UNIX Fare well
The puffer fish is also known as blowfish or the toadfish that inhabits warmer waters around the globe. It is identified by its uncanny ability to adapt and defend itself against larger predators. The Puffer fish have a unique ability to inflate its body by sipping water or air causing it to become rounder. Another defense that a puffer fish use is its tiny sharp thorns that exude outside when the puffer fish is inflated. Some puffer fish are known for their poison that is hazardous even to the health of humans. But Puffer fish are a favorite part of the Japanese cuisine, though their poison is greater than that of cyanide, the Japanese love to it eat, especially the liver where a huge concentration of poison is common. Japanese can consume Fugu (puffer fish) at around 10,000 tons a year. When this creature appeared to you, it is telling you to have the courage to defend yourself. It is a sign that small movements can affect anyone, though they might not show it. There is a chance that you are being bullied by the people surrounding you, and the puffer fish is telling you that you have the capacity to defend yourself and the armament to protect you from any dangers. If you need some assistance regarding your low grades, a puffer fish can provide you with it, Puffer fish also indicates knowledge because of its domain, this creature can help you relax and focus on the things that you need to do. Consequently, because of its habitat, this animal is also associated with healings, people who have so much trouble in their minds can call this creature’s help to heal them and rejuvenate their stamina to go on with life. This fish is also a representation that you want to be loved despite of your short comings, you want them to understand that everybody has flaws and no one can be a perfect fit for someone, but once they give you a chance you will stay with them for as long as they want you. Look at a puffer fish, despite of its poison; it is a favorite part f the diet of Koreans and Japanese people. When you want to create a smoother relationship with your loved ones, call on this fish, there is a probability that you had a misunderstanding with your family and you want to patch thing up. Never worry because these things are just temporary and you will soon found a common ground that will bring your past relationship back. A puffer fish can be hazardous, some of the marine animals that have a taste of this fish, end up in an unfortunate ways, but if we take a deeper look at this animal, even its liver that is full of neurotoxins can taste better than the most expensive meat. Puffer fish shows up as a spirit guide when... You need strength to stand up for yourself. You require some assistance to achieve knowledge. You want to be loved despite of the flaws you have. You want a harmonious relationship with the people around you. You need some healings. Call on Puffer fish as a spirit guide when... You are being bullied You want an improvement of school grades Someone wants to be accepted for what he is. You need to patch things up with the people who are close to you. You need to distress. Sylvain sur K9 mail Android mails by spamgourmet.com
Re: BACK TO BASICS
Le 11 octobre 2019 18:08:22 GMT+02:00, "Theo de Raadt - dera...@openbsd.org" a écrit : >openbsd.s...@0sg.net wrote: > >> > "Nick Holland - n...@holland-consulting.net" >> > Envoyé: Jeudi 10 Octobre 2019 03:24AM >> > >> > On 10/9/19 11:19 AM, openbsd.s...@0sg.net wrote: >> > > Here's what I think. >> > ...[bla bla bla]... >> > > Amirite ? ;) >> > >> > I don't know. Let's see your work. >> > >> > I don't care what your theoretical arguments are, I want to see >> > results. >> >> Well then you'll only have the website provided... >> >> But actually my question is more rethorical. >> Deep down, I'm actually so saddened to see the original, and still >> performing, UNIX has become so divided first splitting into three >> *BSD communities, and then further diluted efforts with GNU and the >> Linux kernel... >> >> That's all I was trying to say. > >That's right, because monopolies always serve the public better! Rhetorically this answer sounds actually right... Sylvain Saboua K9 Mail sur Android
Re: httpd txt files display - vi/vim edit & use
Upon further investigation, I am not so sure that the problem comes from a BOM. More probably, since I'm only using vi(1) to edit my (plain)text files in general, I need to be able to specify the encoding/charset on the fly. Is that doable ? Should I update my game and use vim ? Out of curiosity, what do you obsd devs and users favour ? What's your text editor of choice ? Seeminlgy if I used vim I would only have to specify a `:set fileencoding=utf-8' configuration option. I like the simplicity of vi and prefer not to use syntax highlighting but rather proper code formatting and indentation. (replying a bit late to my own email because I didn't get the replies due to my change of email address. Oh and sorry for the HTML formatting) Le Jeudi 30 Janvier 2025 09:30 CET, sylv...@saboua.me a écrit: > > I have a folder with several standalone .txt files on my webserver. > I expect these to be displayed as such. But when opening them > in the browser, either locally (from the same machine) or from > remote, several characters such as accents and em dashes get > replaced by other characters. > > Where could this be coming from ? Searching online for a similar > problem I gather that this could have to do with the presence of a > Byte-Order Mark (BOM). If so, is there a handy command on openbsd > that allows to delete it from the txt file if present ? -- Sylvain Saboua
Re: httpd txt files display - remove Byte-Order Mark problem ?
Le Jeudi 30 Janvier 2025 12:18 CET, xse a écrit:
> On 2025-01-30 11:27, Claudio Jeker wrote:
> > httpd uses simple content-type of text/plain for txt files.
> > It does not include a charset so the browser will probably default to
> > utf8
> > so if the text files are not in utf8 encoding then the browser will not
> > display them correctly.
> >
> > From my understanding it is not possible to configure a charset in
> > httpd(8)
> >
>
> Syntax is a bit weird but you can force a default type with charset or a
> charset by type:
>
> default type "text"/"plain; charset=utf-8"
> types {
> include "/usr/share/misc/mime.types"
> "text"/"plain; charset=utf-8" txt conf pl sh diff patch md "log"
> }
>
I successfully inserted this configuration snippet in my httpd.conf
but the problem is still there.
> > On Thu, Jan 30, 2025 at 11:02:54AM +0100, Dan wrote:
> >> At this point is maybe suggestable you specify the clients you
> >> are using to access these files to see in case how to troubleshoot
> >> the client encoding / font problem.
> >>
> >> Jan 30, 2025 10:52:10 Jan Stary :
> >>
> >> > httpd serves the file as is, and advices the client with
> >> > a Content-Type header. It is then entirely up to the client
> >> > (typicaly a browser) to display what the server has served.
> >> >
> >> > On Jan 30 09:30:16, sylv...@saboua.me wrote:
> >> >>
> >> >> I have a folder with several standalone .txt files on my webserver.
> >> >> I expect these to be displayed as such. But when opening them
> >> >> in the browser, either locally (from the same machine) or from
> >> >> remote, several characters such as accents and em dashes get
> >> >> replaced by other characters.
> >> >>
> >> >> Where could this be coming from ? Searching online for a similar
> >> >> problem I gather that this could have to do with the presence of a
> >> >> Byte-Order Mark (BOM). If so, is there a handy command on openbsd
> >> >> that allows to delete it from the txt file if present ?
>
Re: httpd txt files display - remove Byte-Order Mark problem ?
At the moment this appears using any of : Brave on macOS Safari on macOS Firefox from same machine (using public website address) Firefox from same machine (using local private ip address) Default browser on /e/os smartphone I seem to remember that I could display the file correctly using a local client, typically firefox, but am unsure as this seems unlikely. Le Jeudi 30 Janvier 2025 11:02 CET, Dan a écrit: > At this point is maybe suggestable you specify the clients you > are using to access these files to see in case how to troubleshoot > the client encoding / font problem. > > Jan 30, 2025 10:52:10 Jan Stary : > > > httpd serves the file as is, and advices the client with > > a Content-Type header. It is then entirely up to the client > > (typicaly a browser) to display what the server has served. > > > > On Jan 30 09:30:16, sylv...@saboua.me wrote: > >> > >> I have a folder with several standalone .txt files on my webserver. > >> I expect these to be displayed as such. But when opening them > >> in the browser, either locally (from the same machine) or from > >> remote, several characters such as accents and em dashes get > >> replaced by other characters. > >> > >> Where could this be coming from ? Searching online for a similar > >> problem I gather that this could have to do with the presence of a > >> Byte-Order Mark (BOM). If so, is there a handy command on openbsd > >> that allows to delete it from the txt file if present ? >
Re: httpd txt files display - remove Byte-Order Mark problem ?
I have tinkered around using the file(1) command. Most files return `Non-ISO extended-ASCII text.' If I remember correctly, I created the files from copy-pasting my original pastebin.com content straight into vi(1). I am unable to find an equivalent for some option along the like of `set encoding=utf-8' that seems recommended for vim (which I don't use, am I wrong ?) by the AI / search engine. Le Jeudi 30 Janvier 2025 11:27 CET, Claudio Jeker a écrit: > httpd uses simple content-type of text/plain for txt files. > It does not include a charset so the browser will probably default to utf8 > so if the text files are not in utf8 encoding then the browser will not > display them correctly. > > From my understanding it is not possible to configure a charset in httpd(8) > > On Thu, Jan 30, 2025 at 11:02:54AM +0100, Dan wrote: > > At this point is maybe suggestable you specify the clients you > > are using to access these files to see in case how to troubleshoot > > the client encoding / font problem. > > > > Jan 30, 2025 10:52:10 Jan Stary : > > > > > httpd serves the file as is, and advices the client with > > > a Content-Type header. It is then entirely up to the client > > > (typicaly a browser) to display what the server has served. > > > > > > On Jan 30 09:30:16, sylv...@saboua.me wrote: > > >> > > >> I have a folder with several standalone .txt files on my webserver. > > >> I expect these to be displayed as such. But when opening them > > >> in the browser, either locally (from the same machine) or from > > >> remote, several characters such as accents and em dashes get > > >> replaced by other characters. > > >> > > >> Where could this be coming from ? Searching online for a similar > > >> problem I gather that this could have to do with the presence of a > > >> Byte-Order Mark (BOM). If so, is there a handy command on openbsd > > >> that allows to delete it from the txt file if present ? > > > > -- > :wq Claudio >
Re: httpd txt files display - remove Byte-Order Mark problem ?
That's kind of what I was looking for, although I am now unsure that the BOM is the actual problem (see previous reply to Claudio). Can you confirm that a working command should be tr -d '\xEF\xBB\xBF' < bomfile.txt > nobomfile.txt ? Le Jeudi 30 Janvier 2025 11:09 CET, "Jo MacMahon" a écrit: > You could also remove the BOM from the source file using something like tr(1) > > On Thu, 30 Jan 2025, at 10:02, Dan wrote: > > At this point is maybe suggestable you specify the clients you > > are using to access these files to see in case how to troubleshoot > > the client encoding / font problem. > > > > Jan 30, 2025 10:52:10 Jan Stary : > > > >> httpd serves the file as is, and advices the client with > >> a Content-Type header. It is then entirely up to the client > >> (typicaly a browser) to display what the server has served. > >> > >> On Jan 30 09:30:16, sylv...@saboua.me wrote: > >>> > >>> I have a folder with several standalone .txt files on my webserver. > >>> I expect these to be displayed as such. But when opening them > >>> in the browser, either locally (from the same machine) or from > >>> remote, several characters such as accents and em dashes get > >>> replaced by other characters. > >>> > >>> Where could this be coming from ? Searching online for a similar > >>> problem I gather that this could have to do with the presence of a > >>> Byte-Order Mark (BOM). If so, is there a handy command on openbsd > >>> that allows to delete it from the txt file if present ? >
httpd txt files display - remove Byte-Order Mark problem ?
I have a folder with several standalone .txt files on my webserver. I expect these to be displayed as such. But when opening them in the browser, either locally (from the same machine) or from remote, several characters such as accents and em dashes get replaced by other characters. Where could this be coming from ? Searching online for a similar problem I gather that this could have to do with the presence of a Byte-Order Mark (BOM). If so, is there a handy command on openbsd that allows to delete it from the txt file if present ?
Firefox cannot save downloads (or read local files)
Despite the /usr/local/share/doc/pkg-readmes/firefox-esr indications :
pledge(2) and unveil(2) Support
===
Firefox on OpenBSD is secured with pledge(2) and unveil(2) to limit
the system calls and filesystem access that each of Firefox's process
types
(main, content, remote data decoder, audio decoder, socket and GPU) is
permitted. By default, only ~/Downloads and /tmp can be written to when
downloading files, or when viewing local files as file:// URLs. You can
edit
the following files to change the pledge promises, unveil paths, and
associated
permissions:
/etc/firefox-esr/{unveil,pledge}.{content,gpu,main,rdd,socket,utility}
As unveil() can't show non-existing dirs, it is recommended to manually
create ~/Downloads for files to be properly saved in this directory.
Starting firefox-esr should create this directory, but it won't be
available
for downloads until it's restarted.
and default /etc/firefox-esr/unveil.main containing
~/.mozilla rwc
~/Downloads rwc
and default /etc/firefox-esr/unveil.content containing
~/.mozilla r
~/Downloads r
I cannot save downloads in ~/Downloads
Besides, I would like to access some of my local files, but can't manage
to find the right settings.
BSD hacking new personal computer tower configuration ?
