Re: socket core

2024-01-16 Thread Paul de Weerd
On Tue, Jan 16, 2024 at 09:07:17AM -, Stuart Henderson wrote: | On 2024-01-16, Otto Moerbeek wrote: | > On Tue, Jan 16, 2024 at 08:16:38AM +0100, Janne Johansson wrote: | > | >> Den tis 16 jan. 2024 kl 01:16 skrev Gustavo Rios : | >> > Hi folks. | >> > I have a simple question : How many

Re: shmmax

2023-11-09 Thread Paul de Weerd
On Thu, Nov 09, 2023 at 08:04:34PM +0100, Daniele B. wrote: | I'm guessing that for my usage profile I can go with an optimization | like this: | > sysctl kern.shminfo.shmmax=524288 | | Any more feedback? Yes: don't twist knobs when you don't understand what they do. --

Re: Cannot boot neither use boot -c in computer with Ryzen 9

2023-08-27 Thread Paul de Weerd
| Blessings. | | El 2023-08-26 01:42, Paul de Weerd escribió: | > Hi, | > | > Pretty sure it doesn't really stop, give it a couple of hours (really) | > and see if it makes progress then. | > | > My guess is, your system has SATA devices (disks or CD/DVD/BD) | > connected

Re: Cannot boot neither use boot -c in computer with Ryzen 9

2023-08-26 Thread Paul de Weerd
Hi, Pretty sure it doesn't really stop, give it a couple of hours (really) and see if it makes progress then. My guess is, your system has SATA devices (disks or CD/DVD/BD) connected to it. If you're not booting from them, one thing you can try in UKC is to `disable ahci` and see if that helps.

Re: nsd listening on localhost is zone transfer possible transfer ?

2023-08-05 Thread Paul de Weerd
On Fri, Aug 04, 2023 at 06:23:48PM +0100, Shadrock Uhuru wrote: | hi everyone | i have unbound setup on port 53 | and nsd listening on localhost port 53530 | i have set up another dns server as a secondary | am i correct to assume that i can't zone transfer because | as the nsd's are listening on

Re: libvirtd on openbsd

2023-07-29 Thread Paul de Weerd
On Fri, Jul 28, 2023 at 03:22:48AM +, All wrote: | For some reason I didn't get reply from Stuart to my inbox. | Its on the mailing lists though. Looks like Stuart only replied to the list. He's helpful like that, preventing you from getting the same mail twice. Thanks, Stuart. | Thank

Re: Upgrade: Unbound constraint let fw_update always fail

2023-07-28 Thread Paul de Weerd
I don't understand - if you configure your system to not have working DNS resolution, then you will not have working DNS resolution. fw_update needs working DNS resolution, so yeah .. if you break the latter, you break the former. Don't break DNS resolution. You really get what you pay for.

Re: Ryzen 9 (7x000) users: do you experience hangs?

2023-07-28 Thread Paul de Weerd
(Apologies for the late reply, I've been off for a few days and have spent very little time behind a keyboard) I have such issues. CPU model: hw.model=AMD Ryzen 9 7950X 16-Core Processor Motherboard: hw.vendor=ASUS hw.product=ProArt X670E-CREATOR WIFI Have you

Re: tmux only possible as root and not as normal user in 7.3?

2023-06-09 Thread Paul de Weerd
I just did a new install in a vm with the latest snapshot and could start tmux as a regular user just fine. I have no clue what you've done to get to this state, but perhaps show permissions of all path entries leading up to /tmp/tmux-1000/default, i.e. show the output of: ls -ld

Re: sysctl ddb.trigger

2023-05-30 Thread Paul de Weerd
allowkmem , On Mon, May 29, 2023 at 07:56:51AM -, Stuart Henderson wrote: | On 2023-05-29, Sebastien Marie wrote: | > On Mon, May 29, 2023 at 02:41:00PM +1000, Aaron Mason wrote: | >> On Mon, May 29, 2023 at 4:08 AM Paul de Weerd wrote: | >> > | >> > (for the

sysctl ddb.trigger

2023-05-28 Thread Paul de Weerd
Hi folks, I'm trying to debug an issue where my machine partially locks up after some hours (somewhere between 12 and 48, is my current window). The extent of the locking is still unclear, that's part of what I'm trying to figure out. While debugging, I thought I'd try to enter ddb, so I set

Re: DHCP and apm suspend/resume

2023-05-17 Thread Paul de Weerd
On Wed, May 17, 2023 at 06:02:58PM +, l...@fuji.kuistio.me wrote: | Hi | | I have a desktop machine I recently installed OpenBSD 7.3 on. Everything | seems to be working fine except that it doesn't obtain a DHCP lease when | waking up from suspend. I haven't found any docs saying if it even

Re: hw RNG on APUs

2023-05-17 Thread Paul de Weerd
I wanted to see how this would behave on my APUs. One gave 000, another consistently. But then I had this diff in my tree and I rebuilt for my workstation. That has cpu0: AMD Ryzen 9 7950X 16-Core Processor, 4500.00 MHz, 19-61-02 ... ccp0 at pci21 dev 0 function 2 "AMD 17h/90h

