Re: DMESG question
On 8/7/06, Gabriel George POPA <[EMAIL PROTECTED]> wrote: I have two small questions: 1) When the OS generates too much messages, old messages are lost (oldest lines present in `dmesg` are lost). What can I do to see ALL messages ever recorded for dmesg printing? There is always a copy of the original dmesg in /var/run/dmesg.boot Landry
Re: Howto get DRI working on OpenBSD ?
Damien Miller wrote: On Wed, 9 Aug 2006, Landry Breuil wrote: Now i'm trying to get DRI working on this laptop, to use shiny features like composite and so on. It's not a vital need, just a personnal challenge :) You will need to (at least) port the DRM kernel support to OpenBSD. tedu@ made a start a little while ago, and it is certainly more work than tweaking makefiles. I was afraid this was required... this is certainly something i can't personally do :( Do you have any pointers to tedu's work ? cvs commits, webpage ? Reading freebsd's implementation of DRM is a good start point ? Did people already get Composite working flawlessly on OpenBSD, with i810 accelerated by XAA ? Thanks, Landry
patch against tail(1) to support -f on multiple files
Hi folks at misc@ ! I've always missed the feature of GNU tail and FreeBSD tail to follow multiple files using -f. I was used to monitor the logs on my 3.8 server using "tail -f /var/log/messages & ; tail -f /var/www/logs/access_log &" and so on, but wasn't pleased of this workaround. I know, multitail port does the job, but i didn't want to install it. So i decided to code a patch, i looked at how FreeBSD handle this issue, i read style(9) and kqueue(2), and finally the result is here : http://team.gcu.info/~gaston/openbsd-tail-follow-multiple-files.patch This patch is against -current userland src/usr.bin/tail. Feel free to try it and comment it. If someone could review it and verify it, this would be great. Patched version works like a charm on my server since two days, and has been tested in most common cases. Thanks, Landry ps: I've submitted this patch too as PR#5092.
Looking for logitech webcams testers/device info
Hi,
sending this to a wider audience on misc@, to fix the microphone (cf
https://marc.info/?t=15298427072&r=1&w=2) on a
variety of logitech webcams (mostly the Cxxx{,HD}?) i'd need the lsusb
-v output for the corresponding devices.
If you have a logitech webcam where the mic doesnt work (looking for
'uaudio0: audio descriptors make no sense, error=4' in dmesg) this is
your chance to help fix it.
Of course if you have a logitech webcam where the mic works out of the
box, this information is also valuable !
Install usbutils package, run lsusb to find the device ids
corresponding to the logitech device (starts with 046d:, per
https://usb-ids.gowdy.us/read/UD/046d) and send me privately the output
of:
lsusb -v -d 046d:
where matches your webcam.
if you receive directly this e-mail in bcc, it's because i've found
occurences of 'audio descriptors make no sense' corresponding to a
logitech webcam in our dmesg archive sent by you, this information is
definitely valuable so please keep sending dmesg per
https://www.openbsd.org/faq/faq4.html#SendDmesg :)
Landry
Re: usr.sbin/wake removal
On Mon, Feb 9, 2009 at 5:15 PM, Emilio Perea wrote: > If there is no room in base, it would be nice to have it in ports. There's no more room in ports either. Landry
more details on the last security/nss update
On Mon, Dec 31, 2012 at 01:41:27AM -0700, Landry Breuil wrote: > CVSROOT: /cvs > Module name: ports > Changes by: lan...@cvs.openbsd.org 2012/12/31 01:41:27 > > Modified files: > security/nss : Makefile distinfo > > Log message: > Update to nss-3.14.1.with.ckbi.1.93, which explicitely distrusts > "TURKTRUST Mis-issued Intermediate CA 1" & "TURKTRUST Mis-issued > Intermediate CA 2". > (added in #768547, removed in #825022) And for people interested in the details of that security issue : http://lwn.net/Articles/531346/ https://blog.mozilla.org/security/2013/01/03/revoking-trust-in-two-turktrust-certficates/ http://googleonlinesecurity.blogspot.fr/2013/01/enhancing-digital-certificate-security.html provide more info on it. Basically, a fraudulent cert for *.google.com was issued by an intermediate CA mistakenly issued by TURKTRUST. oops.
Re: Secure PDF viewer
On Sat, Apr 4, 2015 at 6:31 PM, Kevin Chadwick wrote: > On Fri, 3 Apr 2015 08:24:36 + (UTC) > Stuart Henderson wrote: > > > I'm not > > sure whether the in-browser renderers are based on these or something > > else, > > Firefox uses jspdf (javascript pdf) > > I think but am not sure if this is the right link > > https://github.com/MrRio/jsPDF > Why do ppl feel compelled to reply when they have no clue about a subject ? Firefox uses https://github.com/mozilla/pdf.js/ developped my mozilla itself, and it's as "secure" as any pdf viewer. Landry
Re: SSL_ENABLE_FALLBACK_SCSV not defined error building firefox-esr-31.5.3 Re: differences between pk_add -u and building from source at stable
I'm sorry, but you've generated so many threads over the same build error
that i dont understand anymore what you're trying to achieve, what
situation you're coming from, and what you're doing to get this error.
Is this on 5.6/i386 ? with -stable patches applied ? Trying to build a port
from the stable branch ?
SSL_ENABLE_FALLBACK_SCSV is defined in nss (see
http://mxr.mozilla.org/mozilla-central/ident?i=SSL_ENABLE_FALLBACK_SCSV) ,
so you'll have to figure out if firefox build correctly detects the version
of nss installed on your system, and if that version has this define.
On current this is what i have with nss 3.18:
/usr/local/include/nss/ssl.h:#define SSL_ENABLE_FALLBACK_SCSV 28
On plain 5.6 with nss 3.16.2., i dont have that define, so maybe esr is
subtly messing up requirements here.
At some point, if you encounter too many build issues you're not able to
deal with, you should give some trust to the people who know what they're
doing, and just use the stable packages from mtier (which, of course,
managed to build that firefox esr version afaict)
Landry
On Mon, Apr 6, 2015 at 1:40 AM, Joel Rees wrote:
> On Apr 4, 2015 7:26 PM, "Joel Rees" wrote:
> >
> > After about six hours
>
> More like eight hours.
>
> Just finished a re-compile without the room fan and got to the same
> error. (No overheating, either, with one less drive.)
>
> > with a room fan aimed at the computer to keep it from overheating, I get
> this error about SSL_ENABLE_FALLBACK_SCSV undefined. Most of the error
> scrolled off the screen and is not in the buffer because I had a different
> virtual console up monitoring the CPU temperature. Was not using tee to
> capture the output because I was trying to keep the burden on the drive
> controller light.
> >
> > (I'm pretty sure it was the drive controller overheating rather than the
> CPU. I had to move it to a different slot to get it close enough to the
> case fan.)
> >
> > I have this much information still on the screen:
>
> Kept the scrollback this time:
>
> > --
> [...Need to find a place to post the screen shots. ...]
>
> /usr/ports/pobj/firefox-esr-31.5.3/mozilla-esr31/security/manager/ssl/src/nsNSSIOLayer.cpp:
> In function 'bool {anonymous}::retryDueToTLSIntolerance(PRErrorCode,
> nsSSSocketInfo*)':
>
> /usr/ports/pobj/firefox-esr-31.5.3/mozilla-esr31/security/manager/ssl/src/nsNSSIOLayer.cpp:959:10:
> error: 'SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT' was not declared in
> this scope
> case SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT:
> ^
>
> /usr/ports/pobj/firefox-esr-31.5.3/mozilla-esr31/security/manager/ssl/src/nsNSSIOLayer.cpp:
> In function 'nsresult nsSSLIOLayerSetOptions(PRFileDesc*, bool, const
> char*, const char*, int32_t, nsNSSSocketInfo*)':
>
> /usr/ports/pobj/firefox-esr-31.5.3/mozilla-esr31/security/manager/ssl/src/nsNSSIOLayer.cpp:2328:41:
> error: 'SSL_ENABLE_FALLBACK_SCSV' was not declared in this scope
> > if (SECSuccess != SSL_OptionSet(fd, SSL_ENABLE_FALLBACK_SCSV,
> true)) {
> >
> > /usr/ports/pobj/firefox-esr-31.5.3/mozilla-esr31/config/rules.mk:1001:
> recipe for target 'nsNSSIOLayer.o' failed
> > gmake[3]: *** [nsNSSIOLayer.o] Error 1
> > gmake[3]: Leaving directory
> '/usr/ports/pobj/firefox-esr-31.5.3/build-i386/security/manager/ssl/src'
> > /usr/ports/pobj/firefox-esr-31.5.3/mozilla-esr31/config/recurse.mk:95:
> recipe for target 'security/manager/ssl/src/compile' failed
> > gmake[2]: *** [security/manager/ssl/src/compile] Error 2
> > gmake[2]: Leaving directory
> '/usr/ports/pobj/firefox-esr-31.5.3/build-i386'
> > /usr/ports/pobj/firefox-esr-31.5.3/mozilla-esr31/config/recurse.mk:95:
> recipe for target 'compile' failed
> > gmake[1]: [compile] Error 2
> > gmake[1]: Leaving directory
> '/usr/ports/pobj/firefox-esr-31.5.3/build-i386'
> > /usr/ports/pobj/firefox-esr-31.5.3/mozilla-esr31/config/recurse.mk:592:
> recipe for target 'all' failed
> > gmake: *** [all] Error 2
> > *** Error 2 in . (/usr/ports/infrastructure/mk/bsd.port.mk:2727
> '/usr/ports/pobj/firefox-esr-31.5.3/build-i386/.build_done')
> > *** Error 1 in /usr/ports/www/firefox-esr (/usr/ports/infrastructure/mk/
> bsd.port.mk:2455 'build')
> >
> >
> > if I didn't make a mistake typing that in. I did a pwd and lost the line
> about SSL_ENABLE_FALLBACK_SCSV being undefined, sorry.
> >
> > Any thoughts while I muck around in that directory and go looking for
> the source, after I get back from a family errand? (Maybe I'll just give up
> on
Re: davical on openbsd
On Fri, Apr 17, 2015 at 1:16 PM, Marcus MERIGHI wrote: > > paol...@gmail.com (Paolo Aglialoro), 2015.04.15 (Wed) 03:10 (CEST): > > is there someone who already had experiences with davical in > > production on openbsd? Yes, been running it at work since 6 years, previously on debian and then on openbsd. Also a personal instance for caldav & carddav, using lightning/thunderbird on the client side or caldav/carddav-sync on android. Just works. > > and internals'/externals' invitations? invitations just work fine with lightning. Havent tested another client. > Are you sure you've chosen the right tool (davical) for the task > (caldav)? Please read the archives: > > most traffic: > https://lists.sourceforge.net/lists/listinfo/davical-general > seldom used: > https://lists.sourceforge.net/lists/listinfo/davical-devel > > summary: original author left, project is being taken over by a > community. Just because the traffic is low doesnt really mean anything. davical has been here for years, and has a big existing userbase (including clients with iThings). Sure it's php, the UI is a bit dated (but who needs it besides admin?) and the install procedure is a bit cumbersome, but once it runs you dont need to touch it anymore. Landry
Re: seamonkey error
There was a linking issue at some point (a soname thing) that we had a patch for, you might want to look in https://bugzilla.mozilla.org/show_bug.cgi?id=1107063 - maybe we're missing a patch for seamonkey there that got commited upstream but since seamonkey has releng issues those days they dont make releases... (sorry, cant work on this until a while. And please, next time, post this to ports@, not to garbage^Wmisc@) Landry On Sat, May 23, 2015 at 1:06 PM, Stuart Henderson wrote: > On 2015-05-22, David Coppa wrote: >> On Fri, May 22, 2015 at 4:20 PM, Eivind Eide wrote: >>> No, sorry. I had openldap-client installed already, dependency of >>> libreoffice. >>> But it doesn't change anything, the error remains the same... >> >> What about the workaround below? >> >> # ln -s /usr/local/lib/libldap-2.4.so.13.0 /usr/local/lib/libldap60.so.41.0 > > I'm pretty sure that is not right... > > seamonkey-2.33.1p0:www/seamonkey,-main:/usr/local/lib/seamonkey-2.33.1/libldap60.so.41.0 > thunderbird-31.7.0:mail/mozilla-thunderbird,-main:/usr/local/lib/thunderbird-31.7.0/libldap60.so.29.0
HEADS-UP: Firefox 46 now uses Gtk+3, WebRTC is enabled
Hi, for those who dont follow ports-changes@, i've updated www/mozilla-firefox to version 46.0, and following upstream this now defaults to use Gtk+3 toolkit. There were issues with Gtk 3.20, but most/all have been solved by taking a jumbo patch from Fedora (see https://bugzilla.mozilla.org/show_bug.cgi?id=1234158 among others) - so besides theme changes and graphics glitches, this change should be transparent to end-users. If you want to stay with Gtk+2, install firefox-esr, but the latter will move to Gtk+3 when it is updated to 52. I *might* provide the infrastructure to build gtk2 FLAVORs like it was possible for gtk3 since firefox 30, but this is not done, and i wont spend time on this unless there's a real need. At the same time, i've enabled (well, stopped disabling) WebRTC code - nothing in it has changed OpenBSD-wise in the past months, but i'm not in a position to debug/test it much myself nowadays, so end-users get to dogfood it. Since it works on Linux/etc, it should mostly work on OpenBSD, besides sound needing more love (ping ratchov@)- webcam sortof worked last i tried, as data channels. If you want to test it, there are plenty of example sites around, start with the ones linked on https://mozilla.github.io/webrtc-landing/ If you have issues/crashes, direct your reports to https://bugzilla.mozilla.org/ and cc me there. If you dont like it or have security concerns for the paranoids, set media.peerconnection.enabled to false in about:config. Landry
Re: systemd-*
On Sun, Sep 21, 2014 at 08:46:27PM -0600, Theo de Raadt wrote:
> > Was reading http://boycottsystemd.org/ and they wrote:
> >
> > "The OpenBSD Foundation is currently developing OS-agnostic, BSD-licensed
> > replacements <http://www.openbsdfoundation.org/gsoc2014.html#systemd>,
> > which will likely prove the most viable."
> >
> > Is this even something that's being worked on?
> >
> > http://www.openbsdfoundation.org/gsoc2014.html#systemd
> >
> > Just curious.
Agreed, the wording used on boycottsystemd.org is clearly misleading, and
spreads misinformation.
> That writeup is agenda-driven bullshit.
>
>
> 1) The OpenBSD Foundation does not develop any kind of software.
>They are a funding agency for the OpenBSD project.
>
> 2) The OpenBSD Project is what does development. The OpenBSD project
>is not doing any such developement.
>
> 3) There is a Google-selected GSOC project by a student to attempt
>to make some sense -- in various forms -- of the problems introduced
>by systemd, and try to resolve them -- in various forms -- to make
>supposedly previously portable software once again portable.
>
> 4) There are some OpenBSD Project developers helping that student, I
>believe.
Yes, we've mentored Ian during the 4 months of the GSOC project, which
was (according to our own standards, and Google's) a success. We
exchanged a lot on the design and architecture of the project, and he
wrote all the code.
> 4) There is absolutely nothing anywhere saying the result would be
>OS-agnostic. Someone is totally full of shit.
Well, the topic of the project (per
http://www.openbsdfoundation.org/gsoc2014.html#systemd)
was " Provide bsd-licenced, os-agnostic, dbus-api compatible
systemd-{hostnamed,timedated,localed,logind} replacements", so even if
the development was done so far on OpenBSD, it was meant from the start
to be easily 'portable' across operating systems, since there was no
reason to do the same mistake systemd developers did on purpose (ie make
it linux-only). Depending on glib and d-bus, it was *never* meant to be
part of the basesystem.
The portable part is not done now, since we want a working &
full-featured codebase first. But istr a freebsd developer already
started working on porting what we have to freebsd, and i think someone
looked into making it work on linux, because there is interest in having
alternatives to systemd there.
> 5) There is nothing to show.
Sorry, but there *is* code to show. As one already said, there's an
article on undeadly about the
project (http://www.undeadly.org/cgi?action=article&sid=20140915064856),
There is a code repository
(https://uglyman.kremlin.cc/gitweb/gitweb.cgi?p=systembsd.git;a=summary),
and there is a WIP port for anyone who wants to help developing/debug it.
(https://github.com/jasperla/openbsd-wip/tree/master/sysutils/systembsd)
So yes, that's not a fully working full-fledged replacement for systemd
components needed by some desktop components from the ports tree *yet*,
but at least we have the start of it, and its architecture is solid.
Contributions (with code!) are of course welcome.
Landry
Re: HD 'Analysis'
On Thu, May 14, 2009 at 12:42 AM, Marco Peereboom wrote: > I once wrote a fancy dd to recover a disk that jordan used for pictures. > It worked well enough to get the crap off before the disk totally. > Anyway I dusted it off and added a man page and stuff. Have a look at > http://www.peereboom.us/diskrescue/ > if you want to play. Ah, and btw we have sysutils/testdisk in ports for all those kind of recoveries. Landry
Re: About the OpenBSD repository
Hi, can we please stop this ? Some devs are aware of dvcs advantages, some use them locally for their own developments, some share things between some devs using dvcs public repos, some thinks that CVS has some weaknesses (which *might* be adressed in opencvs, once it is feature-compliant with gnucvs) some are against them and don't want to hear about them (for their own reasons), we've already discussed that at length on misc, there's no point in arguing more. Thx.