I'm thinking of purchasing parts to an all-purpose *BSD personal computer. My budget is ~€3000 (+1k). Ideally I would like it not too noisy while staying as cool as possible (I live in a studio), and dual screen monitor (I'm thinking of one HD screen to also watch movies on and one square screen on the left for the console). First thing is the motherboard, processor, and RAM. Here also lies the bottleneck : is there a motherboard/processor combo that can host all four BSD's and derivatives ? If I'm not mistaken, I think the blowfish does not maximally exploit multi-core processor, so a quad core (for instance) is enough. It'd also be great to have it without MINIX's IME/PSP, but I know this is asking too much ! Or is it ? Note that I live in Europe (SouthWestern France) so the stores of choice would be LDLC, then Boulanger and FNAC. Unless I forget options. There's a long time since I haven't proerly hacked and built my own tower, I don't remember all particular caveats of the best optimisation. Suffice to say the computer hacking's main use would be to compile, fetch various things from the network (no brainer, right ?), as well as, more touchy, embedded / RISC-V development (hence connectics). Then I would also browse the web and use Word. Haha. Just kidding. But I'd like to watch a movie at times and have a good HD screen and 5.1/7.1 speakers for that (the latter can come later). In terms of ergonomics, I already have an all-black basic keyboard, as well as a small bépo one, and am thinking particularly of the mechanical and TypeMatrix keyboards. Someone advised an incurved monitor as well as blue light filter. I don't know much about mices, but I have short hands (I'm 5"3). That's it. Any advice/feedback fom what you guys use ? I dream of those towers with just one big fan on the right. Ideally, the whole thing would not consume much. It also needs not to be one of those huge gamer towers while still fairly powerful. Thank you
Re: deep web cookie
I find the equation in the end : c = λ/2 * ( 1 - λ/2 ) is a good explanation for the origin of "light" if λ is taken to mean the "first moment." Sylvain emails by spamgourmet.com - Mail original - > De: "sylvain saboua" > À: misc@openbsd.org > Envoyé: Vendredi 14 Février 2020 07:35:11 > Objet: deep web cookie > > (read attached picture) > > Sylvain > emails by spamgourmet.com > >
[no subject]
https://rubedo.press/ Sylvain emails by spamgourmet.com
Re: deep web cookie
The pre-bigbang would not have "wanted" the universe to happen > > I find the equation in the end : > c = λ/2 * ( 1 - λ/2 ) > is a good explanation for the origin > of "light" if λ is taken to mean the > "first moment." > > Sylvain > emails by spamgourmet.com > > - Mail original - > > De: "sylvain saboua" > > À: misc@openbsd.org > > Envoyé: Vendredi 14 Février 2020 07:35:11 > > Objet: deep web cookie > > > > (read attached picture) > > > > Sylvain > > emails by spamgourmet.com > > > > >
Linux OME laptops compatibility ?
Just now through distrowatch.com I learned about two new companies providing open source OS laptops. 1st is Starlabs : https://starlabs.systems/ A great plus is their disabling of the IME on their products when applicable. https://starlabs.kb.help/faqs/is-the-intel-management-engine-disabled/ 2nd is https://www.ubuntushop.be/index.php/fr/ (and many derivatives) (looking for information on the IME) Is anyone aware of these laptop's compatibility with OpenBSD ? Sylvain
dmesg OBSD 6.6 - only a few bugs
I had to perform an upgrade from the 6.6 CD after the 6.5 version stopped booting. Everything is now back to work. Here is the fresh dmesg. The only imperfection is : "Tearfree" X.org configuration is required whereas it wasn't on my previous OBSD install. YouTube videos are also very twitchy and seem to be heavy on the system resources, which used not to be the case. I use xfce4-desktop on an independently assembled Linux laptop. Sylvain S OpenBSD 6.6 (GENERIC) #353: Sat Oct 12 10:45:56 MDT 2019 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC real mem = 8461582336 (8069MB) avail mem = 8192516096 (7812MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xda571018 (40 entries) bios0: vendor American Megatrends Inc. version "4.6.5" date 11/11/2013 bios0: CLEVO CO. W240EU/W250EUQ/W270EUQ acpi0 at bios0: ACPI 5.0 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC FPDT MCFG SSDT HPET SSDT SSDT SSDT BGRT acpi0: wakeup devices P0P1(S4) USB1(S3) USB2(S3) USB3(S3) USB4(S3) USB5(S3) USB6(S3) USB7(S3) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4) PXSX(S4) [...] acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i3-3130M CPU @ 2.60GHz, 2594.48 MHz, 06-3a-09 cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,XSAVE,AVX,F16C,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN cpu0: 256KB 64b/line 8-way L2 cache cpu0: smt 0, core 0, package 0 mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges cpu0: apic clock running at 99MHz cpu0: mwait min=64, max=64, C-substates=0.2.1.1.2, IBE cpu at mainbus0: not configured cpu at mainbus0: not configured cpu at mainbus0: not configured ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins acpimcfg0 at acpi0 acpimcfg0: addr 0xf800, bus 0-63 acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 1 (RP01) acpiprt2 at acpi0: bus -1 (RP02) acpiprt3 at acpi0: bus 2 (RP03) acpiprt4 at acpi0: bus 3 (RP04) acpiec0 at acpi0 acpicpu0 at acpi0: C3(200@87 mwait.1@0x30), C2(500@59 mwait.1@0x10), C1(1000@1 mwait.1), PSS acpitz0 at acpi0: critical temperature is 120 degC acpipci0 at acpi0 PCI0: 0x0010 0x0011 0x acpicmos0 at acpi0 acpibtn0 at acpi0: PWRB acpibtn1 at acpi0: SLPB acpibtn2 at acpi0: LID0 acpiac0 at acpi0: AC unit online acpibat0 at acpi0: BAT0 model "BAT" serial 0001 type LION oem "NOTEBOOK" "PNP0C14" at acpi0 not configured acpivideo0 at acpi0: GFX0 acpivout0 at acpivideo0: LCD0 cpu0: using VERW MDS workaround (except on vmm entry) cpu0: Enhanced SpeedStep 2594 MHz: speeds: 2600, 2500, 2400, 2300, 2200, 2100, 2000, 1900, 1800, 1700, 1600, 1500, 1400, 1300, 1200 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 "Intel Core 3G Host" rev 0x09 inteldrm0 at pci0 dev 2 function 0 "Intel HD Graphics 4000" rev 0x09 drm0 at inteldrm0 inteldrm0: msi xhci0 at pci0 dev 20 function 0 "Intel 7 Series xHCI" rev 0x04: msi, xHCI 1.0 usb0 at xhci0: USB revision 3.0 uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 3.00/1.00 addr 1 "Intel 7 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured ehci0 at pci0 dev 26 function 0 "Intel 7 Series USB" rev 0x04: apic 2 int 16 usb1 at ehci0: USB revision 2.0 uhub1 at usb1 configuration 1 interface 0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 "Intel 7 Series HD Audio" rev 0x04: msi azalia0: codecs: VIA/0x8446, Intel/0x2806, using VIA/0x8446 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 "Intel 7 Series PCIE" rev 0xc4: msi pci1 at ppb0 bus 1 ppb1 at pci0 dev 28 function 2 "Intel 7 Series PCIE" rev 0xc4: msi pci2 at ppb1 bus 2 iwn0 at pci2 dev 0 function 0 "Intel Centrino Wireless-N 2230" rev 0xc4: msi, MIMO 2T2R, BGN, address 00:c2:c6:02:95:ea ppb2 at pci0 dev 28 function 3 "Intel 7 Series PCIE" rev 0xc4: msi pci3 at ppb2 bus 3 rtsx0 at pci3 dev 0 function 0 "Realtek RTL8411 Card Reader" rev 0x01: msi sdmmc0 at rtsx0: 4-bit, dma re0 at pci3 dev 0 function 2 "Realtek 8168" rev 0x0a: RTL8411 (0x4880), msi, address 00:90:f5:e2:e0:c3 rgephy0 at re0 phy 7: RTL8169S/8110S/8211 PHY, rev. 5 ehci1 at pci0 dev 29 function 0 "Intel 7 Series USB" rev 0x04: apic 2 int 23 usb2 at ehci1: USB revision 2.0 uhub2 at usb2 configuration 1 interface 0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 pcib0 at pci0 dev 31 function 0 "Intel HM76 LPC" rev 0x04 ahci0 at pci
SunBlade 150 to take at Lyon, France and ideas about 3 T1000 to replace, if possible.
Hello, My labs is trashing 1 Sunblade150 + Soekris 1401 from 2003 purchase. Yesterday morning, she was in good state, booting OS. Do you think she could usefull to someone in your project. Anybody close to me (Lyon,France) can pick up her ? In another plan, I need an advice : I want to replace 3 Sun Enterprise T1000 running OpenBSD (4Gb RAM/6 Cores 1Gh/Various SATA HDD) as our labs SSH gateways. Their main problems are non redondant power supply that disqualify them with our datacenter policies. Some list readers have an idea about an hardware able to replace them ? I am looking for OpenBSD hardware compatible 1/2U racks boxes, redondant PSU, with preference for another all but amd64 arch with LOM/RAC/IPMI management hardware, in less than 6kEUR budget range. Usually, my T1000 manage tunneling/forwarding for 20 ssh users, with 250Mb/s network streams. I suppose that most recent Loonsong or Octeon hardware would be able to do it easy, but I am unable to find any local resellers here, in France, outside for Ubiquity edgerouter that came without redundant PSU. I asked a quote to Rhino Labs for 2 Octeons SDNA boxes, without success. Helas, SPARC with ORACLE offers are not in my budget. Last ask, if I can replace my T1000, I will give them or I could keep them for you online and with SSH ports opened for one OS and another one for ALOM. Then, she should be power cycled 2 times by year (with notifications) but will stay in a safe datacenter environnement (CC.IN2P3) and will most probably will run smoothly most of the time. My only request then would be acceptance for your dev to respect our RENATER chart[1] and let me keep an admin access to her ALOM. I will do basic hardware maintenance cannibalizing spare T1000. Sylvain Maurin [1]-https://www.renater.fr/IMG/pdf/charte_en-2014.pdf smime.p7s Description: S/MIME cryptographic signature
6.7 > 6.8 upgrade log
After a full upgrade following the FAQ, and running the usual syspatch, pkg_add -u, pkg_check : dmesg highlights : random: boothowto does not indicate good seed cpu at mainbus0: not configured (see https://www.reddit.com/r/openbsd/comments/hab68w/how_can_i_enable_intel_hyperthreading_smt_back/ "eeprom" at iic0 addr 0x50 not configured efifb at mainbus0 not configured drm:pid23547:ivb_set_fifo_underrun_reporting *ERROR* [drm] *ERROR* uncleared fifo underrun on pipe A drm:pid23547:intel_cpu_fifo_underrun_irq_handler *ERROR* [drm] *ERROR* CPU pipe A FIFO underrun drm:pid23547:cpt_set_fifo_underrun_reporting *ERROR* [drm] *ERROR* uncleared pch fifo underrun on pch transcoder A drm:pid23547:intel_pch_fifo_underrun_irq_handler *ERROR* [drm] *ERROR* PCH transcoder A FIFO underrun Sylvain S dmesg.68 Description: Binary data
Re: kernel relinking error
- Mail original -
> De: "sylvain saboua"
>
> After a full upgrade following the FAQ,
> and running the usual syspatch, pkg_add -u, pkg_check :
>
> dmesg highlights :
>
> random: boothowto does not indicate good seed
>
> cpu at mainbus0: not configured
> (see
> https://www.reddit.com/r/openbsd/comments/hab68w/how_can_i_enable_intel_hyperthreading_smt_back/
Simply # echo "bsd.mp" > /etc/boot.conf worked
> "eeprom" at iic0 addr 0x50 not configured
>
> efifb at mainbus0 not configured
>
> drm:pid23547:ivb_set_fifo_underrun_reporting *ERROR* [drm] *ERROR*
> uncleared fifo underrun on pipe A
> drm:pid23547:intel_cpu_fifo_underrun_irq_handler *ERROR* [drm]
> *ERROR* CPU pipe A FIFO underrun
> drm:pid23547:cpt_set_fifo_underrun_reporting *ERROR* [drm] *ERROR*
> uncleared pch fifo underrun on pch transcoder A
> drm:pid23547:intel_pch_fifo_underrun_irq_handler *ERROR* [drm]
> *ERROR* PCH transcoder A FIFO underrun
>
However there was also the minor mistake :
reorder_kernel: failed -- see /usr/share/relink/kernel/GENERIC.MP/relink.log
after # doas sha256 -h /var/db/kernel.SHA256 /bsd
and rebooting, I get the same error in the dmesg but different file :
(SHA256) /bsd: OK
LD="ld" sh makegap.sh 0x gapdummy.o
ld -T ld.script -X --warn-common -nopie -o newbsd ${SYSTEM_HEAD} vers.o ${OBJS}
ld: error: undefined symbol: sysctl_bounded_arr
>>> referenced by icmp6.c:1923 (/usr/src/sys/netinet6/icmp6.c:1923)
>>> icmp6.o:(icmp6_sysctl)
*** Error 1 in /usr/share/relink/kernel/GENERIC.MP (Makefile:1437 'newbsd':
@echo ld -T ld.script -X --warn-common -nopie -o newbsd '${SYSTE...)
> Sylvain S
[net/rtorrent] no manual page (manpage) for rtorrent.