Re: Feature Request: watch(1) utility

2023-05-15 Thread Paul de Weerd
All you really need is a simple shell script. You can copy this to your ~/bin/ directory: --- cat ~/bin/watch -- #!/bin/sh # watch: repeatedly run a command to watch its output change

Re: Booting OpenBSD 7.3's i386 bsd.rd

2023-04-30 Thread Paul de Weerd
Are you sure you're using i386 and not amd64? Paul 'WEiRD' de Weerd On Mon, May 01, 2023 at 12:26:41PM +1000, Damian McGuckin wrote: | | What is required please? | | I am trying to boot this bsd.rd (which is a file 4Mb big) on an old | NET5500 which has 512MBytes of RAM. On a running system,

Re: syslog.conf syntax to specify several clients

2023-03-09 Thread Paul de Weerd
On Thu, Mar 09, 2023 at 04:00:24AM +, All wrote: | Right.  | That is what I was suspecting. I did use wildcard, but some hosts | use completely different fqdns, so... | Anyway, thank you and blocks per host it is then. | | One question.  | What is the difference between ++host and +host?

Re: syslog.conf syntax to specify several clients

2023-03-08 Thread Paul de Weerd
On Wed, Mar 08, 2023 at 03:39:07PM +0100, Noth wrote: | On 07/03/2023 06:35, All wrote: | | > Hi all, | > | > I have a server that acts as a syslog aggregator | > for several other servers. I was trying to see whether | > clients can be specified on one line but I can't see anything | >

Re: Safely remove USB drive

2023-02-08 Thread Paul de Weerd
On Wed, Feb 08, 2023 at 04:50:32PM +0100, Jan Stary wrote: | On Feb 08 13:56:18, pe...@bsdly.net wrote: | > 1) close any open files stored there | > 2) make sure no process has the media as $PWD (as in, cd away from there, | >and really a variation on the first) | > 3) issue at least one sync

Re: AMD EPYC

2022-09-28 Thread Paul de Weerd
Hi Kapetanakis, On Wed, Sep 28, 2022 at 11:05:35AM +0300, Kapetanakis Giannis wrote: | Hi, | | Looking for upgrading our firewall/router and thinking about switching from Xeon to EPYC (73F3 - 16C @ 3.5 GHz). | | Anyone running on EPYC? Any problems? I'm running on an AMD EPYC without any

Re: necessity to specify CVSROOT each time cvs is run?

2022-07-28 Thread Paul de Weerd
On Thu, Jul 28, 2022 at 02:01:54PM +0200, rsyk...@disroot.org wrote: | Ok. Now I perhaps gained some of the missing understanding, but | still not full. | | So if I obtain the tree by downloading a .tar, it is not enough | to just supply -d to cvs once and next time run cvs without the -d; | I

Re: snapshots on artfiles.org mirror currently out of sync

2022-06-03 Thread Paul de Weerd
On Fri, Jun 03, 2022 at 10:11:24AM +0200, Andreas Bartelt wrote: | Hi, | | I've just noticed that at least the snapshots on the artfiles.org | mirror haven't been updated since May, 15th. The mirror is still | listed at

login.conf daemon datasize limit effects on VMs with 4GB+ RAM

2022-02-25 Thread Paul de Weerd
Hi all, In commit Eg1WuG7hzCoCPdcz, robert@ changed the ulimit for the daemon class in /etc/login.conf for amd64 from 'infinity' to 4096M (see [0] and [1]). This change broke my vmd setup, and I had to dig around to understand what happened. Sharing here in hopes of preventing others from

Re: disk space issue

2022-02-16 Thread Paul de Weerd
On Wed, Feb 16, 2022 at 12:34:28PM +0100, Kacper Wilgus wrote: | Can someone please explain to me how is it possible to have negative | available space? Wouldn't it be impossible to able to take up 105% of | your disk capacity, and how is it that df(1) reports such when it also | reports 985M of

Re: Passage about licensing from OpenBSD documentation

2022-02-08 Thread Paul de Weerd
On Tue, Feb 08, 2022 at 08:54:08AM -0700, deich...@placebonol.com wrote: | Try archive.org for older versions of openbsd.org. Or just the CVS repository. The openbsd.org website is under revision control, there's 26 years of history available over at http://cvsweb.openbsd.org/www/ You

Re: NSD: Could not tcp connect to X Operation timed out

2022-01-19 Thread Paul de Weerd
On Wed, Jan 19, 2022 at 11:31:07AM +, Laura Smith wrote: | Hi | | OpenBSD NSD slave is driving me nuts with the following message in the logs "Could not tcp connect to X Operation timed out". | | The answer sounds obvious, but I can: | | - Ping the IP | - Do a "dig @$auth_server_ip

Re: IPv6 autoconf with static IID?

2021-12-28 Thread Paul de Weerd
On Tue, Dec 28, 2021 at 12:35:07PM +0100, Mike Fischer wrote: | So I guess the only way to get a stable IID with dynamic prefixes is | to use the eui64 method? (Which is based on the MAC-address and | leaks information.) What information leak are you afraid of? Someone else knowing the

Re: /etc/bsd.re-config - change a device?

