Re: Intermittent certificate error on web clients using Chrome

[Jeff Ross]

On 4/17/23 4:37 PM, Jeff Ross wrote:

On 4/17/23 4:10 PM, Theo Buehler wrote:

On Mon, Apr 17, 2023 at 12:29:31PM -0600, Jeff Ross wrote:

This is only tangentially related to OpenBSD...

It is related because it is a combination of how LibreSSL handles TLS
extension calbacks with how apache2 chose to redirect requests to
virtual hosts based on the server name indication. This now manifestes
itself because chrome started rolling out an anti-fingerprinting and
bug-finding feature that involves randomizing the order of TLS
extensions. They started rolling out this feature on Windows and add it
to more platforms over time, which likely explains why that issue now
shows up on some android phones as well.

One part of the problem is that LibreSSL calls callbacks directly on
reading an extension so that the (undocumented) order in which callbacks
are called depends on the order in which TLS extensions are sent.

The other part is that apache2 depends on having information from the
SNI available when the ALPN callback is called. So if the ALPN extension
precedes the SNI, the request will fail, otherwise it works as expected.

To my knowledge this manifests itself only with virtual hosts in
apache2. jsing and I know where the problem is and we know of several
approaches how to avoid it. As always, the issue is that someone needs
to sit down do it. Since this only affects one specific web server
software it's not especially high on the list of priorities.

More details and a link is in this mail and mor can be found in the
thread:

https://marc.info/?l=openbsd-ports=167577915605727=2


My web server is running OpenBSD 6.8 (yes, I know) using apache2 and
letsencrypt certificates.

The fix will not be extremely complicated and if we land it soon, it
will be easy to backport to 7.3. It will definitely not be easy to
backport it to 6.8...


If anyone else out there is getting this error or has gotten this error and
figured out a workaround I'd love to hear from you, either on or off list.

Unless you are able to switch to a config not involving virtual hosts
(in which case I believe the problem should not manifest but I'm not
100% certain about this) I am not aware of a workaround that only
involves some config knobs.


Thank you Theo for the comprehensive explanation.

I might actually be able to split that specific domain off to its own 
IP--my server has 2 em ports and I'm only using 1 of them.


If this is apache2 only it might be time for me to explore moving to 
nginx or OpenBSD's stock httpd.  I have a few sites using 
drupal/backdrop and the lack of a redirect has been the stopper there 
to prevent an easy transition.


I'm also going to bite the bullet and get that server updated.

Thanks again!

Jeff


For the archives, switching to nginx has completely eliminated this cert 
issue.  Free bonus is that nginx really is a *lot* faster than apache2.


Jeff

Re: Intermittent certificate error on web clients using Chrome

[Jeff Ross]

On 4/17/23 4:10 PM, Theo Buehler wrote:

On Mon, Apr 17, 2023 at 12:29:31PM -0600, Jeff Ross wrote:

This is only tangentially related to OpenBSD...

It is related because it is a combination of how LibreSSL handles TLS
extension calbacks with how apache2 chose to redirect requests to
virtual hosts based on the server name indication. This now manifestes
itself because chrome started rolling out an anti-fingerprinting and
bug-finding feature that involves randomizing the order of TLS
extensions. They started rolling out this feature on Windows and add it
to more platforms over time, which likely explains why that issue now
shows up on some android phones as well.

One part of the problem is that LibreSSL calls callbacks directly on
reading an extension so that the (undocumented) order in which callbacks
are called depends on the order in which TLS extensions are sent.

The other part is that apache2 depends on having information from the
SNI available when the ALPN callback is called. So if the ALPN extension
precedes the SNI, the request will fail, otherwise it works as expected.

To my knowledge this manifests itself only with virtual hosts in
apache2. jsing and I know where the problem is and we know of several
approaches how to avoid it. As always, the issue is that someone needs
to sit down do it. Since this only affects one specific web server
software it's not especially high on the list of priorities.

More details and a link is in this mail and mor can be found in the
thread:

https://marc.info/?l=openbsd-ports=167577915605727=2


My web server is running OpenBSD 6.8 (yes, I know) using apache2 and
letsencrypt certificates.

The fix will not be extremely complicated and if we land it soon, it
will be easy to backport to 7.3. It will definitely not be easy to
backport it to 6.8...


If anyone else out there is getting this error or has gotten this error and
figured out a workaround I'd love to hear from you, either on or off list.

Unless you are able to switch to a config not involving virtual hosts
(in which case I believe the problem should not manifest but I'm not
100% certain about this) I am not aware of a workaround that only
involves some config knobs.


Thank you Theo for the comprehensive explanation.

I might actually be able to split that specific domain off to its own 
IP--my server has 2 em ports and I'm only using 1 of them.


If this is apache2 only it might be time for me to explore moving to 
nginx or OpenBSD's stock httpd.  I have a few sites using 
drupal/backdrop and the lack of a redirect has been the stopper there to 
prevent an easy transition.


I'm also going to bite the bullet and get that server updated.

Thanks again!

Jeff

Intermittent certificate error on web clients using Chrome

[Jeff Ross]

Hi All,

This is only tangentially related to OpenBSD...

My web server is running OpenBSD 6.8 (yes, I know) using apache2 and 
letsencrypt certificates.


I'm getting reports from one of my domain hosting clients (mt43news.com) 
of customers reporting intermittent SSL domain name mismatch errors on 
the initial page load.  So far I've only heard that this happens with 
Windows using the Chrome web browser and now we have a report of the 
same error from someone using an Android phone also using the Chrome 
browser.


I have not been able to duplicate this here using MacOS, Ubuntu, 
ChromeOS or OpenBSD and using either Firefox or Chrome.


I have seen a screenshot that clearly shows that Windows/Chrome is 
trying to match the cert for another domain that I host.  If the client 
refreshes the web page with the domain mismatch error displayed the 
error goes away and the home page for the paper is displayed as expected.


Clicking the padlock on any browser shows that my letsencrypt 
certificates are indeed valid.


apache error logs do include quite a few of errors like this:

[Sun Apr 16 09:49:04.907839 2023] [ssl:error] [pid 38218] [client 
167.94.138.50:48002] AH02032: Hostname mt43news.com provided via SNI and 
hostname 207.158.15.156 provided via HTTP have no compatible SSL setup


This log line is from broadwatercountymuseum.com_ssl_error_log and 
broadwatercountymuseum.com is the domain that's most often tried instead 
of mt43news.com's.  In fact, broadwatercountymuseum.com is the top name 
alphabetically in the directory where the config files for ssl vhosts 
are stored.


I've seen this sort of mis-match using openssl s-client:

jross@luna:/var/log/apache2 $ openssl s_client -connect mt43news.com:443
CONNECTED(0003)
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST 
Network, CN = USERTrust RSA Certification Authority

verify return:1
depth=3 C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA 
Limited, CN = AAA Certificate Services

verify return:1
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST 
Network, CN = USERTrust RSA Certification Authority

verify return:1
depth=1 C = AT, O = ZeroSSL, CN = ZeroSSL RSA Domain Secure Site CA
verify return:1
depth=0 CN = broadwatercountymuseum.com
verify return:1
depth=0 CN = broadwatercountymuseum.com

However, if I add -servername to allow for SNI it works correctly:

jross@luna:/var/log/apache2 $ openssl s_client -servername mt43news.com 
-connect mt43news.com:443

CONNECTED(0003)
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST 
Network, CN = USERTrust RSA Certification Authority

verify return:1
depth=3 C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA 
Limited, CN = AAA Certificate Services

verify return:1
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST 
Network, CN = USERTrust RSA Certification Authority

verify return:1
depth=1 C = AT, O = ZeroSSL, CN = ZeroSSL RSA Domain Secure Site CA
verify return:1
depth=0 CN = mt43news.com
verify return:1
depth=0 CN = mt43news.com

I want to pin all this on Chrome since the client is tasked with sending 
the servername at the beginning of the handshake.  I wonder if Chrome is 
starting this handshake without specifying a servername?  If that was 
the case though I'd expect the problem to appear way more often that it 
does.


https://stackoverflow.com/questions/27772133/apache2-error-hostname-provided-via-sni-and-http-do-not-match

This is going to be a real problem for the paper in a couple of months 
when subscribers start trying to log into the web site to renew their 
subscriptions so it's something I really need to fix (if I can).


If anyone else out there is getting this error or has gotten this error 
and figured out a workaround I'd love to hear from you, either on or off 
list.


If you made it this far thanks for reading!

Jeff Ross

Re: After sysupgrade, computer hangs after efi0

[Jeff Ross]

On 4/14/23 3:08 AM, Stuart Henderson wrote:

On 2023-04-13, Jeff Ross  wrote:

On 4/12/23 12:22 PM, Jeff Ross wrote:

OpenBSD 7.3 (GENERIC.MP) #1125 Sat Mar 25 10:36:29 MDT 2023
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8469549056 (8077MB)
avail mem = 8193462272 (7813MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0:  SMBIOS rev. 2.7 @ 0xe8ad9 (27 entries)
bios0: vendor Hewlett-Packard version "L04 v02.16" date 03/24/2015
bios0: Hewlett-Packard HP EliteDesk 800 G1 DM
efi0 at bios0: UEFI 2.3.1
efi0: American Megatrends rev 0x4028e

I was able to "Upgrade" back to 7.2.  Below is the dmesg from the
installed 7.2.  How can I force 7.3 to use acpi0 instead of efi0?

Note that in this state you will have newer libraries on the system;
this is likely to give some issues if you compile anything from source



Good point.  I don't have to very often but don't want to be locked out 
of the possibility.

[..]

I suggest generating a sendbug template from 7.2, run as root
to include all the information, and send it to bugs@



sendbug will be on its way shortly.

Thanks!

Jeff

Re: After sysupgrade, computer hangs after efi0

[Jeff Ross]

On 4/14/23 9:14 AM, Rod Person wrote:

On Wed, 12 Apr 2023 12:22:14 -0600
Jeff Ross  wrote:


Hi all,

I did a sysupgrade from 7.2 to 7.3 on an HP EliteDesk (amd64). The
upgrade went great but now the computer will not boot.


I also have the same issue and I also have an HP Elite (8300)...
I was able to get around this by doing:

boot> boot -c
UKC> disable efi


Thanks!  I'll give this a try.

Jeff

Re: After sysupgrade, computer hangs after efi0

[Jeff Ross]

On 4/12/23 12:22 PM, Jeff Ross wrote:

Hi all,

I did a sysupgrade from 7.2 to 7.3 on an HP EliteDesk (amd64). The 
upgrade went great but now the computer will not boot.


Here's what I get at boot:
(typed from photo--disregard any typos)

[ using 3644008 bytes of bsf ELF symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2023 OpenBSD.  All rights reserved. 
https://www.OpenBSD.org


OpenBSD 7.3 (GENERIC.MP) #1125 Sat Mar 25 10:36:29 MDT 2023
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8469549056 (8077MB)
avail mem = 8193462272 (7813MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0:  SMBIOS rev. 2.7 @ 0xe8ad9 (27 entries)
bios0: vendor Hewlett-Packard version "L04 v02.16" date 03/24/2015
bios0: Hewlett-Packard HP EliteDesk 800 G1 DM
efi0 at bios0: UEFI 2.3.1
efi0: American Megatrends rev 0x4028e


Any ideas greatly appreciated.

Maybe I could use the 7.2 installer to "upgrade" back to 7.2 since I 
never have been able to boot 7.3.


Thanks,

Jeff Ross

dmesg from the 7.2 installer:

OpenBSD 7.2 (RAMDISK_CD) #725: Tue Sep 27 12:02:48 MDT 2022
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/RAMDISK_CD
real mem = 8469549056 (8077MB)
avail mem = 8208846848 (7828MB)
random: good seed from bootblocks
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xe8ad9 (27 entries)
bios0: vendor Hewlett-Packard version "L04 v02.16" date 03/24/2015
bios0: Hewlett-Packard HP EliteDesk 800 G1 DM
acpi0 at bios0: ACPI 5.0
acpi0: tables DSDT FACP APIC FPDT SSDT SSDT SSDT MCFG HPET SSDT SSDT 
SSDT SLIC ASF! TCPA

acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz, 1995.80 MHz, 06-3c-03
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu0: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB 
64b/line 8-way L2 cache, 6MB 64b/line 12-way L3 cache

cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG0)
acpiprt2 at acpi0: bus -1 (PEG1)
acpiprt3 at acpi0: bus -1 (PEG2)
acpiec0 at acpi0: not present
acpipci0 at acpi0 PCI0: 0x0010 0x0011 0x
acpicmos0 at acpi0
"IFX0102" at acpi0 not configured
"PNP0C0C" at acpi0 not configured
"PNP0C14" at acpi0 not configured
"PNP0C0B" at acpi0 not configured
"PNP0C0B" at acpi0 not configured
acpicpu at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpitz at acpi0 not configured
acpitz at acpi0 not configured
cpu0: using Broadwell MDS workaround
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Core 4G Host" rev 0x06
"Intel HD Graphics 4600" rev 0x06 at pci0 dev 2 function 0 not configured
"Intel Core 4G HD Audio" rev 0x06 at pci0 dev 3 function 0 not configured
xhci0 at pci0 dev 20 function 0 "Intel 8 Series xHCI" rev 0x04: msi, 
xHCI 1.0

usb0 at xhci0: USB revision 3.0
uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 
3.00/1.00 addr 1

"Intel 8 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured
"Intel 8 Series KT" rev 0x04 at pci0 dev 22 function 3 not configured
em0 at pci0 dev 25 function 0 "Intel I217-LM" rev 0x04: msi, address 
ec:b1:d7:38:ab:95
ehci0 at pci0 dev 26 function 0 "Intel 8 Series USB" rev 0x04: apic 8 
int 16

usb1 at ehci0: USB revision 2.0
uhub1 at usb1 configuration 1 interface 0 "Intel EHCI root hub" rev 
2.00/1.00 addr 1
"Intel 8 Series HD Audio" rev 0x04 at pci0 dev 27 function 0 not 
configured
ehci1 at pci0 dev 29 function 0 "Intel 8 Series USB" rev 0x04: apic 8 
int 23

usb2 at ehci1: USB revision 2.0
uhub2 at usb2 configuration 1 interface 0 "Intel EHCI root hub" rev 
2.00/1.00 addr 1

"Intel Q87 LPC" rev 0x04 at pci0 dev 31 function 0 not configured
ahci0 at pci0 dev 31 function 2 "Intel 8 Series AHCI" rev 0x04: msi, 
AHCI 1.3

ahci0: port 0: 6.0Gb/s
scsibus0 at ahci0: 32 targets
sd0 at scsibus0 targ 0 lun 0:  
t10.ATA_KingFast_0303B0512_

sd0: 244198MB, 512 bytes/sector, 500118192 sector

After sysupgrade, computer hangs after efi0

[Jeff Ross]

Hi all,

I did a sysupgrade from 7.2 to 7.3 on an HP EliteDesk (amd64). The 
upgrade went great but now the computer will not boot.


Here's what I get at boot:
(typed from photo--disregard any typos)

[ using 3644008 bytes of bsf ELF symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2023 OpenBSD.  All rights reserved. 
https://www.OpenBSD.org


OpenBSD 7.3 (GENERIC.MP) #1125 Sat Mar 25 10:36:29 MDT 2023
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8469549056 (8077MB)
avail mem = 8193462272 (7813MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0:  SMBIOS rev. 2.7 @ 0xe8ad9 (27 entries)
bios0: vendor Hewlett-Packard version "L04 v02.16" date 03/24/2015
bios0: Hewlett-Packard HP EliteDesk 800 G1 DM
efi0 at bios0: UEFI 2.3.1
efi0: American Megatrends rev 0x4028e


Any ideas greatly appreciated.

Maybe I could use the 7.2 installer to "upgrade" back to 7.2 since I 
never have been able to boot 7.3.


Thanks,

Jeff Ross

dmesg from the 7.2 installer:

OpenBSD 7.2 (RAMDISK_CD) #725: Tue Sep 27 12:02:48 MDT 2022
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/RAMDISK_CD
real mem = 8469549056 (8077MB)
avail mem = 8208846848 (7828MB)
random: good seed from bootblocks
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xe8ad9 (27 entries)
bios0: vendor Hewlett-Packard version "L04 v02.16" date 03/24/2015
bios0: Hewlett-Packard HP EliteDesk 800 G1 DM
acpi0 at bios0: ACPI 5.0
acpi0: tables DSDT FACP APIC FPDT SSDT SSDT SSDT MCFG HPET SSDT SSDT 
SSDT SLIC ASF! TCPA

acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz, 1995.80 MHz, 06-3c-03
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,TSC_ADJUST,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu0: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB 
64b/line 8-way L2 cache, 6MB 64b/line 12-way L3 cache

cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG0)
acpiprt2 at acpi0: bus -1 (PEG1)
acpiprt3 at acpi0: bus -1 (PEG2)
acpiec0 at acpi0: not present
acpipci0 at acpi0 PCI0: 0x0010 0x0011 0x
acpicmos0 at acpi0
"IFX0102" at acpi0 not configured
"PNP0C0C" at acpi0 not configured
"PNP0C14" at acpi0 not configured
"PNP0C0B" at acpi0 not configured
"PNP0C0B" at acpi0 not configured
acpicpu at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpitz at acpi0 not configured
acpitz at acpi0 not configured
cpu0: using Broadwell MDS workaround
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Core 4G Host" rev 0x06
"Intel HD Graphics 4600" rev 0x06 at pci0 dev 2 function 0 not configured
"Intel Core 4G HD Audio" rev 0x06 at pci0 dev 3 function 0 not configured
xhci0 at pci0 dev 20 function 0 "Intel 8 Series xHCI" rev 0x04: msi, 
xHCI 1.0

usb0 at xhci0: USB revision 3.0
uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 
3.00/1.00 addr 1

"Intel 8 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured
"Intel 8 Series KT" rev 0x04 at pci0 dev 22 function 3 not configured
em0 at pci0 dev 25 function 0 "Intel I217-LM" rev 0x04: msi, address 
ec:b1:d7:38:ab:95

ehci0 at pci0 dev 26 function 0 "Intel 8 Series USB" rev 0x04: apic 8 int 16
usb1 at ehci0: USB revision 2.0
uhub1 at usb1 configuration 1 interface 0 "Intel EHCI root hub" rev 
2.00/1.00 addr 1

"Intel 8 Series HD Audio" rev 0x04 at pci0 dev 27 function 0 not configured
ehci1 at pci0 dev 29 function 0 "Intel 8 Series USB" rev 0x04: apic 8 int 23
usb2 at ehci1: USB revision 2.0
uhub2 at usb2 configuration 1 interface 0 "Intel EHCI root hub" rev 
2.00/1.00 addr 1

"Intel Q87 LPC" rev 0x04 at pci0 dev 31 function 0 not configured
ahci0 at pci0 dev 31 function 2 "Intel 8 Series AHCI" rev 0x04: msi, 
AHCI 1.3

ahci0: port 0: 6.0Gb/s
scsibus0 at ahci0: 32 targets
sd0 at scsibus0 targ 0 lun 0:  
t10.ATA_KingFast_0303B0512_

sd0: 244198MB, 512 bytes/sector, 500118192 sectors, thin
"Intel 8 Series SMBus" re

Re: Installing OpenBSD on new Chromebook

[Jeff Ross]

On 10/29/22 8:50 AM, Nick Holland wrote:

On 10/29/22 10:11, Jeff Ross wrote:



On 10/29/22 1:29 AM, Stuart Henderson wrote:

On 2022-10-28, Gabriel Busch de Brito  wrote:


All of places I'm finding with directions on how to do this are 
from circa

2015 and do not work now.

Anybody have a pointer to a more updated set of directions I can try?

I suggest that you follow the installation guide at the FAQ section of
the website.


Chromebooks aren't standard computers and usually come with a
locked-down bootloader that will need disabling to install another OS.

Also if it's arm rather than x86 there will be additional challenges
beyond this.

So there's not enough information in the original post to give any kind
of pointer.



Thanks Stuart.

It's an HP Chromebook 14a-na1083d with an Intel Celeron N4500 with 4G
ram and 128 eMMC drive.

Booting up in developer mode it tells me that it is Model LANTIS-MEXL if
that helps.



Just install it, see what happens.  If you want a guarantee, buy me one
exactly like it, and I'll do what I'm suggesting you do. :)  (and then
you will discover why I call model numbers "market position statements",
not "unique HW configuration identification systems")

Or maybe better yet, see if it will boot from an OpenBSD install image
on a USB drive, if it does, set up a full OpenBSD install on a USB drive
and see what happens. I've had pretty good luck with HP PC-like systems
that weren't sold with "standard" operating systems on them, but past
experience is no indicator yada-yada-yada.

Pain points if you get past booting are likely to be wireless and graphics.

If you can get it to boot from a USB drive to test, you are probably good
for an install.  If you can't, probably not worth the effort.  There MAY be
tricks you can do, but you can put a lot of time and effort into forcing
something to install OpenBSD and then find out X doesn't work.  Or there's
no functioning network.  Or both.

Nick.



All good points, Nick.  I have tried booting it from an install USB 
stick with no luck.  Off list I was directed to https://mrchromebox.tech 
 and that tells me that this is at least possible, and includes the 
crucial step I didn't know about to enable booting from an external disk 
and bypassing the check for an official ChromeOS disk.


I'll be noodling around with this over the weekend--hopefully I'll be 
able to report success and, of course, include a dmesg.


Jeff

Re: Installing OpenBSD on new Chromebook

[Jeff Ross]

On 10/29/22 1:29 AM, Stuart Henderson wrote:

On 2022-10-28, Gabriel Busch de Brito  wrote:



All of places I'm finding with directions on how to do this are from circa
2015 and do not work now.

Anybody have a pointer to a more updated set of directions I can try?

I suggest that you follow the installation guide at the FAQ section of
the website.


Chromebooks aren't standard computers and usually come with a
locked-down bootloader that will need disabling to install another OS.

Also if it's arm rather than x86 there will be additional challenges
beyond this.

So there's not enough information in the original post to give any kind
of pointer.



Thanks Stuart.

It's an HP Chromebook 14a-na1083d with an Intel Celeron N4500 with 4G 
ram and 128 eMMC drive.


Booting up in developer mode it tells me that it is Model LANTIS-MEXL if 
that helps.


I can get a linux dmesg from the linux VM if that helps at all.  Not 
sure how much the VM would represent the actual hardware though.


Jeff

Installing OpenBSD on new Chromebook

[Jeff Ross]

Hi all,

I got a nice new laptop at Costco for under $200.  I did the developer 
mode to get to a linux shell and installed a bunch of programs but I'd 
rather just wipe the whole disk and install OpenBSD.


All of places I'm finding with directions on how to do this are from 
circa 2015 and do not work now.


Anybody have a pointer to a more updated set of directions I can try?

Thanks!

Jeff Ross

Re: mg: how to indent using spaces instead of tabs

[Jeff Ross]

On 6/12/22 9:16 AM, Mihai Popescu wrote:

... mg will use a tab for indentation.

Use something to replace every TAB occurrence in the source code with
8 spaces sequence. Well, not every TAB maybe?


man 1 expand

GPS found but not "on"

[Jeff Ross]

Hi all,

I have a USB GPS receiver that I'm trying to use on 7.0 amd64.

It's recognized in dmesg:

umodem0 at uhub1 port 4 configuration 1 interface 0 "u-blox AG - 
www.u-blox.com u-blox 7 - GPS/GNSS Receiver" rev 1.10/1.00 addr 4

umodem0: data interface 1, has CM over data, has no break
umodem0: status change notification available
ucom0 at umodem0

I added this line to /etc/ttys:

cuaU0   "/sbin/ldattach nmea"   unknown on softcar

And after a reboot I see this in sysctl:

jross@ip_cam:/home/jross $ sysctl -a | grep nmea
hw.sensors.nmea0.indicator0=Off (Signal), UNKNOWN
hw.sensors.nmea0.distance0=0.000 m (Altitude), WARNING

Anyone have any ideas on how to get this thing turned "on"?

Jeff

Full dmesg:

OpenBSD 7.0 (GENERIC.MP) #1: Fri Oct 29 12:04:07 MDT 2021
r...@syspatch-70-amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8488550400 (8095MB)
avail mem = 8215257088 (7834MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x7b896000 (51 entries)
bios0: vendor American Megatrends Inc. version "5.11" date 07/09/2020
bios0: $(DEFAULT_STRING) $(DEFAULT_STRING)
acpi0 at bios0: ACPI 5.0
acpi0: sleep states S0 S3 S5
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG SSDT SSDT SSDT UEFI SSDT 
HPET SSDT SSDT SSDT LPIT BCFG PRAM CSRT WDAT

acpi0: wakeup devices
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1440.32 MHz, 06-4c-04
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,MD_CLEAR,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN

cpu0: 1MB 64b/line 16-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 79MHz
cpu0: mwait min=64, max=64, C-substates=0.2.0.0.0.0.3.3, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1439.97 MHz, 06-4c-04
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,MD_CLEAR,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN

cpu1: 1MB 64b/line 16-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1439.99 MHz, 06-4c-04
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,MD_CLEAR,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN

cpu2: 1MB 64b/line 16-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1439.97 MHz, 06-4c-04
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,MD_CLEAR,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN

cpu3: 1MB 64b/line 16-way L2 cache
cpu3: smt 0, core 3, package 0
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 115 pins
acpimcfg0 at acpi0
acpimcfg0: addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (RP01)
acpiprt2 at acpi0: bus -1 (RP02)
acpiprt3 at acpi0: bus -1 (RP03)
acpiprt4 at acpi0: bus -1 (RP04)
"INT33A4" at acpi0 not configured
dwiic0 at acpi0 I2C7 addr 0x9142/0x1000 irq 38
iic0 at dwiic0
chvgpio0 at acpi0 GPO1 uid 2 addr 0xfed88000/0x8000 irq 48, 59 pins
"INT33F4" at iic0 addr 0x34 not configured
acpipci0 at acpi0 PCI0: 0x 0x0011 0x0001
sdhc0 at acpi0 SDHA addr 0x9142c000/0x1000 irq 45
sdhc0: SDHC 3.0, 200 MHz base clock
sdmmc0 at sdhc0: 8-bit, sd high-speed, mmc high-speed, ddr52, dma
sdhc1 at acpi0 SDHB addr 0x9142a000/0x1000 irq 46
sdhc1: SDHC 3.0, 200 MHz base clock
sdmmc1 at sdhc1: 4-bit, sd high-speed, mmc high-speed, ddr52, dma
sdhc2 at acpi0 SHC1 addr 0x91428000/0x1000 irq 47
sdhc2: SDHC 3.0, 200 MHz base clock
sdmmc2 at sdhc2: 4-bit, sd high-speed, mmc high-speed, ddr52, dma
"INTL9C60" at acpi0 not configured
"INTL9C60" at acpi0 not configured
"8086228A" at acpi0 not configured
"8086228A" at acpi0 not configured
dwiic1 at acpi0 I2C2 addr 0x91424000/0x1000 irq 33
iic1 at dwiic1
dwiic2 at 

Re: Anyone successfully using encrypted mosquitto over websockets?