Ever since I've used this software, which must get back to 6.4 or so, the manual page has been missing. I had found a fix for this on the FreeBSD commits back then. In the meantime, here is the webpage I've used as a reference : https://linux.die.net/man/1/rtorrent
Attempting to use Brother DCP-L2510D printer on BSD
Hello, I see that, if I understand correctly, you have been able to make this printer work on ArchLinux from the officially provided RPM driver package. https://aur.archlinux.org/packages/brother-dcp-l2510d/ May I ask, what kind of porting work did that require ? I have acquired this model from Brother and have not been successful at making it work/print yet. For reference, here is the thread on the French community forums https://forum.openbsd.fr.eu.org/showthread.php?tid=2846 I also note that the printer is absent from the foomatic database maintained by Fedora. This seems strange as a driver package is available for their distribution format, but perhaps I am missing something here ? https://src.fedoraproject.org/repo/extras/foomatic-db/ Finally, I notice from the documentation (to the mailing list's attention) : The Foomatic framework supports direct printing which does not rely on CUPS (nor any spooler). Complete documentation can be found at: https://wiki.linuxfoundation.org/openprinting/database/nospoolerdocumentation I would gladly do that, but am still clueless as of now Thanks to anyone who would help -- Sylvain S from webmail
mpv won't play video : "Consider fixing your graphic drivers"
I own a 2013 Clevo laptop. Running obsd as daily driver and default/minimalist tools such as cwm, tmux, st, mpv, cmus &tc. I have a dedicated partition mounted on /home/media for storing multimedia files : music, movies, series &tc. mpv is reluctant to correctly play videos if another process is using the slightest amount of computer resources. For instance at the moment I have only a tmux session inside st running cp to put some music on an sd card. Yet the video won't play, only audio, whereas if mpv is the only process running I can enjoy my series without trouble. $mpv /home/media/E\ -\ Séries/Salem/Salem\ S01/Salem.S01E06.VOSTFR.720p.HDTV.x264-RUDY.mkv (+) Video --vid=1 (*) 'Video' (h264 1280x720 23.976fps) (+) Audio --aid=1 --alang=eng (*) 'Audio' (ac3 6ch 48000Hz) Subs --sid=1 --slang=fre (*) 'Subs' (subrip) [vo/sdl] Using opengl [vo/sdl] Warning: this legacy VO has bad performance. Consider fixing your graphics drivers, or not forcing the sdl VO. AO: [sndio] 48000Hz 5.1(alsa) (5.1) 6ch s16 VO: [sdl] 1280x720 yuv420p AV: 00:00:02 / 00:42:55 (0%) A-V: -0.000 Exiting... (Quit) $ What could go wrong ? I doubt that it would only be that my computer isn't powerful enough. I have tried different --vo arguments without success. -- Sylvain Saboua linktr.ee/Sylvain
Re: mpv won't play video : "Consider fixing your graphic drivers"
Le 2023-12-21 04:55, Anthony J. Bentley a écrit : Sylvain Saboua writes: [vo/sdl] Using opengl [vo/sdl] Warning: this legacy VO has bad performance. Consider fixing your graphics drivers, or not forcing the sdl VO. This message is specific to the sdl and xv outputs. The mpv manpage says: The recommended output driver is --vo=gpu, which is the default. All other drivers are for compatibility or special purposes. If the default does not work, it will fallback to other drivers (in the same order as listed by --vo=help). So either you're specifying sdl manually (in a config file?) or the default is not working and mpv is falling back to sdl. Can you confirm which it is? Second, it's a fallback. Nothing even plays and the warning displays in red when specifying --vo=gpu : $mpv --vo=gpu /home/media/E\ -\ Séries/Salem/Salem\ S01/Salem.S01E07.VOSTFR.720p.HDTV.x264-RUDY.mkv (+) Video --vid=1 (*) 'Video' (h264 1280x720 23.976fps) (+) Audio --aid=1 --alang=eng (*) 'Audio' (ac3 6ch 48000Hz) Subs --sid=1 --slang=fre (*) 'Subs' (subrip) [vo/gpu] Failed initializing any suitable GPU context! Error opening/initializing the selected video_out (--vo) device. Video: no video Exiting... (Errors when loading file) $ What could go wrong ? I doubt that it would only be that my computer isn't powerful enough. I have tried different --vo arguments without success. What does "without success" mean? That it continues to fall back to sdl and print that message (say, if you specify --vo=gpu)? I mean that it does not change the behavior at all. I was not aware that the default was overrun however, and hadn't tried --vo=gpu. The error above I got for the first time. -- Sylvain Saboua linktr.ee/Sylvain
any terminal emulator will default to root folder instead of $HOME
I have been using KDE/Plasma on openbsd since last week-end. Amongst other bugs, mostly minor, which I should also report, there is this one : when opening an new instance of konsole, Plasma's terminal emulator program, the fallback folder location will be in / instead of $HOME (in my case /home/sylvain). How to reproduce to bug : open a new konsole instance and type : $pwd / $ This also happens when using (suckless') st or (default) xterm. I did not have this problem with st and (openbsd's) cwm on the same openbsd installation (before upgrading to kde packages) Thank you -- Sylvain Saboua linktr.ee/Sylvain
plasmashell crashes when typing in the applications menu search bar
I have been using KDE/Plasma on openbsd-current since last sunday. I just performed sysupgrade + pkd_add -u to ensure that I use the latest version of the packages. I have installed kde, kde-plasma and kde-plasma-extra. When I open the menu applications (which icons are abnormally huge by the way, as well as on the desktop), and I type some application's name which I want to launch, the whole desktop will disappear (I can still use yakuake or a terminal to doas rcctl restart xenodm) $ll plasmashell.core -rw--- 1 sylvain sylvain 303875616 Jan 18 15:52 plasmashell.core $ The $HOME/.xsession-errors file is empty. Attached dmesg for kde devs/users, embedded below as per openbsd's mailing lists guidelines: OpenBSD 7.4-current (GENERIC.MP) #1607: Thu Jan 18 00:25:09 MST 2024 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 8447836160 (8056MB) avail mem = 8171032576 (7792MB) random: good seed from bootblocks mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xda38d018 (40 entries) bios0: vendor American Megatrends Inc. version "4.6.5" date 11/11/2013 bios0: CLEVO CO. W240EU/W250EUQ/W270EUQ efi0 at bios0: UEFI 2.3.1 efi0: American Megatrends rev 0x4028d acpi0 at bios0: ACPI 5.0 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC FPDT MCFG SSDT HPET SSDT SSDT SSDT DMAR BGRT acpi0: wakeup devices P0P1(S4) USB1(S3) USB2(S3) USB3(S3) USB4(S3) USB5(S3) USB6(S3) USB7(S3) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4) PXSX(S4) [...] acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i7-2620M CPU @ 2.70GHz, 2693.98 MHz, 06-2a-07, patch 002f cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN cpu0: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB 64b/line 8-way L2 cache, 4MB 64b/line 16-way L3 cache cpu0: smt 0, core 0, package 0 mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges cpu0: apic clock running at 99MHz cpu0: mwait min=64, max=64, C-substates=0.2.1.1.2, IBE cpu1 at mainbus0: apid 2 (application processor) cpu1: Intel(R) Core(TM) i7-2620M CPU @ 2.70GHz, 2694.06 MHz, 06-2a-07, patch 002f cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN cpu1: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB 64b/line 8-way L2 cache, 4MB 64b/line 16-way L3 cache cpu1: smt 0, core 1, package 0 cpu2 at mainbus0: apid 1 (application processor) cpu2: Intel(R) Core(TM) i7-2620M CPU @ 2.70GHz, 2694.26 MHz, 06-2a-07, patch 002f cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN cpu2: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB 64b/line 8-way L2 cache, 4MB 64b/line 16-way L3 cache cpu2: smt 1, core 0, package 0 cpu3 at mainbus0: apid 3 (application processor) cpu3: Intel(R) Core(TM) i7-2620M CPU @ 2.70GHz, 2694.24 MHz, 06-2a-07, patch 002f cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,NXE,RDTSCP,LONG,LAHF,PERF,ITSC,MD_CLEAR,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN cpu3: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB 64b/line 8-way L2 cache, 4MB 64b/line 16-way L3 cache cpu3: smt 1, core 1, package 0 ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins acpimcfg0 at acpi0 acpimcfg0: addr 0xf800, bus 0-63 acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 1 (RP01) acpiprt2 at acpi0: bus -1 (RP02) acpiprt3 at acpi0: bus 2 (RP03) acpiprt4 at acpi0: bus 3 (RP04) acpiec0 at acpi0 acpipci0 at acpi0 PCI0: 0x0010 0x0011 0x acpicmos0 at acpi0 acpibtn0 at acpi0: PWRB(wakeup) acpibtn1 at acpi0: SLPB(wakeup) acpibtn2 at acpi0: LID0(wakeup) acpiac0 at acpi0: AC unit online acpibat0 at acpi0: BAT0 model "BAT" serial 0001 type LION oem &qu
QKqueueFileSystemWatcherEngine::addPaths: open: Too many open files
KDE/Plasma's elisa (music library player/manager) and Dolphin (file manager) both crash when trying to open/manage my music library. This bug apparently has already happened (same bug report up/down-stream): https://bugs.kde.org/show_bug.cgi?id=437888 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256269 When launched Elisa will show up to "Imported 396 tracks" and then do nothing. The "Genres" section is full of genres but each contain zero (0) tracks. Opening another section (Files, Tracks, Artists, Albums) crashes the app displaying this email's subject as an error multiple times (caught using a terminal). Dolphin also crashes when trying to open "/home/media/B - Musithèque" $ls /home/media/B\ -\ Musithèque/ | wc -l 624 $lla -R /home/media/B\ -\ Musithèque/ | wc -l 11643 $ Thank you -- Sylvain Saboua linktr.ee/Sylvain
Re: any terminal emulator will default to root folder instead of $HOME
Le 2024-01-20 11:59, hahahahacker2...@airmail.cc a écrit : On 2024-01-18 21:33, Sylvain Saboua wrote: I have been using KDE/Plasma on openbsd since last week-end. Amongst other bugs, mostly minor, which I should also report, there is this one : when opening an new instance of konsole, Plasma's terminal emulator program, the fallback folder location will be in / instead of $HOME (in my case /home/sylvain). How to reproduce to bug : open a new konsole instance and type : $pwd / $ This also happens when using (suckless') st or (default) xterm. I did not have this problem with st and (openbsd's) cwm on the same openbsd installation (before upgrading to kde packages) Thank you Your ~/.profile should have a line that cd to / you mean that cd to $HOME or /home/sylvain ? There is no such cd / in my .profile. This file on my installation is very basic : $more .profile # $OpenBSD: dot.profile,v 1.7 2020/01/24 02:09:51 okan Exp $ # # sh/ksh initialization PATH=$HOME/bin:/bin:/sbin:/usr/bin:/usr/sbin:/usr/X11R6/bin:/usr/local/bin:/usr/local/sbin:/usr/games export PATH HOME TERM export ENV=$HOME/.kshrc export LC_CTYPE=en_US.UTF-8 $more .kshrc . /etc/ksh.kshrc export PS1=\$ export HISTCONTROL=ignoredups export HISTFILE=$HOME/.history export HISTSIZE=5000 export CLICOLOR=1 ... (stripped out aliases definitions) $ Note that the problem/bug is absent with yakuake : opening the terminal panel with F12 and typing pwd accurately displays /home/sylvain -- Sylvain Saboua linktr.ee/Sylvain
Re: any terminal emulator will default to root folder instead of $HOME
Le 2024-01-20 11:53, Rafael Sadowski a écrit : On Thu Jan 18, 2024 at 03:33:48PM +0100, Sylvain Saboua wrote: I have been using KDE/Plasma on openbsd since last week-end. Amongst other bugs, mostly minor, which I should also report, there is this one : when opening an new instance of konsole, Plasma's terminal emulator program, the fallback folder location will be in / instead of $HOME (in my case /home/sylvain). How to reproduce to bug : open a new konsole instance and type : $pwd / $ This also happens when using (suckless') st or (default) xterm. I did not have this problem with st and (openbsd's) cwm on the same openbsd installation (before upgrading to kde packages) Thank you -- Sylvain Saboua linktr.ee/Sylvain How do you start kde plasma? Have you read: /usr/local/share/doc/pkg-readmes/kde-plasma ? I have read the readme and simply copy-pasted the indicated lines in my .xsession (this is an extract from the files, last lines) : export XDG_RUNTIME_DIR=/tmp/run/$(id -u) if [ ! -d $XDG_RUNTIME_DIR ]; then mkdir -m 700 -p $XDG_RUNTIME_DIR fi export QT_FORCE_STDERR_LOGGING=1 export XDG_CURRENT_DESKTOP=KDE export DESKTOP_SESSION=plasma export QT_FORCE_STDERR_LOGGING=1 /usr/local/bin/startplasma-x11 > ~/.startplasma-x11.log 2>&1 -- Sylvain Saboua linktr.ee/Sylvain
