Re: Failed syspatch 63-007 on i386 (verified but gzip i/o error)

2018-05-08 Thread Raphael
On Tue, May 08, 2018 at 02:57:04PM -0600, Theo de Raadt wrote:
> A replacement file is moving it's way out to mirrors now...

 thanks!



Re: Failed syspatch 63-007 on i386 (verified but gzip i/o error)

2018-05-08 Thread Theo de Raadt
A replacement file is moving it's way out to mirrors now...



Re: Failed syspatch 63-007 on i386 (verified but gzip i/o error)

2018-05-08 Thread Peter van Oord van der Vlies

Same here.

Best Regards,

Peter van Oord van der Vlies


-

Dear misc@,

I do not know which mailing list is the best one for such report, so I
start here.

Syspatch worked properly for 63-006 but syspatch fails on 63-007. I
tried without rebooting after 006 and after rebooting. Both situation
shows the same error pasted below. Kernel relinked properly after
applying 006.

Syspatch worked well for both on my other machine which is an amd64.

Is it necessary to provide more than the dmesg for the machine ?

HTH
raph

$ doas syspatch
Get/Verify syspatch63-007_libcryp... 100% |***|  5312 
KB00:10
Installing patch 007_libcrypto
gzip: stdin: Input/output error

tar: End of archive volume 1 reached



OpenBSD 6.3 (GENERIC) #2: Sun May  6 19:34:57 CEST 2018
r...@syspatch-63-i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1.10GHz ("GenuineIntel" 686-class) 
1.10 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE,NXE,EST,TM2,PERF
real mem  = 1333088256 (1271MB)
avail mem = 1294856192 (1234MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 12/25/05, BIOS32 rev. 0 @ 0xffe90, SMBIOS rev. 2.3 
@ 0xf81a0 (45 entries)
bios0: vendor Dell Inc. version "A05" date 12/25/2005
bios0: Dell Inc. Latitude X1
acpi0 at bios0: rev 0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC ASF! MCFG SSDT SSDT SSDT
acpi0: wakeup devices LID_(S3) PBTN(S4) PCI0(S5) USB0(S0) USB1(S0) USB2(S0) 
USB4(S0) USB3(S0) MODM(S3) PCIE(S4) NIC_(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
, remapped to apid 1
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (PCIE)
acpicpu0 at acpi0: !C3(100@185 io@0x1016), !C3(250@85 io@0x1015), !C2(500@1 
io@0x1014), C1(1000@1 halt), PSS
acpitz0 at acpi0: critical temperature is 95 degC
acpiac0 at acpi0: AC unit offline
acpibat0 at acpi0: BAT0 model "DELL 00" serial 3840 type LION oem "PSm"
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: PBTN
acpibtn2 at acpi0: SBTN
acpivideo0 at acpi0: VID_
acpivideo1 at acpi0: VID2
bios0: ROM list: 0xc/0xf800! 0xcf800/0x800
cpu0: Enhanced SpeedStep 1098 MHz: speeds: 1100, 800, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82915GM Host" rev 0x03
inteldrm0 at pci0 dev 2 function 0 "Intel 82915GM Video" rev 0x03
drm0 at inteldrm0
intagp0 at inteldrm0
agp0 at intagp0: aperture at 0xc000, size 0x1000
inteldrm0: apic 1 int 16
inteldrm0: 1280x768, 32bpp
wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel 82915GM Video" rev 0x03 at pci0 dev 2 function 1 not configured
ppb0 at pci0 dev 28 function 0 "Intel 82801FB PCIE" rev 0x03: apic 1 int 16
pci1 at ppb0 bus 1
bge0 at pci1 dev 0 function 0 "Broadcom BCM5751" rev 0x01, BCM5750 A1 
(0x4001): apic 1 int 16, address 00:13:72:6a:8c:dc
brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
uhci0 at pci0 dev 29 function 0 "Intel 82801FB USB" rev 0x03: apic 1 int 16
uhci1 at pci0 dev 29 function 1 "Intel 82801FB USB" rev 0x03: apic 1 int 17
uhci2 at pci0 dev 29 function 2 "Intel 82801FB USB" rev 0x03: apic 1 int 18
uhci3 at pci0 dev 29 function 3 "Intel 82801FB USB" rev 0x03: apic 1 int 19
ehci0 at pci0 dev 29 function 7 "Intel 82801FB USB" rev 0x03: apic 1 int 16
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "Intel EHCI root hub" rev 
2.00/1.00 addr 1
ppb1 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0xd3
pci2 at ppb1 bus 2
cbb0 at pci2 dev 1 function 0 "Ricoh 5C476 CardBus" rev 0xb3: apic 1 int 19
"Ricoh 5C552 Firewire" rev 0x08 at pci2 dev 1 function 1 not configured
sdhc0 at pci2 dev 1 function 2 "Ricoh 5C822 SD/MMC" rev 0x17: apic 1 int 17
sdhc0: SDHC 1.0, 33 MHz base clock
sdmmc0 at sdhc0: 4-bit, sd high-speed, mmc high-speed
iwi0 at pci2 dev 3 function 0 "Intel PRO/Wireless 2200BG" rev 0x05: apic 1 
int 17, address 00:13:ce:67:46:09
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 3 device 0 cacheline 0x0, lattimer 0x20
pcmcia0 at cardslot0
auich0 at pci0 dev 30 function 2 "Intel 82801FB AC97" rev

