Re: compulab fitlet, non-working intel i211 ethernet, help requested

2015-10-29 Thread Jonathan Gray 
On Thu, Oct 29, 2015 at 10:15:26AM -0400, Dewey Hylton wrote:
> On Wed, Oct 28, 2015 at 11:35 PM, Jonathan Gray  wrote:
> 
> > On Wed, Oct 28, 2015 at 10:18:26PM -0400, Dewey Hylton wrote:
> > > i like these little boxes; they are silent and stable and perfect for
> > plenty
> > > of my projects. this new version promises to be better than the several
> > fit2
> > > machines i have scattered around customer sites, affording more cores and
> > > memory.
> > >
> > > the man page for em shows the i211 to be supported. this machine uses
> > that
> > > chip, and it is even reported by the kernel - but still does not work.
> > is it
> > > possible that its specific id is simply missing from the driver, or is
> > there
> > > more to it than that?
> > >
> > > i booted the computer via pxe, so the ethernet is clearly working. it
> > > shipped with linux, and networking worked there too.
> > >
> > > of course it'd be nice for all the other bits to be in working order as
> > > well, but at the moment ethernet is the most important for my purposes.
> > >
> > > please let me know what i can do to get this working, or how i can assist
> > > otherwise.
> >
> > If you can get the dmesg output of a kernel built with the following
> > diff it should indicate where the problem is:
> >
> > Index: sys/dev/pci/if_em_osdep.h
> > ===
> > RCS file: /cvs/src/sys/dev/pci/if_em_osdep.h,v
> > retrieving revision 1.12
> > diff -u -p -r1.12 if_em_osdep.h
> > --- sys/dev/pci/if_em_osdep.h   5 Oct 2011 02:52:10 -   1.12
> > +++ sys/dev/pci/if_em_osdep.h   29 Oct 2015 03:27:36 -
> > @@ -44,7 +44,8 @@ POSSIBILITY OF SUCH DAMAGE.
> >
> >  #define MSGOUT(S, A, B)printf(S "\n", A, B)
> >  #define DEBUGFUNC(F)   DEBUGOUT(F);
> > -#ifdef DBG
> > +//#ifdef DBG
> > +#if 1
> > #define DEBUGOUT(S) printf(S "\n")
> > #define DEBUGOUT1(S,A)  printf(S "\n",A)
> > #define DEBUGOUT2(S,A,B)printf(S "\n",A,B)
> >
> 
> 
> 
> 
> i'll attempt to build a new bsd.rd with this patch and report back.
> 
> i've never done this, so it may take a bit of time to work out the
> details. thanks for the suggestion.

It would be enough to log the serial output and boot a normal kernel
with pxe.  Though it seems you may have the "fitlet-B" that doesn't
have serial unlike the "fitlet-i" and "fitlet-X".  Or perhaps
the output isn't so verbose that you could transcribe it.

If you have a spare usb flash drive you could install to that on a
different machine, put the test kernel on it, then boot it on the
machine.

It takes a while to test changes if you have to run make build and
make release every time.

Re: Just want to say thanks to all OpenBSD developers

2015-10-29 Thread sonjaya 
Dear Leonardo

Don't forget donate to keep rock and solid  :)

On Fri, Oct 30, 2015 at 9:01 AM, Leonardo Santagostini <
lsantagost...@gmail.com> wrote:

> Hello @all, today i have upgraded from 5.7 to 5.8 on a VPS with a WordPress
> for my personal site.
>
> Following the guide at http://www.openbsd.org/faq/upgrade58.html
> everything
> went fine.
>
> Wow i was surprised because documentation was 100% accurated and the
> process was staightforward 
>
> At work we use linux, and the upgrade process its a pain in the ass. So
> guys, you rock and OpenBSD for me its a breath of fresh air.
>
> Thanks thanks thanks.
>
> Kind regards, one happy user !
>
> PS: Sorry for my english but is not my mothers tongue.
>
> Saludos.-
> Leonardo Santagostini
>
> 
>
>


-- 
best regards
sonjaya

Just want to say thanks to all OpenBSD developers

2015-10-29 Thread Leonardo Santagostini 
Hello @all, today i have upgraded from 5.7 to 5.8 on a VPS with a WordPress
for my personal site.

Following the guide at http://www.openbsd.org/faq/upgrade58.html everything
went fine.

Wow i was surprised because documentation was 100% accurated and the
process was staightforward 

At work we use linux, and the upgrade process its a pain in the ass. So
guys, you rock and OpenBSD for me its a breath of fresh air.

Thanks thanks thanks.

Kind regards, one happy user !

PS: Sorry for my english but is not my mothers tongue.

Saludos.-
Leonardo Santagostini

Re: Killing Rebound(8) in current hard locks system.

2015-10-29 Thread Joel Sing 
On Wednesday 28 October 2015 21:26:16 Ted Unangst wrote:
> Gerald Hanuer wrote:
> >  Hello misc@,
> >  
> >  Killing Rebound(8) in current hard locks system.
> 
> Thanks. We've found the cause of the bug. Now we're trying to find the bug.
> :)

This is fixed with r1.66 of sys/kern/kern_event.c.

Re: Advices for a new laptop (Free Battery)

2015-10-29 Thread Domovoy 

Good to know, i'll check that as soon as i receive it.

Le 2015-10-29 23:00, Benjamin Baier a écrit :

On Thu, 29 Oct 2015 20:58:32 +0100
Domovoy  wrote:

Thanks again for the advices, buying that x220 right now!


Everybody who bought a x220 or any other Lenovo laptop shipped between
February 2010 and June 2012 you better check your battery.

