Re: who is using obsd

[Salim Shaw]

OpenBSD is a server/router/network service OS, it's not designed for 
desktops. OpenBSD is the pre-eminent platform for Firewalling, IPsec, IPv6.
Trying to shove OpenBSD onto the desktop is the ultimate case of square 
peg/round hole.




On 05/13/2013 05:12 PM, Pau wrote:

on his/her laptop as *only* OS and uses it daily for scientific work?
please contact me off list. Thanks




--
Salim A. Shaw
System Administrator
OpenBSD & CentOS / Free Software Advocate
Need stability and security -- Try OpenBSD.
BSD,ISC license all the way: Sell services, don't lease secrets

Re: who is using obsd

[Salim Shaw]

Scott,

I'll be sure not to give up my day job at DUKE Medical Center. We have 
over 20,000 employees in this medical institution and we know what works 
for desktops and we know what works for enterprise server environments.


Be sure to keep your job.


On 05/13/2013 06:59 PM, Scott McEachern wrote:

On 05/13/13 17:28, Salim Shaw wrote:
OpenBSD is a server/router/network service OS, it's not designed for 
desktops. OpenBSD is the pre-eminent platform for Firewalling, IPsec, 
IPv6.
Trying to shove OpenBSD onto the desktop is the ultimate case of 
square peg/round hole.




You're quite a comedian.

However, don't give up your day job.




--
Salim A. Shaw
System Administrator
OpenBSD & CentOS / Free Software Advocate
Need stability and security -- Try OpenBSD.
BSD,ISC license all the way: Sell services, don't lease secrets

Re: who is using obsd

[Salim Shaw]

I agree with your practicalities. We as IT professionals have to be 
careful when thrashing people. You never know who you're impacting and I 
personally would love to see OpenBSD take over the dominance of Cisco. I 
hate closed source with a vengeance, unfortunately we have to support it 
due to the powers of the almighty commercialized entity. I never 
indicated that you can't use OpenBSD as a desktop, but rather the design 
nature of the OS. It's certainly a personal choice, but large 
conglomerate institutions are HELL bent on closed source, especially at 
the desktop level.


The Mac OS is the closet thing to Unix we have at the desktop, perhaps a 
few RedHat workstations, but that's not Unix. I hate Apple just as much 
as Microsoft, because of their evil closed source methodology. They rape 
people of the freedom of choice. It's very difficult to convince the 
worlds leading Cardiologists that your environment and it's trillions of 
medical records would be best computed on an OpenBSD workstation. It's 
however a lot easier to convince that your firewalls are best protected 
by OpenBSD, because some government entities have already proven it's 
security and stability.


Salim...


On 05/14/2013 09:28 AM, Otto Moerbeek wrote:

On Tue, May 14, 2013 at 08:34:27AM -0400, Salim Shaw wrote:


Scott,

I'll be sure not to give up my day job at DUKE Medical Center. We
have over 20,000 employees in this medical institution and we know
what works for desktops and we know what works for enterprise server
environments.

Different use cases, different tools. What works for your environment
might not be suited to others'.

As a developer, I never seen decisions made in the development process
with the rationale: "OpenBSD is only suited/designed for acting as a
firewal/router/server". I use OpenBSD daily on two workstations: a
dual headed tower system and a laptop (which suspends and resumes fine
btw).

A significant amount of work goes into making an OpenBSD desktop work:
X is part of the base system, and tonnes of packages are only suited
for desktop work.

OpenBSD is a general purpose unix-like/posix system. Use it for
whatever suits you.

-Otto




--
Salim A. Shaw
System Administrator
OpenBSD & CentOS / Free Software Advocate
Need stability and security -- Try OpenBSD.
BSD,ISC license all the way: Sell services, don't lease secrets

Order request unfulfilled

[Salim Shaw]

Perhaps someone could direct me to the appropriate person to answer 
questions regarding my unfulfilled order request. In an effort to 
promote and support the OpenBSD project, I order a T-Shirt almost a 
month ago and have not received the order. I have sent two separate 
emails to /aus...@openbsd.org/ and have not received a response as to 
what has happen. I'm looking for a little help in trying to get some 
answers for my order. If anyone of you guys has a different contact, 
please provide so that I may have the issue resolved. Thanks for any 
assistance.

Thanks again,

-- 
Salim A. Shaw
System Administrator
OpenBSD & CentOS / Free Software Advocate
Need stability and security -- Try OpenBSD.
BSD,ISC license all the way: Sell services, don't lease secrets

Re: how long should CD orders take?

