IKEv2/IPsec VPN

2017-09-20 Thread Gerard Lally
Some years ago I successfully set up netbsd-6 OpenVPN endpoints, with 20-30 remote Windows clients connecting. I'd now like to set up a netbsd-8 VPN, based on IKEv2/IPsec. The documentation doesn't make it clear -- to me -- if such a setup is possible. Ideally it would be nice if strongSwan was

IKEv2/IPsec VPN

2017-09-19 Thread Gerard Lally
Some years ago I successfully set up netbsd-6 OpenVPN endpoints, with 20-30 remote Windows clients connecting. I'd now like to set up a netbsd-8 VPN, based on IKEv2/IPsec. The documentation doesn't make it clear -- to me -- if such a setup is possible. Ideally it would be nice if strongSwan was

Re: blacklistd and bpfjit

2017-03-29 Thread Gerard Lally
On Tue, 28 Mar 2017, at 02:20, co...@sdf.org wrote: > npf attempts to auto load bpfjit, if it receives an error (such as > 'permission denied because securelevel=1'), it will report that bpfjit > is not loaded and this is a performance problem, even if bpfjit is > already loaded. > > in -8 it

Re: blacklistd and bpfjit

2017-03-27 Thread Gerard Lally
On Mon, 27 Mar 2017, at 17:22, atomicules wrote: > >npfctl: error loading the bpfjit module; performance will be degraded: > >Operation not permitted > >npfctl: To disable this warning `set bpf.jit off' in /etc/npf.conf > > I think that's a XEN issue. I've been playing about with npf and >

blacklistd and bpfjit

2017-03-27 Thread Gerard Lally
I have been testing blacklistd today. It works nicely, but one thing I don't understand is whether or not the bpfjit module is needed. I have securelevel=1 in rc.conf. To load the module early, before securelevel gets raised, I added bpfjit to /etc/modules.conf, and then "set bpf.jit on;" in

Boot selector with GPT + BIOS

2016-07-30 Thread Gerard Lally
Some time ago I was able to set up a NetBSD + Slackware dual boot, with fdisk MBR partitioning and the NetBSD boot selector (fdisk -B). With 3TB disks I now need to use a GPT partition scheme. I presume fdisk -B no longer works in this situation. Is there another way of installing the NetBSD boot

Re: linking issue - what am I doing wrong?

2016-03-25 Thread Gerard Lally
, I thought I'd ask. I'm glad I did. > There are so many smart folks on this list. Thanks Swift. (I hit Reply instead of Reply-All, so the list never saw my request. Sorry about that.) -- Gerard Lally

Re: GPT, wedges and RAID-1 on new server with NetBSD 7

2016-03-09 Thread Gerard Lally
On Tue, 08 Mar 2016 15:06:32 -0500 Greg Troxel <g...@ir.bbn.com> wrote: > > Gerard Lally <gerard.la...@gmail.com> writes: > > > If I want separate / swap and /home, I presume I should delete raid1a > > and create raid1a, raid1b and raid1e instead (by

Re: Wheel behavior

2015-08-24 Thread Gerard Lally
there was no wheel group. # cat /etc/slackware-version Slackware 14.1 # grep wheel /etc/group wheel:x:10:root -- Gerard Lally

Re: Where to install user stuff

2015-07-16 Thread Gerard Lally
./bootstrap --unprivileged and the configuration file ~/pkg/etc/mk.conf will be adjusted accordingly so that software is installed to ~/pkg/bin and ~/pkg/sbin. -- Gerard Lally

Re: Minor setup issues

2015-07-15 Thread Gerard Lally
to a prompt and type vesa list. This will give you a list of vesa modes supported by your hardware. For example, 0x14b. You then type vesa 0x14b and then boot. You can then add your chosen mode to /boot.cfg as follows: menu=Boot normally:rndseed /var/db/entropy-file;vesa 0x14b;boot netbsd -- Gerard Lally

Printing to a network printer by IP address

2015-06-21 Thread Gerard Lally
, spooling, line printing and so on. At the moment I would like to print a copy of some of the text configuration files in /etc but it would be useful eventually to be able to print documents formatted with graphics as well. -- Gerard Lally

Re: Printing to a network printer by IP address

2015-06-21 Thread Gerard Lally
At date and time Sun, 21 Jun 2015 16:11:56 +0100, Matthias Scheler wrote: | On Sun, Jun 21, 2015 at 02:46:19PM +0100, Gerard Lally wrote: | Is is possible to print to an ethernet-connected printer with just the | standard NetBSD print commands (LPD, LPR), without going through CUPS

Re: Printing to a network printer by IP address

2015-06-21 Thread Gerard Lally
want to do anything else it is probably easier to use | some filtering thing like CUPS. This is very useful, and it clears up the concept of filters for me, to an extent. Thanks. -- Gerard Lally

Re: Printing to a network printer by IP address

2015-06-21 Thread Gerard Lally
At date and time Sun, 21 Jun 2015 09:18:39 -0700, jgw wrote: | Gerard Lally lists+netbsd.current.us...@netmail.ie wrote: | | (NetBSD 7 amd64) | | Is is possible to print to an ethernet-connected printer with just the | standard NetBSD print commands, without going through CUPS