2021-11-30 Thread Paul de Weerd
On Tue, Nov 30, 2021 at 08:46:34AM -, Stuart Henderson wrote: | On 2021-11-29, Paul B. Henson wrote: | > I'm upgrading to OpenBSD 7 and I was happy to see the new support for | > /etc/bsd.re-config to allow modified kernels to be automatically | > rebuilt. However, one of the changes I need

Re: type checking/signalling shell and utilities?

2021-11-17 Thread Paul de Weerd
On Thu, Nov 18, 2021 at 01:38:14AM +1100, Reuben ua Bríġ wrote: | > Date: Thu, 18 Nov 2021 01:30:25 +1100 | > From: Reuben ua Bríġ | > | > Does anyone know of any shell and utilities where, for example, if | > | > -rf | > | > is a file name, the rm utility will understand so, and not think

Re: Kind of OT - camera/ software to run a long term timelapse camera

2021-11-15 Thread Paul de Weerd
Hi Steve, On Mon, Nov 15, 2021 at 10:21:51AM -0800, Steve Williams wrote: | Does anyone have recommendations to accomplish this?  It's just a | hobby so I don't want to spend a huge amount of money on it. One thing I've done in the past is to open up my laptop and point its camera in the

copying id_ed25519_sk from USB-A yubikey to USB-C yubikey

2021-10-22 Thread Paul de Weerd
Hi all, I've been happily using a yubikey together with an id_ed25519 SSH key when logging in over SSH: uhidev7 at uhub3 port 2 configuration 1 interface 1 "Yubico YubiKey OTP+FIDO+CCID" rev 2.00/5.27 addr 9 I would now like to migrate over to a new yubikey with a USB-C connector, as my new

Re: nvme boot

2021-10-15 Thread Paul de Weerd
Hi Jan, On Fri, Oct 15, 2021 at 05:05:01PM +0200, Jan Stary wrote: | Does any of the OpenSBD-supported platforms boot off nvme storage? | So far, I have been able to use nvme storage as a disk, | but not boot from it; but my HW is far from recent. Sure, I boot from nvme (actually, softraid

Re: Run a command on "last day of month"

2021-09-01 Thread Paul de Weerd
On Wed, Sep 01, 2021 at 04:39:54PM +0200, Adam Paulukanis wrote: | On Wed, 1 Sept 2021 at 16:32, Christian Weisgerber wrote: | > | > Goetz Schultz: | > | > > I would go the other way and check tomorrows date. If it is "01", then I | > > know today is the last of this month: | > > | > > date

Re: resolvd recongizing unbound

2021-08-31 Thread Paul de Weerd
On Tue, Aug 31, 2021 at 03:31:18PM +0200, Jan Stary wrote: | The running resolvd recognizes if unwind is running, | and places 127.0.0.1 at the top of resolv.conf accordingly. | | Could we have the same for unbound please? | I run unbound insted of unwind to also serve some | local names the

Re: Can't figure out what's taking up space on /

2021-08-04 Thread Paul de Weerd
t; > > | > > > fsck looks normal for a mounted filesystem. | > > > | > > > but did you try following Paul's advice to find an open file that has | > > > no directory entry? That is not corruption, but explains why more | > > > storage is in use than du show

Re: Can't figure out what's taking up space on /

2021-08-03 Thread Paul de Weerd
df shows you how much data you can write to an fs, while du shows the disk usage of files it can find. If it can't find a file (because it's been deleted), it won't account for it. But if it's been deleted and still held open by some process, it would still consume disk space. So it looks like

Re: Where to sleep to wait for lease

2021-07-29 Thread Paul de Weerd
Hi Leon, On Wed, Jul 28, 2021 at 08:18:41PM +0200, Leon Fischer wrote: | > no IP address found for vlan34:0 | > /etc/pf.conf:56: could not parse host specification | > pfctl: Syntax error in config file: pf rules not loaded | | Sleeping isn't needed if the address in pf.conf(5) is parenthesized:

Where to sleep to wait for lease

2021-07-28 Thread Paul de Weerd
Hi all, I just upgraded my home gateway to the latest snapshot and had a few issues due to dhcpleased not configuring a lease before things progressed. This is due to my v6 setup: I have tunneled IPv6 from elsewhere that I statically configure over a wg(4) tunnel. Of course, that sets a default

Re: DHCP non-issues

2021-07-19 Thread Paul de Weerd
On Mon, Jul 19, 2021 at 01:59:18PM +0200, Paul de Weerd wrote: | So far, I've found NFS and syslogd to need configuration changes or | /etc/hosts entries to ensure they start properly. As I was asked about this off-list, I went back and re-read my message. Apologies for not being more clear

Re: DHCP non-issues

2021-07-19 Thread Paul de Weerd
On Mon, Jul 19, 2021 at 01:42:41PM +0200, Christian Weisgerber wrote: | Look guys, it's simple. | | If you want IPv6 (SLAAC) autoconfiguration, you set "inet6 autoconf" | for that interface. slaacd(8) will then automatically handle things. | | If you want IPv4 (DHCP) autoconfiguration, you set

