Re: SSH extremely quickly dropped from T-Mobile phone hotspot

[Chris Bennett]

Hmm, it doesn't matter about anything you just said.

First tenet of security: If physical security cannot be maintained, all
security is immediately compromised. Period.

This server I am renting may not be under the control of whom I think I
am paying. How could I possibly know?
This server is Intel based.

Possibly no more than a coincidence, but immediately after joining a
pro-constitutional group, both my phone and laptop needed BIOS updates.

Hardware flaws in both AMD and Intel that have NO software mitigations
exist and that cannot be detected exist.

This is just the world we live in. I'm not a criminal and I have no
secrets whatsoever to hide.

I use OpenBSD because I am a bit of a perfectionist myself.
Pure, clean code earns my utter respect. That security is a by-product
is superb.

So, for my part, that's that. Unless anyone has some useful help beyond
what I've already heard, this discussion is over on my part. Let's free
up the list for other's needs

Chris Bennett

Re: Deploy Django app - strategy?

[Ken MacKenzie]

An example from one of my setups:

location /api/deploy/core {
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://unix:/applications/deploy/core-api.sock:/;
}

This example is from a CentOS 7.4 box.

On Sun, Sep 16, 2018 at 2:43 PM Bogdan Kulbida  wrote:

> Hi Ken,
>
> Can you please be more specific on Nginx talking via sockets? Any URLs on
> that topic will be appreciated. Thank you.
>
> On Sun, Sep 16, 2018 at 09:46 Ken M  wrote:
>
>> On Sun, Sep 16, 2018 at 09:05:33AM +0300, ??  wrote:
>> > I deploy my django app using uwsgi and venv in my home dir
>> > uWSGi starts on its default port and httpd server uses this port
>> > to handle my app requests. Everything just like in the official manual
>> of
>> > uwsgi.
>> >
>>
>> Don't know if this is helpful for Django apps, or if httpd in openbsd can
>> use
>> unix sockets. Anyway with a couple of falcon api's I setup with Gunicorn I
>> actually used unix sockets instead of creating ports. If my proxy is on
>> the same
>> server as the api's I found that a little easier to manage. Granted in
>> this case
>> it was on centos and I was using nginx. Also in the process of figuring
>> out how
>> to do that I found a lot of the documentation on nginx syntax talking to
>> a unix
>> socket was wrong. But that is another story.
>>
>> Ken
>>
>> --
> ---
> Best regards,
> Bogdan Kulbida
> Founder and CEO, Konstankino LLC 
> +1.802.793.8295
>
>
>

Re: SSH extremely quickly dropped from T-Mobile phone hotspot

[Constantine A. Murenin]

On 16 September 2018 at 00:45, Chris Bennett
 wrote:
> I get the same internal NAT'ed IP4 address every time, but my public IP4
> address differs over time.
>
> I don't like the idea at all of keeping an open ssh session going on
> without having my equipment on and me nearby.

I don't think you understand how ssh works (unless you have a belief
that the underlying cryptography is insecure, at which point, it's
unclear how any of this is then relevant to T-Mobile US).

It's irrelevant what IPv4 addresses you have, since it all has to pass
through NAT on your device as well as CGNAT at the carrier level, with
the state of the established connections expiring within minutes of
disuse.

The reason your SSH connections break is because the underlying TCP
connections must be kept alive for the CGNAT to work on a keep-state
basis; this can only be accomplished by either sending more packets
all the time to make sure the state never expires whilst you're still
using your session (e.g., the `ssh -oServerAliveInterval=240 …` and
such), or by getting rid of all types of keep-state NAT and ensuring
there's no stateful firewall in place (and, for this, I've already
confirmed that it works just fine over T-Mobile US IPv6 with TCP
connections remaining open for 1h and more, whereas the IPv4
connections indeed expire after only a few minutes due to the
state-based NAT).

C.

Re: Deploy Django app - strategy?

[Bogdan Kulbida]

Hi Ken,

Can you please be more specific on Nginx talking via sockets? Any URLs on
that topic will be appreciated. Thank you.