Re: mpv won't play video : "Consider fixing your graphic drivers"
acpi0: PWRB(wakeup) acpibtn1 at acpi0: SLPB(wakeup) acpibtn2 at acpi0: LID0(wakeup) acpiac0 at acpi0: AC unit online acpibat0 at acpi0: BAT0 model "BAT" serial 0001 type LION oem "NOTEBOOK" "PNP0C14" at acpi0 not configured acpicpu0 at acpi0: C3(200@109 mwait.1@0x30), C2(500@80 mwait.1@0x10), C1(1000@1 mwait.1), PSS acpicpu1 at acpi0: C3(200@109 mwait.1@0x30), C2(500@80 mwait.1@0x10), C1(1000@1 mwait.1), PSS acpicpu2 at acpi0: C3(200@109 mwait.1@0x30), C2(500@80 mwait.1@0x10), C1(1000@1 mwait.1), PSS acpicpu3 at acpi0: C3(200@109 mwait.1@0x30), C2(500@80 mwait.1@0x10), C1(1000@1 mwait.1), PSS acpitz0 at acpi0: critical temperature is 120 degC acpivideo0 at acpi0: GFX0 acpivout0 at acpivideo0: LCD0 cpu0: using VERW MDS workaround (except on vmm entry) cpu0: Enhanced SpeedStep 2693 MHz: speeds: 2701, 2700, 2600, 2400, 2300, 2200, 2000, 1900, 1700, 1600, 1500, 1300, 1200, 1100, 900, 800 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 "Intel Core 2G Host" rev 0x09 inteldrm0 at pci0 dev 2 function 0 "Intel HD Graphics 3000" rev 0x09 drm0 at inteldrm0 inteldrm0: msi, SANDYBRIDGE, gen 6 xhci0 at pci0 dev 20 function 0 "Intel 7 Series xHCI" rev 0x04: msi, xHCI 1.0 usb0 at xhci0: USB revision 3.0 uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 3.00/1.00 addr 1 "Intel 7 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured ehci0 at pci0 dev 26 function 0 "Intel 7 Series USB" rev 0x04: apic 2 int 16 usb1 at ehci0: USB revision 2.0 uhub1 at usb1 configuration 1 interface 0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 "Intel 7 Series HD Audio" rev 0x04: msi azalia0: codecs: VIA/0x8446, Intel/0x2806, using VIA/0x8446 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 "Intel 7 Series PCIE" rev 0xc4: msi pci1 at ppb0 bus 1 ppb1 at pci0 dev 28 function 2 "Intel 7 Series PCIE" rev 0xc4: msi pci2 at ppb1 bus 2 iwn0 at pci2 dev 0 function 0 "Intel Centrino Wireless-N 2230" rev 0xc4: msi, MIMO 2T2R, BGN, address 00:c2:c6:02:95:ea ppb2 at pci0 dev 28 function 3 "Intel 7 Series PCIE" rev 0xc4: msi pci3 at ppb2 bus 3 rtsx0 at pci3 dev 0 function 0 "Realtek RTL8411 Card Reader" rev 0x01: msi sdmmc0 at rtsx0: 4-bit, dma re0 at pci3 dev 0 function 2 "Realtek 8168" rev 0x0a: RTL8411 (0x4880), msi, address 00:90:f5:e2:e0:c3 rgephy0 at re0 phy 7: RTL8169S/8110S/8211 PHY, rev. 5 ehci1 at pci0 dev 29 function 0 "Intel 7 Series USB" rev 0x04: apic 2 int 23 usb2 at ehci1: USB revision 2.0 uhub2 at usb2 configuration 1 interface 0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 pcib0 at pci0 dev 31 function 0 "Intel HM76 LPC" rev 0x04 ahci0 at pci0 dev 31 function 2 "Intel 7 Series AHCI" rev 0x04: msi, AHCI 1.3 ahci0: port 0: 6.0Gb/s ahci0: port 2: 1.5Gb/s scsibus1 at ahci0: 32 targets sd0 at scsibus1 targ 0 lun 0: naa.5002538f40c128a7 sd0: 953869MB, 512 bytes/sector, 1953525168 sectors, thin cd0 at scsibus1 targ 2 lun 0: removable ichiic0 at pci0 dev 31 function 3 "Intel 7 Series SMBus" rev 0x04: apic 2 int 18 iic0 at ichiic0 "eeprom" at iic0 addr 0x50 not configured spdmem0 at iic0 addr 0x52: 4GB DDR3 SDRAM PC3-12800 SO-DIMM isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 irq 1 irq 12 pckbd0 at pckbc0 (kbd slot) wskbd0 at pckbd0: console keyboard pms0 at pckbc0 (aux slot) wsmouse0 at pms0 mux 0 pms0: Synaptics touchpad, firmware 7.2, 0x1c0b1 0xa4 0x0 0xd04731 0xa pcppi0 at isa0 port 0x61 spkr0 at pcppi0 vmm0 at mainbus0: VMX/EPT efifb at mainbus0 not configured ugen0 at uhub0 port 3 "Intel Bluetooth" rev 2.00/78.69 addr 2 uvideo0 at uhub0 port 4 configuration 1 interface 0 "Bison BisonCam, NB Pro" rev 2.00/6.06 addr 3 video0 at uvideo0 uhub3 at uhub1 port 1 configuration 1 interface 0 "Intel Rate Matching Hub" rev 2.00/0.00 addr 2 uhub4 at uhub2 port 1 configuration 1 interface 0 "Intel Rate Matching Hub" rev 2.00/0.00 addr 2 vscsi0 at root scsibus2 at vscsi0: 256 targets softraid0 at root scsibus3 at softraid0: 256 targets sd1 at scsibus3 targ 1 lun 0: sd1: 255999MB, 512 bytes/sector, 524287472 sectors softraid0: volume sd1 is roaming, it used to be sd0, updating metadata softraid0: roaming device wd0a -> sd0a root on sd1a (97cd9ad0abbe5364.a) swap on sd1b dump on sd1b WARNING: / was not properly unmounted inteldrm0: 1366x768, 32bpp wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation), using wskbd0 wsdisplay0: screen 1-5 added (std, vt100 emulation) drm:pid52781:intel_pipe_update_start *ERROR* [drm] *ERROR* Potential atomic update failure on pipe B -- Sylvain Saboua linktr.ee/Sylvain
Solved: QKqueueFileSystemWatcherEngine::addPaths: open: Too many open files
Conveniently solved by adding openfiles-max and openfiles-cur parameters for the staff class in /etc/login.conf, as well as defining the kern.maxfiles to 102400 in /etc/sysctl.conf See https://marc.info/?l=openbsd-misc&m=170616598000793&w=2 Le 2024-01-18 16:25, Sylvain Saboua a écrit : KDE/Plasma's elisa (music library player/manager) and Dolphin (file manager) both crash when trying to open/manage my music library. This bug apparently has already happened (same bug report up/down-stream): https://bugs.kde.org/show_bug.cgi?id=437888 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256269 When launched Elisa will show up to "Imported 396 tracks" and then do nothing. The "Genres" section is full of genres but each contain zero (0) tracks. Opening another section (Files, Tracks, Artists, Albums) crashes the app displaying this email's subject as an error multiple times (caught using a terminal). Dolphin also crashes when trying to open "/home/media/B - Musithèque" $ls /home/media/B\ -\ Musithèque/ | wc -l 624 $lla -R /home/media/B\ -\ Musithèque/ | wc -l 11643 $ Thank you -- Sylvain Saboua linktr.ee/Sylvain
Re: plasmashell crashes when typing in the applications menu search bar
Le 2024-01-25 07:58, Rafael Sadowski a écrit : On Wed Jan 24, 2024 at 09:52:10PM +0100, bi...@iscarioth.org wrote: Hello Sylvain ! If my assumption is correct (KDE open a huge number of files during the query), So you had to increase the number of files open with > sysctl kern.maxfiles=102400 you can put it on `/etc/sysctl.conf` like this at every boot kern.maxfiles will be setup to 102400 also, you had to change your /etc/login.conf put these two lines to staff group ``` :openfiles-max=102400:\ :openfiles-cur=102400:\ ``` A little reboot is necessary, and everything will work ! ;) Thanks, this still needs to be documented in the README-plasma. This indeed solved the problem, as well as, more importantly, the bug/crash when trying to use my music library. (reported here https://marc.info/?l=openbsd-misc&m=170559205405527&w=2) -- Sylvain Saboua linktr.ee/Sylvain
sftp server empty password login
I have been using the secure shell for remote maintenance on my local machine for some time. I wish to go one step further and implement a secure file transfer server, where user(s) could download files from a read-only /home/media directory as well as upload their own files to /home/media/pub Ideally this would be done via passwordless/empty password login. I have done some research (manpages) and configuration but still fail to connect from another machine on the same local network. obsd configuration : # useradd -g media -s /sbin/nologin -u 2000 -v media # usermod -G media sylvain $ more /etc/ssh/sshd_config # relevant extracts and changes : ... PermitRootLogin no ... # override default of no subsystems #Subsystem sftp/usr/libexec/sftp-server -d /home/media Subsystem sftp internal-sftp # -d /home/media Match User media ForceCommand internal-sftp -d /home/media ChrootDirectory /home/media PasswordAuthentication yes AuthenticationMethods none PermitEmptyPasswords yes $ ll -d /home/media /home/media/pub drwxr-xr-x 16 root wheel 512 Mar 25 17:42 /home/media/ drwxr-xr-x 3 media media 512 Mar 25 17:42 /home/media/pub/ failed connexion attempt from second local machine (just pressing Enter at password prompt): Last login: Tue Mar 26 09:46:37 on ttys001 sylvain@sylvainmac ~ % sftp media@10.0.0.11 media@10.0.0.11's password: Permission denied, please try again. media@10.0.0.11's password: Permission denied, please try again. media@10.0.0.11's password: media@10.0.0.11: Permission denied (). Connection closed sylvain@sylvainmac ~ % Attempting to login using a password (after definition using `# passwd media') does not work either. What am I doing wrong ? Thank you -- Sylvain Saboua www.saboua.xyz
Re: sftp server empty password login
Problem solved, thank you !
Just removing the password asterisk using vipw was enough :
$ grep media /etc/passwd
media::2000:2000::/home/media:/sbin/nologin
and I am now able to log in, from the local network
(still need to open my ISP's box port and confirm that it
works remotely)
Le 2024-03-26 13:26, Darren Tucker a écrit :
You could run sshd in debug mode to be sure ("/usr/sbin/sshd -ddd -p
", then connect with "sftp -oport="), but...
On Tue, 26 Mar 2024 at 22:10, Sylvain Saboua
wrote:
[...]
# useradd -g media -s /sbin/nologin -u 2000 -v media
Unless /sbin/nologin is in /etc/shells (which it probably shouldn't
be), that will probably prevent the login. I'd suggest /bin/true for
both the user and in /etc/shells.
/bin/true is not in the /etc/shells file on my system.
Did you suggest I should add it ?
`# passwd media') does not work either. What am I doing wrong ?
What do you mean by "does not work"? When I've done something similar
in the past I've edited the passwd file with vipw and removed the
hashed password value leaving nothing in the password field, ie
someuser::1001:1001: [etc ...]
I meant that I could still not login sftp://media@lap after setting
a password using the passwd command.
--
Sylvain Saboua
www.saboua.xyz
Geomant - Would you review my first C project ?
Hi.
I want to learn C and to that effect I started
a first project of a program, Geomant.
The version-named file is the first version that
I both consider accomplished and bug-free.
(using clang on openbsd 7.1)
The geomant.c file is an attempt at improving the
code (mainly by declaring more variable locally)
that produces my first run-time bug instead of
a compiler warning or error.
Would you review part of whole of either file
and tell me what you think of my code ?
Thank you.
For more information on geomanteia, see:
http://naosofiakkhos.blogspot.com/2011/01/casting-of-shield-of-geomanteia.html
https://en.wikipedia.org/wiki/Geomantic_figures
--
Sylvain Saboua
from webmail/*/
/* Geomant : a basic implementation */
/* of the geomanteia intended as a first*/
/* C training project */
/* copyright © Sylvain Saboua*/
/* */
/*/
# include
# include
# include
# include
char *txt_topic ; size_t txt_topic_size = 0UL ;
// arrays displaying which figure part the user is generating.
// used between the mantize() function that gathers/parses user input,
// and generate() that generates the figures from it.
static char *mother_figures[] = { "1st", "2nd", "3rd", "4th" } ; int n_figure ;
static char *body_parts[] = { "head", "neck", "body", "feet" } ; int n_bodypart ;
// figures initialization (all 15 figures)
char *figures[15][4] = {
// mothers
{" ", " ", " ", " "},
{" ", " ", " ", " "},
{" ", " ", " ", " "},
{" ", " ", " ", " "},
// daughters
{" ", " ", " ", " "},
{" ", " ", " ", " "},
{" ", " ", " ", " "},
{" ", " ", " ", " "},
// nieces
{" ", " ", " ", " "},
{" ", " ", " ", " "},
{" ", " ", " ", " "},
{" ", " ", " ", " "},
// witnesses & judge
{" ", " ", " ", " "},
{" ", " ", " ", " "},
{" ", " ", " ", " "}
} ;
// used to temporarily store user input, which may be anything other than \0 and \n
char *txt_raw_scrap = NULL ;
size_t txt_raw_scrap_size = 0UL ;
/*
"mantize" : input fuction
This function gathers a string of user input
and returns a 0 or 1 for the evenness or
oddity of the number of characters. It is called
in a sequence by the next function to generate
the figures one by one.
*/
int mantize ( int n_bodypart, int n_figure ) {
printf ( "Hold or repeatedly press a key or keys to generate the %s of the %s mother, then press Enter:\n",
body_parts[n_bodypart], mother_figures[n_figure] ) ;
getline ( &txt_raw_scrap, &txt_raw_scrap_size, stdin ) ;
return ( ( strlen ( txt_raw_scrap ) -1 ) % 2 ) ; // substracting 1 as the \n character
}
/*
"generate" fuction:
This function takes the cast result (being 0 or 1,
odd or even) and use it to generate
all 15 figures, from the mothers down to the
daughters, nieces, witnesses and judge.
