Re: Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Lucifer
I've seen documentation for this somewhere. Have you seen this?https://www.netbsd.org/docs/guide/en/chap-cgd.html On Mon, Apr 29, 2024, 8:26 PM Arvind wrote: > Yes. The man pages are out of date and unfortunately not helpful ( > https://wiki.netbsd.org/security/cgdroot/). See the top of the

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Lucifer
theres a handbook online have you checked there? On Mon, Apr 29, 2024, 4:05 PM Arvind wrote: > I am not interested in using Linux. I would like to setup Root Filesystem > Encryption (unlock using passphrase) during boot. The man pages are out of > date and unfortunately not helpful ( >

Re: Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Arvind
Yes. The man pages are out of date and unfortunately not helpful (https://wiki.netbsd.org/security/cgdroot/). See the top of the page. -Arvind Original Message On 4/29/24 7:52 PM, Lucifer wrote: > theres a handbook online > have you checked there? > > On Mon, Apr 29, 2024,

Re: OAUTH TOTP

2024-04-30 Thread Lucifer
bro are these legitimate keys? On Mon, Apr 29, 2024, 6:14 PM Martin Neitzel < neit...@hackett.marshlabs.gaertner.de> wrote: > PW> Apparently I need to "purchase an inexpensive OATH TOTP compatible > PW> token device." > > Here's another "thumbs-up" for the pkg "oath-toolkit". > > I drive its

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Arvind
The backup files themselves will be encrypted. -Arvind > On Apr 29, 2024, at 2:53 PM, Lucifer wrote: > > i find it interesting that you do not encrypt the backup... > > On Mon, Apr 29, 2024 at 10:10 AM Arvind wrote: > >> Hi friends, hoping someone might be able to help or point in the right

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Lucifer
i recommend against third party for mission critical. stay away from Linux. On Mon, Apr 29, 2024 at 2:55 PM Arvind wrote: > The backup files themselves will be encrypted. > > -Arvind > > > > > On Apr 29, 2024, at 2:53 PM, Lucifer wrote: > > i find it interesting that you do not encrypt the

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Lucifer
i find it interesting that you do not encrypt the backup... On Mon, Apr 29, 2024 at 10:10 AM Arvind wrote: > Hi friends, hoping someone might be able to help or point in the right > direction. We have a NetBSD 10 machine that requires Root Filesystem > Encryption (unlock using passphrase)

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Arvind
Sure, was just using the linux remote unlock as an example of what we’re trying to get configured (after encrypting the root partition with passphrase unlock). Any help from the group would be much appreciated. -Arvind > On Apr 29, 2024, at 2:57 PM, Lucifer wrote: > > i recommend against

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Lucifer
i dont fully understand On Mon, Apr 29, 2024, 3:12 PM Arvind wrote: > Sure, was just using the linux remote unlock as an example of what we’re > trying to get configured (after encrypting the root partition with > passphrase unlock). Any help from the group would be much appreciated. > >

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Arvind
I am not interested in using Linux. I would like to setup Root Filesystem Encryption (unlock using passphrase) during boot. The man pages are out of date and unfortunately not helpful (https://wiki.netbsd.org/security/cgdroot/). -Arvind > On Apr 29, 2024, at 3:57 PM, Lucifer wrote: > > i dont

Re: OAUTH TOTP

2024-04-30 Thread Staffan Thomen
On 4/29/24 21:09, Greg Troxel wrote: Benny Siegert writes: The cheapest way to have TOTP is to install Google Authenticator on your phone. Be careful when you choose a TOTP program that you are able to back up the seeds yourself, and that the program does not send the seeds to the cloud not

Re: ipv4_prefer

2024-04-30 Thread Lucifer
does anyone have a more indepth description of function? On Mon, Apr 29, 2024 at 10:48 AM beaker wrote: > Lucifer wrote: > > On Sun, Apr 28, 2024, 5:16 PM beaker wrote: > > > > > m...@goathill.org (MLH) wrote: > > > > > > > It appears that some of the pkgsrc distfiles now are only available >

Re: OAUTH TOTP

2024-04-30 Thread Lucifer
totp must not be implemented yet... On Mon, Apr 29, 2024 at 2:10 PM Greg Troxel wrote: > Benny Siegert writes: > > > The cheapest way to have TOTP is to install Google Authenticator on > > your phone. > > Be careful when you choose a TOTP program that you are able to back up > the seeds

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread adr
arvind wrote: Hi friends, hoping someone might be able to help or point in the right direction. We have a NetBSD 10 machine that requires Root Filesystem Encryption (unlock using passphrase) during boot. The man pages are out of date and unfortunately not helpful

$squid is not set properly

2024-04-30 Thread Riccardo Mottola
Hello, on boot, I see this message: /etc/rc: WARNING: $squid is not set properly - see rc.conf(5). but I have no squid related lines in my /etc/rc.conf and I don't use squid, so I don't think I need it (or does the system need it?). Riccardo