On Sun, Sep 16, 2018 at 09:46 Ken M  wrote:

> On Sun, Sep 16, 2018 at 09:05:33AM +0300, ??  wrote:
> > I deploy my django app using uwsgi and venv in my home dir
> > uWSGi starts on its default port and httpd server uses this port
> > to handle my app requests. Everything just like in the official manual of
> > uwsgi.
> >
>
> Don't know if this is helpful for Django apps, or if httpd in openbsd can
> use
> unix sockets. Anyway with a couple of falcon api's I setup with Gunicorn I
> actually used unix sockets instead of creating ports. If my proxy is on
> the same
> server as the api's I found that a little easier to manage. Granted in
> this case
> it was on centos and I was using nginx. Also in the process of figuring
> out how
> to do that I found a lot of the documentation on nginx syntax talking to a
> unix
> socket was wrong. But that is another story.
>
> Ken
>
> --
---
Best regards,
Bogdan Kulbida
Founder and CEO, Konstankino LLC 
+1.802.793.8295

Re: Pkg_add

[Stuart Henderson]

On 2018-09-16, Solène Rapenne  wrote:
> Le 2018-09-16 03:33, Michael Ayres a écrit :
>> Thanks to everyone who has replied in helping me. I have read up on
>> the man pages and I understand what I need; it is:
>> 
>> 1) I want to install some packages on OpenBSD 6.0 which I have
>> operational on a Parallels VM on my precious MacBookPro High Sierra.
>
> are you using 6.0? If so, it's no longer supported and packages are not
> available anymore.

Correct it's no longer supported, though packages are available at
some mirrors (especially ftp.eu.openbsd.org).

>> 2) I want to set a environmental variable PKG_PATH to the ftp site to
>> get packages.
>>   2.a) I am trying to set it to
>> https://ftp.openbsd.org/pub/OpenBSD/6.3/packages/i386/

6.3 packages don't work on 6.0.

>> , which has an
>> index of packages I might want to get. I will later put that
>> PKG_PATH in the start up file so it is always set each time I boot up
>> OpenBSD.
>
> Are you using i386 architecture in your VM?
>
>> 3) My PKG_PATH string [
>> https://ftp.openbsd.org/pub/OpenBSD/6.3/packages/i386/
>>  ] does not
>> seem to work. An example I refer to includes some wild cards, “%”,
>> which I can’t seem to get right.k The example I am working from is at:
>> https://linux-audit.com/updating-all-openbsd-packages-with-pkg_add/
>> 
>> and one example it uses is passing a variable for name and arch -s,
>> which I have not set.
>
> http://man.openbsd.org/installurl
>
> https://ftp.openbsd.org/pub/OpenBSD is a right content for the file
>
>> 
>> 
>> 4) What is a correct string i should use to set my PKG_PATH variable
>> to get packages from location at 2a above?
>> 
>
> use /etc/installurl instead of PKG_PATH

6.0 used /etc/pkg.conf, needs to be 6.1+ for /etc/installurl.
PKG_PATH works with both,

Re: How to make the cwm window manager reread new config

[Stuart Henderson]

On 2018-09-16, Родин Максим  wrote:
> Thank you very much, it works.
> I always thought this would restart my whole session and I would loose
> all my open windows.

It does actually restart the window manager, but information relating to
the session (group etc) is stored "attached" to the clients in "atoms"
so that it can be picked up by the new cwm instance, you shouldn't
notice any difference after it's done restarting and loading that
information.

Re: Deploy Django app - strategy?

[Ken M]

On Sun, Sep 16, 2018 at 09:05:33AM +0300, ??  wrote:
> I deploy my django app using uwsgi and venv in my home dir
> uWSGi starts on its default port and httpd server uses this port
> to handle my app requests. Everything just like in the official manual of
> uwsgi.
> 

Don't know if this is helpful for Django apps, or if httpd in openbsd can use
unix sockets. Anyway with a couple of falcon api's I setup with Gunicorn I
actually used unix sockets instead of creating ports. If my proxy is on the same
server as the api's I found that a little easier to manage. Granted in this case
it was on centos and I was using nginx. Also in the process of figuring out how
to do that I found a lot of the documentation on nginx syntax talking to a unix
socket was wrong. But that is another story.

Ken

Re: "acpi0: SSDT checksum error" on bsd.rd snapshot

[Omar Polo]

Hi all,

I'm having a similar problem with the snapshot dated 15-Sep-2018. I've
verified the hash and with signify and it seems to be not corrupted,
but I'm unable to boot from it.