*/
int generate(){
// generating the mothers
for ( n_figure = 0 ; n_figure < 4 ; n_figure++ ) {
for ( n_bodypart = 0 ; n_bodypart < 4 ; n_bodypart++ ) {
figures[n_figure][n_bodypart] =
(0 == mantize(n_bodypart, n_figure)) ? "* *" : " * " ;
system("clear");
}
}
//generating the four daughters from the four mothers
figures[4][0] = figures[0][0] ;
figures[4][1] = figures[1][0] ;
figures[4][2] = figures[2][0] ;
figures[4][3] = figures[3][0] ;
figures[5][0] = figures[0][1] ;
figures[5][1] = figures[1][1] ;
figures[5][2] = figures[2][1] ;
figures[5][3] = figures[3][1] ;
figures[6][0] = figures[0][2] ;
figures[6][1] = figures[1][2] ;
figures[6][2] = figures[2][2] ;
figures[6][3] = figures[3][2] ;
figures[7][0] = figures[0][3] ;
figures[7][1] = figures[1][3] ;
figures[7][2] = figures[2][3] ;
figures[7][3] = figures[3][3] ;
// generating the nieces
figures[8][0] = ( figures[0][0] == figures[1][0] ) ? "* *" : " * " ;
figures[8][1] = ( figures[0][1] == figures[1][1] ) ? "* *" : " * " ;
figures[8][2] = ( figures[0][2] == figures[1][2] ) ? "* *" : " * " ;
figures[8][3] = ( figures[0][3] == figures[1][3] ) ? "* *" : " * &qu
obsd install initial boot process slowed down
Hi, my openbsed (encrypted) install is functionning really well, apart from one thing, that would signal a bug or smth: The initial boot process, right after I type the security key in, which displays cyphers aligning in between rotating semicolumns (I hope this is clear), is slow, on this install. It is the second time I managed to install an encrypted obsd. The several installs I did, this used to happen at times, other times not. Now this is so frustrating because it prevents my obsd driver and computer to be PERFECT . Any help ? -- Sylvain Saboua PS this is posted to both lists because I am unsure which is which.
Re: (dmesg) obsd install initial boot process slowed down
raphics 3000" rev 0x09 drm0 at inteldrm0 inteldrm0: msi, SANDYBRIDGE, gen 6 xhci0 at pci0 dev 20 function 0 "Intel 7 Series xHCI" rev 0x04: msi, xHCI 1.0 usb0 at xhci0: USB revision 3.0 uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 3.00/1.00 addr 1 "Intel 7 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured ehci0 at pci0 dev 26 function 0 "Intel 7 Series USB" rev 0x04: apic 2 int 16 usb1 at ehci0: USB revision 2.0 uhub1 at usb1 configuration 1 interface 0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 "Intel 7 Series HD Audio" rev 0x04: msi azalia0: codecs: VIA/0x8446, Intel/0x2806, using VIA/0x8446 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 "Intel 7 Series PCIE" rev 0xc4: msi pci1 at ppb0 bus 1 ppb1 at pci0 dev 28 function 2 "Intel 7 Series PCIE" rev 0xc4: msi pci2 at ppb1 bus 2 iwn0 at pci2 dev 0 function 0 "Intel Centrino Wireless-N 2230" rev 0xc4: msi, MIMO 2T2R, BGN, address 00:c2:c6:02:95:ea ppb2 at pci0 dev 28 function 3 "Intel 7 Series PCIE" rev 0xc4: msi pci3 at ppb2 bus 3 rtsx0 at pci3 dev 0 function 0 "Realtek RTL8411 Card Reader" rev 0x01: msi sdmmc0 at rtsx0: 4-bit, dma re0 at pci3 dev 0 function 2 "Realtek 8168" rev 0x0a: RTL8411 (0x4880), msi, address 00:90:f5:e2:e0:c3 rgephy0 at re0 phy 7: RTL8169S/8110S/8211 PHY, rev. 5 ehci1 at pci0 dev 29 function 0 "Intel 7 Series USB" rev 0x04: apic 2 int 23 usb2 at ehci1: USB revision 2.0 uhub2 at usb2 configuration 1 interface 0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 pcib0 at pci0 dev 31 function 0 "Intel HM76 LPC" rev 0x04 ahci0 at pci0 dev 31 function 2 "Intel 7 Series AHCI" rev 0x04: msi, AHCI 1.3 ahci0: port 0: 6.0Gb/s ahci0: port 2: 1.5Gb/s scsibus1 at ahci0: 32 targets sd0 at scsibus1 targ 0 lun 0: naa.5002538f40c128a7 sd0: 953869MB, 512 bytes/sector, 1953525168 sectors, thin cd0 at scsibus1 targ 2 lun 0: removable ichiic0 at pci0 dev 31 function 3 "Intel 7 Series SMBus" rev 0x04: apic 2 int 18 iic0 at ichiic0 "eeprom" at iic0 addr 0x50 not configured spdmem0 at iic0 addr 0x52: 4GB DDR3 SDRAM PC3-12800 SO-DIMM isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 irq 1 irq 12 pckbd0 at pckbc0 (kbd slot) wskbd0 at pckbd0: console keyboard pms0 at pckbc0 (aux slot) wsmouse0 at pms0 mux 0 pms0: Synaptics touchpad, firmware 7.2, 0x1c0b1 0xa4 0x0 0xd04731 0xa pcppi0 at isa0 port 0x61 spkr0 at pcppi0 vmm0 at mainbus0: VMX/EPT efifb at mainbus0 not configured ugen0 at uhub0 port 3 "Intel Bluetooth" rev 2.00/78.69 addr 2 uvideo0 at uhub0 port 4 configuration 1 interface 0 "Bison BisonCam, NB Pro" rev 2.00/6.06 addr 3 video0 at uvideo0 uhub3 at uhub1 port 1 configuration 1 interface 0 "Intel Rate Matching Hub" rev 2.00/0.00 addr 2 uhub4 at uhub2 port 1 configuration 1 interface 0 "Intel Rate Matching Hub" rev 2.00/0.00 addr 2 vscsi0 at root scsibus2 at vscsi0: 256 targets softraid0 at root scsibus3 at softraid0: 256 targets sd1 at scsibus3 targ 1 lun 0: sd1: 255999MB, 512 bytes/sector, 524287472 sectors root on sd1a (0d8d2dbcd2829dcb.a) swap on sd1b dump on sd1b inteldrm0: 1366x768, 32bpp wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation), using wskbd0 wsdisplay0: screen 1-5 added (std, vt100 emulation) Le 04/01/2023 13:54, Nick Holland a écrit : On 1/4/23 01:13, Sylvain Saboua wrote: Hi, my openbsed (encrypted) install is functionning really well, apart from one thing, that would signal a bug or smth: The initial boot process, right after I type the security key in, which displays cyphers aligning in between rotating semicolumns (I hope this is clear), is slow, on this install. Nope. Totally not clear. What platform, what hardware, dmesg. Also...no idea what you are talking about. First boot after install? every boot? during install? EXACTLY What are you seeing on the screen when it is "slow"? And what does "slow" mean? I've got encrypted partitions running on 1GHz class netbooks, which I'll admit is painful, but it's not the crypto that is the core problem. So you have to show what is different in your configuration than mine. Nick. I'll sent the reply next and the video as soon as my camera battery is charged. Thank you -- Sylvain Saboua from webmail
Re: obsd install initial boot process slowed down
Le 04/01/2023 14:22, Stuart Henderson a écrit : On 2023-01-04, Nick Holland wrote: On 1/4/23 01:13, Sylvain Saboua wrote: Hi, my openbsed (encrypted) install is functionning really well, apart from one thing, that would signal a bug or smth: The initial boot process, right after I type the security key in, which displays cyphers aligning in between rotating semicolumns (I hope this is clear), is slow, on this install. Nope. Totally not clear. Sounds like the -\|/ spinner when the boot loader loads the kernel. YES! That's it. What platform, what hardware, dmesg. Sent dmesg in separate previous mail. Also...no idea what you are talking about. First boot after install? every boot? during install? EVERY boot (ever & since install) EXACTLY What are you seeing on the screen when it is "slow"? And what does "slow" mean? I see animated/rotating wheels with cyphers in between, displaying one after the other. The wheel rotates for a longer time than other install when it just seems to load instantly one after the other. (I'll upload video & send link in next message) All good questions. Sure Cold boots only, or also warm boots? BOTH cold & warm boots. If a laptop, does it make any difference whether it's on power supply or internal battery? I mostly use this laptop as a desktop (I don't move or unplug it). (draft) I'll try with the battery unplugged but I doubt it will make a difference. EDIT: Did boot unplugged to send these emails, no difference. Is disk access slow after the OS has booted or is it just during boot? No, right after this process is over everything is fine. But slow initial boot process is the main problem. Did you try without encryption and if so, was that slow too? I use openbsd since about 2018. Not as daily driver yet, but I've been getting more and more minimalistic. Started with ed or now vi also, suckless' st & surf, tmux, man ... trying to learn it all. I've had this problem randomly depending on the installs. The first 4 or so, unencrypted, install, used to be mostly fine. The previous install was encrypted and fine, but I had to reinstall it for another reason (dualbooting conflict, there is a thread here about that. Might help to upload a video to a sharing site and post a link to it. I'll do that. Link in next mail. Thank you -- Sylvain Saboua from webmail
Re: (video) obsd install initial boot process slowed down
nction 0 "Intel HD Graphics 3000" rev 0x09 drm0 at inteldrm0 inteldrm0: msi, SANDYBRIDGE, gen 6 xhci0 at pci0 dev 20 function 0 "Intel 7 Series xHCI" rev 0x04: msi, xHCI 1.0 usb0 at xhci0: USB revision 3.0 uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 3.00/1.00 addr 1 "Intel 7 Series MEI" rev 0x04 at pci0 dev 22 function 0 not configured ehci0 at pci0 dev 26 function 0 "Intel 7 Series USB" rev 0x04: apic 2 int 16 usb1 at ehci0: USB revision 2.0 uhub1 at usb1 configuration 1 interface 0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 "Intel 7 Series HD Audio" rev 0x04: msi azalia0: codecs: VIA/0x8446, Intel/0x2806, using VIA/0x8446 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 "Intel 7 Series PCIE" rev 0xc4: msi pci1 at ppb0 bus 1 ppb1 at pci0 dev 28 function 2 "Intel 7 Series PCIE" rev 0xc4: msi pci2 at ppb1 bus 2 iwn0 at pci2 dev 0 function 0 "Intel Centrino Wireless-N 2230" rev 0xc4: msi, MIMO 2T2R, BGN, address 00:c2:c6:02:95:ea ppb2 at pci0 dev 28 function 3 "Intel 7 Series PCIE" rev 0xc4: msi pci3 at ppb2 bus 3 rtsx0 at pci3 dev 0 function 0 "Realtek RTL8411 Card Reader" rev 0x01: msi sdmmc0 at rtsx0: 4-bit, dma re0 at pci3 dev 0 function 2 "Realtek 8168" rev 0x0a: RTL8411 (0x4880), msi, address 00:90:f5:e2:e0:c3 rgephy0 at re0 phy 7: RTL8169S/8110S/8211 PHY, rev. 5 ehci1 at pci0 dev 29 function 0 "Intel 7 Series USB" rev 0x04: apic 2 int 23 usb2 at ehci1: USB revision 2.0 uhub2 at usb2 configuration 1 interface 0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 pcib0 at pci0 dev 31 function 0 "Intel HM76 LPC" rev 0x04 ahci0 at pci0 dev 31 function 2 "Intel 7 Series AHCI" rev 0x04: msi, AHCI 1.3 ahci0: port 0: 6.0Gb/s ahci0: port 2: 1.5Gb/s scsibus1 at ahci0: 32 targets sd0 at scsibus1 targ 0 lun 0: naa.5002538f40c128a7 sd0: 953869MB, 512 bytes/sector, 1953525168 sectors, thin cd0 at scsibus1 targ 2 lun 0: removable ichiic0 at pci0 dev 31 function 3 "Intel 7 Series SMBus" rev 0x04: apic 2 int 18 iic0 at ichiic0 "eeprom" at iic0 addr 0x50 not configured spdmem0 at iic0 addr 0x52: 4GB DDR3 SDRAM PC3-12800 SO-DIMM isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 irq 1 irq 12 pckbd0 at pckbc0 (kbd slot) wskbd0 at pckbd0: console keyboard pms0 at pckbc0 (aux slot) wsmouse0 at pms0 mux 0 pms0: Synaptics touchpad, firmware 7.2, 0x1c0b1 0xa4 0x0 0xd04731 0xa pcppi0 at isa0 port 0x61 spkr0 at pcppi0 vmm0 at mainbus0: VMX/EPT efifb at mainbus0 not configured ugen0 at uhub0 port 3 "Intel Bluetooth" rev 2.00/78.69 addr 2 uvideo0 at uhub0 port 4 configuration 1 interface 0 "Bison BisonCam, NB Pro" rev 2.00/6.06 addr 3 video0 at uvideo0 uhub3 at uhub1 port 1 configuration 1 interface 0 "Intel Rate Matching Hub" rev 2.00/0.00 addr 2 uhub4 at uhub2 port 1 configuration 1 interface 0 "Intel Rate Matching Hub" rev 2.00/0.00 addr 2 vscsi0 at root scsibus2 at vscsi0: 256 targets softraid0 at root scsibus3 at softraid0: 256 targets sd1 at scsibus3 targ 1 lun 0: sd1: 255999MB, 512 bytes/sector, 524287472 sectors root on sd1a (0d8d2dbcd2829dcb.a) swap on sd1b dump on sd1b inteldrm0: 1366x768, 32bpp wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation), using wskbd0 wsdisplay0: screen 1-5 added (std, vt100 emulation) Le 04/01/2023 13:54, Nick Holland a écrit : On 1/4/23 01:13, Sylvain Saboua wrote: Hi, my openbsed (encrypted) install is functionning really well, apart from one thing, that would signal a bug or smth: The initial boot process, right after I type the security key in, which displays cyphers aligning in between rotating semicolumns (I hope this is clear), is slow, on this install. Nope. Totally not clear. What platform, what hardware, dmesg. Also...no idea what you are talking about. First boot after install? every boot? during install? EXACTLY What are you seeing on the screen when it is "slow"? And what does "slow" mean? I've got encrypted partitions running on 1GHz class netbooks, which I'll admit is painful, but it's not the crypto that is the core problem. So you have to show what is different in your configuration than mine. Nick. I'll sent the reply next and the video as soon as my camera battery is charged. Thank you -- Sylvain Saboua from webmail
Installing packages using install.site
Hi everyone, I'm building a custom OpenBSD 4.4 thanks to site44.tgz & install.site. In my install.site, I use pkg_add to install the apache-httpd package (which is, with his depedencies, in the site44.tgz). It seems to work, but during the installation, I've got this error : "/var/run/ld.so.hints: File doesn't exist". pkg_add needs ld.so ? What can I do to fix that error ? Thanks a lot !
