Re: (bit)torrent openbsd client
Yeah, if you are looking for something simply and lightweight, give unworkable a try. I haven't been hacking on it much lately because it downloads every torrent I throw at it fine. Also runs on zaurus and sparc64 quite nicely ;-) On Wed, Jan 28, 2009 at 08:11:30PM +0100, frantisek holop wrote: transmission is ok and you could also try unworkable that is developed on openbsd. -f -- why does the att logo look like the death star? -- Niall O'Higgins P2P Research http://p2presearch.com http://niallohiggins.com
Re: postgresql
On Fri, Aug 08, 2008 at 12:52:35PM -0400, bofh wrote: Ah, great! Yes, this is the question I was trying to ask - what is the largest available chunk of memory available to any one process? I think MAXDSIZ may have been bumped to 8G on amd64, I haven't tested any limits myself yet though. -- Niall O'Higgins P2P Research http://p2presearch.com http://niallohiggins.com
Re: New ral(4) RT2860 Draft-N wireless PCI card
I think I found one of these PCI rt2860 guys for $40 on Amazon, if anyone is interested - seems like the cheapest with this chip right now: http://www.amazon.com/PLANEX-Wireless-Adapter-GW-DS300N-designed/dp/B000PGTGO0/ref=sr_1_1?ie=UTF8s=electronicsqid=1218214400sr=8-1 On Fri, Aug 08, 2008 at 02:01:16PM +, Stuart Henderson wrote: On 2008-08-08, Fabian [EMAIL PROTECTED] wrote: The Longshine LCS-8031N Draft-N wireless PCI card [1] is supported by ral(4). It is based on the RT2860 chip. It works reliably here as hostap with WPA-PSK and good coverage. Many of the draft-N cards are RaLink RT2860, and work *really* well, very much better than the old RT2560 cards. Besides the fairly hard to buy (at least in minipci format) acx(4), this is the first thing I've had running hostap better than the old PRISM cards. Running WPA you might be interested to note this from ral(4) - On the RT2700 and RT2800 chipsets, the ral driver offloads both encryp- tion and decryption of data frames to the hardware for the WEP40, WEP104, TKIP(+MIC) and CCMP ciphers. I hope the RT2860 don't disappear now that the RT2880 cards are showing up (at least until we have support and firmware :-) -- Niall O'Higgins P2P Research http://p2presearch.com http://niallohiggins.com
Re: postgresql
Hello, We run PostgreSQL 8.3 on a Dell PE 2950 III w/ 4G RAM, 15krpm SAS disks running from mfi(4) and quad core Xeon - all under OpenBSD-current/amd64 of course. Oh and we are running GENERIC.MP. I suppose the database is reasonably large at this stage, around 55 million rows or 10G on disk. But I have heard from friends that PostgreSQL can handle a billion rows without too much trouble - of course it depends on what you are doing. Tweaked it a little to get a bit more cache, I think each backend goes up to around 108M at the moment: Sysctls: kern.seminfo.semmni=256 kern.seminfo.semmns=2048 kern.shminfo.shmmax=210428160 PostgreSQL config: shared_buffers = 100MB It would be nice to get some more of the data in memory, but most of our activity is INSERTs, and since I'm not sure about our locality of reference when it comes to reporting, we are heavily I/O bound. For this reason we have the 15krpm SAS disks in RAID 1 on mfi(4). My experience is that PostgreSQL does not make it easy to run entirely out of memory. There are many parameters to consider beyond simply where the data is pulled from. This is probably why an aggressively caching kernel like Linux can see excellent performance in many scenarios. Fast disks were the biggest win for us, since we are so I/O intense. Some other OS like Linux or whatever would probably do a better job of caching without lots of tweaks - but OpenBSD has so many other advantages in terms of hardware support, manageability and maintainability, that we didn't even bother testing with anything else. Oh, also note that OpenBSD has some limit on how much memory an individual process can map, so keep that in mind. While the kernel may be able to use all 128G of memory in your machine, each PostgreSQL backend process may only be able to use a much smaller chunk of it. On Thu, Aug 07, 2008 at 12:28:56AM -0400, bofh wrote: I'm looking at a project that I'm trying to run on openbsd. All that box will have is postgresql. At this time, it's just 2 programmers and 1 sysadmin type person that's involved, no DBAs, so apologies if the questions are... too simplistic. And I realize if I want to maximize performance, I need to examine OSes as well. But at this point, I want to explore what is the biggest postgresql server I can run under openbsd. If at all possible, I want to run everything in memory. -- Niall O'Higgins P2P Research http://p2presearch.com http://niallohiggins.com
Re: mmap() on i386
On Tue, Jan 08, 2008 at 08:33:10AM +0100, Karl Karlsson wrote: 2008/1/8, Karl Karlsson [EMAIL PROTECTED]: 2008/1/8, Antoine Jacoutot [EMAIL PROTECTED]: On Tue, 8 Jan 2008, Bjvrn Ketelaars wrote: My question: Is it possible that there is a problem with mmap() on i386? For what it's worth, I'm seeing the same behaviour under macppc, rtorrent often takes the system down. -- Antoine Crashes for me too and brings down the machine, i got an old p3 550mhz with 192MB ram. Crashed 2 times before i figured it was rtorrent that was the problem and uninstalled it. The second time the machine still responded to pings, otherwise completely dead. Oh, of course i forgot, i4m running a snapshot from 21 dec. Out of curiosity, what is the procmap(1) output for rtorrent like when this thing is running full tilt?
