hardware support
Hello, my friends. Can someone tell me, is this hardware will work with OpenBSD 5.6 00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v2/3rd Gen Core processor DRAM Controller (rev 09) 00:01.0 PCI bridge: Intel Corporation Xeon E3-1200 v2/3rd Gen Core processor PCI Express Root Port (rev 09) 00:14.0 USB controller: Intel Corporation 7 Series/C210 Series Chipset Family USB xHCI Host Controller (rev 04) 00:16.0 Communication controller: Intel Corporation 7 Series/C210 Series Chipset Family MEI Controller #1 (rev 04) 00:1a.0 USB controller: Intel Corporation 7 Series/C210 Series Chipset Family USB Enhanced Host Controller #2 (rev 04) 00:1b.0 Audio device: Intel Corporation 7 Series/C210 Series Chipset Family High Definition Audio Controller (rev 04) 00:1c.0 PCI bridge: Intel Corporation 7 Series/C210 Series Chipset Family PCI Express Root Port 1 (rev c4) 00:1c.4 PCI bridge: Intel Corporation 7 Series/C210 Series Chipset Family PCI Express Root Port 5 (rev c4) 00:1c.5 PCI bridge: Intel Corporation 82801 PCI Bridge (rev c4) 00:1c.7 PCI bridge: Intel Corporation 7 Series/C210 Series Chipset Family PCI Express Root Port 8 (rev c4) 00:1d.0 USB controller: Intel Corporation 7 Series/C210 Series Chipset Family USB Enhanced Host Controller #1 (rev 04) 00:1f.0 ISA bridge: Intel Corporation Z77 Express Chipset LPC Controller (rev 04) 00:1f.2 SATA controller: Intel Corporation 7 Series/C210 Series Chipset Family 6-port SATA Controller [AHCI mode] (rev 04) 00:1f.3 SMBus: Intel Corporation 7 Series/C210 Series Chipset Family SMBus Controller (rev 04) 01:00.0 VGA compatible controller: NVIDIA Corporation GK107 [GeForce GTX 650] (rev a1) 01:00.1 Audio device: NVIDIA Corporation GK107 HDMI Audio Controller (rev a1) 03:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168 PCI Express Gigabit Ethernet controller (rev 09) 04:00.0 PCI bridge: ASMedia Technology Inc. ASM1083/1085 PCIe to PCI Bridge (rev 03) 06:00.0 USB controller: ASMedia Technology Inc. ASM1042 SuperSpeed USB Host Controller Interested of Nvidia videocard, I dont need some super 3d support, just 1920x1200 resolution. Regards.
goals.html: Clarify GPL policy
goals.html disagrees with policy.html as to the policy regarding inclusion of GPL code. Since that part of policy.html was updated more recently (2014 vs. 2003), here's a diff that makes goals.html more agreeable: Index: goals.html === RCS file: /cvs/www/goals.html,v retrieving revision 1.80 diff -u -p -r1.80 goals.html --- goals.html 2 Nov 2014 23:56:57 - 1.80 +++ goals.html 22 Feb 2015 07:54:25 - @@ -30,8 +30,8 @@ and priorities, but it is possible to cl http://cvsweb.openbsd.org/cgi-bin/cvsweb";>directly on the web! Integrate good code from any source with acceptable -copyright (ISC or Berkeley style preferred, GPL acceptable as a last -recourse but not in the kernel, NDA never acceptable). +copyright (ISC or Berkeley style preferred, GPL not acceptable for new +code, NDA never acceptable). We want to make available source code that anyone can use for ANY PURPOSE, with no restrictions. We strive to make our software robust and secure, and encourage
Re: hardware support
On Feb 22 12:23:29, seran...@gmail.com wrote: > Interested of Nvidia videocard, I dont need some super 3d support, just > 1920x1200 resolution. > 01:00.0 VGA compatible controller: NVIDIA Corporation GK107 [GeForce GTX > 650] (rev a1) > 01:00.1 Audio device: NVIDIA Corporation GK107 HDMI Audio Controller (rev > a1) You generally want to avoid NVIDIA, search this mailing list's archives. You can run the card in VESA mode, but I don't think that includes 1920x1200. See your platform at http://www.openbsd.org/plat.html The easiest way to try is to try though. Buy an install CD, put it in your machine, and make it [A]utoinstall; takes few minutes. Jan
Re: spamd whitelist
> Just because you send mail to Yahoo through those IPs doesn't mean they > send mail to you from those IPs. It's not unheard of for incoming and > outgoing mail to go through different servers once you get to a certain > size. Exactly. Some institutions even delegate both incomming and outgoing mail to third parties. $ host ucalgary.ca ucalgary.ca has address 136.159.96.25 ucalgary.ca mail is handled by 5 ucalgary-ca.mail.protection.outlook.com. Which IP addresses the mail from such domains will come from you will only know once it comes, gets greylisted, and stays greylisted for some time, as the resend happens from another IP.
Re: hardware support
Joseph Oficre said: > Hello, my friends. > Can someone tell me, is this hardware will work with OpenBSD 5.6 [...] > 01:00.0 VGA compatible controller: NVIDIA Corporation GK107 [GeForce GTX > 650] (rev a1) AFAIK in vesa mode only. No hardware acceleration. > 01:00.1 Audio device: NVIDIA Corporation GK107 HDMI Audio Controller (rev > a1) This won't. > Interested of Nvidia videocard, I dont need some super 3d support, just > 1920x1200 resolution. I guess you will be able to set up this resolution using gtf(1), but with no 2D acceleration that will be painful. You may try running it with vesa driver in Linux (eg. by removing nouveau or nvidia proprietary driver, whichever you use) and see. If the system is now under your control, you could either buy a CD or download an image from any mirror and boot your system. If your disk is in MBR format (not in GPT), you may even free a bit of space and install OpenBSD there. Or back up your system and do a full install. Another option would be to install OpenBSD to a flash drive, and boot from there; it would be painfully slow, but will give you a simple way of testing hardware compatibility. -- Dmitrij D. Czarkoff
Re: spamd whitelist
Am 2015-02-21 23:51, schrieb F Bax: In this archived message; Peter explains here how to get ip address for various gmail servers - which can then be added to whitelist... http://marc.info/?l=openbsd-misc&m=136449396910976&w=2 When I try this process for yahoo.com; I get Why you'd like to whitelist yahoo.com or gmail.com or any other non-related smtp? I think whitelisting makes only sense for smtps you control or are somehow in relation to your network. Is your "smapcop" so heavy on duty that you need to shorten the processing for some mails?