My take
First of my requirement: merge fingers with your keys, to type afayc. twitter.com/batlaizanpa
creating new partition has corrupted the disklabel ("bad super block")
Hello I have recently got an upgrade for my laptop with a 1TB SSD drive. I successfully managed to install a dual boot between archlinux and openbsd, both on encrypted partitions. Everything was fine with both systems, until the final act of the dual boot which consists in setting a partition for file sharing between the two operating systems, using encfs on ext2. Creating this partition in archlinux works fine, but has seemingly corrupted the disklabel for openbsd : openbsd boots fine until the disk-checking step comes, whereupon I am informed that the j and k partitions on the sd1 disklabel are somewhat corrupted: /dev/sd1k (/home): BAD SUPER BLOCK: MAGIC NUMBER WRONG /dev/sd1j (/usr/obj): BAD SUPER BLOCK: VALUES IN SUPER BLOCK DISAGREE WITH THOSE IN LAST ALTERNATE UNEXPECTED INCONSISTENCY; RUN fsck_ffs MANUALLY Automatic file system check failed: help! Enter pathname of shell or RETURN for sh: (this is an approximate copy of the error messages, I cannot properly access the system to copy the logs or a full disklabel/fdisk) How could I solve this ? For now trying a few things with fsck or newfs didn't work but perhaps I looked in the wrong direction. Also, this is on an install before the last openbsd 7.0 release. I don't know how I can upgrade an encrypted install using the usb medium, but perhaps if I would this would be a way to solve my problem? Thanks, -- Sylvain Saboua from webmail
PCI-Express Crypto Hardware
Hello, I am looking to upgrade our lab's ssh gateway[1] but I haven't been able to find one hardware crypto accelerator with PCIe bus. Alas, my new serverboard[2] does not provide PCI nor PCI-X slots. Do you have any tips about an openbsd compatible product ? I have a budget of about 1K EUR to purchase some crypto hardware next week and I think my lab could support[3] your project. Thanks for any help, Sylvain MAURIN 1. Soekris 1401 on SunBlade 150 http://www.isc.cnrs.fr/informatique/public_notice/OpenBSD-sshchrooted 2. Sun T1000, sparc64 arch. 3. Aka hosting and opening an access to some BSD developers agreeing our security charts, time to polish any drivers before I put T1000 server in exploitation setup, probably around mid-2009 and keeping running the old SunBlade for your project until she die. [demime 1.01d removed an attachment of type application/x-pkcs7-signature which had a name of smime.p7s]
CPU usage monitoring
Hi all, Is there any way to monitor CPU usage (preference through snmp) on an OpenBSD box ? LoadAverage is reported through netsnmp, but this does not report real CPU usage. As a newbie, I didn't find an easy way to do this. Thanks for tips. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/ Tel: +33 (0)1 30 42 72 95 Gsm: +33 (0)6 30 79 26 33
Interrupts handling in SMP
Hi all, We run some router/firewall boxes and will probably face a load problem soon. CPU takes much time in interrupt processing and I wonder if adding a second one (going to SMP) would help to speed interrupts processing ? How will the interrupt handling load would share between CPUs if we migrate to mp kernel with 2 or 4 CPUs ? Thanks for tips. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
OpenBGP nexthop
Hi, OpenBSD-current amd64 from around march, 20th. Next to a reboot, OpenBGP had a problem validating NextHops : Nexthop State x.x.x.105 invalid vlan97 UP, Ethernet, no carrier, 100 MBit/s I had about 30 addresses on different vlans in this case. This resulted in the BGP session being up but routes were not valid, thus not installed. I tried to "ifconfig down" one vlan and it crashed the whole box. Once rebooted, everything was fine. There is two points about this : - Why is this happening ? What can I do to avoid this and/or get back into business without crashing the system ? Could this have to do with the OpenBGP/kroute.c patch sent yesterday ? - Shouldn't OpenBGP drop the session if the nexthop is not valid ? In our case, we do announce another AS behind us. Sessions were up, so I believe routes were announced to everybody. But as nexthop was declared invalid, routes to this AS were not installed. I think this could have created a loop : our upstream provider was sending packets for this customer's routes. As we hadn't routes installed for customer's prefix, we were sending back the packets to upstream ... BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGP nexthop
> What was the state of the parent interface and what kind of interface is > it? Bge driver. It was up and running : BGP sessions were established through the vlans reported as invalid by OpenBGP. > ifconfig down should not crash the box. Panic message and trace would be > interesting. It was remote and we did a hard reboot without console access. Log files were empty. > No, the session and the nexthop are two different things. I agree. My point is : how to prevent routing loops in such cases ? Whatever triggered the case (a link down for any reason or a bug) is not so important. Announcing routes over the Internet and creating a routing loop for those routes is important. It could be one more setting that, if set to yes, would drop the session if it receives an unreachable nexthop ... just an idea. It could default to yes for eBGP session and no for iBGP sessions. Would that fit most of "usual" cases ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
OpenBGP crashes
Funny, I also have this : Apr 12 16:48:29 x bgpd[10601]: Lost child: session engine terminated; signal 11 Apr 12 16:48:29 x bgpd[31105]: fatal in RDE: rde_dispatch_imsg_session: pipe closed Apr 12 16:48:29 x bgpd[10601]: Lost child: route decision engine exited Once every two or three weeks. Usually where bgpd has some work to do or when the box has more traffic ... Any idea ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
[Update] OpenBGP crashes
> Funny, I also have this : > > Apr 12 16:48:29 x bgpd[10601]: Lost child: session engine terminated; > signal 11 > Apr 12 16:48:29 x bgpd[31105]: fatal in RDE: rde_dispatch_imsg_session: > pipe closed > Apr 12 16:48:29 x bgpd[10601]: Lost child: route decision engine exited I forgot to see it but just before, there is also : Apr 12 16:48:29 x bgpd[31105]: neighbor x.x.x.x (x): prefix limit reached -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
OpenBGPd max-prefix
Hi, One funny thing today. One of our customer did announce us too many routes. The max-prefix has been reached (was 5) and the session closed. A few seconds later I saw several peering sessions go down in the logs but did not thought about any links between events. Having had exchange with network managers on the other sides, they told me I reached the max-prefix on their side (was at 10 and I usually announce 2 routes + 5 from my customer). That means I did announce up to 10 routes at some point. I announce 2 for us and should have 5 more from my customer. That's 7 routes max. How could I have reached 10 announced prefixes ? What I imagine is that for a few seconds I did announce all the routes I received from my customer before the max-prefix did cut the session ? Would this be possible that max-prefix is not synchronously checked ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGPd max-prefix
> well, your 2 plus the 5 from your other customers plus the > $max-prefix The 5 is the $max_prefix. We have just only one BGP customer. Total is 7. I should never have announced more than 7 routes in any case. -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/ Tel: +33 (0)1 30 42 72 95 Gsm: +33 (0)6 30 79 26 33
Why packets from local interface to local interface get in lo0?
Hi, I am currently testing dhcping 1.2 on OpenBSD 3.5 and have some problems to get it to work on the same machine (works fine when dhcpinging other machines). The dhcpd is on the machine on interface em0 IP 172.21.50.41. I do: # dhcping -v -c 172.21.50.41 -s 172.21.50.41 -h 00:D0:59:83:A0:62 And I got: no answer. When I sniff with tcpdump -n -i em0... I see nothing!!! If I do tpcdump -n -i lo0... I see the dhcp request coming but no answer (the dhcpd is configured for em0 only). 1. Is this normal that OpenBSD send the packet through lo0 when I use an IP address of another interface? 2. Is there a way to make it recognised by dhcpd to be coming from em0? I thought it was special packet crafting it this case that was the problem but I tried with nc (netcat) with a source address of em0 and got the same thing: it pass through lo0 with 172.21.50.41 address. Thanks for your help. Sylvain Falardeau
OpenBGP+CARP : OpenBGP does not see CARP going into master state
Hi all, I'm running some tests using an out of the box OpenBSD 3.8. OpenBGPd looks fine for eBGP and iBGP links as long as it does not "depend on carp". When a bgp peer depends on a carp interface, OpenBGP does not see the interface going master and does not trigger connections up. I tried to "bgpctl reload" manually, but this does nothing. "bgpctl show interfaces" always show that carp devices never come back "master" once they entered "backup" state. I need to kill/restart bgpd in every case. My config does just include "depend on carp3" for one eBGP neighbour in this case. Is this kind of a bug or do I miss something ? It's my first round with this configuration, I could have forgot one important thing ... Thanks in advance for any help. Regards and happy Xmas. -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state
Hi, > I think this "depend on" is a nice feature - but I would not > use for "100% fail save" connections. Why not ? It has been coded for this purpose ... > You must take into account, > that the session will go down if you trigger a failover. Of course, this is the basic of a failover between two routers. > This > might be acceptable for some kind of sessions (peerings, backup links) > but may be undesirable for "main" (transit) links. This is *highly* desirable in any situation where one router goes down for any reason. Look, we're in a *failover* case. Session going down for 10 seconds is better than session going down until someone brings it back up ... Regards, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state
> * Sylvain Coutant <[EMAIL PROTECTED]> [2005-12-26 11:29]: > > OpenBGPd looks fine for eBGP and iBGP links as long as it does not > > "depend on carp". > > definately "works for me" Good. I was not very it was used in production somewhere ;-) I don't have any more the resources right now to check as I had to throw the routers to production sooner that I'd wish. According to "bgpctl show interfaces" all carp interfaces are backup when ifconfig shows them all as master ... I'll post some test results when I'll be able to reproduce and understand a little better what I've done wrong. Regards.
Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state
> If you are using bgpd you can add redundancy to your network in a more > flexible way than via carp. Terminate your upstreams on multiple boxes run > an IBGP mesh and you get failover too. We do. *And* we could also terminate all upstream BGPs (not peerings) on all boxes using carp and have even better failover ... Best wishes ;=) -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
OpenBGPd filters
Hi and happy new year to all,
I try to apply a "nexthop blackhole" filter without success on OpenBSD 3.8.
I receive the bogon list from cymru and try to force "blackholing" of the
routes without success. Here is my configuration :
group "BGPBogon" {
remote-as 65333
announcenone
multihop255
set localpref 999
neighbor x.x.x.x {
descr BGP-Bogon
local-address y.y.y.y
}
}
Later I apply the filter :
match from group BGPBogon community 65333:888 set nexthop blackhole
I tried several combinations with the reject keyword and without community
filter also, but routes are installed in the fib with a valid nexthop anyway
and the server sends the packets for those routes. I even tried to force the
nexthop at the group level without success ... !
If someone can explain me what I'm missing - any help welcome ;-)
--
Sylvain COUTANT
ADVISEO
http://www.adviseo.fr/
http://www.open-sp.fr/
OpenBGP Communities
Hi again, How can one see community tags associated to a route ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGP & IPv6
I was just about to create a new thread when I read :
> I have not seen it discussed much on the list, but OpenBGP works *very*
> well and is easy to setup using Hurricane Electrics free (ipv6-in-ipv4)
I try to setup a BGP peering with upstream and I have (v3.8) :
Jan 7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change Idle ->
Connect, reason: Start
Jan 7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change Connect
-> OpenSent, reason: Connection opened
Jan 7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change
OpenSent -> OpenConfirm, reason: OPEN message received
Jan 7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): received
notification: error in OPEN message, unsupported capabil
ity
Jan 7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): parse_notification:
capa_len 16 exceedsremaining msg length
Jan 7 10:11:19 r2 bgpd[31645]: neighbor 2001:x:21 (x-v6): state change
OpenConfirm -> Idle, reason: NOTIFICATION received
Upstream told me about capability : "We do 'inet6.unicast' only". Upstream
router is a Juniper.
Relevant configuration is :
network 2001:1b58::/32
group "Upstream" {
set localpref xxx
announceself
neighbor x.x.x.x {
remote-as x
descr x-v4
}
neighbor 2001:x:0021 {
remote-as x
descr x-v6
}
}
Any idea what I've done wrong again ?
