e exact numbers are a bit odd, but generally speaking, yes, adding
clang has substantially increased the build time. I see about a
doubling on Xeon E3-12xx-based machines for make -j4 build.
--
Christian "naddy" Weisgerber na...@mips.inka.de
lation tools that take a -randomseed=integer argument
to ensure that the same result can be obtained on separate invocations.
--
Christian "naddy" Weisgerber na...@mips.inka.de
or everybody
until the slow architectures have built their packages, or we can
go ahead with the release and deliver the packages later as they
arrive. This time we chose the latter.
> Is there a rough guesstimate when things migt be available?
Two weeks.
--
Christian &qu
AMD%20x86%20Memory%20Encryption%20Technology%20LSS%20Slides.pdf
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2017-03-09, Jonathan Thornburg <jthorn4...@gmail.com> wrote:
> Subject: FFS parameters for SSD filesystem?
You are overthinking this. The defaults are fine.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2017-03-07, Roderick <hru...@gmail.com> wrote:
> Disk are to be readable for many decades. Standard File System
> readable after moving the Disks to another computer, different
> hardware, perhaps with different OS.
*uncontrollable laughter*
--
Christian &qu
On 2017-03-03, Eric Huiban <gro...@grompf.net> wrote:
> bioctl needs a mandatory bootable partition to act correctly even on
> disks not aimed to be bootable.
I find that very surprising.
--
Christian "naddy" Weisgerber na...@mips.inka.de
uses of SHA1; some may be harmless, some are embedded
into protocols that can't be easily changed.
> Ports distinfo made it the only default in 2007, and pkg tools moved straight
> from md5 to sha1.
^^^
to sha256
(Unfortunate typo.)
--
Christian
olume, and runs the kernel there. Presto!
--
Christian "naddy" Weisgerber na...@mips.inka.de
Apart
from the subverted boot loader you are worried about, there are
fundamental concerns about the ability of XTS encryption to defend
against such attacks. Google keywords: XTS malleability.
--
Christian "naddy" Weisgerber na...@mips.inka.de
t respecting a security feature.
>
What should the VM do instead? It allocates memory, JIT compiles
bytecode to machinecode and then executes that machinecode. Should it
mprotect the memory after generating the machinecode? It would still
execute code from memory it could write to.
Regards,
--
Christian
ially reverted a week later:
https://marc.info/?l=openbsd-cvs=147380197222029=2
| "Make disk selection dumb again", or at least make the change less
| intrusive. Default to the first available disk, skipping to the next
| (and so on), should the selected one be determined unsuitable for t
disk.
Available disks are: sd0 sd1.
Which disk is the root disk? ('?' for details) [sd1]
Checking root filesystem (fsck -fp /dev/sd1a)...OK.
...
--
Christian "naddy" Weisgerber na...@mips.inka.de
somewhere in $PATH:
Or simply:
openssl rand -base64
--
Christian "naddy" Weisgerber na...@mips.inka.de
How do you assemble a softraid volume manually?
You can detach it with bioctl -d. But how do you get it back?
Or in case it wasn't auto-assembled on boot.
--
Christian "naddy" Weisgerber na...@mips.inka.de
uce this (on amd64).
--
Christian "naddy" Weisgerber na...@mips.inka.de
Am 12/10/16 um 22:57 schrieb Peter Hessler:
> On 2016 Dec 10 (Sat) at 22:56:05 +0100 (+0100), Christian Schulte wrote:
> :$ uname -a
> :OpenBSD t60.schulte.it 6.0 1KHZ.MP#7 amd64
>
> You broke it. Please use a GENERIC kernel, and it will work as normal.
>
This is what I
Am 12/10/16 um 22:57 schrieb Peter Hessler:
> On 2016 Dec 10 (Sat) at 22:56:05 +0100 (+0100), Christian Schulte wrote:
> :$ uname -a
> :OpenBSD t60.schulte.it 6.0 1KHZ.MP#7 amd64
>
> You broke it. Please use a GENERIC kernel, and it will work as normal.
>
This is the config
Am 12/10/16 um 23:28 schrieb Karel Gardas:
> On Sat, Dec 10, 2016 at 10:56 PM, Christian Schulte <c...@schulte.it> wrote:
>> It's <https://repository.apache.org/>
>>
>> Operation timed out. Connections are very slow. Too slow so that they
>
> Not sure a
Am 12/10/16 um 21:43 schrieb Kai:
> Am 10. Dezember 2016 21:35:04 MEZ, schrieb Christian Schulte
> <c...@schulte.it>:
>> Hello,
>>
>> I am facing an issue accessing an SSL/TLS webserver from OpenBSD. I
>> have
>> another box not running OpenBSD connec
. Is there something I need to be aware of accessing SSL/TLS
(https) servers with OpenBSD? How can I capture information I can send
to the administrator of that system to help him/her find out what is
special about connections coming from OpenBSD?