Re: NFS exporting /usr/ports and -maproot=root
Re I'll add to that debug session that it works if i add spud to exports line and locally mount /usr/ports : [EMAIL PROTECTED]:~/ #mount -t nfs spud:/usr/ports /tmp/blah/ [EMAIL PROTECTED]:~/ #touch /tmp/blah/test And tcpdump log on lo0 : [EMAIL PROTECTED]:~/ #tcpdump -s 65000 -i lo0 port nfsd or port sunrpc tcpdump: listening on lo0, link-type LOOP 20:13:08.734530 spud.889 > spud.nfsd: xid 0x74c57a86 124 access fh 33,252/664798720 0002 20:13:08.734847 spud.nfsd > spud.889: xid 0x74c57a86 reply ok 120 access c 0002 20:13:08.734982 spud.889 > spud.nfsd: xid 0x74c57aba 120 getattr fh 33,252/3064333824 20:13:08.735117 spud.nfsd > spud.889: xid 0x74c57aba reply ok 112 getattr REG 644 ids 1000/9 sz 0x0 20:13:08.735230 spud.889 > spud.nfsd: xid 0x74c57ae3 128 lookup fh 33,252/664798720 "test" 20:13:08.735396 spud.nfsd > spud.889: xid 0x74c57ae3 reply ok 236 lookup fh 33,252/3064333824 20:13:08.735684 spud.889 > spud.nfsd: xid 0x74c57bbb 124 access fh 33,252/664798720 0002 20:13:08.735859 spud.nfsd > spud.889: xid 0x74c57bbb reply ok 120 access c 0002 20:13:08.736009 spud.889 > spud.nfsd: xid 0x74c57bd4 148 setattr fh 33,252/3064333824 20:13:08.736208 spud.nfsd > spud.889: xid 0x74c57bd4 reply ok 144 setattr Landry On 10/19/07, Landry Breuil <[EMAIL PROTECTED]> wrote: > On 10/19/07, Jan Stary <[EMAIL PROTECTED]> wrote: > > > > > Again: set WRKOBJDIR on the client side and you don't need > > > > > to be writing in the remotely mounted tree at all. > > > > > I'm already setting WRKOBJDIR outside nfs-dir, the problem is more for > > > /usr/ports/packages .. i'd like it to be shared too, to install the > > > same package on various sparc64 for example. And this dir needs to be > > > root-writable, as it uses sudo.. > > > > You also need to set DISTDIR and PKGREPOSITORYBASE > > - see examples in the FAQ. > > I now several workarounds and tweaks like this exists :) I just want > to understand why this setup doesn't work. > > > > I'd put it outside nfs if i don't find a solution, but btw i'm more > > > interested in understanding why -maproot=root doesn't work in my case > > > > Send your complete server:/etc/exports, client:/etc/fstab, > > verbose log of server:mountd, server:nfsd, and a full (-s 65000) tcpdump > > of the communication. > > server is spud, client for tests is renton (10.246.200.10). > server:/etc/exports: > /nfsroot/net_sparc64 -ro allison > /nfsroot/open_sparc64 -ro swanney > /usr/ports -maproot=0:0 renton swanney lizzy > > client fstab: > spud:/usr/ports /usr/ports nfs rw,nosuid 0 0 > > mountd -d output: > Got line /nfsroot/net_sparc64 -ro allison > Making new ep fs=0x0,0xfc214a5e > doing opt -ro allison > got host allison > exporting /nfsroot/net_sparc64 > Got line /nfsroot/open_sparc64 -ro swanney > Found ep fs=0x0,0xfc214a5e > doing opt -ro swanney > got host swanney.fr.homeunix.org > exporting /nfsroot/open_sparc64 > Got line /usr/ports -maproot=0:0 renton swanney lizzy > Found ep fs=0x0,0xfc214a5e > doing opt -maproot=0:0 renton swanney lizzy > got host renton.fr.homeunix.org > got host swanney.fr.homeunix.org > got host lizzy.fr.homeunix.org > exporting /usr/ports > exporting /usr/ports > exporting /usr/ports > unexporting / / > Getting mount list. > Here we go. > Got mount request from 10.246.200.10 > rpcpath: /usr/ports > Mount successful for /usr/ports by 10.246.200.10. > > (here i've ran sudo mount /usr/ports on the client) > > renton:~/ $ls -ld /usr/ports > drwxrwxr-x 47 root wsrc 1024 Oct 19 19:12 /usr/ports (same on > client and server) > renton:~/ $id > uid=1000(landry) gid=1000(landry) groups=1000(landry), 0(wheel), 9(wsrc) > renton:~/ $touch /usr/ports/test > renton:~/ > > Here i have tcpdump output (same for server and client) for this > sucessful file creation : > 19:56:29.030254 renton.695 > spud.nfsd: xid 0xbb06905b (NFSv3) 112 > lookup fh 33,252/664798720 "test" > 19:56:29.030771 spud.nfsd > renton.695: xid 0xbb06905b reply ok 116 > lookup ERROR: No such file or directory > 19:56:29.030843 renton.695 > spud.nfsd: xid 0xbb069116 (NFSv3) 112 > lookup fh 33,252/664798720 "test" > 19:56:29.031099 spud.nfsd > renton.695: xid 0xbb069116 reply ok 116 > lookup ERROR: No such file or directory > 19:56:29.031131 renton.695 > spud.nfsd: xid 0xbb069170 (NFSv3) 144 > create fh 33,252/664798720 "test" > 19:56:29.033013 spud.nfsd > renton.695: xid 0xbb069170 reply ok 268 > create fh 33,252/3064333824 > 19:56:29.033097 renton.695 > spud.nfsd: xid 0xbb069202 (NFSv3) 104 > getattr fh 33,252/3064333824 > 1
OpenCON'07 is over..
And it was great ! Thanks goes to all the organizers who set up a great event, the talks were really interesting and highly technicals, and it was a great pleasure to meet in person people i only know by mailing-lists. Lunch and breaks were perfect too, and OpenSSH party a really nice event :) I'm looking forward to get the slides on the website, and will get the pictures out of my camera asap.. See you next year. Landry
Re: How to find all package files
On Jan 7, 2008 4:33 PM, Russell Gadd <[EMAIL PROTECTED]> wrote: > I am new to OpenBSD and I am not sure what is the correct way to find > packages. > > For example I have tried to install the xfce window manager, and at > first I looked at the list of files in the packages list and there were > a lot of files with xfce in the name / description. I looked for one > which said something like "this is the main package for xfce4" so that > installing that and all dependencies would do the job, but couldn't find > such a file. I resorted to looking for xfce in the INDEX and using all > files where this was mentioned, i.e. forming a list with > > grep "xfce" INDEX | cut -d "|" -f 1 | sed 's/$/.tgz/g' > > /tmpdir/xfce4pkglist > > then > pkg_add `cat /tmpdir/xfce4pkglist` > > I realise that for such a package there would be some parts which were > optional, so needed to be separated out, but I thought there must be a > more reliable way to determine which files to include. > > Is there a better way to do this? I recently added a README.OpenBSD to xfce4-session, this may help you (concerns -current, but may be probably applied to -stable) see http://www.openbsd.org/cgi-bin/cvsweb/ports/x11/xfce4/xfce4-session/files/README.OpenBSD?rev=1.1&content-type=text/x-cvsweb-markup And no, there is no meta-package and things like that. Landry
Re: GDM-2.18.2 & XFCE4.4.1 issue at OpenBSD 4.2-stable-i386
On Feb 5, 2008 9:49 AM, Jon Garate <[EMAIL PROTECTED]> wrote: > Hello people @ misc, > I've successfully built both the -stable base system and the X system > (xenocara) and I'm trying to setup GDM properly to combine with XFCE4. > Right now, XFCE4 works after issuing startx command (I've configure > .xinitrc properly apparently). with /usr/local/bin/startxfce4 i suppose ? > I've done some research in the net and everywhere I could but I don't > seem to get it working through GDM login. Can anybody shed some light in > setting up .xinitrc/.xsession or whatever files I need to get it running > properly? See http://wiki.xfce.org/faq#starting_xfce, section 'Setting up GDM' Landry
Re: GDM-2.18.2 & XFCE4.4.1 issue at OpenBSD 4.2-stable-i386
On Feb 5, 2008 1:38 PM, Jon Garate <[EMAIL PROTECTED]> wrote: > Jon Garate(e)k dio: > > > Landry Breuil(e)k dio: > >> On Feb 5, 2008 9:49 AM, Jon Garate <[EMAIL PROTECTED]> wrote: > >> > >>> Hello people @ misc, > >>> I've successfully built both the -stable base system and the X system > >>> (xenocara) and I'm trying to setup GDM properly to combine with XFCE4. > >>> Right now, XFCE4 works after issuing startx command (I've configure > >>> .xinitrc properly apparently). > >>> > >> > >> with /usr/local/bin/startxfce4 i suppose ? > >> > >> > >>> I've done some research in the net and everywhere I could but I don't > >>> seem to get it working through GDM login. Can anybody shed some > >>> light in > >>> setting up .xinitrc/.xsession or whatever files I need to get it > >>> running > >>> properly? > >>> > >> > >> See http://wiki.xfce.org/faq#starting_xfce, section 'Setting up GDM' > >> > >> Landry > >> > >> > >> > > Thanks, I already knew the startxfce4 method., which manually works. > > I've also taken a look at xfce's wiki site and tried setting > > Xfce.desktop in the folders mentioned, which didn't work. > > I also tried including Xfce.desktop in /usr/local/share/xsessions/ > > (which is where gnome.desktop is located) and configured it with the > > same permissions as gnome.desktop, still no success. I also tried > > setting "exec startxfce4" in both .xinitrc and .xsession files with > > proper permissions, guess what, no success. GDM keeps trying > > gnome(fail), then gnome failsafe(fail) and then xterm failsafe. > > Looks like some permissions of some file aren't correct but I just > > can't figure out. I include my Xfce.desktop file in here, just if it > > helps: > > > > [Desktop Entry] > > Encoding=UTF-8 > > Name=Xfce 4.4 Session > > Comment=Xfce 4.4 Session > > Exec=/usr/local/bin/startxfce4 > > Type=Application > > > > Jon > > > > > Ok, I just found the solution. As stated in this archive post: > http://archives.neohapsis.com/archives/openbsd/2007-11/0662.html > > If you install gdm from the package system, by default makes the file > "Xsession" in /etc/X11/gdm non executable. After changing execute > permissions (chmod +x) all the standart procedures (setting up .desktop > files, etc...) worked just fine. Just wondering if the package system > guys can change this up? :-) It is already fixed in -current. I've also just added an xfce4.desktop file to xfce4-session package, now it's provided by default. Landry
Re: The Dilbert Problem...
On Wed, Mar 5, 2008 at 1:18 PM, Mayuresh Kathe <[EMAIL PROTECTED]> wrote: > > On Wed, Mar 5, 2008 at 5:46 PM, Karl Sjodahl - dunceor > <[EMAIL PROTECTED]> wrote: > > > > On Wed, Mar 5, 2008 at 12:59 PM, Mayuresh Kathe > > <[EMAIL PROTECTED]> wrote: > > > Hi, > > > > > > There's a strange incident that's repeatable on my system (4.2). > > > > > > Open up Firefox, make it load "www.dilbert.com", then open another tab > > > and visit any other website, then do the same for 2~3 more tabs. > > > > > > The first (dilbert) tab takes a long time to load during which the > > > other tabs too show nothing, they get stuck at "Looking up..." > > > > > > Is it a Firefox problem or something to do with the system? > > > > > > Best, > > > > > > ~Mayuresh > > > > > > > > > > I have seen this on both Windows and OpenBSD. The later firefox > > releases (like from 2.0.0.3-2.0.0.5 something) I have seen problems > > with having more tabs open. > > I used to have a lot of tabs but now I have restricted myself to 3-4 > > or firefox is not useable. > > I forgot to mention, my Firefox version is 2.0.0.6 > Also I've only got a total of 3~4 tabs open while performing the Dilbert > test. > Taking your cue, I tried an experiment, I opened up 10 tabs, but > without the Dilbert site and all of them opened up in parallel. Seems like an ipv6-dns-resolution problem to me. My 2c.
Re: VPN solutions for OpenBSD to Windows
I second that -- OpenVPN is great. Easy and quick to set up, clients for most OSes (and you can re-use the config files across OSes. that was a nice bonus when the boss wanted his Mac to connect to the VPN). Unless there's another requirement that means you can't use OpenVPN, you should check it out. > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Peter Hopfgartner > Sent: Friday, December 22, 2006 6:09 AM > To: misc@openbsd.org > Subject: Re: VPN solutions for OpenBSD to Windows > > Can you better define your set up? > > If you want to connect from a Windows road warrior which may or may not > be behind a NAT, OpenVPN can hardly be beat in ease of use, robustness > etc. It runs fine as a service or on demand, has optionally a nice GUI > and I had no issues with packet length etc. > > If the Windows machine is not behind a NAT and is directly connected to > the Internet Greenbow is really a fine product. > > Regards > > Peter > > http://www.hopfgartner.it > > Edy wrote: > > Hi Peter, > > > > Have you look at OpenVPN? > > > > Please check out this document > > > > http://blog.innerewut.de/articles/2005/07/04/openvpn-2-0-on-openbsd > > > > Cheers, > > Edy > > > > [EMAIL PROTECTED] wrote: > >> Hi gang, > >> > >> I'm looking for peoples' experiences and advice for setting up a VPN > >> between OpenBSD (I will be using 4.0) and Windows XP/2000 systems. I > >> have tested the Greenbow client and it seems ok. What of the built-in > >> VPN client for the Windows OS? I am mostly interested in ease of > >> configuration and reliability of the tunnel. I am ok on IPSEC theory. > >> > >> Thanks in advance for any comments, > >> > >> Peter
Re: OT Was: Wanted: OpenBSD Systems Administrator
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > Of Diana Eichert > Sent: Wednesday, January 03, 2007 9:03 AM > To: OpenBSD > Subject: OT Was: Wanted: OpenBSD Systems Administrator > > On Tue, 2 Jan 2007, Jack J. Woehr wrote: > > > Tom Bombadil wrote: > > > The just guy sent one single e-mail asking if a bsd user wanted a > job, > > > which I bet many among us might be interested. > > > > I've certainly heard from consulting customers who got my info from > the > > consultants page at OpenBSD ... It's hard to understand why one can't > > post a job req on misc ... there's a jobs@ list for apache.org and > it's > > busy ... There's a fine line between job postings and headhunter poop > of > > course ... Why should we chase away employers looking for experts in > our > > slightly arcane and recondite OBSD environment? > > > > -- > > Jack J. Woehr > > Director of Development > > Absolute Performance, Inc. > > [EMAIL PROTECTED] > > 303-443-7000 ext. 527 > > See Jack ( see jack run, see jack talk ;) ) > > You make my point in your reply, apache.org has a jobs@ list as so do > several other projects. There's a reason. > > As far as "slightly arcane and recondite" I disagree, I consider the > "OBSD > environment" to be one of clarity and foresight. > > In regards to "Tom Bombadil", when you stop using characters from > Tolkien > to post I'll begin to listen. > > g.day to y'all > > diana I personally think that job postings help the community more than it hurts. The line between genuine job opportunities and "headhunter poop" should be easy to spot. I certainly think it could fall under the purview of "misc". Of course, having a jobs list would indeed make the issue even more clear-cut. I wonder how you'll poke fun at my name? :) Peter
Re: OpenBSD Router woes
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > Of BradenM - Sonoma Computer > Sent: Monday, February 05, 2007 4:37 PM > To: misc@openbsd.org > Subject: OpenBSD Router woes > > So, it goes like this; > OpenBSD is installed and functional and in the process of becoming a > PF/Router > box. My problem is this, I have three ethernet cards, each assigned the > names > rl0 - rl2. rl0 is the ethernet card that is recieving an IPv4 address > from my > SBC router, rl1 will be listening to dhcp requests which I have already > setup > using dhcpd, and rl2 will be listening for dhcp requests but will not > be > connected to a computer but a wireless access point. My question, and > thus my > problem, is this: I have setup ip fowarding using sysctl and am now > wondering > how I am to distribute my internet connection from rl0 to rl1 and 2? > Are PF > rules required or do I have to write to the configuration file for the > ethernet adapters? Check the Network Address Translation section of the PF User's Guide. That should help.
i386 Crash after a certain uptime ?