Re: mmap() on i386
On Tue, Jan 08, 2008 at 01:31:49PM -0500, Kevin Stam wrote: Jeez, perhaps btpd should finally support protocol encryption? Last time I checked it didn't. A surprising number of ISPs limit BitTorrent traffic, and more and more seeders, including me, can only be connected to via a client that supports encryption. Until btpd gets around to supporting this, it's unusable for me. Perhaps Transmission would work better for you? If rtorrent keeps crashing things, try a different client. If it's not a matter of too few open files, then hopefully we can get around to fixing the bugs, if we can narrow down the problem. I just noticed unworkable in ports. It uses mmap(). Does anybody encounter problems with it? If not, then it must be rtorrent's problem, not mmap(). I haven't been able to tickle any VM bugs with Unworkable on OpenBSD for some time. However its still in early stages of development and doesn't support MSE yet either. Works fine for me but YMMV. Of course, I accept patches ;-) On 8 Jan 2008 08:46:18 -0800, Unix Fan [EMAIL PROTECTED] wrote: Jeez, Perhaps you people should start using btpd instead? rtorrent sounds like a nightmare ;) http://www.murmeldjur.se/btpd/ -Nix Fan.
Re: ThinkPad T41p suspend is fine from console, hangs from X
On Mon, Jun 11, 2007 at 04:47:43PM +0200, Jonathan Thornburg wrote: Summary === I have a problem with suspend-to-RAM on an IBM/Lenovo ThinkPad T41p running OpenBSD 4.1-stable. Basically, suspend-to-RAM works fine if I'm not running X, but hangs the system if I'm running X. My basic question is, has anyone gotten suspend-to-RAM to work while X is running on a T41p, and if so, how did you do it? Try switching to console before suspend.
Re: uath firmware load crash/freeze
On Fri, Apr 27, 2007 at 12:07:04AM -0700, patrick keshishian wrote: I downloaded the latest firmware from TRENDnet's download page [1] and placed, what I believe to be the firmware file (ar5523.bin) in /etc/firmware/uath-ar5523. You are making this much harder for yourself than it needs be. As the uath(4) manual page says, you can just pkg_add http://damien.bergamini.free.fr/packages/openbsd/uath-firmware-1.0.tgz I'm open to suggestions and ideas, especially if you can recommend a reasonably priced alternative USB wireless network adaptor which will work on both i386 and macppc architectures. uath(4) is not very good. There are no docs and little incentive to fix bugs in a driver with such an unfriendly vendor. ural(4) and rum(4) are both pretty solid USB wifi devices, and Ralink are pretty friendly.
Re: SuperMicro 6010H with no working nics...
