Re: Deploy Django app - strategy?

2018-08-26 Thread Chris Narkiewicz
On 26/08/2018 21:01, Paul de Weerd wrote: Use python3 -m venv /path/to/venv to create a virtualenv using python3 and be done with it. Yeah, it did the trick. I'm going to deplrecate use of virtualenv, since it's no longer needed with Python 3.6. That will use a symlink to the actual python3

Re: Deploy Django app - strategy?

2018-08-28 Thread Chris Narkiewicz
On 28/08/2018 13:13, Dave Voutila wrote: Any reason you can't use something like gunicorn as the app server and use relayd on the egress? I haven't thought about it. We have existing stack with config files, admin scripts, friendly Makefiles, etc. It's a turn-key solution that gives me a

Deploy Django app - strategy?

2018-08-26 Thread Chris Narkiewicz
I'm deploying a Django app on OpenBSD 6.3 and I'm strugging to wrap my head around the best practices here. On Linux we just bootstrap virtualenv in home directory and start uwsgi (or altenative), but on OpenBSD it seems to be a bit more complicated: core# mkdir /var/www/app core# cd

uwsgi and semaphores limit

2018-08-27 Thread Chris Narkiewicz
Hi, I'm trying to run uwsgi server and I even managed to start it successfully... once. On second time, it aborted: uwsgi_lock_ipcsem_init()/semget(): No space left on device [core/lock.c line 519] I checked ipcs (_mc is the user that runs uwsgi) core# ipcs Message Queues: T ID

Re: Vultr hosting of OpenBSD

2018-09-08 Thread Chris Narkiewicz
On 08/09/2018 19:55, Ken M wrote: I have seen some comments here and there about issues with the default image What kind of issues? I'm curious. Can you pls provide a reference?

Monit logs vfprintf %s NULL in "%s" all the time

2018-10-28 Thread Chris Narkiewicz
I'm running Monit to look at few services on OpenBSD 6.3 and I'm logging to syslog. In my /var/log/messages I routinely observe the following log entries: Oct 27 22:00:01 alpha syslogd[97814]: restart Oct 27 22:00:02 alpha monit: vfprintf %s NULL in "%s" Oct 27 22:00:32 alpha last message

Re: Monit logs vfprintf %s NULL in "%s" all the time

2018-10-29 Thread Chris Narkiewicz
W dniu 29/10/2018 o 19:24, Caspar Schutijser pisze: (...) which seems to solve the same problem that you are experiencing. Ok, if this is a known problem, I'll upgrade. Thanks. Best regards, Chris

Re: spamd does not update /var/db/spamd

2018-10-30 Thread Chris Narkiewicz
W dniu 30/10/2018 o 16:58, Chris Narkiewicz pisze: W dniu 30/10/2018 o 15:56, Ricardo Mestre pisze: Hi Chris, You are running spamdb /var/db/spamdb, that's not the way to use it. I'm sorry, you were right. I misread both your e-mail and man page. Thank you all for help. Best regards, Chris

Re: spamd does not update /var/db/spamd

2018-10-30 Thread Chris Narkiewicz
W dniu 30/10/2018 o 15:56, Ricardo Mestre pisze: Hi Chris, You are running spamdb /var/db/spamdb, that's not the way to use it. According to man spamdb(8) this is how to list all entries, which I wanted to do. I see no entries, so I assume the database is empty. Best regards, Chris

spamd does not update /var/db/spamd

2018-10-30 Thread Chris Narkiewicz
Hi, I'm trying to use spamd to block spam using graylisting, but the spamd database is not updated. I run /usr/libexec/spamd -v -d to see what's happening and I definitely see hosts connecting to it: (GREY) 209.85.219.176: mytestem...@gmail.com> -> Got Grey HELO mail-yb1-f176.google.com,

Re: spamd does not update /var/db/spamd

2018-10-30 Thread Chris Narkiewicz
W dniu 30/10/2018 o 15:53, Solene Rapenne pisze:> do you run spamd-setup(8)? Yes, I see that it downloads nixspam and loads 20k IPs into spamd. Best regards, Chris

Re: spamd and google smtp ips

2018-10-30 Thread Chris Narkiewicz
W dniu 30/10/2018 o 19:31, Peter N. M. Hansteen pisze: yes, a well-known problem, and it's what nospamd (hinted at in the spamd man pages) is for. To some extent it helps to whitelist IP addresses and networks that domains list in their SPF info. Yeah, I hoped there are some reputable sources

Re: Bluetooth Support

2018-10-30 Thread Chris Narkiewicz
W dniu 30/10/2018 o 20:07, Marco Menne pisze: I read in some forum that Bluetooth is not supported in OpenBSD. Is this true? It was, but bt was removed. http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/netbt/Attic/bluetooth.h Revision 1.7, Fri Jul 11 21:54:38 2014 UTC (4 years, 3 months ago)

spamd and google smtp ips

2018-10-30 Thread Chris Narkiewicz
Hi, I'm configuring spamd and I noticed that when I send an e-mail from GMail, each time the e-mail is submitted by a different IP address. Here is spamdb output after sending a test email to myself: GREY|209.85.219.182|mail-yb1-f182.google.com|...