BR,
--
Sylvain COUTANT
ADVISEO
http://www.adviseo.fr/
http://www.open-sp.fr/
Re: OpenBGPd filters
Hello Claudio, > I just tried a filter like this: > match from any AS 29166 set nexthop blackhole > > and that did work: Yes. I have run more tests since my previous post, and filter apply the blackhole tag to the route. But packet were still forwarded. After having stopped the session and restarted it, they were then dropped. BTW, all tags (localpref, etc.) manipulations require to clear the session and even to restart bgpd itself. Could this be included in the doc so one wouldn't have to search for hours on some settings change ? Thanks for your reply. -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGP & IPv6
Hi, > Try: > > announce IPv4 unicast > announce IPv6 unicast Nothing does :( -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGPd filters
> Yes they need the session up/down to be applyed I'm not sure, but some of them (I think localpref defined in a group) require the whole daemon to be restarted. Regards, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGP & IPv6
> Both Cisco based equipmentthere must be something else wrong in the > configuration... Any idea what could be "else" ? ;-) BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGP & IPv6
> so the neighbor refuses our OPEN messgae because we announce some > capability it dioesn't like, I traced frames and had a look at BGP's OPEN frames. I think neighbor doesn't like the IPv4 capability !! However, I can't change the configuration (reload, neighbour clear), IPv4 is always the only capability announced. I believe I need to kill bgpd and restart it for the change in the configuration to take effect. I can't for now. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGP & IPv6
> > However, I can't change the > > configuration (reload, neighbour clear), IPv4 is always the only > > capability announced. I believe I need to kill bgpd and restart it for > > the change in the configuration to take effect. I can't for now. > > hmm, there might have been an issue with changing the announced address > families, I vaguely remember fixing something there - tho I don't > remember when. Might have been post-3.8 I finally found that deleting the neighbor from the conf, reloading, adding back the neighbor was able to reset (when not changing groups settings) and works. Now I'm facing several (not so) funny ones : 1/ Routes are not installed because "bgpd[31578]: send_rtmsg: action 1, prefix 3ffe:800::/24: Network is unreachable". I didn't found what was causing that. I killed bgpd and restarted, nothing does. "bgpctl show interfaces" shows the interface as ok/UP. "bgpctl show nexthop" show nothing about the nexthop (others are ..., UP, active, ...). This should be the problem but I don't know how to investigate. 2/ bgpd crashes when the first IPv6 withdraw occurs : Jan 10 23:11:08 r1 bgpd[2945]: neighbor 2001:x: (AS) withdraw 2001:13a8::/48 Jan 10 23:11:08 r1 bgpd[31578]: Lost child: route decision engine terminated; signal 11 [...} Jan 10 23:11:08 r1 bgpd[26296]: session engine exiting Oops :-( 3/ Now "bgpctl show nexthop" shows a nexthop which does not exist. Its IPv4 address is nothing I know about (and is not the first 32 bits of a v6 address). -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGPd filters
> > I'm not sure, but some of them (I think localpref defined in a group) > require the whole daemon to be restarted. > > certainly not. So what should I do to change the localpref assigned this way ? "neighbor clear" did not changed the localpref last time I checked ... I didn't try to delete the neighbour, reload and add back. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGPd and TTL Security Check (RFC 3682)
> > Why don't you use IPSec? Or as second best solution TCP MD5? > > Both are supported by OpenBGPD and give you more protection that > > playing > > around with the IP TTL. > > Hum... some people rather like such options I rather like using > TCP MD5 or IPSec... IPsec is not widely supported and md5 causes timeout detection problems. TTL security check is a way to have a small but quite efficient protection. Obviously, everyone will prefer one or the other way, but there are arguments for TTL check as for others. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
3.8/64 bits/snmp
Hi list, We have problems grabbing statistics through snmp on our amd64 config. Using netsnmp and scripts that work on many other systems (OpenBSD 3.8 i386, Ubuntu Linux amd64, Debian Sarge i386) we are unable to get the CPU usage (always returns 0) and network interfaces return 64 bits counters in 32 bits OIDs. It looks it's long time known problems but we were unable to find a workaround. Any idea ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: 3.8/64 bits/snmp
> I've seen the same on amd64 (OpenBSD 3.7 and 3.8) running net-snmp 5.x. Yep, that's it ;-) > I haven't noticed any issue with interface counters, On our platform, interface counters are sent back using Counter32 while carrying 64 bits values. It works while the counter is less than 4 GB but our monitor rejects larger values ... > The problem is with net-snmp. Beyond this I haven't chased it down. But not on all platform. Netsnmp 5 works great with OpenBSD i386 or Ubuntu amd64. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
OpenBGP Communities manipulations
Hello, I'm trying to play around with OpenBGP 3.8 communities and I'd like to define several communities depending on the peers. When I set communities this way : match to any set community x:10 match to any set community x:20 Only x:20 will be set. Each set statement wipes out previous communities. Is there a way to *add* a new community to the path without wiping previous ones ? BTW, does someone have a complex community manipulation conf file to send me (in private) so I can learn tips from it ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGP Communities manipulations
> There is a "feature" in 3.8 that let you only set one community per AS. > This is fixed in -current. OK. BTW, how one could remove community tags ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
OpenBGPd-current & IPv6
Hi all, I upgraded yesterday to OpenBSD-current and re-ran IPv6 tests. Now, routes are not installed into the kernel. My config : #bgpctl sh int ... vlan97 ok UP Ethernet, active, 100 MBit/s ... #bgpctl sh nexthop ... 2001:xxx:21 valid ... This perhaps shows the problem : for other nexthops, the state of the interface is printed after "valid", I'm not sure it should be the case here. And when Updates are received, it turns into : send_rtmsg: action 1, prefix 2001:398::/32: Network is unreachable Currently, no IPv6 routes are installed to the kernel while more than 600 are received. BTW, there is a zebra daemon running. It is not problem for IPv4, could it be for IPv6 ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
OpenBGPd-current & memory
Hi, I upgraded to OpenBGPd-current (09/2/2006 snapshot) and didn't noticed yesterday about the memory usage. But, checking the rde process memory this morning gave surprising results : Box 1 : OpnBSD-current, 1 IPv4 full mesh eBGP, 1 IPv6 eBGP (681 routes), 1 iBGP to Box 2, and 10-12 peers (2 or 3 routes per peer) : 169 MB. Before the upgrade, I was running at something like 60-80 if I remember it well. Box 2 : OpnBSD 3.8, 1 IPv4 full mesh eBGP, 1 iBGP to Box 1, 1 peer (3 routes) : 57 MB. Stable. On Box 1, I play a little with communities : each route is tagged with 2 to 6 communities attributes ;-) Any guess what cause such a high memory load on my first box ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGPd-current & memory
> Softreconfig in. If you modify the path attributes on "from" rules the > will be added twice to the table. You can turn softreconfig in off in > -current via the peer directive "softreconfig in no". OK. This is just a feature so ;-) Could I try to understand what softreconfig does and not as it is undocumented (or did I search the wrong place ?). As far as I understand it from your mail and CVS comment, if set to on, it will reapply all filters when configuration is reloaded, without the need to restart ? Is that it ? Is it reliable currently ? If I keep it turned on, what will be the memory overhead ? Currently my memory load goes up every hour (between 1 and 2 MB per hour). Will this stop at some point and how could try to approximate the final load ? Thanks for your help. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGPd-current & memory
> The increase you are seeing might just be > fragmentation. I did play a little with my config this afternoon. I ran two reloads and I'm currently eating near 250 MB. I'll continue to monitor in the next hours, but it begins to be a little too much for just one full eBGP and one iBGP ! At some point, I'll reset the sessions or restart the server to try to approx. the amount of memory lost due to fragmentation. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGPd-current & memory
> that indeed smells like a bug somewhere. How could I try to track this down ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGPd-current & memory
> > that indeed smells like a bug somewhere. Obviously : my bgpd/rde is now eating 21 more MB than a few ours ago (267 MB total). # bgpctl show rib memory RDE memory statistics 177462 IPv4 network entries using 10.8M of memory 682 IPv6 network entries using 48.0K of memory 355940 prefix entries using 19.0M of memory 70704 BGP path attribute entries using 8.1M of memory 29562 BGP AS-PATH attribute entries using 1.2M of memory, and holding 70704 references 3527 BGP attributes entries using 138K of memory and holding 83977 references 3526 BGP attributes using 21.4K of memory RIB using 39.3M of memory I know deliver a full feed to a downstream customer and it looks each time he resets the session, my memory usage goes up ! It just looks like, I was unable to track this down better. Any idea about how I should handle this ? BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: OpenBGPd-current & memory
> > > that indeed smells like a bug somewhere. > > Obviously : my bgpd/rde is now eating 21 more MB than a few ours ago (267 > MB total). This morning's statistics : bgpd/rde is eating 481 MB (after a bgpctl reload). # bgpctl sh rib memory RDE memory statistics 177310 IPv4 network entries using 10.8M of memory 682 IPv6 network entries using 48.0K of memory 709886 prefix entries using 37.9M of memory 140820 BGP path attribute entries using 16.1M of memory 29625 BGP AS-PATH attribute entries using 1.2M of memory, and holding 140820 references 3670 BGP attributes entries using 143K of memory and holding 167371 references 3669 BGP attributes using 24.1K of memory RIB using 66.2M of memory > Any idea about how I should handle this ? ... ;) BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/ Tel: +33 (0)1 30 42 72 95 Gsm: +33 (0)6 30 79 26 33
pf/carp load balancing on 4 firewalls
Hi gurus, I'm working on a project where carp loadbalancing firewalls could exactly fit our needs. Before that, I wonder how it will work outside of the OpenBSD boxes. First, regarding Carp and STP what happens usually in a manageable L2 switch when the same MAC is announced on two different ports ? I don't remember that STP includes loadsharing, so isn't it possible the switch will only choose one port to forward on ? Please excuse me if it sounds stupid and just explain why ;-) Next, my setup would involve 4 firewalls connected 2 by 2 on two switches, themselves connected together through one port. That setup would connect two or more, but it doesn't matter here) servers : FW1A FW1B FW2A FW2B || || || || SWITCH1-SWITCH2 | | | | SRV1SRV2 Once again, how will spanning tree handle this case with the same MAC announced from the 4 firewalls ? My guess is packets from SRV1 will be dispatched to FW1* because the cost will be lower. Same for SRV2/FW2*. Could some help me understand how this setup could behave in real ... BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Re: pf/carp load balancing on 4 firewalls
Thanks Jason for the details. I'm quite good from L3 and up, but I still never had to understand so much about L2 ;-)) > The problem you will/may encounter will differ based on the vendor of > SWITCH1 and SWITCH2. Some vendors will handle it OK if the MAC is a > multicast MAC, some will log a warning, some will not allow it and simple > accept the first port, some will forward randomly. OK, and it will be a multicast MAC as long as I remember how do carp work. Would it mean the frame could be duplicated ? Is there any good article/tutorial about this you're aware of ? > This is a pure vendor-implementation issue of how they forward frames > and if their CAM/FDB/Forwarding Database/whatever they call it allows > multiple entries and if it expires entries on ports that go down. That's bad news :-( > > switches, themselves connected together through one port. That setup > > With all that attention to redundacy, why not make the link between > SWITCH1 and SWITCH2 two links or more? I have to be honest : the posted schema is a simplified one. It misses two informations : - There could be two levels of switches involved between servers and firewalls (from two different vendors !), - The link between switches is a metro link. That's why I am interested in having the lowest possible number of frames from one server being forwarded to remote firewalls. Routers will choose the right destination after the firewalls, but I would like to keep server<=>firewalls traffic as much local as possible. > If you have a relationship with the vendor, ask them. Not still sure of the vendor. Should be 3COM. > Or simply try > it out and report back! I don't have the hardware, I must plan this for the end of the month. BR, -- Sylvain COUTANT ADVISEO http://www.adviseo.fr/ http://www.open-sp.fr/
Network card EM not recognized