OT: Yandex - was Re: Why is ftp option removed from installer?

2018-05-08 Thread ropers
On 8 May 2018 at 19:12, Leonid Bobrov  wrote:

> but in my country (Ukraine) Yandex is blocked,
> but my ISP didn't block ftp://mirror.yandex.ru


OT, but America also seems to mess with Yandex in weird ways, whereby at
least some American users get Yandex.ru redirected to Yandex.ua, which very
much looks like politically-motivated American sabotage of a major Russian
digital enterprise.

Anybody else see this too? Are there any Americans (by IP-geolocation) who
DON'T see this?

Apologies for the noise, but curiosity could not be contained.


Re: xmonad: losing keyboard after some time on 6.3 and -current.

2018-05-08 Thread Karel Gardas

Looks like the time of keyboard lost is proportional to number of key
stokes managed by xmonad. E.g quick switch between windows or
workspaces there and back is able to duplicate the issue quite quickly
(matter of 1-2 minutes).

Knowing this I've hacked my config file to absolutely minimal:


import XMonad
import System.IO
import XMonad.Util.Run (spawnPipe)
import XMonad.Hooks.DynamicLog
import XMonad.Hooks.ManageDocks

main = do
--  xmproc <- spawnPipe "/usr/local/bin/xmobar /home/karel/.xmobarrc"
  xmonad $ defaultConfig {
--manageHook = manageDocks <+> manageHook defaultConfig
--, layoutHook = avoidStruts $ layoutHook defaultConfig
--, handleEventHook = handleEventHook defaultConfig <+> docksEventHook
--, logHook = dynamicLogWithPP xmobarPP
--{ ppOutput = hPutStrLn xmproc
--, ppTitle = xmobarColor "green" "" . shorten 50
--, ppHiddenNoWindows = xmobarColor "grey" ""
--}
   {- , -} borderWidth = 5 
, normalBorderColor = "#cc"
, focusedBorderColor = "#008b00"
}


and it looks like the issue seems to be gone.

Karel

On Tue, 8 May 2018 13:10:40 +0200
Karel Gardas  wrote:

> 
> Hi,
> 
> I'm looking for other xmonad users experience on OpenBSD. What I see
> here is that xmonad somehow loses keyboard "connection" after some
> time. I can't no longer switch between windows, workspaces, screens. I
> can't no longer invoke new xterm, invoke dmenu etc. Basically it looks
> like crashed, but I can still see the process running (e.g. both xmonad
> and my option compiled xmonad-x86_64-openbsd are shown in ps output).
> "After some time" usually means around half an hour or so. I've tested
> xmonad on OpenBSD 6.3 and -current as of May 7. By xmonad I mean all
> xmonad related packages provided by OpenBSD. I've also tested xmonad
> head obtained from xmonad and xmonad-contrip github.com repos installed
> by cabal. The experience is still the same. With xmonad I'm also using
> xmobar so I provide both xmobar and xmonad config files below. When I
> compiled xmonad or recompiled configuration I've used OpenBSD's
> provided ghc package.
> 
> My question is: do you also see this behaviour? If so, what is your
> workaround for this -- if any? If not, what's your platform/X11 details?
> 
> I'm running this on ThinkPad T500, builtin Intel graphics and OpenBSD's
> provided X11 (I've not compiled myself nor apply any patches to that).
> I also do have HP 27" monitor connected to laptop using display port
> connection/cable. But please note the behavior of xmonad is same also
> w/o connected external monitor.
> 
> Thanks!
> Karel
> 
> My xmonad configure file:
> 
> import XMonad
> import System.IO
> import XMonad.Util.Run (spawnPipe)
> import XMonad.Hooks.DynamicLog
> import XMonad.Hooks.ManageDocks
> 
> main = do
>   xmproc <- spawnPipe "/usr/local/bin/xmobar /home/karel/.xmobarrc"
>   xmonad $ defaultConfig {
> manageHook = manageDocks <+> manageHook defaultConfig
> , layoutHook = avoidStruts $ layoutHook defaultConfig
> , handleEventHook = handleEventHook defaultConfig <+> docksEventHook
> , logHook = dynamicLogWithPP xmobarPP
> { ppOutput = hPutStrLn xmproc
> , ppTitle = xmobarColor "green" "" . shorten 50
> , ppHiddenNoWindows = xmobarColor "grey" ""
> }
> , borderWidth = 5 
> , normalBorderColor = "#cc"
> , focusedBorderColor = "#008b00"
> }
> 
> My xmobar configure file:
> 
> Config { font = "-*-Fixed-Bold-R-Normal-*-13-*-*-*-*-*-*-*"
> , borderColor = "black"
> , border = TopB
> , bgColor = "black"
> , fgColor = "grey"
> , position = TopW L 100
> , sepChar = "%"
> , alignSep = "}{"
> , lowerOnStart = False
> --, commands = [ Run Date "%a %b %_d %Y  %H:%M:%S" 
> "Mydate" 10
> , template = "}{ %date%"
> }
> 
> 
> 


-- 
Karel Gardas 



Re: Why is ftp option removed from installer?

2018-05-08 Thread Leonid Bobrov
I didn't expect to have any other mirror close to me (just started
reading about what CDN is), 3 of 4 CDN mirrors are fast, now I can  
upgrade instantly (tried to install packages with them), thank you.



Re: Why is ftp option removed from installer?

2018-05-08 Thread Theo de Raadt
>Can someone give me a link or tell me why ftp
>option was removed from installer?

Because of many reasons.  Including running low of space on the
install media.

>I currently use it for packages:
>ftp://mirror.yandex.ru/pub/OpenBSD
>
>I'd like to use "https://"; instead, of course,
>but in my country (Ukraine) Yandex is blocked,
>but my ISP didn't block ftp://mirror.yandex.ru
>so I have the fastest mirror available to me.
>(I've figured it out today expecting that my
>ISP has blocked only web site, not mirror)

We have nearly 100 mirrors, and 4 CDN.  One of those CDN is
Cloudflare with 150 global nodes.  You are not without viable
options.

>Sure I can just manually download, verify
>and extract file sets, but I prefer script
>doing that tedious work for me.

That is not neccessary at all.



Failed syspatch 63-007 on i386 (verified but gzip i/o error)

2018-05-08 Thread Raphael

Dear misc@,

I do not know which mailing list is the best one for such report, so I
start here.

Syspatch worked properly for 63-006 but syspatch fails on 63-007. I
tried without rebooting after 006 and after rebooting. Both situation
shows the same error pasted below. Kernel relinked properly after
applying 006.

Syspatch worked well for both on my other machine which is an amd64.

Is it necessary to provide more than the dmesg for the machine ?