Re: spamd and google smtp ips

2018-11-01 Thread Chris Narkiewicz
W dniu 30/10/2018 o 23:39, Stuart Henderson pisze: I haven't run spamd myself for years, I got fed up with delayed and lost mails. Thanks. That was probably the tipping comment for me - I decided to search for alternative spam protection. It's the lost e-mails bing the the thing I cannot

X-Accel-Redirect equivalent for httpd

2018-12-20 Thread Chris Narkiewicz
Hi, Is there an equivalent or alternative for NginX X-Accel-Redirect? https://www.nginx.com/resources/wiki/start/topics/examples/x-accel/ I'm porting a django app that checks for user's permissions before allowing them to download a document and this function uses X-Accel-Redirect to achieve

httpd option max body size is ignored for subdomain

2019-02-03 Thread Chris Narkiewicz
Hi, I'm trying to configure Nextcloud on a subdomain. My config has 2 vhosts and connection max request body is not respected for my subdomain. default vhost: server "default" { listen on * port 80 location "/.well-known/acme-challenge/*" { root "/acme" request strip 2

Mounting encrypted drive on boot

2020-06-02 Thread Chris Narkiewicz
My setup consist of OpenBSD 6.7 with full drive encryption using softraid, configured as described in FAQ: /dev/sd0a - encrypted volume /dev/sd1 - decrypted I have additional need to mount an encrypted /var volume on boot. This volume is separate drive attached to be VPS "machine". I want to

Cannot open authorized_keys

2020-06-13 Thread Chris Narkiewicz
I have a user with a non-standard $HOME location and I added a key to authorized_keys. When I try to login via SSH, I get a password prompt. When looking at sshd debug logs, I see this: debug1: Could not open authorized keys '/var/home/user/.ssh/authorized_keys': Permission denied That's a but

PPPoE connection does not set IP

2020-12-08 Thread Chris Narkiewicz
rsion 1, type 1, id 0x144e, length 6 LCP Terminate-Ack Id=0x02: 01:19:24.252350 PPPoE-Discovery code Terminate, version 1, type 1, id 0x144e, length 0 01:19:24.262382 PPPoE-Discovery code Terminate, version 1, type 1, id 0x144e, length 0 Best regards, Chris Narkiewicz -

Re: [SOLVED] PPPoE connection does not set IP

2020-12-09 Thread Chris Narkiewicz
On Wed, Dec 09, 2020 at 10:59:53AM -, Stuart Henderson wrote: > Setting "inet" brings the interface up automatically. Move that > down after the point you have set the connection parameters. I escaped newlines with \ to make it one big line and this solved the issue. Thank you. Cheerio,

Re: PPPoE connection does not set IP

2020-12-09 Thread Chris Narkiewicz
On Wed, Dec 09, 2020 at 01:12:11PM +0100, Georg Bege wrote: > Hello, > > Im also on an VDSL connection from the german ISP T-Online - > > I see that you dont use any VLAN,  are you sure that this is > correct? This is supposed to be handled by the ISPs modem internally. When I look at a

X11 SIGSEGV on VirtualBox

2021-06-18 Thread Chris Narkiewicz
I'm trying to run xenodm on VirtualBox VM. VirtualBox 6.1.16_Ubuntu r140961 running on Ubuntu 20.04 with Intel card. VM uses VMSVGA display with NO 3D acceleration. Fresh OpenBSD 6.9 install, but I tried latest snapshot - same problem. When starting Xorg server, it crashes with SIGSEGV. Does

relayd and EC tls - key size 832 is not supported

2021-04-05 Thread Chris Narkiewicz
Hi, I'm configuring relayd to run grafana vhost (grafana does not support FastCGI). My relayd.conf is: http protocol "www" { match request header "Host" value "grafana.mydomain.net" forward to tls keypair grafana.mydomain.net } relay "www" { listen on wg0 port 443 tls

httpd passes rogue request to internal vhost

2021-04-11 Thread Chris Narkiewicz
I have a machine with OpenBSD 6.8 and with 2 network interfaces: egress intranet httpd has 3 vhosts defined: server "default" { listen on * tls port 443 ... location * { block return 403 } } server "externalapp.publicdomain.net" { listen on egress tls port 443

httpd fastcgi timeout during transfer

2021-04-20 Thread Chris Narkiewicz
Hi, I have a httpd serving PHP app via FastCGI interface. This application sends quite large data (1GB) but httpd timeouts the connection during transfer. What I found is the following sequence of events: 1) curl https://somehost/download/stuff 2) transfer starts 3) no mention of new conncetion