[Salim Shaw]

The OpenBSD project is severely under staffed in terms of shipping 
merchandise. You're not the only one waiting on purchased items. I 
humbly suggest being patient as the group is trying to address large 
quantities of orders and not enough help. The is the case at least with 
the Calgary, Canada location.


I'm waiting on an order to be filled also, from almost a month ago. So 
we have to be a little more patient than normal.



On 05/21/2013 01:34 PM, Peter J. Philipp wrote:



On 05/21/13 19:31, noah pugsley wrote:

On Tue, May 21, 2013 at 10:26 AM, Peter J. Philipp mailto:p...@centroid.eu>> wrote:

 I ordered my CD through a german bookstore that is listed at
 www.openbsd.org/orders.html .
  Only it's now the 21st of May and my computers have all been
 upgraded via FTP around the 1st of May.  And I still have no CD
 (and no stickers).

 Last year they were slow as well, which leads me to believe that
 the store is sloppy in its orders.  Can someone confirm that the
 CD's have all been sent out from Calgary?  It's really a shame
 that I must use resources of OpenBSD when not needed, my order
 went in around the end of March 2013 and there was lots of time to
 deliver this as a pre-order.

 -peter


What does the bookstore say the problem is?

I just mailed them before this.  Since it's 7:30PM I think they won't
reply until tomorrow morning.

-peter




--
Salim A. Shaw
System Administrator
OpenBSD & CentOS / Free Software Advocate
Need stability and security -- Try OpenBSD.
BSD,ISC license all the way: Sell services, don't lease secrets

Re: puzzling nginx behavior on OpenBSD

[Salim Shaw]

I have my config file as such,


location ~ \.php$ {
 root   /htdocs;
 fastcgi_pass unix:/tmp/php.sock;
 fastcgi_index  index.php;
 fastcgi_param  SCRIPT_FILENAME  /htdocs$fastcgi_script_name;
 include  fastcgi_params;
 }


On 07/01/2013 10:07 PM, Salil Wadnerkar wrote:
> Hi,
>
> I specified the root explicitly (I think, by default it looks into
> /var/www/htdocs), but that did not help.
> I started the nginx in unsafe mode (non-chrooted mode) by specifying the
> "-u" flag. I also tried unix socket communication between nginx and fastcgi
> with the socket file in /var/www/ directory (though, the location is not
> important in a non-chrooted mode), but that did not help either.
> Anyway, thank you all of you for trying to help. I have deeper
> understanding of nginx and OpenBSD now.
>
> best regards
> Salil
>
>
> On Mon, Jul 1, 2013 at 11:08 PM,  wrote:
>
>> Maybe you'll have more luck trying out the Nginx port (/etc/rc.d/enginx)
>> rather than the default chrooted one?
>>
>>
>> http://openbsd.7691.n7.nabble.com/Ruby-on-Rails-and-the-chrooted-nginx-8-td229745.html
>>
>> O.D.
>>
>> On 1. juli 2013 at 5:57 AM, "Salil Wadnerkar"  wrote:
>>> Hi,
>>>
>>> I am testing one C++ fastcgi program on nginx. I modified my nginx
>>> config
>>> by adding this
>>> block:
>>>
>>> -- /usr/local/share/nginx/nginx.conf ---
>>>
>>>server {
>>> listen   80;
>>> server_name  localhost;
>>>
>>># pass the C++ scripts to FastCGI server listening on
>>> 127.0.0.1:8000
>>> #
>>> location ~ \.cpp$ {
>>> fastcgi_pass   127.0.0.1:8000;
>>> fastcgi_param  SCRIPT_FILENAME
>>> $document_root$fastcgi_script_name;
>>> includefastcgi_params;
>>> }
>>>
>>> I run my fastcgi application using spawn-fcgi:
>>>
>>> spawn-fcgi -p 8000 -n cppreadings
>>>
>>> And I access the cpp url like this:
>>> curl http://localhost/index.cpp
>>>
>>> But, I get the error that the URL is not available and my nginx
>>> error log
>>> shows:
>>>
>>> -- /var/www/logs/error.log ---
>>>
>>> 2013/07/01 21:21:07 [error] 28733#0: *1 open() "/htdocs/index.cpp"
>>> failed
>>> (2: No such file or directory), client: 127.0.0.1, server:
>>> localhost,
>>> request: "GET /index.cpp HTTP/1.1", host: "localhost"
>>>
>>> I am puzzled as to why it is taking the URL as /htdocs/index.cpp
>>> and
>>> probably, that is the reason why it is failing. I can attach my
>>> nginx.conf,
>>> if anybody wants to view the complete config. But, basically the
>>> above is
>>> the only change I made to the default nginx config.
>>>
>>> I am using the exact same config on Mac OS X and Arch Linux and it
>>> is
>>> working there.
>>> So, that'w why I am posting it in OpenBSD forum rather than nginx
>>> forum.
>>>
>>> Thanks
>>> Salil


-- 
Salim A. Shaw
System Administrator
OpenBSD & CentOS / Free Software Advocate
Need stability and security -- Try OpenBSD.
BSD,ISC license all the way: Sell services, don't lease secrets

Re: Why I abandoned OpenBSD, and why you should too...