Re: Xen PV DomU with OpenBSD?
Am 2015-02-21 22:52, schrieb Raimundo Santos: On 21 February 2015 at 10:31, Markus Kolb wrote: there isn't any support for Xen PV DomU in OpenBSD, isn't it? No, there is not such support. But you can run it in HVM mode without effort. Well, may be some effort in XenServer, where there is no easy way to chose the type of emulated hardware. Another "problem" when using Xen: the shutdown. Every OS that can not communicate with xenstore will suffer from that. You will have to edit some scripts in your environment to make it work with ACPI. Ok. Thanks. But the hoster doesn't support HVM.
Re: Alternative way to get sources, CVS slow
On 2015-02-21, Raf Czlonka wrote: > Alternatively, you can use CVSync[0] to get the code. That is likely going to be worse on a slow/unstable link as you are fetching the entire repository history (~2GB rather than ~750MB), not just updating the checked-out tree.
Re: Alternative way to get sources, CVS slow
On 2015-02-21, Edgar Pettijohn wrote: > On 02/21/15 14:38, Henrique Lengler wrote: >> On Sat, Feb 21, 2015 at 07:23:16PM +0100, Alexander Hall wrote: >>> I believe the source tarballs avaliable on the CDs (and mirrors) come with >>> CVS directories, so they might be a good start. The FAQ might shed some >>> light on this. >>> >>> /Alexander >> This looks like the best way, so I will do this. >> >> Thanks for helping. >> > http://www.openbsd.org/anoncvs.html > > Speaking for myself updating is usually slow also, but not as slow as > "getting" an initial tree. However, if -stable is just -release with > patches. It should be real fast to just download the source tarballs > and apply the patches. Then voila you have -stable. Then again my > understanding of -stable may be off. -stable is a bit different, sometimes things are applied there which aren't considered serious enough to warrant issuing an errata.
Re: Any experience with D-Link DGS-1100 and static trunk aggregation?
On 2015-02-21, Josh Grosse wrote: > On 2015-02-16 14:43, Stuart Henderson wrote: >> >> Not this particular switch, but there isn't much that can go wrong with >> statically configured link aggregation like this. > > On 2015-02-17 16:49, Adam Thompson wrote: >> >>DGS-1100 definitely does not support active LACP negotiation. The >>"static trunk aggregation" it talks about is, basically, static >>bonding, or what was once called EtherChannel. Which is exactly what >>the trunk(4) manpage refers to as "IEEE 802.3ad static link >>aggregation". You're good to go. > > I can confirm, now that I have the switch, that loadbalance doesn't > work with my implementation, and I'll have to do more testing to determine > why. I have roundrobin under test now, and it is working well so far. > > Are you clear on exactly what loadbalance does? A hash of the protocol header is used to maintain packet ordering. The hash includes the Ethernet source and destination address, and, if available, the VLAN tag, and the IP source and destination address. In this mode, traffic between two individual IP/MAC addresses on the same vlan will only use a single port, you need multiple addresses to see the traffic balanced between multiple ports.
Re: spamd whitelist
On 2015-02-22, Markus Kolb wrote:
> Why you'd like to whitelist yahoo.com or gmail.com or any other
> non-related smtp?
> I think whitelisting makes only sense for smtps you control or are
> somehow in relation to your network.
Because some of these large senders send mail from multiple servers,
either with a shared mail queue, or behind a NAT where the source
address can change for different retries.
It is fairly common for graylisting implementations to mask on a
/24 network boundary, and many senders seem to take advantage of this
by keeping within a /24. Some of the published "greylisting whitelists"
were refusing to accept submitted /24's.
spamd doesn't do this, it does a full match on the IP address,
so this type of sender configuration introduces bigger delays
(and sometimes total failures) with spamd, especially on smaller
receiving sites. (Bigger sites usually have enough volume of mail
from these larger senders that they stay whitelisted anyway).
Anyway for yahoo, to avoid this sort of delay, perhaps it makes
sense to exempt all of their bgp-announced nets.
