Re: DHCP in vmm guest

2017-05-04 Thread Jiri B
> I'm new to OpenBSD and I'm trying a simple setup where a VMM guest has > access to the network via tap and bridge. The host uses a wired connection > and gets its network address with DHCP. where is dhcpd running? on the host? have you tried tcpdump to see if dhcp discover traffic is visible the

Re: DHCP in vmm guest

2017-05-04 Thread Jiri B
On Thu, May 04, 2017 at 03:49:27PM +0200, Reyk Floeter wrote: > So you have the VM interface and the host interface on a bridge: > dhclient on the host "steals" all DHCP packets via BPF. > > Try to pkill dhclient on the host and the VM should be able to get DHCP. > > There is currently no solutio

Re: Why would I need a container like Docker?!

2017-05-10 Thread Jiri B
On Wed, May 10, 2017 at 05:53:07AM +0200, Martin Hanson wrote: > [... pathetic screaming ...] Pathetic screaming doesn't help to anything. And... there already has been an interest in zones/containers in OpenBSD, see https://marc.info/?l=openbsd-tech&m=144617514431852&w=2 j.

Re: Qubes-OS is "fake" security

2017-05-13 Thread Jiri B
On Fri, May 12, 2017 at 03:41:05AM +0200, Kim Blackwood wrote: > [...] > Qubes-OS seems to me as a solution of "patching". IMO this is real point in this thread - virtualization as a security meansure against buggy software doesn't make any change to that software. Virtualization or containers are

Re: sftp chroot

2017-06-14 Thread Jiri B
On Wed, Jun 14, 2017 at 01:09:47PM +0200, Solne Rapenne wrote: > Je 2017-06-14 13:02, Bryan Harris skribis: > >On Linux I have mounted another fs inside the user's home folder (it is > >mounted twice). I don't know if OpenBSD has that feature. > > > > This is not possible on OpenBSD, mount will t

Re: Feeding DHCP leases into unbound

2017-06-22 Thread Jiri B
On Thu, Jun 22, 2017 at 11:47:03AM +0200, Andreas Kusalananda Khri wrote: > > I have unbound(8) and dhcpd(8) running on a router (OpenBSD 6.1-stable). > dhcpd currently hands out fixed addresses to my clients, but I'd like > these to be allocated dynamically from the common pool, while at the > sa

Re: Filtering other network layer protocols with PF

2017-09-11 Thread Jiri B
On Mon, Sep 11, 2017 at 10:26:22AM -0500, Christopher Snell wrote: > Hi, > > I have an AT&T fiber connection at home that relies on a crappy, > proprietary, and insecure [1] router that does proprietary authentication > with upstream equipment via EAP over 802.1x. Some folks have figured out > ho

Re: reordering libraries:/etc/rc[443]: ./test-ld.so: Permission denied

2017-09-26 Thread Jiri B
On Mon, Sep 25, 2017 at 07:31:15PM -0700, Philip Guenther wrote: > If you're mounting /tmp with the noexec flag, then stop doing that. What? IIUC this is long existing recommendation. If /etc/rc needs exec /tmp that it should change it by itself for libs reordering and then switch back to what an

vmm issues - vioblk_notifyq: unsupported command 0x8

2017-10-02 Thread Jiri B
Hello, I'm playing with vmm and I got these in daemon log: Oct 2 20:12:14 t440s vmd[13344]: startup Oct 2 20:12:14 t440s vmd[53680]: SIOCBRDGADD: No such file or directory Oct 2 20:12:24 t440s vmd[13344]: suse01: started vm 1 successfully, tty /dev/ttyp3 Oct 2 20:13:12 t440s vmd[98531]: vcpu

Re: vmm issues - vioblk_notifyq: unsupported command 0x8

2017-10-02 Thread Jiri B
On Mon, Oct 02, 2017 at 02:56:18PM -0400, Josh Grosse wrote: > Hey Jiri. > > >I started this vm with: > > > >vmctl start suse01 -c -d $iso -d $disk -L > > > >where iso is openSUSE-Leap-42.3-DVD-x86_64.iso[1]. > > > >Any idea what's going on? > > I'll bet it's because you are attempting to boot a

Re: vmm issues - vioblk_notifyq: unsupported command 0x8

2017-10-03 Thread Jiri B
> > I was able to boot opensuse from that dvd, although later on I got an > > error in the installer :/ > > This was because the installer couldn't locate the "dvd", correct? It so seems so. ~~~ Unable to create repository from URL 'hd:/?device=/dev/disk/by-id/virtio-_U_2_-part2'. Detai

can't use external monitor after plugging to docking station

2017-10-03 Thread Jiri B
Hi, I have Lenovo T440s and Lenovo docking station with an external monitor. If I have running OpenBSD without docking station and then I plug it to it, I can't see the external monitor. I see only these in dmesg after plugging laptop into it: uhub2 at uhub0 port 12 configuration 1 interface 0

Re: can't use external monitor after plugging to docking station

2017-10-04 Thread Jiri B
:29AM -0400, Jiri B wrote: > Hi, > > I have Lenovo T440s and Lenovo docking station with an external monitor. > > If I have running OpenBSD without docking station and then I plug it to > it, I can't see the external monitor. > > I see only these in dmesg after plug

Re: Is there git-flow-completion for ksh?