Mulder: sorry if I sent only to you the previous mail.

Here's some information, hope they helps:

$ sha256 /bsd.rd
SHA256 (/bsd.rd) = 
b66c4c9f4f7b8bba14e1a69bdcbf42b68051a820c859ab3c5517d5f101e3fb9d

What the latest snapshot prints:
OpenBSD 6.4-beta (RAMDISK_CD) #282: Sat Sep 15 22:59:57 MDT 2018
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/RAMDISK_CD

real mem = 17092308992 (16300MB)
avail mem = 16565035008 (15797MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0x9ce7c000 (64 entries)
bios0: vendor Insyde version "F.43" date 12/23/2013
bios0: Hewlett-Packard HP ENVY 17 Notebook PC
acpi0 at bios0: rev 2
acpi0: BOOT checksum error
acpi0: LPIT checksum error
acpi0: SSDT checksum error
acpi0: SSDT checksum error
acpi0: SSDT checksum error
acpi0: BGRT checksum error
acpi0: DSDT checksum erroruvm_fault(0x818d1208, 0x40, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip 8134ad8d cs 8 rflags 10246 cr2  40 cpl e rsp 
81a06830
gsbase 0x81870ff0 kgsbase 0x00
panic: trap type 6, code=0, pc=8134ad8d

The operating system has halted.
Please press any key to reboot.

And here's a normal boot with a previous snapshot

OpenBSD 6.4-beta (GENERIC.MP) #294: Wed Sep 12 19:50:03 MDT 2018
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 17092308992 (16300MB)
avail mem = 16565035008 (15797MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0x9ce7c000 (64 entries)
bios0: vendor Insyde version "F.43" date 12/23/2013
bios0: Hewlett-Packard HP ENVY 17 Notebook PC
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP UEFI FPDT MSDM ASF! HPET APIC MCFG SSDT BOOT LPIT ASPT 
DBGP SSDT SSDT SSDT SSDT SSDT BGRT
acpi0: wakeup devices P0P1(S4) GLAN(S4) EHC1(S3) EHC2(S3) XHC_(S3) HDEF(S4) 
PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4) 
PXSX(S4) RP05(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz, 2195.27 MHz, 06-3c-03
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz, 2194.92 MHz, 06-3c-03
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 1, core 0, package 0
cpu2 at mainbus0: apid 2 (application processor)
cpu2: Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz, 2194.93 MHz, 06-3c-03
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 1, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz, 2194.92 MHz, 06-3c-03
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 1, core 1, package 0
cpu4 at mainbus0: apid 4 (application processor)
cpu4: Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz, 2194.93 MHz, 06-3c-03
cpu4: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CM

Re: "acpi0: SSDT checksum error" on bsd.rd snapshot

[Sijmen J. Mulder]

On Sun, 16 Sep 2018 17:02:05 +0200
Omar Polo  wrote:

> I'm having a similar problem with the snapshot dated 15-Sep-2018. I've
> verified the hash and with signify and it seems to be not corrupted,
> but I'm unable to boot from it.

I'm still seeing the issue with the Sep 15 snapshot also.

Sijmen

Re: shell hosting

[Stephane HUC "PengouinBSD"]

https://openbsd.amsterdam/

Le 09/16/18 à 13:40, Friedrich Locke a écrit :
> Hi,
> 
> May you suggest me a shell + www + mysql hosting service (with OBSD, of
> course) ?
> 
> Thanks a lot.
> 

-- 
~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<<

Stephane HUC as PengouinBSD or CIOTBSD
b...@stephane-huc.net



signature.asc
Description: OpenPGP digital signature

Re: SSH extremely quickly dropped from T-Mobile phone hotspot

[Raul Miller]

On Sun, Sep 16, 2018 at 2:50 AM Chris Bennett
 wrote:
> See, I'm a US citizen in a country that has these nasty FISA courts and
> a variety of new-ish unconstitutional laws that allow the President and
> others to plant fake content on my server, snatch me up, deny me a
> lawyer, detain me forever and kill me without cause.
>
> Did I forget to mention that all the ISPs I have used, including
> T-Mobile take my search requests sent to https, yes https://google.com
> and know what those search terms were?
>
> I guess I'm just a paranoid without cause??