[Salim Shaw]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Surely, it's obvious to everyone. It's a TROLL, so get over it and carry
on with the magnificence that OpenBSD provides. If had any validity, a
professional approach what have been exhibited. So, when experiencing
unworthy garbage, treat it as such.

Good Day,

On 07/07/2013 01:55 PM, William Cummings wrote:
> Troll or OpenBSD security expert... Flip a coin!
>
>  On Jul 5, 2013, at 12:28 AM, Tito Mari Francis Escaño
 wrote:
>
>> I was initially thinking this is a troll, but with these quotes:
>>
>> "...was prepping to migrate the whole of our shop, a regional ISP in the
>> United States of America, to OpenBSD 5.3..."
>>
>> Pray tell what regional ISP you speak of here to earn their deserved
>> praise or ridicule for avoiding the OpenBSD deployment.
>>
>> "OpenBSD has shipped on over half of all network devices, including
>> things like routers, switches, gateways, and servers, for the last six
>> years. The current estimated number of OpenBSD installations sits at
>> over 350 million devices, comprising an almost ubiquitous presence of
>> OpenBSD in networks worldwide"
>>
>> I wondered if Theo or the OpenBSD Foundation has budget to pay for
>> publicity, good or bad, just for the kicks.
>


- -- 
Salim A. Shaw
System Administrator
OpenBSD & CentOS / Free Software Advocate
Need stability and security -- Try OpenBSD.
BSD,ISC license all the way: Sell services, don't lease secrets
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJR2bwvAAoJELO0Z/gjFO4kl1AH/3Vbb5Ct+IPl2XPYhQLeifu6
4WWtTtMvl7gDrwmf98Z7U975o/55MCOYUVSHXovDXFYAlGOaEvhpmDeOXfnTBGwR
RNlCerMYd1lfIrU/UsUuLHXPHs+OTWmOZ+1VXHLBJghVz8EC99nAqTeN4MEh/luQ
Wqy8D33wN4qvdqBITJkAH7cInhDNPaOA2OrH6vWVAC4LpXcpsWZTYDHBT7nK0yD/
QQmKRToJHMR7BxdjhD5/hWl6A+ZVrtEujNWpsu4zPCPIhTjFuVEC8QBpX/wuvqoH
pvCNyJJE0LLhrggsk1Wm/6ML6P2Bb8f1bx2Ihfufn4JUWzNscbrAsGP2ThfflEU=
=obKY
-END PGP SIGNATURE-

clean URL's want enable using NginX

[Salim Shaw]

I've tried a number of things with no success. Any help would be greatly 
appreciated.



#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pidlogs/nginx.pid;


events {
worker_connections  1024;
}


http {
include   mime.types;
default_type  application/octet-stream;

#log_format  main  '$remote_addr - $remote_user [$time_local] 
"$request" '

#  '$status $body_bytes_sent "$http_referer" '
#  '"$http_user_agent" "$http_x_forwarded_for"';

#access_log  logs/access.log  main;

sendfileon;
#tcp_nopush on;

#keepalive_timeout  0;
keepalive_timeout  65;

#gzip  on;

server {
listen   80;
server_name  localhost;

#charset koi8-r;

#access_log  logs/host.access.log  main;

location / {
root   /htdocs;
index  index.html index.htm index.php;
}
#error_page  404  /404.html;

# redirect server error pages to the static page /50x.html
#
error_page   500 502 503 504  /50x.html;
location = /50x.html {
root  /htdocs;
}

location @rewrite {
# Some modules enforce no slash (/) at the end of the URL
# Else this rewrite block wouldn't be needed 
(GlobalRedirect)

rewrite ^/(.*)$ /index.php?q=$1;

}

# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ \.php$ {
#proxy_pass   http://127.0.0.1;
#}

# pass the PHP scripts to FastCGI server listening on 
127.0.0.1:9000

#
location ~ \.php$ {
root   /htdocs;
fastcgi_pass   unix:/tmp/php.sock;
fastcgi_index  index.php;
fastcgi_param  SCRIPT_FILENAME /htdocs$fastcgi_script_name;
includefastcgi_params;
}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
#deny  all;
#}
}