[Jeff Ross]

On 2/8/22 12:58 AM, Rémi Bougard wrote:

Hi Jeff,

On Mon, Feb 07, 2022 at 04:21:37PM -0700, Jeff Ross wrote
I don't know the nuts and bolts of your configuration but I think
a secure websocket connection must begin with "wss://", so maybe
just change

ws://ip_cam.openvistas.net:9001/mqtt
into
wss://ip_cam.openvistas.net:9001/mqtt

and it will work ?

I hope this helps.

Rémi



Good idea, Rémi but it doesn't make a change.   I'm now looking into 
using a reverse proxy on my apache2 web server to redirect the mqtt 
traffic and take care of encryption.


Thanks for replying!

Jeff

Anyone successfully using encrypted mosquitto over websockets?

[Jeff Ross]

Hi all,

I've been battling mosquitto and websockets for too long now.

I have weewx weather software (https://weewx.com/) running on my 
firewall (running 386 current) capturing traffic from my weather station 
to upload to my https web server.  mosquitto is supposed to be able to 
upload the weather changes in real time over websockets to my web server 
(still on 6.9) and it does so just fine over OpenVPN.


mosquitto using the mqtt protocol on port 9001 with ssl disabled can 
capture and send data up to the webserver, but both Firefox and Chrome 
will not connect to the websockets port if the traffic is "insecure".  
Chrome at least has decent error messages:


MQTT: Connecting to MQTT Websockets: ip_cam.openvistas.net 9001 (SSL 
Disabled)
paho-mqtt.min.js:37 Mixed Content: The page at 
'https://www.starhouse-observatory.org/weather/belchertown/' was loaded 
over HTTPS, but attempted to connect to the insecure WebSocket endpoint 
'ws://ip_cam.openvistas.net:9001/mqtt'. This request has been blocked; 
this endpoint must be available over WSS.

d._doConnect @ paho-mqtt.min.js:37
jquery.min.js:2 Uncaught DOMException: Failed to construct 'WebSocket': 
An insecure WebSocket connection may not be initiated from a page loaded 
over HTTPS.
    at d._doConnect 
(https://cdnjs.cloudflare.com/ajax/libs/paho-mqtt/1.1.0/paho-mqtt.min.js:37:251)
    at d.connect 
(https://cdnjs.cloudflare.com/ajax/libs/paho-mqtt/1.1.0/paho-mqtt.min.js:31:233)
    at Client.connect 
(https://cdnjs.cloudflare.com/ajax/libs/paho-mqtt/1.1.0/paho-mqtt.min.js:70:506)
    at connect 
(https://www.starhouse-observatory.org/weather/belchertown/js/belchertown.js?1644249956:1304:12)
    at HTMLDocument. 
(https://www.starhouse-observatory.org/weather/belchertown/:148:13)
    at l 
(https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js:2:29375)
    at c 
(https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js:2:29677)


So far, *any* attempt to put this over ssl has failed with a myriad 
different errors.  mosquitto itself has pathetic logging, ktracing the 
process in an attempt to figure out why has proven fruitless.


The real question for the moment is to find out if anyone has got 
mosquitto/websockets working to push updates out to a web server over an 
encrypted connection.


I know--lots of details lacking here and please accept my apologies in 
advance--there have been too many iterations to track :-(


Feel free to apply the clue-by-four here or in private e-mail.

Jeff

Re: "run0: missing endpoint" on OpenBSD 7.0

[Jeff Ross]

On 12/17/21 4:03 PM, Stefan Sperling wrote:

On Fri, Dec 17, 2021 at 02:14:31PM -0700, Jeff Ross wrote:

Hi all,

Trying to replace an rsu usb wifi adapter with one that is a little more
resilient because the rsu locks up about 4 or 5 times a day and it takes a
reboot to get it to come back.

Full dmesg follows but on both this amd64 computer and a rpi 3B+ the result
is the same:

run0 at uhub0 port 4 configuration 1 interface 0 "Ralink Technology RT2870"
rev 2.00/0.01 addr 6
run0: missing endpoint

And the run0 will not go any farther.

I hate to do this but with Ubuntu 20.04 on an OdroidN2 it works perfectly:

Looks like the USB configuration of your particular device
is not recognized by our driver yet.

Please run pkg_add usbutils and send the output of lsusb -v.


Great--here you go!

Bonus would be if the on-board wireless would get enabled as well.



Bus 000 Device 001: ID 8086: Intel Corp.
Device Descriptor:
  bLength    18
  bDescriptorType 1
  bcdUSB   3.00
  bDeviceClass    9 Hub
  bDeviceSubClass 0 Unused
  bDeviceProtocol 1 Single TT
  bMaxPacketSize0 9
  idVendor   0x8086 Intel Corp.
  idProduct  0x
  bcdDevice    1.00
  iManufacturer   1 Intel
  iProduct    2 xHCI root hub
  iSerial 0
  bNumConfigurations  1
  Configuration Descriptor:
    bLength 9
    bDescriptorType 2
    wTotalLength   25
    bNumInterfaces  1
    bConfigurationValue 1
    iConfiguration  0
    bmAttributes 0xc0
  Self Powered
    MaxPower    0mA
    Interface Descriptor:
  bLength 9
  bDescriptorType 4
  bInterfaceNumber    0
  bAlternateSetting   0
  bNumEndpoints   1
  bInterfaceClass 9 Hub
  bInterfaceSubClass  0 Unused
  bInterfaceProtocol  0 Full speed (or root) hub
  iInterface  0
  Endpoint Descriptor:
    bLength 7
    bDescriptorType 5
    bEndpointAddress 0x81  EP 1 IN
    bmAttributes    3
  Transfer Type    Interrupt
  Synch Type   None
  Usage Type   Data
    wMaxPacketSize 0x0002  1x 2 bytes
    bInterval 255
Hub Descriptor:
  bLength  22
  bDescriptorType  42
  nNbrPorts    13
  wHubCharacteristic 0x
    Ganged power switching
    Ganged overcurrent protection
    TT think time 8 FS bits
  bPwrOn2PwrGood   10 * 2 milli seconds
  bHubContrCurrent  0 milli Ampere
  DeviceRemovable    0x00 0x00
  PortPwrCtrlMask    0x00 0x00
 Hub Port Status:
   Port 1: .02a0 5Gbps power Rx.Detect
   Port 2: .0503 Unknown Speed Recovery enable connect
   Port 3: .0503 Unknown Speed Recovery enable connect
   Port 4: .0503 Unknown Speed Recovery enable connect
   Port 5: .02a0 5Gbps power Rx.Detect
   Port 6: .02a0 5Gbps power Rx.Detect
   Port 7: .02a0 5Gbps power Rx.Detect
   Port 8: .0203 5Gbps power U0 enable connect
   Port 9: .02a0 5Gbps power Rx.Detect
   Port 10: .02a0 5Gbps power Rx.Detect
   Port 11: .02a0 5Gbps power Rx.Detect
   Port 12: .02a0 5Gbps power Rx.Detect
   Port 13: .02a0 5Gbps power Rx.Detect
Device Status: 0x0001
  Self Powered

Bus 000 Device 002: ID 2109:2813
Device Descriptor:
  bLength    18
  bDescriptorType 1
  bcdUSB   2.10
  bDeviceClass    9 Hub
  bDeviceSubClass 0 Unused
  bDeviceProtocol 1 Single TT
  bMaxPacketSize0    64
  idVendor   0x2109
  idProduct  0x2813
  bcdDevice   90.11
  iManufacturer   1 VIA Labs, Inc.
  iProduct    2 USB2.0 Hub
  iSerial 0
  bNumConfigurations  1
  Configuration Descriptor:
    bLength 9
    bDescriptorType 2
    wTotalLength   25
    bNumInterfaces  1
    bConfigurationValue 1
    iConfiguration  0
    bmAttributes 0xe0
  Self Powered
  Remote Wakeup
    MaxPower    0mA
    Interface Descriptor:
  bLength 9
  bDescriptorType 4
  bInterfaceNumber    0
  bAlternateSetting   0
  bNumEndpoints   1
  bInterfaceClass 9 Hub
  bInterfaceSubClass  0 Unused
  bInterfaceProtocol  0 Full speed (or root) hub
  iInterface  0
  Endpoint Descriptor:
    bLength 7
    bDescriptorType 5
    bEndpointAddress 0x81  EP 1 IN
    bmAttributes    3
  Transfer Type    Interrupt
  Synch Type   None
  Usage Type   Data
    wMaxPacketSize 0x0001  1x 1 bytes
    bInterval  12
Hub Descriptor:

"run0: missing endpoint" on OpenBSD 7.0

[Jeff Ross]

Hi all,

Trying to replace an rsu usb wifi adapter with one that is a little more 
resilient because the rsu locks up about 4 or 5 times a day and it takes 
a reboot to get it to come back.


Full dmesg follows but on both this amd64 computer and a rpi 3B+ the 
result is the same:


run0 at uhub0 port 4 configuration 1 interface 0 "Ralink Technology 
RT2870" rev 2.00/0.01 addr 6

run0: missing endpoint

And the run0 will not go any farther.

I hate to do this but with Ubuntu 20.04 on an OdroidN2 it works perfectly:

[858425.236283] usb 1-1.4: new high-speed USB device number 28 using 
xhci-hcd
[858425.360433] usb 1-1.4: New USB device found, idVendor=148f, 
idProduct=2870
[858425.360436] usb 1-1.4: New USB device strings: Mfr=0, Product=0, 
SerialNumber=0
[858425.464282] usb 1-1.4: reset high-speed USB device number 28 using 
xhci-hcd
[858425.588521] ieee80211 phy2: rt2x00_set_rt: Info - RT chipset 5390, 
rev 0502 detected
[858425.597929] ieee80211 phy2: rt2x00_set_rf: Info - RF chipset 5370 
detected
[858425.598226] ieee80211 phy2: Selected rate control algorithm 
'minstrel_ht'
[858425.697149] ieee80211 phy2: rt2x00lib_request_firmware: Info - 
Loading firmware file 'rt2870.bin'
[858425.697203] ieee80211 phy2: rt2x00lib_request_firmware: Info - 
Firmware detected - version: 0.36

[858425.959972] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready

Once I set up the wifi through the ubuntu gui it joined my wireless 
network and got an IP no problem.


Do I need a firmware file for this like Ubuntu loaded?

Jeff

dmesg:

OpenBSD 7.0 (GENERIC.MP) #1: Fri Oct 29 12:04:07 MDT 2021
r...@syspatch-70-amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8488550400 (8095MB)
avail mem = 8215265280 (7834MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x7b896000 (51 entries)
bios0: vendor American Megatrends Inc. version "5.11" date 07/09/2020
bios0: $(DEFAULT_STRING) $(DEFAULT_STRING)
acpi0 at bios0: ACPI 5.0
acpi0: sleep states S0 S3 S5
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG SSDT SSDT SSDT UEFI SSDT 
HPET SSDT SSDT SSDT LPIT BCFG PRAM CSRT WDAT

acpi0: wakeup devices
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1440.27 MHz, 06-4c-04
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,MD_CLEAR,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN

cpu0: 1MB 64b/line 16-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 79MHz
cpu0: mwait min=64, max=64, C-substates=0.2.0.0.0.0.3.3, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1439.95 MHz, 06-4c-04
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,MD_CLEAR,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN

cpu1: 1MB 64b/line 16-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1439.97 MHz, 06-4c-04
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,MD_CLEAR,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN

cpu2: 1MB 64b/line 16-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1439.96 MHz, 06-4c-04
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,MD_CLEAR,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN

cpu3: 1MB 64b/line 16-way L2 cache
cpu3: smt 0, core 3, package 0
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 115 pins
acpimcfg0 at acpi0
acpimcfg0: addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (RP01)
acpiprt2 at acpi0: bus -1 (RP02)
acpiprt3 at acpi0: bus -1 (RP03)
acpiprt4 at acpi0: bus -1 (RP04)
"INT33A4" at acpi0 not configured
dwiic0 at acpi0 I2C7 addr 0x9142/0x1000 irq 38
iic0 at dwiic0
chvgpio0 at 

Re: Kind of OT - camera/ software to run a long term timelapse camera

[Jeff Ross]

On 11/15/21 11:21 AM, Steve Williams wrote:

Hi,

I have an OpenBSD server (APC) that runs 7x24 hosting my email, 
webserver, etc.


As the season changes to winter, I thought of setting up a camera to 
do some timelapse photography out of the window pointing at the 
mountains.


I am kind of lost in the huge variety of options...  IP connected 
security camera, webcam... and whether to do the timelapse in the 
camera, or to have that controlled on the server... (taking a photo 
every x minutes and saving it on the OpenBSD server).


I was trying to avoid having the images stored on an SD card in the 
camera as then physical access would be required to periodically 
extract the images / movie.


If it's a USB camera, it would need to be supported by OpenBSD. But 
there are IP cameras, some which require drivers, some don't. It's a 
crazy complex world.


Does anyone have recommendations to accomplish this?  It's just a 
hobby so I don't want to spend a huge amount of money on it.


Thanks,
Steve Williams


Hi Steve,

I'm running a 4K Amcrest IP camera (Amcrest IP8M-2496EB 2.8mm) on a 
Raspberry Pi 3B+/OpenBSD 7.0.


I wrote a python script using the amcrest module that captures about 5 
frames / minute and stores locally on the RPi.  rsync then ships them 
off to a separate server in my network that has a 5T external drive.  A 
script on that external drive uses ffmpeg to make an mp4 movie that is 
uploaded daily to my web server at https://www.starhouse-observatory.org.


The home page shows the latest image off the camera, below is a place to 
select and watch a day's movie.


I'm happy to share the python script and other details if you want to go 
that route.


Jeff

Re: OpenBSD 7.0--cron will not run a certain script

[Jeff Ross]

On 11/11/21 4:09 PM, Łukasz Moskała wrote:

W dniu 11.11.2021 o 23:55, Jeff Ross pisze:



Hi,

/bin/sh -x /home/jross/sync_to_odroidn2.sh

cat ./sync_to_ordoidn2.sh

Looks like you have typo in file name to me :) odroid in first, ordoid 
in second.



Egads.  Thank you!  That was indeed the problem :-)

Jeff

OpenBSD 7.0--cron will not run a certain script

[Jeff Ross]

Hi all,

This is on a Raspberry Pi 3B+ (dmesg to follow).

Here's my crontab:

jross@pi:/home/jross $ crontab -l
SHELL=/bin/sh
MAILTO=""

#
#minute hour    mday    month   wday    command
*/2 *   *   *   *   /bin/sh 
/home/jross/upload_latest.sh 2>&1

*   *   *   *   *   python3 4Kwebcam_loop_no_scp.py
38     *   *   *   *   /bin/sh -x 
/home/jross/sync_to_odroidn2.sh 2>&1


The first 2 scripts work fine.  The last one absolutely will not.

Here's the very simple script:

jross@pi:/home/jross $ cat ./sync_to_ordoidn2.sh
#!/bin/sh
logger "starting sync to odroidn2"
pgrep -x rsync
if [ $? -eq 0 ]; then
    echo "`date` rsync still running...exiting" >> 
/var/log/rsync_to_odroidn2.out

else
    echo "`date` starting rsync..." >> /var/log/rsync_to_odroidn2.out
    /usr/local/bin/rsync -avPz /home/jross/webcam/ 
odroidn2:/samba/starhouse/webcam/ | tee -a /var/log/rsync_to_odroidn2.out

    echo "`date` finished rsync..." >> /var/log/rsync_to_odroidn2.out
fi

Here's where cron says it's firing the script:

2021-11-11 15:38:01.305599500 127.0.0.1: cron.info: Nov 11 15:38:01 
cron[95324]: (jross) CMD (/bin/sh -x /home/jross/sync_to_odroidn2.sh 2>&1)


But, no comment into syslog from the logger line and the script simply 
does not run.


Running the script manually, though, works fine:

2021-11-11 15:47:05.959176500 127.0.0.1: user.notice: Nov 11 15:47:05 
jross: starting sync to odroidn2


sending incremental file list
4Kwebcam_2021/
4Kwebcam_2021/4Kwebcam_1636669302.jpg
  2,113,298 100%    6.85MB/s    0:00:00 (xfr#1, to-chk=75/1323)
4Kwebcam_2021/4Kwebcam_1636669333.jpg
  2,109,678 100%    1.48MB/s    0:00:01 (xfr#2, to-chk=74/1323)
4Kwebcam_2021/4Kwebcam_1636669357.jpg
  2,108,931 100%    1.73MB/s    0:00:01 (xfr#3, to-chk=73/1323)

...and so on

I originally had this script running under cron with */10 in the minute 
column.  As a part of debugging I've adjusted the interval to every 5 
minutes and then to a set minute in the hour.


I'm using full paths everywhere in the script so it can't be that.

I do not know what else to try...

Jeff

dmesg:

jross@pi:/home/jross $ dmesg
OpenBSD 7.0 (GENERIC.MP) #1332: Thu Sep 30 16:53:51 MDT 2021
dera...@arm64.openbsd.org:/usr/src/sys/arch/arm64/compile/GENERIC.MP
real mem  = 970907648 (925MB)
avail mem = 908574720 (866MB)
random: good seed from bootblocks
mainbus0 at root: Raspberry Pi 3 Model B Plus Rev 1.3
cpu0 at mainbus0 mpidr 0: ARM Cortex-A53 r0p4
cpu0: 32KB 64b/line 2-way L1 VIPT I-cache, 32KB 64b/line 4-way L1 D-cache
cpu0: 512KB 64b/line 16-way L2 cache
cpu0: CRC32,ASID16
cpu1 at mainbus0 mpidr 1: ARM Cortex-A53 r0p4
cpu1: 32KB 64b/line 2-way L1 VIPT I-cache, 32KB 64b/line 4-way L1 D-cache
cpu1: 512KB 64b/line 16-way L2 cache
cpu1: CRC32,ASID16
cpu2 at mainbus0 mpidr 2: ARM Cortex-A53 r0p4
cpu2: 32KB 64b/line 2-way L1 VIPT I-cache, 32KB 64b/line 4-way L1 D-cache
cpu2: 512KB 64b/line 16-way L2 cache
cpu2: CRC32,ASID16
cpu3 at mainbus0 mpidr 3: ARM Cortex-A53 r0p4
cpu3: 32KB 64b/line 2-way L1 VIPT I-cache, 32KB 64b/line 4-way L1 D-cache
cpu3: 512KB 64b/line 16-way L2 cache
cpu3: CRC32,ASID16
efi0 at mainbus0: UEFI 2.8
efi0: Das U-Boot rev 0x20210700
apm0 at mainbus0
simplefb0 at mainbus0: 656x416, 32bpp
wsdisplay0 at simplefb0 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"system" at mainbus0 not configured
"axi" at mainbus0 not configured
simplebus0 at mainbus0: "soc"
bcmclock0 at simplebus0
bcmmbox0 at simplebus0
bcmgpio0 at simplebus0
bcmaux0 at simplebus0
bcmdmac0 at simplebus0: DMA0 DMA2 DMA4 DMA5 DMA8 DMA9 DMA10
bcmintc0 at simplebus0
pluart0 at simplebus0
bcmsdhost0 at simplebus0: 250 MHz base clock
sdmmc0 at bcmsdhost0: 4-bit, sd high-speed, mmc high-speed, dma
dwctwo0 at simplebus0
bcmdog0 at simplebus0
bcmrng0 at simplebus0
bcmtemp0 at simplebus0
"local_intc" at simplebus0 not configured
sdhc0 at simplebus0
sdhc0: SDHC 3.0, 200 MHz base clock
sdmmc1 at sdhc0: 4-bit, sd high-speed, mmc high-speed
"firmware" at simplebus0 not configured
"power" at simplebus0 not configured
"mailbox" at simplebus0 not configured
"gpiomem" at simplebus0 not configured
"fb" at simplebus0 not configured
"vcsm" at simplebus0 not configured
"clocks" at mainbus0 not configured
"phy" at mainbus0 not configured
"arm-pmu" at mainbus0 not configured
agtimer0 at mainbus0: 19200 kHz
"leds" at mainbus0 not configured
"fixedregulator_3v3" at mainbus0 not configured
"fixedregulator_5v0" at mainbus0 not configured
"bootloader" at mainbus0 not configured
dt: 445 probes
usb0 at dwctwo0: USB revision 2.0
scsibus0 at sdmmc0: 2 targets, initiator 0
sd0 at scsibus0 targ 1 lun 0:  removable
sd0: 121942MB, 512 bytes/sector, 249737216 sectors
uhub0 at usb0 configuration 1 interface 0 "Broadcom DWC2 root hub" rev 
2.00/1.00 addr 1
uhub1 at uhub0 port 1 configuration 1 interface 0 "Standard Microsystems 
product 0x2514" rev 2.00/b.b3 addr 2

bwfm0 at 

Re: Install challenges

[Jeff Ross]

On 11/7/21 2:49 AM, Stuart Henderson wrote:

On 2021-11-06, Jeff Ross  wrote:

A simpler solution for me might be some sort of command I can do at the
boot prompt that would change the resolution of the monitor or maybe
even the window.  Anything like that available at all?

That's not possible.

In the installer you could ctrl-z and type this to clear the screen and
reset the cursor to the home position:

print '\033[2J\033[H'

then fg to return to the prompt.

Or run through on a separate machine/vm and make a note of what to type.
It's likely that when you're booted onto a standard (non install) kernel
with the DRM drivers that the screen will work better.


That worked!  Hooray!

After installing 6.9 and running syspatch I got a panic just as the 
wsdisplay lines printed.  Couldn't get anything more than the single 
line because the keyboard was dead.


Booted into bsd.rd, then changed the server file path to 7.0, installed 
the bsd kernels, booted the 7.0 bsd.rd and did a fresh install.


System is up and running 7 with no panic.  Video is beautiful with no 
garbage at the bottom.


Thank you once again Stuart!

Jeff

dmesg:

OpenBSD 7.0 (GENERIC.MP) #232: Thu Sep 30 14:25:29 MDT 2021
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8488550400 (8095MB)
avail mem = 8215261184 (7834MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x7b896000 (51 entries)
bios0: vendor American Megatrends Inc. version "5.11" date 07/09/2020
bios0: $(DEFAULT_STRING) $(DEFAULT_STRING)
acpi0 at bios0: ACPI 5.0
acpi0: sleep states S0 S3 S5
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG SSDT SSDT SSDT UEFI SSDT 
HPET SSDT SSDT SSDT LPIT BCFG PRAM CSRT WDAT

acpi0: wakeup devices
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1440.27 MHz, 06-4c-04
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,SENSOR,ARAT,MELTDOWN

cpu0: 1MB 64b/line 16-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 79MHz
cpu0: mwait min=64, max=64, C-substates=0.2.0.0.0.0.3.3, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1439.95 MHz, 06-4c-04
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,SENSOR,ARAT,MELTDOWN

cpu1: 1MB 64b/line 16-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1439.95 MHz, 06-4c-04
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,SENSOR,ARAT,MELTDOWN

cpu2: 1MB 64b/line 16-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz, 1439.96 MHz, 06-4c-04
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,SENSOR,ARAT,MELTDOWN

cpu3: 1MB 64b/line 16-way L2 cache
cpu3: smt 0, core 3, package 0
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 115 pins
acpimcfg0 at acpi0
acpimcfg0: addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (RP01)
acpiprt2 at acpi0: bus -1 (RP02)
acpiprt3 at acpi0: bus -1 (RP03)
acpiprt4 at acpi0: bus -1 (RP04)
"INT33A4" at acpi0 not configured
dwiic0 at acpi0 I2C7 addr 0x9142/0x1000 irq 38
iic0 at dwiic0
chvgpio0 at acpi0 GPO1 uid 2 addr 0xfed88000/0x8000 irq 48, 59 pins
"INT33F4" at iic0 addr 0x34 not configured
acpipci0 at acpi0 PCI0: 0x 0x0011 0x0001
sdhc0 at acpi0 SDHA addr 0x9142c000/0x1000 irq 45
sdhc0: SDHC 3.0, 200 MHz base clock
sdmmc0 at sdhc0: 8-bit, sd high-speed, mmc high-speed, ddr52, dma
sdhc1 at acpi0 SDHB addr 0x9142a000/0x1000 irq 46
sdhc1: SDHC 3.0, 200 MHz base clock
sdmmc1 at sdhc1: 4-bit, sd high-speed, mmc high-speed, ddr52, dma
sdhc2 at acpi0 S

Install challenges

[Jeff Ross]

Hi all,

I'm trying to install OpenBSD on a new mini-pc stick computer.

https://www.amazon.com/dp/B09DKW18BY?psc=1=ppx_yo2_dt_b_product_details

install70.img dd-ed to a USB drive will not boot.  With bios set to boot 
from the USB drive it falls through to the EFI shell.


install69.img dd-ed to the exact same drive will boot so I'm fine with 
that.  I can always upgrade to 7 after the system is up.