Hi, I just had, for the second time, a weird freeze on an old Celeron 400 running OpenBSD/i386. Box was unreachable through network, but still up. Syslog normal warning messages on console, no DDB prompt or panic backtrace. Plugging a keyboard didn't give me access to the console, i had to hard reset the box. Nothing in logs, and box is not running special software (postfix, irssi, httpd, named, courier-imap...) The weird thing is that i had the same issue in september last year, box freezed after 196 days and was running 3.8 at this moment. This was the occasion to update to 3.9. And this time, it crashed after 197 days. Coincidence ? Hardware counter overflow in nic ? Pf counter overflow ? dmesg is available here : http://gruiik.info/stuff/dmesg I can provide more info if needed. Thanks for any indication, Landry
Xdm fix in Xenocara
Hi misc@, dunno if it has already been reported, since the switch to xenocara xdm didn't want to start anymore, it was complaining (/var/log/xdm.log) for missing files in /usr/X11R6/lib/X11/xdm (which didn't exist..) Maybe it's only on my boxes (regularly updated from snapshots, not fresh installs) As a quickfix i manually symlinked /usr/X11R6/lib/X11/xdm@ -> /etc/X11/xdm/ and it works now, but i suppose it should be fixed in xdm at compile/configure-time ? Landry
Re: Xdm fix in Xenocara
2007/5/10, Matthias Kilian <[EMAIL PROTECTED]>: > > On Thu, May 10, 2007 at 09:22:58AM +0200, Landry Breuil wrote: > > dunno if it has already been reported, since the switch to xenocara xdm > > didn't want to start anymore, > > it was complaining (/var/log/xdm.log) for missing files in > > /usr/X11R6/lib/X11/xdm (which didn't exist..) > > That's a configuration problem, you probably still have references > to /usr/X11R6/lib/X11/xdm in your /etc/X11/xdm/xdm-config. Yes, you're right, files in /etc/X11/xdm are rather outdated (they're here since the installation..) Installing xetc41.tgz solved this :) (blame me, i don't update etc41.tgz and xetc41.tgz each times) Landry
s3virge pci card on xenocara/sparc64 ?
Hello, i'm trying to make an old Ultra 10 working in dual-screen/xinerama, with onboard ati (works fine at [EMAIL PROTECTED]) and additional old s3 pci (detected by kernel). I've seen on xenocara/driver/Makefile that s3virge driver, which this card normally uses on other archs/OS, is not enabled on sparc64. Is there a particular reason, there is a known problem with this hardware, or is it only because sparc64 are normally only bundled/tested with ati's (as stated on http://www.openbsd.org/sparc64.html) ? May i try building the driver, or it's not worth trying ? is it possible to build _only_ the driver/ part of xenocara, taking the rest of xenocara from snapshot ? I've tried with wsfb(4), but the primary card is always taken, even when specifiying BusID.. If i make the card work, do i have a chance to get Xinerama ? Mandatory dmesg : http://gcu.info/~gaston/sparc64/dmesg.boot Xorg.0.log, when trying with wsfb and BusID 2:1:0 and using onboard ati as default : http://gcu.info/~gaston/sparc64/Xorg.0.log Thanks, Landry
Re: s3virge pci card on xenocara/sparc64 ?
2007/5/13, Edd Barrett <[EMAIL PROTECTED]>: > > Hi, > > > On 13/05/07, Landry Breuil <[EMAIL PROTECTED]> wrote: > > Hello, > > > > i'm trying to make an old Ultra 10 working in dual-screen/xinerama, with > > onboard ati (works fine at [EMAIL PROTECTED]) and additional old s3 pci > (detected > > by kernel). > > As far as I am aware sparc64 requires "OpenBoot aware" graphics cards. > I'm not sure how it works in the case of a secondary graphics card for > X only however. > > Just an idea. > > If it doesnt work then try a creator3d / elite3d? -- > Best Regards > > Edd > > PS. Would you mind if I grab that xorg.conf? I have a U10 that I never > got X working on. here it is : http://gcu.info/~gaston/sparc64/xorg.conf-u10 basically, it's the result of X -configure + a few tweaks to make the sun mouse work. I think i'll try to build the s3virge driver upon my next upgrade on this box, this'd be really neat to make this old card work with it. Landry
Keys lots in Xenocara update ?
Hello, i lost various keys in last Xenocara update (i had the same issue when updating to snapshot with *41.tgz from 22/5 + x*41.tgz from 8/5 and to latest snapshot from ftp.ca, *41.tgz from 25/5 + x*41.tgz from 24/5). i removed /etc/X11 and /usr/X11R6 before update, and unrolled xetc41.tgz. to get my missing keys back, i have to load this .Xmodmap : keycode 211 = Left keycode 208 = Up keycode 213 = Right keycode 216 = Down keycode 209 = Prior keycode 217 = Next keycode 165 = Control_R keycode 192 = ISO_Level3_Shift keycode 207 = Home keycode 215 = End keycode 218 = Insert keycode 219 = Delete i'm using a dell d410, internal/external keyboard worked really fine with previous snapshot from ~1/5. Keyboard config in xorg.conf (tried with both 'dell' and 'pc105' for XkbModel, wskbd1 is here for an external usb keyboard.) Section "InputDevice" Identifier "Keyboard0" Driver "kbd" Option "Protocol" "wskbd" Option "Device" "/dev/wskbd0" #"/dev/wskbd1" Option "XkbModel" "dell"#"pc105" Option "XkbRules" "xorg" Option "XkbLayout" "fr" EndSection dmesg : http://gruiik.info/stuff/dmesg.boot did i miss something ? i can live with this .Xmodmap, just wanted to report this issue. the same upgrade on my desktop machine with external usb keyboard didn't show this problem. thanks for any help, Landry ps : as a sidenote, acpi works really fine on this laptop ! hw.sensors.acpitz0.temp0=53.55 degC (zone temperature) hw.sensors.acpiac0.indicator0=On (power supply) hw.sensors.acpibat0.volt0=11.10 VDC (voltage) hw.sensors.acpibat0.volt1=11.83 VDC (current voltage) hw.sensors.acpibat0.amphour0=6.86 Ah (last full capacity) hw.sensors.acpibat0.amphour1=0.72 Ah (warning capacity) hw.sensors.acpibat0.amphour2=0.22 Ah (low capacity) hw.sensors.acpibat0.amphour3=1.43 Ah (remaining capacity), OK hw.sensors.acpibat0.raw0=2 (battery charging), OK hw.sensors.acpibat0.raw1=2699 (rate) hw.sensors.acpidock0.indicator0=Off (not docked)
Re: Keys lots in Xenocara update ?
On Sat, May 26, 2007 at 06:53:23PM +0200, Antoine Jacoutot wrote: > On Sat, 26 May 2007, Matthieu Herrb wrote: > >>Section "InputDevice" > >>Identifier "Keyboard0" > >>Driver "kbd" > >>Option "Protocol" "wskbd" > >>Option "Device" "/dev/wskbd0" #"/dev/wskbd1" > >>Option "XkbModel" "dell"#"pc105" > >>Option "XkbRules" "xorg" > >>Option "XkbLayout" "fr" > >>EndSection > > FYI, I use a dell d420 and I don't use Option "XkbModel" "dell", nor > "Protocol" and "Device" and it works fine. > But I don't use any external keyboard with it... so it might be a shot > in the air ;) > You were right, i commented Protocol, Device and XkbModel and now it works fine. I didn't get errors in X.org.log, but it seems that now Protocol is autodetected as "standard". I don't remember why i had to put "wskbd" to make things work right. Autodetection in Xorg/Xenocara is becoming better and better :) Thanks, Landry
cvs update 'pull-only-changed' model ?
Hello, I was wondering if some people already had the idea of setting some kind of 'pull-only-changed' model for cvs update. I know available methods (cvssync, anoncvs and cvsup) are full pull-model, where we compare the full local cvs copy with the whole remote repository, which is : - time and network consuming for the user - bandwidth and load consuming for the server Nowadays, we have various methods to be aware of changes in the repository, the first coming to mind being subscribing to src-changes@ and ports-changes@, or refreshing a RSS for a more "user-level" view. For example, i know the man running freshbsd.org uses ruby and a set of procmail filters to update his website. This becomes more a 'push-like' model :) So, basically, the idea would be : 1) parse (perl !) upon mail reception the *-changes@ ml-output, gather Modified/Added/Removed/Imported files/directories 2) put them in a queue/file 3) use you traditional cvs update method to update _only_ modified parts of the tree, either manually or with an other cronjob 4) empty the queue Is it worth trying it, or cvs is already designed to be the least time/bandwith-consuming possible, and the gain would be near to zero ? I know this proposal assumes that your tree is always near-up-to-date, or that you run manual updates if changes@ are not received in a period of time or update fails, otherwise it may lead to a tree being sync only for some parts, and other parts being out-of-sync. May this idea lead to errors in cvs internal files ? What methods guys are you using ? Normal automated anoncvs up ? Manually update only changed parts ? Is the load on anoncvs servers neglectable ? If it has already been discussed, sorry for being lame.. Thanks for any comments/input, Landry
Re: cvs update 'pull-only-changed' model ?
2007/5/28, Christian Weisgerber <[EMAIL PROTECTED]>: > > Landry Breuil <[EMAIL PROTECTED]> wrote: > > > I was wondering if some people already had the idea of setting some kind > of > > 'pull-only-changed' model for cvs update. > > I know available methods (cvssync, anoncvs and cvsup) are full > pull-model, > > where we compare the full local cvs copy with the whole remote > repository, > > No. CVSync and CVSup only send a meta data summary to the server, the > server compares this against its own database and only sends diffs of > the changes back to the client. > > > which is : > > - time and network consuming for the user > > - bandwidth and load consuming for the server > > It really isn't. And any well-configured CVSync or CVSup server > keeps a meta data summary in a "scan file" around, so it just needs > to compare this with the summary sent by the client and _not_ go > and stat() every file. Ok, i see now. AnonCVS is a different story. CVS remote checkout was not designed > as a mirroring tool and is horrendously inefficient in every respect. Yes, i was having the impression that using AnonCVS was terribly slow and resource-consuming.. updating the ports-tree take 5-10mns. So, way better using cvsync or cvsup/csup. I suppose CTM has been deprecated ? It disappeared from the 'official methods' three years ago, page is still here but snaps/diffs are not generated since two years... i haven't found an 'official support drop'. > What methods guys are you using ? > > Use CVSync or CVSup to update a local repository copy, which is > fast and bandwidth-efficient, and run local cvs update from that > local repository. > > Alternatively, if you have no use for the repository, use CVSup (or > the CSup client) in checkout mode. I'm regularly updating ports i'm working on, that's why i was asking if it was possible to update _only_ modified parts of the tree instead of comparing the whole tree. using AnonCVS was my mistake :) No comments on my initial idea ? I suppose i'll implement it 'for fun' and may submit it here someday, if ppl are interested. Thanks for the clarification, Landry
Problem installing 4.1/sparc64 on Sun Blade 100
Hello, i'm trying to install OpenBSD/Sparc64 on a Blade 100, tried various methods/versions (all described in INSTALL.sparc64), they all fail after 'Trying bsd' and stall. Where can i have a start point to debug what happens/doesn't happen ? I've tried : - 3.9-release Cdrom (original version from wim) - 4.1-release cd41.iso taken from mirror/4.1 - 4.1-current cd41.iso taken from snapshots - knowing cd-install are not really good on blades, i tried netbooting bsd.rd 4.1-release and -current, using another obsd box as rarpd/tftpd/rpc.bootparamd/nfsd/mountd server, set like described in diskless(8). The weird thing is that ofwboot.net is taken from tftpd after 'boot net bsd.rd', ran, i see the first twolines : OpenBSD 4.1 (obj) #0: -build-date- [EMAIL PROTECTED]:/usr/src/sys/arch/sparc64/compile/GENERIC then Trying bsd and stalled-nothing more on the screen. but i see no mount requests in mountd -d output. i tried following https://www-s.acm.uiuc.edu/wiki/comments/OpenBSD+Sparc64#notes documentation too. security-mode is set to none in OBP, and firmware version is 4.0.45, i don't think it needs a firmware upgrade. Could it be a hardware problem ? How can i get more debug information ? Thanks for any hints. Next step will be trying to use a floppy (gee, i have to find a floppy reader and a disk), or putting the disk in my U10 (which works fine) and try to do the install on it. Landry
Re: Problem installing 4.1/sparc64 on Sun Blade 100
2007/5/31, Markus Lude <[EMAIL PROTECTED]>: > > On Wed, May 30, 2007 at 11:49:45PM +0200, Landry Breuil wrote: > > Hello, > > > > i'm trying to install OpenBSD/Sparc64 on a Blade 100, tried various > > methods/versions (all described in INSTALL.sparc64), they all fail after > > 'Trying bsd' and stall. Where can i have a start point to debug what > > happens/doesn't happen ? > > > > I've tried : > > - 3.9-release Cdrom (original version from wim) > > - 4.1-release cd41.iso taken from mirror/4.1 > > - 4.1-current cd41.iso taken from snapshots > > - knowing cd-install are not really good on blades > > I never had any problems on the blade 100 here with installations from > cd using the image on the ftp servers. My first version was 3.8, now > running -current. > > Have you tried booting from a cd with cd41.iso from 4.1 or snapshots as > image? Yes, that was try 2 and try 3 :) As advidec by Ted Bullock, i'll try to update the firmware to the latest version to see if it changes something.. trying to boot the debian etch netinst stalls too at 'Booting Linux'. I'm pretty sure this machine was running SunOS before, i don't know if it's related. Maybe trying a firmware reset too. Markus, what is the version of the OBP on your blade ? (dev /openprom .properties says it) Landry
Re: Matrox G200 Quad supported?