I have a busted on-board nfe(4) in one of my systems which claims there is no media present, both under Windows and OpenBSD. I bought an sk(4) card for $18 and forgot about it. Quite possibly you have bad hardware, like mine. As for the aue(4), have a look in src/sys/dev/usb/if_aue.c for your error and maybe you can see if the driver is doing something buggy :-) On Thu, Apr 12, 2007 at 09:16:02PM -0600, Jeff Ross wrote: Hi all, I just purchased a new-to-me SuperMicro 6010H server on eBay. dmesg follows. The system has two onboard Intel nics that both generic and generic.mp see in the dmesg but the nics are unable to find a link when I plug a cable in. I've got network access now through a aue usb to ethernet device using the same cable but it throws a lot of errors like this aue0: 1 usb errors on intr: IOERROR so I'm not going to want to keep using it. There is a bios upgrade available that I'll do tomorrow. In the meantime, is there any chance that this might be a mis-configured bios setting or something equally simple? I looked through all of the bios options and didn't see anything that looked promising. Thanks, Jeff [EMAIL PROTECTED]:/home/jross $ cat /var/run/dmesg.boot OpenBSD 4.1-current (GENERIC) #86: Thu Apr 12 11:34:48 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 800 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE real mem = 1073311744 (1048156K) avail mem = 971952128 (949172K) using 4278 buffers containing 53788672 bytes (52528K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+ BIOS, date 12/14/00, BIOS32 rev. 0 @ 0xfdb90, SMBIOS rev. 2.3 @ 0xf0640 (50 entries) bios0: Supermicro 370DER apm0 at bios0: Power Management spec V1.2 apm0: AC on, battery charge unknown, estimated 0:00 hours apm0: APM get event: interface not connected (3) apm0: APM get event: interface not connected (3) apm0: disconnected apm0: flags b0102 dobusy 0 doidle 0 pcibios0 at bios0: rev 2.1 @ 0xf/0x1 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf5380/144 (7 entries) pcibios0: PCI Interrupt Router at 000:15:0 (ServerWorks OSB4 rev 0x00) pcibios0: PCI bus #1 is the last bus bios0: ROM list: 0xc/0x8000 0xc8000/0x1000 0xc9000/0x6000 0xcf000/0x1000 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 ServerWorks CNB20HE Host rev 0x23 ppb0 at pci0 dev 0 function 1 ServerWorks CNB20LE Host rev 0x01 pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 ATI Mach64 GM rev 0x27 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) pchb1 at pci0 dev 0 function 2 ServerWorks CNB20HE Host rev 0x01 pchb2 at pci0 dev 0 function 3 ServerWorks CNB20HE Host rev 0x01 pci2 at pchb2 bus 2 fxp0 at pci0 dev 4 function 0 Intel 8255x rev 0x08, i82559: irq 11, address 00:30:48:11:23:eb inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4 ahc0 at pci0 dev 5 function 0 Adaptec AIC-7899 U160 rev 0x01: irq 5 scsibus0 at ahc0: 16 targets sd0 at scsibus0 targ 0 lun 0: QUANTUM, ATLAS10K2-TY184J, DDD6 SCSI3 0/direct fixed sd0: 17510MB, 17338 cyl, 5 head, 413 sec, 512 bytes/sec, 35860910 sec total ahc1 at pci0 dev 5 function 1 Adaptec AIC-7899 U160 rev 0x01: irq 10 scsibus1 at ahc1: 16 targets fxp1 at pci0 dev 6 function 0 Intel 8255x rev 0x08, i82559: irq 9, address 00:30:48:11:23:ec inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4 piixpm0 at pci0 dev 15 function 0 ServerWorks OSB4 rev 0x50: polling iic0 at piixpm0 lmenv0 at iic0 addr 0x2d: lm87 rev 4 lmenv1 at iic0 addr 0x2e: lm87 rev 4 pciide0 at pci0 dev 15 function 1 ServerWorks OSB4 IDE rev 0x00: DMA atapiscsi0 at pciide0 channel 0 drive 0 scsibus2 at atapiscsi0: 2 targets cd0 at scsibus2 targ 0 lun 0: MATSHITA, CD-ROM CR-177, 7T03 SCSI0 5/cdrom removable cd0(pciide0:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 2 ohci0 at pci0 dev 15 function 2 ServerWorks OSB4/CSB5 USB rev 0x04: irq 10, version 1.0, legacy support usb0 at ohci0: USB revision 1.0 uhub0 at usb0 uhub0: ServerWorks OHCI root hub, rev 1.00/1.00, addr 1 uhub0: 4 ports with 4 removable, self powered isa0 at mainbus0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: PC speaker spkr0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec biomask f565 netmask ff65 ttymask ffe7 pctr: 686-class user-level performance counters enabled mtrr: Pentium Pro MTRR support aue0 at uhub0
Re: wireless ethernet adapters (seeking recommendations)
On Thu, Apr 12, 2007 at 09:37:31AM +0200, Wijnand Wiersma wrote: 2007/4/12, Darrin Chandler [EMAIL PROTECTED]: On Thu, Apr 12, 2007 at 02:18:28AM +0200, Maxime DERCHE wrote: A recent thread (04/04/2007) on this list showed that the ralink chipsets are well supported by OpenBSD. If I recall, there was also talk about lower signal strength with ralink. For an access point this is important, but could be mitigated or overcome by a high gain antenna. I have that problem with ural. One stairs up and the signal already goes bad. Both my laptop and AP are using ural. If there are developers who whould like to have more information I am sure willing to provide it. Interesting, I have always found the radio in ural(4) (and rum(4) which is next-generation chip) to be excellent. Much better than ral(4) and even wi(4) in my experience. Could you send me a dmesg privately?