HTH
raph

$ doas syspatch
Get/Verify syspatch63-007_libcryp... 100% |***|  5312 KB
00:10
Installing patch 007_libcrypto
gzip: stdin: Input/output error

tar: End of archive volume 1 reached



OpenBSD 6.3 (GENERIC) #2: Sun May  6 19:34:57 CEST 2018
r...@syspatch-63-i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1.10GHz ("GenuineIntel" 686-class) 1.10 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE,NXE,EST,TM2,PERF
real mem  = 1333088256 (1271MB)
avail mem = 1294856192 (1234MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 12/25/05, BIOS32 rev. 0 @ 0xffe90, SMBIOS rev. 2.3 @ 
0xf81a0 (45 entries)
bios0: vendor Dell Inc. version "A05" date 12/25/2005
bios0: Dell Inc. Latitude X1
acpi0 at bios0: rev 0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC ASF! MCFG SSDT SSDT SSDT
acpi0: wakeup devices LID_(S3) PBTN(S4) PCI0(S5) USB0(S0) USB1(S0) USB2(S0) 
USB4(S0) USB3(S0) MODM(S3) PCIE(S4) NIC_(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
, remapped to apid 1
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (PCIE)
acpicpu0 at acpi0: !C3(100@185 io@0x1016), !C3(250@85 io@0x1015), !C2(500@1 
io@0x1014), C1(1000@1 halt), PSS
acpitz0 at acpi0: critical temperature is 95 degC
acpiac0 at acpi0: AC unit offline
acpibat0 at acpi0: BAT0 model "DELL 00" serial 3840 type LION oem "PSm"
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: PBTN
acpibtn2 at acpi0: SBTN
acpivideo0 at acpi0: VID_
acpivideo1 at acpi0: VID2
bios0: ROM list: 0xc/0xf800! 0xcf800/0x800
cpu0: Enhanced SpeedStep 1098 MHz: speeds: 1100, 800, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82915GM Host" rev 0x03
inteldrm0 at pci0 dev 2 function 0 "Intel 82915GM Video" rev 0x03
drm0 at inteldrm0
intagp0 at inteldrm0
agp0 at intagp0: aperture at 0xc000, size 0x1000
inteldrm0: apic 1 int 16
inteldrm0: 1280x768, 32bpp
wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel 82915GM Video" rev 0x03 at pci0 dev 2 function 1 not configured
ppb0 at pci0 dev 28 function 0 "Intel 82801FB PCIE" rev 0x03: apic 1 int 16
pci1 at ppb0 bus 1
bge0 at pci1 dev 0 function 0 "Broadcom BCM5751" rev 0x01, BCM5750 A1 (0x4001): 
apic 1 int 16, address 00:13:72:6a:8c:dc
brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
uhci0 at pci0 dev 29 function 0 "Intel 82801FB USB" rev 0x03: apic 1 int 16
uhci1 at pci0 dev 29 function 1 "Intel 82801FB USB" rev 0x03: apic 1 int 17
uhci2 at pci0 dev 29 function 2 "Intel 82801FB USB" rev 0x03: apic 1 int 18
uhci3 at pci0 dev 29 function 3 "Intel 82801FB USB" rev 0x03: apic 1 int 19
ehci0 at pci0 dev 29 function 7 "Intel 82801FB USB" rev 0x03: apic 1 int 16
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "Intel EHCI root hub" rev 2.00/1.00 
addr 1
ppb1 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0xd3
pci2 at ppb1 bus 2
cbb0 at pci2 dev 1 function 0 "Ricoh 5C476 CardBus" rev 0xb3: apic 1 int 19
"Ricoh 5C552 Firewire" rev 0x08 at pci2 dev 1 function 1 not configured
sdhc0 at pci2 dev 1 function 2 "Ricoh 5C822 SD/MMC" rev 0x17: apic 1 int 17
sdhc0: SDHC 1.0, 33 MHz base clock
sdmmc0 at sdhc0: 4-bit, sd high-speed, mmc high-speed
iwi0 at pci2 dev 3 function 0 "Intel PRO/Wireless 2200BG" rev 0x05: apic 1 int 
17, address 00:13:ce:67:46:09
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 3 device 0 cacheline 0x0, lattimer 0x20
pcmcia0 at cardslot0
auich0 at pci0 dev 30 function 2 "Intel 82801FB AC97" rev 0x03: apic 1 int 16, 
ICH6
ac97: codec id 0x83847652 (SigmaTel STAC9752/53)
ac97: codec features headphone, 20 bit DAC, 20 bit ADC, SigmaTel 3D
audio0 at auich0
"Intel 82801FB Modem" rev 0x03 at pci0 dev 30 function 3 not configured
ichpcib0 at pci0 dev 31 function 0 "Intel 82801FBM LPC" rev 0x03: PM disabled
pciide0 at pci0 dev 31 function 1 "Intel 82801FB IDE" rev 0x03: DMA, channel 0 
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA48, 57231MB, 117210240 secto

Why is ftp option removed from installer?