Regards,
--
Christian
can browse and send this email; is this the
> expected output when using rebound?
Yes, it is.
You can use a TCP query to work around this, e.g.
$ dig +tcp www.openbsd.org
--
Christian "naddy" Weisgerber na...@mips.inka.de
hat can't
> be installed?
No, but it's not as if this was intentional. It's just an accidental
result.
--
Christian "naddy" Weisgerber na...@mips.inka.de
gt; if the package went AWOL, because it clearly had to have built for
> midori and surf to be built.
No, gstreamer1-plugins-libav is a RUN_DEPENDS. The midori and surf
packages can be _built_ without it, just not installed.
--
Christian "naddy" Weisgerber na...@mips.inka.de
n.
They will eventually resync on their own, but it takes several
minutes.
--
Christian "naddy" Weisgerber na...@mips.inka.de
Hi minek,
On 11/04/2016 04:41 PM, minek van wrote:
> Hello,
>
> # strings /dev/arandom | grep -o '[[:print:]]' | head -100 > a.txt
> # sort -R a.txt
> K
...
> 9
> # uname -mrs
> OpenBSD 6.0 amd64
> #
> # sort -R a.txt > b.txt
> # cksum b.txt
> 3374888359 200 b.txt
> # sort -R a.txt > b.txt
> #
ity:
set -A c l u; for i in o p e n b s d; do typeset -${c[RANDOM&1]} i; print -n
$i; done; print
--
Christian "naddy" Weisgerber na...@mips.inka.de
ients could use port forwarding to
bounce TCP connections off the server.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 10/18/2016 10:56 AM, Peter Janos wrote:
> sometimes I send mails in HTML format, sorry for that, mail.com has this by
> default..
>
> so the PDF also states that the "admin" user had /sbin/nologin for shell
>
> --
> http://man.openbsd.org/OpenBSD-current/man5/sshd_config.5
...
On 10/18/2016 10:41 AM, Solène Rapenne wrote:
> Le 2016-10-18 10:35, Peter Janos a écrit :
>> shouldn't the default be "no" for the AllowTcpForwarding? Why is an
>> insecure option "yes" by default?
>>
https://www.akamai.com/us/en/multimedia/documents/state-of-the-internet/sshow
On 2016-09-22, Eike Lantzsch <zp6...@gmx.net> wrote:
> PC Engines APU.2C2
> which is amd64, has far more RAM and three Gigabit-ports.
> Interfaces: Realtek 8168
Actually, the APU2C2 has Intel i211AT interfaces, em(4).
--
Christian "naddy" Weisgerber na...@mips.inka.de
> those machines in i386 mode)."
That is true but very misleading. It concerns only some rare early
CPUs. The only ones I can find in Wikipedia's lists of Intel CPUs
are the "Nocona" Xeons from 2004.
I have now removed that caveat from the page.
--
Christian "naddy" Weisgerber na...@mips.inka.de
I am loosing network connectivity since i installed 6.0-stable on my
apu1d4. Previously with 5.9-stable i haven't noticed any issues.
apu1d4 [1] has 3 nics
re0 -> wan -> direct connected to nucleus connect -> fiber
re1 -> wifi -> direct connected to access point
re2 -> lan -> connected to
ugangsnummer"
"Kennwort" kkkk
"Anschlusskennung"
"Mitbenutzernummer"
--
Christian "naddy" Weisgerber na...@mips.inka.de
I am loosing network connectivity since i installed 6.0-stable on my
apu1d4. Previously with 5.9-stable i haven't noticed any issues.
apu1d4 [1] has 3 nics
re0 -> wan -> direct connected to nucleus connect -> fiber
re1 -> wifi -> direct connected to access point
re2 -> lan -> connected to
to login again for the new group membership to be
active.
--
Christian "naddy" Weisgerber na...@mips.inka.de
; !$skip{$_} }, @ARGV;
use autodie;
opendir my $oldcwd, ".";
for (sort keys %tree) {
print "===> ", $_, "\n";
chdir $_;
system qw(/usr/bin/signify -C -p /etc/signify/openbsd-60-base.pub
-x SHA256.sig), @{$tree{$_}} and die;
chdir $o
rward
This is created by the installer when you set up a user during
installation.