You might get a new one, because your batterie might be a fire hazard.

https://support.lenovo.com/us/en/documents/hf004122
https://lenovobattery2014.orderz.com/



x220 - dmesg
OpenBSD 5.8-current (GENERIC.MP) #1548: Thu Oct 29 09:46:20 MDT 2015

dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

real mem = 8451125248 (8059MB)
avail mem = 8190869504 (7811MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xdae9c000 (64 entries)
bios0: vendor LENOVO version "8DET69WW (1.39 )" date 07/18/2013
bios0: LENOVO 4287CTO
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SLIC SSDT SSDT SSDT HPET APIC MCFG ECDT ASF!
TCPA SSDT SSDT DMAR UEFI UEFI UEFI
acpi0: wakeup devices LID_(S3) SLPB(S3) IGBE(S4) EXP4(S4) EXP7(S4)
EHC1(S3) EHC2(S3) HDEF(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2492.31 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 1, core 0, package 0
cpu2 at mainbus0: apid 2 (application processor)
cpu2: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 1, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 1, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xf800, bus 0-63
acpiec0 at acpi0
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG_)
acpiprt2 at acpi0: bus 2 (EXP1)
acpiprt3 at acpi0: bus 3 (EXP2)
acpiprt4 at acpi0: bus 5 (EXP4)
acpiprt5 at acpi0: bus 13 (EXP5)
acpiprt6 at acpi0: bus -1 (EXP7)
acpicpu0 at acpi0: C3(350@104 io@0x415), C1(1000@1 halt), PSS
acpicpu1 at acpi0: C3(350@104 io@0x415), C1(1000@1 halt), PSS
acpicpu2 at acpi0: C3(350@104 io@0x415), C1(1000@1 halt), PSS
acpicpu3 at acpi0: C3(350@104 io@0x415), C1(1000@1 halt), PSS
acpipwrres0 at acpi0: PUBS, resource for EHC1, EHC2
acpitz0 at acpi0: critical temperature is 99 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "42T4861" serial 12675 type LION oem 
"SANYO"

acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
acpidock0 at acpi0: GDCK docked (15)
cpu0: Enhanced SpeedStep 2492 MHz: speeds: 2501, 2500, 2200, 2000,
1800, 1600, 1400, 1200, 1000, 800 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Core 2G Host" rev 0x09
inteldrm0 at pci0 dev 2 function 0 "Intel HD Graphics 3000" rev 0x09
drm0 at inteldrm0
inteldrm0: msi
inteldrm0: 1366x768
wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel 6 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured
em0 at pci0 dev 25 function 0 "Intel 82579LM" rev 0x04: msi, address
f0:de:f1:cd:a7:0f
ehci0 at pci0 dev 26 function 0 "Intel 6 Series USB" rev 0x04: apic 2 
int 16

usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev

Re: ASMedia USB 3.0

2015-10-29 Thread Maurice McCarthy 
On Thu, Oct 29, 2015 at 08:15:05PM + or thereabouts, Maurice McCarthy wrote:
> Hi, 
> 
> Got 5.8-stable installed today. Many thanks for the commitment of all
> developers etc. All went well except for the USB 3.0 I've a feeling it may
> not work at all unless I find a blob for the pci-e usb 3.0 card. 
> 
> # usbdevs -vd 
> Controller /dev/usb0:
> addr 1: super speed, self powered, config 1, xHCI root hub(0x),
> ASMedia(0x1b21), rev 1.00
>   uhub0
>  port 1 disabled
>  port 2 disabled
>  port 3 disabled
>  port 4 disabled
>  
> 
> 
> # dmesg | grep xhci
> xhci0 at pci3 dev 0 function 0 "ASMedia ASM1042 xHCI" rev 0x00: msi
> usb0 at xhci0: USB revision 3.0
> 

Guess I should have added this too
Thanks again:

# lspci
00:00.0 Host bridge: Advanced Micro Devices, Inc. [AMD] RS780 Host Bridge
00:01.0 PCI bridge: ASRock Incorporation Device 9602
00:07.0 PCI bridge: Advanced Micro Devices, Inc. [AMD] RS780/RS880 PCI to
PCI bridge (PCIE port 3)
00:09.0 PCI bridge: Advanced Micro Devices, Inc. [AMD] RS780/RS880 PCI to
PCI bridge (PCIE port 4)
00:0a.0 PCI bridge: Advanced Micro Devices, Inc. [AMD] RS780/RS880 PCI to
PCI bridge (PCIE port 5)
00:11.0 SATA controller: Advanced Micro Devices, Inc. [AMD/ATI]
SB7x0/SB8x0/SB9x0 SATA Controller [IDE mode]
00:12.0 USB controller: Advanced Micro Devices, Inc. [AMD/ATI]
SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:12.1 USB controller: Advanced Micro Devices, Inc. [AMD/ATI] SB7x0 USB
OHCI1 Controller
00:12.2 USB controller: Advanced Micro Devices, Inc. [AMD/ATI]
SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:13.0 USB controller: Advanced Micro Devices, Inc. [AMD/ATI]
SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:13.1 USB controller: Advanced Micro Devices, Inc. [AMD/ATI] SB7x0 USB
OHCI1 Controller
00:13.2 USB controller: Advanced Micro Devices, Inc. [AMD/ATI]
SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:14.0 SMBus: Advanced Micro Devices, Inc. [AMD/ATI] SBx00 SMBus Controller
(rev 3c)
00:14.1 IDE interface: Advanced Micro Devices, Inc. [AMD/ATI]
SB7x0/SB8x0/SB9x0 IDE Controller
00:14.2 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] SBx00 Azalia
(Intel HDA)
00:14.3 ISA bridge: Advanced Micro Devices, Inc. [AMD/ATI] SB7x0/SB8x0/SB9x0
LPC host controller
00:14.4 PCI bridge: Advanced Micro Devices, Inc. [AMD/ATI] SBx00 PCI to PCI
Bridge
00:14.5 USB controller: Advanced Micro Devices, Inc. [AMD/ATI]
SB7x0/SB8x0/SB9x0 USB OHCI2 Controller
00:18.0 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 10h Processor
HyperTransport Configuration
00:18.1 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 10h Processor
Address Map
00:18.2 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 10h Processor
DRAM Controller
00:18.3 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 10h Processor
Miscellaneous Control
00:18.4 Host bridge: Advanced Micro Devices, Inc. [AMD] Family 10h Processor
Link Control
01:05.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI]
RS780D [Radeon HD 3300]
02:00.0 FireWire (IEEE 1394): VIA Technologies, Inc. VT6315 Series Firewire
Controller
03:00.0 USB controller: ASMedia Technology Inc. ASM1042 SuperSpeed USB Host
Controller
04:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd.
RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 03)
05:05.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8169 PCI
Gigabit Ethernet Controller (rev 10)
05:06.0 USB controller: NEC Corporation OHCI USB Controller (rev 43)

Re: Advices for a new laptop (Free Battery)

2015-10-29 Thread Benjamin Baier 
On Thu, 29 Oct 2015 20:58:32 +0100
Domovoy  wrote:
> Thanks again for the advices, buying that x220 right now!

Everybody who bought a x220 or any other Lenovo laptop shipped between 
February 2010 and June 2012 you better check your battery.

