Re: disk encryption for remote server

2024-05-27 Thread Ampie Niemand
On Sun, May 26, 2024 at 08:33:59PM +0100, 04-psyche.tot...@icloud.com wrote: Hi everyone, Is there any way to use disk encryption without having physical access to the device? You could use a USB keydisk (make sure you, and your assistant on the remote server, have copious backup(s) of this!

Re: disk encryption for remote server

2024-05-27 Thread Manuel Giraud
Stefan Kreutz writes: > Can you access the machine's serial console, maybe redirected over IP? I concur that a remote serial console access (maybe via a web interface serviced by your provider) is your best option here. I used to do (almost) FDE without console access but here is list of drawba

ifconfig autoconf stopped working - how to debug?

2024-05-27 Thread Chris Narkiewicz
I have a netcup VPS and it crashed recently. After service restoration and fsck, the system cannot obtain IPv4 using autoconf. I'm wondering how I can debug DHCP autoconfiguration. dhclient -v -d doesn't show anything, as the functionality has been mmoved to ifconfig. ifconfig vio0 debug doesn't

Re: ifconfig autoconf stopped working - how to debug?

2024-05-27 Thread Zé Loff
On Mon, May 27, 2024 at 01:51:25PM +0100, Chris Narkiewicz wrote: > I have a netcup VPS and it crashed recently. After service restoration > and fsck, the system cannot obtain IPv4 using autoconf. > > I'm wondering how I can debug DHCP autoconfiguration. dhclient -v -d > doesn't show anything, as

Re: ifconfig autoconf stopped working - how to debug?

2024-05-27 Thread Souji Thenria
On Mon May 27, 2024 at 1:51 PM BST, Chris Narkiewicz wrote: I have a netcup VPS and it crashed recently. After service restoration and fsck, the system cannot obtain IPv4 using autoconf. I'm wondering how I can debug DHCP autoconfiguration. dhclient -v -d doesn't show anything, as the functiona

Re: ifconfig autoconf stopped working - how to debug?

2024-05-27 Thread deich...@placebonol.com
Besides the other comments I'd use tcpdump to see if there was any response from the DHCP server. In addition configuring the interface using the IP address assigned by DHCP is a really bad idea. Someday that address could get assigned to a different system, this will most occur when you least

httpd & pixelfed

2024-05-27 Thread Am Jam
Hi Everyone, I am trying to install and run pixelfed (think of it as a self-hosted instagram alternative) on OpenBSD 7.5, but I am having a problem with my /etc/httpd.conf. Unfortunately, pixelfed's installation instructions only provide an nginx example. For those of you familiar with nextcloud,

Re: ifconfig autoconf stopped working - how to debug?

2024-05-27 Thread Chris Narkiewicz
On Mon, May 27, 2024 at 03:06:04PM +0100, Zé Loff wrote: > On Mon, May 27, 2024 at 01:51:25PM +0100, Chris Narkiewicz wrote: > dhcpleased now handles this. You can run it with -d and with one or > more "-v"s. You can also use dhcpleasectl to request a new lease. I run dhcpleased -d -vvv and here

[7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-27 Thread Radek
Hello, I have two redundant firewalls with CARP: [krz75-MAS]<->[krz75-SLA]. I'm trying to set up redundant IPSEC VPN on it. - CARP + pfsync is working as expected - ca 1-2 pings lost at switchover. - sasyncd seems to work as expected - flows and SADs are replicated between nodes - isakmpd is ru

Re: httpd & pixelfed

2024-05-27 Thread Rubén Llorente
Wild guess: When a request is made against a picture in /storage/, it triggers the location not found * rule. The rewritten request does never hit the location "/storage/*" rule because it now requests /index.php$something instead of any object within /storage. Try placing a matching /stor

Re: disk encryption for remote server

2024-05-27 Thread 04-psyche . totter
Thanks all for your thoughts. Regarding the remote serial console access, unfortunately, it is not possible in my case. I do not have IPMI or something similar :( On Mon, 27 May 2024 at 08:17, Manuel Giraud < manuel_at_ledu-giraud_fr_rmp93abv53d47h_m6783...@icloud.com> wrote: > Stefan Kreutz wr

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-27 Thread Vitaliy Makkoveev
npppd does not support replication > On 27 May 2024, at 19:58, Radek wrote: > > Hello, > I have two redundant firewalls with CARP: [krz75-MAS]<->[krz75-SLA]. I'm > trying to set up redundant IPSEC VPN on it. > > - CARP + pfsync is working as expected - ca 1-2 pings lost at switchover. > - sasy

Re: 7.5 install crashes on "entry point at 0x1001000" HP Elitebook 840 G10

2024-05-27 Thread Comète
Hi Aaron, thanks for the idea. Booting the regular kernel as suggested, has the same result: it freezes on "entry point at 0x1001000" too. Thanks a lot. Comete 27 mai 2024 04:48 "Aaron Mason" a écrit: > Hi > > Can you try booting the regular kernel? You should be able to do it this way: >

Re: ifconfig autoconf stopped working - how to debug?

2024-05-27 Thread deich...@placebonol.com
What did the packet capture look like during the DHCP request/response? On May 27, 2024 10:56:19 AM MDT, Chris Narkiewicz wrote: >On Mon, May 27, 2024 at 03:06:04PM +0100, Zé Loff wrote: >> On Mon, May 27, 2024 at 01:51:25PM +0100, Chris Narkiewicz wrote: >> dhcpleased now handles this. You can

Re: disk encryption for remote server

2024-05-27 Thread Abel Abraham Camarillo Ojeda
I keep a /crypt noauto partition that I mount manually by passphrase via ssh after the server is booted. And don't keep 'sensitive' info in other partitions... On Mon, May 27, 2024 at 11:57 AM <04-psyche.tot...@icloud.com> wrote: > Thanks all for your thoughts. > > Regarding the remote serial co

Re: httpd & pixelfed

2024-05-27 Thread Stuart Henderson
On 2024-05-27, Am Jam wrote: > > Most of what makes pixelfed work is located in /var/www/pixelfed/public, > and hence pixelfed requires that the root directory be > /var/www/pixelfed/public. > So in /etc/httpd.conf I have the following lines: > - root "/pixelfed/public" > - directory index "in