2017-10-09 Thread Jiri B
> If you love bash and its features, then it is better to use bash than to > try that ksh will be like bash :-/ I hate when BASH completion hides files for me based on context, eg. tar -tvf /dir/dir/file_without_good_suffix won't work. j.

Re: Flask app as UWSGI returning 500 when accessed through OpenBSD HTTPD

2017-10-18 Thread Jiri B
On Wed, Oct 18, 2017 at 01:40:06PM +0530, Ajitabh Pandey wrote: > Thanks for the quick response. I tried that, still getting 500 the same > problem - > > $ doas uwsgi --socket /var/www/run/hello.sock --wsgi-file myproject.py > --master --callable app > > In /etc/httpd.conf - > > location "/hel

Re: Flask app as UWSGI returning 500 when accessed through OpenBSD HTTPD

2017-10-18 Thread Jiri B
On Wed, Oct 18, 2017 at 06:55:32PM +0530, Ajitabh Pandey wrote: > On Wed, Oct 18, 2017 at 1:43 PM, Jiri B wrote: > > > On Wed, Oct 18, 2017 at 01:40:06PM +0530, Ajitabh Pandey wrote: > > > > Can httpd access the socket? What are permissions? > > > > j. > &g

Re: Wake-on-LAN from suspended state

2018-04-24 Thread Jiri B
On Tue, Apr 24, 2018 at 10:11:44PM +0200, Paul de Weerd wrote: > [...] > em0 at pci0 dev 25 function 0 "Intel I217-LM" rev 0x04: msi, address > b8:ca:3a:93:03:e8 IIUC em does not support WOL. Am I right? Jiri

serial for softraid devices

2018-09-04 Thread Jiri B .
Hi, I have couple of softraid devices available in a box and when I do upgrade I always have to check and not to make mistake which softraid device I want to use as root disk. If OpenBSD would have serial for softraid device I would just need to remember the serial for my root disk. This is simi

httpd not logging tls handshake failed if 'tls client ca ' used

2019-08-10 Thread Jiri B
Hi, I was playing with CloudFlare Authenticated Origin Pulls, ie. httpd configured with 'client ca "/etc/ssl/cloudflare_origin_pull.crt"' (ie. to allow only tls request from specific tls client) and I see httpd is not logging anything by default into either access.log or error.log. (But the featur

sysupgrade script diff for people with small /home

2019-08-12 Thread Jiri B
Hi, see $subj, some people have so small /home and currently sysupgrade doesn't like symlink to bigger partition. (I know that bad symlink can make it explode.) --- /usr/sbin/sysupgrade.orig Mon Aug 12 19:07:11 2019 +++ /usr/sbin/sysupgradeMon Aug 12 18:51:28 2019 @@ -119,6 +119,7 @@ el

openrsync and rrsync - strange error on symlinks

2019-08-15 Thread Jiri B
Hi, I use rrsync[1] wrapper in SSH key via `command=` option to restrict mode and path of called rsync program. I discovered some strange difference related to symlinks between rsync and openrsync when called via rrsync wrapper. openrsync errors with: /usr/src/usr.bin/rsync/symlinks.c:48: error:

Re: sending mail from wordpress

2020-01-02 Thread Jiri B
https://wordpress.org/plugins/post-smtp/ j. On Thu, Jan 2, 2020 at 1:44 PM Stuart Henderson wrote: > On 2020-01-02, Edgar Pettijohn wrote: > > I'm having trouble getting mail to go through wordpress. > > Confogure it to send by SMTP instead. (I don't use wordpress and can't > help tell you exa

Re: cu with XMODEM won't transfer file

2015-10-05 Thread Jiri B
> Index: command.c > === > RCS file: /cvs/src/usr.bin/cu/command.c,v > retrieving revision 1.14 > diff -u -p -r1.14 command.c > --- command.c 5 Oct 2015 17:53:56 - 1.14 > +++ command.c 5 Oct 2015 17:56:14 - > @@ -51,6 +51

Re: cu with XMODEM won't transfer file

2015-10-05 Thread Jiri B
On Mon, Oct 05, 2015 at 07:34:59PM +0100, Nicholas Marriott wrote: > Do you have the other side waiting for the file? You should be able to > use lrx from lrzsz. Thanks, I thought it won't work just without a help on remote host :) It works now. - previous `cu' # lrz -v -b -X /tmp/fstab lrz: r

Re: cu with XMODEM won't transfer file

2015-10-05 Thread Jiri B
On Mon, Oct 05, 2015 at 05:15:28PM -0400, Jiri B wrote: > It works now. Unfortunatelly I can't transfer bigger files: --->%--- $ ./cu -d -l /dev/cuaU0 -115200 Connected to /dev/cuaU0 (speed 115200) # lrz -v -b -X /tmp/bsd lrz: ready to receive /tmp/bsd Local file? /b

Re: dd if=/dev/zero of=/dev/mykeydisk; bioctl -k /dev/mykeydisk ... = will use 0x00 as key, or will generate a secure key?