2007/6/4, Timo Schoeler <[EMAIL PROTECTED]>: > > Hi, > > although I had a bunch of dual-head (or more) setups in my life, it was > all in the sgi, Sun or Apple universe. I never did this on OpenBSD; > however, as everything I touched during the years on OpenBSD machines > ran out of the box :) I wonder whether a dual (or triple screen) setup > is supported using an old, good Matrox G200 Quad. > > Especially, will xenocara help here? This kind of setup is fully supported by X.org, whether it's with Xenocara or older 6.9 X.org for previous releases. Triple-screen worked fine here on i386 with 4.0, 4.1 or current with two nvidia cards (GF4mx + GF2mx) and an ooold matrox millenium. But iirc, xinerama is not supported for sparc/sparc64 (lacks support in kernel), dunno for other archs (ok for amd64 i suppose). Landry
Re: Problem installing 4.1/sparc64 on Sun Blade 100
2007/5/31, Ted Bullock <[EMAIL PROTECTED]>: > > I had the same problem until I updated the firmware to 4.17.1 -Ted > > Landry Breuil wrote: > > Hello, > > > > i'm trying to install OpenBSD/Sparc64 on a Blade 100, tried various > > methods/versions (all described in INSTALL.sparc64), they all fail after > > 'Trying bsd' and stall. Where can i have a start point to debug what > > happens/doesn't happen ? > > > > I've tried : > > - 3.9-release Cdrom (original version from wim) > > - 4.1-release cd41.iso taken from mirror/4.1 > > - 4.1-current cd41.iso taken from snapshots > > - knowing cd-install are not really good on blades, i tried netbooting > > bsd.rd 4.1-release and -current, using another obsd box as > > rarpd/tftpd/rpc.bootparamd/nfsd/mountd server, set like described in > > diskless(8). The weird thing is that ofwboot.net is taken from tftpd > after > > 'boot net bsd.rd', ran, i see the first twolines : > > OpenBSD 4.1 (obj) #0: -build-date- > > [EMAIL PROTECTED] > :/usr/src/sys/arch/sparc64/compile/GENERIC > > then > > Trying bsd > > and > > stalled-nothing more on the screen. > > > > but i see no mount requests in mountd -d output. > > i tried following > > https://www-s.acm.uiuc.edu/wiki/comments/OpenBSD+Sparc64#notesdocumentation > > too. > > > > security-mode is set to none in OBP, and firmware version is 4.0.45, i > don't > > think it needs a firmware upgrade. > > Could it be a hardware problem ? How can i get more debug information ? > > > > Thanks for any hints. > > > > Next step will be trying to use a floppy (gee, i have to find a floppy > > reader and a disk), or putting the disk in my U10 (which works fine) and > try > > to do the install on it. > > > > Landry Upgrading to 4.17.1 didn't solved the issue here i'm still having the same problem, kernel hanging just after "Trying bsd", either using netboot or cdrom and various versions. I had no problem installing -current on Ultra60, even with a really older firmware version.. Really annoying. If anyone has a hint to debug this issue.. Landry
Re: Problem installing 4.1/sparc64 on Sun Blade 100
2007/6/7, Landry Breuil <[EMAIL PROTECTED]>: > > > > 2007/5/31, Ted Bullock <[EMAIL PROTECTED]>: > > > > I had the same problem until I updated the firmware to 4.17.1 > > -Ted > > > > Landry Breuil wrote: > > > Hello, > > > > > > i'm trying to install OpenBSD/Sparc64 on a Blade 100, tried various > > > methods/versions (all described in INSTALL.sparc64), they all fail > > after > > > 'Trying bsd' and stall. Where can i have a start point to debug > > what > > > happens/doesn't happen ? > > > > > > I've tried : > > > - 3.9-release Cdrom (original version from wim) > > > - 4.1-release cd41.iso taken from mirror/4.1 > > > - 4.1-current cd41.iso taken from snapshots > > > - knowing cd-install are not really good on blades, i tried netbooting > > > bsd.rd 4.1-release and -current, using another obsd box as > > > rarpd/tftpd/rpc.bootparamd/nfsd/mountd server, set like described in > > > diskless(8). The weird thing is that ofwboot.net is taken from tftpd > > after > > > 'boot net bsd.rd', ran, i see the first twolines : > > > OpenBSD 4.1 (obj) #0: -build-date- > > > [EMAIL PROTECTED] > > :/usr/src/sys/arch/sparc64/compile/GENERIC > > > then > > > Trying bsd > > > and > > > stalled-nothing more on the screen. > > > > > > but i see no mount requests in mountd -d output. > > > i tried following > > > https://www-s.acm.uiuc.edu/wiki/comments/OpenBSD+Sparc64#notesdocumentation > > > too. > > > > > > security-mode is set to none in OBP, and firmware version is 4.0.45, i > > don't > > > think it needs a firmware upgrade. > > > Could it be a hardware problem ? How can i get more debug information > > ? > > > > > > Thanks for any hints. > > > > > > Next step will be trying to use a floppy (gee, i have to find a floppy > > > > > reader and a disk), or putting the disk in my U10 (which works fine) > > and try > > > to do the install on it. > > > > > > Landry > > > Upgrading to 4.17.1 didn't solved the issue here i'm still having the > same problem, kernel hanging just after "Trying bsd", either using > netboot or cdrom and various versions. > I had no problem installing -current on Ultra60, even with a really older > firmware version.. > > Really annoying. If anyone has a hint to debug this issue.. > I'm starting to suspect hardware, because even with this OBP upgrade i didn't manage to start the install of FreeBSD/sparc, NetBSD/sparc64, and various flavors of Linux/Sparc. All the installers start a kernel, and hangs at various places in kernel startup. It's not a question of serial console redirection, because i can ping the host when the boot starts, and it doesn't respond to pings as soon as it stalls during boot process. (And i don't have a db25 compatible serial cable..). Could it be memory ? hard disk ? Box has a 256mb + 512mb , and i don't know a way to test this memory without os on the box. Smth like memconf http://myweb.cableone.net/4schmidts/memconf.html or memtest for sparc would be appreciated. I'll try maybe setenv diag-switch? true setenv diag-level max reset but i really have no more ideas to boot this Blade 100. (and various flavors of openbsd works really well on Ultra 10 and ultra 60 here) Landry
Re: Problem installing 4.1/sparc64 on Sun Blade 100
2007/6/7, Maxim Belooussov <[EMAIL PROTECTED]>: > > > > > I'm starting to suspect hardware, because even with this OBP upgrade i > > didn't manage to start the install of FreeBSD/sparc, NetBSD/sparc64, and > > various flavors of Linux/Sparc. All the installers start a kernel, and > hangs > > at various places in kernel startup. It's not a question of serial > console > > redirection, because i can ping the host when the boot starts, and it > > doesn't respond to pings as soon as it stalls during boot process. (And > i > > don't have a db25 compatible serial cable..). > > > > Could it be memory ? hard disk ? Box has a 256mb + 512mb , and i don't > know > > a way to test this memory without os on the box. Smth like memconf > > http://myweb.cableone.net/4schmidts/memconf.html or memtest for sparc > would > > be appreciated. > > > > remove one of the ram sticks and try again? > Ok, so sorry for all this noise, this was a hw issue. 'set diag-switch? true' at OBP prompt showed POST errors on DIMM1, I swapped both memory modules, and POST was happy. In five minutes, box was installed, and now happily runs -current. I really should learn OBP diagnostic commands. Definitely, this couldn't be an OpenBSD issue :) Thanks again to all devs for such a wonderful OS. Landry Dmesg for the record : http://gruiik.info/stuff/dmesg.lizzy
Scheduled packages bulk build for i386 ?
Hello, Just for the record, i know this is normal as we're tracking -current, but we can't install/update packages on an installation updated with latests snapshots (packages are lagging two weeks behind) : Can't install screen-4.0.3p0: lib not found c.40.3 c.40.3: partial match in /usr/lib: major=41, minor=0 (bad major) (noticed the nice message from pkg_add ?) Btw, i'm NOT complaining !! I know i can still install/update through ports :) Is there a scheduled packages build ? And last question, is it possible to use/test FFS2 for root filesystem ? Will it be enabled someday by default in installer, or even better, having the choice between FFS1/FFS2 ? I tried a newfs -O2, but mounted partition still shows 'ffs' in mount output... how can we verify the created partition is _real_ FFS2 ? Thanks for your work, Landry
Re: Scheduled packages bulk build for i386 ?
2007/6/10, Otto Moerbeek <[EMAIL PROTECTED]>: > > > On Sun, 10 Jun 2007, Landry Breuil wrote: > > > Hello, > > > > Just for the record, i know this is normal as we're tracking -current, > but > > we can't install/update packages on an installation updated with latests > > snapshots (packages are lagging two weeks behind) : > > Can't install screen-4.0.3p0: lib not found c.40.3 > > c.40.3: partial match in /usr/lib: major=41, minor=0 (bad major) > > (noticed the nice message from pkg_add ?) > > > > Btw, i'm NOT complaining !! I know i can still install/update through > ports > > :) > > > > Is there a scheduled packages build ? And last question, is it possible > to > > use/test FFS2 for root filesystem ? Will it be enabled someday by > default in > > installer, or even better, having the choice between FFS1/FFS2 ? > > I tried a newfs -O2, but mounted partition still shows 'ffs' in mount > > output... how can we verify the created partition is _real_ FFS2 ? > > Check dumps output. > > FFS2 for a root filesystem won't buy you much. The benefits of FFS2 > only come into play with very large filesystems. > > It's a bit too early to use FFS2 for anything but testing. But test > reports are appreciated. Yes, that's only for testing purposes, i don't plan to create king-size fs, only want to see if it works and report eventual breakages. Thanks for the hint (and for the mirror update !) Landry
Re: [OFF-TOPIC] MRTG and disk / CPU monitoring
2007/6/16, Henning Brauer <[EMAIL PROTECTED]>: > > * Rivanor P. Soares <[EMAIL PROTECTED]> [2007-05-16 15:48]: > > Does anyone around have an working setup of MRTG, monitoring CPU and > > disk utilization? > > I have been digging for it on the internet, to OpenBSD, but was not > > able to find anything "worth". > > save yourself the troube and check out symon in ports. I second henning on this point, symon is really great. Decentralized, easy-to-configure, integrates smoothly into OpenBSD, clean code.. perfect choice. http://www.xs4all.nl/~wpd/symon Landry
Re: xfce windows manager
2007/6/25, Nick Templeton <[EMAIL PROTECTED]>: > > Here are the packages (and their dependencies) that I install > to get a nice Xfce desktop: > > xfce-utils > xfce4-session > xfce4-taskbar This one is deprecated/was included in panel package now in 4.4 :) xfdesktop > xfwm4 don't forget xfce4-panel (surely installed as a dependency of one of these).. and some plugins if you want. Landry
Re: Rename multiple files at once
2007/6/27, Martin Schrvder <[EMAIL PROTECTED]>: > > 2007/6/27, Pieter Verberne <[EMAIL PROTECTED]>: > > How do I rename multiple files at once? I want to rename a list of > > files like: > > mmv is in ports. Or, if you're lazy and use X and all that kind of fancy stuff, you can use x11/xfce4/thunar, a file-manager with a builtin batch-renamer : http://thunar.xfce.org/documentation/C/advanced-topics.html#to-bulk-rename-fi les Landry
i386 performance degradation since recent snapshots
Hello,
i'm encountering a real performance problem since a recent update :
- previous snapshots dated around 22 may was working perfectly, launching my
session (xfce) took around 10-15sec. Launching firefox took around 5secs
- updated last week on 20 of june, launching my session takes around 1
minute and a half, launching ffx takes >20sec
- re-updated today (saw recent x*41.tgz sets update), no improvements
I'm using GENERIC recompiled with acpi devices enabled :
option ACPIVERBOSE
option ACPI_ENABLE
acpi0 at mainbus?
acpitimer* at acpi?
acpihpet* at acpi?
acpiac* at acpi?
acpibat*at acpi?
acpibtn*at acpi?
acpicpu*at acpi?
acpidock* at acpi?
acpiec* at acpi?
acpiprt*at acpi?
acpitz* at acpi?
(i know, everything != GENERIC is not supported, but acpi still needs
testers..)
Who should i blame ? X ? gtk ? Myself ? I didn't see much changes in the
ports i'm using, and system is generally slower in X. maybe acpi regression
?
The only notable change i see in dmesg is the addition of CPU states
(acpicpu0 at acpi0 C3, C3, C2, C1, FVS)
Attached two (lengthy..) dmesg, one from my previous kernel which worked,
and one from -current of today.
Thanks for any hints
Landry
May 25 17:05:20 begbie syslogd: start
May 25 17:05:20 begbie /bsd: OpenBSD 4.1-current (GENERIC) #1: Fri May 25
11:53:04 CEST 2007
May 25 17:05:20 begbie /bsd: [EMAIL PROTECTED]
:/usr/src/sys/arch/i386/compile/GENERIC
May 25 17:05:20 begbie /bsd: cpu0: Intel(R) Pentium(R) M processor
2.00GHz("GenuineIntel" 686-class) 2 GHz
May 25 17:05:20 begbie /bsd: cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,SBF,EST,TM2
May 25 17:05:20 begbie /bsd: real mem = 2138472448 (2039MB)
May 25 17:05:20 begbie /bsd: avail mem = 1945001984 (1854MB)
May 25 17:05:20 begbie /bsd: using 4278 buffers containing 107048960 bytes
(104540K) of memory
May 25 17:05:20 begbie /bsd: mainbus0 (root)
May 25 17:05:20 begbie /bsd: bios0 at mainbus0: AT/286+ BIOS, date 09/28/05,
BIOS32 rev. 0 @ 0xffe90, SMBIOS rev. 2.3 @ 0xf7810 (60 entries)
May 25 17:05:20 begbie /bsd: bios0: Dell Inc. Latitude D410
May 25 17:05:20 begbie /bsd: pcibios0 at bios0: rev 2.1 @ 0xf/0x1
May 25 17:05:20 begbie /bsd: pcibios0: PCI IRQ Routing Table rev 1.0 @
0xfb2d0/176 (9 entries)
May 25 17:05:20 begbie /bsd: pcibios0: PCI Interrupt Router at 000:31:0
("Intel 82371 ISA and IDE" rev 0x00)
May 25 17:05:20 begbie /bsd: pcibios0: PCI bus #3 is the last bus
May 25 17:05:20 begbie /bsd: bios0: ROM list: 0xc/0xf800! 0xcf800/0x800
May 25 17:05:20 begbie /bsd: acpi0 at mainbus0: rev 0
May 25 17:05:20 begbie /bsd: acpi0: tables DSDT FACP APIC ASF! MCFG SSDT
SSDT SSDT
May 25 17:05:20 begbie /bsd: acpitimer0 at acpi0: 3579545 Hz, 24 bits
May 25 17:05:20 begbie /bsd: acpi device at acpi0 from table DSDT not
configured
May 25 17:05:20 begbie /bsd: acpi device at acpi0 from table FACP not
configured
May 25 17:05:20 begbie /bsd: acpi device at acpi0 from table APIC not
configured
May 25 17:05:20 begbie /bsd: acpi device at acpi0 from table ASF! not
configured
May 25 17:05:20 begbie /bsd: acpi device at acpi0 from table MCFG not
configured
May 25 17:05:20 begbie /bsd: acpi device at acpi0 from table SSDT not
configured
May 25 17:05:20 begbie last message repeated 2 times
May 25 17:05:20 begbie /bsd: acpiprt0 at acpi0: bus 0 (PCI0)
May 25 17:05:20 begbie /bsd: acpiprt1 at acpi0: bus 2 (PCIE)
May 25 17:05:20 begbie /bsd: acpicpu0 at acpi0: CPU0: 2000, 1600, 1333,
1067, 800 MHz
May 25 17:05:20 begbie /bsd: acpicpu1 at acpi0: CPU1:
May 25 17:05:20 begbie /bsd: acpitz0 at acpi0, critical temperature: 100
degC
May 25 17:05:20 begbie /bsd: acpiac0 at acpi0: AC unit offline
May 25 17:05:20 begbie /bsd: acpibat0 at acpi0: BAT0: model: DELL U58676
serial: 20326 type: LION oem: Sony
May 25 17:05:20 begbie /bsd: acpibat1 at acpi0: BAT1: not present
May 25 17:05:20 begbie /bsd: acpibtn0 at acpi0: LID_
May 25 17:05:20 begbie /bsd: acpibtn1 at acpi0: PBTN
May 25 17:05:21 begbie /bsd: acpibtn2 at acpi0: SBTN
May 25 17:05:21 begbie /bsd: acpidock0 at acpi0: GDCK: not docked (0)
May 25 17:05:21 begbie /bsd: cpu0 at mainbus0
May 25 17:05:21 begbie /bsd: pci0 at mainbus0 bus 0: configuration mode 1
(no bios)
May 25 17:05:21 begbie /bsd: pchb0 at pci0 dev 0 function 0 "Intel
82915GM/PM/GMS Host" rev 0x03
May 25 17:05:21 begbie /bsd: vga1 at pci0 dev 2 function 0 "Intel
82915GM/GMS Video" rev 0x03: aperture at 0xdff0, size 0x1000
May 25 17:05:21 begbie /bsd: wsdisplay0 at vga1 mux 1: console (80x25, vt100
emulation)
May 25 17:05:21 begbie /bsd: wsdisplay0: screen 1-5 added (80x25, vt100
emulation)
May 25 17:05:21 begbie /bsd: "Intel 82915GM/GMS Video" rev 0x03 at pci0 dev
2 function 1 not configured
May 25 17:05:21 begbie /bsd: ppb0 at pci0 dev 28 function 0 "Intel 82801FB
PCIE" rev 0x0
Re: i386 performance degradation since recent snapshots
2007/6/28, Brian Candler <[EMAIL PROTECTED]>: > > > i'm encountering a real performance problem since a recent update : > > - previous snapshots dated around 22 may was working perfectly, > launching my > > session (xfce) took around 10-15sec. Launching firefox took around 5secs > > - updated last week on 20 of june, launching my session takes around 1 > > minute and a half, launching ffx takes >20sec > > Just a thought: > > - what does 'hostname' show? it immediately shows my correct hostname with fqnd - do you have an entry in /etc/hosts which maps this name to your correct > IP address? Yes, and also resolving localhost I've seen long delays in X startup if the system hostname can't be resolved > to an IP address (which can be very annoying in dynamic IP environments, > or > where DHCP changes the hostname). But this experience is with non-OpenBSD > boxes; I only use command line on OpenBSD. > > Also: > > - is your DNS working properly? (e.g. "nslookup www.openbsd.org" gives you > a positive answer in a reasonably short period of time, and > "nslookup xyz" gives you an NXDOMAIN answer also in a reasonably short > period of time) Immediate answer.. in fact, my network configuration didn't change, so it can't be this... Maybe related to http://marc.info/?l=openbsd-misc&m=11837716454&w=2, i'll try to perform disk i/o tests.. but i'm really stuck with this issue. Performance is really bad. I'll try too with acpi disabled. Thanks for any hint, Landry
Re: i386 performance degradation since recent snapshots
2007/7/3, Landry Breuil <[EMAIL PROTECTED]>:
>
>
>
> 2007/6/28, Brian Candler <[EMAIL PROTECTED]>:
> >
> > > i'm encountering a real performance problem since a recent update :
> > > - previous snapshots dated around 22 may was working perfectly,
> > launching my
> > > session (xfce) took around 10-15sec. Launching firefox took around
> > 5secs
> > > - updated last week on 20 of june, launching my session takes around 1
> > > minute and a half, launching ffx takes >20sec
> >
> > Just a thought:
> >
> > - what does 'hostname' show?
>
>
> it immediately shows my correct hostname with fqnd
>
> - do you have an entry in /etc/hosts which maps this name to your correct
> > IP address?
>
>
> Yes, and also resolving localhost
>
> I've seen long delays in X startup if the system hostname can't be
> > resolved
> > to an IP address (which can be very annoying in dynamic IP environments,
> > or
> > where DHCP changes the hostname). But this experience is with
> > non-OpenBSD
> > boxes; I only use command line on OpenBSD.
> >
> > Also:
> >
> > - is your DNS working properly? (e.g. "nslookup www.openbsd.org" gives
> > you
> > a positive answer in a reasonably short period of time, and
> > "nslookup xyz" gives you an NXDOMAIN answer also in a reasonably short
> >
> > period of time)
>
>
> Immediate answer.. in fact, my network configuration didn't change, so it
> can't be this...
>
> Maybe related to http://marc.info/?l=openbsd-misc&m=11837716454&w=2,
> i'll try to perform disk i/o tests.. but i'm really stuck with this issue.
> Performance is really bad. I'll try too with acpi disabled.