on 0 "Intel PRO/1000 PT (82575EB)" rev 0x02: cannot find i/o space em1 at pci2 dev 0 function 1 "Intel PRO/1000 PT (82575EB)" rev 0x02: cannot find i/o space ppb2 at pci0 dev 28 function 0 "Intel 82801I PCIE" rev 0x02: apic 2 int 17 (irq 5) pci3 at ppb2 bus 3 em2 at pci3 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: apic 2 int 16 (irq 10), address 00:10:f3:1a:49:6a ppb3 at pci0 dev 28 function 1 "Intel 82801I PCIE" rev 0x02: apic 2 int 16 (irq 10) pci4 at ppb3 bus 4 em3 at pci4 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: apic 2 int 17 (irq 5), address 00:10:f3:1a:49:6b ppb4 at pci0 dev 28 function 2 "Intel 82801I PCIE" rev 0x02: apic 2 int 18 (irq 11) pci5 at ppb4 bus 5 em4 at pci5 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: apic 2 int 18 (irq 11), address 00:10:f3:1a:49:6c ppb5 at pci0 dev 28 function 3 "Intel 82801I PCIE" rev 0x02: apic 2 int 19 (irq 15) pci6 at ppb5 bus 6 em5 at pci6 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: apic 2 int 19 (irq 15), address 00:10:f3:1a:49:6d ppb6 at pci0 dev 28 function 4 "Intel 82801I PCIE" rev 0x02: apic 2 int 17 (irq 5) pci7 at ppb6 bus 7 em6 at pci7 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: apic 2 int 16 (irq 10), address 00:10:f3:1a:49:6e ppb7 at pci0 dev 28 function 5 "Intel 82801I PCIE" rev 0x02: apic 2 int 16 (irq 10) pci8 at ppb7 bus 8 em7 at pci8 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: apic 2 int 17 (irq 5), address 00:10:f3:1a:49:6f uhci0 at pci0 dev 29 function 0 "Intel 82801I USB" rev 0x02: apic 2 int 23 (irq 14) uhci1 at pci0 dev 29 function 1 "Intel 82801I USB" rev 0x02: apic 2 int 19 (irq 15) ehci0 at pci0 dev 29 function 7 "Intel 82801I USB" rev 0x02: apic 2 int 23 (irq 14) usb0 at ehci0: USB revision 2.0 uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 ppb8 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0x92 pci9 at ppb8 bus 9 vga1 at pci9 dev 1 function 0 "ATI ES1000" rev 0x02 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) radeondrm0 at vga1: apic 2 int 19 (irq 15) drm0 at radeondrm0 pciide0 at pci9 dev 3 function 0 "Promise PDC20275" rev 0x01: DMA, channel 0 configured to native-PCI, channel 1 configured to native-PCI pciide0: using apic 2 int 22 (irq 3) for native-PCI interrupt pcib0 at pci0 dev 31 function 0 "Intel 82801IR LPC" rev 0x02 pciide1 at pci0 dev 31 function 2 "Intel 82801I SATA" rev 0x02: DMA, channel 0 configured to native-PCI, channel 1 configured to native-PCI pciide1: using apic 2 int 19 (irq 15) for native-PCI interrupt ichiic0 at pci0 dev 31 function 3 "Intel 82801I SMBus" rev 0x02: apic 2 int 18 (irq 11) iic0 at ichiic0 lm1 at iic0 addr 0x2d: W83792D rev D spdmem0 at iic0 addr 0x50: 2GB DDR2 SDRAM non-parity PC2-5300CL5 spdmem1 at iic0 addr 0x52: 2GB DDR2 SDRAM non-parity PC2-5300CL5 pciide2 at pci0 dev 31 function 5 "Intel 82801I SATA" rev 0x02: DMA, channel 0 wired to native-PCI, channel 1 wired to native-PCI pciide2: using apic 2 int 19 (irq 15) for native-PCI interrupt wd0 at pciide2 channel 0 drive 0: wd0: 16-sector PIO, LBA48, 476940MB, 976773168 sectors wd0(pciide2:0:0): using PIO mode 4, Ultra-DMA mode 6 usb1 at uhci0: USB revision 1.0 uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1 usb2 at uhci1: USB revision 1.0 uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1 isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 spkr0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 wbsio0 at isa0 port 0x2e/2: W83627HF rev 0x41 lm2 at wbsio0 port 0xa00/8: W83627HF mtrr: Pentium Pro MTRR support umass0 at uhub0 port 1 configuration 1 interface 0 "HLDS Inc SuperMulti RW" rev 2.00/1.59 addr 2 umass0: using ATAPI over Bulk-Only scsibus0 at umass0: 2 targets, initiator 0 cd0 at scsibus0 targ 1 lun 0: ATAPI 5/cdrom removable uhidev0 at uhub1 port 2 configuration 1 interface 0 "HEWLETT-PACKARD Hewlett-Packard TFT7600 RKM" rev 1.10/1.04 addr 2 uhidev0: iclass 3/1 ukbd0 at uhidev0: 8 modifier keys, 6 key codes wskbd1 at ukbd0 mux 1 wskbd1: connecting to wsdisplay0 uhidev1 at uhub1 port 2 configuration 1 interface 1 "HEWLETT-PACKARD Hewlett-Packard TFT7600 RKM" rev 1.10/1.04 addr 2 uhidev1: iclass 3/1 ums0 at uhidev1: 3 buttons, Z dir wsmouse0 at ums0 mux 0 vscsi0 at root scsibus1 at vscsi0: 256 targets softraid0 at root root on wd0a swap on wd0b dump on wd0b Sylvain * * Ce message et toutes les pieces jointes sont confid
can't NAT from tunnel to ext
Hi Misc, I have an OpenBSD 4.5 amd64 as a VPN server (OpenVPN) connected to Internet on em0 through the gateway 192.168.1.1. VPN Users connect from the outside and get a tun0 interface with an address on 10.8.0.0/24. I want VPN users to access Internet through my VPN server, so I have the proper routing rules setup. BUT my OpenBSD won't NAT traffic from 10.8.0.0/24 to em0. It will route the packets outside, but the source address remains 10.8.0.6, which is unfortunate. Here's my /etc/pf.conf: scrub in all nat pass log on em0 from tun0:network to any -> (em0) nat pass log on em0 from em0:network to any -> (em0) pass in quick on lo0 all pass out quick on lo0 all pass out on em0 keep state pass out on tun0 keep state pass in on em0 pass in on tun0 I used the second NAT rule above to verify that the NAT worked on the local interface without tunnelling. If someone has an idea on how to solve this, it would be greatly appreciated. Thanks. SB
Re: Apple Macbook Air (M1) lost bwfm
Are we to understand that the default wireless device of the Apple M1 is not functional yet with openbsd ? I thought differently upon reading web "tutorials", but now that I have successfully installed my blowfish on the MacBook Air fw_update won't work (using bwfm). Is there a detailed/specific set of instructions on how to make the wifi work either using fw_update or else or pre-emptively with the Avahi installer ? Le 2024-09-25 16:59, Stuart Henderson a écrit : On 2024-09-25, Jan Stary wrote: This is 7.6-beta/arm64 (#179) on an MBA (M1, 2020), the last kernel used is this: https://github.com/janstary/dmesg/blob/master/apple-macbook-air-A2337.20240915 While this listing shows bwfm0 at pci1 dev 0 function 0 "Broadcom BCM4378" rev 0x03: msi and it worked (I pkg_add-u'd the packages after the upgrade), now I don't even have bwfm - with this same kernel, or with an older /obsd (#31 of May's 7.5). I blame the macOS upgrade to 15.0 (24A335) but I can't be sure. Is it possible the macOS upgrade did something to the firmware? OpenBSD has bwfm-firmware-20200316.1.3p3 installed. OpenBSD/arm64 on Apple hardware doesn't use firmware from bwfm-firmware, there's some process to copy it from MacOS via the Asahi installer and it's then picked up by the OpenBSD installer. (I'm not sure of all the details, the only option for wifi on mine involves a chain of dongles). But if it's not showing in dmesg at all, you're not at the point where firmware would be used anyway. dmesg might be useful if you've got some way to transport it (usb stick, usb ethernet, etc) Also, I have lost hw.sensors.aplsmc, not sure how that would happen ... I'll try another upgrade once I get a USB-C stick I can use. Worth a try. -- Sylvain Saboua www.saboua.xyz
Files on external drive randomly deleted ? Yet still show up on df command
About one week before when I woke up I saw that most of the files from my /mnt hard drive had disappeared. Public and personal archives, media collection... Nothing shows up anymore. 'du -sh' command displays free space, however the space is still used up as per 'df -h' command. #pwd ; du -sh . ; df -h | grep -E 'Used|fusefs' /mnt122G. Filesystem SizeUsed Avail Capacity Mounted on fusefs 3.6T3.3T328G92%/mnt # Is there a way to diagnose the issue, and to keep/recover the (apparently still present) files ? -- Sylvain Saboua www.saboua.xyz
httpd (does not) delivers (obsolete) html file
Regularly I make minor [ae]d?ditions to my static html files. Afaik the browser needs to manually refresh the file in order to display the latest version. Am I doing something wrong or is there a workaround ? This is also annoying when editing the style sheets. Thank you -- Sylvain Saboua www.saboua.xyz
Re: remote ssh login fail "Authenticator provider $SSH_SK_PROVIDER did not resolve" (macOS)
Le 2024-12-29 21:28, Janne Johansson a écrit : I for the first time am attempting to log in using an external (public) network from my M1 (Apple) machine to my remote openbsd machine/server. debug1: Connecting to saboua.xyz port 22. ssh: connect to host saboua.xyz port 22: Operation timed out Might be worth seeing if the mac is running latest major of MacOS, since it seemingly has/had some odd network issues when it came and if you haven't upgraded to latest sequoia, you might be suffering from the weird network issue they had on 15.0. The error remains since I updated to the latest available macOS Sequoia 15.2, two days ago. -- Sylvain Saboua www.saboua.xyz
Re: New Server Hardware
On 2025-04-28 10:49, Simon Parrer wrote: Good Morning, I think to buy a new Server [PRIMERGY TX1330 M6] but I can't find information if it will work for OpenBSD. Maybe someone have this Hardware and can send me some Information about it (DMESG) for me it looks good what I see and I think all is supportet but I am not sure and they are not cheap. :D Regarding dmesg's and hardware compatibility, have you had a look at the following: https://bsd-hardware.info/ https://dmesgd.nycbug.org/ Many Thanks and Best Regards Simon Good luck -- Sylvain Saboua
Re: interactive-shell escapes in sysupgrade/autoinstall?
I ran into the same problem (/home and /var/www on separate encrypted partitions, I avoided full-disk encryption in order to be able to distant reboot). For this time, I just unmounted /home before sysupgrade(8) and hoped I'd remember to do the same next time. On 2025-05-12 07:09, Jonathan Thornburg wrote: I have an OpenBSD system for which /home isn't in /etc/fstab. Rather, /home lives on its own softraid volume. After each multiuser boot I login as root and run (a shell script which invokes a perl script which invokes) bioctl to assemble and mount the /home softraid volume. Today (trying to upgrade from 7.6-stable/amd64 to 7.7/amd64) I discovered that this breaks sysupgrade (and autoinstall): sysupgrade downloads the install sets to /home/_sysupgrade/ just fine (since at the time I type 'sysupgrade' I've already done a normal multiuser boot, including assembling and mounting /home), but after the system reboots into /bsd.upgrade, there's no /home and the upgrade fails (and then times out and reboots the non-upgraded system). My question is, would it be useful for the autoinstall system to allow optional escapes to an interactive shell (maybe triggered by special lines in /install.conf)? If such a facility existed, I could have used it to run bioctl and mount /home after the reboot into /bsd.upgrade, allowing the upgrade to proceed. -- Sylvain Saboua looking for a PDP-11
Re: Continuous browser crashes
On May 26, 2025 2:17:05 AM GMT+02:00, LWS wrote: >Hi, I would like to ask if it is normal that on a desktop with 8 giga I >have continuous browser crashes. This happens on both firefox and chromium. >In the past I had the same problems when I used openbsd as a virtual >machine on a freebsd machine. And so I had justified it thinking that it >depended on virtualization. Now instead I am on a physical machine and I >have the same problems. >It is not the entire browser that crashes but only the tab. Let's say I >have about 20 or 30 crashes daily. I had asked the same question on reddit >and they advised me to modify the /etc/login.conf file to widen the memory >limits. But this measure did not produce any results. Now login.conf should >be the default after upgrade to 7.7 >The machine is an old fujitsu machine with 8 giga from 2018. > >To be precise, the machine is the following: >https://bsd-hardware.info/?probe=1ba76bf7e5 >That is, I was the one who uploaded that data even though I am now on >openbsd 7.7. But the package list and everything else is my machine. > >My "id" is this: >uid=1000(my_user) gid=1000(my_user) groups=1000(my_user), 0(wheel), >20(staff) > >and the following is staff on login.conf >staff:\ >:datasize-cur=1536M:\ >:datasize-max=infinity:\ >:maxproc-max=512:\ >:maxproc-cur=256:\ >:ignorenologin:\ >:requirehome@:\ >:tc=default: > >Thank you for any help. >lws. Hi, you need not to be in the "staff" *group* but in the "staff" *class* : # usermod -L staff my_user Hope that helps Sylvain Saboua
Re: Future of Xenocara
What about Arcan ? I'm not technically proficient or well-versed in the subject topic of display manager but I am quite compelled by the case for TUI's (textual user interface) and the argument that GUI's should be a part/subset of console/tty's and not the other way around. On June 15, 2025 3:36:42 PM GMT+02:00, Christopher Turkel wrote: >Wayland is a solution in search of a problem but it appears to be the >future. Maintaining a fork would be a tremendous effort, I think it's >better just move forward with Wayland, it does work (kind of) now and with >more work it will be usable. > >On Sun, Jun 15, 2025 at 8:55 AM Roderick wrote: > >> Some Linux distributions are substituting Xorg with wayland, >> Xorg self seems to aim to obsolete x11, >> and there is now a questionable fork that probably will not lead to a >> success: >> >> https://github.com/X11Libre/xserver >> >> Sure x11 is not perfect, it was not from the beginning, and much of its >> original >> intended functionality is obstructed by later developments >> (unfortunately 'network >> transparency'), but wayland is not an improvement of x11, it is something >> else. >> >> I do think a fork will be necessary if one wants something with the >> functionality of x11, >> and there will be a point of no return if it is not done timely. >> >> Could xenocara become the continuation of x11? >> >> Rodrigo >> >> Sylvain Saboua
Firefly RK3399 / HiFive UnMatched compatibility using NAS HDD ?
Still willing to get a Server-on-Card, and having bricked two RK3399's (donations incoming if I don't manage to repair them), I am now contemplating the purchase of a HiFive Unmatched Rev B. But I don't know if it would be properly supported by openbsd that only indicates support for the first revision ? https://www.openbsd.org/riscv64.html More broadly, were I to purchase another Firefly (they're available on a website called elecbee), I would need to know if the PCIe to SATA module is supported ? : https://wiki.t-firefly.com/en/Firefly-RK3399/module_serial.html#pcie-m-2-b-key-to-sata3-0-adapter-board And the same question for the HiFive PCIe expansion capabilities. https://www.sifive.com/boards/hifive-unmatched-revb All in all, is openbsd known to be compatible with / able to use either of these SoC with a hard drive extension ? -- Sylvain Saboua looking for a PDP-11