2015-10-06 Thread Jiri B
On Tue, Oct 06, 2015 at 07:17:19PM +0800, Mikael wrote: > You > > 1) Fill your keydisk with zeroes and > > 2) Apply "bioctl -k" on it. ^^^ this is not exact cmd arg, is it? j.

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Jiri B
On Sat, Oct 10, 2015 at 03:35:02PM -0700, Joel Wir�?mu Pauling wrote: > You could try using Linux Binary emulation layer to connect using the cisco > vpnc client. For the old proprietary Cisco IPSec implementation: > > http://www.openbsd.org/papers/slack2k11-on_compat_linux.pdf > > I've recently

Re: Your opinion about using rdomain or mpath

2015-10-14 Thread Jiri B
On Wed, Oct 14, 2015 at 12:28:21PM +, C.L. Martinez wrote: > Hi all, > > I am using an OpenBSD vm to act as a firewall for my laptop and as openVPN > client to connect to several openvpn/ipsec servers. > > Sometimes I need to stay connected to two or more openvpn/ipsec gateways. > And at th

Re: Your opinion about using rdomain or mpath

2015-10-14 Thread Jiri B
On Wed, Oct 14, 2015 at 11:57:24AM -0300, Giancarlo Razzolini wrote: > Em 14-10-2015 11:33, C.L. Martinez escreveu: > [...] > through your VPN. In this case, you don't need neither rdomain nor > mpath. Properly crafted route-to rules in your pf.conf should do the > trick. You can even use anchors a

Re: Networking Menu option during boot

2015-11-04 Thread Jiri B
On Wed, Nov 04, 2015 at 07:08:54AM -0800, J. Scott Heppler wrote: > [...] > The bsd.rd install option already pauses the kernel and displays a > network configuration script. Would it be possible to provide a > similiar option in OpenBSD? bsd.rd doesn't pause the kernel, installer is called from

Re: LC_COLLATE

2015-11-08 Thread Jiri B
> So OpenBSD is not recommended for practical use or a postgresql database > server. > No wonder that most professional users switch to linux. > > No harm meant! You are retard, go away and don't return then. j.

cron log in /var/log

2015-11-11 Thread Jiri B
As cron got a quite interested recently, isn't right time to move its log to /var/log? Or does having /var/cron/log have any specific reason? j.

Re: cron log in /var/log

2015-11-11 Thread Jiri B
On Wed, Nov 11, 2015 at 10:47:00AM -0700, Todd C. Miller wrote: > On Wed, 11 Nov 2015 12:29:30 -0500, Jiri B wrote: > > > As cron got a quite interested recently, isn't > > right time to move its log to /var/log? > > Or does having /var/cron/log have any specific

Re: TLS intercepting proxy [MitM]

2015-11-24 Thread Jiri B
On Tue, Nov 24, 2015 at 02:17:41PM +0100, Lampshade wrote: > I want to intercept and alter traffic on the same box that I run Firefox. > Is this possible using pf and relayd or I must use something else? IIRC this is not possible. j.

Re: TLS intercepting proxy [MitM]

2015-11-24 Thread Jiri B
> With a little bit pf-magic this works like this: > pass out log on $ext_if proto tcp to any port 443 route-to lo0 > pass out log on > $ext_if proto tcp to any port 443 user _relayd > pass in log on lo0 proto tcp to > any port 443 divert-to 127.0.0.1 port 8443 Have you actually tested this? The t

Re: OpenBSD as a pentester PC?

2015-11-26 Thread Jiri B
On Thu, Nov 26, 2015 at 12:53:47PM +0330, Mohammad BadieZadegan wrote: > Hi every OpenBSD user, > I have OpenBSD on my Notebook since 2 years ago and I don't want to switch > other OS for my business pentest project. > I need some pentest tools for my project like metasploit, fuzzers, ..etc > but I

Re: which in /dev/* for tethering to android?

2015-11-28 Thread Jiri B
On Sat, Nov 28, 2015 at 03:07:15PM -0700, luke...@onemodel.org wrote: > I'd like to get an internet connection via my android phone (on > tmobile). After connecting the phone via usb and turning on its > tethering option, I see the usb info in dmesg, but when I try to run > the pppd chat script it

Re: Is it possible to use pledge(2) to make something similar to firejail?