$ peval AS5779
({206.190.32.0/19, 206.190.48.0/20, 206.190.60.0/22, 206.190.58.0/23,
206.190.57.0/24, 206.190.49.0/24, 205.172.212.0/22, 205.172.214.0/24,
205.172.215.0/24, 205.172.213.0/24, 170.118.0.0/16, 63.250.192.0/19,
63.250.192.0/20, 63.250.208.0/20})
netstat(1) output nits
This is current/amd64. The default output of netstat(1) contains quite a few lines like the following for the AF_UNIX family: 0x0 stream 0 0 0x0 0x0 0x0 stream 0 0 0x0 0x0 0x0 stream 0 0 0x0 0x0 0x0 stream 0 0 0x0 0x0 0x0 stream 0 0 0x0 0x0 What are these? Are they unnamed pipes opened in some running process? As opposed to named pipes which have a filename in the last column? 0x0 stream 0 0 0x0 0x0 0x0 0x0 /tmp/aucat/aucat0 The -n apparently displays numerical values not just for addresses, but also for service names (such as 123, not 'ntp'). Index: netstat.1 === RCS file: /cvs/src/usr.bin/netstat/netstat.1,v retrieving revision 1.72 diff -u -p -r1.72 netstat.1 --- netstat.1 23 Oct 2014 16:45:57 - 1.72 +++ netstat.1 22 Feb 2015 13:09:51 - @@ -233,10 +233,9 @@ Show statistics recorded by the memory m .It Fl N Ar system Extract the name list from the specified system instead of the running kernel. .It Fl n -Show network addresses as numbers (normally +Show network addresses and service names as numbers (normally .Nm -interprets addresses and attempts to display them -symbolically). +attempts to display them symbolically). This option may be used with any of the display formats. .It Fl P Ar pcbaddr Display the contents of the socket or protocol control block (PCB) The -v option should "avoid truncation of long addresses", but e.g. $ netstat -f inet -v Active Internet connections Proto Recv-Q Send-Q Local Address Foreign Address(state) tcp 0 0 lenovo.44110 ea-in-f189.1e100.https ESTABLISHED tcp 0 0 lenovo.17984 ee-in-f189.1e100.https ESTABLISHED tcp 0 0 lenovo.12855 prg02s11-in-f16..https ESTABLISHED tcp 0 0 lenovo.260993.99.92.11.wwwESTABLISHED tcp 0 0 lenovo.44964 www.sshESTABLISHED tcp 0 0 lenovo.16097 bbb.sshESTABLISHED Active Internet connections Proto Recv-Q Send-Q Local Address Foreign Address(state) udp 0 0 lenovo.11880 46.243.48.111.ntp udp 0 0 lenovo.5564mail.ctech.tuxin.ntp udp 0 0 lenovo.43585 46.243.51.55.ntp udp 0 0 localhost.3393 localhost.3393 Jan
Re: hardware support
Yeah, i will try live USB to check it all, ty for response! 2015-02-22 12:57 GMT+03:00 Dmitrij D. Czarkoff : > Joseph Oficre said: > > Hello, my friends. > > Can someone tell me, is this hardware will work with OpenBSD 5.6 > [...] > > 01:00.0 VGA compatible controller: NVIDIA Corporation GK107 [GeForce GTX > > 650] (rev a1) > > AFAIK in vesa mode only. No hardware acceleration. > > > 01:00.1 Audio device: NVIDIA Corporation GK107 HDMI Audio Controller (rev > > a1) > > This won't. > > > > Interested of Nvidia videocard, I dont need some super 3d support, just > > 1920x1200 resolution. > > I guess you will be able to set up this resolution using gtf(1), but > with no 2D acceleration that will be painful. You may try running it > with vesa driver in Linux (eg. by removing nouveau or nvidia proprietary > driver, whichever you use) and see. > > > If the system is now under your control, you could either buy a CD or > download an image from any mirror and boot your system. If your disk is > in MBR format (not in GPT), you may even free a bit of space and install > OpenBSD there. Or back up your system and do a full install. Another > option would be to install OpenBSD to a flash drive, and boot from > there; it would be painfully slow, but will give you a simple way of > testing hardware compatibility. > > -- > Dmitrij D. Czarkoff
pkg_add vs. cvs -up, and pkg_check telling me about unknown files & directories
I recently tried, for fun, or because I wasn't thinking, I'm not sure which, doing a cvs -up in /usr/ports. It told me "P" or "U" for archivers/cabextract, net/isc-bind, and www/drupal6/views, none of which should be installed on my system. (I don't remember which was P and which U.) Since they are not supposed to be installed, I did not run make in any of their directories in /usr/ports. I tried to use pkg_info and pkg_add -n to figure out if they were installed after all, and pkg_add started hanging, and then pkg_info started hanging. I then tried using pkg_check to see if I could clear whatever I had done, and it tells me about unknown directories and files, a long list of files and directories which should have nothing to do with packages, I think, including such things as /boot, /bsd, about 30 files in /etc, the pkg_check_out.text I produced in my /root directory to try to understand the output and a bunch of other stuff. It does not output my entire file system tree. After using pkg_check several times, pkg_add and pkg_info are no longer hanging. And pkg_add -u seems to do what it is supposed to do. Marc or anyone care to enlighten me on what the output from pkg_check is supposed to mean? (I'm thinking it may have something to do with mtree, but I'm not remembering what to look at for that.) Joel Rees
Re: MinnowBoard MAX
On Mon, Jul 28, 2014 at 08:28:04PM -0500, Stan Gammons wrote: > A fellow from Intel told me they are coming out with Coreboot > firmware for the Minnowboard max, no ETA other than "soon", and > he didn't know if any of the BSD's would work with it. He said > the forthcoming FreeBSD 11 almost boots with the Minnowboard > max as is. It seems OpenBSD 5.7-beta boots fine on the Minnowboard Max with coreboot. You can read my account of the current status here: http://www.countersiege.com/2015/02/22/minnowboard_max_openbsd.html -Ryan
Re: pkg_add vs. cvs -up, and pkg_check telling me about unknown files & directories
Joel Rees writes: > I recently tried, for fun, or because I wasn't thinking, I'm not sure > which, doing a cvs -up in /usr/ports. It told me "P" or "U" for > archivers/cabextract, net/isc-bind, and www/drupal6/views, none of > which should be installed on my system. (I don't remember which was P > and which U.) Since they are not supposed to be installed, I did not > run make in any of their directories in /usr/ports. cvs operations have little to do with the packages you have installed / ports you have built. man cvs | less +'/ U ' pkg_check is known to report false positives. I doubt there is enough data to tell whether your pkg_add / pkg_info glitches are real issues or just local, transient errors. -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: Any experience with D-Link DGS-1100 and static trunk aggregation?
On Sun, Feb 22, 2015 at 12:47:49PM +, Stuart Henderson wrote: > Are you clear on exactly what loadbalance does? > > A hash of > the protocol header is used to maintain packet ordering. > The hash includes the Ethernet source and destination > address, and, if available, the VLAN tag, and the IP source > and destination address. > > In this mode, traffic between two individual IP/MAC addresses on > the same vlan will only use a single port, you need multiple addresses > to see the traffic balanced between multiple ports. I think that's clear. The problem experienced was half the TCP sessions failing to connect. It's unclear why, as my testing was limited to flood pings and tcpbench. Both of which appeared flawless. I'm running roundrobin in production, now, and will schedule more test time for loadbalance ... with multiple generators.
