Re: x86_64 hardware recommendations/warnings?

2017-03-13 Thread Aaron B.
ten considering building something like this, as it wouldn't be much more than a set of basic CRUD pages. Never got around to even starting it, though, as I'm both short on time and uncertain if anyone would make use of it. -- Aaron B. <aa...@zadzmo.org>

Re: Problem with httpd and openssl on NetBSD-7.1

2017-05-01 Thread Aaron B.
if bozohttpd is good enough for what you are doing, you will be safe enough with a mere A-minus rating. If you really need an A or A-plus, there's always nginx. -- Aaron B. <aa...@zadzmo.org>

Re: Problem with httpd and openssl on NetBSD-7.1

2017-05-01 Thread Aaron B.
omplicated and annoying. https://support.cloudflare.com/hc/en-us/articles/200933580-What-cipher-suites-does-Cloudflare-use-for-SSL- -- Aaron B. <aa...@zadzmo.org>

Re: Native sound system

2018-04-04 Thread Aaron B.
software. This spares the expense of writing custom drivers. -- Aaron B. <aa...@zadzmo.org>

Parsing pkg_admin audit

2019-05-29 Thread Aaron B.
Is there a mode, or some other utility/combination of commands, to get the output of 'pkg_admin audit' in a machine-readable way - something like CSV/JSON/etc? A regular expression should be able to do it, but I'm hoping there's some format intended to be scripted. -- Aaron B.

Re: netbsd : internals : bach book : good to start-off?

2019-04-22 Thread Aaron B.
were enough answer any remaining questions. -- Aaron B.

Re: NetBSD Jails

2020-05-16 Thread Aaron B.
most of the benefits of a container, but ultimately, it's just a toy. > All this said though I would note that perhaps re-engineering the whole > network stack in the netgraph way (perhaps directly using netgraph[1]), > provides some form of "virtualization" for network things in a clean and > structured way. > > [1] https://en.wikipedia.org/wiki/Netgraph > Haven't run into Netgraph before, I'd have to read up on it. Thanks for the link. -- Aaron B.

Re: NetBSD Jails

2020-05-15 Thread Aaron B.
I can tarball them up and move to a different server with ease; or completely reinstall a new major version of NetBSD and run the same chroots without modification. Jails would turn my chroots into true containers. -- Aaron B.

Re: NetBSD Jails

2020-05-15 Thread Aaron B.
this particular point, which may or may not be within scope of jails: https://wiki.netbsd.org/projects/project/virtual_network_stacks/ - Some way to set per-chroot resource limits would be helpful. I can manipulate ulimits, but that is basically driving screws with a hammer. It's simply the wrong tool. -- Aaron B.

Re: NetBSD Jails

2020-05-20 Thread Aaron B.
of other operating systems have had the ability for a decade or more. And yes, I have looked into curtain mode. It's interesting but does not do this. -- Aaron B.

Re: Securing DNS traffic

2020-05-25 Thread Aaron B.
spicious.) Is there anything in the contract I could use to fight this? I don't know. It's dozens of pages long and written in a way only a lawyer can understand it. There are no other choices for internet access in my area. Again, I'd prefer to run my own resolvers, but can't justify the expense. -- Aaron B.

Re: Securing DNS traffic

2020-05-24 Thread Aaron B.
ap VM's from whomever, with DNS over TLS between my home network and personal resolvers. This way only the authoritative services know. If there was a way to share hosting costs with a small to medium number of other users, it would be worth it. But for just myself I concluded it wasn't. -- Aaron B.

Re: Securing DNS traffic

2020-05-22 Thread Aaron B.
rvers out there won't support DNS over TLS - plus you'll need to bring up/down so many secured connections it simply won't perform well even if the authoritative servers did support TLS. -- Aaron B.

Re: possible new feature: unrm ?

2020-07-01 Thread Aaron B.
gh disk space. This feature would make it effectively impossible to delete anything quickly, which would have wrecked that system. If you want to get a file back in fast and simple way, use something like ZFS and 'cp' it out of an old snapshot. -- Aaron B.

Re: cvs better than git?