This stick has HDMI 4K video but when the installer boots the bottom 
inch of my 48" 4K Visio monitor is garbage.  When the installer finishes 
booting all of the installer prompts are down in the garbage and 
un-readable, which makes it *really* impossible to do an install.


Aside--I know about the autoconfig option and might resort to that yet.

A simpler solution for me might be some sort of command I can do at the 
boot prompt that would change the resolution of the monitor or maybe 
even the window.  Anything like that available at all?


Don't have a dmesg because no successful install--hope to change that ;-)

Thanks!

Jeff Ross

Re: 6.9 Installer succeeds, computer will not boot from hard drive

[Jeff Ross]

On 9/3/21 12:35 PM, Jeff Ross wrote:

On 9/3/21 3:45 AM, Stuart Henderson wrote:

On 2021-09-02, Jeff Ross  wrote:

This is a multi-part message in MIME format.
--F51C046C214039690CD908CB
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

Hi all,

I bought one of these mini computers

https://www.amazon.com/dp/B084WRRV51?psc=1=ppx_yo2_dt_b_product_details 



(installer dmesg follows).

6.9 installs just fine but the darn thing will *not* boot from the hard
drive.

I've tried installing using the Whole disk and GPT whole disk--neither
one will boot.

Bios gives me the option to boot from Hard Disk, USB Hard Disk, USB 
Key,
IPv4, IPv6 and EFI.  I've set to Hard Disk, then USB Hard Disk, then 
USB

Key, then IPv4 and every time it falls through to IPv4.

Try EFI with a GPT-based install.

Thanks, Stuart.

This doesn't work.



Fallback option: find a small USB storage device (sandisk ultra fit or
similar) and leave it in the machine to boot from.

This does--until the boot process panics before it gets very far.

I'm going to try -current just for fun.  If that doesn't work I'm just 
going to send it back and try something else.


Jeff


No change with -current.

For reference, here's the panic and trace, transcribed from photos so I 
hope there aren't too many typos:


ddb{0}>  show panic
kernel page fault
uvm_fault(0x82244830, 0x30,0,2) -> e
drm_helper_probe_single_connector_modes(808c4000,7f , 7f) at 
drm_helper_probe_single_connector_modes+0x120

end trace frame: 0x8000223d0970, count: 0
ddb{0}> trace
drm_helper_probe_single_connector_modes(808c4000,7f , 7f) at 
drm_helper_probe_single_connector_modes+0x120

drm_client_modset_probe(80210408) at output_pollexecute+0x22d
taskq_thread(801ec280) at taskq_thread+0x81
end trace frame: )x), count: -5

I'll also send this in to sendbug.

Jeff

Re: 6.9 Installer succeeds, computer will not boot from hard drive

[Jeff Ross]

On 9/3/21 3:45 AM, Stuart Henderson wrote:

On 2021-09-02, Jeff Ross  wrote:

This is a multi-part message in MIME format.
--F51C046C214039690CD908CB
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

Hi all,

I bought one of these mini computers

https://www.amazon.com/dp/B084WRRV51?psc=1=ppx_yo2_dt_b_product_details

(installer dmesg follows).

6.9 installs just fine but the darn thing will *not* boot from the hard
drive.

I've tried installing using the Whole disk and GPT whole disk--neither
one will boot.

Bios gives me the option to boot from Hard Disk, USB Hard Disk, USB Key,
IPv4, IPv6 and EFI.  I've set to Hard Disk, then USB Hard Disk, then USB
Key, then IPv4 and every time it falls through to IPv4.

Try EFI with a GPT-based install.

Thanks, Stuart.

This doesn't work.



Fallback option: find a small USB storage device (sandisk ultra fit or
similar) and leave it in the machine to boot from.

This does--until the boot process panics before it gets very far.

I'm going to try -current just for fun.  If that doesn't work I'm just 
going to send it back and try something else.


Jeff

Re: 6.9 Installer succeeds, computer will not boot from hard drive

[Jeff Ross]

On 9/3/21 2:34 AM, Maurice McCarthy wrote:

At the boot prompt try

boot> boot hd1a:/bsd

If it works you can put it in boot.conf

HTH

Unfortunately, the boot process never gets to the boot prompt--it skips 
right over the newly installed hard drive.


Jeff

6.9 Installer succeeds, computer will not boot from hard drive

[Jeff Ross]

Hi all,

I bought one of these mini computers

https://www.amazon.com/dp/B084WRRV51?psc=1=ppx_yo2_dt_b_product_details

(installer dmesg follows).

6.9 installs just fine but the darn thing will *not* boot from the hard 
drive.


I've tried installing using the Whole disk and GPT whole disk--neither 
one will boot.


Bios gives me the option to boot from Hard Disk, USB Hard Disk, USB Key, 
IPv4, IPv6 and EFI.  I've set to Hard Disk, then USB Hard Disk, then USB 
Key, then IPv4 and every time it falls through to IPv4.


I initially installed linux on this and it ran about as good as ubuntu 
20.04 ever does but I'd much rather use a real OS.


Any thoughts/clue by fours greatly appreciated.

Jeff Ross

OpenBSD 6.9 (RAMDISK_CD) #456: Mon Apr 19 10:47:37 MDT 2021
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/RAMDISK_CD
real mem = 4120633344 (3929MB)
avail mem = 3991724032 (3806MB)
random: good seed from bootblocks
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x77864000 (51 entries)
bios0: vendor American Megatrends Inc. version "V0.08" date 06/16/2020
bios0: AZW T4
acpi0 at bios0: ACPI 5.0
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG SSDT SSDT SSDT UEFI SSDT HPET SSDT 
SSDT SSDT LPIT BCFG PRAM BGRT CSRT WDAT SSDT SSDT SSDT
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Atom(TM) x5-Z8500 CPU @ 1.44GHz, 1440.33 MHz, 06-4c-03
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,AES,RDRAND,NXE,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,TSC_ADJUST,SMEP,ERMS,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN
cpu0: 1MB 64b/line 16-way L2 cache
cpu0: apic clock running at 79MHz
cpu0: mwait min=64, max=64, C-substates=0.2.0.0.0.0.3.3, IBE
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 115 pins
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (RP01)
acpiprt2 at acpi0: bus 2 (RP02)
acpiprt3 at acpi0: bus -1 (RP03)
acpiprt4 at acpi0: bus -1 (RP04)
acpipci0 at acpi0 PCI0: 0x 0x0011 0x0001
"INT33A4" at acpi0 not configured
sdhc0 at acpi0 SDHA addr 0x91a3a000/0x1000 irq 45
sdhc0: SDHC 3.0, 200 MHz base clock
sdmmc0 at sdhc0: 8-bit, sd high-speed, mmc high-speed, ddr52, dma
sdhc1 at acpi0 SDHB addr 0x91a38000/0x1000 irq 46
sdhc1: SDHC 3.0, 200 MHz base clock
sdmmc1 at sdhc1: 4-bit, sd high-speed, mmc high-speed, ddr52, dma
sdhc2 at acpi0 SHC1 addr 0x91a36000/0x1000 irq 47
sdhc2: SDHC 3.0, 200 MHz base clock
sdmmc2 at sdhc2: 4-bit, sd high-speed, mmc high-speed, ddr52, dma
"INTL9C60" at acpi0 not configured
"INTL9C60" at acpi0 not configured
"8086228A" at acpi0 not configured
"8086228A" at acpi0 not configured
"8086228E" at acpi0 not configured
"8086228E" at acpi0 not configured
"8086228E" at acpi0 not configured
dwiic0 at acpi0 I2C1 addr 0x91a32000/0x1000 irq 32
iic0 at dwiic0
dwiic1 at acpi0 I2C2 addr 0x91a3/0x1000 irq 33
iic1 at dwiic1
"10EC5645" at iic1 addr 0x1a not configured
dwiic2 at acpi0 I2C3 addr 0x91a2e000/0x1000 irq 34
iic2 at dwiic2
dwiic3 at acpi0 I2C4 addr 0x91a2c000/0x1000 irq 35
iic3 at dwiic3
dwiic4 at acpi0 I2C5 addr 0x91a2a000/0x1000 irq 36
iic4 at dwiic4
dwiic5 at acpi0 I2C6 addr 0x91a28000/0x1000 irq 37
iic5 at dwiic5
dwiic6 at acpi0 I2C7 addr 0x91a26000/0x1000 irq 38
iic6 at dwiic6
chvgpio0 at acpi0 GPO1 uid 2 addr 0xfed88000/0x8000 irq 48, 59 pins
"INT34D3" at iic6 addr 0x6e not configured
"808622A8" at acpi0 not configured
"INT33D5" at acpi0 not configured
acpicmos0 at acpi0
"PNP0C0C" at acpi0 not configured
chvgpio1 at acpi0 GPO0 uid 1 addr 0xfed8/0x8000 irq 49, 56 pins
chvgpio2 at acpi0 GPO2 uid 3 addr 0xfed9/0x8000 irq 50, 24 pins
chvgpio3 at acpi0 GPO3 uid 4 addr 0xfed98000/0x8000 irq 91, 55 pins
chvgpio4 at acpi0 GPO4 uid 5
"ACPI0011" at acpi0 not configured
"INT33BD" at acpi0 not configured
"ACPI000C" at acpi0 not configured
"INT3400" at acpi0 not configured
"INT3407" at acpi0 not configured
"INT3403" at acpi0 not configured
"INT3409" at acpi0 not configured
acpicpu at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0 not configured
acpipwrres at acpi0

Re: OpenCV on 6.9 can't open camera

[Jeff Ross]

On 8/10/21 6:22 AM, Karsten Pedersen wrote:

I'd appreciate anyone's thoughts on fixing this!

Not sure if this is a solution for you (unless you want to faff
with creating some minimal Python bindings) but I hacked at the OpenBSD
/usr/X11R6/bin/video source code to create a quick standalone C API
to be used as a library.

Yes, it is probably not so portable as OpenCV but it is much lighter
in terms of dependencies.

openbsd_cam.h [https://pastebin.com/1rDpFMR4]
openbsd_cam.c [https://pastebin.com/kuv3KhCX]

(Original program: https://cvsweb.openbsd.org/xenocara/app/video/video.c)

I also chucked in some decoding so it basically provides you now with
an array of bytes referring to RGB pixels.

Best regards,

Karsten


Hi Karsten,

Thanks for the reply.  This looks like an interesting project but I 
think adapting it to my needs is going to be way above my pay grade!


Jeff

Re: OpenCV on 6.9 can't open camera

[Jeff Ross]

On 8/10/21 1:14 AM, Kevin Lo wrote:

On Mon, Aug 09, 2021 at 11:56:36AM -0600, Jeff Ross wrote:

Hi,

OpenCV (installed from the package) doesn't seem to be able to open the
camera. The camera (in this case for testing a Logitech C910) can be
accessed no problem with ffplay, fswebcam and video(1).?? I also opened the
kern sysctls for both audio and video and chowned /dev/video to my user.


I'd appreciate anyone's thoughts on fixing this!

Hi, I encountered the same problem.  Just committed a fix:
https://marc.info/?l=openbsd-ports-cvs=162857744213080=2


Jeff Ross

Kevin


Thanks Kevin!  I'm building the new 4.5.2 version now.

Jeff

OpenCV on 6.9 can't open camera

[Jeff Ross]

Hi,

I'm porting a python3 program I wrote for capturing jpegs from a USB 
based webcam, using OpenCV for capture and post-processing.  I was 
running this on a RaspberryPi 3B+ under linux but I'm sick of battling 
crappy hardware and linux so I bought a Mini PC stick and installed 
6.9.  (dmesg follows)


OpenCV (installed from the package) doesn't seem to be able to open the 
camera. The camera (in this case for testing a Logitech C910) can be 
accessed no problem with ffplay, fswebcam and video(1).  I also opened 
the kern sysctls for both audio and video and chowned /dev/video to my user.


jross@aurora-cam:/home/jross $ fswebcam  -d v4l2:/dev/video0 -F3 --save 
test2.jpg

--- Opening v4l2:/dev/video0...
/dev/video0 opened.
No input was specified, using the first.
Adjusting resolution from 384x288 to 432x240.
--- Capturing 3 frames...
Captured 3 frames in 0.06 seconds. (46 fps)
--- Processing captured image...
Writing JPEG image to 'test2.jpg'.

OpenCV not so much though:

jross@aurora-cam:/home/jross $ cat open_test.py
import cv2 as cv
import subprocess

cap = cv.VideoCapture(0, cv.CAP_V4L2)
print(cap)
if not cap.isOpened():
    print("Open Failed!")
elif cap.isOpened():
    print("Open Succeeded!")

height = cap.get(cv.CAP_PROP_FRAME_HEIGHT)
width = cap.get(cv.CAP_PROP_FRAME_WIDTH)
exposure = cap.get(cv.CAP_PROP_AUTO_EXPOSURE)

print(height,width,exposure)
frame = []
try:
    ret, temp_frame = cap.read()
    print(ret)
except Exception as e:
    print(e)
    #kill anything else using the camera
    pid = subprocess.check_output("fuser -k 
/dev/video0",stderr=subprocess.STDOUT, shell=True)[:-1].decode('utf-8')

    print("Exception caught! %s" % (e))
frame.append(temp_frame)
print(frame)

jross@aurora-cam:/home/jross $ python3 open_test.py

Open Failed!
0.0 0.0 0.0
False
[None]

I'd appreciate anyone's thoughts on fixing this!

Jeff Ross

dmesg:

OpenBSD 6.9 (GENERIC.MP) #473: Mon Apr 19 10:40:28 MDT 2021
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 4099731456 (3909MB)
avail mem = 3960090624 (3776MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 3.0 @ 0xe9c60 (84 entries)
bios0: vendor American Megatrends Inc. version "2.0" date 09/18/2020
bios0: AXON Mini PC Stick
acpi0 at bios0: ACPI 6.0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP FPDT FIDT MCFG DBG2 DBGP LPIT APIC NPKT PRAM 
WSMT SSDT SSDT SSDT SSDT SSDT SSDT SSDT SSDT UEFI BGRT WDAT NHLT
acpi0: wakeup devices HDAS(S3) PRT0(S4) PRT1(S4) XHC_(S4) XDCI(S4) 
BRCM(S0) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4) 
PXSX(S4) RP05(S4) PXSX(S4) [...]

acpitimer0 at acpi0: 3579545 Hz, 32 bits
acpimcfg0 at acpi0
acpimcfg0: addr 0xe000, bus 0-255
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Celeron(R) CPU J3355 @ 2.00GHz, 1996.01 MHz, 06-5c-09
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SMEP,ERMS,MPX,RDSEED,SMAP,CLFLUSHOPT,PT,SHA,MD_CLEAR,IBRS,IBPB,STIBP,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES

cpu0: 1MB 64b/line 16-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 19MHz
cpu1 at mainbus0: apid 4 (application processor)
cpu1: Intel(R) Celeron(R) CPU J3355 @ 2.00GHz, 1995.43 MHz, 06-5c-09
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SMEP,ERMS,MPX,RDSEED,SMAP,CLFLUSHOPT,PT,SHA,MD_CLEAR,IBRS,IBPB,STIBP,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES

cpu1: 1MB 64b/line 16-way L2 cache
cpu1: smt 0, core 2, package 0
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 120 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (RP01)
acpiprt2 at acpi0: bus 2 (RP02)
acpiprt3 at acpi0: bus -1 (RP03)
acpiprt4 at acpi0: bus -1 (RP04)
acpiprt5 at acpi0: bus -1 (RP05)
acpiprt6 at acpi0: bus -1 (RP06)
aplgpio0 at acpi0 GPO0 uid 1 addr 0xd0c5/0x76c irq 14, 78 pins
acpipci0 at acpi0 PCI0: 0x 0x0011 0x0001
acpicmos0 at acpi0
acpibtn0 at acpi0: PWRB
aplgpio1 at acpi0 GPO1 uid 2 addr 0xd0c4/0x764 irq 14, 77 pins
aplgpio2 at acpi0 GPO2 uid 3 addr 0xd0c7/0x674 irq 14, 47 pins
aplgpio3 at acpi0 GPO3 uid 4 addr 0xd0c0/0x654 irq 14, 43 pins
"ACPI0011" at acpi0 not configured
"INT33A1" at acpi0 not configured
"INT3400" at acpi0 not configu

Re: Upgrade to 6.8 issues

[Jeff Ross]

On 4/12/21 3:12 AM, Stuart Henderson wrote:

On 2021-04-11, Jeff Ross  wrote:

Hi all,

Just upgraded to 6.8 from 6.3 (yes, I know...) and now find a few of the
websites I'm hosting are no longer connecting to postgres because pear
DB is apparently no longer in ports.  Fortunately so far they all appear
to be *my* websites so no harm, no foul.

The sites that I'm hosting through something like drupal7 or wordpress
are all fine--it's only the sites that I created a gazillion years ago
using pear DB that are really failing.

Are there alternatives that I'm missing?

Please, I really don't feel the need to move off apache2 just yet.

Thanks,

Jeff



I don't recall pear DB being in ports, could you have installed it separately
and just need to update it to work with current php?

Generally pear things doesn't get added to ports unless needed for some
particular application that is wanted in ports, but that is not so common these
days as php applications normally bundle their own 'vendored' dependencies.
To install them yourself you can use "pear install" (systemwide) or just for
a particular project via a dependency manager e.g. "composer".

(note pear DB is still available but no longer getting normal updates, see
https://pear.php.net/package/DB/, see https://pear.php.net/package/MDB2 for
similar current equivalent).
  

Thanks Stuart!  That was indeed the issue--I was just surprised that my 
old version of DB.php was deleted.  There were a few more tweaks and 
pinches to make that big jump but nothing too hard to figure out.


Jeff

Upgrade to 6.8 issues

[Jeff Ross]

Hi all,

Just upgraded to 6.8 from 6.3 (yes, I know...) and now find a few of the 
websites I'm hosting are no longer connecting to postgres because pear 
DB is apparently no longer in ports.  Fortunately so far they all appear 
to be *my* websites so no harm, no foul.


The sites that I'm hosting through something like drupal7 or wordpress 
are all fine--it's only the sites that I created a gazillion years ago 
using pear DB that are really failing.


Are there alternatives that I'm missing?

Please, I really don't feel the need to move off apache2 just yet.

Thanks,

Jeff

Re: mosquitto with websockets enabled?

[Jeff Ross]

On 11/25/20 3:03 PM, Stuart Henderson wrote:

[moved to ports@ and cc'ing mosquitto maintainer]

In gmane.os.openbsd.misc, Jeff Ross wrote:

Greetings,

I've been trying to build mosquitto with websockets enabled on 6.8
release.  The web says that all I should have to do is edit config.mk
and change WITH_WEBSOCKETS:=no to WITH_WEBSOCKETS:=yes.
I also added libwebsockets from ports.

I built a patch to do that and then built the port with that patch.

test68# cd /usr/ports/net/mosquitto/patches/
test68# cat patch-config_mk
--- config.mk.orig    Wed Nov 25 09:33:17 2020
+++ config.mk    Wed Nov 25 09:33:34 2020
@@ -65,7 +65,7 @@
   WITH_SRV:=no

   # Build with websockets support on the broker.
-WITH_WEBSOCKETS:=no
+WITH_WEBSOCKETS:=yes

   # Use elliptic keys in broker
   WITH_EC:=yes

However, I still get the following:

test68# /usr/local/sbin/mosquitto -c /etc/mosquitto/mosquitto.conf
1606323544: Error: Websockets support not available.
1606323544: Error found at /etc/mosquitto/mosquitto.conf:241.

ktracing the command above I don't even see a place where it actually
looks to see if websockets are enabled.

I'm hoping someone has gone down this path before and can share the
secret sauce to enable websockets.

Alternatively, a suggestion for a different implementation of MQTT with
websockets would be fine.

Thanks,

Jeff Ross



config.mk is for the autoconf-based build system, the mosquitto port
uses the CMake one instead so you need to set configure flags.

This works for me - Jasper, what do you think about adding to the
port? (either directly like this or as a flavour)?

Index: Makefile
===
RCS file: /cvs/ports/net/mosquitto/Makefile,v
retrieving revision 1.33
diff -u -p -r1.33 Makefile
--- Makefile22 Aug 2020 13:55:07 -  1.33
+++ Makefile25 Nov 2020 21:42:00 -
@@ -3,6 +3,7 @@
  COMMENT = opensource MQTT broker
  
  DISTNAME =		mosquitto-1.6.12

+REVISION = 0
  
  SHARED_LIBS +=  mosquitto 1.0 # 1.5

  SHARED_LIBS +=  mosquittopp   1.0 # 1.5
@@ -15,7 +16,7 @@ MAINTAINER =  Jasper Lievisse Adriaanse
  # EPL/EDL
  PERMIT_PACKAGE =  Yes
  
-WANTLIB +=		c crypto m pthread ssl ${COMPILER_LIBCXX}

+WANTLIB += c crypto m pthread ssl websockets ${COMPILER_LIBCXX}
  
  MASTER_SITES =		https://mosquitto.org/files/source/
  
@@ -29,12 +30,15 @@ MODPY_RUNDEP=		No

  MODPY_VERSION=${MODPY_DEFAULT_VERSION_3}
  
  BUILD_DEPENDS =		devel/uthash

+LIB_DEPENDS =  www/libwebsockets
  
  DEBUG_PACKAGES =	${BUILD_PACKAGES}
  
-CONFIGURE_ARGS=		-DWITH_SRV=no

+CONFIGURE_ARGS=-DWITH_SRV=no \
+   -DWITH_WEBSOCKETS=yes
  # Pre-shared key support was intentionally removed from libressl
  CONFIGURE_ARGS += -DWITH_TLS_PSK=no
+CONFIGURE_ENV +=   LDFLAGS="-L${LOCALBASE}/lib"
  
  CFLAGS +=		-I${LOCALBASE}/include
  



Thanks, Stuart!  I never would have hit upon the right combination of 
changes.


Jeff

mosquitto with websockets enabled?

[Jeff Ross]

Greetings,

I've been trying to build mosquitto with websockets enabled on 6.8 
release.  The web says that all I should have to do is edit config.mk 
and change WITH_WEBSOCKETS:=no to WITH_WEBSOCKETS:=yes.

I also added libwebsockets from ports.

I built a patch to do that and then built the port with that patch.

test68# cd /usr/ports/net/mosquitto/patches/
test68# cat patch-config_mk
--- config.mk.orig    Wed Nov 25 09:33:17 2020
+++ config.mk    Wed Nov 25 09:33:34 2020
@@ -65,7 +65,7 @@
 WITH_SRV:=no

 # Build with websockets support on the broker.
-WITH_WEBSOCKETS:=no
+WITH_WEBSOCKETS:=yes

 # Use elliptic keys in broker
 WITH_EC:=yes

However, I still get the following:

test68# /usr/local/sbin/mosquitto -c /etc/mosquitto/mosquitto.conf
1606323544: Error: Websockets support not available.
1606323544: Error found at /etc/mosquitto/mosquitto.conf:241.

ktracing the command above I don't even see a place where it actually 
looks to see if websockets are enabled.


I'm hoping someone has gone down this path before and can share the 
secret sauce to enable websockets.


Alternatively, a suggestion for a different implementation of MQTT with 
websockets would be fine.


Thanks,

Jeff Ross

Re: Anyone tried NanoPi R2S or a 2 LAN SBC?

[Jeff Ross]

On 8/18/20 1:59 PM, Dani Deni wrote:

Hello,

trying to find a low powered single board computer with two gigabit LAN for
router purposes.

already checked the https://www.openbsd.org/arm64.html page, but google
doesn't brings up any arm64 based SBC with 2 gigabit network ports that
OpenBSD supports.

or the NanoPi R2S can run OpenBSD? Anyone tried?

https://www.friendlyarm.com/index.php?route=product/product_id=282

22$ ! cheap, low power usage and two gbit ethernet! It would be great if
they wouldn't officially advert it with some custom OS :(

With metal case to keep it from overheating (+$6.00), USB power supply 
and shipping to USA/Montana (DHL 10-17 days/$27, SF-Express 5-14 
days/$42)  for a total of $59.99/$74.99 this no longer falls into the 
category of "let's get one just to see!"


Just saying.

Re: When will be created a great desktop experience for OpenBSD?

[Jeff Ross]

On 5/7/19 4:23 PM, ropers wrote:

Tangentially related: Does anyone here routinely use the default fvwm?

Now for a really noobish question: Those that do, do you also launch
graphical apps by typing something like this in xterm:

$ firefox > /dev/null 2>&1 &

or do you normally do something else that I've totally overlooked?

(Again, this is about how people use stock default fvwm. If your
answer begins with "install $this_other_launcher", it's probably not
what I'm looking for, but thanks anyway.)


I just do

$ firefox

in an xterm and let it start in that window.  I have 9 windows available 
in the little floating window selector doohickey so one for firefox, one 
for Thunderbird, and mostly the rest for xterms.


Jeff

Re: USB power management

[Jeff Ross]

Black electrical tape is my go to solution for those obnoxious flashing 
leds.