You might get a new one, because your batterie might be a fire hazard.

https://support.lenovo.com/us/en/documents/hf004122
https://lenovobattery2014.orderz.com/



x220 - dmesg
OpenBSD 5.8-current (GENERIC.MP) #1548: Thu Oct 29 09:46:20 MDT 2015
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8451125248 (8059MB)
avail mem = 8190869504 (7811MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xdae9c000 (64 entries)
bios0: vendor LENOVO version "8DET69WW (1.39 )" date 07/18/2013
bios0: LENOVO 4287CTO
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SLIC SSDT SSDT SSDT HPET APIC MCFG ECDT ASF! TCPA SSDT 
SSDT DMAR UEFI UEFI UEFI
acpi0: wakeup devices LID_(S3) SLPB(S3) IGBE(S4) EXP4(S4) EXP7(S4) EHC1(S3) 
EHC2(S3) HDEF(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2492.31 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 1, core 0, package 0
cpu2 at mainbus0: apid 2 (application processor)
cpu2: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 1, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2491.91 MHz
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 1, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xf800, bus 0-63
acpiec0 at acpi0
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG_)
acpiprt2 at acpi0: bus 2 (EXP1)
acpiprt3 at acpi0: bus 3 (EXP2)
acpiprt4 at acpi0: bus 5 (EXP4)
acpiprt5 at acpi0: bus 13 (EXP5)
acpiprt6 at acpi0: bus -1 (EXP7)
acpicpu0 at acpi0: C3(350@104 io@0x415), C1(1000@1 halt), PSS
acpicpu1 at acpi0: C3(350@104 io@0x415), C1(1000@1 halt), PSS
acpicpu2 at acpi0: C3(350@104 io@0x415), C1(1000@1 halt), PSS
acpicpu3 at acpi0: C3(350@104 io@0x415), C1(1000@1 halt), PSS
acpipwrres0 at acpi0: PUBS, resource for EHC1, EHC2
acpitz0 at acpi0: critical temperature is 99 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "42T4861" serial 12675 type LION oem "SANYO"
acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit online
acpithinkpad0 at acpi0
acpidock0 at acpi0: GDCK docked (15)
cpu0: Enhanced SpeedStep 2492 MHz: speeds: 2501, 2500, 2200, 2000, 1800, 1600, 
1400, 1200, 1000, 800 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Core 2G Host" rev 0x09
inteldrm0 at pci0 dev 2 function 0 "Intel HD Graphics 3000" rev 0x09
drm0 at inteldrm0
inteldrm0: msi
inteldrm0: 1366x768
wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel 6 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured
em0 at pci0 dev 25 function 0 "Intel 82579LM" rev 0x04: msi, address 
f0:de:f1:cd:a7:0f
ehci0 at pci0 dev 26 function 0 "Intel 6 Series USB" rev 0x04: apic 2 int 16
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
azalia0 at pci0 dev 27 function 0 "Intel 6 Series HD Audio" rev 0x04: msi
azalia0:

Re: ASMedia USB 3.0

2015-10-29 Thread ludovic coues 
2015-10-29 21:15 GMT+01:00 Maurice McCarthy :
> Hi,
>
> Got 5.8-stable installed today. Many thanks for the commitment of all
> developers etc. All went well except for the USB 3.0 I've a feeling it may
> not work at all unless I find a blob for the pci-e usb 3.0 card.
>
> # usbdevs -vd
> Controller /dev/usb0:
> addr 1: super speed, self powered, config 1, xHCI root hub(0x),
> ASMedia(0x1b21), rev 1.00
>   uhub0
>  port 1 disabled
>  port 2 disabled
>  port 3 disabled
>  port 4 disabled
>
> 
>
> # dmesg | grep xhci
> xhci0 at pci3 dev 0 function 0 "ASMedia ASM1042 xHCI" rev 0x00: msi
> usb0 at xhci0: USB revision 3.0
>
>
> Grateful for any advice, thanks. Do I need to find another manufacturer?
>
> Kindest Regards
> Moss
>

I'm not sure disabled means what you thinks it means.
Have you tried to connect something on the usb3 port ?


-- 

Cordialement, Coues Ludovic
+336 148 743 42

ASMedia USB 3.0

2015-10-29 Thread Maurice McCarthy 
Hi, 

Got 5.8-stable installed today. Many thanks for the commitment of all
developers etc. All went well except for the USB 3.0 I've a feeling it may
not work at all unless I find a blob for the pci-e usb 3.0 card. 

# usbdevs -vd 
Controller /dev/usb0:
addr 1: super speed, self powered, config 1, xHCI root hub(0x),
ASMedia(0x1b21), rev 1.00
  uhub0
 port 1 disabled
 port 2 disabled
 port 3 disabled
 port 4 disabled
 


# dmesg | grep xhci
xhci0 at pci3 dev 0 function 0 "ASMedia ASM1042 xHCI" rev 0x00: msi
usb0 at xhci0: USB revision 3.0


Grateful for any advice, thanks. Do I need to find another manufacturer?

Kindest Regards
Moss

Re: Advices for a new laptop

2015-10-29 Thread Domovoy 

Le 2015-10-29 19:03, Pascal Stumpf a écrit :

On Thu, 29 Oct 2015 18:47:43 +0100, Domovoy wrote:

Thanks for the advices everyone.
That would tend to send me toward a x220 then (even if i'm usually
reluctant to buy second hand laptops).

Only question remaining: would it allow me to make a comfortable use 
of
FreeCad/blender? (nothing too complex, mainly last minute adjustments 
on

models for 3D printing)


Blender definitely, but someone (e.g. you) would have to port FreeCAD.


Well, at first i'll run it under Debian.
But the goal here is definitely to get my head into OpenBSD (tried it 
some years ago, always wanted to see more of it).


As for porting stuff, since i'm not too bad with c, c++ and programming 
in general, i may very well give it a try one day.


Anyway, i've been following this list for a long time, and as soon as i 
receive my x220 you all can expect to read me quite often :) (well, not 
before spring actually, my winter is going to be occupied drinking rum, 
rock climbing, and partying with friends on a sunny island :P)


Thanks again for the advices, buying that x220 right now!