[no subject]
This is current/macppc on a Mac Mini. Just wanted to report that the upgrade on the system somehow reduced the radeon errors in the dmesg (see below). The radeon firmware is radeondrm-firmware-20131002p0. Jan Before: [ using 550696 bytes of bsd ELF symbol table ] console out [ATY,RockHopper2_A]console in [keyboard] , using USB using parent ATY,RockHopper2Paren:: memaddr 9800 size 800, : consaddr 9c008000, : ioaddr 9002, size 2: width 1280 linebytes 1280 height 1024 depth 8 Copyright (c) 1982, 1986, 1989, 1991, 1993 The Regents of the University of California. All rights reserved. Copyright (c) 1995-2015 OpenBSD. All rights reserved. http://www.OpenBSD.org OpenBSD 5.7-beta (GENERIC) #417: Wed Jan 28 16:49:17 MST 2015 dera...@macppc.openbsd.org:/usr/src/sys/arch/macppc/compile/GENERIC real mem = 1073741824 (1024MB) avail mem = 1030995968 (983MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root: model PowerMac10,2 cpu0 at mainbus0: 7447A (Revision 0x102): 1499 MHz: 512KB L2 cache mem0 at mainbus0 spdmem0 at mem0: 1GB DDR SDRAM non-parity PC3200CL3.0 memc0 at mainbus0: uni-n rev 0xd2 "hw-clock" at memc0 not configured kiic0 at memc0 offset 0xf8001000 iic0 at kiic0 mpcpcibr0 at mainbus0 pci: uni-north pci0 at mpcpcibr0 bus 0 pchb0 at pci0 dev 11 function 0 "Apple UniNorth AGP" rev 0x00 radeondrm0 at pci0 dev 16 function 0 "ATI Radeon 9200" rev 0x01 drm0 at radeondrm0 radeondrm0: irq 48 mpcpcibr1 at mainbus0 pci: uni-north pci1 at mpcpcibr1 bus 0 macobio0 at pci1 dev 23 function 0 "Apple Intrepid" rev 0x00 openpic0 at macobio0 offset 0x4: version 0x4614 feature 3f0302 LE macgpio0 at macobio0 offset 0x50 "modem-reset" at macgpio0 offset 0x1d not configured "modem-power" at macgpio0 offset 0x1c not configured macgpio1 at macgpio0 offset 0x9: irq 47 "programmer-switch" at macgpio0 offset 0x11 not configured "gpio5" at macgpio0 offset 0x6f not configured "gpio6" at macgpio0 offset 0x70 not configured "extint-gpio15" at macgpio0 offset 0x67 not configured "escc-legacy" at macobio0 offset 0x12000 not configured zsc0 at macobio0 offset 0x13000: irq 22,23 zstty0 at zsc0 channel 0 zstty1 at zsc0 channel 1 aoa0 at macobio0 offset 0x1: irq 30,1,2 audio0 at aoa0 "timer" at macobio0 offset 0x15000 not configured adb0 at macobio0 offset 0x16000 apm0 at adb0: battery flags 0x0, 0% charged piic0 at adb0 iic1 at piic0 maxtmp0 at iic1 addr 0xc8: max6642 kiic1 at macobio0 offset 0x18000 iic2 at kiic1 wdc0 at macobio0 offset 0x2 irq 24: DMA ohci0 at pci1 dev 26 function 0 "Apple Intrepid USB" rev 0x00: irq 29, version 1.0, legacy support ohci1 at pci1 dev 27 function 0 "NEC USB" rev 0x43: irq 63, version 1.0 ohci2 at pci1 dev 27 function 1 "NEC USB" rev 0x43: irq 63, version 1.0 ehci0 at pci1 dev 27 function 2 "NEC USB" rev 0x04: irq 63 usb0 at ehci0: USB revision 2.0 uhub0 at usb0 "NEC EHCI root hub" rev 2.00/1.00 addr 1 usb1 at ohci0: USB revision 1.0 uhub1 at usb1 "Apple OHCI root hub" rev 1.00/1.00 addr 1 usb2 at ohci1: USB revision 1.0 uhub2 at usb2 "NEC OHCI root hub" rev 1.00/1.00 addr 1 usb3 at ohci2: USB revision 1.0 uhub3 at usb3 "NEC OHCI root hub" rev 1.00/1.00 addr 1 mpcpcibr2 at mainbus0 pci: uni-north pci2 at mpcpcibr2 bus 0 kauaiata0 at pci2 dev 13 function 0 "Apple Intrepid ATA" rev 0x00 wdc1 at kauaiata0 irq 39: DMA wd0 at wdc1 channel 0 drive 0: wd0: 16-sector PIO, LBA48, 152627MB, 312581808 sectors wd0(wdc1:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 5 "Apple UniNorth Firewire" rev 0x81 at pci2 dev 14 function 0 not configured gem0 at pci2 dev 15 function 0 "Apple Uni-N2 GMAC" rev 0x80: irq 41, address 00:14:51:17:42:34 bmtphy0 at gem0 phy 0: BCM5221 100baseTX PHY, rev. 4 uhidev0 at uhub2 port 1 configuration 1 interface 0 "Logitech Optical USB Mouse" rev 2.00/3.40 addr 2 uhidev0: iclass 3/1 ums0 at uhidev0: 3 buttons, Z dir wsmouse0 at ums0 mux 0 uhidev1 at uhub3 port 1 configuration 1 interface 0 "Chicony USB Keyboard" rev 1.10/1.02 addr 2 uhidev1: iclass 3/1 ukbd0 at uhidev1: 8 variable keys, 6 key codes wskbd0 at ukbd0: console keyboard uhidev2 at uhub3 port 1 configuration 1 interface 1 "Chicony USB Keyboard" rev 1.10/1.02 addr 2 uhidev2: iclass 3/0, 3 report ids uhid0 at uhidev2 reportid 1: input=1, output=0, feature=0 uhid1 at uhidev2 reportid 2: input=1, output=0, feature=2 uhid2 at uhidev2 reportid 3: input=3, output=0, feature=0 vscsi0 at root scsibus1 at vscsi0: 256 targets softraid0 at root scsibus2 at softraid0: 256 targets bootpath: /pci@f400/ata-6@d/disk@0:/bsd root on wd0a (2e09198b7adf58b1.a) swap on wd0b dump on wd0b drm: initializing kernel modesetting (RV280 0x1002:0x5962 0x1002:0x5962). error: [drm:pid0:radeon_get_bios] *ERROR* Unable to locate a BIOS ROM drm: Using device-tree clock info radeondrm0: VRAM: 128M 0x9800 - 0x9FFF (64M used) trying to bind memory to uninitialized GART ! error: [drm:pid0:radeon_ttm_backend_bind] *ERROR* failed to bind 1 pages at 0x error: [drm
Emulate apache mod_rewrite feature with new httpd
I've managed to configure the new httpd server to use as a replacement for
apache. (With is really great. Thanks to Reyk !)