Jeff


On 6/12/18 12:17 PM, Thuban wrote:

Hi,
this might look as a stupid question, but I'm stuck and don't know where
to look at this point.
How would you disable an USB port?
I would like to power off a USB drive (flashing blue LED at night) but
keep it plugged, and power on when I need it.

Any advice?

Regards.

Re: acme-client(1) and http_proxy

[Jeff Ross]

On 4/26/17 12:41 PM, Theo de Raadt wrote:


I haven't seen anyone mention acme.sh yet--a shell script for
letsencrypt with no external dependencies.

https://github.com/Neilpang/acme.sh

No external dependencies, and no security foundations.

No privsep, no clear seperation.

Using pretty much every unsafe pattern tied to security holes in the past.

Using the openssl command *GO READ THAT CODE SOMETIME*, don't go read
the libressl one, go read upstream openssl command source.

No attempt at security.

Just doing the job, and assuming every mistake later can be

It's like constructing jetliners from foundational components, and by
that I mean sticks and stones.

I'm sorry, but I don't get it.  It is crazy to recommend something
that hasn't been STUDIED to ensure it dutifully tries to only perform
the task and creates no new risk.


Always good to hear from you, Theo!

acme.sh does not require root/sudoer access.  For sure I run it as an 
unprivileged user and hope you do as well!


Jeff

Re: acme-client(1) and http_proxy

[Jeff Ross]

On 4/26/17 11:02 AM, Stuart Henderson wrote:


On 2017-04-25, Adam Thompson  wrote:

On 2017-04-25 05:27, Stuart Henderson wrote:


* If you want to do dns-01 challenge with acme-client, you'll need to
use Kristaps' version for now, base acme-client only supports the
standard http challenge type. The UI isn't the simplest; use
'-t dns-01', then it outputs "dns-01 domainname token.key", then
you convert token.key into a suitable format for a DNS TXT record:
   "echo -n token.key | sha256 -b | tr -d = | tr + - | tr / _"
Get the record to the nameserver, then send the whole "dns-01
domainname token.key" line back to acme-client, and cross fingers.
If there are too many errors you'll lock yourself out for a period,
so test with the staging server first.


I haven't seen anyone mention acme.sh yet--a shell script for 
letsencrypt with no external dependencies.


https://github.com/Neilpang/acme.sh

It was trivial for me to write a dns api script for djbdns--very handy 
to have to bootstrap a new domain without previously setting up http in 
apache2 first.


I'd send that out to anyone interested--ask me off list.

Jeff

Re: PostgreSQL problem with mod_perl2 and Apache2

[Jeff Ross]

On 3/19/17 8:26 PM, Chris Bennett wrote:

I have been switching over to mod_perl2 and Apache2.
I finally found some good info to fill in the blanks. Sigh.

Everything seems to be pulling into place fine, but I may still have
some stuff messed up or should I upgrade to a fresher snap?

OpenBSD 6.1-beta (GENERIC.MP) #220: Thu Mar  9 06:40:02 MST 2017
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 4277862400 (4079MB)
avail mem = 4143546368 (3951MB)

I can send a full dmesg if helpful.

I am running Apache2 error_log at debug.

I get this message, is it important?

[Sun Mar 19 21:04:41.049481 2017] [core:notice] [pid 45788] AH00052:
child pid 17244 exit signal Bus error (10)

But I get a 500 error on a perfectly good page. Stopping and restarting
PostgreSQL fixes problem.

[Sun Mar 19 20:53:33.137631 2017] [perl:error] [pid 4540] [client
192.168.0.8:42252] DBI
connect('dbname=benconphotos;host=127.0.0.1;port=5432','bencon',...)
failed: FATAL:  sorry, too many clients already at
/usr/local/libdata/perl5/site_perl/MyPerl/PortableBuildingsGuide.pm line
59.\n, referer:
http://192.168.0.8/customer/portable_buildings/Metal_Roofing.html

This occurs randomly on any page. I am not running Firefox 52 yet.

I am the only client, so that isn't the problem.

I added
kern.seminfo.semmni=60  # PostgreSQL
kern.seminfo.semmns=1024# PostgreSQL


Could the fact that I don't have crap for memory be the problem?

Any help appreciated!

Chris Bennett


I use this on a server with 8G ram:

# For PostgreSQL Port
kern.seminfo.semmni=512
kern.seminfo.semmns=4096
kern.shminfo.shmall=65536
kern.shminfo.shmmax=536870912

But the error suggests that you are making too many connections to 
postgres.  What is max_connections in postgresql.conf set to?


By default is is set at 100--I have mine set at:

jross@luna:/home/jross $ psql -d template1
Null display is "NULL".
Timing is on.
psql (9.5.3)
Type "help" for help.

jross@template1 localhost# show max_connections;
 max_connections
-
 80
(1 row)

Time: 0.643 ms

and this is a fairly busy webserver running apache2 (no mode_perl though).

If you really are running out of connections (check the postgres logs to 
make sure) I'd suggest adding a connection pooler like pgbouncer in 
front of postgres rather than just blindly bumping up max_connections.


Jeff

Re: Making sense of ktrace

[Jeff Ross]

On 11/23/16 8:25 PM, Jeremie Courreges-Anglas wrote:

"Andy Bradford" <amb-open...@bradfords.org> writes:


Thus said Jeff Ross on Wed, 23 Nov 2016 15:42:08 -0700:


The  stack may  indeed  be too  damaged--I get  the  following but  it
doesn't look very helpful:


More likely the symbols were stripped.

Assuming this was installed from sources,  edit conf-cc and add -g, then
edit conf-ld and remove the -s:

$ head -1 conf-cc
cc -O2 -g
$ head -1 conf-ld
cc


Better add -g here too.


$

Then recompile  and try  again (e.g.  get a  new core  file and  run gdb
again).

Andy




I made the change to conf-cc and conf-ld and indeed, I got a core file 
that showed the source and the point of failure.


Thanks Andy and Jeremie!

Jeff

Re: Making sense of ktrace

[Jeff Ross]

On 11/23/16 1:16 PM, Otto Moerbeek wrote:

On Wed, Nov 23, 2016 at 12:37:12PM -0700, Jeff Ross wrote:


Hi all,

I've got a program that seg faults on OpenBSD 6.0 AMD64 release that runs
fine on 5.9 i386.

I'm checking to see if will also run on 5.9 AMD64 right now but it doesn't
appear to be w^x related.  To be sure I've mounted that partition with
wxallowed.

Here are the last few lines from kdump--would sure appreciate it if someone
could shed some light on what's happening.

 47868 fastforward CALL
mmap(0,0x1000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)
 47868 fastforward RET   mmap 9049032314880/0x83ae45b5000
 47868 fastforward CALL
mmap(0,0x1000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)
 47868 fastforward RET   mmap 9049215606784/0x83aef482000
 47868 fastforward CALL
mmap(0,0xa000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)
 47868 fastforward RET   mmap 9047796883456/0x83a9ab82000
 47868 fastforward CALL  mprotect(0x83b09fd2000,0x1000,0x1)
 47868 fastforward RET   mprotect 0
 47868 fastforward CALL  munmap(0x83a9ab82000,0xa000)
 47868 fastforward RET   munmap 0
 47868 fastforward CALL  mprotect(0x83870f07000,0x1000,0x1)
 47868 fastforward RET   mprotect 0
 47868 fastforward CALL  getthrid()
 47868 fastforward RET   getthrid 1047868/0xffd3c
 47868 fastforward CALL  __set_tcb(0x83b14ce3600)
 47868 fastforward RET   __set_tcb 0
 47868 fastforward CALL
mmap(0,0x1000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)
 47868 fastforward RET   mmap 9049102131200/0x83ae884a000
 47868 fastforward CALL  mprotect(0x83ae884a000,0x1000,0x1)
 47868 fastforward RET   mprotect 0
 47868 fastforward CALL
mprotect(0x83ae884a000,0x1000,0x3<PROT_READ|PROT_WRITE>)
 47868 fastforward RET   mprotect 0
 47868 fastforward CALL  mprotect(0x83ae884a000,0x1000,0x1)
 47868 fastforward RET   mprotect 0
 47868 fastforward CALL  sigaction(SIGPIPE,0x7f7cdec0,0)
 47868 fastforward STRU  struct sigaction { handler=SIG_IGN, mask=0<>,
flags=0<> }
 47868 fastforward RET   sigaction 0
 47868 fastforward PSIG  SIGSEGV SIG_DFL code SEGV_MAPERR<1> addr=0x71008620
trapno=6
 47868 fastforward NAMI  "fastforward.core"


The program is aborted by a SIGSEGV. Thta means it is accessing a
memory location that is not  allocated by the program.



I've re-compiled this also with what I found on the internet to make a core
file that gdb can use but that's even more of a mystery to me than ktrace.
Is there a better debugger that I can use?

Thanks,

Jeff Ross


$ gdb fastforward fastforward.core
then type the command bt, should give you some clue, if the stack isn't
damaged too much.

-Otto


Thank you, Otto!

The stack may indeed be too damaged--I get the following but it doesn't 
look very helpful:


jross@luna:/package/mail/sqmail/sqmail-3.2.13 $ sudo gdb 
/var/qmail/bin/fastforward fastforward.core

GNU gdb 6.3
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain 
conditions.

Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-unknown-openbsd6.0"...(no debugging 
symbols found)


Core was generated by `fastforward'.
Program terminated with signal 11, Segmentation fault.
(no debugging symbols found)
Loaded symbols for /var/qmail/bin/fastforward
Reading symbols from /usr/lib/libc.so.88.0...done.
Loaded symbols for /usr/lib/libc.so.88.0
Reading symbols from /usr/libexec/ld.so...done.
Loaded symbols for /usr/libexec/ld.so
#0  0x0115d4803035 in ?? () from /var/qmail/bin/fastforward
(gdb) bt
#0  0x0115d4803035 in ?? () from /var/qmail/bin/fastforward
#1  0x0115d4802545 in ?? () from /var/qmail/bin/fastforward
#2  0x0115d48015f2 in ?? () from /var/qmail/bin/fastforward
#3  0x in ?? ()
(gdb)

I built fastforward with

cc -g -O0  -include /usr/include/errno.h -pipe

is there a better incantation?

Thanks again!
Jeff

Making sense of ktrace

[Jeff Ross]

Hi all,

I've got a program that seg faults on OpenBSD 6.0 AMD64 release that 
runs fine on 5.9 i386.


I'm checking to see if will also run on 5.9 AMD64 right now but it 
doesn't appear to be w^x related.  To be sure I've mounted that 
partition with wxallowed.


Here are the last few lines from kdump--would sure appreciate it if 
someone could shed some light on what's happening.


 47868 fastforward CALL 
mmap(0,0x1000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)

 47868 fastforward RET   mmap 9049032314880/0x83ae45b5000
 47868 fastforward CALL 
mmap(0,0x1000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)

 47868 fastforward RET   mmap 9049215606784/0x83aef482000
 47868 fastforward CALL 
mmap(0,0xa000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)

 47868 fastforward RET   mmap 9047796883456/0x83a9ab82000
 47868 fastforward CALL  mprotect(0x83b09fd2000,0x1000,0x1)
 47868 fastforward RET   mprotect 0
 47868 fastforward CALL  munmap(0x83a9ab82000,0xa000)
 47868 fastforward RET   munmap 0
 47868 fastforward CALL  mprotect(0x83870f07000,0x1000,0x1)
 47868 fastforward RET   mprotect 0
 47868 fastforward CALL  getthrid()
 47868 fastforward RET   getthrid 1047868/0xffd3c
 47868 fastforward CALL  __set_tcb(0x83b14ce3600)
 47868 fastforward RET   __set_tcb 0
 47868 fastforward CALL 
mmap(0,0x1000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)

 47868 fastforward RET   mmap 9049102131200/0x83ae884a000
 47868 fastforward CALL  mprotect(0x83ae884a000,0x1000,0x1)
 47868 fastforward RET   mprotect 0
 47868 fastforward CALL 
mprotect(0x83ae884a000,0x1000,0x3<PROT_READ|PROT_WRITE>)

 47868 fastforward RET   mprotect 0
 47868 fastforward CALL  mprotect(0x83ae884a000,0x1000,0x1)
 47868 fastforward RET   mprotect 0
 47868 fastforward CALL  sigaction(SIGPIPE,0x7f7cdec0,0)
 47868 fastforward STRU  struct sigaction { handler=SIG_IGN, mask=0<>, 
flags=0<> }

 47868 fastforward RET   sigaction 0
 47868 fastforward PSIG  SIGSEGV SIG_DFL code SEGV_MAPERR<1> 
addr=0x71008620 trapno=6

 47868 fastforward NAMI  "fastforward.core"

I've re-compiled this also with what I found on the internet to make a 
core file that gdb can use but that's even more of a mystery to me than 
ktrace.  Is there a better debugger that I can use?


Thanks,

Jeff Ross

Re: Redirect all traffic to new server

[Jeff Ross]

On 10/31/16 11:48 AM, Jeff Ross wrote:

On 10/31/16 7:54 AM, Jan Stary wrote:

On Oct 30 11:28:55, jr...@openvistas.net wrote:

Hi all,

I'm moving to a new server hosted at m5 and I'm ready to pull the
trigger on
making the switch.

In the past doing this sort of move I've run into dns update
delays--even
with the ttl on my dns set to 300, there is a lot of e-mail
especially that
continues to attempt to deliver to the old server long after the dns
update
has taken place.

It seems like I should be able to use pf to redirect all inbound traffic
except ssh to the new server.  I tried redirecting web traffic as a test
with the following rule in pf.conf:

#pass all non-ssl web traffic to luna
pass in quick proto tcp to port www rdr-to luna.openvistas.net port 80

but that doesn't work--the connection never completes.  httpd is for
sure
working on the new server--I've been using an /etc/hosts file to test
from
my home Mac and the web sites all work fine.


The rule references the name.
Are you sure it resolves to the new address already?
Would it be safer to just hardcode the IP address for the transition?

Also, this is probably not your _entire_ pf.conf
For example, there is no rule letting the redirected packet out.

Jan



Yes, the domain name resolves.

I followed the example that Philipp pointed me toward and that fixed the
issue of redirecting web traffic.

Thanks for the reply!

Jeff



Update:

I found a tutorial on relayd on calomel.org that helped me better 
understand relayd.  I know full what what the openbsd community thinks 
(and rightfully so most of the time) about these sorts of articles and 
how fast they become outdated and worthless but this one helped me 
better understand relayd.


https://calomel.org/relayd.html

Based on that, I saw that I needed a very simple TCP port relay.  This 
relayd.conf file redirected all web traffic from my existing server to 
the new server hosted at m5:


## Macros
#
varley_addr="64.85.162.217"
luna_addr="207.158.15.155"
www="80"
## TCP port relay and forwarder
#
protocol "tcp_service" {
   tcp { nodelay, socket buffer 65536 }
   }

   relay "www_forwarder" {
   listen on $varley_addr port $www
   protocol "tcp_service"
   forward to $luna_addr port $www
   }


I will also note that the relayd.conf man page also has all of this 
information--see the second relay example--and now that I better 
understand relayd as a whole the rest of the man page makes more sense 
as well.


I've further extended my initial configuration to include smtp, smtps, 
submission and imaps with this configuration:


prefork 10

## Macros
#
varley_addr="64.85.162.217"
luna_addr="207.158.15.155"
www="80"
smtp="25"
imaps="993"
smtps="465"
submission="587"

## TCP port relay and forwarder
#
protocol "tcp_service" {
   tcp { nodelay, socket buffer 65536 }
   }

   relay "www_forwarder" {
   listen on $varley_addr port $www
   protocol "tcp_service"
   forward to $luna_addr port $www
   }
   relay "smtp_forwarder" {
   listen on $varley_addr port $smtp
   protocol "tcp_service"
   forward to $luna_addr port $smtp
   }
   relay "imaps_forwarder" {
   listen on $varley_addr port $imaps
   protocol "tcp_service"
   forward to $luna_addr port $imaps
   }
   relay "smtps_forwarder" {
   listen on $varley_addr port $smtps
   protocol "tcp_service"
   forward to $luna_addr port $smtps
   }
   relay "submission_forwarder" {
   listen on $varley_addr port $submission
   protocol "tcp_service"
   forward to $luna_addr port $submission
   }

relayd -n -f /etc/relayd.conf says the configuration is OK so after peak 
business hours for my clients I'll turn on relayd and see what happens.


If you are familiar with relayd and see something wrong with my 
configuration, please chime in.  I'll report success and any possible 
glitches I run across for the archives.


Thanks for your help and for reading!

Jeff Ross

Re: Redirect all traffic to new server

[Jeff Ross]

On 10/31/16 7:54 AM, Jan Stary wrote:

On Oct 30 11:28:55, jr...@openvistas.net wrote:

Hi all,

I'm moving to a new server hosted at m5 and I'm ready to pull the trigger on
making the switch.

In the past doing this sort of move I've run into dns update delays--even
with the ttl on my dns set to 300, there is a lot of e-mail especially that
continues to attempt to deliver to the old server long after the dns update
has taken place.

It seems like I should be able to use pf to redirect all inbound traffic
except ssh to the new server.  I tried redirecting web traffic as a test
with the following rule in pf.conf:

#pass all non-ssl web traffic to luna
pass in quick proto tcp to port www rdr-to luna.openvistas.net port 80

but that doesn't work--the connection never completes.  httpd is for sure
working on the new server--I've been using an /etc/hosts file to test from
my home Mac and the web sites all work fine.


The rule references the name.
Are you sure it resolves to the new address already?
Would it be safer to just hardcode the IP address for the transition?

Also, this is probably not your _entire_ pf.conf
For example, there is no rule letting the redirected packet out.

Jan



Yes, the domain name resolves.

I followed the example that Philipp pointed me toward and that fixed the 
issue of redirecting web traffic.


Thanks for the reply!

Jeff

Re: Redirect all traffic to new server

[Jeff Ross]

On 10/31/16 12:10 AM, Philipp Buehler wrote:

Am 30.10.2016 18:28 schrieb Jeff Ross:

It seems like I should be able to use pf to redirect all inbound
traffic except ssh to the new server.  I tried redirecting web traffic
as a test with the following rule in pf.conf:

#pass all non-ssl web traffic to luna
pass in quick proto tcp to port www rdr-to luna.openvistas.net port 80


I just assume that the incoming interface is the same that would be needed
to reach luna.openvistas.net?
If so, please see pf.conf(5) in Translation/rdr-to along the 'received-on'
example.

The rdr-to (as of now) will likely send the SYN to the the desired address,
but the src-ip-address will still be of the initial one ("browser") and
thus
the SYN-ACK (emitted from luna) goes there where it'll be ignored for not
being legit.

The example with received-on will fix this.

HTH,


That worked--I'll try to extend that for the other types of traffic I 
have on the existing server.


Thanks!

Jeff

Redirect all traffic to new server

[Jeff Ross]

Hi all,

I'm moving to a new server hosted at m5 and I'm ready to pull the 
trigger on making the switch.


In the past doing this sort of move I've run into dns update 
delays--even with the ttl on my dns set to 300, there is a lot of e-mail 
especially that continues to attempt to deliver to the old server long 
after the dns update has taken place.


It seems like I should be able to use pf to redirect all inbound traffic 
except ssh to the new server.  I tried redirecting web traffic as a test 
with the following rule in pf.conf:


#pass all non-ssl web traffic to luna
pass in quick proto tcp to port www rdr-to luna.openvistas.net port 80

but that doesn't work--the connection never completes.  httpd is for 
sure working on the new server--I've been using an /etc/hosts file to 
test from my home Mac and the web sites all work fine.


This morning it occurred to me that this could probably be done better 
with relayd.  I read (and re-read) the relayd man pages but I'll be the 
first to admit that this sort of networking is not my cup of tea and I 
really don't want to botch this.


Would relayd be the correct solution to redirect all traffic except ssh 
to my new server?  If so, a clue-by-four as to what to put in 
relayd.conf would be greatly appreciated!


Thanks,

Jeff Ross

Re: i386 or amd64?

[Jeff Ross]

On 9/21/16 2:15 PM, Christian Weisgerber wrote:


On 2016-09-20, Jeff Ross <jr...@openvistas.net> wrote:


Subject: i386 or amd64?

If the hardware supports it, run amd64.


If I have 8GB, I for sure want to use it all.

You will need amd64 for that.  But even if you have less memory,
the larger address space is beneficial.  Also, AES-NI support is
only implemented for amd64.  And some crypto algorithms are just
faster on 64 bits.


amd64 has this caveat: "(Some Intel
processors lack support for important PAE NX bit, which means those
machines will run without any W^X support -- it is thus safer to run
those machines in i386 mode)."

That is true but very misleading.  It concerns only some rare early
CPUs.  The only ones I can find in Wikipedia's lists of Intel CPUs
are the "Nocona" Xeons from 2004.

I have now removed that caveat from the page.


Hello and thanks to all that responded!

I'll install amd64 on my server--it is being configured right now. dmesg 
to follow.


Thank you naddy for clarifying the amd64.html page and making OpenBSD's 
already superb documentation even better.


Jeff

i386 or amd64?

[Jeff Ross]

Hi all,

I've had a server with corenetworks for quite a few years now but after 
changes at corenetworks (their recent name change after acquisition by 
another company, no current servers available, no communication about 
the change of ownership with existing customers and an email exchange 
with sales@), I've decided it is best jump ship now rather than wait for 
a hard and possibly immediate deadline.


I've just rented a server with 8GB of ram from m5hosting (based in large 
part from the many recommendations I read while searching misc@ on 
marc.info).  Now the question is: i386 which is what I've always run on 
my 2 GB ram server, or amd64? http://www.openbsd.org/amd64.html and 
http://www.openbsd.org/i386.html are curiously silent on the amount of 
ram that can be accessed.  If I have 8GB, I for sure want to use it all.


I know there was a time when i386 was limited to the amount of ram it 
can access (32 bit) but now amd64 has this caveat: "(Some Intel 
processors lack support for important PAE NX bit, which means those 
machines will run without any W^X support -- it is thus safer to run 
those machines in i386 mode)."  How does this fit with the recent work 
in 6.0+?  How can I tell if the Xeon 3220 processor has the PAE NX bit? 
I see nothing in the tech sheet about PAE NX. 
http://ark.intel.com/products/28034/Intel-Xeon-Processor-X3220-8M-Cache-2_40-GHz-1066-MHz-FSB


I have a little less than 2 weeks to make the transition so not a lot of 
time for install and try.


Thanks in advance for any suggestions--dmesgs supplied once I get access.

Jeff Ross

Open Vistas Networking

Installing php-5.6.18-ap2 alongside php.5.6.18

[Jeff Ross]

Hi all,

Running 5.9 and preparing for moving to apache2 in advance of 6.0.

I'm running apache-httpd-openbsd-1.3.20140502p6 currently with 
php-5.6.18 and quite a few php modules.  I'm trying to get 
apache-httpd-2.4.18p1 running on port 81 so I can test all of my vhosts 
before I pull the plug on apache-httpd-openbsd.


Is it possible to install php-5.6.18-ap2 at the same time as php-5.6.18 
without building from source?


I've tried sudo pkg_add -B /usr/local/apache2/ php-5.6.18-ap2 but that 
fails:


#pkg_add -B /usr/local/apache2/ php-5.6.18-ap2
Can't install php-5.6.18-ap2 because of conflicts (php-5.6.18)
--- php-5.6.18-ap2 ---
Can't install php-5.6.18-ap2: conflicts

If I have to build from source to test that's okay--just hoping for a 
pointer to a quicker method that isn't yet obvious to me.


Thanks,

Jeff Ross

Re: [OT] Cloud storage accessible via sftp or rsync/ssh?

[Jeff Ross]

On 7/20/16 8:31 AM, Sam Hays wrote:


2016-07-20 11:27 GMT+02:00 John Long :

Can anybody recommend a good cloud storage provider that has access
via sftp or rsync tunneled through ssh? Everything I have found seems
targeted at Windows, Linux, phones etc. with no platform-agnostic interface.


Consider AWS / S3?  I believe there is an OpenBSD port for aws-cli.  I do 
realize this isn't 1:1 for what you asked, hard to beat the pricing and 
flexibility, though.

Sam

s3cmd is a python script that includes the ability to "sync" directories 
and S3 buckets.  Not quite rsync but close.  I use it to sync a local 
directory on my server storing level 0 through 7 dump files with an S3 
bucket.  Works great, easy to script.


https://sourceforge.net/projects/s3tools/files/s3cmd/

For easy, graphical access to your S3 buckets, try S3 Organizer (used to 
be s3fox), a firefox extension.


Jeff

Re: syslogd on 6.0-beta

[Jeff Ross]

Hi Tim,

I await with bated breath to see where the problem is--can't be because 
the version of OpenBSD is too old.


Jeff


On 5/25/16 4:54 PM, trondd wrote:

On Wed, May 25, 2016 6:39 pm, Jeff Ross wrote:

Hello again,

syslogd doesn't actually work for me on 6.0-beta either.

OpenBSD 6.0-beta (GENERIC.MP) #1768: Wed May 18 12:01:43 MDT 2016
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP

I had been running a May 16th snapshot and didn't have a problem that I
noticed.  I just now updated to a May 25th snapshot and still don't have
this problem.