# another virtual host using mix of IP-, name-, and port-based 
configuration

#
#server {
#listen   8000;
#listen   somename:8080;
#server_name  somename  alias  another.alias;

#location / {
#root   /htdocs;
#index  index.html index.htm;
#}
#}


# HTTPS server
#
#server {
#listen   443;
#server_name  localhost;

#ssl  on;
#ssl_certificate  /etc/ssl/server.crt;
#ssl_certificate_key  /etc/ssl/private/server.key;

#ssl_session_timeout  5m;

#ssl_protocols  SSLv2 SSLv3 TLSv1;
#ssl_ciphers  HIGH:!aNULL:!MD5;
#ssl_prefer_server_ciphers   on;

#location / {
#root   /htdocs;
#index  index.html index.htm;
#}
#}

}


--
ss

Re: Wrong Shutdown

[Salim Shaw]

Enable "SoftUpdates."

/dev/sd0a / ffs rw,softdep 1 1






On 05/26/2014 09:52 AM, Walter Souza wrote:
> Why OpenBSD has no interest in using journal file system?
>
>
> On Mon, May 26, 2014 at 10:48 AM, Theo de Raadt 
> wrote:
>
>>> I have a machine with a HardDrive with a slice of 2.7TB, and I have no
>>> UPS.. when sometimes I have power failure, and consequently a wrong
>>> shutdown, The fsck spends much time to recover the filse system, what
>> can I
>>> do? I need to be faster.
>> Get a UPS.
>>
>> fsck is required to ensure the directory hierarchy is coherent.
>>
>
>

-- 
Salim A. Shaw
System Administrator
OpenBSD / Free Software Advocate
Need security and stability --- Try OpenBSD.
BSD license all the way: Sell services, don't lease secrets

Re: Are there OpenBSD users who are not IT professionals?

[Salim Shaw]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

OpenBSD is for the world. You have to ask yourself a few questions. Are
you an open source advocate? Do you like the freedom to use an operating
system the way you want to? Do you value stability and code correctness
in an operating system? Is security paramount in your computing world?
Do you value accurate documentation and a developer world who pride
themselves on correctness? If the answer to these few question is yes,
then OpenBSD is for you.

If you like for someone to tell you, how to use an operating system and
don't mind your OS crashing and security exploits, then you're in the
wrong place.




On 11/19/2013 10:37 AM, za...@gmx.com wrote:
> Hi
>
> I am new to OpenBSD. In fact, I am a total newbie here. After reading
many posts on this list, I formed the impression that all or most
OpenBSD users are high-end IT professionals.
> I was wondering: are there OpenBSD users who are not so advanced in
terms of IT expertise? That is, who are simple computer *users*, not IT
professionals?
> I need to know this because I am starting feeling that, as an average
computer user, I might be out of place here. I was attracted to OpenBSD
by its security-by-default philosophy. Admittedly, I don't know much
about security and I would not be able to set the proper security
settings on my own, so I have decided to adopt OpenBSD and use it for
simple day-to-day tasks, as a desktop OS (as I would any popular Linux
distribution). Does this choice of mine, and its underlying reasoning,
make sense?
> Are there any significant drawbacks to my adoption of OpenBSD (such as
OpenBSD being too technical and too difficult, as compared, say, to
Linux distros)?
>
> Please, give me some advice. If OpenBSD is not for me, I would rather
know it sooner than later.
>
> Thanks
>
> Zaf
>


- -- 
Salim A. Shaw
System Administrator
OpenBSD / Free Software Advocate
Need stability and security --- Try OpenBSD.
BSD, ISC license all the way: Sell services, don't lease secrets
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSi4k7AAoJELO0Z/gjFO4kryMIAKifERLcoPeYtYo544vMC+c3
c18nb275QTLp7bMEl+iZqfuEcRsQ0V4cHfO+IsJ6Z1RAWwwEFu5GtYvWm01KOWk/
PIdh+A5e3N5aHsu0VWpgBLZeyJPH2x4QzQwOOITNk6ak5mLyVmPr8PkTDV083zNl
/U+NKoOR7o/V+EMcvzrvxd3GQh5TB+pnFaEuqXU7JkqcHdLdS2NhTDy2W7zAp5LQ
EL8GWpBKzN/dXD1vUhRq7c7fez5TZxoQ2tL3IvsMyds7P/BSl21B7tTwUIx/oo5O
hjB9bF13OCy+WXYWDESKMOodMlREm7wUETMpdubCGVOpxD61L/TZCGWcgKGEXew=
=K6m4
-END PGP SIGNATURE-

Re: Request for Funding our Electricity

[Salim Shaw]

Perhaps it's time to slightly increase the cost of CD purchases. I know 
it's not a favorite thing to do, but necessary for sustainability.