Re: ipv4_prefer

2024-04-30 Thread Martin Husemann
On Mon, Apr 29, 2024 at 05:04:06PM -0400, MLH wrote: > Same : > inet6 fe80:: (redacted but looks good) Link local address. > inet6 ::1000/128 flags 0 Bogus. > dhcpcd issued a bunch of ipv6 stuff on startup that indicated all > was fine but it didn't go into dmesg or a logfile that I can find >

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Martin Husemann
On Mon, Apr 29, 2024 at 07:12:16PM +, Arvind wrote: > Sure, was just using the linux remote unlock as an example of what > we're trying to get configured (after encrypting the root partition > with passphrase unlock). Any help from the group would be much > appreciated. It should be

Re: $squid is not set properly

2024-04-30 Thread Riccardo Mottola
Hi, Greg Troxel wrote: Almost certainly, you have squid installed via pkgsrc, or you have a leftover /etc/rc.d/squid because you used to. oh, got you! Squid was there. Actually, I really had the package installed and left unused. Possibly some testing. The logs indicated it did some runs in

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Arvind
Yes, this is not relevant to what I’m asking. -Arvind > On Apr 30, 2024, at 12:06 AM, Lucifer wrote: > > I've seen documentation for this somewhere. > > Have you seen this?https://www.netbsd.org/docs/guide/en/chap-cgd.html > > On Mon, Apr 29, 2024, 8:26 PM Arvind wrote: > >> Yes. The man pages

Re: $squid is not set properly

2024-04-30 Thread Greg Troxel
Riccardo Mottola writes: > Hello, > > on boot, I see this message: > /etc/rc: WARNING: $squid is not set properly - see rc.conf(5). > > > but I have no squid related lines in my /etc/rc.conf and I don't use > squid, so I don't think I need it (or does the system need it?). Almost certainly, you

Re: $squid is not set properly

2024-04-30 Thread Greg Troxel
> Greg Troxel wrote: >> Almost certainly, you have squid installed via pkgsrc, or you have a >> leftover /etc/rc.d/squid because you used to. > > oh, got you! Squid was there. Actually, I really had the package > installed and left unused. Possibly some testing. The logs indicated > it did some

NetBSD and IP host models

2024-04-30 Thread Sad Clouds
Hi, I have some niche use cases that need support for "strong end system model" which can perform symmetric IP routing. As far as I can see, there are some obstacles with NetBSD: 1. NetBSD uses "weak end system model", so a multihomed host is prone to ARP flux when multiple IP addresses are

Re: NetBSD 10 RFE (ramdisk-cgdroot.fs in boot.cfg)

2024-04-30 Thread Arvind
Thank you Martin. Just to provide the larger context of what I am trying to do: Root Filesystem Encryption (unlock using passphrase) during boot - I want to achieve this without using a custom kernel. This seems to be possible since the fs ramdisk-cgdroot.fs in boot.cfg(5) obviates the need for

Re: Pkgsrc issue

2024-04-30 Thread Havard Eidnes
> I have a PPC Mac Mini running NetBSD 8.2. It's stable and > functional. It serves me well. Yes, but it's now running an OS which is becoming old and which is about to be "de-supported" wrt. pkgsrc updates (to the extent we "support" it). The basic problem is that the supplied compiler is

Re: Please forgive a blatant plug: I reviewed v10 for the Reg

2024-04-30 Thread Riccardo Mottola
Ciao Liam! Liam Proven wrote: I really wish there were more technology sharing between the BSDs. There is actually, but it is never easy. I have seen good transfer between NetBSD and OpenBSD in the years, including drivers and such. Dragonfly has the best installer, IMHO, but of course

Re: Pkgsrc issue

2024-04-30 Thread Havard Eidnes
>> I *believe* I could fix this by upgrading NetBSD to >> 9.0+. Unfortunately, that would be hard for me, at least now. > > Whether there are binary package sets for various versions is a > question you might want to answer, but in general, you are now > overdue for an upgrade. Yep. > This query

Re: netbsd crashes when using fat filesys

2024-04-30 Thread Martin Husemann
On Tue, Apr 30, 2024 at 10:25:09PM +, xuser wrote: > Netbsd crashes when using fat that solaris 10 has modified. Can you give any details (e.g. the exact kernel output from the crash), provide a copy of the "modified" filesystem, or the kernel crash dump? Martin

Re: Pkgsrc issue

2024-04-30 Thread Don Lee
I think I may have struck a nerve. The consensus is that 8.2 is very old and I should upgrade. As a software developer, I understand completely. As a lowly user, I never want to upgrade *anything* that is working - ever. (You _never_ trade non-working for working, you trade the old bugs for a

Re: Please forgive a blatant plug: I reviewed v10 for the Reg

2024-04-30 Thread Lucifer
OpenBSD is NetBSD Lite On Tue, Apr 30, 2024, 5:57 PM Riccardo Mottola wrote: > Ciao Liam! > > Liam Proven wrote: > > I really wish there were more technology sharing between the BSDs. > > There is actually, but it is never easy. I have seen good transfer > between NetBSD and OpenBSD in the

netbsd crashes when using fat filesys

2024-04-30 Thread xuser
Netbsd crashes when using fat that solaris 10 has modified.