So, yeah, and no, and yeah...

We've got problems, and some of them are people in government and some
of the are people in business and some of them are our in our laws.
But you can be almost certain that some of them are in how stuff gets
reported.

>From my point of view, the unconstitutional (aka: illegal) law which
bothers me the most are the copyright laws which favor Walt Disney's
grandchildren at the expense of the constitutional rationale for
copyright. The kind of thinking which got us those laws have played a
part in building out our low income city populations and creating the
economic conditions which favored shipping most of our industrial jobs
overseas. But there's other factors, also, including bad economic
theory being taught globally [the "efficient market hypothesis"] and
child labor laws being used as an excuse to raise kids to be helpless
adults.

So what we see a lot of are coping mechanisms and people being forced
to cheat the system and people reacting to that with more coping
measures.

But it doesn't take cracking https for your google searches to get
sold to the phone company. All that needs is high priced people in
Google who are great at saying good things about themselves setting up
business arrangements which will trade Google's past reputation and
established abilities for a few years of increased salary.

Anyways, we've got problems, but a lot of them are that you can no
longer expect people's motivations to work like they used to, because
cultures are having to adapt to a global situation where laws of any
one country can't be enforced on anything having to do with
communications. So major countries which relied on enforcing laws on
communications to keep their powerful people powerful have to resort
to deploying their manpower to make that happen if they want to stay
in power.

And those kinds of countries have never relied on technological
approaches, because that kind of power isn't capable of developing
technology and has never seen the need to do so -- instead, it copies
and copes while doing so.

But it doesn't help that we've been getting a lot of things wrong for
a long time (like bad economic theory, for example), leaving us in the
position of having critical holes in our institutions which are
trivial to exploit.

So... yeah, and no, and yeah...

-- 
Raul

shell hosting

[Friedrich Locke]

Hi,

May you suggest me a shell + www + mysql hosting service (with OBSD, of
course) ?

Thanks a lot.

Re: SGI O2 on 6.3 - Keyboard/Mouse issues

[Hoelzer, Dave]

That's interesting.  Within Irix, I've never seen or experienced a problem with 
the keyboard or the mouse.

>From what you are saying, it sounds as though the driver needs some reworking. 
> It seems as though the correct solution is to fix the driver rather than 
>install PCI cards, especially when the PCI real estate is so limited on these 
>systems.

I'll wait for more responses; if this is the issue, however, I think I'll just 
fix the driver and submit a pull request.

On 9/16/18, 6:32 AM, "Peter Kay"  wrote:

The keyboard issue on an O2 is supposedly because it uses the PS/2 command 
set 3 rather than the more widely used 2. Even in Irix the keyboard handling 
isn't perfect.

NetBSD is just as bad. I took the pragmatic approach of putting a keyboard 
faker on the PS/2 port and installing a USB PCI card, with a PS/2 to USB 
converter.

Xorg is pretty slow on the O2 as it's unaccelerated. NetBSD is a lot faster 
in X but their port is 32 bit.

Re: SGI O2 on 6.3 - Keyboard/Mouse issues

[Peter Kay]

The keyboard issue on an O2 is supposedly because it uses the PS/2 command set 
3 rather than the more widely used 2. Even in Irix the keyboard handling isn't 
perfect.

NetBSD is just as bad. I took the pragmatic approach of putting a keyboard 
faker on the PS/2 port and installing a USB PCI card, with a PS/2 to USB 
converter.

Xorg is pretty slow on the O2 as it's unaccelerated. NetBSD is a lot faster in 
X but their port is 32 bit.

SGI O2 on 6.3 - Keyboard/Mouse issues

[Hoelzer, Dave]

Good morning!

I’ve recently installed 6.3 onto an SGI o2..  Yes, the hardware is all working 
properly; it was running Irix very happily until immediately before I installed 
OpenBSD.