2015-11-29 Thread Jiri B
On Sun, Nov 29, 2015 at 01:15:24PM +0100, Lampshade wrote: > Is it possible, in theory, to use pledge(2) to make something similar to > firejail? > https://packages.debian.org/sid/main/firejail > Firejail is a Gnu/Linux's program which executes Firefox as it's descendant > with reduced privilages.

hotplug - blacklisting/whitelisting devices

2015-12-02 Thread Jiri B
As "hotplug pseudo-device passes device attachment and detachment events", does it mean it is too late to blacklist/whitelist hotplug devices? I was checking https://github.com/dkopecek/usbguard and I got curious if blacklisting/whitelisting of removable usb devices could be done in hotplugd. j.

Re: OpenBSD + pf + DPI

2015-12-02 Thread Jiri B
On Wed, Dec 02, 2015 at 01:35:10PM +0100, Patrik Lundin wrote: > On Wed, Dec 02, 2015 at 12:45:26PM +0100, Alessandro Baggi wrote: > > Hi list, > > I don't know how to start to make Deep Packet Inspection. My interest is > > OpenBSD and pf related. > > > > Anyone has already used on OpenBSD? It is

Re: kerberos

2015-12-09 Thread Jiri B
On Wed, Dec 09, 2015 at 11:13:40AM -0200, Friedrich Locke wrote: > What is/are the alternative(ies) for kerberos on openbsd ? (Since is was > removed from the distribution). I use kerberos from ports every day with FF. Unfortunatelly other apps from ports don't have krb flavor so you either have t

Re: authentication infra structure

2015-12-09 Thread Jiri B
On Wed, Dec 09, 2015 at 01:21:19PM -0700, Devin Reade wrote: > --On Wednesday, December 09, 2015 05:25:14 PM -0200 Friedrich Locke > wrote: > > > If you had about 10k users and 5k machine how would you manage > > authenticating issues? Keep in mind that this is a very heterogenous > > environment

Re: Help

2015-12-14 Thread Jiri B
On Sun, Dec 13, 2015 at 09:27:07PM +0800, Siu Man wrote: > I need > ftp://ftp.openbsd.org/pub/OpenBSD/distfiles//suhosin-patch-5.2.10-0.9.7-openb > sd.patch.gz > > suhosin-patch-5.2.10-0.9.7-openbsd.patch.gz > > I have very old computer need OpenBSD 4.6 i386. I try to build PHP for apache2 > but

Re: Connect to OpenVPN from OpenBSD

2016-01-02 Thread Jiri B
On Sat, Jan 02, 2016 at 08:55:35PM +0500, ? ??? wrote: > Is it possible to connect to OpenVPN (riseup.net) from OpenBSD without > installing openvpn client to OpenBSD? No, you need OpenVPN package as it uses its own homemade SSL-VPN protocol. > I don't understand all this vpn-technologies ver

Re: Autoinstall via netboot over VLAN interface

2016-01-04 Thread Jiri B
On Mon, Jan 04, 2016 at 09:35:04AM -0700, Darren S. wrote: > I have a router on the end of a 802.1q trunk port that I'd like to > netboot for install, but this is only possible if I can PXE boot using > the correct VLAN to reach the PXE server. Some PXE boot ROMs support > this (mine does not curre

Re: sudo and globbing

2016-01-07 Thread Jiri B
On Thu, Jan 07, 2016 at 11:43:14AM -0500, Jiri B wrote: > I discovered an article about sudo and globbing[1] and > there's difference how it does work on Linux and OpenBSD. I forgot to put the url http://zurlinux.com/?p=2244 > - openbsd > > # su -s /usr/local/bin/bas

Re: sudo and globbing

2016-01-08 Thread Jiri B
On Fri, Jan 08, 2016 at 12:04:15PM +0200, Alexey Kurinnij wrote: > And what about difference? Explain please. > > > > I discovered an article about sudo and globbing[1] and > > > there's difference how it does work on Linux and OpenBSD. > > > > http://zurlinux.com/?p=2244 > > > > > - openbsd > > >