>
> Thanks for any hint,
>
More information on this... i have the feeling that it's a preloading
problem.. if i launch an app for the first time, it takes ages, but if i
relaunch it, it's nearly immediate. It happens with pure X apps and with gtk
apps. Something changed in preloading area or ld.so ? I have to admit that i
didn't update /etc at each upgrade, may this be a cause ? I didn't ran
ldconfig -P, as i saw this wasn't recommended..
I noticed another weird problem, which _may_ be related : sometimes, ls
doesn't show the full list of files in a directory, and the whole list on
the next run (either on ffs or ext2 partition). But disk led is not
flashing.
Output of atactl :
Model: FUJITSU MHV2080AH, Rev: 00A0, Serial #: NT9AT6429CH5
Device type: ATA, fixed
Cylinders: 16383, heads: 16, sec/track: 63, total sectors: 156301488
Device capabilities:
ATA standby timer values
IORDY operation
Device supports the following standards:
ATA-2 ATA-3 ATA-4 ATA-5 ATA-6 ATA-7
Master password revision code 0xfffe
Device supports the following command sets:
READ BUFFER command
WRITE BUFFER command
Host Protected Area feature set
Read look-ahead
Write cache
Power Management feature set
Security Mode feature set
SMART feature set
Flush Cache command
Device Configuration Overlay feature set
Automatic Acoustic Management feature set
Set Max security extension commands
Power-up in standby feature set
Advanced Power Management feature set
DOWNLOAD MICROCODE command
IDLE IMMEDIATE with UNLOAD FEATURE
SMART self-test
SMART error logging
Device has enabled the following command sets/features:
READ BUFFER command
WRITE BUFFER command
Host Protected Area feature set
Read look-ahead
Write cache
Power Management feature set
SMART feature set
Flush Cache command
Device Configuration Overlay feature set
Automatic Acoustic Management feature set
Advanced Power Management feature set
DOWNLOAD MICROCODE command
Thanks again for any help,
Landry
Re: Secure Network File System - Or Lack Thereof
2007/7/14, Edd Barrett <[EMAIL PROTECTED]>: > > Hi, > > On 14/07/07, Markus Lude <[EMAIL PROTECTED]> wrote: > > Whats your problem with AFS? > > It's not in base. man -k afs seems to say that AFS is in base, using ARLA implementation. (and OpenAFS is in ports) Landry
ACPI regression on i386 ?
Hello, i've been happily testing acpi following -current since six or seven months, and i've noticed a little regressions : - before June, it worked perfectly, halt -p power-offs the machine, i have acpi detected in dmesg. - after around start of June, halt -p doesn't poweroff the machine anymore, and i don't have anymore acpi detected in dmesg. But when i config -e /bsd and try to enable acpi, it says that acpi is already enabled. - i've retried several times, still no luck since June. may it be a local fuckup ? (Sorry, i don't exactly remember the date when it stopped working) What can i do to debug this ? I always uncomment (and remove two disable) all acpi lines in GENERIC : option ACPIVERBOSE option ACPI_ENABLE acpi0 at mainbus? acpitimer* at acpi? acpihpet* at acpi? acpiac* at acpi? acpibat*at acpi? acpibtn*at acpi? acpicpu*at acpi? acpidock* at acpi? acpiec* at acpi? acpiprt*at acpi? acpitz* at acpi? Is there something else to do somewhere ? Dmesg : http://gruiik.info/stuff/tmp/dmesg Acpidump : http://gruiik.info/stuff/tmp/acpidump (i have to note that it works perfectly on a dell D410) Thanks, Landry
Re: ACPI regression on i386 ?
On 7/18/07, Devin Smith <[EMAIL PROTECTED]> wrote: > Hello, > > i've been happily testing acpi following -current since six or seven > months, > and i've noticed a little regressions : > - before June, it worked perfectly, halt -p power-offs the machine, i have > acpi detected in dmesg. > - after around start of June, halt -p doesn't poweroff the machine > anymore, > and i don't have anymore acpi detected in dmesg. But when i config -e /bsd > and try to enable acpi, it says that acpi is already enabled. > - i've retried several times, still no luck since June. > > may it be a local fuckup ? (Sorry, i don't exactly remember the date when > it > stopped working) > What can i do to debug this ? > > I always uncomment (and remove two disable) all acpi lines in GENERIC : > > option ACPIVERBOSE > option ACPI_ENABLE > > acpi0 at mainbus? > acpitimer* at acpi? > acpihpet* at acpi? > acpiac* at acpi? > acpibat*at acpi? > acpibtn*at acpi? > acpicpu*at acpi? > acpidock* at acpi? > acpiec* at acpi? > acpiprt*at acpi? > acpitz* at acpi? > > Is there something else to do somewhere ? > > Dmesg : http://gruiik.info/stuff/tmp/dmesg > Acpidump : http://gruiik.info/stuff/tmp/acpidump > > (i have to note that it works perfectly on a dell D410) > > Thanks, > > Landry > > This is possibly due to the checkin on May 29th in sys/arch/i386/i386/acpi_machdep.c. The commit message says: Add global variable apm_attached, machine dependant probe routine for ACPI will check this flag durring probe, meaning that if the machine has APM ACPI will not attach. This should remove one obstacle on the road to enabling ACPI by default. ok marco, dreaadt, art, krw, art Do you get any error message from halt -p? I can only guess that your APM implementation is some how broken. Sorry that isn't much help. Yes, in fact upon halt -p, i get error messages like : 'apm : unrecognized device ID (9)' I'll try to disable apm in config -e, hope it'll work. Thanks a lot for orienting me on this way, i didn't even think of it. Landry
Re: ACPI regression on i386 ?
On 7/19/07, Landry Breuil <[EMAIL PROTECTED]> wrote: On 7/18/07, Devin Smith <[EMAIL PROTECTED]> wrote: > > Hello, > > > > i've been happily testing acpi following -current since six or seven > > months, > > and i've noticed a little regressions : > > - before June, it worked perfectly, halt -p power-offs the machine, i have > > acpi detected in dmesg. > > - after around start of June, halt -p doesn't poweroff the machine > > anymore, > > and i don't have anymore acpi detected in dmesg. But when i config -e /bsd > > and try to enable acpi, it says that acpi is already enabled. > > - i've retried several times, still no luck since June. > > > > may it be a local fuckup ? (Sorry, i don't exactly remember the date when > > it > > stopped working) > > What can i do to debug this ? > > > > I always uncomment (and remove two disable) all acpi lines in GENERIC : > > > > option ACPIVERBOSE > > option ACPI_ENABLE > > > > acpi0 at mainbus? > > acpitimer* at acpi? > > acpihpet* at acpi? > > acpiac* at acpi? > > acpibat*at acpi? > > acpibtn*at acpi? > > acpicpu*at acpi? > > acpidock* at acpi? > > acpiec* at acpi? > > acpiprt*at acpi? > > acpitz* at acpi? > > > > Is there something else to do somewhere ? > > > > Dmesg : http://gruiik.info/stuff/tmp/dmesg > > Acpidump : http://gruiik.info/stuff/tmp/acpidump > > > > (i have to note that it works perfectly on a dell D410) > > > > Thanks, > > > > Landry > > > > > > This is possibly due to the checkin on May 29th in > sys/arch/i386/i386/acpi_machdep.c. > > The commit message says: > > Add global variable apm_attached, machine dependant probe routine for ACPI > will check this flag durring probe, meaning that if the machine has APM > ACPI will not attach. This should remove one obstacle on the road to > enabling ACPI by default. > > ok marco, dreaadt, art, krw, art > > Do you get any error message from halt -p? I can only guess that your > APM implementation is some how broken. Sorry that isn't much help. Yes, in fact upon halt -p, i get error messages like : 'apm : unrecognized device ID (9)' I'll try to disable apm in config -e, hope it'll work. Thanks a lot for orienting me on this way, i didn't even think of it. You were right, now it works perfectly. Thanks again. Landry
Re: famd, gnome and xfce4
On 8/9/07, Markus Bergkvist <[EMAIL PROTECTED]> wrote: > Hi > > I can't get the file browser in gnome to update automatically when a file > is e.g. created or removed if I start famd with > > sgi_fam/1-2 stream rpc/tcp waitroot/usr/local/sbin/famd famd > > in /etc/inetd.conf > But if I start famd with > > if [ -x /usr/local/sbin/famd ]; then > /usr/local/sbin/famd -T 0 > fi > > in /etc/rc.local it works all fine. The xfce4 file manager doesn't react no > matter how I start famd. Is this working as expected, or what might I have > done wrong? For Thunar, iirc it has to be linked against FAM libs to have file system monitoring capacities (cf http://svn.xfce.org/svn/xfce/thunar/trunk/acinclude.m4), and the port wasn't built by default against it. But i admit this could be added as a LIB_DEPENDS, as it's a useful and cheap feature. I'll try to test it after ports-tree unlock. Landry (maintainer)
Re: Ports changes web page is badly out of date
On 9/9/07, Jasper Lievisse Adriaanse <[EMAIL PROTECTED]> wrote: > On Sun, Sep 09, 2007 at 03:29:56PM -0400, Peter Fraser wrote: > > http://www.openbsd.org/portsplus/index.html > > > > which is referenced by > > > > http://www.openbsd.org/plus42.html > yeah, perhaps someone feels like start keeping portsplus up to date > from now on? please contact me if so. http://ports.openbsd.nu/ homepage would be a good start point to collect information, or creating an automatic system parsing ports-changes@ messages.. but OpenBSD website is fully static, so page would have to be manually updated. Landry
Re: Tackilng multiple versions of autoconf
Hi, To be more reasonable (i suppose most ports using autotools in tree won't change their build scheme before earth blows itself, maybe because of autotools), i'd like to add my tiny-little p.o.v to this discussion : When upgrading a port, it costs little time to check that newest version still needs a particular AUTO*_VERSION, and remove the option if ports compiles with 'normal-latest' autotools version. But digging through whole tree to test each port would be a real waste of time. Landry On 10/16/07, Marc Espie <[EMAIL PROTECTED]> wrote: > On Tue, Oct 16, 2007 at 11:50:52AM -0400, Douglas A. Tutty wrote: > > On Tue, Oct 16, 2007 at 11:52:27AM +0100, Stuart Henderson wrote: > > > On 2007/10/16 16:10, Amarendra Godbole wrote: > > > > A peculiar thing I noticed with many ports is they need different > versions of > > > > autoconf installed (set through the AUTOCONF_VERSION variable) - so in > the > > > > end, my system has 3 versions after a couple of port builds (2.13, > 2.59, and > > > > 2.61). > > > > > > This isn't a problem. > > > > The OP seems to think it is or he (she?) wouldn't waste his time > > emailing the list or making an offer to a considerable amount of work to > > fix it. Rather than just dissing him, why not enlighten us as to why > > its not a problem? > > > > Perhaps address the statement "... they _NEED_ different versions of > > autoconf installed...". > > > > Doug. > > Fixing this is a waste of time. > > Autoconf itself is an issue. Actually a lot of engineering issues. > Using it in the first place is a mistake. > > If you prefer, it's up to external projects to fix up their shit. > > KDE has stopped using the GNU auto* dreck, and I'm very happy for their > switch to cmake. > > It's already enough of a headache to work around autoconf issues. Unifying > them ? nope, not a chance. > > We have loads of better things to do. > > From a practical point of view, each autoconf version is very small, and > compiles/installs in just a fraction of the time it would take to `fix' > ports to use a common autoconf.
CVSync web page
hi, i've just set up a little CVSync mirror, and following cvsync.html, i stumble on the "cvs [checkout aborted]: /cvs/CVSROOT: No such file or directory" issue when trying to checkout from my fresh mirror. Maybe it is worth saying on the page that cvs repository has to be init'ed with 'cvs -d /cvs init' before being usable for checkouts... or maybe i'm wrong somewhere. Landry
Re: CVSync web page
On 10/17/07, Christian Weisgerber <[EMAIL PROTECTED]> wrote: > Landry Breuil <[EMAIL PROTECTED]> wrote: > > > i've just set up a little CVSync mirror, and following cvsync.html, i > > stumble on the "cvs [checkout aborted]: /cvs/CVSROOT: No such file or > > directory" issue when trying to checkout from my fresh mirror. > > Why doesn't your mirror have CVSROOT? You're missing part of the > repository. Maybe upstream is missing something.. i'm cc'ing maintainer in case he's not subscribed to misc. i just launched 'cvsync cvsync://mirror.osn.de/openbsd-ports/rcs/?prefix=/cvs', and tried with a full config file too, as explained on the page.. > > > Maybe it is worth saying on the page that cvs repository has to be > > init'ed with 'cvs -d /cvs init' before being usable for checkouts... > > Certainly not. Ok, so my 'workaround' wasn't correct .. i suppose my cvsync copy is broken now ? Landry
Re: CVSync web page
On 10/17/07, Christian Weisgerber <[EMAIL PROTECTED]> wrote: > Landry Breuil <[EMAIL PROTECTED]> wrote: > > > > Why doesn't your mirror have CVSROOT? You're missing part of the > > > repository. > > > > Maybe upstream is missing something.. i'm cc'ing maintainer in case > > he's not subscribed to misc. > > Sure looks complete at the collection level. > > $ cvsync cvsync://mirror.osn.de/ > Connecting to mirror.osn.de port > Connected to 194.45.27.107 port > Running... > Name: openbsd, Release: rcs > Comment: OpenBSD CVS Repository > Name: openbsd-cvsroot, Release: rcs > Comment: OpenBSD CVSROOT > Name: openbsd-ports, Release: rcs > Comment: OpenBSD Ports > Name: openbsd-src, Release: rcs > Comment: OpenBSD Source > Name: openbsd-www, Release: rcs > Comment: OpenBSD WWW > Name: openbsd-x11, Release: rcs > Comment: OpenBSD X11 > Name: openbsd-xf4, Release: rcs > Comment: OpenBSD XF4 > Name: openbsd-xenocara, Release: rcs > Comment: OpenBSD xenocara > Finished successfully > > > i just launched 'cvsync > > cvsync://mirror.osn.de/openbsd-ports/rcs/?prefix=/cvs', and tried with > > a full config file too, as explained on the page.. > > With that URL you only fetch the ports collection. > > The top level of the repository looks like this: > > CVSROOT > X11 > XF4 > ports > src > www > xenocara > > If you skip some parts, you still need CVSROOT (corresponding to > the openbsd-cvsroot collection above) for CVS operations. > > Of course, when you said "mirror" I assumed you wanted to get the > whole thing. > > > Ok, so my 'workaround' wasn't correct .. i suppose my cvsync copy is > > broken now ? > > Just delete the CVSROOT directory you created. Okay, thanks naddy, armin and charles, now i fully understand how cvsync works :) Landry
NFS exporting /usr/ports and -maproot=root
Hi, i'm struggling to make my ports-tree usable on all my machines, it seems that in my configuration -maproot=root in /etc/exports doesn't work: on the server (4.1 stable), /etc/exports contains : /usr/ports -maproot=root client perms : drwxrwxr-x 47 root wsrc 1024 Oct 18 19:40 /usr/ports on the client (-current), /etc/fstab contains : server:/usr/ports /usr/ports nfs rw,nosuid 0 0 perms : drwxrwxr-x 47 root wsrc 1024 Oct 18 19:40 /usr/ports Nfs mount works fine, showmount -a is fine (i have client:/usr/ports line), as a normal user (i'm in wsrc group) i can create files in remote ports-tree, but as root it seems impossible, either using sudo touch, sudo -u root touch or su - then touch, i'm always getting touch: /usr/ports/test: Permission denied As ports-tree uses extensively sudo, i'm kinda blocked.. I ran tcpdump on both, and i get this error : 19:36:40.443005 server.nfsd > client.816: xid 0x944ace5 reply ok 60 create ERROR: Permission denied I tried with -maproot=0, -maproot=0:0 with no luck. I know this works for many people, so what have i missed here ? btw, i restarted portmap/nfsd/mountd, and mountd -d doesn't give errors.. Thanks for any help, Landry
Re: NFS exporting /usr/ports and -maproot=root
On 10/18/07, Dorian B|ttner <[EMAIL PROTECTED]> wrote: > Landry Breuil schrieb: > > Hi, > > > > i'm struggling to make my ports-tree usable on all my machines, it > > seems that in my configuration -maproot=root in /etc/exports doesn't > > work: > > > > on the server (4.1 stable), /etc/exports contains : > > /usr/ports -maproot=root client > > perms : drwxrwxr-x 47 root wsrc 1024 Oct 18 19:40 /usr/ports > > > > on the client (-current), /etc/fstab contains : > > server:/usr/ports /usr/ports nfs rw,nosuid 0 0 > > perms : drwxrwxr-x 47 root wsrc 1024 Oct 18 19:40 /usr/ports > > > > Nfs mount works fine, showmount -a is fine (i have client:/usr/ports > > line), as a normal user (i'm in wsrc group) i can create files in > > remote ports-tree, but as root it seems impossible, either using sudo > > touch, sudo -u root touch or su - then touch, i'm always getting > > touch: /usr/ports/test: Permission denied > > As ports-tree uses extensively sudo, i'm kinda blocked.. > > > > I ran tcpdump on both, and i get this error : > > 19:36:40.443005 server.nfsd > client.816: xid 0x944ace5 reply ok 60 > > create ERROR: Permission denied > > > > I tried with -maproot=0, -maproot=0:0 with no luck. I know this works > > for many people, so what have i missed here ? btw, i restarted > > portmap/nfsd/mountd, and mountd -d doesn't give errors.. > > > > Thanks for any help, > > > > Landry > > > What if you share a directory on the server from a partition that has > the nosuid flag set in fstab? > /dev/wd0a / ffs rw 1 1 > /dev/wd0f /home ffs rw,nodev,nosuid 1 2 > /dev/wd0e /usr ffs rw,nodev 1 2 > /dev/wd0g /var ffs rw,nodev,nosuid 1 2 > /dev/wd0d /tmp ffs rw,nodev,nosuid 1 2 > > (oops, forgot to cc:list) hi, /usr/ports is not a separate partition, i only have / on this box (on a 13gb disk..).. so i can't test this option. /dev/wd0a / ffs rw 1 1 May nosuid be relative to my issue ? Landry