I’ve hunted around and can’t seem to find an explanation of these two issues:


  1.  The keyboard is wacky most of the time – whichever key you hit last, 
repeats.  So, if your username is “sam” and you type it fairly briskly and hit 
enter, you will successfully enter “sam”… and then the enter key will repeat 
until you tap some other key… If you hesitate after typing “sam”, the ‘m’ will 
repeat, etc.  Needless to say, this makes the console challenging to use.  
There was no evidence of this behavior during installation.
  2.  When starting X (startx), the mouse is unresponsive.  This lead me to 
dmesg, where I found this:  (I’ve trimmed irrelevant entries)


mkbc0 at macebus0 base 0x0032 irq 5

pckbd0 at mkbc0 (kbd slot)

wskbd0 at pckbd0: console keyboard

pms0 at mkbc0 (mouse slot)

wsmouse0 at pms0 mux 0

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

pms0: disable error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

pms0: disable error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

pms0: disable error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

pms0: disable error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

mkbc_poll_cmd: send error

pms0: disable error

This seems to explain why X doesn’t see the mouse, but gives me no insight into 
why the mouse is failing.  I did find one reference somewhere from around ’08 
that indicated a cold boot could assist with something to do with the PS2 
driver….  Cold booting makes no difference.

Any insights?

Re: Pkg_add

[Solène Rapenne]

Le 2018-09-16 03:33, Michael Ayres a écrit :

Thanks to everyone who has replied in helping me. I have read up on
the man pages and I understand what I need; it is:

1) I want to install some packages on OpenBSD 6.0 which I have
operational on a Parallels VM on my precious MacBookPro High Sierra.


are you using 6.0? If so, it's no longer supported and packages are not
available anymore.


2) I want to set a environmental variable PKG_PATH to the ftp site to
get packages.
  2.a) I am trying to set it to
https://ftp.openbsd.org/pub/OpenBSD/6.3/packages/i386/
, which has an
index of packages I might want to get. I will later put that
PKG_PATH in the start up file so it is always set each time I boot up
OpenBSD.


Are you using i386 architecture in your VM?


3) My PKG_PATH string [
https://ftp.openbsd.org/pub/OpenBSD/6.3/packages/i386/
 ] does not
seem to work. An example I refer to includes some wild cards, “%”,
which I can’t seem to get right.k The example I am working from is at:
https://linux-audit.com/updating-all-openbsd-packages-with-pkg_add/

and one example it uses is passing a variable for name and arch -s,
which I have not set.


http://man.openbsd.org/installurl

https://ftp.openbsd.org/pub/OpenBSD is a right content for the file




4) What is a correct string i should use to set my PKG_PATH variable
to get packages from location at 2a above?



use /etc/installurl instead of PKG_PATH

Re: How to make the cwm window manager reread new config

[Родин Максим]

Thank you very much, it works.
I always thought this would restart my whole session and I would loose
all my open windows.

15.09.2018 21:38, Antoine Jacoutot пишет:

On Sat, Sep 15, 2018 at 08:41:52PM +0300, Родин Максим wrote:

Hello,
May be a silly question,
how can I make the cwm window manager reread its config file
without loosing my working session?


 From cwmrc(5):
BIND FUNCTION LIST
  restart  Restart the running cwm(1).

And from cwm(1):
  cwm rereads its configuration file when it receives a hangup signal,
  SIGHUP, by executing itself with the name and arguments with which it was
  started.  This is equivalent to the restart function.



--
Maksim

Re: Deploy Django app - strategy?

[Родин Максим]

I deploy my django app using uwsgi and venv in my home dir
uWSGi starts on its default port and httpd server uses this port
to handle my app requests. Everything just like in the official manual 
of uwsgi.


26.08.2018 23:41, Chris Narkiewicz пишет:

On 26/08/2018 21:01, Paul de Weerd wrote:

Use python3 -m venv /path/to/venv to create a virtualenv using python3
and be done with it.


Yeah, it did the trick. I'm going to deplrecate use of virtualenv,
since it's no longer needed with Python 3.6.

   That will use a symlink to the actual python3

binary in /usr/local, so no issues with the lack of wxallowed on /var.
However, you'll have to deal with the chroot implications there...


I guess it's a non-starter with Django... I guess it'd be easier to
simply run it in Docker.


What webserver are you using?


It's pretty standard stack:

* postgresql on localhost
* uwsgi on localhost with http/fastcgi protocol
* httpd on egress

Best regards,
Chris



--
С уважением,
Родин Максим