Re: problem with interrupts on machines with many cores and multiqueue nics

2022-10-02 Thread Hrvoje Popovski
On 1.10.2022. 23:28, Mark Kettenis wrote: > At least on some of these machines, you're simply running out of > kernel malloc space. The machines "hang" because the M_WAITOK flag is > used for the allocations, and malloc(9) waits in the hope someone else > gives up the memory. Maybe we need to

Re: Data Independent Timing on arm64

2022-10-02 Thread Theo de Raadt
ok, let's give it a shot then. And watch for behaviour changes... Mark Kettenis wrote: > > From: "Theo de Raadt" > > Date: Sat, 01 Oct 2022 09:37:01 -0600 > > > > Mark Kettenis wrote: > > > > > Armv8.4 introduced a feature that provides data independent timing for > > > data processing

Re: rarpd: clarify synopsis

2022-10-02 Thread Theo de Raadt
The getopt language is imprecise, and attempts to be precise with it usually go poorly. For example, SYNOPSIS ls [-1AaCcdFfgHhikLlmnopqRrSsTtux] [file ...] % ls -1AaCcdFfgHhikLlmnopqRrSsTtux The result may seem surprising. I claim the result is not surprising. It is unsurprising because

tftpd: drop cpath promise unless file creation is allowed

2022-10-02 Thread Klemens Nanni
-c Allow new files to be created; otherwise uploaded files must already exist. Files are created with default permissions allowing anyone to read or write to them. Works for me in diskless(8) usage and manual tftp(1) get/put testing with existing and new

tftp: only print prompt in interactive usage

2022-10-02 Thread Klemens Nanni
Scripting tftp(1) makes it non-interactive, yet the prompt is still printed and may mess up the shell's PS1: $ echo put nonexistent | tftp localhost tftp> tftp: open: nonexistent: No such file or directory tftp> $ The fix seems easy and works as expected for multiple

rarpd: clarify synopsis

2022-10-02 Thread Klemens Nanni
rarpd(8) either "Listen[s] on all the Ethernets attached to the system" or requires an explicit list, not both: $ rarpd -a em0 usage: rarpd [-adflt] if0 [... ifN] $ ./obj/rarpd -a em0 usage: rarpd [-dflt] -a | if ... Or would this be better? rarpd [-dflt]

rc.d/dhcpd: enable configtest

2022-10-02 Thread Klemens Nanni
dhcpd(8) has -n Only test configuration, do not run dhcpd. rc_configtest() taken from other rc.d scripts. Feedback? OK? Index: dhcpd === RCS file: /cvs/src/etc/rc.d/dhcpd,v retrieving revision 1.3 diff -u -p -r1.3 dhcpd

rarpd: unveil /tftpboot only if needed

2022-10-02 Thread Klemens Nanni
-t Only honour a request if the server (the host that rarpd is running on) can "boot" the target; that is, if a file or directory called /tftpboot/ipaddr exists, where ipaddr is the target IP address expressed in uppercase hexadecimal (only the

Re: rarpd: clarify synopsis

2022-10-02 Thread Jason McIntyre
On Sun, Oct 02, 2022 at 01:07:04PM +, Klemens Nanni wrote: > rarpd(8) either "Listen[s] on all the Ethernets attached to the system" > or requires an explicit list, not both: > > $ rarpd -a em0 > usage: rarpd [-adflt] if0 [... ifN] > $ ./obj/rarpd -a em0 > usage: rarpd

Re: rarpd: unveil /tftpboot only if needed

2022-10-02 Thread Todd C . Miller
On Sun, 02 Oct 2022 12:33:21 -, Klemens Nanni wrote: > -t Only honour a request if the server (the host that rarpd is > running on) can "boot" the target; that is, if a file or > directory called /tftpboot/ipaddr exists, where ipaddr is the >

Re: rarpd: clarify synopsis

2022-10-02 Thread Klemens Nanni
On Sun, Oct 02, 2022 at 10:09:32AM -0600, Theo de Raadt wrote: > The getopt language is imprecise, and attempts to be precise with it > usually go poorly. > > For example, > > SYNOPSIS > ls [-1AaCcdFfgHhikLlmnopqRrSsTtux] [file ...] > > % ls -1AaCcdFfgHhikLlmnopqRrSsTtux > > The result

Re: rarpd: clarify synopsis

2022-10-02 Thread Klemens Nanni
On Sun, Oct 02, 2022 at 02:52:37PM +0100, Jason McIntyre wrote: > On Sun, Oct 02, 2022 at 01:07:04PM +, Klemens Nanni wrote: > > rarpd(8) either "Listen[s] on all the Ethernets attached to the system" > > or requires an explicit list, not both: > > > > $ rarpd -a em0 > > usage: rarpd

tftpd: add -R for read-only mode/reduced pledges

2022-10-02 Thread Klemens Nanni
diskless(8) just needs tftpd(8) to deliver files, none of the possibly untrusted clients are supposed to ever write anything. Either way, even when run without -c, a single file writable by _tftpd might be enough for a malicious client to fill up the server's disk. A proper read-only mode

tftp: sort commands, add help to manual

2022-10-02 Thread Klemens Nanni
Searching for a command in help output is much simpler when sorted. The strings can be inlined into the struct while staying under 80 chars. Now manual and help output are in the same order, except help folded into ? in the manual to avoid duplicate text there. Or should help appear at the same

Re: rarpd: clarify synopsis

2022-10-02 Thread Theo de Raadt
Klemens Nanni wrote: > rarpd(8) is small enough where my impression is that refining it a > little would be good, but it quickly comes down to personal taste. And I continue to disagree. Another example of the same pattern is ifconfig. Here you will see it is not documented that [-a] is

Re: tftp: sort commands, add help to manual

2022-10-02 Thread Jason McIntyre
On Sun, Oct 02, 2022 at 06:05:44PM +, Klemens Nanni wrote: > Searching for a command in help output is much simpler when sorted. > The strings can be inlined into the struct while staying under 80 chars. > > Now manual and help output are in the same order, except help folded > into ? in the

Re: Softraid crypto with keydisk and installboot, skip on the same disk

2022-10-02 Thread Klemens Nanni
On Tue, Sep 06, 2022 at 09:06:41PM +, Klemens Nanni wrote: > On Sun, Sep 04, 2022 at 07:08:51PM +, Mikolaj Kucharski wrote: > > Hi, > > > > I have strange setup on some of my machines, when I want to encrypt disk > > where OpenBSD is installed, but still be able to boot them up without >