I'm strugling to make my drupal site work, because of the clean url module.
I used to have the following apache mod_rewrite configuration :
RewriteEngine on
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ /index.php?q=$1 [L,QSA]
Basically the rule means that if the file or folder is not found then the
request is rewrited to /index.php?q=request
For exemple if/user doesn't exist modify url to /index.php?q=user
I've looked into man page for httpd and I've seen that the block return
statement might be of use to emulate this need. but I haven't found many info
on the subject.
Has someone found a way to make that with the new httpd server ?
PS : I'm running from snapshot (5.7 GENERIC#716 i386)
Romain
Re: Solved! Re: OpenBSD firefox useragent Facebook
On 2015-02-20, Erling Westenvik wrote: It's all about the user agent string. When changing from the default: Mozilla/5.0 (X11; OpenBSD amd64; rv:35.0) Gecko/20100101 Firefox/35.0 to: Mozilla/5.0 (X11; U; OpenBSD i386; en-US; rv:1.9.1) Gecko/20090702 Firefox/3.5 things started to work as expected. Not that the "working" string is ideal; it just happened to be one I tried and which worked. I'll try to figure out which part(s) of it that matches Facebook's somewhat flaky user agent string detection "algorithm". Erling, have you considered the Blender add-on for Firefox? Mozilla: https://addons.mozilla.org/en-US/firefox/addon/blender-1/ Github: https://github.com/meh/blender From the README: "This addon sets various preferences to fake to be the most common. It fakes: * the operating system to be Windows 7 64-bit * Firefox to be version 35 * the language to be English * the accepted charsets to be unspecified" I do believe you can override the language spoofing. No noticable problems here on my *BSD and Linux boxes. -Brendan
Re: Alternative way to get sources, CVS slow
On Sun, Feb 22, 2015 at 12:43:57PM GMT, Stuart Henderson wrote: > On 2015-02-21, Raf Czlonka wrote: > > Alternatively, you can use CVSync[0] to get the code. > > That is likely going to be worse on a slow/unstable link as you > are fetching the entire repository history (~2GB rather than ~750MB), > not just updating the checked-out tree. One would think that. However, CVSync + local 'cvs up' is much faster and more reliable than "remote" 'cvs up'. I'm using it daily so this is not speculative - I'm writing from my own experience. Also, I had very similar issues as the OP. Cheers, Raf P.S. I'm use CVSync with your mirror :^)
Re: Alternative way to get sources, CVS slow
On 2015-02-22, Raf Czlonka wrote: > On Sun, Feb 22, 2015 at 12:43:57PM GMT, Stuart Henderson wrote: >> On 2015-02-21, Raf Czlonka wrote: >> > Alternatively, you can use CVSync[0] to get the code. >> >> That is likely going to be worse on a slow/unstable link as you >> are fetching the entire repository history (~2GB rather than ~750MB), >> not just updating the checked-out tree. > > One would think that. However, CVSync + local 'cvs up' is much faster > and more reliable than "remote" 'cvs up'. > > I'm using it daily so this is not speculative - I'm writing from my own > experience. Also, I had very similar issues as the OP. > > Cheers, > > Raf > > P.S. I'm use CVSync with your mirror :^) > > Interesting.. I stopped running local cvsync to my server at home a while ago, as 'cvs up' from my mirror (over adsl) was faster, not even taking the extra cvsync time into account ;)
Re: Emulate apache mod_rewrite feature with new httpd
On Sun, Feb 22, 2015 at 5:23 AM, Romain FABBRI <
romain.fab...@alienconsulting.net> wrote:
> I've managed to configure the new httpd server to use as a replacement for
> apache. (With is really great. Thanks to Reyk !)
>
> I'm strugling to make my drupal site work, because of the clean url module.
>
> I used to have the following apache mod_rewrite configuration :
> RewriteEngine on
> RewriteBase /
> RewriteCond %{REQUEST_FILENAME} !-f
> RewriteCond %{REQUEST_FILENAME} !-d
> RewriteRule ^(.*)$ /index.php?q=$1 [L,QSA]
>
> Basically the rule means that if the file or folder is not found then the
> request is rewrited to /index.php?q=request
> For exemple if/user doesn't exist modify url to /index.php?q=user
>
> I've looked into man page for httpd and I've seen that the block
> return statement might be of use to emulate this need. but I haven't found
> many info on the subject.
>
> Has someone found a way to make that with the new httpd server ?
