Re: IPv6 by default

2014-04-29 Thread Giancarlo Razzolini
to ipv6 then ipv4 if you have it enabled. Too soon I think. I'm hoping for ipv6 get more traction soon, so we could end using nat on our pf rules. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: IPv6 by default

2014-04-29 Thread Giancarlo Razzolini
life as sysadmins much easier. IPv6 will happen. The sooner the better. But this default on OpenBSD is not the way to make it happen faster. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

ifconfig segmentation fault

2014-05-16 Thread Giancarlo Razzolini
at the core dump, see if I can pinpoint where are the bits responsible for the segfault. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: ifconfig segmentation fault

2014-05-16 Thread Giancarlo Razzolini
Em 16-05-2014 16:45, Kenneth Westerback escreveu: On 16 May 2014 15:00, Giancarlo Razzolini grazzol...@gmail.com wrote: Hi, I was configuring one new interface in one of my new machines, and I disabled ipv6 with -inet6 as I always do. But I handcrafted the hostname.if file and forgot

Re: ifconfig segmentation fault

2014-05-16 Thread Giancarlo Razzolini
Em 16-05-2014 17:18, Stuart Henderson escreveu: On 2014/05/16 17:12, Giancarlo Razzolini wrote: As I mentioned, I'm running 5.5 stable. So this might got fixed in current, I'm taking a look at the CVS commits right now to see if it was fixed. But, funny thing, I've managed to get another

Re: ifconfig segmentation fault

2014-05-16 Thread Giancarlo Razzolini
Em 16-05-2014 17:18, Stuart Henderson escreveu: On 2014/05/16 17:12, Giancarlo Razzolini wrote: As I mentioned, I'm running 5.5 stable. So this might got fixed in current, I'm taking a look at the CVS commits right now to see if it was fixed. But, funny thing, I've managed to get another

Re: ifconfig segmentation fault

2014-05-16 Thread Giancarlo Razzolini
Em 16-05-2014 18:15, Stuart Henderson escreveu: On 2014/05/16 17:26, Giancarlo Razzolini wrote: Em 16-05-2014 17:18, Stuart Henderson escreveu: On 2014/05/16 17:12, Giancarlo Razzolini wrote: As I mentioned, I'm running 5.5 stable. So this might got fixed in current, I'm taking a look

Re: ifconfig segmentation fault

2014-05-16 Thread Giancarlo Razzolini
segfaulted. All of them are amd64, I didn't tried with an i386 installation. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: ifconfig segmentation fault

2014-05-16 Thread Giancarlo Razzolini
Em 16-05-2014 23:48, sven falempin escreveu: On Fri, May 16, 2014 at 10:15 PM, Giancarlo Razzolini grazzol...@gmail.com mailto:grazzol...@gmail.com wrote: Em 16-05-2014 18:19, Héctor Luis Gimbatti escreveu: /etc/hostname.if Inet 1.2.3.4 255.255.255.0 NONE -inet6

Re: ifconfig segmentation fault

2014-05-19 Thread Giancarlo Razzolini
, which=1) at /usr/src/sbin/ifconfig/ifconfig.c:4524 #4 0x00401968 in setifaddr (addr=0x7f7ea9ac -inet, param=0) at /usr/src/sbin/ifconfig/ifconfig.c:1112 #5 0x00400afd in main (argc=1, argv=0x7f7ea890) at /usr/src/sbin/ifconfig/ifconfig.c:738 Cheers, -- Giancarlo

Re: new OpenSSL flaws

2014-06-05 Thread Giancarlo Razzolini
(obviously) given a heads up to prepare them over the last few days. OpenBSD / LibreSSL did not receive any heads-up from OpenSSL. So hold on, we'll try to have errata out in a few hours. Theo, I'm just curious, but, this happened in the past? Cheers, -- Giancarlo Razzolini GPG: 4096R

Re: new OpenSSL flaws

2014-06-05 Thread Giancarlo Razzolini
, to this degree as you mentioned, just after you guys forked OpenSSL. I've disable most of the daemons that use ssl in my systems, until this errata comes along. Don't hush it, specially since you guys didn't got notified of this. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: new OpenSSL flaws

2014-06-05 Thread Giancarlo Razzolini
, a hidden agenda, in that this stupid disclosure was indeed, carefully planed. One can never have too many conspiracy theories. Specially after what has been happening the last year. Thanks for the clarification. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: new OpenSSL flaws

2014-06-05 Thread Giancarlo Razzolini
, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Patch: ifconfig - fix SIGSEGV

2014-06-06 Thread Giancarlo Razzolini
running under qemu/kvm? If so, you might had came across the same issue I had: http://marc.info/?l=openbsd-techm=140026687510910w=2 It's nice to know that the latest snapshot solves this issue. I'll give it a try. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: new OpenSSL flaws