Re: Adding Password Protection to Single User Mode

2021-07-07 Thread Paul de Weerd
00 "/usr/libexec/getty std.115200" vt220 off | ____ | From: Paul de Weerd | Sent: Tuesday, July 6, 2021 17:36 | To: Valdrin MUJA | Cc: misc@openbsd.org | Subject: Re: Adding Password Protection to Single User Mode | | On Tue, Jul 06, 2021 at 12:27:03P

Re: Adding Password Protection to Single User Mode

2021-07-06 Thread Paul de Weerd
On Tue, Jul 06, 2021 at 12:27:03PM +, Valdrin MUJA wrote: | Hi Folks, | | I want to add a small password protection mechanism to | "boot -s" (single-user mode). | | Therefore, I'm working on /sys/stand/boot/boot.c, I've written | some code in boot.c, and run "make", "make obj", "make

Automatically enable port forwarding on ssh session to ProxyJump target

2021-05-05 Thread Paul de Weerd
Hi all, I'm using ProxyJump with SSH to connect to a bunch of systems behind a jumphost: Host jump HostName bastion.example.tld ProxyJump none ControlPersist 3600 DynamicForward localhost:1080 Host * ForwardAgent yes ProxyJump jump

Re: [Ver3.6/3.9] Old version need help

2021-03-30 Thread Paul de Weerd
You really should move to a more recent version of the OS; OpenBSD 3.6 was released in 2004, almost 17 years ago. However, the public mirror at ftp.eu.openbsd.org has older versions available for download: http://ftp.eu.openbsd.org/pub/OpenBSD/ And, once you've downloaded a release that you

Re: route -iface doesn't work

2021-03-08 Thread Paul de Weerd
a new route on use So .. uhm .. magic! :-) Anyway, thanks to Florian! Paul On Mon, Mar 08, 2021 at 05:10:16PM +0100, Paul de Weerd wrote: | Hi all, | | I'm probably missing something rather obvious, but I can't get route | -iface to work. According to the manpage: | | If the destination

route -iface doesn't work

2021-03-08 Thread Paul de Weerd
Hi all, I'm probably missing something rather obvious, but I can't get route -iface to work. According to the manpage: If the destination is directly reachable via an interface requiring no intermediary system to act as a gateway, the -iface modifier should be

Re: umount at boot possible?

2021-02-02 Thread Paul de Weerd
On Tue, Feb 02, 2021 at 01:30:28PM +0100, misc nick wrote: | Hello | | I have a separate disk that i was mounting as a nfs partition. That disk crashed (it was very old). Now that OpenBSD 6.7/i386 release system cannot boot because it can't mount the disk. | Is it possible to umount the

Re: rm: fts_read: No such file or directory

2021-01-14 Thread Paul de Weerd
Hi Otto, Thanks for your reply. On Thu, Jan 14, 2021 at 08:22:33AM +0100, Otto Moerbeek wrote: | > Could there be some TOCTOU issue here somewhere? Or some cache | > misbehaviour? Or is it really dying hardware? | | My first bet would be some form of corruption. FLipped bits in e..g |

rm: fts_read: No such file or directory

2021-01-13 Thread Paul de Weerd
Hi all, While doing some clean-up on my backup filesystem (which extensively uses hardlinks), I came across the error in Subject: rm: fts_read: No such file or directory Traversing the hierarchy I was trying to remove, I get similar fts_read errors when I `ls` in certain places, but a

Re: -current amd64 packages not updated? Impatient or broken?

2021-01-08 Thread Paul de Weerd
On Thu, Jan 07, 2021 at 09:30:13PM +0100, Christian Weisgerber wrote: | Steve Williams: | | > I hesitate to send this because perhaps I'm just too impatient, but then | > again, perhaps not.  This is not critical/time sensitive. | > | > I just thought I'd check if there a problem with the

Re: OpenBSD Monitor Sleep No Response

2020-12-21 Thread Paul de Weerd
On Mon, Dec 21, 2020 at 09:46:34AM -0500, ben wrote: | Hello; | | >You could try typing your password to see if it wakes up. | | For whatever reason my keyboard shuts off as well, as in I can't type anything. | I've tried entering my password, trying caps and num lock, and yet nothing | seems

Re: openssl s_client gives "called a function you should not call"

2020-11-12 Thread Paul de Weerd
Hi Claus, On Fri, Nov 13, 2020 at 06:42:28AM +0100, Claus Assmann wrote: | On Thu, Nov 12, 2020, Paul de Weerd wrote: | | > $ openssl s_client -starttls smtp -connect localhost:587 | | > RCPT TO: | ^ = RENEGOTIATING | | and the syntax is wrong too: NO space after colon, see the fin

Re: openssl s_client gives "called a function you should not call"

2020-11-12 Thread Paul de Weerd
Hi Janne, On Fri, Nov 13, 2020 at 07:59:22AM +0100, Janne Johansson wrote: | I think anything starting with capital R in that case (s_client) gets | parsed as RENEGOTIATING. | As for why openssl complains about it is unknown to me, but that gotcha is | old at least. Wow .. unexpected. But

openssl s_client gives "called a function you should not call"