Tim.

syslogd on 6.0-beta

[Jeff Ross]

  63699 logger   RET   mprotect 0
  63699 logger   CALL mprotect(0x2a9f3000,0x1000,0x1)
  63699 logger   RET   mprotect 0
  63699 logger   CALL  munmap(0x87d73000,0x5000)
  63699 logger   RET   munmap 0
  63699 logger   CALL mprotect(0x3bc51000,0x190,0x3<PROT_READ|PROT_WRITE>)
  63699 logger   RET   mprotect 0
  63699 logger   CALL 
mprotect(0x1bc51000,0x125d,0x7<PROT_READ|PROT_WRITE|PROT_EXEC>)
  63699 logger   RET   mprotect 0
  63699 logger   CALL mprotect(0x3bc51000,0x190,0x1)
  63699 logger   RET   mprotect 0
  63699 logger   CALL mprotect(0x1bc51000,0x125d,0x5<PROT_READ|PROT_EXEC>)
  63699 logger   RET   mprotect 0
  63699 logger   CALL mprotect(0x3bc53000,0x1000,0x1)
  63699 logger   RET   mprotect 0
  63699 logger   CALL 
mmap(0,0x1000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)
  63699 logger   RET   mmap 2146504704/0x7ff11000
  63699 logger   CALL 
mmap(0,0x1000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)
  63699 logger   RET   mmap -2061213696/0x85246000
  63699 logger   CALL  getthrid()
  63699 logger   RET   getthrid 1063699/0x103b13
  63699 logger   CALL  __set_tcb(0x7ff11640)
  63699 logger   RET   __set_tcb 0
  63699 logger   CALL  kbind(0xcf7ef088,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL 
mmap(0,0x1000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,-1,0)
  63699 logger   RET   mmap 2093277184/0x7cc4e000
  63699 logger   CALL mprotect(0x7cc4e000,0x1000,0x1)
  63699 logger   RET   mprotect 0
  63699 logger   CALL  kbind(0xcf7ef048,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL mprotect(0x7cc4e000,0x1000,0x3<PROT_READ|PROT_WRITE>)
  63699 logger   RET   mprotect 0
  63699 logger   CALL mprotect(0x7cc4e000,0x1000,0x1)
  63699 logger   RET   mprotect 0
  63699 logger   CALL  kbind(0xcf7eec08,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  kbind(0xcf7eec08,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  getlogin_r(0x2aa04100,32)
  63699 logger   RET   getlogin_r 0
  63699 logger   CALL  kbind(0xcf7eec08,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  kbind(0xcf7eec08,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  close(1)
  63699 logger   RET   close 0
  63699 logger   CALL  kbind(0xcf7eec08,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  pledge(0x3bc510ae,0)
  63699 logger   STRU  pledge request="stdio"
  63699 logger   RET   pledge 0
  63699 logger   CALL  kbind(0xcf7eec08,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  kbind(0xcf7eec08,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  kbind(0xcf7eec08,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  kbind(0xcf7ebca8,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  kbind(0xcf7ebc68,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  kbind(0xcf7ebca8,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  kbind(0xcf7ebca8,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  sendsyslog(0xcf7ec807,23,0<>)
  63699 logger   RET   sendsyslog -1 errno 57 Socket is not connected
  63699 logger   CALL  kbind(0xcf7eec08,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL mprotect(0x7cc4e000,0x1000,0x3<PROT_READ|PROT_WRITE>)
  63699 logger   RET   mprotect 0
  63699 logger   CALL mprotect(0x7cc4e000,0x1000,0x1)
  63699 logger   RET   mprotect 0
  63699 logger   CALL mprotect(0x7cc4e000,0x1000,0x3<PROT_READ|PROT_WRITE>)
  63699 logger   RET   mprotect 0
  63699 logger   CALL mprotect(0x7cc4e000,0x1000,0x1)
  63699 logger   RET   mprotect 0
  63699 logger   CALL  munmap(0x7cc4e000,0x1000)
  63699 logger   RET   munmap 0
  63699 logger   CALL  exit(0)

Highlighting the appropriate part:
  63699 logger   CALL kbind(0xcf7ebca8,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0
  63699 logger   CALL  sendsyslog(0xcf7ec807,23,0<>)
  63699 logger   RET   sendsyslog -1 errno 57 Socket is not connected
  63699 logger   CALL  kbind(0xcf7eec08,12,0xe755f07f323e9b25)
  63699 logger   RET   kbind 0 63699 logger   CALL 
mprotect(0x7cc4e000,0x1000,0x3<PROT_READ|PROT_WRITE>)

How long has this firewall been up?

jross@fw:/home/jross $ uptime
  4:31PM  up 34 mins, 1 user, load averages: 1.34, 1.28, 1.12


So, how do I re-connect the sendsyslogsocket?

dmesg follows

Jeff Ross

ross@fw:/home/jross $ dmesg
OpenBSD 6.0-beta (GENERIC.MP) #1768: Wed May 18 12:01:43 MDT 2016
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz ("GenuineIntel" 686-class) 
1.84 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,S

Re: syslog on 5.6

[Jeff Ross]

Thank you, Theo.

I know this is true.  I was tempted to jump right to 5.9 but decided to
heed the directions on

http://www.openbsd.org/faq/upgrade56.html

"

*Note: Upgrades are only supported from one release to the release
immediately following it. Do not skip releases. If you got lucky skipping
releases in the past, you may not this time."*


On Wed, May 25, 2016 at 1:39 PM, Theo de Raadt <dera...@cvs.openbsd.org>
wrote:

> We only "support" the last release, and we only make errata available
> for the last two releases.  We don't maintain old code because none of
> us run it.
>
> 5.6 is end-of-life, so you are on your own.
>
> > So far I haven't been able to get syslog to log anything other than it's
> > startup message.
> >
> > I'm using the stock syslog.conf file.
> >
> > logger test message does nothing so I ktraced it.
> >
> > The interesting part is:
> >
> > 22461 logger   RET   sigprocmask ~0x10100<SIGKILL|SIGSTOP>
> >  22461 logger   CALL  sendsyslog(0xcfbda6a8,0x27)
> >  22461 logger   RET   sendsyslog -1 errno 57 Socket is not connected
> >  22461 logger   CALL  sigprocmask(SIG_BLOCK,~0<>)
> >  22461 logger   RET   sigprocmask 0<>
> >  22461 logger   CALL
> mprotect(0x39cd6000,0x1000,0x3<PROT_READ|PROT_WRITE>)
> >
> > So how would I re-connect sendsyslog?
> >
> > Rebooted a couple of times after upgrading to 5.6--I'll be glad to get
> past
> > all of these hurdles so I can get up to 5.9!
> >
> > Thanks,
> >
> > Jeff Ross

syslog on 5.6

[Jeff Ross]

So far I haven't been able to get syslog to log anything other than it's
startup message.

I'm using the stock syslog.conf file.

logger test message does nothing so I ktraced it.

The interesting part is:

22461 logger   RET   sigprocmask ~0x10100<SIGKILL|SIGSTOP>
 22461 logger   CALL  sendsyslog(0xcfbda6a8,0x27)
 22461 logger   RET   sendsyslog -1 errno 57 Socket is not connected
 22461 logger   CALL  sigprocmask(SIG_BLOCK,~0<>)
 22461 logger   RET   sigprocmask 0<>
 22461 logger   CALL  mprotect(0x39cd6000,0x1000,0x3<PROT_READ|PROT_WRITE>)

So how would I re-connect sendsyslog?

Rebooted a couple of times after upgrading to 5.6--I'll be glad to get past
all of these hurdles so I can get up to 5.9!

Thanks,

Jeff Ross

pf sanity check

[Jeff Ross]

Hi all,

I am incrementally bringing my server up to date.  I was on 5.5-current so
following the instructions I upgraded to 5.6 stable.

I re-wrote  my pf.conf to remove the oldqueue rules and to simplify the
rule set.

Checks okay for syntax but it doesn't seem to be redirecting mail to
spamd.  If I telnet to my server on port 25 I do not see the stutter of the
banner at all.

Here's my current pf.conf for other eyes--maybe I've made a thinko in these
new ruless

# $OpenBSD: pf.conf,v 1.49 2009/09/17 06:39:03 jmc Exp $
#
# See pf.conf(5) for syntax and examples.
# Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1
# in /etc/sysctl.conf if packets are to be forwarded between interfaces.
ext_if="re0"  # External Public Interface
tcp_services = "{ 22,53,113,25,993,465,80,443 }"
udp_services = "{ domain, ntp, 1194 }"
icmp_types = "{ echoreq, unreach }"
table  persist
table  persist
set block-policy return
set loginterface $ext_if
set skip on { lo, tun }
match on $ext_if inet all scrub (no-df max-mss 1398)

# filter rules and anchor for ftp-proxy(8)
anchor "ftp-proxy/*"
pass in quick proto tcp to port ftp rdr-to 127.0.0.1 port 8021

# anchor for relayd(8)
block log all
block in log quick proto tcp from  to any
# rules for spamd(8)
table  persist
table  persist file "/etc/mail/nospamd"
pass in log on egress proto tcp from any to any port smtp \
rdr-to 127.0.0.1 port spamd
pass in log on egress proto tcp from  to any port smtp
pass in log on egress proto tcp from  to any port smtp
pass out log on egress proto tcp to any port smtp

pass in log quick on egress proto tcp to port $tcp_services
pass in log quick on egress proto udp to port $udp_services
pass out log quick on egress from any to any

Thanks!

Jeff Ross

Re: apache-httpd-openbsd?

[Jeff Ross]

On 5/9/16 4:26 PM, Daniel Jakots wrote:


On Mon, 9 May 2016 15:03:30 -0600, Jeff Ross <jr...@openvistas.net>
wrote:


Trying to install apache-httpd-openbsd in -current

https://marc.info/?l=openbsd-ports-cvs=146186762111571=2

Hmm--I went through all of the ports@ messages looking for a removal 
announcement but didn't find one.


Thank you, Daniel!

Jeff

Re: apache-httpd-openbsd?

[Jeff Ross]

On 5/9/16 4:25 PM, Fred wrote:


On 05/09/16 22:58, Jeff Ross wrote:

On 5/9/16 3:21 PM, arrowscr...@mail.com wrote:


try pkg_add
http://ftp.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/apache-httpd-2.4.20p1.tgz 





That's apache 2.4, I want the 1.3.9 version that is, as my subject line
says, apache-httpd-openbsd.

Jeff



It was removed 11 days ago:

http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/www/apache-httpd-openbsd/Attic/Makefile 



You'll need a cvs version before 28 Apr 16 if you want to build it 
yourself.


Cheers

Fred


Thanks, Fred!  That explains the missing package!

Jeff

Re: apache-httpd-openbsd?

[Jeff Ross]

On 5/9/16 4:30 PM, Stuart Henderson wrote:


On 2016-05-09, Jeff Ross <jr...@openvistas.net> wrote:

Trying to install apache-httpd-openbsd in -current and it seems the
package is no longer available.

Correct.

Options:

- (preferred) migrate your configuration to a maintained http
server version.


I need mod_rewrite so I guess I'm headed for apache2.

- install 5.9 release.

- checkout an old version of the port (mkdir -p
/usr/ports/mystuff/www; cd /usr/ports/mystuff/www; cvs get -D \
2016/04/01 -d apache-httpd-openbsd ports/www/apache-httpd-openbsd)
and build it yourself; things will break again at some point though.


I cvs uped my src and ports and built
the system from source but when I try to install apache-httpd-openbsd
from ports I'm getting the "reading plist|Error: unknown fragment SHARED
at /usr/libdata/perl5/OpenBSD/Subst.pm line 109, <$fh> line 2." error.

that's not unexpected; the PFRAG.shared complexity has been removed
from ports now that vax is no longer a supported arch.

Okay--I think this must be above my pay grade because I can't see how 
vax is related, nor do I think I need to know ;-)


Thank you, Stuart, as always!

Jeff

Re: apache-httpd-openbsd?

[Jeff Ross]

On 5/9/16 3:21 PM, arrowscr...@mail.com wrote:


try pkg_add 
http://ftp.openbsd.org/pub/OpenBSD/snapshots/packages/amd64/apache-httpd-2.4.20p1.tgz

That's apache 2.4, I want the 1.3.9 version that is, as my subject line 
says, apache-httpd-openbsd.


Jeff

apache-httpd-openbsd?

[Jeff Ross]

Hi all,

Trying to install apache-httpd-openbsd in -current and it seems the 
package is no longer available.  I cvs uped my src and ports and built 
the system from source but when I try to install apache-httpd-openbsd 
from ports I'm getting the "reading plist|Error: unknown fragment SHARED 
at /usr/libdata/perl5/OpenBSD/Subst.pm line 109, <$fh> line 2." error.

As I saw suggested in a recent message to ports@ (1) I rebuilt pkg_add 
from /usr/src/usr.sbin/pkg_add/ but that made no difference.

dmesg below

Thanks,

Jeff Ross

(1) http://marc.info/?l=openbsd-ports=146213655323699=2

OpenBSD 5.9-current (GENERIC.MP) #1: Mon May  9 13:08:53 MDT 2016
r...@fw.openvistas.net:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz ("GenuineIntel" 686-class) 
1.84 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,LAHF,PERF,SENSOR
real mem  = 1040486400 (992MB)
avail mem = 1007853568 (961MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 07/29/05, SMBIOS rev. 2.4 @ 0xe (38 entries)
bios0: vendor Apple Inc. version "MM21.88Z.009A.B00.0706281359" date 
06/28/07
bios0: Apple Inc. Macmini2,1
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP HPET APIC MCFG ASF! SBST ECDT SSDT SSDT SSDT
acpi0: wakeup devices PXS1(S4) PXS2(S4) USB1(S3) USB2(S3) USB3(S3) 
USB4(S3) USB7(S3)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 166MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz ("GenuineIntel" 686-class) 
1.84 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,LAHF,PERF,SENSOR
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpiec0 at acpi0
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (RP01)
acpiprt2 at acpi0: bus 2 (RP02)
acpiprt3 at acpi0: bus 3 (PCIB)
acpicpu0 at acpi0: !C2(500@1 mwait@0x10), C1(1000@1 mwait), PSS
acpicpu1 at acpi0: !C2(500@1 mwait@0x10), C1(1000@1 mwait), PSS
acpibtn0 at acpi0: PWRB
"APP0001" at acpi0 not configured
acpivideo0 at acpi0: GFX0
bios0: ROM list: 0xc/0xe600!
cpu0: Enhanced SpeedStep 1834 MHz: speeds: 1833, 1667, 1500, 1333, 1000 MHz
memory map conflict 0xe00f8000/0x1000
memory map conflict 0xfed1c000/0x4000
memory map conflict 0xfffb/0x3
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82945GM Host" rev 0x03
inteldrm0 at pci0 dev 2 function 0 "Intel 82945GM Video" rev 0x03
drm0 at inteldrm0
intagp0 at inteldrm0
agp0 at intagp0: aperture at 0x4000, size 0x1000
inteldrm0: apic 1 int 16
error: [drm:pid0:drm_edid_block_valid] *ERROR* EDID checksum is invalid, 
remainder is 30
Raw EDID:

00 ff ff ff ff ff ff 00  4c 2d 15 15 39 31 53 53
11 0f 01 03 6c 26 1e 78  2a 6f 86 a2 5a 4d 94 24
1a 4f 54 bf ef 80 81 81  71 4f 01 01 01 01 01 01
01 01 01 01 01 01 30 30  00 98 51 51 2a 40 30 30
13 00 78 2d 11 00 00 00  00 00 00 00 00 38 4b 4b
51 0e 00 0a 20 20 20 20  20 20 00 00 00 fc 00 53
79 6e 63 4d 61 73 74 74  72 0a 20 20 00 00 00 00
00 48 39 39 59 34 33 33  38 33 39 39 20 20 00 00
error: [drm:pid0:drm_edid_block_valid] *ERROR* EDID checksum is invalid, 
remainder is 30
Raw EDID:

00 ff ff ff ff ff ff 00  4c 2d 15 15 39 31 53 53
11 0f 01 03 6c 26 1e 78  2a 6f 86 a2 5a 4d 94 24
1a 4f 54 bf ef 80 81 81  71 4f 01 01 01 01 01 01
01 01 01 01 01 01 30 30  00 98 51 51 2a 40 30 30
13 00 78 2d 11 00 00 00  00 00 00 00 00 38 4b 4b
51 0e 00 0a 20 20 20 20  20 20 00 00 00 fc 00 53
79 6e 63 4d 61 73 74 74  72 0a 20 20 00 00 00 00
00 48 39 39 59 34 33 33  38 33 39 39 20 20 00 00
error: [drm:pid0:drm_edid_block_valid] *ERROR* EDID checksum is invalid, 
remainder is 30
Raw EDID:

00 ff ff ff ff ff ff 00  4c 2d 15 15 39 31 53 53
11 0f 01 03 6c 26 1e 78  2a 6f 86 a2 5a 4d 94 24
1a 4f 54 bf ef 80 81 81  71 4f 01 01 01 01 01 01
01 01 01 01 01 01 30 30  00 98 51 51 2a 40 30 30
13 00 78 2d 11 00 00 00  00 00 00 00 00 38 4b 4b
51 0e 00 0a 20 20 20 20  20 20 00 00 00 fc 00 53
79 6e 63 4d 61 73 74 74  72 0a 20 20 00 00 00 00
00 48 39 39 59 34 33 33  38 33 39 39 20 20 00 00
error: [drm:pid0:drm_edid_block_valid] *ERROR* EDID checksum is invalid, 
remainder is 30
Raw EDID:

00 ff ff ff ff ff ff 00  4c 2d 15 15 39 31 53 53
11 0f 01 03 6c 26 1e 78  2a 6f 86 a2 5a 4d 94 24
1a 4f 54 bf ef 80 81 81  71 4f 01 01 01 01 01 01
01 01 01 01 01 01 

Re: Socklog on OpenBSD -current

[Jeff Ross]

On 3/29/16 5:42 PM, Stuart Henderson wrote:

On 2016-03-29, Jeff Ross <jr...@openvistas.net> wrote:

Greetings all!

I've been away from OpenBSD for a while and for sure I've missed more
than a few things.  Just updated a firewall in anticipation of upgrading
my server but there are things that have changed.

What has me puzzled now is the change to syslogd.  For literally years
I've run socklog from ports to replace the stock syslog with no problems
but now it simply doesn't work on 5.9 -current.

My former installations of socklog all listen to /dev/log but when I
couldn't get anything to work listening there I switched to listening to
0.0.0.0:514 but still no joy.

If anyone out there is using socklog, or possibly any alternative to
syslog, I'd sure appreciate a clue by four to get socklog running again.

OpenBSD's syslog functions now use sendsyslog(2) which doesn't use
/dev/log sockets any more.

Here is where syslogd was modified to do things this way:
http://anoncvs.spacehopper.org/openbsd-src/commit/?id=c40e16771993e74275857863c928d7f9cffe3699
- it's probably not all that complex to convert other logging daemons,
but afaik nobody has yet felt the need to do this for any of the
alternative log daemons in ports.

If you don't want to write code and want to stick with socklog,
the easiest way is probably a minimal syslogd(8) setup that
forwards everything via UDP.

Thank you, Stuart!  As always, you've been very helpful.  For now I'll 
stick to forwarding and play with the code as time permits.


Jeff

Socklog on OpenBSD -current

[Jeff Ross]

Greetings all!

I've been away from OpenBSD for a while and for sure I've missed more 
than a few things.  Just updated a firewall in anticipation of upgrading 
my server but there are things that have changed.


What has me puzzled now is the change to syslogd.  For literally years 
I've run socklog from ports to replace the stock syslog with no problems 
but now it simply doesn't work on 5.9 -current.


My former installations of socklog all listen to /dev/log but when I 
couldn't get anything to work listening there I switched to listening to 
0.0.0.0:514 but still no joy.


If anyone out there is using socklog, or possibly any alternative to 
syslog, I'd sure appreciate a clue by four to get socklog running again.


Thanks!

Jeff

dmesg;

OpenBSD 5.9-current (GENERIC.MP) #1682: Tue Mar 29 12:08:00 MDT 2016
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz ("GenuineIntel" 686-class) 
1.84 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,LAHF,PERF,SENSOR

real mem  = 1040486400 (992MB)
avail mem = 1008070656 (961MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 07/29/05, SMBIOS rev. 2.4 @ 0xe (38 entries)
bios0: vendor Apple Inc. version "MM21.88Z.009A.B00.0706281359" date 
06/28/07

bios0: Apple Inc. Macmini2,1
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP HPET APIC MCFG ASF! SBST ECDT SSDT SSDT SSDT
acpi0: wakeup devices PXS1(S4) PXS2(S4) USB1(S3) USB2(S3) USB3(S3) 
USB4(S3) USB7(S3)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 166MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz ("GenuineIntel" 686-class) 
1.84 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,LAHF,PERF,SENSOR

ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 1
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpiec0 at acpi0
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (RP01)
acpiprt2 at acpi0: bus 2 (RP02)
acpiprt3 at acpi0: bus 3 (PCIB)
acpicpu0 at acpi0: !C2(500@1 mwait@0x10), C1(1000@1 mwait), PSS
acpicpu1 at acpi0: !C2(500@1 mwait@0x10), C1(1000@1 mwait), PSS
acpibtn0 at acpi0: PWRB
"PNP0A08" at acpi0 not configured
"PNP0C02" at acpi0 not configured
"PNP0C0F" at acpi0 not configured
"PNP0C0F" at acpi0 not configured
"PNP0C0F" at acpi0 not configured
"PNP0C0F" at acpi0 not configured
"PNP0C0F" at acpi0 not configured
"PNP0C0F" at acpi0 not configured
"PNP0C0F" at acpi0 not configured
"PNP0C0F" at acpi0 not configured
"APP0001" at acpi0 not configured
"PNP0C09" at acpi0 not configured
"PNP0200" at acpi0 not configured
"INT0800" at acpi0 not configured
"PNP0103" at acpi0 not configured
"PNP" at acpi0 not configured
"PNP0C04" at acpi0 not configured
"PNP0C02" at acpi0 not configured
"PNP0B00" at acpi0 not configured
"PNP0100" at acpi0 not configured
acpivideo0 at acpi0: GFX0
bios0: ROM list: 0xc/0xe600!
cpu0: Enhanced SpeedStep 1834 MHz: speeds: 1833, 1667, 1500, 1333, 1000 MHz
memory map conflict 0xe00f8000/0x1000
memory map conflict 0xfed1c000/0x4000
memory map conflict 0xfffb/0x3
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82945GM Host" rev 0x03
inteldrm0 at pci0 dev 2 function 0 "Intel 82945GM Video" rev 0x03
drm0 at inteldrm0
intagp0 at inteldrm0
agp0 at intagp0: aperture at 0x4000, size 0x1000
inteldrm0: apic 1 int 16
inteldrm0: 1600x900
wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
vendor "Intel", unknown product 0x27a3 (class DASP subclass Time and 
Frequency, rev 0x03) at pci0 dev 7 function 0 not configured

azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x02: msi
azalia0: codecs: Sigmatel STAC9220/1
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x02: apic 1 int 17
pci1 at ppb0 bus 1
mskc0 at pci1 dev 0 function 0 "Marvell Yukon 88E8053" rev 0x22, Yukon-2 
EC rev. A3 (0x2): apic 1 int 16

msk0 at mskc0 port A: address 00:1f:f3:44:ee:6f
eephy0 at msk0 phy 0: 88E Gigabit PHY, rev. 2
ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x02: apic 1 int 16
pci2 at ppb1 bus 2
ath0 at pci2 dev 0 function 0 "Atheros AR5424" rev 0x01: apic 1 int 17
ath0: AR5424 10.3 phy 6.1 rf 10.2 eeprom 5.3, WOR5_ETSIC, address 
00:1f:f3:fa:8d:3e

Re: Keeping a carp backup connected to the internet

[Jeff Ross]

I let both carped firewalls use an internal OpenBSD ntpd server.

On  each firewall, /etc/ntpd.conf has
# sync to a single server
server nirvana.internal

nirvana.internal's ntpd.conf has
# Addresses to listen on (ntpd does not listen by default)
listen on *
# use a random selection of NTP Pool Time Servers
# see http://support.ntp.org/bin/view/Servers/NTPPoolServers
servers pool.ntp.org

Works like a charm!

On 12/12/13, 12:42 PM, Ted Bullock wrote:

CARP(ish) Question:

I have a /30 transit network from my ISP, where there obviously isn't
room for both routers in the carp setup to have a dedicated IP address
in addition to the IP assigned to the carp interface.

If it matters, I've assigned both routers private addresses in my
network and can talk to them just fine on the local network.

Anyway, I've noticed that the clock on the backup router is getting
slowly out of sync. I figure it cannot initiate network sessions to
the public ntp pool since it doesn't have an IP and a valid route to
the internet while it's acting as the backup.

I'd prefer to not run yet another service locally if at all possible
though.

I'm wondering what other folks do in this situation.

System starvation when running fsck_msdos

[Jeff Ross]

Hi all,

I have a small server (5.4-current, more or less, dmesg and other 
pertinent details follow) in an office acting as firewall/samba server.  
We are trying to use an external USB hard drive as a backup.  Because 
these are windows folk and because this is a server with 512M of ram and 
their backup needs aren't that great, that 1TB external drive has one 
50GB  ms-dos partion at i, the rest of the drive is unused.  Hotplugd is 
setup to automagically mount the drive, when it is inserted.  But since 
I have no way (that I know of anyway) to cleanly umount the drive if it 
is just yanked out while mounted, when the backup script starts if it 
doesn't find the drive mounted it tries to fsck-msdos's it first and 
then mount it.


What I'm finding is that when the server tries to fsck_msdos the msdos 
partition, it will more often that not bring the server down. It doesn't 
panic but it gets so resource starved that it is, for all intents and 
purposes, locked up--I can't even ssh into it.


Does an ms-dos file system require far more than the 1MB of ram per 1 GB 
of disk space that http://openbsd.org/faq/faq14.html#LargeDrive suggests?