2014-06-07 Thread Giancarlo Razzolini
Em 07-06-2014 00:04, Solar Designer escreveu: tools and ethics are separate things It seems like you got to the real issue now. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

ifstated(8) improvement

2014-06-09 Thread Giancarlo Razzolini
to a different state if one of the links is flapping between states. I know this makes it not a pure machine state, but I believe that the improvements can be worth the change. What you guys think? Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: ifstated(8) improvement

2014-06-09 Thread Giancarlo Razzolini
to discuss with you guys here on tech@ first. Perhaps something entirely different needs to be done. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: ifstated(8) improvement

2014-06-09 Thread Giancarlo Razzolini
, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: signed packages

2014-01-22 Thread Giancarlo Razzolini
. I've been living without it anyway. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: signed packages

2014-01-23 Thread Giancarlo Razzolini
that cures humans from making mistakes. I do not believe I can stop any government with loads of money from compromising my machines. But at the very least I can try to put up a hell of a fight for them. I do not like to be the low hanging fruit. Cheers, -- Giancarlo Razzolini GPG: 4096R

Re: signed packages

2014-01-27 Thread Giancarlo Razzolini
problems. It would be one thing else to compromise. There is no ultimately trust in real life, why there would be in the internet? I wont die if they don't add it. Just will keep doing the same things and hoping that I did not were compromised. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Patch for rc.conf(8) man page

2014-02-10 Thread Giancarlo Razzolini
.Nm rc.conf.local -file. +file and copy only the variables you wish to change from +.Nm rc.conf +and adjust them as you like. Variables set in this file will override variables previously set in .Nm rc.conf . .Pp -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Patch for rc.conf(8) man page

2014-02-10 Thread Giancarlo Razzolini
Em 10-02-2014 18:28, Mark Kettenis escreveu: Date: Mon, 10 Feb 2014 18:05:38 -0200 From: Giancarlo Razzolini grazzol...@gmail.com As mentioned before on misc@, some user got confused and copied the entire rc.conf file to rc.conf.local and then proceeded editing it. This patch brings

Re: Patch for rc.conf(8) man page

2014-02-10 Thread Giancarlo Razzolini
the variables you wish to change from +.Nm rc.conf +and adjust them as you like. Variables set in this file will override variables previously set in .Nm rc.conf . .Pp -- Giancarlo Razzolini GPG: 4096R/77B981BC

Boot network for remote unlock of fde

2014-03-05 Thread Giancarlo Razzolini
to modify, to accomplish the same. I know it would involve lots of hacking with boot(8), with the kernel itself, and perhaps more. Also, I want to know how hard you guys think it would be. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Boot network for remote unlock of fde

2014-03-05 Thread Giancarlo Razzolini
Em 05-03-2014 17:30, Ted Unangst escreveu: On Wed, Mar 05, 2014 at 16:15, Giancarlo Razzolini wrote: Hi, I have one linux server that has full disk encryption, and I use it's initramfs with dropbear to be able to remote unlock the encrypted root partition. From what I read from

Re: Boot network for remote unlock of fde

2014-03-05 Thread Giancarlo Razzolini
Em 05-03-2014 18:05, Stuart Henderson escreveu: On 2014/03/05 17:48, Giancarlo Razzolini wrote: Em 05-03-2014 17:30, Ted Unangst escreveu: On Wed, Mar 05, 2014 at 16:15, Giancarlo Razzolini wrote: Hi, I have one linux server that has full disk encryption, and I use it's initramfs

Re: Boot network for remote unlock of fde

2014-03-05 Thread Giancarlo Razzolini
is one of them. I believe that there are others. Come on guys, I'm not asking for implementation, just want some pointers and ideas. I know it would be a very hard task, but I would like the challenge. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Boot network for remote unlock of fde

2014-03-05 Thread Giancarlo Razzolini
believe, not have looked much at the code yet, that the kexec() approach would be simpler than implementing the pivot_root(). Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Boot network for remote unlock of fde

2014-03-05 Thread Giancarlo Razzolini
to that file called locore.S ... Yes, I was looking at this file a few moments before you e-mail arrived. Seems some pretty scary asm stuff. Nevertheless, I'm still willing to take a look at it. So everybody agrees that the kexec() approach is the best one? Cheers, -- Giancarlo Razzolini GPG

Re: Before sending to bug at openbsd....

2014-03-12 Thread Giancarlo Razzolini
, a tun should forward broadcast, should it not ? *go read qemu socket node* If it is configured with the link0 option, yes. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Before sending to bug at openbsd....

2014-03-13 Thread Giancarlo Razzolini
. Of course it all depends on which hypervisor you are using. On qemu/kvm I generally go with vio and, if it do not work that well, I go with em. YMMV. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: ffs2 boot

2014-04-17 Thread Giancarlo Razzolini
is that openbsd won't see more than one processor, no matter what you do. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: ffs2 boot

2014-04-17 Thread Giancarlo Razzolini
. And even then I'm not sure I'll be able to solve the problem. -- Giancarlo Razzolini GPG: 4096R/77B981BC