2020-11-12 Thread Paul de Weerd
While trying to debug my smtpd setup, I got the error "called a function you should not call" from openssl s_client: $ openssl s_client -starttls smtp -connect localhost:587 EHLO 250- Hello [127.0.0.1], pleased to meet you 250-8BITMIME 250-ENHANCEDSTATUSCODES 250-SIZE 36700160 250-DSN 250-AUTH

Re: uvn_flush: WARNING: changes to page may be lost

2020-11-12 Thread Paul de Weerd
On Thu, Nov 12, 2020 at 07:34:41PM +0100, Jurjen Oskam wrote: | On Wed, Nov 11, 2020 at 05:54:36AM -0700, Todd C. Miller wrote: | | > On Wed, 11 Nov 2020 10:20:41 +0100, Jan Stary wrote: | | > > uvn_flush: obj=0x0, offset=0x7c2. error during pageout. | > > uvn_flush: WARNING: changes to

Re: uvn_flush: WARNING: changes to page may be lost

2020-11-11 Thread Paul de Weerd
Hi Jan, On Wed, Nov 11, 2020 at 10:20:41AM +0100, Jan Stary wrote: | uvn_flush: obj=0x0, offset=0x7c2. error during pageout. | uvn_flush: WARNING: changes to page may be lost! | uid 0 on /usr: file system full | Are the uvn and klog errors simply artifacts of the full

Re: Impact of 002_icmp6.patch

2020-10-30 Thread Paul de Weerd
On Fri, Oct 30, 2020 at 11:15:31AM +0100, js-openbsd-m...@webkeks.org wrote: | What about link-local IPv6? That's active by default, isn't it? It is not. You need to enable IPv6 on an interface to get a link-local address on it, only the loopback interface is special in this sense that it gets

Re: USB to 3.5mm jack audio adapter

2020-09-10 Thread Paul de Weerd
USB class-compliant) | - supports 3.5mm "TRRS" headset jacks (what most phones use) Thanks Alexandre, I did that and found one that looks like the thing you are talking about. Will give it a shot ;) On Thu, Sep 10, 2020 at 09:47:43AM +1000, Stuart Longland wrote: | On 9/9/20 11:49

USB to 3.5mm jack audio adapter

2020-09-09 Thread Paul de Weerd
Hi all, As I don't have a microphone to use with my azalia(4) sound card, and my webcam only has audio input (no output), I can't use my current hardware in firefox to do videoconferencing. So I purchased (what I thought was) a USB to audio adapter[1]. This one simply offers a 3.5mm jack

Re: Running out of pty's

2020-08-27 Thread Paul de Weerd
On Thu, Aug 27, 2020 at 02:52:04PM +0200, Mischa wrote: | Hi All, | | I am managing a OpenBSD instance for a customer of mine who uploads camera images via sftp to be used in a single location. | It looks like there are quite a number of camera’s uploading at once. | I am seeing a lot of message

sensor value last change time not updated?

2020-08-14 Thread Paul de Weerd
Hi all, I'm trying to read temperature sensor values from my ugold(4) device. Seems to work alright (I get the same temperature reading as sysctl(8) returns for the sensor), but the 'sensor value last change time' doesn't seem to be updated. [weerd@pom] $ cat sensor_last_change.c #include

Re: ssh X forwarding and google-chrome

2020-07-02 Thread Paul de Weerd
Hi Gregory, On Thu, Jul 02, 2020 at 05:33:20PM +0300, Gregory Edigarov wrote: | Hello, everybody | | does anybody know if there is any tricks? | | In my office pc (currently linux) I have google-chrome installed, | and I absolutely need to access it from home. | | "ssh -Y google-chrome" just

Re: Filling a 4TB Disk with Random Data

2020-06-05 Thread Paul de Weerd
| Thanks for your time | | | On Mon, Jun 1, 2020 at 7:28 AM Paul de Weerd wrote: | | > On Mon, Jun 01, 2020 at 06:58:01AM -0700, Justin Noor wrote: | > | Hi Misc, | > | | > | Has anyone ever filled a 4TB disk with random data and/or zeros with | > | OpenBSD? | > | > I do this be

Re: Filling a 4TB Disk with Random Data

2020-06-01 Thread Paul de Weerd
On Mon, Jun 01, 2020 at 06:58:01AM -0700, Justin Noor wrote: | Hi Misc, | | Has anyone ever filled a 4TB disk with random data and/or zeros with | OpenBSD? I do this before disposing of old disks. Have written random data to several sizes of disk, not sure if I ever wiped a 4TB disk. | How

Re: booting from a SD card on APU2: ERR R

2020-04-22 Thread Paul de Weerd
On Wed, Apr 22, 2020 at 11:54:22PM +0200, Jan Stary wrote: | Booting from Hard Disk... | Using drive 0, partition 3. | Loading | ERR R These "ERR x" error codes are documented in biosboot(8)[1]. They're brief because the biosboot program is quite space constrained. In this particular case, "ERR