Re: login_ldap
On Wed, Mar 28, 2007 at 01:19:05AM +0200, Joachim Schipper wrote: I don't believe GNU CVS does that, and OpenCVS doesn't do authentication at all. Your best bet is probably setting up ssh; sshd uses the BSD authentication routines by default. More specifically, OpenCVS doesn't do pserver at all. Pserver is crud -- even the original authors will admit this if you ask them.
Re: Lenovo Thinkpad T43p won't do external VGA output properly
I run -current on my T43. Have used external VGA out for the past 6 months. I don't have any xorg.conf and I get 1280x1024. It looks like you have a different video chip though. On Wed, Jan 10, 2007 at 03:46:59PM +0100, Jonathan Thornburg wrote: Hi, I'm running OpenBSD 3.9-stable on a Lenovo (formerly IBM) Thinkpad T43p. X (X.org 6.9.0) works fine either (a) without any /etc/X11/xorg.conf, or (b) using the /etc/X11/xorg.conf from http://www.enting.se/T43/xorg.conf (which is linked from the T43 entry in http://www.openbsd.org/i386-laptop.html). All the behavior I describe below is identical for (a) and (b). The built-in LCD display works fine at 1600x1200. My problem is that I can't get external video output properly. There seem to be two cases (neither one of which fits my definition of properly): * If, in the BIOS setup, I set Boot Display Device to LCD, then I can get 1600x1200 VGA output when booting and before I start X, but I get no external video output at all once I start X. * If, in the BIOS setup, I set Boot Display Device to VGA+LCD or VGA+DVI+LCD, then I get no external video output when booting and before I start X, but when I start X I get only 640x480 resolution (and matching external video output). Does anyone know how to get a T43p to simultaneously * run X, * use a decent screen resolution (minimum 1024x768, prefer 1280x1024 and/or 1600x1200) * send this video to the external VGA connector so I can display things on a video projector Here are my dmesg and the /etc/X11/xorg.conf from (b) above: === begin dmesg === OpenBSD 3.9-stable (GENERIC) #9: Tue Jan 9 16:30:11 CET 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel(R) Pentium(R) M processor 2.13GHz (GenuineIntel 686-class) 2.13 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,SBF,EST,TM2 cpu0: Enhanced SpeedStep 1600 MHz (1356 mV): speeds: 2130, 1800, 1600, 1400, 1200, 1000, 800, 600 MHz real mem = 2145886208 (2095592K) avail mem = 1951961088 (1906212K) using 4278 buffers containing 107397120 bytes (104880K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(8d) BIOS, date 09/15/05, BIOS32 rev. 0 @ 0xfd760 apm0 at bios0: Power Management spec V1.2 apm0: battery life expectancy 97% apm0: AC on, battery charge high apm0: flags 30102 dobusy 0 doidle 1 pcibios0 at bios0: rev 2.1 @ 0xfd6f0/0x910 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdeb0/256 (14 entries) pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00) pcibios0: PCI bus #5 is the last bus bios0: ROM list: 0xc/0x1 0xd/0x1600 0xd1800/0x1000 0xdc000/0x4000! 0xe/0x1 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 82915GM/PM/GMS Host rev 0x03 ppb0 at pci0 dev 1 function 0 Intel 82915PM/GM PCIE rev 0x03 pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 ATI FireGL V3200 rev 0x80 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) ppb1 at pci0 dev 28 function 0 Intel 82801FB PCIE rev 0x03 pci2 at ppb1 bus 2 bge0 at pci2 dev 0 function 0 Broadcom BCM5751M rev 0x11, BCM5750 B1 (0x4101): irq 11, address 00:01:6c:e9:50:d0 brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0 ppb2 at pci0 dev 28 function 2 Intel 82801FB PCIE rev 0x03 pci3 at ppb2 bus 3 uhci0 at pci0 dev 29 function 0 Intel 82801FB USB rev 0x03: irq 11 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhci1 at pci0 dev 29 function 1 Intel 82801FB USB rev 0x03: irq 11 usb1 at uhci1: USB revision 1.0 uhub1 at usb1 uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered uhci2 at pci0 dev 29 function 2 Intel 82801FB USB rev 0x03: irq 11 usb2 at uhci2: USB revision 1.0 uhub2 at usb2 uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub2: 2 ports with 2 removable, self powered uhci3 at pci0 dev 29 function 3 Intel 82801FB USB rev 0x03: irq 11 usb3 at uhci3: USB revision 1.0 uhub3 at usb3 uhub3: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub3: 2 ports with 2 removable, self powered ehci0 at pci0 dev 29 function 7 Intel 82801FB USB rev 0x03: irq 11 usb4 at ehci0: USB revision 2.0 uhub4 at usb4 uhub4: Intel EHCI root hub, rev 2.00/1.00, addr 1 uhub4: 8 ports with 8 removable, self powered ppb3 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0xd3 pci4 at ppb3 bus 4 cbb0 at pci4 dev 0 function 0 Ricoh 5C476 CardBus rev 0x8d: irq 11 ath0 at pci4 dev 2 function 0 Atheros AR5212 (IBM MiniPCI) rev 0x01: irq 11 ath0: AR5213 5.9 phy 4.3 rf5112 3.6, WOR2W, address 00:14:a4:5c:7f:a5 cardslot0 at cbb0 slot 0 flags 0 cardbus0 at cardslot0: bus 5 device 0 cacheline 0x0, lattimer 0xb0 pcmcia0 at cardslot0 auich0 at