More generally, does mount return specific error codes that I can catch 
in a script when it fails to successfully mount a partition? I read the 
mount.c and mount_msdos.c source but I didn't find a specific set of 
error codes like I found in fsck_msdos.c.  Other than bail out of the 
backup script and call for help instead of locking the server up I'm not 
sure what I could do with that error code but can't hurt to know them, 
if they exist, either.


Thanks!

Jeff Ross

dmesg:

OpenBSD 5.4-current (GENERIC) #153: Mon Nov 18 20:44:38 MST 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) 4 CPU 2.80GHz (GenuineIntel 686-class) 2.80 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,xTPR,PERF

real mem  = 534769664 (509MB)
avail mem = 514199552 (490MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/21/05, BIOS32 rev. 0 @ 0xfd71c, 
SMBIOS rev. 2.31 @ 0xef7d0 (57 entries)

bios0: vendor IBM version 2AKT49AUS date 03/21/2005
bios0: IBM 8187WQM
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S3 S4 S5
acpi0: tables DSDT FACP TCPA APIC BOOT
acpi0: wakeup devices USB1(S3) USB2(S3) USB3(S3) USB4(S3) USBE(S3) 
SLOT(S5) KBC_(S3) COMA(S5) COMB(S5)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 133MHz
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 3 (SLOT)
acpiprt2 at acpi0: bus -1 (AGP_)
acpicpu0 at acpi0
acpitz0 at acpi0: critical temperature is 90 degC
acpibtn0 at acpi0: PWRB
bios0: ROM list: 0xc/0xa600 0xca800/0x1000 0xcb800/0x1000 
0xe/0x1!

pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82865G Host rev 0x02
vga1 at pci0 dev 2 function 0 Intel 82865G Video rev 0x02
intagp0 at vga1
agp0 at intagp0: aperture at 0xf000, size 0x800
inteldrm0 at vga1
drm0 at inteldrm0
No connectors reported connected with modes
Cannot find any crtc or sizes - going 1024x768
inteldrm0: 1024x768
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
uhci0 at pci0 dev 29 function 0 Intel 82801EB/ER USB rev 0x02: apic 1 
int 16
uhci1 at pci0 dev 29 function 1 Intel 82801EB/ER USB rev 0x02: apic 1 
int 19
uhci2 at pci0 dev 29 function 2 Intel 82801EB/ER USB rev 0x02: apic 1 
int 18
uhci3 at pci0 dev 29 function 3 Intel 82801EB/ER USB rev 0x02: apic 1 
int 16
ehci0 at pci0 dev 29 function 7 Intel 82801EB/ER USB2 rev 0x02: apic 1 
int 23

usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb0 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0xc2
pci1 at ppb0 bus 3
fxp0 at pci1 dev 8 function 0 Intel PRO/100 VE rev 0x02, i82562: apic 
1 int 20, address 00:11:25:25:01:26

inphy0 at fxp0 phy 1: i82562ET 10/100 PHY, rev. 0
skc0 at pci1 dev 10 function 0 D-Link DGE-530T A1 rev 0x11, Yukon 
(0x1): apic 1 int 22

sk0 at skc0 port A: address 00:13:46:72:39:e0
eephy0 at sk0 phy 0: 88E1011 Gigabit PHY, rev. 3
ichpcib0 at pci0 dev 31 function 0 Intel 82801EB/ER LPC rev 0x02
pciide0 at pci0 dev 31 function 1 Intel 82801EB/ER IDE rev 0x02: DMA, 
channel 0 configured to compatibility, channel 1 configured to compatibility

wd0 at pciide0 channel 0 drive 0: WDC WD400BB-23DEA0
wd0: 16-sector PIO, LBA, 38162MB, 78156288 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: TSSTcorp, DVD-ROM TS-H352C, IB01 ATAPI 
5/cdrom removable

cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
pciide1 at pci0 dev 31

php 5.4 and sessions?

[Jeff Ross]

A follow-up to my own post for the archives...

At my work, we run 2 separate web sites from the same instance of 
apache.  http://wykids.org is our internet facing website, 
http://stars.internal is our accessible only from the LAN web front 
end to our PostgreSQL database.  stars.internal is where most of the 
work is done by an office full of very busy people.


Previously--like for the last 7 years--I've set session.cookie_domain in 
the php.ini file to wykids.org and that worked fine for both web sites.


After the upgrade to php-5.4.20, the session would only be persistent on 
the wykids.org web site.  On stars.internal a new session id was 
generated with every call to session_start()--in our case, with every 
page load since we use that session information to track who does what 
and other things.


Removing the session.cookie_domain = wykids.org from the ini file 
restored the default and sessions became persistent again on 
stars.internal, but I don't even want to think about how many hours it 
took to arrive at that ;-)


I tried going back to php-5.3.27 to see if that would fix the problem 
but once I link in 5.3.27 apache fails with a connection to the server 
reset error.  I ran a ktrace -idg on httpd to try and determine why but 
nothing jumps out at me.  I put the ktrace output up on the web at


http://www.wykids.org/ktrace.txt

if anyone wants a look.  It seems to me that even if 5.4 is the new 
default, so long as 5.3 remains in packages it ought to work.


Jeff Ross

--Previous post below

This must be my week.

Is anybody else having problems with php sessions after updating to 
php-5.4?  I'm in a spot now where I can have one user at a time hitting 
the database through the web site.  Using php-5.4.20, php-pgsql-5.4.20 
both installed from packages, on


OpenBSD 5.4-current (GENERIC.MP) #97: Mon Oct 28 10:56:19 MDT 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP

I've tried going back to 5.3.27 through the package but apache doesn't 
seem to like that at all anymore--I can't connect at all to any web page 
on the server with 5.3.27 in use failing with an unexpected read error. 
 Tried building 5.3.27 from ports and I'm getting a raft of bad system 
calls (core dumped) in the build.


Thanks in advance,

Jeff

php 5.4 and sessions?

[Jeff Ross]

This must be my week.

Is anybody else having problems with php sessions after updating to 
php-5.4?  I'm in a spot now where I can have one user at a time hitting 
the database through the web site.  Using php-5.4.20, php-pgsql-5.4.20 
both installed from packages, on


OpenBSD 5.4-current (GENERIC.MP) #97: Mon Oct 28 10:56:19 MDT 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP

I've tried going back to 5.3.27 through the package but apache doesn't 
seem to like that at all anymore--I can't connect at all to any web page 
on the server with 5.3.27 in use failing with an unexpected read error.  
Tried building 5.3.27 from ports and I'm getting a raft of bad system 
calls (core dumped) in the build.


Thanks in advance,

Jeff

CenturyLink with 1 static IP

[Jeff Ross]

Hi all,

One of my networks is switching to CenturyLink for their ISP.  When you 
order 1 static IP they give you an IP, a 255.255.255.255 subnet mask but 
no gateway.  I will put the modem in transparent bridging mode.


I'm going to have to re-configure my CARPed firewalls remotely before we 
make the switch but I'm not sure in this case what, if anything, I would 
put in /etc/mygate.  The same IP address they are giving me?


The other alternative is to order a block of 8 IPs (5 usable) , in which 
case I'll get a gateway but I don't need an additional 4 addresses and 
they don't need the additional expense.


Sorry for the dumb question but I won't have a chance to test this at 
all before I have someone switch the ethernet cable from one modem to 
the other.


Thanks for any insight!

Jeff Ross

Upgrading by installing post time_t snapshot

[Jeff Ross]

I've got to upgrade some remote machines that I only have access via ssh.

I've been using a script based on the Upgrade without install kernel 
for years.  I modified it slightly for this upgrade by adding


/usr/sbin/pwd_mkdb /etc/master.passwd

to /etc/rc.local so the password databases can be updated and I can log 
in after the first reboot.


But how do I make the remote system reboot?  Attempting to use the 
/sbin/oreboot file I made in accordance to the Upgrade without install 
kernel method fails with a Bad system call (core dump) error, as does 
trying *any* command after base is extracted.


In the two systems I just upgraded (a pair of CARPed firewalls) I had a 
person on-site that could power-down the system I just updated but I 
have a few out there in the wild where that is more problematic--not 
impossible, but definitely inconvenient.


What am I missing?

Thanks,

Jeff Ross

Re: Upgrading by installing post time_t snapshot

[Jeff Ross]

On 10/9/13 1:29 PM, Nick Holland wrote:

On 10/09/2013 02:43 PM, Jeff Ross wrote:
I've got to upgrade some remote machines that I only have access via 
ssh.


I've been using a script based on the Upgrade without install kernel
for years.  I modified it slightly for this upgrade by adding

 /usr/sbin/pwd_mkdb /etc/master.passwd

to /etc/rc.local so the password databases can be updated and I can log
in after the first reboot.

But how do I make the remote system reboot?  Attempting to use the
/sbin/oreboot file I made in accordance to the Upgrade without install
kernel method fails with a Bad system call (core dump) error, as does
trying *any* command after base is extracted.


I think you are doing something wrong here...
/sbin/oreboot should be the old binary, which should -- and can! -- 
run on the old kernel.


I just did this last night, so I know it can work. :)

Are you using standard, supplied shells, such as ksh, sh, or csh? I 
could imagine that bash or something else would get really really 
unhappy there, but ksh et al. should be fully resident in RAM.


or did you happen to try sudo oreboot?  that also would be expected 
to not work, not because of oreboot, but because of sudo.


Do an ls -l /sbin/*reboot, I think your /sbin/oreboot isn't what you 
are thinking it is.


Nick.


Hi Nick!

Just the person I was hoping to hear chime in!

Standard ksh shell, as root, although I got there via sudo.

I for sure thought it was odd, but actually on 4 separate systems I've 
had reboot fail.  The first was my little netbook in my lap, but that 
was not problem because I could physically access the keyboard.  The 
next was half of another pair of CARPed firewalls--I have yet to get 
someone in there to fix that--and then the CARPed pair at my 
work--yesterday for one and this morning for the other.


Here is the output of ls -l /sbin/*reboot

jross@samsara1:/home/jross $ ls -l /sbin/*reboot
-r-xr-xr-x  1 root  wheel  189236 Oct  8 13:42 /sbin/oreboot
-r-xr-xr-x  2 root  bin193332 Oct  1 11:46 /sbin/reboot

The oreboot is the copy of the previous /sbin/reboot--and the size 
matches exactly the /sbin/reboot file on another system from about a 
month before the time_t change.


Here's my update script from the first system I tried to upgrade at 
work.  In this case I tried running pwd_mkdb (since I'd checked that it 
was a static binary) before rebooting.


Every command after the extracting base failed.

#!/bin/sh
path=/usr/releasedir/

export RELEASEPATH=$path   # where you put the files
cd ${RELEASEPATH}
rm /obsd ; ln /bsd /obsd  cp bsd.mp /nbsd  mv /nbsd /bsd
cp bsd.rd  /
cp bsd  /bsd.sp

rm -rf /usr/X11R6/lib/modules/*

cp /sbin/reboot /sbin/oreboot
files=xserv xfont xshare xetc xbase game comp man base
for i in $files
  do
echo $i
tar -C / -xzphf $i*
rm -f $i*
sync
done
/usr/sbin/pwd_mkdb /etc/master.passwd
cp /dev/null /var/log/lastlog
cp /dev/null /var/log/wtmp
/sbin/oreboot


However, it just occurred to me that I was in a tmux shell as root--so 
it was *not* ksh!  I'll bet it was tmux that was croaking! I've gotten 
in the habit of using tmux since it's been in base so if my internet 
connection drops the script doesn't stop, leaving the whole system in an 
inconsistent state--which I had happen about halfway through extracting 
base one time.


Hmm--should (and can) tmux be switched to a static binary in base? It's 
great to have that safety net if either side of my sometimes crappy 
internet goes away.


Thanks, as always, Nick!

Jeff

Re: Upgrading by installing post time_t snapshot

[Jeff Ross]

Speaking of failing internet...using my phone...

All of the programs at the end of my script are static binaries, either in /bin 
or /usr/sbin, so they should work, right?   Yet nothing ran, ls and cat both 
failed with the bad system call error. 

I only have one version of my script.  It doesn't call tmux nor did I kill the 
tmux server. 

Interesting!  Thanks for replying. 

Jeff
Sent from my iPhone,
Reluctantly hunting and pecking on a virtual keyboard :-)

 On Oct 9, 2013, at 3:19 PM, Nicholas Marriott nicholas.marri...@gmail.com 
 wrote:
 
 So long as tmux is running and attached it is already in memory and
 replacing the binary on disk should have no effect.
 
 Also ksh is still ksh even if it's inside tmux. tmux is not a
 shell. Once your script is going then whether you are running it inside
 tmux or not should make no difference. Assuming the script doesn't
 itself invoke tmux and you don't do anything to kill the tmux server.
 
 Your script is running rm, sync, pwd_mkdb and cp after replacing them so
 I guess they it is expected they will fail.
 
 No idea why oreboot is failing.
 
 Are you sure you aren't running an old version of the script by
 accident, or something like that?
 
 
 On Wed, Oct 09, 2013 at 02:47:52PM -0600, Jeff Ross wrote:
 On 10/9/13 1:29 PM, Nick Holland wrote:
 On 10/09/2013 02:43 PM, Jeff Ross wrote:
 I've got to upgrade some remote machines that I only have access
 via ssh.
 
 I've been using a script based on the Upgrade without install kernel
 for years.  I modified it slightly for this upgrade by adding
 
/usr/sbin/pwd_mkdb /etc/master.passwd
 
 to /etc/rc.local so the password databases can be updated and I can log
 in after the first reboot.
 
 But how do I make the remote system reboot?  Attempting to use the
 /sbin/oreboot file I made in accordance to the Upgrade without install
 kernel method fails with a Bad system call (core dump) error, as does
 trying *any* command after base is extracted.
 
 I think you are doing something wrong here...
 /sbin/oreboot should be the old binary, which should -- and can!
 -- run on the old kernel.
 
 I just did this last night, so I know it can work. :)
 
 Are you using standard, supplied shells, such as ksh, sh, or csh?
 I could imagine that bash or something else would get really
 really unhappy there, but ksh et al. should be fully resident in
 RAM.
 
 or did you happen to try sudo oreboot?  that also would be
 expected to not work, not because of oreboot, but because of sudo.
 
 Do an ls -l /sbin/*reboot, I think your /sbin/oreboot isn't what
 you are thinking it is.
 
 Nick.
 Hi Nick!
 
 Just the person I was hoping to hear chime in!
 
 Standard ksh shell, as root, although I got there via sudo.
 
 I for sure thought it was odd, but actually on 4 separate systems
 I've had reboot fail.  The first was my little netbook in my lap,
 but that was not problem because I could physically access the
 keyboard.  The next was half of another pair of CARPed firewalls--I
 have yet to get someone in there to fix that--and then the CARPed
 pair at my work--yesterday for one and this morning for the other.
 
 Here is the output of ls -l /sbin/*reboot
 
 jross@samsara1:/home/jross $ ls -l /sbin/*reboot
 -r-xr-xr-x  1 root  wheel  189236 Oct  8 13:42 /sbin/oreboot
 -r-xr-xr-x  2 root  bin193332 Oct  1 11:46 /sbin/reboot
 
 The oreboot is the copy of the previous /sbin/reboot--and the size
 matches exactly the /sbin/reboot file on another system from about a
 month before the time_t change.
 
 Here's my update script from the first system I tried to upgrade at
 work.  In this case I tried running pwd_mkdb (since I'd checked that
 it was a static binary) before rebooting.
 
 Every command after the extracting base failed.
 
 #!/bin/sh
 path=/usr/releasedir/
 
 export RELEASEPATH=$path   # where you put the files
 cd ${RELEASEPATH}
 rm /obsd ; ln /bsd /obsd  cp bsd.mp /nbsd  mv /nbsd /bsd
 cp bsd.rd  /
 cp bsd  /bsd.sp
 
 rm -rf /usr/X11R6/lib/modules/*
 
 cp /sbin/reboot /sbin/oreboot
 files=xserv xfont xshare xetc xbase game comp man base
 for i in $files
  do
echo $i
tar -C / -xzphf $i*
rm -f $i*
sync
done
 /usr/sbin/pwd_mkdb /etc/master.passwd
 cp /dev/null /var/log/lastlog
 cp /dev/null /var/log/wtmp
 /sbin/oreboot
 
 
 However, it just occurred to me that I was in a tmux shell as
 root--so it was *not* ksh!  I'll bet it was tmux that was croaking!
 I've gotten in the habit of using tmux since it's been in base so if
 my internet connection drops the script doesn't stop, leaving the
 whole system in an inconsistent state--which I had happen about
 halfway through extracting base one time.
 
 Hmm--should (and can) tmux be switched to a static binary in base?
 It's great to have that safety net if either side of my sometimes
 crappy internet goes away.
 
 Thanks, as always, Nick!
 
 Jeff

Re: Upgrading by installing post time_t snapshot

[Jeff Ross]

Ah, sure that makes perfect sense. 

I'll have to gather up someone to run the power button on the other servers 
that need upgrading.

Thanks!

Sent from my iPhone,
Reluctantly hunting and pecking on a virtual keyboard :-)

 On Oct 9, 2013, at 4:20 PM, Paul de Weerd we...@weirdnet.nl wrote:
 
 On Wed, Oct 09, 2013 at 03:56:49PM -0600, Jeff Ross wrote:
 | Speaking of failing internet...using my phone...
 | 
 | All of the programs at the end of my script are static binaries,
 | either in /bin or /usr/sbin, so they should work, right?   Yet nothing
 | ran, ls and cat both failed with the bad system call error. 
 
 All of these programs have just been replaced with newer versions that
 have a different idea of which system call does what compared to the
 old situation (the one your running kernel knows about).  These
 binaries being static or dynamic is irrelevant.  Only the old ones are
 capable of still running, that's why you copy /sbin/reboot to
 /sbin/oreboot.
 
 Note that the oreboot trick isn't perfect: a proper shutdown will try
 to nicely stop things (do you have stuff in /etc/rc.shutdown?) that
 may fail too.
 
 The only guarranteed way to not fuck this up is to shutdown the
 system and boot an upgrade kernel (e.g. bsd.rd).
 
 Paul 'WEiRD' de Weerd
 
 -- 
 [++-]+++.+++[---].+++[+
 +++-].++[-]+.--.[-]
 http://www.weirdnet.nl/ 

carp hung at INIT after update to current snapshot--followup #2

[Jeff Ross]

Followup #2.

I tried booting the older kernels available to me to see if I could 
narrow down the range of the time this problem began.


The kernel from June 9 boots as expected and carp moves to master status 
as it should.


The kernel from June 13 boots but carp stays stuck in INIT.

The most recent snapshot also boots with carp staying in INIT.

I hope that narrows the range down enough to provide a clue.

Thanks again.

Jeff


Followup:

When running sh -x /etc/netstart, I get the following on the firewall 
stuck in INIT:


+ ifmstart trunk svlan vlan carp
ifconfig: SIOCAIFADDR: No buffer space available
ifconfig: SIOCAIFADDR: No buffer space available

The normally backup firewall running /etc/netstart from
OpenBSD 5.3-current (GENERIC.MP) #148: Tue Apr 30 11:41:58 MDT 2013
t...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
shows this instead

+ ifmstart  trunk svlan vlan carp gif gre pfsync pppoe tun bridge

Hope that helps!

Jeff


Hi all,

Tonight I updated to the June 17 snapshot on my primary firewall. Before 
updating carp has been working flawlessly, with this server the primary 
and its twin the secondary.  When I'd reboot the primary the secondary 
would become master but only until the primary had finished rebooting. 
After updating and reboot the primary's carp0 and carp1 interfaces 
remain in INIT.


I did run sysmerge and don't see anything apropos in the Running 
-current section of the FAQ.


My secondary firewall took over as carp master on reboot but I'm a 
little leery of updating or even rebooting it to see if the primary will 
take over--I'm 650 miles from the server room :-)


dmesg, ifconfig -a and /etc/hostname* follow.

Thanks,

Jeff Ross

OpenBSD 5.3-current (GENERIC.MP) #7: Mon Jun 17 12:17:04 MDT 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

real mem  = 3757490176 (3583MB)
avail mem = 3684646912 (3513MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/29/05, BIOS32 rev. 0 @ 0xf0010, 
SMBIOS rev. 2.3 @ 0xfa380 (61 entries)

bios0: vendor American Megatrends Inc. version 080010 date 03/29/2005
bios0: SiMech R200
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP APIC OEMB
acpi0: wakeup devices PXHA(S4) PXHB(S4) EPA0(S4) EPA1(S4) EPB0(S4) 
EPB1(S4) EPC0(S4) P0P1(S4) MC97(S4) USB1(S1) USB2(S1) EUSB(S4) PS2K(S4) 
PS2M(S4) P0PC(S4) SLPB(S4)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 6 (application processor)
cpu1: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

cpu2 at mainbus0: apid 1 (application processor)
cpu2: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu2: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

cpu3 at mainbus0: apid 7 (application processor)
cpu3: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu3: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
ioapic1 at mainbus0: apid 11 pa 0xfec1, version 20, 24 pins
ioapic1: misconfigured as apic 9, remapped to apid 11
ioapic2 at mainbus0: apid 9 pa 0xfec8, version 20, 24 pins
ioapic2: misconfigured as apic 10, remapped to apid 9
ioapic3 at mainbus0: apid 10 pa 0xfec80400, version 20, 24 pins
ioapic3: misconfigured as apic 11, remapped to apid 10
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (EPA0)
acpiprt2 at acpi0: bus 3 (PXHA)
acpiprt3 at acpi0: bus 2 (PXHB)
acpiprt4 at acpi0: bus 4 (EPA1)
acpiprt5 at acpi0: bus 6 (P0P1)
acpiprt6 at acpi0: bus 5 (P0PC)
acpicpu0 at acpi0
acpicpu1 at acpi0
acpicpu2 at acpi0
acpicpu3 at acpi0
acpibtn0 at acpi0: PWRB
acpibtn1 at acpi0: SLPB
bios0: ROM list: 0xc/0x8000 0xc8000/0x800 0xc8800/0x1000 0xc9800/0x1000
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel E7320 Host rev 0x0c
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x0c
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel 6700PXH PCIE-PCIX rev 0x09
pci2 at ppb1 bus 3
mpi0 at pci2 dev 5 function 0 Symbios Logic 53c1030 rev 0xc1: msi
scsibus0 at mpi0: 16 targets, initiator 7
ppb2 at pci1 dev 0 function 2

carp hung at INIT after update to current snapshot--followup

[Jeff Ross]

Followup:

When running sh -x /etc/netstart, I get the following on the firewall 
stuck in INIT:


+ ifmstart trunk svlan vlan carp
ifconfig: SIOCAIFADDR: No buffer space available
ifconfig: SIOCAIFADDR: No buffer space available

The normally backup firewall running /etc/netstart from
OpenBSD 5.3-current (GENERIC.MP) #148: Tue Apr 30 11:41:58 MDT 2013
t...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
shows this instead

+ ifmstart  trunk svlan vlan carp gif gre pfsync pppoe tun bridge

Hope that helps!

Jeff


Hi all,

Tonight I updated to the June 17 snapshot on my primary firewall. 
Before updating carp has been working flawlessly, with this server the 
primary and its twin the secondary.  When I'd reboot the primary the 
secondary would become master but only until the primary had finished 
rebooting.  After updating and reboot the primary's carp0 and carp1 
interfaces remain in INIT.


I did run sysmerge and don't see anything apropos in the Running 
-current section of the FAQ.


My secondary firewall took over as carp master on reboot but I'm a 
little leery of updating or even rebooting it to see if the primary will 
take over--I'm 650 miles from the server room :-)


dmesg, ifconfig -a and /etc/hostname* follow.

Thanks,

Jeff Ross

OpenBSD 5.3-current (GENERIC.MP) #7: Mon Jun 17 12:17:04 MDT 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

real mem  = 3757490176 (3583MB)
avail mem = 3684646912 (3513MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/29/05, BIOS32 rev. 0 @ 0xf0010, 
SMBIOS rev. 2.3 @ 0xfa380 (61 entries)

bios0: vendor American Megatrends Inc. version 080010 date 03/29/2005
bios0: SiMech R200
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP APIC OEMB
acpi0: wakeup devices PXHA(S4) PXHB(S4) EPA0(S4) EPA1(S4) EPB0(S4) 
EPB1(S4) EPC0(S4) P0P1(S4) MC97(S4) USB1(S1) USB2(S1) EUSB(S4) PS2K(S4) 
PS2M(S4) P0PC(S4) SLPB(S4)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 6 (application processor)
cpu1: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

cpu2 at mainbus0: apid 1 (application processor)
cpu2: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu2: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

cpu3 at mainbus0: apid 7 (application processor)
cpu3: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu3: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
ioapic1 at mainbus0: apid 11 pa 0xfec1, version 20, 24 pins
ioapic1: misconfigured as apic 9, remapped to apid 11
ioapic2 at mainbus0: apid 9 pa 0xfec8, version 20, 24 pins
ioapic2: misconfigured as apic 10, remapped to apid 9
ioapic3 at mainbus0: apid 10 pa 0xfec80400, version 20, 24 pins
ioapic3: misconfigured as apic 11, remapped to apid 10
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (EPA0)
acpiprt2 at acpi0: bus 3 (PXHA)
acpiprt3 at acpi0: bus 2 (PXHB)
acpiprt4 at acpi0: bus 4 (EPA1)
acpiprt5 at acpi0: bus 6 (P0P1)
acpiprt6 at acpi0: bus 5 (P0PC)
acpicpu0 at acpi0
acpicpu1 at acpi0
acpicpu2 at acpi0
acpicpu3 at acpi0
acpibtn0 at acpi0: PWRB
acpibtn1 at acpi0: SLPB
bios0: ROM list: 0xc/0x8000 0xc8000/0x800 0xc8800/0x1000 0xc9800/0x1000
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel E7320 Host rev 0x0c
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x0c
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel 6700PXH PCIE-PCIX rev 0x09
pci2 at ppb1 bus 3
mpi0 at pci2 dev 5 function 0 Symbios Logic 53c1030 rev 0xc1: msi
scsibus0 at mpi0: 16 targets, initiator 7
ppb2 at pci1 dev 0 function 2 Intel 6700PXH PCIE-PCIX rev 0x09
pci3 at ppb2 bus 2
em0 at pci3 dev 1 function 0 Intel 82546GB rev 0x03: apic 10 int 0, 
address 00:1b:21:15:6a:82
em1 at pci3 dev 1 function 1 Intel 82546GB rev 0x03: apic 10 int 1, 
address 00:1b:21:15:6a:83

ppb3 at pci0 dev 3 function 0 Intel E7520 PCIE rev 0x0c
pci4 at ppb3 bus 4
ppb4 at pci0 dev 28 function 0 Intel 6300ESB PCIX rev 0x02
pci5 at ppb4 bus 5
em2 at pci5 dev 1 function 0 Intel

Re: carp hung at INIT after update to current snapshot

[Jeff Ross]

Can't get them, though.

jross@samsara2:/home/jross $ ftp 
ftp://sym.spacehopper.org/pub/OpenBSD/snapshots/i386/oldkern/

Trying 85.158.44.150...
ftp: connect to address 85.158.44.150: Connection refused
Trying 2001:8b0:648e:cc01:230:48ff:fe58:8640...
ftp: connect: No route to host
ftp: Can't connect or login to host `sym.spacehopper.org'

On 6/18/13 12:54 PM, Chris Cappuccio wrote:

Stuart Henderson keeps old kernels around at 
ftp://sym.spacehopper.org/pub/OpenBSD/snapshots/i386/oldkern/

To help narrow down what change might have caused this, try and figure out
the newest kernel that still works properly.