Le 2015-10-29 18:24, Kim Zeitler a écrit :
>> What about the B50-80 (80LT003C): i3, Intel HD 4400, wifi B/G/N/AC,
>> Gigabit Ethernet, 2x USB3.
> Got some for testing here ( meant to run Windows actually) and had
> some minor issues with them and sadly not enough time to look
> fully into it. But first impressions weren't that 'impressive'
>
>>> My x220 is outstanding. The only device that isn't supported is the
>>> fingerprint reader.  Also the mSATA slot is great for a second SSD. I
>>> dual boot OpenBSD and Arch (for when I need a Virtual Machine) and
>>> just use the F12 key at boot to select the drive I boot off of.
>>> Really
>>> simplifies the set up. Also you can put 16gb of ram in this model
>>> (even with an i5 processor) even though the specs say max of 8gb.
> Can only second this, running on an older x220 with an i7 on a fully
> encrypted mSATA SSD. Still faster than my coworkers newer kits.
> Only thing I had to replace was one battery. Otherwise fine even after
> several years of service.
>
> Money on an x220 is well spent. Also they feel more solid than the
> B50s.
>
> Need to try extending my RAM to 16GB - thanks for the hint Bryan.
>
> Cheers,
> Kim

EFI Install on 2013 MacBook Air and Display Corruption

2015-10-29 Thread Bryan Vyhmeister 
I figured I would follow the post by jasper@ about doing a (U)EFI
install and apply it to a 2013 11-inch MacBook Air I have. On
yesterday’s snapshot of amd64, everything boots up with GENERIC.MP right
up to the login screen which is better than I have been able to achieve
with BIOS emulation and a traditional install. The first dmesg is from
my successful boot from yesterday.

http://www.bsdjournal.net/files/macbookair/dmesg.20151028.txt

After that, I asked about inteldrm(4) support on Twitter since I could
only use wsfb(4) initially with X (X couldn’t find a screen with
efifb(4) apparently). Bryan Steele and Chris Cappuccio let me know that
Mark Kettenis was working on allowing inteldrm(4) to attach via pci(4)
rather than vga(4) since vga(4) is typically not available with (U)EFI
booting. In the last twelve hours or so the initial support for
inteldrm(4) to attach to pci(4) has arrived (thank you!) but it didn’t
work smoothly for me and resulted in display corruption after I
installed that snapshot. I am still able to login via ssh. The dmesg
with the errors related to inteldrm(4) is available here:

http://www.bsdjournal.net/files/macbookair/dmesg.20151029.txt

I also have a picture of what the display corruption looks like here:

http://www.bsdjournal.net/files/macbookair/display-corruption.20151029.jpg

I’m happy to do any testing to get this worked out if that might be
helpful. Thanks again to all the developers for OpenBSD!

Bryan

Re: Advices for a new laptop

2015-10-29 Thread Pascal Stumpf 
On Thu, 29 Oct 2015 18:47:43 +0100, Domovoy wrote:
> Thanks for the advices everyone.
> That would tend to send me toward a x220 then (even if i'm usually 
> reluctant to buy second hand laptops).
> 
> Only question remaining: would it allow me to make a comfortable use of 
> FreeCad/blender? (nothing too complex, mainly last minute adjustments on 
> models for 3D printing)

Blender definitely, but someone (e.g. you) would have to port FreeCAD.

> Le 2015-10-29 18:24, Kim Zeitler a écrit :
> >> What about the B50-80 (80LT003C): i3, Intel HD 4400, wifi B/G/N/AC,
> >> Gigabit Ethernet, 2x USB3.
> > Got some for testing here ( meant to run Windows actually) and had
> > some minor issues with them and sadly not enough time to look
> > fully into it. But first impressions weren't that 'impressive'
> > 
> >>> My x220 is outstanding. The only device that isn't supported is the
> >>> fingerprint reader.  Also the mSATA slot is great for a second SSD. I
> >>> dual boot OpenBSD and Arch (for when I need a Virtual Machine) and
> >>> just use the F12 key at boot to select the drive I boot off of. 
> >>> Really
> >>> simplifies the set up. Also you can put 16gb of ram in this model
> >>> (even with an i5 processor) even though the specs say max of 8gb.
> > Can only second this, running on an older x220 with an i7 on a fully
> > encrypted mSATA SSD. Still faster than my coworkers newer kits.
> > Only thing I had to replace was one battery. Otherwise fine even after
> > several years of service.
> > 
> > Money on an x220 is well spent. Also they feel more solid than the 
> > B50s.
> > 
> > Need to try extending my RAM to 16GB - thanks for the hint Bryan.
> > 
> > Cheers,
> > Kim

Re: Advices for a new laptop

2015-10-29 Thread Domovoy 

Thanks for the advices everyone.
That would tend to send me toward a x220 then (even if i'm usually 
reluctant to buy second hand laptops).


Only question remaining: would it allow me to make a comfortable use of 
FreeCad/blender? (nothing too complex, mainly last minute adjustments on 
models for 3D printing)


Le 2015-10-29 18:24, Kim Zeitler a écrit :

What about the B50-80 (80LT003C): i3, Intel HD 4400, wifi B/G/N/AC,
Gigabit Ethernet, 2x USB3.

Got some for testing here ( meant to run Windows actually) and had
some minor issues with them and sadly not enough time to look
fully into it. But first impressions weren't that 'impressive'


My x220 is outstanding. The only device that isn't supported is the
fingerprint reader.  Also the mSATA slot is great for a second SSD. I
dual boot OpenBSD and Arch (for when I need a Virtual Machine) and
just use the F12 key at boot to select the drive I boot off of. 
Really

simplifies the set up. Also you can put 16gb of ram in this model
(even with an i5 processor) even though the specs say max of 8gb.

Can only second this, running on an older x220 with an i7 on a fully
encrypted mSATA SSD. Still faster than my coworkers newer kits.
Only thing I had to replace was one battery. Otherwise fine even after
several years of service.

Money on an x220 is well spent. Also they feel more solid than the 
B50s.


Need to try extending my RAM to 16GB - thanks for the hint Bryan.

Cheers,
Kim

Re: Advices for a new laptop

2015-10-29 Thread Kim Zeitler 

What about the B50-80 (80LT003C): i3, Intel HD 4400, wifi B/G/N/AC,
Gigabit Ethernet, 2x USB3.

Got some for testing here ( meant to run Windows actually) and had
some minor issues with them and sadly not enough time to look
fully into it. But first impressions weren't that 'impressive'


My x220 is outstanding. The only device that isn't supported is the
fingerprint reader.  Also the mSATA slot is great for a second SSD. I
dual boot OpenBSD and Arch (for when I need a Virtual Machine) and
just use the F12 key at boot to select the drive I boot off of. Really
simplifies the set up. Also you can put 16gb of ram in this model
(even with an i5 processor) even though the specs say max of 8gb.
Can only second this, running on an older x220 with an i7 on a fully 
encrypted mSATA SSD. Still faster than my coworkers newer kits.
Only thing I had to replace was one battery. Otherwise fine even after 
several years of service.