Re: How to enable quotas on /home

2015-05-04 Thread Gerard Lally
At date and time Mon, 4 May 2015 19:46:14 +0200, Manuel Bouyer wrote: On Sun, Apr 26, 2015 at 02:20:36PM +0100, Gerard Lally wrote: I'm trying to get quotas working on 7 beta. As far as I can tell the old way of implementing quotas in fstab has been superseded, and fstab(5) recommends

How to enable quotas on /home

2015-04-26 Thread Gerard Lally
to the new quota subsystem from those relating to the older method. quotaon(8) and quotaoff(8), for example, don't seem relevant to the new method. -- Gerard Lally

Request to reconsider removal of groff from base system

2015-03-31 Thread Gerard Lally
automated {daily,weekly,monthly} reports. I would be disappointed to see groff removed from the base system. It is a nice fit for NetBSD's minimalist philosophy, and I ask that the decision to remove it be reconsidered. Thank you. ** http://www.schaffter.ca/mom/mom-03.html -- Gerard Lally

Re: Request to reconsider removal of groff from base system

2015-03-31 Thread Gerard Lally
At date and time Tue, 31 Mar 2015 15:18:36 +0200, tlaronde wrote: On Tue, Mar 31, 2015 at 12:24:51PM +0100, Gerard Lally wrote: As someone who uses groff as a lightweight alternative to TeX and friends** FWIW, I have developed a minimal TeX system: kerTeX (http://www.kergis.com

Re: NPF on domU - more clarity required

2014-12-27 Thread Gerard Lally
At date and time Sat, 27 Dec 2014 14:49:03 +1300, Chris Bannister wrote: On Fri, Dec 26, 2014 at 11:32:26PM +, Gerard Lally wrote: Thank you Michael, and thank you to all the other senior NetBSD devs who stooped to help out this perpetual newbie, here and in private! It would

Re: NPF on domU - more clarity required

2014-12-26 Thread Gerard Lally
At date and time Fri, 26 Dec 2014 20:10:35 + (UTC), Christos Zoulas wrote: In article 20141226020448.ee93.280fc...@netmail.ie, Gerard Lally lists+netbsd.us...@netmail.ie wrote: I have been struggling to get NPF up and running on a NetBSD VPS, specifically a Xen domU. I really think

Re: NPF on domU - more clarity required

2014-12-26 Thread Gerard Lally
At date and time Fri, 26 Dec 2014 22:38:05 + (UTC), Michael van Elst wrote: lists+netbsd.us...@netmail.ie (Gerard Lally) writes: compiling the kernel as a normal user instead of root? I've just noticed the owner and group on /usr/src/sys/arch/amd64/compile/custom-20141226

NPF on domU - more clarity required

2014-12-25 Thread Gerard Lally
looking forward to trying NPF but it feels as though I'm in the seven circles of Hell trying to get it to run. -- Gerard Lally

Sun Fire X4140

2014-11-18 Thread Gerard Lally
= 'yes' USETOOLS = 'yes' USR_OBJMACHINE = (undefined) X11SRCDIR = '/home/builds/ab/netbsd-6-1-RELEASE/xsrc' X11FLAVOUR = 'Xorg' -- Gerard Lally

Re: Sun Fire X4140

2014-11-18 Thread Gerard Lally
and ILOM will change to default by itself - it's okay for any ILOM version :)) -- Gerard Lally

Emacs without X - eww missing libxml2

2014-10-25 Thread Gerard Lally
expect eww to work in a NetBSD system without X? According to pkgsrc.se the only dependency libxml2 has is xmlcatmgr. -- Gerard Lally

Re: hp aio : netbsd won't boot ...

2014-09-25 Thread Gerard Lally
? or should i simply upgrade the memory to a total of 8gb (which is going to be quite difficult a proposition at the moment)? Have you disabled Secure Boot? -- Gerard Lally

Re: Can I use a native Linux installation as DomU?

2014-08-24 Thread Gerard Lally
, so that you will be able to log into Fedora when it's running as a domU. -- Gerard Lally

Re: Recent video-related commits: summary wanted

2014-08-21 Thread Gerard Lally
At date and time Mon, 18 Aug 2014 08:39:22 -0600, Roy Bixler wrote: On Sat, Aug 16, 2014 at 09:30:50PM +0100, Gerard Lally wrote: There have been many video-related commits to the source tree recently, which I am doing my best to understand. Radeon, nouveau, drm, kms, and the like

Recent video-related commits: summary wanted

2014-08-16 Thread Gerard Lally
for starters: do these changes bring native X up to date in -7, and if so would there be any compelling reason to choose modular X instead? -- Gerard Lally

Re: Reliable way to run emulated Linux under NetBSD

2014-08-14 Thread Gerard Lally
and with a paravirtualised Linux domU you also have the benefit of a very fast Linux setup. And if you do what I did, you can also dual-boot into this Linux setup whenver you want, if there is something you find you can't do while it is running under Xen as a domU. Hope this helps. -- Gerard

Re: NPF not loading and starting at boot

2014-08-12 Thread Gerard Lally
the interface npflog0? -- Gerard Lally

Re: Veriexec - automatic notification of mismatch?