Re: ssh-agent confirmation for use by default

2020-04-07 Thread Paul de Weerd
On Tue, Apr 07, 2020 at 12:48:34PM -, Stuart Henderson wrote: | > After a discussion at work, I started looking at enabling confirmation | > before authentication through ssh-agent by default. When logging in | > through xdm, the default Xsession runs `ssh-add < /dev/null` (see line | > 36 in

ssh-agent confirmation for use by default

2020-04-06 Thread Paul de Weerd
Hi all, After a discussion at work, I started looking at enabling confirmation before authentication through ssh-agent by default. When logging in through xdm, the default Xsession runs `ssh-add < /dev/null` (see line 36 in /etc/X11/xdm/Xsession). My keys are loaded and I can log in to remote

Re: pkg_outdated binary?

2020-03-09 Thread Paul de Weerd
Hi Luke, On Mon, Mar 09, 2020 at 01:55:18PM -0600, Luke A. Call wrote: | Hi. I see a manual page for pkg_outdated, online and on my 6.6 stable | machine, but no binary, or result from "type pkg_outdated", even with, | as root: | cd / | find . -iname "*outdated*" 2>&1 | less | ...though that

Re: heads up: amd64 snap

2020-03-09 Thread Paul de Weerd
On Mon, Mar 09, 2020 at 07:28:10PM +0100, Paul de Weerd wrote: | Indeed it did :) My machine would not POST anymore (Dell Optiplex | 9020; dmesg at the end) I meant: dmesg in the follow-up e-mail... OpenBSD 6.6-current (GENERIC.MP) #38: Sat Mar 7 19:58:17 MST 2020 dera...@amd64

Re: heads up: amd64 snap

2020-03-09 Thread Paul de Weerd
On Mon, Mar 09, 2020 at 06:47:10PM +0100, Sebastien Marie wrote: | On Mon, Mar 09, 2020 at 04:51:00PM +, Anthony Campbell wrote: | > On 09 Mar 2020, Otto Moerbeek wrote: | > > On Mon, Mar 09, 2020 at 03:56:53PM +, Anthony Campbell wrote: | > > | > > > This discussion is very interesting.

Re: Full disk encryption including /boot, excluding bootloader?

2020-02-17 Thread Paul de Weerd
On Tue, Feb 18, 2020 at 05:12:25AM +, Frank Beuth wrote: | Yes, it's a cool way to combine things to get unexpected functionality. | I haven't dug into the bootloader much... is there a reasonably easy way | to get the USB-stick-bootloader to boot the hard drive partition by | default? Best

Re: Detecting DoH using PF

2020-02-17 Thread Paul de Weerd
Hi Erik, On Mon, Feb 17, 2020 at 06:07:59PM +, Erik Lauritsen wrote: | Hi, | | Is a DNS over HTTPS recognizable somehow so that it can be fingerprinted | and redirected or blocked using pf? I haven't studied this in close detail, but since it's just a "normal" (albeit generally small) HTTPS

Re: Full disk encryption including /boot, excluding bootloader?

2020-02-17 Thread Paul de Weerd
On Mon, Feb 17, 2020 at 01:35:38PM +, Frank Beuth wrote: | > | This way the evil maid would have nothing to tamper with. | > | > Note that with this approach, a default OpenBSD install to your | > machine will still install a bootloader on the physical disk inside | > your machine. It's then

Re: Full disk encryption including /boot, excluding bootloader?

2020-02-17 Thread Paul de Weerd
On Mon, Feb 17, 2020 at 08:50:14AM +, Frank Beuth wrote: | > > How do you do this on OpenBSD? | > @frank: https://www.openbsd.org/faq/faq14.html#softraidFDEkeydisk | | That's telling me how to use a keydisk -- how to put the softraid FDE | encryption key material on a USB disk. | | If an

Re: using first alias as masquerading ip on pf.conf

2020-02-12 Thread Paul de Weerd
On Wed, Feb 12, 2020 at 12:09:12PM +0100, Federico Donati wrote: | Hi all, | | I have a couple of firewalls with carp configured and I need them to | reach the Internet even when they are in BACKUP state. | I'm managing pf via Ansible/GIT, so I'd like to keep the | configuration of pf.conf

Re: IPsec and MTU / fragmentation

2020-02-10 Thread Paul de Weerd
On Mon, Feb 10, 2020 at 12:15:37PM +0100, Simen Stavdal wrote: | True, but issue was related to downloading over http, which is over tcp. | So, if http is your only concern I would go for this option. | | Most clients are configured with an MTU of their physical NIC capabilities, | and sometimes

Re: FreeBSD daemon(8)-like command for OpenBSD

2020-01-28 Thread Paul de Weerd
Hi Patrick, On Tue, Jan 28, 2020 at 09:29:20AM +0100, Patrick Kristiansen wrote: | Hi Ingo | | Thank you for your reply. | | I can't say I disagree with your and the OpenBSD team's attitude about | bug-free daemons. But I am just a lowly application programmer, and | sometimes I introduce