Money on an x220 is well spent. Also they feel more solid than the B50s.

Need to try extending my RAM to 16GB - thanks for the hint Bryan.

Cheers,
Kim

Re: Advices for a new laptop

2015-10-29 Thread Bryan C. Everly 
Just FYI I picked up my Thinkpad x220 off of eBay for $200 or so.  OpenBSD
does a great job on even "older" hardware because it is kept so lean by the
developers.


Thanks,
Bryan

On Thu, Oct 29, 2015 at 11:33 AM, Domovoy  wrote:

> Thinkpads are over my budget (i find them starting with the E550 at 758€
> on my usual reseller).
>
> What about the B50-80 (80LT003C): i3, Intel HD 4400, wifi B/G/N/AC,
> Gigabit Ethernet, 2x USB3.
> Unfortunately i can't find for sure which wireless cards is used (probably
> Intel Dual Band Wireless-AC 3160).
> If it can allow me to do the little 3D editing i need, it would be a good
> fit.
>
> Any information about OpenBSD support for this thing?
> (From what i gathered the Intel HD 4400 should work, right?)
>
>
> Le 2015-10-29 15:00, Bryan Everly a écrit :
>
>> The X series and the T series Thinkpads work really well.
>>
>> My x220 is outstanding. The only device that isn't supported is the
>> fingerprint reader.  Also the mSATA slot is great for a second SSD. I
>> dual boot OpenBSD and Arch (for when I need a Virtual Machine) and
>> just use the F12 key at boot to select the drive I boot off of. Really
>> simplifies the set up. Also you can put 16gb of ram in this model
>> (even with an i5 processor) even though the specs say max of 8gb.
>>
>> Thanks,
>> Bryan

Re: Advices for a new laptop

2015-10-29 Thread Christoph R. Murauer 
> Thinkpads are over my budget (i find them starting with the E550 at
> 758€
> on my usual reseller).

It depends whether you want a new or a refurbished model. Here in
Europe refurbished X201 with Intel i5 / i7 are available for round 300
Euro (depends on, what is in it).

> What about the B50-80 (80LT003C): i3, Intel HD 4400, wifi B/G/N/AC,
> Gigabit Ethernet, 2x USB3.
> Unfortunately i can't find for sure which wireless cards is used
> (probably Intel Dual Band Wireless-AC 3160).
> If it can allow me to do the little 3D editing i need, it would be a
> good fit.
>
> Any information about OpenBSD support for this thing?
> (From what i gathered the Intel HD 4400 should work, right?)

My Intel HD 4600 (i7) in a W541 works with 2880x1620.

Re: Advices for a new laptop

2015-10-29 Thread Andrew Gwozdziewycz 
The X220 is older, so you can probably find it via ebay or other sources
for way less than your budget.


On Thu, Oct 29, 2015 at 8:33 AM, Domovoy  wrote:

> Thinkpads are over my budget (i find them starting with the E550 at 758€
> on my usual reseller).
>
> What about the B50-80 (80LT003C): i3, Intel HD 4400, wifi B/G/N/AC,
> Gigabit Ethernet, 2x USB3.
> Unfortunately i can't find for sure which wireless cards is used (probably
> Intel Dual Band Wireless-AC 3160).
> If it can allow me to do the little 3D editing i need, it would be a good
> fit.
>
> Any information about OpenBSD support for this thing?
> (From what i gathered the Intel HD 4400 should work, right?)
>
>
> Le 2015-10-29 15:00, Bryan Everly a écrit :
>
>> The X series and the T series Thinkpads work really well.
>>
>> My x220 is outstanding. The only device that isn't supported is the
>> fingerprint reader.  Also the mSATA slot is great for a second SSD. I
>> dual boot OpenBSD and Arch (for when I need a Virtual Machine) and
>> just use the F12 key at boot to select the drive I boot off of. Really
>> simplifies the set up. Also you can put 16gb of ram in this model
>> (even with an i5 processor) even though the specs say max of 8gb.
>>
>> Thanks,
>> Bryan
>>
>
>


--
http://apgwoz.com

Re: Advices for a new laptop

2015-10-29 Thread Domovoy 
Thinkpads are over my budget (i find them starting with the E550 at 758€ 
on my usual reseller).


What about the B50-80 (80LT003C): i3, Intel HD 4400, wifi B/G/N/AC, 
Gigabit Ethernet, 2x USB3.
Unfortunately i can't find for sure which wireless cards is used 
(probably Intel Dual Band Wireless-AC 3160).
If it can allow me to do the little 3D editing i need, it would be a 
good fit.


Any information about OpenBSD support for this thing?
(From what i gathered the Intel HD 4400 should work, right?)

Le 2015-10-29 15:00, Bryan Everly a écrit :

The X series and the T series Thinkpads work really well.

My x220 is outstanding. The only device that isn't supported is the
fingerprint reader.  Also the mSATA slot is great for a second SSD. I
dual boot OpenBSD and Arch (for when I need a Virtual Machine) and
just use the F12 key at boot to select the drive I boot off of. Really
simplifies the set up. Also you can put 16gb of ram in this model
(even with an i5 processor) even though the specs say max of 8gb.

Thanks,
Bryan

Re: compulab fitlet, non-working intel i211 ethernet, help requested

2015-10-29 Thread Dewey Hylton 
On Wed, Oct 28, 2015 at 11:35 PM, Jonathan Gray  wrote:

> On Wed, Oct 28, 2015 at 10:18:26PM -0400, Dewey Hylton wrote:
> > i like these little boxes; they are silent and stable and perfect for
> plenty
> > of my projects. this new version promises to be better than the several
> fit2
> > machines i have scattered around customer sites, affording more cores and
> > memory.
> >
> > the man page for em shows the i211 to be supported. this machine uses
> that
> > chip, and it is even reported by the kernel - but still does not work.
> is it
> > possible that its specific id is simply missing from the driver, or is
> there
> > more to it than that?
> >
> > i booted the computer via pxe, so the ethernet is clearly working. it
> > shipped with linux, and networking worked there too.
> >
> > of course it'd be nice for all the other bits to be in working order as
> > well, but at the moment ethernet is the most important for my purposes.
> >
> > please let me know what i can do to get this working, or how i can assist
> > otherwise.
>
> If you can get the dmesg output of a kernel built with the following
> diff it should indicate where the problem is:
>
> Index: sys/dev/pci/if_em_osdep.h
> ===
> RCS file: /cvs/src/sys/dev/pci/if_em_osdep.h,v
> retrieving revision 1.12
> diff -u -p -r1.12 if_em_osdep.h
> --- sys/dev/pci/if_em_osdep.h   5 Oct 2011 02:52:10 -   1.12
> +++ sys/dev/pci/if_em_osdep.h   29 Oct 2015 03:27:36 -
> @@ -44,7 +44,8 @@ POSSIBILITY OF SUCH DAMAGE.
>
>  #define MSGOUT(S, A, B)printf(S "\n", A, B)
>  #define DEBUGFUNC(F)   DEBUGOUT(F);
> -#ifdef DBG
> +//#ifdef DBG
> +#if 1
> #define DEBUGOUT(S) printf(S "\n")
> #define DEBUGOUT1(S,A)  printf(S "\n",A)
> #define DEBUGOUT2(S,A,B)printf(S "\n",A,B)
>




i'll attempt to build a new bsd.rd with this patch and report back.

i've never done this, so it may take a bit of time to work out the
details. thanks for the suggestion.