caveats about 'nameserver 127.0.0.1' in faq/pf/example1.html

2016-01-11 Thread Jiri B
~~~ # echo 'nameserver 127.0.0.1' > /etc/resolv.conf # echo 'supersede domain-name-servers 127.0.0.1;' >> /etc/dhclient.conf ~~~ There could be little surprise for uninformed users who would put 'nameserver 127.0.0.1' into /etc/resolv.conf - their network upgrade if using static IPs won't work as

can't run multiple instances of httpd, flags not visible in processes

2016-01-27 Thread Jiri B
Hi, I can't run multiple instances of httpd via rc.d as I can't distinguish between httpd instances. ps aux never show flags passed to httpd. Could httpd be extended to show flags like sshd does it? root 15681 0.0 0.1 1196 2308 ?? Ssp 12:08PM0:00.05 httpd: parent (httpd) vs roo

rc.d and rtable

2016-01-27 Thread Jiri B
Would it be worth to extend rc.d for rtable knobs? - daemon_rtable varible - rc_* functions (route exec, pgrep/pkill -T $rtable...) Or are routing tables not much used thus not worth to make rc.d more complicated? j.

Re: rc.d and rtable

2016-01-27 Thread Jiri B
On Wed, Jan 27, 2016 at 01:40:14PM +0100, Antoine Jacoutot wrote: > On Wed, Jan 27, 2016 at 06:47:57AM -0500, Jiri B wrote: > > Would it be worth to extend rc.d for rtable knobs? > > > > - daemon_rtable varible > > - rc_* functions (route exec, pgrep/pkill -T $rtable.

Re: rc.d and rtable

2016-01-27 Thread Jiri B
On Wed, Jan 27, 2016 at 09:30:27PM +0100, Claudio Jeker wrote: > On Wed, Jan 27, 2016 at 12:58:48PM -0500, Jiri B wrote: > > On Wed, Jan 27, 2016 at 01:40:14PM +0100, Antoine Jacoutot wrote: > > > On Wed, Jan 27, 2016 at 06:47:57AM -0500, Jiri B wrote: > > > > Would

Re: rc.d and rtable

2016-01-28 Thread Jiri B
On Thu, Jan 28, 2016 at 11:27:40AM +0300, Vadim Zhukov wrote: > [...] > The code looks like more or less fine (I'll do a more careful review a bit > later), but there are documentation bits missing. That was a POC, anyway I'm not very familiar with mandoc :/ j.

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-28 Thread Jiri B
On Thu, Jan 28, 2016 at 09:49:32AM +0100, Alexandre Ratchov wrote: > $ ps ax |grep sndiod > 14501 ?? Ssp 0:00.00 sndiod: helper (sndiod) ^^ excuse my ignorance but what's purpose of repeating daemon name in brackets? j.

Re: No more proxy on ftp(1)?

2016-02-01 Thread Jiri B
On Mon, Feb 01, 2016 at 04:33:00AM +0100, arrowscr...@mail.com wrote: > Thank you for your help Stuart. I'll just use curl for now. Actually use > torsocks seems a bad practice for any situation, I should just set a > transparent proxy (but the pf.conf from torproject.org does not work, I'll > n

Re: php-fpm package missing in snapshot

2016-02-11 Thread Jiri B
On Thu, Feb 11, 2016 at 09:52:52AM +0100, Alex Greif wrote: > Hi, > > few days ago I realized that the php-fpm packages are not in the ftp > mirrors (in snapshot/packages). The packages are missing for amd64 > and also i386. > > I searched in the web, but cannot find a reason for its absence. >

[UPDATE] www/faq/current.html

2016-02-11 Thread Jiri B
Asked on misc@ thus updating current.html: j. ~~~ Index: current.html === RCS file: /cvs/www/faq/current.html,v retrieving revision 1.648 diff -u -p -r1.648 current.html --- current.html11 Jan 2016 04:37:13 - 1.648 +

Re: how to mount a *dmg in -current

2016-02-12 Thread Jiri B
On Fri, Feb 12, 2016 at 12:43:18PM -0600, Andrew wrote: > sh> file tws-stable-standalone-macosx-x64.dmg > > tws-stable-standalone-macosx-x64.dmg: Macintosh HFS Extended version 4 > data last mounted by: '10.0', created: Tue Feb 2 16:12:22 2016, last > modified: Tue Feb 2 22:12:22 20to 16, last b

Setting setenv=DISPLAY=:1 in login.conf problem

2016-02-13 Thread Jiri B
Setting DISPLAY=:1 as setenv in /etc/login.conf selenium:\ :setenv=DISPLAY=:1:\ :tc=daemon: is a problem as colon is a separator and thus value is lost. Escaping or quoting did not work too. I put in my selenium rc script `env' to get environment vars and DISPLAY is unset: ... +

Re: Setting setenv=DISPLAY=:1 in login.conf problem

2016-02-13 Thread Jiri B
On Sat, Feb 13, 2016 at 04:28:48PM -0800, Philip Guenther wrote: > On Sat, Feb 13, 2016 at 3:54 PM, Jiri B wrote: > > Setting DISPLAY=:1 as setenv in /etc/login.conf > > > > selenium:\ > > :setenv=DISPLAY=:1:\ > > :tc=daemon: > > > >

Re: startx vs xdm

2016-02-16 Thread Jiri B
XDM fires up /etc/X11/xdm/Xsession, easy to read. One can even customize XDM and all other things in /etc/X11/xdm/xdm-config. It should be `xrdb -load $file'. j.

Re: general xdg-open configuration