>
> PS : I'm running from snapshot (5.7 GENERIC#716 i386)
>
> Romain
>
>
You should go to the nginx pages :
http://nginx.org/en/docs/http/ngx_http_core_module.html#try_files
--
-
() ascii ribbon campaign - against html e-mail
/\
Re: hardware support
BTW, is there someone with nvidia gtx 650 card and some kind of 1920x1200 resolution? Just to know im not alone in this cruel world.. PS: i've made live USB, booted, but first FAST check didnt give me any results, just segfault on xorg -configure, need more time for it :c 2015-02-22 16:34 GMT+03:00 Joseph Oficre : > Yeah, i will try live USB to check it all, ty for response! > > 2015-02-22 12:57 GMT+03:00 Dmitrij D. Czarkoff : > >> Joseph Oficre said: >> > Hello, my friends. >> > Can someone tell me, is this hardware will work with OpenBSD 5.6 >> [...] >> > 01:00.0 VGA compatible controller: NVIDIA Corporation GK107 [GeForce GTX >> > 650] (rev a1) >> >> AFAIK in vesa mode only. No hardware acceleration. >> >> > 01:00.1 Audio device: NVIDIA Corporation GK107 HDMI Audio Controller >> (rev >> > a1) >> >> This won't. >> >> >> > Interested of Nvidia videocard, I dont need some super 3d support, just >> > 1920x1200 resolution. >> >> I guess you will be able to set up this resolution using gtf(1), but >> with no 2D acceleration that will be painful. You may try running it >> with vesa driver in Linux (eg. by removing nouveau or nvidia proprietary >> driver, whichever you use) and see. >> >> >> If the system is now under your control, you could either buy a CD or >> download an image from any mirror and boot your system. If your disk is >> in MBR format (not in GPT), you may even free a bit of space and install >> OpenBSD there. Or back up your system and do a full install. Another >> option would be to install OpenBSD to a flash drive, and boot from >> there; it would be painfully slow, but will give you a simple way of >> testing hardware compatibility. >> >> -- >> Dmitrij D. Czarkoff
Re: Alternative way to get sources, CVS slow
On Sun, Feb 22, 2015 at 05:18:24PM +, Stuart Henderson wrote: > Interesting.. I stopped running local cvsync to my server at home > a while ago, as 'cvs up' from my mirror (over adsl) was faster, not > even taking the extra cvsync time into account ;) So I successfully fetched the code, now I will compile, and see if I get any error, as I get before. Because last time I checkout the code, things like xenocara failed to build. I post here when I end. -- Regards Henrique Lengler
Re: Emulate apache mod_rewrite feature with new httpd
On Sun, Feb 22, 2015 at 3:22 PM, Romain FABBRI <
romain.fab...@alienconsulting.net> wrote:
> I donât see how nginx is related to the new httpdâ¦
>
> If it is, please explain
>
>
>
Your are not force to solve all the problem in one process.
> Maybe a hack could be done inside the canonicalize_path function in
> https://github.com/reyk/httpd/blob/master/httpd.c ?
>
> But not really sure when looking at the sources it would be the right way
> to do thatâ¦
>
>
>
> *De :* sven falempin [mailto:sven.falem...@gmail.com]
> *Envoyé :* dimanche 22 février 2015 19:08
> *Ã :* Romain FABBRI
> *Cc :* misc
> *Objet :* Re: Emulate apache mod_rewrite feature with new httpd
>
>
>
>
>
>
>
> On Sun, Feb 22, 2015 at 5:23 AM, Romain FABBRI <
> romain.fab...@alienconsulting.net> wrote:
>
> I've managed to configure the new httpd server to use as a replacement for
> apache. (With is really great. Thanks to Reyk !)
>
> I'm strugling to make my drupal site work, because of the clean url module.
>
> I used to have the following apache mod_rewrite configuration :
> RewriteEngine on
> RewriteBase /
> RewriteCond %{REQUEST_FILENAME} !-f
> RewriteCond %{REQUEST_FILENAME} !-d
> RewriteRule ^(.*)$ /index.php?q=$1 [L,QSA]
>
> Basically the rule means that if the file or folder is not found then the
> request is rewrited to /index.php?q=request
> For exemple if/user doesn't exist modify url to /index.php?q=user
>
> I've looked into man page for httpd and I've seen that the block
> return statement might be of use to emulate this need. but I haven't found
> many info on the subject.
>
> Has someone found a way to make that with the new httpd server ?
>
> PS : I'm running from snapshot (5.7 GENERIC#716 i386)
>
> Romain
>
>
>
>
>
> You should go to the nginx pages :
>
> http://nginx.org/en/docs/http/ngx_http_core_module.html#try_files
>
>
>
>
>
>
> --
> () ascii ribbon campaign - against html e-mail
> /\
>
--
() ascii ribbon campaign - against html e-mail
/\
Re: Emulate apache mod_rewrite feature with new httpd
I donât see how nginx is related to the new httpdâ¦
If it is, please explain
Maybe a hack could be done inside the canonicalize_path function in
https://github.com/reyk/httpd/blob/master/httpd.c ?
But not really sure when looking at the sources it would be the right way to do
thatâ¦
De : sven falempin [mailto:sven.falem...@gmail.com]
Envoyé : dimanche 22 février 2015 19:08
à : Romain FABBRI
Cc : misc
Objet : Re: Emulate apache mod_rewrite feature with new httpd
On Sun, Feb 22, 2015 at 5:23 AM, Romain FABBRI
mailto:romain.fab...@alienconsulting.net>>
wrote:
I've managed to configure the new httpd server to use as a replacement for
apache. (With is really great. Thanks to Reyk !)
I'm strugling to make my drupal site work, because of the clean url module.
I used to have the following apache mod_rewrite configuration :
RewriteEngine on
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ /index.php?q=$1 [L,QSA]
Basically the rule means that if the file or folder is not found then the
request is rewrited to /index.php?q=request
For exemple if/user doesn't exist modify url to /index.php?q=user
I've looked into man page for httpd and I've seen that the block return
statement might be of use to emulate this need. but I haven't found many info
on the subject.
Has someone found a way to make that with the new httpd server ?
