable installed today. Many thanks for the commitment of all developers etc. All went well except for the USB 3.0 I've a feeling it may not work at all unless I find a blob for the pci-e usb 3.0 card. # usbdevs -vd Controller /dev/usb0: addr 1: super speed, self powered, config

Re: ASMedia USB 3.0

2015-10-29 Thread ludovic coues
2015-10-29 21:15 GMT+01:00 Maurice McCarthy : > Hi, > > Got 5.8-stable installed today. Many thanks for the commitment of all > developers etc. All went well except for the USB 3.0 I've a feeling it may > not work at all unless I find a blob for the pci-e usb 3.0 card. > >

Re: ASMedia USB 3.0

2015-10-29 Thread Maurice McCarthy
On Thu, Oct 29, 2015 at 08:15:05PM + or thereabouts, Maurice McCarthy wrote: > Hi, > > Got 5.8-stable installed today. Many thanks for the commitment of all > developers etc. All went well except for the USB 3.0 I've a feeling it may > not work at all unless I find a blob for the pci-e usb

Re: Advices for a new laptop (Free Battery)

2015-10-29 Thread Benjamin Baier
On Thu, 29 Oct 2015 20:58:32 +0100 Domovoy wrote: > Thanks again for the advices, buying that x220 right now! Everybody who bought a x220 or any other Lenovo laptop shipped between February 2010 and June 2012 you better check your battery. You might get a new one, because

Re: Advices for a new laptop (Free Battery)

2015-10-29 Thread Domovoy
Good to know, i'll check that as soon as i receive it. Le 2015-10-29 23:00, Benjamin Baier a écrit : On Thu, 29 Oct 2015 20:58:32 +0100 Domovoy wrote: Thanks again for the advices, buying that x220 right now! Everybody who bought a x220 or any other Lenovo laptop

5.8 freezes on Shuttle DS87, anybody else?

2015-10-29 Thread Harald Dunkel
Hi folks, I had several system freezes of our 2 Shuttle DS87 hosts running 5.8. Sometimes the host is up for a week without problems, but I have also seen 3 freezes on one day. The serial console doesn't give a hint about what goes wrong. I have built 5.8 with -g now to create a crash dump for a

GPT vs. MBR

2015-10-29 Thread Артур Истомин
I'm now in a upgrading process to OpenBSD 5.8 (backup etc.). I have laptop with EFI(UEFI) capability and 500GB HDD. There are any benefits from GPT with my configuration to migrate from MBR to GPT (I'm also using full disk oencryption)? Thanks.

Unbound root.key in insecurity output

2015-10-29 Thread Martijn Rijkeboer
Hi, I'm running a DNS resolver using Unbound (OpenBSD 5.8-stable AMD64) with the auto-trust-anchor-file option set. This results in daily updates of the /var/unbound/db/root.key file (only comments are changed). Unfortunately this file is also checked via the security(8) script, which results in

Re: Unbound root.key in insecurity output

2015-10-29 Thread Martijn van Duren
I solved this by commenting out the file in /etc/changelist. On 10/29/15 09:29, Martijn Rijkeboer wrote: Hi, I'm running a DNS resolver using Unbound (OpenBSD 5.8-stable AMD64) with the auto-trust-anchor-file option set. This results in daily updates of the /var/unbound/db/root.key file (only

Re: Unbound root.key in insecurity output

2015-10-29 Thread Theo Buehler
On Thu, Oct 29, 2015 at 09:29:21AM +0100, Martijn Rijkeboer wrote: > Hi, > > I'm running a DNS resolver using Unbound (OpenBSD 5.8-stable AMD64) with the > auto-trust-anchor-file option set. This results in daily updates of the > /var/unbound/db/root.key file (only comments are changed).

Re: 5.8 freezes on Shuttle DS87, anybody else?

2015-10-29 Thread Stuart Henderson
On 2015-10-29, Harald Dunkel wrote: > Hi folks, > > I had several system freezes of our 2 Shuttle DS87 hosts > running 5.8. Sometimes the host is up for a week without > problems, but I have also seen 3 freezes on one day. > > The serial console doesn't give a hint about

Source tree

2015-10-29 Thread Olivier Debré
Hello. I'm in the process of upgrading our firewal from 5.7 to 5.8. I'm about to apply the erratas (even started to do so with 001 and 002, but now I'm doubting, given some weird error messages in the 'make' step for errata 001. I'll take care of that when I'll have a clear understanding of

Re: Any opinion, policy or conclusion about easy and accessible MAC implementations like tomoyo or SMACK?

2015-10-29 Thread ludovic coues
> And, such a easy and accessible MAC can help minimizing > the damage after breach as a last resort. > >From what I've seen of OpenBSD, most of the mitigation is done here by privilege separation. For exemple, iked(8) is at least 3 process running together. One process have access to the network

Re: Mount ISO as read write

2015-10-29 Thread Mik J
Hello Dan,Thank you for your answer. I didn't find my solution but I've learn a couple of things.And yes the idea is to get the right parameters to rebuild the iso as it was and that can boot the same way. Le Mercredi 28 octobre 2015 23h11, dan mclaughlin a écrit

Re: Source tree

2015-10-29 Thread Ted Unangst
OlivierDebré wrote: > Hello. > > I'm in the process of upgrading our firewal from 5.7 to 5.8. > I'm about to apply the erratas (even started to do so with 001 and 002, but > now I'm > doubting, given some weird error messages in the 'make' step for errata > 001. I'll take care of that when I'll

Re: Any opinion, policy or conclusion about easy and accessible MAC implementations like tomoyo or SMACK?

2015-10-29 Thread Peter J. Philipp
Hi, There is IPC between the seperated parts though. Which makes me wonder if someone gets the protocol right on the compromised part they would be able to pull the certificates no? What would need to be done to get the protocol right then? Regards, -peter On 10/29/15 11:34, ludovic coues

Re: Source tree

2015-10-29 Thread Olivier Debré
Olivier Debré free.fr> writes: > > Hello. > > I'm in the process of upgrading our firewal from 5.7 to 5.8. > I'm about to apply the erratas (even started to do so with 001 and 002, but > now I'm > doubting, given some weird error messages in the 'make' step for errata > 001. I'll take care of

Re: Just want to say thanks to all OpenBSD developers

2015-10-29 Thread sonjaya
Dear Leonardo Don't forget donate to keep rock and solid :) On Fri, Oct 30, 2015 at 9:01 AM, Leonardo Santagostini < lsantagost...@gmail.com> wrote: > Hello @all, today i have upgraded from 5.7 to 5.8 on a VPS with a WordPress > for my personal site. > > Following the guide at

Just want to say thanks to all OpenBSD developers

2015-10-29 Thread Leonardo Santagostini
Hello @all, today i have upgraded from 5.7 to 5.8 on a VPS with a WordPress for my personal site. Following the guide at http://www.openbsd.org/faq/upgrade58.html everything went fine. Wow i was surprised because documentation was 100% accurated and the process was staightforward At work

Re: Killing Rebound(8) in current hard locks system.

2015-10-29 Thread Joel Sing
On Wednesday 28 October 2015 21:26:16 Ted Unangst wrote: > Gerald Hanuer wrote: > > Hello misc@, > > > > Killing Rebound(8) in current hard locks system. > > Thanks. We've found the cause of the bug. Now we're trying to find the bug. > :) This is fixed with r1.66 of sys/kern/kern_event.c.