2018-05-08 Thread Leonid Bobrov
Hi!

Can someone give me a link or tell me why ftp
option was removed from installer? I currently
use it for packages:
ftp://mirror.yandex.ru/pub/OpenBSD

I'd like to use "https://"; instead, of course,
but in my country (Ukraine) Yandex is blocked,
but my ISP didn't block ftp://mirror.yandex.ru
so I have the fastest mirror available to me.
(I've figured it out today expecting that my
ISP has blocked only web site, not mirror)

Sure I can just manually download, verify
and extract file sets, but I prefer script
doing that tedious work for me.



xmonad: losing keyboard after some time on 6.3 and -current.

2018-05-08 Thread Karel Gardas

Hi,

I'm looking for other xmonad users experience on OpenBSD. What I see
here is that xmonad somehow loses keyboard "connection" after some
time. I can't no longer switch between windows, workspaces, screens. I
can't no longer invoke new xterm, invoke dmenu etc. Basically it looks
like crashed, but I can still see the process running (e.g. both xmonad
and my option compiled xmonad-x86_64-openbsd are shown in ps output).
"After some time" usually means around half an hour or so. I've tested
xmonad on OpenBSD 6.3 and -current as of May 7. By xmonad I mean all
xmonad related packages provided by OpenBSD. I've also tested xmonad
head obtained from xmonad and xmonad-contrip github.com repos installed
by cabal. The experience is still the same. With xmonad I'm also using
xmobar so I provide both xmobar and xmonad config files below. When I
compiled xmonad or recompiled configuration I've used OpenBSD's
provided ghc package.

My question is: do you also see this behaviour? If so, what is your
workaround for this -- if any? If not, what's your platform/X11 details?

I'm running this on ThinkPad T500, builtin Intel graphics and OpenBSD's
provided X11 (I've not compiled myself nor apply any patches to that).
I also do have HP 27" monitor connected to laptop using display port
connection/cable. But please note the behavior of xmonad is same also
w/o connected external monitor.

Thanks!
Karel

My xmonad configure file:

import XMonad
import System.IO
import XMonad.Util.Run (spawnPipe)
import XMonad.Hooks.DynamicLog
import XMonad.Hooks.ManageDocks

main = do
  xmproc <- spawnPipe "/usr/local/bin/xmobar /home/karel/.xmobarrc"
  xmonad $ defaultConfig {
manageHook = manageDocks <+> manageHook defaultConfig
, layoutHook = avoidStruts $ layoutHook defaultConfig
, handleEventHook = handleEventHook defaultConfig <+> docksEventHook
, logHook = dynamicLogWithPP xmobarPP
{ ppOutput = hPutStrLn xmproc
, ppTitle = xmobarColor "green" "" . shorten 50
, ppHiddenNoWindows = xmobarColor "grey" ""
}
, borderWidth = 5 
, normalBorderColor = "#cc"
, focusedBorderColor = "#008b00"
}

My xmobar configure file:

Config { font = "-*-Fixed-Bold-R-Normal-*-13-*-*-*-*-*-*-*"
, borderColor = "black"
, border = TopB
, bgColor = "black"
, fgColor = "grey"
, position = TopW L 100
, sepChar = "%"
, alignSep = "}{"
, lowerOnStart = False
--, commands = [ Run Date "%a %b %_d %Y  %H:%M:%S" 
"Mydate" 10
, template = "}{ %date%"
}





Re: How to have pf filter packets on combination of incoming and outgoing interface (for packets tra

2018-05-08 Thread Mihai Popescu
[ ... ]

People using coolOS come to OpenBSD because it is more secure. Then
they demand OpenBSD to implement same features like coolOS. They even
expect OpenBSD to be configured like coolOS.

For the OP: OpenBSD is more secure not because it is called OpenBSD!
It is so because they way it is designed and configured! Change that
and you will move it to your coolOS.
If you want PF, go back and read about it. Learn to handle it in the
way it was designed, don't try to blend it to whatever you used
before. It useless if you do that.

Thanks.