Re: interface modifiers :network and :0 picking different subnets for IPv6

2020-01-28 Thread Paul de Weerd
Hi Richard, On Tue, Jan 28, 2020 at 04:42:02PM +1300, richard.n.proc...@gmail.com wrote: | Does the patch below help? It does! Great, thank you! (tested on my test vm as that has a source tree checked out) [weerd@test1] $ echo 'block in on vio0 proto { tcp, udp } from vio0:network to !

interface modifiers :network and :0 picking different subnets for IPv6

2020-01-27 Thread Paul de Weerd
Hi all, Following up from my previous (PEBKAC) issue[1], I kept working on my ruleset. I found, what I believe to be, another issue. Here's the reduced ruleset that reproduces the problem: [root@ferrari] # cat pf.tmp IntIF=em1 # only allow DNS to the unbound instance listening on em1 (v4 and

Re: combining macro with interface modifiers in pf.conf

2020-01-25 Thread Paul de Weerd
Hi Philipp, On Sat, Jan 25, 2020 at 12:06:49PM +0100, Philipp Buehler wrote: | | Hey Paul, | | Am 25.01.2020 11:43 schrieb Paul de Weerd: | > block in on $IntIF inet proto { tcp, udp } from $IntIF:network to ! | > $IntIF:0 port domain | > block in on $IntIF inet6 proto { tcp, u

combining macro with interface modifiers in pf.conf

2020-01-25 Thread Paul de Weerd
Hi all, I'm rewriting some pf.conf rulesets and thought to use interface modifiers to make them more generic. Here's an example of what I came up with: block in on $IntIF inet proto { tcp, udp } from $IntIF:network to ! $IntIF:0 port domain block in on $IntIF inet6 proto { tcp, udp } from

Re: dig -p 5353 foo.bar core dumped

2020-01-21 Thread Paul de Weerd
On Tue, Jan 21, 2020 at 11:25:33AM -0800, Jordan Geoghegan wrote: | dig doesnt core dump for me, it just prints this warning: ";; Error, | only port 53 supported". I wonder why the error isnt being printed | for OP. Interesting. Are you on -current? I updated to the latest snapshot yesterday

Re: dig -p 5353 foo.bar core dumped

2020-01-21 Thread Paul de Weerd
On Tue, Jan 21, 2020 at 06:58:02PM +0100, Dieter Rauschenberger wrote: | Hi misc, | | on my intranet i have unbound and nsd running, both on the same | machine. unbount is listening on port 53, nsd is listening on port | 5353 on 127.0.0.1. If i run | | dig @127.0.0.1 -p 53 foo.bar | |

Re: dhcpd and unbound on a small LAN

2020-01-06 Thread Paul de Weerd
On Mon, Jan 06, 2020 at 09:33:44AM -0500, Steve Litt wrote: | On Mon, 06 Jan 2020 14:03:20 +0100 | "Boudewijn Dijkstra" wrote: | | | > Another way is to configure the DHCP server to give alice the same | > address every time. | > | > host alice { | > hardware ethernet

Re: How to setup date on startup with ntpd on OpenBSD 6.6

2019-11-21 Thread Paul de Weerd
On Thu, Nov 21, 2019 at 03:48:44PM +0500, dmitry.sensei wrote: | Hi! | | Since "-s" key had been deleted how I can setup time on startup? >From ntpd(8): > ntpd makes efforts to verify and correct the time at boot if > constraints are configured and satisfied or if trusted servers or > sensors

Re: wrong pkg_add url after sysupgrade

2019-10-09 Thread Paul de Weerd
On Wed, Oct 09, 2019 at 01:40:42PM +, shadrock uhuru wrote: | after trying sysupgrade for the first time on my laptop running snapshots | running the following command returns no such dir. | | doas pkg_add -u | https://ftp.OpenBSD.org/pub/OpenBSD/6.6/packages/amd64/: no such dir | pkg_info

Re: How can I remove sets installed by sysupgrade?

2019-09-17 Thread Paul de Weerd
On Tue, Sep 17, 2019 at 03:14:22PM +0200, Marc Espie wrote: | On Tue, Sep 17, 2019 at 01:48:19PM +0200, Paul de Weerd wrote: | > On Tue, Sep 17, 2019 at 01:27:23PM +0200, Marc Espie wrote: | > | > By having each set install a specific file in a well-known location. | > | > Befo

Re: How can I remove sets installed by sysupgrade?

2019-09-17 Thread Paul de Weerd
On Tue, Sep 17, 2019 at 01:27:23PM +0200, Marc Espie wrote: | > By having each set install a specific file in a well-known location. | > Before sysupgrade I wrote my own script to upgrade machines, this uses | > /var/db/sets/{base,comp,game,man,xbase,xfont,xserve,xshare} to | > determine what has

Re: How can I remove sets installed by sysupgrade?