Shared memory segments are note removed after process exit

2021-02-05 Thread Chris Narkiewicz
I'm running a tandem of Xvfb + x11vnc on a headless box. x11vnc runs as _x11 user. This stack works pretty well for me until one of the processes restarts. When Xvfb restarts, it no longer enabled SHM extension. # Xvfb MIT-SHM extension disabled due to lack of kernel support When I check

Re: Sunday presentaion on OpenBSD

2021-08-29 Thread Chris Narkiewicz
On Sat, Aug 21, 2021 at 07:12:41PM -0600, Jonathan Drews wrote: > This Sunday Peter Hansteen will give a presentaion on OpenBSD: > > "Recent and not so recent changes in OpenBSD that make > life better" Any recording available? signature.asc Description: PGP signature

amd64 ddb somewhat poor - why?

2021-09-03 Thread Chris Narkiewicz
Hi, Amd64 page (https://ftp.openbsd.org/amd64.html) states that: The only major shortcoming at this time is that the kernel debugger ddb is somewhat poor. Myself not being familiar with it, can someone explain to me why amd64 is considered "poor" and what shortcomings it has, relative to other

Re: OT: Github requiring 2FA auth, meaning

2023-08-29 Thread Chris Narkiewicz
On Tue, Aug 29, 2023 at 08:40:38PM +0200, Daniele B. wrote: > Since today powers and financial interests will be able to block me > access to the Github platform by their discrection. All ready for > that? Yes, Firefox from ports seems to handle Yubikey 2FA just fine. Best regar

Custom siteXY.tgz and signature verification

2023-10-27 Thread Chris Narkiewicz
for the installer, in a similar way we bootstrap firwmware files by mounting the image using vnd? Best regards, Chris Narkiewicz

Limiting RAM on boot to emulate low-memory situation

2023-10-20 Thread Chris Narkiewicz
Is it possible to decrease amount of available RAM at boot time? I'm about to migrate some VPS system to a significantly cheaper option that comes with less RAM and I need to evaluate how existing system will behave. Sadly, I can't reconfigure RAM in VPS config. Cheers, Chris

Re: non-amd64 vps's in europe?

2023-08-13 Thread Chris Narkiewicz
method that triggered KYC alarm? Given that VPS can be used for criminal activity, I doubht he will find anyone willing to provide the service without KYC. Best regards, Chris Narkiewicz

InfluxDB stopped working on OpenBSD 7.3

2023-04-14 Thread Chris Narkiewicz
I have a fresh OpenBSD 7.3 install (no update) with InfluxDB installed from packages. When I try to start it, it did start initially, but eventually it crashed. Now I can't start it again. It complains about bad system call. Could that be related to latest security features? Below is rcctl -d

Re: Syspatch https://cdn.openbsd.org/pub/OpenBSD

2023-07-12 Thread Chris Narkiewicz
On Wed, Jul 12, 2023 at 03:19:17PM -0700, latin...@vcn.bc.ca wrote: > Is it working? > https://cdn.openbsd.org/pub/OpenBSD Works for me. Best regards, Chris Narkiewicz

Battery not detected on StarLabs Starlite Mk IV

2023-05-27 Thread Chris Narkiewicz
in apm. In Linux it works reliably, so I suppose it must be some combination of firmware issue and/or better autodetection logic. I'm wondering how can I debug root cause of the issue? I'd be grateful for any suggestions. Cheers, Chris Narkiewicz

Re: how to startx with kde?

2023-07-22 Thread Chris Narkiewicz
On Sun, Jul 23, 2023 at 03:22:13AM +0800, ykla wrote: > Hi, > > I install kde by pkg_add kde but how to boot it? There is no Plasma desktop on OpenBSD. KDE metapackage installs KDE applications. Best regards, Chris Narkiewicz

Re: Hibernation on Thinkpad Carbon X1 gen 7 - unhibernate failed

2023-06-17 Thread Chris Narkiewicz
On Sat, 2023-06-17 at 09:21 -0600, Ashlen wrote: > I have a 7th gen X1 Carbon and am not sure that the hardware is the > issue here. I've only experienced this very rarely. > I can confirm that I managed to unhibernate successfully and the error is no longer occuring, confirming your

Generating xorg.conf

2023-06-16 Thread Chris Narkiewicz
Hi, I'm trying to customize my touchpad input handling in X11. Normally I'd call X -configure to generate the config file and tune it to my needs. X -h lists -configure as available options. However, when calling X -configure, it says option is not recognized: # X -configure ... (EE) Fatal

Hibernation on Thinkpad Carbon X1 gen 7 - unhibernate failed

2023-06-16 Thread Chris Narkiewicz
Hi, I got Thinkpad Carbon X1 gen7 and I tried to test hibernation (ZZZ). When system is resumed, it took several minutes to load image. dmesg shows: unhibernate failed: original kernel changed and my iwm0 wifi card is not visible anymore. Is there someobdy with 7th gen X1 that could confirm?