Re: ACPI support, donate via payapl here
Many thanks to all the very generous people who donated. The hardware marco@ needs is on its way to him now. That so many OpenBSD users were willing to chip in is very heartening indeed. It seems a lot of people are interested in ACPI support :-) I have tried to send personal thank you notes to everyone who donated. Hopefully I didn't miss anybody. Cheers! On Wed, Oct 18, 2006 at 11:40:16PM +0100, Niall O'Higgins wrote: Hi, marco@ could desperately use an IBM Thinkpad for his ACPI work. This work is very important and many of us really want to get him this hardware. Everyone with a laptop running OpenBSD will likely benefit from marco's work. Unfortunately no individual has yet stepped up and given him one. So I have started a pool to buy him one. We need approximately $1200 USD to get him a T42 + docking station (which is required to get a serial port for kernel hacking). If you want to help get marco a Thinkpad, please donate via PayPal to [EMAIL PROTECTED] I've personally donated $100, and a number of other OpenBSD users have donated similar sums already. Remember that the Euro is quite strong vs. the US dollar at the moment, so Euro donations go even further. I'm afraid I don't have the resources to deal with anything other than PayPayl, so you if you can't use PayPal, sorry. Any money left over from the laptop donations will be given to the OpenBSD project. Please feel free to email me any suggestions or inquiries, and of course spread the word!
ACPI support, donate via payapl here
Hi, marco@ could desperately use an IBM Thinkpad for his ACPI work. This work is very important and many of us really want to get him this hardware. Everyone with a laptop running OpenBSD will likely benefit from marco's work. Unfortunately no individual has yet stepped up and given him one. So I have started a pool to buy him one. We need approximately $1200 USD to get him a T42 + docking station (which is required to get a serial port for kernel hacking). If you want to help get marco a Thinkpad, please donate via PayPal to [EMAIL PROTECTED] I've personally donated $100, and a number of other OpenBSD users have donated similar sums already. Remember that the Euro is quite strong vs. the US dollar at the moment, so Euro donations go even further. I'm afraid I don't have the resources to deal with anything other than PayPayl, so you if you can't use PayPal, sorry. Any money left over from the laptop donations will be given to the OpenBSD project. Please feel free to email me any suggestions or inquiries, and of course spread the word!
Re: Letter to OLPC
On Thu, Oct 05, 2006 at 03:54:47PM -0600, Jack J. Woehr wrote: Free and open software is a means to an end, rather than the sole end unto itself for OLPC. I was totally stunned by this admission. morally bankrupt, as Bob says, is exactly what is going on. Hmm, sounds like you are saying that abstract goal of unlimited software freedom is a higher goal than providing access to modern technology to disadvantaged children in 3rd-world countries. I don't wish to argue that point, but it is certainly a point that could be debated. I think the major issue is they're claiming to be so open source to get this feel-good feeling, when really they don't care about open source ideals. Look at what Mike Evans, Red Hat representative on OLPC board, says: We are a key part of the software team because of our experience and leadership in the open source development model and community dynamics. [ http://www.redhat.com/magazine/014dec05/features/olpc/ ] Does Red Hat making under-the-table deals with closed-source vendors to give them special access to hardware docs - which gives the open source community in general nothing - make them leaders in open source development and community dynamics? I don't think so. Why *would* the OLPC people wish to get their dicks caught in the struggle between the free-and-open software community and the greedheads? -- Jack J. Woehr Director of Development Absolute Performance, Inc. [EMAIL PROTECTED] 303-443-7000 ext. 527
Re: Forum-Software, good and secure, on OpenBSD systems?