Re: NFS exporting /usr/ports and -maproot=root
On 10/19/07, Jan Stary <[EMAIL PROTECTED]> wrote: > Replying to myself, > > > Again: set WRKOBJDIR on the client side and you don't need > > to be writing in the remotely mounted tree at all. > > the following is nonsense, of course: > > > Another advantage of that is that when you build some port that requires > > e.g. the X11 to be installed, you only need it installed on the machine > > that performs the port build, that is, the (one) client that actually > > needs it. > > - the stuff needed for a proper port build either is or is not > present on the machine that makes the build, *regardless* of which > /usr/ports the machine uses. > I'm already setting WRKOBJDIR outside nfs-dir, the problem is more for /usr/ports/packages .. i'd like it to be shared too, to install the same package on various sparc64 for example. And this dir needs to be root-writable, as it uses sudo.. I'd put it outside nfs if i don't find a solution, but btw i'm more interested in understanding why -maproot=root doesn't work in my case :) And concerning http://openbsd.org/faq/faq15.html#NoFun, all my boxes are running -current, only the server is running stable and i don't build anything on it (way too slow to compile) Anyone, idea for my maproot problem ? Landry
Re: NFS exporting /usr/ports and -maproot=root
On 10/19/07, Jan Stary <[EMAIL PROTECTED]> wrote: > > > > Again: set WRKOBJDIR on the client side and you don't need > > > > to be writing in the remotely mounted tree at all. > > > I'm already setting WRKOBJDIR outside nfs-dir, the problem is more for > > /usr/ports/packages .. i'd like it to be shared too, to install the > > same package on various sparc64 for example. And this dir needs to be > > root-writable, as it uses sudo.. > > You also need to set DISTDIR and PKGREPOSITORYBASE > - see examples in the FAQ. I now several workarounds and tweaks like this exists :) I just want to understand why this setup doesn't work. > > I'd put it outside nfs if i don't find a solution, but btw i'm more > > interested in understanding why -maproot=root doesn't work in my case > > Send your complete server:/etc/exports, client:/etc/fstab, > verbose log of server:mountd, server:nfsd, and a full (-s 65000) tcpdump > of the communication. server is spud, client for tests is renton (10.246.200.10). server:/etc/exports: /nfsroot/net_sparc64 -ro allison /nfsroot/open_sparc64 -ro swanney /usr/ports -maproot=0:0 renton swanney lizzy client fstab: spud:/usr/ports /usr/ports nfs rw,nosuid 0 0 mountd -d output: Got line /nfsroot/net_sparc64 -ro allison Making new ep fs=0x0,0xfc214a5e doing opt -ro allison got host allison exporting /nfsroot/net_sparc64 Got line /nfsroot/open_sparc64 -ro swanney Found ep fs=0x0,0xfc214a5e doing opt -ro swanney got host swanney.fr.homeunix.org exporting /nfsroot/open_sparc64 Got line /usr/ports -maproot=0:0 renton swanney lizzy Found ep fs=0x0,0xfc214a5e doing opt -maproot=0:0 renton swanney lizzy got host renton.fr.homeunix.org got host swanney.fr.homeunix.org got host lizzy.fr.homeunix.org exporting /usr/ports exporting /usr/ports exporting /usr/ports unexporting / / Getting mount list. Here we go. Got mount request from 10.246.200.10 rpcpath: /usr/ports Mount successful for /usr/ports by 10.246.200.10. (here i've ran sudo mount /usr/ports on the client) renton:~/ $ls -ld /usr/ports drwxrwxr-x 47 root wsrc 1024 Oct 19 19:12 /usr/ports (same on client and server) renton:~/ $id uid=1000(landry) gid=1000(landry) groups=1000(landry), 0(wheel), 9(wsrc) renton:~/ $touch /usr/ports/test renton:~/ Here i have tcpdump output (same for server and client) for this sucessful file creation : 19:56:29.030254 renton.695 > spud.nfsd: xid 0xbb06905b (NFSv3) 112 lookup fh 33,252/664798720 "test" 19:56:29.030771 spud.nfsd > renton.695: xid 0xbb06905b reply ok 116 lookup ERROR: No such file or directory 19:56:29.030843 renton.695 > spud.nfsd: xid 0xbb069116 (NFSv3) 112 lookup fh 33,252/664798720 "test" 19:56:29.031099 spud.nfsd > renton.695: xid 0xbb069116 reply ok 116 lookup ERROR: No such file or directory 19:56:29.031131 renton.695 > spud.nfsd: xid 0xbb069170 (NFSv3) 144 create fh 33,252/664798720 "test" 19:56:29.033013 spud.nfsd > renton.695: xid 0xbb069170 reply ok 268 create fh 33,252/3064333824 19:56:29.033097 renton.695 > spud.nfsd: xid 0xbb069202 (NFSv3) 104 getattr fh 33,252/3064333824 19:56:29.033363 spud.nfsd > renton.695: xid 0xbb069202 reply ok 112 getattr REG 644 ids 1000/9 sz 0x0 Now i try to update attrs, it fails : renton:~/ $sudo touch /usr/ports/test touch: /usr/ports/test: Permission denied 19:57:52.066602 renton.695 > spud.nfsd: xid 0xbb0692d4 (NFSv3) 128 lookup fh 33,252/664798720 "test" 19:57:52.067288 spud.nfsd > renton.695: xid 0xbb0692d4 reply ok 236 lookup fh 33,252/3064333824 19:57:52.067380 renton.695 > spud.nfsd: xid 0xbb069303 (NFSv3) 124 access fh 33,252/664798720 0002 19:57:52.067688 spud.nfsd > renton.695: xid 0xbb069303 reply ok 120 access c 0002 19:57:52.067725 renton.695 > spud.nfsd: xid 0xbb0693f4 (NFSv3) 148 setattr fh 33,252/3064333824 19:57:52.068015 spud.nfsd > renton.695: xid 0xbb0693f4 reply ok 144 setattr ERROR: Permission denied 19:57:52.068051 renton.695 > spud.nfsd: xid 0xbb06947e (NFSv3) 124 access fh 33,252/664798720 0002 19:57:52.068299 spud.nfsd > renton.695: xid 0xbb06947e reply ok 120 access c 0002 19:57:52.068326 renton.695 > spud.nfsd: xid 0xbb06952e (NFSv3) 148 setattr fh 33,252/3064333824 19:57:52.068605 spud.nfsd > renton.695: xid 0xbb06952e reply ok 144 setattr ERROR: Permission denied Now i try to create another file, it fails : renton:~/ $sudo touch /usr/ports/test2 touch: /usr/ports/test2: Permission denied 19:58:24.546477 renton.695 > spud.nfsd: xid 0xbb0695bf (NFSv3) 132 lookup fh 33,252/664798720 "test2" 19:58:24.547033 spud.nfsd > renton.695: xid 0xbb0695bf reply ok 116 lookup ERROR: No such file or directory 19:58:24.547166 renton.695 > spud.nfsd: xid 0xbb06960d (NFSv3) 132 lookup fh 33,252/664798720 "test2" 19:58:24.547430 spud.nfsd > renton.695: xid 0xbb06960d reply ok 1
Re: Doubts about OpenBSD security.
I think that when you've given an attacker physical access to a machine with a root session open, there's not a whole lot OpenBSD (or any OS) can do... The attacker could also, with physical, attach a keystroke logger, unplug your machine, or any number of other bad/humorous things I'm not clever enough to think of -- no matter what OS is running on the system. Hope that allays some of your fears regarding OpenBSD in particular... Peter L. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joco Salvatti Sent: Wednesday, June 21, 2006 1:23 PM To: Misc OpenBSD Subject: Doubts about OpenBSD security. My doubts may seem fool, so thanks in advance for those who will read this e-mail and may help me with my doubts. 1. Why doesn't passwd ask superuser's current password when it's run by the superuser to change its own password? May not it be considered a serious security flaw? 2. Why doesn't the system ask the password, as a default action, to log in the system, when entering in single user mode? May not it also be considered a serious security flaw? And why doesn't exist a different password to log in single user mode, instead of using root's password? An real example: Let's suppose an attacker entered the room where an OpenBSD server is located in, and by mistake the system administrator has forgotten to logout the root login session. So the attacker could enter in single user mode, without the need for the root password, and load a malicious kernel module. He also could do millions of other things, but changing root's password, because the system administrator would notice it immediatelly. I believe it could be more difficult for the attacker if there were a different password to log in the system in single user mode. Thanks for the time wasted reading this e-mail and I'm sorry if my questions are too silly. -- Joco Salvatti Undergraduating in Computer Science Federal University of Para - UFPA web: http://www.openbsd-pa.org e-mail: [EMAIL PROTECTED]
A new OpenBSD mirror in France
Hello list ! I've set up a new ftp mirror for OpenBSD, located physically in Rennes / West of France, on the RENATER Network (National Research & Teaching Network, maybe one of the biggest bandwidth in the country) It is available at ftp://ftp.irisa.fr/pub/OpenBSD/ , and works well.. i've tested if for several installations. (README) - updated nightly (cvs from anoncvs.de.openbsd.org, snapshots from ftp.scarlet.be) - 3.8/ 3.9/ doc/ OpenBGPD/ OpenNTPD/ OpenSSH/ patches/ snapshots/ and src/ are mirrored - Available bandwidth : approx ~100Mb upload - passive ftp only - reachable using IPv4 and IPv6 - Maintainer contact : landry -dot- breuil -at- irisa -dot- fr Feel free to use it :) Landry Breuil Expert Engineer, IRISA/INRIA
Howto get DRI working on OpenBSD ?
Hello, I'm using 4.0-beta from snapshots on my Dell Latitude D410, and apart from apm not really working properly (no apm/acpi detected on boot, no sensors, no suspend/halt -p, but SpeedStep works), i'm really pleased of OpenBSD. Graphics chipset is a I915GM, and works fine with i810 blob-free X.org driver, hardware acceleration is done by XAA. OpenGL works through MESA indirect implementation. Now i'm trying to get DRI working on this laptop, to use shiny features like composite and so on. It's not a vital need, just a personnal challenge :) >From what i understood, DRI is not available by default in OpenBSD, there is no libdri* in /usr/X11R6/lib/modules/extensions/ . First, is it possible to get DRI features on OpenBSD ? I know some things are hardened, like sysctl machdep.aperture and privsep'ed X daemon, whereas DRI needs special permissions to get direct access to the hardware. If so, what is the simplest way to do it ? - get OpenBSD's cvs tree of X, tweak some makefiles (which ones ?) and recompile it, or only a part ? I know DRI drivers are available : http://www.openbsd.org/cgi-bin/cvsweb/XF4/xc/lib/GL/mesa/drivers/dri/ - follow this documentation : http://dri.freedesktop.org/wiki/Building ? There is a section for FreeBSD... - is DRM kernel module needed ? Is the one from FreeBSD likely to work/compile with OpenBSD ? There is some (outdated) documentation about this here : http://people.freebsd.org/~anholt/dri/ - is someone from OpenBSD team already working on this topic ? I've googled ml archives, and didn't found any relevant information. So if anyone has a hint/comment on my thoughs/pointer to some ml post/documentation, i'd be really interested. I'm attaching the result of glxinfo, dmesg.boot, xorg.conf and Xorg.0.log to provide as much information as possible. Thanks for you time reading this, Landry [demime 1.01d removed an attachment of type application/octet-stream which had a name of glxinfo] [demime 1.01d removed an attachment of type application/octet-stream which had a name of dmesg.boot] [demime 1.01d removed an attachment of type application/octet-stream which had a name of Xorg.0.log] [demime 1.01d removed an attachment of type application/octet-stream which had a name of xorg.conf]
Re: Howto get DRI working on OpenBSD ?
Damien Miller a icrit : | On Wed, 9 Aug 2006, Landry Breuil wrote: | | > Now i'm trying to get DRI working on this laptop, to use shiny features | > like composite and so on. It's not a vital need, just a personnal | > challenge :) | | You will need to (at least) port the DRM kernel support to OpenBSD. | tedu@ made a start a little while ago, and it is certainly more work | than tweaking makefiles. I was afraid this was required... it's certainly something i can't personally do :( Do you have any pointers to tedu's works ? cvs commits, webpage ? Reading freebsd's implementation is a good start point ? More generally, did someone manage to get Composite working fine on OpenBSD, with i810 accelerated by XAA ? Thanks, Landry
Re: Problem with Matrox MGA G450
On Fri, Sep 5, 2008 at 10:03 AM, Guillermo Bernaldo de Quiros Maraver Pedroche <[EMAIL PROTECTED]> wrote: > Hi guys, i have added one Matrox G450 in OpenBSD, > and have enabled mgadrm in the GENERIC file, i build > and install, and, when try to launch X, get the next > error: if you were really following -current development and oga@'s work, you'll know that currently only inteldrm and radeondrm works. Landry
Re: Weird pkg_info behavior?
On Thu, Oct 2, 2008 at 3:20 AM, Slim Joe <[EMAIL PROTECTED]> wrote: > On 2008/10/1, Stuart Henderson <[EMAIL PROTECTED]> wrote: >> On 2008-10-01, Nick Guenther <[EMAIL PROTECTED]> wrote: >>> If you are looking for package descriptions, install the ports tree >>> and read the Makefiles. > > A lynx dump of http://www.openbsd.org/4.3_packages/i386.html > seems more handy. > >> For 4.4/-current, landry@ has written a curses-based package browser, >> pkg_mgr. It's in the ports tree and of course a package is available, >> "pkg_add pkg_mgr". > > That's something to wait for then. From what I read it references > openports.se. It has nothing to do with openports.se, it uses databases/sqlports as its backend. Landry
Re: Sun Fire X4100M2 and ILOM serial console
On Fri, Oct 3, 2008 at 3:09 AM, Albert Chin <[EMAIL PROTECTED]> wrote: > Anyone with an X4100M2 have the serial console working for logins? I > have OpenBSD-current running and the BIOS remote access console > configured as follows: > * Remote Access [Enabled]* > * * > * Serial port number [COM1] * > * Base Address, IRQ [3F8h, 4]* > * Serial Port Mode [09600 8,n,1]* > * Flow Control [None] * > * Redirection After BIOS POST[Always] * Disable this one. This helped me on a v20z, i got the full boot log on the serial processor. Landry
Re: NFS and -maproot in OpenBSD 4.3
On Tue, Jul 1, 2008 at 5:12 PM, David Vuorio <[EMAIL PROTECTED]> wrote: >> $ ls -al >> total 8 >> drwxr-xr-x 2 root wheel 512 Jul 1 14:52 . >> drwxr-xr-x 15 root wheel 512 May 21 13:20 .. >> -rw-rw-rw- 1 root wheel0 Jul 1 14:55 bar >> -rw--- 1 root wheel0 Jul 1 14:52 foo >> -rw-rw 1 root wheel0 Jul 1 14:52 foobar >> $ touch bar >> $ touch foo >> touch: foo: Permission denied >> $ touch foobar >> touch: foobar: Permission denied >> $ less foobar >> foobar: Permission denied > > Sorry for spamming, but I just realised an interesting thing. > > If I try (from the client) to access the files on the server, and I use my > regular account, then my membership of the wheel allows me to access two > of the files above. However, if I become root I can only access the > world-readable file, even if I use -maproot=root or -mapall=root . > > Also, root is part of the wheel group on both the server and the client. I've been recently bitten by this one and felt stupid for not having enough rtfm'ed. You have to export the root of the filesystem. (and eventually use -alldirs if you want to mount only /test.) Landry
Re: 'Nother broken package - git-1.5.4.2
On Wed, Jul 16, 2008 at 9:08 PM, L. V. Lammert <[EMAIL PROTECTED]> wrote: > That doesn't fix the main problem, however, .. a version control package > should NOT be in packages as an X flavor. > > It was mentioned earlier that there is a non-X version in ports - why > don't the maintainers FIX the problem and make that the package instead of > all this bitching about why people compain about broken packages? You've been told that git had a -x11 subpackage since april in -current, now can you please stop your incessant pointless whining ? Can you at least do your own homework and learn how things work in OpenBSD ? Landry
usable winxp ipsec client... referenced in a message but I can't find the archive
Hello, http://marc.theaimsgroup.com/?l=openbsd-misc&m=115409112232227&w=2 references a "usable" ipsec client for winxp in the archives, but I can't find what it's referring to. Can anyone point me in the right direction? I'm tired of banging my head against ipseccmd.exe... Thanks, Peter L.