2016-02-18 Thread Jiri B
On Thu, Feb 18, 2016 at 04:15:50PM +, Mike Burns wrote: > On 2016-02-18 17.11.03 +0100, Rudolf Sykora wrote: > > I appear to need to modify the default application used > > by xdg-open to open a file directory. The man page of xdg-open > > is not very helpful. Can anybody tell me what is the ri

Re: Odd problem with interfaces

2017-11-29 Thread Jiri B
On Wed, Nov 29, 2017 at 09:56:38AM -0500, Rupert Gallagher wrote: > I ran out of ideas on the following problem. > > An obsd server has tree ethernet interfaces, each with its own IP address: > > cat /etc/hostname.* > inet 192.168.1.2 255.255.255.0 192.168.1.255 mtu 9014 description "em0: > MODEM

Re: sftp-server

2017-12-01 Thread Jiri B
On Thu, Nov 30, 2017 at 05:36:57PM -0600, Edgar Pettijohn wrote: > I was looking into how best to secure a sftp-server. The manual > mentions a -Q option to query protocol features supported. I added the > following line to sshd_config. > > Subsystem sftp/usr/libexec/sftp-server sftp -

Re: Need an advice about DHCP IPv6 server software

2017-12-06 Thread Jiri B
On Wed, Dec 06, 2017 at 09:28:40PM +0900, Claus Lensbl wrote: > If you need a DHCP server, you need rtadvd to hand off the requests to > the DHCP server in any case. Last time, which is some time ago, the > DHCP server distributed with OpenBSD wasn't capable of working with > IPv6, so you'll need t

Re: USB Firewall

2018-01-17 Thread Jiri B
On Tue, Jan 16, 2018 at 07:03:58PM +0100, Stephane HUC "PengouinBSD" wrote: > Perhaps, using hotplugd and file /etc/hotplug/attach? > > Le 01/16/18 à 18:39, Charlie Eddy a écrit : > > Hello, > > > > Is there a method to detect and halt additional USB devices being added > > after initializing con

syslogd loghost only - without unix socket & /dev/klog

2018-02-08 Thread Jiri B
Hi, I was speculating about another instance of syslogd, just as a log host services while having base syslogd running on same box. 1. -p /dev/null deletes /dev/null and replaces it with socket file with same name crw-rw-rw- 1 root wheel2, 2 Feb 8 13:25 /dev/null # syslogd -d -F -f

supermicro x8sil-f - only one fan detected after replug on the board

2018-02-09 Thread Jiri B
Hi, I have supermicro x8sil-f (latest bios/ipmi fw) with 2 fans and it has started to beep after a while when OS is up while it detected non-existing fans either run at 0 RPM or in -2560 RPM. OpenBSD itself used to detect both fans (though lm1.fanX numbers were different to numbering from motherb

Re: supermicro x8sil-f - only one fan detected after replug on the board

2018-02-10 Thread Jiri B
On Fri, Feb 09, 2018 at 05:12:11PM +0200, Atanas Vladimirov wrote: > On 2018-02-09 14:45, Jiri B wrote: > >Hi, > > > >I have supermicro x8sil-f (latest bios/ipmi fw) with 2 fans and it has > >started > >to beep after a while when OS is up while it detected non-ex

Re: supermicro x8sil-f - only one fan detected after replug on the board

2018-02-10 Thread Jiri B
On Sat, Feb 10, 2018 at 04:23:41AM +0200, li...@wrant.com wrote: > > I have supermicro x8sil-f (latest bios/ipmi fw) with 2 fans and it has > > started > > to beep after a while when OS is up while it detected non-existing fans > > either > > run at 0 RPM or in -2560 RPM. > > Does a manual resta

tor inside vmm, horribly slow?!

2018-02-11 Thread Jiri B
Hi, has anybody tried to run tor inside vmm guest? it's horrible slow, just doing 'tor-resolve $dnsname' takes sometimes ages. # dmesg | head -n 4 OpenBSD 6.2-current (GENERIC.MP) #0: Sat Feb 10 00:05:49 MST 2018 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real m

Re: tor inside vmm, horribly slow?!

2018-02-12 Thread Jiri B
On Sun, Feb 11, 2018 at 04:47:02PM -0800, Mike Larkin wrote: > > has anybody tried to run tor inside vmm guest? > > > > it's horrible slow, just doing 'tor-resolve $dnsname' takes > > sometimes ages. > > [...] > > is it related to vmm ssl issue reported in the past? > > no > > > [...] > This rep

Re: tor inside vmm, horribly slow?!

2018-02-12 Thread Jiri B
On Mon, Feb 12, 2018 at 12:38:00AM -0800, Mike Larkin wrote: > > > > it's horrible slow, just doing 'tor-resolve $dnsname' takes > > > > sometimes ages. > > > > [...] > [...] > > What did the guest pick for timecounter? (sysctl kern.timecounter.hardware) > > Your hardware is nearly a decade old. I

cannot destroy loXX belonging to rdomain XX ?

2018-02-14 Thread Jiri B
How to "remove" loXX belong to rdomain XX ? # ifconfig vether55 rdomain 55 # ifconfig vether55

feature - native softraid-crypto for VMM virtio disk