2019-09-17 Thread Paul de Weerd
On Tue, Sep 17, 2019 at 09:39:00AM +0100, cho...@jtan.com wrote: | Marc Espie writes: | > On Tue, Sep 17, 2019 at 09:01:47AM +0100, cho...@jtan.com wrote: | > > Marc Espie writes: | > > > I'm a bit surprised nobody looked at instrumenting what sets are actually | > > > installed on a machine

Re: vmd eating lots of memory

2019-07-26 Thread Paul de Weerd
), and memory consumption is growing at a rate that seems to correlate to the bandwidth used by the tcpbench traffic. The test is simply `tcpbench -s -p X` on the VM and `tcpbench -p X vm` on the host. Paul On Thu, Jul 25, 2019 at 09:54:22PM +0200, Paul de Weerd wrote: | A little more

Re: vmd eating lots of memory

2019-07-26 Thread Paul de Weerd
Hi Bryan, On Fri, Jul 26, 2019 at 04:02:10PM +0900, Bryan Linton wrote: | On 2019-07-25 13:01:28, Mike Larkin wrote: | > On Thu, Jul 25, 2019 at 09:54:22PM +0200, Paul de Weerd wrote: | > > A little more follow-up on this vmd-memory-leak issue. | > > | > > Comparing the t

Re: vmd eating lots of memory

2019-07-25 Thread Paul de Weerd
the memory consumption (above the 'expected' growth that I've been seeing). The growth during daily(8) runs still confuses me, as that doesn't do anything network-related... Paul On Sat, Jul 20, 2019 at 04:23:27PM +0200, Paul de Weerd wrote: | Hi all, | | I'm running two vmd(8) VMs: | | [weerd

Re: vmd eating lots of memory

2019-07-21 Thread Paul de Weerd
On Sun, Jul 21, 2019 at 10:46:06AM +0200, Paul de Weerd wrote: | on both VMs and host. If the problem was there too, it didn't affect | anything else on the system until I upgraded. Forgot to make explicit: the other vm remains at a constant memory footprint; also while running /etc/daily Paul

Re: vmd eating lots of memory

2019-07-21 Thread Paul de Weerd
Hi Mike, On Sat, Jul 20, 2019 at 10:23:02AM -0700, Mike Larkin wrote: | Did this just start happening? Nothing relevant has changed in vmd(8) recently | that would cause this, from what I remember. Prior to this kernel version, I was running OpenBSD 6.5 (GENERIC.MP) #847: Tue Apr 9 09:12:46

vmd eating lots of memory

2019-07-20 Thread Paul de Weerd
Hi all, I'm running two vmd(8) VMs: [weerd@despair] $ cat /etc/vm.conf vm "undeadly" { owner root memory 2G disk /home/vmm/undeadly.dsk disk /storage/vmm/undeadly.dsk interface switch "vmmswitch" lladdr "fe:e1:bb:02:6b:bf" } vm "testvm" { owner

Re: Newer snapshots on ALIX

2019-06-21 Thread Paul de Weerd
Paul On Wed, Jun 19, 2019 at 08:55:06AM +0200, Claudio Jeker wrote: | On Wed, Jun 19, 2019 at 08:37:28AM +0200, Paul de Weerd wrote: | > Morning folks, | > | > I ran into a problem after upgrading my ALIX to a more recent snapshot | > in that it won't boot anymore. It gets to &qu

Newer snapshots on ALIX

2019-06-19 Thread Paul de Weerd
Morning folks, I ran into a problem after upgrading my ALIX to a more recent snapshot in that it won't boot anymore. It gets to "entry point 0x2d0" and then stops. I tried using the PXE bootloader to load the local kernel from disk (both bsd and bsd.rd) and to load kernels from tftp, but

Re: "ucode too large"

2019-06-07 Thread Paul de Weerd
Hi Claudio, Jonathan, Thank you both for the diff - it has fixed the 'ucode too large' problem (this machine uses biosboot, not UEFI), and has made a difference in dmesg: cpu[01] both gained flags MD_CLEAR,TSXFA,L1DF,SSBD And a further down this changed: -cpu0: using Skylake AVX MDS workaround

"ucode too large"

2019-06-07 Thread Paul de Weerd
I've just replaced my home gateway with a brandless machine with an i5-7200U. While preparing, I noticed the message "ucode too large" scrolling by on the serial console, just before the kernel starts. The dmesg shows cpu0 as mode 06-8e-09: cpu0: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz,

Re: Activating second crypted (or other raid) device

2019-05-06 Thread Paul de Weerd
On Sun, May 05, 2019 at 05:41:38PM -0400, trondd wrote: | It's really not that big of a deal to call 'fsck' and 'mount' yourself in | rc.local. It's not, but it would be nice if this could be done automatically somehow, for services that start at boot (e.g. httpd) that need data on other softraid

Re: 6.5 auto_install fails due to custom /var/tmp?

2019-04-30 Thread Paul de Weerd
On Tue, Apr 30, 2019 at 01:29:47PM -0700, Lyndon Nerenberg wrote: | > Sadly, no :-( | > | > But I should be able to accomplish what I need using rc.firsttime and | > a tiny bit of hackery. | | Sadly, no :-( | | What I was aiming for was to have the newly installed machines come | up with a 2GB

  1   2   3   4   5   6   7   8   >