Re: [OT] OpenBSD AJAX
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of ropers > Sent: Wednesday, November 01, 2006 6:44 PM > To: L. V. Lammert > Cc: Mark Bucciarelli; David Terrell; Damien Miller; Sam > Fourman Jr.; OpenBSD > Subject: Re: [OT] OpenBSD AJAX > > On 01/11/06, L. V. Lammert <[EMAIL PROTECTED]> wrote: > > On Wed, 1 Nov 2006, Mark Bucciarelli wrote: > > > > > Do you have a recommendation for a client-side Ajax lib > to use with > > > C? > > > > > Huh? How can you run C code in a browser? > > > > Lee > > The short answer: You don't. > > The long answer: > Ok, so here goes -- for the benefit of the archives: > Read http://www.webpasties.com/xmlHttpRequest/ . > Note how XMLHttpRequest is key here. > It links the client side (where we have HTML/CSS/ECMAscript > and possibly other clientside stuff) with whatever code is > running on the server. > I'm using the word "link" very loosely here: XMLHttpRequest > can make the browser request data without page reloads. That > data doesn't really have to be in XML format (cf. JSON). > The code on the server (that talks to XMLHttpRequest) could > effectively be just about anything: PHP, Perl, Python, Ruby, > Java/JSP, even C. > > /* begin increasingly off-topic techno-giddy mullarkey */ > > And while I don't know that it has been done, in theory at > least, there's nothing to stop you from writing the server > side logic in pure assembly language. > Oh, don't just write it in assembly language. Write it in > assembly language by hand editing in a hex editing > environment inside vi (:%!xxd / :%!xxd -r) via a 2400 baud > teletype using this programming technique when writing your > loops: http://tinyurl.com/y65oeu > > PS: I once read that Google allegedly, allegedly generated > their fancy-schmancy AJAXian Javascript code by first writing > Java code and then using some kind of cross-converter to turn > the Java code into JavaScript code. > Either the person who wrote that was seriously confused and > STILL didn't get that Java and JS are completely different > animals, or Google is doing something that I can only marvel > and awe at. > > PPS: Someplace else I read that reportedly, reportedly most > people who code for a living do so in Java. No idea if that's > true, though if it is, it could explain what Google is > reportedly doing... > > That's exactly what they do: http://code.google.com/webtoolkit/
Re: (newbie) a network related question
>> Third, if you live in a house with a single address, you cannot >> publicly start announcing different addresses without the postal >> service knowing about it. If packets should arrive at your home, then >> you better make sure you write your street and number on the >> announcement, other things just won't work. >> > >No but I use the following format: address+office1 ... address+officeN! >That's what I try to achieve with the IPs as well but without having to use >port numbers! While this analogy is probably starting to get a little stretched, address + officeN is analogous to ip:port. IP address is like a postal service address, it tells where a packet should physically go to. once it gets to that address, its up to the receiving computer to figure out which program is listening to the port the packet arrived on. When you send a letter to address + officeN, the post office doesn't care about the officeN part, it just looks at the address to get the packet there. >> Last but not least: _if_ your ADSL provider will assign and route >> multiple addresses to your router (for example a complete C network), >> then you can - of course - translate the different numbers into >> different numbers in your internal network. But then: why you are not >> using these IPs for your internal network directly? >> > >well, that's not case. But even then, how can a ISP assign a complete C >network just like this? What's behind that? the ISP is assigning IPs based on a block of IPs they already own, they don't just "create" them. They'll block off part of their own class A or B network and allow you to use them. All IPs get assigned by a naming authority, such as ARIN.
PR#5092 (Was: patch against tail(1) to support -f on multiple files)
Landry wrote: Hi folks at misc@ ! I've always missed the feature of GNU tail and FreeBSD tail to follow multiple files using -f. I was used to monitor the logs on my 3.8 server using "tail -f /var/log/messages & ; tail -f /var/www/logs/access_log &" and so on, but wasn't pleased of this workaround. I know, multitail port does the job, but i didn't want to install it. So i decided to code a patch, i looked at how FreeBSD handle this issue, i read style(9) and kqueue(2), and finally the result is here : http://team.gcu.info/~gaston/openbsd-tail-follow-multiple-files.patch This patch is against -current userland src/usr.bin/tail. Feel free to try it and comment it. If someone could review it and verify it, this would be great. Patched version works like a charm on my server since two days, and has been tested in most common cases. Thanks, Landry ps: I've submitted this patch too as PR#5092. I sent this patch/PR one month ago, and didn't have any sort of feedback. do i have to understand that my patch is badly written, or useful to noone ? At least, i just hoped someone would look at my code, and let me know if it was correctly written :) Thanks again for any feedback ! Landry Ps: as it is c2k6 these days, maybe my patch would get more interest than one month ago keep up the great work guys !!
Routing and firewall performance on older machines?
Hi, We're going to be doing some network restructuring, splitting our internal network into 2 separate IP networks (192.168.1.0 and 192.168.2.0). We currently have a Microsoft ISA firewall for our whole network (since it's just 1 ip network right now, 192.168.0.0). I've suggested replacing the ISA firewall with an OpenBSD machine with 3 NICs, to handle both routing between the two internet networks, and firewall out to the internet. It will just be a static route between the two internal networks, in addition to whatever routing is necessary for firewall/NAT (I'm not sure on this?). As far as the firewall is concerned, I don't think it will be a problem as far as performance goes (our internet connect is 2mbit, which shouldn't be hard to saturate). For the internal routing though, what kind of hardware would we need to keep the 2 gigabit networks connected at a decent speed? We're looking at a p4 with a gig of ram - does that sound like it'll be a bottleneck? I figured that OpenBSD would lower the requirements for our firewall machine (less bloat) as well as increase security. Sorry if this is too general or vague a question - I did some searching on the archives and could only find references to performance of IPSec implementations, which we won't be using Thanks, I appreciate any responses/links/feedback, Peter L.
Anyone with experience on a dell poweredge 850?
Hi everyone, I'm just wondering if anyone knows anything about OpenBSD on a Dell Poweredge 850. List archives returned no hits, and google returned only a dmesg of the machine from FreeBSD (http://nycbug.org/?NAV=dmesgd&dmesgd_criteria=&dmesgid=700#700 for those interested). Dells seem relatively well supported, I'm mostly worried about the dual on-board NIC. Any light anyone could shed on compatibility would be great -- I'm making a case for using OpenBSD with this, which was purchased to be a firewall machine, instead of Microsoft and ISA server. Thanks in advance, Peter L.
Just confirming: no way to do a pf rdr based on hostname?
Hi All, We're migrating an old Microsoft ISA Server system to OpenBSD pf. First off, before I ask any questions, kudos to everyone -- Installing OpenBSD 3.8 was a very pleasant, painless experience for someone who's never used it before. Setting up pf/nat was also extraordinarily easy. The docs are great. That aside, the only thing that I haven't been able to migrate yet is ISA's ability to redirect web requests coming in on the same IP to different machines based on the host name. IE- www.a.com (IP 123.123.0.1) gets redirected to the internal IP 192.168.0.1 while www.b.com (also IP 123.123.0.1) gets redirected to the internal IP 192.168.0.2. I haven't found anything in the docs, and all the list archive questions I've found were specific to ipnat, not pf. I'm thinking that I can't do it. In that case, my options seem to be 1) use different external IP's for each website, and redirect to different internal servers based on IP 2) redirect all web traffic to the legacy ISA system, which will then redirect based on hostname. I'm hesitant to use up all our IPs for option 1, but I'm thinking option 2 is even worse... Are there any options I haven't thought of? Thanks for any advice... Peter L.
Re: Just confirming: no way to do a pf rdr based on hostname?
>-Original Message- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of >Jens Teglhus >Mxller >Sent: Monday, December 12, 2005 5:16 PM >To: misc@openbsd.org >Subject: Re: Just confirming: no way to do a pf rdr based on hostname? > >Peter Landry wrote: >> Hi All, >> We're migrating an old Microsoft ISA Server system to OpenBSD pf. First >> off, before I ask any questions, kudos to everyone -- Installing OpenBSD >> 3.8 was a very pleasant, painless experience for someone who's never >> used it before. Setting up pf/nat was also extraordinarily easy. The >> docs are great. >> >> That aside, the only thing that I haven't been able to migrate yet is >> ISA's ability to redirect web requests coming in on the same IP to >> different machines based on the host name. IE- www.a.com (IP >> 123.123.0.1) gets redirected to the internal IP 192.168.0.1 while >> www.b.com (also IP 123.123.0.1) gets redirected to the internal IP >> 192.168.0.2. >> >> I haven't found anything in the docs, and all the list archive questions >> I've found were specific to ipnat, not pf. >> >> I'm thinking that I can't do it. In that case, my options seem to be 1) >> use different external IP's for each website, and redirect to different >> internal servers based on IP 2) redirect all web traffic to the legacy >> ISA system, which will then redirect based on hostname. I'm hesitant to >> use up all our IPs for option 1, but I'm thinking option 2 is even >> worse... Are there any options I haven't thought of? >> >> Thanks for any advice... >> Peter L. >This can not be achieved with pf (since pf does not know about the http >protocol, where name based virtual hosting happends), but you could use >apache with mod_proxy or perhaps squid (perhaps other http proxies exists). > > >/jtm Thanks for all the suggestions. In the interests of getting this all working, I'm going to stick with using different external IPs for now. After we get everything moved and settled, I'm going to look into running squid, both for this, and also general http proxying. Thanks again all, Peter L.
ftp-proxy help needed...
Hello list, I'm working on getting Active FTP Connections working (a requirement of an app used by a client) through our 3.8 firewall. Following the PF FAQ, I was able to get passive FTP working fine with the following pf.conf lines: rdr pass on $int_usr_if proto tcp from $int_usr_if:network to any port 21 -> \ 127.0.0.1 port 8021 and pass in on $ext_if inet proto tcp from any port 20 to any \ user proxy flags S/SA keep state When I attempt to make an outgoing connection, everything goes fine up until the data connection is attempted. (xxx.xxx.xxx.xxx is the ftp server IP) (yyy.yyy.yyy.yyy is our externally visible IP) pflog, as far as I can tell, doesn't show anything being blocked. tcpdump during the session produces a bunch of packets on port 21 for the control connection, and the following for ftp-data: 16:00:03.825620 xxx.xxx.xxx.xxx.ftp-data > yyy.yyy.yyy.yyy.50463: S 1112717906:1112717906(0) win 16384 (DF) 16:00:03.825648 yyy.yyy.yyy.yyy.50463 > xxx.xxx.xxx.xxx.ftp-data: S 399002834:399002834(0) ack 1112717907 win 16384 (DF) 16:00:03.831991 xxx.xxx.xxx.xxx.ftp-data > yyy.yyy.yyy.yyy.50463: . ack 1 win 16560 (DF) 16:00:03.838487 xxx.xxx.xxx.xxx.ftp-data > yyy.yyy.yyy.yyy.50463: P 1:1081(1080) ack 1 win 16560 (DF) 16:00:03.838611 xxx.xxx.xxx.xxx.ftp-data > yyy.yyy.yyy.yyy.50463: F 1081:1081(0) ack 1 win 16560 (DF) 16:00:03.838628 yyy.yyy.yyy.yyy.50463 > xxx.xxx.xxx.xxx.ftp-data: . ack 1082 win 15480 (DF) tail /var/log/daemon: Jan 9 15:55:27 maverick ftp-proxy[20164]: accepted connection from 192.168.0.37:4713 to xxx.xxx.xxx.xxx:21 Jan 9 15:55:27 maverick ftp-proxy[20164]: client: USER username\^M Jan 9 15:56:10 maverick ftp-proxy[17000]: cannot connect data channel (Connection timed out) The relevant /etc/inetd.conf line is as follows: 127.0.0.1:8021 stream tcp nowait root/usr/libexec/ftp-proxy ftp-proxy -n -a yyy.yyy.yyy.yyy -V -S yyy.yyy.yyy.yyy (yyy.yyy.yyy.yyy is the IP we nat from, it's an alias on em0) Just to clarify -- the ftp server isn't on our network, it's at a client site. Can anyone see anything I've missed in the config? I've tried many different options in both pf.conf and inetd.conf to no avail. Also, I realize ftp-proxy is being replaced in -current, but I'd like to get this working with the old ftp-proxy before trying -current (which I've never done before... could be dangerous). Any advice at all would be helpful. Thanks! Peter L. PS -- is posting tcpdump and logfile like I have done considered bad form? PPS -- a dmesg wouldn't really be helpful here, would it?
Re: ftp-proxy help needed...
We don't (yet) do any egress filtering pass out on $ext_if proto tcp all modulate state flags S/SA tcpdump on the pflog0 interface as you suggested returns nothing being blocked when trying to connect -- not the internal IP, external IP, or ftp server. So I think the problem is with my config of ftp-proxy. There are currently 7 IP aliases on the external interface. I'm using -a and -S to specify which alias ftp-proxy should use, and I'm passing the -n flag to indicate we're using NAT. Is there something else I'm missing somewhere? >-Original Message- >From: Bob Beck [mailto:[EMAIL PROTECTED] >Sent: Monday, January 09, 2006 6:31 PM >To: Peter Landry >Cc: misc@openbsd.org >Subject: Re: ftp-proxy help needed... > > > Judging by the error message, likely you are either blocking the >outbound data channel connection to the real server, or the server >itself is filtering it. The first place I'd start looking >is in your "other" pf rules to see what's getting blocked. > > set your block rules to log stuff, and then tcpdump the pflog >interface looking for anything blocked that involves the real server >or your test client - then you'll see if one of your rules is >spanking something. > > i.e. > >tcpdump -n -i pflog0 host ftp.server.ip.addr or host client.machine.ip.addr > > -Bob > >* Peter Landry <[EMAIL PROTECTED]> [2006-01-09 15:20]: >> Hello list, >> I'm working on getting Active FTP Connections working (a requirement of >> an app used by a client) through our 3.8 firewall. Following the PF FAQ, >> I was able to get passive FTP working fine with the following pf.conf >> lines: >> >> rdr pass on $int_usr_if proto tcp from $int_usr_if:network to any port >> 21 -> \ >> 127.0.0.1 port 8021 >> and >> >> pass in on $ext_if inet proto tcp from any port 20 to any \ >> user proxy flags S/SA keep state >> >> When I attempt to make an outgoing connection, everything goes fine up >> until the data connection is attempted. >> >> (xxx.xxx.xxx.xxx is the ftp server IP) >> (yyy.yyy.yyy.yyy is our externally visible IP) >> >> pflog, as far as I can tell, doesn't show anything being blocked. >> tcpdump during the session produces a bunch of packets on port 21 for >> the control connection, and the following for ftp-data: >> 16:00:03.825620 xxx.xxx.xxx.xxx.ftp-data > yyy.yyy.yyy.yyy.50463: S >> 1112717906:1112717906(0) win 16384 (DF) >> 16:00:03.825648 yyy.yyy.yyy.yyy.50463 > xxx.xxx.xxx.xxx.ftp-data: S >> 399002834:399002834(0) ack 1112717907 win 16384 > 1460,nop,nop,sackOK> (DF) >> 16:00:03.831991 xxx.xxx.xxx.xxx.ftp-data > yyy.yyy.yyy.yyy.50463: . ack >> 1 win 16560 (DF) >> 16:00:03.838487 xxx.xxx.xxx.xxx.ftp-data > yyy.yyy.yyy.yyy.50463: P >> 1:1081(1080) ack 1 win 16560 (DF) >> 16:00:03.838611 xxx.xxx.xxx.xxx.ftp-data > yyy.yyy.yyy.yyy.50463: F >> 1081:1081(0) ack 1 win 16560 (DF) >> 16:00:03.838628 yyy.yyy.yyy.yyy.50463 > xxx.xxx.xxx.xxx.ftp-data: . ack >> 1082 win 15480 (DF) >> >> tail /var/log/daemon: >> Jan 9 15:55:27 maverick ftp-proxy[20164]: accepted connection from >> 192.168.0.37:4713 to xxx.xxx.xxx.xxx:21 >> Jan 9 15:55:27 maverick ftp-proxy[20164]: client: USER username\^M >> Jan 9 15:56:10 maverick ftp-proxy[17000]: cannot connect data channel >> (Connection timed out) >> >> >> The relevant /etc/inetd.conf line is as follows: >> 127.0.0.1:8021 stream tcp nowait root /usr/libexec/ftp-proxy >> ftp-proxy -n -a yyy.yyy.yyy.yyy -V -S yyy.yyy.yyy.yyy >> (yyy.yyy.yyy.yyy is the IP we nat from, it's an alias on em0) >> >> Just to clarify -- the ftp server isn't on our network, it's at a client >> site. >> >> >> Can anyone see anything I've missed in the config? I've tried many >> different options in both pf.conf and inetd.conf to no avail. Also, I >> realize ftp-proxy is being replaced in -current, but I'd like to get >> this working with the old ftp-proxy before trying -current (which I've >> never done before... could be dangerous). >> >> Any advice at all would be helpful. Thanks! >> Peter L. >> >> PS -- is posting tcpdump and logfile like I have done considered bad >> form? >> PPS -- a dmesg wouldn't really be helpful here, would it? >> > >-- >| | |The ASCII Fork Campaign > \|/ against gratuitous use of threads. > |
Re: DHS Grant to analye OpenBSD (and other OSS) for Bugs
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ted Unangst Sent: Wednesday, January 11, 2006 3:51 PM To: [EMAIL PROTECTED] Cc: misc@openbsd.org Subject: Re: DHS Grant to analye OpenBSD (and other OSS) for Bugs >On 1/11/06, John R. Shannon <[EMAIL PROTECTED]> wrote: >> It's probably worse. Any vulnerabilities found will almost assuredly be >> classified or at least FOUO. > >pt! Maybe I'm misreading the situation -- but won't this just give Open projects an even better chance to outpace closed system not subject to the same reviews in terms of security and reliability?