2018-02-15 Thread Jiri B
Hi, one cannot boot vmm-bios if not having newer hw than Westmere CPU. And booting host kernel for a VM which has FDE does not work, that's clear. What about a feature to support somehow softraid-crypto (or similar) for vmctl create? A variation for native LUKS support in QEMU: qemu ... -objec

getting data from qcow2 images on OpenBSD

2018-02-15 Thread Jiri B
Hi, qemu-nbd[1] is a way to "attach" qcow2 image to a nbd[2] device, but we don't have nbd yet. Though Patrick made it working for Bitrig[3]. Would it be usable in OpenBSD? If qemu-nbd is not an option, what are other ways to get data from various qemu-supported images (if not running qemu itself

VMM VM - 'dummy' based driver-based X11 server inside, not possible?

2018-02-15 Thread Jiri B
Is it possible to run 'dummy' based X11 (should be better that Xvfb)[1] inside VMM VM? $ Xorg -noreset +extension GLX +extension RANDR +extension RENDER -logfile ./10.log -config ./xorg.conf :10 (EE) Fatal server error: (EE) xf86OpenConsole: No console driver found Supported drivers: wsco

Re: VMM VM - 'dummy' based driver-based X11 server inside, not possible?

2018-02-15 Thread Jiri B
On Thu, Feb 15, 2018 at 04:18:33PM -0800, Mike Larkin wrote: > On Thu, Feb 15, 2018 at 07:10:26PM -0500, Jiri B wrote: > > Is it possible to run 'dummy' based X11 (should be better that Xvfb)[1] > > inside > > VMM VM? > > > > what are you trying

Re: VMM VM - 'dummy' based driver-based X11 server inside, not possible?

2018-02-16 Thread Jiri B
On Thu, Feb 15, 2018 at 06:48:53PM -0800, Mike Larkin wrote: > > > what are you trying to accomplish? > > > > A persistent remote display session, ie. xenodm->wm or users one accessible > > via VNC with x11vnc. > > > I found a solution to do this with about 1 minute of google searching. What > ar

Re: VMM VM - 'dummy' based driver-based X11 server inside, not possible?

2018-02-16 Thread Jiri B
On Fri, Feb 16, 2018 at 12:19:44AM -0800, Mike Larkin wrote: > Xvfb + x11vnc worked fine in the test I just did. Yes, it does, thanks for confirmation. I was curious why X11 'dummy' mode does not if it should be used in environments without graphical card for headless X11 server. Maybe it does n

Re: VMM VM - 'dummy' based driver-based X11 server inside, not possible?

2018-02-16 Thread Jiri B
On Fri, Feb 16, 2018 at 09:42:25PM +0200, Dumitru Mi?u Moldovan wrote: > On 02/16/18 10:14, Jiri B wrote: > > […] > > > I'll try to clarify my use case further. I'd like to attach of a persistent > > remote display session in screen/tmux-like manner. > >

vmctl status - output order

2018-02-17 Thread Jiri B
I can't read C but how do you sort vmctl status output? host1# vmctl status ID PID VCPUS MAXMEM CURMEM TTYOWNER NAME 6 99046 12.0G698M ttyp4jirib build1 1 93692 12.0G917M ttyp7jirib jirib1 7 - 1512M -

make release-sets - question

2018-02-18 Thread Jiri B
Hello, I try to understand why 'release-sets' does copy kernel.tgz from DESTDIR into OS /usr? Could anybody explain the logic behind? Thank you. build1$ sed -n '/^release-sets:$/,/^$/p' /usr/src/etc/Makefile release-sets: su ${BUILDUSER} -c 'exec ${MAKE} distribution' su ${

booting fedora 27 under vmm is somehow possible

2018-02-19 Thread Jiri B
Hi, there are maybe some collegues at my work who maybe would be interested to try running Fedora under vmm. So I made following notes about how to boot Fedora 27 under VMM. Although it does still take ages for Fedora to boot with networking enabled, wtf! VMM output and Fedora 27 dmesg below.

Re: ld.so: openvpn: can't load library 'liblzo2.so.1.0'

2018-03-05 Thread Jiri B
On Mon, Mar 05, 2018 at 01:14:05PM +0200, Atanas Vladimirov wrote: > Hi, > > Bringing up an old thread to let you know that the problem is still present > in -current snapshot. > Shall I send a proper bug report to bugs@? > Thanks. No, why? Works as expected, you start OpenVPN too early, thus yo

linking libqb on openbsd fails

2018-03-05 Thread Jiri B
Hi, I try to build libqb library and it fails with following output, any idea what could be wrong there? Originally reported at https://github.com/ClusterLabs/libqb/issues/299 (libqb is prerequisite for corosync/pacemaker stuff) Jiri =2E.. libtool: compile: cc -DHAVE_CONFIG_H -I. -I../include

Re: ld.so: openvpn: can't load library 'liblzo2.so.1.0'

2018-03-06 Thread Jiri B