Re: Installing shellinabox on OpenBSD

2024-02-12 Thread Chris Narkiewicz
On Mon, Feb 12, 2024 at 07:01:11PM +0300, Odhiambo Washington wrote: > The VM is NOT exposed to the Internet so I am not worried. If security is not a problem, you can use telnet. Windows has telnet client built-in. Best regards, Chris Narkiewicz

Re: Installing shellinabox on OpenBSD

2024-02-12 Thread Chris Narkiewicz
On Mon, Feb 12, 2024 at 02:38:25PM -0500, Daniel Ouellet wrote: > I am not sure why people say they can't have a safe ssh client for window... OP mentioned he cannot install software on the machine. This is pretty common issue if machine is managed by somebody else. Best regards, Ch

Re: Installing shellinabox on OpenBSD

2024-02-12 Thread Chris Narkiewicz
On Mon, Feb 12, 2024 at 07:12:49PM +, Chris Narkiewicz wrote: > If security is not a problem, you can use telnet. Windows has telnet > client built-in. Also, ttyd is in ports. This could be handy: https://openports.pl/path/www/ttyd Best regards, Chris Narkiewicz

ntpd not adjusting clock in vm

2023-12-17 Thread Chris Narkiewicz
adjusting local clock by 4686.001301s However, the lock does not budge at all. I can still manually set the clock by date -s HHMM. Not sure how to debug it. Is it because I'm using vm and it doesn't support? diso# dmesg | grep pvclock pvclock0 at pvbus0 Best regards, Chris Narkiewicz

unwind not picking up autoconf resolver from wg0

2023-12-20 Thread Chris Narkiewicz
I have a setup where a machine has 2 network interfaces: host fqdn: foo.company.com - public address vio0 - autoconf'd from internet provider, public IP wg0 - intranet with it's own DNS intra.company.com dns domain and 10.0.0.0/8 network Wireguard is configured in star topology, with 10.0.0.1

Re: netcup.eu arm64 (kvm, Ampere Altra), bsd.rd hangup

2023-12-17 Thread Chris Narkiewicz
On Sun, Dec 17, 2023 at 09:56:04PM +0100, Sven Wolf wrote: > I only have access to the graphical console IIRC they have a forum where some support could be provided. I'd ask about serial over lan access. Hetzner have it, but I'm not sure about netcup. Best regards, Chris Narkiewicz

Auto-install over network using UEFI

2023-11-21 Thread Chris Narkiewicz
I'm experimentin with auto-install over network using linux libvirt (qemu). I managed to load pxeboot in BIOS mode and I'm wondering if UEFI is supported. According to this blog, I should load BOOTX64.EFI instead of pxeboot. https://eradman.com/posts/autoinstall-openbsd.html I was skeptical

Re: MCU recommendations to program on OpenBSD?

2024-03-03 Thread Chris Narkiewicz
On Sun, Mar 03, 2024 at 05:11:17PM +0800, Sadeep Madurange wrote: > Any recommendations for MCUs with C > language SDKs supported by OpenBSD? AVR - 8 bit ARM - 32 bit Especially AVRs are top of the game when it comes to open source toolchain support. Best regards, Chris Narkiewicz

Re: Pre-built images for embeded machines

2024-03-03 Thread Chris Narkiewicz
ing to tailor for the general use, as embedded systems are ususally highly specialized. What are perceived issues with approach? Best regards, Chris Narkiewicz

Re: Trying to access /dev/ttyUSB0 device from VM

2024-03-17 Thread Chris Narkiewicz
Hardware passthrough is not supported by vmd. Best regards, Chris Narkiewicz

Re: Ctrl+A shortcut not working on the browser

2024-03-16 Thread Chris Narkiewicz
On my machine, Ctrl-A moves cursor to the beginning of input field, while Ctrl-E to the end. I think it emulates Emacs input mode. Best regards, Chris Narkiewicz

Booting with secure boot enabled

2024-03-31 Thread Chris Narkiewicz
Is it possible to boot OpenBSD with secure boot enabled? I'd like to try unattended installation over WiFi on ThinkPad X1 and my UEFI firmware supports PXE over WiFi, but it works only in Secure Boot mode. Best regards, Chris Narkiewicz