I don't think I want to use the words good and secure, however PunBB with SQLite works well for a friend's site. It's probably not quite as woeful as PhpBB from a security standpoint, but it still uses PHP. On Tue, Sep 12, 2006 at 01:13:23PM +0200, Michael Schmidt wrote: Hello, which experiences or what knowledge are/is available concerning good and secure forum-software known to run under OpenBSD? I am interested in feedback on this. Michael -- Michael Schmidt MIRRORS: DJGPP ftp://ftp.fh-koblenz.de/pub/DJGPP/ Ghostscript ftp://ftp.fh-koblenz.de/pub/Ghostscript/
Re: using openbsd on zaurus
On Sun, Mar 12, 2006 at 12:25:53PM +, Didier Wiroth wrote: Hello, I'm planning to buy a zaurus sl-c3200 (the latest zaurus 3xxx model). I would like to install and run openbsd on it, but I have few concerns. I'm an openbsd amateur and don't have any cross compilation knowledge/experience. I had a look at the latest zaurus snapshot directories (on ftp.openbsd.org) and saw that the choice of available pre-build packages is highly reduced compared to i386. Is it possible to compile and install any applications of the ports tree on a zaurus (for example firefox, thunderbird ...)? Does the ports tree system work as well on a zaurus as on the i386 platforms or may I encounter severe build problems? Everything I've tried has worked. That includes Doom. However the zaurus only has 64M RAM and the CPU is wimpy enough (no FPU), so compilation of larger packages takes some time. And just because something compiles does not mean it will be really usable on the little screen and wimpy CPU. I don't think Firefox/Thunderbird is gonna be a happy thing on zaurus. Minimo is pretty bad already. Many thx Didier
Re: systat vm question
On Tue, Feb 07, 2006 at 12:48:53PM -0500, Jason Houx wrote: the No-cache section says this No-cache Miss = 523 % = 67 Interrupts are at 489 total with CISS0 doing over 200 load with 2 users hits 2.18 so far. My question is the No-cache section what has no-cache, Your question isn't entirely clear to me, but I think you might be confused. The No-cache section you refer to is part of the namei (name translation) display. For a little more information on what this means, look in the systat(1) manual page or this brief FAQ entry: http://www.openbsd.org/faq/faq11.html#maxvnodes This is software cache, not a hardware one. and does 200 interrupts seem excessive for a Hardware Raid? Does this point anyone to any idea's as to the problem with CISS? Thanks, Jason
Re: hostap mode on existing firewall
On Wed, Dec 14, 2005 at 09:20:06PM -0500, Chris Zakelj wrote:
Here's the problem I've run into... after staring at the dhcpd.conf man
page for a while, it didn't seem like you could feed it two interfaces
at once. So off to Google, where the top articles (for Linux,
admittedly) seem to confirm that you can't serve both the wired and the
wireless internal interfaces at the same time.
Of course dhcpd can handle multiple interfaces. I don't know how you
could have gotten the idea that it couldn't. If you read even the
on-line synopsis of the manual page or looked at dhcpd's usage you
would see this is clearly supported.
Note the [...ifN]:
dhcpd [-dfn] [-c config-file] [-l lease-file] [if0 [...ifN]]
I consider the possibility of putting ral0 into a bridge with fxp1, and
thought this might work...
/etc/hostname.fxp1:
inet 192.168.0.1 255.255.255.0 NONE
/etc/hostname.ral0:
inet 192.168.0.6 255.255.255.0 media autoselect mediaopt hostap nwid
this_is_only_a_test nwkey totally_sucks chan 11
#I've also tried 172.16.0.0 255.255.0.0 with the same results
/etc/bridgename.bridge0:
add fxp1
add ral0
up
/etc/dhcpd.interfaces
fxp1 ral0 bridge0 #not sure whether ral0 or bridge0 is what dhcpd listens to
and finally at the end of /etc/pf.conf
pass quick on { fxp1, ral0, bridge0 }
Needless to say, I'm getting no love there, either. Is what I'm trying
to do simply not possible, or is there something (obvious, perhaps) that
I'm missing. Yeah, I could go down the street and just buy a WAP, but
that defeats the purpose of learning.