PS : I'm running from snapshot (5.7 GENERIC#716 i386)
Romain
You should go to the nginx pages :
http://nginx.org/en/docs/http/ngx_http_core_module.html#try_files
--
-
() ascii ribbon campaign - against html e-mail
/\
Re: Alternative way to get sources, CVS slow
On Sun, Feb 22, 2015 at 04:40:39PM -0300, Henrique Lengler wrote: > On Sun, Feb 22, 2015 at 05:18:24PM +, Stuart Henderson wrote: > > Interesting.. I stopped running local cvsync to my server at home > > a while ago, as 'cvs up' from my mirror (over adsl) was faster, not > > even taking the extra cvsync time into account ;) > > So I successfully fetched the code, now I will compile, and see if I get any > error, > as I get before. Because last time I checkout the code, things like xenocara > failed to build. > Holy #@$$!! I got a compiler error, the same I posted here: http://marc.info/?l=openbsd-misc&m=142444902627315&w=2 I really need help, I'm following he FAQ, and I don't know why it don't work! -- Regards Henrique Lengler
Re: Alternative way to get sources, CVS slow
On Sun, Feb 22, 2015 at 3:48 PM, Henrique Lengler wrote: > On Sun, Feb 22, 2015 at 04:40:39PM -0300, Henrique Lengler wrote: > > On Sun, Feb 22, 2015 at 05:18:24PM +, Stuart Henderson wrote: > > > Interesting.. I stopped running local cvsync to my server at home > > > a while ago, as 'cvs up' from my mirror (over adsl) was faster, not > > > even taking the extra cvsync time into account ;) > > > > So I successfully fetched the code, now I will compile, and see if I get > any error, > > as I get before. Because last time I checkout the code, things like > xenocara failed to build. > > > Holy #@$$!! > > I got a compiler error, the same I posted here: > http://marc.info/?l=openbsd-misc&m=142444902627315&w=2 > > I really need help, I'm following he FAQ, and I don't know why it don't > work! > -- > Regards > > Henrique Lengler > > > I agree CVS is a bit slow, I do not know if it is ssh, the cvs design or the amount of bandwith/cpu put into the mirrors/ If you want help, you have to give way more information, maybe you just forgot an important part or, as often, compile a part of current and break stuffs. -- - () ascii ribbon campaign - against html e-mail /\
Re: Alternative way to get sources, CVS slow
On 02/22/15 14:48, Henrique Lengler wrote: On Sun, Feb 22, 2015 at 04:40:39PM -0300, Henrique Lengler wrote: On Sun, Feb 22, 2015 at 05:18:24PM +, Stuart Henderson wrote: Interesting.. I stopped running local cvsync to my server at home a while ago, as 'cvs up' from my mirror (over adsl) was faster, not even taking the extra cvsync time into account ;) So I successfully fetched the code, now I will compile, and see if I get any error, as I get before. Because last time I checkout the code, things like xenocara failed to build. Holy #@$$!! I got a compiler error, the same I posted here: http://marc.info/?l=openbsd-misc&m=142444902627315&w=2 I really need help, I'm following he FAQ, and I don't know why it don't work! Are you following this? http://www.openbsd.org/faq/faq5.html#Xbld
Re: netstat(1) output nits
On Sun, Feb 22, 2015 at 5:23 AM, Jan Stary wrote: > This is current/amd64. The default output of netstat(1) > contains quite a few lines like the following for the AF_UNIX family: > > 0x0 stream 0 0 0x0 0x0 > 0x0 stream 0 0 0x0 0x0 > 0x0 stream 0 0 0x0 0x0 > 0x0 stream 0 0 0x0 0x0 > 0x0 stream 0 0 0x0 0x0 > > What are these? Are they unnamed pipes opened in some running process? > As opposed to named pipes which have a filename in the last column? > > 0x0 stream 0 0 0x0 0x0 0x0 0x0 /tmp/aucat/aucat0 Yes. They're UNIX domain sockets that bind() wasn't called on, leaving them nameless. For UNIX stream sockets, there's no benefit to binding the client-side, so they almost always nameless. Philip Guenther
Re: Failing to build -stable Xenocara
On Sun, Feb 22, 2015 at 02:57:18PM -0600, Edgar Pettijohn wrote: > Are you following this? > http://www.openbsd.org/faq/faq5.html#Xbld I changed the subject name to follow last thread. Yes I am, and this is my second attempt. I searched on the internet and I found it is a problem with the freetype library files. So I decided to install freetype with pkg_add, now looks like it don't fail in this part. but I received another error. extensions.o(.text+0x678): In function `AddExtensionAlias': : warning: strcpy() is almost always misused, please use strlcpy() /usr/X11R6/lib/libXfont.so.12.0: warning: rand() isn't random; consider using arc4random() osglue.o(.text+0x212): In function `CloneMyself': : warning: strcat() is almost always misused, please use strlcat() connection.o(.text+0xaff): In function `CreateSockets': : warning: sprintf() is often misused, please use snprintf() config.o(.text+0xdce): In function `config_set_snf_format': : undefined reference to `SnfSetFormat' collect2: ld returned 1 exit status *** Error 1 in app/xfs/obj (Makefile:502 'xfs') *** Error 1 in app/xfs/obj (Makefile:948 'all-recursive') *** Error 1 in app/xfs/obj (Makefile:407 'all') *** Error 1 in app/xfs (/usr/X11R6/share/mk/bsd.xorg.mk:145 'all') *** Error 1 in app/xfs (/usr/X11R6/share/mk/bsd.xorg.mk:211 'build') *** Error 1 in app (:48 'build') *** Error 1 in . (:48 'realbuild') *** Error 1 in /usr/xenocara (Makefile:36 'build') -- Regards Henrique Lengler
Re: Performance Counters
On Thu, Feb 19, 2015 at 6:11 AM, Sai Prajeeth wrote: > Does pctr count events for all CPUs or just 1 CPU? I cant seem to find any > good documentation for pctr other than its man page. I tried it and the > values it gives are differing too much. The pctr driver is currently not MP aware, so it only sets or fetches the counters on the CPU it's run on, making it very hard to use on MP boxes. :-( > Also is there any explanation of what the unit masks are for the specific > functions (-m command line option) ? You need to consult the documentation for your CPU to see what "UMASK" values are supported and how they are interpreted. For Intel CPUs, this is in volume 3b "System Programming Guide, Part 2", chapters 18 and 19, for example. Philip Guenther
Re: Alternative way to get sources, CVS slow
The part of CVS end, lets continue build problems here: Failing to build -stable Xenocara -- Regards Henrique Lengler
Re: Failing to build -stable Xenocara
On Sun, Feb 22, 2015 at 06:24:51PM -0300, Henrique Lengler wrote: > On Sun, Feb 22, 2015 at 02:57:18PM -0600, Edgar Pettijohn wrote: > > Are you following this? > > http://www.openbsd.org/faq/faq5.html#Xbld > > I changed the subject name to follow last thread. > > Yes I am, and this is my second attempt. > I searched on the internet and I found it is a problem with the freetype > library files. > So I decided to install freetype with pkg_add, now looks like it don't fail > in this > part. but I received another error. > > extensions.o(.text+0x678): In function `AddExtensionAlias': > : warning: strcpy() is almost always misused, please use strlcpy() > /usr/X11R6/lib/libXfont.so.12.0: warning: rand() isn't random; consider using > arc4random() > osglue.o(.text+0x212): In function `CloneMyself': > : warning: strcat() is almost always misused, please use strlcat() > connection.o(.text+0xaff): In function `CreateSockets': > : warning: sprintf() is often misused, please use snprintf() > config.o(.text+0xdce): In function `config_set_snf_format': > : undefined reference to `SnfSetFormat' > collect2: ld returned 1 exit status > *** Error 1 in app/xfs/obj (Makefile:502 'xfs') > *** Error 1 in app/xfs/obj (Makefile:948 'all-recursive') > *** Error 1 in app/xfs/obj (Makefile:407 'all') > *** Error 1 in app/xfs (/usr/X11R6/share/mk/bsd.xorg.mk:145 'all') > *** Error 1 in app/xfs (/usr/X11R6/share/mk/bsd.xorg.mk:211 'build') > *** Error 1 in app (:48 'build') > *** Error 1 in . (:48 'realbuild') > *** Error 1 in /usr/xenocara (Makefile:36 'build') Sorry this the same message. I'm thinking about thrust that everything should work, and reintall the whole system. -- Regards Henrique Lengler
Re: Emulate apache mod_rewrite feature with new httpd
> On 22 Feb 2015, at 20:23, Romain FABBRI
> wrote:
>
> I've managed to configure the new httpd server to use as a replacement for
> apache. (With is really great. Thanks to Reyk !)