On Tue, Mar 06, 2018 at 01:51:04PM +0100, Jeremie Courreges-Anglas wrote: > On Mon, Mar 05 2018, Stuart Henderson wrote: > My guess is that ld.so throws away the library cache if it finds that > it's stale, and thus can't know where liblzo2/liblz4 are to be found. > The easy fix would be to make l

kernel panicing - linux sysrq capability

2018-03-16 Thread Jiri B
Hi, IIUC we can panic kernel via writting to 'ddb.trigger' and if we have 'ddb.panic=0' it would reboot. But IIUC we are not not able to control what would happen during this kernel panic in non-interactive mode, am I right? I am asking because I'm working on porting corosync/pacemaker[1] - HA s

Re: OpenBSD Xenocara supports "dummy" driver for headless X? (wd support FB resizing, Xvfb does not)

2018-03-29 Thread Jiri B
See https://marc.info/?l=openbsd-misc&m=151877018030790&w=2 Is it relevant? Jiri

Re: who is using obsd

2013-05-14 Thread Jiri B
On Tue, May 14, 2013 at 11:18:07AM +0100, Mark Duller wrote: > > Unless s.o. has to use some proprietary software that is tighly > > linked to internals of an other OS there is no technical reason to > > use any other OS as a basis for a desktop system > > except for resume from suspend not worki

Re: provide option to dhclient at boot

2013-05-20 Thread Jiri B
On Mon, May 20, 2013 at 11:56:15AM +0200, Daniel Polak wrote: > I'd like to use the -l option to have dhclient use an alternate location > for the leases file. > Netstart starts dhclient at boot but I don't see a way to supply the -l > option to dhclient other than to modify netstart. > > Am I mis

Re: provide option to dhclient at boot

2013-05-20 Thread Jiri B
On Mon, May 20, 2013 at 11:56:15AM +0200, Daniel Polak wrote: > I'd like to use the -l option to have dhclient use an alternate location > for the leases file. > Netstart starts dhclient at boot but I don't see a way to supply the -l > option to dhclient other than to modify netstart. > > Am I mis

a sftp user can enter into a directory which he does not have rights

2013-05-21 Thread Jiri B
I'm very surprised to see something like this. Comparing with normal unix filesystem, 'sftpuser' would not even enter such directory. Is this OK? * sftpuser has only group 'sftpuser' $ sftp sftpuser@localhost Connected to localhost. sftp> cd / sftp> ls -l drwxr-xr-x2 00 5

Re: a sftp user can enter into a directory which he does not have rights

2013-05-21 Thread Jiri B
On Tue, May 21, 2013 at 12:59:55PM -0700, Philip Guenther wrote: > On Tue, May 21, 2013 at 12:52 PM, Jiri B wrote: > > I'm very surprised to see something like this. Comparing with > > normal unix filesystem, 'sftpuser' would not even enter such > > dire

key/cert fingeprint as ssh env variable

2013-05-23 Thread Jiri B
Hello, I was reading about ssh & certificates and was curious how to inform logging user about this certificate expiration. IIRC it is not possible by default now, so an option would be to have a repository with all signed certificates and check the certs for expiration. Then next idea was how to

Re: Working on suspend/resume

2013-05-28 Thread Jiri B
What is general way how to help debugging hanged OS after resume? This happends all the time on my Lenovo T500 if X is running. It seems to work better if I'm in virtual terminal. jirib

Re: Is it possible to do with pf?

2013-05-28 Thread Jiri B
On Tue, May 28, 2013 at 02:11:58PM -0500, Mark Felder wrote: > Yes, it's in the man page for pf.conf. Search for "user". > On limitation, you cannot redirect outgoing traffic being from the host itself back to the host itself :( Example: if you want to redirect all traffic of user 'foo' via Tor'

extattr on OpenBSD

2013-06-06 Thread Jiri B
As now FUSE is in the tree, is there a plan to resuscitate extattr on OpenBSD, so some filesystems in usespace could work or benefit from it? I'd like to see to be able to access glusterfs for example which uses extattr for its own metadata. Just curious. jirib

/var/cache/fontconfig ??

2013-06-08 Thread Jiri B
Hello, I haven't found any comment in hier(7) about /var/cache and there seems to be only dir - 'fontconfig'. I'm not sure how this directory was created, probably during install of the xbaseXX set. Shouldn't this in /var/db ? If not, then hier(7) probably needs update. jirib

Re: /var/cache/fontconfig ??

2013-06-09 Thread Jiri B
> > See fc-cache(1) > > > > > > "These files are generated by fc-cache and contain maps from file > > names to font properties. They are read by the fontconfig > > library at application startup to locate appropriate fonts." > > > > thanks! (no cookie though) > > i guess we should properly doc

  1   2   3   4   5   6   >