--
Christian "naddy" Weisgerber na...@mips.inka.de
expected expression before '>>'
> token
CVS conflict.
--
Christian "naddy" Weisgerber na...@mips.inka.de
David Coppa:
> Can you please try the x11/motif diff below and report back?
The question isn't so much whether this fixes the xpdf problem, but
whether is breaks anything else.
--
Christian "naddy" Weisgerber na...@mips.inka.de
"STeve Andre'":
> Does anyone have archives of recent amd64 snapshot packages?
>
> I blew my aug-09 set away and I'd like libreoffice back. Anyone?
amd64 libreoffice packages are available again, starting with today's
(2016-08-23) package snapshot.
--
Christian
rts development more or less
impossible.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2016-08-19, Stuart Henderson <s...@spacehopper.org> wrote:
> The chroot support is currently optional, but you do need to create the
> user accounts if sysmerge didn't do it for you (_pbuuld, _pfetch), and
> start dpb as root.
No, running dpb as root is also optional.
--
C
the "Editing cvsweb and cvsweb.conf" section in cvsweb's
README.
I don't have a /var/www/conf/mime.types file.
--
Christian "naddy" Weisgerber na...@mips.inka.de
Maximum IP packet size: 65535
Maximum IP header size:60
ICMP header size: 8
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2016-07-20, Miles Keaton <mileskea...@gmail.com> wrote:
> So I figure if I use OpenBSD + softraid RAID 5 (across 4 disks) and then
> write my own little shell script to track the MD5 (find . -type f -exec md5
> {} \;)
Note that mtree(8) can checksum files.
--
Christian &qu
> Am 13.07.2016 um 12:48 schrieb Peter N. M. Hansteen <pe...@bsdly.net>:
>
> On Wed, Jul 13, 2016 at 12:39:14PM +0200, Christian Rner wrote:
>>> Hello, you should use virtio drivers for the disk in KVM.
>>
>> I already use virtio ;-) But there is no n
> Am 13.07.2016 um 13:07 schrieb Mike Belopuhov <m...@belopuhov.com>:
>
> On Wed, Jul 13, 2016 at 12:48 +0200, Peter N. M. Hansteen wrote:
>> On Wed, Jul 13, 2016 at 12:39:14PM +0200, Christian Rner wrote:
>>>> Hello, you should use virtio drivers for the d
> Am 13.07.2016 um 12:22 schrieb Solène <sol...@perso.pw>:
>
> Le 2016-07-13 11:48, Christian Rößner a écrit :
>> Hi,
>> I am relatively new to OpenBSD. I have installed my first virtualized KVM
>> guest and I look for a way to completely turn off the disk ele
for the gust to do disk scheduling. On Linux I used to set it
to NOOP scheduler.
I searched the archives and Google, but could not find information.
Thanks in advance
Christian
a size and power profile
similar to any dumb desktop switch, e.g.:
http://www.tp-link.us/products/details/cat-39_TL-SG3210.html
--
Christian "naddy" Weisgerber na...@mips.inka.de
rs/USB-3-to-Dual-Port-Gigabit-Ethernet-Adapter-NIC-with-USB-Port~USB32000SPT
--
Christian "naddy" Weisgerber na...@mips.inka.de
http://www.lannerinc.com/products/x86-network-appliances/x86-desktop-appliances/fw-7525
--
Christian "naddy" Weisgerber na...@mips.inka.de
about it, I frequently find myself ssh-ing to a
FreeBSD box just to call cal there... I guess I should just make a
port.
--
Christian "naddy" Weisgerber na...@mips.inka.de
to use an MFS based filesystem for small ports with dpb(1).
Active when USE_MFS is ‘Yes’. Defaults to /tmp/pobj.
... and I'm pretty sure pobj needs wxallowed.
I generally haven't used this, but it isn't far-fetched.
--
Christian "naddy" Weisgerber na...@mips.inka.de
t; VLAN 6.
> I have a similar setup. For me the problem was that the provider did not
> accept vlan packages with a prio value other than 0.
Switching from Alix with vr(4) to APU2 with em(4) should not affect
this.
--
Christian "naddy" Weisgerber na...@mips.inka.de
erface names.
> I have a fiber connection and my ISP requires a PPPoE connection over
> VLAN 6. [...] Does anyone have a similar setup working?
I do. I transplanted it from a net6501 to an APU2c4 a few weeks
ago and it just works.
(PPPoE over VLAN 7 for T-Online's Internet service.)