Re: Advices for a new laptop

2015-10-29 Thread Bryan Everly 
The X series and the T series Thinkpads work really well.

My x220 is outstanding. The only device that isn't supported is the
fingerprint reader.  Also the mSATA slot is great for a second SSD. I
dual boot OpenBSD and Arch (for when I need a Virtual Machine) and
just use the F12 key at boot to select the drive I boot off of. Really
simplifies the set up. Also you can put 16gb of ram in this model
(even with an i5 processor) even though the specs say max of 8gb.

Thanks,
Bryan

> On Oct 29, 2015, at 9:41 AM, Domovoy  wrote:
>
> Hi there, i'm looking for advices on a new laptop.
>
> I'd like to run a dual-boot OpenBSD/Debian linux on it.
>
> Won't play any games, but i need to do some simple 3D with Blender and
FreeCAD (for 3D printing stuff).
>
> No real need for a CD/DVD/BD drive, as long as i can boot on USB.
>
> When doing work that requires a comfortable display i usually have an
external screen plugged in, so i don't need a big screen either, although i do
need the possibility to switch to the external one.
>
> A good WiFi is a must have.
>
> From what i gathered on the list, Lenovo is a good bet, and i need to avoid
Nvidia graphics, right?
>
> Any more advices are welcome, particularly on a specific model where
everything works. My budget is under 700€.

Re: Unbound root.key in insecurity output

2015-10-29 Thread Martijn Rijkeboer 
> I solved this by commenting out the file in /etc/changelist.

Thanks, I will do that.


>> I'm running a DNS resolver using Unbound (OpenBSD 5.8-stable AMD64) with
>> the auto-trust-anchor-file option set. This results in daily updates of
the
>> /var/unbound/db/root.key file (only comments are changed). Unfortunately
>> this file is also checked via the security(8) script, which results in
>> getting an insecurity output mail every day (Cry Wolf problem). Is there a
>> way to exclude the comments in the checks or the complete root.key file?

Kind regards,


Martijn Rijkeboer

Advices for a new laptop

2015-10-29 Thread Domovoy 

Hi there, i'm looking for advices on a new laptop.

I'd like to run a dual-boot OpenBSD/Debian linux on it.

Won't play any games, but i need to do some simple 3D with Blender and 
FreeCAD (for 3D printing stuff).


No real need for a CD/DVD/BD drive, as long as i can boot on USB.

When doing work that requires a comfortable display i usually have an 
external screen plugged in, so i don't need a big screen either, 
although i do need the possibility to switch to the external one.


A good WiFi is a must have.

From what i gathered on the list, Lenovo is a good bet, and i need to 
avoid Nvidia graphics, right?


Any more advices are welcome, particularly on a specific model where 
everything works. My budget is under 700€.

Re: GPT vs. MBR

2015-10-29 Thread Mark Kettenis 
> > I'm now in a upgrading process to OpenBSD 5.8 (backup etc.). I have laptop
> > with EFI(UEFI) capability and 500GB HDD. There are any benefits from GPT 
> > with my configuration to migrate from MBR to GPT (I'm also using full disk 
> > oencryption)?
> 
> 5.8 doesn't support GPT/UEFI, so it's probably best to stick with MBR.

And even for 5.8-current GPT/UEFI support is still in incomplete, and
it is very likely that we'll have to make changes to the bootloader
and kernel that will be incompatible in a way that will require
booting from external media to upgrade your system.

Re: GPT vs. MBR

2015-10-29 Thread Ted Unangst 
Артур Истомин wrote:
> I'm now in a upgrading process to OpenBSD 5.8 (backup etc.). I have laptop
> with EFI(UEFI) capability and 500GB HDD. There are any benefits from GPT 
> with my configuration to migrate from MBR to GPT (I'm also using full disk 
> oencryption)?

5.8 doesn't support GPT/UEFI, so it's probably best to stick with MBR.

Re: GPT vs. MBR

2015-10-29 Thread Black Rider 
El Thu, 29 Oct 2015 10:20:51 +0500, Артур Истомин escribió:

> I'm now in a upgrading process to OpenBSD 5.8 (backup etc.). I have
> laptop with EFI(UEFI) capability and 500GB HDD. There are any benefits
> from GPT with my configuration to migrate from MBR to GPT (I'm also
> using full disk oencryption)?
> 
> Thanks.

Unless you want to use drives that are bigger than what MBR supports and 
want to boot in UEFI mode, it makes not much sense to migrate in my 
opinion. Testing that it works without bugs (aka doing it for fun) is 
probably the only reason I would migrate for.

Re: Unbound root.key in insecurity output

2015-10-29 Thread Martijn Rijkeboer 
>> I'm running a DNS resolver using Unbound (OpenBSD 5.8-stable AMD64) with
>> the auto-trust-anchor-file option set. This results in daily updates of
the
>> /var/unbound/db/root.key file (only comments are changed). Unfortunately
>> this file is also checked via the security(8) script, which results in
>> getting an insecurity output mail every day (Cry Wolf problem). Is there a
>> way to exclude the comments in the checks or the complete root.key file?

> The security script checks the files listed in /etc/changelist.
> See changelist(5) for details.
>
> I don't think there's a way of checking 'everything but comments', but
> it shouldn't be hard to do that with a custom daily.local script,
> see daily(8).

As Martijn van Duren suggested I will comment out the entry in
/etc/changelist.

Kind regards,


Martijn Rijkeboer

Re: Source tree

2015-10-29 Thread Olivier Debré 
Ted Unangst  tedunangst.com> writes:

[...]

> Use cd-src.tar.gz for all paches.
> 
> 

Thanks a lot, Ted.