Re: aucat(1) mixing streams from different users
On Tue, Jun 28, 2011 at 3:14 PM, Alexandre Ratchov wrote: > On Tue, Jun 28, 2011 at 02:45:03PM +0200, Jona Joachim wrote: >> On Tue, Jun 28, 2011 at 11:01:26AM +0200, Alexandre Ratchov wrote: >> > On Mon, Jun 27, 2011 at 02:21:25PM +, Jona Joachim wrote: >> > > > >> > > > The simpler -- and most natural imho -- would be configure mpd to use >> > > > unix domain sockets (instead of TCP) and to run it as your user id >> > > > instead of _mpd. >> > > > >> > > > If you can't, you can cheat by copying mpd's ~/.aucat_cookie in your >> > > > home directory (it must have mode 0600) this way aucat will consider >> > > > _mpd and you are the same person. After all, I guess you run _mpd for >> > > > you ;) >> > > >> > > I see, this is the new authentication mechanism kicking in :) Thanks >> > > for the explanation, now that I know what's causing it, it's easy to >> > > fix. >> > >> > Too bad if this works, because nobody will fix mpd to use unix domain >> > sockets by default ;-) >> >> Well, just running mpd as my user id fixes the problem, no need for unix >> domain sockets. I usually try to run daemons that don't need to be >> reached from outside on unix domain sockets, however with mpd the >> problem is that not all clients support them. > > unfortunately this means that other local users would be able to > interact with your instance of mpd, which would be a regression. If you're _that_ concerned about mpd privacy, it supports passwd authentication on the tcp socket allowing various levels of control on the daemon.. cf mpd.conf(5). Landry
Re: Firefox 6
On Wed, Sep 7, 2011 at 1:20 AM, Amit Kulkarni wrote: >> Without having an endless crab session about Firefox, I'd like to >> know if Firefox 6 seems any better for you. Firefox 4+ seems to >> not just leak memory, but hemorrhage it. In 5 I routinely hit the >> 2G data limit. FF6 is better in this regard it seems, but freezes >> the system in fits of reallocing memory, freezing OpenBSD for >> seconds at a time. Fwiw, i have firefox running since mid-august, and it takes 250mb of memory. Never hit the 2G limit, be it 4, 5, 6 on amd64 or i386. >> FF 3.6.xx seemed much better to me. Then just use www/firefox36. >> Are others seeing FF6 as not much better? I see Landry just >> committed 6.0.2 so I'm going to try that, but I don't have a lot of >> hope. Point releases are security updates... > try FF7 b4 from his git repo > http://rhaalovely.net/cgit/mozilla-firefox/commit/?h=beta Or packages : http://dawn.rhaalovely.net/stuff/amd64/ http://dawn.rhaalovely.net/stuff/i386/ Landry
Re: no packages for amd64 snapshot
On Wed, Sep 21, 2011 at 11:23 AM, Gregory Edigarov wrote: > Hello list, > > is this intentional, or there is some problem that prevents amd64 > snapshot packags from being built? The gremlins stole them.
Re: format of i386/index.txt
On Wed, Mar 17, 2010 at 10:55 PM, Stuart Henderson wrote: > On 2010-03-17, Jan Stary wrote: >> (It has changed back and forth in the last month.) > > I tried using index.txt files for timestamps to monitor the latency > of mirror updates, but had problems with some of them flipping > between formats; I have a suspicion that some site or other > regenerates index.txt files but I haven't been able to track it > down yet... That's why i used the timestamp method (mdtm) in Net::FTP for http://gruiik.info/up2date.html.. instead of parsing unknown-formatted files :) Landry
Re: libcairo.so.9.2 missing
On Mon, Mar 29, 2010 at 4:04 AM, Ted Roby wrote: > My xfce4 build fails. I have refreshed cvs multiple times, built new > release packages, and re-attempted with fresh installs from those > packages. Did I break something? Probably > here's what I found relevant: > Checksumming...Error in package: > /usr/ports/pobj/cairo-1.8.8p0/fake-i386/usr/local/lib/libcairo.so.9.2 does > not exist So your cairo build fails, not xfce4 build. Why not just using snapshots packages as everyone advices ? cd graphics/cairo && make clean && make install. Landry
Re: How to work around this compiler bug
On Sat, May 1, 2010 at 11:39 AM, Christopher Zimmermann wrote: > Hi, > > the following piece of code compiles fine using g++ 4.2.4, but > fails using g++ 3.3.5 in the base system: > > error: operands to ?: have different types > > It is part of ptlib, which is the base library for opal, which in > turn is needed for ekiga, which I'm trying to port. Save yourself time, pkg_add ekiga.
Re: Serious problems with current since end of april, related to scsi controllers (Adaptec/LSILogic)
On Tue, May 11, 2010 at 5:30 PM, Ulrich Kahl wrote: > Hi! > > Since end of april, sorry I don't have a more precise date, one of my > systems has serious problems. > It can't boot sucessfully with a Adaptec controller anymore, the first > sign is that it can't find one library, e.g. libc or libz, and later > the hard disks transfer rate can't established and the system freezes. See > the first dmesg. > > After switching the controller to a LSILogic one, the system boots > correctly, but (presumly) under higher disk io load the system panics, > syncing my local cvs repository with cvsync in this case. See second > dmesg and trace output. > > Does someone else encounter similar problems? With the LSILogic using mpi(4), be sure to really run current, r 1.143 of dev/ic/mpi.c was causing this problem and has been backed out some days ago. No idea for the adapted problem though. Landry
Re: How to work around this compiler bug
On Thu, May 20, 2010 at 3:18 PM, Christopher Zimmermann wrote: > Hi, > > I got another problem compiling some strange C++ code with gcc > 3.5; still from opal: Again... what are you trying to achieve ? What's wrong with net/opal and x11/gnome/ekiga ports/packages ? Landry
Re: new mirror: ftp.halifax.rwth-aachen.de
On Wed, May 26, 2010 at 7:51 PM, Carsten Otto wrote: > Dear OpenBSD team, > > we offer a new mirror for your project, hosted at RWTH Aachen University > in Germany: > > http://ftp.halifax.rwth-aachen.de/openbsd/ > ftp://ftp.halifax.rwth-aachen.de/openbsd/ > rsync://ftp.halifax.rwth-aachen.de/openbsd/ > > Of course, we also offer OpenBSD at these addresses, as requested: > http://ftp.halifax.rwth-aachen.de/pub/OpenBSD/ > ftp://ftp.halifax.rwth-aachen.de/pub/OpenBSD/ > > The mirror is offering everything we could find and we consider to also > provide access to your "distfiles" in the near future. > > We currently offer 2 GBit/sec and will this extend to 10 GBit/sec soon. > > I still do not have all the data the project offers and do not know > where to sync from. Sadly, the mirrors on > http://www.openbsd.org/ftp.html#rsync do not offer the same data set > (and all of them are quite slow). Could you give me access to a > - complete > - fast > - primary? > mirror? If you have ACLs, please add 137.226.34.42. You only need to mirror two releases and snapshots (as stated on ftp.html) to become an official mirror.. having all releases is a bonus, and very few mirrors have them (iirc, only ftp.su.se). Besides, you'll need to synch from a second level mirror (ftp.eu aka ftp.su.se, from which most european mirrors fetch), primary only allows fetching to trusted mirrors ran by developers. Another second level mirror should pop up soon in .ch. Landry
Re: Tracking What it's changing in current
On Tue, Feb 15, 2011 at 5:54 PM, Orestes Leal R. wrote: > I need to see (with a tool or whatever) what changes have occured between > current, > let's say between current 4.9 from february 9 and current dated february > 14. They are logged in some place? Yeah, that's called CVS.
Re: Tracking What it's changing in current
On Wed, Feb 16, 2011 at 6:01 PM, Luis Useche wrote: > One thing I would really like to see is the diffs of every commit. This is > available for DragonflyBSD for instance. Is there a way to find this on > OBSD? http://anoncvs.estpak.ee/cgi-bin/cgit/
Re: SLiM: X server already running on display 0
On Sun, Apr 3, 2011 at 8:57 AM, Nathan Van Ymeren wrote: > Hi folks, > > I'm attempting to install SLiM and XFCE4 on 4.8. > > I first installed slim to replace the oh-so-pretty xdm, and it worked fine > to get into fvwm. After installing xfce4 however, xdm started instead of > slim on boot. As best I can determine it's an xfce problem, not a slim > problem. What about _not_ starting xdm AND slim ? You're the one to decide which login manager you want, through xdm_flags='' in rc.conf.local or the slim snippet from pkg_info -M which goes into rc.local. Installing xfce4 has nothing to do with starting xdm/slim. Landry
Re: Packages security updates
On Mon, Apr 18, 2011 at 11:45 PM, enclair wrote: > Hi, > > the FAQ says: > > "When serious bugs or security flaws are discovered in third party software, > they are fixed in the *-stable* branch of the ports tree. Remember that the > lifecycle is 1 release: only the current and last release are updated" > > Does it mean: > > 1) 4.8-stable and -current have security updates for packages. > > or > > 2) 4.7-stable and 4.8-stable have security updates for packages. Commits happen first in -current, then sometimes to 4.7-stable and 4.8-stable branches of the portstree. You need to build packages yourself though. Landry
Re: Like OpenBSD? Like to see new stuff happening? You really need to order a CD today :)
On Thu, Apr 21, 2011 at 11:55 PM, Paul M wrote: > Just order as many as you want and bin the excess. What really is being > wasted?, A wee bit of plastic, traces of other materials and a small amount > of energy used to produce it. A company that runs a big neon sign overnight > is probably wasting more than that. Wow. That's probably the lamest reply i've seen in this thread. "Everyone's wasting energy and dumping brand new things, so i should do it too!" Landry
Re: Processeur Atom ?
On 6/12/10, E.T wrote: > > yes, datacenter in french, camera, backup, protection fire. Datacenter in > frech : inverter on fire, crash server datacenter attack, maintenance > operation catastrophy, server on fire site web black-out. It's reality in > french. There is no accident, datacenter america and canada? Can you try learning english ? This is an english-only mailing list. You make us frogs really ashamed by you simili-engrish. Oh, and stop talking about things you don't know, especially here... Landry
Re: emulators/sdlmame build fails
On Thu, Jun 17, 2010 at 6:04 PM, Ted Roby wrote: > I'm still trying to build gnome on amd64. > > emulators/sdlmame fails like this: > In file included from /usr/local/include/SDL/SDL_opengl.h:44, > from src/osd/sdl/osd_opengl.h:21, > from src/osd/sdl/window.h:20, > from src/osd/sdl/input.h:15, > from src/osd/sdl/sdlmain.c:24: > /usr/X11R6/include/GL/gl.h:2100:5: error: "GL_ARB_shader_objects" is not defined > gmake: *** [obj/sdl/mame/osd/sdl/sdlmain.o] Error 1 > *** Error code 2 > > I have updated devel/sdl. > > > # pkg_info -E /usr/local/include/SDL/SDL_opengl.h > # pkg_info -E /usr/local/include/SDL/SDL_opengl.h > /usr/local/include/SDL/SDL_opengl.h: sdl-1.2.13p13 > sdl-1.2.13p13 cross-platform multimedia library Update again. p14 solves it. Landry
Re: network configuration problems
# bash /etc/netstart
>From there, you're doing it wrong.
On 6/19/10, Jean-Frangois SIMON wrote:
> Hi All,
>
> I have some problem with network in OpenBSD 4.7.
>
> The netstart script does strange output :
>
> # bash /etc/netstart
> /etc/netstart: line 44: set: -A: invalid option
> set: usage: set [--abefhkmnptuvxBCHP] [-o option-name] [arg ...]
> WARNING: /etc/hostname.re0 is insecure, fixing permissions
> DHCPREQUEST on re0 to 255.255.255.255 port 67
> DHCPACK from 192.168.30.1 (00:19:4b:07:6c:ad)
> bound to 192.168.30.11 -- renewal in 302400 seconds.
> /etc/netstart: line 44: set: -A: invalid option
> set: usage: set [--abefhkmnptuvxBCHP] [-o option-name] [arg ...]
> WARNING: /etc/hostname.re1 is insecure, fixing permissions
> /etc/netstart: line 284: syntax error in conditional expression: unexpected
> token `('
> /etc/netstart: line 284: syntax error near `@(*'
> /etc/netstart: line 284: `[[ $gw == @(*:*) ]] && continue'
>
> One point being insecure permissions but they look good :# ls -l
> /etc/hostname.*
>
> -rw--- 1 root wheel 444 Jun 19 21:15 /etc/hostname.bridge0
> -rw--- 1 root wheel5 Jun 13 01:53 /etc/hostname.re0
> -rw--- 1 root wheel 66 Jun 13 20:18 /etc/hostname.re1
>
> The other fact being not creating the bridge :
> # cat
> hostname.bridge0
>
> add re1 -learn re1
> rule pass in on re1 src 00:25:32:1b:d5:10 tag macok
> rule pass in on re1 src 00:08:64:a8:71:81 tag macok
> up
>
> #
> ifconfig
>
> lo0: flags=8049 mtu 33160
> priority: 0
> groups: lo
> inet6 ::1 prefixlen 128
> inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
> inet 127.0.0.1 netmask 0xff00
> re0: flags=8843 mtu 1500
> lladdr 00:25:32:1b:d5:10
> priority: 0
> groups: egress
> media: Ethernet autoselect (100baseTX full-duplex,rxpause,txpause)
> status: active
> inet6 fe80::225:22ff:fe1b:d510%re0 prefixlen 64 scopeid 0x1
> inet 192.168.30.11 netmask 0xff00 broadcast 192.168.30.255
> re1: flags=8843 mtu 1500
> lladdr 00:08:64:a8:71:81
> priority: 0
> media: Ethernet autoselect (none)
> status: no carrier
> inet6 fe80::208:54ff:fea8:7181%re1 prefixlen 64 scopeid 0x2
> inet 192.168.100.1 netmask 0xff00 broadcast 192.168.100.255
> enc0: flags=0<> mtu 1536
> priority: 0
> pflog0: flags=141 mtu 33160
> priority: 0
> groups: pflog
>
> May I have you help to sort it out ?
>
> Thank you,
>
> Jean-Frangois
Re: Java plugin not detected by Firefox
On Wed, Jun 30, 2010 at 11:02 PM, Jiri B. wrote: > On Wed, 30 Jun 2010 20:01:04 +0200 > Martin Toft wrote: > >> > Java plugin does not work since Firefox 3.6.x changes the connection >> > mechanism and requires newer Java. Licensing issues so far prevent >> > getting Java updated. If you need Java, you need to stay with 3.5.x >> >> And people keep telling me Java is "free"... > > IIRC OpenJDK doesn't contain all stuff, like sound support and plugin. > IceTea project bases their work on OpenJDK and provides their version > of plugin which works with OpenJDK, this is what is Debian using. And this is what pkgsrc does in www/openjdk-icedtea-plugin, which works with firefox 3.6.x. Landry
Re: Ports problem
On Wed, Aug 25, 2010 at 1:36 AM, Warlock BSD wrote: > Hi all! I have an Ibm Thinkpad r50e. I install OpenBSD, configure the X, > install fluxbox and other applications with pkg_add but when I try to > install unrar (its not in the pkg_add) unsing the ports the compilation > fail. I try to compilate other ports and fails again. I download the ports > from the ftp ports.tar.gz and using cvs but i cant compile the ports. > I get this error: > > http://pastebin.com/mm1tp9za You're trying to use a -current portstree on a 4.7 installation. This is not supported See http://www.openbsd.org/faq/faq15.html#NoFun Landry
Re: x11/xfce4/exo fails build on libnotify
On Mon, Sep 20, 2010 at 12:53 AM, Ted Roby wrote: > This is from most recent snapshot, and with infrastructure/libtool fix > in past 24 hours, 16:45 PST. > > gmake[4]: /usr/ports/infrastructure/bin/libtool: Command not found And you think this is not meaningful enough ?