Jeff Ross [jr...@openvistas.net] wrote:

Hi all,

Tonight I updated to the June 17 snapshot on my primary firewall.
Before updating carp has been working flawlessly, with this server
the primary and its twin the secondary.  When I'd reboot the primary
the secondary would become master but only until the primary had
finished rebooting.  After updating and reboot the primary's carp0
and carp1 interfaces remain in INIT.

I did run sysmerge and don't see anything apropos in the Running
-current section of the FAQ.

My secondary firewall took over as carp master on reboot but I'm a
little leery of updating or even rebooting it to see if the primary
will take over--I'm 650 miles from the server room :-)

dmesg, ifconfig -a and /etc/hostname* follow.

Thanks,

Jeff Ross

OpenBSD 5.3-current (GENERIC.MP) #7: Mon Jun 17 12:17:04 MDT 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF
real mem  = 3757490176 (3583MB)
avail mem = 3684646912 (3513MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/29/05, BIOS32 rev. 0 @
0xf0010, SMBIOS rev. 2.3 @ 0xfa380 (61 entries)
bios0: vendor American Megatrends Inc. version 080010 date 03/29/2005
bios0: SiMech R200
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP APIC OEMB
acpi0: wakeup devices PXHA(S4) PXHB(S4) EPA0(S4) EPA1(S4) EPB0(S4)
EPB1(S4) EPC0(S4) P0P1(S4) MC97(S4) USB1(S1) USB2(S1) EUSB(S4)
PS2K(S4) PS2M(S4) P0PC(S4) SLPB(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 6 (application processor)
cpu1: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF
cpu2 at mainbus0: apid 1 (application processor)
cpu2: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu2: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF
cpu3 at mainbus0: apid 7 (application processor)
cpu3: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu3: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
ioapic1 at mainbus0: apid 11 pa 0xfec1, version 20, 24 pins
ioapic1: misconfigured as apic 9, remapped to apid 11
ioapic2 at mainbus0: apid 9 pa 0xfec8, version 20, 24 pins
ioapic2: misconfigured as apic 10, remapped to apid 9
ioapic3 at mainbus0: apid 10 pa 0xfec80400, version 20, 24 pins
ioapic3: misconfigured as apic 11, remapped to apid 10
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (EPA0)
acpiprt2 at acpi0: bus 3 (PXHA)
acpiprt3 at acpi0: bus 2 (PXHB)
acpiprt4 at acpi0: bus 4 (EPA1)
acpiprt5 at acpi0: bus 6 (P0P1)
acpiprt6 at acpi0: bus 5 (P0PC)
acpicpu0 at acpi0
acpicpu1 at acpi0
acpicpu2 at acpi0
acpicpu3 at acpi0
acpibtn0 at acpi0: PWRB
acpibtn1 at acpi0: SLPB
bios0: ROM list: 0xc/0x8000 0xc8000/0x800 0xc8800/0x1000 0xc9800/0x1000
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel E7320 Host rev 0x0c
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x0c
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel 6700PXH PCIE-PCIX rev 0x09
pci2 at ppb1 bus 3
mpi0 at pci2 dev 5 function 0 Symbios Logic 53c1030 rev 0xc1: msi
scsibus0 at mpi0: 16 targets, initiator 7
ppb2 at pci1 dev 0 function 2 Intel 6700PXH PCIE-PCIX rev 0x09
pci3 at ppb2 bus 2
em0 at pci3 dev 1 function 0 Intel 82546GB rev 0x03: apic 10 int
0, address 00:1b:21:15:6a:82
em1 at pci3 dev 1 function 1 Intel 82546GB rev 0x03: apic 10 int
1, address 00:1b:21:15:6a:83
ppb3 at pci0 dev 3 function 0 Intel E7520 PCIE rev 0x0c
pci4 at ppb3 bus 4
ppb4 at pci0 dev

carp hung at INIT after update to current snapshot

[Jeff Ross]

Hi all,

Tonight I updated to the June 17 snapshot on my primary firewall.  
Before updating carp has been working flawlessly, with this server the 
primary and its twin the secondary.  When I'd reboot the primary the 
secondary would become master but only until the primary had finished 
rebooting.  After updating and reboot the primary's carp0 and carp1 
interfaces remain in INIT.


I did run sysmerge and don't see anything apropos in the Running 
-current section of the FAQ.


My secondary firewall took over as carp master on reboot but I'm a 
little leery of updating or even rebooting it to see if the primary will 
take over--I'm 650 miles from the server room :-)


dmesg, ifconfig -a and /etc/hostname* follow.

Thanks,

Jeff Ross

OpenBSD 5.3-current (GENERIC.MP) #7: Mon Jun 17 12:17:04 MDT 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

real mem  = 3757490176 (3583MB)
avail mem = 3684646912 (3513MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/29/05, BIOS32 rev. 0 @ 0xf0010, 
SMBIOS rev. 2.3 @ 0xfa380 (61 entries)

bios0: vendor American Megatrends Inc. version 080010 date 03/29/2005
bios0: SiMech R200
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP APIC OEMB
acpi0: wakeup devices PXHA(S4) PXHB(S4) EPA0(S4) EPA1(S4) EPB0(S4) 
EPB1(S4) EPC0(S4) P0P1(S4) MC97(S4) USB1(S1) USB2(S1) EUSB(S4) PS2K(S4) 
PS2M(S4) P0PC(S4) SLPB(S4)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 6 (application processor)
cpu1: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

cpu2 at mainbus0: apid 1 (application processor)
cpu2: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu2: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

cpu3 at mainbus0: apid 7 (application processor)
cpu3: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu3: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,LONG,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,LAHF,PERF

ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
ioapic1 at mainbus0: apid 11 pa 0xfec1, version 20, 24 pins
ioapic1: misconfigured as apic 9, remapped to apid 11
ioapic2 at mainbus0: apid 9 pa 0xfec8, version 20, 24 pins
ioapic2: misconfigured as apic 10, remapped to apid 9
ioapic3 at mainbus0: apid 10 pa 0xfec80400, version 20, 24 pins
ioapic3: misconfigured as apic 11, remapped to apid 10
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (EPA0)
acpiprt2 at acpi0: bus 3 (PXHA)
acpiprt3 at acpi0: bus 2 (PXHB)
acpiprt4 at acpi0: bus 4 (EPA1)
acpiprt5 at acpi0: bus 6 (P0P1)
acpiprt6 at acpi0: bus 5 (P0PC)
acpicpu0 at acpi0
acpicpu1 at acpi0
acpicpu2 at acpi0
acpicpu3 at acpi0
acpibtn0 at acpi0: PWRB
acpibtn1 at acpi0: SLPB
bios0: ROM list: 0xc/0x8000 0xc8000/0x800 0xc8800/0x1000 0xc9800/0x1000
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel E7320 Host rev 0x0c
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x0c
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel 6700PXH PCIE-PCIX rev 0x09
pci2 at ppb1 bus 3
mpi0 at pci2 dev 5 function 0 Symbios Logic 53c1030 rev 0xc1: msi
scsibus0 at mpi0: 16 targets, initiator 7
ppb2 at pci1 dev 0 function 2 Intel 6700PXH PCIE-PCIX rev 0x09
pci3 at ppb2 bus 2
em0 at pci3 dev 1 function 0 Intel 82546GB rev 0x03: apic 10 int 0, 
address 00:1b:21:15:6a:82
em1 at pci3 dev 1 function 1 Intel 82546GB rev 0x03: apic 10 int 1, 
address 00:1b:21:15:6a:83

ppb3 at pci0 dev 3 function 0 Intel E7520 PCIE rev 0x0c
pci4 at ppb3 bus 4
ppb4 at pci0 dev 28 function 0 Intel 6300ESB PCIX rev 0x02
pci5 at ppb4 bus 5
em2 at pci5 dev 1 function 0 Intel 82541GI rev 0x05: apic 11 int 2, 
address 00:30:48:87:2e:b0
em3 at pci5 dev 2 function 0 Intel 82541GI rev 0x05: apic 11 int 3, 
address 00:30:48:87:2e:b1

uhci0 at pci0 dev 29 function 0 Intel 6300ESB USB rev 0x02: apic 8 int 16
uhci1 at pci0 dev 29 function 1 Intel 6300ESB USB rev 0x02: apic 8 int 19
Intel 6300ESB WDT rev 0x02 at pci0 dev 29 function 4 not configured
Intel 6300ESB APIC rev 0x02 at pci0 dev 29 function 5 not configured
ehci0 at pci0 dev 29 function 7 Intel 6300ESB USB rev 0x02: apic 8 int 23
usb0 at ehci0: USB

setting resource limits error message

[Jeff Ross]

Hi all,

I installed a snapshot last night on our server at work and since then 
I'm getting an error whenever a user logs in over ssh.


013-04-25 13:40:37.284728500 auth.info: sshd[222]: Accepted publickey 
for jross from 10.16.31.10 port 51645 ssh2
2013-04-25 13:40:37.289644500 user.err: Apr 25 13:40:37 sshd: 
postgresql: setting resource limit openfiles: Invalid argument


The postgresql section of my login.conf is:

# For PostgreSQL Database
#
postgresql:\
:maxproc-max=1024:\
:maxproc-cur=512:\
:openfiles-cur=1536:\
:datasize-max=1024M:\
:datasize-cur=256M:\
:stacksize-cur=16M:

Is 1536 now too many openfiles?

I dropped openfiles-cur to 768 as suggested in the pkg_readme and the 
error has stopped.  I'm sure I had a reason for doubling it way back 
when because this is a pretty busy postgresql server.


Didn't see anything in the FAQ or in a google search for this error.

Thanks,

Jeff Ross

Re: setting resource limits error message

[Jeff Ross]

On 4/25/13 2:43 PM, Philip Guenther wrote:

On Thu, Apr 25, 2013 at 1:05 PM, Jeff Ross jr...@wykids.org wrote:

I installed a snapshot last night on our server at work and since then I'm
getting an error whenever a user logs in over ssh.

013-04-25 13:40:37.284728500 auth.info: sshd[222]: Accepted publickey for
jross from 10.16.31.10 port 51645 ssh2
2013-04-25 13:40:37.289644500 user.err: Apr 25 13:40:37 sshd: postgresql:
setting resource limit openfiles: Invalid argument

The postgresql section of my login.conf is:

# For PostgreSQL Database
#
postgresql:\
 :maxproc-max=1024:\
 :maxproc-cur=512:\
 :openfiles-cur=1536:\

...

Is 1536 now too many openfiles?

No.  The problem is that you can't set the '-cur' value to greater
than the '-max' value, which defaults to 1024.  If you want to set
both to that same higher value, then say openfiles=1536.  Otherwise,
add another line to set 'openfiles-max' to whatever larger value you
desire.


Philip Guenther


Ah--that makes perfect sense!  Thanks Philip!

Re: Small diff to calendar.birthday

[Jeff Ross]

On 1/2/13 3:56 PM, mxb wrote:

I think if you put District, the you should change Oblast to Province.


You may know more than me--I took that directly from wikipedia :-)

What should district be to be consistent and correct?




//максим

On 2 jan 2013, at 23:47, jr...@openvistas.net wrote:


--- usr.bin/calendar/calendars/calendar.birthdaySun Oct 16 09:09:27 2011
+++ usr.bin/calendar/calendars/calendar.birthday.newWed Jan  2 15:41:39 2013
@@ -11,7 +11,7 @@
01/01   J.D. Salinger born, 1919
01/01   Heinz Zemanek born in Vienna, Austria, 1920
01/01   Dolores Haze (prototype for Lolita) born, 1935
-01/02  Isaac Asimov born in Petrovichi, Russian SFSR (now part of USSR), 1920
+01/02  Isaac Asimov born in Petrovichi, a village in Shumyachsky District of 
Smolensk Oblast, Russia, 1920
01/03   J.R.R. Tolkien born, 1892
01/04   George Washington Carver born in Missouri, 1864
01/04   Jakob Grimm born, 1785

Chaining serial consoles?

[Jeff Ross]

Hi,

I need to get serial access to my workstation at work but I have limited 
real serial ports to work with.


Right now I have my two main servers connected by null modem cable to my 
2 carped firewalls and that's all good.


Each of those servers also has a second serial port that is not used.  
Can I connect my workstation to one of those servers with another null 
modem cable?  I would then shell in via ssh or cu, then use cu to 
connect to the console on my workstation.


I'm working remotely so I can't just try it but I will be in the office 
in a couple of weeks.  If this will work I'll order in another couple of 
null modem cables.


Thanks,

Jeff Ross

Re: New snapshot install throws ERR M on boot continued

[Jeff Ross]

On 12/12/11 17:29, Nick Holland wrote:

On 12/12/11 16:11, Jeff Ross wrote:

On 12/12/11 13:18, Diana Eichert wrote:

what is the output of fdisk when booted from bsd.rd?






Hi Diana!

Thanks for the thought.


Disk: sd0   geometry: 487/255/63 [7827456 Sectors]
Offset: 0   Signature: 0xAA55
  Starting Ending LBA Info:
   #: id  C   H   S -  C   H   S [   start:size ]
---
   0: 00  0   0   0 -  0   0   0 [   0:   0 ]  unused
   1: 00  0   0   0 -  0   0   0 [   0:   0 ]  unused
   2: 00  0   0   0 -  0   0   0 [   0:   0 ]  unused
  *3: A6  0   1   2 -486 254  63 [  64: 7823591 ]  OpenBSD

Looks okay to me.

Jeff


yeah, that looks fine...
How about your disklabel output?
I can think of a few things you could do wrong to do that...

ERR M indicates that biosboot got installed, but what it was told was
the location of /boot is...uh...not.  How that's happening...not sure.
But, we know the MBR is good, the PBR is good, but what the PBR is
pointing at is not.

Next step would be to try 5.0-rel to make sure it is not a recent
regression.  The good thing about how OpenBSD handles flash disks is if
something is broke for flash disks, it is typically going to break
everywhere (I hope).

Nick.




Hi Nick!

Here's the disklabel:

# /dev/rsd0c:
type: SCSI
disk: SCSI disk
label: Nano Pro
duid: 4659f17835a3effa
flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 128
sectors/cylinder: 8064
cylinders: 970
total sectors: 7827456
boundstart: 64
boundend: 7823655
drivedata: 0

16 partitions:
#size   offset  fstype [fsize bsize  cpg]
  a:   516032   64  4.2BSD   2048 163841
  b:   516096   516096swap
  c:  78274560  unused
  d:  2564352  1032192  4.2BSD   2048 163841
  e:   516096  3596544  4.2BSD   2048 163841
  f:   209664  4112640  4.2BSD   2048 163841
  g:  1540224  4322304  4.2BSD   2048 163841
  h:24192  5862528  4.2BSD   2048 163841
  i:   209664  5886720  4.2BSD   2048 163841
  j:   516096  6096384  4.2BSD   2048 163841
  k:   516096  6612480  4.2BSD   2048 163841
  l:   695072  7128576  4.2BSD   2048 163841


I don't see anything wrong here, either.

I'll grab the 5.0 rel bsd.rd and give that a go.

Jeff

Re: New snapshot install throws ERR M on boot continued

[Jeff Ross]

On 12/12/11 17:29, Nick Holland wrote:

On 12/12/11 16:11, Jeff Ross wrote:

On 12/12/11 13:18, Diana Eichert wrote:

what is the output of fdisk when booted from bsd.rd?






Hi Diana!

Thanks for the thought.


Disk: sd0   geometry: 487/255/63 [7827456 Sectors]
Offset: 0   Signature: 0xAA55
  Starting Ending LBA Info:
   #: id  C   H   S -  C   H   S [   start:size ]
---
   0: 00  0   0   0 -  0   0   0 [   0:   0 ]  unused
   1: 00  0   0   0 -  0   0   0 [   0:   0 ]  unused
   2: 00  0   0   0 -  0   0   0 [   0:   0 ]  unused
  *3: A6  0   1   2 -486 254  63 [  64: 7823591 ]  OpenBSD

Looks okay to me.

Jeff


yeah, that looks fine...
How about your disklabel output?
I can think of a few things you could do wrong to do that...

ERR M indicates that biosboot got installed, but what it was told was
the location of /boot is...uh...not.  How that's happening...not sure.
But, we know the MBR is good, the PBR is good, but what the PBR is
pointing at is not.

Next step would be to try 5.0-rel to make sure it is not a recent
regression.  The good thing about how OpenBSD handles flash disks is if
something is broke for flash disks, it is typically going to break
everywhere (I hope).

Nick.


5.0 release on the same Imation Nano Pro also throws ERR M.  I used the 
identical disk layout for the install.


To eliminate the chance that there was something wrong with that 
specific Imation flash drive, I got a SanDisk Cruzer and installed 5.0 
release on it, also using the identical layout.  Same problem.


So, I tried booting this computer off the SanDisk and bam!  Booted right 
off--no problem at all.  Same with the Imation Nano.


Whatever the problem might be is specific to that Gateway trying to boot 
off of a flash drive.  I did a 5.0 rel install to wd0 and no problems 
booting from the hard drive.


Jeff

New snapshot install throws ERR M on boot

[Jeff Ross]

Hello,

I did a fresh snapshot install this morning to build up a new firewall, 
using an Imation USB drive as my hard disk.  Install went just fine, I 
mostly just hit Enter but I did do a custom file system layout.  On 
first boot I got an ERR M failure.


I put the flash drive in another OpenBSD computer (running a November 30 
snapshot) and did the following:


sudo mount /dev/sd0a /mnt
sudo cp /usr/mdec/boot /mnt/boot
sudo /usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot sd0

which gave me:

boot: /mnt/boot proto: /usr/mdec/biosboot device: /dev/rsd0c
/mnt/boot is 3 blocks x 16384 bytes
fs block shift 2; part offset 64; inode block 104, offset 9256
master boot record (MBR) at sector 0
 partition 3: type 0xA6 offset 64 size 7823591
/boot will be written at sector 64


However, I'm still getting ERR M on boot.

Dmesg below, from the bsd.rd I used to install.

Jeff Ross


OpenBSD 5.0-current (RAMDISK_CD) #51: Sun Dec 11 14:50:34 MST 2011
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/RAMDISK_CD
cpu0: AMD Sempron(tm) Processor 3300+ (AuthenticAMD 686-class, 128KB 
L2 cache) 2.01 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW,SSE3,LAHF

real mem  = 250015744 (238MB)
avail mem = 238936064 (227MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 11/25/05, BIOS32 rev. 0 @ 0xfa7a0, 
SMBIOS rev. 2.3 @ 0xf (30 entries)

bios0: vendor Phoenix Technologies, LTD version 6.00 PG date 11/25/2005
bios0: Gateway D3315
apm0 at bios0: Power Management spec V1.2
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 3.0 @ 0xf/0xcd74
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfcc90/224 (12 entries)
pcibios0: bad IRQ table checksum
pcibios0: PCI BIOS has 12 Interrupt Routing table entries
pcibios0: PCI Exclusive IRQs: 10 11
pcibios0: no compatible PCI ICU found
pcibios0: Warning, unable to fix up PCI interrupt routing
pcibios0: PCI bus #4 is the last bus
bios0: ROM list: 0xc/0xde00 0xd/0x1800
cpu0 at mainbus0: (uniprocessor)
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
NVIDIA C51 Host rev 0xa2 at pci0 dev 0 function 0 not configured
NVIDIA C51 Memory rev 0xa2 at pci0 dev 0 function 1 not configured
NVIDIA C51 Memory rev 0xa2 at pci0 dev 0 function 2 not configured
NVIDIA C51 Memory rev 0xa2 at pci0 dev 0 function 3 not configured
NVIDIA C51 Memory rev 0xa2 at pci0 dev 0 function 4 not configured
NVIDIA C51 Memory rev 0xa2 at pci0 dev 0 function 5 not configured
NVIDIA C51 Memory rev 0xa2 at pci0 dev 0 function 6 not configured
NVIDIA C51 Memory rev 0xa2 at pci0 dev 0 function 7 not configured
ppb0 at pci0 dev 2 function 0 NVIDIA C51 PCIE rev 0xa1
pci1 at ppb0 bus 1
ppb1 at pci0 dev 3 function 0 NVIDIA C51 PCIE rev 0xa1
pci2 at ppb1 bus 2
ppb2 at pci0 dev 4 function 0 NVIDIA C51 PCIE rev 0xa1
pci3 at ppb2 bus 3
vga1 at pci0 dev 5 function 0 NVIDIA GeForce 6100 rev 0xa2
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
NVIDIA MCP51 Host rev 0xa2 at pci0 dev 9 function 0 not configured
pcib0 at pci0 dev 10 function 0 NVIDIA MCP51 ISA rev 0xa2
NVIDIA MCP51 SMBus rev 0xa2 at pci0 dev 10 function 1 not configured
NVIDIA MCP51 Memory rev 0xa2 at pci0 dev 10 function 2 not configured
ohci0 at pci0 dev 11 function 0 NVIDIA MCP51 USB rev 0xa2: irq 10, 
version 1.0, legacy support

ehci0 at pci0 dev 11 function 1 NVIDIA MCP51 USB rev 0xa2: irq 11
ehci0: timed out waiting for BIOS
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 NVIDIA EHCI root hub rev 2.00/1.00 addr 1
pciide0 at pci0 dev 13 function 0 NVIDIA MCP51 IDE rev 0xa1: DMA, 
channel 0 configured to compatibility, channel 1 configured to compatibility

wd0 at pciide0 channel 0 drive 0: ST3100011A
wd0: 16-sector PIO, LBA48, 95396MB, 195371568 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: TSSTcorp, CDW/DVD TS-H492C, GA01 ATAPI 
5/cdrom removable

cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
pciide1 at pci0 dev 14 function 0 NVIDIA MCP51 SATA rev 0xa1: DMA
pciide1: using irq 11 for native-PCI interrupt
ppb3 at pci0 dev 16 function 0 NVIDIA MCP51 PCI-PCI rev 0xa2
pci4 at ppb3 bus 4
rl0 at pci4 dev 6 function 0 Realtek 8139 rev 0x10: irq 11, address 
00:40:f4:af:d7:48

rlphy0 at rl0 phy 0: RTL internal PHY
skc0 at pci4 dev 7 function 0 D-Link DGE-530T A1 rev 0x11, Yukon 
(0x1): irq 10

sk0 at skc0 port A: address 00:13:46:71:f9:a5
eephy0 at sk0 phy 0: 88E1011 Gigabit PHY, rev. 3
NVIDIA MCP51 AC97 rev 0xa2 at pci0 dev 16 function 2 not configured
nfe0 at pci0 dev 20 function 0 NVIDIA MCP51 LAN rev 0xa1: irq 10, 
address 00:40:ca:b2:66:eb

brgphy0 at nfe0 phy 0: BCM54XX 10/100/1000baseT PHY, rev. 1
pchb0 at pci0 dev 24 function 0 AMD AMD64 0Fh HyperTransport rev 0x00
pchb1 at pci0 dev 24 function 1 AMD AMD64 0Fh Address Map rev 0x00
pchb2 at pci0 dev 24 function 2 AMD AMD64 0Fh DRAM Cfg rev

New snapshot install throws ERR M on boot continued

[Jeff Ross]

Hello,

A little more information...

I booted back into bsd.rd and ran installboot from that firewall by 
mounting /dev/sd0a to /mnt, cping the boot file from /usr/mdec to 
/mnt/boot, and running


/usr/mdec/installboot -v /mnt/boot /usr/mdec/biosboot sd0

Plus, I saw the little red flashing light so I believe the disk was 
being written to.


However, it still throws an ERR M on boot.

Any ideas anyone?

Jeff Ross

Re: New snapshot install throws ERR M on boot continued

[Jeff Ross]

On 12/12/11 13:18, Diana Eichert wrote:

what is the output of fdisk when booted from bsd.rd?


!DSPAM:4ee663138802030512579!



Hi Diana!

Thanks for the thought.