Olivier Debré

Re: Minor fix for events.html: closing a tag

2015-10-29 Thread Giovanni Bechis 
On 10/28/15 23:29, li...@wrant.com wrote:
>> On Wed, 28 Oct 2015 12:51:27 -0600 (MDT) Giovanni Bechis
>>  wrote:
>>
>>> CVSROOT:/cvs
>>> Module name:www
>>> Changes by: giova...@cvs.openbsd.org2015/10/28 12:51:27
>>>
>>> Modified files:
>>> .  : events.html 
>>>
>>> Log message:
>>> I will give 2 talks at OpenSourceDay at the university of Udine, Italy
>>>
>>>   
>>
>> Hi Giovanni,
>>
>> Spotted this a while back and thought it may be a mistype that would
>> be corrected on follow up updates, please see if this fixes anything.
> 
> Readjustment to match www/events.html r1.1007
> 
Committed, thanks.
 Cheers
  Giovanni

Re: Source tree

2015-10-29 Thread Olivier Debré 
Olivier Debré  free.fr> writes:

> 
> Hello.
> 
> I'm in the process of upgrading our firewal from 5.7 to 5.8.
> I'm about to apply the erratas (even started to do so with 001 and 002, but
> now I'm
> doubting, given some weird error messages in the 'make' step for errata
> 001. I'll take care of that when I'll have a clear understanding of
> what's hereunder).
> 
> I read errata 006 :
> 'The "src.tar.gz" file on the source tree was created on the wrong day,
> and does not match the 5.8 release builds. A replacement file is
> available in the 5.8 release directory with the name cd-src.tar.gz'
> 
> So, to apply all patches, including those BEFORE 006, am I supposed to:
> - use src.tar.gz for all patches 001-007?
> - use cd-src.tar.gz for all patches 001-007?
> - use src.tar.gz for all patches 001-005, then cd-src.tar.gz for 007?
> 
> Thanks.
> 
> Olivier Debré
> 
> 

Okay, I think I can answer my own question (but still would appreciate
external second thought). I carefully read the errata58.html Revision 1.7
commit dated Wed Oct 14 18:59:37:

'Unfortunately, and sadly, the src.tar.gz file on the offical release CD
was created on the WRONG DAY, so it is from about 9 days after the
release tree was tagged (and, thus after post-5.8 tree unlock, when eager
developers swarm to do commits...)
A replacement tgz file is being made available in the 5.8 release
directory, as described in this errata...'

I understand that I need to use cd-src.tar.gz for all patches 001-007.
Correct?

Olivier Debré

Re: Source tree

2015-10-29 Thread Ted Unangst 
OlivierDebré wrote:
> Hello.
> 
> I'm in the process of upgrading our firewal from 5.7 to 5.8.
> I'm about to apply the erratas (even started to do so with 001 and 002, but
> now I'm
> doubting, given some weird error messages in the 'make' step for errata
> 001. I'll take care of that when I'll have a clear understanding of
> what's hereunder).
> 
> I read errata 006 :
> 'The "src.tar.gz" file on the source tree was created on the wrong day,
> and does not match the 5.8 release builds. A replacement file is
> available in the 5.8 release directory with the name cd-src.tar.gz'
> 
> So, to apply all patches, including those BEFORE 006, am I supposed to:
> - use src.tar.gz for all patches 001-007?
> - use cd-src.tar.gz for all patches 001-007?
> - use src.tar.gz for all patches 001-005, then cd-src.tar.gz for 007?

Use cd-src.tar.gz for all paches.

Re: Any opinion, policy or conclusion about easy and accessible MAC implementations like tomoyo or SMACK?

2015-10-29 Thread Peter J. Philipp 
Hi,

There is IPC between the seperated parts though.  Which makes me wonder
if someone gets the
protocol right on the compromised part they would be able to pull the
certificates no?  What would
need to be done to get the protocol right then?

Regards,
-peter

On 10/29/15 11:34, ludovic coues wrote:
>> And, such a easy and accessible MAC can help minimizing
>> the damage after breach as a last resort.
>>
> >From what I've seen of OpenBSD, most of the mitigation is done here by
> privilege separation.
> For exemple, iked(8) is at least 3 process running together. One
> process have access to the network and is chroot in /var/empty,
> running with minimal privilege. Certificate are handled by another
> process and is chroot to /etc/iked.
> So in the event the network facing process was compromised, it would
> only have access to an empty dir and won't be able to access the
> certificates. That is a form of access control, handled by the
> developer, not the user.

Re: Any opinion, policy or conclusion about easy and accessible MAC implementations like tomoyo or SMACK?

2015-10-29 Thread ludovic coues 
> And, such a easy and accessible MAC can help minimizing
> the damage after breach as a last resort.
>

>From what I've seen of OpenBSD, most of the mitigation is done here by
privilege separation.
For exemple, iked(8) is at least 3 process running together. One
process have access to the network and is chroot in /var/empty,
running with minimal privilege. Certificate are handled by another
process and is chroot to /etc/iked.
So in the event the network facing process was compromised, it would
only have access to an empty dir and won't be able to access the
certificates. That is a form of access control, handled by the
developer, not the user.

-- 

Cordialement, Coues Ludovic
+336 148 743 42

Source tree

2015-10-29 Thread Olivier Debré 
Hello.

I'm in the process of upgrading our firewal from 5.7 to 5.8.
I'm about to apply the erratas (even started to do so with 001 and 002, but
now I'm
doubting, given some weird error messages in the 'make' step for errata
001. I'll take care of that when I'll have a clear understanding of
what's hereunder).

I read errata 006 :
'The "src.tar.gz" file on the source tree was created on the wrong day,
and does not match the 5.8 release builds. A replacement file is
available in the 5.8 release directory with the name cd-src.tar.gz'

So, to apply all patches, including those BEFORE 006, am I supposed to:
- use src.tar.gz for all patches 001-007?
- use cd-src.tar.gz for all patches 001-007?
- use src.tar.gz for all patches 001-005, then cd-src.tar.gz for 007?

Thanks.

Olivier Debré

Re: Mount ISO as read write

2015-10-29 Thread Mik J 
Hello Dan,Thank you for your answer. I didn't find my solution but I've learn
a couple of things.And yes the idea is to get the right parameters to rebuild
the iso as it was and that can boot the same way.