2020-06-17 Thread Aaron B.
used unix-like OS, by far; the fact I am reading NetBSD mailing lists should say the rest. :) -- Aaron B.

Re: cvs better than git?

2020-06-21 Thread Aaron B.
very > > valuable. > > In git, commits are not final As a long time SVN user trying to stay out of this discussion... I give up. This partial sentence broke my willpower. ...if it's not final, why is it called a "commit"? -- Aaron B.

Re: postfix for 2 domains on 1 vps 1 ip

2021-01-06 Thread Aaron B.
mail server hostname. Servers also have PTR records that match the hostname. SPF records are simply "v=spf1 mx -all". Getting DKIM/DMARC working is a TODO item. There's not lot of volume outbound, but I've never had delivery issues to GMail, AOL, outlook.com, etc. -- Aaron B.

Re: OS-level virtualization

2021-04-06 Thread Aaron B.
On Tue, 6 Apr 2021 20:16:25 +0200 Martin Husemann wrote: > On Tue, Apr 06, 2021 at 06:11:52PM -, Christos Zoulas wrote: > > In article <20210406163302.gj6...@mail.duskware.de>, > > Martin Husemann wrote: > > >On Tue, Apr 06, 2021 at 12:29:31PM -0400, Aa

Re: OS-level virtualization

2021-04-06 Thread Aaron B.
On Tue, 06 Apr 2021 12:46:59 -0400 Brad Spencer wrote: > > As the risk of drawing abuse, perhaps.. does RUMP count?? > As someone who tried to implement a container system with RUMP ... probably not for what the original poster probably wants to do. -- Aaron B.

Re: OS-level virtualization

2021-04-06 Thread Aaron B.
all there is. The kernel simply doesn't have any other way to isolate processes at the time. -- Aaron B.

Re: IPfilter and Nintendo Switch

2021-02-28 Thread Aaron B.
idence that the Nintento Switch uses UPnP. I can't rule out I was doing something wrong, but eventually I just turned off UPnP altogether. -- Aaron B.

Re: OS-level virtualization

2021-04-08 Thread Aaron B.
processes in different PID namespaces are also sharing the same filesystem. I can't think of a use case for that (Not that there isn't one :) -- Aaron B.

Re: IPfilter and Nintendo Switch

2021-02-22 Thread Aaron B.
o take a moment to complain about the name of this device. Searching for "network configuration" and "Switch" ... it's simply not helpful. Nintendo's marketing department made life harder for us. -- Aaron B.

Race condition with Raspberry Pi 3 root on NFS

2022-10-30 Thread Aaron B.
gic workarounds to get multiuser without human attention? -- Aaron B.

Re: Race condition with Raspberry Pi 3 root on NFS

2022-10-30 Thread Aaron B.
On Sun, 30 Oct 2022 16:54:34 -0700 Andy Ruhl wrote: > On Sun, Oct 30, 2022 at 2:18 PM Aaron B. wrote: > There used to be a way to build a kernel with a hardcoded NFS root > option. I dug around in evbarm and aarch64 and didn't see something > familiar to me (from like 15 year

Re: Used HDs

2022-11-11 Thread Aaron B.
, built in 1997. It was heavily used when I first got the disk in 2004, and I ran it 24x7 from at least 2009 if not earlier. I believe it would still work if I happened to turn that computer back on. -- Aaron B.

Re: Which ARM SBC would work well with NetBSD?

2023-03-06 Thread Aaron B.
a full month now with no issues. Kernel boots from the SD card, root filesystem is from NFS. I'm not any video output; console is via serial port. The board has been reliable. I strongly recommend putting a small heatsink on the SOC. -- Aaron B.

Re: nvmm users - experience

2023-05-22 Thread Aaron B.
ny success several years ago. Old - but reliable - AMD APU hardware, any VM I tried would crash immediately on startup. I don't remember the exact error at this point but something about being unable to map memory, I think. -- Aaron B.

Re: Getting the sound-effects on NetBSD.

2023-06-27 Thread Aaron B.
'cd9660' mount -t cd9660 /dev/cd0a /mnt ..and then look at the files in /mnt. Please note it's been so long since I've done this there may be mistakes in these example commands. -- Aaron B.