Re: browser security
On Wed, Dec 14, 2005 at 05:41:30AM -0800, Bob Smith wrote: vmware recently released a program which kind of chroot jails the browser. http://www.vmware.com/vmtn/vm/browserapp.html im not a programmer myself, but i was wondering if perhaps using a similar technique we could lock down the browsers in openbsd? I don't know much about vmware, but it sounds like overkill when you have systrace(1). seems to me that would increase security greatly for us who surf the web on openbsd boxes? or am i mistaking?
Re: Apache CAN-2004-0700 question
On Wed, Nov 23, 2005 at 10:31:21PM +0200, BY wrote: I have checked and searched lists to find any information about CAN-2004-0700 affecting or not default apache on 3.8, i am sure that the version is fully modified and is not affected by subject CAN. But i need a proof of concept on that. maybe a cvs link could help. Any ideas? thnx This is a funny one. Diff mod_ssl 2.8.18 and 2.8.19 and you'll get the fix for the format string bug (inline at the end of this email). Look at src/usr.sbin/httpd/src/modules/ssl/ssl_engine_ext.c and you'll see we have this fix. Look at the cvs log for revision 1.10 of that file, and you'll see this: revision 1.10 date: 2003/06/01 15:53:41; author: deraadt; state: Exp; lines: +1 -1 various format string cleanups; tedu ok Note the date; fixed in OpenBSD over a year before the mod_ssl people fixed it. [http://marc.theaimsgroup.com/?l=apache-modsslm=109001100906749w=2] diff -u mod_ssl-2.8.18-1.3.31/pkg.sslmod/libssl.version ./libssl.version @@ -1 +1 @@ -mod_ssl/2.8.18-1.3.31 +mod_ssl/2.8.19-1.3.31 diff -u mod_ssl-2.8.18-1.3.31/pkg.sslmod/ssl_engine_ext.c ./ssl_engine_ext.c --- mod_ssl-2.8.18-1.3.31/pkg.sslmod/ssl_engine_ext.c Tue May 11 19:39:40 2004 +++ ./ssl_engine_ext.c Fri Jul 16 08:57:33 2004 @@ -524,7 +524,7 @@ #endif errmsg = ap_psprintf(r-pool, SSL proxy connect failed (%s): peer %s: %s, cpVHostID, peer, ERR_reason_error_string(ERR_get_error())); -ssl_log(r-server, SSL_LOG_ERROR, errmsg); +ssl_log(r-server, SSL_LOG_ERROR, %s, errmsg); SSL_free(ssl); ap_ctx_set(fb-ctx, ssl, NULL); return errmsg;
Re: Ext2fs mounting
On Fri, Aug 05, 2005 at 08:02:24PM -0400, Carl Schaaff wrote: I just noticed that mke2fs V1.35 sets feature: large_file while mke2fs V1.27 does not. OpenBSD3.7 release will not / can not mount an ext2fs partition r/w if large_file is set. Support for this was committed to -current on 30th of April.
Re: CCD on /
On Thu, Jun 16, 2005 at 03:11:46PM -0400, Nick Bender wrote: Why wouldn't a two drive ATA/SATA system which was raidframe mirrored stay up if one of the drives went belly up? I've been spending some cycles automating the kernel build/raidframe configure process assuming it was worth the extra effort Controllers don't tend to like it. Sometimes with disk failure, the controller will fail too!
Re: NEW: mail/hashcash
On Wed, Jun 08, 2005 at 02:03:32PM +0200, Armin Wolfermann wrote: Description: The hashcash tool allows you to create hashcash stamps to attach to emails you send, and to verify hashcash stamps attached to emails you receive. Email senders attach hashcash stamps with the X-Hashcash: header. A hashcash stamp constitutes a proof-of-work which takes a parameterizable amount of work to compute for the sender. The recipient can verify received stamps efficiently. Tested on i386-current. Tested ok on i386-current here too. Hopefully be able to test on sparc64 soon too.