Disk: sd0   geometry: 487/255/63 [7827456 Sectors]
Offset: 0   Signature: 0xAA55
Starting Ending LBA Info:
 #: id  C   H   S -  C   H   S [   start:size ]
---
 0: 00  0   0   0 -  0   0   0 [   0:   0 ] 
unused
 1: 00  0   0   0 -  0   0   0 [   0:   0 ] 
unused
 2: 00  0   0   0 -  0   0   0 [   0:   0 ] 
unused
*3: A6  0   1   2 -486 254  63 [  64: 7823591 ] 
OpenBSD


Looks okay to me.

Jeff

No keyboard in X with -current

[Jeff Ross]

Greetings,

Last night I installed the latest i386 snapshot on the mirrors which was 
a mistake.  The X packages were built on October 18 but the rest are 
from October 7.  On reboot X failed to start because it was built with 
the newer libc.so.61.0 while base50.tgz from October 7 contains libc.60.0.


So, okay, I dug out my make_current script and built -current.

X now starts just fine but I have no keyboard in X at all.

I've tried both a PS/2 and a USB keyboard.  I'm attaching the latest 
dmesg and X logs but I don't seen anything amiss in them at all.


Jeff Ross

Sent from my Acer Netbook, OpenBSD not quite as -current

OpenBSD 5.0-current (GENERIC.MP) #13: Wed Oct 19 16:47:01 MDT 2011
r...@slony.wykids.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Pentium(R) Dual-Core CPU E5400 @ 2.70GHz (GenuineIntel 
686-class) 2.70 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,XSAVE

real mem  = 2146627584 (2047MB)
avail mem = 2101407744 (2004MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 11/10/09, BIOS32 rev. 0 @ 0xf0010, 
SMBIOS rev. 2.5 @ 0x9f800 (29 entries)

bios0: vendor ACER version P01-A1 date 11/10/2009
bios0: Acer Veriton M265
acpi0 at bios0: rev 0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC MCFG SLIC OEMB HPET GSCI SSDT
acpi0: wakeup devices P0P2(S4) P0P1(S4) PS2K(S4) PS2M(S4) MC97(S4) 
P0P4(S4) P0P5(S4) P0P6(S4) P0P7(S4) P0P8(S4) P0P9(S4) USB0(S3) USB1(S3) 
USB2(S3) USB3(S3) EUSB(S3) SLPB(S4) PWRB(S4)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 199MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Pentium(R) Dual-Core CPU E5400 @ 2.70GHz (GenuineIntel 
686-class) 2.70 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,XSAVE

ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 4 (P0P1)
acpiprt2 at acpi0: bus 2 (P0P4)
acpiprt3 at acpi0: bus 3 (P0P5)
acpiprt4 at acpi0: bus -1 (P0P6)
acpiprt5 at acpi0: bus -1 (P0P7)
acpiprt6 at acpi0: bus -1 (P0P8)
acpiprt7 at acpi0: bus -1 (P0P9)
acpicpu0 at acpi0: PSS
acpicpu1 at acpi0: PSS
acpitz0 at acpi0: critical temperature is 110 degC
acpibtn0 at acpi0: SLPB
acpibtn1 at acpi0: PWRB
bios0: ROM list: 0xc/0xe200
cpu0: Enhanced SpeedStep 2694 MHz: speeds: 2700, 2003, 1603, 1203 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82G33 Host rev 0x10
ppb0 at pci0 dev 1 function 0 Intel 82G33 PCIE rev 0x10: apic 2 int 16
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 NVIDIA GeForce 7200 GS rev 0xa1
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: msi
azalia0: codecs: Realtek ALC888
audio0 at azalia0
ppb1 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01: apic 2 int 16
pci2 at ppb1 bus 2
ppb2 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x01: apic 2 int 17
pci3 at ppb2 bus 3
re0 at pci3 dev 0 function 0 Realtek 8168 rev 0x03: RTL8168D/8111D 
(0x2800), apic 2 int 17, address 44:87:fc:6d:5d:86

rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 2
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: apic 2 int 23
uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: apic 2 int 19
uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: apic 2 int 18
uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: apic 2 int 16
ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: apic 2 int 23
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb3 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0xe1
pci4 at ppb3 bus 4
ral0 at pci4 dev 2 function 0 Ralink RT2560 rev 0x01: apic 2 int 19, 
address 00:11:50:63:33:f2

ral0: MAC/BBP RT2560 (rev 0x04), RF RT2525
ichpcib0 at pci0 dev 31 function 0 Intel 82801GH LPC rev 0x01: PM disabled
pciide0 at pci0 dev 31 function 1 Intel 82801GB IDE rev 0x01: DMA, 
channel 0 configured to compatibility, channel 1 configured to compatibility

pciide0: channel 0 disabled (no drives)
pciide0: channel 1 disabled (no drives)
pciide1 at pci0 dev 31 function 2 Intel 82801GB SATA rev 0x01: DMA, 
channel 0 configured to native-PCI, channel 1 configured to native-PCI

pciide1: using apic 2 int 19 for native-PCI interrupt
wd0 at pciide1 channel 0 drive 0: ST3120827AS
wd0: 16-sector PIO, LBA48, 114473MB, 234441648 sectors
atapiscsi0 at pciide1 channel 0 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: ATAPI, DVD A DH16AASH, SA15

Re: No keyboard in X with -current

[Jeff Ross]

On 10/20/11 10:00, Alexandr Shadchin wrote:

On Thu, Oct 20, 2011 at 09:05:59AM -0600, Jeff Ross wrote:

Greetings,

Last night I installed the latest i386 snapshot on the mirrors which
was a mistake.  The X packages were built on October 18 but the rest
are from October 7.  On reboot X failed to start because it was
built with the newer libc.so.61.0 while base50.tgz from October 7
contains libc.60.0.

So, okay, I dug out my make_current script and built -current.

X now starts just fine but I have no keyboard in X at all.

I've tried both a PS/2 and a USB keyboard.  I'm attaching the latest
dmesg and X logs but I don't seen anything amiss in them at all.



Have you read this http://www.openbsd.org/faq/current.html#20111015 ?
This should help you.

I did but since I installed X from a snapshot I didn't think it applied.

I'm checking out the xenocara sources to build a -current X and I'll do 
that before I build.


Thanks for the reply!

Jeff




Jeff Ross

Sent from my Acer Netbook, OpenBSD not quite as -current

Re: No keyboard in X with -current

[Jeff Ross]

On 10/20/11 10:00, Alexandr Shadchin wrote:

On Thu, Oct 20, 2011 at 09:05:59AM -0600, Jeff Ross wrote:

Greetings,

Last night I installed the latest i386 snapshot on the mirrors which
was a mistake.  The X packages were built on October 18 but the rest
are from October 7.  On reboot X failed to start because it was
built with the newer libc.so.61.0 while base50.tgz from October 7
contains libc.60.0.

So, okay, I dug out my make_current script and built -current.

X now starts just fine but I have no keyboard in X at all.

I've tried both a PS/2 and a USB keyboard.  I'm attaching the latest
dmesg and X logs but I don't seen anything amiss in them at all.



Have you read this http://www.openbsd.org/faq/current.html#20111015 ?
This should help you.



Rebuilding xenocara from source fixed the problem.

Thanks again.

Jeff

Verizon iPhone4 as an AP

[Jeff Ross]

Hi,
Has anyone tried using a Verizon iPhone4 as an AP for an OpenBSD laptop?

My VirginMobile 3G modem just will not work out here in San Jose nor have I
been able to connect to any of the various wifi networks available.

Thanks,
Jeff Ross
Sent from my iPhone,
Reluctantly hunting and pecking on a virtual keyboard :-)

Anybody else in San Jose for PgWest?

[Jeff Ross]

If so, drop me a line.

Jeff Ross

sshd reverse lookup fails

[Jeff Ross]

I'm logging into a remote server and on the remote end I see this in the 
logs:


2011-08-11 10:20:34.701069500 auth.info: sshd[20129]: Address 
71.37.181.185 maps to heinlein.openvistas.net, but this does not map 
back to the address - POSSIBLE BREAK-IN ATTEMPT!


That is incorrect, though.

jross@heinlein:/home/jross $ dig -x 71.37.181.185 
  


;  DiG 9.4.2-P2  -x 71.37.181.185
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 64370
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;185.181.37.71.in-addr.arpa.IN  PTR

;; ANSWER SECTION:
185.181.37.71.in-addr.arpa. 86382 INPTR heinlein.openvistas.net.

;; Query time: 2 msec
;; SERVER: 172.16.0.1#53(172.16.0.1)
;; WHEN: Thu Aug 11 10:26:50 2011
;; MSG SIZE  rcvd: 81

On the remote server, I get the same output from dig.

jross@varley:/etc/dovecot $ dig -x 71.37.181.185

;  DiG 9.4.2-P2  -x 71.37.181.185
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 34460
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;185.181.37.71.in-addr.arpa.IN  PTR

;; ANSWER SECTION:
185.181.37.71.in-addr.arpa. 8744 IN PTR heinlein.openvistas.net.

;; Query time: 10 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Aug 11 10:31:49 2011
;; MSG SIZE  rcvd: 81


On the remote end sshd is set to UseDNS (not changed from default).  Any 
ideas on why this is failing?


Jeff

Re: sshd reverse lookup fails

[Jeff Ross]

On 08/11/11 10:53, Peter J. Philipp wrote:

On Thu, Aug 11, 2011 at 10:35:16AM -0600, Jeff Ross wrote:

I'm logging into a remote server and on the remote end I see this in the
logs:

2011-08-11 10:20:34.701069500 auth.info: sshd[20129]: Address
71.37.181.185 maps to heinlein.openvistas.net, but this does not map
back to the address - POSSIBLE BREAK-IN ATTEMPT!

That is incorrect, though.


...



On the remote end sshd is set to UseDNS (not changed from default).  Any
ideas on why this is failing?

Jeff


Is the DNS server, that the remote server is using, trustable?  If it lies
answers ie. gives different answers of heinlein lookups, (perhaps in order
to snarf up jobs that contact heinlein from the remote server).  I hate to
say this but DNS is not that trustable unless DNSSEC is used because it
verifies an answer, which I believe is not done in the resolver.

Your error message does not make sense if plain DNS were trustable.  But it's
not.

-peter


Yes, that was it.  I'd changed the name of the remote server in 
/etc/myname but left it in /etc/hosts and the order is lookup file bind.


Thanks!

Jeff

Re: OpenBSD current i386 hangs on boot in lm0.

[Jeff Ross]

On 07/06/11 07:47, Nigel Taylor wrote:

Hi,

I updated from OpenBSD current i386, built from CVS 24th March 2011, to
one built from CVS on 2nd July 2011. The bsd.rd booted, and was used to
upgrade, on reboot this hung. I noted lm0 was the last line, rebooting
with the older kernel version the next dmesg line was lm1 detached, and
the boot completed.

The line in the /var/log/messages for old kernel are:-
/bsd: lm1 at iic0 addr 0x2d: W83781D
/bsd: lm0 at isa0 port 0x290/8: W83781D
/bsd: lm1 detached

Using boot -c with latest bsd, I disabled lm, this booted as normal with
lm disabled. dmesg is below.

I downloaded the latest snapshot bsd 29th June 2011, booted from this an
hit the same problem at lm0.

I booted from the bsd built from cvs, using boot -c and disabled just
lm0, this booted as normal.

Updated from CVS today, and rebuilt the kernel, booted from the new bsd,
this hung at the same point lm0.

Two other i386 systems are fine, but these don't have the lm device.

Please contact me if anymore information is required, or anything you
would me to try out.


I reported the same thing in these two messages:

http://marc.info/?l=openbsd-miscm=130755536116000w=2
http://marc.info/?l=openbsd-miscm=130764492616339w=2

This hang happens with the 4 different SuperMicro based motherboards I 
have that have the lm chipset.


In the second message referenced above I noted that a snapshot dated May 
25 booted normally and I first ran into the problem on June 6 so the 
window is fairly small.


However, when I tried building kernels for that range of days I ran into 
other problems and haven't been able to get back to it since.


Jeff

Re: OpenBSD current i386 hangs on boot in lm0.

[Jeff Ross]

On 07/06/11 09:22, Francois Pussault wrote:

Hi all,

Medion computers, supermicro (many cheap models) motherboards are known as
'not free *unix* compatible'.
Therefore most of supermicro other motherboards just seem to work well with
*linux  *BSD.
Madion are hardware coded to be able only to boot a real windows OS, (even
reactOS often fail to boot correctly), Then you need to boot other OS to have
a
windows installed in first partition(s)  to use a multiboot, but even that
can fail



This is not my experience with SuperMicro motherboards, in fact, my 
experience is exactly the opposite.  They all work and work well.


Jeff





From: Jeff Rossjr...@openvistas.net
Sent: Wed Jul 06 17:07:40 CEST 2011
To: Nigel Taylornjtay...@asterisk.demon.co.uk, OpenBSD

misc@openbsd.org

Subject: Re: OpenBSD current i386  hangs on boot in lm0.


On 07/06/11 07:47, Nigel Taylor wrote:

Hi,

I updated from OpenBSD current i386, built from CVS 24th March 2011, to
one built from CVS on 2nd July 2011. The bsd.rd booted, and was used to
upgrade, on reboot this hung. I noted lm0 was the last line, rebooting
with the older kernel version the next dmesg line was lm1 detached, and
the boot completed.

The line in the /var/log/messages for old kernel are:-
/bsd: lm1 at iic0 addr 0x2d: W83781D
/bsd: lm0 at isa0 port 0x290/8: W83781D
/bsd: lm1 detached

Using boot -c with latest bsd, I disabled lm, this booted as normal with
lm disabled. dmesg is below.

I downloaded the latest snapshot bsd 29th June 2011, booted from this an
hit the same problem at lm0.

I booted from the bsd built from cvs, using boot -c and disabled just
lm0, this booted as normal.

Updated from CVS today, and rebuilt the kernel, booted from the new bsd,
this hung at the same point lm0.

Two other i386 systems are fine, but these don't have the lm device.

Please contact me if anymore information is required, or anything you
would me to try out.


I reported the same thing in these two messages:

http://marc.info/?l=openbsd-miscm=130755536116000w=2
http://marc.info/?l=openbsd-miscm=130764492616339w=2

This hang happens with the 4 different SuperMicro based motherboards I
have that have the lm chipset.

In the second message referenced above I noted that a snapshot dated May
25 booted normally and I first ran into the problem on June 6 so the
window is fairly small.

However, when I tried building kernels for that range of days I ran into
other problems and haven't been able to get back to it since.

Jeff




Cordialement
Francois Pussault
3701 - 8 rue Marcel Pagnol
31100 ToulouseB
FranceB
+33 6 17 230 820 B  +33 5 34 365 269
fpussa...@contactoffice.fr


!DSPAM:4e147f8448271610687006!

Re: OpenBSD current i386 hangs on boot in lm0.

[Jeff Ross]

On 07/06/11 10:04, Chris Cappuccio wrote:

Jeff Ross [jr...@openvistas.net] wrote:


This hang happens with the 4 different SuperMicro based motherboards
I have that have the lm chipset.

In the second message referenced above I noted that a snapshot dated
May 25 booted normally and I first ran into the problem on June 6 so
the window is fairly small.


Yet, a kernel compiled again Jun 6th sources does not display this behvaior


Well, that explains the problem I was having.  None of the kernels I 
built would hang so I thought I was doing something wrong.


Jeff


Therefore, it is caused by a change that was in the snapshots--but not 
committed until later

I was out of town for a week, but will now narrow down when the offending code 
was committed since it affects my X7SBL, PDSML, and probably other supermicro 
boards that I use in qty...






!DSPAM:4e148bfa98349598613850!

Small fix to calendar.music

[Jeff Ross]

--- usr.bin/calendar/calendars/calendar.music   Wed Jul  6 15:39:20 2011
+++ usr.bin/calendar/calendars/calendar.music.new   Wed Jul  6 
15:39:00 2011

@@ -282,7 +282,7 @@
 07/07  Gustav Mahler is born in Kalischt, Bohemia, 1860
 07/06  The Jefferson Airplane is formed in San Francisco, 1965
 07/07  Ringo Starr (Richard Starkey) born in Liverpool, England, 1940
-07/07  Leo Sowbery dies in Port Clinton, Ohio, 1968
+07/07  Leo Sowerby dies in Port Clinton, Ohio, 1968
 07/08  Percy Grainger is born near Melbourne, Australia, 1882
 07/08  Hans Leo Hassler is born in Nuremberg, Germany, 1564
 07/09  Ottorino Respighi is born in Bologna, Italy, 1879

http://www.openbsd.org/query-pr.html throws a 404

[Jeff Ross]

The Bug Tracking System is throwing a 404 when you submit the search form.

Not Found
The requested URL /cgi-bin/query-pr-wrapper was not found on this server.

Apache/1.3.29 Server at cvs.openbsd.org Port 80

Re: ZTE MF 180 USB modem

[Jeff Ross]

On 07/01/11 01:14, David Coppa wrote:

On Thu, Jun 30, 2011 at 10:42 PM, Jeff Rossjr...@openvistas.net  wrote:

On 06/28/11 08:31, David Coppa wrote:


On Tue, Jun 28, 2011 at 4:18 PM, Jeff Rossjr...@openvistas.net   wrote:


Thanks for the reply, David.

I'll try to figure out a way to do that, but the modem is in Morocco in
use
on a Windows computer and I'm in the middle of the US.



 From Windows, you can use this tool:


http://www.uwe-sieber.de/files/listusbdrives.zip

With the modem inserted into the usb port, run
ListUsbDrives_To_Notepad.cmd and send the resulting txt file to me
or to this list...

Ciao,
David


Hi David,

We tried the above but it didn't show the modem so I found

USBdeview:  http://www.nirsoft.net/utils/usb_devices_view.html

which does.

Here's the output--I hope that's enough!


Hey Jeff,

Guess what? It should already be working (with 4.9 and -current) ;-)

cheers!
david


Great!  Now all I need to do is figure out what I need in a chat script.

Jeff

Re: ZTE MF 180 USB modem

[Jeff Ross]

On 06/28/11 01:45, David Coppa wrote:

On Tue, Jun 28, 2011 at 1:00 AM, Jeff Rossjr...@openvistas.net  wrote:

Hi,

I have a friend in the Peace Corp in Morocco.  He's using a ZTE MF 180 USB
modem connecting with Maroc Telecom on his windows based Acer Netbook.  I'm
already sick of walking him through removing the latest windows 'sploit of
the week, especially given that we do it through e-mail and across a lot of
time zones :-)

I'm thinking about making him a USB bootable OpenBSD installation with KDE
to get him onto a secure platform but the modem has to work.

Has anyone had any experience with the MF 180?  Mr Google didn't turn up
anything for OpenBSD.


I would appreciate if you could provide me the output of 'usbdevs -dv'
for this modem: very probably it's just a matter of adding the right
strings to src/sys/dev/usb/umsm.c

ciao,
david


Thanks for the reply, David.

I'll try to figure out a way to do that, but the modem is in Morocco in 
use on a Windows computer and I'm in the middle of the US.


Jeff

ZTE MF 180 USB modem

[Jeff Ross]

Hi,

I have a friend in the Peace Corp in Morocco.  He's using a ZTE MF 180 
USB modem connecting with Maroc Telecom on his windows based Acer 
Netbook.  I'm already sick of walking him through removing the latest 
windows 'sploit of the week, especially given that we do it through 
e-mail and across a lot of time zones :-)


I'm thinking about making him a USB bootable OpenBSD installation with 
KDE to get him onto a secure platform but the modem has to work.


Has anyone had any experience with the MF 180?  Mr Google didn't turn up 
anything for OpenBSD.


Thanks,

Jeff

Recent i386 snapshot--em0 and em1 watchdog timeout--resetting

[Jeff Ross]

I just installed the June 23 snapshot and in addition to the still 
existing hang at lm1 detached I reported earlier, I am now getting a 
steady string of


em0:watchdog timeout -- resetting
and
em1:watchdog timesout -- resetting

The firewall is the default master in a CARP set and it appears that it 
becomes master on reboot, however, it passes no traffic out to the internet.


I am able to shell into the firewall on its em3 interface.

The messages relating the hang at disabling lm1 are here:

http://marc.info/?l=openbsd-miscm=130755536116000w=2
and
http://marc.info/?l=openbsd-miscm=130764492616339w=2

The hang at disabling lm now happens on all 4 SuperMicro MB based 
servers I have that have the lm chipset.  I have one older SuperMicro 
that doesn't have lm and it does fine on the recent snapshots.


Jeff


OpenBSD 4.9-current (GENERIC.MP) #91: Thu Jun 23 11:50:39 MDT 2011
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR

real mem  = 3757490176 (3583MB)
avail mem = 3685818368 (3515MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/29/05, BIOS32 rev. 0 @ 0xf0010, 
SMBIOS rev. 2.3 @ 0xfa380 (61 entries)

bios0: vendor American Megatrends Inc. version 080010 date 03/29/2005
bios0: SiMech R200
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP APIC OEMB
acpi0: wakeup devices PXHA(S4) PXHB(S4) EPA0(S4) EPA1(S4) EPB0(S4) 
EPB1(S4) EPC0(S4) P0P1(S4) MC97(S4) USB1(S1) USB2(S1) EUSB(S4) PS2K(S4) 
PS2M(S4) P0PC(S4) SLPB(S4)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 6 (application processor)
cpu1: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR

cpu2 at mainbus0: apid 1 (application processor)
cpu2: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu2: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR

cpu3 at mainbus0: apid 7 (application processor)
cpu3: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu3: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR

ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
ioapic1 at mainbus0: apid 11 pa 0xfec1, version 20, 24 pins
ioapic1: misconfigured as apic 9, remapped to apid 11
ioapic2 at mainbus0: apid 9 pa 0xfec8, version 20, 24 pins
ioapic2: misconfigured as apic 10, remapped to apid 9
ioapic3 at mainbus0: apid 10 pa 0xfec80400, version 20, 24 pins
ioapic3: misconfigured as apic 11, remapped to apid 10
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (EPA0)
acpiprt2 at acpi0: bus 3 (PXHA)
acpiprt3 at acpi0: bus 2 (PXHB)
acpiprt4 at acpi0: bus 4 (EPA1)
acpiprt5 at acpi0: bus 6 (P0P1)
acpiprt6 at acpi0: bus 5 (P0PC)
acpicpu0 at acpi0
acpicpu1 at acpi0
acpicpu2 at acpi0
acpicpu3 at acpi0
acpibtn0 at acpi0: PWRB
acpibtn1 at acpi0: SLPB
bios0: ROM list: 0xc/0x8000 0xc8000/0x800 0xc8800/0x1000 0xc9800/0x1000
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel E7320 Host rev 0x0c
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x0c
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel 6700PXH PCIE-PCIX rev 0x09
pci2 at ppb1 bus 3
mpi0 at pci2 dev 5 function 0 Symbios Logic 53c1030 rev 0xc1: msi
scsibus0 at mpi0: 16 targets, initiator 7
ppb2 at pci1 dev 0 function 2 Intel 6700PXH PCIE-PCIX rev 0x09
pci3 at ppb2 bus 2
em0 at pci3 dev 1 function 0 Intel PRO/1000MT (82546GB) rev 0x03: msi, 
address 00:1b:21:15:6a:82
em1 at pci3 dev 1 function 1 Intel PRO/1000MT (82546GB) rev 0x03: msi, 
address 00:1b:21:15:6a:83

ppb3 at pci0 dev 3 function 0 Intel E7520 PCIE rev 0x0c
pci4 at ppb3 bus 4
ppb4 at pci0 dev 28 function 0 Intel 6300ESB PCIX rev 0x02
pci5 at ppb4 bus 5
em2 at pci5 dev 1 function 0 Intel PRO/1000MT (82541GI) rev 0x05: apic 
11 int 2, address 00:30:48:87:2e:b0
em3 at pci5 dev 2 function 0 Intel PRO/1000MT (82541GI) rev 0x05: apic 
11 int 3, address 00:30:48:87:2e:b1

uhci0 at pci0 dev 29 function 0 Intel 6300ESB USB rev 0x02: apic 8 int 16
uhci1 at pci0 dev 29 function 1 Intel 6300ESB USB rev 0x02: apic 8 int 19
Intel 6300ESB WDT rev 0x02 at pci0 dev 29 function 4 not configured
Intel 6300ESB APIC rev 0x02 at pci0 dev 29 function 5 not configured
ehci0 at pci0 dev 29 function 7 Intel 6300ESB USB rev 0x02: apic 8 int 23

Re: Control of OpenBSD through a web interface

[Jeff Ross]

On 06/15/11 12:36, Jean-Frangois SIMON wrote:

Hi,

I have a remote controlled machine which I manage by ssh and yet I'm in the
process of making up a small web page through which basic commands can be
passed.

I have no clear idea regarding how to design this, in the first place I
thought about a cgi script written in C which I did manage to have it say
hello world at the present time, but not yet much more.

There's not yet clear clues regarding how to make this peace of web
interface talk to the system and I would like to make it clean by means of
elegant way to deal with web page-  system communication.

Any clue regarding the way it could be ?

Thanks,

Jean-Frangois


!DSPAM:4df8fc6181751664719687!



I did this for a server in a law office to allow the users to do things 
like kill runaway print jobs and to restart the server.  httpd was *not* 
accessible from the internet by a rule in pf and was run as httpd -u 
(un-chrooted).  You can write CGIs as shell scripts--you just have to 
send the correct headers at the beginning of the script.  Use your 
google-fu to figure those headers out.


If the jobs you need require more than simple shell scripts, you can use 
php or perl.  In the un-chrooted environment they will give you access 
to *everything*.


Hope that helps!

Jeff