--
On 2016-05-09, arrowscr...@mail.com <arrowscr...@mail.com> wrote:
> - The RSA is 4096 bits. If I remember correctly, reyk@ said once
> that 4096 is overkill. Any specific reason to use 4096 instead of
> 2048?
That was then, this is now.
--
Christian &qu
On 2016-05-08, Zoran Kolic <zko...@sbb.rs> wrote:
> I see that both packages and bsd.rd are from 8th may. Someone
> might know what I have to do at the moment?
The amd64 packages haven't caught up with the API change yet. That
will take another approx. 24 hours.
--
Chri
nd hopefully run X, etc.
There aren't any.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2016-05-05, "Bryan C. Everly" <br...@bceassociates.com> wrote:
> The fastest desktop that I own is a SunBlade 2500 Silver (don't let
> the name throw you, it is a tower desktop machine).
That machine is 12 years old.
--
Christian "naddy" Weisge
bin/signify -C -p /etc/signify/openbsd-59-base.pub
-x SHA256.sig), @{$tree{$_}} and die;
chdir $oldcwd;
}
--
Christian "naddy" Weisgerber na...@mips.inka.de
alized it was just systrace fucking up.
Then there was the instance where a configure script would produce
a different result when run under systrace, causing a port to be
built differently.
--
Christian "naddy" Weisgerber na...@mips.inka.de
de 1.
Apparently zsh expects kill(zombie, 0) to succeed, but this fails
on OpenBSD.
--
Christian "naddy" Weisgerber na...@mips.inka.de
: The APU2 does not have RDRAND.
--
Christian "naddy" Weisgerber na...@mips.inka.de
Boudewijn Dijkstra:
> > A "make -j4 build" took exactly 120 minutes.
>
> Using which physical disk type(s)?
A no-name 16 GB mSATA SSD.
http://www.apu-board.de/produkte/datapower-msata.html
--
Christian "naddy" Weisgerber na...@mips.inka.de
first guess would be different shell initialization files.
--
Christian "naddy" Weisgerber na...@mips.inka.de
PS: I bought mine from NRG Systems GmbH, Augsburg, Germany, who
sell convenient board/case/PSU/SSD kits. Board and case were
already assembled.
--
Christian "naddy" Weisgerber na...@mips.inka.de
the same header header file.
Just include and link with -lcurses. The other names
are only for compatibility.
For wide curses functionality, just call the wide curses functions,
e.g. add_wch(3).
--
Christian "naddy" Weisgerber na...@mips.inka.de
Start here:
https://en.wikipedia.org/wiki/Computer_terminal
http://vt100.net/
--
Christian "naddy" Weisgerber na...@mips.inka.de
Us anyway.
--
Christian "naddy" Weisgerber na...@mips.inka.de
etburst, Pentium-M, Atom, C7 etc. which seems a sane cut-off point
> for heavy GUI apps).
Well, Peter did attempt to run it on Pentium II, which doesn't have
SSE2.
--
Christian "naddy" Weisgerber na...@mips.inka.de
o knows what's hiding there. Just looking at a random picture
on the Internet may open you up to a Langford hack.
--
Christian "naddy" Weisgerber na...@mips.inka.de
> downgrading is not supported.
True, but 5.8-current to 5.9 is not a downgrade.
--
Christian "naddy" Weisgerber na...@mips.inka.de
st
...
Possibly -D BUILD_USER doesn't work, I don't quite remember.
It took me some experimenting to arrive at a working configuration.
--
Christian "naddy" Weisgerber na...@mips.inka.de
our environment.
There will not be any significant changes in that area between now
and 5.9. If it doesn't work out for you, too bad.
--
Christian "naddy" Weisgerber na...@mips.inka.de
7 to 18:02:02, 225 seconds have
passed. The clock can be adjusted by 1.125 seconds in that time.
Which is the difference in the logged adjustment values.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2016-01-31, LÉVAI Dániel <l...@ecentrum.hu> wrote:
> BTW, is there a difference between writing 'inet6 autoconf' or 'rtsol'
> in /etc/hostname.pppoe0?
If you read /etc/netstart, you can see that "rtsol" translates to
ifconfig $if up
ifconfig $if inet6 autoconf
ntel_attach },
So this means that switching to non-RAID mode in the Vaio BIOS does
not change the PCI ID as it generally does?
--
Christian "naddy" Weisgerber na...@mips.inka.de
s
causes you to bump against the data size limit (ulimit -d, see
ksh(1)).
You need to raise the limit or use a less greedy compression setting.
--
Christian "naddy" Weisgerber na...@mips.inka.de
e that, the -T option was silently ignored. However that
change was ten months ago and is already in the 5.8 packages.