Re: NEW: mail/hashcash
oops, MUA borked. sorry for the noise. On Thu, Jun 09, 2005 at 11:16:29PM +0100, Niall O'Higgins wrote: On Wed, Jun 08, 2005 at 02:03:32PM +0200, Armin Wolfermann wrote: Description: The hashcash tool allows you to create hashcash stamps to attach to emails you send, and to verify hashcash stamps attached to emails you receive. Email senders attach hashcash stamps with the X-Hashcash: header. A hashcash stamp constitutes a proof-of-work which takes a parameterizable amount of work to compute for the sender. The recipient can verify received stamps efficiently. Tested on i386-current. Tested ok on i386-current here too. Hopefully be able to test on sparc64 soon too.
Re: mounting ext3fs via ext2fs
Support for ext2fs filesystems with large files was added after 3.7. Please try a snapshot, it should work there. On Sun, May 29, 2005 at 12:37:18AM +0200, Haluk Durmus wrote: [EMAIL PROTECTED]:~# fsck_ext2fs -d /dev/sd0i ** /dev/rsd0i compat 0x0004, incompat 0x0006, compat_ro 0x0001 BAD SUPER BLOCK: INCOMPATIBLE FEATURE BITS IN SUPER BLOCK /dev/rsd0i: CANNOT FIGURE OUT FILE SYSTEM PARTITION
Re: mounting ext3fs via ext2fs
On Sun, May 29, 2005 at 04:58:16PM +0200, Haluk Durmus wrote: Was it sufficiend that I did an cvs update on current tree, before kompiling ? Could you just use a binary snapshot please? That way we bypass all this nonsense.
Re: Sounds not working on OpenBSD 3.7
On Thu, May 26, 2005 at 02:57:50PM -0400, Andrew West wrote: Dmesg recognizes my sound card and I checked the levels and NOTHING on my card is muted. I would provide the dmesg if I knew how to do it. you are asking just ASKING for a harsh response when you show you plainly haven't looked at the docs (: please send dmesg (http://www.openbsd.org/faq/faq4.html#getdmesg) and also output of mixerctl -a and audioctl -a for good measure. then perhaps we can see what the problem is.
Re: NIC bonding/trunking/802.3ad
On Tue, May 24, 2005 at 02:01:23PM +0100, Hyb wrote: It seems that the topic of 802.3ad support (link aggregation|bonding|trunking|whatever you want to call it) seems to come every so often, but is often disregarded on the basis that gigE is now cheap. I see the redudancy as a much more valuable asset though. speak of the devil! reyk@ got there already ... http://marc.theaimsgroup.com/?l=openbsd-cvsm=111690466011478w=2
Re: Burn Testing
On Tue, May 24, 2005 at 04:00:20PM +0100, Gaby vanhegan wrote: I have acquired some second-hand dual processor servers with the intention of putting OpenBSD with on them. I have put Debian on one of them and FreeBSD on another, and am pounding them as hard as I can with setiathome to see if they fall over. [EMAIL PROTECTED] touches pretty narrow parts of the system, doesn't it? CPU-bound in userland with little kernel interaction AFAIK...perhaps not the best thing to judge real-world stability by. Is there a similar burn-testing app that I can run on OpenBSD to test the stability of the machines over a 12 day period? Besides maybe some memory access, does running [EMAIL PROTECTED] really show system stability any more than the following shell script shows system stability? while true; do done; I would think running an endless 'make build' loop would be a better indicator than [EMAIL PROTECTED], and thats not to say its necessarily a good indicator ...
Re: apache2, webdav
On Tue, May 17, 2005 at 12:30:51PM +0100, Mike Gould wrote: Has anyone got any advice for installing apache2 on openbsd 3.6 (stable). Don't. Use Apache in base system. Its much better. There seems to be a port for freebsd but nothing for openbsd. If I start from the apache source what kinds of things will I need to change? Add chroot support, patch security holes, add compatibility with all the modules in ports ... Also what's the consensus on webdav? Can it be made secure?
Re: Will different CPU and RAM matter?
On Thu, May 05, 2005 at 11:15:35AM -0700, Gary Clemans-Gibbon wrote: I have a co-located 3.4 web/mail box at a remote location with a P3 1.2Ghz and 1Gb RAM (on-board LAN and video). At home I have another copy of the exact same motherboard but with a Celeron 1.1Ghz and 512 Gb RAM. The question is, can I install 3.7 on the box at home and then simply take out the HDD and swap it into the co-lo server? Will it care that it was installed on a different CPU with less RAM? Thanks to GENERIC kernel, this kind of thing will often work even on a completely different motherboard/cpu. When I upgraded from an old Athlon XP to a new Athlon 64 my OpenBSD install didn't mind a bit. So, you really shouldn't have any issues. This just shows the advantages of GENERIC approach vs. loadable modules.