 Le Mercredi 28 octobre 2015 23h11, dan mclaughlin
 a écrit :



 On Wed, 28 Oct 2015 07:45:05 + (UTC) Mik J  wrote:
> Hello everyone,
> I asked this question on another list a long time ago.
> * I would like to mount an iso in order to add some files# ls -l /mnt
> drwxr-xr-x  2 root  wheel    512 May  3 15:31 iso# vnconfig svnd0
Image.iso
> # mount_cd9660 -o rw /dev/svnd0c /mnt/iso
> After the mount, it's read only# ls -l /mnt
> dr-xr-xr-x  1 root  wheel    512 May  3 15:31 iso
> The person who replied told me it was normal, cd9660 are always mounted as
> read only and suggested that I have to remake the iso
> * If that is correct, I would like to know how would I be able to remake
> this iso, and particularly keeping the boot options.
> When I want to make an OpenBSD iso I use -b i386/floppy58c.fs -c
boot.catalog
> I would like to know how can I find which -b and -c options have been used
by
> the person who made the iso in order to use it when I want to rebuild this
iso
> Thanks
>

you must be using a pretty old version of OpenBSD if you are using svnd0 (it
is
just vnd0 now).

i don't know of a way to mount an iso9660 filesystem r/w either (makes sense
as it is for read-only media), but you can mount the iso image as you did
above, and then copy it into a new directory.

# mkdir newiso
# (cd /mnt/iso && tar cf - *) | tar xpf - -C newiso

now you can modify the version in the newiso directory.

i don't know how to get the parameters used on any random image, but the
command used to create the install cd image is:

mkhybrid -a -R -T -L -l -d -D -N -o /usr/src/distrib/i386/cdfs/obj/cd58.iso -v
-v  -A "OpenBSD 5.8 i386 bootonly CD"  -P "Copyright (c) `date +%Y` Theo de
Raadt, The OpenBSD project"  -p "Theo de Raadt "  -V
"OpenBSD/i386    5.8 boot-only CD"  -b 5.8/i386/cdbr -c
5.8/i386/boot.catalog  /usr/src/distrib/i386/cdfs/obj/cd-dir

but i don't think it matters much which -b and -c options were used
originally. when you recreate the image you have to redo that anyway.

i'm not sure of your use of -b for a cd however. according to mkhybrid(8):

  This will work, for example, if the boot image is a LILO-based boot
floppy.

but i've never tried that. i use cdbr as in the example above (which is from
the release(8) process, used to make the official releases). you can find
cdbr
as /usr/mdec/cdbr, and can copy it to the newiso dir if you don't already
have
a copy there.

Re: Unbound root.key in insecurity output

2015-10-29 Thread Martijn van Duren 

I solved this by commenting out the file in /etc/changelist.

On 10/29/15 09:29, Martijn Rijkeboer wrote:

Hi,

I'm running a DNS resolver using Unbound (OpenBSD 5.8-stable AMD64) with the
auto-trust-anchor-file option set. This results in daily updates of the
/var/unbound/db/root.key file (only comments are changed). Unfortunately this
file is also checked via the security(8) script, which results in getting an
insecurity output mail every day (Cry Wolf problem). Is there a way to
exclude
the comments in the checks or the complete root.key file?

Kind regards,


Martijn Rijkeboer

Re: Unbound root.key in insecurity output

2015-10-29 Thread Theo Buehler 
On Thu, Oct 29, 2015 at 09:29:21AM +0100, Martijn Rijkeboer wrote:
> Hi,
> 
> I'm running a DNS resolver using Unbound (OpenBSD 5.8-stable AMD64) with the
> auto-trust-anchor-file option set. This results in daily updates of the
> /var/unbound/db/root.key file (only comments are changed). Unfortunately this
> file is also checked via the security(8) script, which results in getting an
> insecurity output mail every day (Cry Wolf problem). Is there a way to
> exclude
> the comments in the checks or the complete root.key file?
> 
> Kind regards,
> 
> 
> Martijn Rijkeboer

The security script checks the files listed in /etc/changelist.
See changelist(5) for details.

I don't think there's a way of checking 'everything but comments', but
it shouldn't be hard to do that with a custom daily.local script,
see daily(8).

Unbound root.key in insecurity output

2015-10-29 Thread Martijn Rijkeboer 
Hi,

I'm running a DNS resolver using Unbound (OpenBSD 5.8-stable AMD64) with the
auto-trust-anchor-file option set. This results in daily updates of the
/var/unbound/db/root.key file (only comments are changed). Unfortunately this
file is also checked via the security(8) script, which results in getting an
insecurity output mail every day (Cry Wolf problem). Is there a way to
exclude
the comments in the checks or the complete root.key file?

Kind regards,


Martijn Rijkeboer

Re: 5.8 freezes on Shuttle DS87, anybody else?

2015-10-29 Thread Stuart Henderson 
On 2015-10-29, Harald Dunkel  wrote:
> Hi folks,
>
> I had several system freezes of our 2 Shuttle DS87 hosts
> running 5.8. Sometimes the host is up for a week without
> problems, but I have also seen 3 freezes on one day.
>
> The serial console doesn't give a hint about what goes
> wrong. I have built 5.8 with -g now to create a crash
> dump for a bug report on the next failure (hoping this
> break thing works with my console server).

You'll need ddb.console=1 in sysctl.conf and reboot if you don't have
it already (it needs changing before securelevel is set). Test it before
the system hangs otherwise you won't be able to distinguish between BREAK
not working and the OS not being able to enter DDB.

A trick if your console server can't send BREAK: set the speed to 300 baud
and send ^A. (BREAK is just the tx line being held at 0 for longer than
it would take to send a normal frame).

> Since both hosts are affected and since 5.7 was fine
> (AFAICR) it appears to me to be a software issue. I just
> wonder if anybody experienced the same problem?

What software do the systems run?

Are they pingable when they hang?

> [demime 1.01d removed an attachment of type text/x-log which had a name of 
> dmesg.log]

This list doesn't aaccept attachments, please send it in-line.

5.8 freezes on Shuttle DS87, anybody else?

2015-10-29 Thread Harald Dunkel 
Hi folks,

I had several system freezes of our 2 Shuttle DS87 hosts
running 5.8. Sometimes the host is up for a week without
problems, but I have also seen 3 freezes on one day.

The serial console doesn't give a hint about what goes
wrong. I have built 5.8 with -g now to create a crash
dump for a bug report on the next failure (hoping this
break thing works with my console server).

Since both hosts are affected and since 5.7 was fine
(AFAICR) it appears to me to be a software issue. I just
wonder if anybody experienced the same problem?


Regards
Harri

[demime 1.01d removed an attachment of type text/x-log which had a name of 
dmesg.log]