Anyway, there is nothing wrong, and as I said before:
You need to raise the limit or use a less greedy compression setting.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2016-01-24, "Christoph R. Murauer" <n...@nawi.is> wrote:
> Quotes taked from Christian Weisgerber :
>
>> It's the comparatively popular platforms like powerpc and sparc64
>> that are in dire need of help if OpenBSD is not to turn into an
>> amd64-only pl
o recent snapshots have been built.
--
Christian "naddy" Weisgerber na...@mips.inka.de
n
amd64-only platform.
I obviously can't tell people how to waste their time, but while
investing in moribund museum architectures may offer personal
satisfaction to some, it does not help in the bigger picture.
--
Christian "naddy" Weisgerber na...@mips.inka.de
er_ tcpdump has seen the packet.
(I can't comment on your overall problem.)
--
Christian "naddy" Weisgerber na...@mips.inka.de
on the outside. Uh-oh.
I deleted the inet configuration from vio0 and started the installer.
I got as far as the network configuration, when the guest kernel
died with an UVM error--and my patience along with it.
So, yeah, interesting but not useful yet.
--
Christian "naddy"
On 2016-01-20, Christian Weisgerber <na...@mips.inka.de> wrote:
> So, yeah, interesting but not useful yet.
That came across all wrong.
I already sent some words in private, but I would like to publicly
apologize to Mike, too. What I wrote was dismissive of his work
in a way that was
On 2016-01-10, Christian Weisgerber <na...@mips.inka.de> wrote:
>>> I noticed issue with mg scroll-up keybinding when "xterm*locale: true" is
>>> set in
>>> ~/.Xresources.
>>> When the above option is set, mg requires that you type C-v C-v
On 2016-01-10, Denis Fondras <open...@ledeuns.net> wrote:
> Can anyone tell me how to disable CSUM_TCPv4 on em(4) please ?
There is no way to configure this. You would have to patch the
driver.
But why would you want to do this in the first place?
--
Christian "nad
On 2015-12-27, Christian Weisgerber <na...@mips.inka.de> wrote:
>> I noticed issue with mg scroll-up keybinding when "xterm*locale: true" is
>> set in
>> ~/.Xresources.
>> When the above option is set, mg requires that you type C-v C-v to scroll-u
-v. I'm not sure if this is bug or feature.
That would be a bug, but I can't reproduce this.
--
Christian "naddy" Weisgerber na...@mips.inka.de
On 2015-12-27, Tati Chevron <chev...@swabsit.com> wrote:
> ^V is traditionally used on UNIX like systems to 'insert the next character
> literally',
Only if the IEXTEN flag is set on the tty. Which should obviously
not be the case (and in fact isn't) when mg is running.
--
Chri
, that's vague. Start with Daniel's report for details. I
haven't gotten around to really looking at what happens.)
--
Christian "naddy" Weisgerber na...@mips.inka.de
ncrease dpb's parallel property (-p flag)
to ncpu, from its default of ncpu/2, so you won't see half the cores
idling while the build blocks on something like gcc/4.9 or llvm.
Anyway, as I said above, don't overthink it. Do an initial build
with modest resources, see how it goes.
-
mdisk,
> and do the entire build without touching the disk.
Have you done actual comparisons? With SSDs, I don't expect a
significant difference. (There is none for doing a "make build"
of the base system.)
--
Christian "naddy" Weisgerber na...@mips.inka.de
en there's little point when we still have
so much unansified code anyway.
Also, as useful as -aux-info is, it requires actual compiling, so
it won't help with MD code for other architectures or drivers that
aren't configured in the kernel.
--
Christian "naddy" Weisgerber
in the first place.
--
Christian "naddy" Weisgerber na...@mips.inka.de
We would like to remove IPsec support for plain DES. (_Not_ 3DES.)
Does anybody still use this?
What could it possibly be required for?
Note that DES provides no security against a determined attacker.
It can be brute-forced in less than a day.
--
Christian "naddy"
On 2015-11-05, Tati Chevron <chev...@swabsit.com> wrote:
> Or to be more general - what is the best way to manage a local
> copy of the distfiles archive?
dpb -F2; clean-old-distfiles
--
Christian "naddy" Weisgerber na...@mips.inka.de
TAILQ_INSERT_TAIL(>ntp_peers, p, entry);
+ TAILQ_INSERT_TAIL(>ntp_peers, p, entry);
free($2->name);
free($2);
}
--
Christian "naddy" Weisgerber na...@mips.inka.de
201 - 300 of 1018 matches
Mail list logo