2014-07-08 Thread Gerard Lally
At date and time Mon, 7 Jul 2014 10:51:48 +0200, Martin Husemann wrote: On Mon, Jul 07, 2014 at 05:25:59AM +0100, Gerard Lally wrote: Without checking /var/log/messages manually, how would I go about triggering an instant notification if a file or files monitored by veriexec had changed

Veriexec - automatic notification of mismatch?

2014-07-06 Thread Gerard Lally
has sailed right over my head? ;) -- Gerard Lally

Re: GPT questions - gpt reliability, wedge naming, and filesystem scaling.

2014-06-22 Thread Gerard Lally
At date and time Fri, 20 Jun 2014 09:22:14 -0700, Jeff Rizzo wrote: On 6/19/14, 5:20 PM, Gerard Lally wrote: 3) Using NAME=dk0 in /etc/fstab didn't work for me; I had to specify /dev/dk0, /dev/dk1, etc. dk names also do not persist across reboots. For example, if I create a wedge

Re: GPT questions - gpt reliability, wedge naming, and filesystem scaling.

2014-06-22 Thread Gerard Lally
At date and time Fri, 20 Jun 2014 18:54:03 +0930, Brett Lymn wrote: On Fri, Jun 20, 2014 at 01:20:03AM +0100, Gerard Lally wrote: 1) Is it safe to use GPT on NetBSD? The warnings on the gpt man page leave me less than 100% confident. Yes. I am using GPT on my laptop in a multiboot

Re: GPT questions - gpt reliability, wedge naming, and filesystem scaling.

2014-06-22 Thread Gerard Lally
At date and time Thu, 19 Jun 2014 21:51:12 -0400, Greg Troxel wrote: Gerard Lally lists+netbsd.us...@netmail.ie writes: 1) Is it safe to use GPT on NetBSD? The warnings on the gpt man page leave me less than 100% confident. On NetBSD 6, I would say yes. Even on 5, I think so. I am

GPT questions - gpt reliability, wedge naming, and filesystem scaling.

2014-06-19 Thread Gerard Lally
setup I then used this information to create GPT partitions. I assume this is a safe way to do it? I am not really familiar with partition alignment, and even less so since the new disks came out. -- Gerard Lally

Re: openbsd - netbsd : same yet feels different ...

2014-06-18 Thread Gerard Lally
At date and time Wed, 18 Jun 2014 07:39:59 +0300, Terho Uotila wrote: On Wed, 18 Jun 2014 00:06:12 +0100 Gerard Lally wrote: guide. Indeed I am still not 100% clear about it. It's also difficult to get mk.conf working so that GNU and Perl and Sourceforge software is pulled from a local

Re: openbsd - netbsd : same yet feels different ...

2014-06-17 Thread Gerard Lally
any of the brain-dead rubbish that has infested Linux make its way into NetBSD. -- Gerard Lally

naviserver on NetBSD: is Linux emulation possible?

2014-06-17 Thread Gerard Lally
never tried Linux emulation. I can build naviserver on Slackware. I don't think there would be too many libraries to carry over. I'd like to know if it's possible and relatively straightforward before I invest too much time in it. -- Gerard Lally

Re: How to install rxvt-unicode-256color termcap entry on machine without X

2014-05-31 Thread Gerard Lally
At date and time Sat, 31 May 2014 11:40:14 +0930, Brett Lymn wrote: On Fri, May 30, 2014 at 10:42:04PM +0100, atomicules wrote: On 30-May-2014 14:31:11, Gerard Lally wrote: I copied this terminfo source file to my home directory in NetBSD and ran tic on it: tic -s rxvt-unicode

Re: How to install rxvt-unicode-256color termcap entry on machine without X

2014-05-31 Thread Gerard Lally
At date and time Sat, 31 May 2014 15:53:46 +0100, Gerard Lally wrote: At date and time Sat, 31 May 2014 11:40:14 +0930, Brett Lymn wrote: On Fri, May 30, 2014 at 10:42:04PM +0100, atomicules wrote: On 30-May-2014 14:31:11, Gerard Lally wrote: I copied this terminfo source file to my

How to install rxvt-unicode-256color termcap entry on machine without X

2014-05-29 Thread Gerard Lally
: no termcap entry for a `rxvt-unicode-256color' terminal -- Gerard Lally ger...@netmail.ie

Re: spurious reboot

2013-11-28 Thread Gerard Lally
On Thu, 28 Nov 2013 21:06:36 +0100 m...@netbsd.org (Emmanuel Dreyfus) wrote: Manuel Bouyer bou...@antioche.eu.org wrote: Yes, but depending on the hardware and BIOS, I can immagine that only 2GB can be below the 2^32 limit, and the remaming above (eventually well above). Splitting at