On 01/14/2014 07:30 PM, Jason Koch wrote:

No need to respond to this: just ideas if they're not already covered. I've
just made my donation.

For what it's worth - you can see the numbers on wikimedia's donations,
from 2009. I wouldn't discount the $10 user base.
http://en.m.wikipedia.org/wiki/User:Staeiou/Protocol [see the graphs on
fundraising below].

Other idea if not already taken care of - You could also get non-coding
contributors to handle the CD & stickers etc, if you don't already have
that happening. Then the fundraising arm wouldn't take away from coding
time.

Thanks
Jason



On Wed, Jan 15, 2014 at 9:24 AM, Theo de Raadt wrote:


Anyone want to suggest we hold a bake sale?

I will take this opportunity to suggest a probably bad idea but one
that crossed my mind nonetheless.

I have not actively kept up with this list so forgive me if this can't
be done, or isn't in line with the community's values, but what about
doing a Kickstarter campaign for each OpenBSD release? Varying levels
of support could get the different levels of swag that are already
distributed: CD/DVD distributions, t-shirts, stickers, etc...

The problem with this model is that once again
 - we are the ones who need to supply more;
 - we need to promising the goods;
 - we are the ones who need to invest;
 - we are supposed to do the extra work;
 - we are supposed to take time away from coding.

Don't we do enough?

Regarding the swag.  The entire OpenBSD project now probably gets 1/4
of revenue out of CD, tshirt sales, but in this model we'd have to
give much of that out to people who contribute, and it will probably
be less.

Remember to add shipping, now paid on this end, instead of by the buyer.


One could also just contribute $10-$20 to be a supporter, and receive
nothing material.

$20?  To break even with the above issues, call it $100 minimum.  Does
it still work?  Is there evidence?

And once this turn process on, if it doesn't work, are we even more dead
in the water?


Nodejitsu recently raised $256k with their Scalenpm campaign. I would
imagine there are enough people out there who care about OpenBSD too
whereby a significant amount of money could be raised.

Would that work every year?

I doubt mindshare of this sort works repeatedly.

Re: looking for openbsd friendly server vendor

[Salim Shaw]

Lord Sporkton wrote:

awesome, 64 it is, thankyou

On 27/01/2008, NetOne - Doichin Dokov <[EMAIL PROTECTED]> wrote:
  

Lord Sporkton ??:


Perhaps i was wrong but i thought openbsd was only 32 bit for now?
  

Yup, you're wrong. There's amd64 port, which runs fine on all x86 64-bit
CPUs.





  

try http://eracks.com/

s/s

Re: USB hard drives

[Salim Shaw]

Openbsd 3.9 does not seem to support vfat file systems. Before mounting your
external usb harddrive you probably want to make sure that the drive is
formatted as a msdos or ext2 file system. I had this problem with a iomega
external drive.

Salim

On 9/16/06, Default User <[EMAIL PROTECTED]> wrote:
>
> Does OpenBSD 3.9 RELEASE support usb external hard drives? I am
> considering getting one, like the Seagate 6-Gb "pocket" drive, to back
> up data from an i386 system, but could not determine from the OBSD i386
> hardware information whether such drives are supported.

Re: OpenBSD dedicated hosting

[Salim Shaw]

Hosted Solutions based out of North Carolina mat offer what you need. They
currently have data centers in Raleigh, Charlotte and Cary North Carolina.
They are working on a fourth data center outside the state. Huge initiative
to support opensource, very competent comany with some major customers in
the carolinas, such as the Carolina Hurricanes Pro Hockey team and many
more. Awesome support for Unix and Linux, specializing in Openbsd firewall
setups.

http://www.hostedsolutions.com/



On 9/16/06, Gilles Chehade <[EMAIL PROTECTED]> wrote:
>
> Hi misc@,
>
> I am looking for companies that provide OpenBSD-powered dedicated hosting.
> Currently, I am being hosted by a french company which turned out to be as
> incompetent as can be, and I am willing to switch as soon as possible
> (preferably before the 25th of September).
>
> I have google-d a bit and found out a few companies, but its hard to know
> in advance which are competent and which will drive me into depression. So
> I'm turning to you, if you know of companies that do good work, that
> aren't
> too expensive and that provide OpenBSD based services, please mail me
> off-list so I can start digging their offers.
>
> Thanks a lot people ;)