>
> I'm strugling to make my drupal site work, because of the clean url module.
>
> I used to have the following apache mod_rewrite configuration :
> RewriteEngine on
> RewriteBase /
> RewriteCond %{REQUEST_FILENAME} !-f
> RewriteCond %{REQUEST_FILENAME} !-d
> RewriteRule ^(.*)$ /index.php?q=$1 [L,QSA]
>
> Basically the rule means that if the file or folder is not found then the
> request is rewrited to /index.php?q=request
> For exemple if/user doesn't exist modify url to /index.php?q=user
>
> I've looked into man page for httpd and I've seen that the block return
> statement might be of use to emulate this need. but I haven't found many info
> on the subject.
>
> Has someone found a way to make that with the new httpd server ?
>
> PS : I'm running from snapshot (5.7 GENERIC#716 i386)
>
> Romain
i havent tried drupal behind httpd yet, but if i did i would unconditionally
route requests into the drupal controller (index.php), and use a cdn module to
have drupal generate urls to static assets (ie, the css/js/image files on disk)
against a separate domain or url prefix. or you could write a simple module
that takes advantage of hook_file_url_alter. that has greatly simplified our
configs in the frontend web servers in front of our drupal poop.
Re: Any experience with D-Link DGS-1100 and static trunk aggregation?
On 2015-02-22 07:01 AM, Josh Grosse wrote: On Sun, Feb 22, 2015 at 12:47:49PM +, Stuart Henderson wrote: Are you clear on exactly what loadbalance does? A hash of the protocol header is used to maintain packet ordering. The hash includes the Ethernet source and destination address, and, if available, the VLAN tag, and the IP source and destination address. In this mode, traffic between two individual IP/MAC addresses on the same vlan will only use a single port, you need multiple addresses to see the traffic balanced between multiple ports. I think that's clear. The problem experienced was half the TCP sessions failing to connect. It's unclear why, as my testing was limited to flood pings and tcpbench. Both of which appeared flawless. I'm running roundrobin in production, now, and will schedule more test time for loadbalance ... with multiple generators. Logically, if roundrobin works, loadbalance should, too. According to trunk(4), the only difference between them is the selection algorithm that controls which outbound interface to use. My first thought was the switch is doing some sort of MAC pinning as as security feature, but that would have also defeated roundrobin. Technically, it doesn't matter in this circumstance (barring strange implementation issues on the switch) as both will produce similar results on a DGS-1100 because all ports on the switch are limited to 1Gbps no matter what... so the fact that loadbalance is limited to 1Gbps per stream and roundrobin 2Gbps per stream becomes irrelevant. But it's still strange that one works and one doesn't. -- -Adam Thompson athom...@athompso.net +1 (204) 291-7950 - cell +1 (204) 489-6515 - fax
Hiawatha install on 5.6 i386
Installed from my ISP's mirror. Starting hiawatha results in: Warning: can't write PID file /usr/local/var/run/hiawatha.pid. There is no file of that name found by locate. There is no directory var/run in /usr/local/ hiawatha runs seemly ok other than the above. Any clues? /R/ Rod/ >From the land "down under": Australia. Do we look from up over?
Re: hardware support
On Sun, Feb 22, 2015 at 1:38 PM, Joseph Oficre wrote: > BTW, is there someone with nvidia gtx 650 card and some kind of 1920x1200 > resolution? Just to know im not alone in this cruel world.. > > PS: i've made live USB, booted, but first FAST check didnt give me any > results, just segfault on xorg -configure, need more time for it :c > I think xorg -configure is known to be broken, you should try just to run startx(1) without xorg.conf file
httpd client certificates and URL rewriting
Hello, I'm currently using httpd + php_fpm to serve a Wordpress website with OpenBSD 5.7-snapshot (20/02/2015). The added capabilities to use a fastcgi target as default index and general improvements are really nice, and for the most part there are no issues. I'd like to thank Reyk and all OpenBSD devs for such great software. Three questions regarding current httpd capabilities or perhaps future improvements, though: 1) Is there support for client-side certificates on a per-location basis? Would be a good alterrnative to improve security accessing administrative parts of a website, not relying solely on password authentication. 2) I'm using a "*.php*" location block to redirect requests to php_fpm, which in turn demands the URL to contain an expression following that format. Therefore, "/index.php/%CONTENT%" style URLs are currently in use. In order to use so-called 'pretty' URLs (that is, without the "index.php" portion), would it be necessary to have rewrite capabilities offered by Apache/nginx, or is there any alternative I'm overseeing? Thanks for your input, fbscarel
Re: hardware support
Joseph Oficre said: > PS: i've made live USB, booted, but first FAST check didnt give me any > results, just segfault on xorg -configure, need more time for it :c You have to write xorg.conf yourself. IIRC a Monitor section and modeline from gtf(1) would suffice. -- Dmitrij D. Czarkoff
